Function at 0x47cdaa
Capabilities:
Access peb ldr_data
Check os version
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x2b8
mov esi, esp
mov dword [esi + 0x2a0], ebp
lea eax, [esi + 0x2a8]
mov dword [esi + 0x14], ecx
mov dword [esi + 8], edx
mov dword [eax - 4], esp
or dword [eax + 8], 0xffffffff
mov dword [eax + 4], 0x502c50
mov ecx, dword fs:[0]
mov dword [eax], ecx
mov dword fs:[0], eax
lea eax, [edx + 0x70]
mov dword [esi + 0x88], 2
and dword [esi + 0x98], 0
mov dword [esi + 0x10], eax
lea eax, [edx + 0xa8]
mov dword [esi + 0xc], eax
lea eax, [edx + 0x74]
mov dword [esi + 0x30], eax
lea eax, [edx + 0x78]
mov dword [esi + 0x4c], eax
mov ecx, dword [esi + 0x10]
mov edi, dword [ecx]
lea eax, [edi - 3]
cmp eax, 1
ja 0x47ce48
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0xbc]
mov eax, dword [ecx + 0xac]
mov ecx, dword [ecx + 0xb8]
cmp ecx, eax
sbb edx, 0
jae 0x47ce55
cmp eax, ecx
je 0x47ce55
jmp 0x47d07a
call fcn.0047d7ea
test al, al
jne 0x47d0ab
mov edx, dword [esi + 8]
and dword [edx + 0xbc], 0
and dword [edx + 0xb8], 0
and dword [edx + 0xac], 0
cmp edi, 3
mov dword [edx + 0x70], 4
jne 0x47d322
mov ecx, dword [esi + 0xc]
mov eax, dword [esi + 0x30]
mov edi, dword [edx + 0xc0]
mov word [esi + 0x7c], 0x904
mov byte [esi + 3], 1
mov dword [esi + 0x2b0], 3
mov dword [esi + 0x34], ecx
mov ecx, dword [edx + 0x84]
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
add edi, 9
lea edx, [esi + 0x34]
mov dword [esi + 0x38], edi
mov dword [esi + 0x3c], ecx
mov dword [esi + 0x78], ecx
lea ecx, [esi + 0x78]
movsd qword [esi + 0x58], xmm1
movsd qword [esi + 0x50], xmm0
call fcn.00445026
mov eax, dword [esi + 0x34]
mov ecx, dword [esi + 0x38]
mov edi, dword [eax + 4]
mov eax, dword [esi + 0x58]
mov dword [esi + 4], edi
not edi
mov dword [esi + 0x64], eax
cmp edi, ecx
cmovae edi, ecx
cmp eax, edi
mov dword [esi + 0x40], edi
jbe 0x47cf5a
mov byte [esi + 3], 1
lea ecx, [esi + 0x18]
lea edx, [esi + 0x50]
push edi
call fcn.00421fa5
pop eax
mov eax, dword [esi + 0x20]
mov edx, dword [esi + 0x1c]
mov dword [esi + 0x2b0], 5
lea ecx, [esi + 0x34]
push eax
call fcn.0043c0b5
pop eax
lea eax, [esi + 0x18]
mov byte [esi + 3], 1
mov dword [esi + 0x2b0], 3
push eax
call fcn.00439130
pop eax
movsd xmm0, qword [esi + 0x50]
movsd xmm1, qword [esi + 0x58]
mov eax, dword [esi + 0x3c]
xor ebx, ebx
movsd qword [esi + 0xa0], xmm0
movsd qword [esi + 0xa8], xmm1
mov dword [esi + 0xb0], eax
jmp 0x47cf74
mov edx, dword [esi + 0x54]
mov byte [esi + 3], 1
lea ecx, [esi + 0x34]
push eax
call fcn.0043c0b5
pop eax
and dword [esi + 0xa0], 0
mov bl, 1
mov ecx, dword [esi + 0x34]
mov eax, dword [ecx + 4]
and dword [esi + 0x18], 0
mov edx, eax
sub edx, dword [esi + 4]
bswap edx
mov dword [esi + 0x1c], edx
push 0xfffffffffffffffb
pop edx
mov dword [esi + 0x3c], ebx
test edx, edx
je 0x47cfa1
cmp byte [esi + edx + 0x1d], 0
lea edx, [edx + 1]
je 0x47cf8e
jmp 0x47d4de
mov edi, dword [ecx]
mov dword [esi + 0x2b0], 4
xor ecx, ecx
push 3
pop edx
push 0x5620b4
push eax
push edi
call fcn.0043978b
add esp, 0xc
mov ecx, eax
push 0x5620c4
push 3
lea eax, [esi + 0x1d]
push eax
call fcn.00463d7d
add esp, 0xc
mov edi, dword [esi + 0xa0]
mov ecx, dword [esi + 0x40]
test edi, edi
je 0x47cff8
mov eax, dword [esi + 0x34]
