Function at 0x406670
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x434
mov eax, dword fs:[0x30]
nop
test eax, eax
nop
mov eax, dword [eax + 0xc]
nop
test eax, eax
nop
lea ebp, [eax + 0x14]
nop
test eax, eax
nop
mov esi, dword [eax + 0x14]
nop
test eax, eax
nop
lea edi, [esp + 0x22c]
push 0x208
push 0
push edi
call sub.msvcrt.dll_memset
add esp, 0xc
nop
test eax, eax
nop
lea eax, [esp + 0x24]
push 0x208
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
nop
test eax, eax
nop
cmp esi, ebp
je 0x4069a6
mov dword [esp + 0x18], ebp
nop
nop
test eax, eax
nop
nop
test eax, eax
nop
push 0x208
push 0
push edi
call sub.msvcrt.dll_memset
add esp, 0xc
nop
test eax, eax
nop
push 0x208
push 0
lea eax, [esp + 0x2c]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
nop
test eax, eax
nop
push dword [esi + 0x20]
push 0x104
push edi
call dword [sym.imp.msvcrt.dll_wcscpy_s]
add esp, 0xc
nop
test eax, eax
nop
push dword [esp + 0x448]
call main
add esp, 4
cmp eax, 0xfffffff0
jae 0x4069c6
mov ebx, eax
cmp eax, 0xa
mov dword [esp + 0x20], esi
ja 0x406760
mov eax, ebx
add al, bl
mov byte [esp], al
lea esi, [esp + 1]
jmp 0x406781
mov edi, ebx
or edi, 0xf
lea eax, [edi + 1]
push eax
call fcn.004088c0
add esp, 4
mov esi, eax
mov dword [esp + 8], eax
add edi, 2
mov dword [esp], edi
mov dword [esp + 4], ebx
push ebx
push dword [esp + 0x44c]
push esi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov byte [esi + ebx], 0
nop
test eax, eax
nop
movzx ebx, byte [esp]
test bl, 1
je 0x4067b0
mov edi, dword [esp + 8]
mov ebx, dword [esp + 4]
jmp 0x4067b6
shr ebx, 1
lea edi, [esp + 1]
cmp ebx, 0x7ffffff0
jae 0x4069bd
cmp ebx, 5
jae 0x4067f0
mov eax, ebx
add al, bl
mov byte [esp + 0xc], al
lea edx, [esp + 0xe]
mov eax, edx
test ebx, ebx
je 0x406920
lea ecx, [edi + ebx]
cmp ebx, 0x40
jae 0x40681f
jmp 0x406832
mov esi, ebx
or esi, 7
inc esi
js 0x4069cd
lea eax, [esi + esi]
push eax
call fcn.004088c0
add esp, 4
mov dword [esp + 0x14], eax
or esi, 1
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
lea ecx, [edi + ebx]
cmp ebx, 0x40
jb 0x406832
cmp eax, ecx
jae 0x4068c0
lea edx, [eax + ebx*2]
cmp edi, edx
jae 0x4068c0
mov edx, eax
mov esi, edi
mov edi, ecx
sub edi, esi
lea eax, [edi - 1]
and edi, 7
je 0x40685d
nop word cs:[eax + eax]
movsx ebx, byte [esi]
mov word [edx], bx
inc esi
add edx, 2
dec edi
jne 0x406850
cmp eax, 7
jb 0x406920
nop word cs:[eax + eax]
movsx eax, byte [esi]
mov word [edx], ax
movsx eax, byte [esi + 1]
mov word [edx + 2], ax
movsx eax, byte [esi + 2]
mov word [edx + 4], ax
movsx eax, byte [esi + 3]
mov word [edx + 6], ax
movsx eax, byte [esi + 4]
mov word [edx + 8], ax
movsx eax, byte [esi + 5]
mov word [edx + 0xa], ax
movsx eax, byte [esi + 6]
mov word [edx + 0xc], ax
movsx eax, byte [esi + 7]
mov word [edx + 0xe], ax
add esi, 8
add edx, 0x10
cmp esi, ecx
jne 0x406870
jmp 0x406920
mov dword [esp + 0x1c], ebx
and ebx, 0xffffffc0
lea edx, [eax + ebx*2]
lea esi, [edi + ebx]
xor ebp, ebp
nop
vpmovsxbw ymm0, xmmword [edi + ebp]
vpmovsxbw ymm1, xmmword [edi + ebp + 0x10]
vpmovsxbw ymm2, xmmword [edi + ebp + 0x20]
vpmovsxbw ymm3, xmmword [edi + ebp + 0x30]
vmovdqu ymmword [eax + ebp*2], ymm0
vmovdqu ymmword [eax + ebp*2 + 0x20], ymm1
vmovdqu ymmword [eax + ebp*2 + 0x40], ymm2
vmovdqu ymmword [eax + ebp*2 + 0x60], ymm3
add ebp, 0x40
cmp ebx, ebp
jne 0x4068d0
cmp dword [esp + 0x1c], ebx
mov ebp, dword [esp + 0x18]
jne 0x406836
nop word [eax + eax]
mov word [edx], 0
nop
test eax, eax
nop
test byte [esp + 0xc], 1
lea eax, [esp + 0xe]
je 0x406939
mov eax, dword [esp + 0x14]
push eax
push 0x104
lea eax, [esp + 0x2c]
push eax
vzeroupper
call dword [sym.imp.msvcrt.dll_wcscpy_s]
add esp, 0xc
mov esi, dword [esp + 0x20]
lea edi, [esp + 0x22c]
test byte [esp + 0xc], 1
je 0x40696e
push dword [esp + 0x14]
call fcn.00408930
add esp, 4
test byte [esp], 1
je 0x406980
push dword [esp + 8]
call fcn.00408930
add esp, 4
nop
test eax, eax
nop
push edi
lea eax, [esp + 0x28]
push eax
call fcn.00406ae0
add esp, 8
nop
test eax, eax
nop
test eax, eax
jne 0x4069af
mov esi, dword [esi]
cmp esi, ebp
jne 0x4066e0
nop
test eax, eax
nop
xor eax, eax
jmp 0x4069b2
mov eax, dword [esi + 0x10]
add esp, 0x434
pop esi
pop edi
pop ebx
pop ebp
ret
lea ecx, [esp + 0xc]
call fcn.00405410
mov ecx, esp
call fcn.004054b0
call fcn.00405480
mov esi, eax
test byte [esp], 1
je 0x4069eb
jmp 0x406a0d
push esi
call fcn.0042d8d0
push dword [esp + 0x14]
call fcn.00408930
add esp, 4
test byte [esp], 1
je 0x4069eb
jmp 0x406a0d
push dword [esp + 8]
call fcn.00408930
add esp, 4
push esi
call fcn.0042d8d0
int3