Function at 0x47e300
Capabilities:
Get geographical location
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6045a7
mov eax, dword fs:[0]
push eax
sub esp, 0x130
mov eax, dword [0x6ba394]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
dec eax
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x138], ecx
mov dword [ebp - 0x13c], 0
cmp eax, 0x16
ja case.default.0x47e353
jmp dword [eax*4 + 0x47ed40]
push str.MetaJSON
lea ecx, [ebp - 0x44]
call fcn.004347d0
push str.MetaJSON
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0
call fcn.004347d0
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.0047e250
mov edi, eax
push dword [ebp - 0x138]
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 2
push eax
mov ecx, esi
call fcn.0047f100
mov esi, eax
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.0047e180
push esi
push eax
lea eax, [ebp - 0xa4]
mov byte [ebp - 4], 4
push eax
call fcn.00465c20
add esp, 0xc
push edi
push eax
push ebx
mov byte [ebp - 4], 5
call fcn.00465c20
add esp, 0xc
lea ecx, [ebp - 0xa4]
call fcn.00413860
lea ecx, [ebp - 0x5c]
call fcn.00413860
lea ecx, [ebp - 0x74]
call fcn.00413860
lea ecx, [ebp - 0x8c]
call fcn.00413860
lea ecx, [ebp - 0x2c]
call fcn.00413860
lea ecx, [ebp - 0x44]
call fcn.00413860
jmp 0x47ed1f
push str.EntryPointJSON
lea ecx, [ebp - 0x2c]
call fcn.004347d0
push str.EntryPointJSON
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 6
call fcn.004347d0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.0047e250
mov edi, eax
push 0
push dword [ebp - 0x138]
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 8
push eax
mov ecx, esi
call fcn.0047eeb0
mov esi, eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0047e180
push esi
push eax
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0xa
push eax
call fcn.00465c20
add esp, 0xc
mov byte [ebp - 4], 0xb
push edi
push eax
push ebx
call fcn.00465c20
add esp, 0xc
lea ecx, [ebp - 0x8c]
call fcn.00413860
lea ecx, [ebp - 0x74]
call fcn.00413860
lea ecx, [ebp - 0x5c]
call fcn.00413860
lea ecx, [ebp - 0xa4]
call fcn.00413860
lea ecx, [ebp - 0x44]
call fcn.00413860
lea ecx, [ebp - 0x2c]
call fcn.00413860
jmp 0x47ed1f
push str.EPSummaryJSON
lea ecx, [ebp - 0x2c]
call fcn.004347d0
push str.EPSummaryJSON
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 0xc
call fcn.004347d0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.0047e250
mov edi, eax
push 1
push dword [ebp - 0x138]
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0xe
push eax
mov ecx, esi
call fcn.0047eeb0
mov esi, eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0047e180
push esi
push eax
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x10
push eax
call fcn.00465c20
add esp, 0xc
mov byte [ebp - 4], 0x11
jmp 0x47e492
push 0x6526d4
lea ecx, [ebp - 0x2c]
call fcn.004347d0
push 0x6526d4
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 0x12
call fcn.004347d0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.0047e250
mov edi, eax
push dword [ebp - 0x138]
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x14
push eax
mov ecx, esi
call fcn.004815f0
mov esi, eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x15
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0047e180
push esi
push eax
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x16
push eax
call fcn.00465c20
add esp, 0xc
mov byte [ebp - 4], 0x17
jmp 0x47e492
push str.DamageJSON
lea ecx, [ebp - 0x2c]
call fcn.004347d0
push str.DamageJSON
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 0x18
call fcn.004347d0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x19
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.0047e250
mov edi, eax
push dword [ebp - 0x138]
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x1a
push eax
mov ecx, esi
call fcn.00481c80
mov esi, eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x1b
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0047e180
push esi
push eax
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x1c
push eax
call fcn.00465c20
add esp, 0xc
mov byte [ebp - 4], 0x1d
jmp 0x47e492
push str.SuspiciousJSON
lea ecx, [ebp - 0x2c]
call fcn.004347d0
push str.SuspiciousJSON
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 0x1e
call fcn.004347d0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x1f
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.0047e250
mov edi, eax
push dword [ebp - 0x138]
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x20
push eax
mov ecx, esi
call fcn.0048eb50
mov esi, eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x21
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0047e180
push esi
push eax
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x22
push eax
call fcn.00465c20
add esp, 0xc
mov byte [ebp - 4], 0x23
jmp 0x47e492
push 0x652728
lea ecx, [ebp - 0x2c]
call fcn.004347d0
push 0x652728
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 0x24
call fcn.004347d0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x25
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.0047e250
mov esi, eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x26
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0047e180
push 0x652748
push eax
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x27
push eax
call fcn.004238e0
add esp, 0xc
mov byte [ebp - 4], 0x28
push esi
push eax
push ebx
call fcn.00465c20
add esp, 0xc
lea ecx, [ebp - 0x8c]
call fcn.00413860
lea ecx, [ebp - 0x74]
call fcn.00413860
lea ecx, [ebp - 0x5c]
jmp 0x47e4be
push str.SubtreeJSON
lea ecx, [ebp - 0x2c]
call fcn.004347d0
push str.SubtreeJSON
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 0x29
call fcn.004347d0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.0047e250
mov esi, eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x2b
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0047e180
push 0x652748
push eax
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x2c
push eax
call fcn.004238e0
add esp, 0xc
mov byte [ebp - 4], 0x2d
jmp 0x47e730
push str.UncorrelatedJSON
lea ecx, [ebp - 0x2c]
call fcn.004347d0
push str.UncorrelatedJSON
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 0x2e
call fcn.004347d0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x2f
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.0047e250
mov esi, eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x30
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0047e180
push 0x652748
push eax
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x31
push eax
call fcn.004238e0
add esp, 0xc
mov byte [ebp - 4], 0x32
jmp 0x47e730
push str.InjectionJSON
lea ecx, [ebp - 0x2c]
call fcn.004347d0
push str.InjectionJSON
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 0x33
call fcn.004347d0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x34
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.0047e250
mov edi, eax
push dword [ebp - 0x138]
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x35
push eax
call fcn.0048db50
mov esi, eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x36
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0047e180
push esi
push eax
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x37
push eax
call fcn.00465c20
add esp, 0xc
mov byte [ebp - 4], 0x38
jmp 0x47e492
push str.IndirectExecJSON
lea ecx, [ebp - 0x2c]
call fcn.004347d0
push str.IndirectExecJSON
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 0x39
call fcn.004347d0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x3a
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.0047e250
mov edi, eax
push dword [ebp - 0x138]
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x3b
push eax
call fcn.0048de50
mov esi, eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x3c
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0047e180
push esi
push eax
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x3d
push eax
call fcn.00465c20
add esp, 0xc
mov byte [ebp - 4], 0x3e
jmp 0x47e492
push ecx
push ebx
mov ecx, esi
call fcn.00490710
jmp 0x47ed1f
push ecx
push ebx
mov ecx, esi
call fcn.00490a10
jmp 0x47ed1f
push ecx
push ebx
mov ecx, esi
call fcn.00490d50
jmp 0x47ed1f
lea eax, [ecx + 0x1e0]
push eax
push ebx
call fcn.00491050
jmp 0x47ed1f
push ecx
push ebx
mov ecx, esi
call fcn.004915c0
jmp 0x47ed1f
push str.URLInfoJSON
lea ecx, [ebp - 0x2c]
call fcn.004347d0
push str.URLInfoJSON
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 0x3f
call fcn.004347d0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x40
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.0047e250
mov edi, eax
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x41
push eax
mov ecx, esi
call fcn.004928c0
mov esi, eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x42
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0047e180
push esi
push eax
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x43
push eax
call fcn.00465c20
add esp, 0xc
mov byte [ebp - 4], 0x44
jmp 0x47e492
push str.DomainInfoJSON
lea ecx, [ebp - 0x2c]
call fcn.004347d0
push str.DomainInfoJSON
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 0x45
call fcn.004347d0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x46
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.0047e250
mov edi, eax
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x47
push eax
mov ecx, esi
call fcn.004929a0
mov esi, eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x48
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0047e180
push esi
push eax
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x49
push eax
call fcn.00465c20
add esp, 0xc
mov byte [ebp - 4], 0x4a
jmp 0x47e492
push str.IPInfoJSON
lea ecx, [ebp - 0x2c]
call fcn.004347d0
push str.IPInfoJSON
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 0x4b
call fcn.004347d0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x4c
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.0047e250
mov edi, eax
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x4d
push eax
mov ecx, esi
call fcn.00492a80
mov esi, eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x4e
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0047e180
push esi
push eax
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x4f
push eax
call fcn.00465c20
add esp, 0xc
mov byte [ebp - 4], 0x50
jmp 0x47e492
push str.CountryInfoJSON
lea ecx, [ebp - 0x2c]
call fcn.004347d0
push str.CountryInfoJSON
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 0x51
call fcn.004347d0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x52
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.0047e250
mov edi, eax
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x53
push eax
mov ecx, esi
call fcn.00492b50
mov esi, eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x54
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0047e180
push esi
push eax
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x55
push eax
call fcn.00465c20
add esp, 0xc
mov byte [ebp - 4], 0x56
jmp 0x47e492
push str.RepJSON
lea ecx, [ebp - 0x2c]
call fcn.004347d0
push str.RepJSON
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 0x57
call fcn.004347d0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x58
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.0047e250
mov edi, eax
push dword [ebp - 0x138]
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x59
push eax
mov ecx, esi
call fcn.00493070
mov esi, eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x5a
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0047e180
push esi
push eax
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x5b
push eax
call fcn.00465c20
add esp, 0xc
mov byte [ebp - 4], 0x5c
jmp 0x47e492
push str.MitreJSON
lea ecx, [ebp - 0x2c]
call fcn.004347d0
push str.MitreJSON
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 0x5d
call fcn.004347d0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x5e
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.0047e250
mov edi, eax
push dword [ebp - 0x138]
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x5f
push eax
mov ecx, esi
call fcn.0048f0e0
mov esi, eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x60
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0047e180
push esi
push eax
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x61
push eax
call fcn.00465c20
add esp, 0xc
mov byte [ebp - 4], 0x62
jmp 0x47e492
push str.ContentJSON
lea ecx, [ebp - 0xd4]
call fcn.004347d0
push str.ContentJSON
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 0x63
call fcn.004347d0
lea eax, [ebp - 0xd4]
mov byte [ebp - 4], 0x64
push eax
lea eax, [ebp - 0x134]
push eax
call fcn.0047e250
mov edi, eax
push dword [ebp - 0x138]
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 0x65
push eax
mov ecx, esi
call fcn.00487fd0
mov esi, eax
lea eax, [ebp - 0xbc]
mov byte [ebp - 4], 0x66
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.0047e180
push esi
push eax
lea eax, [ebp - 0xec]
mov byte [ebp - 4], 0x67
push eax
call fcn.00465c20
add esp, 0xc
push edi
push eax
push ebx
mov byte [ebp - 4], 0x68
call fcn.00465c20
add esp, 0xc
lea ecx, [ebp - 0xec]
call fcn.00413860
lea ecx, [ebp - 0x104]
call fcn.00413860
lea ecx, [ebp - 0x11c]
call fcn.00413860
lea ecx, [ebp - 0x134]
call fcn.00413860
lea ecx, [ebp - 0xbc]
call fcn.00413860
lea ecx, [ebp - 0xd4]
call fcn.00413860
jmp 0x47ed1f
push str.__n_n_
mov ecx, ebx
call fcn.004347d0
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005b168a
mov esp, ebp
pop ebp
ret 0xc