Function at 0x4231b4
Capabilities:
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43445b
mov eax, dword fs:[0]
push eax
sub esp, 0x334
mov eax, dword [0x462074]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x25c], edx
mov esi, ecx
cmp byte [edx + 0x16], 0xa
lea eax, [edx + 0x18]
mov edi, dword [edx + 0x2c]
mov ecx, dword [edx + 0x14]
mov ebx, dword [edx + 8]
mov dword [ebp - 0x24c], eax
lea eax, [edx + 0x20]
mov dword [ebp - 0x23c], eax
mov eax, dword [edx + 0x28]
mov dword [ebp - 0x248], eax
mov ax, word [edx + 0x30]
mov word [ebp - 0x254], ax
mov eax, dword [edx + 0x38]
mov dword [ebp - 0x250], eax
mov eax, dword [edx + 0x3c]
mov dword [ebp - 0x264], eax
mov ax, word [edx + 0x40]
mov word [ebp - 0x244], ax
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x258], edi
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], ecx
jne 0x42334b
mov al, byte [0x46405c]
nop
test al, al
je 0x42326e
mov ecx, dword [0x464180]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
jmp 0x423273
mov ecx, 0x464160
mov al, byte [ecx]
mov byte [ebp - 0xd4], al
lea eax, [ecx + 4]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0040e126
mov ecx, dword [0x464188]
test ecx, ecx
je 0x42333a
push 1
push ebx
call fcn.00425e7c
test al, al
jne 0x42333a
lea eax, [ebp - 0x104]
mov ecx, ebx
push eax
call fcn.0042233d
push eax
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x70], 0x43b33c
mov dword [ebp - 0x6c], 0x43b4ec
call fcn.004141a0
xor eax, eax
mov ecx, 0x2752091
mov word [ebp - 0x50], ax
lea eax, [ebp - 0x70]
push eax
push str.Event_is_marked_as_Basic_but_doesnt_appear_in_the_Basic_Event_Allow_List
push 0xf
call fcn.0041bc8f
lea ecx, [ebp - 0x68]
call fcn.00412cea
lea ecx, [ebp - 0x104]
call fcn.00412cea
cmp byte [ebp - 0xd4], 0
je 0x42333a
lea ecx, [ebp - 0x270]
call fcn.0041feb1
lea eax, [ebp - 0x238]
mov byte [ebp - 0x26a], 0x64
push eax
lea eax, [ebp - 0x288]
push eax
call fcn.0041fefa
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x238], ecx
mov dword [ebp - 0x234], eax
lea ecx, [ebp - 0xd0]
call fcn.0040a89a
mov edi, dword [ebp - 0x258]
mov ecx, dword [0x46418c]
test ecx, ecx
je 0x423380
mov eax, dword [ecx]
call dword [eax + 0x10]
test al, al
je 0x423380
mov ecx, dword [0x46418c]
lea edx, [ebp - 0x238]
push edx
push ebx
lea edx, [ebp - 0x280]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov al, byte [ebp - 0x278]
jmp 0x423388
xor al, al
mov byte [ebp - 0x278], al
test al, al
je 0x42339a
mov eax, dword [ebp - 0x280]
mov ecx, dword [ebp - 0x27c]
jmp 0x4233a6
mov eax, dword [ebp - 0x238]
mov ecx, dword [ebp - 0x234]
mov dword [ebp - 0x234], ecx
mov ecx, 0x464048
push ebx
mov dword [ebp - 0x238], eax
call fcn.00422645
test al, al
je 0x4233d4
push ebx
mov ecx, 0x464048
call fcn.004226f5
movzx edi, ax
jmp 0x423482
mov edx, dword [ebp - 0x24c]
lea eax, [ebp - 0x238]
push edi
push dword [ebp - 0x248]
mov ecx, ebx
push eax
call fcn.0042609e
movzx edi, ax
test di, di
jne 0x42340e
push ebx
mov ecx, 0x464060
call fcn.00426576
movzx edi, ax
test di, di
je 0x423620
push edi
push ebx
mov ecx, 0x464048
call fcn.004223cb
cmp di, 7
jne 0x423482
lea eax, [ebp - 0x11c]
mov ecx, ebx
push eax
call fcn.0042233d
push eax
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x94], 0x43b33c
mov dword [ebp - 0x90], 0x43b4ec
call fcn.004141a0
xor eax, eax
mov ecx, 0x3050357
mov word [ebp - 0x74], ax
lea eax, [ebp - 0x94]
push eax
push str.Event_validation_error:_event_volume_too_high
push 0xa
call fcn.0041bc8f
lea ecx, [ebp - 0x8c]
call fcn.00412cea
lea ecx, [ebp - 0x11c]
call fcn.00412cea
test di, di
je 0x423620
cmp byte [ebp - 0x238], 3
jne 0x42356b
push ecx
lea ecx, [ebp - 0x340]
call fcn.004155f2
push edi
lea ecx, [ebp - 0x340]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_short_int_]
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0x33c]
call fcn.00413e12
lea eax, [ebp - 0xec]
mov dword [ebp - 0x30], str.Error
mov edi, 0x43b33c
lea ecx, [ebp - 0x2c]
push eax
mov dword [ebp - 0x34], edi
call fcn.004141a0
xor eax, eax
mov ecx, ebx
mov word [ebp - 0x14], ax
lea eax, [ebp - 0x4c]
push eax
call fcn.0042233d
push eax
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0xb8], edi
mov dword [ebp - 0xb4], 0x43b4ec
call fcn.004141a0
xor eax, eax
mov word [ebp - 0x98], ax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0xb8]
push eax
push ecx
push ecx
call fcn.00423766
lea ecx, [ebp - 0xb0]
call fcn.00412cea
lea ecx, [ebp - 0x4c]
call fcn.00412cea
lea ecx, [ebp - 0x2c]
call fcn.00412cea
lea ecx, [ebp - 0xec]
call fcn.00412cea
lea ecx, [ebp - 0x2f0]
call fcn.004155c2
lea ecx, [ebp - 0x2f0]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
jmp 0x423620
movzx eax, di
sub eax, 1
je 0x4235b1
sub eax, 1
je 0x4235aa
sub eax, 5
je 0x4235a2
sub eax, 1
je 0x4235a2
dec eax
sub eax, 1
je 0x4235a2
sub eax, 1
je 0x423598
sub eax, 1
jne 0x423754
jmp 0x4235a2
mov ecx, 0x218d2486
call fcn.0040ef77
and dword [esi], 0
jmp 0x423738
mov ecx, 0x218d2487
jmp 0x42359d
lea eax, [ebp - 0x4c]
mov ecx, ebx
push eax
call fcn.0042233d
push eax
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x34], 0x43b33c
mov dword [ebp - 0x30], 0x43b4ec
call fcn.004141a0
xor eax, eax
mov ecx, 0x24d7654
mov word [ebp - 0x14], ax
lea eax, [ebp - 0x34]
push eax
push str.Event_validation_error:_invalid_name
push 0xa
call fcn.0041bc8f
lea ecx, [ebp - 0x2c]
call fcn.00412cea
lea ecx, [ebp - 0x4c]
call fcn.00412cea
mov ecx, 0x218d2488
call fcn.0040ef77
mov eax, dword [ebx + 4]
cmp byte [eax + 0x10], 0
je 0x42361a
cmp dword [eax + 0xc], 0xfffffffe
sete al
jmp 0x42361c
xor al, al
test al, al
je 0x4235a2
push dword [ebp - 0x23c]
lea ecx, [ebp - 0x240]
call fcn.0041f311
mov eax, dword [ebp - 0x25c]
mov edx, dword [ebp - 0x238]
mov ecx, dword [ebp - 0x234]
cmp edx, dword [eax + 0x10]
jne 0x423655
cmp ecx, dword [eax + 0x14]
jne 0x423655
mov edi, dword [ebp - 0x23c]
jmp 0x4236c2
push ecx
push edx
lea ecx, [ebp - 0x230]
call fcn.00423064
mov edx, ecx
mov ecx, dword [ebp - 0x240]
call fcn.00422f94
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x230]
call fcn.00421343
mov ecx, dword [eax]
mov edi, dword [eax + 4]
and dword [eax], 0
and dword [eax + 4], 0
mov dword [ebp - 0x240], ecx
mov ecx, dword [ebp - 0x23c]
mov dword [ebp - 0x23c], edi
test ecx, ecx
je 0x4236a8
call fcn.0041ad1b
mov ecx, dword [ebp - 0x25c]
test ecx, ecx
je 0x4236b7
call fcn.0041ad1b
lea ecx, [ebp - 0x230]
call fcn.004230ef
push 0x40
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
pop ecx
test eax, eax
je 0x423760
lea ecx, [ebp - 0x244]
mov byte [ebp - 0x28c], 0
push ecx
push dword [ebp - 0x264]
push dword [ebp - 0x250]
push ecx
lea ecx, [ebp - 0x258]
push ecx
push dword [ebp - 0x248]
lea ecx, [ebp - 0x238]
push ecx
push dword [ebp - 0x24c]
lea ecx, [ebp - 0x240]
push ecx
push ebx
mov ecx, eax
call fcn.0042314c
cmp byte [ebp - 0x28c], 0
mov dword [esi], eax
je 0x42372d
lea ecx, [ebp - 0x2a4]
call fcn.00412cea
test edi, edi
je 0x423738
mov ecx, edi
call fcn.0041ad1b
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0043182e
leave
ret
push 0
push 0x14a118c
call fcn.0040ecbf
call fcn.0041267d
int3