Function at 0x46f2c0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53a2c0
mov eax, dword fs:[0]
push eax
sub esp, 0x80
push ebx
push esi
push edi
mov eax, dword [0x5954a0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x8c], ecx
lea ecx, [ebp - 0x14]
call fcn.0044f320
mov dword [ebp - 4], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
jmp 0x46f319
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x64
jge 0x46f3e8
lea ecx, [ebp - 0x28]
call fcn.00478e10
mov byte [ebp - 4], 1
mov dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x2c]
push ecx
push str.esafenet_cdgout_20111226
lea ecx, [ebp - 0x28]
call fcn.00479650
test eax, eax
je 0x46f3cf
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0x18304]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
push ecx
push str.CDocumentMgr::SetupSecretBox_GetMapPoint_is_true_deskdrive_is__d
lea edx, [ebp - 0x14]
push edx
call fcn.00451560
add esp, 0xc
mov eax, dword [ebp - 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov ecx, dword [ebp - 0x2c]
push ecx
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
cmp dword [ebp - 0x30], 0x41
jle 0x46f3cf
cmp dword [ebp - 0x30], 0x5a
jg 0x46f3cf
push str.CDocumentMgr::SetupSecretBox_GetMapPoint_is_true_BFIND_is_true
lea edx, [ebp - 0x14]
push edx
call fcn.00451560
add esp, 8
mov eax, dword [ebp - 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [ebp - 0x18], 1
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x30]
mov dword [ecx + 0x410], edx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00478e70
jmp 0x46f3e8
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00478e70
jmp 0x46f310
mov dword [ebp - 0x3c], 0
push str.IsWow64Process
push 0x566b24
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x46f41d
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [ebp - 0x38]
xor ecx, ecx
cmp dword [ebp - 0x3c], 0
setne cl
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x34], 0
je 0x46f590
mov dword [ebp - 0x40], pe_nt_image_headers32
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x54], 0x8456
mov dword [ebp - 0x50], 0x4287
mov dword [ebp - 0x48], 0x332
mov dword [ebp - 0x4c], 0x3678
mov dword [ebp - 0x58], 0x12
jmp 0x46f469
mov edx, dword [ebp - 0x54]
add edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x48]
and edx, eax
mov ecx, dword [ebp - 0x4c]
imul ecx, ecx, 0x12
and ecx, 0x23
xor edx, ecx
or edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x58]
and eax, dword [ebp - 0x4c]
or edx, eax
add edx, dword [ebp - 0x4c]
mov dword [ebp - 0x4c], edx
jmp 0x46f497
mov ecx, dword [ebp - 0x4c]
add ecx, dword [ebp - 0x58]
xor ecx, 0x19b
mov edx, dword [ebp - 0x54]
sub edx, dword [ebp - 0x50]
add edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x44]
xor edx, eax
or ecx, edx
add ecx, dword [ebp - 0x58]
mov dword [ebp - 0x58], ecx
jmp 0x46f4bf
mov ecx, dword [ebp - 0x54]
add ecx, 5
sub ecx, dword [ebp - 0x50]
add ecx, dword [ebp - 0x58]
and ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x4c]
imul edx, edx, 3
imul edx, edx, 0x48
sar edx, 2
or ecx, edx
mov eax, dword [ebp - 0x40]
sub eax, ecx
mov dword [ebp - 0x40], eax
jmp 0x46f4e7
mov ecx, dword [ebp - 0x50]
add ecx, 0x12
xor ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x4c]
and edx, dword [ebp - 0x44]
xor edx, dword [ebp - 0x40]
or ecx, edx
mov eax, dword [ebp - 0x4c]
sub eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x46f507
mov edx, dword [ebp - 0x4c]
sub edx, dword [ebp - 0x54]
add edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x44]
shl eax, cl
and edx, eax
and edx, dword [ebp - 0x40]
mov dword [ebp - 0x40], edx
jmp 0x46f523
mov ecx, dword [ebp - 0x4c]
add ecx, dword [ebp - 0x54]
add ecx, dword [ebp - 0x44]
add ecx, dword [ebp - 0x50]
and ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x54]
cdq
idiv dword [ebp - 0x48]
mov esi, edx
mov eax, dword [ebp - 0x4c]
imul eax, eax, 0x12
cdq
mov edi, 0x18
idiv edi
and esi, edx
xor ecx, esi
and ecx, dword [ebp - 0x58]
mov dword [ebp - 0x58], ecx
jmp 0x46f557
mov eax, dword [ebp - 0x54]
cdq
sub eax, edx
sar eax, 1
add eax, dword [ebp - 0x4c]
xor eax, dword [ebp - 0x58]
mov edx, dword [ebp - 0x4c]
add edx, dword [ebp - 0x48]
sub edx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x48]
add ecx, dword [ebp - 0x4c]
sub ecx, dword [ebp - 0x44]
and edx, ecx
or eax, edx
or eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], eax
jmp 0x46f585
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x10], edx
jmp 0x46f757
mov dword [ebp - 0x5c], pe_nt_image_headers32
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x70], 0x8456
mov dword [ebp - 0x6c], 0x4287
mov dword [ebp - 0x64], 0x332
mov dword [ebp - 0x68], 0x3678
mov dword [ebp - 0x74], 0x12
jmp 0x46f5c6
pushaw
mov eax, dword [ebp - 0x70]
jmp 0x46f5cf
mov ebx, dword [ebp - 0x6c]
jmp 0x46f5d5
mov ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0x68]
mov esi, dword [ebp - 0x74]
jmp 0x46f5e2
mov edi, dword [ebp - 0x64]
and eax, ebx
jmp 0x46f5eb
or eax, esi
and ebx, dword [ebp - 0x60]
jmp 0x46f5f4
add ebx, eax
sub ecx, eax
sub esi, eax
mov dword [ebp - 0x5c], ebx
jmp 0x46f600
add edi, esi
and ebx, eax
jmp 0x46f609
xor esi, edi
add esi, ebx
jmp 0x46f610
sub ecx, esi
add edi, ebx
jmp 0x46f618
xor ecx, edi
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], eax
jmp 0x46f624
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x74], esi
jmp 0x46f630
popaw
jmp 0x46f635
mov eax, dword [ebp - 0x70]
add eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x74]
add ecx, dword [ebp - 0x64]
and eax, ecx
mov edx, dword [ebp - 0x68]
imul edx, edx, 0x12
and edx, 0x23
xor eax, edx
or eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x74]
and ecx, dword [ebp - 0x68]
or eax, ecx
add eax, dword [ebp - 0x68]
mov dword [ebp - 0x68], eax
jmp 0x46f663
mov edx, dword [ebp - 0x68]
add edx, dword [ebp - 0x74]
xor edx, 0x19b
mov eax, dword [ebp - 0x70]
sub eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x68]
add ecx, dword [ebp - 0x60]
xor eax, ecx
or edx, eax
add edx, dword [ebp - 0x74]
mov dword [ebp - 0x74], edx
jmp 0x46f68b
mov edx, dword [ebp - 0x70]
add edx, 5
sub edx, dword [ebp - 0x6c]
add edx, dword [ebp - 0x74]
and edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
imul eax, eax, 3
imul eax, eax, 0x48
sar eax, 2
or edx, eax
mov ecx, dword [ebp - 0x5c]
sub ecx, edx
mov dword [ebp - 0x5c], ecx
jmp 0x46f6b3
mov edx, dword [ebp - 0x6c]
add edx, 0x12
xor edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x68]
and eax, dword [ebp - 0x60]
xor eax, dword [ebp - 0x5c]
or edx, eax
mov ecx, dword [ebp - 0x68]
sub ecx, edx
mov dword [ebp - 0x68], ecx
jmp 0x46f6d3
mov edx, dword [ebp - 0x68]
sub edx, dword [ebp - 0x70]
add edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x60]
shl eax, cl
and edx, eax
and edx, dword [ebp - 0x5c]
mov dword [ebp - 0x5c], edx
jmp 0x46f6ef
mov ecx, dword [ebp - 0x68]
add ecx, dword [ebp - 0x70]
add ecx, dword [ebp - 0x60]
add ecx, dword [ebp - 0x6c]
and ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x70]
cdq
idiv dword [ebp - 0x64]
mov esi, edx
mov eax, dword [ebp - 0x68]
imul eax, eax, 0x12
cdq
mov edi, 0x18
idiv edi
and esi, edx
xor ecx, esi
and ecx, dword [ebp - 0x74]
mov dword [ebp - 0x74], ecx
jmp 0x46f723
mov eax, dword [ebp - 0x70]
cdq
sub eax, edx
sar eax, 1
add eax, dword [ebp - 0x68]
xor eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x68]
add edx, dword [ebp - 0x64]
sub edx, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x64]
add ecx, dword [ebp - 0x68]
sub ecx, dword [ebp - 0x60]
and edx, ecx
or eax, edx
or eax, dword [ebp - 0x5c]
mov dword [ebp - 0x5c], eax
jmp 0x46f751
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call fcn.00402f90
add esp, 8
push 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call fcn.00403c50
add esp, 8
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call fcn.00403d40
add esp, 4
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x78], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0044f990
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4