Function at 0x47d2c0
Capabilities:
Get number of processors
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x4b9cdf
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
push ebx
push ebp
push esi
push edi
push fcn.00419230
push fcn.00419210
mov esi, ecx
push 6
push 0x10
lea eax, [esi + 4]
push eax
mov dword [esp + 0x34], esi
mov dword [esi], 0x4bd9d0
call fcn.004aa135
xor ebp, ebp
lea ecx, [esi + 0x64]
mov dword [esp + 0x30], ebp
call fcn.00419400
lea ecx, [esi + 0x90]
mov byte [esp + 0x30], 1
call fcn.00419210
lea ecx, [esi + 0xa0]
mov byte [esp + 0x30], 2
call fcn.00419210
push fcn.00419440
push fcn.00419400
push 3
push 0x2c
lea edi, [esi + 0xb0]
push edi
mov byte [esp + 0x44], 3
call fcn.004aa135
lea ecx, [esi + 0x134]
mov byte [esp + 0x30], 4
call fcn.00419400
lea ecx, [esi + 0x160]
mov byte [esp + 0x30], 5
call fcn.004195e0
lea ebx, [esi + 0x594]
mov ecx, ebx
mov byte [esp + 0x30], 6
call fcn.0045f490
push fcn.004052f0
push fcn.00404ca0
push 4
push 0x2c
lea ecx, [esi + 0x5b4]
push ecx
mov byte [esp + 0x44], 7
call fcn.004aa135
push fcn.004052f0
push fcn.00404ca0
push 4
push 0x2c
lea edx, [esi + 0x664]
push edx
mov byte [esp + 0x44], 8
call fcn.004aa135
mov eax, dword [0xec0e0c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x89500]
mov dword [esi + 0x424], edx
mov eax, dword [0xec0e0c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x89548]
mov dword [esi + 0x428], edx
mov eax, dword [0xec0e0c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x89590]
mov byte [esp + 0x30], 9
mov dword [esi + 0x450], edx
mov eax, dword [0xec0e0c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x895d8]
mov dword [esi + 0x454], edx
mov eax, dword [0xec0e0c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x89620]
mov dword [esi + 0x47c], edx
mov eax, dword [0xec0e0c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x89668]
mov dword [esi + 0x480], edx
mov eax, dword [0xec0e0c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x896b0]
mov dword [esi + 0x4a8], edx
mov eax, dword [0xec0e0c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x896f8]
mov dword [esi + 0x4ac], edx
mov eax, dword [0xec0e0c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x898a0]
mov dword [edi + 0x424], edx
mov eax, dword [0xec0e0c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x898e8]
mov dword [edi + 0x428], edx
mov eax, dword [0xec0e0c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x89930]
mov dword [edi + 0x450], edx
mov eax, dword [0xec0e0c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x89978]
mov dword [edi + 0x454], edx
mov eax, dword [0xec0e0c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x899c0]
mov dword [edi + 0x47c], edx
mov eax, dword [0xec0e0c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x89a08]
mov dword [edi + 0x480], edx
mov eax, dword [0xec0e0c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x89a50]
mov dword [edi + 0x4a8], edx
mov eax, dword [0xec0e0c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x89a98]
mov dword [edi + 0x4ac], edx
push 0x4b
push 4
mov ecx, ebx
mov dword [esi + 0x570], ebp
mov dword [esi + 0x574], ebp
mov dword [esi + 0x578], ebp
mov dword [esi + 0x57c], ebp
mov dword [esi + 0x580], ebp
mov dword [esi + 0x584], ebp
mov byte [esi + 0x588], 0xff
mov dword [esi + 0x58c], ebp
mov dword [esi + 0x590], ebp
call fcn.0045f4b0
lea ecx, [esi + 0x410]
mov edi, 8
mov edi, edi
mov byte [ecx + 0x11], 0xff
mov byte [ecx], 0
xor eax, eax
lea edx, [ecx + 0x20]
lea esp, [esp]
mov byte [ecx + eax + 0x1c], 0xff
mov dword [edx], ebp
inc eax
add edx, 4
cmp eax, 3
jl 0x47d550
add ecx, 0x2c
dec edi
jne 0x47d540
lea ecx, [esi + 0x18c]
mov byte [esi + 0x40c], 0
mov byte [esi + 0x40d], 0xff
xor eax, eax
mov dword [esp + 0x1c], ecx
mov ecx, dword [0xec0e0c]
xor ebx, ebx
jmp 0x47d590
mov edx, dword [ecx]
mov edi, dword [edx + ebx + 0x89fe0]
mov ebp, dword [edx + ebx + 0x8a028]
add edx, ebx
lea edx, [eax + 3]
cmp eax, edx
mov dword [esp + 0x10], eax
mov dword [esp + 0x20], edx
jge 0x47d619
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], eax
cmp dword [esp + 0x10], 5
jge 0x47d606
mov ecx, dword [ecx]
mov eax, dword [ecx + ebx + 0x8a100]
imul eax, dword [esp + 0x14]
mov edx, dword [ecx + ebx + 0x8a0b8]
add ecx, ebx
mov ecx, dword [ecx + 0x8a070]
add edx, ebp
push edx
mov edx, dword [esp + 0x1c]
add ecx, eax
add ecx, edi
push ecx
push ebp
add eax, edi
push eax
push edx
call dword [sym.imp.USER32.dll_SetRect]
mov ecx, dword [0xec0e0c]
mov edx, dword [esp + 0x20]
inc dword [esp + 0x10]
inc dword [esp + 0x14]
add dword [esp + 0x18], 0x10
cmp dword [esp + 0x10], edx
jl 0x47d5c1
mov edi, dword [esp + 0x1c]
add ebx, 0x3a0
add edi, 0x30
cmp ebx, 0x740
mov eax, edx
mov dword [esp + 0x1c], edi
jl 0x47d590
mov eax, dword [ecx]
mov ebp, dword [eax + 0x8a720]
mov eax, dword [eax + 0x8a768]
mov dword [esp + 0x24], eax
xor edi, edi
lea ebx, [esi + 0x1dc]
jmp 0x47d660
mov ecx, dword [0xec0e0c]
lea ebx, [ebx]
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x8a888]
mov edx, dword [ecx + 0x8a7f8]
imul eax, edi
mov ecx, dword [ecx + 0x8a7b0]
add edx, eax
add edx, dword [esp + 0x24]
add ecx, ebp
push edx
mov edx, dword [esp + 0x28]
push ecx
add eax, edx
push eax
push ebp
push ebx
call dword [sym.imp.USER32.dll_SetRect]
inc edi
add ebx, 0x10
cmp edi, 3
jl 0x47d654
lea ecx, [esi + 0x20c]
xor eax, eax
xor ebx, ebx
mov dword [esp + 0x14], ecx
jmp 0x47d6b0
mov edx, dword [0xec0e0c]
mov ecx, dword [edx]
mov edi, dword [ecx + ebx + 0x8aac0]
mov ebp, dword [ecx + ebx + 0x8ab08]
add ecx, ebx
lea ecx, [eax + 5]
cmp eax, ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x20], ecx
jge 0x47d74a
mov edx, dword [esp + 0x14]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], edx
cmp eax, 0x20
jge 0x47d72d
mov eax, dword [0xec0e0c]
mov ecx, dword [eax]
mov eax, dword [ecx + ebx + 0x8ac28]
imul eax, dword [esp + 0x1c]
mov edx, dword [ecx + ebx + 0x8ab98]
add ecx, ebx
mov ecx, dword [ecx + 0x8ab50]
add edx, eax
add edx, ebp
push edx
mov edx, dword [esp + 0x1c]
add ecx, edi
push ecx
add eax, ebp
push eax
push edi
push edx
call dword [sym.imp.USER32.dll_SetRect]
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
inc eax
inc edx
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x18]
add edx, 0x10
cmp eax, ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], edx
jl 0x47d6e7
mov edx, dword [esp + 0x14]
add ebx, 0x3a0
add edx, 0x50
cmp ebx, 0x1960
mov eax, ecx
mov dword [esp + 0x14], edx
jl 0x47d6b0
mov ecx, dword [esp + 0x28]
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x24
ret