Function at 0x4ef198
Capabilities:
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x11
push 0
push 0
dec ecx
jne 0x4ef1a0
push ebx
push esi
push edi
mov ebx, eax
lea esi, [ebp - 2]
lea edi, [ebp - 4]
xor eax, eax
push ebp
push 0x4ef81d
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x2c]
mov eax, 2
call fcn.00402b2c
cmp dword [ebp - 0x2c], 0
je 0x4ef1ee
lea edx, [ebp - 0x30]
mov eax, 2
call fcn.00402b2c
mov eax, dword [ebp - 0x30]
call fcn.0040cbb8
fstp qword [ebp - 0x10]
wait
jmp 0x4ef1f7
call fcn.0040b5bc
fstp qword [ebp - 0x10]
wait
push dword [ebp - 0xc]
push dword [ebp - 0x10]
lea ecx, [ebx + 0x16]
lea edx, [ebx + 0x18]
lea eax, [ebx + 0x14]
call fcn.0040b4c4
push dword [ebp - 0xc]
push dword [ebp - 0x10]
lea eax, [ebp - 0x34]
call fcn.0040c36c
mov edx, dword [ebp - 0x34]
lea eax, [ebx + 0x20]
call fcn.00404a84
lea eax, [ebp - 0x38]
push eax
movzx eax, word [ebx + 0x14]
imul eax, eax, 0x2710
movzx edx, word [ebx + 0x18]
imul edx, edx, 0x64
add eax, edx
movzx edx, word [ebx + 0x16]
add eax, edx
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x3c], 0
lea edx, [ebp - 0x40]
xor ecx, ecx
mov eax, 0x4ef834
call fcn.0040a424
mov edx, dword [ebp - 0x38]
lea eax, [ebx + 0x1c]
call fcn.00404a84
mov cx, word [ebx + 0x16]
mov dx, word [ebx + 0x18]
mov ax, word [ebx + 0x14]
call fcn.0040b348
fstp qword [ebp - 0x18]
wait
mov cx, 1
mov dx, word [ebx + 0x18]
mov ax, word [ebx + 0x14]
call fcn.0040b348
fstp qword [ebp - 0x20]
wait
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
lea ecx, [ebp - 6]
mov edx, edi
mov eax, esi
call fcn.0040b4c4
lea eax, [ebp - 0x44]
push eax
movzx eax, word [esi]
imul eax, eax, 0x2710
movzx edx, word [edi]
imul edx, edx, 0x64
add eax, edx
movzx edx, word [ebp - 6]
add eax, edx
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x3c], 0
lea edx, [ebp - 0x40]
xor ecx, ecx
mov eax, 0x4ef834
call fcn.0040a424
mov edx, dword [ebp - 0x44]
lea eax, [ebx + 0x34]
call fcn.00404a84
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
mov eax, 1
call fcn.0040b638
fsub dword [0x4ef838]
fstp qword [ebp - 0x28]
wait
push dword [ebp - 0x24]
push dword [ebp - 0x28]
lea ecx, [ebp - 6]
mov edx, edi
mov eax, esi
call fcn.0040b4c4
lea eax, [ebp - 0x48]
push eax
movzx eax, word [esi]
imul eax, eax, 0x2710
movzx edx, word [edi]
imul edx, edx, 0x64
add eax, edx
movzx edx, word [ebp - 6]
add eax, edx
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x3c], 0
lea edx, [ebp - 0x40]
xor ecx, ecx
mov eax, 0x4ef834
call fcn.0040a424
mov edx, dword [ebp - 0x48]
lea eax, [ebx + 0x38]
call fcn.00404a84
push dword [ebp - 0x14]
push dword [ebp - 0x18]
or eax, 0xffffffff
call fcn.0040b638
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x4c]
mov eax, 0x4ef844
call fcn.0040c3b0
mov eax, dword [ebp - 0x4c]
call fcn.004096a0
push eax
push dword [ebp - 0x14]
push dword [ebp - 0x18]
or eax, 0xffffffff
call fcn.0040b638
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x50]
mov eax, 0x4ef850
call fcn.0040c3b0
mov eax, dword [ebp - 0x50]
call fcn.004096a0
mov cx, 1
pop edx
call fcn.0040b348
fstp qword [ebp - 0x20]
wait
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
mov eax, 1
call fcn.0040b638
fsub dword [0x4ef838]
fstp qword [ebp - 0x28]
wait
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
lea ecx, [ebp - 6]
mov edx, edi
mov eax, esi
call fcn.0040b4c4
lea eax, [ebp - 0x54]
push eax
movzx eax, word [esi]
imul eax, eax, 0x2710
movzx edx, word [edi]
imul edx, edx, 0x64
add eax, edx
movzx edx, word [ebp - 6]
add eax, edx
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x3c], 0
lea edx, [ebp - 0x40]
xor ecx, ecx
mov eax, 0x4ef834
call fcn.0040a424
mov edx, dword [ebp - 0x54]
lea eax, [ebx + 0x24]
call fcn.00404a84
push dword [ebp - 0x24]
push dword [ebp - 0x28]
lea ecx, [ebp - 6]
mov edx, edi
mov eax, esi
call fcn.0040b4c4
lea eax, [ebp - 0x58]
push eax
movzx eax, word [esi]
imul eax, eax, 0x2710
movzx edx, word [edi]
imul edx, edx, 0x64
add eax, edx
movzx edx, word [ebp - 6]
add eax, edx
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x3c], 0
lea edx, [ebp - 0x40]
xor ecx, ecx
mov eax, 0x4ef834
call fcn.0040a424
mov edx, dword [ebp - 0x58]
lea eax, [ebx + 0x28]
call fcn.00404a84
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
or eax, 0xffffffff
call fcn.0040b638
add esp, 0xfffffff8
fstp qword [esp]
wait
lea ecx, [ebp - 6]
mov edx, edi
mov eax, esi
call fcn.0040b4c4
lea eax, [ebp - 0x5c]
push eax
movzx eax, word [esi]
imul eax, eax, 0x2710
movzx edx, word [edi]
imul edx, edx, 0x64
add eax, edx
movzx edx, word [ebp - 6]
add eax, edx
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x3c], 0
lea edx, [ebp - 0x40]
xor ecx, ecx
mov eax, 0x4ef834
call fcn.0040a424
mov edx, dword [ebp - 0x5c]
lea eax, [ebx + 0x2c]
call fcn.00404a84
fld qword [ebp - 0x20]
fsub dword [0x4ef838]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea ecx, [ebp - 6]
mov edx, edi
mov eax, esi
call fcn.0040b4c4
lea eax, [ebp - 0x60]
push eax
movzx eax, word [esi]
imul eax, eax, 0x2710
movzx edx, word [edi]
imul edx, edx, 0x64
add eax, edx
movzx edx, word [ebp - 6]
add eax, edx
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x3c], 0
lea edx, [ebp - 0x40]
xor ecx, ecx
mov eax, 0x4ef834
call fcn.0040a424
mov edx, dword [ebp - 0x60]
lea eax, [ebx + 0x30]
call fcn.00404a84
push dword [ebp - 0x14]
push dword [ebp - 0x18]
lea edx, [ebp - 0x64]
mov eax, 0x4ef850
call fcn.0040c3b0
mov eax, dword [ebp - 0x64]
call fcn.004096a0
dec eax
mov cx, 1
mov dx, 0xa
call fcn.0040b348
add esp, 0xfffffff8
fstp qword [esp]
wait
push dword [ebp - 0x14]
push dword [ebp - 0x18]
lea edx, [ebp - 0x68]
mov eax, 0x4ef844
call fcn.0040c3b0
mov eax, dword [ebp - 0x68]
call fcn.004096a0
dec eax
mov ecx, 3
cdq
idiv ecx
lea eax, [eax + eax*2]
call fcn.0040b638
fstp qword [ebp - 0x20]
wait
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
mov eax, 3
call fcn.0040b638
fsub dword [0x4ef838]
fstp qword [ebp - 0x28]
wait
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
lea ecx, [ebp - 6]
mov edx, edi
mov eax, esi
call fcn.0040b4c4
lea eax, [ebp - 0x6c]
push eax
movzx eax, word [esi]
imul eax, eax, 0x2710
movzx edx, word [edi]
imul edx, edx, 0x64
add eax, edx
movzx edx, word [ebp - 6]
add eax, edx
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x3c], 0
lea edx, [ebp - 0x40]
xor ecx, ecx
mov eax, 0x4ef834
call fcn.0040a424
mov edx, dword [ebp - 0x6c]
lea eax, [ebx + 0x3c]
call fcn.00404a84
push dword [ebp - 0x24]
push dword [ebp - 0x28]
lea ecx, [ebp - 6]
mov edx, edi
mov eax, esi
call fcn.0040b4c4
lea eax, [ebp - 0x70]
push eax
movzx eax, word [esi]
imul eax, eax, 0x2710
movzx edx, word [edi]
imul edx, edx, 0x64
add eax, edx
movzx edx, word [ebp - 6]
add eax, edx
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x3c], 0
lea edx, [ebp - 0x40]
xor ecx, ecx
mov eax, 0x4ef834
call fcn.0040a424
mov edx, dword [ebp - 0x70]
lea eax, [ebx + 0x40]
call fcn.00404a84
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
mov eax, 0xfffffffd
call fcn.0040b638
fstp qword [ebp - 0x20]
wait
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
mov eax, 3
call fcn.0040b638
fsub dword [0x4ef838]
fstp qword [ebp - 0x28]
wait
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
lea ecx, [ebp - 6]
mov edx, edi
mov eax, esi
call fcn.0040b4c4
lea eax, [ebp - 0x74]
push eax
movzx eax, word [esi]
imul eax, eax, 0x2710
movzx edx, word [edi]
imul edx, edx, 0x64
add eax, edx
movzx edx, word [ebp - 6]
add eax, edx
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x3c], 0
lea edx, [ebp - 0x40]
xor ecx, ecx
mov eax, 0x4ef834
call fcn.0040a424
mov edx, dword [ebp - 0x74]
lea eax, [ebx + 0x44]
call fcn.00404a84
push dword [ebp - 0x24]
push dword [ebp - 0x28]
lea ecx, [ebp - 6]
mov edx, edi
mov eax, esi
call fcn.0040b4c4
lea eax, [ebp - 0x78]
push eax
movzx eax, word [esi]
imul eax, eax, 0x2710
movzx edx, word [edi]
imul edx, edx, 0x64
add eax, edx
movzx edx, word [ebp - 6]
add eax, edx
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x3c], 0
lea edx, [ebp - 0x40]
xor ecx, ecx
mov eax, 0x4ef834
call fcn.0040a424
mov edx, dword [ebp - 0x78]
lea eax, [ebx + 0x48]
call fcn.00404a84
push dword [ebp - 0x14]
push dword [ebp - 0x18]
lea edx, [ebp - 0x7c]
mov eax, 0x4ef850
call fcn.0040c3b0
mov eax, dword [ebp - 0x7c]
call fcn.004096a0
dec eax
mov cx, 1
mov dx, 1
call fcn.0040b348
fstp qword [ebp - 0x20]
wait
push dword [ebp - 0x14]
push dword [ebp - 0x18]
lea edx, [ebp - 0x80]
mov eax, 0x4ef850
call fcn.0040c3b0
mov eax, dword [ebp - 0x80]
call fcn.004096a0
dec eax
mov cx, 0x1f
mov dx, 0xc
call fcn.0040b348
fstp qword [ebp - 0x28]
wait
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
lea ecx, [ebp - 6]
mov edx, edi
mov eax, esi
call fcn.0040b4c4
lea eax, [ebp - 0x84]
push eax
movzx eax, word [esi]
imul eax, eax, 0x2710
movzx edx, word [edi]
imul edx, edx, 0x64
add eax, edx
movzx edx, word [ebp - 6]
add eax, edx
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x3c], 0
lea edx, [ebp - 0x40]
xor ecx, ecx
mov eax, 0x4ef834
call fcn.0040a424
mov edx, dword [ebp - 0x84]
lea eax, [ebx + 0x4c]
call fcn.00404a84
push dword [ebp - 0x24]
push dword [ebp - 0x28]
lea ecx, [ebp - 6]
mov edx, edi
mov eax, esi
call fcn.0040b4c4
lea eax, [ebp - 0x88]
push eax
movzx eax, word [esi]
imul eax, eax, 0x2710
movzx edx, word [edi]
imul edx, edx, 0x64
add eax, edx
movzx edx, word [ebp - 6]
add eax, edx
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x3c], 0
lea edx, [ebp - 0x40]
xor ecx, ecx
mov eax, 0x4ef834
call fcn.0040a424
mov edx, dword [ebp - 0x88]
lea eax, [ebx + 0x50]
call fcn.00404a84
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ef824
lea eax, [ebp - 0x88]
mov edx, 0x12
call fcn.00404a54
lea eax, [ebp - 0x38]
mov edx, 4
call fcn.00404a54
ret