Function at 0x461820
Capabilities:
Check for time delay via gettickcount
Check if file exists
Get common file path
Hash data with md5

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50d466
mov eax, dword fs:[0]
push eax
sub esp, 0x80c
mov eax, dword [0x550144]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x7fc], esi
mov eax, dword [ebp + 8]
mov dword [ebp - 0x7f0], eax
mov dword [ebp - 0x818], 0
mov dword [ebp - 0x814], 0
mov dword [ebp - 0x810], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x80c], 0
mov dword [ebp - 0x808], 0
mov dword [ebp - 0x804], 0
xor eax, eax
mov dword [ebp - 0x754], 0xf
mov dword [ebp - 0x768], eax
mov dword [ebp - 0x708], eax
mov word [ebp - 0x704], ax
mov dword [ebp - 0x758], eax
mov byte [ebp - 0x768], al
mov dword [ebp - 0x7c8], eax
mov dword [ebp - 0x7b8], eax
mov dword [ebp - 0x7b4], 0xf
mov byte [ebp - 0x7c8], al
mov dword [ebp - 0x7b0], eax
mov dword [ebp - 0x7a0], eax
mov dword [ebp - 0x79c], 0xf
mov byte [ebp - 0x7b0], al
mov dword [ebp - 0x700], eax
mov dword [ebp - 0x6f0], eax
mov dword [ebp - 0x6ec], 0xf
mov byte [ebp - 0x700], al
mov byte [ebp - 4], 5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea edx, [ebp - 0x818]
lea ecx, [ebp - 0x708]
call fcn.00471370
mov byte [ebp - 0x7f8], al
lea edx, [ebp - 0x7c8]
lea eax, [ebp - 0x80c]
push eax
lea eax, [ebp - 0x7b0]
push eax
lea ecx, [ebp - 0x768]
call fcn.00470640
lea ecx, [ebp - 0x700]
mov byte [ebp - 0x7f4], al
call fcn.0045fa90
push 0x208
mov byte [ebp - 0x800], al
lea eax, [ebp - 0x2a8]
push 0
push eax
call fcn.004dfec0
add esp, 0x14
lea eax, [ebp - 0x2a8]
push eax
push 0
push 0
push 0x8023
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov edi, dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
js 0x4619eb
push str.TencentDeskUpdate_
lea eax, [ebp - 0x2a8]
push eax
call edi
lea eax, [ebp - 0x2a8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x4619dd
lea eax, [ebp - 0x2a8]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectory]
push str.GlobalMgr.db
lea eax, [ebp - 0x2a8]
push eax
call edi
lea ecx, [esi + 4]
call fcn.0046a400
sub esp, 0x18
lea ecx, [ebp - 0x2a8]
mov edx, esp
lea eax, [ecx + 2]
mov dword [ebp - 0x7e8], eax
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 7
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x461a20
sub ecx, dword [ebp - 0x7e8]
lea eax, [ebp - 0x2a8]
sar ecx, 1
push ecx
push eax
mov ecx, edx
call fcn.0044a770
lea ecx, [esi + 4]
call fcn.0046a1c0
lea eax, [ebp - 0x818]
push eax
lea ecx, [esi + 4]
call fcn.0046a4a0
lea eax, [ebp - 0x80c]
push eax
lea ecx, [esi + 4]
call fcn.0046b3e0
push ecx
lea eax, [ebp - 0x34]
mov byte [ebp - 0x70c], 0
xorps xmm0, xmm0
mov byte [ebp - 0x14], 0
push eax
push ecx
lea edx, [ebp - 0x71c]
lea ecx, [ebp - 0x700]
movups xmmword [ebp - 0x71c], xmm0
movups xmmword [ebp - 0x34], xmm0
movups xmmword [ebp - 0x24], xmm0
call fcn.00469f20
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x6d0], 0
add esp, 0xc
mov dword [ebp - 0x6c0], 0
mov dword [ebp - 0x6bc], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x6d0], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x461ad0
sub ecx, edx
lea eax, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x6d0]
call fcn.0044c0b0
lea eax, [ebp - 0x6d0]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x7ec]
