Function at 0x40a090
Capabilities:
Access peb ldr_data
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x4c6719
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push ebp
push esi
push edi
mov eax, dword [0x522d80]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
call fcn.00409ef0
push 0x60
call fcn.00485f87
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x24], 0
test eax, eax
je 0x40a0e4
mov ecx, eax
call dword [0x4cf6a0]
mov ecx, eax
jmp 0x40a0e6
xor ecx, ecx
mov edx, dword [esi + 4]
mov edi, dword [esp + 0x2c]
or ebp, 0xffffffff
mov dword [esi + 0x68], ecx
cmp dword [edx + 0xc0], 0
mov dword [esp + 0x24], ebp
je 0x40a132
mov eax, dword [edx + 0x8c]
mov edx, dword [edx + 0x90]
push edx
push eax
mov eax, dword [edi + 4]
push eax
call dword [0x4cf6a4]
mov ecx, dword [esi + 0x68]
mov eax, dword [ecx + 0x28]
mov edx, dword [esi + 4]
mov dword [edx + 0xc], eax
mov ecx, dword [esi + 0x68]
mov edx, dword [esi + 4]
mov eax, dword [ecx + 0x24]
mov dword [edx + 0x10], eax
jmp 0x40a191
mov eax, dword [edx + 0xc]
mov edx, dword [edx + 0x10]
push eax
mov eax, dword [edi + 4]
push edx
push eax
call dword [0x4cf6a8]
mov eax, dword [esi + 4]
mov ebp, dword [eax + 0x8c]
mov ecx, dword [eax + 0x68]
mov edx, dword [eax + 0x74]
mov ebx, dword [eax + 0x80]
mov dword [esp + 0x2c], ebp
mov ebp, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
push ebp
push eax
push ecx
mov ecx, dword [esp + 0x38]
push edx
push ebx
push ecx
mov ecx, dword [esi + 0x68]
call dword [0x4cf6ac]
mov edx, dword [esi + 4]
mov ecx, dword [edx + 0xc]
mov eax, dword [esi + 0x68]
mov dword [eax + 0x28], ecx
mov edx, dword [esi + 4]
mov eax, dword [esi + 0x68]
mov ecx, dword [edx + 0x10]
mov dword [eax + 0x24], ecx
or ebp, 0xffffffff
push 0xe4
call fcn.00485f87
add esp, 4
mov dword [esp + 0x2c], eax
mov ebx, 1
mov dword [esp + 0x24], ebx
test eax, eax
je 0x40a1b9
mov ecx, eax
call dword [0x4cf6b0]
jmp 0x40a1bb
xor eax, eax
mov ecx, dword [esi + 0x68]
push ecx
mov dword [esi + 0x2c], eax
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push ecx
mov ecx, eax
mov dword [esp + 0x2c], ebp
call edx
mov ecx, dword [esi + 0x2c]
push 0x64
call dword [0x4cf6b4]
fld dword [0x4d0160]
mov eax, dword [esi + 0x2c]
sub esp, 8
fstp dword [esp + 4]
mov byte [eax + 0xb8], bl
fld dword [edi + 0x26c]
mov ecx, dword [edi + 4]
fstp dword [esp]
push 0
push ecx
mov ecx, dword [esi + 0x2c]
call dword [0x4cf6b8]
mov ecx, dword [esi + 0x2c]
push 0
add ecx, 0x68
call dword [0x4cf6bc]
fld1
mov edx, dword [eax]
fstp dword [edx + 0x17c]
mov ecx, dword [esi + 0x2c]
push 0
add ecx, 0x68
call dword [0x4cf6bc]
mov ecx, dword [esi + 0x2c]
mov edx, dword [eax]
mov dword [ecx + 0x80], edx
mov eax, dword [esi + 0x2c]
push eax
mov ecx, edi
call dword [0x4cf6c0]
push 0x60
call fcn.00485f87
add esp, 4
mov dword [esp + 0x2c], eax
mov dword [esp + 0x24], 2
test eax, eax
je 0x40a26e
mov ecx, eax
call dword [0x4cf6a0]
mov ecx, eax
jmp 0x40a270
xor ecx, ecx
mov edx, dword [esi + 0x10]
mov dword [esi + 0x6c], ecx
cmp dword [edx + 0xc0], 0
mov dword [esp + 0x24], ebp
je 0x40a2b5
mov eax, dword [edx + 0x8c]
mov edx, dword [edx + 0x90]
push edx
push eax
mov eax, dword [edi + 4]
push eax
call dword [0x4cf6a4]
mov ecx, dword [esi + 0x6c]
mov eax, dword [ecx + 0x28]
mov edx, dword [esi + 0x10]
mov dword [edx + 0xc], eax
mov ecx, dword [esi + 0x6c]
mov edx, dword [esi + 0x10]
mov eax, dword [ecx + 0x24]
mov dword [edx + 0x10], eax
jmp 0x40a319
mov eax, dword [edx + 0xc]
mov edx, dword [edx + 0x10]
push eax
mov eax, dword [edi + 4]
push edx
push eax
call dword [0x4cf6a8]
mov eax, dword [esi + 0x10]
mov ebx, dword [eax + 0x8c]
mov ecx, dword [eax + 0x68]
mov edx, dword [eax + 0x74]
mov ebp, dword [eax + 0x80]
mov dword [esp + 0x2c], ebx
mov ebx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
push ebx
push eax
push ecx
mov ecx, dword [esp + 0x38]
push edx
push ebp
push ecx
mov ecx, dword [esi + 0x6c]
call dword [0x4cf6ac]
mov edx, dword [esi + 0x10]
mov ecx, dword [edx + 0xc]
mov eax, dword [esi + 0x6c]
mov dword [eax + 0x28], ecx
mov edx, dword [esi + 0x10]
mov eax, dword [esi + 0x6c]
mov ecx, dword [edx + 0x10]
mov dword [eax + 0x24], ecx
mov ebx, 1
or ebp, 0xffffffff
push 0x60
call fcn.00485f87
add esp, 4
mov dword [esp + 0x2c], eax
mov dword [esp + 0x24], 3
test eax, eax
je 0x40a33f
mov ecx, eax
call dword [0x4cf6a0]
mov ecx, eax
jmp 0x40a341
xor ecx, ecx
mov edx, dword [esi + 8]
mov dword [esi + 0x60], ecx
cmp dword [edx + 0xc0], 0
mov dword [esp + 0x24], ebp
je 0x40a386
mov eax, dword [edx + 0x8c]
mov edx, dword [edx + 0x90]
push edx
push eax
mov eax, dword [edi + 4]
push eax
call dword [0x4cf6a4]
mov ecx, dword [esi + 0x60]
mov eax, dword [ecx + 0x28]
mov edx, dword [esi + 8]
mov dword [edx + 0xc], eax
mov ecx, dword [esi + 0x60]
mov edx, dword [esi + 8]
mov eax, dword [ecx + 0x24]
mov dword [edx + 0x10], eax
jmp 0x40a3e8
mov eax, dword [edx + 0xc]
mov edx, dword [edx + 0x10]
push eax
mov eax, dword [edi + 4]
push edx
push eax
call dword [0x4cf6a8]
mov eax, dword [esi + 8]
mov ebx, dword [eax + 0x8c]
mov ecx, dword [eax + 0x68]
mov edx, dword [eax + 0x74]
mov ebp, dword [eax + 0x80]
mov dword [esp + 0x2c], ebx
mov ebx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
push ebx
push eax
push ecx
mov ecx, dword [esp + 0x38]
push edx
push ebp
push ecx
mov ecx, dword [esi + 0x60]
call dword [0x4cf6ac]
mov edx, dword [esi + 8]
mov ecx, dword [edx + 0xc]
mov eax, dword [esi + 0x60]
mov dword [eax + 0x28], ecx
mov edx, dword [esi + 8]
mov eax, dword [esi + 0x60]
mov ecx, dword [edx + 0x10]
or ebp, 0xffffffff
mov dword [eax + 0x24], ecx
lea ebx, [ebp + 2]
push 0xe4
call fcn.00485f87
add esp, 4
mov dword [esp + 0x2c], eax
mov dword [esp + 0x24], 4
test eax, eax
je 0x40a40f
mov ecx, eax
call dword [0x4cf6b0]
jmp 0x40a411
xor eax, eax
mov ecx, dword [esi + 0x60]
push ecx
mov dword [esi + 0x30], eax
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push ecx
mov ecx, eax
mov dword [esp + 0x2c], ebp
call edx
mov eax, dword [esi + 0x30]
mov byte [eax + 0xb8], bl
mov ecx, dword [esi + 0x30]
push ebx
call dword [0x4cf6b4]
fld dword [0x4d015c]
mov ecx, dword [edi + 4]
sub esp, 8
fstp dword [esp + 4]
fld dword [edi + 0x26c]
fstp dword [esp]
push 0
push ecx
mov ecx, dword [esi + 0x30]
call dword [0x4cf6b8]
mov ecx, dword [esi + 0x30]
push 0
add ecx, 0x68
call dword [0x4cf6bc]
fld1
mov edx, dword [eax]
fstp dword [edx + 0x17c]
mov ecx, dword [esi + 0x30]
push 0
add ecx, 0x68
call dword [0x4cf6bc]
mov ecx, dword [esi + 0x30]
mov edx, dword [eax]
mov dword [ecx + 0x80], edx
mov eax, dword [esi + 0x30]
push eax
mov ecx, edi
call dword [0x4cf6c0]
push 0x60
call fcn.00485f87
add esp, 4
mov dword [esp + 0x2c], eax
mov dword [esp + 0x24], 5
test eax, eax
je 0x40a4c3
mov ecx, eax
call dword [0x4cf6a0]
mov ecx, eax
jmp 0x40a4c5
xor ecx, ecx
mov edx, dword [esi + 0xc]
mov dword [esi + 0x5c], ecx
cmp dword [edx + 0xc0], 0
mov dword [esp + 0x24], ebp
je 0x40a50a
mov eax, dword [edx + 0x8c]
mov edx, dword [edx + 0x90]
push edx
push eax
mov eax, dword [edi + 4]
push eax
call dword [0x4cf6a4]
mov ecx, dword [esi + 0x5c]
mov eax, dword [ecx + 0x28]
mov edx, dword [esi + 0xc]
mov dword [edx + 0xc], eax
mov ecx, dword [esi + 0x5c]
mov edx, dword [esi + 0xc]
mov eax, dword [ecx + 0x24]
mov dword [edx + 0x10], eax
jmp 0x40a56e
mov eax, dword [edx + 0xc]
mov edx, dword [edx + 0x10]
push eax
mov eax, dword [edi + 4]
push edx
push eax
call dword [0x4cf6a8]
mov eax, dword [esi + 0xc]
mov ebx, dword [eax + 0x8c]
mov ecx, dword [eax + 0x68]
mov edx, dword [eax + 0x74]
mov ebp, dword [eax + 0x80]
mov dword [esp + 0x2c], ebx
mov ebx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
push ebx
push eax
push ecx
mov ecx, dword [esp + 0x38]
push edx
push ebp
push ecx
mov ecx, dword [esi + 0x5c]
call dword [0x4cf6ac]
mov edx, dword [esi + 0xc]
mov ecx, dword [edx + 0xc]
mov eax, dword [esi + 0x5c]
mov dword [eax + 0x28], ecx
mov edx, dword [esi + 0xc]
mov eax, dword [esi + 0x5c]
mov ecx, dword [edx + 0x10]
mov dword [eax + 0x24], ecx
mov ebx, 1
or ebp, 0xffffffff
push 0xe4
call fcn.00485f87
add esp, 4
mov dword [esp + 0x2c], eax
mov dword [esp + 0x24], 6
test eax, eax
je 0x40a595
mov ecx, eax
call dword [0x4cf6b0]
jmp 0x40a597
xor eax, eax
mov ecx, dword [esi + 0x5c]
push ecx
mov dword [esi + 0x34], eax
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push ecx
mov ecx, eax
mov dword [esp + 0x2c], ebp
call edx
mov eax, dword [esi + 0x34]
mov byte [eax + 0xb8], bl
mov ecx, dword [esi + 0x34]
push ebx
call dword [0x4cf6b4]
fld dword [0x4d015c]
mov ecx, dword [edi + 4]
sub esp, 8
fstp dword [esp + 4]
fld dword [edi + 0x26c]
fstp dword [esp]
push 0
push ecx
mov ecx, dword [esi + 0x34]
call dword [0x4cf6b8]
mov ecx, dword [esi + 0x34]
push 0
add ecx, 0x68
call dword [0x4cf6bc]
fld1
mov edx, dword [eax]
fstp dword [edx + 0x17c]
mov ecx, dword [esi + 0x34]
push 0
add ecx, 0x68
call dword [0x4cf6bc]
mov ecx, dword [esi + 0x34]
mov edx, dword [eax]
mov dword [ecx + 0x80], edx
mov eax, dword [esi + 0x34]
push eax
mov ecx, edi
call dword [0x4cf6c0]
push 0x21c
call fcn.00485f87
add esp, 4
mov dword [esp + 0x2c], eax
mov dword [esp + 0x24], 7
test eax, eax
je 0x40a64a
mov ecx, eax
call dword [0x4cf6c4]
jmp 0x40a64c
xor eax, eax
mov dword [esi + 0x64], eax
mov ecx, dword [edi + 0x730]
mov edx, dword [edi + 0x734]
push 0
push ecx
mov ecx, dword [edi + 4]
push edx
push ecx
mov ecx, eax
mov dword [esp + 0x34], ebp
call dword [0x4cf6c8]
fnstcw word [esp + 0x2c]
movzx eax, word [esp + 0x2c]
mov ecx, dword [esi + 0x64]
or eax, 0xc00
mov dword [esp + 0x14], eax
fld dword [ecx + 0x44]
push ebp
fldcw word [esp + 0x18]
fistp qword [esp + 0x18]
mov edx, dword [esp + 0x18]
mov dword [ecx + 0x28], edx
mov ecx, dword [esi + 0x64]
fldcw word [esp + 0x30]
fld dword [ecx + 0x40]
fnstcw word [esp + 0x30]
movzx eax, word [esp + 0x30]
or eax, 0xc00
mov dword [esp + 0x18], eax
fldcw word [esp + 0x18]
fistp qword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov dword [ecx + 0x24], eax
mov ecx, dword [esi + 0x64]
fldcw word [esp + 0x30]
call dword [0x4cf6cc]
push 0xe4
call fcn.00485f87
add esp, 4
mov dword [esp + 0x2c], eax
mov dword [esp + 0x24], 8
test eax, eax
je 0x40a6f6
mov ecx, eax
call dword [0x4cf6b0]
jmp 0x40a6f8
xor eax, eax
mov ecx, dword [esi + 0x64]
push ecx
mov dword [esi + 0x3c], eax
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push ecx
mov ecx, eax
mov dword [esp + 0x2c], ebp
call edx
mov eax, dword [esi + 0x3c]
mov byte [eax + 0xb8], bl
mov ecx, dword [esi + 0x3c]
push ebx
call dword [0x4cf6b4]
fld dword [0x4d0158]
mov ecx, dword [edi + 4]
sub esp, 8
fstp dword [esp + 4]
fld dword [edi + 0x26c]
fstp dword [esp]
push 0
push ecx
mov ecx, dword [esi + 0x3c]
call dword [0x4cf6b8]
mov ecx, dword [esi + 0x3c]
push 0
add ecx, 0x68
call dword [0x4cf6bc]
fld1
mov edx, dword [eax]
fstp dword [edx + 0x17c]
mov ecx, dword [esi + 0x34]
push 0
add ecx, 0x68
call dword [0x4cf6bc]
mov edx, dword [eax]
mov ecx, dword [esi + 0x3c]
mov dword [ecx + 0x80], edx
mov eax, dword [esi + 0x3c]
mov ecx, dword [eax + 0x80]
xor eax, eax
mov dword [ecx + 0x180], eax
mov edx, dword [esi + 0x3c]
mov ecx, dword [edi + 0x764]
mov dword [edx + 0xd8], ecx
mov edx, dword [esi + 0x3c]
mov dword [edx + 0xd0], eax
mov eax, dword [esi + 0x3c]
push eax
mov ecx, edi
call dword [0x4cf6c0]
push 0x60
call fcn.00485f87
add esp, 4
mov dword [esp + 0x2c], eax
mov dword [esp + 0x24], 9
test eax, eax
je 0x40a7d3
mov ecx, eax
call dword [0x4cf6a0]
mov ecx, eax
jmp 0x40a7d5
xor ecx, ecx
mov edx, dword [esi + 0x14]
mov dword [esi + 0x70], ecx
cmp dword [edx + 0xc0], 0
mov dword [esp + 0x24], ebp
je 0x40a81a
mov eax, dword [edx + 0x8c]
mov edx, dword [edx + 0x90]
push edx
push eax
mov eax, dword [edi + 4]
push eax
call dword [0x4cf6a4]
mov ecx, dword [esi + 0x70]
mov eax, dword [ecx + 0x28]
mov edx, dword [esi + 0x14]
mov dword [edx + 0xc], eax
mov ecx, dword [esi + 0x70]
mov edx, dword [esi + 0x14]
mov eax, dword [ecx + 0x24]
mov dword [edx + 0x10], eax
jmp 0x40a87e
mov eax, dword [edx + 0xc]
mov edx, dword [edx + 0x10]
push eax
mov eax, dword [edi + 4]
push edx
push eax
call dword [0x4cf6a8]
mov eax, dword [esi + 0x14]
mov ebx, dword [eax + 0x8c]
mov ecx, dword [eax + 0x68]
mov edx, dword [eax + 0x74]
mov ebp, dword [eax + 0x80]
mov dword [esp + 0x2c], ebx
mov ebx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
push ebx
push eax
push ecx
mov ecx, dword [esp + 0x38]
push edx
push ebp
push ecx
mov ecx, dword [esi + 0x70]
call dword [0x4cf6ac]
mov edx, dword [esi + 0x14]
mov ecx, dword [edx + 0xc]
mov eax, dword [esi + 0x70]
mov dword [eax + 0x28], ecx
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x70]
mov ecx, dword [edx + 0x10]
mov dword [eax + 0x24], ecx
mov ebx, 1
or ebp, 0xffffffff
push 0xe4
call fcn.00485f87
add esp, 4
mov dword [esp + 0x2c], eax
mov dword [esp + 0x24], 0xa
test eax, eax
je 0x40a8a5
mov ecx, eax
call dword [0x4cf6b0]
jmp 0x40a8a7
xor eax, eax
mov ecx, dword [esi + 0x70]
push ecx
mov dword [esi + 0x40], eax
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push ecx
mov ecx, eax
mov dword [esp + 0x2c], ebp
call edx
mov eax, dword [esi + 0x40]
mov byte [eax + 0xb8], bl
mov ecx, dword [esi + 0x40]
push ebx
call dword [0x4cf6b4]
fld dword [0x4d0160]
mov ecx, dword [edi + 4]
sub esp, 8
fstp dword [esp + 4]
fld dword [edi + 0x26c]
fstp dword [esp]
push 0
push ecx
mov ecx, dword [esi + 0x40]
call dword [0x4cf6b8]
mov ecx, dword [esi + 0x40]
push 0
add ecx, 0x68
call dword [0x4cf6bc]
fld1
mov edx, dword [eax]
fstp dword [edx + 0x17c]
mov ecx, dword [esi + 0x40]
push 0
add ecx, 0x68
call dword [0x4cf6bc]
mov ecx, dword [esi + 0x40]
mov edx, dword [eax]
mov dword [ecx + 0x80], edx
mov eax, dword [esi + 0x40]
push eax
mov ecx, edi
call dword [0x4cf6c0]
mov edx, dword [edi + 0x734]
mov ecx, dword [esi + 8]
sub edx, dword [ecx + 0x10]
mov eax, dword [esi + 0xc]
mov dword [esi + 0xb4], edx
mov ecx, dword [ecx + 0xc]
sub ecx, dword [eax + 0xc]
mov dword [esi + 0xb0], ecx
mov dword [esi + 0xac], ecx
mov ecx, dword [edi + 0x734]
sub ecx, dword [eax + 0x10]
mov dword [esi + 0xa4], ecx
mov edx, dword [eax + 0x10]
add ecx, edx
mov edx, dword [esi + 0xb0]
mov dword [esi + 0xa8], ecx
mov eax, dword [eax + 0xc]
add eax, edx
push eax
push ecx
mov ecx, dword [esi + 0xa4]
push edx
push ecx
lea edx, [esi + 0x90]
push edx
call dword [0x4cf578]
mov eax, dword [edi + 0x730]
mov ebx, dword [esi + 4]
cdq
idiv dword [ebx + 0xc]
mov ecx, dword [esi + 0xa0]
sub ecx, eax
mov dword [esi + 0xc4], eax
mov eax, dword [esi + 8]
mov dword [esp + 0x14], ecx
test ecx, ecx
jg 0x40a9c3
fild dword [eax + 0xc]
xor ecx, ecx
jmp 0x40a9d8
mov edx, dword [esi + 0xc]
mov eax, dword [eax + 0xc]
sub eax, dword [edx + 0xc]
mov dword [esp + 0x2c], eax
fild dword [esp + 0x2c]
fidiv dword [esp + 0x14]
mov edx, dword [esi + 0xc]
fstp dword [esi + 0xb8]
mov eax, dword [edi + 0x730]
sub eax, dword [edx + 0xc]
mov dword [esi + 0xbc], eax
mov edx, dword [ebx + 0xc]
imul edx, ecx
mov dword [esp + 0x2c], edx
fild dword [esp + 0x2c]
fstp dword [esp + 0x2c]
fld dword [esp + 0x2c]
fst dword [esi + 0xcc]
call fcn.00496e30
mov ecx, dword [esi + 0x30]
mov dword [esi + 0xc8], eax
mov eax, dword [esi + 0xbc]
mov dword [esi + 0xb0], eax
mov dword [edi + 0x378], ecx
mov edx, dword [esi + 0x34]
mov dword [edi + 0x37c], edx
mov eax, dword [esi + 0x2c]
mov dword [edi + 0x374], eax
mov ecx, dword [esi + 0x3c]
mov dword [edi + 0x380], ecx
mov edx, dword [esi + 0x40]
mov dword [edi + 0x384], edx
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
ret 4