Function at 0x435b10
Capabilities:
Access peb ldr_data
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6e7e60
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
push ebx
push esi
push edi
mov eax, dword [0x7cf070]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x30], ecx
mov edi, dword [ebp + 0xc]
mov eax, dword [edi + 8]
sub eax, 0x10
push eax
call fcn.004050c0
lea ebx, [eax + 0x10]
mov dword [ebp - 0x28], ebx
mov dword [ebp - 4], 0
mov eax, dword [edi + 8]
sub eax, 0x10
push eax
call fcn.004050c0
add esp, 8
lea esi, [eax + 0x10]
mov dword [ebp - 0x2c], esi
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 1
call fcn.0040c230
lea eax, [esi - 0x10]
push eax
mov dword [ebp - 0x3c], eax
call fcn.004050c0
add eax, 0x10
add esp, 4
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 2
mov ecx, str.KMT_____jmx_06BCKUbp_13_CGT___fu__
mov esi, dword [0x7e80dc]
call fcn.0045f920
push eax
push esi
lea ecx, [ebp - 0x18]
call fcn.00438ea0
push ecx
push 1
mov ecx, str.BJPPPPPP_amx.4_MYggp__67FIUZccn_1_JW
call fcn.0045f920
mov esi, dword [ebp + 8]
mov ecx, esi
push eax
call fcn.0040c510
mov dword [edi + 0x30], eax
mov ecx, str.O_blllllv_17HMRVZaiim_16EJOXeip
lea eax, [ebp - 0x18]
push eax
call fcn.0045f920
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00406410
add esp, 8
mov byte [ebp - 4], 3
mov ecx, str.IIMMMMMMTbjxz_44AGUWffn__..8_LNXgm3_
push dword [eax]
call fcn.0045f920
push eax
lea eax, [ebp - 0x24]
mov ecx, esi
push eax
call fcn.0040c2e0
lea ecx, [edi + 0xc]
mov byte [ebp - 4], 4
push eax
call fcn.00405050
mov byte [ebp - 4], 3
or edi, 0xffffffff
mov edx, dword [ebp - 0x24]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x435c2f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x435c4d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ecx
mov ecx, str.OOPTTTTT_dqx__04:_FQ_iqw6_BDDDLMX_jjqsx
call fcn.0045f920
push eax
mov ecx, str.AADDDDDDOSZffr__.:DOP__gtw_____5:ILYZ_hltux_00148AHIUYbmy___IJKV___
call fcn.0045f920
push eax
lea eax, [ebp - 0x24]
mov ecx, esi
push eax
call fcn.0040c2e0
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0x10
push eax
call fcn.00405050
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x435c9d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ecx
mov ecx, str.NNNPPPPP_esy____2:_FIOXbkku_26:HLVjmq
call fcn.0045f920
push eax
mov ecx, str.JT_hhhhhsstz_9HTVZZjw44BDRSbdr_16
call fcn.0045f920
push eax
lea eax, [ebp - 0x24]
mov ecx, esi
push eax
call fcn.0040c2e0
mov byte [ebp - 4], 6
mov ecx, dword [ebp + 0xc]
add ecx, 0x14
push eax
call fcn.00405050
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x435ced
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ecx
mov ecx, str.EHKPPPPPVZ_glmx__CJT_cmtt_3_HMjt_09__J
call fcn.0045f920
push eax
mov ecx, str.FFGGGGGGIWdfr__9_DIQ_cqx___DHUWXYagtttuu
call fcn.0045f920
push eax
lea eax, [ebp - 0x24]
mov ecx, esi
push eax
call fcn.0040c2e0
mov byte [ebp - 4], 7
mov ecx, dword [ebp + 0xc]
add ecx, 0x18
push eax
call fcn.00405050
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x435d3d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, str.DPQYYYYY_gjp_::HMV_apv_18EPU__bky_06BDEKZblu.:HRalll__7AGJKOSX__l
call fcn.0045f920
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00404720
add esp, 8
mov byte [ebp - 4], 8
mov ecx, str.ANTlz_67FLVdmox3_IWWY_dfuy__.479
push dword [eax]
call fcn.0045f920
push eax
lea eax, [ebp - 0x24]
mov ecx, esi
push eax
call fcn.0040c2e0
mov byte [ebp - 4], 9
mov esi, dword [ebp + 0xc]
push eax
lea ecx, [esi + 0x20]
call fcn.00405050
mov byte [ebp - 4], 8
mov eax, edi
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x435da2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x435dc0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esi + 0x20]
mov esi, dword [eax - 0xc]
test esi, esi
jns 0x435dd4
push 0x80070057
call fcn.00402890
mov ecx, 1
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
sub eax, esi
or eax, ecx
jge 0x435df1
mov ecx, dword [ebp + 0xc]
push esi
lea ecx, [ecx + 0x20]
call fcn.004027a0
mov ecx, dword [ebp + 0xc]
lea eax, [esi + 1]
push eax
push dword [ecx + 0x20]
call fcn.005f562f
mov ecx, dword [ebp + 0xc]
add esp, 8
mov edx, dword [ecx + 0x20]
cmp esi, dword [edx - 8]
jg 0x435dca
mov dword [edx - 0xc], esi
xor edx, edx
mov eax, dword [ecx + 0x20]
push ecx
mov word [eax + esi*2], dx
mov dword [ecx + 0x3c], 1
mov ecx, str.GLNPPPPPU_achw3__EQcfkpz4_CO__bikt
call fcn.0045f920
push eax
mov ecx, str.CMQggo___4:_JKTkz_9DMUabghjnz_2
call fcn.0045f920
mov esi, dword [ebp + 8]
mov ecx, esi
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0040c2e0
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x10]
cmp dword [eax - 0xc], 0
jne 0x435f09
push ecx
push 0
mov ecx, str.KNQSSSSSafity__23_OP_dju_068_BFGLRhss__23_CGS_hs04_FQS_lmv_2_L
call fcn.0045f920
push eax
mov ecx, esi
call fcn.0040c510
cmp eax, 1
jle 0x435f09
cmp eax, 0xa
mov ecx, 0xa
cmovg eax, ecx
mov dword [ebp - 0x1c], eax
call fcn.004b08d6
mov ecx, eax
test ecx, ecx
jne 0x435e98
push 0x80004005
call fcn.00402890
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 0xb
mov edi, 1
mov eax, dword [ebp - 0x1c]
cmp eax, edi
jl 0x435eeb
mov ecx, str.BIJKKKKKYadls_01_GNSWZisx_07DPZllru_
push edi
cmp edi, eax
je 0x435ec2
mov ecx, str.HNNPPPPPhhpr_38BBNUVZimrw__46BILXddks
call fcn.0045f920
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00402960
mov esi, dword [ebp - 0x14]
lea ecx, [ebp - 0x10]
add esp, 0xc
push dword [esi - 0xc]
push esi
call fcn.004071f0
mov eax, dword [ebp - 0x1c]
inc edi
cmp edi, eax
jle 0x435eb3
or edi, 0xffffffff
mov byte [ebp - 4], 0xa
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x435f09
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x10]
cmp dword [eax - 0xc], 0
je 0x436139
lea ecx, [ebp - 0x58]
call fcn.004b5e2e
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x10]
push ecx
add eax, 0xfffffff0
mov dword [ebp - 0x24], 0x7c
mov esi, esp
push eax
mov dword [ebp - 0x38], esi
call fcn.004050c0
add esp, 4
lea edx, [ebp - 0x58]
add eax, 0x10
lea ecx, [ebp - 0x24]
mov dword [esi], eax
call fcn.0044dac0
mov eax, dword [ebp - 0x50]
add esp, 4
test eax, eax
je 0x436131
cmp eax, 0xa
mov ecx, 0xa
cmovg eax, ecx
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x24], eax
mov dword [ecx + 0x5c], eax
call fcn.004b08d6
mov ecx, eax
test ecx, ecx
jne 0x435f85
push 0x80004005
call fcn.00402890
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x40], eax
mov byte [ebp - 4], 0xd
call fcn.004b08d6
mov ecx, eax
test ecx, ecx
jne 0x435fa9
push 0x80004005
call fcn.00402890
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x1c], edi
mov byte [ebp - 4], 0xe
call fcn.004b08d6
mov ecx, eax
test ecx, ecx
jne 0x435fcd
push 0x80004005
call fcn.00402890
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x20], esi
xor eax, eax
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x24], eax
jle 0x4360d9
mov ecx, dword [ebp + 0xc]
add ecx, 0x64
mov dword [ebp - 0x38], ecx
test eax, eax
js 0x4361c0
cmp eax, dword [ebp - 0x50]
jge 0x4361c0
lea esi, [eax*4]
mov ecx, str.KZ_nnnnnv069KUafsu_.77BFIMXbdpqv_0_HH
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x34], esi
push dword [eax + esi]
call fcn.0045f920
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00402960
mov eax, dword [ebp - 0x14]
add esp, 0xc
cmp eax, dword [ebp - 0x50]
jge 0x4361c0
mov eax, dword [ebp - 0x54]
mov ecx, str.BKNRRRRR_hlt_4CCPXchv__1__IXX_bps___69_
push dword [eax + esi]
call fcn.0045f920
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00402960
add esp, 8
mov ecx, str.HNOPPPPPXglo_7ACCCKTZboot__199_IJQS_lwz_2__KOXXio._JT_acr__.9_O
call fcn.0045f920
mov edi, dword [ebp - 0x1c]
mov ecx, dword [ebp + 8]
push eax
push edi
lea eax, [ebp + 0xc]
push eax
call fcn.0040c2e0
push ecx
mov ecx, dword [ebp + 8]
mov byte [ebp - 4], 0x10
mov esi, dword [ebp - 0x20]
push 0
push esi
call fcn.0040c510
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x44], eax
lea eax, [ebp + 0xc]
push eax
call fcn.00405050
mov byte [ebp - 4], 0xf
or eax, 0xffffffff
mov edx, dword [ebp + 0xc]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4360b4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x44]
push eax
call fcn.004372b0
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x38]
mov dword [edx + ecx], eax
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp eax, dword [ebp - 0x24]
jl 0x435ff3
mov byte [ebp - 4], 0xe
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4360f5
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0xd
or edi, 0xffffffff
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x436113
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xc
mov eax, edi
mov edx, dword [ebp - 0x40]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x436131
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x58]
call fcn.004b5e45
mov byte [ebp - 4], 2
mov eax, edi
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x436157
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov eax, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x436175
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x3c]
mov eax, edi
mov byte [ebp - 4], 0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x436190
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
add ebx, 0xfffffff0
lock xadd dword [ebx + 0xc], edi
dec edi
test edi, edi
jg 0x4361ac
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
call fcn.004b03fc
int3