Function at 0x41b140
Capabilities:
Access peb ldr_data
Get ntdll base address
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x64
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x14], 0x41c1f0
mov edi, dword [ebp + 0xc]
lea eax, [ebp - 0x18]
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
lea eax, [ebp - 0x70]
push edi
push eax
call fcn.0044cde0
add esp, 8
mov eax, dword [edi + 0xc]
cmp eax, 0x80000003
jne 0x41b1bb
mov dword [ebp - 0x58], 0x80000003
mov eax, dword [edi + 0x18]
cmp eax, 0x80000003
jne 0x41b228
mov dword [ebp - 0x28], 0x80000003
mov eax, dword [edi + 0x24]
cmp eax, 0x80000003
jne 0x41b295
mov eax, 0x80000003
jmp 0x41b2e9
add eax, 0x80000000
mov ecx, 1
cmp eax, 3
cmovb ecx, eax
test ecx, ecx
je 0x41b1f0
cmp ecx, 1
jne 0x41b1f9
lea eax, [edi + 0xc]
mov dword [ebp - 0x10], 0
lea ecx, [ebp - 0x4c]
push eax
push ecx
call fcn.0044cde0
mov edi, dword [ebp + 0xc]
add esp, 8
jmp 0x41b20a
mov dword [ebp - 0x4c], 0x80000000
jmp 0x41b20a
movsd xmm0, qword [edi + 0x10]
movsd qword [ebp - 0x48], xmm0
mov dword [ebp - 0x4c], 0x80000002
mov eax, dword [ebp - 0x44]
movsd xmm0, qword [ebp - 0x4c]
mov dword [ebp - 0x50], eax
movsd qword [ebp - 0x58], xmm0
mov eax, dword [edi + 0x18]
cmp eax, 0x80000003
je 0x41b19c
add eax, 0x80000000
mov ecx, 1
cmp eax, 3
cmovb ecx, eax
test ecx, ecx
je 0x41b25d
cmp ecx, 1
jne 0x41b266
lea eax, [edi + 0x18]
mov dword [ebp - 0x10], 1
lea ecx, [ebp - 0x34]
push eax
push ecx
call fcn.0044cde0
mov edi, dword [ebp + 0xc]
add esp, 8
jmp 0x41b277
mov dword [ebp - 0x34], 0x80000000
jmp 0x41b277
movsd xmm0, qword [edi + 0x1c]
movsd qword [ebp - 0x30], xmm0
mov dword [ebp - 0x34], 0x80000002
mov eax, dword [ebp - 0x2c]
movsd xmm0, qword [ebp - 0x34]
mov dword [ebp - 0x20], eax
movsd qword [ebp - 0x28], xmm0
mov eax, dword [edi + 0x24]
cmp eax, 0x80000003
je 0x41b1b1
add eax, 0x80000000
mov ecx, 1
cmp eax, 3
cmovb ecx, eax
test ecx, ecx
je 0x41b2cd
cmp ecx, 1
jne 0x41b2d4
lea eax, [edi + 0x24]
mov dword [ebp - 0x10], 4
lea ecx, [ebp - 0x4c]
push eax
push ecx
call fcn.0044cde0
add esp, 8
mov eax, dword [ebp - 0x4c]
mov edi, dword [ebp + 0xc]
jmp 0x41b2e3
mov eax, 0x80000000
jmp 0x41b2e3
movsd xmm0, qword [edi + 0x28]
mov eax, 0x80000002
movsd qword [ebp - 0x48], xmm0
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
mov esi, dword [ebp - 0x20]
movsd xmm0, qword [ebp - 0x28]
mov dword [ebp - 0x44], esi
movsd qword [ebp - 0x4c], xmm0
mov dword [ebp - 0x40], eax
mov eax, dword [edi + 0x30]
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], edx
cmp eax, 0x80000003
jne 0x41b327
mov dword [ebp - 0x64], 0x80000003
mov eax, dword [edi + 0x3c]
cmp eax, 0x80000003
jne 0x41b390
mov ecx, 0x80000003
jmp 0x41b3e1
add eax, 0x80000000
mov ecx, 1
cmp eax, 3
cmovb ecx, eax
test ecx, ecx
je 0x41b35c
cmp ecx, 1
jne 0x41b365
lea eax, [edi + 0x30]
mov dword [ebp - 0x10], 2
lea ecx, [ebp - 0x28]
push eax
push ecx
call fcn.0044cde0
mov edi, dword [ebp + 0xc]
add esp, 8
jmp 0x41b376
mov dword [ebp - 0x28], 0x80000000
jmp 0x41b376
movsd xmm0, qword [edi + 0x34]
movsd qword [ebp - 0x24], xmm0
mov dword [ebp - 0x28], 0x80000002
mov eax, dword [ebp - 0x20]
movsd xmm0, qword [ebp - 0x28]
mov dword [ebp - 0x5c], eax
movsd qword [ebp - 0x64], xmm0
mov eax, dword [edi + 0x3c]
cmp eax, 0x80000003
je 0x41b31d
add eax, 0x80000000
mov ecx, 1
cmp eax, 3
cmovb ecx, eax
test ecx, ecx
je 0x41b3c5
cmp ecx, 1
jne 0x41b3cc
add edi, 0x3c
mov dword [ebp - 0x10], 3
lea eax, [ebp - 0x34]
push edi
push eax
call fcn.0044cde0
add esp, 8
mov ecx, dword [ebp - 0x34]
jmp 0x41b3db
mov ecx, 0x80000000
jmp 0x41b3db
movsd xmm0, qword [edi + 0x40]
mov ecx, 0x80000002
movsd qword [ebp - 0x30], xmm0
mov edx, dword [ebp - 0x30]
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp + 8]
mov edi, dword [ebp - 0x5c]
movsd xmm0, qword [ebp - 0x64]
movsd xmm2, qword [ebp - 0x70]
movsd xmm1, qword [ebp - 0x58]
mov dword [eax + 0x38], edi
mov edi, dword [ebp - 0x68]
movsd qword [eax + 0x30], xmm0
movsd qword [eax], xmm2
movsd xmm2, qword [ebp - 0x4c]
mov dword [eax + 8], edi
mov edi, dword [ebp - 0x50]
movsd qword [eax + 0xc], xmm1
movsd xmm1, qword [ebp - 0x44]
mov dword [eax + 0x14], edi
movsd qword [eax + 0x20], xmm1
movsd xmm1, qword [ebp - 0x3c]
movsd qword [eax + 0x18], xmm2
movsd qword [eax + 0x28], xmm1
mov dword [eax + 0x3c], ecx
mov dword [eax + 0x40], edx
mov edx, dword [ebp - 0x18]
mov dword [eax + 0x44], esi
mov dword fs:[0], edx
add esp, 0x64
pop esi
pop edi
pop ebx
pop ebp
ret