Function at 0x4cacf8
Capabilities:
Access peb ldr_data
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x69ecbe
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
lea eax, [esi + 0x1092]
mov edi, 0x90
xor ebx, ebx
lea ecx, [ecx]
mov byte [eax - 1], bl
mov byte [eax], bl
mov byte [eax + 1], bl
mov word [eax + 2], bx
mov byte [eax + 4], bl
mov byte [eax + 5], bl
mov byte [eax + 6], bl
mov byte [eax + 7], bl
mov byte [eax + 8], bl
mov byte [eax + 9], bl
xor ecx, ecx
lea edx, [eax + 0xa]
mov dword [edx], ecx
mov dword [edx + 4], ecx
mov dword [edx + 8], ecx
mov dword [edx + 0xc], ecx
mov dword [edx + 0x10], ecx
add eax, 0x22
dec edi
mov byte [edx + 0x14], cl
jne 0x4cad10
lea eax, [esi + 0x3406]
mov edi, pe_nt_image_headers32
mov byte [eax - 1], bl
mov byte [eax], bl
mov byte [eax + 1], bl
mov word [eax + 2], bx
mov byte [eax + 4], bl
mov byte [eax + 5], bl
mov byte [eax + 6], bl
mov byte [eax + 7], bl
mov byte [eax + 8], bl
mov byte [eax + 9], bl
xor ecx, ecx
lea edx, [eax + 0xa]
mov dword [edx], ecx
mov dword [edx + 4], ecx
mov dword [edx + 8], ecx
mov dword [edx + 0xc], ecx
mov dword [edx + 0x10], ecx
add eax, 0x22
dec edi
mov byte [edx + 0x14], cl
jne 0x4cad55
lea eax, [esi + 0x5608]
mov edi, 0xf0
lea ebx, [ebx]
mov byte [eax - 1], bl
mov byte [eax], bl
mov byte [eax + 1], bl
mov word [eax + 2], bx
mov byte [eax + 4], bl
mov byte [eax + 5], bl
mov byte [eax + 6], bl
mov byte [eax + 7], bl
mov byte [eax + 8], bl
mov byte [eax + 9], bl
xor ecx, ecx
lea edx, [eax + 0xa]
mov dword [edx], ecx
mov dword [edx + 4], ecx
mov dword [edx + 8], ecx
mov dword [edx + 0xc], ecx
mov dword [edx + 0x10], ecx
add eax, 0x22
dec edi
mov byte [edx + 0x14], cl
jne 0x4cada0
lea eax, [esi + 0x75ea]
mov edi, 0x10
mov byte [eax - 1], bl
mov byte [eax], bl
mov byte [eax + 1], bl
mov word [eax + 2], bx
mov byte [eax + 4], bl
mov byte [eax + 5], bl
mov byte [eax + 6], bl
mov byte [eax + 7], bl
mov byte [eax + 8], bl
mov byte [eax + 9], bl
xor ecx, ecx
lea edx, [eax + 0xa]
mov dword [edx], ecx
mov dword [edx + 4], ecx
mov dword [edx + 8], ecx
mov dword [edx + 0xc], ecx
mov dword [edx + 0x10], ecx
add eax, 0x22
dec edi
mov byte [edx + 0x14], cl
jne 0x4cade5
mov byte [esi + 0x7808], bl
mov byte [esi + 0x7809], bl
mov byte [esi + 0x780a], bl
lea eax, [esi + 0x7808]
mov byte [eax + 3], bl
mov byte [eax + 4], bl
mov byte [eax + 5], bl
add eax, 3
mov byte [eax + 3], bl
mov byte [eax + 4], bl
mov byte [eax + 5], bl
add eax, 3
mov byte [eax + 3], bl
mov byte [eax + 4], bl
mov byte [eax + 5], bl
add eax, 3
mov byte [eax + 3], bl
mov byte [eax + 4], bl
mov byte [eax + 5], bl
add eax, 3
mov byte [eax + 3], bl
mov byte [eax + 4], bl
mov byte [eax + 5], bl
add eax, 3
mov byte [eax + 3], bl
mov byte [eax + 4], bl
mov byte [eax + 5], bl
add eax, 3
mov byte [eax + 3], bl
mov byte [eax + 4], bl
mov byte [eax + 5], bl
add eax, 3
mov eax, 0x6af0e0
mov dword [esi + 0x7864], eax
mov dword [esi + 0x7868], ebx
mov dword [esi + 0x786c], ebx
mov byte [esi + 0x7870], bl
mov dword [esi + 0x7874], ebx
mov word [esi + 0x7878], bx
mov dword [esi + 0x787c], ebx
mov word [esi + 0x7880], bx
mov dword [esi + 0x7884], ebx
mov word [esi + 0x7888], bx
mov dword [esp + 0x1c], ebx
mov dword [esi + 0x788c], eax
mov dword [esi + 0x7890], ebx
mov dword [esi + 0x7894], ebx
mov byte [esi + 0x7898], bl
mov dword [esi + 0x789c], ebx
mov word [esi + 0x78a0], bx
mov dword [esi + 0x78a4], ebx
mov word [esi + 0x78a8], bx
mov dword [esi + 0x78ac], ebx
mov word [esi + 0x78b0], bx
lea ecx, [esi + 0x78b4]
mov byte [esp + 0x1c], 1
call fcn.004c41f0
lea ecx, [esi + 0x1987960]
call fcn.004bede0
mov dword [esi + 0x199716c], 0x6af33c
mov dword [esi + 0x1997174], ebx
mov dword [esi + 0x1997178], ebx
mov dword [esi + 0x199717c], ebx
mov dword [esi + 0x1997180], ebx
mov dword [esi + 0x1997184], 0x6af340
mov dword [esi + 0x199718c], ebx
mov dword [esi + 0x1997190], ebx
mov dword [esi + 0x1997194], ebx
mov dword [esi + 0x1997198], ebx
mov dword [esi + 0x199719c], 0x6af344
mov dword [esi + 0x19971a4], ebx
mov dword [esi + 0x19971a8], ebx
mov dword [esi + 0x19971ac], ebx
mov dword [esi + 0x19971b0], ebx
mov byte [esp + 0x1c], 5
lea edi, [esi + 0x19971b8]
mov ecx, edi
mov dword [esi + 0x19971b4], 0x6af358
call fcn.0041b790
mov dword [edi + 4], eax
mov byte [eax + 0x15], 1
mov eax, dword [edi + 4]
mov dword [eax + 4], eax
mov eax, dword [edi + 4]
mov dword [eax], eax
mov eax, dword [edi + 4]
mov dword [eax + 8], eax
mov dword [edi + 8], ebx
mov dword [esi + 0x19971c4], ebx
mov dword [esi + 0x19971c8], 0x6af354
mov dword [esi + 0x19971d0], ebx
mov dword [esi + 0x19971d4], ebx
mov dword [esi + 0x19971d8], ebx
mov dword [esi + 0x19971dc], ebx
lea edi, [esi + 0x19971e4]
mov ecx, edi
mov byte [esp + 0x1c], 7
mov dword [esi + 0x19971e0], 0x6af35c
call fcn.0041b790
mov dword [edi + 4], eax
mov byte [eax + 0x15], 1
mov eax, dword [edi + 4]
mov dword [eax + 4], eax
mov eax, dword [edi + 4]
mov dword [eax], eax
mov eax, dword [edi + 4]
mov dword [eax + 8], eax
mov dword [edi + 8], ebx
mov dword [esi + 0x19971f0], ebx
or ebp, 0xffffffff
lea edi, [esi + 0x199721c]
mov dword [esi + 0x19971f4], ebp
mov dword [esi + 0x19971f8], ebp
mov dword [esi + 0x19971fc], ebx
mov dword [esi + 0x1997200], ebx
mov dword [esi + 0x1997204], ebx
mov byte [esi + 0x1997208], bl
mov dword [esi + 0x199720c], ebp
mov dword [esi + 0x1997210], ebp
mov dword [esi + 0x1997214], ebp
mov ecx, edi
mov byte [esp + 0x1c], 8
mov dword [esi + 0x1997218], 0x6af360
call fcn.0041b790
mov dword [edi + 4], eax
mov byte [eax + 0x15], 1
mov eax, dword [edi + 4]
mov dword [eax + 4], eax
mov eax, dword [edi + 4]
mov dword [eax], eax
mov eax, dword [edi + 4]
mov dword [eax + 8], eax
mov dword [edi + 8], ebx
mov dword [esi + 0x1997228], ebx
mov dword [esi + 0x199722c], 0x6af328
mov dword [esi + 0x1997234], ebx
mov dword [esi + 0x1997238], ebx
mov dword [esi + 0x199723c], ebx
mov dword [esi + 0x1997240], ebx
mov dword [esi + 0x1997244], 0x6af32c
mov dword [esi + 0x199724c], ebx
mov dword [esi + 0x1997250], ebx
mov dword [esi + 0x1997254], ebx
mov dword [esi + 0x1997258], ebx
mov dword [esi + 0x199725c], 0x6af330
mov dword [esi + 0x1997264], ebx
mov dword [esi + 0x1997268], ebx
mov dword [esi + 0x199726c], ebx
mov dword [esi + 0x1997270], ebx
mov dword [esi + 0x1997274], 0x6af334
mov dword [esi + 0x199727c], ebx
mov dword [esi + 0x1997280], ebx
mov dword [esi + 0x1997284], ebx
mov dword [esi + 0x1997288], ebx
mov dword [esi + 0x199728c], 0x6af348
mov dword [esi + 0x1997294], ebx
mov dword [esi + 0x1997298], ebx
mov dword [esi + 0x199729c], ebx
mov dword [esi + 0x19972a0], ebx
lea edi, [esi + 0x19972a8]
mov ecx, edi
mov byte [esp + 0x1c], 0xe
mov dword [esi + 0x19972a4], 0x6af364
call fcn.0041b790
mov dword [edi + 4], eax
mov byte [eax + 0x15], 1
mov eax, dword [edi + 4]
mov dword [eax + 4], eax
mov eax, dword [edi + 4]
mov dword [eax], eax
mov eax, dword [edi + 4]
mov dword [eax + 8], eax
mov dword [edi + 8], ebx
mov dword [esi + 0x19972b4], ebx
mov byte [esp + 0x1c], 0xf
lea eax, [esi + 0x19972dc]
mov ecx, 0x32
lea esp, [esp]
mov byte [eax], 1
mov word [eax + 2], bx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
add eax, 0x10
dec ecx
jne 0x4cb1a0
lea eax, [esi + 0x1997600]
mov ecx, 0x18
mov byte [eax], 1
mov word [eax + 2], bx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
add eax, 0x10
dec ecx
jne 0x4cb1c1
lea eax, [esi + 0x1997794]
mov byte [eax], 1
mov word [eax + 2], bx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
add eax, 0x10
mov byte [eax], 1
mov word [eax + 2], bx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
lea edi, [esi + 0x19977e0]
mov dword [eax + 0xc], ebx
mov ecx, edi
mov dword [esi + 0x19977dc], 0x6af318
call fcn.00512ce0
mov dword [edi + 4], eax
mov dword [edi + 8], ebx
mov dword [esi + 0x19977ec], ebx
lea edi, [esi + 0x19977f4]
mov ecx, edi
mov byte [esp + 0x1c], 0x10
mov dword [esi + 0x19977f0], 0x6af31c
call fcn.00512ce0
mov dword [edi + 4], eax
mov dword [edi + 8], ebx
mov dword [esi + 0x1997800], ebx
mov byte [esp + 0x1c], 0x11
lea eax, [esi + 0x1997926]
mov edi, 0xd
jmp 0x4cb260
mov byte [eax - 1], bl
mov byte [eax], bl
mov byte [eax + 1], bl
mov word [eax + 2], bx
mov byte [eax + 4], bl
mov byte [eax + 5], bl
mov byte [eax + 6], bl
mov byte [eax + 7], bl
mov byte [eax + 8], bl
mov byte [eax + 9], bl
xor ecx, ecx
lea edx, [eax + 0xa]
mov dword [edx], ecx
mov dword [edx + 4], ecx
mov dword [edx + 8], ecx
mov dword [edx + 0xc], ecx
mov dword [edx + 0x10], ecx
add eax, 0x22
dec edi
mov byte [edx + 0x14], cl
jne 0x4cb260
lea eax, [esi + 0x1997b70]
mov ecx, 0xc
mov dword [eax], ebx
add eax, 0xc
dec ecx
jne 0x4cb2a5
lea eax, [esi + 0x1997c00]
mov edi, 0xc
mov byte [eax], bl
mov byte [eax + 1], bl
mov byte [eax + 2], bl
mov word [eax + 4], bx
mov dword [eax + 0xc], ebx
mov byte [eax + 6], bl
mov byte [eax + 7], bl
mov byte [eax + 8], bl
mov byte [eax + 9], bl
mov byte [eax + 0xa], bl
mov byte [eax + 0xb], bl
xor ecx, ecx
lea edx, [eax + 0x10]
mov dword [edx], ecx
mov dword [edx + 4], ecx
mov dword [edx + 8], ecx
mov dword [edx + 0xc], ecx
mov dword [edx + 0x10], ecx
add eax, 0x28
dec edi
mov byte [edx + 0x14], cl
jne 0x4cb2b8
lea edi, [esi + 0x1997f2c]
mov ecx, edi
mov dword [esi + 0x1997f28], 0x6af320
call fcn.00512ce0
mov dword [edi + 4], eax
mov dword [edi + 8], ebx
mov dword [esi + 0x1997f38], ebx
xor eax, eax
lea edi, [esi + 0x19984f4]
mov ecx, 0x10
rep stosd dword es:[edi], eax
lea edi, [esi + 0x1998560]
mov ecx, edi
mov byte [esp + 0x1c], 0x12
mov dword [esi + 0x199855c], 0x6af324
call fcn.00512ce0
mov dword [edi + 4], eax
mov dword [edi + 8], ebx
mov dword [esi + 0x199856c], ebx
mov byte [esp + 0x1c], 0x13
lea eax, [esi + 0x199857a]
mov edi, 0xf0
nop
mov byte [eax - 1], bl
mov byte [eax], bl
mov byte [eax + 1], bl
mov word [eax + 2], bx
mov byte [eax + 4], bl
mov byte [eax + 5], bl
mov byte [eax + 6], bl
mov byte [eax + 7], bl
mov byte [eax + 8], bl
mov byte [eax + 9], bl
xor ecx, ecx
lea edx, [eax + 0xa]
mov dword [edx], ecx
mov dword [edx + 4], ecx
mov dword [edx + 8], ecx
mov dword [edx + 0xc], ecx
mov dword [edx + 0x10], ecx
mov byte [edx + 0x14], cl
mov dword [eax + 0x22], ebx
add eax, 0x28
dec edi
jne 0x4cb360
lea edi, [esi + 0x199ab00]
mov ecx, edi
mov dword [esi + 0x199aafc], 0x6af368
call fcn.0041b790
mov dword [edi + 4], eax
mov byte [eax + 0x15], 1
mov eax, dword [edi + 4]
mov dword [eax + 4], eax
mov eax, dword [edi + 4]
mov dword [eax], eax
mov eax, dword [edi + 4]
mov dword [eax + 8], eax
mov dword [edi + 8], ebx
mov dword [esi + 0x199ab0c], ebx
mov dword [esi + 0x199ab10], 0x6af34c
mov dword [esi + 0x199ab18], ebx
mov dword [esi + 0x199ab1c], ebx
mov dword [esi + 0x199ab20], ebx
mov dword [esi + 0x199ab24], ebx
mov dword [esi + 0x199ab28], 0x6af350
mov dword [esi + 0x199ab30], ebx
mov dword [esi + 0x199ab34], ebx
mov dword [esi + 0x199ab38], ebx
mov dword [esi + 0x199ab3c], ebx
mov byte [esp + 0x1c], 0x16
lea eax, [esi + 0x199abc4]
mov edi, 0x24
lea esp, [esp]
mov byte [eax - 1], bl
mov byte [eax], bl
mov byte [eax + 1], bl
mov word [eax + 2], bx
mov byte [eax + 4], bl
mov byte [eax + 5], bl
mov byte [eax + 6], bl
mov byte [eax + 7], bl
mov byte [eax + 8], bl
mov byte [eax + 9], bl
xor ecx, ecx
lea edx, [eax + 0xa]
mov dword [edx], ecx
mov dword [edx + 4], ecx
mov dword [edx + 8], ecx
mov dword [edx + 0xc], ecx
mov dword [edx + 0x10], ecx
add eax, 0x22
dec edi
mov byte [edx + 0x14], cl
jne 0x4cb430
lea ecx, [esi + 0x199b08c]
call fcn.004a1ec0
mov dword [esi + 0x199b0d8], 0x6af338
mov dword [esi + 0x199b0e0], ebx
mov dword [esi + 0x199b0e4], ebx
mov dword [esi + 0x199b0e8], ebx
mov dword [esi + 0x199b0ec], ebx
mov byte [esp + 0x1c], 0x18
mov dword [esi + 0x199ab40], ebx
mov byte [esi + 0x199abb4], bl
mov word [esi + 0x199abac], bx
mov dword [esi + 0x199abb0], ebx
mov dword [esi + 0x199abb8], ebx
mov dword [esi + 0x199abbc], ebx
mov byte [esi + 0x199abc0], 0x1e
mov dword [esi + 0x199aba4], ebx
mov dword [esi + 0x199aba8], ebx
lea eax, [esi + 0x199ab5c]
mov edx, 2
nop
mov ecx, 3
mov dword [eax - 0x18], ebx
mov dword [eax], ebx
mov dword [eax + 0x18], ebx
mov dword [eax + 0x30], ebx
add eax, 4
dec ecx
jne 0x4cb4e5
dec edx
jne 0x4cb4e0
xor ecx, ecx
mov dword [esi + 0x1997e7c], ebx
mov word [esi + 0x1997e04], bx
mov dword [esi + 4], ebx
mov byte [esi + 0x19972da], bl
mov byte [esi], 0x64
lea eax, [esi + 0x1997804]
mov edx, eax
mov dword [edx], ecx
mov dword [edx + 4], ecx
mov dword [edx + 8], ecx
mov dword [edx + 0xc], ecx
mov dword [edx + 0x10], ecx
mov dword [edx + 0x14], ecx
mov dword [edx + 0x18], ecx
mov dword [edx + 0x1c], ecx
mov dword [edx + 0x20], ecx
mov dword [edx + 0x24], ecx
mov dword [edx + 0x28], ecx
mov dword [edx + 0x2c], ecx
mov dword [edx + 0x30], ecx
mov dword [edx + 0x34], ecx
mov dword [edx + 0x38], ecx
mov dword [edx + 0x3c], ecx
mov dword [edx + 0x40], ecx
mov dword [edx + 0x44], ecx
mov dword [edx + 0x48], ecx
mov dword [edx + 0x4c], ecx
mov dword [eax], 0x3a98
mov dword [esi + 0x199780c], 0x61a8
mov dword [esi + 0x1997810], 0x7530
mov dword [esi + 0x1997814], 0xea60
mov dword [esi + 0x1997818], 0x1d4c0
mov dword [esi + 0x199781c], 0x2bf20
mov dword [esi + 0x1997820], 0x3a980
mov dword [esi + 0x1997824], 0x493e0
mov dword [esi + 0x1997828], 0x927c0
mov dword [esi + 0x199782c], 0x7d0
mov eax, 0x4e20
mov dword [esi + 0x1997808], eax
mov dword [esi + 0x19978f4], eax
xor eax, eax
lea ecx, [esi + 0x1997e18]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
mov byte [ecx + 0x18], al
mov dword [esi + 0x3400], ebx
mov dword [esi + 0x1997f04], ebx
mov dword [esi + 0x1997f08], ebx
mov dword [esi + 0x1997f0c], ebx
mov dword [esi + 0x1997f10], ebx
mov dword [esi + 0x1997f14], ebx
mov dword [esi + 0x1997f18], ebx
mov dword [esi + 0x1997f1c], ebp
mov ecx, 0x20
lea edi, [esi + 0x1997af0]
rep stosd dword es:[edi], eax
mov byte [esi + 0x1997f20], bl
mov byte [esi + 0x1997f21], bl
mov dword [esi + 0x1997f24], ebx
mov byte [esi + 0x1997f3c], bl
mov dword [esi + 0x1997f40], ebx
mov dword [esi + 0x1997f44], ebx
mov edx, dword [0x705df0]
mov dword [esi + 0x1998574], edx
mov eax, dword [0x705d6c]
mov dword [esi + 0x1998570], eax
mov byte [esi + 0x199b0a1], bl
mov byte [esi + 0x199b0a2], bl
mov byte [esi + 0x199b0a3], bl
mov byte [esi + 0x199b0ac], bl
mov byte [esi + 0x199b0ad], bl
mov byte [esi + 0x199b0ae], bl
mov byte [esi + 0x199b0af], bl
mov byte [esi + 0x199b0b0], bl
mov dword [esi + 0x199b0c4], ebx
mov ecx, esi
call fcn.004c9250
mov byte [esi + 0x199b0c8], 5
xor ecx, ecx
lea edx, [esi + 0x199b0c9]
mov dword [edx], ecx
mov dword [edx + 4], ecx
pop edi
mov dword [edx + 8], ecx
mov eax, esi
pop esi
mov byte [edx + 0xc], cl
mov ecx, dword [esp + 0xc]
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret