Function at 0x4a2e58
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Get number of processors
Get process heap flags
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0
push ebx
mov ebx, eax
xor eax, eax
push ebp
push 0x4a390d
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebx + 4], eax
xor eax, eax
mov dword [ebx + 8], eax
lea eax, [ebx + 0xc]
mov edx, 0x4a3920
call fcn.004054e4
xor eax, eax
mov dword [ebx + 0x10], eax
lea eax, [ebx + 0x14]
call fcn.00405490
lea eax, [ebx + 0x18]
call fcn.00405490
lea eax, [ebx + 0x1c]
call fcn.00405490
mov byte [ebx + 0x20], 1
mov byte [ebx + 0x21], 0
xor eax, eax
mov dword [ebx + 0x24], eax
lea eax, [ebx + 0x28]
call fcn.00405490
lea eax, [ebx + 0x2c]
call fcn.00405490
lea eax, [ebx + 0x30]
call fcn.00405490
mov byte [ebx + 0x34], 1
lea eax, [ebx + 0x38]
mov edx, 0x4a392c
call fcn.004054e4
mov dword [ebx + 0x3c], 0x5dc
mov dword [ebx + 0x40], 0xea60
mov byte [ebx + 0x44], 1
xor eax, eax
mov dword [ebx + 0x48], eax
mov dword [ebx + 0x4c], 0x4e20
mov dword [ebx + 0x50], 5
lea eax, [ebx + 0x54]
call fcn.00405490
mov byte [ebx + 0x58], 1
mov byte [ebx + 0x59], 1
mov byte [ebx + 0x5a], 1
mov byte [ebx + 0x5b], 1
mov byte [ebx + 0x5c], 1
mov byte [ebx + 0x5d], 0
lea eax, [ebx + 0x64]
call fcn.00405490
mov byte [ebx + 0x68], 0
mov byte [ebx + 0x69], 0
mov byte [ebx + 0x6a], 1
mov byte [ebx + 0x6b], 0
mov byte [ebx + 0x6c], 1
mov byte [ebx + 0x6d], 0
mov byte [ebx + 0x6e], 1
mov byte [ebx + 0x6f], 0
lea eax, [ebx + 0x70]
mov edx, 0x4a3968
call fcn.004054e4
lea eax, [ebx + 0x74]
call fcn.00405490
mov byte [ebx + 0x1b1], 0
mov eax, dword [ebx + 0x188]
call fcn.004845e8
mov eax, dword [ebx + 0x18c]
call fcn.004845e8
lea eax, [ebx + 0x1d8]
call fcn.00405490
lea eax, [ebx + 0x1dc]
call fcn.00405490
lea eax, [ebx + 0x1e0]
call fcn.00405490
mov byte [ebx + 0x1e4], 0
mov dword [ebx + 0x78], 0x3e8
mov dword [ebx + 0x7c], 0x14
mov dword [ebx + 0x80], 0x12c
mov byte [ebx + 0x84], 0
mov byte [ebx + 0x85], 0
mov byte [ebx + 0x86], 0
mov byte [ebx + 0x85], 0
mov byte [ebx + 0x86], 0
mov byte [ebx + 0x87], 1
mov byte [ebx + 0x88], 1
xor eax, eax
mov dword [ebx + 0x8c], eax
mov byte [ebx + 0x90], 0
lea eax, [ebp - 4]
call fcn.005a268c
mov edx, dword [ebp - 4]
lea eax, [ebx + 0x94]
call fcn.004054e4
mov byte [ebx + 0x98], 1
mov byte [ebx + 0x99], 1
mov byte [ebx + 0x9a], 1
mov byte [ebx + 0x9b], 1
mov byte [ebx + 0x9c], 1
mov byte [ebx + 0x9d], 0
mov byte [ebx + 0x9e], 0
mov byte [ebx + 0x9f], 1
mov byte [ebx + 0xa0], 0
mov byte [ebx + 0xa1], 0
mov byte [ebx + 0xa2], 0
mov byte [ebx + 0xa3], 0
mov byte [ebx + 0xa4], 0
mov byte [ebx + 0xa5], 0
mov byte [ebx + 0xa6], 0
mov byte [ebx + 0xa7], 1
mov byte [ebx + 0xa8], 0
mov byte [ebx + 0xa9], 1
mov byte [ebx + 0xb1], 0
mov byte [ebx + 0xb8], 0
mov byte [ebx + 0xb9], 0
xor edx, edx
mov eax, ebx
call fcn.004a6ce4
movzx edx, byte [0x4a3974]
mov eax, ebx
call fcn.004a6cfc
lea eax, [ebx + 0xac]
call fcn.00405490
mov byte [ebx + 0xc4], 0
mov byte [ebx + 0xc4], 1
mov dword [ebx + 0xc0], 2
mov dword [ebx + 0xc8], 3
lea eax, [ebx + 0xcc]
call fcn.00405490
lea eax, [ebx + 0xd0]
call fcn.00405490
lea eax, [ebx + 0xd4]
call fcn.00405490
lea eax, [ebx + 0xd8]
call fcn.00405490
lea eax, [ebx + 0xdc]
mov edx, 0x4a3980
call fcn.004054e4
mov byte [ebx + 0xe0], 0
mov byte [ebx + 0xe1], 1
mov byte [ebx + 0xe2], 0
mov byte [ebx + 0xe3], 1
mov byte [ebx + 0xab], 0
mov byte [ebx + 0xaa], 1
mov byte [ebx + 0xe4], 0
mov byte [ebx + 0xe5], 0
mov byte [ebx + 0xe6], 0
mov byte [ebx + 0xe7], 1
mov byte [ebx + 0xe8], 1
mov byte [ebx + 0xe9], 0
mov byte [ebx + 0xea], 0
mov eax, dword [ebx + 0xec]
mov edx, dword [eax]
call dword [edx + 0x44]
mov byte [ebx + 0xf0], 0
mov byte [ebx + 0xf1], 1
mov dword [ebx + 0xf4], 0x7a
mov dword [ebx + 0xf8], 0xffff
xor eax, eax
mov dword [ebx + 0xfc], eax
mov dword [ebx + 0x100], 0x40
mov byte [ebx + 0x104], 0
mov byte [ebx + 0x105], 0
xor eax, eax
mov dword [ebx + 0x108], eax
mov byte [ebx + 0x10c], 0
mov byte [ebx + 0x10d], 0
mov byte [ebx + 0x10e], 0
mov byte [ebx + 0x10f], 0
mov byte [ebx + 0x110], 1
mov byte [ebx + 0x111], 0
lea eax, [ebx + 0x114]
call fcn.00405490
mov byte [ebx + 0x11a], 1
mov byte [ebx + 0x118], 0
mov byte [ebx + 0x119], 0
mov byte [ebx + 0x11b], 0
lea eax, [ebx + 0x11c]
call fcn.00405490
mov byte [ebx + 0x120], 0
mov byte [ebx + 0x121], 0
lea eax, [ebx + 0x124]
call fcn.00405490
mov byte [ebx + 0x128], 0
mov byte [ebx + 0x130], 0
mov byte [ebx + 0x131], 0
mov byte [ebx + 0x132], 0
mov byte [ebx + 0x133], 1
lea eax, [ebx + 0x134]
call fcn.00405490
lea eax, [ebx + 0x138]
call fcn.00405490
mov byte [ebx + 0x13c], 0
lea eax, [ebx + 0x140]
call fcn.00405490
mov byte [ebx + 0x144], 0
lea eax, [ebx + 0x148]
call fcn.00405490
lea eax, [ebx + 0x14c]
call fcn.00405490
lea eax, [ebx + 0x150]
call fcn.00405490
mov byte [ebx + 0x154], 0
lea eax, [ebx + 0x158]
call fcn.00405490
lea eax, [ebx + 0x15c]
call fcn.00405490
mov byte [ebx + 0x163], 0
mov byte [ebx + 0x164], 0
mov byte [ebx + 0x161], 0
mov byte [ebx + 0x162], 0
mov byte [ebx + 0x160], 0
lea eax, [ebx + 0x168]
call fcn.00405490
mov byte [ebx + 0x16c], 1
mov byte [ebx + 0x16d], 1
mov dword [ebx + 0x170], 3
xor eax, eax
mov dword [ebx + 0x174], eax
mov byte [ebx + 0x178], 1
mov byte [ebx + 0x179], 1
mov byte [ebx + 0x17a], 1
mov byte [ebx + 0x17b], 1
mov byte [ebx + 0x17c], 1
mov byte [ebx + 0x17d], 0
mov dword [ebx + 0x180], 1
mov byte [ebx + 0x184], 0
mov byte [ebx + 0x190], 0
mov byte [ebx + 0x191], 0
mov byte [ebx + 0x192], 0
mov byte [ebx + 0x193], 0
mov byte [ebx + 0x194], 0
mov byte [ebx + 0x195], 0
mov byte [ebx + 0x196], 0
mov byte [ebx + 0x197], 0
mov byte [ebx + 0x198], 0
mov byte [ebx + 0x199], 0
mov byte [ebx + 0x19a], 0
mov byte [ebx + 0x19b], 0
mov byte [ebx + 0x19c], 0
mov byte [ebx + 0x19d], 0
xor eax, eax
mov dword [ebx + 0x1a0], eax
xor eax, eax
mov dword [ebx + 0x1a4], eax
mov byte [ebx + 0x1a8], 1
mov byte [ebx + 0x1a9], 1
mov byte [ebx + 0xb8], 0
mov byte [ebx + 0x1aa], 0
lea eax, [ebx + 0x1ac]
call fcn.00405490
mov dword [ebx + 0x60], 0x32
mov byte [ebx + 0x1b0], 0
mov byte [ebx + 0x1b2], 0
mov byte [ebx + 0x1b3], 0
mov byte [ebx + 0x1b4], 0
mov byte [ebx + 0x1b5], 0
mov byte [ebx + 0x1b6], 0
mov byte [ebx + 0x1b7], 0
lea eax, [ebx + 0x1b8]
call fcn.00405490
mov byte [ebx + 0x1bc], 1
mov byte [ebx + 0x1bd], 0
lea eax, [ebx + 0x1c0]
mov edx, 0x4a398c
call fcn.004054e4
lea eax, [ebx + 0x1c4]
mov edx, 0x4a398c
call fcn.004054e4
xor eax, eax
mov dword [ebx + 0x1c8], eax
mov dword [ebx + 0x1cc], 1
mov byte [ebx + 0x1d0], 0
mov byte [ebx + 0x1d1], 1
mov byte [ebx + 0x1d2], 1
mov byte [ebx + 0x1d3], 0
mov byte [ebx + 0x1d4], 0
mov byte [ebx + 0x1d5], 0
lea eax, [ebx + 0x1d8]
call fcn.00405490
lea eax, [ebx + 0x1dc]
call fcn.00405490
lea eax, [ebx + 0x1e0]
call fcn.00405490
mov byte [ebx + 0x1e4], 0
lea eax, [ebx + 0x1e8]
mov edx, 0x4a39a0
call fcn.004054e4
lea eax, [ebx + 0x1ec]
call fcn.00405490
lea eax, [ebx + 0x1f0]
call fcn.00405490
lea eax, [ebx + 0x1f4]
call fcn.00405490
lea eax, [ebx + 0x1f8]
call fcn.00405490
lea eax, [ebx + 0x1fc]
call fcn.00405490
lea eax, [ebx + 0x200]
call fcn.00405490
lea eax, [ebx + 0x204]
call fcn.00405490
xor eax, eax
mov dword [ebx + 0x208], eax
lea eax, [ebx + 0x20c]
call fcn.00405490
lea eax, [ebx + 0x210]
call fcn.00405490
lea eax, [ebx + 0x214]
call fcn.00405490
lea eax, [ebx + 0x218]
call fcn.00405490
lea eax, [ebx + 0x21c]
call fcn.00405490
lea eax, [ebx + 0x220]
call fcn.00405490
lea eax, [ebx + 0x224]
call fcn.00405490
lea eax, [ebx + 0x228]
call fcn.00405490
lea eax, [ebx + 0x22c]
call fcn.00405490
lea eax, [ebx + 0x230]
call fcn.00405490
mov dword [ebx + 0x234], 0x1f4
mov dword [ebx + 0x238], 0xffffffff
lea eax, [ebx + 0x240]
call fcn.00405490
mov byte [ebx + 0x23c], 0
lea eax, [ebx + 0x244]
call fcn.00405490
lea eax, [ebx + 0x248]
call fcn.00405490
lea eax, [ebx + 0x24c]
call fcn.00405490
lea eax, [ebx + 0x240]
call fcn.00405490
mov byte [ebx + 0x250], 0
lea eax, [ebx + 0x25c]
call fcn.00405490
lea eax, [ebx + 0x260]
call fcn.00405490
lea eax, [ebx + 0x254]
call fcn.00405490
lea eax, [ebx + 0x258]
call fcn.00405490
lea eax, [ebx + 0x264]
call fcn.00411b68
lea eax, [ebx + 0x268]
call fcn.00411b68
lea eax, [ebx + 0x26c]
call fcn.00411b68
lea eax, [ebx + 0x270]
call fcn.00411b68
lea eax, [ebx + 0x274]
call fcn.00411b68
mov byte [ebx + 0x278], 1
mov byte [ebx + 0x279], 1
lea eax, [ebx + 0x27c]
call fcn.00405490
lea eax, [ebx + 0x280]
call fcn.00405490
lea eax, [ebx + 0x284]
call fcn.00405490
lea eax, [ebx + 0x288]
call fcn.00405490
lea eax, [ebx + 0x28c]
call fcn.00405490
lea eax, [ebx + 0x290]
call fcn.00405490
mov dword [ebx + 0x2a0], 2
mov dword [ebx + 0x2a4], 2
mov dword [ebx + 0x2a8], 2
mov dword [ebx + 0x2ac], 2
mov dword [ebx + 0x2b0], 2
mov dword [ebx + 0x2b4], 2
mov dword [ebx + 0x2b8], 2
mov dword [ebx + 0x2bc], 2
mov dword [ebx + 0x2c0], 2
mov dword [ebx + 0x2c4], 2
mov dword [ebx + 0x2c8], 2
mov dword [ebx + 0x2cc], 2
mov dword [ebx + 0x2d0], 2
mov dword [ebx + 0x2d4], 2
mov dword [ebx + 0x2d8], 2
mov dword [ebx + 0x2dc], 2
mov dword [ebx + 0x2e0], 2
mov dword [ebx + 0x2e4], 2
mov dword [ebx + 0x2e8], 2
mov dword [ebx + 0x2ec], 2
mov dword [ebx + 0x2f0], 2
mov dword [ebx + 0x2f4], 2
mov dword [ebx + 0x2f8], 2
mov dword [ebx + 0x2fc], 2
mov dword [ebx + 0x300], 2
mov dword [ebx + 0x304], 2
xor eax, eax
mov dword [ebx + 0x308], eax
mov byte [ebx + 0x185], 0
lea eax, [ebx + 0x30c]
call fcn.00405490
mov byte [ebx + 0x310], 1
mov byte [ebx + 0x311], 1
mov dword [ebx + 0x314], 3
mov dword [ebx + 0x318], 1
mov byte [ebx + 0x31c], 0
mov byte [ebx + 0x31d], 0
mov byte [ebx + 0x31e], 0
mov byte [ebx + 0x31f], 0
mov byte [ebx + 0x320], 0
mov dword [ebx + 0x324], 2
lea eax, [ebx + 0x328]
call fcn.00405490
lea eax, [ebx + 0x32c]
call fcn.00405490
lea eax, [ebx + 0x330]
call fcn.00405490
xor eax, eax
mov dword [ebx + 0x334], eax
xor eax, eax
mov dword [ebx + 0x338], eax
xor eax, eax
mov dword [ebx + 0x33c], eax
xor eax, eax
mov dword [ebx + 0x340], eax
mov byte [ebx + 0x344], 0
mov byte [ebx + 0x345], 1
mov byte [ebx + 0x346], 1
mov dword [ebx + 0x348], 1
xor eax, eax
mov dword [ebx + 0x34c], eax
mov dword [ebx + 0x350], 7
mov byte [ebx + 0x354], 0
lea eax, [ebx + 0x358]
call fcn.00405490
mov byte [ebx + 0x35c], 0
mov byte [ebx + 0x35d], 0
mov byte [ebx + 0x35e], 0
xor eax, eax
mov dword [ebx + 0x360], eax
lea eax, [ebx + 0x364]
call fcn.00405490
lea eax, [ebx + 0x368]
call fcn.00405490
lea eax, [ebx + 0x36c]
call fcn.00405490
xor eax, eax
mov dword [ebx + 0x370], eax
mov byte [ebx + 0x374], 0
mov byte [ebx + 0x375], 0
mov byte [ebx + 0x376], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a3914
lea eax, [ebp - 4]
call fcn.00405490
ret