Function at 0x460830
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x120
call fcn.00468d20
mov eax, dword [0x5808f0]
xor eax, esp
mov dword [esp + 0x11c], eax
push esi
mov esi, dword [esp + 0x128]
mov dword [esp + 8], ecx
push edi
mov ecx, esi
mov byte [esp + 0xb], 0
xor edi, edi
mov byte [esp + 0x104], 0
mov byte [esp + 0x105], 1
mov byte [esp + 0x106], 2
mov byte [esp + 0x107], 3
mov byte [esp + 0x108], 4
mov byte [esp + 0x109], 5
mov byte [esp + 0x10a], 6
mov byte [esp + 0x10b], 7
mov byte [esp + 0x10c], 8
mov byte [esp + 0x10d], 9
mov byte [esp + 0x10e], 0xa
mov byte [esp + 0x10f], 0xb
mov byte [esp + 0x110], 0xc
mov byte [esp + 0x111], 0xd
mov byte [esp + 0x112], 0xe
mov byte [esp + 0x113], 0xf
call fcn.00424be0
test edx, edx
jg 0x46025a
jl 0x460136
cmp eax, 0xffffffff
ja 0x46025a
push ebx
push ebp
push 0
push 0
mov ecx, esi
call fcn.004249e0
mov ecx, esi
mov ebx, eax
xor ebp, ebp
call fcn.00424be0
cmp ebp, edx
jg 0x460258
jl 0x460160
cmp ebx, eax
ja 0x460258
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push eax
add ecx, 0x2c
push 0x100
push ecx
call fcn.004cdf40
add esp, 0xc
cmp ebx, 0x7530
jne 0x46019b
mov ecx, esi
call fcn.00424be0
cmp eax, 0x7534
jne 0x460194
test edx, edx
je 0x4601a3
mov byte [esp + 0x13], 1
jmp 0x4601a3
test ebx, ebx
jbe 0x46023d
push 0
push 0x10
lea edx, [esp + 0x124]
push edx
lea ebp, [edi + 0x10]
lea eax, [ebp - 0xc]
push 0
push eax
mov ecx, esi
call fcn.00424750
cmp byte [esp + 0x13], 0
je 0x4601ec
cmp ebp, ebx
jne 0x4601ec
push 0
push 4
lea ecx, [esp + 0x130]
push ecx
mov ecx, esi
call fcn.00424be0
sub eax, 4
sbb edx, 0
push edx
push eax
mov ecx, esi
call fcn.00424750
push 0
lea edx, [esp + 0x110]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x128]
push 0x10
push ecx
mov edx, ecx
push edx
call fcn.004cd630
add esp, 0x18
push 0
push 0x10
lea eax, [esp + 0x124]
push eax
push 0
push edi
mov ecx, esi
call fcn.00424860
mov edi, ebp
cmp edi, ebx
jb 0x4601a3
cmp byte [esp + 0x13], 0
je 0x46023d
push 0
push 4
jmp 0x460251
mov ecx, esi
call fcn.00424be0
mov ecx, eax
sub ecx, ebx
mov eax, 0
sbb edx, eax
push edx
push ecx
mov ecx, esi
call fcn.00424c20
pop ebp
pop ebx
mov ecx, dword [esp + 0x124]
pop edi
pop esi
xor ecx, esp
call fcn.004690b5
add esp, 0x120
ret 8
mov eax, 0x110
call fcn.00468d20
mov eax, dword [0x5808f0]
xor eax, esp
mov dword [esp + 0x10c], eax
push ebx
mov ebx, dword [esp + 0x11c]
push ebp
push esi
mov esi, dword [esp + 0x120]
push edi
mov edi, ecx
mov ecx, esi
xor ebp, ebp
mov byte [esp + 0x13], 0
call fcn.00424be0
test edx, edx
jg 0x4604a5
jl 0x4602cd
cmp eax, 0xffffffff
ja 0x4604a5
push 0
push 0
mov ecx, esi
call fcn.004249e0
mov ecx, esi
mov dword [esp + 0x14], eax
call fcn.00424be0
xor ecx, ecx
cmp ecx, edx
jg 0x4604a5
jl 0x4602f9
cmp dword [esp + 0x14], eax
ja 0x4604a5
cmp dword [edi + 0x28], 0x10
jne 0x460334
lea eax, [esp + 0x18]
push eax
push 0x80
add edi, 0x2c
push edi
call fcn.004cdf40
add esp, 0xc
cmp dword [esp + 0x14], 0x19000
jne 0x4603ec
mov ecx, esi
call fcn.00424be0
cmp eax, 0x19004
jmp 0x4603df
lea ecx, [esp + 0x18]
push ecx
push 0x100
add edi, 0x2c
push edi
call fcn.004cdf40
push str.marineelizz_inbox.com
push ebx
call fcn.0046977d
add esp, 0x14
test eax, eax
je 0x460375
cmp dword [esp + 0x14], 0x32000
jne 0x4603ec
mov ecx, esi
call fcn.00424be0
cmp eax, 0x32004
jmp 0x4603df
push str.protectdata_inbox.com
push ebx
call fcn.0046977d
add esp, 8
test eax, eax
je 0x46039f
cmp dword [esp + 0x14], 0x7530
jne 0x4603ec
mov ecx, esi
call fcn.00424be0
cmp eax, 0x7534
jmp 0x4603df
push str.xsmail_india.com
push ebx
call fcn.0046977d
add esp, 8
test eax, eax
je 0x4603c9
cmp dword [esp + 0x14], 0x7530
jne 0x4603ec
mov ecx, esi
call fcn.00424be0
cmp eax, 0x7534
jmp 0x4603df
cmp dword [esp + 0x14], 0x64000
jne 0x4603ec
mov ecx, esi
call fcn.00424be0
cmp eax, 0x64004
jne 0x4603e5
test edx, edx
je 0x4603f8
mov byte [esp + 0x13], 1
jmp 0x4603f8
mov ebx, dword [esp + 0x14]
test ebx, ebx
jbe 0x46048a
mov ebx, dword [esp + 0x14]
lea esp, [esp]
push 0
push 0x10
lea edx, [esp + 0x114]
push edx
lea edi, [ebp + 0x10]
lea eax, [edi - 0xc]
push 0
push eax
mov ecx, esi
call fcn.00424750
cmp byte [esp + 0x13], 0
je 0x460449
cmp edi, ebx
jne 0x460449
push 0
push 4
lea ecx, [esp + 0x120]
push ecx
mov ecx, esi
call fcn.00424be0
sub eax, 4
sbb edx, 0
push edx
push eax
mov ecx, esi
call fcn.00424750
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x110]
push eax
mov ecx, eax
push ecx
call fcn.004cd580
add esp, 0xc
push 0
push 0x10
lea edx, [esp + 0x114]
push edx
push 0
push ebp
mov ecx, esi
call fcn.00424860
mov ebp, edi
cmp ebp, ebx
jb 0x460400
cmp byte [esp + 0x13], 0
je 0x46048a
push 0
push 4
jmp 0x46049e
mov ecx, esi
call fcn.00424be0
mov ecx, eax
sub ecx, ebx
mov eax, 0
sbb edx, eax
push edx
push ecx
mov ecx, esi
call fcn.00424c20
mov ecx, dword [esp + 0x11c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004690b5
add esp, 0x110
ret 8
push 0xffffffffffffffff
push 0x4db2ab
mov eax, dword fs:[0]
push eax
mov eax, 0x15c
call fcn.00468d20
mov eax, dword [0x5808f0]
xor eax, esp
mov dword [esp + 0x158], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5808f0]
xor eax, esp
push eax
lea eax, [esp + 0x170]
mov dword fs:[0], eax
mov esi, dword [esp + 0x180]
lea eax, [esp + 0x18]
mov ebp, ecx
xor ebx, ebx
push eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0x160], 0
mov byte [esp + 0x161], 1
mov byte [esp + 0x162], 2
mov byte [esp + 0x163], 3
mov byte [esp + 0x164], 4
mov byte [esp + 0x165], 5
mov byte [esp + 0x166], 6
mov byte [esp + 0x167], 7
mov byte [esp + 0x168], 8
mov byte [esp + 0x169], 9
mov byte [esp + 0x16a], 0xa
mov byte [esp + 0x16b], 0xb
mov byte [esp + 0x16c], 0xc
mov byte [esp + 0x16d], 0xd
mov byte [esp + 0x16e], 0xe
mov byte [esp + 0x16f], 0xf
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], 0x77073096
mov dword [esp + 0x24], 0xee0e612c
mov dword [esp + 0x28], 0x990951ba
mov dword [esp + 0x2c], 0x76dc419
mov dword [esp + 0x30], 0x706af48f
mov dword [esp + 0x34], 0xe963a535
mov dword [esp + 0x38], 0x9e6495a3
call fcn.00401ff0
push 0x186a4
mov dword [esp + 0x17c], ebx
call fcn.004691cd
mov edi, eax
add esp, 4
cmp edi, ebx
jne 0x460623
push str.Error_allocating_memory_in_V7_decryption_n
call fcn.0041a700
mov eax, dword [esp + 0x40]
add esp, 4
mov dword [esp + 0x38], vtable.dwcl::AbstractCipher.0
cmp eax, ebx
je 0x460618
push eax
call fcn.004690f0
add esp, 4
mov dword [esp + 0x3c], ebx
mov eax, dword [esp + 0x44]
cmp eax, ebx
jmp 0x4607f8
push ebx
push ebx
mov ecx, esi
call fcn.004249e0
cmp eax, 0x186a0
ja 0x46063e
je 0x46063e
mov ecx, esi
call fcn.00424be0
jmp 0x460643
mov eax, 0x186a4
push ebx
push eax
push edi
push ebx
push ebx
mov ecx, esi
call fcn.00424750
add ebp, 0x8c
mov ebx, 4
mov dword [esp + 0x14], ebp
mov edi, edi
mov ebp, dword [edi]
test ebp, ebp
je 0x46079e
cmp ebp, 0x186a0
jne 0x460697
mov ecx, esi
call fcn.00424be0
sub eax, 1
sbb edx, 0
push edx
push eax
mov ecx, esi
call fcn.00424950
inc al
movzx eax, al
cdq
push edx
push eax
mov ecx, esi
call fcn.00424c20
lea ecx, [esp + 0x38]
call fcn.00403e90
mov ecx, eax
xor edx, edx
mov eax, ebp
div ecx
test edx, edx
je 0x4606ba
lea ecx, [esp + 0x38]
call fcn.00403e90
and ebp, 0xfffffff0
add ebp, eax
mov ecx, esi
call fcn.00424be0
xor ecx, ecx
cmp ecx, edx
jg 0x4607c8
jl 0x4606d5
cmp ebp, eax
ja 0x4607c8
lea edx, [ebp - 4]
push edx
lea eax, [edi + 4]
push eax
push edi
call fcn.00468d50
add esp, 0xc
cmp ebp, 0x186a0
jne 0x460729
mov ecx, esi
call fcn.00424be0
cmp eax, 0x186a4
jne 0x460700
test edx, edx
je 0x460729
mov ecx, esi
call fcn.00424be0
sub eax, 4
sbb edx, 0
push edx
push eax
mov ecx, esi
call fcn.004249e0
push 0
push 4
mov ecx, esi
mov dword [edi + 0x1869c], eax
call fcn.00424c20
jmp 0x460730
mov ecx, dword [edi + ebp]
mov dword [edi + ebp - 4], ecx
mov edx, dword [esp + 0x14]
push 0
push 0x20
push edx
lea ecx, [esp + 0x44]
call fcn.004014d0
cmp dword [esp + 0x44], 0
jne 0x460762
mov eax, dword [esp + 0x38]
mov edx, dword [eax]
lea ecx, [esp + 0x38]
call edx
push eax
call fcn.004691cd
add esp, 4
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x38]
mov edx, dword [eax]
lea ecx, [esp + 0x38]
call edx
mov ecx, dword [esp + 0x44]
push eax
lea eax, [esp + 0x160]
push eax
push ecx
call fcn.00468d50
add esp, 0xc
push ebp
push edi
push edi
lea ecx, [esp + 0x44]
call fcn.00401a30
sub dword [esp + 0x14], 0x20
dec ebx
test ebx, ebx
jg 0x460660
xor ebx, ebx
push ebx
push ebp
push edi
push ebx
push ebx
mov ecx, esi
call fcn.00424860
cmp ebp, 0x186a0
jae 0x4607c8
mov ecx, esi
call fcn.00424be0
sub eax, ebp
sbb edx, ebx
push edx
push eax
mov ecx, esi
call fcn.00424c20
push edi
call fcn.004690f0
mov eax, dword [esp + 0x40]
add esp, 4
mov dword [esp + 0x38], vtable.dwcl::AbstractCipher.0
test eax, eax
je 0x4607f2
push eax
call fcn.004690f0
add esp, 4
mov dword [esp + 0x3c], 0
mov eax, dword [esp + 0x44]
test eax, eax
je 0x460803
push eax
call fcn.004690f0
add esp, 4
mov ecx, dword [esp + 0x170]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x158]
xor ecx, esp
call fcn.004690b5
add esp, 0x168
ret 8
push 0xffffffffffffffff
push 0x4db26b
mov eax, dword fs:[0]
push eax
mov eax, 0x178
call fcn.00468d20
mov eax, dword [0x5808f0]
xor eax, esp
mov dword [esp + 0x174], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5808f0]
xor eax, esp
push eax
lea eax, [esp + 0x18c]
mov dword fs:[0], eax
mov esi, dword [esp + 0x19c]
lea eax, [esp + 0x34]
mov dword [esp + 0x1c], ecx
