Function at 0x469299
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Enumerate processes
Get installed programs
Parse pe header

Disassembly:
push 0x4e8
mov eax, 0x5c20fc
call fcn.004aa3a5
xor edi, edi
lea ecx, [ebp - 0x4f4]
mov dword [ebp - 0x4e8], edi
mov dword [ebp - 0x4f4], edi
mov dword [ebp - 0x4f0], edi
call fcn.0046afac
mov dword [ebp - 0x4f4], eax
mov dword [ebp - 4], edi
mov dword [ebp - 0x4d0], edi
mov dword [ebp - 0x4cc], edi
mov dword [ebp - 0x4c8], edi
mov byte [ebp - 4], 1
call fcn.00460648
test al, al
je 0x46930f
dec dword [ecx - 0x42760383]
xor bl, bh
invalid
lea edi, [edx - 0x5ea50bc2]
push esp
pop esi
or dl, byte [ebx + eax + 0x57097a25]
sbb al, dh
dec ebp
xor dh, byte [ebx + 0x236d901a]
push es
pop esp
rcl byte [edx - 0xcce878], cl
call fcn.00460603
test al, al
je 0x469328
push ecx
ja 0x4692cc
jp 0x469327
adc byte [ebp + 0x11e2030], 0x6a
test byte [esi - 0x5a17c492], ch
cmp ebp, eax
movsd dword es:[edi], dword [esi]
call fcn.004606d2
test al, al
je 0x46934e
jae 0x46932b
invalid
inc dword [eax + eax*8 - 0x5668e28c]
or byte [edi - 0x3e], bl
jne 0x4693ae
xchg edi, eax
test eax, 0x75c25f08
jbe 0x469377
xchg dword ds:[ebx + 0x2f], edi
xchg dword [ebx + 0x2f], edi
pop dword [ecx]
push 0x1c487aeb
mov ecx, edi
test dword [ebp + 0x7c41910b], 0xbe4d9301
mov eax, 0x8d005cb3
dec ebp
fcom dword [esi - 0x18]
je 0x4693a9
mov esi, str.65e354d070df833962fe17f32fdf1f4a
lea ecx, [ebp - 0x28]
push esi
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
xor ebx, ebx
lea ecx, [ebp - 0x28]
inc ebx
push edi
push ebx
cli
dec dword [ebp + 0x45c6d845]
cld
add dl, byte [eax - 0x73]
lea esi, [eax]
sti
invalid
mov byte [ebp - 4], bl
call fcn.00460925
push esi
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.d3b0f4c2f23dd615df50a8dfa2f0b1fe
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 4
push eax
fdiv qword [ebx + 0x4d8d005c]
dec ebp
fsubr st(0)
sbb ecx, dword [edi - 6]
dec dword [ebp + 0x45c6d845]
cld
add al, 0x50
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.5915ad3daae623afa01bc4053c328d5c
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.80184f1d99626ef189cef75cba177a2f
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.7f5303ce04a6ee40de63a5ae2df6f66d
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.36b606ce61054d5f87cb6c24d7c63c9d
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.f90d4a8713478060bb2b2f7a7a9dd2ba
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.c9c6925e4d9de542872d3bbd6afc8bb8
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.d6ad9ac67c52ebdcd1ca52907a6b5966
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.1a2de056b9b71ad7219bff146495daf2
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.3fca913ebf2421ad70bfab93935f6d14
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.fc4f56264c1aa67b778a8969c3a99b9c
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.75a6be8a159136364c02522babb46645
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.73436e0ffe8032aee144a19c94311848
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.f994c9fdc9dd03f6fbb5117fc9744ad1
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.cef6d56eb0f9bafa547be297f5a956c5
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.fb2cd19f6adbc7e22e6b308e60402c96
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.f4a9c0e78ca28364abaf255703b4b778
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.4c514311209ae6af20336022d31f7310
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.a347bd80852fe2444d89152578a86c91
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.5c8c69e1a7910771b04fb3f6e4c26ba8
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.7dbf64216c66935bc3cfc06792bb632e
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x28]
push ebx
call fcn.00460925
push str.3ae5dcf63817029e80d6a41f19ba9d7d
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x19
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.a3c184e687487e0d43dd26ad35982c46
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.6be49ab7a78d438bbf7a34172273db97
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.96fd415aac78a633157361ae4db3cb2c
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.47d2faccfc595c3f213fa24848d3e8d7
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.d8980f8206654c31de3a479ade39ed62
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
mov byte [ebp - 4], bl
push edi
push ebx
lea ecx, [ebp - 0x28]
call fcn.00460925
push str.cce735e9176c30b9ce17427e25b45577
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1f
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.9d1ea6b2feabc482840a1d07bbb9f970
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x20
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.3212de00519eab5eb48173438e05e3a1
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.dff1a0e1eefd442543da08563defa671
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.fac15bcb28c99f4320a7e02b5f1fb0b8
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.6418449cad5a4dc3d35110c9c4cfb33a
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x24
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.13ff192c2ee3cdf6b15286c3cf52c2df
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x25
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.0e8404fa7757afbad48475b185012590
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.ebb1ec3cb705422346d57ad98992e5b6
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x27
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.af4bc0476f4c0ce41ba894207b68067e
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x28
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.7b6c9ecd43c104be24bb69997d31335f
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x29
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.65e8cf7ec4479e7484b674907f57e3c0
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2a
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.0da54826cef8fa6bdc00d20fe532e10d
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2b
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.e6b786d3c105ec4fd79b68ac32262cfc
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.26d6969e0adcbaf7745bc836621eb908
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2d
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.ec75ab1dc3ae314b841214f7e5718d9b
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.f4d5480c9ed04e4521326e3996d10b40
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x2f
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.1cdbf99cf9e4cda30158a6cc4ce9b9de
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x30
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.f096fbe0fa1fee33d2446fbdf1bddf10
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x31
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.1abaa8921e25449de1b13cfcd70f3bfc
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x32
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.0175ef33a597c922721ad7702db05132
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x33
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.21d504311df5c1db00a7ef60d2b05a04
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x34
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.00460925
push str.d745ddddf79758ab0efc31896f67c9a1
lea ecx, [ebp - 0xa0]
call fcn.0040e2d0
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x35
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
mov byte [ebp - 4], bl
push ebx
lea ecx, [ebp - 0xa0]
call fcn.00460925
push str.935af27a7d83b1f55ab574ba02e5401b
lea ecx, [ebp - 0x88]
call fcn.0040e2d0
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x36
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], bl
call fcn.00460925
push str.6fabc316602164d05eccfc1edd33ba83
lea ecx, [ebp - 0x70]
call fcn.0040e2d0
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x37
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], bl
call fcn.00460925
push str.50c8c753e31e36893b81f7546c3f53f2
lea ecx, [ebp - 0x58]
call fcn.0040e2d0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x38
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], bl
call fcn.00460925
push str.86c32b10447aa37da8371fde749c8626
lea ecx, [ebp - 0x40]
call fcn.0040e2d0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x39
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], bl
call fcn.00460925
push str.79a3eabd98d565967e4da3ea8100d61f
lea ecx, [ebp - 0xb8]
call fcn.0040e2d0
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x3a
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], bl
call fcn.00460925
push 0x22c
lea eax, [ebp - 0x4c4]
push edi
push eax
call fcn.00486960
add esp, 0xc
push edi
push 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov esi, eax
cmp esi, 0xffffffff
jne 0x469d99
mov ebx, edi
jmp 0x46a8e9
lea eax, [ebp - 0x4c4]
mov dword [ebp - 0x4c4], 0x22c
push eax
push esi
call sub.KERNEL32.dll_Process32FirstW
jmp 0x469e4e
xor eax, eax
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], edi
mov word [ebp - 0x40], ax
cmp word [ebp - 0x4a0], ax
jne 0x469dd2
mov eax, edi
jmp 0x469ddf
lea eax, [ebp - 0x4a0]
push eax
call fcn.0049899e
pop ecx
push eax
lea eax, [ebp - 0x4a0]
push eax
lea ecx, [ebp - 0x40]
call fcn.00402510
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x3b
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0046eb27
pop ecx
pop ecx
push edi
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x3d
call fcn.00402450
lea eax, [ebp - 0x58]
push eax
call fcn.0046e64b
cmp dword [ebp - 0x44], 0x10
lea eax, [ebp - 0x58]
cmovae eax, dword [ebp - 0x58]
push eax
lea eax, [ebp - 0x4f4]
push eax
call fcn.0046af3e
add esp, 0xc
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x58]
push edi
push ebx
call fcn.00460925
lea eax, [ebp - 0x4c4]
push eax
push esi
call sub.KERNEL32.dll_Process32NextW
test eax, eax
jne 0x469db5
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov dword [ebp - 0x44], 7
mov esi, str.SmartCloudWB
mov dword [ebp - 0x48], edi
push esi
mov word [ebp - 0x58], ax
call fcn.0049899e
pop ecx
push eax
push esi
lea ecx, [ebp - 0x58]
call fcn.00402510
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x3e
push eax
lea eax, [ebp - 0xd0]
push eax
call fcn.0046eb27
pop ecx
pop ecx
push edi
push ebx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x40
call fcn.00402450
mov eax, dword [ebp - 0x4f4]
mov ebx, dword [eax]