push eax
lea ecx, [esi + 0x50]
call fcn.0046d4a0
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x6bc]
cmp edx, 0x10
jb 0x461b41
mov ecx, dword [ebp - 0x6d0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x461b37
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4629ab
push edx
push ecx
call fcn.004de0ea
add esp, 8
lea ecx, [esi + 0x70]
lea eax, [ebp - 0x700]
cmp ecx, eax
je 0x461b68
cmp dword [ebp - 0x6ec], 0x10
push dword [ebp - 0x6f0]
cmovae eax, dword [ebp - 0x700]
push eax
call fcn.0044c0b0
mov al, byte [ebp - 0x7f4]
mov byte [esi + 0x88], al
lea eax, [esi + 0x20]
mov byte [esi + 0x89], 0
cmp dword [eax + 0x14], 8
jb 0x461b86
mov eax, dword [eax]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x461b99
lea ecx, [esi + 4]
call fcn.0046bd70
add esi, 0x8c
mov ecx, esi
call fcn.0046c660
sub esp, 0x18
lea ecx, [ebp - 0x2a8]
mov edx, esp
lea eax, [ecx + 2]
mov dword [ebp - 0x7e8], eax
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 7
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x461bd0
sub ecx, dword [ebp - 0x7e8]
lea eax, [ebp - 0x2a8]
sar ecx, 1
push ecx
push eax
mov ecx, edx
call fcn.0044a770
mov ecx, esi
call fcn.0046c190
mov ecx, esi
call fcn.0046c440
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp byte [ebp - 0x7f8], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x71c], xmm0
mov byte [ebp - 0x70c], 0
movups xmmword [ebp - 0x734], xmm0
mov byte [ebp - 0x724], 0
movups xmmword [ebp - 0x6e4], xmm0
mov byte [ebp - 0x6d4], 0
movups xmmword [ebp - 0xa0], xmm0
mov byte [ebp - 0x80], 0
movups xmmword [ebp - 0x90], xmm0
mov byte [ebp - 0x5c], 0
movups xmmword [ebp - 0x7c], xmm0
mov byte [ebp - 0x38], 0
movups xmmword [ebp - 0x6c], xmm0
movups xmmword [ebp - 0x58], xmm0
movups xmmword [ebp - 0x48], xmm0
je 0x461cc2
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x708]
call fcn.0045f5c0
push ecx
lea ecx, [ebp - 0xa0]
push ecx
push ecx
lea edx, [ebp - 0x71c]
mov ecx, eax
call fcn.00469f20
mov edx, dword [ebp - 0x18]
add esp, 0xc
cmp edx, 0x10
jb 0x461cc2
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x461cb8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4629b0
push edx
push ecx
call fcn.004de0ea
add esp, 8
cmp byte [ebp - 0x7f4], 0
je 0x4620d4
mov dword [ebp - 0x750], 0
mov dword [ebp - 0x740], 0
mov dword [ebp - 0x73c], 0xf
mov byte [ebp - 0x750], 0
push 0
push 0x5369fc
push 0
lea eax, [ebp - 0x750]
mov byte [ebp - 4], 7
push eax
push ecx
push dword [ebp - 0x7e8]
lea ecx, [ebp - 0x2c]
call fcn.004559a0
lea eax, [ebp - 0x768]
mov byte [ebp - 4], 8
push eax
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0x798]
call fcn.00455800
add esp, 4
push 0x5369fc
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.00455930
mov dword [ebp - 0x6d0], 0
mov dword [ebp - 0x6c0], 0
mov dword [ebp - 0x6bc], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x6d0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x6c0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x7c8]
mov byte [ebp - 4], 0xa
push eax
lea edx, [ebp - 0x6d0]
lea ecx, [ebp - 0x780]
call fcn.00455800
add esp, 4
push 0x5369fc
mov ecx, eax
mov byte [ebp - 4], 0xb
call fcn.00455930
mov dword [ebp - 0x720], 0
mov dword [ebp - 0x710], 0
