Function at 0x47f260
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Get ntdll base address
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff8
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 8], ebx
test dl, dl
je 0x47f27a
add esp, 0xfffffff0
call fcn.00403260
mov byte [ebp - 1], dl
mov esi, eax
xor eax, eax
push ebp
push 0x47ffee
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
mov eax, esi
call fcn.00416e90
lea eax, [esi + 0x54]
mov edx, 0x480020
call fcn.00403d9c
test byte [esi + 0x20], 0x10
je 0x47f2e2
xor ecx, ecx
mov dl, 1
mov eax, dword [0x476818]
call fcn.00476e48
mov ebx, eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x480030
mov edx, 0x480044
mov eax, ebx
call fcn.00476edc
mov edx, dword [ebp - 8]
lea eax, [esi + 0x5c]
call fcn.00403d9c
mov eax, ebx
call fcn.00402f60
mov byte [esi + 0x60], 1
mov byte [esi + 0x62], 1
mov dword [esi + 0x64], 0x79e
mov dword [esi + 0x68], 0x10000
mov dl, 1
mov eax, dword [0x47bc7c]
call fcn.00402f30
mov ebx, eax
mov dword [esi + 0x4c], ebx
lea eax, [ebx + 4]
mov edx, 0x48006c
call fcn.00403d9c
lea eax, [ebx + 8]
mov edx, 0x480084
call fcn.00403d9c
lea eax, [ebx + 0x10]
mov edx, 0x4800b4
call fcn.00403d9c
lea eax, [ebx + 0x14]
mov edx, 0x4800c8
call fcn.00403d9c
lea eax, [ebx + 0x18]
mov edx, 0x4800e4
call fcn.00403d9c
lea eax, [ebx + 0x1c]
mov edx, 0x4800f8
call fcn.00403d9c
lea eax, [ebx + 0x20]
mov edx, 0x480144
call fcn.00403d9c
lea eax, [ebx + 0x24]
mov edx, 0x480158
call fcn.00403d9c
lea eax, [ebx + 0x28]
mov edx, 0x48016c
call fcn.00403d9c
lea eax, [ebx + 0x2c]
mov edx, 0x48017c
call fcn.00403d9c
lea eax, [ebx + 0x30]
mov edx, 0x480190
call fcn.00403d9c
lea eax, [ebx + 0x34]
mov edx, 0x4801a8
call fcn.00403d9c
lea eax, [ebx + 0x40]
mov edx, 0x4801c0
call fcn.00403d9c
lea eax, [ebx + 0x44]
mov edx, 0x4801d0
call fcn.00403d9c
lea eax, [ebx + 0x48]
mov edx, 0x4801c0
call fcn.00403d9c
lea eax, [ebx + 0x38]
mov edx, 0x4801e0
call fcn.00403d9c
lea eax, [ebx + 0x3c]
mov edx, 0x480208
call fcn.00403d9c
lea eax, [ebx + 0x4c]
mov edx, 0x480230
call fcn.00403d9c
lea eax, [ebx + 0x50]
mov edx, 0x480258
call fcn.00403d9c
lea eax, [ebx + 0x54]
mov edx, 0x480280
call fcn.00403d9c
lea eax, [ebx + 0x58]
mov edx, 0x4802b0
call fcn.00403d9c
lea eax, [ebx + 0x5c]
mov edx, 0x4802c4
call fcn.00403d9c
lea eax, [ebx + 0x60]
mov edx, 0x4802d8
call fcn.00403d9c
lea eax, [ebx + 0x64]
mov edx, 0x4802f0
call fcn.00403d9c
lea eax, [ebx + 0x68]
mov edx, 0x480314
call fcn.00403d9c
lea eax, [ebx + 0x6c]
mov edx, 0x480328
call fcn.00403d9c
lea eax, [ebx + 0x70]
mov edx, 0x480360
call fcn.00403d9c
lea eax, [ebx + 0x74]
mov edx, 0x480378
call fcn.00403d9c
lea eax, [ebx + 0x78]
mov edx, 0x48039c
call fcn.00403d9c
lea eax, [ebx + 0x7c]
mov edx, 0x4803bc
call fcn.00403d9c
lea eax, [ebx + 0x80]
mov edx, 0x4803d4
call fcn.00403d9c
lea eax, [ebx + 0x84]
mov edx, 0x4803f8
call fcn.00403d9c
lea eax, [ebx + 0x88]
mov edx, 0x480418
call fcn.00403d9c
lea eax, [ebx + 0x8c]
mov edx, 0x480458
call fcn.00403d9c
lea eax, [ebx + 0x90]
mov edx, 0x480314
call fcn.00403d9c
lea eax, [ebx + 0x94]
mov edx, 0x480468
call fcn.00403d9c
lea eax, [ebx + 0x98]
call fcn.00403d48
lea eax, [ebx + 0x9c]
mov edx, 0x480478
call fcn.00403d9c
lea eax, [ebx + 0xa0]
mov edx, 0x480488
call fcn.00403d9c
lea eax, [ebx + 0xa4]
mov edx, 0x4804b4
call fcn.00403d9c
lea eax, [ebx + 0xc]
mov edx, 0x4804f0
call fcn.00403d9c
mov dl, 1
mov eax, dword [0x47d864]
call fcn.00402f30
mov ebx, eax
mov dword [esi + 0x50], ebx
lea eax, [ebx + 4]
mov edx, 0x4804fc
call fcn.00403d9c
lea eax, [ebx + 8]
mov edx, 0x480530
call fcn.00403d9c
lea eax, [ebx + 0xc]
mov edx, 0x48056c
call fcn.00403d9c
lea eax, [ebx + 0x10]
mov edx, 0x480594
call fcn.00403d9c
lea eax, [ebx + 0x14]
mov edx, 0x4805b4
call fcn.00403d9c
lea eax, [ebx + 0x18]
mov edx, 0x4805d4
call fcn.00403d9c
lea eax, [ebx + 0x1c]
mov edx, 0x480600
call fcn.00403d9c
lea eax, [ebx + 0x20]
mov edx, 0x480628
call fcn.00403d9c
lea eax, [ebx + 0x24]
mov edx, 0x480668
call fcn.00403d9c
lea eax, [ebx + 0x28]
mov edx, 0x4806ac
call fcn.00403d9c
lea eax, [ebx + 0x2c]
mov edx, 0x4806d4
call fcn.00403d9c
lea eax, [ebx + 0x30]
mov edx, 0x480704
call fcn.00403d9c
lea eax, [ebx + 0x34]
mov edx, 0x480730
call fcn.00403d9c
lea eax, [ebx + 0x38]
mov edx, 0x480764
call fcn.00403d9c
lea eax, [ebx + 0x3c]
mov edx, 0x480798
call fcn.00403d9c
lea eax, [ebx + 0x40]
mov edx, 0x4807e8
call fcn.00403d9c
lea eax, [ebx + 0x44]
mov edx, 0x480820
call fcn.00403d9c
lea eax, [ebx + 0x48]
mov edx, 0x480858
call fcn.00403d9c
lea eax, [ebx + 0x4c]
mov edx, 0x480890
call fcn.00403d9c
lea eax, [ebx + 0x50]
mov edx, 0x4808cc
call fcn.00403d9c
lea eax, [ebx + 0x54]
mov edx, 0x480908
call fcn.00403d9c
lea eax, [ebx + 0x58]
mov edx, 0x480944
call fcn.00403d9c
lea eax, [ebx + 0x5c]
mov edx, 0x48097c
call fcn.00403d9c
lea eax, [ebx + 0x60]
mov edx, 0x4809b0
call fcn.00403d9c
lea eax, [ebx + 0x64]
mov edx, 0x4809c0
call fcn.00403d9c
lea eax, [ebx + 0x68]
mov edx, 0x4809e0
call fcn.00403d9c
lea eax, [ebx + 0x6c]
mov edx, 0x480a00
call fcn.00403d9c
lea eax, [ebx + 0x70]
mov edx, 0x480a20
call fcn.00403d9c
lea eax, [ebx + 0x74]
mov edx, 0x480a54
call fcn.00403d9c
lea eax, [ebx + 0x78]
mov edx, 0x480a78
call fcn.00403d9c
lea eax, [ebx + 0x7c]
mov edx, 0x480a90
call fcn.00403d9c
lea eax, [ebx + 0x80]
mov edx, 0x480ab4
call fcn.00403d9c
lea eax, [ebx + 0x84]
mov edx, 0x480adc
call fcn.00403d9c
lea eax, [ebx + 0x88]
mov edx, 0x480b04
call fcn.00403d9c
lea eax, [ebx + 0x8c]
mov edx, 0x480b1c
call fcn.00403d9c
lea eax, [ebx + 0x90]
mov edx, 0x480b48
call fcn.00403d9c
lea eax, [ebx + 0x94]
mov edx, 0x480b7c
call fcn.00403d9c
mov dl, 1
mov eax, dword [0x47c534]
call fcn.00402f30
mov edi, eax
mov dword [ebx + 0x98], edi
lea eax, [edi + 4]
mov edx, 0x480b90
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 8
mov edx, 0x480ba0
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0xc
mov edx, 0x480bb0
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x10
mov edx, 0x480bc4
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x14
