Function at 0x46b880
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5885d5
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x6a0
mov eax, dword [0x61094c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x6a8], edi
mov dword [ebp - 0x6ac], edi
lea ecx, [ebp - 0x6a0]
mov dword [ebp - 0x6a4], 0
push 0x28
mov dword [ebp - 0x6a0], 0
push str.Microsoft_Code_Signing_PCA__expires_2012
mov dword [ebp - 0x690], 0
mov dword [ebp - 0x68c], 0xf
mov byte [ebp - 0x6a0], 0
call fcn.00425b00
mov dword [ebp - 0x6a4], 2
mov dword [ebp - 4], 1
push 0x14
mov dword [ebp - 0x688], 1
mov dword [ebp - 0x28], 0xc0ad5172
mov dword [ebp - 0x24], 0x40cf32f7
mov dword [ebp - 0x20], 0xe362e49e
mov dword [ebp - 0x1c], 0x5499bb35
mov dword [ebp - 0x18], 0xfd42d4f
mov dword [ebp - 0x684], 0
mov dword [ebp - 0x680], 0
mov dword [ebp - 0x67c], 0
call fcn.00553f41
add esp, 4
mov dword [ebp - 0x684], eax
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x680], eax
lea esi, [eax + 0x14]
push 0x14
push ecx
push eax
mov dword [ebp - 0x67c], esi
call fcn.00555c60
add esp, 0xc
mov dword [ebp - 0x680], esi
mov dword [ebp - 0x6a4], 6
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x678]
push 0x44
mov dword [ebp - 0x678], 0
push str.Microsoft_Windows_Verification_PCA__expires_Sun_Mar_15_18:05:41_2016
mov dword [ebp - 0x668], 0
mov dword [ebp - 0x664], 0xf
mov byte [ebp - 0x678], 0
call fcn.00425b00
mov dword [ebp - 0x6a4], 0xe
mov byte [ebp - 4], 3
push 0x14
mov dword [ebp - 0x660], 1
mov dword [ebp - 0x28], 0x86d2a2b1
mov dword [ebp - 0x24], 0x1bb4b695
mov dword [ebp - 0x20], 0xfb6a490a
mov dword [ebp - 0x1c], 0xede5e91e
mov dword [ebp - 0x18], 0xa9c44732
mov dword [ebp - 0x65c], 0
mov dword [ebp - 0x658], 0
mov dword [ebp - 0x654], 0
call fcn.00553f41
add esp, 4
mov dword [ebp - 0x65c], eax
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x658], eax
lea esi, [eax + 0x14]
push 0x14
push ecx
push eax
mov dword [ebp - 0x654], esi
call fcn.00555c60
add esp, 0xc
mov dword [ebp - 0x658], esi
mov dword [ebp - 0x6a4], 0x1e
mov byte [ebp - 4], 4
mov dword [ebp - 0x650], 0
mov dword [ebp - 0x640], 0
mov dword [ebp - 0x63c], 0xf
mov byte [ebp - 0x650], 0
push 0x3c
push str.Microsoft_Code_Signing_PCA__expires_Sun_Jan_25_19:32:32_2017
lea ecx, [ebp - 0x650]
call fcn.00425b00
mov dword [ebp - 0x6a4], 0x3e
mov byte [ebp - 4], 5
push 0x14
mov dword [ebp - 0x638], 1
mov dword [ebp - 0x28], 0x7bf9550
mov dword [ebp - 0x24], 0x76990d1b
mov dword [ebp - 0x20], 0x84e00ae4
mov dword [ebp - 0x1c], 0xd2e1f412
mov dword [ebp - 0x18], 0x8cb5af41
mov dword [ebp - 0x634], 0
mov dword [ebp - 0x630], 0
mov dword [ebp - 0x62c], 0
call fcn.00553f41
add esp, 4
mov dword [ebp - 0x634], eax
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x630], eax
lea esi, [eax + 0x14]
push 0x14
push ecx
push eax
mov dword [ebp - 0x62c], esi
call fcn.00555c60
add esp, 0xc
mov dword [ebp - 0x630], esi
mov dword [ebp - 0x6a4], 0x7e
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x628]
push 0x3c
mov dword [ebp - 0x628], 0
push str.Microsoft_Windows_PCA_2010__expires_Sun_Jul__6_16:50:23_2025
mov dword [ebp - 0x618], 0
mov dword [ebp - 0x614], 0xf
mov byte [ebp - 0x628], 0
call fcn.00425b00
mov dword [ebp - 0x6a4], 0xfe
mov byte [ebp - 4], 7
push 0x20
mov dword [ebp - 0x610], 1
mov dword [ebp - 0x34], 0x9666c990
mov dword [ebp - 0x30], 0x8959e770
mov dword [ebp - 0x2c], 0xef6e9e15
mov dword [ebp - 0x28], 0xb65e6269
mov dword [ebp - 0x24], 0xa6cb17ad
mov dword [ebp - 0x20], 0x6fd59e20
mov dword [ebp - 0x1c], 0x54d56556
mov dword [ebp - 0x18], 0x1252a050
mov dword [ebp - 0x60c], 0
mov dword [ebp - 0x608], 0
mov dword [ebp - 0x604], 0
call fcn.00553f41
add esp, 4
mov dword [ebp - 0x60c], eax
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x608], eax
lea esi, [eax + 0x20]
push 0x20
push ecx
push eax
mov dword [ebp - 0x604], esi
call fcn.00555c60
add esp, 0xc
mov dword [ebp - 0x608], esi
mov dword [ebp - 0x6a4], 0x1fe
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x600]
push 0x3c
mov dword [ebp - 0x600], 0
push str.Microsoft_Code_Signing_PCA__expires_Sun_Apr_26_03:00:00_2012
mov dword [ebp - 0x5f0], 0
mov dword [ebp - 0x5ec], 0xf
mov byte [ebp - 0x600], 0
call fcn.00425b00
mov dword [ebp - 0x6a4], 0x3fe
mov byte [ebp - 4], 9
push 0x14
mov dword [ebp - 0x5e8], 1
mov dword [ebp - 0x28], 0x72e3509d
mov dword [ebp - 0x24], 0x9ff49d98
mov dword [ebp - 0x20], 0x1206cd90
mov dword [ebp - 0x1c], 0x763759d8
mov dword [ebp - 0x18], 0xfcfc86b7
mov dword [ebp - 0x5e4], 0
mov dword [ebp - 0x5e0], 0
mov dword [ebp - 0x5dc], 0
call fcn.00553f41
add esp, 4
mov dword [ebp - 0x5e4], eax
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x5e0], eax
lea esi, [eax + 0x14]
push 0x14
push ecx
push eax
mov dword [ebp - 0x5dc], esi
call fcn.00555c60
add esp, 0xc
mov dword [ebp - 0x5e0], esi
mov dword [ebp - 0x6a4], 0x7fe
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x5d8]
push 0x41
mov dword [ebp - 0x5d8], 0
push str.Microsoft_Update_Signing_CA_1.1__expires_Sun_May__9_19:28:13_2021
mov dword [ebp - 0x5c8], 0
mov dword [ebp - 0x5c4], 0xf
mov byte [ebp - 0x5d8], 0
call fcn.00425b00
mov dword [ebp - 0x6a4], 0xffe
mov byte [ebp - 4], 0xb
push 0x14
mov dword [ebp - 0x5c0], 1
mov dword [ebp - 0x28], 0x874316e0
mov dword [ebp - 0x24], 0x88a27449
mov dword [ebp - 0x20], 0xe5e33acd
mov dword [ebp - 0x1c], 0x1f0a5c00
mov dword [ebp - 0x18], 0xdb43cc0f
mov dword [ebp - 0x5bc], 0
mov dword [ebp - 0x5b8], 0
mov dword [ebp - 0x5b4], 0
call fcn.00553f41
add esp, 4
mov dword [ebp - 0x5bc], eax
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x5b8], eax
lea esi, [eax + 0x14]
push 0x14
push ecx
push eax
mov dword [ebp - 0x5b4], esi
call fcn.00555c60
add esp, 0xc
mov dword [ebp - 0x5b8], esi
mov dword [ebp - 0x6a4], 0x1ffe
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x5b0]
push 0x41
mov dword [ebp - 0x5b0], 0
push str.Microsoft_Update_Signing_CA_2.1__expires_Sun_Jun_19_16:03:47_2027
mov dword [ebp - 0x5a0], 0
mov dword [ebp - 0x59c], 0xf
mov byte [ebp - 0x5b0], 0
call fcn.00425b00
mov dword [ebp - 0x6a4], 0x3ffe
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x598], 1
mov dword [ebp - 0x34], 0x4fe4215d
mov dword [ebp - 0x30], 0x3fcc4873
mov dword [ebp - 0x2c], 0xf7dea436
mov dword [ebp - 0x28], 0x71565ce2
push 0x20
mov dword [ebp - 0x24], 0x7b91d62d
mov dword [ebp - 0x20], 0x78fcd192
mov dword [ebp - 0x1c], 0x7354a879
mov dword [ebp - 0x18], 0x9d30e294
mov dword [ebp - 0x594], 0
mov dword [ebp - 0x590], 0
mov dword [ebp - 0x58c], 0
call fcn.00553f41
add esp, 4
mov dword [ebp - 0x594], eax
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x590], eax
lea esi, [eax + 0x20]
push 0x20
push ecx
push eax
mov dword [ebp - 0x58c], esi
call fcn.00555c60
add esp, 0xc
mov dword [ebp - 0x590], esi
mov dword [ebp - 0x6a4], 0x7ffe
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x588]
push 0x41
mov dword [ebp - 0x588], 0
push str.Microsoft_Update_Signing_CA_2.2__expires_Sun_Jun_19_19:03:56_2027
mov dword [ebp - 0x578], 0
mov dword [ebp - 0x574], 0xf
mov byte [ebp - 0x588], 0
call fcn.00425b00
mov dword [ebp - 0x6a4], 0xfffe
mov byte [ebp - 4], 0xf
push 0x20
mov dword [ebp - 0x570], 1
mov dword [ebp - 0x34], 0xf1cc7d72
mov dword [ebp - 0x30], 0xe32cbb15
mov dword [ebp - 0x2c], 0xd3d67b4d
mov dword [ebp - 0x28], 0x93302eca
mov dword [ebp - 0x24], 0xe971e704
