Function at 0x428ad0
Capabilities:
Check for peb beingdebugged flag
Get number of processors

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4a7922
mov eax, dword fs:[0]
push eax
sub esp, 0x2e8
mov eax, dword [0x4ca5d0]
xor eax, esp
mov dword [esp + 0x2e0], eax
push ebx
push esi
push edi
mov eax, dword [0x4ca5d0]
xor eax, esp
push eax
lea eax, [esp + 0x2f8]
mov dword fs:[0], eax
mov edi, ecx
lea eax, [edi + 0x3c]
xor ebx, ebx
xor ecx, ecx
mov dword [esp + 0x18], eax
mov eax, dword [eax]
mov word [esp + 0x70], cx
mov ecx, eax
mov dword [esp + 0x30], edi
mov dword [esp + 0x84], 7
mov dword [esp + 0x80], ebx
lea esi, [ecx + 2]
nop
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x428b40
sub ecx, esi
sar ecx, 1
push ecx
lea esi, [esp + 0x70]
call fcn.0040ffa0
mov dword [esp + 0x300], ebx
push 6
push ebx
mov dword [esp + 0x4c], 0x4b29c0
mov dword [esp + 0x50], str.SetFilePointer
mov dword [esp + 0x54], ebx
call dword [0x4aa4c4]
cmp eax, ebx
jne 0x428b89
mov dword [esp + 0x4c], 1
lea eax, [edi + 0x48]
mov byte [esp + 0x300], 1
mov dword [esp + 0x40], eax
mov eax, dword [eax + 0x24]
cmp eax, ebx
je 0x428ba8
push 0xffffffffffffffff
push eax
call dword [0x4aa2a4]
call fcn.004111f0
mov eax, dword [0x4cfd74]
cmp eax, ebx
je 0x428be9
lea ecx, [esp + 0x1c]
push ecx
push ebx
push 0x4a
lea edx, [esp + 0x34]
push eax
mov dword [esp + 0x38], 5
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x2c], 0x2711
mov dword [esp + 0x34], edx
mov dword [esp + 0x30], 8
call dword [0x4aa37c]
mov eax, dword [edi + 0x1b0]
cmp eax, ebx
je 0x428c04
mov edx, dword [edi + 0x44]
push edx
push 0x4afce0
push ebx
push 5
call eax
add esp, 0x10
call dword [0x4aa2b8]
mov esi, dword [esp + 0x18]
mov dword [esp + 0x28], eax
and al, 0x28
mov eax, dword [esi]
push eax
push 0x4afcec
mov ecx, 0x4d0000
call fcn.00478ee0
mov eax, dword [esi]
push eax
call fcn.00410f00
add esp, 0xc
cmp eax, ebx
jne 0x428c6d
mov ecx, dword [esi]
push ecx
push 0x4afcfc
mov ecx, 0x4d0000
call fcn.00478ee0
mov eax, dword [edi + 0x1b0]
add esp, 8
cmp eax, ebx
je 0x42957c
mov edx, dword [edi + 0x44]
push edx
push 0x4afd1c
push 1
push 0xa
call eax
add esp, 0x10
jmp 0x42957c
push edi
call fcn.00427ac0
mov eax, dword [0x4cfd74]
cmp eax, ebx
je 0x428caf
lea edx, [esp + 0x34]
push edx
push ebx
push 0x4a
lea ecx, [esp + 0x28]
push eax
mov dword [esp + 0x2c], 0x2d
mov dword [esp + 0x30], ebx
mov dword [esp + 0x44], 0x2711
mov dword [esp + 0x4c], ecx
dec esp
mov dword [esp + 0x48], 8
call dword [0x4aa37c]
mov eax, dword [edi + 0x1b0]
cmp eax, ebx
je 0x428cca
mov ecx, dword [edi + 0x44]
push ecx
push 0x4afd30
push ebx
push 0x2d
call eax
add esp, 0x10
push 0x4afd44
mov ecx, 0x4d0000
call fcn.00478ee0
mov eax, dword [0x4d00b0]
add esp, 4
cmp eax, ebx
jne 0x428d0e
push 0x4b22b4
call dword [0x4aa280]
cmp eax, ebx
je 0x428d05
push 0x4b22d0
push eax
call dword [0x4aa238]
mov dword [0x4d00b0], eax
mov eax, dword [0x4d00b0]
cmp eax, ebx
je 0x428d11
push ebx
call eax
mov eax, dword [esi]
mov dword [esp + 0x14], ebx
cmp dword [eax - 0xc], ebx
je 0x428d32
mov esi, dword [esp + 0x40]
push eax
call fcn.00412ea0
cmp eax, ebx
je 0x428d32
mov dword [esp + 0x14], 1
mov eax, dword [0x4d00b0]
cmp eax, ebx
jne 0x428d64
push 0x4b22b4
call dword [0x4aa280]
cmp eax, ebx
je 0x428d5b
push 0x4b22d0
push eax