Function at 0x4b75f8
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
mov ecx, 7
push 0
push 0
dec ecx
jne 0x4b7600
push ecx
push ebx
push esi
push edi
mov edi, dword [0x1344428]
xor eax, eax
push ebp
push 0x1287cf2
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xf
mov eax, edi
mov ecx, 1
mov edx, dword [0x125e4ec]
call fcn.00405c44
add esp, 4
mov dl, 1
mov eax, dword [0x11e8184]
call fcn.00403900
mov esi, eax
mov dl, 1
mov eax, dword [0x11e8184]
call fcn.00403900
mov dword [ebp - 8], eax
mov dl, 1
mov eax, dword [0x11e8184]
call fcn.00403900
mov ebx, eax
mov edx, 0x1287d08
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287d20
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287d38
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287d50
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287d68
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287d80
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287d98
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287db0
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287dc4
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287dd8
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287dec
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287e00
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287e14
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287e28
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287e3c
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287e50
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287e64
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287e78
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287e8c
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287ea0
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287eb4
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287ec8
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287edc
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287ef0
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287f04
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287f18
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287f2c
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287f40
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287f54
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287f68
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287f7c
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287f90
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287fa4
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287fb8
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287fcc
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287fe0
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1287ff4
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x1288008
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x128801c
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea edx, [ebp - 4]
mov eax, dword [ebp - 8]
call fcn.004d4114
mov eax, dword [edi]
mov edx, 0x1288030
call fcn.00404800
mov eax, dword [edi]
add eax, 4
mov edx, dword [ebp - 4]
call fcn.00404800
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [edi]
add eax, 8
mov edx, 0x1288048
call fcn.00404800
lea edx, [ebp - 0xc]
mov eax, esi
call fcn.004d4114
mov edx, dword [ebp - 0xc]
mov eax, dword [edi]
add eax, 0xc
call fcn.00404800
mov eax, dword [edi]
add eax, 0x10
mov edx, 0x128805c
call fcn.00404800
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 8]
call fcn.004d4114
mov edx, dword [ebp - 0x10]
mov eax, dword [edi]
add eax, 0x14
call fcn.00404800
mov eax, dword [edi]
add eax, 0x18
mov edx, 0x1288074
call fcn.00404800
lea edx, [ebp - 0x14]
mov eax, ebx
call fcn.004d4114
mov edx, dword [ebp - 0x14]
mov eax, dword [edi]
add eax, 0x1c
call fcn.00404800
mov eax, dword [edi]
add eax, 0x20
mov edx, 0x1288090
call fcn.00404800
lea edx, [ebp - 0x18]
mov eax, ebx
call fcn.004d4114
mov edx, dword [ebp - 0x18]
mov eax, dword [edi]
add eax, 0x24
call fcn.00404800
mov eax, dword [edi]
add eax, 0x28
mov edx, 0x12880ac
call fcn.00404800
lea edx, [ebp - 0x1c]
mov eax, ebx
call fcn.004d4114
mov edx, dword [ebp - 0x1c]
mov eax, dword [edi]
add eax, 0x2c
call fcn.00404800
mov eax, dword [edi]
add eax, 0x30
mov edx, 0x12880c4
call fcn.00404800
lea edx, [ebp - 0x20]
mov eax, esi
call fcn.004d4114
mov edx, dword [ebp - 0x20]
mov eax, dword [edi]
add eax, 0x34
call fcn.00404800
mov eax, dword [edi]
add eax, 0x38
mov edx, 0x12880d8
call fcn.00404800
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.004d4114
mov edx, dword [ebp - 0x24]
mov eax, dword [edi]
add eax, 0x3c
call fcn.00404800
mov eax, dword [edi]
add eax, 0x40
mov edx, 0x12880f4
call fcn.00404800
lea edx, [ebp - 0x28]
mov eax, esi
call fcn.004d4114
mov edx, dword [ebp - 0x28]
mov eax, dword [edi]
add eax, 0x44
call fcn.00404800
mov eax, dword [edi]
add eax, 0x48
mov edx, 0x1288108
call fcn.00404800
lea edx, [ebp - 0x2c]
mov eax, ebx
call fcn.004d4114
mov edx, dword [ebp - 0x2c]
mov eax, dword [edi]
add eax, 0x4c
call fcn.00404800
mov eax, dword [edi]
add eax, 0x50
mov edx, 0x128811c
call fcn.00404800
lea edx, [ebp - 0x30]
mov eax, ebx
call fcn.004d4114
mov edx, dword [ebp - 0x30]
mov eax, dword [edi]
add eax, 0x54
call fcn.00404800
mov eax, dword [edi]
add eax, 0x58
mov edx, 0x1288134
call fcn.00404800
lea edx, [ebp - 0x34]
mov eax, ebx
call fcn.004d4114
mov edx, dword [ebp - 0x34]
mov eax, dword [edi]
add eax, 0x5c
call fcn.00404800
mov eax, dword [edi]
add eax, 0x60
mov edx, 0x128814c
call fcn.00404800
mov eax, dword [edi]
add eax, 0x64
mov edx, 0x128814c
call fcn.00404800
mov eax, dword [edi]
add eax, 0x68
mov edx, 0x1288164
call fcn.00404800
lea edx, [ebp - 0x38]
mov eax, ebx
call fcn.004d4114
mov edx, dword [ebp - 0x38]
mov eax, dword [edi]
add eax, 0x6c
call fcn.00404800
mov eax, dword [edi]
add eax, 0x70
mov edx, 0x1287f2c
call fcn.00404800
lea edx, [ebp - 0x3c]
mov eax, ebx
call fcn.004d4114
mov edx, dword [ebp - 0x3c]
mov eax, dword [edi]
add eax, 0x74
call fcn.00404800
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x1288030
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x1288178
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x1288190
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x1288048
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x128805c
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x1287ff4
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x12881a4
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x12881bc
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x12880d8
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x12880c4
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x1288164
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x1288074
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x12880f4
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x1288134
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x1288090
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x12880ac
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x12881d0
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x128811c
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x1287f2c
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x12881e8
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x1288108
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x12881fc
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x1288214
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x128822c
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x1288244
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x128825c
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x1288274
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x1288288
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344528]
mov eax, dword [eax]
mov edx, 0x128829c
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x1344344]
mov eax, dword [eax]
mov edx, 0x12880d8
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x13444e4]
mov eax, dword [eax]
mov edx, 0x12882b0
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x13444e4]
mov eax, dword [eax]
mov edx, 0x12882c8
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x13444e4]
mov eax, dword [eax]
mov edx, 0x12882e0
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x13444e4]
mov eax, dword [eax]
mov edx, 0x12882f8
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x13444e4]
mov eax, dword [eax]
mov edx, 0x128830c
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x1287cf9
lea eax, [ebp - 0x3c]
mov edx, 0xd
call fcn.004047d0
lea eax, [ebp - 4]
call fcn.004047ac
ret