Function at 0x447560
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5ca3de
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push ebp
push esi
mov esi, ecx
push edi
lea edi, [esi + 0x20]
mov dword [esp + 0x10], esi
mov dword [esi], 0x5e9fbc
mov dword [esp + 0x14], edi
call fcn.005afeed
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [edi], eax
mov dword [esp + 0x24], 1
lea edi, [esi + 0x24]
mov dword [esp + 0x14], edi
call fcn.005afeed
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0x24], 3
lea ebx, [esi + 0xb4]
mov dword [esp + 0x14], ebx
call fcn.005afeed
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebx], eax
mov byte [esp + 0x24], 5
lea ebx, [esi + 0xb8]
mov dword [esp + 0x14], ebx
call fcn.005afeed
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebx], eax
mov byte [esp + 0x24], 7
lea ebx, [esi + 0xc4]
mov dword [esp + 0x14], ebx
call fcn.005afeed
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebx], eax
mov byte [esp + 0x24], 9
lea ebx, [esi + 0xc8]
mov dword [esp + 0x14], ebx
call fcn.005afeed
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebx], eax
mov byte [esp + 0x24], 0xb
lea ebx, [esi + 0xcc]
mov dword [esp + 0x14], ebx
call fcn.005afeed
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebx], eax
mov byte [esp + 0x24], 0xd
lea ecx, [esi + 0xd8]
call fcn.004a5400
mov byte [esp + 0x24], 0xe
lea ecx, [esi + 0x100]
call fcn.004a5400
mov byte [esp + 0x24], 0xf
lea ebx, [esi + 0x148]
mov dword [esp + 0x14], ebx
call fcn.005afeed
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebx], eax
mov byte [esp + 0x24], 0x11
lea ebx, [esi + 0x14c]
mov dword [esp + 0x14], ebx
call fcn.005afeed
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebx], eax
mov byte [esp + 0x24], 0x13
lea ebx, [esi + 0x150]
mov dword [esp + 0x14], ebx
call fcn.005afeed
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebx], eax
mov byte [esp + 0x24], 0x15
lea ebx, [esi + 0x154]
mov dword [esp + 0x14], ebx
call fcn.005afeed
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebx], eax
mov byte [esp + 0x24], 0x17
lea ebx, [esi + 0x15c]
mov dword [esp + 0x14], ebx
call fcn.005afeed
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebx], eax
mov byte [esp + 0x24], 0x19
mov ebp, dword [esp + 0x2c]
push ebp
mov ecx, esi
call fcn.00445cf0
mov ebx, dword [esp + 0x30]
test ebx, ebx
jne 0x44773d
xor eax, eax
jmp 0x447746
push ebx
call fcn.0057a0fd
add esp, 4
push eax
push ebx
mov ecx, edi
call fcn.004053c0
mov ecx, esi
call fcn.004469c0
test eax, eax
je 0x4477fd
mov eax, dword [esp + 0x38]
mov ecx, dword [esi + 0x28]
mov edi, dword [esp + 0x3c]
neg eax
sbb eax, eax
and eax, 8
and ecx, 0xfffffff7
or eax, ecx
test edi, edi
mov dword [esi + 0x28], eax
je 0x4477b9
mov eax, dword [esi + 0xa0]
mov ecx, dword [esi + 0xa4]
add eax, 0x989680
lea edx, [esp + 0x14]
push edx
adc ecx, 0
push edi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
test eax, eax
jg 0x4477b9
mov eax, dword [edi]
mov dword [esi + 0xa0], eax
mov ecx, dword [edi + 4]
mov dword [esi + 0xa4], ecx
mov eax, dword [ebp + 0xf0]
test eax, eax
mov eax, dword [esi + 0x28]
je 0x4477ee
or eax, 0x100
mov dword [esi + 0x28], eax
mov edx, dword [ebp + 0x100]
mov dword [esi + 0x60], edx
mov eax, dword [ebp + 0x104]
mov dword [esi + 0x64], eax
mov ecx, dword [ebp + 0x20]
mov dword [esi + 0x68], ecx
mov edx, dword [ebp + 0x24]
mov dword [esi + 0x6c], edx
jmp 0x4477f6
and eax, 0xfffffeff
mov dword [esi + 0x28], eax
and dword [esi + 0x28], 0xfffff9ff
mov dword [esp + 0x24], 0xffffffff
mov ecx, dword [esp + 0x1c]
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x18
ret 0x14