Function at 0x4eb9dc
Capabilities:
Access peb ldr_data
Get number of processors

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffd08
push ebx
push esi
push edi
mov dword [ebp - 4], eax
lea eax, [ebp - 0x2e8]
xor ecx, ecx
mov edx, 0x2d8
call fcn.00403b20
mov esi, 0x54eab0
lea edi, [ebp - 0x2e8]
mov ecx, 0x35
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x2e8]
mov dword [ebp - 0x1e0], eax
lea eax, [ebp - 0x1e0]
mov ecx, 0x174
mov edx, 0x3e
call fcn.004f8d28
xor eax, eax
push ebp
push 0x4ebd48
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x4ebd11
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0x214], 0x4eb620
mov eax, dword [ebp - 4]
mov dword [ebp - 0x200], eax
lea eax, [ebp - 0x214]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
cmp dword [eax + 8], 0
je 0x4eba7f
mov eax, dword [ebp - 4]
call fcn.004ec480
mov dl, 1
mov eax, dword [0x46fa58]
call fcn.00404548
mov ebx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov dword [eax + 8], ebx
push 0
push 0
mov eax, ebx
call fcn.00474e7c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov edx, dword [eax + 8]
lea eax, [ebp - 0x1e0]
call fcn.004f80fc
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x2c]
test ebx, ebx
je 0x4ebad9
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x30]
test eax, eax
je 0x4ebad9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2c]
mov edx, dword [eax]
call dword [edx + 0x24]
test eax, eax
jne 0x4ebaeb
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00405124
jmp 0x4ebd4f
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2c]
mov edx, dword [eax]
call dword [edx + 0x30]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2c]
mov edx, dword [eax]
call dword [edx + 0x30]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
mov dword [edx + 0x10], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2c]
mov edx, dword [eax]
call dword [edx + 0x24]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2c]
mov edx, dword [eax]
call dword [edx + 0x24]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
mov dword [edx + 0xc], eax
mov dword [ebp - 0x1bc], 3
mov dword [ebp - 0x1b8], 2
mov dl, 1
mov eax, dword [0x47f56c]
call fcn.0048655c
mov dword [ebp - 0x10], eax
xor eax, eax
push ebp
push 0x4ebd00
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2c]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 8]
mov dl, 6
mov eax, dword [ebp - 0x10]
call fcn.00487f74
lea eax, [ebp - 0x1e0]
call fcn.004f8354
mov eax, dword [ebp - 4]
movzx edx, byte [eax + 0x3f]
lea eax, [ebp - 0x1e0]
or ecx, 0xffffffff
call fcn.004f8258
mov eax, dword [ebp - 4]
cmp byte [eax + 0x3d], 0
je 0x4ebbc1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
mov byte [eax + 0x14], 1
lea eax, [ebp - 0x1e0]
mov edx, 1
call fcn.004f84c8
mov eax, dword [ebp - 4]
cmp byte [eax + 0x41], 0
je 0x4ebbd5
lea eax, [ebp - 0x1e0]
call fcn.004f8930
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.00486fe4
mov dword [ebp - 0xc], eax
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00486fe4
mov ebx, eax
sub ebx, dword [ebp - 0xc]
test ebx, ebx
jle 0x4ebc08
test bl, 3
jne 0x4ebc08
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 8], eax
jmp 0x4ebc0f
mov dword [ebp - 8], 1
push 0
push 0
push 0
lea eax, [ebp - 0x2f8]
push eax
xor ecx, ecx
xor edx, edx
xor eax, eax
call fcn.004704ec
lea eax, [ebp - 0x2f8]
push eax
push 0
xor ecx, ecx
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov si, 0xfffd
call fcn.00404788
xor eax, eax
push ebp
push 0x4ebce3
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1e0]
or edx, 0xffffffff
call fcn.004f8b48
jmp 0x4ebc79
lea edx, [ebp - 0xc]
lea eax, [ebp - 0x1e0]
mov ecx, dword [ebp - 8]
call fcn.004f8bbc
mov esi, eax
mov eax, ebx
imul esi
add dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x104]
cmp eax, dword [ebp - 0x1c0]
jb 0x4ebc5f
lea eax, [ebp - 0x1e0]
call fcn.004f8e48
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ebcea
call fcn.00403150
test eax, eax
jne 0x4ebcaf
mov ebx, 0x64
jmp 0x4ebcb1
xor ebx, ebx
push ebx
push 0
push 0
lea eax, [ebp - 0x2f8]
push eax
xor ecx, ecx
xor edx, edx
xor eax, eax
call fcn.004704ec
lea eax, [ebp - 0x2f8]
push eax
push 0
mov cl, 2
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov si, 0xfffd
call fcn.00404788
ret
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret