Function at 0x48b7b0
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x51ee73
mov eax, dword fs:[0]
push eax
push ecx
push edi
mov eax, dword [0x7c6ee4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x10], edi
push dword [ebp + 8]
call dword [0x530368]
lea ecx, [edi + 8]
mov dword [ebp - 4], 0
mov dword [edi], vtable.dbmanager.0
call dword [0x530a18]
lea ecx, [edi + 0xc]
mov byte [ebp - 4], 1
call dword [0x530a18]
mov eax, dword [0x5304a8]
mov dword [edi + 0x24], eax
mov eax, dword [0x5304a8]
mov dword [edi + 0x28], eax
mov eax, dword [0x5304a8]
mov dword [edi + 0x2c], eax
mov eax, dword [0x5304a8]
mov dword [edi + 0x30], eax
mov eax, dword [0x5304a8]
mov dword [edi + 0x34], eax
mov eax, dword [0x5304a8]
mov dword [edi + 0x38], eax
mov eax, dword [0x5304a8]
mov dword [edi + 0x3c], eax
mov eax, dword [0x5304a8]
mov dword [edi + 0x40], eax
mov eax, dword [0x5304a8]
mov dword [edi + 0x44], eax
lea ecx, [edi + 0x4c]
call dword [0x5307a8]
lea ecx, [edi + 0x50]
call dword [0x5307a8]
lea ecx, [edi + 0x58]
call dword [0x5307a8]
lea ecx, [edi + 0x5c]
call dword [0x5307a8]
lea ecx, [edi + 0x64]
call dword [0x5307a8]
lea ecx, [edi + 0x68]
call dword [0x5307a8]
lea ecx, [edi + 0x70]
call dword [0x5307a8]
lea ecx, [edi + 0x74]
call dword [0x5307a8]
lea ecx, [edi + 0x7c]
call dword [0x5307a8]
lea ecx, [edi + 0x80]
call dword [0x5307a8]
lea ecx, [edi + 0x84]
call dword [0x5307a8]
lea ecx, [edi + 0x88]
call dword [0x5307a8]
lea ecx, [edi + 0x90]
call dword [0x5307a8]
lea ecx, [edi + 0x94]
call dword [0x5307a8]
lea ecx, [edi + 0x9c]
call dword [0x5307a8]
lea ecx, [edi + 0xa0]
call dword [0x5307a8]
lea ecx, [edi + 0xa8]
call dword [0x5307a8]
lea ecx, [edi + 0xac]
call dword [0x5307a8]
lea ecx, [edi + 0xb0]
call dword [0x5307a8]
lea ecx, [edi + 0xb4]
call dword [0x5307a8]
lea ecx, [edi + 0xb8]
call dword [0x5307a8]
lea ecx, [edi + 0xbc]
call dword [0x5307a8]
lea ecx, [edi + 0xc0]
call dword [0x5307a8]
lea ecx, [edi + 0xc4]
call dword [0x5307a8]
lea ecx, [edi + 0xd0]
call dword [0x5307a8]
lea ecx, [edi + 0xd4]
call dword [0x5307a8]
lea ecx, [edi + 0xdc]
call dword [0x5307a8]
lea ecx, [edi + 0xe0]
call dword [0x5307a8]
lea ecx, [edi + 0xe4]
call dword [0x530498]
lea ecx, [edi + 0xec]
call dword [0x5307a8]
lea ecx, [edi + 0xf0]
call dword [0x5307a8]
lea ecx, [edi + 0xf8]
call dword [0x5307a8]
lea ecx, [edi + 0xfc]
call dword [0x5307a8]
lea ecx, [edi + 0x104]
call dword [0x5307a8]
lea ecx, [edi + 0x108]
call dword [0x5307a8]
lea ecx, [edi + 0x110]
mov dword [edi + 0x10c], 0
call dword [0x5307a8]
lea ecx, [edi + 0x11c]
mov dword [edi + 0x114], 0
mov dword [edi + 0x118], 0
call dword [0x5307a8]
lea ecx, [edi + 0x130]
mov dword [edi + 0x120], 0
mov dword [edi + 0x124], 0
mov dword [edi + 0x128], 0
mov dword [edi + 0x12c], 0
call dword [0x5307a8]
lea ecx, [edi + 0x134]
call dword [0x5307a8]
lea ecx, [edi + 0x144]
mov dword [edi + 0x138], 0
mov dword [edi + 0x13c], 0
mov dword [edi + 0x140], 0
call dword [0x5307a8]
lea ecx, [edi + 0x150]
mov dword [edi + 0x148], 0
mov dword [edi + 0x14c], 0
call dword [0x5307a8]
lea ecx, [edi + 0x154]
call dword [0x5307a8]
lea ecx, [edi + 0x160]
mov dword [edi + 0x158], 0
mov dword [edi + 0x15c], 0
call dword [0x5307a8]
lea ecx, [edi + 0x168]
mov dword [edi + 0x164], 0
call dword [0x5307a8]
lea ecx, [edi + 0x16c]
call dword [0x5307a8]
mov eax, dword [0x5304a8]
mov dword [edi + 0x170], eax
lea ecx, [edi + 0x174]
call dword [0x5307a8]
lea ecx, [edi + 0x178]
call dword [0x5307a8]
lea ecx, [edi + 0x180]
call dword [0x530498]
lea ecx, [edi + 0x184]
call dword [0x5307a8]
lea ecx, [edi + 0x188]
call dword [0x5307a8]
lea ecx, [edi + 0x18c]
call dword [0x5307a8]
lea ecx, [edi + 0x190]
call dword [0x5307a8]
mov ecx, edi
mov byte [ebp - 4], 0x40
mov dword [edi + 0x194], 0
call fcn.004945b0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
mov esp, ebp
pop ebp
ret 4