Function at 0x47bb72
Capabilities:
Contain obfuscated stackstrings
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x298
and dword [ebp - 0xc], 0
movzx eax, byte [ebp + 0x24]
test eax, eax
je 0x47ccde
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x1a8], eax
lea eax, [ebp + 0x28]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1bc]
movzx eax, byte [eax]
test eax, eax
je 0x47cc8e
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x164]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x47bbe7
jmp 0x47cd4c
mov eax, dword [ebp - 0x164]
mov ecx, dword [ebp - 0x14]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
cmp dword [eax], 0x4550
je 0x47bc06
jmp 0x47cd4c
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2c]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp dword [eax + 4], 0
jne 0x47bc24
jmp 0x47cd4c
and dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x2c]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x2c]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x28], eax
and dword [ebp - 0x138], 0
jmp 0x47bc58
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x28]
add eax, 0x28
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x2c]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x138], eax
jge 0x47bcbf
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x150]
jb 0x47bcbd
mov eax, dword [ebp - 0x2c]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x28]
push dword [eax + 8]
call fcn.0047a2e4
pop ecx
pop ecx
add eax, dword [ebp - 0x150]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1a0]
jae 0x47bcbd
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
sub eax, dword [ecx + 0xc]
mov dword [ebp - 0x18], eax
jmp 0x47bcbf
jmp 0x47bc42
cmp dword [ebp - 0x18], 0
jne 0x47bcca
jmp 0x47cd4c
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x18]
add ecx, dword [eax]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 8], ecx
xor ecx, ecx
call fcn.0046d90c
push eax
call fcn.004a53c3
pop ecx
mov byte [ebp - 0xcc], 4
mov byte [ebp - 0xcb], 0x9b
mov byte [ebp - 0xca], 3
mov byte [ebp - 0xc9], 0xf
mov byte [ebp - 0xc8], 5
mov byte [ebp - 0xc7], 6
mov byte [ebp - 0xc6], 1
mov byte [ebp - 0xc5], 4
mov byte [ebp - 0xc4], 6
mov byte [ebp - 0xc3], 4
mov byte [ebp - 0xc2], 0x21
mov byte [ebp - 0xc1], 0xeb
mov byte [ebp - 0xc0], 0xb6
mov byte [ebp - 0xbf], 5
mov byte [ebp - 0xbe], 0x75
mov byte [ebp - 0xbd], 0x1b
mov byte [ebp - 0xbc], 0xf5
mov byte [ebp - 0xbb], 0xa3
mov byte [ebp - 0xba], 0xa9
mov byte [ebp - 0xb9], 0x56
mov byte [ebp - 0xb8], 0x1d
mov byte [ebp - 0xb7], 0x82
mov byte [ebp - 0xb6], 0xfc
mov byte [ebp - 0xb5], 0xce
mov byte [ebp - 0xb4], 0x24
mov byte [ebp - 0xb3], 0xcc
mov byte [ebp - 0xb2], 0xeb
mov byte [ebp - 0xb1], 0xc1
mov byte [ebp - 0xb0], 0xee
mov byte [ebp - 0xaf], 0x45
mov byte [ebp - 0xae], 0x2c
mov byte [ebp - 0xad], 0xeb
mov byte [ebp - 0xac], 2
mov byte [ebp - 0xab], 0xf3
mov byte [ebp - 0xaa], 0x21
mov byte [ebp - 0xa9], 0x67
mov byte [ebp - 0xa8], 0x70
mov byte [ebp - 0xa7], 0x30
mov byte [ebp - 0xa6], 0x53
mov byte [ebp - 0xa5], 0xa3
mov byte [ebp - 0xa4], 0x92
mov byte [ebp - 0xa3], 0xc7
mov byte [ebp - 0xa2], 0x95
mov byte [ebp - 0xa1], 0xc6
mov byte [ebp - 0xa0], 9
mov byte [ebp - 0x9f], 1
mov byte [ebp - 0x9e], 8
mov byte [ebp - 0x9d], 0
mov byte [ebp - 0x9c], 2
mov byte [ebp - 0x9b], 7
mov byte [ebp - 0x9a], 0
mov byte [ebp - 0x99], 6
mov byte [ebp - 0x98], 7
mov byte [ebp - 0x97], 7
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xcc]
or eax, 0xa3
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xcc]
and ecx, 0xa3
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0xcc]
mov byte [ebp + ecx - 0x180], al
mov dword [ebp - 0x1c], 2
and dword [ebp - 0x64], 0
jmp 0x47beb3
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x36
jae 0x47bf5d
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xcc]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x1c], eax
jne 0x47befa
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0xcc]
inc eax
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0xcc]
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x1c], eax
jmp 0x47beab
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0xcb]
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x64]
movzx ecx, byte [ebp + ecx - 0xce]
movsx ecx, byte [ebp + ecx - 0x180]
or eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0xcb]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x64]
movzx edx, byte [ebp + edx - 0xce]
movsx edx, byte [ebp + edx - 0x180]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0xcc]
mov byte [ebp + ecx - 0x180], al
and dword [ebp - 0x64], 0
jmp 0x47beab
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x180], 0
push 0xa
lea eax, [ebp - 0x180]
push eax
lea ecx, [ebp - 0x298]
call fcn.00440a64
xor edx, edx
mov ecx, eax
call fcn.0046d8d1
pop ecx
mov dword [ebp - 0x1b8], eax
lea ecx, [ebp - 0x298]
call fcn.00440a93
and dword [ebp - 0x94], 0
jmp 0x47bfb0
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0xb
jae 0x47bfc9
mov eax, dword [ebp - 0x94]
mov byte [ebp + eax - 0x180], 0
jmp 0x47bfa3
mov byte [ebp - 0x134], 3
mov byte [ebp - 0x133], 0xea
mov byte [ebp - 0x132], 6
mov byte [ebp - 0x131], 0xb
mov byte [ebp - 0x130], 9
mov byte [ebp - 0x12f], 9
mov byte [ebp - 0x12e], 7
mov byte [ebp - 0x12d], 6
mov byte [ebp - 0x12c], 0x50
mov byte [ebp - 0x12b], 7
mov byte [ebp - 0x12a], 0x3a
mov byte [ebp - 0x129], 0x1e
mov byte [ebp - 0x128], 0x12
mov byte [ebp - 0x127], 0xd1
mov byte [ebp - 0x126], 0x15
mov byte [ebp - 0x125], 7
mov byte [ebp - 0x124], 0x62
mov byte [ebp - 0x123], 0xbd
mov byte [ebp - 0x122], 0x24
mov byte [ebp - 0x121], 0x10
mov byte [ebp - 0x120], 0x9a
mov byte [ebp - 0x11f], 0xc8
mov byte [ebp - 0x11e], 0x6b
mov byte [ebp - 0x11d], 0xf3
mov byte [ebp - 0x11c], 0xed
mov byte [ebp - 0x11b], 0x60
mov byte [ebp - 0x11a], 0xcc
mov byte [ebp - 0x119], 0xd5
mov byte [ebp - 0x118], 0x4b
mov byte [ebp - 0x117], 0x6b
mov byte [ebp - 0x116], 0xa8
mov byte [ebp - 0x115], 0x7b
mov byte [ebp - 0x114], 1
mov byte [ebp - 0x113], 0xf4
mov byte [ebp - 0x112], 0xd2
mov byte [ebp - 0x111], 0xec
mov byte [ebp - 0x110], 0x99
mov byte [ebp - 0x10f], 0x9a
mov byte [ebp - 0x10e], 0xeb
mov byte [ebp - 0x10d], 7
mov byte [ebp - 0x10c], 0xf
mov byte [ebp - 0x10b], 0x88
mov byte [ebp - 0x10a], 0x5b
mov byte [ebp - 0x109], 0x93
mov byte [ebp - 0x108], 0x40
mov byte [ebp - 0x107], 0x2f
mov byte [ebp - 0x106], 0xf2
mov byte [ebp - 0x105], 0xf6
mov byte [ebp - 0x104], 0x40
mov byte [ebp - 0x103], 0xdb
mov byte [ebp - 0x102], 0x78
mov byte [ebp - 0x101], 0x93
mov byte [ebp - 0x100], 0x70
mov byte [ebp - 0xff], 0xfb
mov byte [ebp - 0xfe], 0xa7
mov byte [ebp - 0xfd], 0x6a
mov byte [ebp - 0xfc], 4
mov byte [ebp - 0xfb], 0x2a
mov byte [ebp - 0xfa], 0x5f
mov byte [ebp - 0xf9], 0x15
mov byte [ebp - 0xf8], 0x4a
mov byte [ebp - 0xf7], 0xd0
mov byte [ebp - 0xf6], 0x86
mov byte [ebp - 0xf5], 0xa4
mov byte [ebp - 0xf4], 0xf5
mov byte [ebp - 0xf3], 0xf8
mov byte [ebp - 0xf2], 0xf3
mov byte [ebp - 0xf1], 9
mov byte [ebp - 0xf0], 0x29
mov byte [ebp - 0xef], 0x99
mov byte [ebp - 0xee], 0x4b
mov byte [ebp - 0xed], 0xf8
mov byte [ebp - 0xec], 0x11
mov byte [ebp - 0xeb], 0x7c
mov byte [ebp - 0xea], 0x23
mov byte [ebp - 0xe9], 0x19
mov byte [ebp - 0xe8], 0xc3
mov byte [ebp - 0xe7], 8
mov byte [ebp - 0xe6], 0xf1
mov byte [ebp - 0xe5], 0xc4
mov byte [ebp - 0xe4], 0xb7
mov byte [ebp - 0xe3], 9
mov byte [ebp - 0xe2], 4
mov byte [ebp - 0xe1], 0x37
mov byte [ebp - 0xe0], 0x12
mov byte [ebp - 0xdf], 0xcb
mov byte [ebp - 0xde], 6
mov byte [ebp - 0xdd], 8
mov byte [ebp - 0xdc], 5
mov byte [ebp - 0xdb], 4
mov byte [ebp - 0xda], 2
mov byte [ebp - 0xd9], 5
mov byte [ebp - 0xd8], 5
mov byte [ebp - 0xd7], 0
mov byte [ebp - 0xd6], 0
mov byte [ebp - 0xd5], 8
mov byte [ebp - 0xd4], 1
mov byte [ebp - 0xd3], 1
mov byte [ebp - 0xd2], 6
mov byte [ebp - 0xd1], 2
mov byte [ebp - 0xd0], 1
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x134]
or eax, 0xd8
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x134]
and ecx, 0xd8
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x134]
mov byte [ebp + ecx - 0x174], al
mov dword [ebp - 0x10], 2
and dword [ebp - 0x40], 0
jmp 0x47c2df
mov eax, dword [ebp - 0x10]
inc eax
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x65
jae 0x47c3d8
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x134]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x10], eax
jne 0x47c326
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0x134]
inc eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0x134]
mov ecx, dword [ebp - 0x10]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x10], eax
jmp 0x47c2d7
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0x133]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x40]
movzx ecx, byte [ebp + ecx - 0x136]
movsx ecx, byte [ebp + ecx - 0x174]
add eax, ecx
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0x133]
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x40]
movzx edx, byte [ebp + edx - 0x136]
movsx edx, byte [ebp + edx - 0x174]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0x133]
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x40]
movzx edx, byte [ebp + edx - 0x136]
movsx edx, byte [ebp + edx - 0x174]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0x134]
mov byte [ebp + ecx - 0x174], al
push 0x1e3f
push 0xcd9
push 0xdd0
push 1
lea eax, [ebp - 0x40]
push eax
push 0x3253
push 0x463f
push 0x463b
push 0
call fcn.0047a493
add esp, 0x24
jmp 0x47c2d7
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x174], 0
push 0xa
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0x250]
call fcn.00440a64
xor edx, edx
mov ecx, eax
call fcn.0046d8d1
pop ecx
mov dword [ebp - 0x188], eax
lea ecx, [ebp - 0x250]
call fcn.00440a93
and dword [ebp - 0x5c], 0
jmp 0x47c422
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xb
jae 0x47c435
mov eax, dword [ebp - 0x5c]
mov byte [ebp + eax - 0x174], 0
jmp 0x47c41b
push dword [ebp - 0x188]
push dword [ebp - 0x1b8]
call fcn.00476fa8
pop ecx
pop ecx
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x168]
mov dword [eax + 8], ecx
push 0x886
push 0x5c39
lea eax, [ebp - 8]
push eax
push 0x66df
lea eax, [ebp - 0x168]
push eax
push 0x10f4
push 0
push 0x6d78
push 0x4edc
push 1
push 1
push 0x26ba
call fcn.0047b646
add esp, 0x30
and dword [ebp - 0x3c], 0
mov eax, dword [ebp - 8]
cmp dword [eax + 0x18], 0
jbe 0x47c4c1
push 0
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x3c]
push eax
push 0x678b
push 1
push 0x287e
call fcn.0047b4c5
add esp, 0x18
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x14]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x30], eax
and dword [ebp - 0x44], 0
jmp 0x47c4e3
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x30]
jge 0x47c594
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 8]
mov eax, dword [eax + 0x14]
sub eax, dword [ecx + 0x18]
cmp dword [ebp - 0x44], eax
jae 0x47c51a
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x18]
add ecx, dword [eax + 0x1c]
add ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x44]
mov eax, dword [ecx + eax*4]
mov dword [ebp - 0x15c], eax
jmp 0x47c53a
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x28]
add eax, dword [ecx + 0x10]
push eax
mov eax, dword [ebp - 0x28]
push dword [eax + 0x14]
call fcn.00476fa8
pop ecx
pop ecx
mov dword [ebp - 0x15c], eax
push 0x32f8
push 0x3eb3
push 0x742d
lea eax, [ebp - 0x15c]
push eax
push 0x63df
push 0xdda
push 0x2917
lea eax, [ebp - 0x14]
push eax
push 0xfc7
push 0
push 0x7232
push 1
push 0x2bbe
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0047b953
add esp, 0x3c
mov eax, dword [ebp - 4]
add eax, 4
mov dword [ebp - 4], eax
jmp 0x47c4dc
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x14]
sub eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 8]
mov dword [ecx + 0x14], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x18]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x30], eax
and dword [ebp - 0x13c], 0
jmp 0x47c5c5
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0x30]
jge 0x47c607
push 0x466c
push 0x6fca
lea eax, [ebp - 0x18]
push eax
push 1
push 0x515f
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 4]
push eax
push 0x1302
push 1
call fcn.0047a493
add esp, 0x24
mov eax, dword [ebp - 4]
add eax, 4
mov dword [ebp - 4], eax
jmp 0x47c5b8
push 0x399c
lea eax, [ebp - 0x30]
push eax
push 0x27cb
push 0x2ba
push 0xbd2
lea eax, [ebp - 4]
push eax
push 1
lea eax, [ebp - 8]
push eax
push 0x700a
push 1
push 0
push 0x46db
call fcn.0047b646
add esp, 0x30
push 0xcb2
push 0
push 1
push 0x6107
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x3c]
push eax
push 0x66d2
push 0x60bf
push 0x4563
push 0x3bf9
call fcn.0047bb72
add esp, 0x28
and dword [ebp - 0x58], 0
jmp 0x47c67e
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x30]
jge 0x47c6ce
lea eax, [ebp - 4]
push eax
push 0x5b34
push 1
lea eax, [ebp - 0x18]
push eax
push 0x33cc
lea eax, [ebp - 0x58]
push eax
push 0x282a
push 0x2603
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x14]
push eax
push 0x74a1
push 0
push 0x7ccd
call fcn.0047b7bf
add esp, 0x34
mov eax, dword [ebp - 4]
inc eax
inc eax
mov dword [ebp - 4], eax
jmp 0x47c677
mov eax, dword [ebp - 0x30]
shl eax, 1
mov ecx, dword [ebp - 4]
sub ecx, eax
mov eax, dword [ebp - 8]
mov dword [eax + 0x24], ecx
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x18]
add ecx, dword [eax + 0xc]
add ecx, dword [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x1f0]
call fcn.00440a64
lea ecx, [ebp - 0x1f0]
call fcn.0041d130
mov dword [ebp - 0x14c], eax
push dword [ebp - 0x14c]
mov eax, dword [ebp - 0x14c]
shr eax, 1
push eax
call fcn.00476fa8
pop ecx
pop ecx
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x90], 1
mov byte [ebp - 0x8f], 0
mov byte [ebp - 0x8e], 2
mov byte [ebp - 0x8d], 8
mov byte [ebp - 0x8c], 0x23
mov byte [ebp - 0x8b], 0xd3
mov byte [ebp - 0x8a], 0x79
mov byte [ebp - 0x89], 0x30
mov byte [ebp - 0x88], 0xbe
mov byte [ebp - 0x87], 0x31
mov byte [ebp - 0x86], 0x88
mov byte [ebp - 0x85], 0x95
mov byte [ebp - 0x84], 0x1f
mov byte [ebp - 0x83], 0x80
mov byte [ebp - 0x82], 0xfb
mov byte [ebp - 0x81], 0xf
mov byte [ebp - 0x80], 0x56
mov byte [ebp - 0x7f], 8
mov byte [ebp - 0x7e], 1
mov byte [ebp - 0x7d], 0xca
mov byte [ebp - 0x7c], 0x7a
mov byte [ebp - 0x7b], 0xfa
mov byte [ebp - 0x7a], 0xdf
mov byte [ebp - 0x79], 3
mov byte [ebp - 0x78], 0xdb
mov byte [ebp - 0x77], 0x20
mov byte [ebp - 0x76], 0x5b
mov byte [ebp - 0x75], pe_nt_image_headers32
mov byte [ebp - 0x74], 9
mov byte [ebp - 0x73], 0x5e
mov byte [ebp - 0x72], 0xd1
mov byte [ebp - 0x71], 0xfb
mov byte [ebp - 0x70], 0x93
mov byte [ebp - 0x6f], 0x6f
mov byte [ebp - 0x6e], 1
mov byte [ebp - 0x6d], 0xef
mov byte [ebp - 0x6c], 0xb1
mov byte [ebp - 0x6b], 0x1a
mov byte [ebp - 0x6a], 0x9b
mov byte [ebp - 0x69], 0xe2
mov byte [ebp - 0x68], 0
mov byte [ebp - 0x67], 0x42
mov byte [ebp - 0x66], 3
mov byte [ebp - 0x65], 0x42
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x90]
or eax, 0x64
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x90]
and ecx, 0x64
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x90]
mov byte [ebp + ecx - 0x4c], al
mov dword [ebp - 0x20], 2
and dword [ebp - 0x50], 0
jmp 0x47c84b
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x2c
jae 0x47c907
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x90]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x47c892
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x90]
inc eax
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x90]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x20], eax
jmp 0x47c843
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x8f]
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x50]
movzx ecx, byte [ebp + ecx - 0x92]
movsx ecx, byte [ebp + ecx - 0x4c]
or eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x8f]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x50]
movzx edx, byte [ebp + edx - 0x92]
movsx edx, byte [ebp + edx - 0x4c]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x90]
mov byte [ebp + ecx - 0x4c], al
push 1
push 0x3139
push 0x5cae
push 0x7bf
push 1
lea eax, [ebp - 0x50]
push eax
call fcn.0047b4c5
add esp, 0x18
jmp 0x47c843
xor eax, eax
inc eax
shl eax, 2
mov byte [ebp + eax - 0x4c], 0
cmp dword [ebp - 0x34], 4
jle 0x47c95f
or dword [ebp - 0xc], 1
or dword [ebp - 0xc], 2
or dword [ebp - 0xc], 4
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x280]
call fcn.00440a64
push eax
mov eax, dword [ebp - 0x34]
sub eax, 4
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.00477638
pop ecx
pop ecx
mov edx, eax
lea ecx, [ebp - 0x268]
call fcn.0047e93f
pop ecx
mov dword [ebp - 0x148], eax
jmp 0x47c97a
or dword [ebp - 0xc], 8
push dword [ebp - 0x34]
lea eax, [ebp - 0x238]
push eax
call fcn.00477638
pop ecx
pop ecx
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x1c0], eax
push dword [ebp - 0x1c0]
lea ecx, [ebp - 0x208]
call fcn.0046cb5a
mov eax, dword [ebp - 0xc]
and eax, 8
je 0x47c9ae
and dword [ebp - 0xc], 0xfffffff7
lea ecx, [ebp - 0x238]
call fcn.00440a93
mov eax, dword [ebp - 0xc]
and eax, 4
je 0x47c9c5
and dword [ebp - 0xc], 0xfffffffb
lea ecx, [ebp - 0x268]
call fcn.00440a93
mov eax, dword [ebp - 0xc]
and eax, 2
je 0x47c9dc
and dword [ebp - 0xc], 0xfffffffd
lea ecx, [ebp - 0x220]
call fcn.00440a93
mov eax, dword [ebp - 0xc]
and eax, 1
je 0x47c9f3
and dword [ebp - 0xc], 0xfffffffe
lea ecx, [ebp - 0x280]
call fcn.00440a93
and dword [ebp - 0x60], 0
jmp 0x47ca00
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 5
jae 0x47ca10
mov eax, dword [ebp - 0x60]
mov byte [ebp + eax - 0x4c], 0
jmp 0x47c9f9
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [eax + 0xc], ecx
push 0
push dword [ebp - 0x34]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x18]
