Function at 0x4b94a0
Capabilities:
Connect to wmi namespace via wbemlocator
Get number of processor cores
Reference wmi statements

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
push ebx
push esi
push edi
xor esi, esi
push esi
call dword [sym.imp.ole32.dll_CoInitialize]
cmp byte [0x53b5fd], 0
je 0x4b9555
lea eax, [ebp - 0x10]
push eax
push 0x502118
push 1
push esi
push 0x5021e8
mov dword [ebp - 0x10], esi
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x4b954f
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 0xc]
push edx
push esi
push esi
push esi
push esi
push esi
push esi
mov dword [ebp - 0xc], esi
mov ecx, dword [eax]
push 0x52619c
push eax
mov eax, dword [ecx + 0xc]
call eax
test eax, eax
js 0x4b9544
mov eax, dword [ebp - 0xc]
push esi
push esi
push 3
push 3
push esi
push esi
push 0xa
push eax
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
mov eax, dword [ebp - 0xc]
js 0x4b953c
lea edx, [ebp - 0x14]
push edx
push esi
push 0x30
push str.SELECT__FROM_Win32_Processor
mov dword [ebp - 0x14], esi
mov ecx, dword [eax]
push 0x526208
push eax
mov eax, dword [ecx + 0x50]
call eax
test eax, eax
jns 0x4b955e
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x400
mov dword [ebp - 0x18], esi
call fcn.004e4240
add esp, 4
mov ebx, eax
cmp dword [ebp - 0x14], esi
je 0x4b9997
jmp 0x4b9582
xor esi, esi
push 0x400
push esi
push ebx
call fcn.004e7d90
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
add esp, 0xc
lea edx, [ebp - 0x18]
push edx
lea edx, [ebp - 8]
push edx
push 1
push 0xffffffffffffffff
push eax
mov eax, dword [ecx + 0x10]
call eax
cmp dword [ebp - 0x18], esi
je 0x4b9997
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
push esi
push esi
lea edx, [ebp - 0x2c]
push edx
push esi
push str.Name
push eax
mov eax, dword [ecx + 0x10]
call eax
test eax, eax
jne 0x4b9983
cmp word [ebp - 0x2c], 1
je 0x4b9983
mov eax, dword [ebp - 0x24]
mov edx, ebx
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
cmp cx, si
jne 0x4b95e2
lea edi, [ebx - 2]
mov ax, word [edi + 2]
add edi, 2
cmp ax, si
jne 0x4b95f4
mov ecx, dword [0x51d454]
lea edx, [ebp - 0x2c]
push edx
mov dword [edi], ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
push esi
push esi
lea edx, [ebp - 0x2c]
push edx
push esi
push str.ProcessorId
push eax
mov eax, dword [ecx + 0x10]
call eax
test eax, eax
jne 0x4b968a
cmp word [ebp - 0x2c], 1
je 0x4b968a
mov eax, dword [ebp - 0x24]
mov edx, eax
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, si
jne 0x4b9640
sub eax, edx
lea edi, [ebx - 2]
mov cx, word [edi + 2]
add edi, 2
cmp cx, si
jne 0x4b9650
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebx - 2]
nop
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4b9670
mov ecx, dword [0x51d454]
lea edx, [ebp - 0x2c]
mov dword [edi], ecx
push edx
jmp 0x4b96a7
lea edi, [ebx - 2]
lea ecx, [ecx]
mov ax, word [edi + 2]
add edi, 2
cmp ax, si
jne 0x4b9690
mov eax, dword [0x51d454]
lea ecx, [ebp - 0x2c]
mov dword [edi], eax
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 8]
mov edx, dword [eax]
mov edx, dword [edx + 0x10]
push 0
push 0
lea ecx, [ebp - 0x2c]
push ecx
push 0
push str.NumberOfCores
push eax
call edx
test eax, eax
jne 0x4b970a
cmp word [ebp - 0x2c], 1
je 0x4b970a
mov eax, ebx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4b96d7
mov ecx, dword [ebp - 0x24]
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
sub eax, edx
push ecx
sar eax, 1
lea edx, [ebx + eax*2]
push 0x5276d8
push edx
call esi
add esp, 0xc
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x4b9734
lea edi, [ebx - 2]
lea ecx, [ecx]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4b9710
mov ecx, dword [0x51d454]
lea edx, [ebp - 0x2c]
push edx
mov dword [edi], ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
push 0
push 0
lea edx, [ebp - 0x2c]
push edx
push 0
push str.NumberOfEnabledCore
push eax
mov eax, dword [ecx + 0x10]
call eax
test eax, eax
jne 0x4b9787
cmp word [ebp - 0x2c], 1
je 0x4b9787
mov eax, ebx
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4b9760
mov ecx, dword [ebp - 0x24]
sub eax, edx
push ecx
sar eax, 1
lea edx, [ebx + eax*2]
push 0x5276d8
push edx
call esi
add esp, 0xc
lea eax, [ebp - 0x2c]
push eax
jmp 0x4b97a8
lea edi, [ebx - 2]
lea ebx, [ebx]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4b9790
mov ecx, dword [0x51d454]
lea edx, [ebp - 0x2c]
mov dword [edi], ecx
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
push 0
push 0
lea edx, [ebp - 0x2c]
push edx
push 0
push str.NumberOfLogicalProcessors
push eax
mov eax, dword [ecx + 0x10]
call eax
test eax, eax
jne 0x4b9807
cmp word [ebp - 0x2c], 1
je 0x4b9807
mov eax, ebx
lea edx, [eax + 2]
jmp 0x4b97e0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4b97e0
mov ecx, dword [ebp - 0x24]
sub eax, edx
push ecx
sar eax, 1
lea edx, [ebx + eax*2]
push 0x5276d8
push edx
call esi
add esp, 0xc
lea eax, [ebp - 0x2c]
push eax
jmp 0x4b9828
lea edi, [ebx - 2]
lea ebx, [ebx]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4b9810
mov ecx, dword [0x51d454]
lea edx, [ebp - 0x2c]
mov dword [edi], ecx
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
push 0
push 0
lea edx, [ebp - 0x2c]
push edx
push 0
push str.Status
push eax
mov eax, dword [ecx + 0x10]
call eax
test eax, eax
jne 0x4b98aa
cmp word [ebp - 0x2c], 1
je 0x4b98aa
mov eax, dword [ebp - 0x24]
mov edx, eax
jmp 0x4b9860
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4b9860
sub eax, edx
lea edi, [ebx - 2]
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4b9870
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebx - 2]
nop
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4b9890
mov ecx, dword [0x51d454]
lea edx, [ebp - 0x2c]
mov dword [edi], ecx
push edx
jmp 0x4b98c7
lea edi, [ebx - 2]
lea ecx, [ecx]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4b98b0
mov eax, dword [0x51d454]
lea ecx, [ebp - 0x2c]
mov dword [edi], eax
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, ebx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4b98d2
sub eax, edx
sar eax, 1
mov edx, 1
mov word [ebx + eax*2], dx
mov eax, ebx
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4b98f0
mov ecx, dword [ebp + 8]
sub eax, edx
sar eax, 1
lea esi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x4b9905
sub ecx, esi
sar ecx, 1
add ecx, eax
cmp ecx, 0x480
jae 0x4b9997
mov esi, dword [ebp + 8]
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4b9926
sub eax, edx
sar eax, 1
mov eax, ebx
jne 0x4b9951
mov edx, esi
sub edx, ebx
lea ecx, [ecx]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4b9940
jmp 0x4b998d
mov edx, eax
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4b9953
mov edi, esi
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4b9965
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x4b998d
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [ebp - 0x14], 0
jne 0x4b9580
push ebx
call fcn.004e424b
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
add esp, 4
push eax
call edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret