Function at 0x42bb50
Capabilities:
Check for peb ntglobalflag flag
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x536a28
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x104
push ebx
push esi
mov esi, ecx
push edi
mov ecx, dword [esi + 0x380]
xor edi, edi
lea ebx, [esi + 0x380]
cmp ecx, edi
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x40], edi
mov dword [esp + 0x44], edi
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edi
mov dword [esp + 0x54], edi
mov dword [esp + 0x58], edi
mov dword [esp + 0x5c], edi
mov dword [esp + 0x60], edi
mov dword [esp + 0x64], edi
mov dword [esp + 0x68], edi
mov dword [esp + 0xa8], edi
mov dword [esp + 0xac], edi
mov dword [esp + 0xb0], edi
mov word [esp + 0xb4], di
mov word [esp + 0xb6], di
mov word [esp + 0xb8], di
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x1c], ebx
je 0x42bc0f
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [ebx], edi
cmp word [esi + 0x38], 0x132
je 0x42bc2b
mov ecx, dword [esp + 0x120]
push ecx
mov ecx, esi
call fcn.0042b760
jmp 0x42bf7a
mov eax, dword [esi + 0x218]
test ah, 0x10
jne 0x42bf78
cmp word [esi + 0x12a], 0xb
jne 0x42bf78
cmp word [esi + 0x128], 3
jl 0x42bf78
push ebp
lea edx, [esi + 8]
push 0x64
or ah, 0x10
push edx
push 2
mov dword [esi + 0x218], eax
call fcn.004e5da0
add eax, 9
add esp, 4
or ah, 0x80
push eax
call fcn.00471ea0
push edi
lea eax, [esp + 0x44]
push esi
push eax
call fcn.00453d60
mov ebx, 1
lea ecx, [esp + 0x64]
push ebx
push esi
push ecx
call fcn.00453d60
push 2
lea edx, [esp + 0x50]
push esi
push edx
call fcn.00453d60
lea eax, [esp + 0x54]
lea ecx, [esp + 0x64]
push eax
lea edx, [esp + 0x13c]
push ecx
push edx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x4c], ebx
call fcn.004e7840
add esp, 0x3c
lea ecx, [esp + 0x28]
lea edx, [esp + 0xf0]
push eax
lea eax, [esp + 0x14]
push eax
push ecx
push edx
call fcn.004e7840
add esp, 0xc
push eax
lea eax, [esp + 0xec]
push eax
call fcn.004e7720
mov ecx, eax
mov edx, dword [ecx]
mov dword [esp + 0x4c], edx
lea edx, [esp + 0x4c]
mov eax, dword [ecx + 4]
push edx
mov dword [esp + 0x54], eax
sub eax, 0x6000
mov ecx, dword [ecx + 8]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], ecx
mov ecx, dword [esp + 0x60]
sub ecx, 0x3000
lea eax, [esp + 0x5c]
mov dword [esp + 0x60], ecx
lea ecx, [esp + 0xf4]
push eax
push ecx
call fcn.004e7760
mov edx, dword [eax]
mov dword [esp + 0x28], 2
mov dword [esp + 0x2c], edx
mov ecx, dword [eax + 4]
mov dword [esp + 0x30], ecx
lea ecx, [esp + 0x2c]
mov edx, dword [eax + 8]
lea eax, [esp + 0x28]
mov dword [esp + 0x34], edx
push eax
lea edx, [esp + 0x100]
push ecx
push edx
call fcn.004e77a0
add esp, 0x24
lea ecx, [esp + 0x40]
push eax
call fcn.004e7590
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
mov dword [esp + 0x14], 9
call fcn.004e7680
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x50]
call fcn.004e7590
mov ebx, dword [esp + 0x124]
mov ebp, dword [esp + 0x128]
cmp ebx, edi
je 0x42bdca
mov edx, dword [esi + 0x370]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x50]
push eax
lea edx, [esp + 0x48]
push ecx
push edx
mov ecx, esi
call fcn.0042b300
jmp 0x42be16
cmp ebp, edi
je 0x42be16
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0x10]
sub eax, 0x28000
mov dword [esp + 0x50], eax
mov dword [esp + 0x4c], ecx
lea eax, [esp + 0x40]
mov dword [esp + 0x54], edx
lea ecx, [esp + 0x4c]
push eax
lea edx, [esp + 0x100]
push ecx
push edx
call fcn.004e7760
mov ecx, dword [eax]
add esp, 0xc
mov dword [esp + 0x14], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x18], edx
mov eax, dword [eax + 8]
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x14]
push ebx
lea edx, [esp + 0x44]
push ecx
push edx
mov ecx, esi
call fcn.0042b460
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x42be4b
mov esi, dword [esp + 0x20]
mov ecx, dword [esi]
cmp ecx, edi
je 0x42be3f
mov eax, dword [ecx]
push 1
call dword [eax]
xor ebx, ebx
mov dword [esi], edi
mov eax, ebx
pop ebp
jmp 0x42bf7a
cmp ebp, edi
je 0x42be79
push 0x48
call fcn.004088a0
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov dword [esp + 0x11c], edi
je 0x42bef2
push 0xff
push 0x64
push 0x64
push edi
push ebp
jmp 0x42bee1
cmp ebx, edi
push 0x48
je 0x42beb7
call fcn.004088a0
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov dword [esp + 0x11c], 1
je 0x42bef2
mov ecx, dword [0x6a9038]
push 0xff
push 0x64
push 0x64
push edi
push ecx
lea edx, [esp + 0x60]
lea ecx, [esp + 0x54]
push edx
push ecx
jmp 0x42beeb
call fcn.004088a0
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov dword [esp + 0x11c], 2
je 0x42bef2
push 0xff
push 0x64
lea edx, [esp + 0x48]
push 0x64
push edx
push edi
lea ecx, [esp + 0x60]
lea edx, [esp + 0x54]
push ecx
push edx
mov ecx, eax
call fcn.004282f0
test byte [esi + 5], 0x80
mov dword [esp + 0x11c], 0xffffffff
jne 0x42bf73
push 0x70
call fcn.004088a0
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov dword [esp + 0x11c], 3
je 0x42bf52
push 1
push 0xa
push 0x14
push 0x28
push 0xa
push 0x14
push 1
push 0x14
push 0x32
push edi
push edi
push edi
push edi
push 0x20
push 0xff
push 0x64
push 0x64
lea ecx, [esp + 0x84]
push 5
push ecx
mov ecx, eax
call fcn.0043bee0
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x4c]
lea eax, [esp + 0x40]
push edx
push eax
push ecx
mov ecx, esi
mov dword [esp + 0x128], 0xffffffff
call fcn.0042b690
mov eax, ebx
pop ebp
jmp 0x42bf7a
xor eax, eax
mov ecx, dword [esp + 0x110]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x110
ret 8