Function at 0x460e40
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e0d5d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc4
push ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
xor edi, edi
mov ebx, ecx
cmp word [esi + 4], di
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x3c], edi
je 0x461725
cmp word [esi + 0xe], di
je 0x461725
cmp word [esi + 0x16], di
je 0x461725
mov ecx, dword [ebp + 0x10]
push 0x51f7a4
call fcn.0044dca0
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x1c]
push 0x51f7a4
mov dword [eax], edi
call fcn.0044dca0
lea eax, [ebx + 8]
push 1
push edi
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedCompareExchange]
cmp eax, 1
jne 0x460ed5
mov esi, dword [ebp + 8]
push 0x62
push edi
push 2
push esi
mov ecx, ebx
call fcn.00460d60
jmp 0x461738
push edi
push edi
lea ecx, [ebp - 0x34]
push edi
push ecx
mov ecx, ebx
call fcn.00460d60
lea ecx, [ebp - 0x30]
call fcn.0044d9c0
lea ecx, [ebp - 0x9c]
call fcn.0045c500
push str.RegInfo
lea ecx, [ebp - 0x9c]
mov dword [ebp - 4], 1
call fcn.0045c660
lea ecx, [ebp - 0x9c]
call fcn.0045d870
push 1
push 0x50e84c
lea edx, [ebp - 0x9c]
push str.Type
push edx
call fcn.0045c680
add esp, 0x10
lea ecx, [ebp - 0x9c]
push str.Content
call fcn.0045c660
lea ecx, [ebp - 0x9c]
call fcn.0045d870
lea eax, [esi + 0x18]
lea ecx, [ebp - 0x9c]
push eax
push 0x513b3c
push 0x513b34
push ecx
call fcn.0045c680
xor edx, edx
add esp, 0x10
mov dx, word [esi + 4]
lea ecx, [ebp - 0x9c]
lea eax, [esi + edx*2 + 0x1a]
push eax
push 0x513b3c
push str.ENCRYPT_SN
push ecx
call fcn.0045c680
xor edx, edx
xor eax, eax
mov dx, word [esi + 6]
mov ax, word [esi + 4]
add edx, eax
add esp, 0x10
lea ecx, [esi + edx*2 + 0x1c]
lea edx, [ebp - 0x9c]
push ecx
push 0x513b3c
push str.CName
push edx
call fcn.0045c680
xor eax, eax
xor ecx, ecx
mov ax, word [esi + 4]
mov cx, word [esi + 8]
xor edx, edx
add eax, ecx
mov dx, word [esi + 6]
add esp, 0x10
add eax, edx
lea ecx, [ebp - 0x9c]
lea eax, [esi + eax*2 + 0x1e]
push eax
push 0x513b3c
push str.UName
push ecx
call fcn.0045c680
add esp, 0x10
xor edx, edx
mov dx, word [esi + 0xa]
xor eax, eax
mov ax, word [esi + 4]
xor ecx, ecx
add edx, eax
mov cx, word [esi + 6]
xor eax, eax
mov ax, word [esi + 8]
add edx, ecx
add edx, eax
lea ecx, [esi + edx*2 + 0x20]
lea edx, [ebp - 0x9c]
push ecx
push 0x513b3c
push 0x513afc
push edx
call fcn.0045c680
xor eax, eax
xor ecx, ecx
mov ax, word [esi + 0xc]
mov cx, word [esi + 0xa]
xor edx, edx
add eax, ecx
mov dx, word [esi + 4]
xor ecx, ecx
mov cx, word [esi + 6]
add eax, edx
xor edx, edx
add eax, ecx
mov dx, word [esi + 8]
add esp, 0x10
add eax, edx
lea ecx, [ebp - 0x9c]
lea eax, [esi + eax*2 + 0x22]
push eax
push 0x513b3c
push str.Mail
push ecx
call fcn.0045c680
xor edx, edx
xor eax, eax
mov dx, word [esi + 0xc]
mov ax, word [esi + 0xa]
xor ecx, ecx
add edx, eax
mov cx, word [esi + 4]
xor eax, eax
mov ax, word [esi + 6]
add edx, ecx
xor ecx, ecx
add edx, eax
mov cx, word [esi + 8]
xor eax, eax
mov ax, word [esi + 0xe]
add edx, ecx
add edx, eax
add esp, 0x10
lea ecx, [esi + edx*2 + 0x24]
lea edx, [ebp - 0x9c]
push ecx
push 0x513b3c
push str.SName
push edx
call fcn.0045c680
xor eax, eax
xor ecx, ecx
mov ax, word [esi + 0x10]
mov cx, word [esi + 0xc]
xor edx, edx
add eax, ecx
mov dx, word [esi + 0xa]
xor ecx, ecx
mov cx, word [esi + 4]
add eax, edx
xor edx, edx
add eax, ecx
mov dx, word [esi + 6]
xor ecx, ecx
mov cx, word [esi + 8]
add eax, edx
add esp, 0x10
add eax, ecx
xor edx, edx
mov dx, word [esi + 0xe]
add eax, edx
lea ecx, [ebp - 0x9c]
lea eax, [esi + eax*2 + 0x26]
push eax
push 0x513b3c
push str.SVersion
push ecx
call fcn.0045c680
add esp, 0x10
mov ecx, esi
call fcn.00461750
xor edx, edx
xor ecx, ecx
mov dx, word [esi + 4]
mov cx, word [esi + 0xc]
lea eax, [eax + edx*2 + 2]
xor edx, edx
mov dx, word [esi + 0x12]
add ecx, edx
xor edx, edx
mov dx, word [esi + 0x10]
add ecx, edx
xor edx, edx
mov dx, word [esi + 0xa]
add ecx, edx
xor edx, edx
mov dx, word [esi + 6]
add ecx, edx
xor edx, edx
mov dx, word [esi + 8]
add ecx, edx
xor edx, edx
mov dx, word [esi + 0xe]
add ecx, edx
lea eax, [eax + ecx*2 + 0xe]
lea ecx, [ebp - 0x9c]
push eax
push 0x513b3c
push str.SHash
push ecx
call fcn.0045c680
add esp, 0x10
mov ecx, esi
call fcn.00461760
xor edx, edx
xor ecx, ecx
mov dx, word [esi + 6]
mov cx, word [esi + 0x14]
lea eax, [eax + edx*2 + 2]
xor edx, edx
mov dx, word [esi + 0xc]
add ecx, edx
xor edx, edx
mov dx, word [esi + 0x10]
add ecx, edx
xor edx, edx
mov dx, word [esi + 0x12]
add ecx, edx
xor edx, edx
mov dx, word [esi + 0xa]
add ecx, edx
xor edx, edx
mov dx, word [esi + 8]
add ecx, edx
xor edx, edx
mov dx, word [esi + 0xe]
add ecx, edx
lea eax, [eax + ecx*2 + 0xe]
lea ecx, [ebp - 0x9c]
push eax
push 0x513b3c
push 0x513abc
push ecx
call fcn.0045c680
mov edx, dword [esi]
add esp, 0x10
lea eax, [ebp - 0x9c]
push edx
push 0x50e84c
push str.LangID
push eax
call fcn.0045c680
add esp, 0x10
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x14], edi
push 0x51f7a4
call fcn.0044d150
lea ecx, [ebp - 0x60]
mov dword [ebp + 0xc], edi
push ecx
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 3
call fcn.0045c610
mov eax, dword [eax]
lea edx, [ebp - 0x1c]
push eax
push edx
mov byte [ebp - 4], 4
call fcn.004645b0
add esp, 8
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 6
call fcn.0044d9c0
mov eax, dword [ebp - 0x1c]
cmp dword [eax - 8], edi
jne 0x461262
lea ecx, [ebp - 0x4c]
mov eax, 0xf003
push 0x501dc8
push ecx
mov dword [ebp + 0xc], 0x84
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x4c], eax
call fcn.00423785
lea edx, [ebp - 0x1c]
lea eax, [ebp - 0x28]
push edx
push str.Data
push eax
call fcn.00448aa0
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 7
call fcn.00448320
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 6
call fcn.00448180
lea ecx, [ebp - 0x20]
call fcn.00444650
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebx + 0x18]
lea esi, [ebp - 0x20]
mov byte [ebp - 4], 8
mov ecx, dword [eax - 8]
push esi
push ecx
mov ecx, dword [ebx + 4]
push eax
push edx
call fcn.00462fa0
cmp eax, edi
jne 0x461379
lea ecx, [ebp - 0x38]
push ecx
mov ecx, dword [ebx + 4]
call fcn.00462e80
mov eax, dword [ebp - 0x34]
mov bl, 9
cmp eax, edi
mov byte [ebp - 4], bl
jne 0x4612d8
mov eax, 0xf200
jmp 0x461315
cmp eax, 0xf0000002
ja 0x461302
je 0x4612fb
cmp eax, 1
je 0x4612f4
cmp eax, 0xf0000001
jne 0x461309
mov eax, 0xf100
jmp 0x461315
mov eax, 1
jmp 0x461315
mov eax, 0xf005
jmp 0x461315
cmp eax, 0xf0000003
je 0x461310
mov eax, 0xf200
jmp 0x461315
mov eax, 0xf006
mov esi, eax
mov eax, dword [ebp - 0x2c]
cmp eax, edi
mov dword [ebp - 0x14], esi
jne 0x46132f
mov edx, dword [ebp - 0x30]
lea ecx, [ebp - 0x18]
push edx
call fcn.0044dca0
jmp 0x461362
mov eax, dword [ebp - 0x30]
lea ecx, [ebp + 0x18]
push eax
call fcn.0044d150
mov ecx, dword [ebp - 0x2c]
mov edx, dword [eax]
push ecx
push edx
lea eax, [ebp - 0x18]
push str._s_Inner_error:_d_
push eax
mov byte [ebp - 4], 0xa
call fcn.00450aa0
add esp, 0x10
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], bl
call fcn.0044d9c0
mov ecx, dword [ebp - 0x38]
lea edx, [ebp - 0x5c]
push 0x501dc8
push edx
mov dword [ebp + 0xc], ecx
mov dword [ebp - 0x5c], esi
call fcn.00423785
lea ecx, [ebp - 0x20]
call fcn.00444820
cmp eax, edi
jne 0x4613a5
mov eax, 0xf007
push 0x501dc8
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
mov dword [ebp + 0xc], 0x9a
push eax
call fcn.00423785
push edi
lea ecx, [ebp - 0x20]
call fcn.00444b30
lea ecx, [ebp - 0x20]
call fcn.00444f40
mov edx, eax
mov edi, str.RegCenter_Error:
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, str.RegCenter_Error:
mov esi, edx
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x46140c
mov edi, str.RegCenter_Error:
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [ebp + 0xc], 0xa2
add ecx, edx
push ecx
lea ecx, [ebp - 0x18]
call fcn.0044dd70
lea ecx, [ebp - 0x68]
mov eax, 0xf050
push 0x501dc8
push ecx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x68], eax
call fcn.00423785
push edx
lea edx, [ebp - 0x24]
push edx
call fcn.00464690
add esp, 8
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 0xb
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x461447
lea ecx, [ebp - 0x54]
mov eax, 0xf004
push 0x501dc8
push ecx
mov dword [ebp + 0xc], 0xa9
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x54], eax
call fcn.00423785
lea ecx, [ebp - 0xd0]
call fcn.0045c500
mov edx, dword [ebp - 0x24]
lea ecx, [ebp - 0xd0]
push edx
mov byte [ebp - 4], 0xc
call fcn.0045d230
test eax, eax
jne 0x461489
mov eax, 0xf004
push 0x501dc8
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
mov dword [ebp + 0xc], 0xb1
push eax
call fcn.00423785
push str.Result
lea ecx, [ebp - 0xd0]
call fcn.0045d440
test eax, eax
jne 0x4614bd
lea ecx, [ebp - 0x44]
mov eax, 0xf004
push 0x501dc8
push ecx
mov dword [ebp + 0xc], 0xb6
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x44], eax
call fcn.00423785
lea ecx, [ebp - 0xd0]
call fcn.0045d870
push str.ResCode
lea ecx, [ebp - 0xd0]
call fcn.0045d440
test eax, eax
jne 0x4614fc
lea edx, [ebp - 0x48]
mov eax, 0xf004
push 0x501dc8
push edx
mov dword [ebp + 0xc], 0xbc
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x48], eax
call fcn.00423785
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0xd0]
push eax
call fcn.0045d9e0
mov eax, dword [eax]
push eax
call fcn.004254af
mov esi, dword [ebp + 0x18]
add esp, 4
lea ecx, [ebp - 0x28]
mov dword [esi], eax
call fcn.0044d9c0
mov eax, dword [esi]
lea ecx, [ebp - 0xd0]
test eax, eax
jne 0x4615d8
call fcn.0045d900
push str.RCode
lea ecx, [ebp - 0xd0]
call fcn.0045d440
test eax, eax
jne 0x46156c
lea ecx, [ebp - 0x50]
mov eax, 0xf004
push 0x501dc8
push ecx
mov dword [ebp + 0xc], 0xc5
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x50], eax
call fcn.00423785
lea edx, [ebp + 0x18]
lea ecx, [ebp - 0xd0]
push edx
call fcn.0045d9e0
mov ecx, dword [ebp + 0x10]
push eax
mov byte [ebp - 4], 0xd
call fcn.0044db70
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0xc
call fcn.0044d9c0
lea ecx, [ebp - 0xd0]
call fcn.0045d900
push str.MTCode
lea ecx, [ebp - 0xd0]
call fcn.0045d440
test eax, eax
je 0x461619
lea eax, [ebp + 0x18]
lea ecx, [ebp - 0xd0]
push eax
call fcn.0045d9e0
mov ecx, dword [ebp + 0x14]
push eax
mov byte [ebp - 4], 0xe
call fcn.0044db70
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x18]
jmp 0x461614
call fcn.0045d900
push str.ErrDesc
lea ecx, [ebp - 0xd0]
call fcn.0045d440
test eax, eax
je 0x461619
lea ecx, [ebp + 0x18]
push ecx
lea ecx, [ebp - 0xd0]
call fcn.0045d9e0
mov ecx, dword [ebp + 0x1c]
push eax
mov byte [ebp - 4], 0xf
call fcn.0044db70
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x18]
call fcn.0044d9c0
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0xb
call fcn.0045c590
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 8
call fcn.0044d9c0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 6
call fcn.00444780
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 3
call fcn.00448180
lea eax, [ebx + 8]
push 0
push eax
mov dword [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
mov esi, dword [ebp + 8]
push 0
push 0
push 0
push esi
mov ecx, ebx
call fcn.00460d60
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x3c], 1
mov byte [ebp - 4], 1
call fcn.0044d9c0
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0
call fcn.0045c590
jmp 0x461738
mov esi, dword [ebp + 8]
push 0x55
push edi
push 0xf001
push esi
mov ecx, ebx
call fcn.00460d60
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x18