Function at 0x405740
Capabilities:
Access peb ldr_data
Get ntdll base address
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x473761
mov eax, dword fs:[0]
push eax
sub esp, 0xc14
mov eax, dword [0x48e4f0]
xor eax, esp
mov dword [esp + 0xc10], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x48e4f0]
xor eax, esp
push eax
lea eax, [esp + 0xc28]
mov dword fs:[0], eax
push 0x64
mov ebx, ecx
call fcn.004576a9
mov edi, eax
lea ebp, [edi + 3]
mov dword [edi], 0x535a46
mov word [ebp], 0x400
mov dword [ebp + 2], 0x94100
add esp, 4
mov word [ebp + 6], 0x400
lea eax, [esp + 0x54]
mov dword [ebp + 8], 0x10d00
push eax
mov dword [esp + 0x18], edi
add ebp, 0xc
call fcn.00429e70
lea ecx, [esp + 0x38]
xor esi, esi
push ecx
lea eax, [esi + 0x12]
lea ecx, [esp + 0x58]
mov dword [esp + 0xc34], esi
call fcn.0042c2d0
xor edx, edx
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], esi
mov word [esp + 0x1c], dx
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0xc34], 2
push ecx
mov eax, ebx
mov dword [esp + 0x20], esi
call fcn.0040a1d0
test eax, eax
je 0x4058d4
lea esi, [esp + 0x1c]
call fcn.00425bb0
test al, al
je 0x4058d4
mov eax, dword [esp + 0x48]
push 0x47ca70
xor edi, edi
lea ecx, [esp + 0x3c]
call fcn.00403a30
test eax, eax
jne 0x4058d0
mov esi, dword [esp + 0x14]
mov edx, dword [ebx]
push eax
mov eax, dword [edx + 0x18]
sub ebp, esi
push ebp
push esi
mov ecx, ebx
call eax
xor ecx, ecx
cmp eax, ebp
sete cl
push esi
mov edi, ecx
call fcn.00459522
add esp, 4
test edi, edi
jne 0x40589a
mov edx, dword [ebx]
mov eax, dword [edx + 8]
mov ecx, ebx
call eax
lea ecx, [esp + 0x1c]
call fcn.004044f0
lea ecx, [esp + 0x38]
call fcn.004044f0
lea ecx, [esp + 0x54]
mov dword [esp + 0xc30], 0xffffffff
call fcn.00429fc0
xor eax, eax
jmp 0x4059c6
mov eax, ebx
call fcn.004063f0
lea ecx, [esp + 0x1c]
mov esi, eax
call fcn.004044f0
lea ecx, [esp + 0x38]
call fcn.004044f0
lea ecx, [esp + 0x54]
mov dword [esp + 0xc30], 0xffffffff
call fcn.00429fc0
mov eax, esi
jmp 0x4059c6
mov edi, dword [esp + 0x14]
mov byte [ebp], 0
mov dword [ebp + 1], 0x14
mov word [ebp + 5], 0x800
add ebp, 7
xor esi, esi
lea ebx, [ebx]
call fcn.00459ae1
shl eax, 8
cdq
and edx, 0x7fff
add eax, edx
sar eax, 0xf
mov byte [ebx + esi + 0x74], al
mov byte [ebp], al
inc esi
inc ebp
cmp esi, 8
jl 0x4058f0
mov word [ebp], 0x800
add ebp, 2
xor esi, esi
lea ecx, [ecx]
call fcn.00459ae1
shl eax, 8
cdq
and edx, 0x7fff
add eax, edx
sar eax, 0xf
mov byte [ebx + esi + 0x7c], al
mov byte [ebp], al
inc esi
inc ebp
cmp esi, 8
jl 0x405920
mov edx, dword [ebx]
mov eax, dword [edx + 0x18]
xor esi, esi
push esi
sub ebp, edi
push ebp
push edi
mov ecx, ebx
call eax
xor ebx, ebx
cmp eax, ebp
push edi
sete bl
call fcn.00459522
mov edi, 8
add esp, 4
cmp dword [esp + 0x30], edi
jb 0x40597a
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.004593e2
add esp, 4
xor edx, edx
mov ebp, 7
mov dword [esp + 0x30], ebp
mov dword [esp + 0x2c], esi
mov word [esp + 0x1c], dx
cmp dword [esp + 0x4c], edi
jb 0x4059a1
mov eax, dword [esp + 0x38]
push eax
call fcn.004593e2
add esp, 4
xor ecx, ecx
mov word [esp + 0x38], cx
lea ecx, [esp + 0x54]
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x48], esi
mov dword [esp + 0xc30], 0xffffffff
call fcn.00429fc0
mov eax, ebx
mov ecx, dword [esp + 0xc28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xc10]
xor ecx, esp
call fcn.004593ed
add esp, 0xc20
ret