mov edx, dword [eax + 4]
cmp edx, 5
jb 0x47d4ce
mov eax, dword [eax]
add byte [eax + 4], 0xfc
lea eax, [esi + 0xa4]
cmp dword [esi + 0x64], ecx
mov dword [esi + 4], edi
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
movsd qword [esi + 0x70], xmm1
movsd qword [esi + 0x68], xmm0
ja 0x47d032
lea eax, [esi + 0x50]
mov dword [esi + 0x2b0], 1
push eax
call fcn.00439130
mov edi, dword [esi + 4]
add esp, 4
mov ecx, dword [esi + 0x10]
test edi, edi
je 0x47ce19
mov dword [esi + 0x2b0], 2
call fcn.00476330
mov edx, dword [esi + 0x10]
mov eax, dword [esi + 0x30]
mov ecx, dword [esi + 4]
movsd xmm0, qword [esi + 0x68]
movsd xmm1, qword [esi + 0x70]
mov dword [edx], 3
mov dword [eax], ecx
mov ecx, dword [esi + 0x4c]
movsd qword [ecx + 8], xmm1
movsd qword [ecx], xmm0
mov ecx, edx
jmp 0x47ce19
mov eax, dword [esi + 8]
cmp byte [eax + 0xc4], 0
je 0x47d1e2
mov eax, 0xfffffe00
test eax, eax
je 0x47d0dc
and dword [esi + eax + 0x2a0], 0
mov dword [esi + eax + 0x2a4], 1
add eax, 8
jmp 0x47d08f
mov eax, dword [esi + 8]
cmp byte [eax + 0xc4], 0
je 0x47d251
mov eax, 0xfffffe00
test eax, eax
je 0x47d13a
and dword [esi + eax + 0x2a0], 0
mov dword [esi + eax + 0x2a4], 1
add eax, 8
jmp 0x47d0c0
mov ecx, dword [esi + 0xc]
lea edx, [esi + 0xa0]
mov dword [esi + 0x2b0], 1
call fcn.0047d6b4
mov edx, eax
lea ecx, [esi + 0xa0]
push 0x5784c8
call fcn.0047d6e0
pop ecx
mov edi, dword [esi + 8]
mov ecx, dword [edi + 0xcc]
push edx
push eax
push dword [ebp + 8]
push dword [edi + 0xc8]
lea eax, [esi + 0x18]
push eax
call dword [ecx + 0x1c]
add esp, 0x14
cmp byte [esi + 0x18], 5
je 0x47d4a0
mov eax, dword [esi + 0x18]
mov edx, dword [esi + 0x1c]
jmp 0x47d22e
mov ecx, dword [esi + 0xc]
lea edx, [esi + 0xa0]
mov dword [esi + 0x2b0], 1
call fcn.0047d6b4
lea edx, [esi + 0xa0]
mov ecx, eax
push 0x57af74
push 0x40
mov dword [esi + 4], eax
call fcn.0047d6f8
mov ebx, dword [esi + 4]
add esp, 8
xor edi, edi
test edx, edx
je 0x47d19a
mov ecx, dword [esi + 0x10]
mov dword [esi + 0x40], eax
call fcn.0047d760
test eax, eax
je 0x47d19a
mov ecx, dword [esi + 0x10]
call fcn.0047d715
mov ebx, dword [esi + 4]
mov ecx, dword [esi + 0x40]
xor edi, edi
mov dword [ecx], edx
mov dword [ecx + 4], eax
inc edi
add edi, ebx
lea ecx, [esi + 0xa0]
mov edx, edi
push 0x5784c8
call fcn.0047d6e0
pop ecx
mov edi, dword [esi + 8]
mov ecx, dword [edi + 0xcc]
push edx
push eax
push dword [ebp + 8]
push dword [edi + 0xc8]
lea eax, [esi + 0x18]
push eax
call dword [ecx + 0x1c]
add esp, 0x14
cmp byte [esi + 0x18], 5
je 0x47d4aa
mov eax, dword [esi + 0x18]
mov edx, dword [esi + 0x1c]
jmp 0x47d2c6
mov ecx, dword [esi + 0xc]
mov dword [esi + 0x2b0], 1
call fcn.0047d653
mov edi, dword [esi + 8]
mov ecx, dword [edi + 0xcc]
push edx
push eax
push dword [ebp + 8]
push dword [edi + 0xc8]
lea eax, [esi + 0xa0]
push eax
call dword [ecx + 0x10]
add esp, 0x14
cmp byte [esi + 0xa0], 5
je 0x47d4a0
mov eax, dword [esi + 0xa0]
mov edx, dword [esi + 0xa4]
cmp al, 4
jne 0x47d495
mov ecx, dword [esi + 0xc]
mov dword [esi + 0x44], 0
call fcn.0047d67e
mov dword [esi + 0x48], 0
jmp 0x47ce16
mov ecx, eax
mov edx, dword [eax + 0xbc]
mov eax, dword [eax + 0xac]
mov dword [esi + 0x2b0], 1
mov ecx, dword [ecx + 0xb8]
cmp ecx, eax
sbb edx, 0
jae 0x47d284
cmp eax, ecx
je 0x47d284
mov ecx, dword [esi + 0xc]
call fcn.0047d653
jmp 0x47d28c
mov ecx, dword [esi + 0x10]
call fcn.0047d715
mov edi, dword [esi + 8]
mov ecx, dword [edi + 0xcc]
push edx
push eax
push dword [ebp + 8]
push dword [edi + 0xc8]
lea eax, [esi + 0xa0]
push eax
call dword [ecx + 0x10]
add esp, 0x14
cmp byte [esi + 0xa0], 5
je 0x47d4aa
mov eax, dword [esi + 0xa0]
mov edx, dword [esi + 0xa4]
cmp al, 4
jne 0x47d495
mov ebx, dword [esi + 8]
mov edi, dword [ebx + 0xb8]
mov ecx, dword [ebx + 0xac]
mov ebx, dword [ebx + 0xbc]
mov eax, edi
sub eax, ecx
sbb ebx, 0
jae 0x47d308
cmp ecx, edi
je 0x47d308
neg eax
mov ecx, edx
sub ecx, eax
jbe 0x47d315
mov dword [esi + 4], ecx
mov ecx, dword [esi + 0xc]
mov edx, eax
call fcn.0047d67e
mov edx, dword [esi + 4]
mov ecx, dword [esi + 0x10]
call fcn.0047d772
jmp 0x47ce16
mov ecx, dword [esi + 0xc]
call fcn.0047d67e
jmp 0x47ce16
cmp edi, 4
je 0x47d3f3
mov ecx, dword [esi + 0x30]
movsd xmm2, qword [edx + 0xa0]
mov dword [esi + 4], edi
mov dword [esi + 0x2b0], 6
movsd xmm1, qword [ecx + 8]
mov eax, dword [ecx + 0x10]
movsd xmm0, qword [ecx]
movsd qword [esi + 0xb8], xmm2
movsd xmm2, qword [edx + 0x88]
lea ecx, [edx + 0x38]
movsd qword [esi + 0x20], xmm1
movsd xmm1, qword [edx + 0x98]
mov dword [esi + 0x28], eax
movsd qword [esi + 0x18], xmm0
movsd qword [esi + 0xa0], xmm2
movsd qword [esi + 0xb0], xmm1
movsd xmm1, qword [edx + 0x90]
movsd qword [esi + 0xa8], xmm1
call fcn.0047634a
mov edx, dword [esi + 8]
mov eax, dword [esi + 4]
movsd xmm1, qword [esi + 0x20]
movsd xmm0, qword [esi + 0x18]
movsd xmm3, qword [esi + 0xa0]
movsd xmm2, qword [esi + 0xb0]
mov dword [edx + 0x38], eax
movsd qword [edx + 0x44], xmm1
mov eax, dword [esi + 0x28]
movsd xmm1, qword [esi + 0xa8]
movsd qword [edx + 0x3c], xmm0
mov dword [edx + 0x4c], eax
movsd qword [edx + 0x58], xmm1
movsd xmm1, qword [esi + 0xb8]
movsd qword [edx + 0x50], xmm3
movsd qword [edx + 0x60], xmm2
movsd qword [edx + 0x68], xmm1
mov eax, dword [edx + 0xc8]
mov ecx, dword [edx + 0xcc]
mov dword [esi + 0x2b0], 1
push dword [ebp + 8]
push eax
lea eax, [esi + 0xa0]
push eax
call dword [ecx + 0x14]
add esp, 0xc
cmp byte [esi + 0xa0], 5
jne 0x47d42b
mov eax, dword [esi + 0x14]
mov byte [eax], 5
jmp 0x47d45d
mov eax, dword [esi + 0xa0]
cmp al, 4
jne 0x47d44f
mov eax, dword [esi + 0x14]
and dword [esi + 0x2b0], 0
lea ecx, [esi + 0x80]
mov byte [eax], 4
call fcn.0043cf83
jmp 0x47d46f
mov edx, dword [esi + 0x14]
mov ecx, dword [esi + 0xa4]
mov dword [edx], eax
mov dword [edx + 4], ecx
and dword [esi + 0x2b0], 0
lea ecx, [esi + 0x80]
call fcn.0043cf83
or dword [esi + 0x2b0], 0xffffffff
lea ecx, [esi + 0x80]
call fcn.0043cf0c
mov eax, dword [esi + 0x2a8]
mov dword fs:[0], eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, eax
shrd ecx, edx, 8
shr edx, 8
jmp 0x47d4b0
mov edx, dword [esi + 0x48]
mov ecx, dword [esi + 0x44]
mov al, 5
jmp 0x47d4b0
xor ecx, ecx
mov al, 5
xor edx, edx
cmp al, 5
je 0x47d423
mov edi, dword [esi + 0x14]
shld edx, ecx, 8
shl ecx, 8
movzx eax, al
or eax, ecx
mov dword [edi + 4], edx
mov dword [edi], eax
jmp 0x47d45d
push 4
pop ecx
push 0x5620d4
call fcn.00526920
pop eax
jmp 0x47d4fb
mov dword [esi + 0x2b0], 4
push 0x3e
pop edx
mov ecx, 0x562066
push 0x5620a4
call fcn.00526990
pop eax
ud2