Function at 0x4440c0
Capabilities:
Access peb ldr_data
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x5cc8aa
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x24
push ebx
push esi
push edi
mov esi, ecx
push 0x480
call fcn.00596900
add esp, 4
mov dword [esp + 0xc], eax
test eax, eax
mov dword [esp + 0x38], 0
je 0x444105
mov ecx, eax
call fcn.004e5b80
mov ebx, eax
jmp 0x444107
xor ebx, ebx
mov eax, dword [esi + 0x18]
mov dword [esp + 0x38], 0xffffffff
test eax, eax
jg 0x44412a
mov eax, dword [esi + 0x74]
test eax, eax
je 0x444122
mov eax, dword [eax + 0x24]
jmp 0x444127
mov eax, 0x64
mov dword [esi + 0x18], eax
mov eax, dword [esi + 0x1c]
test eax, eax
jg 0x444145
mov eax, dword [esi + 0x74]
test eax, eax
je 0x44413d
mov eax, dword [eax + 0x28]
jmp 0x444142
mov eax, 0x64
mov dword [esi + 0x1c], eax
mov edi, dword [esp + 0x40]
test edi, edi
jg 0x444156
mov eax, dword [esi + 0x18]
mov dword [esp + 0x40], eax
mov edi, eax
push ebp
mov ebp, dword [esp + 0x48]
test ebp, ebp
jg 0x444166
mov ebp, dword [esi + 0x1c]
mov dword [esp + 0x48], ebp
push 0
push 0
push 0x18
push 1
push ebp
push edi
mov ecx, ebx
call fcn.004e6670
mov ecx, dword [esi + 0x30]
push ecx
mov ecx, ebx
call fcn.004e7210
mov eax, dword [esi + 0x2c]
xor ecx, ecx
cmp eax, ecx
jle 0x4441f7
cdq
sub eax, edx
lea edx, [esp + 0x14]
sar eax, 1
neg eax
push eax
push eax
push edx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], ebp
call dword [sym.imp.USER32.dll_InflateRect]
mov ecx, dword [esi + 0x2c]
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
shl eax, 1
cmp eax, ecx
je 0x4441d1
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
dec edx
dec eax
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], eax
mov eax, dword [esi + 0x28]
mov edx, dword [esp + 0x1c]
push 0
push 0
push 0
push eax
mov eax, dword [esp + 0x28]
push ecx
mov ecx, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
push eax
push ecx
mov ecx, ebx
call fcn.004ea1a0
mov eax, dword [esi + 0x20]
test eax, eax
je 0x444251
mov eax, dword [esi + 0x74]
test eax, eax
je 0x444251
push 1
push 0
mov ecx, ebx
call fcn.004e70d0
mov edx, dword [esi + 0x38]
mov edi, dword [esi + 0x3c]
mov ecx, dword [esi + 0x2c]
push 0
add edx, ecx
add edi, ecx
mov ecx, dword [esi + 0x74]
push 0
cmp dword [ecx + 0xc], 0
je 0x44423c
mov ebp, dword [ecx + 0x10]
push ebp
push edi
push edx
push eax
call fcn.004e8530
mov ebp, dword [esp + 0x48]
jmp 0x444244
push edi
push edx
push eax
call fcn.004e6d20
push 0
mov ecx, ebx
call fcn.004e71a0
mov edi, dword [esp + 0x44]
lea edx, [esp + 0x24]
mov ecx, esi
push edx
push ebp
push edi
call fcn.00443d30
mov edi, eax
pop ebp
test edi, edi
je 0x44429d
push 1
push 0
mov ecx, ebx
call fcn.004e70d0
mov ecx, dword [edi + 0x10]
mov edx, dword [esp + 0x24]
push 0
push 0
push ecx
mov ecx, dword [esp + 0x2c]
push edx
push ecx
push eax
mov ecx, edi
call fcn.004e8530
push 0
mov ecx, ebx
call fcn.004e71a0
mov edx, dword [edi]
push 1
mov ecx, edi
call dword [edx + 4]
mov eax, dword [esi + 0x34]
pop edi
mov dword [ebx + 0xc], eax
mov ecx, dword [esi + 0x30]
mov dword [ebx + 0x10], ecx
mov ecx, dword [esp + 0x2c]
mov eax, ebx
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x30
ret 8