Function at 0x47c160
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e6e4b
mov eax, dword fs:[0]
push eax
sub esp, 0x9a0
mov eax, dword [0x65b4e4]
xor eax, ebp
mov dword [ebp - 0x234], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x96c], ecx
cmp dword [ebp + 8], 0
je 0x47c1a8
mov eax, dword [ebp + 8]
movsx ecx, byte [eax]
test ecx, ecx
jne 0x47c2b7
cmp dword [0x661e68], 5
jge 0x47c2b0
mov edx, dword [0x661e68]
add edx, 1
mov dword [0x661e68], edx
push 1
push 2
lea ecx, [ebp - 0x94]
call fcn.0040b160
mov dword [ebp - 4], 0
mov eax, dword [ebp + 0xc]
push eax
push 0x30
lea ecx, [ebp - 0x83d]
push ecx
call fcn.00487350
add esp, 8
push eax
push 8
lea edx, [ebp - 0x848]
push edx
call fcn.005cd3f2
add esp, 8
push eax
push 0x41ed90
push 0x61aa84
lea eax, [ebp - 0x94]
push eax
call fcn.00409c80
add esp, 8
mov ecx, eax
call fcn.0041e290
push eax
call fcn.00487310
add esp, 8
push eax
call fcn.00487370
add esp, 8
mov ecx, eax
call fcn.004024e0
lea ecx, [ebp - 0x864]
push ecx
lea ecx, [ebp - 0x94]
call fcn.00409610
mov dword [ebp - 0x970], eax
mov edx, dword [ebp - 0x970]
mov dword [ebp - 0x974], edx
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x974]
call fcn.0040bf30
push eax
push 0x61aa98
push 0x76e
push 0x61aab8
push 0xf0000000
call fcn.00409980
mov ecx, eax
call fcn.004fa910
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x864]
call fcn.0040c050
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x94]
call fcn.00409ef0
xor eax, eax
jmp 0x47cb36
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x47c381
push 1
push 2
lea ecx, [ebp - 0x114]
call fcn.0040b160
mov dword [ebp - 4], 2
mov ecx, dword [ebp + 8]
push ecx
push 0x61aacc
lea edx, [ebp - 0x114]
push edx
call fcn.00409c80
add esp, 8
push eax
call fcn.00409c80
add esp, 8
lea eax, [ebp - 0x880]
push eax
lea ecx, [ebp - 0x114]
call fcn.00409610
mov dword [ebp - 0x978], eax
mov ecx, dword [ebp - 0x978]
mov dword [ebp - 0x97c], ecx
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x97c]
call fcn.0040bf30
push eax
push 0x61aae0
push 0x78d
push 0x61ab00
push 0xf0000000
call fcn.00409980
mov ecx, eax
call fcn.004fa910
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x880]
call fcn.0040c050
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x114]
call fcn.00409ef0
xor eax, eax
jmp 0x47cb36
cmp dword [ebp + 0x10], 0
je 0x47c391
mov edx, dword [ebp + 0x10]
movsx eax, byte [edx]
test eax, eax
jne 0x47c398
mov dword [ebp + 0x10], 0x609c8b
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x96c]
add ecx, 0xb4
push ecx
lea ecx, [ebp - 0x118]
call fcn.0040bfb0
mov dword [ebp - 4], 4
lea edx, [ebp - 0x120]
push edx
mov ecx, dword [ebp - 0x96c]
add ecx, 0x68
call fcn.004a6000
jmp 0x47c3e9
push 0
lea eax, [ebp - 0x888]
push eax
lea ecx, [ebp - 0x120]
call fcn.004803b0
lea ecx, [ebp - 0x890]
push ecx
mov ecx, dword [ebp - 0x96c]
add ecx, 0x68
call fcn.0049efd0
push eax
lea ecx, [ebp - 0x120]
call fcn.0042d140
movzx edx, al
test edx, edx
je 0x47c4fe
lea ecx, [ebp - 0x120]
call fcn.00413370
mov eax, dword [eax]
cmp eax, dword [ebp - 0x14]
jne 0x47c4f9
lea ecx, [ebp - 0x120]
call fcn.00413370
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], 0
jne 0x47c4f7
push 1
push 2
lea ecx, [ebp - 0x1a4]
call fcn.0040b160
mov byte [ebp - 4], 5
push str.:_QueryFromUpper
mov edx, dword [ebp + 8]
push edx
push 0x61ab30
lea eax, [ebp - 0x1a4]
push eax
call fcn.00409c80
add esp, 8
push eax
call fcn.00409c80
add esp, 8
push eax
call fcn.00409c80
add esp, 8
lea ecx, [ebp - 0x8ac]
push ecx
lea ecx, [ebp - 0x1a4]
call fcn.00409610
mov dword [ebp - 0x980], eax
mov edx, dword [ebp - 0x980]
