Function at 0x100a9330
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Get ntdll base address
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101d7c31
mov eax, dword fs:[0]
push eax
push ecx
mov eax, dword [0x1020a06c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x10]
add ecx, 0x3c
call fcn.10008be0
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x10]
add ecx, 0x48
call fcn.10008be0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x10]
add ecx, 0x54
call fcn.10008be0
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x10]
add ecx, 0x64
call fcn.10079b70
mov ecx, dword [ebp - 0x10]
add ecx, 0x3c
call fcn.100089d0
mov ecx, dword [ebp - 0x10]
add ecx, 0x48
call fcn.100089d0
mov ecx, dword [ebp - 0x10]
add ecx, 0x54
call fcn.100089d0
mov eax, dword [ebp - 0x10]
mov byte [eax], 0
mov ecx, dword [ebp - 0x10]
mov byte [ecx + 1], 0
mov edx, dword [ebp - 0x10]
mov byte [edx + 2], 0
mov eax, dword [ebp - 0x10]
mov byte [eax + 3], 0
xor ecx, ecx
mov edx, dword [ebp - 0x10]
mov word [edx + 4], cx
mov eax, dword [ebp - 0x10]
mov byte [eax + 6], 0
mov ecx, dword [ebp - 0x10]
mov byte [ecx + 7], 1
mov edx, dword [ebp - 0x10]
mov byte [edx + 0xa], 0
mov eax, dword [ebp - 0x10]
mov byte [eax + 8], 0
mov ecx, dword [ebp - 0x10]
mov byte [ecx + 9], 0
mov edx, dword [ebp - 0x10]
mov byte [edx + 0xb], 0
mov eax, dword [ebp - 0x10]
mov byte [eax + 0xc], 0
mov ecx, dword [ebp - 0x10]
mov byte [ecx + 0xd], 0
mov edx, dword [ebp - 0x10]
mov byte [edx + 0xe], 0
mov eax, dword [ebp - 0x10]
mov byte [eax + 0xf], 0
mov ecx, dword [ebp - 0x10]
mov byte [ecx + 0x10], 0
mov edx, dword [ebp - 0x10]
mov byte [edx + 0x11], 0
mov eax, dword [ebp - 0x10]
mov byte [eax + 0x12], 1
mov ecx, dword [ebp - 0x10]
mov byte [ecx + 0x13], 0
mov edx, dword [ebp - 0x10]
mov byte [edx + 0x14], 0
mov eax, dword [ebp - 0x10]
mov byte [eax + 0x15], 0
mov ecx, dword [ebp - 0x10]
mov byte [ecx + 0x18], 0
xor edx, edx
mov eax, dword [ebp - 0x10]
mov word [eax + 0x1a], dx
mov ecx, dword [ebp - 0x10]
mov byte [ecx + 0x19], 0
xor edx, edx
mov eax, dword [ebp - 0x10]
mov word [eax + 0x1c], dx
xor ecx, ecx
mov edx, dword [ebp - 0x10]
mov word [edx + 0x1e], cx
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov word [ecx + 0x20], ax
xor edx, edx
mov eax, dword [ebp - 0x10]
mov word [eax + 0x22], dx
xor ecx, ecx
mov edx, dword [ebp - 0x10]
mov word [edx + 0x24], cx
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov word [ecx + 0x26], ax
xor edx, edx
mov eax, dword [ebp - 0x10]
mov word [eax + 0x28], dx
xor ecx, ecx
mov edx, dword [ebp - 0x10]
mov word [edx + 0x2a], cx
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov word [ecx + 0x2c], ax
xor edx, edx
mov eax, dword [ebp - 0x10]
mov word [eax + 0x2e], dx
xor ecx, ecx
mov edx, dword [ebp - 0x10]
mov word [edx + 0x30], cx
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov word [ecx + 0x16], ax
xor edx, edx
mov eax, dword [ebp - 0x10]
mov word [eax + 0x32], dx
xor ecx, ecx
mov edx, dword [ebp - 0x10]
mov word [edx + 0x34], cx
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov word [ecx + 0x36], ax
xor edx, edx
mov eax, dword [ebp - 0x10]
mov word [eax + 0x38], dx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret