Function at 0x4e5f70
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Get number of processors

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x401fb6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x30
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401e78
push 0x4f28d4
lea eax, [ebp - 0x38]
xor edi, edi
push 0x40c354
push eax
mov dword [ebp - 0x14], edi
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
mov esi, dword [ebp + 8]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x408ba0
mov ecx, esi
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 4]
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 8]
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 0xc]
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 0x10]
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 0x14]
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 0x1c]
mov word [esi + 0x18], di
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 0x20]
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 0x28]
mov word [esi + 0x24], di
call ebx
mov dword [esi + 0x2c], edi
mov edx, 0x408ba0
lea ecx, [esi + 0x34]
mov dword [esi + 0x30], edi
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 0x3c]
mov word [esi + 0x38], di
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 0x40]
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 0x44]
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 0x48]
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 0x4c]
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 0x50]
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 0x54]
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 0x58]
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 0x5c]
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 0x60]
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 0x64]
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 0x68]
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 0x6c]
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 0x70]
call ebx
lea eax, [ebp - 0x14]
lea ecx, [esi + 0x7c]
lea edx, [ebp - 0x38]
mov dword [esi + 0x74], edi
push eax
mov dword [esi + 0x78], edi
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], edx
call fcn.004d9430
lea eax, [esi + 0x327c]
push eax
push 0x408a1c
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
push edi
push edi
push 1
lea eax, [esi + 0x327c]
push 0x4f2950
push eax
push 0x534
push 0x20
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
lea eax, [esi + 0x3280]
push eax
push 0x4085e4
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
push edi
push edi
push 1
lea eax, [esi + 0x3280]
push 0x4f294c
push eax
push 0xd8
push 0x20
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
mov dword [esi + 0x3284], edi
mov dword [esi + 0x3288], edi
mov dword [esi + 0x328c], edi
mov dword [esi + 0x3290], edi
mov dword [esi + 0x3294], edi
mov dword [esi + 0x329c], edi
mov dword [esi + 0x32a4], edi
mov dword [esi + 0x32ac], edi
mov dword [esi + 0x32b4], edi
mov dword [esi + 0x32bc], edi
mov dword [esi + 0x32c4], edi
mov dword [esi + 0x32cc], edi
mov dword [esi + 0x32d4], edi
mov dword [esi + 0x32dc], edi
mov dword [esi + 0x32e4], edi
mov dword [esi + 0x32ec], edi
mov dword [esi + 0x32f4], edi
mov dword [esi + 0x32fc], edi
mov dword [esi + 0x3304], edi
add esp, 0x1c
mov dword [esi + 0x3298], edi
mov dword [esi + 0x32a0], edi
mov dword [esi + 0x32a8], edi
mov dword [esi + 0x32b0], edi
mov dword [esi + 0x32b8], edi
mov dword [esi + 0x32c0], edi
mov dword [esi + 0x32c8], edi
mov dword [esi + 0x32d0], edi
mov dword [esi + 0x32d8], edi
mov dword [esi + 0x32e0], edi
mov dword [esi + 0x32e8], edi
mov dword [esi + 0x32f0], edi
mov dword [esi + 0x32f8], edi
mov dword [esi + 0x3300], edi
mov dword [esi + 0x3308], edi
mov dword [esi + 0x330c], edi
mov dword [esi + 0x3314], edi
mov dword [esi + 0x331c], edi
mov dword [esi + 0x3324], edi
mov dword [esi + 0x332c], edi
mov dword [esi + 0x3334], edi
mov dword [esi + 0x333c], edi
mov dword [esi + 0x3344], edi
mov dword [esi + 0x334c], edi
mov dword [esi + 0x3354], edi
mov dword [esi + 0x335c], edi
mov dword [esi + 0x3364], edi
mov dword [esi + 0x336c], edi
mov dword [esi + 0x3374], edi
mov dword [esi + 0x337c], edi
mov dword [esi + 0x3384], edi
mov edx, 0x408ba0
lea ecx, [esi + 0x338c]
mov dword [esi + 0x3310], edi
mov dword [esi + 0x3318], edi
mov dword [esi + 0x3320], edi
mov dword [esi + 0x3328], edi
mov dword [esi + 0x3330], edi
mov dword [esi + 0x3338], edi
mov dword [esi + 0x3340], edi
mov dword [esi + 0x3348], edi
mov dword [esi + 0x3350], edi
mov dword [esi + 0x3358], edi
mov dword [esi + 0x3360], edi
mov dword [esi + 0x3368], edi
mov dword [esi + 0x3370], edi
mov dword [esi + 0x3378], edi
mov dword [esi + 0x3380], edi
mov dword [esi + 0x3388], edi
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 0x3390]
call ebx
mov dword [esi + 0x3394], edi
mov edx, 0x408ba8
lea ecx, [esi + 0x339c]
mov dword [esi + 0x3398], edi
call ebx
mov edx, 0x408ba0
lea ecx, [esi + 0x33a0]
call ebx
wait
push 0x4e6320
lea edx, [ebp - 0x14]
lea ecx, [ebp - 0x38]
push edx
push 0
mov dword [ebp - 0x14], ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
ret