Function at 0x1c9d27d
Capabilities:
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
add esp, 4
add ebx, 0xf226
jmp 0x1c9ac40
pop ebx
push ebx
sub ebx, 0x891f
jmp 0x1c9ac51
or ebx, 0x16566
add ebx, 0x5503
pop ebx
mov edx, dword [ebp - 0x38]
add edx, 0xfe
imul eax, dword [ebp - 0x34], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0x34], 0xfe
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x34]
mov dword [ebp - 0x23c8], edx
push esi
push esi
add esp, 4
jmp 0x1c9ac95
add esi, 0x17168
add esi, 0xd6a1
sub esi, 0xe72b
pop esi
push ecx
push edi
add esp, 4
and ecx, 0x16499
add ecx, 0xb6d1
pop ecx
mov edx, dword [ebp - 0x23c8]
add edx, 1
mov dword [ebp - 0x18b4], edx
push edx
push edx
add esp, 4
or edx, 0xcccc
add edx, 0x45fa
and edx, 0x155ea
pop edx
push edi
push edx
add esp, 4
or edi, 0x615
pop edi
push ebx
push ecx
add esp, 4
jmp 0x1c9acfa
pop ebx
push ecx
add ecx, 0x18236
and ecx, 0x3a2c
pop ecx
push edi
add edi, 0x1592a
call fcn.01c9ad1d
add byte [esi], bh
cmp byte [ebx], dh
xor eax, dword [ebp + esi + 0x40]
add esp, 4
pop esi
push edx
push esi
add esp, 4
xor edx, 0xf8f0
sub edx, 0x4373
sub edx, 0x17f3b
pop edx
mov eax, dword [ebp - 0xc14]
mov ecx, dword [eax]
add ecx, 0xfe
mov edx, dword [ebp - 0xc14]
imul eax, dword [edx + 4], 0xfe
add eax, 0x56f3663b
mov edx, dword [ebp - 0xc14]
imul edx, dword [edx + 4], 0xfe
sub eax, edx
xor ecx, eax
mov eax, dword [ebp - 0xc14]
imul ecx, dword [eax + 4]
mov dword [ebp - 0x25bc], ecx
mov ecx, dword [ebp - 0x25bc]
mov dword [ebp - 0x25c4], ecx
mov edx, dword [ebp - 0x25c0]
add edx, dword [ebp - 0x25c4]
mov dword [ebp - 0x25c8], edx
mov dword [ebp - 0x1318], 1
push ecx
push esi
add esp, 4
add ecx, 0xaa7e
xor ecx, 0xad04
pop ecx
push ecx
push esi
add esp, 4
sub ecx, 0x10812
sub ecx, 0x167d8
and ecx, 0x279f
pop ecx
push esi
xor esi, 0x147d2
pop esi
imul eax, dword [ebp - 0x1318], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0x1318], 0xfe
sub eax, ecx
xor eax, dword [ebp - 0x25c8]
imul eax, dword [ebp - 0x1318]
imul edx, dword [ebp - 0x1318], 0xfe
sub eax, edx
mov dword [ebp - 0x131c], eax
mov eax, dword [ebp - 0x131c]
mov ecx, dword [ebp - 0x1318]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], ecx
push eax
add eax, 0x16106
and eax, 0x38f4
pop eax
push ebx
or ebx, 0xb874
call 0x1c9cdc0
add byte [ebx], bh
inc eax
cmp ecx, dword [edi + 0x42]
dec ebp
add esp, 4
pop ebx
push eax
jmp 0x1c9cdca
add eax, 0x2669
pop eax
mov edx, dword [ebp - 0x38]
add edx, 0xfe
imul eax, dword [ebp - 0x34], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0x34], 0xfe
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x34]
mov dword [ebp - 0x25cc], edx
mov edx, dword [ebp - 0x25cc]
mov dword [ebp - 0x25d0], edx
cmp dword [ebp - 0x25d0], 0xdd8
jne 0x1c9cf4c
push eax
and eax, 0x1195f
xor eax, 0xa002
sub eax, 0x35fe
and eax, 0xd8d0
pop eax
push eax
push edi
add esp, 4
and eax, 0x182fc
