Function at 0x4060f0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using murmur3
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x144
mov eax, dword [0x430080]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x30]
mov dword [ebp - 0x130], 0x128
push ebx
push esi
mov eax, dword [eax + 0xc]
push edi
mov dword [ebp - 0x144], ecx
mov eax, dword [eax + 0xc]
mov edx, dword [eax + 0x18]
mov dword [ebp - 0x134], edx
mov ecx, dword [edx + 0x3c]
mov ecx, dword [ecx + edx + 0x78]
add ecx, edx
mov dword [ebp - 0x140], ecx
cmp ecx, edx
je 0x4061ee
mov ebx, dword [ecx + 0x18]
test ebx, ebx
je 0x4061ee
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + ebx*4]
add ecx, edx
mov edi, dword [ecx - 4]
sub ecx, 4
add edi, edx
mov dword [ebp - 0x13c], ecx
dec ebx
mov esi, 0xc3e139ec
mov cl, byte [edi]
inc edi
test cl, cl
je 0x4061e0
movsx edx, cl
lea edi, [edi + 1]
imul ecx, edx, 0xcc9e2d51
ror ecx, 0x11
imul ecx, ecx, 0x1b873593
xor ecx, esi
ror ecx, 0x13
add ecx, 0xfaddaf14
lea esi, [ecx + ecx*4]
imul ecx, edx, 0x51000000
ror ecx, 0x11
imul ecx, ecx, 0x1b873593
xor esi, ecx
xor esi, 1
mov ecx, esi
shr ecx, 0x10
xor ecx, esi
imul edx, ecx, 0x85ebca6b
mov ecx, edx
shr ecx, 0xd
xor ecx, edx
imul edx, ecx, 0xc2b2ae35
mov ecx, edx
shr ecx, 0x10
xor ecx, edx
imul esi, ecx, 0x539
mov cl, byte [edi - 1]
test cl, cl
jne 0x406170
cmp esi, 0x90a97c7
je 0x4061f5
mov edx, dword [eax + 0x18]
mov ecx, dword [ebp - 0x13c]
test ebx, ebx
jne 0x406155
mov eax, dword [eax]
jmp 0x406122
mov esi, dword [ebp - 0x140]
mov edx, dword [ebp - 0x134]
push 0
push 2
mov eax, dword [esi + 0x24]
lea eax, [eax + ebx*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov ecx, dword fs:[0x30]
mov dword [ebp - 0x13c], eax
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + 0xc]
nop
mov esi, dword [ecx + 0x18]
mov dword [ebp - 0x138], esi
mov edx, dword [esi + 0x3c]
mov eax, dword [edx + esi + 0x78]
add eax, esi
mov dword [ebp - 0x140], eax
cmp eax, esi
je 0x4062ff
mov ebx, dword [eax + 0x18]
test ebx, ebx
je 0x4062ff
mov eax, dword [eax + 0x20]
lea eax, [eax + ebx*4]
add eax, esi
mov edi, dword [eax - 4]
sub eax, 4
add edi, esi
mov dword [ebp - 0x134], eax
dec ebx
mov esi, 0x8b1dd52b
mov al, byte [edi]
inc edi
test al, al
je 0x4062ee
movsx edx, al
lea edi, [edi + 1]
imul eax, edx, 0xcc9e2d51
ror eax, 0x11
imul eax, eax, 0x1b873593
xor eax, esi
ror eax, 0x13
add eax, 0xfaddaf14
lea esi, [eax + eax*4]
imul eax, edx, 0x51000000
ror eax, 0x11
imul eax, eax, 0x1b873593
xor esi, eax
xor esi, 1
mov eax, esi
shr eax, 0x10
xor eax, esi
imul edx, eax, 0x85ebca6b
mov eax, edx
shr eax, 0xd
xor eax, edx
imul edx, eax, 0xc2b2ae35
mov eax, edx
shr eax, 0x10
xor eax, edx
imul esi, eax, 0x539
mov al, byte [edi - 1]
test al, al
jne 0x406282
cmp esi, 0x4ebf639c
je 0x406306
mov eax, dword [ebp - 0x134]
mov esi, dword [ecx + 0x18]
test ebx, ebx
jne 0x406263
mov ecx, dword [ecx]
jmp 0x406230
mov esi, dword [ebp - 0x140]
mov edx, dword [ebp - 0x138]
mov eax, dword [esi + 0x24]
lea eax, [eax + ebx*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
