Function at 0x1000e8c0
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Link many functions at runtime

Disassembly:
push 0xffffffffffffffff
push 0x1001ad38
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x28
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
mov dword [esi], 0x1001b2a4
mov edi, dword [sym.imp.MSVCRT.dll_putchar]
push 0x30
mov dword [esp + 0x44], 0
call edi
mov eax, dword [0x10022664]
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
add esp, 4
push str.TerminateThread
push eax
call ebx
mov ecx, dword [esi + 0x28]
push 0
mov ebp, eax
push ecx
call ebp
push 0x30
call edi
mov edx, dword [0x10022664]
add esp, 4
push str.TerminateProcess
push edx
call ebx
mov ecx, dword [esi + 0x20]
push 0
push ecx
call eax
push 0x30
call edi
mov edx, dword [esi + 0x24]
add esp, 4
push 0
push edx
call ebp
push 0x30
call edi
mov al, 0x45
mov dl, 0x69
mov byte [esp + 0x19], al
mov byte [esp + 0x1c], al
mov al, 0x6c
mov cl, 0x74
mov byte [esp + 0x22], al
mov byte [esp + 0x23], al
mov byte [esp + 0x33], al
mov al, 0x65
add esp, 4
mov byte [esp + 0x14], 0x4b
mov byte [esp + 0x16], 0x52
mov byte [esp + 0x17], 0x4e
mov byte [esp + 0x19], 0x4c
mov byte [esp + 0x1a], 0x33
mov byte [esp + 0x1b], 0x32
mov byte [esp + 0x1c], 0x2e
mov byte [esp + 0x1d], 0x64
mov byte [esp + 0x20], 0
mov byte [esp + 0x24], 0x57
mov byte [esp + 0x25], 0x61
mov byte [esp + 0x26], dl
mov byte [esp + 0x27], cl
mov byte [esp + 0x28], 0x46
mov byte [esp + 0x29], 0x6f
mov byte [esp + 0x2a], 0x72
mov byte [esp + 0x2b], 0x53
mov byte [esp + 0x2c], dl
mov byte [esp + 0x2d], 0x6e
mov byte [esp + 0x2e], 0x67
mov byte [esp + 0x30], al
mov byte [esp + 0x31], 0x4f
mov byte [esp + 0x32], 0x62
mov byte [esp + 0x33], 0x6a
mov byte [esp + 0x34], al
mov byte [esp + 0x35], 0x63
mov byte [esp + 0x36], cl
lea eax, [esp + 0x24]
lea ecx, [esp + 0x14]
push eax
push ecx
mov byte [esp + 0x3f], 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call ebx
mov edx, dword [esi + 0x2c]
push 0x7d0
push edx
call eax
push 0x30
call edi
mov eax, dword [esi + 0x2c]
add esp, 4
push 0
push eax
call ebp
mov ecx, dword [0x10022664]
push str.DisconnectNamedPipe
push ecx
call ebx
mov edi, eax
mov eax, dword [esi + 0x10]
test eax, eax
je 0x1000ea38
push eax
call edi
mov eax, dword [esi + 0x14]
test eax, eax
je 0x1000ea42
push eax
call edi
mov eax, dword [esi + 0x18]
test eax, eax
je 0x1000ea4c
push eax
call edi
mov eax, dword [esi + 0x1c]
test eax, eax
je 0x1000ea56
push eax
call edi
mov edx, dword [0x10022664]
push str.CloseHandle
push edx
call ebx
mov edi, eax
mov eax, dword [esi + 0x10]
push eax
call edi
mov ecx, dword [esi + 0x14]
push ecx
call edi
mov edx, dword [esi + 0x18]
push edx
call edi
mov eax, dword [esi + 0x1c]
push eax
call edi
mov ecx, dword [esi + 0x20]
push ecx
call edi
mov edx, dword [esi + 0x24]
push edx
call edi
mov eax, dword [esi + 0x2c]
push eax
call edi
mov ecx, dword [esi + 0x28]
push ecx
call edi
mov edx, dword [0x10022664]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, esi
mov dword [esp + 0x40], 0xffffffff
call fcn.1000b480
mov ecx, dword [esp + 0x38]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x34
ret