add eax, 0x17d39
or eax, 0xfb2c
pop eax
push ebx
and ebx, 0x60f9
and ebx, 0xe1de
or ebx, 0x12e6c
and ebx, 0x144d4
pop ebx
push ebx
push edi
add esp, 4
call 0x1c9ce77
add byte [edx + 0x48], cl
xor al, 0x4a
aaa
aas
cmp eax, 0xc483464a
add al, 0x5b
mov eax, dword [ebp - 0x1c]
add eax, 0xfe
imul ecx, dword [ebp - 0x18], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0x18], 0xfe
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x18]
mov dword [ebp - 0x25d4], eax
mov eax, dword [ebp - 0x25d4]
mov dword [ebp - 0x25d8], eax
mov ecx, dword [ebp - 0x25d8]
sub ecx, 0xbb8
mov dword [ebp - 0x25dc], ecx
mov dword [ebp - 0x1320], 1
push edi
push esi
add esp, 4
sub edi, 0xc904
jmp 0x1c9cedf
pop edi
push ebx
push edx
add esp, 4
call 0x1c9cef1
add byte [edi + 0x50], al
cmp al, 0x3d
dec ecx
cmp al, byte [ebx + 0x575b04c4]
jmp 0x1c9cefe
pop edi
imul edx, dword [ebp - 0x1320], 0xfe
add edx, 0x56f3663b
imul eax, dword [ebp - 0x1320], 0xfe
sub edx, eax
xor edx, dword [ebp - 0x25dc]
imul edx, dword [ebp - 0x1320]
imul ecx, dword [ebp - 0x1320], 0xfe
sub edx, ecx
mov dword [ebp - 0x1324], edx
mov edx, dword [ebp - 0x1324]
mov eax, dword [ebp - 0x1320]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], eax
push eax
push ecx
add esp, 4
sub eax, 0x10d93
sub eax, 0x4e22
jmp 0x1c9cf65
pop eax
push ebx
push eax
add esp, 4
add ebx, 0xee33
pop ebx
push edi
push edi
add esp, 4
sub edi, 0xaea6
pop edi
push eax
push ecx
add esp, 4
sub eax, 0x6296
call 0x1c9cf98
add byte [ebp + 0x45], al
dec edi
cmp eax, 0x4932364b
dec edi
add esp, 4
or eax, 0x12e99
pop eax
push ecx
or ecx, 0xc58d
or ecx, 0xa391
pop ecx
mov ecx, dword [ebp - 0x38]
add ecx, 0xfe
imul edx, dword [ebp - 0x34], 0xfe
add edx, 0x56f3663b
imul eax, dword [ebp - 0x34], 0xfe
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x34]
mov dword [ebp - 0x25e0], ecx
mov ecx, dword [ebp - 0x25e0]
mov dword [ebp - 0x25e4], ecx
cmp dword [ebp - 0x25e4], 0x9e7
jne 0x1c9df8b
push edx
push eax
add esp, 4
sub edx, 0x550b
add edx, 0x13a23
pop edx
push ecx
call 0x1c9d019
add byte [edi], bh
inc esp
xor eax, 0x344c4938
cmp byte [edi], bh
add esp, 4
add ecx, 0x12d79
sub ecx, 0x9a0d
pop ecx
push ecx
push ebx
add esp, 4
jmp 0x1c9d034
pop ecx
push ecx
push edx
add esp, 4
sub ecx, 0x16cff
pop ecx
push ecx
sub ecx, 0x15fe9
pop ecx
push edx
push eax
add esp, 4
sub edx, 0xaf4f
add edx, 0x14760
pop edx
mov edx, dword [ebp - 0x1c]
add edx, 0xfe
imul eax, dword [ebp - 0x18], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0x18], 0xfe
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x18]
mov dword [ebp - 0x25e8], edx
mov edx, dword [ebp - 0x25e8]
mov dword [ebp - 0x25ec], edx
mov eax, dword [ebp - 0x25ec]
sub eax, 0xec
mov dword [ebp - 0x25f0], eax
mov dword [ebp - 0x1328], 1
push ecx
push eax
add esp, 4
xor ecx, 0x487
add ecx, 0x1314f
or ecx, 0x11438
pop ecx
push eax
or eax, 0x936e
pop eax
push ecx
push edi
add esp, 4
jmp 0x1c9d0d7
or ecx, 0x68f9
pop ecx
imul ecx, dword [ebp - 0x1328], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0x1328], 0xfe
sub ecx, edx
xor ecx, dword [ebp - 0x25f0]
imul ecx, dword [ebp - 0x1328]
imul eax, dword [ebp - 0x1328], 0xfe
sub ecx, eax
mov dword [ebp - 0x132c], ecx
mov ecx, dword [ebp - 0x132c]
mov edx, dword [ebp - 0x1328]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], edx
push esi
call 0x1c9d13b
add byte [0x3f394c4d], dh
push eax
inc ebp
dec ebx
inc ebp
add esp, 4
and esi, 0x800
call 0x1c9d153
add byte [ecx], bh
inc eax
inc esi
inc ebx
xor bh, byte [ebx]
inc ecx
inc esp
dec ebp
add esp, 4
and esi, 0x15797
pop esi
mov eax, dword [ebp - 0x1c]
add eax, 0xfe
imul ecx, dword [ebp - 0x18], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0x18], 0xfe
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x18]
mov dword [ebp - 0x25f4], eax
mov eax, dword [ebp - 0x25f4]
mov dword [ebp - 0x2678], eax
lea ecx, [ebp - 0xb34]
mov dword [ebp - 0x484], ecx
mov edx, dword [ebp - 0x484]
mov dword [edx + 4], 1
push edx
or edx, 0x10b52
and edx, 0x1175c
sub edx, 0x861a
sub edx, 0xcc18
pop edx
push ecx
push ecx
add esp, 4
or ecx, 0x12776
pop ecx
push ecx
push ecx
add esp, 4
or ecx, 0xa625
pop ecx
mov eax, dword [ebp - 0x484]
imul ecx, dword [eax + 4], 0xfe
add ecx, 0x56f3663b
mov edx, dword [ebp - 0x484]
imul eax, dword [edx + 4], 0xfe
sub ecx, eax
xor ecx, 0x14b
mov edx, dword [ebp - 0x484]
imul ecx, dword [edx + 4]
mov eax, dword [ebp - 0x484]
imul edx, dword [eax + 4], 0xfe
sub ecx, edx
mov eax, dword [ebp - 0x484]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x484]
mov dword [ebp - 0x2758], ecx
push eax
push edx
add esp, 4
or eax, 0x11e3d
xor eax, 0xf56f
add eax, 0x174f7
sub eax, 0x149de
pop eax
push edi
or edi, 0xa368
xor edi, 0x3a19
xor edi, 0x866
pop edi
mov dword [ebp - 0x18d0], 1
push eax
call 0x1c9d27d
add byte [eax], bh
aas
inc eax
dec ebp
aas
add esp, 4
pop eax
push eax
xor eax, 0x37cd
jmp 0x1c9d291
jmp 0x1c9d29a
xor eax, 0x473d
pop eax
mov dword [ebp - 0x275c], 0x38
mov dword [ebp - 0x2760], 0xe6
mov dword [ebp - 0x2764], 0x6e
mov dword [ebp - 0x2768], 0x6e
mov dword [ebp - 0x276c], pe_nt_image_headers32
mov dword [ebp - 0x1970], 1
push eax
add eax, 0xa51a
sub eax, 0x5391
jmp 0x1c9d2f1
pop eax
push eax
or eax, 0x14a03
and eax, 0xaab9
pop eax
push esi
jmp 0x1c9d308
or esi, 0x1853a
pop esi
imul edx, dword [ebp - 0x1970], 0xfe
add edx, 0x56f3663b
imul eax, dword [ebp - 0x1970], 0xfe
sub edx, eax
xor edx, 0xe6
imul edx, dword [ebp - 0x1970]
imul ecx, dword [ebp - 0x1970], 0xfe
sub edx, ecx
mov dword [ebp - 0x1974], edx
push edi
push edi
add esp, 4
call 0x1c9d35c
add byte [ecx + 0x44], cl
xor al, byte [eax + 0x47]
xor al, 0x4d
add esp, 4
pop edi
push ecx
push eax
add esp, 4
call 0x1c9d372
add byte [ebp + 0x45], cl
inc esi
dec eax
xor dh, byte [ecx*2 - 0x7efb3b7d]
leave
sub al, 0x3c
add byte [eax], al
pop ecx
push ecx
sub ecx, 0x42a9
or ecx, 0x13cec
call 0x1c9d396
add byte [ebx + edi + 0x33], cl
dec esi
cmp al, 0x4d
inc esi
add esp, 4
sub ecx, 0x171bb
pop ecx
push ebx
xor ebx, 0x17247
xor ebx, 0xb100
pop ebx
mov edx, dword [ebp - 0xb34]
add edx, 0xfe
imul eax, dword [ebp - 0xb30], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0xb30], 0xfe
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0xb30]
mov dword [ebp - 0x25f8], edx
mov edx, dword [ebp - 0x25f8]
mov dword [ebp - 0x25fc], edx
mov eax, dword [ebp - 0x25fc]
sub eax, 0x6e
mov dword [ebp - 0x2600], eax
mov dword [ebp - 0xc48], 1
push eax
sub eax, 0x1e4d
add eax, 0x124ca
or eax, 0x126a9
pop eax
push esi
push eax
add esp, 4
and esi, 0xb333
add esi, 0x3b5b
add esi, 0xfa46
xor esi, 0x180b2
pop esi
imul ecx, dword [ebp - 0xc48], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0xc48], 0xfe
sub ecx, edx
xor ecx, dword [ebp - 0x2600]
imul ecx, dword [ebp - 0xc48]
imul eax, dword [ebp - 0xc48], 0xfe
sub ecx, eax
mov dword [ebp - 0xc4c], ecx
push esi
push ecx
add esp, 4
jmp 0x1c9d484
call 0x1c9d490
add byte [esi + 0x38], al
dec ebp
dec edi
inc ebp
aas
add esp, 4
sub esi, 0xb942
sub esi, 0x1788
pop esi
push ecx
sub ecx, 0x11fbd
pop ecx
mov ecx, dword [ebp - 0xb34]
add ecx, 0xfe
imul edx, dword [ebp - 0xb30], 0xfe
add edx, 0x56f3663b
imul eax, dword [ebp - 0xb30], 0xfe
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0xb30]
mov dword [ebp - 0x2604], ecx
mov ecx, dword [ebp - 0x2604]
mov dword [ebp - 0x2608], ecx
mov edx, dword [ebp - 0x2608]
add edx, 0x38
mov dword [ebp - 0x260c], edx
mov dword [ebp - 0xc50], 1
push ebx
push ebx
add esp, 4
xor ebx, 0xd77e
add ebx, 0x111ab
or ebx, 0x3e38
pop ebx
push eax
sub eax, 0x593
add eax, 0xdcbf
pop eax
push ecx
push edi
add esp, 4
sub ecx, 0x60
pop ecx
imul eax, dword [ebp - 0xc50], 0xfe
add eax, 0x56f3663b
test dword [eax - 0x100000d], esi
add byte [eax], al
add byte [0x56f3663b], al
imul ecx, dword [ebp - 0xc50], 0xfe
sub eax, ecx
xor eax, dword [ebp - 0x260c]
imul eax, dword [ebp - 0xc50]
imul edx, dword [ebp - 0xc50], 0xfe
sub eax, edx
mov dword [ebp - 0xc54], eax
push edi
sub edi, 0x13f9a
pop edi
push edx
push ecx
add esp, 4
add edx, 0x104cd
xor edx, 0xbd7d
pop edx
push ebx
call 0x1c9d598
add byte [eax + 0x49], al
cmp al, byte [esi + 0x35]
xor cl, byte [ebp - 0x7d]
les eax, [ecx + eax*4]
jecxz 0x1c9d537
or byte [ecx], al
add byte [ebx + 0x52], bl
and edx, 0x13bbc
pop edx
push edi
push eax
add esp, 4
xor edi, 0xedc8
jmp 0x1c9d5be
call 0x1c9d5cb
add byte [ecx + eax*2], dh
aaa
cmp byte [edi], bh
dec ebp
push eax
add esp, 4
jmp 0x1c9d5d3
pop edi
mov dword [ebp - 0x344], 1
push eax
call 0x1c9d5eb
add byte [ebx + esi], dh
dec esp
dec ebp
inc edi
add esp, 4
pop eax
push eax
call 0x1c9d600
add byte [esi], bh
inc eax
xor eax, dword [ebx + eax*2 + 0x45]
cmp cl, byte [esi + 0x3c]
cmp al, 0x83
les eax, [ecx + eax*4]
invalid
jmp 0x1c9ac2c