Function at 0x4064e1
Capabilities:
Access peb ldr_data
Encode data using xor
Get ntdll base address
Get process filename
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x54
mov eax, dword [0x4c7080]
xor eax, esp
mov dword [esp + 0x4c], eax
mov eax, dword fs:[0x30]
push ebx
push ebp
push esi
mov eax, dword [eax + 0xc]
xor ebx, ebx
push edi
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov edx, dword [ecx + 0x18]
mov eax, dword [edx + 0x3c]
mov edi, dword [eax + edx + 0x78]
add edi, edx
cmp edi, edx
je 0x406577
mov esi, dword [edi + 0x18]
test esi, esi
je 0x406577
mov eax, dword [edi + 0x20]
lea ebp, [eax + esi*4]
add ebp, edx
lea ebp, [ebp - 4]
mov eax, 0x99cc11d1
mov ecx, dword [ebp]
dec esi
add ecx, edx
mov dword [esp + 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
je 0x40656f
mov ebx, dword [esp + 0x14]
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406549
mov dword [esp + 0x14], ebx
xor ebx, ebx
cmp dword [esp + 0x14], 0x681ff892
je 0x40682d
test esi, esi
jne 0x40652c
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov ecx, eax
mov dword [esp + 0x1c], ecx
cmp eax, dword [esp + 0x18]
je 0x40658a
cmp dword [ecx + 0x18], ebx
jne 0x40650d
mov esi, ebx
movaps xmm0, xmmword [0x4b6b10]
lea ecx, [esp + 0x30]
movups xmmword [esp + 0x30], xmm0
mov word [esp + 0x40], 0x91
mov byte [esp + 0x42], 1
call fcn.00402e9c
push ebx
push ebx
push 3
push ebx
push 7
push 0x80000000
push eax
call esi
cmp eax, 0xffffffff
jne 0x406896
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov edx, dword [ecx + 0x18]
mov eax, dword [edx + 0x3c]
mov edi, dword [eax + edx + 0x78]
add edi, edx
cmp edi, edx
je 0x406647
mov esi, dword [edi + 0x18]
test esi, esi
je 0x406647
mov eax, dword [edi + 0x20]
lea ebp, [eax + esi*4]
add ebp, edx
lea ebp, [ebp - 4]
mov eax, 0x2799d15
mov ecx, dword [ebp]
dec esi
add ecx, edx
mov dword [esp + 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
je 0x40663f
mov ebx, dword [esp + 0x14]
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406619
mov dword [esp + 0x14], ebx
xor ebx, ebx
cmp dword [esp + 0x14], 0x9165b8ff
je 0x406847
test esi, esi
jne 0x4065fc
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov ecx, eax
mov dword [esp + 0x1c], eax
cmp eax, dword [esp + 0x18]
je 0x40665a
cmp dword [ecx + 0x18], ebx
jne 0x4065dd
mov esi, ebx
lea ecx, [esp + 0x30]
mov dword [esp + 0x30], 0xaabe9299
mov dword [esp + 0x34], 0xbdbabb9b
mov dword [esp + 0x38], 0xb6b5bcf9
mov word [esp + 0x3c], 0x100
call fcn.00412954
lea eax, [esp + 0x30]
push eax
call esi
test eax, eax
jne 0x406896
mov eax, dword fs:[0x30]
mov dword [esp + 0x24], ebx
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov edx, dword [ecx + 0x18]
mov eax, dword [edx + 0x3c]
mov edi, dword [eax + edx + 0x78]
add edi, edx
cmp edi, edx
je 0x406719
mov esi, dword [edi + 0x18]
test esi, esi
je 0x406719
mov eax, dword [edi + 0x20]
lea ebp, [eax + esi*4]
add ebp, edx
lea ebp, [ebp - 4]
mov eax, 0xcbfd1d58
mov ecx, dword [ebp]
dec esi
add ecx, edx
mov dword [esp + 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
je 0x406711
mov ebx, dword [esp + 0x14]
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4066eb
mov dword [esp + 0x14], ebx
xor ebx, ebx
cmp dword [esp + 0x14], 0x1509a3b7
je 0x406861
test esi, esi
jne 0x4066ce
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov ecx, eax
mov dword [esp + 0x1c], eax
cmp eax, dword [esp + 0x18]
je 0x40672c