mov edx, 0x480bdc
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x18
mov edx, 0x480bec
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x1c
mov edx, 0x480c00
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x20
mov edx, 0x480c10
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x24
mov edx, 0x480c20
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x28
mov edx, 0x480c30
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x2c
mov edx, 0x480c40
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x30
mov edx, 0x480c50
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x34
mov edx, 0x480c60
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x38
mov edx, 0x480c70
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x3c
mov edx, 0x480c84
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x40
mov edx, 0x480c94
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x44
mov edx, 0x480ca8
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x48
mov edx, 0x480cbc
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x4c
mov edx, 0x480cd0
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x50
mov edx, 0x480ce8
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x54
mov edx, 0x480cf8
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x5c
mov edx, 0x480d08
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x60
mov edx, 0x480d18
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x64
mov edx, 0x480d2c
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x68
mov edx, 0x480d40
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x6c
mov edx, 0x480d54
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x70
mov edx, 0x480d68
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x78
mov edx, 0x480d78
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x7c
mov edx, 0x480d88
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x80
mov edx, 0x480da0
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x84
mov edx, 0x480db4
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x74
mov edx, 0x480dc4
call fcn.00403d9c
mov eax, dword [ebx + 0x98]
add eax, 0x88
mov edx, 0x480dd4
call fcn.00403d9c
mov dl, 1
mov eax, dword [0x47cc44]
call fcn.00402f30
mov edi, eax
mov dword [ebx + 0x9c], edi
lea eax, [edi + 4]
mov edx, 0x480c10
call fcn.00403d9c
mov eax, dword [ebx + 0x9c]
add eax, 8
mov edx, 0x480d08
call fcn.00403d9c
mov eax, dword [ebx + 0x9c]
add eax, 0xc
mov edx, 0x480c30
call fcn.00403d9c
mov eax, dword [ebx + 0x9c]
add eax, 0x10
mov edx, 0x480c40
call fcn.00403d9c
mov eax, dword [ebx + 0x9c]
add eax, 0x14
mov edx, 0x480c50
call fcn.00403d9c
mov eax, dword [ebx + 0x9c]
add eax, 0x18
mov edx, 0x480d78
call fcn.00403d9c
mov eax, dword [ebx + 0x9c]
add eax, 0x1c
mov edx, 0x480d88
call fcn.00403d9c
mov eax, dword [ebx + 0x9c]
add eax, 0x20
mov edx, 0x480de4
call fcn.00403d9c
mov eax, dword [ebx + 0x9c]
add eax, 0x24
mov edx, 0x480df4
call fcn.00403d9c
mov eax, dword [ebx + 0x9c]
add eax, 0x28
mov edx, 0x480e04
call fcn.00403d9c
mov eax, dword [ebx + 0x9c]
add eax, 0x2c
mov edx, 0x480e18
call fcn.00403d9c
mov eax, dword [ebx + 0x9c]
add eax, 0x30
mov edx, 0x480db4
call fcn.00403d9c
mov eax, dword [ebx + 0x9c]
add eax, 0x34
mov edx, 0x480e2c
call fcn.00403d9c
mov eax, dword [ebx + 0x9c]
add eax, 0x38
mov edx, 0x480e3c
call fcn.00403d9c
mov eax, dword [ebx + 0x9c]
add eax, 0x3c
mov edx, 0x480e50
call fcn.00403d9c
mov eax, dword [ebx + 0x9c]
add eax, 0x40
mov edx, 0x480cd0
call fcn.00403d9c
lea eax, [ebx + 0xa8]
mov edx, 0x480e6c
call fcn.00403d9c
lea eax, [ebx + 0xac]
mov edx, 0x480e78
call fcn.00403d9c
mov dl, 1
mov eax, dword [0x47cffc]
call fcn.00402f30
mov edi, eax
mov dword [ebx + 0xa0], edi
lea eax, [edi + 4]
mov edx, 0x480e84
call fcn.00403d9c
mov eax, dword [ebx + 0xa0]
add eax, 8
mov edx, 0x480e98
call fcn.00403d9c
mov eax, dword [ebx + 0xa0]
add eax, 0xc
mov edx, 0x480eac
call fcn.00403d9c
mov eax, dword [ebx + 0xa0]
add eax, 0x10
mov edx, 0x480ebc
call fcn.00403d9c
mov eax, dword [ebx + 0xa0]
add eax, 0x14
mov edx, 0x480ecc
call fcn.00403d9c
mov eax, dword [ebx + 0xa0]
add eax, 0x18
mov edx, 0x480ee0
call fcn.00403d9c
mov eax, dword [ebx + 0xa0]
add eax, 0x28
mov edx, 0x480ef4
call fcn.00403d9c
mov eax, dword [ebx + 0xa0]
add eax, 0x2c
mov edx, 0x480f04
call fcn.00403d9c
mov eax, dword [ebx + 0xa0]
add eax, 0x30
mov edx, 0x480f14
call fcn.00403d9c
mov eax, dword [ebx + 0xa0]
add eax, 0x34
mov edx, 0x480f24
call fcn.00403d9c
mov eax, dword [ebx + 0xa0]
add eax, 0x38
mov edx, 0x480f3c
call fcn.00403d9c
mov eax, dword [ebx + 0xa0]
add eax, 0x1c
mov edx, 0x480f48
call fcn.00403d9c
mov eax, dword [ebx + 0xa0]
add eax, 0x20
mov edx, 0x480f64
call fcn.00403d9c
mov eax, dword [ebx + 0xa0]
add eax, 0x24
mov edx, 0x480f80
call fcn.00403d9c
mov eax, dword [ebx + 0xa0]
add eax, 0x3c
mov edx, 0x480fac
call fcn.00403d9c
mov eax, dword [ebx + 0xa0]
add eax, 0x40
mov edx, 0x480fd4
call fcn.00403d9c
mov eax, dword [ebx + 0xa0]
add eax, 0x44
mov edx, 0x480fe4
call fcn.00403d9c
mov eax, dword [ebx + 0xa0]
add eax, 0x48
mov edx, 0x480ff4
call fcn.00403d9c
mov dl, 1
mov eax, dword [0x47d598]
call fcn.00402f30
mov edi, eax
mov dword [ebx + 0xa4], edi
lea eax, [edi + 4]
mov edx, 0x481004
call fcn.00403d9c
mov eax, dword [ebx + 0xa4]
add eax, 8
mov edx, 0x481010
call fcn.00403d9c
mov eax, dword [ebx + 0xa4]
add eax, 0xc
mov edx, 0x48102c
call fcn.00403d9c
mov eax, dword [ebx + 0xa4]
add eax, 0x10
mov edx, 0x481038
call fcn.00403d9c
mov eax, dword [ebx + 0xa4]
add eax, 0x14
mov edx, 0x481048
call fcn.00403d9c
mov eax, dword [ebx + 0xa4]
add eax, 0x18
mov edx, 0x48105c
call fcn.00403d9c
mov eax, dword [ebx + 0xa4]
add eax, 0x1c
mov edx, 0x48107c
call fcn.00403d9c
mov eax, dword [ebx + 0xa4]
add eax, 0x20
mov edx, 0x4810a8
call fcn.00403d9c
mov eax, dword [ebx + 0xa4]
add eax, 0x24
mov edx, 0x4810c8
call fcn.00403d9c
mov eax, dword [ebx + 0xa4]
add eax, 0x28
mov edx, 0x4810f0
call fcn.00403d9c
mov dl, 1
mov eax, dword [0x47ecd8]
call fcn.00481650
mov dword [esi + 0x28], eax
mov dl, 1
mov eax, dword [0x47ec1c]
call fcn.00402f30
mov ebx, eax
mov dword [esi + 0x24], ebx
mov byte [ebx + 4], 1
mov dl, 1
mov eax, dword [0x47e310]
call fcn.00402f30
mov ebx, eax
mov dword [esi + 0x34], ebx
lea eax, [ebx + 4]
mov edx, 0x48110c
call fcn.00403d9c
lea eax, [ebx + 8]
mov edx, 0x481120
call fcn.00403d9c
mov dl, 1
mov eax, dword [0x47e110]
call fcn.00402f30
mov ebx, eax
mov dword [esi + 0x2c], ebx
lea eax, [ebx + 4]
mov edx, 0x48113c
call fcn.00403d9c
lea eax, [ebx + 8]
mov edx, 0x481158
call fcn.00403d9c
lea eax, [ebx + 0xc]
mov edx, 0x481170
call fcn.00403d9c
lea eax, [ebx + 0x10]
mov edx, 0x481184
call fcn.00403d9c
lea eax, [ebx + 0x14]
mov edx, 0x481194
call fcn.00403d9c
lea eax, [ebx + 0x18]
mov edx, 0x4811a0
call fcn.00403d9c
lea eax, [ebx + 0x1c]
mov edx, 0x4811d0
call fcn.00403d9c
mov dl, 1
mov eax, dword [0x47e418]
call fcn.00402f30
mov ebx, eax
mov dword [esi + 0x30], ebx
lea eax, [ebx + 4]
mov edx, 0x4802d8
call fcn.00403d9c
lea eax, [ebx + 8]
mov edx, 0x481200
call fcn.00403d9c
lea eax, [ebx + 0xc]
mov edx, 0x481218
call fcn.00403d9c
lea eax, [ebx + 0x10]
mov edx, 0x480360
call fcn.00403d9c
lea eax, [ebx + 0x14]
mov edx, 0x480378
call fcn.00403d9c
lea eax, [ebx + 0x18]
mov edx, 0x481230
call fcn.00403d9c
lea eax, [ebx + 0x1c]
mov edx, 0x480478
call fcn.00403d9c
lea eax, [ebx + 0x20]
mov edx, 0x481250
call fcn.00403d9c
lea eax, [ebx + 0x24]
mov edx, 0x481260
call fcn.00403d9c
lea eax, [ebx + 0x28]
mov edx, 0x481270
call fcn.00403d9c
lea eax, [ebx + 0x2c]
mov edx, 0x4802f0
call fcn.00403d9c
lea eax, [ebx + 0x30]
mov edx, 0x4803d4
call fcn.00403d9c
lea eax, [ebx + 0x34]
mov edx, 0x481280
call fcn.00403d9c
lea eax, [ebx + 0x38]
mov edx, 0x4812b8
call fcn.00403d9c
lea eax, [ebx + 0x3c]
mov edx, 0x4812f8
call fcn.00403d9c
lea eax, [ebx + 0x40]
mov edx, 0x481330
call fcn.00403d9c
lea eax, [ebx + 0x44]
mov edx, 0x48134c
call fcn.00403d9c
lea eax, [ebx + 0x48]
mov edx, 0x481378
call fcn.00403d9c
mov dl, 1
mov eax, dword [0x47b978]
call fcn.00402f30
mov ebx, eax
mov dword [esi + 0x48], ebx
lea eax, [ebx + 4]
mov edx, 0x4813a0
call fcn.00403d9c
lea eax, [ebx + 8]
mov edx, 0x4813c8
call fcn.00403d9c
lea eax, [ebx + 0xc]
mov edx, 0x4813f0
call fcn.00403d9c
lea eax, [ebx + 0x10]
mov edx, 0x48140c
call fcn.00403d9c
lea eax, [ebx + 0x14]
mov edx, 0x48142c
call fcn.00403d9c
lea eax, [ebx + 0x18]
mov edx, 0x481470
call fcn.00403d9c
lea eax, [ebx + 0x1c]
mov edx, 0x4814b4
call fcn.00403d9c
lea eax, [ebx + 0x20]
mov edx, 0x4814d0
call fcn.00403d9c
lea eax, [ebx + 0x24]
mov edx, 0x4814f8
call fcn.00403d9c
lea eax, [ebx + 0x28]
mov edx, 0x481530
call fcn.00403d9c
lea eax, [ebx + 0x2c]
mov edx, 0x481470
call fcn.00403d9c
mov byte [esi + 0x38], 1
lea eax, [esi + 0x3c]
mov edx, 0x481564
call fcn.00403d9c
lea eax, [esi + 0x40]
mov edx, 0x481270
call fcn.00403d9c
lea eax, [esi + 0x58]
call fcn.00403d48
mov byte [esi + 0x61], 0
mov al, byte [0x481568]
mov byte [esi + 0x39], al
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47fff5
lea eax, [ebp - 8]
call fcn.00403d48
ret