push eax
lea ecx, [esp + 0x58]
mov dword [esp + 0x38], 0xa7f45150
mov dword [esp + 0x3c], 0x65417e53
mov dword [esp + 0x40], 0xa4171ac3
mov dword [esp + 0x44], 0x5e273a96
mov dword [esp + 0x48], 0x6bab3bcb
mov dword [esp + 0x4c], 0x459d1ff1
mov dword [esp + 0x50], 0x58faacab
mov dword [esp + 0x54], 0x3e34b93
mov byte [esp + 0x17c], 0
mov byte [esp + 0x17d], 1
mov byte [esp + 0x17e], 2
mov byte [esp + 0x17f], 3
mov byte [esp + 0x180], 4
mov byte [esp + 0x181], 5
mov byte [esp + 0x182], 6
mov byte [esp + 0x183], 7
mov byte [esp + 0x184], 8
mov byte [esp + 0x185], 9
mov byte [esp + 0x186], 0xa
mov byte [esp + 0x187], 0xb
mov byte [esp + 0x188], 0xc
mov byte [esp + 0x189], 0xd
mov byte [esp + 0x18a], 0xe
mov byte [esp + 0x18b], 0xf
mov byte [esp + 0x1b], 0
call fcn.00401ff0
push 0
push 0
mov ecx, esi
mov dword [esp + 0x19c], 0
call fcn.004249e0
mov ecx, esi
mov ebp, eax
call fcn.00424be0
mov ecx, eax
add ecx, 0xfffffffc
mov edi, edx
adc edi, 0xffffffff
xor ebx, ebx
mov dword [esp + 0x2c], ecx
cmp ebx, edi
jb 0x4609c4
ja 0x460986
cmp ebp, ecx
jbe 0x4609c4
mov ecx, esi
call fcn.0043a470
mov eax, dword [esp + 0x58]
mov dword [esp + 0x54], vtable.dwcl::AbstractCipher.0
test eax, eax
je 0x4609aa
push eax
call fcn.004690f0
mov dword [esp + 0x5c], ebx
add esp, 4
mov eax, dword [esp + 0x60]
test eax, eax
je 0x460b0d
push eax
call fcn.004690f0
add esp, 4
jmp 0x460b0d
mov ecx, eax
sub ecx, ebp
sbb edx, ebx
mov dword [esp + 0x28], edx
jne 0x4609d5
cmp ecx, 0x14
jbe 0x4609e8
mov byte [esp + 0x17], 1
mov dword [esp + 0x18], ebp
mov dword [esp + 0x24], 4
jmp 0x4609f5
lea ecx, [eax - 4]
sub eax, ebp
mov dword [esp + 0x18], ecx
mov dword [esp + 0x24], eax
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0x58]
call fcn.00403e90
add eax, ebp
push 0
push eax
lea ecx, [esp + 0x60]
call fcn.00403e90
push eax
call fcn.00418180
mov ebx, eax
add esp, 0x10
test ebx, ebx
jne 0x460a4a
mov ecx, esi
call fcn.0043a470
mov eax, dword [esp + 0x58]
mov dword [esp + 0x54], vtable.dwcl::AbstractCipher.0
test eax, eax
je 0x4609aa
push eax
call fcn.004690f0
mov dword [esp + 0x5c], ebx
jmp 0x4609a7
cmp dword [esp + 0x20], ebp
jae 0x460a65
push ebx
call fcn.004690f0
add esp, 4
mov ecx, esi
call fcn.0043a470
jmp 0x460b04
cmp byte [esp + 0x17], 0
mov ecx, esi
je 0x460a91
push 0
lea eax, [ebp - 4]
push eax
push ebx
push 0
push 4
call fcn.00424750
mov edx, dword [esp + 0x2c]
push 0
push 4
lea ecx, [ebx + ebp - 4]
push ecx
push edi
push edx
mov ecx, esi
jmp 0x460a9c
mov eax, dword [esp + 0x2c]
push edi
push eax
push ebx
push 0
push 4
call fcn.00424750
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx + 0x28]
cmp eax, 0x20
jne 0x460abd
push 0
add ecx, 0x2c
push eax
push ecx
lea ecx, [esp + 0x60]
call fcn.004014d0
lea ecx, [esp + 0x178]
push ecx
lea ecx, [esp + 0x58]
call fcn.00401540
mov edi, dword [esp + 0x18]
push edi
push ebx
push ebx
lea ecx, [esp + 0x60]
call fcn.00401a30
push 0
push edi
push ebx
push 0
push 0
mov ecx, esi
call fcn.00424860
mov edx, dword [esp + 0x24]
push 0
push edx
mov ecx, esi
call fcn.00424c20
push ebx
call fcn.004690f0
add esp, 4
lea ecx, [esp + 0x54]
call fcn.0042e700