add ecx, dword [eax + 0xc]
add ecx, dword [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x208]
call fcn.0047e5c4
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x34]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x14]
mov byte [ecx + eax], 0
lea eax, [ebp - 4]
push eax
push 0x8c3
push 0x6a56
push 0x5444
push 0x33b2
push 0x335e
push 1
push 0x68ef
push 0x18be
push 1
push 1
push 0x62a8
call fcn.0047b646
add esp, 0x30
mov eax, dword [ebp - 8]
cmp dword [eax + 0x18], 0
jbe 0x47cae4
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 4]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 4]
sub eax, ecx
mov ecx, dword [ebp - 8]
xor edx, edx
div dword [ecx + 0x18]
cmp eax, 0xc
jbe 0x47cab8
mov dword [ebp - 0x144], 0xc
jmp 0x47cad6
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 4]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 4]
sub eax, ecx
mov ecx, dword [ebp - 8]
xor edx, edx
div dword [ecx + 0x18]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x154], eax
jmp 0x47caeb
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x158], eax
and dword [ebp - 0x54], 0
jmp 0x47cb04
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x54]
cmp ecx, dword [eax + 0x18]
jae 0x47cc1f
push dword [ebp - 0x158]
mov eax, dword [ebp - 0x158]
cdq
sub eax, edx
sar eax, 1
push eax
call fcn.00476fa8
pop ecx
pop ecx
mov dword [ebp - 0x140], eax
push dword [ebp - 0x140]
lea eax, [ebp - 0x1d8]
push eax
call fcn.00477638
pop ecx
pop ecx
push 0x628b
push 0x155c
push 1
push 0x4ace
lea eax, [ebp - 0x54]
push eax
push 0x3dde
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x18]
push eax
push 0x51c9
push 0x2a71
lea eax, [ebp - 0x14]
push eax
push 1
lea eax, [ebp - 8]
push eax
call fcn.0047b7bf
add esp, 0x34
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x1d8]
push eax
push 0x1b50
push 0x925
lea eax, [ebp - 0x14]
push eax
push 0x4827
lea eax, [ebp - 0x140]
push eax
push 0x4272
lea eax, [ebp - 0x18]
push eax
push 1
push 0x1e6a
push 1
push 0x56f8
push 0x7503
push 0x1a00
call fcn.0047b953
add esp, 0x3c
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x140]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x14]
mov byte [ecx + eax], 0
push 1
lea eax, [ebp - 4]
push eax
push 0x2f35
push 0x678d
push 0x787b
push 0
push 0x2d9e
call fcn.0047baa1
add esp, 0x1c
lea ecx, [ebp - 0x1d8]
call fcn.00440a93
jmp 0x47cafd
and dword [ebp - 0x38], 0
jmp 0x47cc2c
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 4]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 4]
sub eax, ecx
cmp dword [ebp - 0x38], eax
jae 0x47cc53
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 4]
add eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x14]
mov byte [ecx + eax], 0
jmp 0x47cc25
push 1
push 0x2ec3
push 0x5be6
lea eax, [ebp - 0x24]
push eax
push 0x7b9c
push 1
lea eax, [ebp - 0x38]
push eax
call fcn.0047baa1
add esp, 0x1c
lea ecx, [ebp - 0x208]
call fcn.00440a93
lea ecx, [ebp - 0x1f0]
call fcn.00440a93
jmp 0x47ccdc
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x160]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1ac]
mov eax, dword [eax + 0x18]
sub eax, dword [ecx]
mov ecx, dword [ebp - 0x160]
mov ecx, dword [ecx]
mov dword [ecx + 0x18], eax
jmp 0x47cd4c
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x19c], eax
push 1
push 0x3ef3
push 0x191a
push 0x460d
push dword [ebp - 0x19c]
push dword [ebp - 0x184]
push dword [ebp - 0x1a4]
push dword [ebp - 0x18c]
push dword [ebp - 0x190]
push 0x26ea
push 0x666f
call fcn.0047b78a
add esp, 0x2c
mov esp, ebp
pop ebp
ret