mov dword [ebp - 0x20], 0xddb099d4
mov dword [ebp - 0x1c], 0xe80e5ed8
mov dword [ebp - 0x18], 0x5b23858c
mov dword [ebp - 0x56c], 0
mov dword [ebp - 0x568], 0
mov dword [ebp - 0x564], 0
call fcn.00553f41
add esp, 4
mov dword [ebp - 0x56c], eax
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x568], eax
lea esi, [eax + 0x20]
push 0x20
push ecx
push eax
mov dword [ebp - 0x564], esi
call fcn.00555c60
add esp, 0xc
mov dword [ebp - 0x568], esi
mov dword [ebp - 0x6a4], 0x1fffe
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x560]
push 0x41
mov dword [ebp - 0x560], 0
push str.Microsoft_Update_Signing_CA_2.3__expires_Sun_Jun_19_19:04:17_2027
mov dword [ebp - 0x550], 0
mov dword [ebp - 0x54c], 0xf
mov byte [ebp - 0x560], 0
call fcn.00425b00
mov dword [ebp - 0x6a4], 0x3fffe
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x548], 1
mov dword [ebp - 0x34], 0x55aa96c8
mov dword [ebp - 0x30], 0xb0136371
mov dword [ebp - 0x2c], 0x31a613e6
mov dword [ebp - 0x28], 0xbf5b86d4
mov dword [ebp - 0x24], 0x529525d7
push 0x20
mov dword [ebp - 0x20], 0x5a3e08d9
mov dword [ebp - 0x1c], 0xeceedc43
mov dword [ebp - 0x18], 0x73bac439
mov dword [ebp - 0x544], 0
mov dword [ebp - 0x540], 0
mov dword [ebp - 0x53c], 0
call fcn.00553f41
add esp, 4
mov dword [ebp - 0x544], eax
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x540], eax
lea esi, [eax + 0x20]
push 0x20
push ecx
push eax
mov dword [ebp - 0x53c], esi
call fcn.00555c60
add esp, 0xc
mov dword [ebp - 0x540], esi
mov dword [ebp - 0x6a4], 0x7fffe
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x538]
push 0x4d
mov dword [ebp - 0x538], 0
push str.Microsoft_Windows_Phone_Production_PCA_2012__expires_Sun_Jul_24_18:33:56_2027
mov dword [ebp - 0x528], 0
mov dword [ebp - 0x524], 0xf
mov byte [ebp - 0x538], 0
call fcn.00425b00
mov dword [ebp - 0x6a4], 0xffffe
mov byte [ebp - 4], 0x13
push 0x20
mov dword [ebp - 0x520], 1
mov dword [ebp - 0x34], 0xe95661a2
mov dword [ebp - 0x30], 0x57eef15b
mov dword [ebp - 0x2c], 0x4710a4e8
mov dword [ebp - 0x28], 0x5c52080c
mov dword [ebp - 0x24], 0xde6278da
mov dword [ebp - 0x20], 0x2926aacb
mov dword [ebp - 0x1c], 0xda57cdca
mov dword [ebp - 0x18], 0xadd6d6a5
mov dword [ebp - 0x51c], 0
mov dword [ebp - 0x518], 0
mov dword [ebp - 0x514], 0
call fcn.00553f41
add esp, 4
mov dword [ebp - 0x51c], eax
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x518], eax
lea esi, [eax + 0x20]
push 0x20
push ecx
push eax
mov dword [ebp - 0x514], esi
call fcn.00555c60
add esp, 0xc
mov dword [ebp - 0x518], esi
mov dword [ebp - 0x6a4], 0x1ffffe
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x510]
push 0x4b
mov dword [ebp - 0x510], 0
push str.Microsoft_Windows_Production_PCA_2011__expires_Sun_Oct_19_14_:_51_:_42_2026
mov dword [ebp - 0x500], 0
mov dword [ebp - 0x4fc], 0xf
mov byte [ebp - 0x510], 0
call fcn.00425b00
mov dword [ebp - 0x6a4], 0x3ffffe
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x4f8], 1
mov dword [ebp - 0x34], 0x10be804e
mov dword [ebp - 0x30], 0xe80d867c
mov dword [ebp - 0x2c], 0x3e4b3896
mov dword [ebp - 0x28], 0x4d5050ff
mov dword [ebp - 0x24], 0xc76ad7c2
mov dword [ebp - 0x20], 0x10f31d15
push 0x20
mov dword [ebp - 0x1c], 0x6350442a
mov dword [ebp - 0x18], 0x4621037a
mov dword [ebp - 0x4f4], 0
mov dword [ebp - 0x4f0], 0
mov dword [ebp - 0x4ec], 0
call fcn.00553f41
add esp, 4
mov dword [ebp - 0x4f4], eax
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x4f0], eax
lea esi, [eax + 0x20]
push 0x20
push ecx
push eax
mov dword [ebp - 0x4ec], esi
call fcn.00555c60
add esp, 0xc
mov dword [ebp - 0x4f0], esi
mov dword [ebp - 0x6a4], 0x7ffffe
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x4e8]
push 0x40
mov dword [ebp - 0x4e8], 0
push str.Microsoft_Code_Signing_PCA__expires_Sun_Aug_31_18_:_29_:_32_2020
mov dword [ebp - 0x4d8], 0
mov dword [ebp - 0x4d4], 0xf
mov byte [ebp - 0x4e8], 0
call fcn.00425b00
mov dword [ebp - 0x6a4], 0xfffffe
mov byte [ebp - 4], 0x17
push 0x14
mov dword [ebp - 0x4d0], 1
mov dword [ebp - 0x28], 0x3f3a5427
mov dword [ebp - 0x24], 0x22de1276
mov dword [ebp - 0x20], 0x8322c761
mov dword [ebp - 0x1c], 0x2247221
mov dword [ebp - 0x18], 0xde073af6
mov dword [ebp - 0x4cc], 0
mov dword [ebp - 0x4c8], 0
mov dword [ebp - 0x4c4], 0
call fcn.00553f41
add esp, 4
mov dword [ebp - 0x4cc], eax
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x4c8], eax
lea esi, [eax + 0x14]
push 0x14
push ecx
push eax
mov dword [ebp - 0x4c4], esi
call fcn.00555c60
add esp, 0xc
mov dword [ebp - 0x4c8], esi
mov dword [ebp - 0x6a4], 0x1fffffe
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x4c0]
push 0x45
mov dword [ebp - 0x4c0], 0
push str.Microsoft_Code_Signing_PCA_2010__expires_Sun_Jul__6_16_:_50_:_17_2025
mov dword [ebp - 0x4b0], 0
mov dword [ebp - 0x4ac], 0xf
mov byte [ebp - 0x4c0], 0
call fcn.00425b00
mov dword [ebp - 0x6a4], 0x3fffffe
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x4a8], 1
mov dword [ebp - 0x34], 0xb9f41a12
mov dword [ebp - 0x30], 0x4742a722
mov dword [ebp - 0x2c], 0x50df49ea
mov dword [ebp - 0x28], 0x9c6037de
mov dword [ebp - 0x24], 0x1f1a45c1
mov dword [ebp - 0x20], 0xb72c6be0
mov dword [ebp - 0x1c], 0xb479e0e1
mov dword [ebp - 0x18], 0x9581bd92
mov dword [ebp - 0x4a4], 0
mov dword [ebp - 0x4a0], 0
push 0x20
mov dword [ebp - 0x49c], 0
call fcn.00553f41
add esp, 4
mov dword [ebp - 0x4a4], eax
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x4a0], eax
lea esi, [eax + 0x20]
push 0x20
push ecx
push eax
mov dword [ebp - 0x49c], esi
call fcn.00555c60
add esp, 0xc
mov dword [ebp - 0x4a0], esi
mov dword [ebp - 0x6a4], 0x7fffffe
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x498]
push 0x45
mov dword [ebp - 0x498], 0
push str.Microsoft_Code_Signing_PCA_2011__expires_Sun_Jul__8_17_:_09_:_09_2026
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x484], 0xf
mov byte [ebp - 0x498], 0
call fcn.00425b00
mov dword [ebp - 0x6a4], 0xffffffe
mov byte [ebp - 4], 0x1b
push 0x20
mov dword [ebp - 0x480], 1
mov dword [ebp - 0x34], 0xa417f7f6
mov dword [ebp - 0x30], 0xddabd93a
mov dword [ebp - 0x2c], 0xdefdcec8
mov dword [ebp - 0x28], 0x6254501c
mov dword [ebp - 0x24], 0x137d5e53
mov dword [ebp - 0x20], 0xf930e607
mov dword [ebp - 0x1c], 0x142d4a54
mov dword [ebp - 0x18], 0x6ef28bfe
mov dword [ebp - 0x47c], 0
mov dword [ebp - 0x478], 0
mov dword [ebp - 0x474], 0
call fcn.00553f41
mov ecx, eax
add esp, 4
mov dword [ebp - 0x47c], ecx
mov dword [ebp - 0x478], ecx
lea eax, [ecx + 0x20]
mov dword [ebp - 0x474], eax
lea eax, [ebp - 0x14]
push ecx
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0046f020
lea ecx, [ebp - 0x6a8]
mov dword [ebp - 0x478], eax
mov dword [ebp - 0x6a8], 0
call fcn.00468f90
mov dword [ebp - 0x6a4], 0x1ffffffe
push 0x48
mov edx, str.Microsoft_Windows_Verification_PCA__expires_Sun_May__9_19_:_28_:_13_2021
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x470]
call fcn.00448fc0
add esp, 4
push 0x18
push 0xf9
push 0x74
push 0x97
push 0xd5
push 0x2b
push 0xfc
push 0x41
push 0x30
push 0x2c
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x458], 1
push 0x4c
push 0x39
push 0xa5
push 0x9a
push 0xc1
push 0xbd
push 2
push 0x5c
push 0x5e
mov edx, 0x26
lea ecx, [ebp - 0x454]
call fcn.0046d570
add esp, 0x4c
push 0x52
mov edx, str.Microsoft_Windows_Hardware_Compatibility_PCA__expires_Sun_Jun__4_17_:_15_:_46_2020
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x448]
call fcn.00448fc0
add esp, 4
push 0xc
push 0xad
push 0x15
push 0x66
push 0xbe
push 2
push 0xb4
push 0xee
push 0xc7
push 0x82
push 0x58
push 0x4d
push 0xda
push 0xb0
push 0x39
push 0xa6
push 0xa9
push 0x42
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x42c]
push 0x32
mov edx, 0x6b
mov dword [ebp - 0x430], 2
call fcn.0046d570
add esp, 0x4c
push 0x51
mov edx, str.Microsoft_Windows_Verification_Intermediate_PCA__expires_Sun_Apr_26_03:00:00_2010
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x420]
call fcn.00448fc0
add esp, 4
push 0x61
push 0xf
push 0xcb
push 0x5b
push 0x6e
push 0xe9
push 0x86
push 0xa
push 0x55
push 0x34
push 0x55
push 7
push 0xb9
push 0xcf
push 0x25
push 0x3d
push 0x42
push 0x75
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x404]
push 0x26
mov edx, 0x58
mov dword [ebp - 0x408], 1
call fcn.0046d570
add esp, 0x4c
mov byte [ebp - 4], 0x22
push 0x4a
mov edx, str.Microsoft_Marketplace_Production_CA_2011__expires_Sun_Nov_14_16:01:45_2021
lea ecx, [ebp - 0x3f8]
call fcn.00448fc0
add esp, 4
push 0x95
push 0xa4
push 0xe8
push 0xe6
push 0x76
push 0xef
push 0xac
push 0xa2
push 6
push 0x15
push 0x46
push 0x15
push 0xc5
push 0x2a
push 0x2b
push 0xf9
push 0xab
push 0x56
push 0x2a
push 0xb5
push 0x2c
push 0x39
push 1
push 0xc1
push 0xb3
push 0x8f
push 0x4d
push 0x93
push 0x7b
push 0xb2
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x3dc]
push 0x35
mov edx, 0x64
mov dword [ebp - 0x3e0], 1
call fcn.0046d670
add esp, 0x7c
push 0x40
mov edx, str.Microsoft_MarketPlace_PCA_2011__expires_Sun_Mar_28_14:19:39_2031
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x3d0]
call fcn.00448fc0
add esp, 4
push 0x78
push 0x13
push 0x72
push 0x17
push 0xee
push 0x72
push 0x3f
push 0x5f
push 0xb5
push 0xad
push 0xdc
push 0xa2
push 0x4d
push 0x55
push 0x1a
push 0xcb
push 0x50
push 0x20
push 0x8a
push 0x73
push 0x9b
push 0xbf
push 0xd3
push 0xb2
push 0x86
push 0x91
push 0xa0
push 0xcc
mov byte [ebp - 4], 0x25
mov dword [ebp - 0x3b8], 1
push 0x3d
push 0xde
push 0x9e
mov edx, 0xfc
lea ecx, [ebp - 0x3b4]
call fcn.0046d670
add esp, 0x7c
push 0x3d
mov edx, str.Microsoft_Windows_Third_Party_Component_CA_2012__expires_2027
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x3a8]
call fcn.00448fc0
add esp, 4
push 0x46
push 0xdd
push 2
push 0xdf
push 0x7f
push 0x54
push 0x13
push 0x68
push 0x82
push 0xaf
push 0x5e
push 0xfb
push 0x32
push 0xaa
push 6
push 0x77
push 0x91
push 0x72
push 0xe1
push 0xb8
push 0x1a
push 0x60
push 0xcc
push 0x1d
push 0x5c
push 0xc5
push 0x10
push 0xe3
push 0xd0
push 0xaf
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x38c]
push 0xc1
mov edx, 0xce
mov dword [ebp - 0x390], 2
call fcn.0046d670
add esp, 0x7c
push 0x3d
mov edx, str.Microsoft_Windows_Third_Party_Component_CA_2013__expires_2028
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x380]
call fcn.00448fc0
add esp, 4
push 0xd1
push 0xae
push 0x47
push 0x75
push 0x7e
push 0x99
push 0x8b
push 0xc8
push 0x47
push 0x20
push 0x11
push 0x6a
push 0xac
push 0x5a
push 0xad
push 0x6c
push 0x4a
push 0xd
push 0xef
mov byte [ebp - 4], 0x29
mov dword [ebp - 0x368], 2
push 0x84
push 0xf
push 0xc9
push 0x3f
push 0xac
push 0xa9
push 0x6f
push 0xe8
push 0x6d
push 0x4c
push 0xe4
push 0x5e
mov edx, 0xc5
lea ecx, [ebp - 0x364]
call fcn.0046d670
add esp, 0x7c
push 0x3d
mov edx, str.Microsoft_Windows_Third_Party_Component_CA_2014__expires_2029
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x358]
call fcn.00448fc0
add esp, 4
push 0xae
push 0xf0
push 0x9c
push 0x96
push 0xbd
push 0xbb
push 0xee
push 0x6f
push 0x12
push 0x55
push 0x41
push 0x75
push 0xb2
push 0x78
push 3
push 0xe9
push 0x55
push 0x49
push 0xb6
push 0x6f
push 0x6f
push 0xbc
push 0x18
push 0xf8
push 0x8e
push 8
push 0x74
push 0x90
push 0x4d
push 0x9e
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x33c]
push 0xbe
mov edx, 0xd8
mov dword [ebp - 0x340], 2
call fcn.0046d670
add esp, 0x7c
push 0x23
mov edx, str.Mcafee_sha1_cert_expires_2017_03_04
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x330]
call fcn.00448fc0
add esp, 4
push 0x9e
push 0x6f
push 0xed
push 0xde
push 0x21
push 0xbc
push 0xa0
push 0x97
push 0xe2
push 0xb7
mov byte [ebp - 4], 0x2d
mov dword [ebp - 0x318], 0
push 0x8e
push 0x2e
push 0xc8
push 0xe2
push 0xfe
push 0x55
push 9
push 0xd4
push 0xc1
mov edx, 0x32
lea ecx, [ebp - 0x314]
call fcn.0046d570
add esp, 0x4c
push 0x23
mov edx, str.Mcafee_sha1_cert_expires_2019_07_21
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x308]
call fcn.00448fc0
add esp, 4
push 0xb0
push 0x63
push 0xc3
push 0x13
push 0xd5
push 0x16
push 0x8d
push 0xad
push 0x47
push 0x39
push 0x26
push 0x3c
push 0xb6
push 0x3f
push 0x1a
push 0x44
push 0xde
push 0x64
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x2ec]
push 0x36
mov edx, 0xce
mov dword [ebp - 0x2f0], 0
call fcn.0046d570
add esp, 0x4c
push 0x25
mov edx, str.Mcafee_sha256_cert_expires_2019_07_21
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x2e0]
call fcn.00448fc0
add esp, 4
push 0x31
push 0x10
push 0xbe
push 0x48
push 0xe1
push 0x31
push 0xc0
push 0x31
push 8
push 0x10
push 0xa3
push 0x30
push 0x67
push 0x5e
push 0x7f
push 0x14
push 0xa3
push 0x69
push 0x1c
push 0xa4
push 0x40
push 0x8f
push 0xfd
push 0x9d
push 0x55
mov byte [ebp - 4], 0x31
mov dword [ebp - 0x2c8], 0
push 0x10
push 0x45
push 0x92
push 0x88
push 0xb5
push 0x1b
mov edx, 0x32
lea ecx, [ebp - 0x2c4]
call fcn.0046d670
add esp, 0x7c
push 0x38
mov edx, str.McAfee_Code_Signing_CA__expires_Sun_May_30_06:48:38_2020
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x2b8]
call fcn.00448fc0
add esp, 4
push 0x59
push 0x41
push 1
push 0x20
push 0xb0
push 0x9f
push 0x5a
push 0x60
push 0x87
push 0x60
push 0x4d
push 0x9b
push 0x35
push 0x13
push 0xd4
push 0x57
push 0xbf
push 0x93
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x29c]
push 0x80
mov edx, 0x53
mov dword [ebp - 0x2a0], 0
call fcn.0046d570
add esp, 0x4c
push 0x27
mov edx, str.McAfee_LLC_sha1_cert_expires_02_26_2022
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x290]
call fcn.00448fc0
add esp, 4
push 0x99
push 0x17
push 0x84
push 0x8f
push 0x37
push 0x87
push 0x5f
push 0xbf
push 3
push 0xd4
push 0xe8
push 0xd6
push 0x7a
push 0xda
push 0x1e
push 0x32
push 0x9b
push 0xd7
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x274]
push 0x21
mov edx, 0x65
mov dword [ebp - 0x278], 0
call fcn.0046d570
add esp, 0x4c
push 0x27
mov edx, str.McAfee_LLC_sha2_cert_expires_02_03_2022
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x268]
call fcn.00448fc0
add esp, 4
push 0xa
push 0x9f
push 0xac
push 0xd7
push 0x6b
push 0x89
push 0x9c
push 0xb8
push 0xc0
push 0xdb
push 0x39
push 3
push 0x5f
push 0x59
push 0x61
push 0xe8
push 0x81
push 0x60
push 0x6f
push 0xb7
push 0x33
push 0x6a
push 0x21
push 0x62
push 0x4d
push 0x64
push 0xd4
push 0xfc
push 0xf0
push 0x70
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x24c]
push 0x24
mov edx, 0xd0
mov dword [ebp - 0x250], 0
call fcn.0046d670
add esp, 0x7c
push 0x2f
mov edx, str.McAfee_LLC_Code_Signing_CA_2_expires_10_26_2024
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x240]
call fcn.00448fc0
add esp, 4
push 0xb3
push 0x2b
push 0xae
push 0xb6
push 0xdd
push 0x21
push 0xa7
push 0x56
push 0x37
push 0xda
push 0x6a
push 0x19
push 0x10
push 0xe5
push 0x76
push 0xa7
push 0xc3
push 0x7b
sub esp, 0x74
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x224]
mov dword [ebp - 0x228], 0
call fcn.0046d7b0
add esp, 0xbc
push 0x1d
mov edx, str.McAfee_PPL_expires_05_20_2028
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x218]
call fcn.00448fc0
add esp, 4
mov byte [ebp - 4], 0x3b
mov dword [ebp - 0x200], 0
push 0xf1
push 0x72
push 0xb8
push 0xaa
push 0x41
push 0x72
push 0xc9
push 0x80
push 0xe0
push 0xc9
push 0x8d
push 0x67
push 0x91
push 0xcd
push 0x9e
push 0xb8
push 0xde
push 0x73
push 0x6e
push 0x37
push 0xce
push 0xce
push 0xc0
push 0x8f
push 0xa
push 0x7e
push 0x72
push 0xf3
push 0x70
push 0x67
push 5
mov edx, 0xfb
lea ecx, [ebp - 0x1fc]
call fcn.0046d670
add esp, 0x7c
push 0x26
mov edx, str.McAfee_Inc_sha1_cert_expires_7_12_2022
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x1f0]
call fcn.00448fc0
add esp, 4
push 0x7e
push 0x89
push 0x8f
push 0x8c
push 0xc3
push 0x5a
push 0xf4
push 0x13
push 9
push 0x2b
push 0xd6
push 0xb5
push 0x90
push 0xba
push 0xd
push 0x42
push 0x36
push 0xb3
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x1d4]
push 0xaa
mov edx, 0xd4
mov dword [ebp - 0x1d8], 0
call fcn.0046d570
add esp, 0x4c
push 0x26
mov edx, str.McAfee_Inc_sha2_cert_expires_7_12_2022
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x1c8]
call fcn.00448fc0
add esp, 4
push 0x5a
push 0xc6
mov byte [ebp - 4], 0x3f
mov dword [ebp - 0x1b0], 0
push 0x4f
push 0x62
push 0x60
push 0x2a
push 0x49
push 0x7f
push 0
push 0x35
push 0x67
push 0x7d
push 0xd8
push 0x78
push 0x6c
push 0xc6
push 0xe0
push 0x73
push 0x33
push 0x65
push 0x31
push 0xb2
push 0xa4
push 0xf
push 0x85
push 0xb7
push 0xfb
push 0xaf
push 0xad
push 3
push 0x92
mov edx, 0xa0
lea ecx, [ebp - 0x1ac]
call fcn.0046d670
add esp, 0x7c
push 0x26
mov edx, str.McAfee_LLC_sha2_cert_expires_2_26_2022
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x1a0]
call fcn.00448fc0
add esp, 4
push 0xf0
push 0xff
push 0x5a
push 0xf5
push 0x41
push 0xf2
push 0xe7
push 0xa2
push 0x88
push 0xbb
push 0x96
push 0x31
push 0x16
push 0xf8
push 0x73
push 0x3d
push 0x2b
push 0x50
push 0xec
push 0x64
push 0x4b
push 0x66
push 0xe8
push 0x6a
push 0x7c
push 0x7d
push 0x2c
push 0xbe
push 0x1c
push 0x93
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x184]
push 0x91
mov edx, 0xd1
mov dword [ebp - 0x188], 0
call fcn.0046d670
add esp, 0x7c
mov byte [ebp - 4], 0x42
mov edx, str.McAfee__Inc._sha2_cert_expires_2_25_2022
push 0x28
lea ecx, [ebp - 0x178]
call fcn.00448fc0
add esp, 4
push 0xc4
push 0x7d
push 0x93
push 0x50
push 0x87
push 0x6a
push 0x27
push 0x1f
push 0x63
push 0x90
push 0xe
push 0x1b
push 0x4f
push 0xb6
push 0x89
push 0x56
push 0x88
push 0x23
push 0x8c
push 3
push 0x7a
push 0xab
push 0xf
push 0x23
push 0x18
push 0x92
push 0xdb
push 7
push 0xea
push 0xcf
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x15c]
push 0x1c
mov edx, 0xc6
mov dword [ebp - 0x160], 0
call fcn.0046d670
add esp, 0x7c
push 0x28
mov edx, str.McAfee__LLC._sha2_cert_expires_3_11_2024
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x150]
call fcn.00448fc0
add esp, 4
push 0xd1
push 0x4a
push 0x3e
push 0x7a
push 0x92
push 0x93
push 0x21
push 0x86
push 0x50
push 0xf9
push 0xb8
push 0x15
push 0xb6
push 0xac
push 0x3a
push 0x34
push 0x67
push 0x46
push 0x74
push 0x92
push 0xcf
push 0x95
push 0x7e
push 0x93
push 0x69
push 0xc3
push 0xe1
push 0x82
push 0x93
mov byte [ebp - 4], 0x45
mov dword [ebp - 0x138], 0
push 0xd8
push 0x2b
mov edx, 0x80
lea ecx, [ebp - 0x134]
call fcn.0046d670
add esp, 0x7c
push 0x29
mov edx, str.McAfee__LLC._sha2_cert_expires_02_03_2022
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x128]
call fcn.00448fc0
add esp, 4
push 0xa
push 0x9f
push 0xac
push 0xd7
push 0x6b
push 0x89
push 0x9c
push 0xb8