mov dword [ebp - 0x70c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x720], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x710], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x7b0]
mov byte [ebp - 4], 0xc
push eax
lea edx, [ebp - 0x720]
lea ecx, [ebp - 0x7e0]
call fcn.00455800
mov esi, eax
add esp, 4
lea eax, [ebp - 0x750]
cmp eax, esi
je 0x461e8b
mov edx, dword [ebp - 0x73c]
cmp edx, 0x10
jb 0x461e63
mov ecx, dword [ebp - 0x750]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x461e59
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4629b5
push edx
push ecx
call fcn.004de0ea
add esp, 8
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x750], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x740], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov edx, dword [ebp - 0x7cc]
cmp edx, 0x10
jb 0x461ec5
mov ecx, dword [ebp - 0x7e0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x461ebb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4629b5
push edx
push ecx
call fcn.004de0ea
add esp, 8
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x7d0], 0
mov dword [ebp - 0x7cc], 0xf
mov byte [ebp - 0x7e0], 0
cmp edx, 0x10
jb 0x461f1e
mov ecx, dword [ebp - 0x720]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x461f14
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4629b5
push edx
push ecx
call fcn.004de0ea
add esp, 8
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x76c]
mov dword [ebp - 0x710], 0
mov dword [ebp - 0x70c], 0xf
mov byte [ebp - 0x720], 0
cmp edx, 0x10
jb 0x461f77
mov ecx, dword [ebp - 0x780]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x461f6d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4629b5
push edx
push ecx
call fcn.004de0ea
add esp, 8
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x6bc]
mov dword [ebp - 0x770], 0
mov dword [ebp - 0x76c], 0xf
mov byte [ebp - 0x780], 0
cmp edx, 0x10
jb 0x461fd0
mov ecx, dword [ebp - 0x6d0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x461fc6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4629b5
push edx
push ecx
call fcn.004de0ea
add esp, 8
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x784]
mov dword [ebp - 0x6c0], 0
mov dword [ebp - 0x6bc], 0xf
mov byte [ebp - 0x6d0], 0
cmp edx, 0x10
jb 0x462029
mov ecx, dword [ebp - 0x798]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46201f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4629b5
push edx
push ecx
call fcn.004de0ea
add esp, 8
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x788], 0
mov dword [ebp - 0x784], 0xf
mov byte [ebp - 0x798], 0
cmp edx, 0x10
jb 0x46207c
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x462072
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4629b5
push edx
push ecx
call fcn.004de0ea
add esp, 8
push ecx
lea eax, [ebp - 0x7c]
push eax
push ecx
lea edx, [ebp - 0x734]
lea ecx, [ebp - 0x750]
call fcn.00469f20
mov byte [ebp - 4], 5
add esp, 0xc
mov edx, dword [ebp - 0x73c]
cmp edx, 0x10
jb 0x4620d4
mov ecx, dword [ebp - 0x750]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4620ca
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4629c4
push edx
push ecx
call fcn.004de0ea
add esp, 8
cmp byte [ebp - 0x800], 0
je 0x4620f7
push ecx
lea eax, [ebp - 0x58]
push eax
push ecx
lea edx, [ebp - 0x6e4]
lea ecx, [ebp - 0x700]
