Function at 0x47b760
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e7edb
mov eax, dword fs:[0]
push eax
sub esp, 0x9a0
mov eax, dword [0x65d4e4]
xor eax, ebp
mov dword [ebp - 0x234], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x96c], ecx
cmp dword [ebp + 8], 0
je 0x47b7a8
mov eax, dword [ebp + 8]
movsx ecx, byte [eax]
test ecx, ecx
jne 0x47b8b7
cmp dword [0x663e68], 5
jge 0x47b8b0
mov edx, dword [0x663e68]
add edx, 1
mov dword [0x663e68], edx
push 1
push 2
lea ecx, [ebp - 0x94]
call fcn.0040b040
mov dword [ebp - 4], 0
mov eax, dword [ebp + 0xc]
push eax
push 0x30
lea ecx, [ebp - 0x83d]
push ecx
call fcn.00486460
add esp, 8
push eax
push 8
lea edx, [ebp - 0x848]
push edx
call fcn.005ce412
add esp, 8
push eax
push 0x41f8c0
push 0x61bbe4
lea eax, [ebp - 0x94]
push eax
call fcn.00409b60
add esp, 8
mov ecx, eax
call fcn.0041ec90
push eax
call fcn.00486420
add esp, 8
push eax
call fcn.00486480
add esp, 8
mov ecx, eax
call fcn.004024e0
lea ecx, [ebp - 0x864]
push ecx
lea ecx, [ebp - 0x94]
call fcn.004094f0
mov dword [ebp - 0x970], eax
mov edx, dword [ebp - 0x970]
mov dword [ebp - 0x974], edx
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x974]
call fcn.0040be10
push eax
push 0x61bbf8
push 0x76e
push 0x61bc18
push 0xf0000000
call fcn.00409860
mov ecx, eax
call fcn.004fb930
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x864]
call fcn.0040bf30
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x94]
call fcn.00409dd0
xor eax, eax
jmp 0x47c136
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x47b981
push 1
push 2
lea ecx, [ebp - 0x114]
call fcn.0040b040
mov dword [ebp - 4], 2
mov ecx, dword [ebp + 8]
push ecx
push 0x61bc2c
lea edx, [ebp - 0x114]
push edx
call fcn.00409b60
add esp, 8
push eax
call fcn.00409b60
add esp, 8
lea eax, [ebp - 0x880]
push eax
lea ecx, [ebp - 0x114]
call fcn.004094f0
mov dword [ebp - 0x978], eax
mov ecx, dword [ebp - 0x978]
mov dword [ebp - 0x97c], ecx
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x97c]
call fcn.0040be10
push eax
push 0x61bc40
push 0x78d
push 0x61bc60
push 0xf0000000
call fcn.00409860
mov ecx, eax
call fcn.004fb930
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x880]
call fcn.0040bf30
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x114]
call fcn.00409dd0
xor eax, eax
jmp 0x47c136
cmp dword [ebp + 0x10], 0
je 0x47b991
mov edx, dword [ebp + 0x10]
movsx eax, byte [edx]
test eax, eax
jne 0x47b998
mov dword [ebp + 0x10], 0x60ad7b
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x96c]
add ecx, 0xb4
push ecx
lea ecx, [ebp - 0x118]
call fcn.0040be90
mov dword [ebp - 4], 4
lea edx, [ebp - 0x120]
push edx
mov ecx, dword [ebp - 0x96c]
add ecx, 0x68
call fcn.00403350
jmp 0x47b9e9
push 0
lea eax, [ebp - 0x888]
push eax
lea ecx, [ebp - 0x120]
call fcn.0047f970
lea ecx, [ebp - 0x890]
push ecx
mov ecx, dword [ebp - 0x96c]
add ecx, 0x68
call fcn.00402930
push eax
lea ecx, [ebp - 0x120]
call fcn.0049f000
movzx edx, al
test edx, edx
je 0x47bafe
lea ecx, [ebp - 0x120]
call fcn.004816d0
mov eax, dword [eax]
cmp eax, dword [ebp - 0x14]
jne 0x47baf9
lea ecx, [ebp - 0x120]
call fcn.004816d0
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], 0
jne 0x47baf7
push 1
push 2
lea ecx, [ebp - 0x1a4]
call fcn.0040b040
mov byte [ebp - 4], 5
push str.:_QueryFromUpper
mov edx, dword [ebp + 8]
push edx
push 0x61bc90
lea eax, [ebp - 0x1a4]
push eax
call fcn.00409b60
add esp, 8
push eax
call fcn.00409b60
add esp, 8
push eax
call fcn.00409b60
add esp, 8
lea ecx, [ebp - 0x8ac]
push ecx
lea ecx, [ebp - 0x1a4]
call fcn.004094f0
mov dword [ebp - 0x980], eax
mov edx, dword [ebp - 0x980]
