Function at 0x402800
Capabilities:
Access peb ldr_data
Get ntdll base address
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x451223
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, dword [esp + 0x14]
push ebx
push esi
push edi
mov esi, ecx
push eax
mov dword [esp + 0x10], esi
call fcn.00422c00
xor ebx, ebx
mov dword [esi], 0x45330c
mov dword [esi + 0xc], ebx
mov dword [esi + 0x10], ebx
mov dword [esi + 0x14], ebx
mov dword [esi + 0x18], ebx
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], ebx
mov dword [esi + 0x24], ebx
mov dword [esi + 0x2c], ebx
mov dword [esi + 0x30], ebx
mov dword [esi + 0x34], ebx
mov dword [esi + 0x28], ebx
mov dword [esi + 0x38], ebx
mov dword [esi + 0x3c], ebx
mov dword [esi + 0x40], ebx
mov edi, 0x7f
mov dword [esi + 0x44], ebx
mov dword [esi + 0x770], edi
mov dword [esi + 0x248], ebx
mov dword [esi + 0x774], ebx
mov dword [esi + 0x778], ebx
mov byte [esi + 0x884], bl
mov dword [esi + 0xae4], ebx
mov dword [esi + 0xae8], ebx
mov dword [esi + 0xaec], ebx
mov dword [esi + 0xae0], ebx
mov dword [esi + 0xef0], ebx
mov dword [esi + 0xa54], ebx
mov dword [esi + 0xa58], ebx
mov ecx, 0x2710
mov dword [esi + 0xa5c], ebx
mov eax, 1
mov dword [esi + 0xa60], ecx
mov dword [esi + 0xa64], eax
mov dword [esi + 0xa68], eax
mov dword [esi + 0xa6c], ecx
mov dword [esi + 0xa70], ebx
mov dword [esi + 0xa74], ebx
mov dword [esi + 0xa78], ebx
mov dword [esi + 0xa7c], ebx
mov dword [esi + 0xa80], ebx
mov dword [esi + 0xa84], ebx
mov dword [esi + 0xa88], ebx
mov dword [esi + 0xa8c], ebx
mov dword [esi + 0xa90], ebx
mov dword [esi + 0xa94], ebx
mov dword [esi + 0xa98], ebx
mov dword [esi + 0xa9c], ebx
mov dword [esi + 0xaa0], ebx
mov dword [esi + 0xaa4], ebx
mov dword [esi + 0xaac], ebx
mov dword [esi + 0xaa8], ebx
mov dword [esi + 0xab0], ebx
mov dword [esi + 0xab4], ebx
mov dword [esi + 0xab8], ebx
mov dword [esi + 0xabc], ebx
push 0xe10
mov dword [esp + 0x1c], ebx
mov dword [esi + 0xac0], ebx
call fcn.00429112
add esp, 4
mov dword [esp + 0x20], eax
cmp eax, ebx
mov byte [esp + 0x18], 1
je 0x402978
mov ecx, eax
call fcn.00418ce0
jmp 0x40297a
xor eax, eax
mov dword [esi + 0x880], eax
mov dword [esi + 0xac4], ebx
mov dword [esi + 0xac8], ebx
mov dword [esi + 0xacc], ebx
mov dword [esi + 0xad0], ebx
mov dword [esi + 0xad4], ebx
mov dword [esi + 0xad8], ebx
mov ecx, 0x10
mov dword [esi + 0xf50], edi
mov dword [esi + 0xadc], ebx
xor eax, eax
lea edi, [esi + 0xf54]
mov dword [esi + 0xef4], ebx
mov dword [esi + 0xef8], ebx
mov dword [esi + 0xefc], ebx
mov dword [esi + 0xf00], ebx
mov dword [esi + 0xf04], ebx
mov dword [esi + 0xf08], ebx
mov dword [esi + 0xf0c], ebx
mov dword [esi + 0xf10], ebx
mov dword [esi + 0xf14], ebx
mov dword [esi + 0xf18], ebx
mov dword [esi + 0xf30], ebx
mov dword [esi + 0xf34], ebx
mov dword [esi + 0xf38], 0xac44
mov dword [esi + 0xf3c], ecx
mov dword [esi + 0xf40], 2
mov dword [esi + 0xf44], 0x64
mov dword [esi + 0xf48], ebx
mov dword [esi + 0xf4c], ebx
mov dword [esi + 0xf98], ebx
mov dword [esi + 0xf94], ebx
rep stosd dword es:[edi], eax
mov ecx, 0x83
lea edi, [esi + 0xfc8]
mov dword [esi + 0xf9c], ebx
mov dword [esi + 0xfa0], ebx
mov dword [esi + 0xfa8], ebx
mov dword [esi + 0xfac], ebx
mov dword [esi + 0xfb0], ebx
mov dword [esi + 0xfbc], ebx
mov dword [esi + 0xfb4], ebx
mov dword [esi + 0xfc4], ebx
mov dword [esi + 0xfb8], ebx
mov dword [esi + 0xfc0], ebx
mov dword [esi + 0x11d4], ebx
mov byte [esp + 0x18], bl
rep stosd dword es:[edi], eax
mov ecx, esi
call fcn.00404940
mov ecx, dword [esp + 0x10]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 4