Function at 0x406aa0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4c8747
mov eax, dword fs:[0]
push eax
sub esp, 0x178
mov eax, dword [0x4fc5b0]
xor eax, esp
mov dword [esp + 0x174], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4fc5b0]
xor eax, esp
push eax
lea eax, [esp + 0x18c]
mov dword fs:[0], eax
mov eax, dword [esp + 0x19c]
mov ebx, dword [esp + 0x1a0]
mov ebp, ecx
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0x58]
cmp eax, 3
ja case.default.0x406afb
jmp dword [eax*4 + 0x406edc]
test ebx, ebx
je case.default.0x406afb
mov ecx, dword [ebp + 0x54]
mov edx, dword [ecx]
mov eax, dword [edx + 0x24]
call eax
mov ecx, dword [ebp + 0x54]
mov edx, dword [ecx]
mov esi, eax
mov eax, dword [edx + 0x34]
mov dword [esp + 0x14], esi
call eax
test al, al
je 0x406be2
cmp dword [ebp + 0x58], 1
jne 0x406be2
test esi, esi
je 0x406b42
cmp ebx, esi
jae 0x406be2
mov ecx, dword [ebp + 0x54]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
mov dword [esp + 0x1c], eax
cmp esi, eax
lea eax, [esp + 0x1c]
jb 0x406b5c
lea eax, [esp + 0x14]
mov edx, dword [ebp]
mov edi, dword [eax]
mov eax, dword [edx + 0xa4]
mov ecx, ebp
call eax
mov dword [esp + 0x14], edi
cmp dword [ebp + 0x4c], edi
jae 0x406b9d
mov edx, dword [eax]
mov edx, dword [edx + 0x84]
lea ecx, [esp + 0x14]
push ecx
push 0x4fe414
mov ecx, eax
call edx
cmp dword [esp + 0x14], edi
jb 0x406b94
mov esi, eax
jmp 0x406ba0
push edi
lea ecx, [ebp + 0x48]
call fcn.00402ee0
mov esi, dword [ebp + 0x50]
mov eax, dword [esp + 0x18]
push ebx
push eax
push esi
call fcn.00493060
mov ecx, edi
sub ecx, ebx
push ecx
push 0
add ebx, esi
push ebx
call fcn.00491e90
mov ecx, dword [ebp + 0x54]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
add esp, 0x18
push edi
push esi
push esi
call eax
mov edx, dword [ebp]
mov eax, dword [edx + 0xa4]
mov ecx, ebp
call eax
push 1
push 0
push edi
jmp 0x406ca2
test esi, esi
jne 0x406c60
test al, al
je 0x406c23
push str.StreamTransformationFilter:_plaintext_length_is_not_a_multiple_of_block_size_and_NO_PADDING_is_specified
lea ecx, [esp + 0x5c]
call fcn.00404d20
lea ecx, [esp + 0x58]
push ecx
lea edx, [esp + 0xb0]
push edx
mov dword [esp + 0x19c], esi
call fcn.00404930
push 0x4f6a4c
lea eax, [esp + 0xb0]
push eax
call fcn.00491d8a
push str.StreamTransformationFilter:_ciphertext_length_is_not_a_multiple_of_block_size
lea ecx, [esp + 0x78]
call fcn.00404d20
lea ecx, [esp + 0x74]
push ecx
lea edx, [esp + 0x134]
push edx
mov dword [esp + 0x19c], 1
call fcn.00403e70
push 0x4f6934
lea eax, [esp + 0x134]
push eax
call fcn.00491d8a
mov ecx, dword [ebp + 0x5c]
mov edx, dword [ebp]
mov eax, dword [edx + 0xa4]
push ecx
mov ecx, ebp
lea edi, [ebp + 0x48]
call eax
mov esi, ebx
mov ecx, eax
call fcn.00405600
mov ecx, dword [ebp + 0x54]
mov edx, dword [ecx]
mov edx, dword [edx + 0x20]
mov esi, eax
mov eax, dword [esp + 0x18]
push ebx
push eax
push esi
call edx
mov eax, dword [ebp]
mov edx, dword [eax + 0xa4]
mov ecx, ebp
call edx
push 1
push 0
push ebx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x14]
push esi
call eax
mov ecx, dword [esp + 0x18c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x174]
xor ecx, esp
call fcn.00492093
add esp, 0x184
ret 8
mov ecx, dword [ebp + 0x54]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
mov edx, dword [ebp]
mov edi, dword [ebp + 0x5c]
mov dword [esp + 0x14], eax
mov eax, dword [edx + 0xa4]
mov ecx, ebp
call eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1c], ecx
cmp dword [ebp + 0x4c], ecx
jae 0x406d2e
mov edx, dword [eax]
mov edx, dword [edx + 0x84]
lea ecx, [esp + 0x1c]
push ecx
push 0x4fe414
mov ecx, eax
call edx
mov ecx, dword [esp + 0x14]
cmp dword [esp + 0x1c], ecx
jb 0x406d25
mov esi, eax
jmp 0x406d31
push edi
lea ecx, [ebp + 0x48]
call fcn.00402ee0
mov esi, dword [ebp + 0x50]
mov ecx, dword [ebp + 0x54]
mov edx, dword [ecx]
mov eax, dword [edx + 0x34]
call eax
test al, al
je 0x406dab
mov ecx, dword [esp + 0x18]
push ebx
push ecx
push esi
call fcn.00493060
add esp, 0xc
cmp dword [ebp + 0x58], 2
jne 0x406d68
mov eax, dword [esp + 0x14]
mov edx, eax
sub al, bl
sub edx, ebx
movzx eax, al
push edx
push eax
add ebx, esi
push ebx
jmp 0x406d7b
mov ecx, dword [esp + 0x14]
sub ecx, ebx
dec ecx
push ecx
push 0
lea edx, [ebx + esi + 1]
mov byte [ebx + esi], 0x80
push edx
call fcn.00491e90
mov edi, dword [esp + 0x20]
mov ecx, dword [ebp + 0x54]
mov eax, dword [ecx]
mov edx, dword [eax + 0x1c]
add esp, 0xc
push edi
push esi
push esi
call edx
mov eax, dword [ebp]
mov edx, dword [eax + 0xa4]
mov ecx, ebp
call edx
push 1
push 0
push edi
jmp 0x406ca2
mov eax, dword [esp + 0x14]
cmp ebx, eax
je 0x406df0
push str.StreamTransformationFilter:_ciphertext_length_is_not_a_multiple_of_block_size
lea ecx, [esp + 0x40]
call fcn.00404d20
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0xdc]
push edx
mov dword [esp + 0x19c], 2
call fcn.00403e70
push 0x4f6934
lea eax, [esp + 0xdc]
push eax
call fcn.00491d8a
mov ecx, dword [ebp + 0x54]
mov edx, dword [ecx]
mov edx, dword [edx + 0x1c]
push eax
mov eax, dword [esp + 0x1c]
push eax
push esi
call edx
cmp dword [ebp + 0x58], 2
jne 0x406e78
mov edi, dword [esp + 0x14]
mov dl, byte [esi + edi - 1]
lea ecx, [esi + edi]
cmp dl, 1
jb 0x406e3b
movzx eax, dl
cmp eax, edi
ja 0x406e3b
sub edi, eax
lea eax, [edi + esi]
cmp eax, ecx
je 0x406e34
cmp byte [eax], dl
jne 0x406e30
inc eax
cmp eax, ecx
jne 0x406e27
cmp eax, ecx
jne 0x406e3b
mov ebx, edi
jmp 0x406c90
push str.StreamTransformationFilter:_invalid_PKCS_7_block_padding_found
lea ecx, [esp + 0x24]
call fcn.00404d20
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x108]
push ecx
mov dword [esp + 0x19c], 3
call fcn.00403e70
push 0x4f6934
lea edx, [esp + 0x108]
push edx
call fcn.00491d8a
cmp ebx, 1
jbe 0x406e8d
lea ecx, [ecx]
cmp byte [esi + ebx - 1], 0
jne 0x406e8d
dec ebx
cmp ebx, 1
ja 0x406e80
dec ebx
cmp byte [ebx + esi], 0x80
je 0x406c90
push str.StreamTransformationFilter:_invalid_ones_and_zeros_padding_found
lea ecx, [esp + 0x94]
call fcn.00404d20
lea eax, [esp + 0x90]
push eax
lea ecx, [esp + 0x160]
push ecx
mov dword [esp + 0x19c], 4
call fcn.00403e70
push 0x4f6934
lea edx, [esp + 0x160]
push edx
call fcn.00491d8a
nop
add ch, byte [ebx + 0x40]
add byte [edx], al
imul eax, dword [eax], 0xffffffd6
insb byte es:[edi], dx
inc eax
add dh, dl
insb byte es:[edi], dx
inc eax
add ah, cl
int3