lea ecx, [ebp - 0x130]
push ecx
push dword [ebp - 0x13c]
add eax, edx
call eax
test eax, eax
jne 0x406440
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov edx, dword [eax + 0x18]
mov dword [ebp - 0x140], edx
mov ecx, dword [edx + 0x3c]
mov ecx, dword [ecx + edx + 0x78]
add ecx, edx
mov dword [ebp - 0x134], ecx
cmp ecx, edx
je 0x406420
mov ebx, dword [ecx + 0x18]
test ebx, ebx
je 0x406420
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + ebx*4]
add ecx, edx
mov edi, dword [ecx - 4]
sub ecx, 4
add edi, edx
mov dword [ebp - 0x138], ecx
dec ebx
mov esi, 0xabaf8258
mov cl, byte [edi]
inc edi
test cl, cl
je 0x406412
movsx edx, cl
lea edi, [edi + 1]
imul ecx, edx, 0xcc9e2d51
ror ecx, 0x11
imul ecx, ecx, 0x1b873593
xor ecx, esi
ror ecx, 0x13
add ecx, 0xfaddaf14
lea esi, [ecx + ecx*4]
imul ecx, edx, 0x51000000
ror ecx, 0x11
imul ecx, ecx, 0x1b873593
xor esi, ecx
xor esi, 1
mov ecx, esi
shr ecx, 0x10
xor ecx, esi
imul edx, ecx, 0x85ebca6b
mov ecx, edx
shr ecx, 0xd
xor ecx, edx
imul edx, ecx, 0xc2b2ae35
mov ecx, edx
shr ecx, 0x10
xor ecx, edx
imul esi, ecx, 0x539
mov cl, byte [edi - 1]
test cl, cl
jne 0x4063a2
cmp esi, 0xd30eb2fd
je 0x406427
mov edx, dword [eax + 0x18]
mov ecx, dword [ebp - 0x138]
test ebx, ebx
jne 0x406383
mov eax, dword [eax]
jmp 0x406350
mov esi, dword [ebp - 0x134]
mov edx, dword [ebp - 0x140]
jmp 0x4067c5
lea ecx, [ebp - 0x10c]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406450
mov ebx, dword [ebp - 0x144]
sub ecx, edx
mov edx, ebx
lea esi, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x406464
sub edx, esi
cmp ecx, edx
mov dword [ebp - 0x134], edx
mov edi, edx
cmovb edi, ecx
xor esi, esi
test edi, edi
je 0x4064b2
mov eax, ebx
lea ebx, [ebp - 0x10c]
sub eax, ebx
mov dword [ebp - 0x138], eax
mov edx, dword [ebp - 0x138]
lea eax, [ebp - 0x10c]
add eax, esi
mov bl, byte [eax]
cmp bl, byte [eax + edx]
mov edx, dword [ebp - 0x134]
jl 0x4064bc
jg 0x4064bc
inc esi
cmp esi, edi
jb 0x406490
cmp ecx, edx
jb 0x4064bc
jbe 0x4066cb
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov edx, dword [eax + 0x18]
mov dword [ebp - 0x140], edx
mov ecx, dword [edx + 0x3c]
mov ecx, dword [ecx + edx + 0x78]
add ecx, edx
mov dword [ebp - 0x134], ecx
cmp ecx, edx
je 0x40659f
mov ebx, dword [ecx + 0x18]
test ebx, ebx
je 0x40659f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + ebx*4]
add ecx, edx
sub ecx, 4
dec ebx
mov dword [ebp - 0x138], ecx
mov edi, 0x2e25a185
mov ecx, dword [ecx]
add ecx, edx
mov dl, byte [ecx]
inc ecx
test dl, dl
je 0x40658e
movsx esi, dl
lea ecx, [ecx + 1]
imul edx, esi, 0xcc9e2d51
ror edx, 0x11
imul edx, edx, 0x1b873593
xor edx, edi
ror edx, 0x13
add edx, 0xfaddaf14
lea edi, [edx + edx*4]
imul edx, esi, 0x51000000
ror edx, 0x11
imul edx, edx, 0x1b873593
xor edi, edx
xor edi, 1
mov edx, edi
shr edx, 0x10
xor edx, edi
imul esi, edx, 0x85ebca6b
mov edx, esi
shr edx, 0xd
xor edx, esi
imul esi, edx, 0xc2b2ae35
mov edx, esi
shr edx, 0x10
xor edx, esi
imul edi, edx, 0x539
mov dl, byte [ecx - 1]
test dl, dl
jne 0x406521
cmp edi, 0x5e9636b3
je 0x4065a6
mov ecx, dword [ebp - 0x138]
mov edx, dword [eax + 0x18]
test ebx, ebx
jne 0x406503
mov eax, dword [eax]
jmp 0x4064d0
mov esi, dword [ebp - 0x134]
mov edx, dword [ebp - 0x140]
mov eax, dword [esi + 0x24]
lea eax, [eax + ebx*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
lea ecx, [ebp - 0x130]
push ecx
push dword [ebp - 0x13c]
add eax, edx
call eax
test eax, eax
jne 0x406440
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov edx, dword [eax + 0x18]
mov dword [ebp - 0x134], edx
mov ecx, dword [edx + 0x3c]
mov ecx, dword [ecx + edx + 0x78]
add ecx, edx
mov dword [ebp - 0x138], ecx
cmp ecx, edx
je 0x4066c4
mov ebx, dword [ecx + 0x18]
test ebx, ebx
je 0x4066c4
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + ebx*4]
add ecx, edx
mov edi, dword [ecx - 4]
sub ecx, 4
add edi, edx
mov dword [ebp - 0x144], ecx
dec ebx
mov esi, 0x5f80fd66
mov cl, byte [edi]
inc edi
test cl, cl
je 0x4066b6
movsx edx, cl
lea edi, [edi + 1]
imul ecx, edx, 0xcc9e2d51
ror ecx, 0x11
imul ecx, ecx, 0x1b873593
xor ecx, esi
ror ecx, 0x13
add ecx, 0xfaddaf14
lea esi, [ecx + ecx*4]
imul ecx, edx, 0x51000000
ror ecx, 0x11
imul ecx, ecx, 0x1b873593
xor esi, ecx
xor esi, 1
mov ecx, esi
shr ecx, 0x10
xor ecx, esi
imul edx, ecx, 0x85ebca6b
mov ecx, edx
shr ecx, 0xd
xor ecx, edx
imul edx, ecx, 0xc2b2ae35
mov ecx, edx
shr ecx, 0x10
xor ecx, edx
imul esi, ecx, 0x539
mov cl, byte [edi - 1]
test cl, cl
jne 0x406642
cmp esi, 0xccfbb635
je 0x4067b9
mov edx, dword [eax + 0x18]
mov ecx, dword [ebp - 0x144]
test ebx, ebx
jne 0x406623
mov eax, dword [eax]
jmp 0x4065f0
mov eax, dword [ebp - 0x128]
mov dword [0x57df00], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + 0x18]
mov dword [ebp - 0x134], edx
mov ecx, dword [edx + 0x3c]
mov ecx, dword [ecx + edx + 0x78]
add ecx, edx
mov dword [ebp - 0x138], ecx
cmp ecx, edx
je 0x4067b2
mov ebx, dword [ecx + 0x18]
test ebx, ebx
je 0x4067b2
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + ebx*4]
add ecx, edx
mov edi, dword [ecx - 4]
sub ecx, 4
add edi, edx
mov dword [ebp - 0x144], ecx
dec ebx
mov esi, 0x24348ecb
mov cl, byte [edi]
inc edi
test cl, cl
je 0x4067a4
movsx edx, cl
lea edi, [edi + 1]
imul ecx, edx, 0xcc9e2d51
ror ecx, 0x11
imul ecx, ecx, 0x1b873593
xor ecx, esi
ror ecx, 0x13
add ecx, 0xfaddaf14
lea esi, [ecx + ecx*4]
imul ecx, edx, 0x51000000
ror ecx, 0x11
imul ecx, ecx, 0x1b873593
xor esi, ecx
xor esi, 1
mov ecx, esi
shr ecx, 0x10
xor ecx, esi
imul edx, ecx, 0x85ebca6b
mov ecx, edx
shr ecx, 0xd
xor ecx, edx
imul edx, ecx, 0xc2b2ae35
mov ecx, edx
shr ecx, 0x10
xor ecx, edx
imul esi, ecx, 0x539
mov cl, byte [edi - 1]
test cl, cl
jne 0x406734
cmp esi, 0x8606a5a8
je 0x4067b9
mov edx, dword [eax + 0x18]
mov ecx, dword [ebp - 0x144]
test ebx, ebx
jne 0x406715
mov eax, dword [eax]
jmp 0x4066e2
mov edx, dword [ebp - 0x134]
mov esi, dword [ebp - 0x138]
mov eax, dword [esi + 0x24]
push dword [ebp - 0x13c]
lea eax, [eax + ebx*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0040bd16
mov esp, ebp
pop ebp
ret