Function at 0x5e2ed0
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x73554b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x7c
push ebx
push esi
mov esi, dword [ebp + 8]
mov ebx, ecx
xor edx, edx
push edi
mov eax, dword [esi + 2]
mov dl, byte [esi + 0x31]
movsx ecx, word [esi + 0xe]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], ecx
movsx eax, word [esi + 6]
movsx ecx, word [esi + 0x10]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x80], edx
movsx eax, word [esi + 0x16]
mov edx, dword [esi + 0x12]
mov dword [ebp - 0x54], eax
movsx eax, word [esi + 0xc]
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x58], edx
movsx ecx, word [esi + 0xa]
movsx edx, word [esi + 8]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x4c], ecx
movsx eax, word [esi + 0x1e]
mov dword [ebp - 0x50], edx
xor ecx, ecx
movsx edx, word [esi + 0x1c]
mov cl, byte [esi + 0x30]
mov dword [ebp - 0x38], eax
movsx eax, word [esi + 0x24]
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x3c], edx
movsx ecx, word [esi + 0x20]
movsx edx, word [esi + 0x22]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x34], ecx
movsx eax, word [esi + 0x2c]
mov ecx, dword [esi + 0x26]
mov dword [ebp - 0x30], edx
movsx edx, word [esi + 0x2a]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x20], eax
movsx ecx, word [esi + 0x2e]
xor eax, eax
mov dword [ebp - 0x24], edx
mov al, byte [esi + 0x33]
xor edx, edx
mov dl, byte [esi + 0x32]
mov dword [ebp - 0x1c], ecx
mov ecx, eax
and eax, 0x3f
shl edx, 2
shr ecx, 6
or edx, ecx
xor ecx, ecx
mov cl, byte [esi + 0x34]
mov dword [ebp - 0x78], edx
mov edx, ecx
and ecx, 0xf
shr edx, 4
shl eax, 4
or edx, eax
xor eax, eax
mov al, byte [esi + 0x35]
mov dword [ebp - 0x74], edx
mov edx, eax
mov edi, dword [esi + 0x18]
shr edx, 2
shl ecx, 6
or edx, ecx
xor ecx, ecx
mov cl, byte [esi + 0x36]
and eax, 3
shl eax, 8
or ecx, eax
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x64], ecx
xor eax, eax
mov al, byte [esi + 0x37]
push edi
mov edx, eax
and eax, 0xf
shr edx, 4
mov ecx, 0x83a9e0
mov dword [ebp - 0x70], edx
mov dword [ebp - 0x6c], eax
call fcn.006ce880
mov eax, dword [esi + 2]
mov ecx, dword [ebx + 0xb4]
push eax
call fcn.00529760
mov edi, eax
test edi, edi
je 0x5e3195
mov edx, dword [edi]
push 0
lea eax, [ebp - 0x88]
push 0
push eax
push 0x7b
push 0
mov ecx, edi
call dword [edx + 8]
cmp dword [ebp - 0x5c], 0x64
jne 0x5e306b
mov ecx, dword [0x83bf78]
mov eax, dword [esi + 2]
cmp ecx, eax
mov eax, dword [ebp - 0x54]
jne 0x5e3043
mov dword [0x83bfa0], eax
test eax, eax
je 0x5e306b
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x9c]
test eax, eax
jne 0x5e306b
mov eax, dword [ebp - 0x54]
mov ecx, 0x83a9e0
push eax
call fcn.006f49d0
push eax
mov ecx, edi
call fcn.0058e390
mov ecx, 0x83a9e0
call fcn.006f59b0
test eax, eax
je 0x5e30d1
cmp dword [ebp - 0x5c], 0x64
je 0x5e30d1
mov eax, dword [edi + 0x134]
test eax, eax
jne 0x5e30d1
mov ecx, edi
call fcn.00591350
push eax
mov ecx, 0x83a9e0
call fcn.006f59a0
test eax, eax
jne 0x5e30c0
mov ecx, edi
call fcn.00591350
push eax
mov ecx, 0x83a9e0
call fcn.006f5a70
test eax, eax
je 0x5e30d1
movsx ecx, word [esi + 0x2a]
mov edx, dword [esi + 0x26]
push ecx
push edx
jmp 0x5e30c9
movsx eax, word [esi + 0x2a]
mov ecx, dword [esi + 0x26]
push eax
push ecx
push edi
mov ecx, ebx
call fcn.005b6060
mov eax, dword [edi + 0x2a4]
test eax, eax
je 0x5e343c
mov edx, dword [edi + 0x214]
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], edx
lea edx, [ebp - 0x18]
push eax
lea ecx, [ebx + 0x1c0]
push edx
call fcn.005fe8c0
mov eax, dword [eax]
mov ecx, dword [ebx + 0x1c4]
cmp eax, ecx
mov dword [ebp + 8], eax
je 0x5e3117
mov edx, dword [ebp - 0x10]
cmp edx, dword [eax + 0xc]
jb 0x5e3117
lea eax, [ebp + 8]
jmp 0x5e311d
mov dword [ebp - 0x10], ecx
lea eax, [ebp - 0x10]
mov eax, dword [eax]
mov ecx, dword [ebx + 0x1c4]
cmp eax, ecx
je 0x5e3135
mov ecx, dword [ebp - 0x68]
mov dword [eax + 0x10], ecx
mov edx, dword [ebp - 0x64]
mov dword [eax + 0x14], edx
mov eax, dword [edi + 0x214]
lea ecx, [ebp - 0x10]
lea edi, [ebx + 0x1d0]
lea edx, [ebp - 0x18]
push ecx
push edx
mov ecx, edi
mov dword [ebp - 0x10], eax
call fcn.005fe8c0
mov eax, dword [eax]
mov edi, dword [edi + 4]
cmp eax, edi
mov dword [ebp + 8], eax
je 0x5e316e
mov ecx, dword [ebp - 0x10]
mov edx, dword [eax + 0xc]
cmp ecx, edx
jb 0x5e316e
lea eax, [ebp + 8]
jmp 0x5e3174
mov dword [ebp - 0x10], edi
lea eax, [ebp - 0x10]
mov eax, dword [eax]
mov ecx, dword [ebx + 0x1d4]
cmp eax, ecx
je 0x5e343c
mov edx, dword [ebp - 0x68]
mov dword [eax + 0x10], edx
mov ecx, dword [ebp - 0x64]
mov dword [eax + 0x14], ecx
jmp 0x5e343c
mov ax, word [esi + 0xe]
cmp ax, 0x2d
jl 0x5e31a5
cmp ax, 0xfa0
jl 0x5e31b7
movsx edx, ax
push edx
mov ecx, 0x83a9e0
call fcn.006f5b20
test eax, eax
je 0x5e3207
mov eax, dword [esi + 2]
mov ecx, 0x83a9e0
push eax
call fcn.006f8a80
test eax, eax
je 0x5e31d3
mov dword [0x83e254], 1
mov ecx, dword [esi + 2]
push ecx
mov ecx, 0x83a9e0
call fcn.006f8ab0
test eax, eax
je 0x5e31ef
mov dword [0x83e2f8], 1
movsx edx, word [esi + 0xe]
push edx
mov ecx, ebx
call fcn.005b1bd0
mov dword [ebp + 8], eax
mov dword [ebp - 0x80], 0
jmp 0x5e3237
push 0x3e4
call fcn.00711d5b
add esp, 4
mov dword [ebp - 0x18], eax
test eax, eax
mov dword [ebp - 4], 0
je 0x5e322b
mov ecx, eax
call fcn.00621c70
jmp 0x5e322d
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [ebp + 8], eax
test eax, eax
je 0x5e3272
cmp dword [ebp - 0x5c], 0x64
jne 0x5e3272
mov ecx, dword [0x83bf78]
mov edx, dword [esi + 2]
cmp ecx, edx
mov ecx, dword [ebp - 0x54]
jne 0x5e3257
mov dword [0x83bfa0], ecx
test ecx, ecx
je 0x5e3272
push ecx
mov ecx, 0x83a9e0
call fcn.006f49d0
mov ecx, dword [ebp + 8]
push eax
call fcn.0058e390
mov eax, dword [ebp + 8]
mov edi, dword [ebx + 0xb4]
mov dword [ebp - 0x18], eax
add edi, 8
push 0xc
mov eax, dword [edi + 4]
mov dword [ebp - 0x10], eax
mov edx, dword [eax + 4]
mov dword [ebp - 0x14], edx
call fcn.00711d5b
mov edx, dword [ebp - 0x10]
add esp, 4
test edx, edx
mov ecx, edx
jne 0x5e329f
mov ecx, eax
mov dword [eax], ecx
mov ecx, dword [ebp - 0x14]
test ecx, ecx
jne 0x5e32aa
mov ecx, eax
mov dword [eax + 4], ecx
mov dword [edx + 4], eax
mov ecx, dword [eax + 4]
lea edx, [ebp - 0x18]
push edx
mov dword [ecx], eax
add eax, 8
push eax
call fcn.0052a890
mov ecx, dword [edi + 8]
push 0xc
inc ecx
mov dword [edi + 8], ecx
mov edi, dword [ebx + 0xb4]
add edi, 0x14
mov eax, dword [edi + 4]
mov dword [ebp - 0x18], eax
mov eax, dword [eax + 4]
mov dword [ebp - 0x14], eax
call fcn.00711d5b
mov ecx, dword [ebp - 0x18]
add esp, 0xc
test ecx, ecx
mov edx, ecx
jne 0x5e32f3
mov edx, eax
mov dword [eax], edx
mov edx, dword [ebp - 0x14]
test edx, edx
jne 0x5e32fe
mov edx, eax
mov dword [eax + 4], edx
mov dword [ecx + 4], eax
mov ecx, dword [eax + 4]
lea edx, [ebp + 8]
push edx
mov dword [ecx], eax
add eax, 8
push eax
call fcn.00600450
mov eax, dword [edi + 8]
add esp, 8
inc eax
lea edx, [ebp - 0x88]
mov dword [edi + 8], eax
mov ecx, dword [ebp + 8]
push 0
push 0
mov eax, dword [ecx]
push edx
push 0x7a
push 0
call dword [eax + 8]
mov ecx, 0x83a9e0
call fcn.006f59b0
test eax, eax
je 0x5e3397
cmp dword [ebp - 0x5c], 0x64
je 0x5e3397
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x134]
test eax, eax
jne 0x5e3397
call fcn.00591350
push eax
mov ecx, 0x83a9e0
call fcn.006f59a0
test eax, eax
jne 0x5e3383
mov ecx, dword [ebp + 8]
call fcn.00591350
push eax
mov ecx, 0x83a9e0
call fcn.006f5a70
test eax, eax
je 0x5e3397
movsx eax, word [esi + 0x2a]
mov ecx, dword [esi + 0x26]
mov edx, dword [ebp + 8]
push eax
push ecx
push edx
mov ecx, ebx
call fcn.005b6060
mov eax, dword [ebp + 8]
test eax, eax
je 0x5e343c
mov eax, dword [ebx + 0x1c4]
lea ecx, [ebp - 0x88]
lea edi, [ebx + 0x1c0]
push ecx
mov ecx, edi
mov dword [ebp - 0x10], eax
call fcn.005bd9f0
mov edi, dword [edi + 4]
mov dword [ebp - 0x18], eax
cmp eax, edi
je 0x5e33db
mov edx, dword [ebp - 0x88]
mov ecx, dword [eax + 0xc]
cmp edx, ecx
jb 0x5e33db
lea eax, [ebp - 0x18]
jmp 0x5e33e1
mov dword [ebp - 0x14], edi
lea eax, [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
mov edx, dword [eax]
cmp edx, ecx
jne 0x5e3432
mov edx, dword [ebx + 0x1d4]
lea edi, [ebx + 0x1d0]
lea eax, [ebp - 0x88]
mov ecx, edi
push eax
mov dword [ebp - 0x10], edx
call fcn.005bd9f0
mov edi, dword [edi + 4]
mov dword [ebp - 0x18], eax
cmp eax, edi
je 0x5e3423
mov ecx, dword [ebp - 0x88]
mov edx, dword [eax + 0xc]
cmp ecx, edx
jb 0x5e3423
lea eax, [ebp - 0x18]
jmp 0x5e3429
mov dword [ebp - 0x14], edi
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov ecx, dword [eax]
cmp ecx, edx
je 0x5e343c
mov ecx, dword [ebp + 8]
push 1
call fcn.00593e90
movsx eax, word [esi + 0x2e]
movsx ecx, word [esi + 0x3a]
movsx edx, word [esi + 0xc]
push eax
mov eax, dword [esi + 2]
push ecx
push edx
push eax
mov ecx, ebx
call fcn.0060e0a0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4