Function at 0x43823a
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x134
mov esi, ecx
mov eax, dword [0x7c3824]
xor eax, esp
mov dword [esp + 0x130], eax
call fcn.004381fc
push 0x2000
call fcn.005db443
add esp, 4
mov dword [esi], eax
xor ecx, ecx
mov byte [eax + ecx], 0
inc ecx
cmp ecx, 0x2000
jne 0x43826a
xorpd xmm0, xmm0
movsd xmm3, qword [0x614690]
movsd xmm4, qword [0x614698]
movsd xmm5, qword [0x6146a0]
movsd xmm6, qword [0x6146a8]
xorpd xmm2, xmm2
movapd xmm7, xmm2
mulsd xmm7, qword [0x614680]
mulsd xmm7, xmm2
movapd xmm1, xmm2
mulsd xmm1, xmm2
subsd xmm7, xmm1
movapd xmm1, xmm2
mulsd xmm1, qword [0x614688]
mulsd xmm1, xmm2
addsd xmm1, xmm3
divsd xmm7, xmm1
addsd xmm7, xmm0
movapd xmm1, xmm2
mulsd xmm1, xmm4
addsd xmm1, xmm7
movapd xmm0, xmm5
cmpltsd xmm0, xmm7
andpd xmm1, xmm0
andnpd xmm0, xmm7
movsd xmm7, qword [0x612408]
orpd xmm0, xmm1
addsd xmm2, xmm7
ucomisd xmm6, xmm2
ja 0x43829f
xorpd xmm1, xmm1
ucomisd xmm1, xmm0
mov dword [esp + 0x14], esi
jbe 0x43833d
sub dword [eax + ebp*2], esi
push eax
imul esi, dword [bp + di], 0x52756b3a
dec ecx
pop ebp
pop eax
outsb dx, byte ds:[esi]
daa
xor ebp, dword [eax*2 - 0x5660dd8b]
cdq
stosd dword es:[edi], eax
lahf
test eax, 0xa59fa991
jmp 0x43879a
lea eax, [0x43832e]
mov dword [esp + 0x10], eax
movdqa xmm1, xmmword [0x612110]
xor eax, eax
movdqa xmm2, xmmword [0x612120]
movdqu xmmword [esp + eax + 0x26], xmm1
add eax, 0x10
paddb xmm1, xmm2
cmp eax, 0x100
jne 0x438359
movsd xmm1, qword [0x612130]
movapd xmm2, xmm0
subsd xmm2, xmm1
cvttsd2si eax, xmm2
lea ecx, [0x438318]
mov dword [esp + 4], ecx
xor eax, 0x80000000
cvttsd2si ecx, xmm0
ucomisd xmm0, xmm1
cmovae ecx, eax
mov eax, ecx
shr eax, 0x18
mov dword [esp + 0xc], eax
mov dword [esp], ecx
shr ecx, 0x10
mov dword [esp + 8], ecx
mov esi, 0xff
xor ecx, ecx
xor ebx, ebx
xor edx, edx
inc edx
cmp esi, 2
jb 0x4383c9
xor edx, edx
inc edx
add edx, edx
inc edx
cmp edx, esi
jb 0x4383c2
mov edi, 0xc
cmp ecx, 3
ja case.default.0x4383d3
jmp dword [ecx*4 + 0x6146b0]
movzx eax, bl
add eax, esp
add eax, 0x26
mov ebx, dword [esp]
jmp 0x438422
movzx eax, bl
mov bl, byte [esp + eax + 0x26]
mov eax, dword [esp + 4]
add eax, ecx
add eax, 0xfffffffc
jmp 0x438422
movzx eax, bl
add eax, esp
add eax, 0x26
mov ebx, dword [esp]
mov bl, bh
jmp 0x438422
movzx eax, bl
add eax, esp
add eax, 0x26
mov ebx, dword [esp + 8]
jmp 0x438422
movzx eax, bl
add eax, esp
add eax, 0x26
mov ebx, dword [esp + 0xc]
add bl, byte [eax]
inc ecx
movzx eax, bl
add bl, 0x1a
cmp ecx, 0x19
movzx ebx, bl
cmovbe ebx, eax
mov eax, 0
cmova ecx, eax
movzx ebp, bl
mov eax, edx
and eax, ebp
dec edi
je 0x43844c
cmp eax, esi
ja 0x4383ce
jmp 0x438452
xor edx, edx
div esi
mov eax, edx
cmp esi, eax
je 0x43846e
mov dl, byte [esp + esi + 0x26]
xor dl, byte [esp + eax + 0x26]
mov byte [esp + esi + 0x26], dl
xor dl, byte [esp + eax + 0x26]
mov byte [esp + eax + 0x26], dl
xor byte [esp + esi + 0x26], dl
dec esi
jne 0x4383b7
movzx edx, byte [esp + 0x27]
mov dword [esp + 0xc], edx
mov al, byte [esp + 0x2b]
mov byte [esp], al
movzx edi, byte [esp + 0x2d]
movzx ebp, byte [esp + ebp + 0x26]
mov eax, dword [esp + 0x10]
mov cl, byte [eax]
mov ch, byte [eax + 1]
mov al, byte [esp + edx + 0x26]
add al, byte [esp + 0x29]
mov byte [esp + 4], al
movzx esi, al
mov al, byte [esp + esi + 0x26]
movzx ebx, byte [esp + ebp + 0x26]
mov byte [esp + ebp + 0x26], al
mov al, byte [esp + edi + 0x26]
mov byte [esp + esi + 0x26], al
mov eax, edx
inc al
movzx edx, al
mov al, byte [esp + edx + 0x26]
mov byte [esp + edi + 0x26], al
mov byte [esp + edx + 0x26], bl
add ch, 0x5c
shl cl, 4
or cl, ch
movzx eax, byte [esp + esi + 0x26]
add eax, ebx
mov edx, 0xff
and eax, edx
movzx esi, cl
xor cl, byte [esp + eax + 0x26]
movzx eax, byte [esp + edi + 0x26]
movzx ebp, byte [esp + ebp + 0x26]
add ebp, eax
mov al, byte [esp]
add al, byte [esp + ebx + 0x26]
mov byte [esp], al
movzx eax, al
movzx eax, byte [esp + eax + 0x26]
add eax, ebp
and eax, edx
movzx eax, byte [esp + eax + 0x26]
xor cl, byte [esp + eax + 0x26]
mov edi, dword [esp + 0x10]
mov ch, byte [edi + 2]
mov al, byte [esp + 4]
add al, bl
mov byte [esp + 4], al
mov dl, byte [edi + 3]
mov byte [esp + 8], dl
movzx ebp, al
mov ah, byte [esp + ebp + 0x26]
movzx ebx, byte [esp + esi + 0x26]
mov byte [esp + esi + 0x26], ah
movzx edx, cl
mov cl, byte [esp + edx + 0x26]
mov byte [esp + ebp + 0x26], cl
mov eax, dword [esp + 0xc]
mov cl, al
add cl, 2
movzx eax, cl
mov cl, byte [esp + eax + 0x26]
mov byte [esp + edx + 0x26], cl
mov byte [esp + eax + 0x26], bl
movzx eax, byte [esp + edx + 0x26]
movzx edx, byte [esp + esi + 0x26]
add edx, eax
mov al, byte [esp]
add al, byte [esp + ebx + 0x26]
mov byte [esp], al
movzx eax, al
movzx eax, byte [esp + eax + 0x26]
add eax, edx
mov cl, byte [esp + 8]
add cl, 0x5c
shl ch, 4
or ch, cl
movzx edx, byte [esp + ebp + 0x26]
add edx, ebx
mov esi, 0xff
and edx, esi
mov dl, byte [esp + edx + 0x26]
xor dl, ch
and eax, esi
movzx eax, byte [esp + eax + 0x26]
xor dl, byte [esp + eax + 0x26]
movsx eax, dl
mov word [esp + 0x126], ax
mov cl, byte [edi + 4]
mov al, byte [edi + 5]
mov byte [esp + 8], al
mov al, byte [esp + 4]
add al, bl
mov byte [esp + 4], al
movzx esi, ch
movzx ebp, al
mov ah, byte [esp + ebp + 0x26]
movzx ebx, byte [esp + esi + 0x26]
mov byte [esp + esi + 0x26], ah
movzx edx, dl
mov ah, byte [esp + edx + 0x26]
mov byte [esp + ebp + 0x26], ah
mov eax, dword [esp + 0xc]
mov ah, al
add ah, 3
movzx eax, ah
mov ch, byte [esp + eax + 0x26]
mov byte [esp + edx + 0x26], ch
