Function at 0x48f530
Capabilities:
Get number of processors
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x748620
mov eax, dword fs:[0]
push eax
sub esp, 0x64
mov eax, dword [0x81f390]
xor eax, esp
mov dword [esp + 0x60], eax
push esi
push edi
mov eax, dword [0x81f390]
xor eax, esp
push eax
lea eax, [esp + 0x70]
mov dword fs:[0], eax
mov edi, dword [esp + 0x80]
mov esi, dword [esp + 0x84]
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
lea eax, [esp + 0x40]
mov byte [esp + 0x78], 4
mov dword [esp + 0x50], eax
sub esp, 0x18
lea eax, [esp + 0x28]
mov byte [esp + 0x26], 1
mov dword [esp + 0x6c], eax
mov ecx, esp
lea eax, [esp + 0x34]
mov byte [esp + 0x27], 1
mov dword [esp + 0x70], eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x74], eax
lea eax, [esp + 0x26]
mov dword [esp + 0x78], eax
lea eax, [esp + 0x40]
mov dword [esp + 0x7c], eax
lea eax, [esp + 0x27]
mov dword [esp + 0x80], eax
lea eax, [esp + 0x68]
push eax
call fcn.004897c0
mov ecx, esi
call fcn.00540a50
push 0xa
push str.RuleAction
lea ecx, [esp + 0x5c]
mov dword [esp + 0x70], 0xf
mov dword [esp + 0x6c], 0
mov byte [esp + 0x5c], 0
call fcn.00409620
mov dword [esp + 0x50], vtable.wbs::StringBase_char_.0
lea eax, [esp + 0x40]
mov byte [esp + 0x78], 5
push eax
lea eax, [esp + 0x54]
mov ecx, edi
push eax
call fcn.00500cd0
cmp dword [esp + 0x68], 0x10
mov byte [esp + 0x78], 4
mov dword [esp + 0x50], vtable.wbs::StringBase_char_.0
jb 0x48f6b1
push dword [esp + 0x54]
call fcn.006f75a9
add esp, 4
push 8
push str.RuleType
lea ecx, [esp + 0x5c]
mov dword [esp + 0x70], 0xf
mov dword [esp + 0x6c], 0
mov byte [esp + 0x5c], 0
call fcn.00409620
mov dword [esp + 0x50], vtable.wbs::StringBase_char_.0
lea eax, [esp + 0x10]
mov byte [esp + 0x78], 6
push eax
lea eax, [esp + 0x54]
mov ecx, edi
push eax
call fcn.00500cd0
cmp dword [esp + 0x68], 0x10
mov byte [esp + 0x78], 4
mov dword [esp + 0x50], vtable.wbs::StringBase_char_.0
jb 0x48f714
push dword [esp + 0x54]
call fcn.006f75a9
add esp, 4
push 9
push str.RuleValue
lea ecx, [esp + 0x5c]
mov dword [esp + 0x70], 0xf
mov dword [esp + 0x6c], 0
mov byte [esp + 0x5c], 0
call fcn.00409620
mov dword [esp + 0x50], vtable.wbs::StringBase_char_.0
lea eax, [esp + 0x1c]
mov byte [esp + 0x78], 7
push eax
lea eax, [esp + 0x54]
mov ecx, edi
push eax
call fcn.00500cd0
cmp dword [esp + 0x68], 0x10
mov byte [esp + 0x78], 4
mov dword [esp + 0x50], vtable.wbs::StringBase_char_.0
jb 0x48f777
push dword [esp + 0x54]
call fcn.006f75a9
add esp, 4
cmp byte [esp + 0xe], 0
jne 0x48f7e1
push 0xc
push str.RuleReserved
lea ecx, [esp + 0x5c]
mov dword [esp + 0x70], 0xf
mov dword [esp + 0x6c], 0
mov byte [esp + 0x5c], 0
call fcn.00409620
mov dword [esp + 0x50], vtable.wbs::StringBase_char_.0
lea eax, [esp + 0x34]
mov byte [esp + 0x78], 8
push eax
lea eax, [esp + 0x54]
mov ecx, edi
push eax
call fcn.00501180
cmp dword [esp + 0x68], 0x10
mov byte [esp + 0x78], 4
mov dword [esp + 0x50], vtable.wbs::StringBase_char_.0
jb 0x48f7e1
push dword [esp + 0x54]
call fcn.006f75a9
add esp, 4
cmp byte [esp + 0xf], 0
jne 0x48f846
push 9
push str.RuleLimit
lea ecx, [esp + 0x5c]
mov dword [esp + 0x70], 0xf
mov dword [esp + 0x6c], 0
mov byte [esp + 0x5c], 0
call fcn.00409620
mov dword [esp + 0x50], vtable.wbs::StringBase_char_.0
lea eax, [esp + 0x28]
mov byte [esp + 0x78], 9
push eax
lea eax, [esp + 0x54]
mov ecx, edi
push eax
call fcn.00501180
cmp dword [esp + 0x68], 0x10
mov dword [esp + 0x50], vtable.wbs::StringBase_char_.0
jb 0x48f846
push dword [esp + 0x54]
call fcn.006f75a9
add esp, 4
mov eax, dword [esp + 0x28]
test eax, eax
je 0x48f86f
push eax
call fcn.006f75a9
add esp, 4
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
mov eax, dword [esp + 0x34]
test eax, eax
je 0x48f898
push eax
call fcn.006f75a9
add esp, 4
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov esi, dword [esp + 0x1c]
mov byte [esp + 0x78], 1
test esi, esi
je 0x48f8e4
mov edi, dword [esp + 0x20]
cmp esi, edi
je 0x48f8c3
lea ecx, [ecx]
mov eax, dword [esi]
mov ecx, esi
push 0
call dword [eax]
add esi, 0x1c
cmp esi, edi
jne 0x48f8b0
mov esi, dword [esp + 0x1c]
push esi
call fcn.006f75a9
add esp, 4
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
mov esi, dword [esp + 0x10]
mov byte [esp + 0x78], 0
test esi, esi
je 0x48f934
mov edi, dword [esp + 0x14]
cmp esi, edi
je 0x48f913
lea esp, [esp]
mov eax, dword [esi]
mov ecx, esi
push 0
call dword [eax]
add esi, 0x1c
cmp esi, edi
jne 0x48f900
mov esi, dword [esp + 0x10]
push esi
call fcn.006f75a9
add esp, 4
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov esi, dword [esp + 0x40]
mov dword [esp + 0x78], 0xffffffff
test esi, esi
je 0x48f96c
mov edi, dword [esp + 0x44]
cmp esi, edi
je 0x48f963
lea esp, [esp]
mov eax, dword [esi]
mov ecx, esi
push 0
call dword [eax]
add esi, 0x1c
cmp esi, edi
jne 0x48f950
mov esi, dword [esp + 0x40]
push esi
call fcn.006f75a9
add esp, 4
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.006f7ca4
add esp, 0x70
ret