mov dword [ebp - 0x984], edx
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x984]
call fcn.0040be10
push eax
push 0x61bc98
push 0x7a2
push 0x61bcb8
push 0x12
call fcn.00409860
mov ecx, eax
call fcn.004fb930
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x8ac]
call fcn.0040bf30
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1a4]
call fcn.00409dd0
jmp 0x47bafe
jmp 0x47b9d5
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x118]
call fcn.0040be70
cmp dword [ebp - 0x10], 0
je 0x47c022
mov dword [ebp - 0x1a8], 0
push 1
push 2
lea ecx, [ebp - 0x22c]
call fcn.0040b040
mov dword [ebp - 4], 7
mov eax, dword [ebp + 0x10]
push eax
push 0x61bccc
mov ecx, dword [ebp + 0xc]
push ecx
push 0x30
lea edx, [ebp - 0x8ad]
push edx
call fcn.00486460
add esp, 8
push eax
push 8
lea eax, [ebp - 0x8b8]
push eax
call fcn.005ce412
add esp, 8
push eax
push 0x41f8c0
push 0x61bcd8
mov ecx, dword [ebp + 8]
push ecx
push 0x61bce4
lea edx, [ebp - 0x22c]
push edx
call fcn.00409b60
add esp, 8
push eax
call fcn.00409b60
add esp, 8
push eax
call fcn.00409b60
add esp, 8
mov ecx, eax
call fcn.0041ec90
push eax
call fcn.00486420
add esp, 8
push eax
call fcn.00486480
add esp, 8
mov ecx, eax
call fcn.004024e0
push eax
call fcn.00409b60
add esp, 8
push eax
call fcn.00409b60
add esp, 8
lea eax, [ebp - 0x8d4]
push eax
lea ecx, [ebp - 0x22c]
call fcn.004094f0
mov dword [ebp - 0x988], eax
mov ecx, dword [ebp - 0x988]
mov dword [ebp - 0x98c], ecx
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x98c]
call fcn.0040be10
push eax
push 0x61bcf0
push 0x7ac
push 0x61bd10
push 0x12
call fcn.00409860
mov ecx, eax
call fcn.004fb930
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x8d4]
call fcn.0040bf30
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x22c]
call fcn.00409dd0
push 0x400
push 0xcc
lea edx, [ebp - 0x634]
push edx
call fcn.005b5540
add esp, 0xc
mov dword [ebp - 0x230], 0
lea eax, [ebp - 0x230]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call dword [ebp - 0x10]
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0
je 0x47bca4
cmp dword [ebp - 0x230], 0
je 0x47bc9f
mov eax, dword [ebp - 0x230]
push eax
mov ecx, dword [ebp + 0x14]
call fcn.0040bdc0
jmp 0x47bde1
cmp dword [ebp - 0x230], 0
je 0x47bde1
push 1
push 2
lea ecx, [ebp - 0x6b4]
call fcn.0040b040
mov dword [ebp - 4], 9
push 0x61bd24
mov ecx, dword [ebp + 0x10]
push ecx
push 0x61bd30
mov edx, dword [ebp + 0xc]
push edx
push 0x30
lea eax, [ebp - 0x8d5]
push eax
call fcn.00486460
add esp, 8
push eax
push 8
lea ecx, [ebp - 0x8e0]
push ecx
call fcn.005ce412
add esp, 8
push eax
push 0x41f8c0
push 0x61bd34
mov edx, dword [ebp + 8]
push edx
push 0x61bd40
lea eax, [ebp - 0x6b4]
push eax
call fcn.00409b60
add esp, 8
push eax
call fcn.00409b60
add esp, 8
push eax
call fcn.00409b60
add esp, 8
mov ecx, eax
call fcn.0041ec90
push eax
call fcn.00486420
add esp, 8
push eax
call fcn.00486480
add esp, 8
mov ecx, eax
call fcn.004024e0
push eax
call fcn.00409b60
add esp, 8
push eax
call fcn.00409b60
add esp, 8
push eax
call fcn.00409b60
add esp, 8
lea ecx, [ebp - 0x8fc]
push ecx
lea ecx, [ebp - 0x6b4]
call fcn.004094f0
mov dword [ebp - 0x990], eax
mov edx, dword [ebp - 0x990]
mov dword [ebp - 0x994], edx
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x994]
call fcn.0040be10
push eax
push 0x61bd48
push 0x7c2
push 0x61bd68
push 0xf0000000
call fcn.00409860
mov ecx, eax
call fcn.004fb930
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x8fc]
call fcn.0040bf30
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6b4]
call fcn.00409dd0
cmp dword [ebp - 0x230], 0
je 0x47bdf6
mov eax, dword [ebp - 0x230]
push eax
call fcn.0045e820
mov dword [ebp - 0x6b8], 0
jmp 0x47be11
mov ecx, dword [ebp - 0x6b8]
add ecx, 1
mov dword [ebp - 0x6b8], ecx
cmp dword [ebp - 0x6b8], 0x400
jae 0x47bede
mov edx, dword [ebp - 0x6b8]
movzx eax, byte [ebp + edx - 0x634]
cmp eax, 0xcc
je 0x47bed9
push 1
push 2
lea ecx, [ebp - 0x73c]
call fcn.0040b040
mov dword [ebp - 4], 0xb
push 0x61bd7c
lea ecx, [ebp - 0x73c]
push ecx
call fcn.00409b60
add esp, 8
lea edx, [ebp - 0x918]
push edx
lea ecx, [ebp - 0x73c]
call fcn.004094f0
mov dword [ebp - 0x998], eax
mov eax, dword [ebp - 0x998]
mov dword [ebp - 0x99c], eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x99c]
call fcn.0040be10
push eax
push 0x61bd88
push 0x7cb
push 0x61bda8
push 0xf0000000
call fcn.00409860
mov ecx, eax
call fcn.004fb930
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x918]
call fcn.0040bf30
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x73c]
call fcn.00409dd0
jmp 0x47be02
cmp dword [ebp - 0x1a8], 0
je 0x47c022
push 1
push 2
lea ecx, [ebp - 0x7bc]
call fcn.0040b040
mov dword [ebp - 4], 0xd
push 0x61bdbc
mov ecx, dword [ebp + 0x10]
push ecx
push 0x61bdd0
mov edx, dword [ebp + 0xc]
push edx
push 0x30
lea eax, [ebp - 0x919]
push eax
call fcn.00486460
add esp, 8
push eax
push 8
lea ecx, [ebp - 0x924]
push ecx
call fcn.005ce412
add esp, 8
push eax
push 0x41f8c0
push 0x61bddc
mov edx, dword [ebp + 8]
push edx
push 0x61bde8
lea eax, [ebp - 0x7bc]
push eax
call fcn.00409b60
add esp, 8
push eax
call fcn.00409b60
add esp, 8
push eax
call fcn.00409b60
add esp, 8
mov ecx, eax
call fcn.0041ec90
push eax
call fcn.00486420
add esp, 8
push eax
call fcn.00486480
add esp, 8
mov ecx, eax
call fcn.004024e0
push eax
call fcn.00409b60
add esp, 8
push eax
call fcn.00409b60
add esp, 8
push eax
call fcn.00409b60
add esp, 8
lea ecx, [ebp - 0x940]
push ecx
lea ecx, [ebp - 0x7bc]
call fcn.004094f0
mov dword [ebp - 0x9a0], eax
mov edx, dword [ebp - 0x9a0]
mov dword [ebp - 0x9a4], edx
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x9a4]
call fcn.0040be10
push eax
push 0x61bdf0
push 0x7d0
push 0x61be10
push 0x12
call fcn.00409860
mov ecx, eax
call fcn.004fb930
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x940]
call fcn.0040bf30
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7bc]
call fcn.00409dd0
mov eax, 1
jmp 0x47c136
push 1
push 2
lea ecx, [ebp - 0x83c]
call fcn.0040b040
mov dword [ebp - 4], 0xf
push 0x61be24
mov eax, dword [ebp + 0x10]
push eax
push str._Query:
mov ecx, dword [ebp + 0xc]
push ecx
push 0x30
lea edx, [ebp - 0x941]
push edx
call fcn.00486460
add esp, 8
push eax
push 8
lea eax, [ebp - 0x94c]
push eax
call fcn.005ce412
add esp, 8
push eax
push 0x41f8c0
push 0x61be44
lea ecx, [ebp - 0x83c]
push ecx
call fcn.00409b60
add esp, 8
mov ecx, eax
call fcn.0041ec90
push eax
call fcn.00486420
add esp, 8
push eax
call fcn.00486480
add esp, 8
mov ecx, eax
call fcn.004024e0
push eax
call fcn.00409b60
add esp, 8
push eax
call fcn.00409b60
add esp, 8
push eax
call fcn.00409b60
add esp, 8
lea edx, [ebp - 0x968]
push edx
lea ecx, [ebp - 0x83c]
call fcn.004094f0
mov dword [ebp - 0x9a8], eax
mov eax, dword [ebp - 0x9a8]
mov dword [ebp - 0x9ac], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x9ac]
call fcn.0040be10
push eax
push str.CPolicyManager::QueryFromUpper
push 0x7d4
push 0x61be74
push 0x12
call fcn.00409860
mov ecx, eax
call fcn.004fb930
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x968]
call fcn.0040bf30
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x83c]
call fcn.00409dd0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x234]
xor ecx, ebp
call fcn.005b1988
mov esp, ebp
pop ebp
ret 0x10