Function at 0x4067c0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x43ae18
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x24
push ebx
push ebp
push esi
push edi
mov esi, ecx
mov dword [esp + 0x3c], 0
call fcn.0042d132
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x18], eax
mov byte [esp + 0x3c], 1
call fcn.0042d132
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x14], eax
mov byte [esp + 0x3c], 2
call fcn.0042d132
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x10], eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x3c], 3
call fcn.0042c6c3
mov edi, dword [esp + 0x44]
push edi
lea eax, [esp + 0x14]
push str._sed1
push eax
mov byte [esp + 0x48], 4
call fcn.00402860
mov eax, dword [esp + 0x1c]
add esp, 8
mov dword [esp + 0x20], esp
mov ebx, esp
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov ebp, esp
push eax
call fcn.004018f0
add esp, 4
add eax, 0x10
push ebx
mov dword [ebp], eax
call fcn.00402f70
add esp, 8
lea ecx, [esi + 0x180]
call fcn.00414200
push edi
lea ecx, [esp + 0x14]
push str._sed2
push ecx
call fcn.00402860
mov eax, dword [esp + 0x1c]
add esp, 8
mov dword [esp + 0x20], esp
mov ebp, esp
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov ebx, esp
push eax
call fcn.004018f0
add esp, 4
add eax, 0x10
push ebp
mov dword [ebx], eax
call fcn.00402f70
add esp, 8
lea ecx, [esi + 0x1dc]
call fcn.00414200
push edi
lea edx, [esp + 0x14]
push str._sed3
push edx
call fcn.00402860
mov eax, dword [esp + 0x1c]
add esp, 8
mov dword [esp + 0x20], esp
mov ebp, esp
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov ebx, esp
push eax
call fcn.004018f0
add esp, 4
add eax, 0x10
push ebp
mov dword [ebx], eax
call fcn.00402f70
add esp, 8
lea ecx, [esi + 0x238]
call fcn.00414200
push edi
lea eax, [esp + 0x14]
push str._sed4
push eax
call fcn.00402860
mov eax, dword [esp + 0x1c]
add esp, 8
mov dword [esp + 0x20], esp
mov ebp, esp
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov ebx, esp
push eax
call fcn.004018f0
add esp, 4
add eax, 0x10
push ebp
mov dword [ebx], eax
call fcn.00402f70
add esp, 8
lea ecx, [esi + 0x294]
call fcn.00414200
push edi
lea ecx, [esp + 0x14]
push str._sed5
push ecx
call fcn.00402860
mov eax, dword [esp + 0x1c]
add esp, 8
mov dword [esp + 0x20], esp
mov ebp, esp
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov ebx, esp
push eax
call fcn.004018f0
add esp, 4
add eax, 0x10
push ebp
mov dword [ebx], eax
call fcn.00402f70
add esp, 8
lea ecx, [esi + 0x2f0]
call fcn.00414200
push edi
lea edx, [esp + 0x14]
push str._sed6
push edx
call fcn.00402860
add esp, 8
mov dword [esp + 0x20], esp
mov ebp, esp
push ecx
mov dword [esp + 0x24], esp
mov ebx, esp
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
push eax
call fcn.004018f0
add esp, 4
add eax, 0x10
push ebp
mov dword [ebx], eax
call fcn.00402f70
add esp, 8
lea ecx, [esi + 0x34c]
call fcn.00414200
push edi
lea eax, [esp + 0x14]
push str._sed7
push eax
call fcn.00402860
mov eax, dword [esp + 0x1c]
add esp, 8
mov dword [esp + 0x20], esp
mov ebp, esp
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov ebx, esp
push eax
call fcn.004018f0
add esp, 4
add eax, 0x10
push ebp
mov dword [ebx], eax
call fcn.00402f70
add esp, 8
lea ecx, [esi + 0x3a8]
call fcn.00414200
push edi
lea ecx, [esp + 0x14]
push str._sed8
push ecx
call fcn.00402860
mov eax, dword [esp + 0x1c]
add esp, 8
mov dword [esp + 0x20], esp
mov ebp, esp
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov ebx, esp
push eax
call fcn.004018f0
add esp, 4
add eax, 0x10
push ebp
mov dword [ebx], eax
call fcn.00402f70
add esp, 8
lea ecx, [esi + 0x404]
call fcn.00414200
push edi
lea edx, [esp + 0x14]
push str._sed9
push edx
call fcn.00402860
mov eax, dword [esp + 0x1c]
add esp, 8
mov dword [esp + 0x20], esp
mov ebp, esp
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov ebx, esp
push eax
call fcn.004018f0
add esp, 4
add eax, 0x10
push ebp
mov dword [ebx], eax
call fcn.00402f70
add esp, 8
lea ecx, [esi + 0x460]
call fcn.00414200
push edi
lea eax, [esp + 0x14]
push str._sed10
push eax
call fcn.00402860
mov eax, dword [esp + 0x1c]
add esp, 8
mov dword [esp + 0x20], esp
mov ebp, esp
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov ebx, esp
push eax
call fcn.004018f0
add esp, 4
add eax, 0x10
push ebp
mov dword [ebx], eax
call fcn.00402f70
add esp, 8
lea ecx, [esi + 0x4bc]
call fcn.00414200
push edi
lea ecx, [esp + 0x14]
push str._sed11
push ecx
call fcn.00402860
mov eax, dword [esp + 0x1c]
add esp, 8
mov dword [esp + 0x20], esp
mov ebp, esp
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov ebx, esp
push eax
call fcn.004018f0
add esp, 4
add eax, 0x10
push ebp
mov dword [ebx], eax
call fcn.00402f70
add esp, 8
lea ecx, [esi + 0x518]
call fcn.00414200
push edi
lea edx, [esp + 0x14]
push str._s_shzh
push edx
call fcn.00402860
add esp, 0xc
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x28]
call fcn.0042c735
mov ebp, dword [esp + 0x10]
lea eax, [esp + 0x20]
push eax
push ecx
add ebp, 0xfffffff0
mov dword [esp + 0x24], esp
mov ebx, esp
push ebp
call fcn.004018f0
add eax, 0x10
add esp, 4
mov dword [ebx], eax
call fcn.004049b0
mov eax, dword [esp + 0x30]
lea ebx, [eax - 1]
add esp, 8
test ebx, ebx
jl 0x406eaf
test eax, eax
jle 0x406f60
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx]
push 0x43e23c
push eax
call fcn.0041f0d6
add esp, 8
neg eax
sbb eax, eax
inc eax
cmp ebx, 1
mov dword [esi + 0x8a8], eax
jl 0x406eaf
cmp dword [esp + 0x28], 1
jle 0x406f60
mov edx, dword [esp + 0x24]
mov eax, dword [edx + 4]
push 0x43e23c
push eax
call fcn.0041f0d6
add esp, 8
neg eax
sbb eax, eax
inc eax
cmp ebx, 2
mov dword [esi + 0x898], eax
jl 0x406eaf
cmp dword [esp + 0x28], 2
jle 0x406f60
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 8]
push 0x43e23c
push eax
call fcn.0041f0d6
add esp, 8
neg eax
sbb eax, eax
inc eax
cmp ebx, 3
mov dword [esi + 0x89c], eax
jl 0x406eaf
cmp dword [esp + 0x28], 3
jle 0x406f60
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx + 0xc]
push 0x43e23c
push eax
call fcn.0041f0d6
add esp, 8
neg eax
sbb eax, eax
inc eax
cmp ebx, 4
mov dword [esi + 0x8a0], eax
jl 0x406eaf
cmp dword [esp + 0x28], 4
jle 0x406f60
mov edx, dword [esp + 0x24]
mov eax, dword [edx + 0x10]
push 0x43e23c
push eax
call fcn.0041f0d6
add esp, 8
neg eax
sbb eax, eax
inc eax
cmp ebx, 5
mov dword [esi + 0x8a4], eax
