Function at 0x4aa370
Capabilities:
Access peb ldr_data
Get ntdll base address
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x609f22
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
xor ebx, ebx
push 0x200
lea ecx, [esi + 0xac]
mov dword [esp + 0x18], esi
mov dword [esi + 4], ebx
mov dword [esi + 8], 6
mov dword [esi + 0xc], 0xa
mov dword [esi + 0x10], ebx
call fcn.004af490
push 0x200
lea ecx, [esi + 0xc0]
mov dword [esp + 0x24], ebx
call fcn.004af490
mov dword [esi + 0x1020], 0x64
mov dword [esi + 0x1024], 0x64
mov byte [esi + 0x1028], 1
mov dword [esi], 0x621378
mov eax, dword [0x64c4c8]
mov ecx, 9
mov dword [esi + 8], eax
xor eax, eax
lea edi, [esi + 0xfc]
mov edx, dword [esp + 0x2c]
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x30]
mov byte [esp + 0x20], 1
and ecx, 0xff
mov byte [esi + 0xa0], al
mov dword [esi + 0x9c], ecx
mov ecx, esi
mov dword [esi + 0x8c], edx
call fcn.004ad950
push 0x1c
call fcn.005faa3d
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x20], 2
je 0x4aa452
push 0x64
push esi
mov ecx, eax
call fcn.0045da80
jmp 0x4aa454
xor eax, eax
push 0x14
mov byte [esp + 0x24], 1
mov dword [esi + 0x90], eax
call fcn.005faa3d
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x20], 3
je 0x4aa480
push esi
mov ecx, eax
call fcn.00436f30
jmp 0x4aa482
xor eax, eax
mov dword [esi + 0x94], eax
mov edi, dword [esp + 0x28]
fld dword [0x660284]
fcomp dword [0x621374]
mov byte [esp + 0x20], 1
fnstsw ax
test ah, 1
jne 0x4aa4b4
push 1
push 0x73d14c
push edi
call fcn.004bee50
add esp, 0xc
mov eax, dword [esi + 0x8c]
movsx ecx, word [eax + 0x48]
push ecx
push 1
call fcn.005fab6a
mov edx, dword [esi + 0x8c]
mov dword [esi + 0xd4], eax
movsx ecx, word [edx + 0x48]
push ecx
push eax
push edi
call fcn.004bee50
lea edx, [esi + 0xd8]
push 0x24
push edx
push edi
call fcn.004bee50
lea eax, [esi + 0x150]
push 4
push eax
push edi
call fcn.004bee50
lea ecx, [esi + 0x154]
push 1
push ecx
push edi
call fcn.004bee50
lea edx, [esp + 0x46]
push 2
push edx
push edi
call fcn.004bee50
mov ax, word [esp + 0x52]
add esp, 0x44
cmp ax, bx
jle 0x4aa548
movsx eax, ax
push 1
push eax
call fcn.005fab6a
movsx ecx, word [esp + 0x16]
push ecx
push eax
push edi
mov dword [esi + 0x98], eax
call fcn.004bee50
add esp, 0x14
jmp 0x4aa54e
mov dword [esi + 0x98], ebx
fld dword [0x660284]
fcomp dword [0x621374]
fnstsw ax
test ah, 1
jne 0x4aa571
push 1
push 0x73d14c
push edi
call fcn.004bee50
add esp, 0xc
push ebp
lea ebp, [esi + 0xa4]
push 4
push ebp
push edi
call fcn.004bee50
fld dword [0x660284]
fcomp dword [0x621374]
add esp, 0xc
fnstsw ax
test ah, 1
jne 0x4aa5a7
push 1
push 0x73d14c
push edi
call fcn.004bee50
add esp, 0xc
mov eax, dword [ebp]
cmp eax, ebx
jle 0x4aa811
mov edx, dword [esi + 0x8c]
push 4
mov ecx, dword [edx + 0x54]
mov edx, dword [ecx]
movsx ebx, word [edx + 0x20]
cmp ebx, eax
jle 0x4aa5ca
push ebx
jmp 0x4aa5cb
push eax
call fcn.005fab6a
mov dword [esi + 0xa8], eax
mov eax, dword [ebp]
mov ecx, dword [esi + 0xa8]
add esp, 8
shl eax, 2
push eax
push ecx
push edi
call fcn.004bee50
mov eax, dword [ebp]
add esp, 0xc
cmp ebx, eax
jle 0x4aa5fa
mov dword [ebp], ebx
xor ebx, ebx
fld dword [0x660284]
fcomp dword [0x621374]
pop ebp
fnstsw ax
test ah, 1
jne 0x4aa620
push 1
push 0x73d14c
push edi
call fcn.004bee50
add esp, 0xc
lea edx, [esi + 0x168]
push 4
push edx
push edi
call fcn.004bee50
lea eax, [esi + 0x16c]
push 4
push eax
push edi
call fcn.004bee50
lea ecx, [esi + 0x170]
push 2
push ecx
push edi
call fcn.004bee50
lea edx, [esi + 0x172]
push 2
push edx
push edi
call fcn.004bee50
lea eax, [esi + 0xa1]
push 1
push eax
push edi
call fcn.004bee50
lea ecx, [esi + 0x155]
push 1
push ecx
push edi
call fcn.004bee50
add esp, 0x48
lea edx, [esi + 0xa2]
push 1
push edx
push edi
call fcn.004bee50
lea eax, [esi + 0xa3]
push 1
push eax
push edi
call fcn.004bee50
fld dword [0x660284]
fcomp dword [0x621374]
add esp, 0x18
fnstsw ax
test ah, 1
jne 0x4aa6c1
push 1
push 0x73d14c
push edi
call fcn.004bee50
add esp, 0xc
lea ecx, [esp + 0x10]
push 1
push ecx
push edi
call fcn.004bee50
mov edx, dword [esp + 0x1c]
add esp, 0xc
mov ecx, esi
push edx
call fcn.004acf60
fld dword [0x660284]
fcomp dword [0x621374]
fnstsw ax
test ah, 1
jne 0x4aa700
push 1
push 0x73d14c
push edi
call fcn.004bee50
add esp, 0xc
lea eax, [esi + 8]
push 4
push eax
push edi
call fcn.004bee50
lea eax, [esi + 0xc]
push 4
push eax
push edi
call fcn.004bee50
lea eax, [esi + 0x2d0]
push 0x5dc
push eax
push edi
call fcn.004bee50
lea ecx, [esi + 0x8ac]
push 0xc8
push ecx
push edi
call fcn.004bee50
lea edx, [esi + 0x974]
push 0x5dc
push edx
push edi
call fcn.004bee50
lea eax, [esi + 0xf50]
push 0xc8
push eax
push edi
call fcn.004bee50
add esp, 0x48
lea ecx, [esi + 0x1018]
push 2
push ecx
push edi
call fcn.004bee50
lea edx, [esi + 0x101a]
push 2
push edx
push edi
call fcn.004bee50
lea eax, [esi + 0x101c]
push 2
push eax
push edi
call fcn.004bee50
lea ecx, [esi + 0x101e]
push 2
push ecx
push edi
call fcn.004bee50
lea edx, [esi + 0x24]
push 4
push edx
push edi
call fcn.004bee50
lea eax, [esi + 0x28]
push 4
push eax
push edi
call fcn.004bee50
add esp, 0x48
lea ecx, [esi + 0x2c]
push 4
push ecx
push edi
call fcn.004bee50
lea edx, [esi + 0x30]
push 4
push edx
push edi
call fcn.004bee50
lea eax, [esi + 0x34]
push 4
push eax
push edi
call fcn.004bee50
lea ecx, [esi + 0x38]
push 4
push ecx
push edi
call fcn.004bee50
fld dword [0x660284]
fcomp dword [0x621370]
add esp, 0x30
fnstsw ax
test ah, 1
jne 0x4aa81c
lea edx, [esi + 0x3c]
push 4
push edx
push edi
call fcn.004bee50
add esp, 0xc
jmp 0x4aa81f
mov dword [esi + 0xa8], ebx
jmp 0x4aa5fc
mov dword [esi + 0x3c], ebx
lea eax, [esi + 0x40]
push 0x10
push eax
push edi
call fcn.004bee50
lea ecx, [esi + 0x50]
push 0x10
push ecx
push edi
call fcn.004bee50
lea edx, [esi + 0x60]
push 0x10
push edx
push edi
call fcn.004bee50
fld dword [0x660284]
fcomp dword [0x62136c]
add esp, 0x24
fnstsw ax
test ah, 1
jne 0x4aa8dd
lea eax, [esi + 0x174]
push 4
push eax
push edi
call fcn.004bee50
lea ecx, [esi + 0x178]
push 4
push ecx
push edi
call fcn.004bee50
lea edx, [esi + 0x17c]
push 4
push edx
push edi
call fcn.004bee50
lea eax, [esi + 0x180]
push 4
push eax
push edi
call fcn.004bee50
lea ecx, [esi + 0x184]
push 4
push ecx
push edi
call fcn.004bee50
lea edx, [esi + 0x188]
push 4
push edx
push edi
call fcn.004bee50
add esp, 0x48
lea eax, [esi + 0x18c]
push 4
push eax
push edi
call fcn.004bee50
lea ecx, [esi + 0x190]
push 4
push ecx
push edi
call fcn.004bee50
add esp, 0x18
jmp 0x4aa8e3
mov dword [esi + 0x18c], ebx
fld dword [0x660284]
fcomp dword [str.337A]
fnstsw ax
test ah, 1
jne 0x4aa926
lea eax, [esi + 0x1020]
push 4
push eax
push edi
call fcn.004bee50
lea eax, [esi + 0x1024]
push 4
push eax
push edi
call fcn.004bee50
lea eax, [esi + 0x1028]
push 1
push eax
push edi
call fcn.004bee50
add esp, 0x24
fld dword [0x660284]
fcomp dword [0x621374]
fnstsw ax
test ah, 1
jne 0x4aa949
push 1
push 0x73d14c
push edi
call fcn.004bee50
add esp, 0xc
mov ecx, dword [esp + 0x18]
mov byte [esi + 0x20], 0
mov dword [esi + 0x14], ebx
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x18
ret 0xc