call fcn.00469f20
add esp, 0xc
push 0x208
lea eax, [ebp - 0x4b0]
mov byte [ebp - 0x7e3], 0
push 0
push eax
mov byte [ebp - 0x7e2], 0
mov byte [ebp - 0x7e1], 0
call fcn.004dfec0
add esp, 0xc
lea eax, [ebp - 0x4b0]
push eax
push 0
push 0
push 0x8023
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
js 0x46217e
push str.TencentDeskUpdate_
lea eax, [ebp - 0x4b0]
push eax
call edi
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea eax, [ebp - 0x4b0]
push eax
call esi
test eax, eax
jne 0x46216e
lea eax, [ebp - 0x4b0]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectory]
push str.GlobalMgr.db
lea eax, [ebp - 0x4b0]
push eax
call edi
jmp 0x462184
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
push 0x208
lea eax, [ebp - 0x6b8]
push 0
push eax
call fcn.004dfec0
add esp, 0xc
lea eax, [ebp - 0x6b8]
push eax
push 0
push 0
push 0x801a
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
js 0x4621ee
push str.TencentDeskUpdate_
lea eax, [ebp - 0x6b8]
push eax
call edi
lea eax, [ebp - 0x6b8]
push eax
call esi
test eax, eax
jne 0x4621e0
lea eax, [ebp - 0x6b8]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectory]
push str.GlobalMgr.db
lea eax, [ebp - 0x6b8]
push eax
call edi
lea eax, [ebp - 0x6b8]
push eax
lea eax, [ebp - 0x4b0]
push eax
call fcn.004615f0
lea eax, [ebp - 0x120]
mov dword [ebp - 0x124], eax
lea ecx, [ebp - 0x124]
push 3
lea eax, [ebp - 0x4b0]
push eax
call fcn.00463b20
mov edi, dword [ebp - 0x7f0]
lea eax, [ebp - 0x7e1]
push eax
mov ecx, dword [ebp - 0x7fc]
lea eax, [ebp - 0x7e2]
push edi
push eax
push dword [ebp - 0x800]
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0xd
push dword [ebp - 0x7f4]
push dword [ebp - 0x7f8]
push eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0xa0]
push eax
push dword [ebp - 0x124]
call fcn.0045fb50
mov byte [ebp - 4], 5
lea edx, [ebp - 0x120]
mov ecx, dword [ebp - 0x124]
mov byte [ebp - 0x7e4], al
cmp ecx, edx
je 0x462295
push ecx
call fcn.004e7b3d
mov al, byte [ebp - 0x7e4]
add esp, 4
test al, al
je 0x4622a6
cmp byte [ebp - 0x7e1], 0
jne 0x46286c
cmp byte [ebp - 0x7f8], 0
je 0x4627bc
lea eax, [ebp - 0x6e8]
push eax
lea ecx, [ebp - 0x708]
call fcn.0045f5c0
cmp byte [ebp - 0x7f4], 0
mov byte [ebp - 4], 0xe
je 0x4625ff
push dword [ebp - 0x758]
cmp dword [ebp - 0x754], 0x10
lea eax, [ebp - 0x768]
cmovae eax, dword [ebp - 0x768]
push eax
push 0
push 0x5369fc
push ecx
push dword [ebp - 0x7e8]
lea ecx, [ebp - 0x2c]
call fcn.004559a0
push 0x5369fc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xf
call fcn.00455930
mov dword [ebp - 0x738], 0
mov dword [ebp - 0x728], 0
mov dword [ebp - 0x724], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x738], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x728], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x7c8]
mov byte [ebp - 4], 0x10
push eax
lea edx, [ebp - 0x738]
lea ecx, [ebp - 0x780]
call fcn.00455800
add esp, 4
push 0x5369fc
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.00455930
mov dword [ebp - 0x6d0], 0
mov dword [ebp - 0x6c0], 0
mov dword [ebp - 0x6bc], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x6d0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x6c0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x7b0]
mov byte [ebp - 4], 0x12
push eax
lea edx, [ebp - 0x6d0]