mov ecx, dword [esp + 0x18c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x174]
xor ecx, esp
call fcn.004690b5
add esp, 0x184
ret 8
push 0xffffffffffffffff
push 0x4db2ab
mov eax, dword fs:[0]
push eax
mov eax, 0x15c
call fcn.00468d20
mov eax, dword [0x5808f0]
xor eax, esp
mov dword [esp + 0x158], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5808f0]
xor eax, esp
push eax
lea eax, [esp + 0x170]
mov dword fs:[0], eax
mov esi, dword [esp + 0x180]
lea eax, [esp + 0x18]
mov ebp, ecx
push eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0x160], 0
mov byte [esp + 0x161], 1
mov byte [esp + 0x162], 2
mov byte [esp + 0x163], 3
mov byte [esp + 0x164], 4
mov byte [esp + 0x165], 5
mov byte [esp + 0x166], 6
mov byte [esp + 0x167], 7
mov byte [esp + 0x168], 8
mov byte [esp + 0x169], 9
mov byte [esp + 0x16a], 0xa
mov byte [esp + 0x16b], 0xb
mov byte [esp + 0x16c], 0xc
mov byte [esp + 0x16d], 0xd
mov byte [esp + 0x16e], 0xe
mov byte [esp + 0x16f], 0xf
mov dword [esp + 0x1c], 0x1cc
mov dword [esp + 0x20], 0x142
mov dword [esp + 0x24], 0x11b
mov dword [esp + 0x28], 0x1c6
mov dword [esp + 0x2c], 0x18c
mov dword [esp + 0x30], 0x1e8
mov dword [esp + 0x34], 0x2cb
mov dword [esp + 0x38], 0x2cd
call fcn.00401ff0
xor ebx, ebx
push 0x186a4
mov dword [esp + 0x17c], ebx
call fcn.004691cd
mov edi, eax
add esp, 4
cmp edi, ebx
jne 0x460ca7
push str.Error_allocating_memory_in_V3_decryption_n
call fcn.0041a700
mov eax, dword [esp + 0x40]
add esp, 4
mov dword [esp + 0x38], vtable.dwcl::AbstractCipher.0
cmp eax, ebx
je 0x460c9c
push eax
call fcn.004690f0
add esp, 4
mov dword [esp + 0x3c], ebx
mov eax, dword [esp + 0x44]
cmp eax, ebx
jmp 0x460e7a
push ebx
push ebx
mov ecx, esi
call fcn.004249e0
cmp eax, 0x186a0
ja 0x460cc2
je 0x460cc2
mov ecx, esi
call fcn.00424be0
jmp 0x460cc7
mov eax, 0x186a4
push ebx
push eax
push edi
push ebx
push ebx
mov ecx, esi
call fcn.00424750
add ebp, 0x10c
mov ebx, 8
mov dword [esp + 0x14], ebp
mov ebp, dword [edi]
test ebp, ebp
je 0x460e20
cmp ebp, 0x186a0
jne 0x460d19
mov ecx, esi
call fcn.00424be0
sub eax, 1
sbb edx, 0
push edx
push eax
mov ecx, esi
call fcn.00424950
inc al
movzx eax, al
cdq
push edx
push eax
mov ecx, esi
call fcn.00424c20
lea ecx, [esp + 0x38]
call fcn.00403e90
mov ecx, eax
xor edx, edx
mov eax, ebp
div ecx
test edx, edx
je 0x460d3c
lea ecx, [esp + 0x38]
call fcn.00403e90
and ebp, 0xfffffff0
add ebp, eax
mov ecx, esi
call fcn.00424be0
xor ecx, ecx
cmp ecx, edx
jg 0x460e4a
jl 0x460d57
cmp ebp, eax
ja 0x460e4a
lea edx, [ebp - 4]
push edx
lea eax, [edi + 4]
push eax
push edi
call fcn.00468d50
add esp, 0xc
cmp ebp, 0x186a0
jne 0x460dab
mov ecx, esi
call fcn.00424be0
cmp eax, 0x186a4
jne 0x460d82
test edx, edx
je 0x460dab
mov ecx, esi
call fcn.00424be0
sub eax, 4
sbb edx, 0
push edx
push eax
mov ecx, esi
call fcn.004249e0
push 0
push 4
mov ecx, esi
mov dword [edi + 0x1869c], eax
call fcn.00424c20
jmp 0x460db2
mov ecx, dword [edi + ebp]
mov dword [edi + ebp - 4], ecx
mov edx, dword [esp + 0x14]
push 0
push 0x20
push edx
lea ecx, [esp + 0x44]
call fcn.004014d0
cmp dword [esp + 0x44], 0
jne 0x460de4
mov eax, dword [esp + 0x38]
mov edx, dword [eax]
lea ecx, [esp + 0x38]
call edx
push eax
call fcn.004691cd
add esp, 4
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x38]
mov edx, dword [eax]
lea ecx, [esp + 0x38]
call edx
mov ecx, dword [esp + 0x44]
push eax
lea eax, [esp + 0x160]
push eax
push ecx
call fcn.00468d50
add esp, 0xc
push ebp
push edi
push edi
lea ecx, [esp + 0x44]
call fcn.00401a30
sub dword [esp + 0x14], 0x20
dec ebx
test ebx, ebx
jg 0x460ce2
xor ebx, ebx
push ebx
push ebp
push edi
push ebx
push ebx
mov ecx, esi
call fcn.00424860
cmp ebp, 0x186a0
jae 0x460e4a
mov ecx, esi
call fcn.00424be0
sub eax, ebp
sbb edx, ebx
push edx
push eax
mov ecx, esi
call fcn.00424c20
push edi
call fcn.004690f0
mov eax, dword [esp + 0x40]
add esp, 4
mov dword [esp + 0x38], vtable.dwcl::AbstractCipher.0
test eax, eax
je 0x460e74
push eax
call fcn.004690f0
add esp, 4
mov dword [esp + 0x3c], 0
mov eax, dword [esp + 0x44]
test eax, eax
je 0x460e85
push eax
call fcn.004690f0
add esp, 4
mov ecx, dword [esp + 0x170]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x158]
xor ecx, esp
call fcn.004690b5
add esp, 0x168
ret 8
push 0xffffffffffffffff
push 0x4daccb
mov eax, dword fs:[0]
push eax
mov eax, 0x120
call fcn.00468d20
mov eax, dword [0x5808f0]
xor eax, esp
mov dword [esp + 0x11c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5808f0]
xor eax, esp
push eax
lea eax, [esp + 0x134]
mov dword fs:[0], eax
mov esi, dword [esp + 0x144]
xor ebx, ebx
mov ebp, ecx
mov byte [esp + 0x120], bl
mov byte [esp + 0x121], 1
mov byte [esp + 0x122], 2
mov byte [esp + 0x123], 3
mov byte [esp + 0x124], 4
mov byte [esp + 0x125], 5
mov byte [esp + 0x126], 6
mov byte [esp + 0x127], 7
mov byte [esp + 0x128], 8
mov byte [esp + 0x129], 9
mov byte [esp + 0x12a], 0xa
mov byte [esp + 0x12b], 0xb
mov byte [esp + 0x12c], 0xc
mov byte [esp + 0x12d], 0xd
mov byte [esp + 0x12e], 0xe
mov byte [esp + 0x12f], 0xf
mov dword [esp + 0x20], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x1c], vtable.dwcl::AES.0
push 0x7534
mov dword [esp + 0x140], ebx
call fcn.004691cd
mov edi, eax
add esp, 4
cmp edi, ebx
jne 0x460fd8
push str.Error_allocating_memory_in_V3_decryption_n
call fcn.0041a700
mov eax, dword [esp + 0x24]
add esp, 4
mov dword [esp + 0x1c], vtable.dwcl::AbstractCipher.0
cmp eax, ebx
je 0x460fcd
push eax
call fcn.004690f0
add esp, 4
mov dword [esp + 0x20], ebx
mov eax, dword [esp + 0x28]
cmp eax, ebx
jmp 0x4611bd
push ebx
push ebx
mov ecx, esi
call fcn.004249e0
cmp eax, 0x7530
jbe 0x4610d8
mov eax, 0x7530
add eax, 4
push ebx
push eax
push edi
push ebx
push ebx
mov ecx, esi
call fcn.00424750
add ebp, 0x10c
mov dword [esp + 0x18], 8
mov dword [esp + 0x14], ebp
mov ebp, dword [edi]
cmp ebp, ebx
je 0x461165
cmp ebp, 0x7530
jne 0x461048
mov ecx, esi
call fcn.00424be0
sub eax, 1
sbb edx, ebx
push edx
push eax
mov ecx, esi
call fcn.00424950
inc al
movzx eax, al
cdq
push edx
push eax
mov ecx, esi
call fcn.00424c20
lea ecx, [esp + 0x1c]
call fcn.00403e90
mov ecx, eax
xor edx, edx
mov eax, ebp
div ecx
test edx, edx
je 0x46106b
lea ecx, [esp + 0x1c]
call fcn.00403e90
and ebp, 0xfffffff0
add ebp, eax
mov ecx, esi
call fcn.00424be0
xor ecx, ecx
cmp ecx, edx
jg 0x4611f2
jl 0x461086
cmp ebp, eax
ja 0x4611f2
lea edx, [ebp - 4]
push edx
lea eax, [edi + 4]
push eax
push edi
call fcn.00468d50
add esp, 0xc
cmp ebp, 0x7530
jne 0x4610ea
mov ecx, esi
call fcn.00424be0
cmp eax, 0x7534
jne 0x4610b1
cmp edx, ebx
je 0x4610ea
mov ecx, esi
call fcn.00424be0
sub eax, 4
sbb edx, ebx
push edx
push eax
mov ecx, esi
call fcn.004249e0
push ebx
push 4
mov ecx, esi
mov dword [edi + 0x752c], eax
call fcn.00424c20
jmp 0x4610f1
jae 0x460ff1
mov ecx, esi
call fcn.00424be0
jmp 0x460ff4
mov ecx, dword [edi + ebp]
mov dword [edi + ebp - 4], ecx
mov edx, dword [esp + 0x14]
push ebx
push 0x20
push edx
lea ecx, [esp + 0x28]
call fcn.00401b90
cmp dword [esp + 0x28], ebx
jne 0x461121
mov eax, dword [esp + 0x1c]
mov edx, dword [eax]
lea ecx, [esp + 0x1c]
call edx
push eax
call fcn.004691cd
add esp, 4
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x1c]
mov edx, dword [eax]
lea ecx, [esp + 0x1c]
call edx
mov ecx, dword [esp + 0x28]
push eax
lea eax, [esp + 0x124]
push eax
push ecx
call fcn.00468d50
add esp, 0xc
push ebp
push edi
push edi
lea ecx, [esp + 0x28]
call fcn.00401a30
mov eax, dword [esp + 0x18]
sub dword [esp + 0x14], 0x20
dec eax
cmp eax, ebx
mov dword [esp + 0x18], eax
jg 0x461012
push ebx
push ebp
push edi
push ebx
push ebx
mov ecx, esi
call fcn.00424860
cmp ebp, 0x7530
jae 0x46118d
mov ecx, esi
call fcn.00424be0
sub eax, ebp
sbb edx, ebx
push edx
push eax
mov ecx, esi
call fcn.00424c20
push edi
call fcn.004690f0
mov eax, dword [esp + 0x24]
add esp, 4
mov dword [esp + 0x1c], vtable.dwcl::AbstractCipher.0
test eax, eax
je 0x4611b7
push eax
call fcn.004690f0
add esp, 4
mov dword [esp + 0x20], 0
mov eax, dword [esp + 0x28]
test eax, eax
je 0x4611c8
push eax
call fcn.004690f0
add esp, 4
mov ecx, dword [esp + 0x134]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x11c]
xor ecx, esp
call fcn.004690b5
add esp, 0x12c
ret 8
push edi
call fcn.004690f0
jmp 0x460fad
push 0xffffffffffffffff
push 0x4db2ab
mov eax, dword fs:[0]
push eax
mov eax, 0x15c
call fcn.00468d20
mov eax, dword [0x5808f0]
xor eax, esp
mov dword [esp + 0x158], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5808f0]
xor eax, esp
push eax
lea eax, [esp + 0x170]
mov dword fs:[0], eax
mov esi, dword [esp + 0x180]
lea eax, [esp + 0x18]
mov ebp, ecx
xor ebx, ebx
push eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0x160], 0
mov byte [esp + 0x161], 1
mov byte [esp + 0x162], 2
mov byte [esp + 0x163], 3
mov byte [esp + 0x164], 4
mov byte [esp + 0x165], 5
mov byte [esp + 0x166], 6
mov byte [esp + 0x167], 7
mov byte [esp + 0x168], 8
mov byte [esp + 0x169], 9
mov byte [esp + 0x16a], 0xa
mov byte [esp + 0x16b], 0xb
mov byte [esp + 0x16c], 0xc
mov byte [esp + 0x16d], 0xd
mov byte [esp + 0x16e], 0xe
mov byte [esp + 0x16f], 0xf
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], 0x77073096
mov dword [esp + 0x24], 0xee0e612c
mov dword [esp + 0x28], 0x990951ba
mov dword [esp + 0x2c], 0x76dc419
mov dword [esp + 0x30], 0x706af48f
mov dword [esp + 0x34], 0xe963a535
mov dword [esp + 0x38], 0x9e6495a3
call fcn.00401ff0
push 0x186a4
mov dword [esp + 0x17c], ebx
call fcn.004691cd
