Function at 0x436640
Capabilities:
Get number of processors

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x5774da
push eax
mov eax, dword [esp + 0x10]
mov dword fs:[0], esp
sub esp, 0x88
push ebx
mov ebx, dword [esp + 0xa0]
push ebp
mov ebp, dword [eax + 8]
push esi
push edi
call fcn.004cee70
mov esi, eax
lea edi, [esi + 0x30]
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov al, byte [esi + 0x2c]
test al, al
push edi
je 0x436691
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x4370c5
mov edx, dword [esi + 0x24]
mov esi, dword [esi + 0x1c]
mov ecx, ebp
shr ecx, 3
mov eax, dword [edx + ecx*4]
xor eax, dword [esi + ebp*4]
mov dword [esp + 0x14], eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov al, byte [esp + 0x10]
test al, al
jne 0x4370c5
mov eax, dword [esp + 0xb0]
cmp eax, 0x11
ja case.default.0x4366c8
jmp dword [eax*4 + 0x4370e0]
push 0x644
call fcn.0055e5a9
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
mov dword [esp + 0xa0], 0
test esi, esi
je 0x436b9e
push ebx
push esi
call fcn.0046bfb0
mov dword [esi], vtable.OArmortankCharacter.0
jmp 0x436ba0
push 0x644
call fcn.0055e5a9
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
test esi, esi
mov dword [esp + 0xa0], 1
je 0x436738
push ebx
push esi
call fcn.0046bfb0
mov dword [esi], vtable.OMagetankCharacter.0
jmp 0x43673a
xor esi, esi
lea edi, [esi + 0x3f0]
xor al, al
mov dword [esp + 0xa0], 0xffffffff
mov ebp, esi
call fcn.00417d80
jmp 0x436bad
push 0x644
call fcn.0055e5a9
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
test esi, esi
mov dword [esp + 0xa0], 2
je 0x436b9e
push ebx
push esi
call fcn.0046bfb0
mov dword [esi], vtable.ONaKtankCharacter.0
jmp 0x436ba0
push 0x644
call fcn.0055e5a9
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
test esi, esi
mov dword [esp + 0xa0], 3
je 0x436b9e
push ebx
push esi
call fcn.0046bfb0
mov dword [esi], vtable.OWoodtankCharacter.0
jmp 0x436ba0
push 0x644
call fcn.0055e5a9
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
test esi, esi
mov dword [esp + 0xa0], 4
je 0x436b9e
push ebx
push esi
call fcn.0046bfb0
mov dword [esi], vtable.OMultitankCharacter.0
jmp 0x436ba0
push 0x644
call fcn.0055e5a9
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
test esi, esi
mov dword [esp + 0xa0], 5
je 0x436b9e
push ebx
push esi
call fcn.0046bfb0
mov dword [esi], vtable.OBoomertankCharacter.0
jmp 0x436ba0
push 0x644
call fcn.0055e5a9
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
test esi, esi
mov dword [esp + 0xa0], 6
je 0x436b9e
push ebx
push esi
call fcn.0046bfb0
mov dword [esi], vtable.ORayontankCharacter.0
jmp 0x436ba0
push 0x644
call fcn.0055e5a9
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
test esi, esi
mov dword [esp + 0xa0], 7
je 0x436b9e
push ebx
push esi
call fcn.0046bfb0
mov dword [esi], vtable.OLightningtankCharacter.0
jmp 0x436ba0
push 0x644
call fcn.0055e5a9
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
test esi, esi
mov dword [esp + 0xa0], 8
je 0x436b9e
push ebx
push esi
call fcn.0046bfb0
mov dword [esi], vtable.OCrystaltankCharacter.0
jmp 0x436ba0
push 0x644
call fcn.0055e5a9
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
test esi, esi
mov dword [esp + 0xa0], 9
je 0x436912
push ebx
push esi
call fcn.0046bfb0
mov dword [esi], vtable.OLaserCharacter.0
jmp 0x436914
xor esi, esi
mov al, byte [esp + 0xe0]
test al, al
mov dword [esp + 0xa0], 0xffffffff
mov ebp, esi
je 0x436bad
mov esi, dword [esp + 0xbc]
test esi, esi
setne al
and ebx, 0x80000007
push eax
jns 0x43694a
dec ebx
or ebx, 0xfffffff8
inc ebx
mov edx, dword [esp + 0xb8]
mov ecx, dword [esp + 0xbc]
push ebx
add ecx, 0xffffff38
push edx
call fcn.00447490
jmp 0x436bad
push 0x644
call fcn.0055e5a9
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
test esi, esi
mov dword [esp + 0xa0], 0xa
je 0x436b9e
push ebx
push esi
call fcn.0046bfb0
mov dword [esi], vtable.OIcetankCharacter.0
jmp 0x436ba0
push 0x644
call fcn.0055e5a9
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
test esi, esi
mov dword [esp + 0xa0], 0xb
je 0x436b9e
push ebx
push esi
call fcn.0046bfb0
mov dword [esi], vtable.OTurtletankCharacter.0
jmp 0x436ba0
push 0x644
call fcn.0055e5a9
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
test esi, esi
mov dword [esp + 0xa0], 0xc
je 0x436b9e
push ebx
push esi
call fcn.0046bfb0
mov dword [esi], vtable.OGrubtankCharacter.0
jmp 0x436ba0
push 0x644
call fcn.0055e5a9
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
test esi, esi
mov dword [esp + 0xa0], 0xd
je 0x436a42
mov eax, ebx
call fcn.0047d0a0
mov ebp, eax
jmp 0x436ba2
xor eax, eax
mov ebp, eax
jmp 0x436ba2
push 0x644
call fcn.0055e5a9
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
test esi, esi
mov dword [esp + 0xa0], 0xe
je 0x436a7c
push ebx
push esi
call fcn.0046bfb0
mov dword [esi], vtable.OKnightCharacter.0
jmp 0x436a7e
xor esi, esi
mov al, byte [esp + 0xe0]
test al, al
mov dword [esp + 0xa0], 0xffffffff
mov ebp, esi
je 0x436bad
mov eax, dword [esp + 0xbc]
test eax, eax
setne al
mov ecx, ebx
and ecx, 0x80000007
push eax
jns 0x436ab6
dec ecx
or ecx, 0xfffffff8
inc ecx
mov edx, dword [esp + 0xbc]
mov eax, dword [esp + 0xb8]
add edx, 0xffffff38
push edx
push eax
call fcn.00447650
jmp 0x436bad
push 0x644
call fcn.0055e5a9
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
test esi, esi
mov dword [esp + 0xa0], 0xf
je 0x436b9e
push ebx
push esi
call fcn.0046bfb0
mov dword [esi], vtable.OCyberNaKtankCharacter.0
jmp 0x436ba0
push 0x644
call fcn.0055e5a9
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
test esi, esi
mov dword [esp + 0xa0], 0x10
je 0x436b9e
push ebx
push esi
call fcn.0046bfb0
mov dword [esi], vtable.OBigFootMarkIICharacter.0
jmp 0x436ba0
push 0x644
call fcn.0055e5a9
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
test esi, esi
mov dword [esp + 0xa0], 0x11
je 0x436b9e
push ebx
push esi
call fcn.0046bfb0
mov dword [esi], vtable.OFrogCharacter.0
jmp 0x436ba0
push 0x644
mov dword [esp + 0xb4], 0
call fcn.0055e5a9
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
mov dword [esp + 0xa0], 0x12
jmp 0x4366ed
xor esi, esi
mov ebp, esi
mov dword [esp + 0xa0], 0xffffffff
xor eax, eax
mov dword [ebp + 0x204], eax
mov dword [esp + 0x10], eax
lea edi, [ebp + 0x448]
mov ebx, 4
mov edx, dword [edi]
push 1
lea ecx, [esp + 0x14]
push ecx
push edx
call fcn.004cee70
mov esi, eax
call fcn.0040adb0
add edi, 8
dec ebx
jne 0x436bc4
mov edx, dword [ebp + 0xe4]
mov eax, dword [esp + 0xb0]
push 1
lea ecx, [esp + 0x14]
push ecx
push edx
mov dword [esp + 0x1c], eax
call fcn.004cee70
mov esi, eax
call fcn.0040adb0
mov edx, dword [ebp + 0xa4]
mov eax, dword [esp + 0xb4]
push 1
lea ecx, [esp + 0x14]
push ecx
push edx
mov dword [esp + 0x1c], eax
call fcn.004cee70
mov esi, eax
call fcn.0040adb0
mov ebx, dword [ebp + 0xa4]
call fcn.004cee70
mov esi, eax
lea edi, [esi + 0x30]
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov al, byte [esi + 0x2c]
test al, al
push edi
je 0x436c50
mov esi, 1
jmp 0x436c61
mov ecx, dword [esi + 0x24]
mov edx, dword [esi + 0x1c]
mov eax, ebx
shr eax, 3
mov esi, dword [ecx + eax*4]
xor esi, dword [edx + ebx*4]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp + 0xd4]
push 1
lea eax, [esp + 0x14]
push eax
push ecx
mov dword [esp + 0x1c], esi
call fcn.004cee70
mov esi, eax
call fcn.0040adb0
mov ecx, dword [ebp + 0xac]
mov edx, dword [esp + 0xb8]
push 1
lea eax, [esp + 0x14]
push eax
push ecx
mov dword [esp + 0x1c], edx
call fcn.004cee70
mov esi, eax
call fcn.0040adb0
mov edx, dword [ebp]
mov ecx, ebp
call dword [edx + 0x14]
mov ecx, dword [ebp + 0xac]
mov dword [esp + 0x10], eax
push 1
lea eax, [esp + 0x14]
push eax
push ecx
call fcn.004cee70
mov esi, eax
call fcn.0040adb0
mov ebx, dword [ebp + 0xac]
call fcn.004cee70
mov esi, eax
lea edi, [esi + 0x30]
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov al, byte [esi + 0x2c]
test al, al
push edi
je 0x436cf6
mov esi, 1
jmp 0x436d07
mov eax, dword [esi + 0x24]
mov ecx, dword [esi + 0x1c]
mov edx, ebx
shr edx, 3
mov esi, dword [eax + edx*4]
xor esi, dword [ecx + ebx*4]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [ebp + 0xdc]
push 1
lea edx, [esp + 0x14]
push edx
push eax
mov dword [esp + 0x1c], esi
call fcn.004cee70
mov esi, eax
call fcn.0040adb0
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xd8]
mov edx, dword [esp + 0xdc]
mov ebx, dword [0x8927a4]
add eax, 0x1388
mov dword [ebp + 0x18], eax
add eax, 0x64
mov dword [ebp + 0x94], eax
mov eax, dword [esp + 0xbc]
mov dword [ebp + 0x3a4], ecx
mov ecx, dword [esp + 0xc0]
mov dword [ebp + 0x3a8], edx
mov edx, dword [esp + 0xc4]
mov dword [ebp + 0x3a0], eax
mov eax, dword [esp + 0xc8]
mov dword [ebp + 0x3ac], ecx
mov cx, word [esp + 0xcc]
push str.avata
add ebx, 0x57f48
mov dword [ebp + 0x3b0], edx
mov dword [ebp + 0x3b4], eax
mov word [ebp + 0x3b8], cx
call fcn.00403040
mov edx, dword [ebp + 0x38]
lea ecx, [ebp + 0x38]
push str.normal
mov dword [ebp + 0x54], eax
call dword [edx + 4]
mov edx, dword [ebp + 0x9c]
mov al, byte [esp + 0xe0]
push 1
lea ecx, [esp + 0x18]
push ecx
push edx
mov byte [esp + 0x20], al
call fcn.004cee70
mov esi, eax
call fcn.0040adb0
mov ecx, dword [ebp + 0xf4]
push 1
lea eax, [esp + 0x14]
push eax
push ecx
mov dword [esp + 0x1c], 0
call fcn.004cee70
mov esi, eax
call fcn.0040adb0
mov edx, dword [0x8927a4]
mov edi, dword [edx + 0x1aa30]
call fcn.004cee70
mov esi, eax
lea ebx, [esi + 0x30]
push ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov al, byte [esi + 0x2c]
test al, al
push ebx
je 0x436e3a
mov esi, 1
jmp 0x436e4b
mov ecx, dword [esi + 0x24]
mov edx, dword [esi + 0x1c]
mov eax, edi
shr eax, 3
mov esi, dword [ecx + eax*4]
xor esi, dword [edx + edi*4]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esp + 0xac]
mov edx, dword [ebp + 0xec]
push 1
lea ecx, [esp + 0x18]
cmp esi, eax
push ecx
sete al
push edx
mov byte [esp + 0x20], al
call fcn.004cee70
mov esi, eax
call fcn.0040adb0
mov eax, dword [esp + 0xd0]
mov ecx, ebp
sub ecx, eax
lea edx, [ecx + 0x389]
lea esp, [esp]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x436e90
mov eax, dword [esp + 0xd4]
mov edx, ebp
sub edx, eax
add edx, 0x396
jmp 0x436eb0
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x436eb0
mov esi, dword [esp + 0xb0]
lea eax, [esi + 1]
push eax
lea ecx, [esp + 0x1c]
push str.tank_d
push ecx
call fcn.0055e68c
mov ebx, dword [0x8927a4]
add esp, 0xc
lea edx, [esp + 0x18]
push edx
add ebx, 0x57f48
call fcn.00403040
mov bl, byte [esp + 0xe0]
test bl, bl
mov dword [ebp + 0x1c], eax
mov ecx, ebp
je 0x436f0a
mov eax, dword [ebp]
push str.normal
call dword [eax + 4]
jmp 0x436f15
mov edx, dword [ebp]
push str.tnormal
call dword [edx + 4]
mov eax, dword [0x8927a4]
push ebp
push eax
mov eax, esi
call fcn.00424380
test bl, bl
jne 0x4370b3
mov edi, dword [ebp + 0x218]
call fcn.004cee70
mov esi, eax
lea ebx, [esi + 0x30]
push ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov al, byte [esi + 0x2c]
test al, al
push ebx
je 0x436f51
mov esi, 1
jmp 0x436f62
mov edx, dword [esi + 0x24]
mov eax, dword [esi + 0x1c]
mov ecx, edi
shr ecx, 3
mov esi, dword [edx + ecx*4]
xor esi, dword [eax + edi*4]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, esi
cdq
sub eax, edx
mov edx, dword [ebp + 0x220]
push 1
lea ecx, [esp + 0x14]
push ecx
sar eax, 1
push edx
mov dword [esp + 0x1c], eax
call fcn.004cee70
mov esi, eax
call fcn.0040adb0
mov edi, dword [ebp + 0x230]
call fcn.004cee70
mov esi, eax
lea ebx, [esi + 0x30]
push ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov al, byte [esi + 0x2c]
test al, al
push ebx
je 0x436fb3
mov esi, 1
jmp 0x436fc4
mov ecx, dword [esi + 0x24]
mov edx, dword [esi + 0x1c]
mov eax, edi
shr eax, 3
mov esi, dword [ecx + eax*4]
xor esi, dword [edx + edi*4]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp + 0x238]
mov eax, esi
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0x10], eax
push 1
lea eax, [esp + 0x14]
push eax
push ecx
call fcn.004cee70
mov esi, eax
call fcn.0040adb0
mov edi, dword [ebp + 0x228]
call fcn.004cee70
mov esi, eax
lea ebx, [esi + 0x30]
push ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov al, byte [esi + 0x2c]
test al, al
push ebx
je 0x437015
mov esi, 1
jmp 0x437026
mov eax, dword [esi + 0x24]
mov ecx, dword [esi + 0x1c]
mov edx, edi
shr edx, 3
mov esi, dword [eax + edx*4]
xor esi, dword [ecx + edi*4]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, esi
cdq
sub eax, edx
sar eax, 1
push 1
lea edx, [esp + 0x14]
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0x228]
push edx
push eax
call fcn.004cee70
mov esi, eax
call fcn.0040adb0
mov edi, dword [ebp + 0x240]
call fcn.004cee70
mov esi, eax
lea ebx, [esi + 0x30]
push ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov al, byte [esi + 0x2c]
test al, al
push ebx
je 0x437077
mov esi, 1
jmp 0x437088
mov edx, dword [esi + 0x24]
mov eax, dword [esi + 0x1c]
mov ecx, edi
shr ecx, 3
mov esi, dword [edx + ecx*4]
xor esi, dword [eax + edi*4]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, esi
cdq
sub eax, edx
mov edx, dword [ebp + 0x240]
push 1
lea ecx, [esp + 0x14]
push ecx
sar eax, 1
push edx
mov dword [esp + 0x1c], eax
call fcn.004cee70
mov esi, eax
call fcn.0040adb0
mov ecx, dword [0x8927a4]
push ebp
add ecx, 0x80214
call fcn.0053bc60
mov ecx, dword [esp + 0x98]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x94
ret 0x3c