Function at 0x5aea40
Capabilities:
Access peb ldr_data
Get ntdll base address
Get number of processors
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x3c
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x14], 0x5b35b0
mov edi, ecx
lea ebx, [ecx + 0x1c]
mov eax, dword fs:[0]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov dword fs:[0], eax
mov al, byte [ebp + 8]
mov dword [ecx], vtable.BrokerMAPIObject.0
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0xc], 0
mov byte [ecx + 0x14], al
mov eax, dword [ebp + 0xc]
mov dword [ecx + 0x18], eax
mov dword [ecx + 0x30], 7
mov dword [ecx + 0x2c], 0
mov word [ecx + 0x1c], 0
push dword [ebp + 0x10]
call fcn.005d3244
add esp, 4
mov esi, eax
cmp eax, 7
jbe 0x5aeae2
sub esp, 0xc
mov al, byte [ebp - 0x20]
mov ecx, ebx
mov byte [esp + 4], al
mov eax, dword [ebp + 0x10]
mov dword [esp], esi
mov dword [esp + 8], eax
call fcn.00405590
jmp 0x5aeafd
mov eax, esi
mov dword [edi + 0x2c], esi
add eax, esi
push eax
push dword [ebp + 0x10]
push ebx
call fcn.0061e340
add esp, 0xc
mov word [edi + esi*2 + 0x1c], 0
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x48], ebx
lea ebx, [edi + 0x34]
mov dword [edi + 0x48], 7
mov dword [edi + 0x44], 0
mov word [edi + 0x34], 0
push eax
call fcn.005d3244
add esp, 4
mov esi, eax
cmp eax, 7
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x24], edi
jbe 0x5aeb54
mov dword [ebp - 0x10], 0
sub esp, 0xc
mov al, byte [ebp - 0x20]
mov ecx, ebx
mov byte [esp + 4], al
mov eax, dword [ebp + 0x14]
mov dword [esp], esi
mov dword [esp + 8], eax
call fcn.00405590
jmp 0x5aeb6f
mov eax, esi
mov dword [edi + 0x44], esi
add eax, esi
push eax
push dword [ebp + 0x14]
push ebx
call fcn.0061e340
add esp, 0xc
mov word [edi + esi*2 + 0x34], 0
mov ebx, dword [ebp - 0x24]
lea edi, [ebx + 0x4c]
mov dword [ebx + 0x60], 7
mov dword [ebx + 0x5c], 0
mov word [ebx + 0x4c], 0
push dword [ebp + 0x18]
call fcn.005d3244
add esp, 4
mov esi, eax
cmp eax, 7
mov dword [ebp - 0x40], edi
jbe 0x5aebc2
mov dword [ebp - 0x10], 1
sub esp, 0xc
mov al, byte [ebp - 0x20]
mov ecx, edi
mov byte [esp + 4], al
mov eax, dword [ebp + 0x18]
mov dword [esp], esi
mov dword [esp + 8], eax
call fcn.00405590
jmp 0x5aebdd
mov eax, esi
mov dword [ebx + 0x5c], esi
add eax, esi
push eax
push dword [ebp + 0x18]
push edi
call fcn.0061e340
add esp, 0xc
mov word [ebx + esi*2 + 0x4c], 0
mov ebx, dword [ebp - 0x24]
lea edi, [ebx + 0x64]
mov dword [ebx + 0x78], 0xf
mov dword [ebx + 0x74], 0
mov byte [ebx + 0x64], 0
push dword [ebp + 0x1c]
call fcn.006289d0
add esp, 4
mov esi, eax
cmp eax, 0xf
mov dword [ebp - 0x3c], edi
jbe 0x5aec2e
mov dword [ebp - 0x10], 2
sub esp, 0xc
mov al, byte [ebp - 0x20]
mov ecx, edi
mov byte [esp + 4], al
mov eax, dword [ebp + 0x1c]
mov dword [esp], esi
mov dword [esp + 8], eax
call fcn.004242a0
jmp 0x5aec43
mov dword [ebx + 0x74], esi
push esi
push dword [ebp + 0x1c]
push edi
call fcn.0061e340
add esp, 0xc
mov byte [ebx + esi + 0x64], 0
mov ebx, dword [ebp - 0x24]
lea edi, [ebx + 0x7c]
mov dword [ebx + 0x90], 0xf
mov dword [ebx + 0x8c], 0
mov byte [ebx + 0x7c], 0
push dword [ebp + 0x20]
call fcn.006289d0
add esp, 4
mov esi, eax
cmp eax, 0xf
mov dword [ebp - 0x38], edi
jbe 0x5aec9a
mov dword [ebp - 0x10], 3
sub esp, 0xc
mov al, byte [ebp - 0x20]
mov ecx, edi
mov byte [esp + 4], al
mov eax, dword [ebp + 0x20]
mov dword [esp], esi
mov dword [esp + 8], eax
call fcn.004242a0
jmp 0x5aecb2
mov dword [ebx + 0x8c], esi
push esi
push dword [ebp + 0x20]
push edi
call fcn.0061e340
add esp, 0xc
mov byte [ebx + esi + 0x7c], 0
mov ebx, dword [ebp - 0x24]
lea edi, [ebx + 0x94]
mov dword [ebx + 0xa8], 0xf
mov dword [ebx + 0xa4], 0
mov byte [ebx + 0x94], 0
push dword [ebp + 0x24]
call fcn.006289d0
add esp, 4
mov esi, eax
cmp eax, 0xf
mov dword [ebp - 0x34], edi
jbe 0x5aed0f
mov dword [ebp - 0x10], 4
sub esp, 0xc
mov al, byte [ebp - 0x20]
mov ecx, edi
mov byte [esp + 4], al
mov eax, dword [ebp + 0x24]
mov dword [esp], esi
mov dword [esp + 8], eax
call fcn.004242a0
jmp 0x5aed31
mov dword [ebx + 0xa4], esi
push esi
push dword [ebp + 0x24]
push edi
call fcn.0061e340
add esp, 0xc
mov byte [ebx + esi + 0x94], 0
mov dword [ebp - 0x10], 5
mov eax, dword [ebp + 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ecx + 0xac], 0
mov dword [ecx + 0xb0], 0
mov dword [ecx + 0xb4], eax
mov dword [ecx + 0xbc], 0
mov dword [ecx + 0xb8], 0
mov dword [ecx + 0xc4], 0
mov dword [ecx + 0xc0], 0
mov dword [ecx + 0xcc], 0
mov dword [ecx + 0xc8], 0
mov dword [ecx + 0xd4], 0
mov dword [ecx + 0xd0], 0
mov dword [ecx + 0xdc], 0
mov dword [ecx + 0xd8], 0
mov dword [ecx + 0xe0], 0
mov dword [ebp - 0x10], 5
push 0x68d734
call fcn.00436bb0
add esp, 4
mov edx, dword [ebp - 0x24]
test eax, eax
lea ecx, [edx + 0xb8]
mov dword [edx + 0xe0], eax
je 0x5aef21
mov dword [ebp - 0x2c], ecx
push 8
mov dword [ebp - 0x28], eax
call fcn.005d0220
mov ecx, dword [ebp - 0x28]
add esp, 4
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], 6
push str.MAPIFreeBuffer
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x28], eax
push str.MAPIAllocateBuffer
mov eax, dword [ebp - 0x24]
push dword [eax + 0xe0]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x30]
mov dword [ecx], eax
mov eax, dword [ebp - 0x28]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x24]
mov dword [eax + 0xac], ecx
mov eax, dword [eax + 0xe0]
mov dword [ebp - 0x10], 5
push str.MAPIInitialize
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x24]
mov dword [ecx + 4], eax
push str.MAPIUninitialize
push dword [ecx + 0xe0]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x24]
mov dword [ecx + 8], eax
push str.MAPILogonEx
push dword [ecx + 0xe0]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x24]
mov dword [ecx + 0xc], eax
push str.HrQueryAllRows
push dword [ecx + 0xe0]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x24]
mov dword [edx + 0x10], eax
mov ecx, dword [edx + 4]
test ecx, ecx
je 0x5aef16
cmp dword [edx + 8], 0
je 0x5aef16
mov dword [ebp - 0x10], 0xffffffff
call dword [0x64689c]
mov dword [ebp - 0x10], 5
push 0
call ecx
mov edx, dword [ebp - 0x24]
test eax, eax
js 0x5aef27
mov dword [edx + 0xb8], 1
mov ecx, dword [edx + 0xc]
test ecx, ecx
je 0x5aef27
lea esi, [edx + 0xbc]
mov dword [ebp - 0x10], 0xffffffff
call dword [0x64689c]
mov dword [ebp - 0x10], 5
push esi
push 0x63
push 0
push 0
push 0
call ecx
mov edx, dword [ebp - 0x24]
test eax, eax
js 0x5aef27
mov eax, dword [ebp - 0x2c]
mov dword [eax], 2
jmp 0x5aef27
mov eax, dword [ebp - 0x2c]
mov dword [eax], 3
jmp 0x5aef27
mov dword [ecx], 3
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
mov eax, edx
add esp, 0x3c
pop esi
pop edi
pop ebx
pop ebp
ret 0x24