jl 0x406eaf
cmp dword [esp + 0x28], 5
jle 0x406f60
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 0x14]
push eax
push 0x411
mov ecx, esi
call fcn.004328fc
cmp ebx, 6
jl 0x406eaf
cmp dword [esp + 0x28], 6
jle 0x406f60
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx + 0x18]
push eax
push 0x42f
mov ecx, esi
call fcn.004328fc
cmp ebx, 7
jl 0x406eaf
cmp dword [esp + 0x28], 7
jle 0x406f60
mov edx, dword [esp + 0x24]
mov eax, dword [edx + 0x1c]
push eax
push 0x430
mov ecx, esi
call fcn.004328fc
cmp ebx, 8
jl 0x406eaf
cmp dword [esp + 0x28], 8
jle 0x406f60
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 0x20]
push eax
push 0x431
mov ecx, esi
call fcn.004328fc
cmp ebx, 9
jl 0x406eaf
cmp dword [esp + 0x28], 9
jle 0x406f60
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx + 0x24]
push eax
push 0x432
mov ecx, esi
call fcn.004328fc
cmp ebx, 0xa
jl 0x406eaf
cmp dword [esp + 0x28], 0xa
jle 0x406f60
mov edx, dword [esp + 0x24]
mov eax, dword [edx + 0x28]
push eax
push 0x433
mov ecx, esi
call fcn.004328fc
cmp ebx, 0xb
jl 0x406eaf
cmp dword [esp + 0x28], 0xb
jle 0x406f60
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 0x2c]
push eax
push 0x434
mov ecx, esi
call fcn.004328fc
cmp ebx, 0xc
jl 0x406eaf
cmp dword [esp + 0x28], 0xc
jle 0x406f60
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx + 0x30]
push eax
push 0x435
mov ecx, esi
call fcn.004328fc
cmp ebx, 0xd
jl 0x406eaf
cmp dword [esp + 0x28], 0xd
jle 0x406f60
mov edx, dword [esp + 0x24]
mov eax, dword [edx + 0x34]
push eax
push 0x436
mov ecx, esi
call fcn.004328fc
cmp ebx, 0xe
jl 0x406eaf
cmp dword [esp + 0x28], 0xe
jle 0x406f60
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 0x38]
push eax
push 0x437
mov ecx, esi
call fcn.004328fc
cmp ebx, 0xf
jl 0x406eaf
cmp dword [esp + 0x28], 0xf
jle 0x406f60
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx + 0x3c]
push eax
push 0x43b
mov ecx, esi
call fcn.004328fc
cmp ebx, 0x10
jl 0x406eaf
cmp dword [esp + 0x28], 0x10
jle 0x406f60
mov edx, dword [esp + 0x24]
mov eax, dword [edx + 0x40]
push eax
push 0x446
mov ecx, esi
call fcn.004328fc
cmp ebx, 0x11
jl 0x406eaf
cmp dword [esp + 0x28], 0x11
jle 0x406f60
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 0x44]
push eax
push 0x449
mov ecx, esi
call fcn.004328fc
push 0
mov ecx, esi
call fcn.00430134
lea ecx, [esp + 0x20]
mov byte [esp + 0x3c], 3
call fcn.0042c715
mov byte [esp + 0x3c], 2
lea ecx, [ebp + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406ee3
mov ecx, dword [ebp]
mov eax, dword [ecx]
push ebp
call dword [eax + 4]
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x3c], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406f06
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0x3c], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406f29
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
add edi, 0xfffffff0
mov dword [esp + 0x3c], 0xffffffff
lea eax, [edi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x406f4b
mov ecx, dword [edi]
mov edx, dword [ecx]
push edi
call dword [edx + 4]
mov ecx, dword [esp + 0x34]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x30
ret 4
call fcn.0042b6f3
int3