Function at 0x42d7c0
Capabilities:
Access peb ldr_data
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x569d60
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5d72e0]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [esi + 0xee0]
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
push 0xffff0000
push 0
push 0x1101
push eax
call ebx
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Desktop.ZoneList
call fcn.004019c0
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x40], 0
call fcn.004ea360
or edi, 0xffffffff
mov ecx, eax
mov dword [esp + 0x40], edi
call fcn.004ea820
mov eax, dword [eax]
push 0xffff0002
push 0xffff0000
push 0
push 0
push 0
push 6
push 6
push eax
lea ecx, [esi + 0xec0]
push 0x23
mov dword [esp + 0x5c], 1
call fcn.00519f3b
mov dword [esi + 0xd90], eax
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov dword [esp + 0x38], edi
lea edx, [eax + 0xc]
lock xadd dword [edx], edi
dec edi
test edi, edi
jg 0x42d888
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
call fcn.0041fc60
lea ecx, [eax + 0x490]
call fcn.004b3090
mov edi, eax
test edi, edi
je 0x42d9eb
mov ecx, dword [esi + 0xd90]
push ecx
push edi
lea eax, [esi + 0xec0]
push eax
mov ecx, esi
call fcn.0042d210
test eax, eax
mov dword [esp + 0x18], eax
je 0x42d9c0
mov edx, dword [edi + 0x68]
mov ebp, dword [edx]
lea ebx, [edi + 0x64]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x24], ebp
cmp ebx, ebx
mov edi, dword [ebx + 4]
je 0x42d8e0
call fcn.0053123f
cmp ebp, edi
je 0x42d9b6
cmp ebp, dword [ebx + 4]
jne 0x42d8f2
call fcn.0053123f
mov edi, dword [ebp + 8]
test edi, edi
je 0x42d99e
mov eax, dword [esp + 0x18]
push eax
push edi
lea eax, [esi + 0xec0]
push eax
mov ecx, esi
call fcn.0042d210
mov ebx, eax
test ebx, ebx
je 0x42d99a
mov ecx, dword [edi + 0x68]
lea ebp, [edi + 0x64]
mov edi, dword [ecx]
cmp ebp, ebp
mov edx, dword [ebp + 4]
mov dword [esp + 0x2c], edx
je 0x42d933
call fcn.0053123f
cmp edi, dword [esp + 0x2c]
je 0x42d981
cmp edi, dword [ebp + 4]
jne 0x42d943
call fcn.0053123f
mov eax, dword [edi + 8]
test eax, eax
je 0x42d973
push ebx
push eax
lea eax, [esi + 0xec0]
push eax
mov ecx, esi
call fcn.0042d210
test eax, eax
je 0x42d973
push eax
mov eax, dword [esi + 0xee0]
push 2
push 0x1102
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp edi, dword [ebp + 4]
jne 0x42d97d
call fcn.0053123f
mov edi, dword [edi]
jmp 0x42d923
mov ecx, dword [esi + 0xee0]
push ebx
push 2
push 0x1102
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov ebp, dword [esp + 0x24]
mov ebx, dword [esp + 0x14]
cmp ebp, dword [ebx + 4]
jne 0x42d9a8
call fcn.0053123f
mov edx, dword [ebp]
mov dword [esp + 0x24], edx
mov ebp, edx
jmp 0x42d8d4
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [esp + 0x18]
push eax
mov eax, dword [esi + 0xee0]
push 2
push 0x1102
push eax
call ebx
call fcn.0041fc60
lea ecx, [eax + 0x490]
call fcn.004b3100
mov edi, eax
test edi, edi
jne 0x42d8a2
mov ecx, dword [esi + 0xd90]
mov edx, dword [esi + 0xee0]
push ecx
push 2
push 0x1102
push edx
call ebx
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x28
ret