cmp dword [ecx + 0x18], ebx
jne 0x4066af
mov esi, ebx
movaps xmm0, xmmword [0x4b6a10]
mov ecx, ebx
movups xmmword [esp + 0x30], xmm0
mov dword [esp + 0x50], 0x9695b1cf
movaps xmm0, xmmword [0x4b6b00]
movups xmmword [esp + 0x40], xmm0
mov dword [esp + 0x54], 0x999c809a
mov dword [esp + 0x58], 0x1008b99
lea eax, [ecx - 0x31]
xor byte [esp + ecx + 0x30], al
inc ecx
cmp ecx, 0x2a
jb 0x406760
lea eax, [esp + 0x24]
mov byte [esp + 0x5b], bl
push eax
push 0x20019
push ebx
lea eax, [esp + 0x3c]
push eax
push 0x80000002
call esi
test eax, eax
jne 0x4068ac
cmp dword [esp + 0x24], eax
je 0x4068ac
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov edx, dword [ecx + 0x18]
mov eax, dword [edx + 0x3c]
mov edi, dword [eax + edx + 0x78]
add edi, edx
cmp edi, edx
je 0x406818
mov esi, dword [edi + 0x18]
test esi, esi
je 0x406818
mov eax, dword [edi + 0x20]
lea ebp, [eax + esi*4]
add ebp, edx
lea ebp, [ebp - 4]
mov eax, 0xcafd1bc5
mov ecx, dword [ebp]
dec esi
add ecx, edx
mov dword [esp + 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
je 0x406810
mov ebx, dword [esp + 0x14]
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4067ee
mov dword [esp + 0x14], ebx
xor ebx, ebx
cmp dword [esp + 0x14], 0x61d43f4a
je 0x40687b
test esi, esi
jne 0x4067d1
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov ecx, eax
mov dword [esp + 0x1c], eax
cmp eax, dword [esp + 0x18]
je 0x406890
cmp dword [ecx + 0x18], ebx
jne 0x4067b2
jmp 0x406890
mov eax, dword [edi + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edx]
mov eax, dword [edi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
jmp 0x40658c
mov eax, dword [edi + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edx]
mov eax, dword [edi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
jmp 0x40665c
mov eax, dword [edi + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edx]
mov eax, dword [edi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
jmp 0x40672e
mov eax, dword [edi + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edx]
mov eax, dword [edi + 0x1c]
lea eax, [eax + ecx*4]
mov ebx, dword [eax + edx]
add ebx, edx
push dword [esp + 0x24]
call ebx
xor eax, eax
inc eax
mov ecx, dword [esp + 0x5c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0046be79
add esp, 0x54
ret
mov eax, dword fs:[0x30]
mov dword [esp + 0x24], ebx
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov edx, dword [ecx + 0x18]
mov eax, dword [edx + 0x3c]
mov edi, dword [eax + edx + 0x78]
add edi, edx
cmp edi, edx
je 0x406932
mov esi, dword [edi + 0x18]
test esi, esi
je 0x406932
mov eax, dword [edi + 0x20]
lea ebp, [eax + esi*4]
add ebp, edx
lea ebp, [ebp - 4]
mov eax, 0x96ee5e38
mov ecx, dword [ebp]
dec esi
add ecx, edx
mov dword [esp + 0x14], eax
mov al, byte [ecx]
inc ecx
test al, al
je 0x40692a
mov ebx, dword [esp + 0x14]
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406904
mov dword [esp + 0x14], ebx
xor ebx, ebx
cmp dword [esp + 0x14], 0xe05c57
je 0x406faa
test esi, esi
jne 0x4068e7
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov ecx, eax
mov dword [esp + 0x1c], eax
cmp eax, dword [esp + 0x18]
je 0x406945
cmp dword [ecx + 0x18], ebx
jne 0x4068c8
mov esi, ebx
movaps xmm0, xmmword [0x4b6ab0]
mov ecx, ebx
movups xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], 0xacaea98b
mov dword [esp + 0x44], 0x959cb7bf
mov dword [esp + 0x48], 0x848d93
mov byte [esp + 0x4c], 1
lea eax, [ecx - 0x31]
xor byte [esp + ecx + 0x30], al