mov edi, eax
add esp, 4
cmp edi, ebx
jne 0x461363
push str.Error_allocating_memory_in_V7_decryption_n
call fcn.0041a700
mov eax, dword [esp + 0x40]
add esp, 4
mov dword [esp + 0x38], vtable.dwcl::AbstractCipher.0
cmp eax, ebx
je 0x461358
push eax
call fcn.004690f0
add esp, 4
mov dword [esp + 0x3c], ebx
mov eax, dword [esp + 0x44]
cmp eax, ebx
jmp 0x461538
push ebx
push ebx
mov ecx, esi
call fcn.004249e0
cmp eax, 0x7d00
ja 0x46137e
je 0x46137e
mov ecx, esi
call fcn.00424be0
jmp 0x461383
mov eax, 0x7d04
push ebx
push eax
push edi
push ebx
push ebx
mov ecx, esi
call fcn.00424750
add ebp, 0x8c
mov ebx, 4
mov dword [esp + 0x14], ebp
mov edi, edi
mov ebp, dword [edi]
test ebp, ebp
je 0x4614de
cmp ebp, 0x7d00
jne 0x4613d7
mov ecx, esi
call fcn.00424be0
sub eax, 1
sbb edx, 0
push edx
push eax
mov ecx, esi
call fcn.00424950
inc al
movzx eax, al
cdq
push edx
push eax
mov ecx, esi
call fcn.00424c20
lea ecx, [esp + 0x38]
call fcn.00403e90
mov ecx, eax
xor edx, edx
mov eax, ebp
div ecx
test edx, edx
je 0x4613fa
lea ecx, [esp + 0x38]
call fcn.00403e90
and ebp, 0xfffffff0
add ebp, eax
mov ecx, esi
call fcn.00424be0
xor ecx, ecx
cmp ecx, edx
jg 0x461508
jl 0x461415
cmp ebp, eax
ja 0x461508
lea edx, [ebp - 4]
push edx
lea eax, [edi + 4]
push eax
push edi
call fcn.00468d50
add esp, 0xc
cmp ebp, 0x7d00
jne 0x461469
mov ecx, esi
call fcn.00424be0
cmp eax, 0x7d04
jne 0x461440
test edx, edx
je 0x461469
mov ecx, esi
call fcn.00424be0
sub eax, 4
sbb edx, 0
push edx
push eax
mov ecx, esi
call fcn.004249e0
push 0
push 4
mov ecx, esi
mov dword [edi + 0x7cfc], eax
call fcn.00424c20
jmp 0x461470
mov ecx, dword [edi + ebp]
mov dword [edi + ebp - 4], ecx
mov edx, dword [esp + 0x14]
push 0
push 0x20
push edx
lea ecx, [esp + 0x44]
call fcn.004014d0
cmp dword [esp + 0x44], 0
jne 0x4614a2
mov eax, dword [esp + 0x38]
mov edx, dword [eax]
lea ecx, [esp + 0x38]
call edx
push eax
call fcn.004691cd
add esp, 4
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x38]
mov edx, dword [eax]
lea ecx, [esp + 0x38]
call edx
mov ecx, dword [esp + 0x44]
push eax
lea eax, [esp + 0x160]
push eax
push ecx
call fcn.00468d50
add esp, 0xc
push ebp
push edi
push edi
lea ecx, [esp + 0x44]
call fcn.00401a30
sub dword [esp + 0x14], 0x20
dec ebx
test ebx, ebx
jg 0x4613a0
xor ebx, ebx
push ebx
push ebp
push edi
push ebx
push ebx
mov ecx, esi
call fcn.00424860
cmp ebp, 0x7d00
jae 0x461508
mov ecx, esi
call fcn.00424be0
sub eax, ebp
sbb edx, ebx
push edx
push eax
mov ecx, esi
call fcn.00424c20
push edi
call fcn.004690f0
mov eax, dword [esp + 0x40]
add esp, 4
mov dword [esp + 0x38], vtable.dwcl::AbstractCipher.0
test eax, eax
je 0x461532
push eax
call fcn.004690f0
add esp, 4
mov dword [esp + 0x3c], 0
mov eax, dword [esp + 0x44]
test eax, eax
je 0x461543
push eax
call fcn.004690f0
add esp, 4
mov ecx, dword [esp + 0x170]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x158]
xor ecx, esp
call fcn.004690b5
add esp, 0x168
ret 8
mov eax, dword [ecx + 0x24]
add eax, 0xffffffcf
cmp eax, 6
ja case.default.0x46157b
jmp dword [eax*4 + 0x4615a8]
jmp 0x460280
jmp 0x460070
jmp 0x460b40
jmp 0x460eb0
jmp 0x460830
jmp 0x4604c0
jmp 0x461200
ret 8