Function at 0x4c2f40
Capabilities:
Access peb ldr_data
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6383ff
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x6e7024]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x10], ebx
cmp dword [ebp + 8], 0
je 0x4c2f78
mov dword [ebx + 4], 0x656814
push 0x4ca2f0
push 0x4ca270
push 0x1c
push 0x60
lea eax, [ebx + 0x3c]
push eax
mov dword [ebp - 4], 0
mov dword [ebx], vtable.CTWork_SaveDataWindow.0
call fcn.006310c6
push 0x4bfd40
push 0x4bfcf0
push 0x64
push pe_nt_image_headers32
lea eax, [ebx + 0xc78]
push eax
mov byte [ebp - 4], 1
call fcn.006310c6
push 0x4bfd40
push 0x4bfcf0
push 0xa
push pe_nt_image_headers32
lea eax, [ebx + 0x8c98]
push eax
mov byte [ebp - 4], 2
call fcn.006310c6
push 0x4bfd40
push 0x4bfcf0
push 0xa
push pe_nt_image_headers32
lea eax, [ebx + 0x9968]
push eax
mov byte [ebp - 4], 3
call fcn.006310c6
push fcn.004c2ad0
push 0x4c2a30
push 0xa
push 0x360
lea eax, [ebx + 0xa638]
push eax
mov byte [ebp - 4], 4
call fcn.006310c6
push 1
lea ecx, [ebx + 0xc7f8]
mov byte [ebp - 4], 5
call fcn.00573d70
push 1
lea ecx, [ebx + 0xc824]
mov byte [ebp - 4], 6
call fcn.004ee2c0
push 1
lea ecx, [ebx + 0xc844]
mov byte [ebp - 4], 7
call fcn.004e8d40
lea ecx, [ebx + 0xc944]
mov byte [ebp - 4], 8
call fcn.0057a4d0
lea ecx, [ebx + 0xc984]
mov byte [ebp - 4], 9
call fcn.00485940
lea ecx, [ebx + 0xc9a8]
mov byte [ebp - 4], 0xa
call fcn.00591910
lea ecx, [ebx + 0xcac0]
mov byte [ebp - 4], 0xb
call fcn.00591910
mov dword [ebx + 0xcbd8], 0x656800
mov dword [ebx + 0xcc24], 0
xorps xmm0, xmm0
movq qword [ebx + 0xcbdc], xmm0
movq qword [ebx + 0xcbe4], xmm0
movq qword [ebx + 0xcc0c], xmm0
movq qword [ebx + 0xcc14], xmm0
mov dword [ebx + 0xcc28], 0x656800
mov dword [ebx + 0xcc74], 0
movq qword [ebx + 0xcc2c], xmm0
movq qword [ebx + 0xcc34], xmm0
movq qword [ebx + 0xcc5c], xmm0
movq qword [ebx + 0xcc64], xmm0
lea esi, [ebx + 0xcc78]
mov ecx, esi
mov byte [ebp - 4], 0xe
mov dword [ebp + 8], esi
call fcn.0057a4d0
push 0x320
mov ecx, esi
mov byte [ebp - 4], 0xf
mov dword [esi], vtable.CCursorBlinkMotion.0
call fcn.0057a620
mov dword [ebx + 0xcc9c], 0
mov dword [ebx + 0xcc98], 0
mov dword [ebx + 0xcc94], 0
mov dword [ebx + 0xcc90], 0
mov dword [ebx + 0xccb4], 0
mov dword [ebx + 0xcca8], 0
mov dword [ebx + 0xcca4], 0
mov dword [ebx + 0xcca0], 0
xor eax, eax
mov word [ebx + 0xccb0], ax
mov dword [ebx + 0xccc4], eax
mov dword [ebx + 0xccc0], eax
mov dword [ebx + 0xccbc], eax
mov dword [ebx + 0xccb8], eax
mov dword [ebx + 0xccdc], eax
mov dword [ebx + 0xccd0], eax
mov dword [ebx + 0xcccc], eax
mov dword [ebx + 0xccc8], eax
mov word [ebx + 0xccd8], ax
mov dword [ebx + 0xcce0], eax
mov dword [ebx + 0xccf0], eax
mov dword [ebx + 0xccf4], eax
mov dword [ebx + 0xcce8], eax
mov dword [ebx + 0xccec], eax
mov dword [ebx + 0xccfc], eax
mov dword [ebx + 0xccf8], eax
lea edx, [ebx + 0xcc90]
mov dword [ebx + 0xc], eax
mov dword [ebx + 0x10], eax
mov dword [ebx + 0x14], eax
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x2c], 0xffffffff
mov dword [ebx + 0x30], 0xffffffff
mov dword [ebx + 0x34], 0xffffffff
mov dword [ebx + 0x38], 0xffffffff
mov dword [ebx + 0xc808], eax
lea esi, [ebx + 0xcce0]
or eax, 0xffffffff
push 0
mov dword [ebx + 0xabc], 0xffffffff
mov dword [ebx + 0xac0], 0xffffffff
mov dword [ebx + 0xac4], 0xffffffff
mov dword [ebx + 0xac8], 0xffffffff
mov dword [ebx + 0xacc], 0xffffffff
mov dword [ebx + 0xad0], 0xffffffff
mov dword [ebx + 0xad4], 0xffffffff
mov dword [ebx + 0xad8], 0xffffffff
mov dword [ebx + 0xadc], 0xffffffff
mov dword [ebx + 0xae0], 0xffffffff
lea edi, [ebx + 0xae4]
mov ecx, 0x64
sub esp, 8
rep stosd dword es:[edi], eax
mov byte [ebp - 4], 0x10
mov dword [ebx + 8], 0
mov dword [ebx + 0xcc8c], 0
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0x3f800000
push 0
mov ecx, edx
call fcn.00453b10
push 0
sub esp, 8
lea ecx, [ebx + 0xccb8]
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0x3f800000
push 0
call fcn.00453b10
push 0xff
push 0xff
push 0
mov ecx, esi
call fcn.004542c0
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4