Function at 0x4b96c8
Capabilities:
Access peb ldr_data
Get number of processors
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
mov ecx, 9
push 0
push 0
dec ecx
jne 0x4b96d0
push ebx
mov dword [ebp - 4], edx
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
call fcn.00406814
xor eax, eax
push ebp
push 0x4ba0fd
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x44393c]
call fcn.00443cf0
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x4ba0b2
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
mov ecx, 0x4ba118
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 8], al
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4ba150
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
add eax, 0xc
call fcn.0040682c
push 0
mov ecx, 0x4ba16c
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x10], al
push 0
mov ecx, 0x4ba190
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x11], al
push 0
mov ecx, 0x4ba1b4
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x12], al
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4ba1d4
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 8]
add eax, 0x14
call fcn.0040682c
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x4ba1f0
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 8]
add eax, 0x18
call fcn.0040682c
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ba20c
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 8]
add eax, 0x1c
call fcn.0040682c
push 0
mov ecx, 0x4ba22c
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0x20], eax
push 0
mov ecx, 0x4ba250
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x24], al
push 0
mov ecx, 0x4ba270
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x25], al
push 0x32
mov ecx, 0x4ba290
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0x28], eax
push 0x32
mov ecx, 0x4ba2ac
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0x2c], eax
push 0x32
mov ecx, 0x4ba2c8
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0x30], eax
push 0x64
mov ecx, 0x4ba2f0
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x4ba30c
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0x38], eax
push 0
mov ecx, 0x4ba328
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x3c], al
push 0
mov ecx, 0x4ba348
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x3d], al
push 0
mov ecx, 0x4ba36c
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x3e], al
push 0
mov ecx, 0x4ba38c
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x3f], al
push 1
mov ecx, 0x4ba3ac
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x40], al
push 1
mov ecx, 0x4ba3c8
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x41], al
push 1
mov ecx, 0x4ba3e4
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x42], al
push 0x32
mov ecx, 0x4ba404
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0x44], eax
push 0
mov ecx, 0x4ba418
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0x48], eax
push 1
mov ecx, 0x4ba430
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x4c], al
push 0x4ba448
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x4ba468
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 8]
add eax, 0x50
call fcn.0040682c
push 1
mov ecx, 0x4ba488
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x54], al
push 0x1d4c0
mov ecx, 0x4ba4a8
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0x58], eax
push 0
mov ecx, 0x4ba4c8
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0x5c], eax
push 1
mov ecx, 0x4ba4e8
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0x60], eax
push 0
mov ecx, 0x4ba510
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0x64], eax
push 0
mov ecx, 0x4ba534
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0x68], eax
push 0
mov ecx, 0x4ba558
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x6c], al
push 0
mov ecx, 0x4ba578
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x6d], al
push 0
mov ecx, 0x4ba59c
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x6e], al
push 1
mov ecx, 0x4ba5bc
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0x70], eax
push 1
mov ecx, 0x4ba5d8
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0x74], eax
push 1
mov ecx, 0x4ba5fc
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0x78], eax
push 0
mov ecx, 0x4ba618
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x7c], al
push 0
mov ecx, 0x4ba638
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x7d], al
push 0
mov ecx, 0x4ba660
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x7e], al
push 0
mov ecx, 0x4ba684
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x7f], al
push 0
mov ecx, 0x4ba6a4
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x80], al
push 0
mov ecx, 0x4ba6c8
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x81], al
push 1
mov ecx, 0x4ba6e8
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x82], al
push 0
mov ecx, 0x4ba708
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x83], al
push 0
mov ecx, 0x4ba728
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x84], al
push 1
mov ecx, 0x4ba748
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x85], al
push 0
mov ecx, 0x4ba75c
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x86], al
push 0
mov ecx, 0x4ba77c
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x87], al
push 0x12c
mov ecx, 0x4ba794
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0x88], eax
push 0x4ba7bc
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x4ba7d8
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 8]
add eax, 0x8c
call fcn.0040682c
push 0x4ba7f4
lea eax, [ebp - 0x28]
push eax
mov ecx, 0x4ba810
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 8]
add eax, 0x90
call fcn.0040682c
push 1
mov ecx, 0x4ba830
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0x94], al
push 0
lea eax, [ebp - 0x2c]
push eax
mov ecx, 0x4ba850
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 8]
add eax, 0x98
call fcn.0040682c
push 0
mov ecx, 0x4ba874
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0x9c], eax
push 0
mov ecx, 0x4ba898
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0xa0], eax
push 0x32
mov ecx, 0x4ba8b8
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0xa4], eax
push 0x80
mov ecx, 0x4ba8d8
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0xa8], eax
push 1
mov ecx, 0x4ba8fc
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0xac], al
push 0x4ba920
lea eax, [ebp - 0x30]
push eax
mov ecx, 0x4ba938
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 8]
add eax, 0xb0
call fcn.0040682c
push 1
mov ecx, 0x4ba958
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0xb4], al
push 1
mov ecx, 0x4ba978
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0xb5], al
push 0
mov ecx, 0x4ba99c
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0xb6], al
push 0
mov ecx, 0x4ba9c0
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0xb7], al
push 0
mov ecx, 0x4ba9e4
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0xb8], al
push 0
mov ecx, 0x4baa08
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0xb9], al
push 0
mov ecx, 0x4baa2c
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0xba], al
push 0
mov ecx, 0x4baa50
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x14]
mov edx, dword [ebp - 8]
mov byte [edx + 0xbb], al
push 0
lea eax, [ebp - 0x34]
push eax
mov ecx, 0x4baa74
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 8]
add eax, 0xbc
call fcn.0040682c
push 0
lea eax, [ebp - 0x38]
push eax
mov ecx, 0x4baa9c
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 8]
add eax, 0xc0
call fcn.0040682c
push 0
lea eax, [ebp - 0x3c]
push eax
mov ecx, 0x4baac4
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 8]
add eax, 0xc4
call fcn.0040682c
push 0
lea eax, [ebp - 0x40]
push eax
mov ecx, 0x4baaec
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 8]
add eax, 0xc8
call fcn.0040682c
push 0
lea eax, [ebp - 0x44]
push eax
mov ecx, 0x4bab14
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 8]
add eax, 0xcc
call fcn.0040682c
push 0
lea eax, [ebp - 0x48]
push eax
mov ecx, 0x4bab3c
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 8]
add eax, 0xd0
call fcn.0040682c
push 0
mov ecx, 0x4bab64
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0xd4], eax
push 0
mov ecx, 0x4bab84
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0xd8], eax
push 0
mov ecx, 0x4baba4
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0xdc], eax
push 0
mov ecx, 0x4babc4
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0xe0], eax
push 0
mov ecx, 0x4babe4
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0xe4], eax
push 0
mov ecx, 0x4bac04
mov edx, 0x4ba134
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 8]
mov dword [edx + 0xe8], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ba0b9
mov eax, dword [ebp - 0xc]
call fcn.00404da8
ret