Function at 0x4067ef
Capabilities:
Access peb ldr_data
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
mov eax, 0xa8516d
call fcn.00a6fc7c
push ecx
push ebx
push esi
mov esi, ecx
lea eax, [esi + 4]
mov ecx, eax
neg ecx
lea edx, [eax - 4]
sbb ecx, ecx
and ecx, edx
push edi
mov dword [ebp - 0x10], esi
mov dword [0xbd8fe4], ecx
xor edi, edi
mov dword [ebp - 4], edi
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0xafe5c0
push 0x1f
lea ecx, [esi + 0x18]
pop ebx
push 0x64
mov byte [ebp - 4], 1
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0xafe5bc
call fcn.00417b00
mov dword [esi + 0x38], edi
mov dword [esi + 0x3c], edi
mov dword [esi + 0x40], edi
mov dword [esi + 0x30], 0xafe5b8
lea ecx, [esi + 0x44]
push 0x64
mov byte [ebp - 4], 3
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0xafe5b4
call fcn.00417d5d
lea ecx, [esi + 0x5c]
push 0x64
mov byte [ebp - 4], 4
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0xafe5b0
call fcn.00417023
lea eax, [esi + 0x74]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0xafe5ac
lea ecx, [esi + 0x88]
push 0x64
mov byte [ebp - 4], 6
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0xafe5a8
call fcn.00417f88
lea eax, [esi + 0xa0]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0xafe5a4
lea ecx, [esi + 0xb4]
mov byte [ebp - 4], 8
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0xafe5a0
push 0x64
call fcn.004181b3
lea eax, [esi + 0xcc]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0xafe59c
lea ecx, [esi + 0xe0]
push 0x64
mov byte [ebp - 4], 0xa
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0xafe598
call fcn.0041855e
lea eax, [esi + 0xf8]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0xafe594
lea ecx, [esi + 0x10c]
push 0x64
mov byte [ebp - 4], 0xc
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0xafe590
call fcn.00418909
lea eax, [esi + 0x124]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0xafe58c
lea ecx, [esi + 0x138]
push 0x64
mov byte [ebp - 4], 0xe
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0xafe588
call fcn.00418b34
lea eax, [esi + 0x150]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0xafe584
lea ecx, [esi + 0x164]
push 0x64
mov byte [ebp - 4], 0x10
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0xafe580
call fcn.00418d5f
lea ecx, [esi + 0x17c]
push 0x64
mov byte [ebp - 4], 0x11
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0xafe57c
call fcn.0041906f
lea eax, [esi + 0x194]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0xafe578
lea ecx, [esi + 0x1a8]
mov byte [ebp - 4], 0x13
mov dword [ecx + 4], edi
push 0x64
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0xafe574
call fcn.0041941a
lea eax, [esi + 0x1c0]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0xafe570
lea ecx, [esi + 0x1d4]
push 0x64
mov byte [ebp - 4], 0x15
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0xafe56c
call fcn.004197fd
lea eax, [esi + 0x1ec]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0xafe568
lea ecx, [esi + 0x200]
push 0x64
mov byte [ebp - 4], 0x17
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0xafe564
call fcn.00419ba8
lea eax, [esi + 0x218]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0xafe560
lea ecx, [esi + 0x22c]
push 0x64
mov byte [ebp - 4], 0x19
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0xafe55c
call fcn.00419f53
lea eax, [esi + 0x244]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0xafe558
lea ecx, [esi + 0x258]
push 0x64
mov byte [ebp - 4], 0x1b
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0xafe554
call fcn.0041a2fe
lea eax, [esi + 0x270]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0xafe550
lea ecx, [esi + 0x284]
push 0x64
mov byte [ebp - 4], 0x1d
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0xafe54c
call fcn.0041a6a9
lea eax, [esi + 0x29c]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0xafe548
lea ecx, [esi + 0x2b0]
push 0x64
mov byte [ebp - 4], bl
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0xafe544
call fcn.0041aaa1
lea eax, [esi + 0x2c8]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0xafe540
lea ecx, [esi + 0x2dc]
push 0x64
mov byte [ebp - 4], 0x21
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0xafe53c
call fcn.0041ae4c
mov byte [ebp - 4], 0x22
call dword [fcn.00be18d4]
mov ecx, dword [ebp - 0xc]
mov dword [esi + 0x2f4], eax
pop edi
mov dword [esi], 0xafe538
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret