Function at 0x1001e750
Capabilities:
Check os version
Get number of processors

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1005e304
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa0
push ebx
push esi
push edi
mov dword [esp + 0x20], 0x13a2
mov ebx, ecx
cmp dword [esp + 0x20], 0x170c
push 0
mov dword [esp + 0x30], ebx
pop edx
jle 0x1001e7dc
xor ebx, ebx
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
lea ecx, [esp + 0x60]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001e7b1
mov eax, dword [eax]
push eax
call fcn.10046acc
pop ecx
push ebx
push 1
lea ecx, [esp + 0x68]
call fcn.1000aac7
inc edi
cmp edi, 0x38ba
jl 0x1001e795
inc esi
cmp esi, 0x6c79
jl 0x1001e793
mov ebx, dword [esp + 0x2c]
xor edx, edx
cmp dword [ebx + 0x10], edx
je 0x1001ea1a
push 0x5f
pop eax
push 2
mov word [esp + 0x10], 0x3d01
mov ecx, edx
mov byte [esp + 0x12], dl
mov word [esp + 0x13], 0x16e
mov byte [esp + 0x15], 0x94
mov word [esp + 0x1a], ax
pop esi
cmp esi, 4
jne 0x1001e813
push 2
pop ecx
jmp 0x1001e83e
movzx edx, byte [esp + esi + 0xd]
mov eax, esi
sub eax, ecx
movzx eax, byte [esp + eax + 0xa]
movzx ecx, word [esp + eax*2 + 0x14]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [esp + esi + 0xc]
add ecx, edx
xor edx, edx
mov word [esp + eax*2 + 0x14], cx
mov ecx, edx
add esi, 2
cmp esi, 6
jb 0x1001e809
xor eax, eax
mov dword [esp + 0x44], 7
mov word [esp + 0x18], ax
lea ecx, [esp + 0x30]
mov word [esp + 0x30], ax
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x44], edx
call fcn.1000ad0d
xor esi, esi
lea edx, [esp + 0x30]
push ebx
lea ecx, [esp + 0x7c]
mov dword [esp + 0xb8], esi
call fcn.1001ebb3
pop ecx
mov edx, eax
mov byte [esp + 0xb4], 1
lea ecx, [esp + 0x48]
call fcn.1001d366
push esi
push 1
lea ecx, [esp + 0x80]
call fcn.1000ae2f
push esi
push 1
lea ecx, [esp + 0x38]
mov byte [esp + 0xbc], 4
call fcn.1000ae2f
xor ecx, ecx
mov dword [esp + 0x14], ecx
mov word [esp + 0x18], cx
mov dword [esp + 0x28], 0xe03
cmp dword [esp + 0x28], 0xf14
jle 0x1001e970
mov ebx, ecx
mov esi, ecx
mov dword [esp + 0x1c], ecx
mov edi, ecx
mov dword [esp + 0x24], ecx
mov eax, esi
mov dword [esp + 0xc], ecx
cdq
mov esi, ecx
idiv edi
mov edi, edx
mov eax, edi
cdq
idiv esi
mov eax, ebx
mov ecx, edx
shl eax, cl
lea ecx, [esp + 0x90]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001e91a
mov eax, dword [eax]
push eax
call fcn.10046acc
pop ecx
push 0
push 1
lea ecx, [esp + 0x98]
call fcn.1000aac7
inc esi
cmp esi, 0x5f6
jl 0x1001e8f6
mov edi, dword [esp + 0x24]
mov esi, dword [esp + 0x1c]
inc edi
mov dword [esp + 0x24], edi
push 0
pop ecx
cmp edi, 0x2aa6
jl 0x1001e8e9
inc esi
mov dword [esp + 0x1c], esi
cmp esi, 0x20e9
jl 0x1001e8e3
inc ebx
cmp ebx, 0x7daa
jl 0x1001e8dd
mov ebx, dword [esp + 0x2c]
mov esi, 0x2dc5
mov edi, 0x1aba
cmp dword [esp + 0x5c], 8
lea eax, [esp + 0x48]
cmovae eax, dword [esp + 0x48]
push eax
push ecx
push ecx
push esi
push 0x341e
call fcn.1002fb62
pop ecx
pop ecx
call eax
mov dword [ebx + 0x18], eax
test eax, eax
je 0x1001e9f4
push 0xffffffffffffffff
push eax
push esi
push edi
call fcn.1002fb62
pop ecx
pop ecx
call eax
cmp eax, 0x80
je 0x1001e9f8
test eax, eax
je 0x1001e9f8
push dword [ebx + 0x18]
push esi
push 0x2113
call fcn.1002fb62
pop ecx
pop ecx
call eax
and dword [ebx + 0x18], 0
push 0x12c
push esi
push 0x4215
call fcn.1002fb62
pop ecx
pop ecx
call eax
push eax
push esi
push edi
call fcn.1002fb62
pop ecx
pop ecx
call eax
xor ecx, ecx
jmp 0x1001e97a
push 0x64
jmp 0x1001e9d5
cmp dword [esp + 0x28], 0xb0a
jge 0x1001ea0d
push str.qlzjp_fjyajpj_lmg_lhdltzqlr_khhbg_mxy
call fcn.10046acc
pop ecx
push 0
push 1
lea ecx, [esp + 0x50]
call fcn.1000ae2f
cmp dword [esp + 0x20], 0x1227
jge 0x1001ea2f
push str.wpnal_pgomhjhig_cconfanvs_frqsrll_xwbgil_yehtkox_xwmcqdh_rrtlxmujo
call fcn.10046acc
pop ecx
mov ecx, dword [esp + 0xac]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret