Function at 0x475820
Capabilities:
Hash data via bcrypt
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
push ebx
mov ebx, dword [ebp + 0x20]
xor eax, eax
push esi
mov esi, eax
mov dword [ebp - 0x18], edx
push edi
mov edi, ecx
mov dword [ebp - 8], esi
cmp dword [ebx], eax
jne 0x475921
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
mov dword [ebx + 0x50], eax
mov dword [ebx + 0x34], eax
call fcn.0047ea7c
mov dword [ebx + 0x38], eax
call fcn.0047ea7c
mov dword [ebx + 0x3c], eax
call fcn.0047ea7c
mov dword [ebx + 0x40], eax
call fcn.0047ea7c
push 0x10
mov dword [ebx + 0x44], eax
lea eax, [ebx + 0x78]
push esi
push eax
call dword [sym.imp.msvcrt.dll_memset]
mov edx, dword [ebp + 0xc]
pop ecx
mov ecx, dword [ebx + 0x38]
call fcn.0047eabe
pop ecx
pop ecx
mov ecx, dword [ebx + 0x3c]
test ecx, ecx
je 0x47589e
push dword [ebp + 8]
mov edx, dword [ebp - 0x18]
push dword [ebx + 0x38]
call fcn.0047eb49
pop ecx
pop ecx
mov ecx, dword [ebx + 0x3c]
mov eax, dword [ecx + 4]
add eax, 6
mov dword [ebp + 0x20], eax
mov dword [ebx + 0x28], eax
call fcn.0047ed69
test al, 7
je 0x4758bd
mov eax, dword [ebp + 0x20]
dec eax
mov dword [ebx + 0x28], eax
push edi
push dword [ebx + 0x28]
call dword [edi + 4]
mov dword [ebx + 4], eax
pop ecx
pop ecx
test eax, eax
jne 0x4758dc
mov dword [edi + 0x12c], str.Out_of_memory_error
jmp 0x475e26
mov cl, byte [ebp + 0x10]
mov byte [eax], cl
mov edx, dword [ebx + 0x28]
mov ecx, dword [ebx + 4]
sub edx, 5
inc ecx
call fcn.00477a30
mov ecx, dword [ebx + 0x3c]
call fcn.0047ed69
test al, 7
je 0x475904
mov edx, dword [ebx + 4]
add edx, 5
jmp 0x475911
mov eax, dword [ebx + 4]
mov byte [eax + 5], 0
mov edx, dword [ebx + 4]
add edx, 6
mov ecx, dword [ebx + 0x3c]
call fcn.0047ee26
mov dword [ebx], 2
xor eax, eax
cmp dword [ebx], 2
jne 0x47595e
mov edx, dword [ebx + 4]
mov ecx, edi
push eax
push eax
push dword [ebx + 0x28]
call fcn.0047d218
add esp, 0xc
cmp eax, 0xffffffdb
jne 0x475945
push 0xffffffffffffffdb
pop eax
jmp 0x47660d
test eax, eax
je 0x475958
mov dword [edi + 0x12c], str.Unable_to_send_KEX_init_message
jmp 0x475deb
mov dword [ebx], 3
cmp dword [ebx], 3
jne 0x47598d
test byte [edi + 0x44], 1
je 0x475987
lea edx, [ebx + 0x88]
mov ecx, edi
call fcn.004789a3
cmp eax, 0xffffffdb
je 0x47593d
test eax, eax
jle 0x475df1
and dword [edi + 0x44], 0xfffffffe
mov dword [ebx], 4
cmp dword [ebx], 4
jne 0x475d79
mov dl, byte [ebp + 0x14]
lea eax, [ebx + 0x78]
push eax
sub esp, 0xc
lea eax, [ebx + 0x2c]
lea esi, [ebx + 8]
mov ecx, edi
push eax
push esi
call fcn.004788e3
add esp, 0x18
cmp eax, 0xffffffdb
je 0x47593d
test eax, eax
je 0x4759cc
mov dword [edi + 0x12c], str.Timed_out_waiting_for_KEX_reply
push 0xfffffffffffffff7
jmp 0x475e28
mov ecx, dword [esi]
inc ecx
mov dword [ebx + 0x48], ecx
call fcn.004779a5
mov dword [edi + 0x64], eax
add dword [ebx + 0x48], 4
push edi
push dword [edi + 0x64]
call dword [edi + 4]
mov dword [edi + 0x60], eax
pop ecx
pop ecx
test eax, eax
jne 0x4759fd
mov dword [edi + 0x12c], str.Unable_to_allocate_memory_for_a_copy_of_the_host_key
jmp 0x475e26
push dword [edi + 0x64]
push dword [ebx + 0x48]
push eax
call dword [sym.imp.msvcrt.dll_memcpy]
mov eax, dword [edi + 0x64]
lea ecx, [ebp - 0x38]
add dword [ebx + 0x48], eax
add esp, 0xc
mov edx, dword [0x516498]
push 0
push 0
push 0x10
call fcn.0047e20c
add esp, 0xc
test eax, eax
je 0x475a51
push dword [edi + 0x64]
mov edx, dword [edi + 0x60]
lea ecx, [ebp - 0x38]
call fcn.0047e2ac
pop ecx
lea edx, [edi + 0x68]
lea ecx, [ebp - 0x38]
call fcn.0047e2c9
mov dword [edi + 0x78], 1
jmp 0x475a55
and dword [edi + 0x78], 0
mov edx, dword [0x51649c]
lea ecx, [ebp - 0x38]
push 0
push 0
push 0x14
call fcn.0047e20c
mov edx, dword [edi + 0x60]
lea ecx, [ebp - 0x38]
add esp, 0xc
push dword [edi + 0x64]
call fcn.0047e2ac
pop ecx
lea edx, [edi + 0x7c]
lea ecx, [ebp - 0x38]
call fcn.0047e2c9
mov eax, dword [edi + 0x58]
lea ecx, [edi + 0x5c]
push ecx
push dword [edi + 0x64]
push dword [edi + 0x60]
push edi
call dword [eax + 8]
add esp, 0x10
test eax, eax
je 0x475aaf
mov dword [edi + 0x12c], str.Unable_to_initialize_hostkey_importer
push 0xfffffffffffffff6
jmp 0x475e28
mov esi, dword [ebx + 0x48]
mov ecx, esi
call fcn.004779a5
mov ecx, dword [ebx + 0x40]
mov edx, eax
lea eax, [esi + 4]
mov dword [ebx + 0x58], edx
mov dword [ebx + 0x4c], eax
add eax, edx
push dword [ebx + 0x4c]
mov dword [ebx + 0x48], eax
call fcn.0047ed97
mov esi, dword [ebx + 0x48]
pop ecx
mov ecx, esi
call fcn.004779a5
mov ecx, dword [ebx + 0x44]
mov dword [ebx + 0x60], eax
lea eax, [esi + 4]
mov dword [ebx + 0x48], eax
mov dword [ebx + 0x54], eax
test ecx, ecx
je 0x475b02
push dword [ebp + 8]
mov edx, dword [ebx + 0x40]
push dword [ebx + 0x38]
call fcn.0047eb49
pop ecx
pop ecx
mov ecx, dword [ebx + 0x44]
mov esi, dword [ecx + 4]
add esi, 5
mov dword [ebx + 0x5c], esi
call fcn.0047ed69
test al, 7
je 0x475b1d
lea eax, [esi - 1]
mov dword [ebx + 0x5c], eax
push edi
push dword [ebx + 0x5c]
call dword [edi + 4]
mov dword [ebx + 0x50], eax
pop ecx
pop ecx
test eax, eax
jne 0x475b3c
mov dword [edi + 0x12c], str.Unable_to_allocate_buffer_for_K
jmp 0x475e26
mov edx, dword [ebx + 0x5c]
mov ecx, eax
sub edx, 4
call fcn.00477a30
mov ecx, dword [ebx + 0x44]
call fcn.0047ed69
test al, 7
je 0x475b5d
mov edx, dword [ebx + 0x50]
add edx, 4
jmp 0x475b6a
mov eax, dword [ebx + 0x50]
mov byte [eax + 4], 0
mov edx, dword [ebx + 0x50]
add edx, 5
mov ecx, dword [ebx + 0x44]
call fcn.0047ee26
mov edx, dword [0x51649c]
lea ecx, [ebx + 0x64]
push 0
push 0
push 0x14
call fcn.0047e20c
mov eax, dword [edi + 0xc8]
lea esi, [ebx + 0x10]
add esp, 0xc
test eax, eax
je 0x475bce
push eax
call dword [sym.imp.msvcrt.dll_strlen]
pop ecx
mov ecx, esi
lea edx, [eax - 2]
call fcn.00477a30
push 4
mov edx, esi
lea ecx, [ebx + 0x64]
call fcn.0047e2ac
pop ecx
push dword [edi + 0xc8]
call dword [sym.imp.msvcrt.dll_strlen]
mov edx, dword [edi + 0xc8]
sub eax, 2
pop ecx
push eax
jmp 0x475be8
push 4
mov edx, esi
mov dword [esi], 0x15000000
lea ecx, [ebx + 0x64]
call fcn.0047e2ac
pop ecx
push 0x15
mov edx, str.SSH_2.0_libssh2_2.0.0
lea ecx, [ebx + 0x64]
call fcn.0047e2ac
pop ecx
push dword [edi + 0x90]
call dword [sym.imp.msvcrt.dll_strlen]
pop ecx
mov edx, eax
mov ecx, esi
call fcn.00477a30
push 4
mov edx, esi
lea ecx, [ebx + 0x64]
call fcn.0047e2ac
pop ecx
push dword [edi + 0x90]
call dword [sym.imp.msvcrt.dll_strlen]
mov edx, dword [edi + 0x90]
pop ecx
push eax
lea ecx, [ebx + 0x64]
call fcn.0047e2ac
mov edx, dword [edi + 0xd0]
pop ecx
mov ecx, esi
call fcn.00477a30
push 4
mov edx, esi
lea ecx, [ebx + 0x64]
call fcn.0047e2ac
mov edx, dword [edi + 0xcc]
pop ecx
push dword [edi + 0xd0]
lea ecx, [ebx + 0x64]
call fcn.0047e2ac
mov edx, dword [edi + 0x98]
pop ecx
mov ecx, esi
call fcn.00477a30
push 4
mov edx, esi
lea ecx, [ebx + 0x64]
call fcn.0047e2ac
mov edx, dword [edi + 0x94]
pop ecx
push dword [edi + 0x98]
lea ecx, [ebx + 0x64]
call fcn.0047e2ac
mov edx, dword [edi + 0x64]
pop ecx
mov ecx, esi
call fcn.00477a30
push 4
mov edx, esi
lea ecx, [ebx + 0x64]
call fcn.0047e2ac
mov edx, dword [edi + 0x60]
pop ecx
push dword [edi + 0x64]
lea ecx, [ebx + 0x64]
call fcn.0047e2ac
cmp byte [ebp + 0x10], 0x20
pop ecx
jne 0x475cdc
mov dword [esi], 0x40000
lea ecx, [ebx + 0x64]
mov dword [ebx + 0x14], 0x60000
mov edx, esi
push 0xc
mov dword [ebx + 0x18], 0x80000
call fcn.0047e2ac
pop ecx
mov edx, dword [ebp + 0x18]
test edx, edx
je 0x475cef
push dword [ebp + 0x1c]
lea ecx, [ebx + 0x64]
call fcn.0047e2ac
pop ecx
mov eax, dword [ebx + 0x28]
lea ecx, [ebx + 0x64]
mov edx, dword [ebx + 4]
dec eax
push eax
inc edx
call fcn.0047e2ac
mov edx, dword [ebx + 0x58]
pop ecx
mov ecx, esi
call fcn.00477a30
push 4
mov edx, esi
lea ecx, [ebx + 0x64]
call fcn.0047e2ac
mov edx, dword [ebx + 0x4c]
pop ecx
push dword [ebx + 0x58]
lea ecx, [ebx + 0x64]
call fcn.0047e2ac
mov edx, dword [ebx + 0x50]
pop ecx
push dword [ebx + 0x5c]
lea ecx, [ebx + 0x64]
call fcn.0047e2ac
pop ecx
mov edx, esi
lea ecx, [ebx + 0x64]
call fcn.0047e2c9
mov eax, dword [edi + 0x58]
lea ecx, [edi + 0x5c]
push ecx
push 0x14
push esi
push dword [ebx + 0x60]
push dword [ebx + 0x54]
push edi
call dword [eax + 0x10]
add esp, 0x18
test eax, eax
je 0x475d6c
mov dword [edi + 0x12c], str.Unable_to_verify_hostkey_signature
push 0xfffffffffffffff5
jmp 0x475e28
mov esi, dword [ebp - 8]
mov byte [ebx + 0x24], 0x15
mov dword [ebx], 5
cmp dword [ebx], 5
jne 0x475db0
push 0
push 0
push 1
lea edx, [ebx + 0x24]
mov ecx, edi
call fcn.0047d218
add esp, 0xc
cmp eax, 0xffffffdb
je 0x47593d
test eax, eax
je 0x475daa
mov dword [edi + 0x12c], str.Unable_to_send_NEWKEYS_message
jmp 0x475deb
mov dword [ebx], 6
cmp dword [ebx], 6
jne 0x476598
lea eax, [ebx + 0x78]
mov dl, 0x15
push eax
sub esp, 0xc
lea eax, [ebx + 0x30]
lea ecx, [ebx + 0xc]
push eax
push ecx
mov ecx, edi
call fcn.004788e3
add esp, 0x18
cmp eax, 0xffffffdb
je 0x47593d
test eax, eax
je 0x475df8
mov dword [edi + 0x12c], str.Timed_out_waiting_for_NEWKEYS
mov dword [edi + 0x130], eax
mov esi, eax
jmp 0x47659b
or dword [edi + 0x34], 2
push edi
push dword [ebx + 0xc]
call dword [edi + 0xc]
cmp dword [edi + 0x48], 0
pop ecx
pop ecx
jne 0x475e4b
push edi
push 0x14
call dword [edi + 4]
pop ecx
pop ecx
mov ecx, eax
mov dword [edi + 0x48], ecx
test ecx, ecx
jne 0x475e34
mov dword [edi + 0x12c], str.Unable_to_allocate_buffer_for_SHA_digest
push 0xfffffffffffffffa
pop esi
mov dword [edi + 0x130], esi
jmp 0x47659b
push 0x14
lea eax, [ebx + 0x10]
push eax
push ecx
call dword [sym.imp.msvcrt.dll_memcpy]
add esp, 0xc
mov dword [edi + 0x4c], 0x14
mov eax, dword [edi + 0xd4]
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x475e64
lea eax, [edi + 0xd8]
push eax
push edi
call ecx
pop ecx
pop ecx
mov ecx, dword [edi + 0xd4]
xor eax, eax
cmp dword [ecx + 0x14], eax
je 0x47606b
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0xc], eax
mov eax, dword [ecx + 8]
add eax, 0x14
push edi
push eax
call dword [edi + 4]
mov dword [ebp + 0x20], eax
pop ecx
pop ecx
test eax, eax
je 0x476109
mov eax, dword [edi + 0xd4]
cmp dword [eax + 8], 0
jbe 0x475f33
mov esi, dword [ebp + 0x20]
mov edx, dword [0x51649c]
lea ecx, [ebp - 0x28]
push 0
push 0
push 0x14
call fcn.0047e20c
mov edx, dword [ebx + 0x50]
lea ecx, [ebp - 0x28]
add esp, 0xc
push dword [ebx + 0x5c]
call fcn.0047e2ac
pop ecx
push 0x14
lea edx, [ebx + 0x10]
lea ecx, [ebp - 0x28]
call fcn.0047e2ac
mov eax, dword [ebp - 0xc]
pop ecx
test eax, eax
je 0x475ee9
push eax
mov edx, esi
jmp 0x475f01
push 0
push 1
push str.ACBDEF
push dword [ebp - 0x28]
call dword [sym.imp.bcrypt.dll_BCryptHashData]
push dword [edi + 0x4c]
mov edx, dword [edi + 0x48]
lea ecx, [ebp - 0x28]
call fcn.0047e2ac
mov edx, dword [ebp - 0xc]
pop ecx
lea ecx, [ebp - 0x28]
lea edx, [edx + esi]
call fcn.0047e2c9
mov ecx, dword [ebp - 0xc]
