Function at 0x3af19440
Capabilities:
Access peb ldr_data
Get number of processors
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x3af2da9f
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
mov eax, dword [0x3af331e8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x54], ecx
mov eax, dword [ebp - 0x54]
mov dword [eax], vtable.DLLMgr.0
mov dword [ebp - 4], 5
mov ecx, dword [ebp - 0x54]
mov byte [ecx + 0x3c], 1
push 0x1388
mov edx, dword [ebp - 0x54]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [ebp - 0x54]
add ecx, 0x6c
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 0x54]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x40]
push ecx
mov ecx, dword [ebp - 0x54]
add ecx, 0x40
call fcn.3af1a380
mov edx, dword [eax]
mov dword [ebp - 0x10], edx
jmp 0x3af194d2
push 0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x10]
call fcn.3af1a470
lea ecx, [ebp - 0x48]
push ecx
mov ecx, dword [ebp - 0x54]
add ecx, 0x40
call fcn.3af1a3a0
push eax
lea ecx, [ebp - 0x10]
call fcn.3af1a4a0
movzx edx, al
test edx, edx
je 0x3af195f7
mov eax, 0x5b
mov word [ebp - 0x3c], ax
mov ecx, 0x2b
mov word [ebp - 0x3a], cx
mov edx, 0x5d
mov word [ebp - 0x38], dx
mov eax, 0x20
mov word [ebp - 0x36], ax
mov ecx, 0x25
mov word [ebp - 0x34], cx
mov edx, 0x73
mov word [ebp - 0x32], dx
mov eax, 0x20
mov word [ebp - 0x30], ax
mov ecx, 0x68
mov word [ebp - 0x2e], cx
mov edx, 0x61
mov word [ebp - 0x2c], dx
mov eax, 0x73
mov word [ebp - 0x2a], ax
mov ecx, 0x20
mov word [ebp - 0x28], cx
mov edx, 0x64
mov word [ebp - 0x26], dx
mov eax, 0x65
mov word [ebp - 0x24], ax
mov ecx, 0x6c
mov word [ebp - 0x22], cx
mov edx, 0x65
mov word [ebp - 0x20], dx
mov eax, 0x74
mov word [ebp - 0x1e], ax
mov ecx, 0x65
mov word [ebp - 0x1c], cx
mov edx, 0x64
mov word [ebp - 0x1a], dx
xor eax, eax
mov word [ebp - 0x18], ax
lea ecx, [ebp - 0x10]
call fcn.3af1aca0
mov ecx, eax
call fcn.3af1a1e0
push eax
lea ecx, [ebp - 0x3c]
push ecx
push 0x3af351f8
call fcn.3af1d820
add esp, 0xc
lea ecx, [ebp - 0x10]
call fcn.3af1aca0
mov edx, dword [eax + 0x1c]
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x3af195eb
push 1
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [edx]
call eax
mov dword [ebp - 0x58], eax
jmp 0x3af195f2
mov dword [ebp - 0x58], 0
jmp 0x3af194c4
mov ecx, dword [ebp - 0x54]
add ecx, 0x40
call fcn.3af1a430
mov ecx, dword [ebp - 0x54]
add ecx, 0xc
call fcn.3af20cd0
mov ecx, dword [ebp - 0x54]
add ecx, 0x24
call fcn.3af20cd0
mov ecx, dword [ebp - 0x54]
add ecx, 0x18
call fcn.3af20cd0
mov ecx, dword [ebp - 0x54]
add ecx, 0x30
call fcn.3af20cd0
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x54]
add ecx, 0x40
call fcn.3af19420
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x54]
add ecx, 0x30
call fcn.3af20b80
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x54]
add ecx, 0x24
call fcn.3af20b80
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x54]
add ecx, 0x18
call fcn.3af20b80
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x54]
add ecx, 0xc
call fcn.3af20b80
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x54]
call fcn.3af205c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.3af212b5
mov esp, ebp
pop ebp
ret