Function at 0x4b9638
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebx
mov ebx, ecx
push esi
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0x664]
call dword [sym.imp.Qt5Widgets.dll_public:_int___thiscall_QTableWidget::rowCount_void_const]
mov esi, eax
sub esi, 1
js 0x451473
push edi
mov edi, dword [sym.imp.Qt5Widgets.dll_public:_void___thiscall_QTableWidget::removeRow_int_]
mov ecx, dword [ebx + 0x18]
push esi
mov ecx, dword [ecx + 0x664]
call edi
sub esi, 1
jns 0x451461
pop edi
pop esi
pop ebx
ret
push ebx
mov ebx, ecx
push esi
mov ecx, dword [ebx + 0x18]
mov ecx, dword [ecx + 0x660]
call dword [sym.imp.Qt5Widgets.dll_public:_int___thiscall_QTableWidget::rowCount_void_const]
mov esi, eax
sub esi, 1
js 0x4515a3
push edi
mov edi, dword [sym.imp.Qt5Widgets.dll_public:_void___thiscall_QTableWidget::removeRow_int_]
mov ecx, dword [ebx + 0x18]
push esi
mov ecx, dword [ecx + 0x660]
call edi
sub esi, 1
jns 0x451591
pop edi
pop esi
pop ebx
ret
push esi
mov esi, ecx
mov ecx, dword [esi + 0x18]
mov ecx, dword [ecx + 0x660]
call dword [sym.imp.Qt5Widgets.dll_public:_int___thiscall_QTableWidget::currentRow_void_const]
test eax, eax
js 0x451f95
mov ecx, dword [esi + 0x18]
mov ecx, dword [ecx + 0x660]
call dword [sym.imp.Qt5Widgets.dll_public:_int___thiscall_QTableWidget::currentRow_void_const]
mov ecx, dword [esi + 0x18]
push eax
mov ecx, dword [ecx + 0x660]
call dword [sym.imp.Qt5Widgets.dll_public:_void___thiscall_QTableWidget::removeRow_int_]
pop esi
ret
push 4
call fcn.0046ce70
ret
push 0xf
call fcn.0046ce70
ret
push 8
call fcn.0046ce70
ret
push 7
call fcn.0046ce70
ret
push 0xb
call fcn.0046ce70
ret
push 0x11
call fcn.0046ce70
ret
push 0xc
call fcn.0046ce70
ret
push 0x12
call fcn.0046ce70
ret
push 9
call fcn.0046ce70
ret
push 0xd
call fcn.0046ce70
ret
push 5
call fcn.0046ce70
ret
push 0xe
call fcn.0046ce70
ret
push 6
call fcn.0046ce70
ret
push 0
call fcn.0046ce70
ret
push 2
call fcn.0046ce70
ret
push 1
call fcn.0046ce70
ret
push 3
call fcn.0046ce70
ret
push 0xa
call fcn.0046ce70
ret
push 0x10
call fcn.0046ce70
ret
push ebp
mov ebp, esp
cmp dword [ebp + 0xc], 0
jne case.default.0x4b9551
mov eax, dword [ebp + 0x10]
cmp eax, 0x7f
ja case.default.0x4b9551
jmp dword [eax*4 + 0x4b9a60]
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004a78e0
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
push dword [eax + 4]
call fcn.004a6d70
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov eax, dword [eax + 4]
push dword [eax]
call fcn.00450130
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
push dword [eax + 8]
push dword [eax + 4]
call fcn.00450560
pop ebp
ret
mov ecx, dword [ebp + 8]
pop ebp
jmp 0x463e40
mov ecx, dword [ebp + 8]
pop ebp
jmp 0x463e50
mov ecx, dword [ebp + 8]
pop ebp
jmp 0x463e70
mov ecx, dword [ebp + 8]
pop ebp
jmp 0x463d70
mov ecx, dword [ebp + 8]
pop ebp
jmp 0x463e10
mov ecx, dword [ebp + 8]
pop ebp
jmp 0x463e30
mov ecx, dword [ebp + 8]
pop ebp
jmp 0x463da0
mov ecx, dword [ebp + 8]
pop ebp
jmp 0x463d90
mov ecx, dword [ebp + 8]
pop ebp
jmp 0x463df0
mov ecx, dword [ebp + 8]
pop ebp
jmp 0x463e80
mov ecx, dword [ebp + 8]
pop ebp
jmp 0x463e20
mov ecx, dword [ebp + 8]
pop ebp
jmp 0x463dc0
mov ecx, dword [ebp + 8]
pop ebp
jmp 0x463e60
mov ecx, dword [ebp + 8]
pop ebp
jmp 0x463e00
mov ecx, dword [ebp + 8]
pop ebp
jmp 0x463d80
mov ecx, dword [ebp + 8]
pop ebp
jmp 0x463de0
mov ecx, dword [ebp + 8]
pop ebp
jmp 0x463db0
mov ecx, dword [ebp + 8]
pop ebp
jmp 0x463dd0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00458240
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov eax, dword [eax + 4]
movzx eax, byte [eax]
push eax
call fcn.00450840
pop ebp
ret
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00464c80
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00463720
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004569c0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00455e60
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00462200
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004620e0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00456db0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00451210
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00451110
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004515b0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00456ad0
mov eax, dword [ebp + 0x14]
sub esp, 8
mov ecx, dword [ebp + 8]
mov eax, dword [eax + 4]
movsd xmm0, qword [eax]
movsd qword [esp], xmm0
call fcn.004664b0
pop ebp
ret
mov eax, dword [ebp + 0x14]
sub esp, 8
mov ecx, dword [ebp + 8]
mov eax, dword [eax + 4]
movsd xmm0, qword [eax]
movsd qword [esp], xmm0
call fcn.00466470
pop ebp
ret
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004654e0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00457ab0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00455180
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00456c90
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00457c10
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00451fa0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004573d0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004570f0
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov eax, dword [eax + 4]
push dword [eax]
call fcn.004509a0
pop ebp
ret
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004577a0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004578f0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00455d90
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00461800
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00465e20
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004516d0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00455390
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00451480
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004559d0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00458160
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00450d70
mov ecx, dword [ebp + 8]
pop ebp
jmp 0x451f60
mov ecx, dword [ebp + 8]
pop ebp
jmp 0x451570
mov ecx, dword [ebp + 8]
pop ebp
jmp 0x451440
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00454850
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004662b0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00463ea0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.0045b7a0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00451d70
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00451ea0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00464390
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004648f0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004644b0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00463630
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004634c0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00456f50
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00450f30
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004653b0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00451c60
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00455ca0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00450de0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00457e70
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00461e90
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004517c0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00461fa0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004518d0
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov eax, dword [eax + 4]
movzx eax, byte [eax]
push eax
call fcn.00450980
pop ebp
ret
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00453270
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00452170
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004520b0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00454630
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00454570
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00465ff0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00461c60
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov eax, dword [eax + 4]
push dword [eax]
call fcn.00450a60
pop ebp
ret
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00460920
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004574c0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00466130
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00451020
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00461da0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00464bc0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00451b10
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov eax, dword [eax + 4]
push dword [eax]
call fcn.004664f0
pop ebp
ret
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00455b70
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00457040
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004557e0
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov eax, dword [eax + 4]
movzx eax, byte [eax]
push eax
call fcn.00466420
pop ebp
ret
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
mov eax, dword [eax + 4]
movzx eax, byte [eax]
push eax
call fcn.004663d0
pop ebp
ret
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00465720
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00465840
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00465b10
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004659c0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00465c90
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00465620
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00451a10
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004552a0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00455500
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004555f0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004546f0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00461990
mov ecx, dword [ebp + 8]
pop ebp
jmp 0x463e90
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00464e40
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.004650c0
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00465200
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00463a50
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00463270
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00454a00
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00450b60
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00463360
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00463c50
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00454e10
mov ecx, dword [ebp + 8]
pop ebp
jmp fcn.00450a80