mov eax, dword [edi + 0xd4]
add ecx, 0x14
mov dword [ebp - 0xc], ecx
cmp ecx, dword [eax + 8]
jb 0x475ea9
mov esi, dword [ebp - 8]
xor eax, eax
mov dword [ebp - 0x10], eax
mov eax, dword [edi + 0xd4]
push edi
mov eax, dword [eax + 0xc]
add eax, 0x14
push eax
call dword [edi + 4]
mov dword [ebp - 0xc], eax
pop ecx
pop ecx
test eax, eax
je 0x476343
mov eax, dword [edi + 0xd4]
cmp dword [eax + 0xc], 0
jbe 0x475ff3
mov esi, dword [ebp - 0xc]
mov edx, dword [0x51649c]
lea ecx, [ebp - 0x38]
push 0
push 0
push 0x14
call fcn.0047e20c
mov edx, dword [ebx + 0x50]
lea ecx, [ebp - 0x38]
add esp, 0xc
push dword [ebx + 0x5c]
call fcn.0047e2ac
pop ecx
push 0x14
lea edx, [ebx + 0x10]
lea ecx, [ebp - 0x38]
call fcn.0047e2ac
mov eax, dword [ebp - 0x10]
pop ecx
test eax, eax
je 0x475fa9
push eax
mov edx, esi
jmp 0x475fc1
push 0
push 1
push 0x4ed760
push dword [ebp - 0x38]
call dword [sym.imp.bcrypt.dll_BCryptHashData]
push dword [edi + 0x4c]
mov edx, dword [edi + 0x48]
lea ecx, [ebp - 0x38]
call fcn.0047e2ac
mov edx, dword [ebp - 0x10]
pop ecx
lea ecx, [ebp - 0x38]
lea edx, [edx + esi]
call fcn.0047e2c9
mov ecx, dword [ebp - 0x10]
mov eax, dword [edi + 0xd4]
add ecx, 0x14
mov dword [ebp - 0x10], ecx
cmp ecx, dword [eax + 0xc]
jb 0x475f69
mov esi, dword [ebp - 8]
mov ecx, dword [edi + 0xd4]
lea eax, [edi + 0xd8]
push eax
push 1
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0xc]
lea eax, [ebp - 0x14]
push eax
push dword [ebp + 0x20]
push ecx
push edi
call dword [ecx + 0x14]
add esp, 0x20
test eax, eax
jne 0x476244
cmp dword [ebp - 0x14], eax
je 0x476045
mov eax, dword [edi + 0xd4]
push dword [eax + 8]
push 0
push dword [ebp + 0x20]
call dword [sym.imp.msvcrt.dll_memset]
add esp, 0xc
push edi
push dword [ebp + 0x20]
call dword [edi + 0xc]
pop ecx
pop ecx
cmp dword [ebp - 0x18], 0
je 0x47606b
mov eax, dword [edi + 0xd4]
push dword [eax + 0xc]
push 0
push dword [ebp - 0xc]
call dword [sym.imp.msvcrt.dll_memset]
add esp, 0xc
push edi
push dword [ebp - 0xc]
call dword [edi + 0xc]
pop ecx
pop ecx
mov eax, dword [edi + 0x9c]
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x476084
lea eax, [edi + 0xa0]
push eax
push edi
call ecx
pop ecx
pop ecx
mov ecx, dword [edi + 0x9c]
xor eax, eax
cmp dword [ecx + 0x14], eax
je 0x4762a6
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov eax, dword [ecx + 8]
add eax, 0x14
push edi
push eax
call dword [edi + 4]
mov dword [ebp + 0x20], eax
pop ecx
pop ecx
test eax, eax
je 0x476548
mov eax, dword [edi + 0x9c]
cmp dword [eax + 8], 0
jbe 0x47615b
mov esi, dword [ebp + 0x20]
mov edx, dword [0x51649c]
lea ecx, [ebp - 0x38]
push 0
push 0
push 0x14
call fcn.0047e20c
mov edx, dword [ebx + 0x50]
lea ecx, [ebp - 0x38]
add esp, 0xc
push dword [ebx + 0x5c]
call fcn.0047e2ac
pop ecx
push 0x14
lea edx, [ebx + 0x10]
lea ecx, [ebp - 0x38]
call fcn.0047e2ac
mov eax, dword [ebp - 0x10]
pop ecx
test eax, eax
je 0x476111
push eax
mov edx, esi
jmp 0x476129
or esi, 0xffffffff
jmp 0x47659b
push 0
push 1
push 0x4ed764
push dword [ebp - 0x38]
call dword [sym.imp.bcrypt.dll_BCryptHashData]
push dword [edi + 0x4c]
mov edx, dword [edi + 0x48]
lea ecx, [ebp - 0x38]
call fcn.0047e2ac
mov edx, dword [ebp - 0x10]
pop ecx
lea ecx, [ebp - 0x38]
lea edx, [edx + esi]
call fcn.0047e2c9
mov ecx, dword [ebp - 0x10]
mov eax, dword [edi + 0x9c]
add ecx, 0x14
mov dword [ebp - 0x10], ecx
cmp ecx, dword [eax + 8]
jb 0x4760c9
mov esi, dword [ebp - 8]
xor eax, eax
mov dword [ebp - 0x10], eax
mov eax, dword [edi + 0x9c]
push edi
mov eax, dword [eax + 0xc]
add eax, 0x14
push eax
call dword [edi + 4]
mov dword [ebp - 0xc], eax
pop ecx
pop ecx
test eax, eax
je 0x476343
mov eax, dword [edi + 0x9c]
cmp dword [eax + 0xc], 0
jbe 0x47621b
mov esi, dword [ebp - 0xc]
mov edx, dword [0x51649c]
lea ecx, [ebp - 0x28]
push 0
push 0
push 0x14
call fcn.0047e20c
mov edx, dword [ebx + 0x50]
lea ecx, [ebp - 0x28]
add esp, 0xc
push dword [ebx + 0x5c]
call fcn.0047e2ac
pop ecx
push 0x14
lea edx, [ebx + 0x10]
lea ecx, [ebp - 0x28]
call fcn.0047e2ac
mov eax, dword [ebp - 0x10]
pop ecx
test eax, eax
je 0x4761d1
push eax
mov edx, esi
jmp 0x4761e9
push 0
push 1
push 0x4ed768
push dword [ebp - 0x28]
call dword [sym.imp.bcrypt.dll_BCryptHashData]
push dword [edi + 0x4c]
mov edx, dword [edi + 0x48]
lea ecx, [ebp - 0x28]
call fcn.0047e2ac
mov edx, dword [ebp - 0x10]
pop ecx
lea ecx, [ebp - 0x28]
lea edx, [edx + esi]
call fcn.0047e2c9
mov ecx, dword [ebp - 0x10]
mov eax, dword [edi + 0x9c]
add ecx, 0x14
mov dword [ebp - 0x10], ecx
cmp ecx, dword [eax + 0xc]
jb 0x476191
mov esi, dword [ebp - 8]
mov ecx, dword [edi + 0x9c]
lea eax, [edi + 0xa0]
push eax
push 0
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0xc]
lea eax, [ebp - 0x18]
push eax
push dword [ebp + 0x20]
push ecx
push edi
call dword [ecx + 0x14]
add esp, 0x20
test eax, eax
je 0x47625a
push edi
push dword [ebp + 0x20]
call dword [edi + 0xc]
push edi
push dword [ebp - 0xc]
call dword [edi + 0xc]
add esp, 0x10
jmp 0x476548
cmp dword [ebp - 0x18], 0
je 0x476280
mov eax, dword [edi + 0x9c]
push dword [eax + 8]
push 0
push dword [ebp + 0x20]
call dword [sym.imp.msvcrt.dll_memset]
add esp, 0xc
push edi
push dword [ebp + 0x20]
call dword [edi + 0xc]
pop ecx
pop ecx
cmp dword [ebp - 0x14], 0
je 0x4762a6
mov eax, dword [edi + 0x9c]
push dword [eax + 0xc]
push 0
push dword [ebp - 0xc]
call dword [sym.imp.msvcrt.dll_memset]
add esp, 0xc
push edi
push dword [ebp - 0xc]
call dword [edi + 0xc]
pop ecx
pop ecx
mov eax, dword [edi + 0xdc]
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x4762bf
lea eax, [edi + 0xe4]
push eax
push edi
call ecx
pop ecx
pop ecx
mov ecx, dword [edi + 0xdc]
cmp dword [ecx + 0xc], 0
je 0x4763dc
and dword [ebp - 0x18], 0
xor eax, eax
mov dword [ebp + 0x20], eax
mov eax, dword [ecx + 8]
add eax, 0x14
push edi
push eax
call dword [edi + 4]
mov dword [ebp - 0x10], eax
pop ecx
pop ecx
test eax, eax
je 0x476548
mov eax, dword [edi + 0xdc]
cmp dword [eax + 8], 0
jbe 0x47639b
mov esi, dword [ebp - 0x10]
mov edx, dword [0x51649c]
lea ecx, [ebp - 0x38]
push 0
push 0
push 0x14
call fcn.0047e20c
mov edx, dword [ebx + 0x50]
lea ecx, [ebp - 0x38]
add esp, 0xc
push dword [ebx + 0x5c]
call fcn.0047e2ac
pop ecx
push 0x14
lea edx, [ebx + 0x10]
lea ecx, [ebp - 0x38]
call fcn.0047e2ac
mov eax, dword [ebp + 0x20]
pop ecx
test eax, eax
je 0x476351
push eax
mov edx, esi
jmp 0x476369
push edi
push dword [ebp + 0x20]
call dword [edi + 0xc]
pop ecx
pop ecx
jmp 0x476548
push 0
push 1
push 0x4ed76c
push dword [ebp - 0x38]
call dword [sym.imp.bcrypt.dll_BCryptHashData]
push dword [edi + 0x4c]
mov edx, dword [edi + 0x48]
lea ecx, [ebp - 0x38]
call fcn.0047e2ac
mov edx, dword [ebp + 0x20]
pop ecx
lea ecx, [ebp - 0x38]
lea edx, [edx + esi]
call fcn.0047e2c9
mov ecx, dword [ebp + 0x20]
mov eax, dword [edi + 0xdc]
add ecx, 0x14
mov dword [ebp + 0x20], ecx
cmp ecx, dword [eax + 8]
jb 0x476303
mov esi, dword [ebp - 8]
mov ecx, dword [edi + 0xdc]
lea eax, [edi + 0xe4]
push eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x10]
push edi
call dword [ecx + 0xc]
add esp, 0x10
cmp dword [ebp - 0x18], 0
je 0x4763dc
mov eax, dword [edi + 0xdc]
push dword [eax + 8]
push 0
push dword [ebp - 0x10]
call dword [sym.imp.msvcrt.dll_memset]
add esp, 0xc
push edi
push dword [ebp - 0x10]
call dword [edi + 0xc]
pop ecx
pop ecx
mov eax, dword [edi + 0xa4]
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x4763f5
lea eax, [edi + 0xac]
push eax
push edi
call ecx
pop ecx
pop ecx
mov ecx, dword [edi + 0xa4]
cmp dword [ecx + 0xc], 0
je 0x476504
and dword [ebp - 0x18], 0
xor eax, eax
mov dword [ebp + 0x20], eax
mov eax, dword [ecx + 8]
add eax, 0x14
push edi
push eax
call dword [edi + 4]
mov dword [ebp - 0x10], eax
pop ecx
pop ecx
test eax, eax
je 0x476548
mov eax, dword [edi + 0xa4]
cmp dword [eax + 8], 0
jbe 0x4764c3
mov esi, dword [ebp - 0x10]
mov edx, dword [0x51649c]
lea ecx, [ebp - 0x38]
push 0
push 0
push 0x14
call fcn.0047e20c
mov edx, dword [ebx + 0x50]
lea ecx, [ebp - 0x38]
add esp, 0xc
push dword [ebx + 0x5c]
call fcn.0047e2ac
pop ecx
push 0x14
lea edx, [ebx + 0x10]
lea ecx, [ebp - 0x38]
call fcn.0047e2ac
mov eax, dword [ebp + 0x20]
pop ecx
test eax, eax
je 0x476479
push eax
mov edx, esi
jmp 0x476491
push 0
push 1
push 0x4ed770
push dword [ebp - 0x38]
call dword [sym.imp.bcrypt.dll_BCryptHashData]
push dword [edi + 0x4c]
mov edx, dword [edi + 0x48]
lea ecx, [ebp - 0x38]
call fcn.0047e2ac
mov edx, dword [ebp + 0x20]
pop ecx
lea ecx, [ebp - 0x38]
lea edx, [edx + esi]
call fcn.0047e2c9
mov ecx, dword [ebp + 0x20]
mov eax, dword [edi + 0xa4]
add ecx, 0x14
mov dword [ebp + 0x20], ecx
cmp ecx, dword [eax + 8]
jb 0x476439
mov esi, dword [ebp - 8]
mov ecx, dword [edi + 0xa4]
lea eax, [edi + 0xac]
push eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x10]
push edi
call dword [ecx + 0xc]
add esp, 0x10
cmp dword [ebp - 0x18], 0
je 0x476504
mov eax, dword [edi + 0xa4]
push dword [eax + 8]
push 0
push dword [ebp - 0x10]
call dword [sym.imp.msvcrt.dll_memset]
add esp, 0xc
push edi
push dword [ebp - 0x10]
call dword [edi + 0xc]
pop ecx
pop ecx
mov eax, dword [edi + 0xe8]
test eax, eax
je 0x476524
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x476524
lea eax, [edi + 0xec]
push eax
push 1
push edi
call ecx
add esp, 0xc
mov eax, dword [edi + 0xe8]
test eax, eax
je 0x47654d
mov ecx, dword [eax + 0xc]
test ecx, ecx
je 0x47654d
lea eax, [edi + 0xec]
push eax
push 1
push edi
call ecx
add esp, 0xc
test eax, eax
je 0x47654d
push 0xfffffffffffffffb
pop esi
jmp 0x47659b
mov eax, dword [edi + 0xb0]
test eax, eax
je 0x47656d
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x47656d
lea eax, [edi + 0xb4]
push eax
push 0
push edi
call ecx
add esp, 0xc
mov eax, dword [edi + 0xb0]
test eax, eax
je 0x476598
mov ecx, dword [eax + 0xc]
test ecx, ecx
je 0x476598
lea eax, [edi + 0xb4]
push eax
push 0
push edi
call ecx
add esp, 0xc
test eax, eax
push 0xfffffffffffffffb
pop ecx
cmovne esi, ecx
mov dword [ebp - 8], esi
mov esi, dword [ebp - 8]
mov ecx, dword [ebx + 0x38]
call fcn.0047ee49
mov ecx, dword [ebx + 0x3c]
and dword [ebx + 0x38], 0
call fcn.0047ee49
mov ecx, dword [ebx + 0x40]
and dword [ebx + 0x3c], 0
call fcn.0047ee49
mov ecx, dword [ebx + 0x44]
and dword [ebx + 0x40], 0
call fcn.0047ee49
and dword [ebx + 0x44], 0
and dword [ebx + 0x34], 0
cmp dword [ebx + 4], 0
je 0x4765e2
push edi
push dword [ebx + 4]
call dword [edi + 0xc]
and dword [ebx + 4], 0
pop ecx
pop ecx
cmp dword [ebx + 8], 0
je 0x4765f5
push edi
push dword [ebx + 8]
call dword [edi + 0xc]
and dword [ebx + 8], 0
pop ecx
pop ecx
cmp dword [ebx + 0x50], 0
je 0x476608
push edi
push dword [ebx + 0x50]
call dword [edi + 0xc]
and dword [ebx + 0x50], 0
pop ecx
pop ecx
and dword [ebx], 0
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret