Function at 0x5ddde8
Capabilities:
Delete file
Get number of processors

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff84
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x5de225
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00535954
mov ebx, eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 8]
mov ecx, dword [eax - 0x28]
mov dl, 1
mov eax, dword [0x542c28]
call fcn.005605d0
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov byte [eax + 0x45], 0
xor eax, eax
push ebp
push 0x5de14b
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 8]
sub eax, 2
je 0x5ddf7b
sub eax, 6
je 0x5ddf7b
sub eax, 6
jne 0x5de141
mov eax, dword [ebp - 0x18]
mov byte [eax + 0x46], 0
mov esi, dword [ebx + 0x3c]
test esi, esi
jne 0x5dde9e
push 0
mov edx, 0xe
mov eax, ebx
call fcn.005345f4
push eax
call sub.gdi32.dll_CopyEnhMetaFileW
mov edx, dword [ebp - 0x18]
mov dword [edx + 0x1c], eax
jmp 0x5ddeab
mov eax, esi
call fcn.005340b0
mov edx, dword [ebp - 0x18]
mov dword [edx + 0x1c], eax
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0x1c], 0
jne 0x5ddeb9
call fcn.0065e804
mov dword [ebp - 0x78], 0x64
lea eax, [ebp - 0x7c]
push eax
push 0x64
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x1c]
push eax
call sub.gdi32.dll_GetEnhMetaFileHeader
call fcn.00656518
mov ebx, eax
mov eax, dword [0x6725dc]
mov eax, dword [eax]
push eax
push 8
push 0
push 0
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x1c]
push eax
call sub.gdi32.dll_GetWinMetaFileBits
mov edx, eax
mov eax, ebx
call fcn.00656528
mov eax, dword [0x6725dc]
mov eax, dword [eax]
push eax
push 8
mov eax, dword [ebx + 4]
push eax
mov eax, dword [ebx + 8]
push eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x1c]
push eax
call sub.gdi32.dll_GetWinMetaFileBits
mov eax, dword [ebx + 8]
push eax
mov ecx, dword [ebx + 4]
xor edx, edx
mov eax, dword [ebp - 0x18]
call fcn.0055e620
mov eax, ebx
call fcn.004028c0
imul eax, dword [ebp - 0x2c], 0x64
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x5c]
sub eax, dword [ebp - 0x64]
push eax
call sub.kernel32.dll_MulDiv
mov edx, eax
shl eax, 4
sub eax, edx
mov edx, dword [ebp - 0x14]
mov dword [edx + 0x2c], eax
imul eax, dword [ebp - 0x28], 0x64
push eax
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x60]
push eax
call sub.kernel32.dll_MulDiv
mov edx, eax
shl eax, 4
sub eax, edx
mov edx, dword [ebp - 0x14]
mov dword [edx + 0x30], eax
jmp 0x5de141
mov eax, dword [ebp - 0x18]
mov byte [eax + 0x46], 1
mov esi, dword [ebx + 0x3c]
test esi, esi
jne 0x5ddf9a
mov dl, 1
mov eax, dword [0x64dec8]
call fcn.006515a0
mov dword [ebp - 8], eax
jmp 0x5ddfa4
mov eax, esi
call fcn.005340b0
mov dword [ebp - 8], eax
mov dl, 1
mov eax, dword [0x41ef24]
call fcn.006515a0
mov edx, dword [ebp - 0x18]
mov dword [edx + 0x38], eax
xor eax, eax
push ebp
push 0x5de117
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [ebx + 0x3c], 0
jne 0x5de08f
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax - 4]
cmp dword [eax + 8], 2
jne 0x5de009
mov edx, 9
mov eax, ebx
call fcn.005345f4
push eax
mov edx, 2
mov eax, ebx
call fcn.005345f4
mov ecx, eax
mov dx, 2
mov eax, dword [ebp - 8]
call fcn.00651de4
jmp 0x5de08f
mov edx, 8
mov eax, ebx
call fcn.005345f4
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
call sub.kernel32.dll_GlobalLock
mov ebx, eax
xor eax, eax
push ebp
push 0x5de088
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
mov edi, ebx
push edi
mov esi, ebx
mov eax, dword [esi]
add eax, ebx
mov edx, dword [esi + 0x20]
shl edx, 2
add eax, edx
test byte [esi + 0x10], 3
setne dl
and edx, 0x7f
shl edx, 2
lea edx, [edx + edx*2]
add eax, edx
push eax
push 4
push edi
mov eax, dword [0x6725dc]
mov eax, dword [eax]
push eax
call sub.gdi32.dll_CreateDIBitmap
mov edx, eax
mov eax, dword [ebp - 8]
call fcn.006522fc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5de08f
mov eax, dword [ebp - 0x10]
push eax
call sub.kernel32.dll_GlobalUnlock
ret
mov eax, dword [ebp - 8]
call fcn.006273fc
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x38]
mov edx, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 8]
lea edx, [ebp - 0xc]
xor eax, eax
call fcn.006265c4
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x38]
mov edx, dword [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push 0
xor ecx, ecx
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18]
call fcn.0055e620
mov eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_DeleteFileW
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x38]
mov edx, dword [eax]
call dword [edx + 0x28]
mov edx, eax
shl eax, 4
sub eax, edx
mov edx, dword [ebp - 0x14]
mov dword [edx + 0x2c], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x38]
mov edx, dword [eax]
call dword [edx + 0x1c]
mov edx, eax
shl eax, 4
sub eax, edx
mov edx, dword [ebp - 0x14]
mov dword [edx + 0x30], eax
mov eax, dword [ebp - 8]
call fcn.004028c0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5de141
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5de162
cmp dword [ebp - 4], 0
jne 0x5de176
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax - 4]
mov byte [eax], 1
jmp 0x5de1b3
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x24]
mov ecx, 1
mov edx, 0x78
call fcn.0055ff64
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax - 0x24]
mov edx, dword [ebp - 4]
call fcn.005fd1ac
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax - 0x24]
mov edx, dword [ebp - 4]
call fcn.005fd0b0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax - 4]
cmp byte [eax], 0
jne 0x5de202
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax - 0x28]
mov eax, dword [eax + 0xa8]
call fcn.00656c90
mov ecx, dword [ebp - 4]
mov dl, 0x1b
call fcn.00551cb4
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 8]
lea ecx, [eax - 0x34]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax - 0x24]
mov edx, dword [ebp - 4]
call fcn.005d7e20
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax - 4]
mov byte [eax + 1], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5de22c
lea eax, [ebp - 0xc]
call fcn.00403880
ret