push 0xc0
push 0xdb
push 0x39
push 3
push 0x5f
push 0x59
push 0x61
push 0xe8
push 0x81
push 0x60
push 0x6f
push 0xb7
push 0x33
push 0x6a
push 0x21
push 0x62
push 0x4d
push 0x64
push 0xd4
push 0xfc
push 0xf0
push 0x70
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x10c]
push 0x24
mov edx, 0xd0
mov dword [ebp - 0x110], 0
call fcn.0046d670
add esp, 0x7c
push 0x31
mov edx, str.Microsoft_Development_PCA_2014_expires_05_28_2029
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x100]
call fcn.00448fc0
add esp, 4
push 0x4f
push 0x94
push 0x73
push 0xd4
push 0x13
push 0x50
push 0x32
push 0x80
push 0xe7
push 0x2c
push 0xe3
push 0xbd
push 0xe5
push 0x26
push 0x8e
push 0xc
push 0xa3
push 0x20
push 0x84
push 0xd1
mov byte [ebp - 4], 0x49
mov dword [ebp - 0xe8], 1
push 0x5d
push 0x8c
push 0xec
push 0x14
push 0x5e
push 0xd
push 0x23
push 0x78
push 0xfc
push 0x7d
push 0x86
mov edx, 0x2c
lea ecx, [ebp - 0xe4]
call fcn.0046d670
add esp, 0x7c
push 0x28
mov edx, str.McAfee__LLC._sha2_cert_expires_10_4_2024
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0xd8]
call fcn.00448fc0
add esp, 4
push 0xc6
push 0x41
push 0xd5
push 0xbf
push 0xf7
push 0x90
push 0xc
push 0x53
push 5
push 0xb0
push 0x54
push 0xe9
push 0x90
push 0xb1
push 0xb6
push 0x33
push 0xad
push 0x43
push 0xbc
push 0x76
push 0x39
push 0x5b
push 0x1b
push 0xb6
push 0
push 0xc3
push 0x17
push 0x1b
push 0x65
push 0xbc
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0xbc]
push 0x49
mov edx, 0x6b
mov dword [ebp - 0xc0], 0
call fcn.0046d670
add esp, 0x7c
push 0x29
mov edx, str.McAfee__Inc._sha2_cert_expires_06_14_2025
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0xb0]
call fcn.00448fc0
add esp, 4
push 0x72
push 0x38
push 0x62
push 0x93
push 0xb6
push 0xb8
push 0xbd
push 0x53
push 0x99
push 0xe6
push 0xe9
mov byte [ebp - 4], 0x4d
mov dword [ebp - 0x98], 0
push 0x86
push 0x94
push 0xd3
push 0x1c
push 0x7f
push 0xb5
push 0x82
push 0xad
push 0xc9
push 0x79
push 0x88
push 0x55
push 0x13
push 0x15
push 0x7b
push 0x42
push 0xcb
push 0xf
push 0xab
push 0x76
mov edx, 0xdc
lea ecx, [ebp - 0x94]
call fcn.0046d670
add esp, 0x7c
push 0x28
mov edx, str.McAfee__LLC_sha2_cert_expires_10_13_2026
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x88]
call fcn.00448fc0
add esp, 4
push 0xff
push 0xe6
push 0x70
push 0x8a
push 0xad
push 0xfd
push 0x87
push 0xae
push 0xbc
push 0x4e
push 0x9b
push 0x9b
push 3
push 0xcb
push 0x1f
push 0xa1
push 0x5d
push 0x60
push 0xe0
push 0xe4
push 0xf6
push 0xdb
push 0xc
push 0xa
push 0xb1
push 0x7f
push 0xed
push 0x13
push 0xfe
push 0xf7
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x6c]
push 0xd2
mov edx, 0x83
mov dword [ebp - 0x70], 0
call fcn.0046d670
add esp, 0x7c
push 0x31
mov edx, str.Windows_UEFI_CA_2023_sha2_cert_expires_06_14_2035
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x60]
call fcn.00448fc0
add esp, 4
push 0xf8
push 0x29
mov byte [ebp - 4], 0x51
mov dword [ebp - 0x48], 1
push 0xd6
push 0x8d
push 0x77
push 0x81
push 0x8a
push 0xcc
push 0x11
push 0x98
push 0x8a
push 0xba
push 0x89
push 0x7e
push 0x77
push 0x4c
push 0xa7
push 0x79
push 0x38
push 0xd8
push 0xd3
push 0xca
push 0x66
push 0x67
push 0x60
push 0x6e
push 0x2c
push 0xd3
push 0x98
push 0x9e
push 0xf2
mov edx, 0x81
lea ecx, [ebp - 0x44]
call fcn.0046d670
add esp, 0x78
mov dword [ebp - 4], 0x52
lea eax, [ebp - 0x38]
lea ecx, [ebp - 0x6a0]
push eax
push ecx
mov ecx, edi
call fcn.0046e780
push 0x45ba30
push 0x29
push 0x28
lea eax, [ebp - 0x6a0]
mov dword [ebp - 0x6a4], 0x1fffffff
push eax
mov byte [ebp - 4], 0
call fcn.0055449c
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00553d2a
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret