Function at 0x406390
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x38
mov eax, dword [0x44e834]
lea ebx, [ebp - 0x1f]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x34], ebx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov dword [eax + 0xb], 0x2554ff05
mov dword [eax + 8], 0x5390158
mov dword [eax + 4], 0x57254712
mov dword [eax], 0xff574511
lea eax, [ebp - 0x38]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x44f4e8], eax
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push 0x9385646d
push dword [0x44f4e8]
call fcn.00405ff0
add esp, 8
mov dword [ebp - 0x3c], eax
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x406414
call edx
xor eax, eax
push 0x27
push section..data
push 0x547
push 0x44e027
call section..text
add esp, 0x10
push 0xf
push ebx
push dword [ebp + 0xc]
push dword [ebp + 8]
call section..text
add esp, 0x10
push 0
push 1
push str._d__d
call fcn.00404280
add esp, 0xc
mov ecx, 0x4502b0
push 0
call fcn.00406970
mov esi, eax
mov eax, dword [eax]
mov ecx, dword [eax + 4]
add ecx, esi
push 0xa
call fcn.0041cd60
movsx eax, al
mov ecx, esi
push eax
call fcn.0041bfa0
mov ecx, esi
call fcn.0040acb0
mov eax, 0x11823716
cmp eax, 0x67fa6a1
jg 0x4065ab
jmp 0x4066e0
mov ecx, dword [0x44f530]
lea eax, [ecx - 1]
imul eax, ecx
mov ecx, eax
not ecx
and eax, ecx
mov edx, ecx
and edx, eax
xor eax, ecx
or eax, edx
mov ecx, eax
mov edx, eax
xor ecx, 1
not edx
and ecx, eax
and edx, 0xfffffffe
and eax, 1
or eax, edx
mov edx, ecx
and edx, eax
xor eax, ecx
or eax, edx
mov ecx, eax
mov esi, eax
not ecx
and esi, 0xf4147c08
mov edx, ecx
and ecx, 0xbeb83f7
and edx, eax
or ecx, esi
mov esi, edx
and edx, 0xbeb83f7
not esi
or eax, esi
and esi, 0xf4147c08
or edx, esi
not eax
mov esi, 0xa4d9050b
xor edx, ecx
or eax, edx
mov ecx, eax
and eax, 0xdb35f6f3
not ecx
mov edx, ecx
and edx, 0x24ca090c
or eax, edx
mov edx, dword [0x44f534]
xor eax, 0x24ca090c
xor ecx, eax
test ecx, eax
setne ch
sete ah
cmp edx, 0xa
setl bl
cmp edx, 9
mov cl, ch
setg al
xor cl, al
mov edx, ecx
and cl, al
and al, ah
and dl, ch
and ch, bl
or bl, ah
mov dh, dl
xor dl, cl
xor cl, 1
xor bl, 1
or al, ch
xor dh, 1
or cl, dh
xor cl, 1
or cl, dl
mov edx, ebx
and dl, al
xor al, bl
mov ch, cl
or al, dl
mov edx, eax
xor ch, al
and al, cl
and ch, cl
xor dl, 1
xor cl, 1
and cl, dl
mov bl, ch
mov edx, 0x9e247840
or al, cl
xor bl, al
test al, 1
mov eax, 0xa4d9050b
cmovne eax, edx
test ch, 1
cmove eax, esi
test bl, 1
cmovne eax, edx
nop word cs:[eax + eax]
nop
cmp eax, 0x67fa6a1
jle 0x4066e0
cmp eax, 0x11823715
jle 0x406660
cmp eax, 0x1eef58c1
je 0x40687c
cmp eax, 0x18159adb
je 0x4068ae
cmp eax, 0x11823716
jne 0x4065a0
mov ecx, 0x9b0d364f
mov dword [ebp - 0x24], 1
nop
cmp ecx, 0x47186422
jg 0x406620
cmp ecx, 0x9b0d364f
je 0x4065fd
cmp ecx, 0x4521ebb4
jne 0x4065e0
jmp 0x4068de
cmp dword [ebp - 0x24], 0
mov ecx, 0x7bdbe38f
mov edx, 0x47186423
cmove ecx, edx
cmp ecx, 0x47186422
jle 0x4065e8
nop word cs:[eax + eax]
cmp ecx, 0x47186423
je 0x406641
cmp ecx, 0x7bdbe38f
jne 0x4065e0
mov ecx, 0x4521ebb4
xor eax, eax
cmp ecx, 0x47186422
jle 0x4065e8
jmp 0x406620
mov ecx, 0x4521ebb4
mov al, 1
cmp ecx, 0x47186422
jle 0x4065e8
jmp 0x406620
cmp eax, 0x67fa6a2
je 0x406904
cmp eax, 0xc3aa561
jne 0x4065a0
mov eax, dword [ebp + 8]
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFindAtomW]
mov ebx, 0x44e027
mov dword [ebp - 0x24], eax
mov esi, dword [ebp - 0x24]
push esi
mov edx, ebx
mov ecx, 0x27
xor ecx, 0x1af
add edx, ecx
mov ecx, 3
sub esp, 4
loop 0x40669f
mov dword [esp + 4], 1
xor dword [esp + 4], 0xbb8
mov dword [esp], edx
mov dword [esp + 8], 0
lea eax, [edi]
push eax
ret
cmp eax, 0xf3176343
jg 0x406710
cmp eax, 0xa4d9050b
je 0x406920
cmp eax, 0xc5a88781
je 0x406494
cmp eax, 0x9e247840
jne 0x4065a0
jmp 0x406951
cmp eax, 0xf3176344
je 0x406935
cmp eax, 0x2b00168
jne 0x4065a0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov ecx, dword [0x44f530]
lea eax, [ecx - 1]
imul eax, ecx
mov edx, eax
mov ecx, eax
not edx
and ecx, 0x620dab29
mov esi, edx
and edx, 0xbd84358
and esi, 0x9df254d6
or ecx, esi
mov esi, ecx
xor ecx, 0x9df254d6
or ecx, 1
xor esi, 0x62082a08
mov edi, ecx
and esi, 0xeac83a9a
and edi, 0x1537c564
or esi, edi
mov edi, eax
xor edi, 0xfffffffe
and edi, eax
and eax, 0xf427bca7
mov ebx, edi
and edi, 0xeac83a9b
or eax, edx
not ebx
or ecx, ebx
and ebx, 0x1537c564
or edi, ebx
not ecx
xor edi, esi
or ecx, edi
mov edi, dword [0x44f534]
mov edx, ecx
and ecx, 0xf5978e95
not edx
mov esi, edx
and esi, 0xa68716a
or ecx, esi
mov esi, eax
xor eax, 0xa484148
xor esi, 0xf4078c85
and eax, 0xa68716a
and esi, 0xf5978e95
or esi, eax
xor esi, ecx
not esi
or esi, edx
cmp esi, 0xffffffff
mov esi, 0xa4d9050b
setne ch
sete ah
cmp edi, 9
setg cl
cmp edi, 0xa
mov al, ch
setl dl
xor al, ah
xor cl, ch
and al, ch
mov ch, dl
mov dh, al
and ch, ah
xor dh, 1
and al, dh
xor al, 1
mov ebx, eax
or al, dh
xor bl, dh
xor al, 1
mov dh, dl
or al, bl
xor dh, al
xor dh, 1
and dh, al
or al, dl
xor dl, ah
or dl, ch
xor al, 1
mov bl, dh
mov ah, dl
and bl, al
xor al, dh
xor ah, cl
xor cl, 1
or al, bl
or cl, dl
xor ah, 1
xor cl, 1
or cl, ah
mov edx, ecx
xor dl, 1
mov ah, dl
and ah, cl
xor dl, ah
xor ah, 1
or ah, cl
mov ecx, eax
xor ah, 1
or ah, dl
xor cl, ah
or ah, al
xor ah, 1
or ah, cl
mov dl, ah
xor dl, cl
test ah, 1
mov eax, 0xc5a88781
cmovne eax, esi
test cl, 1
mov ecx, 0xc5a88781
cmove eax, esi
test dl, 1
jmp 0x40689b
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x38]
push ecx
push 0x40
push dword [ebp - 0x44]
push 0x44e027
call eax
test eax, eax
mov eax, 0xc3aa561
mov ecx, 0x2b00168
cmove eax, ecx
cmp eax, 0x67fa6a1
jg 0x4065ab
jmp 0x4066e0
push dword [ebp - 0x40]
push dword [0x44f4e8]
call fcn.00405ff0
add esp, 8
mov dword [ebp - 0x28], eax
mov eax, 0x67fa6a2
mov dword [ebp - 0x44], 0
cmp eax, 0x67fa6a1
jg 0x4065ab
jmp 0x4066e0
test al, 1
mov eax, 0xf3176344
mov ecx, 0x18159adb
mov dword [ebp - 0x40], 0
cmovne eax, ecx
cmp eax, 0x67fa6a1
jg 0x4065ab
jmp 0x4066e0
mov eax, 0x1eef58c1
mov dword [ebp - 0x44], 0x4e4
cmp eax, 0x67fa6a1
jg 0x4065ab
jmp 0x4066e0
mov eax, 0xc5a88781
cmp eax, 0x67fa6a1
jg 0x4065ab
jmp 0x4066e0
mov eax, 0x18159adb
mov dword [ebp - 0x40], 0x8aafdc01
cmp eax, 0x67fa6a1
jg 0x4065ab
jmp 0x4066e0
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041e74b
xor eax, eax
add esp, 0x38
pop esi
pop edi
pop ebx
pop ebp
ret