Function at 0x405b85
Capabilities:
Access peb ldr_data
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
mov eax, 0x88cf35
call fcn.00879bb8
push ecx
push ebx
push esi
mov esi, ecx
lea eax, [esi + 4]
mov ecx, eax
neg ecx
lea edx, [eax - 4]
sbb ecx, ecx
and ecx, edx
push edi
mov dword [ebp - 0x10], esi
mov dword [0x973a90], ecx
xor edi, edi
mov dword [ebp - 4], edi
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0x8e8608
push 0x1f
lea ecx, [esi + 0x18]
pop ebx
push 0x64
mov byte [ebp - 4], 1
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0x8e8604
call fcn.00413eb6
mov dword [esi + 0x38], edi
mov dword [esi + 0x3c], edi
mov dword [esi + 0x40], edi
mov dword [esi + 0x30], 0x8e8600
lea ecx, [esi + 0x44]
push 0x64
mov byte [ebp - 4], 3
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0x8e85fc
call fcn.00414113
lea ecx, [esi + 0x5c]
push 0x64
mov byte [ebp - 4], 4
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0x8e85f8
call fcn.004134c9
lea eax, [esi + 0x74]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0x8e85f4
lea ecx, [esi + 0x88]
push 0x64
mov byte [ebp - 4], 6
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0x8e85f0
call fcn.0041433e
lea eax, [esi + 0xa0]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0x8e85ec
lea ecx, [esi + 0xb4]
mov byte [ebp - 4], 8
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0x8e85e8
push 0x64
call fcn.00414569
lea eax, [esi + 0xcc]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0x8e85e4
lea ecx, [esi + 0xe0]
push 0x64
mov byte [ebp - 4], 0xa
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0x8e85e0
call fcn.00414914
lea eax, [esi + 0xf8]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0x8e85dc
lea ecx, [esi + 0x10c]
push 0x64
mov byte [ebp - 4], 0xc
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0x8e85d8
call fcn.00414cbf
lea ecx, [esi + 0x124]
push 0x64
mov byte [ebp - 4], 0xd
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0x8e85d4
call fcn.0041513f
lea eax, [esi + 0x13c]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0x8e85d0
lea ecx, [esi + 0x150]
push 0x64
mov byte [ebp - 4], 0xf
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0x8e85cc
call fcn.004154ea
lea eax, [esi + 0x168]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0x8e85c8
lea ecx, [esi + 0x17c]
push 0x64
mov byte [ebp - 4], 0x11
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0x8e85c4
call fcn.00415895
lea eax, [esi + 0x194]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0x8e85c0
lea ecx, [esi + 0x1a8]
mov byte [ebp - 4], 0x13
mov dword [ecx + 4], edi
push 0x64
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0x8e85bc
call fcn.00415c40
lea eax, [esi + 0x1c0]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0x8e85b8
lea ecx, [esi + 0x1d4]
push 0x64
mov byte [ebp - 4], 0x15
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0x8e85b4
call fcn.00415feb
lea eax, [esi + 0x1ec]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0x8e85b0
lea ecx, [esi + 0x200]
push 0x64
mov byte [ebp - 4], 0x17
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0x8e85ac
call fcn.00416396
lea eax, [esi + 0x218]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0x8e85a8
lea ecx, [esi + 0x22c]
push 0x64
mov byte [ebp - 4], 0x19
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0x8e85a4
call fcn.00416741
lea eax, [esi + 0x244]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0x8e85a0
lea ecx, [esi + 0x258]
push 0x64
mov byte [ebp - 4], 0x1b
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0x8e859c
call fcn.00416b39
lea eax, [esi + 0x270]
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], 0x8e8598
lea ecx, [esi + 0x284]
push 0x64
mov byte [ebp - 4], 0x1d
mov dword [ecx + 4], edi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edi
mov dword [ecx], 0x8e8594
call fcn.00416ee4
mov byte [ebp - 4], 0x1e
call dword [fcn.0097b704]
mov ecx, dword [ebp - 0xc]
mov dword [esi + 0x29c], eax
pop edi
mov dword [esi], 0x8e8590
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret