Function at 0x1001bfe0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
lea eax, [fcn.1001bfe0]
mov ecx, dword [0x101a7ba0]
add ecx, 0x334
mov dword [0x101a7ba0], ecx
mov dword [ebp - 8], eax
mov eax, dword [0x101a7ba0]
sub eax, 0x18bb
mov dword [0x101a7ba0], eax
mov eax, dword [ebp - 8]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x1001c037
jmp 0x1001c059
mov eax, dword [0x101a7ba4]
add eax, 0x621
mov dword [0x101a7ba0], eax
mov dword [ebp - 4], 0
jmp 0x1001c080
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 8]
mov ecx, dword [ecx + 0x3c]
cmp dword [eax + ecx], 0x4550
jne 0x1001c057
mov eax, dword [ebp - 8]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
jmp 0x1001c080
jmp 0x1001c059
mov eax, dword [ebp - 8]
sub eax, 0x1000
and eax, 0xfffff000
mov dword [ebp - 8], eax
mov eax, dword [0x101a7ba0]
sub eax, 0xc52
mov dword [0x101a7ba0], eax
mov al, 1
test al, 1
jne 0x1001c010
jmp 0x1001c01f
mov eax, dword [ebp - 4]
add esp, 0xc
pop ebp
ret

Function at 0x1001c690
Capabilities:
Get number of processors

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [ebp - 4], 0
mov eax, dword fs:[0x30]
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], eax
mov dword [0x101a7ba4], 0x23f7
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x10], eax
mov dword [ebp - 8], 0
jmp 0x1001c745
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
jmp 0x1001c745
mov eax, dword [0x101a7ba0]
sub eax, 0x1c8b
mov dword [0x101a7ba4], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 8]
movzx eax, word [eax + ecx*2 - 0xe]
cmp eax, 0x6c
je 0x1001c7f5
jmp 0x1001c7fe
jmp 0x1001c803
mov dword [0x101a7ba0], 0x1dbc
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 8]
movzx eax, word [eax + ecx*2 - 0x1a]
cmp eax, 0x6c
je 0x1001c76a
jmp 0x1001c80a
jmp 0x1001c6ff
jmp 0x1001c80a
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x10]
movzx eax, word [ecx + eax*2 - 0x14]
cmp eax, 0x64
je 0x1001c7a9
jmp 0x1001c803
jmp 0x1001c704
cmp dword [ebp - 8], 0x104
jge 0x1001c704
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x14]
movzx eax, word [ecx + eax*2]
cmp eax, 0
je 0x1001c743
jmp 0x1001c6c8
mov dword [0x101a7ba4], 0xad6
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 8]
movzx eax, word [eax + ecx*2 - 0x18]
cmp eax, 0x6f
jne 0x1001c727
mov eax, dword [0x101a7ba0]
add eax, 0x187b
mov dword [0x101a7ba4], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 8]
movzx eax, word [eax + ecx*2 - 0x16]
cmp eax, 0x61
je 0x1001c72c
jmp 0x1001c805
mov eax, dword [0x101a7ba0]
sub eax, 0x1352
mov dword [0x101a7ba0], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 8]
movzx eax, word [eax + ecx*2 - 0x12]
cmp eax, 0x64
sete dl
mov byte [ebp - 0x15], dl
mov al, byte [ebp - 0x15]
test al, 1
jne 0x1001c7da
jmp 0x1001c6ff
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x10]
movzx eax, word [ecx + eax*2 - 0x10]
cmp eax, 0x6c
je 0x1001c6d5
jmp 0x1001c725
mov dword [ebp - 0xc], 1
jmp 0x1001c813
jmp 0x1001c725
jmp 0x1001c805
jmp 0x1001c727
mov dword [ebp - 0xc], 0
jmp 0x1001c813
mov eax, dword [ebp - 0xc]
add esp, 0x18
pop ebp
ret