Function at 0x4064a0
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4313b8
push eax
mov dword fs:[0], esp
sub esp, 0x38
push ebx
push esi
mov esi, ecx
mov al, byte [esi + 0x4a]
test al, al
je 0x40671b
call fcn.00406ca0
test al, al
jne 0x4064f3
mov ecx, dword [esi + 0xb4]
push str.Failed_to_inflate_to_temp_for_AES_decryption
mov eax, dword [ecx]
call dword [eax + 0x10]
pop esi
xor al, al
pop ebx
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
add esp, 0x44
ret
mov al, byte [esi + 4]
test al, al
jne 0x4065a4
push edi
lea ecx, [esp + 0x18]
call fcn.00410430
mov eax, dword [esi + 0x94]
mov ecx, dword [esi + 0x90]
mov edx, dword [esi + 0x20]
lea edi, [esp + 0x18]
push edi
push eax
push ecx
mov ecx, dword [esi + 0xc]
push edx
mov edx, dword [esi + 8]
push ecx
push edx
mov dword [esp + 0x64], 0
call fcn.00410f20
add esp, 0x18
test al, al
pop edi
jne 0x406574
mov ecx, dword [esi + 0xb4]
test ecx, ecx
je 0x406550
mov eax, dword [ecx]
push str.Failed_to_AES_decrypt_data
call dword [eax + 0x10]
lea ecx, [esp + 0x14]
mov dword [esp + 0x48], 0xffffffff
call fcn.00410720
pop esi
xor al, al
pop ebx
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
add esp, 0x44
ret
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call fcn.00406440
lea ecx, [esp + 0x14]
mov dword [esp + 0x48], 0xffffffff
call fcn.00410720
pop esi
mov al, 1
pop ebx
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
add esp, 0x44
ret
mov eax, dword [esi + 0x60]
test eax, eax
je 0x406717
lea ecx, [esp + 0x28]
call fcn.0040f6e0
mov ebx, 1
lea ecx, [esp + 8]
mov dword [esp + 0x48], ebx
call fcn.0040fc40
lea edx, [esp + 0x28]
lea ecx, [esp + 8]
push edx
push str.ckFile.dat
mov byte [esp + 0x50], 2
call fcn.0040fea0
mov edx, dword [esi + 0xb4]
mov eax, dword [esi + 0x58]
mov ecx, dword [esi + 0x20]
push edx
mov edx, dword [esp + 0x34]
push edx
push eax
mov eax, dword [esi + 0xc]
push ecx
mov ecx, dword [esi + 8]
push eax
push ecx
call fcn.00410c60
add esp, 0x18
test al, al
jne 0x406698
mov ecx, dword [esi + 0xb4]
test ecx, ecx
je 0x406636
mov edx, dword [ecx]
push str.Failed_to_AES_decrypt_file
call dword [edx + 0x10]
mov ecx, dword [esi + 0xb4]
mov eax, dword [esi + 0x58]
push eax
push str.encryptedFile
mov edx, dword [ecx]
call dword [edx + 0x2c]
lea ecx, [esp + 0xc]
call fcn.0040fc40
mov eax, dword [esi + 0xb4]
mov ecx, dword [esp + 0x30]
push eax
push ecx
lea ecx, [esp + 0x14]
mov byte [esp + 0x50], 3
call fcn.0040fd30
lea ecx, [esp + 0xc]
mov byte [esp + 0x48], 2
call fcn.0040fc70
lea ecx, [esp + 8]
mov byte [esp + 0x48], bl
call fcn.0040fc70
lea ecx, [esp + 0x28]
mov dword [esp + 0x48], 0xffffffff
call fcn.0040f750
pop esi
xor al, al
pop ebx
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
add esp, 0x44
ret
mov al, byte [esi + 0x4c]
test al, al
je 0x4066cf
lea ecx, [esp + 0x10]
call fcn.0040fc40
mov edx, dword [esi + 0xb4]
mov eax, dword [esi + 0x58]
push edx
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x50], 4
call fcn.0040fd30
lea ecx, [esp + 0x10]
mov byte [esp + 0x48], 2
call fcn.0040fc70
lea eax, [esp + 0x28]
lea ecx, [esi + 0x50]
push eax
mov byte [esi + 0x4c], bl
call fcn.0040fa20
lea ecx, [esp + 8]
mov byte [esi + 0x4a], 0
mov byte [esi + 4], bl
mov byte [esp + 0x48], bl
call fcn.0040fc70
lea ecx, [esp + 0x28]
mov dword [esp + 0x48], 0xffffffff
call fcn.0040f750
mov al, bl
pop esi
pop ebx
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
add esp, 0x44
ret
mov byte [esi + 0x4a], 0
mov ecx, dword [esp + 0x40]
pop esi
mov al, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x44
ret