Function at 0x5e1040
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x73548b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x8c
push ebx
push esi
mov esi, dword [ebp + 8]
mov ebx, ecx
xor ecx, ecx
push edi
movsx eax, word [esi + 0xe]
mov edx, dword [esi + 2]
mov dword [ebp - 0x94], eax
mov cl, byte [esi + 0x2d]
lea eax, [esi + 2]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x90], ecx
movsx eax, word [esi + 6]
mov dword [ebp - 0x80], eax
xor eax, eax
mov al, byte [esi + 0x32]
xor ecx, ecx
mov cl, byte [esi + 0x31]
mov dword [ebp - 0x78], eax
mov eax, dword [esi + 0x12]
mov dword [ebp - 0x7c], ecx
movsx ecx, word [esi + 0x10]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x74], ecx
movsx eax, word [esi + 0xa]
movsx ecx, word [esi + 0x16]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x6c], ecx
movsx eax, word [esi + 0xc]
movsx ecx, word [esi + 8]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x64], ecx
movsx eax, word [esi + 0x18]
xor ecx, ecx
mov dword [ebp - 0x50], eax
movsx eax, word [esi + 0x1c]
mov cl, byte [esi + 0x2c]
mov dword [ebp - 0x48], eax
movsx eax, word [esi + 0x20]
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x40], eax
movsx ecx, word [esi + 0x1a]
movsx eax, word [esi + 0x26]
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x38], eax
movsx ecx, word [esi + 0x1e]
movsx eax, word [esi + 0x2a]
mov dword [ebp - 0x44], ecx
mov ecx, dword [esi + 0x22]
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x30], eax
movsx ecx, word [esi + 0x28]
xor eax, eax
xor edi, edi
mov al, byte [esi + 0x2f]
mov dword [ebp - 0x34], ecx
xor ecx, ecx
mov dword [ebp - 0x54], edi
mov cl, byte [esi + 0x2e]
mov dword [ebp - 0x68], edi
mov edi, eax
and eax, 0x3f
shr edi, 6
shl ecx, 2
or edi, ecx
xor ecx, ecx
mov cl, byte [esi + 0x30]
mov dword [ebp - 0x8c], edi
mov edi, ecx
and ecx, 0xf
shr edi, 4
shl eax, 4
or edi, eax
mov dword [ebp - 0x84], ecx
mov ecx, dword [ebx + 0xb4]
push edx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x98], edx
mov dword [ebp - 0x88], edi
call fcn.00529760
mov edi, eax
test edi, edi
je 0x5e123c
cmp dword [ebp - 0x74], 0x64
jne 0x5e11a0
mov eax, dword [ebp - 0x10]
mov edx, dword [0x83bf78]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x6c]
cmp edx, ecx
jne 0x5e1189
mov dword [0x83bfa0], eax
test eax, eax
je 0x5e11a0
push eax
mov ecx, 0x83a9e0
call fcn.006f49d0
push eax
mov ecx, edi
call fcn.0058e390
mov edx, dword [edi]
push 0
lea eax, [ebp - 0x98]
push 0
push eax
push 0x7c
push 0
mov ecx, edi
call dword [edx + 8]
mov ecx, 0x83a9e0
call fcn.006f59b0
test eax, eax
je 0x5e1549
cmp dword [ebp - 0x74], 0x64
je 0x5e1549
mov eax, dword [edi + 0x134]
test eax, eax
jne 0x5e1549
mov ecx, edi
call fcn.00591350
push eax
mov ecx, 0x83a9e0
call fcn.006f59a0
test eax, eax
jne 0x5e1226
mov ecx, edi
call fcn.00591350
push eax
mov ecx, 0x83a9e0
call fcn.006f5a70
test eax, eax
je 0x5e1549
movsx ecx, word [esi + 0x26]
mov edx, dword [esi + 0x22]
push ecx
push edx
push edi
mov ecx, ebx
call fcn.005b6060
jmp 0x5e1549
movsx eax, word [esi + 0x26]
mov ecx, dword [esi + 0x22]
push eax
push ecx
push edi
mov ecx, ebx
call fcn.005b6060
jmp 0x5e1549
mov ax, word [esi + 0xe]
mov dword [ebp - 0x1c], 0
cmp ax, 0x2d
jl 0x5e1253
cmp ax, 0xfa0
jl 0x5e1265
movsx edx, ax
push edx
mov ecx, 0x83a9e0
call fcn.006f5b20
test eax, eax
je 0x5e12b9
mov edi, dword [ebp - 0x10]
mov ecx, 0x83a9e0
mov eax, dword [edi]
push eax
call fcn.006f8a80
test eax, eax
je 0x5e1283
mov dword [0x83e254], 1
mov ecx, dword [edi]
push ecx
mov ecx, 0x83a9e0
call fcn.006f8ab0
test eax, eax
je 0x5e129e
mov dword [0x83e2f8], 1
movsx edx, word [esi + 0xe]
push edx
mov ecx, ebx
call fcn.005b1bd0
mov dword [ebp + 8], eax
mov dword [ebp - 0x90], 0
jmp 0x5e12f3
push 0x3e4
mov dword [ebp - 0x1c], 1
call fcn.00711d5b
add esp, 4
mov dword [ebp - 0x14], eax
test eax, eax
mov dword [ebp - 4], 0
je 0x5e12e4
mov ecx, eax
call fcn.00621c70
jmp 0x5e12e6
xor eax, eax
mov edi, dword [ebp - 0x10]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp + 8], eax
test eax, eax
je 0x5e132d
cmp dword [ebp - 0x74], 0x64
jne 0x5e132d
mov ecx, dword [0x83bf78]
mov edx, dword [edi]
cmp ecx, edx
mov ecx, dword [ebp - 0x6c]
jne 0x5e1312
mov dword [0x83bfa0], ecx
test ecx, ecx
je 0x5e132d
push ecx
mov ecx, 0x83a9e0
call fcn.006f49d0
mov ecx, dword [ebp + 8]
push eax
call fcn.0058e390
mov eax, dword [ebp + 8]
mov edi, dword [ebx + 0xb4]
mov dword [ebp - 0x14], eax
mov ebx, dword [edi + 0xc]
add edi, 8
push 0xc
mov edx, dword [ebx + 4]
mov dword [ebp - 0x20], edx
call fcn.00711d5b
add esp, 4
mov ecx, ebx
test ebx, ebx
jne 0x5e1354
mov ecx, eax
mov dword [eax], ecx
mov ecx, dword [ebp - 0x20]
test ecx, ecx
jne 0x5e135f
mov ecx, eax
mov dword [eax + 4], ecx
mov dword [ebx + 4], eax
mov ecx, dword [eax + 4]
lea edx, [ebp - 0x14]
push edx
mov dword [ecx], eax
add eax, 8
push eax
call fcn.0052a890
mov edx, dword [edi + 8]
mov eax, dword [ebp - 0x18]
inc edx
push 0xc
mov dword [edi + 8], edx
mov edi, dword [eax + 0xb4]
add edi, 0x14
mov ebx, dword [edi + 4]
mov ecx, dword [ebx + 4]
mov dword [ebp - 0x14], ecx
call fcn.00711d5b
add esp, 0xc
mov ecx, ebx
test ebx, ebx
jne 0x5e13a5
mov ecx, eax
mov dword [eax], ecx
mov ecx, dword [ebp - 0x14]
test ecx, ecx
jne 0x5e13b0
mov ecx, eax
mov dword [eax + 4], ecx
mov dword [ebx + 4], eax
mov edx, dword [eax + 4]
lea ecx, [ebp + 8]
push ecx
mov dword [edx], eax
add eax, 8
push eax
call fcn.00600450
mov ecx, dword [edi + 8]
add esp, 8
inc ecx
lea eax, [ebp - 0x98]
mov dword [edi + 8], ecx
mov ecx, dword [ebp + 8]
push 0
push 2
mov edx, dword [ecx]
push eax
push 0x79
push 0
call dword [edx + 8]
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x5e144d
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx]
push edx
call fcn.005317a0
add esp, 4
test al, al
jne 0x5e144d
movsx eax, word [esi + 0xc]
push eax
call fcn.006dddd0
add esp, 4
test al, al
jne 0x5e144d
push 0
mov dword [ebp - 0x2c], 0
mov edx, dword [ebp - 0x2c]
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x28], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], 0
mov dword [ecx], edx
mov edx, dword [ebp - 0x24]
push 0x158
mov dword [ecx + 4], eax
mov dword [ecx + 8], edx
mov ecx, dword [ebp + 8]
call fcn.0058f300
mov ecx, 0x83a9e0
call fcn.006f59b0
test eax, eax
je 0x5e14ae
cmp dword [ebp - 0x74], 0x64
je 0x5e14ae
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x134]
test eax, eax
jne 0x5e14ae
call fcn.00591350
push eax
mov ecx, 0x83a9e0
call fcn.006f59a0
test eax, eax
jne 0x5e1499
mov ecx, dword [ebp + 8]
call fcn.00591350
push eax
mov ecx, 0x83a9e0
call fcn.006f5a70
test eax, eax
je 0x5e14ae
movsx eax, word [esi + 0x26]
mov ecx, dword [esi + 0x22]
mov edx, dword [ebp + 8]
push eax
push ecx
mov ecx, dword [ebp - 0x18]
push edx
call fcn.005b6060
mov eax, dword [ebp + 8]
test eax, eax
je 0x5e1546
mov edi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
push ecx
mov eax, dword [edi + 0x1c4]
lea ebx, [edi + 0x1c0]
mov ecx, ebx
mov dword [ebp - 0x1c], eax
call fcn.005bd9f0
mov ecx, dword [ebx + 4]
mov ebx, dword [ebp - 0x10]
cmp eax, ecx
mov dword [ebp - 0x14], eax
je 0x5e14ef
mov edx, dword [ebx]
cmp edx, dword [eax + 0xc]
jb 0x5e14ef
lea eax, [ebp - 0x14]
jmp 0x5e14f5
mov dword [ebp - 0x20], ecx
lea eax, [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [eax]
cmp edx, ecx
jne 0x5e153c
mov edx, dword [edi + 0x1d4]
add edi, 0x1d0
push ebx
mov ecx, edi
mov dword [ebp - 0x1c], edx
call fcn.005bd9f0
mov edi, dword [edi + 4]
mov dword [ebp - 0x14], eax
cmp eax, edi
je 0x5e152d
mov ecx, dword [ebx]
mov edx, dword [eax + 0xc]
cmp ecx, edx
jb 0x5e152d
lea eax, [ebp - 0x14]
jmp 0x5e1533
mov dword [ebp - 0x20], edi
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [eax]
cmp ecx, edx
je 0x5e1546
mov ecx, dword [ebp + 8]
push 1
call fcn.00593e90
mov ebx, dword [ebp - 0x18]
movsx eax, word [esi + 0x2a]
movsx ecx, word [esi + 0x33]
movsx edx, word [esi + 0xc]
push eax
mov eax, dword [ebp - 0x10]
push ecx
push edx
mov ecx, dword [eax]
push ecx
mov ecx, ebx
call fcn.0060e0a0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4