lea ecx, [ebp - 0x798]
call fcn.00455800
add esp, 4
mov byte [ebp - 4], 0x13
mov edx, eax
cmp dword [eax + 0x14], 0x10
jb 0x462400
mov edx, dword [eax]
mov edi, dword [eax + 0x10]
mov esi, dword [ebp - 0x6d4]
mov eax, esi
mov ecx, dword [ebp - 0x6d8]
sub eax, ecx
push edi
push edx
cmp edi, eax
ja 0x462444
lea eax, [ecx + edi]
cmp esi, 0x10
mov dword [ebp - 0x6d8], eax
lea eax, [ebp - 0x6e8]
cmovae eax, dword [ebp - 0x6e8]
lea esi, [eax + ecx]
push esi
call fcn.004df940
add esp, 0xc
mov byte [edi + esi], 0
jmp 0x46245d
mov byte [ebp - 0x7e8], 0
lea ecx, [ebp - 0x6e8]
push dword [ebp - 0x7e8]
push edi
call fcn.0044ff20
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x784]
cmp edx, 0x10
jb 0x46249b
mov ecx, dword [ebp - 0x798]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x462491
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4629ba
push edx
push ecx
call fcn.004de0ea
add esp, 8
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x6bc]
mov dword [ebp - 0x788], 0
mov dword [ebp - 0x784], 0xf
mov byte [ebp - 0x798], 0
cmp edx, 0x10
jb 0x4624f4
mov ecx, dword [ebp - 0x6d0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4624ea
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4629ba
push edx
push ecx
call fcn.004de0ea
add esp, 8
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x76c]
mov dword [ebp - 0x6c0], 0
mov dword [ebp - 0x6bc], 0xf
mov byte [ebp - 0x6d0], 0
cmp edx, 0x10
jb 0x46254d
mov ecx, dword [ebp - 0x780]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x462543
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4629ba
push edx
push ecx
call fcn.004de0ea
add esp, 8
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x724]
mov dword [ebp - 0x770], 0
mov dword [ebp - 0x76c], 0xf
mov byte [ebp - 0x780], 0
cmp edx, 0x10
jb 0x4625a6
mov ecx, dword [ebp - 0x738]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x46259c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4629ba
push edx
push ecx
call fcn.004de0ea
add esp, 8
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x728], 0
mov dword [ebp - 0x724], 0xf
mov byte [ebp - 0x738], 0
cmp edx, 0x10
jb 0x4625f9
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4625ef
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4629ba
push edx
push ecx
call fcn.004de0ea
add esp, 8
mov edi, dword [ebp - 0x7f0]
cmp byte [ebp - 0x7e2], 0
je 0x462707
push dword [ebp - 0x6f0]
cmp dword [ebp - 0x6ec], 0x10
lea eax, [ebp - 0x700]
cmovae eax, dword [ebp - 0x700]
push eax
push 0
push 0x5369fc
push ecx
push dword [ebp - 0x7e8]
lea ecx, [ebp - 0x6d0]
call fcn.004559a0
mov byte [ebp - 4], 0x14
lea edx, [ebp - 0x6d0]
cmp dword [ebp - 0x6bc], 0x10
mov edi, dword [ebp - 0x6d0]
mov eax, dword [ebp - 0x6d4]
cmovae edx, edi
mov esi, dword [ebp - 0x6d8]
sub eax, esi
mov ecx, dword [ebp - 0x6c0]
push ecx
push edx
cmp ecx, eax
ja 0x4626a8
cmp dword [ebp - 0x6d4], 0x10
lea eax, [ecx + esi]
mov dword [ebp - 0x6d8], eax
lea eax, [ebp - 0x6e8]
cmovae eax, dword [ebp - 0x6e8]
add esi, eax
push esi
call fcn.004df940
mov eax, dword [ebp - 0x6c0]
add esp, 0xc
mov byte [eax + esi], 0
jmp 0x4626c7
mov byte [ebp - 0x7e8], 0
push dword [ebp - 0x7e8]
push ecx
lea ecx, [ebp - 0x6e8]
call fcn.0044ff20
mov edi, dword [ebp - 0x6d0]
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x6bc]
cmp eax, 0x10
jb 0x462701
lea ecx, [eax + 1]
mov eax, edi
cmp ecx, 0x1000
jb 0x4626f7
mov edi, dword [edi - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4629bf
push ecx
push edi
call fcn.004de0ea
add esp, 8
mov edi, dword [ebp - 0x7f0]
cmp dword [ebp - 0x6d4], 0x10
lea edx, [ebp - 0x6e8]
push dword [ebp - 0x6d8]
cmovae edx, dword [ebp - 0x6e8]
lea ecx, [ebp - 0xf8]
mov dword [ebp - 0xf8], 0x67452301
mov dword [ebp - 0xf4], 0xefcdab89
mov dword [ebp - 0xf0], 0x98badcfe
mov dword [ebp - 0xec], 0x10325476
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0
call fcn.004668f0
add esp, 4
lea edx, [ebp - 0xf8]
mov ecx, edi
call fcn.004669d0
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x6d4]
cmp edx, 0x10
jb 0x46282a
mov ecx, dword [ebp - 0x6e8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4627b0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4629bf
push edx
push ecx
call fcn.004de0ea
add esp, 8
jmp 0x46282a
push edi
call fcn.004629d0
test al, al
jne 0x46282a
push 0
mov byte [ebp - 0x7e1], al
call dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
push 0x10
setns byte [ebp - 0x7e4]
call fcn.004de0ba
add esp, 4
mov esi, eax
push esi
call dword [sym.imp.ole32.dll_CoCreateGuid]
test eax, eax
jne 0x462801
movups xmm0, xmmword [esi]
mov byte [ebp - 0x7e1], 1
movups xmmword [edi], xmm0
push 0x10
push esi
call fcn.004de0ea
add esp, 8
cmp byte [ebp - 0x7e4], 0
je 0x46281b
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp byte [ebp - 0x7e1], 0
je 0x462873
push edi
call fcn.00462bb0
push ecx
mov ecx, dword [ebp - 0x7fc]
lea eax, [ebp - 0x58]
push edi
push eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.00460020
mov ecx, dword [ebp - 0x7fc]
mov al, byte [ebp - 0x7f4]
mov byte [ecx + 0x88], al
lea ecx, [ecx + 4]
mov al, byte [ebp - 0x7e2]
mov byte [ecx + 0x85], al
call fcn.0046bd70
mov byte [ebp - 0x7e3], 1
mov edx, dword [ebp - 0x6ec]
cmp edx, 0x10
jb 0x4628ad
mov ecx, dword [ebp - 0x700]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4628a3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4629c4
push edx
push ecx
call fcn.004de0ea
add esp, 8
mov edx, dword [ebp - 0x79c]
mov dword [ebp - 0x6f0], 0
mov dword [ebp - 0x6ec], 0xf
mov byte [ebp - 0x700], 0
cmp edx, 0x10
jb 0x462902
mov ecx, dword [ebp - 0x7b0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4628f8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4629c4
push edx
push ecx
call fcn.004de0ea
add esp, 8
mov edx, dword [ebp - 0x7b4]
cmp edx, 0x10
jb 0x46293c
mov ecx, dword [ebp - 0x7c8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x462932
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4629c4
push edx
push ecx
call fcn.004de0ea
add esp, 8
mov edx, dword [ebp - 0x754]
cmp edx, 0x10
jb 0x462972
mov ecx, dword [ebp - 0x768]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x462968
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4629c4
push edx
push ecx
call fcn.004de0ea
add esp, 8
lea ecx, [ebp - 0x80c]
call fcn.00463910
lea ecx, [ebp - 0x818]
call fcn.004638a0
mov al, byte [ebp - 0x7e3]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004de0fd
mov esp, ebp
pop ebp
ret 4
call fcn.004e32da
call fcn.004e32da
call fcn.004e32da
call fcn.004e32da
call fcn.004e32da
call fcn.004e32da
int3