mov byte [esp + eax + 0x26], bl
mov ch, byte [esp]
add ch, byte [esp + ebx + 0x26]
mov byte [esp], ch
movzx eax, byte [esp + edx + 0x26]
movzx edx, byte [esp + esi + 0x26]
add edx, eax
movzx eax, ch
movzx eax, byte [esp + eax + 0x26]
add eax, edx
mov dl, byte [esp + 8]
add dl, 0x5c
shl cl, 4
or cl, dl
movzx edx, byte [esp + ebp + 0x26]
add edx, ebx
mov esi, 0xff
and edx, esi
mov dl, byte [esp + edx + 0x26]
xor dl, cl
and eax, esi
movzx eax, byte [esp + eax + 0x26]
xor dl, byte [esp + eax + 0x26]
movsx eax, dl
mov word [esp + 0x128], ax
mov al, byte [edi + 6]
mov byte [esp + 8], al
mov ch, byte [edi + 7]
mov al, byte [esp + 4]
add al, bl
mov byte [esp + 4], al
movzx esi, cl
movzx ebp, al
mov cl, byte [esp + ebp + 0x26]
movzx ebx, byte [esp + esi + 0x26]
mov byte [esp + esi + 0x26], cl
movzx edx, dl
mov cl, byte [esp + edx + 0x26]
mov byte [esp + ebp + 0x26], cl
mov eax, dword [esp + 0xc]
mov cl, al
add cl, 4
movzx eax, cl
mov cl, byte [esp + eax + 0x26]
mov byte [esp + edx + 0x26], cl
mov byte [esp + eax + 0x26], bl
movzx eax, byte [esp + edx + 0x26]
movzx edx, byte [esp + esi + 0x26]
add edx, eax
mov al, byte [esp]
add al, byte [esp + ebx + 0x26]
mov byte [esp], al
movzx eax, al
movzx eax, byte [esp + eax + 0x26]
add eax, edx
mov cl, byte [esp + 8]
shl cl, 4
add ch, 0x5c
or ch, cl
movzx edx, byte [esp + ebp + 0x26]
add edx, ebx
mov esi, 0xff
and edx, esi
mov dl, byte [esp + edx + 0x26]
xor dl, ch
and eax, esi
movzx eax, byte [esp + eax + 0x26]
xor dl, byte [esp + eax + 0x26]
movsx eax, dl
mov word [esp + 0x12a], ax
mov cl, byte [edi + 8]
movzx ebp, ch
mov al, byte [edi + 9]
mov byte [esp + 8], al
mov al, byte [esp + 4]
add al, bl
movzx ebx, byte [esp + ebp + 0x26]
movzx esi, al
mov dh, byte [esp + esi + 0x26]
mov byte [esp + ebp + 0x26], dh
movzx edx, dl
mov al, byte [esp + edx + 0x26]
mov byte [esp + esi + 0x26], al
mov eax, dword [esp + 0xc]
add al, 5
movzx eax, al
mov ch, byte [esp + eax + 0x26]
mov byte [esp + edx + 0x26], ch
mov byte [esp + eax + 0x26], bl
movzx eax, byte [esp + esi + 0x26]
add eax, ebx
mov ch, byte [esp]
add ch, byte [esp + ebx + 0x26]
mov bl, byte [esp + 8]
add bl, 0x5c
shl cl, 4
or cl, bl
movzx esi, ch
mov edi, 0xff
and eax, edi
xor cl, byte [esp + eax + 0x26]
movzx eax, byte [esp + edx + 0x26]
movzx edx, byte [esp + ebp + 0x26]
add edx, eax
movzx eax, byte [esp + esi + 0x26]
add eax, edx
and eax, edi
movzx eax, byte [esp + eax + 0x26]
xor cl, byte [esp + eax + 0x26]
movsx eax, cl
mov word [esp + 0x12c], ax
mov word [esp + 0x12e], 0
mov esi, dword [esp + 0x14]
lea eax, [esp + 0x126]
push eax
push dword [esi]
call fcn.005ffb20
add esp, 8
xorpd xmm3, xmm3
movsd xmm5, qword [0x612880]
movsd xmm6, qword [0x612888]
movsd xmm7, qword [0x612890]
xorpd xmm0, xmm0
movsd xmm4, qword [0x612408]
movapd xmm1, xmm3
mulsd xmm1, qword [0x612870]
mulsd xmm1, xmm3
movapd xmm2, xmm3
mulsd xmm2, xmm3
subsd xmm1, xmm2
movapd xmm2, xmm3
mulsd xmm2, qword [0x612798]
mulsd xmm2, xmm3
addsd xmm2, qword [0x612878]
divsd xmm1, xmm2
addsd xmm1, xmm0
movapd xmm2, xmm3
mulsd xmm2, xmm5
addsd xmm2, xmm1
movapd xmm0, xmm6
cmpltsd xmm0, xmm1
andpd xmm2, xmm0
andnpd xmm0, xmm1
orpd xmm0, xmm2
addsd xmm3, xmm4
ucomisd xmm7, xmm3
ja 0x4387d4
xorpd xmm1, xmm1
ucomisd xmm1, xmm0
jbe 0x438873
dec esp
inc esp
jne 0x43889b
and ebp, dword [ebx + 0x3b]
pop ecx
push ebp
xor bh, byte [esi + 0x4a]
popal
pop eax
outsd dx, dword [esi]
ja 0x4388c9
inc edi
xor eax, 0x4d263854
jnp 0x438887
cmp al, 0x67
insd dword es:[edi], dx
jbe 0x4388ac
inc edi
test byte [edx - 0x7d], dl
push edx
nop
push esp
lea edx, [ecx - 0x7c]
pop ecx
jmp 0x438cdc
lea eax, [0x438864]
mov dword [esp + 0x10], eax
movdqa xmm1, xmmword [0x612110]
xor eax, eax
movdqa xmm2, xmmword [0x612120]
movdqu xmmword [esp + eax + 0x26], xmm1
add eax, 0x10
paddb xmm1, xmm2
cmp eax, 0x100
jne 0x43888f
retf 0x3d
movsd xmm1, qword [0x612130]
movapd xmm2, xmm0
movaps xmm2, xmm0
subsd xmm2, xmm1
cvttsd2si eax, xmm2
lea ecx, [0x438845]
mov dword [esp + 4], ecx
xor eax, 0x80000000
cvttsd2si ecx, xmm0
ucomisd xmm0, xmm1
cmovae ecx, eax
mov eax, ecx
shr eax, 0x18
mov dword [esp + 0xc], eax
mov dword [esp], ecx
enter 0xf66, 0x2e
ror dword [edi], 0x43
enter 0xffffffffffffc889, 0xffffffffffffffc1
call 0x248811f1
or al, 0x89
or al, 0x24
shr ecx, 0x10
mov dword [esp + 8], ecx
mov esi, 0xff
xor ecx, ecx
xor ebx, ebx
xor edx, edx
inc edx
cmp esi, 2
jb 0x4388ff
xor edx, edx
inc edx
add edx, edx
inc edx
cmp edx, esi
jb 0x4388f8
mov edi, 0xc
cmp ecx, 3
ja case.default.0x438909
jmp dword [ecx*4 + 0x6146c0]
movzx eax, bl
add eax, esp
add eax, 0x26
mov ebx, dword [esp]
jmp 0x438958
movzx eax, bl
mov bl, byte [esp + eax + 0x26]
mov eax, dword [esp + 4]
add eax, ecx
add eax, 0xfffffffc
jmp 0x438958
movzx eax, bl
add eax, esp
add eax, 0x26
mov ebx, dword [esp]
mov bl, bh
jmp 0x438958
movzx eax, bl
add eax, esp
add eax, 0x26
mov ebx, dword [esp + 8]
jmp 0x438958
movzx eax, bl
add eax, esp
add eax, 0x26
mov ebx, dword [esp + 0xc]
add bl, byte [eax]
inc ecx
movzx eax, bl
add bl, 0x23
cmp ecx, 0x22
movzx ebx, bl
cmovbe ebx, eax
mov eax, 0
cmova ecx, eax
movzx ebp, bl
mov eax, edx
and eax, ebp
dec edi
je 0x438982
cmp eax, esi
ja 0x438904
jmp 0x438988
xor edx, edx
div esi
mov eax, edx
cmp esi, eax
je 0x4389a4
mov dl, byte [esp + esi + 0x26]
xor dl, byte [esp + eax + 0x26]
mov byte [esp + esi + 0x26], dl
xor dl, byte [esp + eax + 0x26]
mov byte [esp + eax + 0x26], dl
xor byte [esp + esi + 0x26], dl
dec esi
jne 0x4388ed
movzx eax, byte [esp + 0x27]
mov dword [esp + 0xc], eax
mov cl, byte [esp + 0x2b]
mov byte [esp], cl
movzx esi, byte [esp + 0x2d]
movzx ebp, byte [esp + ebp + 0x26]
mov edi, dword [esp + 0x10]
mov ch, byte [edi]
mov dl, byte [esp + eax + 0x26]
add dl, byte [esp + 0x29]
mov byte [esp + 4], dl
mov cl, byte [edi + 1]
movzx edi, dl
mov bl, byte [esp + edi + 0x26]
movzx edx, byte [esp + ebp + 0x26]
mov byte [esp + ebp + 0x26], bl
mov bl, byte [esp + esi + 0x26]
mov byte [esp + edi + 0x26], bl
mov ebx, eax
inc bl
movzx ebx, bl
mov al, byte [esp + ebx + 0x26]
mov byte [esp + esi + 0x26], al
mov byte [esp + ebx + 0x26], dl
add cl, 0xb5
shl ch, 4
add ch, 0xe0
or ch, cl
movzx eax, byte [esp + edi + 0x26]
add eax, edx
mov ebx, edx
mov edi, 0xff
and eax, edi
mov edx, 0xff
movzx edi, ch
xor ch, byte [esp + eax + 0x26]
movzx eax, byte [esp + esi + 0x26]
movzx esi, byte [esp + ebp + 0x26]
add esi, eax
mov al, byte [esp]
add al, byte [esp + ebx + 0x26]
mov byte [esp], al
movzx eax, al
movzx eax, byte [esp + eax + 0x26]
add eax, esi
and eax, edx
movzx eax, byte [esp + eax + 0x26]
xor ch, byte [esp + eax + 0x26]
mov eax, dword [esp + 0x10]
mov cl, byte [eax + 2]
mov dh, byte [esp + 4]
add dh, bl
mov dl, byte [eax + 3]
movzx esi, dh
mov al, byte [esp + esi + 0x26]
mov ebx, edi
mov dword [esp + 8], edi
movzx edi, byte [esp + edi + 0x26]
mov byte [esp + ebx + 0x26], al
movzx eax, ch
mov ch, byte [esp + eax + 0x26]
mov byte [esp + esi + 0x26], ch
mov ebx, dword [esp + 0xc]
mov ch, bl
add ch, 2
movzx ebp, ch
mov ch, byte [esp + ebp + 0x26]
mov byte [esp + eax + 0x26], ch
mov ebx, edi
mov byte [esp + ebp + 0x26], bl
add dl, 0xb5
shl cl, 4
add cl, 0xe0
or cl, dl
movzx ebp, byte [esp + esi + 0x26]
add ebp, edi
mov esi, 0xff
and ebp, esi
movzx esi, cl
xor cl, byte [esp + ebp + 0x26]
mov dl, byte [esp]
add dl, byte [esp + edi + 0x26]
mov byte [esp], dl
movzx eax, byte [esp + eax + 0x26]
mov edi, dword [esp + 8]
movzx edi, byte [esp + edi + 0x26]
add edi, eax
movzx eax, dl
movzx eax, byte [esp + eax + 0x26]
add eax, edi
mov edi, 0xff
and eax, edi
movzx eax, byte [esp + eax + 0x26]
xor cl, byte [esp + eax + 0x26]
movsx eax, cl
mov word [esp + 0x1c], ax
mov eax, dword [esp + 0x10]
mov ch, byte [eax + 4]
add dh, bl
mov byte [esp + 4], dh
mov dl, byte [eax + 5]
movzx edi, dh
mov bl, byte [esp + edi + 0x26]
mov eax, esi
mov dword [esp + 0x18], esi
movzx esi, byte [esp + esi + 0x26]
mov byte [esp + eax + 0x26], bl
movzx ebx, cl
mov cl, byte [esp + ebx + 0x26]
mov byte [esp + edi + 0x26], cl
mov eax, dword [esp + 0xc]
mov cl, al
add cl, 3
movzx ebp, cl
mov cl, byte [esp + ebp + 0x26]
mov byte [esp + ebx + 0x26], cl
mov eax, esi
mov byte [esp + ebp + 0x26], al
add dl, 0xb5
shl ch, 4
add ch, 0xe0
or ch, dl
movzx edi, byte [esp + edi + 0x26]
add edi, esi
mov edx, 0xff
and edi, edx
movzx ebp, ch
xor ch, byte [esp + edi + 0x26]
movzx edi, byte [esp + ebx + 0x26]
mov esi, dword [esp + 0x18]
movzx esi, byte [esp + esi + 0x26]
add esi, edi
mov cl, byte [esp]
add cl, byte [esp + eax + 0x26]
mov byte [esp], cl
movzx edi, cl
movzx edi, byte [esp + edi + 0x26]
add edi, esi
and edi, edx
movzx esi, byte [esp + edi + 0x26]
xor ch, byte [esp + esi + 0x26]
movsx esi, ch
mov word [esp + 0x1e], si
mov esi, dword [esp + 0x10]
mov cl, byte [esi + 6]
mov dl, byte [esp + 4]
add dl, al
mov byte [esp + 4], dl
mov al, byte [esi + 7]
movzx esi, dl
mov dl, byte [esp + esi + 0x26]
movzx ebx, byte [esp + ebp + 0x26]
mov byte [esp + ebp + 0x26], dl
movzx edi, ch
mov dl, byte [esp + edi + 0x26]
mov byte [esp + esi + 0x26], dl
mov edx, dword [esp + 0xc]
add dl, 4
movzx edx, dl
mov ah, byte [esp + edx + 0x26]
mov byte [esp + edi + 0x26], ah
mov byte [esp + edx + 0x26], bl
add al, 0xb5
shl cl, 4
add cl, 0xe0
or cl, al
movzx eax, byte [esp + esi + 0x26]
add eax, ebx
mov edx, 0xff
and eax, edx
movzx esi, cl
mov dword [esp + 8], esi
xor cl, byte [esp + eax + 0x26]
movzx eax, byte [esp + edi + 0x26]
movzx edx, byte [esp + ebp + 0x26]
add edx, eax
mov al, byte [esp]
add al, byte [esp + ebx + 0x26]
mov byte [esp], al
movzx eax, al
movzx eax, byte [esp + eax + 0x26]
add eax, edx
mov edx, 0xff
and eax, edx
movzx eax, byte [esp + eax + 0x26]
xor cl, byte [esp + eax + 0x26]
movsx eax, cl
mov word [esp + 0x20], ax
mov edx, dword [esp + 0x10]
mov al, byte [edx + 8]
mov dl, byte [edx + 9]
mov ah, byte [esp + 4]
add ah, bl
movzx ebx, byte [esp + esi + 0x26]
movzx edi, ah
mov ah, byte [esp + edi + 0x26]
mov byte [esp + esi + 0x26], ah
movzx esi, cl
mov ah, byte [esp + esi + 0x26]
mov byte [esp + edi + 0x26], ah
mov ecx, dword [esp + 0xc]
add cl, 5
movzx ebp, cl
mov ah, byte [esp + ebp + 0x26]
mov byte [esp + esi + 0x26], ah
mov byte [esp + ebp + 0x26], bl
movzx edi, byte [esp + edi + 0x26]
add edi, ebx
mov cl, byte [esp]
add cl, byte [esp + ebx + 0x26]
shl al, 4
add al, 0xe0
add dl, 0xb5
or dl, al
movzx eax, cl
mov ebx, 0xff
and edi, ebx
xor dl, byte [esp + edi + 0x26]
movzx ecx, byte [esp + esi + 0x26]
mov esi, dword [esp + 8]
movzx esi, byte [esp + esi + 0x26]
add esi, ecx
movzx eax, byte [esp + eax + 0x26]
add eax, esi
and eax, ebx
movzx eax, byte [esp + eax + 0x26]
xor dl, byte [esp + eax + 0x26]
movsx eax, dl
mov word [esp + 0x22], ax
mov word [esp + 0x24], 0
mov esi, dword [esp + 0x14]
push 0x67ff96
push dword [esi]
call fcn.005ffb20
add esp, 8
lea eax, [esp + 0x1c]
push eax
push dword [esi]
call fcn.005ffb20
add esp, 8
mov esi, dword [esi]
mov ecx, dword [esp + 0x130]
xor ecx, esp
call fcn.005db451
mov eax, esi
add esp, 0x134
pop esi
pop edi
pop ebx
pop ebp
ret 4