Function at 0x5826e0
Capabilities:
Check for peb ntglobalflag flag
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x6bd6bc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x100
push ebx
push ebp
push esi
mov esi, ecx
push edi
lea ecx, [esp + 0x80]
mov dword [esp + 0x2c], esi
call fcn.0060d180
xor ebx, ebx
push 0x7e2
lea ecx, [esp + 0xac]
mov dword [esp + 0x11c], ebx
call fcn.00541680
mov al, byte [esp + 0x17]
mov dword [esp + 0xd0], ebx
mov byte [esp + 0xcc], al
mov dword [esp + 0xd4], ebx
mov dword [esp + 0xd8], ebx
lea ecx, [esp + 0x10]
mov byte [esp + 0x118], 2
mov byte [esp + 0x1c], 8
mov byte [esp + 0x1d], 7
mov byte [esp + 0x1e], 0xae
mov byte [esp + 0x1f], bl
mov byte [esp + 0x20], bl
mov byte [esp + 0x21], bl
mov byte [esp + 0x22], bl
mov byte [esp + 0x23], bl
mov byte [esp + 0x24], bl
mov byte [esp + 0x30], 3
mov byte [esp + 0x31], 2
mov byte [esp + 0x32], 0xaa
mov byte [esp + 0x33], bl
mov dword [esp + 0x28], ebx
call fcn.0060fe70
mov cl, byte [esp + 0x17]
mov dword [esp + 0xe0], ebx
mov byte [esp + 0xdc], cl
mov dword [esp + 0xe4], ebx
mov dword [esp + 0xe8], ebx
mov al, 0x34
mov dl, 0x20
mov cl, 0x80
mov byte [esp + 0x118], 4
mov byte [esp + 0x4c], 0x30
mov byte [esp + 0x4d], 4
mov byte [esp + 0x4e], bl
mov byte [esp + 0x4f], 0x30
mov byte [esp + 0x50], 6
mov byte [esp + 0x51], bl
mov byte [esp + 0x52], 0x30
mov byte [esp + 0x53], bl
mov byte [esp + 0x54], 2
mov byte [esp + 0x55], 0x30
mov byte [esp + 0x56], bl
mov byte [esp + 0x57], 3
mov byte [esp + 0x58], al
mov byte [esp + 0x59], 8
mov byte [esp + 0x5a], bl
mov byte [esp + 0x5b], al
mov byte [esp + 0x5c], 0xc
mov byte [esp + 0x5d], bl
mov byte [esp + 0x5e], al
mov byte [esp + 0x5f], dl
mov byte [esp + 0x60], bl
mov byte [esp + 0x61], al
mov byte [esp + 0x62], 0x30
mov byte [esp + 0x63], bl
mov byte [esp + 0x64], al
mov byte [esp + 0x65], 2
mov byte [esp + 0x66], bl
mov byte [esp + 0x67], al
mov byte [esp + 0x68], 3
mov byte [esp + 0x69], bl
mov byte [esp + 0x6a], al
mov byte [esp + 0x6b], cl
mov byte [esp + 0x72], dl
mov edx, dword [esi]
mov byte [esp + 0x35], cl
mov byte [esp + 0x39], cl
mov byte [esp + 0x3d], cl
mov byte [esp + 0x41], cl
mov byte [esp + 0x45], cl
mov byte [esp + 0x49], cl
mov ecx, esi
mov byte [esp + 0x6c], bl
mov byte [esp + 0x6d], al
mov byte [esp + 0x6e], 0xc0
mov byte [esp + 0x6f], bl
mov byte [esp + 0x70], al
mov byte [esp + 0x71], bl
mov byte [esp + 0x73], al
mov byte [esp + 0x74], bl
mov byte [esp + 0x75], 0x30
mov byte [esp + 0x76], al
mov byte [esp + 0x77], bl
mov byte [esp + 0x78], 8
mov byte [esp + 0x79], al
mov byte [esp + 0x7a], bl
mov byte [esp + 0x7b], 0xc
mov byte [esp + 0x34], 0xc
mov byte [esp + 0x36], 0x19
mov byte [esp + 0x37], bl
mov byte [esp + 0x38], 0x25
mov byte [esp + 0x3a], 0x32
mov byte [esp + 0x3b], bl
mov byte [esp + 0x3c], 0x3e
mov byte [esp + 0x3e], 0x4b
mov byte [esp + 0x3f], bl
mov byte [esp + 0x40], 0x57
mov byte [esp + 0x42], 0x64
mov byte [esp + 0x43], bl
mov byte [esp + 0x44], 0x70
mov byte [esp + 0x46], 0x7d
mov byte [esp + 0x47], bl
mov byte [esp + 0x48], 0x89
call dword [edx + 0x18]
test ax, ax
jne 0x58294b
lea ecx, [esp + 0x10]
mov byte [esp + 0x118], 2
call fcn.0060ffb0
lea ecx, [esp + 0xa8]
mov byte [esp + 0x118], bl
call fcn.005416b0
lea ecx, [esp + 0x80]
mov dword [esp + 0x118], 0xffffffff
call fcn.0060d280
xor ax, ax
jmp 0x583141
cmp byte [0x71bb5c], bl
je 0x5829a0
push ecx
mov ecx, esp
mov dword [esp + 0x80], esp
push ebx
call fcn.0060fea0
add esi, 0x8c
mov ecx, esi
call fcn.006101a0
mov ebp, 0xf
call fcn.00698605
cdq
mov ecx, 0xff
idiv ecx
mov ecx, esi
mov edi, edx
call fcn.00610330
cmp ax, 0xf
jg 0x582999
push edi
mov ecx, esi
call fcn.00610310
dec ebp
jne 0x582975
mov esi, dword [esp + 0x2c]
cmp byte [esp + 0x120], 8
jne case.default.0x582e1c
push 8
mov ecx, esi
call fcn.00583190
push ebx
push ebx
mov ecx, 0x71b8f8
mov dword [esp + 0x30], eax
call fcn.006166b0
push ebx
lea edx, [esp + 0x34]
push 1
lea eax, [esp + 0xf4]
push edx
push eax
lea ecx, [esp + 0xb8]
call fcn.005436d0
lea ecx, [esp + 0xec]
call fcn.0060d280
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x18]
test ax, ax
jne 0x582a3e
lea ecx, [esp + 0x10]
mov byte [esp + 0x118], 2
call fcn.0060ffb0
lea ecx, [esp + 0xa8]
mov byte [esp + 0x118], bl
call fcn.005416b0
lea ecx, [esp + 0x80]
mov dword [esp + 0x118], 0xffffffff
call fcn.0060d280
xor ax, ax
jmp 0x583141
push 0x3e8
call fcn.0041ad00
add esp, 4
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x704294
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.006206f0
mov al, byte [esp + 0x120]
push ebx
push ecx
cmp al, 8
mov ecx, esp
jae 0x582aa4
mov dword [esp + 0x34], esp
push 6
push 0x703784
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push 6
push 0x70377c
jmp 0x582ace
mov dword [esp + 0x34], esp
push 6
push 0x703794
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push 6
push 0x70378c
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push 6
push 0x703774
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
sub esp, 0x10
lea eax, [esp + 0x20]
mov edi, esp
mov dword [esp + 0x3c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.0060fe80
push edi
call fcn.0060f170
add esp, 4
mov byte [esp + 0x12c], 5
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x70379c
call fcn.0060ff10
mov ecx, dword [0x71b93c]
mov byte [esp + 0x12c], 4
call fcn.006208f0
mov ecx, dword [0x71b93c]
call fcn.00620cd0
movsx eax, ax
sub eax, ebx
je 0x582dff
dec eax
je 0x582b72
dec eax
je 0x5830bc
jmp case.default.0x582e1c
mov eax, dword [esp + 0x120]
and eax, 0xff
cmp eax, 9
ja case.default.0x582e1c
xor ecx, ecx
mov cl, byte [eax + 0x583168]
jmp dword [ecx*4 + 0x58315c]
cmp byte [0x71bb5c], bl
je 0x582bb1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x70377c
jmp 0x582e99
lea edx, [eax + eax*2]
sub esp, 0x24
mov dword [esp + 0x3c], esp
mov cx, word [esp + edx*2 + 0x70]
lea eax, [esp + edx*2 + 0x70]
mov word [esp + 0x43], cx
lea ecx, [esp + 0x40]
mov dl, byte [eax + 2]
mov eax, esp
push ebx
push 1
push ecx
push eax
lea ecx, [esp + 0xdc]
mov byte [esp + 0x55], dl
call fcn.005436d0
lea ecx, [esp + 0xa4]
call fcn.0060d330
lea ecx, [esp + 0x80]
call fcn.0060d760
test ax, ax
je case.default.0x582e1c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x70377c
jmp 0x582e99
mov edx, dword [esp + 0x28]
push 5
push ebx
push edx
mov ecx, esi
call fcn.00583640
mov cl, byte [0x71bb5c]
mov dword [esp + 0x28], eax
cmp cl, bl
je 0x582c6b
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x70525c
call fcn.0060ff10
lea ecx, [esp + 0x14]
call fcn.006101a0
mov al, byte [esp + 0x28]
lea ecx, [esp + 0x10]
add al, 4
push eax
push 5
call fcn.006102b0
jmp case.default.0x582e1c
sub esp, 0x24
lea edx, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x3c], esp
push ebx
add al, 8
push 1
push edx
shl al, 4
push ecx
lea ecx, [esp + 0xdc]
mov byte [esp + 0x54], al
call fcn.005436d0
lea ecx, [esp + 0xa4]
call fcn.0060d330
lea ecx, [esp + 0x80]
call fcn.0060d760
test ax, ax
je case.default.0x582e1c
lea eax, [esp + 0xa4]
lea ecx, [esp + 0x80]
push eax
call fcn.0060d6b0
push 4
mov ecx, eax
mov byte [esp + 0x11c], 7
call fcn.00610190
lea ecx, [esp + 0xa4]
mov byte [esp + 0x17], al
mov byte [esp + 0x118], 4
call fcn.0060ffb0
cmp byte [esp + 0x17], 0xee
jne case.default.0x582e1c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x70525c
call fcn.0060ff10
lea ecx, [esp + 0x14]
call fcn.006101a0
mov cl, byte [esp + 0x28]
add cl, 4
push ecx
push 5
lea ecx, [esp + 0x18]
call fcn.006102b0
jmp case.default.0x582e1c
mov dx, word [0x70e304]
push 0xc
push ebx
push edx
mov ecx, esi
call fcn.00583640
mov cl, byte [0x71bb5c]
movsx eax, ax
cmp cl, bl
mov dword [0x70e304], eax
je 0x582d5f
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x582ff8
cmp eax, 1
je case.default.0x582e1c
mov cl, byte [esp + eax*2 + 0x30]
mov dl, byte [esp + eax*2 + 0x31]
sub esp, 0x24
mov byte [esp + 0x47], cl
mov eax, esp
mov dword [esp + 0x3c], esp
push ebx
lea ecx, [esp + 0x44]
push 1
push ecx
push eax
lea ecx, [esp + 0xdc]
mov byte [esp + 0x53], 0x38
mov byte [esp + 0x54], 0x40
mov byte [esp + 0x55], bl
mov byte [esp + 0x56], bl
mov byte [esp + 0x58], dl
call fcn.005436d0
lea ecx, [esp + 0xa4]
call fcn.0060d330
lea ecx, [esp + 0x80]
call fcn.0060d760
test ax, ax
je case.default.0x582e1c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x70525c
call fcn.0060ff10
lea ecx, [esp + 0x14]
call fcn.006101a0
mov dl, byte [0x70e304]
lea ecx, [esp + 0x10]
add dl, 0x16
push edx
push 5
call fcn.006102b0
jmp case.default.0x582e1c
mov eax, dword [esp + 0x120]
and eax, 0xff
cmp eax, 9
ja case.default.0x582e1c
xor ecx, ecx
mov cl, byte [eax + 0x583180]
jmp dword [ecx*4 + 0x583174]
cmp byte [0x71bb5c], bl
je 0x582e34
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x582e92
lea edx, [eax + eax*2]
sub esp, 0x24
mov dword [esp + 0x3c], esp
mov cx, word [esp + edx*2 + 0x73]
lea eax, [esp + edx*2 + 0x73]
mov word [esp + 0x43], cx
lea ecx, [esp + 0x40]
mov dl, byte [eax + 2]
mov eax, esp
push ebx
push 1
push ecx
push eax
lea ecx, [esp + 0xdc]
mov byte [esp + 0x55], dl
call fcn.005436d0
lea ecx, [esp + 0xa4]
call fcn.0060d330
lea ecx, [esp + 0x80]
call fcn.0060d760
test ax, ax
je case.default.0x582e1c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x703784
call fcn.0060ff10
lea ecx, [esp + 0x14]
call fcn.006101a0
jmp case.default.0x582e1c
mov edx, dword [esp + 0x28]
push 5
push 1
push edx
mov ecx, esi
call fcn.00583640
mov cl, byte [0x71bb5c]
mov dword [esp + 0x28], eax
cmp cl, bl
je 0x582efd
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x70525c
call fcn.0060ff10
lea ecx, [esp + 0x14]
call fcn.006101a0
mov al, byte [esp + 0x28]
lea ecx, [esp + 0x10]
add al, 4
push eax
push 5
call fcn.006102b0
jmp case.default.0x582e1c
add al, 8
lea ecx, [esp + 0x80]
shl al, 4
mov byte [esp + 0x1f], 0x30
mov byte [esp + 0x20], al
call fcn.0060d780
sub esp, 0x24
lea edx, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x3c], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0xdc]
call fcn.005436d0
lea ecx, [esp + 0xa4]
call fcn.0060d330
lea ecx, [esp + 0x80]
call fcn.0060d760
test ax, ax
je case.default.0x582e1c
lea eax, [esp + 0x7c]
lea ecx, [esp + 0x80]
push eax
call fcn.0060d6b0
push 4
mov ecx, eax
mov byte [esp + 0x11c], 6
call fcn.00610190
lea ecx, [esp + 0x7c]
mov byte [esp + 0x17], al
mov byte [esp + 0x118], 4
call fcn.0060ffb0
cmp byte [esp + 0x17], 0xee
jne case.default.0x582e1c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x70525c
call fcn.0060ff10
lea ecx, [esp + 0x14]
call fcn.006101a0
mov cl, byte [esp + 0x28]
add cl, 4
push ecx
push 5
lea ecx, [esp + 0x18]
call fcn.006102b0
jmp case.default.0x582e1c
mov dx, word [0x70e304]
push 0xc
push 1
push edx
mov ecx, esi
call fcn.00583640
mov cl, byte [0x71bb5c]
movsx eax, ax
cmp cl, bl
mov dword [0x70e304], eax
je 0x583025
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x70525c
call fcn.0060ff10
lea ecx, [esp + 0x14]
call fcn.006101a0
mov al, byte [0x70e304]
lea ecx, [esp + 0x10]
add al, 0x16
push eax
push 5
call fcn.006102b0
jmp case.default.0x582e1c
mov cl, byte [esp + eax*2 + 0x30]
mov dl, byte [esp + eax*2 + 0x31]
sub esp, 0x24
mov byte [esp + 0x47], cl
mov eax, esp
mov dword [esp + 0x3c], esp
push ebx
lea ecx, [esp + 0x44]
push 1
push ecx
push eax
lea ecx, [esp + 0xdc]
mov byte [esp + 0x53], 0x38
mov byte [esp + 0x54], 0x40
mov byte [esp + 0x55], bl
mov byte [esp + 0x56], bl
mov byte [esp + 0x58], dl
call fcn.005436d0
lea ecx, [esp + 0xa4]
call fcn.0060d330
lea ecx, [esp + 0x80]
call fcn.0060d760
test ax, ax
je case.default.0x582e1c
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x70525c
call fcn.0060ff10
lea ecx, [esp + 0x14]
call fcn.006101a0
mov dl, byte [0x70e304]
lea ecx, [esp + 0x10]
add dl, 0x16
push edx
push 5
call fcn.006102b0
jmp case.default.0x582e1c
cmp byte [0x71bb5c], bl
jne 0x583102
sub esp, 0x24
lea ecx, [esp + 0x40]
mov eax, esp
mov dword [esp + 0x3c], esp
push ebx
push 1
push ecx
push eax
lea ecx, [esp + 0xdc]
mov byte [esp + 0x54], bl
mov byte [esp + 0x55], bl
mov byte [esp + 0x56], bl
mov byte [esp + 0x57], bl
mov byte [esp + 0x58], bl
call fcn.005436d0
lea ecx, [esp + 0xa4]
call fcn.0060d330
lea ecx, [esp + 0x10]
mov byte [esp + 0x118], 2
call fcn.0060ffb0
lea ecx, [esp + 0xa8]
mov byte [esp + 0x118], bl
call fcn.005416b0
lea ecx, [esp + 0x80]
mov dword [esp + 0x118], 0xffffffff
call fcn.0060d280
mov ax, 1
mov ecx, dword [esp + 0x110]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x10c
ret 4