Function at 0x609ad7
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x100534a3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push esi
mov esi, ecx
push edi
mov dword [esp + 0xc], esi
lea ecx, [esi + 0x2c]
call 0x64b2be
xor edi, edi
mov dword [esi], 0x10056f1c
mov dword [esi + 4], edi
mov dword [esi + 8], edi
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], edi
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], edi
mov dword [esi + 0x24], edi
mov dword [esi + 0x28], edi
lea ebx, [esi + 0x30]
push 0xa
mov ecx, ebx
mov dword [esp + 0x1c], edi
call 0x64b570
mov dword [ebx], 0x10056f04
lea ebx, [esi + 0x4c]
mov byte [esp + 0x18], 1
mov ecx, ebx
call 0x64b67e
mov dword [ebx], 0x10056eec
mov dword [esi + 0x60], edi
lea edi, [esi + 0x64]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 2
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x80]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 3
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x9c]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 4
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0xb8]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 5
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0xd4]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 6
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0xf0]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 7
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x10c]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 8
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x128]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 9
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x144]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0xa
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x160]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0xb
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x17c]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0xc
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x198]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0xd
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x1b4]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0xe
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x1d0]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0xf
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x1ec]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0x10
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x208]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0x11
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x224]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0x12
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x240]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0x13
call 0x64b2dc
mov dword [edi], 0x10056ed4
mov byte [esp + 0x18], 0x14
lea edi, [esi + 0x25c]
push 0xa
mov ecx, edi
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x278]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0x15
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x294]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0x16
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x2b0]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0x17
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x2cc]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0x18
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x2e8]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0x19
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x304]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0x1a
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x320]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0x1b
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x33c]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0x1c
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x358]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0x1d
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x374]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0x1e
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x390]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0x1f
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x3ac]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0x20
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x3c8]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0x21
call 0x64b2dc
mov dword [edi], 0x10056ed4
lea edi, [esi + 0x3e4]
push 0xa
mov ecx, edi
mov byte [esp + 0x1c], 0x22
call 0x64b2dc
mov dword [edi], 0x10056ed4
push 0xa
lea ecx, [esi + 0x400]
mov byte [esp + 0x1c], 0x23
call fcn.0060c5a0
push 0xa
lea ecx, [esi + 0x41c]
mov byte [esp + 0x1c], 0x24
call fcn.0060c5a0
push 0xa
lea ecx, [esi + 0x438]
mov byte [esp + 0x1c], 0x25
call fcn.0060c5a0
push 0x10062728
mov byte [esp + 0x1c], 0x26
mov dword [esi], 0x10056ea0
call fcn.0060c570
mov ecx, dword [esp + 0x14]
add esp, 4
mov eax, esi
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x10
ret