Function at 0x42b760
Capabilities:
Check for peb ntglobalflag flag
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x5369da
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x110
push esi
push edi
mov esi, ecx
xor edi, edi
lea ecx, [esp + 0x5c]
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], edi
call fcn.0040a3b0
lea ecx, [esp + 0x68]
call fcn.0040a3b0
mov eax, dword [esi + 0x218]
mov dword [esp + 0x74], edi
test ah, 0x10
mov dword [esp + 0x78], edi
mov dword [esp + 0x7c], edi
mov dword [esp + 0x80], edi
mov dword [esp + 0x84], edi
mov dword [esp + 0x88], edi
mov dword [esp + 0xc8], edi
mov dword [esp + 0xcc], edi
mov dword [esp + 0xd0], edi
mov word [esp + 0xd4], di
mov word [esp + 0xd6], di
mov word [esp + 0xd8], di
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x40], edi
mov dword [esp + 0x44], edi
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
jne 0x42bb2f
cmp word [esi + 0x12a], 0xb
jne 0x42bb2f
cmp word [esi + 0x128], 3
jl 0x42bb2f
or ah, 0x10
push ebx
mov dword [esi + 0x218], eax
push ebp
lea eax, [esi + 8]
push 0x64
push eax
push 2
call fcn.004e5da0
add eax, 9
add esp, 4
or ah, 0x80
push eax
call fcn.00471ea0
push edi
lea ecx, [esp + 0x50]
push esi
push ecx
call fcn.00453d60
mov ebx, 1
lea edx, [esp + 0x64]
push ebx
push esi
push edx
call fcn.00453d60
push 2
lea eax, [esp + 0x5c]
push esi
push eax
call fcn.00453d60
push 3
lea ecx, [esp + 0x5c]
push esi
push ecx
call fcn.00453d60
lea edx, [esp + 0x50]
lea eax, [esp + 0x88]
push edx
lea ecx, [esp + 0x148]
push eax
push ecx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x58], ebx
call fcn.004e7840
add esp, 0x48
lea edx, [esp + 0x10]
lea ecx, [esp + 0x114]
push eax
lea eax, [esp + 0x2c]
push edx
push eax
push ecx
call fcn.004e7840
add esp, 0xc
lea edx, [esp + 0x5c]
push eax
push edx
call fcn.004e7720
mov ecx, dword [eax]
mov dword [esp + 0x7c], ecx
lea ecx, [esp + 0x1c]
mov edx, dword [eax + 4]
push ecx
mov dword [esp + 0x84], edx
lea edx, [esp + 0x50]
mov eax, dword [eax + 8]
push edx
mov dword [esp + 0x8c], eax
lea eax, [esp + 0x6c]
push eax
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
call fcn.004e7840
add esp, 0x18
lea ecx, [esp + 0x14]
lea edx, [esp + 0x34]
push eax
push ecx
lea eax, [esp + 0x11c]
push edx
push eax
call fcn.004e7840
add esp, 0xc
lea ecx, [esp + 0x10c]
push eax
push ecx
call fcn.004e7720
mov edx, eax
mov eax, dword [edx]
mov dword [esp + 0x70], eax
mov eax, dword [edx + 4]
mov dword [esp + 0x74], eax
sub eax, 0x3000
mov ecx, dword [edx + 8]
mov dword [esp + 0x74], eax
lea edx, [esp + 0x70]
mov dword [esp + 0x78], ecx
lea eax, [esp + 0x7c]
push edx
lea ecx, [esp + 0x68]
push eax
push ecx
call fcn.004e7760
mov edx, dword [eax]
mov dword [esp + 0x28], ebx
mov dword [esp + 0x30], edx
mov ecx, dword [eax + 4]
mov dword [esp + 0x34], ecx
lea ecx, [esp + 0x30]
mov edx, dword [eax + 8]
lea eax, [esp + 0x28]
mov dword [esp + 0x38], edx
push eax
lea edx, [esp + 0x74]
push ecx
push edx
call fcn.004e7870
add esp, 0x24
lea ecx, [esp + 0x64]
push eax
call fcn.004e7590
lea eax, [esp + 0x24]
lea ecx, [esp + 0x18]
push eax
mov dword [esp + 0x28], 8
call fcn.004e7680
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x74]
call fcn.004e7590
mov edx, dword [esi + 0x370]
lea eax, [esp + 0x18]
push edx
lea ecx, [esp + 0x74]
push eax
lea edx, [esp + 0x6c]
push ecx
push edx
mov ecx, esi
call fcn.0042b300
mov eax, dword [esp + 0x130]
lea ecx, [esp + 0x18]
push eax
lea edx, [esp + 0x68]
push ecx
push edx
mov ecx, esi
call fcn.0042b460
mov ebp, eax
cmp ebp, 0xffffffff
jne 0x42ba2b
xor ebp, ebp
mov eax, ebp
pop ebp
pop ebx
jmp 0x42bb31
cmp ebp, edi
push 0x48
je 0x42ba6a
call fcn.004088a0
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov dword [esp + 0x128], edi
je 0x42baa6
mov ecx, dword [0x6a9038]
push edi
push 0x80
push 0xff
push edi
push ecx
lea edx, [esp + 0x84]
lea ecx, [esp + 0x78]
push edx
push ecx
jmp 0x42ba9f
call fcn.004088a0
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov dword [esp + 0x128], ebx
je 0x42baa6
push edi
push 0x80
lea edx, [esp + 0x6c]
push 0xff
push edx
lea ecx, [esp + 0x80]
push edi
lea edx, [esp + 0x78]
push ecx
push edx
mov ecx, eax
call fcn.004282f0
test byte [esi + 5], 0x80
mov dword [esp + 0x128], 0xffffffff
jne 0x42bb29
push 0x70
call fcn.004088a0
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov dword [esp + 0x128], 2
je 0x42bb06
push ebx
push 0xa
push 0x14
push 0x28
push 0xa
push 0x14
push ebx
push 0x14
push 0x32
push edi
push edi
push edi
push edi
push 0x20
push edi
push 0x80
push 0xff
lea ecx, [esp + 0xa8]
push 5
push ecx
mov ecx, eax
call fcn.0043bee0
lea edx, [esp + 0x70]
lea eax, [esp + 0x64]
push edx
lea ecx, [esi + 0x380]
push eax
push ecx
mov ecx, esi
mov dword [esp + 0x134], 0xffffffff
call fcn.0042b690
mov eax, ebp
pop ebp
pop ebx
jmp 0x42bb31
xor eax, eax
mov ecx, dword [esp + 0x118]
pop edi
pop esi
mov dword fs:[0], ecx
add esp, 0x11c
ret 4