Function at 0x5c9990
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x73075b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x78
push ebx
push esi
mov esi, dword [ebp + 8]
mov ebx, ecx
push edi
mov dword [ebp - 0x10], ebx
mov eax, dword [esi + 2]
mov edx, dword [esi + 0x16]
movsx ecx, word [esi + 0xe]
mov dword [ebp - 0x84], eax
xor eax, eax
mov al, byte [esi + 0x31]
mov dword [ebp - 0x80], ecx
movsx ecx, word [esi + 6]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x5c], ecx
movsx eax, word [esi + 0x10]
movsx ecx, word [esi + 0x12]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], ecx
movsx eax, word [esi + 0x14]
movsx ecx, word [esi + 0xa]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x48], ecx
movsx eax, word [esi + 8]
movsx ecx, word [esi + 0xc]
mov dword [ebp - 0x4c], eax
xor eax, eax
mov al, byte [esi + 0x30]
mov dword [ebp - 0x44], ecx
movsx ecx, word [esi + 0x1a]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], ecx
movsx eax, word [esi + 0x1c]
movsx ecx, word [esi + 0x1e]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ecx
movsx eax, word [esi + 0x20]
movsx ecx, word [esi + 0x22]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], ecx
movsx eax, word [esi + 0x24]
mov ecx, dword [esi + 0x26]
mov dword [ebp - 0x28], eax
movsx eax, word [esi + 0x2a]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], ecx
movsx eax, word [esi + 0x2e]
movsx ecx, word [esi + 0x2c]
mov dword [ebp - 0x18], eax
xor eax, eax
mov al, byte [esi + 0x33]
mov dword [ebp - 0x1c], ecx
xor ecx, ecx
mov edi, eax
mov cl, byte [esi + 0x32]
and eax, 0x3f
shr edi, 6
shl ecx, 2
or edi, ecx
xor ecx, ecx
mov cl, byte [esi + 0x34]
mov dword [ebp - 0x74], edi
mov edi, ecx
and ecx, 0xf
shr edi, 4
shl eax, 4
or edi, eax
xor eax, eax
mov al, byte [esi + 0x35]
mov dword [ebp - 0x70], edi
mov edi, eax
and eax, 3
shr edi, 2
shl ecx, 6
or edi, ecx
mov dword [ebp - 0x78], edx
shl eax, 8
xor ecx, ecx
mov dword [ebp - 0x64], edi
mov cl, byte [esi + 0x36]
or eax, ecx
push edx
mov dword [ebp - 0x60], eax
xor eax, eax
mov al, byte [esi + 0x37]
mov ecx, eax
and eax, 0xf
shr ecx, 4
mov dword [ebp - 0x6c], ecx
mov ecx, 0x8365d0
mov dword [ebp - 0x68], eax
call fcn.006ca910
mov edx, dword [esi + 2]
mov ecx, dword [ebx + 0xb4]
push edx
call fcn.00526d60
mov edi, eax
test edi, edi
je 0x5c9bf2
mov eax, dword [edi]
push 0
lea ecx, [ebp - 0x84]
push 0
push ecx
push 5
push 0
mov ecx, edi
call dword [eax + 8]
mov ecx, edi
call fcn.0058e440
cmp eax, 0x2d
jle 0x5c9b29
mov ecx, edi
call fcn.0058e440
cmp eax, 0xfa0
jge 0x5c9b29
movsx eax, word [esi + 0x1c]
movsx edx, word [esi + 0x1e]
shl eax, 0x10
or eax, edx
jbe 0x5c9b29
movsx ecx, word [esi + 0x1a]
mov edx, dword [edi]
push ecx
push eax
mov ecx, edi
call dword [edx + 0x98]
cmp dword [ebp - 0x58], 0x64
jne 0x5c9b6c
mov edx, dword [0x837b68]
mov eax, dword [esi + 2]
cmp edx, eax
mov eax, dword [ebp - 0x50]
jne 0x5c9b44
mov dword [0x837b90], eax
test eax, eax
je 0x5c9b6c
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x9c]
test eax, eax
jne 0x5c9b6c
mov ecx, dword [ebp - 0x50]
push ecx
mov ecx, 0x8365d0
call fcn.006f0a60
push eax
mov ecx, edi
call fcn.0058b480
mov ecx, 0x8365d0
call fcn.006f1a40
test eax, eax
je 0x5c9e35
cmp dword [ebp - 0x58], 0x64
je 0x5c9e35
mov eax, dword [edi + 0x134]
test eax, eax
jne 0x5c9e35
mov ecx, edi
call fcn.0058e440
push eax
mov ecx, 0x8365d0
call fcn.006f1a30
test eax, eax
jne 0x5c9bdc
mov ecx, edi
call fcn.0058e440
push eax
mov ecx, 0x8365d0
call fcn.006f1b00
test eax, eax
je 0x5c9e35
movsx edx, word [esi + 0x2a]
mov eax, dword [esi + 0x26]
push edx
push eax
push edi
mov ecx, ebx
call fcn.005b2940
jmp 0x5c9e35
movsx ecx, word [esi + 0x2a]
mov edx, dword [esi + 0x26]
push ecx
push edx
push edi
mov ecx, ebx
call fcn.005b2940
jmp 0x5c9e35
mov ax, word [esi + 0xe]
cmp ax, 0x2d
jl 0x5c9c02
cmp ax, 0xfa0
jl 0x5c9c14
movsx eax, ax
push eax
mov ecx, 0x8365d0
call fcn.006f1bb0
test eax, eax
je 0x5c9c63
mov ecx, dword [esi + 2]
push ecx
mov ecx, 0x8365d0
call fcn.006f4b10
test eax, eax
mov edi, 1
je 0x5c9c31
mov dword [0x839e44], edi
mov edx, dword [esi + 2]
mov ecx, 0x8365d0
push edx
call fcn.006f4b40
test eax, eax
je 0x5c9c49
mov dword [0x839ee8], edi
movsx eax, word [esi + 0xe]
push eax
mov ecx, ebx
call fcn.005ae4b0
mov edi, eax
mov dword [ebp - 0x7c], 0
mov dword [ebp + 8], edi
jmp 0x5c9c95
push 0x3e4
call fcn.0070dddb
add esp, 4
mov dword [ebp + 8], eax
test eax, eax
mov dword [ebp - 4], 0
je 0x5c9c87
mov ecx, eax
call fcn.0061da60
jmp 0x5c9c89
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [ebp + 8], eax
mov edi, eax
test edi, edi
je 0x5c9ccb
cmp dword [ebp - 0x58], 0x64
jne 0x5c9ccb
mov ecx, dword [0x837b68]
mov eax, dword [esi + 2]
cmp ecx, eax
mov eax, dword [ebp - 0x50]
jne 0x5c9cb4
mov dword [0x837b90], eax
test eax, eax
je 0x5c9ccb
push eax
mov ecx, 0x8365d0
call fcn.006f0a60
push eax
mov ecx, edi
call fcn.0058b480
mov edi, dword [ebx + 0xb4]
mov ebx, dword [edi + 0xc]
add edi, 8
push 0xc
mov edx, dword [ebx + 4]
mov dword [ebp - 0x14], edx
call fcn.0070dddb
add esp, 4
mov ecx, ebx
test ebx, ebx
jne 0x5c9cef
mov ecx, eax
mov dword [eax], ecx
mov ecx, dword [ebp - 0x14]
test ecx, ecx
jne 0x5c9cfa
mov ecx, eax
mov dword [eax + 4], ecx
mov dword [ebx + 4], eax
mov ecx, dword [eax + 4]
mov dword [ecx], eax
add eax, 8
test eax, eax
je 0x5c9d11
mov edx, dword [ebp + 8]
mov dword [eax], edx
mov edx, dword [edi + 8]
mov eax, dword [ebp - 0x10]
inc edx
push 0xc
mov dword [edi + 8], edx
mov edi, dword [eax + 0xb4]
add edi, 0x14
mov ebx, dword [edi + 4]
mov ecx, dword [ebx + 4]
mov dword [ebp - 0x14], ecx
call fcn.0070dddb
add esp, 4
mov ecx, ebx
test ebx, ebx
jne 0x5c9d3f
mov ecx, eax
mov dword [eax], ecx
mov ecx, dword [ebp - 0x14]
test ecx, ecx
jne 0x5c9d4a
mov ecx, eax
mov dword [eax + 4], ecx
mov dword [ebx + 4], eax
mov edx, dword [eax + 4]
mov ebx, dword [ebp + 8]
mov dword [edx], eax
add eax, 8
test eax, eax
je 0x5c9d61
mov dword [eax], ebx
mov edx, dword [edi + 8]
push 0
inc edx
lea ecx, [ebp - 0x84]
push 0
mov dword [edi + 8], edx
mov eax, dword [ebx]
push ecx
push 6
push 0
mov ecx, ebx
call dword [eax + 8]
mov ecx, ebx
call fcn.0058e440
cmp eax, 0x2d
jle 0x5c9dcb
mov ecx, ebx
call fcn.0058e440
cmp eax, 0xfa0
jge 0x5c9dcb
movsx edi, word [esi + 0x1c]
movsx edx, word [esi + 0x1e]
movsx eax, word [esi + 0x1a]
shl edi, 0x10
or edi, edx
mov dword [ebp + 8], eax
jbe 0x5c9dcb
mov edx, dword [ebx]
mov ecx, ebx
call dword [edx + 0x9c]
test eax, eax
jne 0x5c9dcb
mov ecx, dword [ebp + 8]
mov eax, dword [ebx]
push ecx
push edi
mov ecx, ebx
call dword [eax + 0x98]
mov ecx, 0x8365d0
call fcn.006f1a40
test eax, eax
je 0x5c9e32
cmp dword [ebp - 0x58], 0x64
je 0x5c9e32
mov eax, dword [ebx + 0x134]
test eax, eax
jne 0x5c9e32
mov ecx, ebx
call fcn.0058e440
push eax
mov ecx, 0x8365d0
call fcn.006f1a30
test eax, eax
jne 0x5c9e20
mov ecx, ebx
call fcn.0058e440
push eax
mov ecx, 0x8365d0
call fcn.006f1b00
test eax, eax
je 0x5c9e32
movsx edx, word [esi + 0x2a]
mov eax, dword [esi + 0x26]
push edx
push eax
jmp 0x5c9e29
movsx ecx, word [esi + 0x2a]
mov edx, dword [esi + 0x26]
push ecx
push edx
mov ecx, dword [ebp - 0x10]
push ebx
call fcn.005b2940
mov ebx, dword [ebp - 0x10]
movsx eax, word [esi + 0x2e]
movsx ecx, word [esi + 0x3a]
movsx edx, word [esi + 0xc]
push eax
mov eax, dword [esi + 2]
push ecx
push edx
push eax
mov ecx, ebx
call fcn.0060a5e0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4