inc ecx
cmp ecx, 0x1b
jb 0x406972
lea eax, [esp + 0x24]
mov byte [esp + 0x4c], bl
push eax
push 0x20019
push ebx
lea eax, [esp + 0x3c]
push eax
push 0x80000002
call esi
test eax, eax
jne 0x406899
mov eax, dword fs:[0x30]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x1c], 0x100
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], ecx
mov edx, dword [ecx + 0x18]
mov eax, dword [edx + 0x3c]
mov edi, dword [eax + edx + 0x78]
add edi, edx
cmp edi, edx
je 0x406a30
mov esi, dword [edi + 0x18]
test esi, esi
je 0x406a30
mov eax, dword [edi + 0x20]
lea ebp, [eax + esi*4]
add ebp, edx
lea ebp, [ebp - 4]
mov eax, 0x5ec858b6
mov ecx, dword [ebp]
dec esi
add ecx, edx
mov dword [esp + 0x10], eax
mov al, byte [ecx]
inc ecx
test al, al
je 0x406a28
mov ebx, dword [esp + 0x10]
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406a02
mov dword [esp + 0x10], ebx
xor ebx, ebx
cmp dword [esp + 0x10], 0xf5b7ef6e
je 0x406fc4
test esi, esi
jne 0x4069e5
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov ecx, eax
mov dword [esp + 0x20], eax
cmp eax, dword [esp + 0x18]
je 0x406a43
cmp dword [ecx + 0x18], ebx
jne 0x4069c6
mov eax, ebx
push 0x10a
push 0x40
call eax
mov ecx, dword fs:[0x30]
mov dword [esp + 0x18], eax
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx]
mov ecx, eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x20], ecx
mov edx, dword [ecx + 0x18]
mov eax, dword [edx + 0x3c]
mov edi, dword [eax + edx + 0x78]
add edi, edx
cmp edi, edx
je 0x406ad5
mov esi, dword [edi + 0x18]
test esi, esi
je 0x406ad5
mov eax, dword [edi + 0x20]
lea ebp, [eax + esi*4]
add ebp, edx
lea ebp, [ebp - 4]
mov eax, 0x47e8c06
mov ecx, dword [ebp]
dec esi
add ecx, edx
mov dword [esp + 0x10], eax
mov al, byte [ecx]
inc ecx
test al, al
je 0x406acd
mov ebx, dword [esp + 0x10]
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406aa7
mov dword [esp + 0x10], ebx
xor ebx, ebx
cmp dword [esp + 0x10], 0x8f5d03c7
je 0x406fde
test esi, esi
jne 0x406a8a
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov ecx, eax
mov dword [esp + 0x20], eax
cmp eax, dword [esp + 0x28]
je 0x406ae8
cmp dword [ecx + 0x18], ebx
jne 0x406a6b
mov esi, ebx
movaps xmm0, xmmword [0x4b6ce0]
lea ecx, [esp + 0x30]
movups xmmword [esp + 0x30], xmm0
mov word [esp + 0x40], 0xb1
mov byte [esp + 0x42], 1
call fcn.00402e9c
mov ebp, dword [esp + 0x18]
lea ecx, [esp + 0x1c]
push ecx
push ebp
lea ecx, [esp + 0x1c]
push ecx
push ebx
push eax
push dword [esp + 0x38]
call esi
test eax, eax
jne 0x406b66
mov ecx, ebp
call fcn.0040647f
cmp dword [esp + 0x14], 1
je 0x406b3b
cmp dword [esp + 0x14], 7
jne 0x406b66
lea ecx, [esp + 0x28]
mov dword [esp + 0x28], 0xaabeb2b9
mov word [esp + 0x2c], 0x100
call fcn.004127dc
mov eax, ecx
push eax
push ebp
call fcn.0046d680
pop ecx
pop ecx
test eax, eax
jne 0x406896
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x20], ecx
mov edx, dword [ecx + 0x18]
mov eax, dword [edx + 0x3c]
mov edi, dword [eax + edx + 0x78]
add edi, edx
cmp edi, edx
je 0x406be8
mov esi, dword [edi + 0x18]
test esi, esi
je 0x406be8
mov eax, dword [edi + 0x20]
lea ebp, [eax + esi*4]
add ebp, edx
lea ebp, [ebp - 4]
mov eax, 0x46f52007
mov ecx, dword [ebp]
dec esi
add ecx, edx
mov dword [esp + 0x10], eax
mov al, byte [ecx]
inc ecx
test al, al
je 0x406be0
mov ebx, dword [esp + 0x10]
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406bba
mov dword [esp + 0x10], ebx
xor ebx, ebx
cmp dword [esp + 0x10], 0xa43244c4