mov dword [ebp - 0x4d8], ebx
mov dword [ebp - 0x4d4], ebx
cmp ebx, eax
je 0x46a01f
call fcn.00460351
test al, al
je 0x469edf
sub esp, dword [ecx - 0x57]
scasb al, byte es:[edi]
daa
aaa
dec ebx
out 0x7d, eax
mov edi, 0xdb18683a
dec esi
fdivrp st(4)
cwde
call fcn.004602c7
test al, al
je 0x469f01
loop 0x469eff
inc esi
salc
lodsb al, byte [esi]
add ah, byte [edi + 0x44d386d4]
invalid
xor edi, edi
mov eax, dword [ebp - 0x4d8]
add eax, 0x10
cmp dword [eax + 0x14], 0x10
jb 0x469f12
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x40]
call fcn.0040e2d0
mov ebx, 0x5cb910
mov byte [ebp - 4], 0x41
push ebx
call fcn.00498880
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x40]
call fcn.0040dda0
push 0xffffffffffffffff
push edi
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x40]
call fcn.0040dca0
sub esp, 0x18
lea eax, [ebp - 0x40]
mov ecx, esp
push eax
call fcn.00460992
lea eax, [ebp - 0x70]
push eax
call fcn.0046d16f
add esp, 0x1c
mov eax, dword [ebp - 0x4d0]
xor ebx, ebx
inc ebx
mov byte [ebp - 4], 0x42
mov esi, eax
cmp eax, dword [ebp - 0x4cc]
je 0x469fbf
cmp dword [esi + 0x14], 0x10
jb 0x469f82
mov eax, dword [esi]
jmp 0x469f84
mov eax, esi
push eax
lea ecx, [ebp - 0x88]
call fcn.0040e2d0
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x70]
call fcn.0046b260
neg eax
lea ecx, [ebp - 0x88]
push edi
sbb al, al
push ebx
add al, 1
jne 0x469ffc
call fcn.00460925
add esi, 0x18
cmp esi, dword [ebp - 0x4cc]
jne 0x469f78
push edi
push ebx
lea ecx, [ebp - 0x70]
call fcn.00460925
push edi
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x40
call fcn.00460925
lea ecx, [ebp - 0x4d4]
call fcn.004678a6
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x4d8], eax
cmp eax, dword [ebp - 0x4f4]
jne 0x469ec3
jmp 0x46a01f
mov dword [ebp - 0x4e8], ebx
call fcn.00460925
push edi
push ebx
lea ecx, [ebp - 0x70]
call fcn.00460925
push edi
push ebx
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x40
call fcn.00460925
call fcn.00460648
test al, al
je 0x46a048
nop
shr edx, 0x4e
ja 0x46a037
ret 0xdc00
shr dword [esp + edx], 0xf7
mov edx, 0xaf3be767
adc al, 0x16
sbb al, 0x44
cmp ebp, dword [edi + 0x441c1614]
invalid
call fcn.00460603
test al, al
je 0x46a061
and eax, dword [esi + 0x54]
inc ebx
xor al, 0x6a
sti
js 0x46a06b
cmp bh, ch
fisub dword [esi + 0x6ce84dfb]
invalid
call fcn.004606d2
test al, al
je 0x46a087
jp 0x46a0a6
cmp al, byte [edx + 0x6e]
inc edx
outsb dx, byte [esi]
and bl, byte [edx + 0x31b744c]
leave
in eax, 0x5a
and dword [edx + edx*4 + 0xf17c48f], edx
fucomi st(2)
aam 0xce
jp 0x46a03e
stc
scasb al, byte es:[edi]
mov ebx, dword [ebp - 0x4e8]
test ebx, ebx
jne 0x46a8db
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x2c], edi
push str.a26a4254d704464bc57de2c827618092
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x43
call fcn.0040e2d0
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x44
push eax
lea ecx, [ebp - 0x34]
call fcn.00423cf0
push edi
inc ebx
mov byte [ebp - 4], 0x43
push ebx
lea ecx, [ebp - 0xb8]
call fcn.00460925
push str.d05b18ab72ae4216f23f240c53d9835c
lea ecx, [ebp - 0x28]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x45
push eax
lea ecx, [ebp - 0x34]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x43
call fcn.00460925
push str.0bdc79b8ee9913959e11a50dc5f1cad6
lea ecx, [ebp - 0xa0]
call fcn.0040e2d0
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x46
push eax
lea ecx, [ebp - 0x34]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x43
call fcn.00460925
push str.428dfad24b1e67a4c4e8d782dec25a03
lea ecx, [ebp - 0x70]
call fcn.0040e2d0
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x47
push eax
lea ecx, [ebp - 0x34]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x43
call fcn.00460925
push str.b5581bf0721f51c21d2e29e5e978caa9
lea ecx, [ebp - 0x58]
call fcn.0040e2d0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x48
push eax
lea ecx, [ebp - 0x34]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x43
call fcn.00460925
push str.36a28ce1ba48e49337e21f322085306f
lea ecx, [ebp - 0x1a8]
call fcn.0040e2d0
mov byte [ebp - 4], 0x49
lea eax, [ebp - 0x1a8]
push eax
lea ecx, [ebp - 0x34]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x43
call fcn.00460925
push str.adef9190c7e46d4085164546fed9592e
lea ecx, [ebp - 0x1c0]
call fcn.0040e2d0
lea eax, [ebp - 0x1c0]
mov byte [ebp - 4], 0x4a
push eax
lea ecx, [ebp - 0x34]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 0x43
call fcn.00460925
push str.4ba40f07ac7e5a1d5a84b92b1bf30c94
lea ecx, [ebp - 0xe8]
call fcn.0040e2d0
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 0x4b
push eax
lea ecx, [ebp - 0x34]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x43
call fcn.00460925
push str.ad5b101b86f11cce2bd17be1f2236ec3
lea ecx, [ebp - 0x190]
call fcn.0040e2d0
lea eax, [ebp - 0x190]
mov byte [ebp - 4], 0x4c
push eax
lea ecx, [ebp - 0x34]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 0x43
call fcn.00460925
push str.f0519487eaf76e4f4d230e4bf20f580e
lea ecx, [ebp - 0x178]
call fcn.0040e2d0
lea eax, [ebp - 0x178]
mov byte [ebp - 4], 0x4d
push eax
lea ecx, [ebp - 0x34]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x43
call fcn.00460925
push str.a66974640297cbed09341b8fabb3de97
lea ecx, [ebp - 0x160]
call fcn.0040e2d0
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 0x4e
push eax
lea ecx, [ebp - 0x34]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0x43
call fcn.00460925
push str.5f4028ff91e3349a6c6919e205148523
lea ecx, [ebp - 0x148]
call fcn.0040e2d0
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x4f
push eax
lea ecx, [ebp - 0x34]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 0x43
call fcn.00460925
push str.ceaf015891f5b642da4e78218cd4642b
lea ecx, [ebp - 0x130]
call fcn.0040e2d0
lea eax, [ebp - 0x130]
mov byte [ebp - 4], 0x50
push eax
lea ecx, [ebp - 0x34]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x43
call fcn.00460925
push str.809157be05d3f93a26bba12bab015613
lea ecx, [ebp - 0x118]
call fcn.0040e2d0
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x51
push eax
lea ecx, [ebp - 0x34]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x43
call fcn.00460925
push str.0d6cafc73b4b97a643e40164534e3cc5
lea ecx, [ebp - 0x100]
call fcn.0040e2d0
lea eax, [ebp - 0x100]
mov byte [ebp - 4], 0x52
push eax
lea ecx, [ebp - 0x34]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x43
call fcn.00460925
push str.c09d376cf3e0bcefd9fc99d5bad4734d
lea ecx, [ebp - 0x1d8]
call fcn.0040e2d0
lea eax, [ebp - 0x1d8]
mov byte [ebp - 4], 0x53
push eax
lea ecx, [ebp - 0x34]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x43
call fcn.00460925
push str.ca3f34b6de16fa780f2f931df1fdc300
lea ecx, [ebp - 0x1f0]
call fcn.0040e2d0
lea eax, [ebp - 0x1f0]
mov byte [ebp - 4], 0x54
push eax
lea ecx, [ebp - 0x34]
call fcn.00423cf0
push edi
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x1f0]
push ebx
call fcn.00460925
push str.79c343b8c64fc434eef5744db3f01261
lea ecx, [ebp - 0x208]
call fcn.0040e2d0
lea eax, [ebp - 0x208]
mov byte [ebp - 4], 0x55
push eax
lea ecx, [ebp - 0x34]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x208]
mov byte [ebp - 4], 0x43
call fcn.00460925
push str.d3463872358b23c77174d4f72c144083
lea ecx, [ebp - 0x220]
call fcn.0040e2d0
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0x56
push eax
lea ecx, [ebp - 0x34]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x43
call fcn.00460925
push str.05f4302c64dcb648aeeeac1502b7f3b8
lea ecx, [ebp - 0x238]
call fcn.0040e2d0
lea eax, [ebp - 0x238]
mov byte [ebp - 4], 0x57
push eax
lea ecx, [ebp - 0x34]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x238]
mov byte [ebp - 4], 0x43
call fcn.00460925
push str.23e3bcc3b724cb145326694b47ebb826
lea ecx, [ebp - 0x250]
call fcn.0040e2d0
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 0x58
push eax
lea ecx, [ebp - 0x34]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 0x43
call fcn.00460925
push str.49cc09aef1f55e7e6acc1d0fdd20267e
lea ecx, [ebp - 0x268]
call fcn.0040e2d0
lea eax, [ebp - 0x268]
mov byte [ebp - 4], 0x59
push eax
lea ecx, [ebp - 0x34]
call fcn.00423cf0
push edi
push ebx
lea ecx, [ebp - 0x268]
mov byte [ebp - 4], 0x43
call fcn.00460925
push str.e1254de04b23e04c4d8b667c8d54e433
lea ecx, [ebp - 0x280]
call fcn.0040e2d0
lea eax, [ebp - 0x280]
mov byte [ebp - 4], 0x5a
push eax
lea ecx, [ebp - 0x34]
call fcn.00423cf0
mov byte [ebp - 4], 0x43
push edi
push ebx
lea ecx, [ebp - 0x280]
call fcn.00460925
lea ecx, [ebp - 0x4e4]
mov dword [ebp - 0x4e4], edi
mov dword [ebp - 0x4e0], edi
call fcn.0046afac
mov dword [ebp - 0x4e4], eax
xor eax, eax
mov byte [ebp - 4], 0x5b
mov esi, 0x625f30
mov dword [ebp - 0x74], 7
push esi
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x78], edi
mov word [ebp - 0x88], ax
call fcn.004024c0
push esi
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 0x5c
call fcn.004023b0
lea eax, [ebp - 0x4d4]
mov dword [ebp - 0x4d4], edi
push eax
push 0x109
push edi
mov edi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
push reloc.OLEAUT32.dll_SysReAllocString
mov byte [ebp - 4], 0x5d
call edi
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x46a5d8
invalid
lea eax, [ebp - 0x4e4]
push eax
push dword [ebp - 0x4d4]
call fcn.0046b5d4
pop ecx
pop ecx
push dword [ebp - 0x4d4]
call esi
lea eax, [ebp - 0x4d4]
xor ebx, ebx
push eax
push 9
push ebx
push 0x5c8a60
push reloc.OLEAUT32.dll_SysReAllocString
call edi
test eax, eax
jne 0x46a610
lea eax, [ebp - 0x4e4]
push eax
push dword [ebp - 0x4d4]
call fcn.0046b5d4
pop ecx
pop ecx
push dword [ebp - 0x4d4]
call esi
lea eax, [ebp - 0x4d4]
push eax
push 9
push ebx
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
push reloc.WS2_32.dll_accept
call edi
test eax, eax
jne 0x46a646
lea eax, [ebp - 0x4e4]
push eax
push dword [ebp - 0x4d4]
call fcn.0046b5d4
pop ecx
pop ecx
push dword [ebp - 0x4d4]
call esi
lea eax, [ebp - 0x4d4]
push eax
push 0x109
push ebx
push str.SoftwareMicrosoft_
push reloc.OLEAUT32.dll_SysReAllocString
call edi
test eax, eax
jne 0x46a67f
lea eax, [ebp - 0x4e4]
push eax
push dword [ebp - 0x4d4]
call fcn.0046b5d4
pop ecx
pop ecx
push dword [ebp - 0x4d4]
call esi
mov eax, dword [ebp - 0x4e4]
mov ebx, dword [eax]
mov dword [ebp - 0x4d8], ebx
mov dword [ebp - 0x4ec], ebx
cmp ebx, eax
je 0x46a8a4
call fcn.00460579
test al, al
je 0x46a6bd
fstp dword [esi - 1]
inc dword [eax + eax*8 + 0x2ca1974]
sbb esp, dword [edx]
mov al, 0x27
xor byte [ebp - 0x5d930be7], ah
pop edi
push ecx
inc esp
jmp 0x976da0c
retf 0x1b02
call fcn.0046082b
test al, al
je 0x46a6e0
mov ch, 0xbe
pop es
ja 0x46a69c
jns 0x46a6e8
scasd eax, dword es:[edi]
pop ss
push 0x15
sbb dword [esi - 0x6e57ca51], esp
pop eax
push esp
cmp eax, edi
sbb bl, ah
cwde
or dword [edx - 0x75], esp
test dword [eax], ebp
sti
invalid
mov eax, dword [ebp - 0x4d8]
add eax, 0x10
cmp dword [eax + 0x14], 0x10
jb 0x46a6f1
adc byte [ebx + 0x72101478], al
add cl, byte [ebx + 0x4d8d5000]
nop
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x70]
call fcn.0040e2d0
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x5e
push eax
call fcn.0046e64b
pop ecx
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x58]
call fcn.00460992
push 0x5cb910
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x5f
call fcn.00412840
push 0xffffffffffffffff
xor edi, edi
lea eax, [ebp - 0xd0]
push edi
push eax
lea ecx, [ebp - 0x58]
call fcn.0040dca0
sub esp, 0x18
lea eax, [ebp - 0x58]
mov ecx, esp
push eax
call fcn.00460992
lea eax, [ebp - 0x28]
push eax
call fcn.0046d16f
add esp, 0x1c
mov eax, dword [ebp - 0x34]
mov byte [ebp - 4], 0x60
mov dword [ebp - 0x4d8], eax
cmp eax, dword [ebp - 0x30]
je 0x46a82e
call fcn.004604ef
test al, al
je 0x46a787
leave
cmp dword [edx], 0x933ef34d
lodsd eax, dword [esi]
mov dword [esi + 0x29], edi
push esi
and al, 0x68
seto bl
cmpsb byte [esi], byte es:[edi]
adc al, 0xe1
cmp eax, 0xff5cd9e8
inc dword [eax + eax*8 + 0x75301e74]
rcr dword [eax], cl
je 0x46a788
call fcn.00460465
fstp dword [edi + edi*8 - 1]
test al, al
je 0x46a7ae
xor byte [ebp - 0x2d], dh
sbb byte [edx + esi*8 + 0xc], dh
fcom qword [edi + ebp]
or al, 0xdc
adc al, 0x2f
cwde
fsub dword [ecx]
push edx
pop ds
lodsb al, byte [esi]
pop ebx
call 0xab98cf
dec esi
insb byte es:[edi], dx
jecxz 0x46a7e7
mov esi, dword [edi + 0x64e8e3f7]
pop edi
invalid
call fcn.00460717
test al, al
je 0x46a7d7
xchg ebx, eax
int 0xbc
mov ecx, 0xc387f819
dec ebp
and byte [ebx - 0x3c3428a3], al
arpl word [eax - 0x63e5c4a6], di
mov esp, 0x1e660e23
ror byte [ebx], 1
push 0xffffffffffffffd5
invalid
mov ebx, dword [ebp - 0x4d8]
cmp dword [ebx + 0x14], 0x10
jb 0x46a7e7
mov eax, dword [ebx]
jmp 0x46a7e9
mov eax, ebx
push eax
lea ecx, [ebp - 0xa0]
call fcn.0040e2d0
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xa0]
call fcn.0046b260
neg eax
lea ecx, [ebp - 0xa0]
sbb al, al
add al, 1
jne 0x46a878
xor edi, edi
push edi
push 1
call fcn.00460925
add ebx, 0x18
mov dword [ebp - 0x4d8], ebx
cmp ebx, dword [ebp - 0x30]
jne 0x46a769
push edi
push 1
lea ecx, [ebp - 0x28]
call fcn.00460925
push edi
push 1
lea ecx, [ebp - 0x58]
call fcn.00460925
push edi
push 1
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x5d
call fcn.00460925
lea ecx, [ebp - 0x4ec]
call fcn.004678a6
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x4d8], eax
cmp eax, dword [ebp - 0x4e4]
jne 0x46a69b
jmp 0x46a8a6
xor ebx, ebx
xor edi, edi
push edi
inc ebx
push ebx
call fcn.00460925
push edi
push ebx
lea ecx, [ebp - 0x28]
call fcn.00460925
push edi
push ebx
lea ecx, [ebp - 0x58]
call fcn.00460925
push edi
push ebx
lea ecx, [ebp - 0x70]
call fcn.00460925
jmp 0x46a8ac
xor edi, edi
mov ebx, dword [ebp - 0x4e8]
push edi
push 1
lea ecx, [ebp - 0x298]
call fcn.00402450
push edi
push 1
lea ecx, [ebp - 0x88]
call fcn.00402450
lea ecx, [ebp - 0x4e4]
call fcn.00467874
lea ecx, [ebp - 0x34]
call fcn.0046b198
push edi
push 1
lea ecx, [ebp - 0xd0]
call fcn.00460925
lea ecx, [ebp - 0x4d0]
call fcn.0046b198
lea ecx, [ebp - 0x4f4]
call fcn.00467874
mov eax, ebx
call fcn.004aa360
ret