Function at 0x1002348
Capabilities:
Get number of processors

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1d8
mov eax, dword [0x1038008]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
and dword [ebp - 0x1a0], 0
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp + 0x14]
push ebx
mov ebx, dword [ebp + 0x18]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp + 0x1c]
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 0x1c8], eax
mov eax, dword [esi + 4]
not eax
push edi
and eax, 1
push esi
mov dword [ebp - 0x1d8], eax
call fcn.01001ba9
movzx eax, word [esi + 0x16]
mov edi, dword [ebx]
mov dword [ebp - 0x1cc], eax
xor eax, eax
test byte [ebp + 0x24], 8
mov dword [ebp - 0x1bc], edi
mov dword [ebx], eax
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1c4], eax
jne 0x101045a
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x1b4], eax
cmp dword [ebx], edi
jae 0x1002521
movzx eax, word [esi + 0x4c]
and dword [ebp - 0x1a8], 0
mov dword [ebp - 0x19c], eax
mov eax, dword [ebx]
lea edi, [ebp - 0x194]
cmp eax, dword [ebp - 0x1bc]
jae 0x100248c
nop
nop
nop
nop
nop
nop
cmp dword [ebp - 0x1a8], 0x64
jae 0x100247f
movzx eax, word [esi + 8]
cmp word [ebp - 0x19c], ax
jge 0x100247f
mov eax, dword [ebp - 0x1b4]
movzx edx, word [eax]
mov eax, dword [ebp - 0x1b8]
movzx eax, word [eax]
cmp ax, 0x20
jb 0x1002580
cmp ax, 0x7f
je 0x1002580
mov word [edi], dx
inc edi
inc edi
inc dword [ebp - 0x19c]
inc dword [ebp - 0x1a8]
add dword [ebp - 0x1a4], 2
mov eax, dword [ebp - 0x1bc]
add dword [ebp - 0x1b4], 2
add dword [ebp - 0x1b8], 2
add dword [ebx], 2
cmp dword [ebx], eax
jb 0x1002410
cmp dword [ebp - 0x1a8], 0
jne 0x10025cb
mov eax, dword [ebp - 0x1bc]
cmp dword [ebx], eax
je 0x1002521
mov eax, dword [ebp - 0x1b4]
movzx eax, word [eax]
sub eax, 8
je 0x101060c
dec eax
je 0x1010571
dec eax
jne 0x10026aa
add dword [ebp - 0x1a4], 2
xor eax, eax
mov word [ebp - 0x198], ax
mov ax, word [esi + 0x4e]
inc ax
mov word [ebp - 0x196], ax
push dword [ebp + 0x28]
mov eax, dword [ebp + 0x24]
shr eax, 1
and eax, 1
push eax
push dword [ebp - 0x198]
push esi
call fcn.0100212c
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0
jl 0x1002719
add dword [ebx], 2
add dword [ebp - 0x1b4], 2
add dword [ebp - 0x1b8], 2
mov eax, dword [ebp - 0x1bc]
cmp dword [ebx], eax
jb 0x10023e5
mov eax, dword [ebp - 0x1c8]
test eax, eax
jne 0x1010823
push esi
call fcn.01001bcf
and dword [ebp - 0x1a0], 0
cmp dword [ebp - 0x1c4], 0
jne 0x1010830
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x1a0]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.010015a8
leave
ret 0x24
cmp dword [ebp - 0x1d8], 0
jne 0x100244c
movzx ecx, ax
sub ecx, 7
je 0x1010502
dec ecx
je 0x100247f
dec ecx
je 0x10026e9
dec ecx
je 0x100247f
sub ecx, 3
je 0x100247f
jmp 0x10104d0
movsx eax, word [esi + 8]
movsx ecx, word [esi + 0x4c]
sub eax, ecx
cmp dword [ebp - 0x1a8], eax
ja 0x1010559
mov edi, dword [ebp - 0x1a8]
push esi
push edi
lea eax, [ebp - 0x194]
push eax
call fcn.01001f19
movzx eax, word [esi + 0x4c]
mov word [ebp - 0x1d4], ax
lea eax, [edi + eax - 1]
mov word [ebp - 0x1d0], ax
movzx eax, word [esi + 0x4e]
mov word [ebp - 0x1d2], ax
mov word [ebp - 0x1ce], ax
lea eax, [ebp - 0x1d4]
push eax
push esi
call fcn.01002285
mov ax, word [esi + 0x4c]
push dword [ebp + 0x28]
add dword [ebp - 0x1ac], edi
add ax, di
mov word [ebp - 0x198], ax
mov ax, word [esi + 0x4e]
mov word [ebp - 0x196], ax
mov eax, dword [ebp + 0x24]
and eax, 2
push eax
push dword [ebp - 0x198]
push esi
call fcn.0100212c
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebx]
cmp eax, dword [ebp - 0x1bc]
jne 0x1002513
push esi
call fcn.01001bcf
mov eax, dword [ebp - 0x1c8]
test eax, eax
je 0x1002535
jmp 0x1010564
sub eax, 3
jne 0x10024f5
add dword [ebp - 0x1a4], 2
mov word [ebp - 0x198], ax
mov ax, word [esi + 0x4e]
jmp 0x10024d0
mov ecx, dword [ebp - 0x19c]
and ecx, 7
push 8
pop eax
sub eax, ecx
movzx ecx, word [esi + 8]
add dword [ebp - 0x19c], eax
cmp word [ebp - 0x19c], cx
jge 0x100247f
xor ecx, ecx
test eax, eax
ja 0x1002724
jmp 0x100245d
push esi
call fcn.01001bcf
jmp 0x100253c
cmp dword [ebp - 0x1a8], 0x64
jae 0x100245d
push 0x20
pop edx
mov word [edi], dx
inc edi
inc edi
inc ecx
inc dword [ebp - 0x1a8]
cmp ecx, eax
jb 0x1002724
jmp 0x100245d
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
push edi
push dword [0x1038030]
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov dword [ebp - 0x1b4], eax
test eax, eax
jne 0x101048c
mov dword [ebp - 0x1a0], 0xc0000017
jmp 0x1002549
push edi
push dword [ebp - 0x1b8]
mov dword [ebp - 0x1c4], eax
push eax
call dword [sym.imp.msvcrt.dll_memmove]
add esp, 0xc
push dword [0x1038334]
shr edi, 1
push edi
push dword [ebp - 0x1b4]
call fcn.01004dfe
mov dword [ebp - 0x1a0], eax
test eax, eax
jl 0x100253c
mov edi, dword [ebp - 0x1bc]
jmp 0x10023dd
test byte [ebp + 0x24], 4
je 0x10104dc
cmp ax, 0x20
jb 0x1010508
test byte [esi], 4
je 0x10104ee
test byte [0x10382f8], 1
je 0x100244c
push eax
push dword [0x1038334]
call fcn.0101c413
mov word [edi], ax
jmp 0x100244f
test byte [ebp + 0x24], 4
je 0x101053f
cmp dword [ebp - 0x1a8], 0x63
jae 0x100247f
push 0x5e
pop ecx
mov word [edi], cx
push 2
pop ecx
add dword [ebp - 0x19c], ecx
add dword [ebp - 0x1a8], ecx
add edi, ecx
add eax, 0x40
mov word [edi], ax
add edi, ecx
add dword [ebp - 0x1a4], ecx
jmp 0x1002464
push 0
push 0
push 0x403
push dword [0x1038260]
call dword [sym.imp.USER32.dll_SendNotifyMessageW]
jmp 0x1002464
mov dword [ebp - 0x1a8], eax
jmp 0x10025e1
mov ecx, dword [ebp - 0x1ac]
mov dword [eax], ecx
jmp 0x1002535
movzx ecx, word [esi + 0x4c]
add dword [ebp - 0x1a4], 2
mov edx, ecx
push 8
and edx, 7
pop eax
sub eax, edx
add dword [ebp - 0x1ac], eax
add ecx, eax
movzx eax, word [esi + 8]
cmp cx, ax
mov word [ebp - 0x198], cx
jl 0x10105bc
movsx ecx, word [esi + 0x4c]
cwde
sub eax, ecx
mov dword [ebp - 0x1b0], eax
xor eax, eax
mov word [ebp - 0x198], ax
mov ax, word [esi + 0x4e]
inc ax
jmp 0x10105cf
movsx eax, word [esi + 0x4c]
movsx ecx, cx
sub ecx, eax
mov ax, word [esi + 0x4e]
mov dword [ebp - 0x1b0], ecx
push 0
mov word [ebp - 0x196], ax
lea eax, [ebp - 0x1b0]
push eax
push 4
push dword [esi + 0x4c]
push str.
push esi
call fcn.0101fa1a
lea eax, [ebp - 0x1b0]
push eax
push 3
push dword [esi + 0x4c]
push dword [ebp - 0x1cc]
push esi
call fcn.0100a96b
jmp 0x10024d7
mov edi, dword [ebp - 0x1a4]
mov eax, dword [esi + 0x4c]
dec dword [ebp - 0x1ac]
mov dword [ebp - 0x198], eax
cmp edi, dword [ebp - 0x1c0]
je 0x101079b
sub edi, dword [ebp - 0x1c0]
sar edi, 1
cmp edi, 0x64
jle 0x1010669
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
lea ecx, [edi + edi]
push ecx
push dword [0x1038030]
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlAllocateHeap]
test eax, eax
jne 0x101066f
mov dword [ebp - 0x1a0], 0xc0000017
jmp 0x100253c
lea eax, [ebp - 0xcc]
mov edx, dword [ebp - 0x1c0]
mov ecx, eax
mov dword [ebp - 0x19c], edx
test edi, edi
jbe 0x10106b6
mov dword [ebp - 0x1a0], edi
mov edx, dword [ebp - 0x19c]
movzx edx, word [edx]
cmp dx, 8
jne 0x101069e
cmp ecx, eax
jbe 0x10106a3
dec ecx
dec ecx
jmp 0x10106a3
mov word [ecx], dx
inc ecx
inc ecx
add dword [ebp - 0x19c], 2
dec dword [ebp - 0x1a0]
jne 0x1010687
cmp ecx, eax
jne 0x10106c2
mov dword [ebp - 0x19c], 0x20
jmp 0x10106cc
movzx ecx, word [ecx - 2]
mov dword [ebp - 0x19c], ecx
lea ecx, [ebp - 0xcc]
cmp eax, ecx
je 0x10106eb
push eax
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
push 0
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlFreeHeap]
cmp word [ebp - 0x19c], 9
jne 0x101073d
push dword [0x1038334]
dec edi
push edi
push dword [ebp - 0x1c0]
push dword [ebp + 0x20]
call fcn.0102336d
sub word [ebp - 0x198], ax
jns 0x10107a2
movsx eax, word [esi + 8]
dec eax
cdq
and edx, 7
add eax, edx
sar eax, 3
dec word [ebp - 0x196]
lea eax, [eax*8 + 1]
mov word [ebp - 0x198], ax
jmp 0x10107a2
cmp word [ebp - 0x19c], 0x20
jae 0x101079b
dec word [ebp - 0x198]
dec dword [ebp - 0x1ac]
test byte [ebp + 0x24], 1
je 0x101079b
push 0
lea eax, [ebp - 0x1b0]
push eax
push 4
push dword [ebp - 0x198]
mov dword [ebp - 0x1b0], 1
push str.
push esi
call fcn.0101fa1a
lea eax, [ebp - 0x1b0]
push eax
push 3
push dword [ebp - 0x198]
push dword [ebp - 0x1cc]
push esi
call fcn.0100a96b
dec word [ebp - 0x198]
test byte [ebp + 0x24], 0x10
je 0x10107bb
cmp word [ebp - 0x198], 0
jge 0x10107bb
xor eax, eax
mov word [ebp - 0x198], ax
push dword [ebp + 0x28]
mov eax, dword [ebp + 0x24]
shr eax, 1
and eax, 1
push eax
push dword [ebp - 0x198]
push esi
call fcn.0100212c
test byte [ebp + 0x24], 1
mov dword [ebp - 0x1a0], eax
je 0x10024f5
push 0
lea eax, [ebp - 0x1b0]
push eax
push 4
push dword [esi + 0x4c]
mov dword [ebp - 0x1b0], 1
push str.
push esi
call fcn.0101fa1a
lea eax, [ebp - 0x1b0]
push eax
push 3
push dword [esi + 0x4c]
push dword [ebp - 0x1cc]
push esi
call fcn.0100a96b
jmp 0x10024ef
mov ecx, dword [ebp - 0x1ac]
mov dword [eax], ecx
jmp 0x100252f
push dword [ebp - 0x1c4]
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
push 0
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlFreeHeap]
jmp 0x1002549