je 0x406ff8
test esi, esi
jne 0x406b9d
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov ecx, eax
mov dword [esp + 0x20], eax
cmp eax, dword [esp + 0x28]
je 0x406bfb
cmp dword [ecx + 0x18], ebx
jne 0x406b7e
mov eax, ebx
mov ecx, dword [esp + 0x18]
push ecx
call eax
mov eax, dword fs:[0x30]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x1c], 0x200
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x18], ecx
mov edx, dword [ecx + 0x18]
mov eax, dword [edx + 0x3c]
mov edi, dword [eax + edx + 0x78]
add edi, edx
cmp edi, edx
je 0x406c92
mov esi, dword [edi + 0x18]
test esi, esi
je 0x406c92
mov eax, dword [edi + 0x20]
lea ebp, [eax + esi*4]
add ebp, edx
lea ebp, [ebp - 4]
mov eax, 0x95104fbd
mov ecx, dword [ebp]
dec esi
add ecx, edx
mov dword [esp + 0x10], eax
mov al, byte [ecx]
inc ecx
test al, al
je 0x406c8a
mov ebx, dword [esp + 0x10]
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406c64
mov dword [esp + 0x10], ebx
xor ebx, ebx
cmp dword [esp + 0x10], 0x6c4723b5
je 0x407012
test esi, esi
jne 0x406c47
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx]
mov ecx, eax
mov dword [esp + 0x18], eax
cmp eax, dword [esp + 0x28]
je 0x406ca5
cmp dword [ecx + 0x18], ebx
jne 0x406c28
mov eax, ebx
push 0x20a
push 0x40
call eax
mov ecx, dword fs:[0x30]
mov dword [esp + 0x20], eax
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx]
mov ecx, eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x18], ecx
mov edx, dword [ecx + 0x18]
mov eax, dword [edx + 0x3c]
mov edi, dword [eax + edx + 0x78]
add edi, edx
cmp edi, edx
je 0x406d37
mov esi, dword [edi + 0x18]
test esi, esi
je 0x406d37
mov eax, dword [edi + 0x20]
lea ebp, [eax + esi*4]
add ebp, edx
lea ebp, [ebp - 4]
mov eax, 0x64697c57
mov ecx, dword [ebp]
dec esi
add ecx, edx
mov dword [esp + 0x10], eax
mov al, byte [ecx]
inc ecx
test al, al
je 0x406d2f
mov ebx, dword [esp + 0x10]
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406d09
mov dword [esp + 0x10], ebx
xor ebx, ebx
cmp dword [esp + 0x10], 0x94edb0b6
je 0x40702c
test esi, esi
jne 0x406cec
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx]
mov ecx, eax
mov dword [esp + 0x18], eax
cmp eax, dword [esp + 0x28]
je 0x406d4a
cmp dword [ecx + 0x18], ebx
jne 0x406ccd
mov esi, ebx
movaps xmm0, xmmword [0x4b6c80]
push 0xffffffffffffffd2
pop edi
push 4
movups xmmword [esp + 0x34], xmm0
mov word [esp + 0x44], 0x100
pop ebp
lea eax, [edi - 1]
movd xmm2, edi
lea edx, [edi - 3]
movd xmm0, eax
movd xmm3, edx
lea ecx, [edi - 2]
punpckldq xmm3, xmm0
movd xmm0, dword [esp + edi + 0x5e]
punpcklbw xmm0, xmm0
movd xmm1, ecx
punpcklwd xmm0, xmm0
punpckldq xmm1, xmm2
punpckldq xmm3, xmm1
psrad xmm0, 0x18
xorps xmm3, xmm0
andps xmm3, xmmword [0x4b65b0]
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd dword [esp + edi + 0x5e], xmm3
add edi, 4
sub ebp, 1
jne 0x406d65
mov ebp, dword [esp + 0x20]
lea eax, [esp + 0x1c]
push eax
push ebp
lea eax, [esp + 0x1c]
mov byte [esp + 0x49], bl
push eax
push ebx
lea eax, [esp + 0x40]
push eax
push dword [esp + 0x38]
call esi
test eax, eax
jne 0x406e6a
cmp dword [esp + 0x14], 7
jne 0x406e6a
mov esi, ebp
cmp byte [ebp], al
je 0x406e6a
mov ecx, esi
call fcn.0040647f
lea ecx, [esp + 0x28]
mov dword [esp + 0x28], 0xb1b0a2a0
mov dword [esp + 0x2c], 0x100b1bf
call fcn.00402e39
push eax
push esi
call fcn.0046d680
pop ecx
pop ecx
test eax, eax
jne 0x406896
lea ecx, [esp + 0x30]
mov dword [esp + 0x30], 0xa6a3b9b9
mov dword [esp + 0x34], 0xb4b9b5a6
mov dword [esp + 0x38], 0x100a0b8
call fcn.0040537d
push eax
push esi
call fcn.0046d680
pop ecx
pop ecx
test eax, eax
jne 0x406896
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406e5a
sub ecx, edx
inc esi
add esi, ecx
cmp byte [esi], al
jne 0x406df2
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x18], ecx
mov edx, dword [ecx + 0x18]
mov eax, dword [edx + 0x3c]
mov edi, dword [eax + edx + 0x78]
add edi, edx
cmp edi, edx
je 0x406eec
mov esi, dword [edi + 0x18]
test esi, esi
je 0x406eec
mov eax, dword [edi + 0x20]
lea ebp, [eax + esi*4]
add ebp, edx
lea ebp, [ebp - 4]
mov eax, 0x56e5f967
mov ecx, dword [ebp]
dec esi
add ecx, edx
mov dword [esp + 0x10], eax
mov al, byte [ecx]
inc ecx
test al, al
je 0x406ee4
mov ebx, dword [esp + 0x10]
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406ebe
mov dword [esp + 0x10], ebx
xor ebx, ebx
cmp dword [esp + 0x10], 0xaae485a4
je 0x407046
test esi, esi
jne 0x406ea1
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx]
mov ecx, eax
mov dword [esp + 0x18], eax
cmp eax, dword [esp + 0x28]
je 0x406eff
cmp dword [ecx + 0x18], ebx
jne 0x406e82
mov eax, ebx
mov ecx, dword [esp + 0x20]
push ecx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x18], ecx
mov edx, dword [ecx + 0x18]
mov eax, dword [edx + 0x3c]
mov edi, dword [eax + edx + 0x78]
add edi, edx
cmp edi, edx
je 0x406f8a
mov esi, dword [edi + 0x18]
test esi, esi
je 0x406f8a
mov eax, dword [edi + 0x20]
lea ebp, [eax + esi*4]
add ebp, edx
lea ebp, [ebp - 4]
mov eax, 0x593a55ef
mov ecx, dword [ebp]
dec esi
add ecx, edx
mov dword [esp + 0x10], eax
mov al, byte [ecx]
inc ecx
test al, al
je 0x406f82
mov ebx, dword [esp + 0x10]
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406f5c
mov dword [esp + 0x10], ebx
xor ebx, ebx
cmp dword [esp + 0x10], 0x938b4a0
je 0x407060
test esi, esi
jne 0x406f3f
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx]
mov ecx, eax
mov dword [esp + 0x18], eax
cmp eax, dword [esp + 0x28]
je 0x407075
cmp dword [ecx + 0x18], ebx
jne 0x406f20
jmp 0x407075
mov eax, dword [edi + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edx]
mov eax, dword [edi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
jmp 0x406947
mov eax, dword [edi + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edx]
mov eax, dword [edi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
jmp 0x406a45
mov eax, dword [edi + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edx]
mov eax, dword [edi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
jmp 0x406aea
mov eax, dword [edi + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edx]
mov eax, dword [edi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
jmp 0x406bfd
mov eax, dword [edi + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edx]
mov eax, dword [edi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
jmp 0x406ca7
mov eax, dword [edi + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edx]
mov eax, dword [edi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
jmp 0x406d4c
mov eax, dword [edi + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edx]
mov eax, dword [edi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
jmp 0x406f01
mov eax, dword [edi + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edx]
mov eax, dword [edi + 0x1c]
lea eax, [eax + ecx*4]
mov ebx, dword [eax + edx]
add ebx, edx
push dword [esp + 0x24]
call ebx
xor eax, eax
jmp 0x406899