Function at 0x5b2000
Capabilities:
Get number of processors
Terminate process

Disassembly:
jmp 0x5b2003
mov eax, dword [0x5b5048]
and eax, 0x20
test eax, eax
jne 0x5b20a3
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x5b59f0], eax
mov dword [0x5b59f8], eax
mov dword [0x5b59fc], edx
mov eax, dword fs:[0x30]
test eax, eax
js 0x5b2081
push 0x5b59f4
push 4
push 0xf8
mov ecx, dword [0x5b59f0]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x5b207f
mov eax, dword [0x5b59f8]
add dword [eax + 0x50], 0x2000
jmp 0x5b20a2
jmp 0x5b20a2
mov edx, dword [0x5b59fc]
test edx, edx
jns 0x5b20a2
mov edx, dword [edx + 4]
mov dword [0x5b59ec], edx
add dword [edx + 0x50], 0x2000
xor dword [edx + 0x11], 0x424f4420
nop
call fcn.005b4660
cmp dword [0x5b5594], 0
jne 0x5b2157
mov ecx, dword [0x5b507c]
mov dword [0x5b5a20], ecx
push 0x1e
push 0x5b5168
call fcn.005b44a6
add esp, 8
push 0x64
push 0x5b5188
call fcn.005b44a6
add esp, 8
push 0x64
push 0x5b51f0
call fcn.005b44a6
add esp, 8
push 0x64
push 0x5b5258
call fcn.005b44a6
add esp, 8
push 0x64
push 0x5b52c0
call fcn.005b44a6
add esp, 8
push 0x64
push 0x5b5328
call fcn.005b44a6
add esp, 8
push 0x64
push 0x5b5390
call fcn.005b44a6
add esp, 8
push 0x64
push 0x5b53f8
call fcn.005b44a6
add esp, 8
push 0x64
push 0x5b5460
call fcn.005b44a6
add esp, 8
push 0x64
push 0x5b54c8
call fcn.005b44a6
add esp, 8
call fcn.005b4318
mov edx, dword [0x5b5048]
and edx, 0x20
test edx, edx
je 0x5b21a1
push ebp
mov ebp, esp
mov eax, dword [ebp + 0xc]
mov dword [0x5b558c], eax
pop ebp
cmp dword [0x5b558c], 1
je 0x5b2190
cmp dword [0x5b558c], 2
je 0x5b2190
mov dword [ebp - 4], 0
jmp 0x5b2197
mov dword [ebp - 4], 1
mov eax, dword [ebp - 4]
mov dword [0x5b5590], eax
jmp 0x5b21ab
mov dword [0x5b5590], 1
mov dword [0x5b5598], 0
mov ecx, entry0
sub ecx, dword [0x5b5018]
mov dword [0x5b5534], ecx
mov edx, dword [0x5b5034]
add edx, dword [0x5b5534]
mov dword [0x5b553c], edx
mov eax, dword [0x5b5044]
add eax, dword [0x5b5534]
mov dword [0x5b5540], eax
cmp dword [0x5b5590], 0
je 0x5b23cc
cmp dword [0x5b5594], 0
jne 0x5b23cc
mov dword [0x5b5594], 1
mov dword [0x5b5598], 1
call fcn.005b41d2
test eax, eax
je 0x5b23cc
call fcn.005b38a3
test eax, eax
je 0x5b23cc
mov ecx, dword [0x5b5070]
xor ecx, dword [0x5b5068]
mov dword [0x5b5070], ecx
mov edx, dword [0x5b5074]
xor edx, dword [0x5b5060]
mov dword [0x5b5074], edx
call fcn.005b3b1b
test eax, eax
je 0x5b23ba
call fcn.005b2da5
push 0x5b5a28
call fcn.005b2e82
add esp, 4
call fcn.005b3b26
mov dword [0x5b5538], eax
cmp dword [0x5b5538], 0
je 0x5b238d
call fcn.005b3c1e
test eax, eax
je 0x5b238d
mov eax, dword [0x5b5048]
and eax, 0x20
test eax, eax
je 0x5b22b2
push 0x5b5a3c
call fcn.005b2e82
add esp, 4
jmp 0x5b22bf
push 0x5b5a4c
call fcn.005b2e82
add esp, 4
call fcn.005b35e5
test eax, eax
je 0x5b2386
mov ecx, dword [0x5b5070]
xor ecx, dword [0x5b5068]
mov dword [0x5b5070], ecx
mov edx, dword [0x5b5074]
xor edx, dword [0x5b5060]
mov dword [0x5b5074], edx
call fcn.005b37b2
mov dword [0x5b59e4], eax
cmp dword [0x5b59e4], 0
je 0x5b2372
mov eax, dword [0x5b5014]
add eax, dword [0x5b5534]
push eax
call fcn.005b2af9
add esp, 4
test eax, eax
je 0x5b2372
mov ecx, dword [0x5b5010]
add ecx, dword [0x5b5534]
push ecx
call fcn.005b2578
add esp, 4
test eax, eax
je 0x5b2372
call fcn.005b29ae
test eax, eax
je 0x5b2372
call fcn.005b2bfc
test eax, eax
je 0x5b2372
mov dword [0x5b5598], 0
mov edx, dword [0x5b5070]
xor edx, dword [0x5b59e4]
mov dword [0x5b5070], edx
mov eax, dword [0x5b5074]
xor eax, dword [0x5b5060]
mov dword [0x5b5074], eax
push 0x8000
push 0
mov ecx, dword [0x5b5584]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualFree]
call fcn.005b3218
jmp 0x5b23b8
call fcn.005b3218
push 0x64
push 0x5b5368
push 0x5b5188
call fcn.005b3ab4
add esp, 0xc
push 0x5b5168
push 0x5b5368
call fcn.005b32a4
add esp, 8
jmp 0x5b23cc
push 0x5b5168
push 0x5b5258
call fcn.005b32a4
add esp, 8
cmp dword [0x5b59dc], 0
je 0x5b23f3
push 0x10
push 0x5b5168
push 0x5b5a60
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [0x5b5598], 1
cmp dword [0x5b5598], 0
je 0x5b2419
mov edx, dword [0x5b5048]
and edx, 0x20
test edx, edx
je 0x5b2411
mov eax, 0
ret
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [0x5b59d8], 1
mov eax, dword [0x5b5538]
and eax, 0x8000
test eax, eax
je 0x5b2445
mov ecx, dword [0x5b5050]
imul ecx, ecx, 0xea60
mov dword [0x5b59e8], ecx
jmp 0x5b2457
mov edx, dword [0x5b5054]
imul edx, edx, 0x3e8
mov dword [0x5b59e8], edx
mov eax, dword [0x5b59e8]
xor edx, edx
mov ecx, 0x3e8
div ecx
mov dword [0x5b55b0], eax
push 0x5b55a0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, dword [0x5b5008]
add edx, dword [0x5b5534]
mov dword [0x5b5530], edx
mov eax, dword [0x5b5068]
cmp eax, dword [0x5b59e4]
je 0x5b24a0
mov ecx, dword [0x5b59e4]
mov dword [0x5b5068], ecx
mov edx, dword [0x5b5048]
and edx, 0x20
test edx, edx
jne 0x5b24c8
cld
push edi
push ecx
mov edi, 0x5b2003
mov ecx, 0x5b24a0
sub ecx, edi
shr ecx, 2
mov ax, 0xeb00
rep stosw word es:[edi], ax
pop ecx
pop edi
jmp dword [0x5b5530]