mov dword [ebp - 0x984], edx
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x984]
call fcn.0040bf30
push eax
push 0x61ab38
push 0x7a2
push 0x61ab58
push 0x12
call fcn.00409980
mov ecx, eax
call fcn.004fa910
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x8ac]
call fcn.0040c050
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1a4]
call fcn.00409ef0
jmp 0x47c4fe
jmp 0x47c3d5
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x118]
call fcn.0040bf90
cmp dword [ebp - 0x10], 0
je 0x47ca22
mov dword [ebp - 0x1a8], 0
push 1
push 2
lea ecx, [ebp - 0x22c]
call fcn.0040b160
mov dword [ebp - 4], 7
mov eax, dword [ebp + 0x10]
push eax
push 0x61ab6c
mov ecx, dword [ebp + 0xc]
push ecx
push 0x30
lea edx, [ebp - 0x8ad]
push edx
call fcn.00487350
add esp, 8
push eax
push 8
lea eax, [ebp - 0x8b8]
push eax
call fcn.005cd3f2
add esp, 8
push eax
push 0x41ed90
push 0x61ab78
mov ecx, dword [ebp + 8]
push ecx
push 0x61ab84
lea edx, [ebp - 0x22c]
push edx
call fcn.00409c80
add esp, 8
push eax
call fcn.00409c80
add esp, 8
push eax
call fcn.00409c80
add esp, 8
mov ecx, eax
call fcn.0041e290
push eax
call fcn.00487310
add esp, 8
push eax
call fcn.00487370
add esp, 8
mov ecx, eax
call fcn.004024e0
push eax
call fcn.00409c80
add esp, 8
push eax
call fcn.00409c80
add esp, 8
lea eax, [ebp - 0x8d4]
push eax
lea ecx, [ebp - 0x22c]
call fcn.00409610
mov dword [ebp - 0x988], eax
mov ecx, dword [ebp - 0x988]
mov dword [ebp - 0x98c], ecx
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x98c]
call fcn.0040bf30
push eax
push 0x61ab90
push 0x7ac
push 0x61abb0
push 0x12
call fcn.00409980
mov ecx, eax
call fcn.004fa910
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x8d4]
call fcn.0040c050
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x22c]
call fcn.00409ef0
push 0x400
push 0xcc
lea edx, [ebp - 0x634]
push edx
call fcn.005b4520
add esp, 0xc
mov dword [ebp - 0x230], 0
lea eax, [ebp - 0x230]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call dword [ebp - 0x10]
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0
je 0x47c6a4
cmp dword [ebp - 0x230], 0
je 0x47c69f
mov eax, dword [ebp - 0x230]
push eax
mov ecx, dword [ebp + 0x14]
call fcn.0040bee0
jmp 0x47c7e1
cmp dword [ebp - 0x230], 0
je 0x47c7e1
push 1
push 2
lea ecx, [ebp - 0x6b4]
call fcn.0040b160
mov dword [ebp - 4], 9
push 0x61abc4
mov ecx, dword [ebp + 0x10]
push ecx
push 0x61abd0
mov edx, dword [ebp + 0xc]
push edx
push 0x30
lea eax, [ebp - 0x8d5]
push eax
call fcn.00487350
add esp, 8
push eax
push 8
lea ecx, [ebp - 0x8e0]
push ecx
call fcn.005cd3f2
add esp, 8
push eax
push 0x41ed90
push 0x61abd4
mov edx, dword [ebp + 8]
push edx
push 0x61abe0
lea eax, [ebp - 0x6b4]
push eax
call fcn.00409c80
add esp, 8
push eax
call fcn.00409c80
add esp, 8
push eax
call fcn.00409c80
add esp, 8
mov ecx, eax
call fcn.0041e290
push eax
call fcn.00487310
add esp, 8
push eax
call fcn.00487370
add esp, 8
mov ecx, eax
call fcn.004024e0
push eax
call fcn.00409c80
add esp, 8
push eax
call fcn.00409c80
add esp, 8
push eax
call fcn.00409c80
add esp, 8
lea ecx, [ebp - 0x8fc]
push ecx
lea ecx, [ebp - 0x6b4]
call fcn.00409610
mov dword [ebp - 0x990], eax
mov edx, dword [ebp - 0x990]
mov dword [ebp - 0x994], edx
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x994]
call fcn.0040bf30
push eax
push 0x61abe8
push 0x7c2
push 0x61ac08
push 0xf0000000
call fcn.00409980
mov ecx, eax
call fcn.004fa910
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x8fc]
call fcn.0040c050
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6b4]
call fcn.00409ef0
cmp dword [ebp - 0x230], 0
je 0x47c7f6
mov eax, dword [ebp - 0x230]
push eax
call fcn.0045d830
mov dword [ebp - 0x6b8], 0
jmp 0x47c811
mov ecx, dword [ebp - 0x6b8]
add ecx, 1
mov dword [ebp - 0x6b8], ecx
cmp dword [ebp - 0x6b8], 0x400
jae 0x47c8de
mov edx, dword [ebp - 0x6b8]
movzx eax, byte [ebp + edx - 0x634]
cmp eax, 0xcc
je 0x47c8d9
push 1
push 2
lea ecx, [ebp - 0x73c]
call fcn.0040b160
mov dword [ebp - 4], 0xb
push 0x61ac1c
lea ecx, [ebp - 0x73c]
push ecx
call fcn.00409c80
add esp, 8
lea edx, [ebp - 0x918]
push edx
lea ecx, [ebp - 0x73c]
call fcn.00409610
mov dword [ebp - 0x998], eax
mov eax, dword [ebp - 0x998]
mov dword [ebp - 0x99c], eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x99c]
call fcn.0040bf30
push eax
push 0x61ac28
push 0x7cb
push 0x61ac48
push 0xf0000000
call fcn.00409980
mov ecx, eax
call fcn.004fa910
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x918]
call fcn.0040c050
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x73c]
call fcn.00409ef0
jmp 0x47c802
cmp dword [ebp - 0x1a8], 0
je 0x47ca22
push 1
push 2
lea ecx, [ebp - 0x7bc]
call fcn.0040b160
mov dword [ebp - 4], 0xd
push 0x61ac5c
mov ecx, dword [ebp + 0x10]
push ecx
push 0x61ac70
mov edx, dword [ebp + 0xc]
push edx
push 0x30
lea eax, [ebp - 0x919]
push eax
call fcn.00487350
add esp, 8
push eax
push 8
lea ecx, [ebp - 0x924]
push ecx
call fcn.005cd3f2
add esp, 8
push eax
push 0x41ed90
push 0x61ac7c
mov edx, dword [ebp + 8]
push edx
push 0x61ac88
lea eax, [ebp - 0x7bc]
push eax
call fcn.00409c80
add esp, 8
push eax
call fcn.00409c80
add esp, 8
push eax
call fcn.00409c80
add esp, 8
mov ecx, eax
call fcn.0041e290
push eax
call fcn.00487310
add esp, 8
push eax
call fcn.00487370
add esp, 8
mov ecx, eax
call fcn.004024e0
push eax
call fcn.00409c80
add esp, 8
push eax
call fcn.00409c80
add esp, 8
push eax
call fcn.00409c80
add esp, 8
lea ecx, [ebp - 0x940]
push ecx
lea ecx, [ebp - 0x7bc]
call fcn.00409610
mov dword [ebp - 0x9a0], eax
mov edx, dword [ebp - 0x9a0]
mov dword [ebp - 0x9a4], edx
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x9a4]
call fcn.0040bf30
push eax
push 0x61ac90
push 0x7d0
push 0x61acb0
push 0x12
call fcn.00409980
mov ecx, eax
call fcn.004fa910
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x940]
call fcn.0040c050
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7bc]
call fcn.00409ef0
mov eax, 1
jmp 0x47cb36
push 1
push 2
lea ecx, [ebp - 0x83c]
call fcn.0040b160
mov dword [ebp - 4], 0xf
push 0x61acc4
mov eax, dword [ebp + 0x10]
push eax
push str._Query:
mov ecx, dword [ebp + 0xc]
push ecx
push 0x30
lea edx, [ebp - 0x941]
push edx
call fcn.00487350
add esp, 8
push eax
push 8
lea eax, [ebp - 0x94c]
push eax
call fcn.005cd3f2
add esp, 8
push eax
push 0x41ed90
push 0x61ace4
lea ecx, [ebp - 0x83c]
push ecx
call fcn.00409c80
add esp, 8
mov ecx, eax
call fcn.0041e290
push eax
call fcn.00487310
add esp, 8
push eax
call fcn.00487370
add esp, 8
mov ecx, eax
call fcn.004024e0
push eax
call fcn.00409c80
add esp, 8
push eax
call fcn.00409c80
add esp, 8
push eax
call fcn.00409c80
add esp, 8
lea edx, [ebp - 0x968]
push edx
lea ecx, [ebp - 0x83c]
call fcn.00409610
mov dword [ebp - 0x9a8], eax
mov eax, dword [ebp - 0x9a8]
mov dword [ebp - 0x9ac], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x9ac]
call fcn.0040bf30
push eax
push str.CPolicyManager::QueryFromUpper
push 0x7d4
push 0x61ad14
push 0x12
call fcn.00409980
mov ecx, eax
call fcn.004fa910
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x968]
call fcn.0040c050
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x83c]
call fcn.00409ef0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x234]
xor ecx, ebp
call fcn.005b0968
mov esp, ebp
pop ebp
ret 0x10