Function at 0x4967c0
Capabilities:
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x4d7e28
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
push ebx
push ebp
mov ebp, ecx
xor ebx, ebx
mov ecx, dword [esp + 0x30]
push ebx
mov dword [esp + 0x20], ebx
call fcn.004825a0
push eax
lea ecx, [esp + 0x1c]
call fcn.004ccea6
lea ecx, [esp + 0x18]
mov dword [esp + 0x28], ebx
call fcn.004cce2e
fld qword [ebp + 0x270]
fcom qword [0x4dc810]
fnstsw ax
test ah, 0x40
jne 0x496afc
mov eax, dword [ebp + 0x278]
mov ecx, dword [ebp + 0x27c]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
fld qword [esp + 0x10]
fcomp qword [0x4dc810]
fnstsw ax
test ah, 0x40
jne 0x496afc
fabs
fcomp qword [0x4e4900]
fnstsw ax
test ah, 0x41
jne 0x496afe
mov edx, dword [ebp + 0x270]
mov eax, dword [ebp + 0x274]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
fld qword [esp + 8]
fsub qword [0x4dbc18]
fabs
fcomp qword [0x4e4900]
fnstsw ax
test ah, 0x41
je 0x49689a
fld qword [esp + 0x10]
fabs
fcomp qword [0x4e48f8]
fnstsw ax
test ah, 0x41
jne 0x496afe
mov eax, dword [ebp + 0x1a4]
cmp eax, 6
je 0x496afe
cmp eax, 7
je 0x496afe
cmp eax, ebx
jne 0x4968e5
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
push ecx
mov ecx, dword [esp + 0xc]
push edx
mov edx, dword [esp + 0x40]
push eax
mov eax, dword [esp + 0x40]
push ecx
push edx
push eax
call fcn.00496490
add esp, 0x18
mov dword [esp + 0x1c], eax
jmp 0x496afe
cmp dword [ebp + 0x1b4], 1
jne 0x496ad0
fld qword [ebp + 0x278]
push esi
mov esi, dword [esp + 0x38]
fstp dword [esp + 0xc]
fld qword [ebp + 0x270]
push edi
mov edi, esi
fstp dword [esp + 0x18]
fld dword [esp + 0x18]
fsub dword [0x4e3748]
fabs
fcom qword [0x4e48e8]
fnstsw ax
test ah, 1
je 0x49693e
fld dword [esp + 0x10]
fabs
fcomp qword [0x4e48e8]
fnstsw ax
test ah, 1
jne 0x496a82
fld dword [esp + 0x10]
fabs
fcomp qword [0x4e48e8]
fnstsw ax
test ah, 1
je 0x4969b9
mov eax, dword [esp + 0x40]
cmp eax, ebx
fstp st(0)
jle 0x496a84
lea ebx, [eax]
xor ecx, ecx
mov cx, word [edi]
mov dword [esp + 0x40], ecx
fild dword [esp + 0x40]
fmul dword [esp + 0x18]
fcom qword [0x4e48e0]
fnstsw ax
test ah, 0x41
jne 0x496988
fstp st(0)
mov word [esi], 0x7fff
jmp 0x4969ac
fcom qword [0x4e48d8]
fnstsw ax
test ah, 1
je 0x49699e
fstp st(0)
mov word [esi], 0x8001
jmp 0x4969ac
fadd qword [0x4dbbc8]
call fcn.004cd7a0
mov word [esi], ax
add edi, 2
dec ebx
mov esi, edi
jne 0x496961
jmp 0x496a84
fcomp qword [0x4e48e8]
fnstsw ax
test ah, 1
mov eax, dword [esp + 0x40]
je 0x496a23
cmp eax, ebx
jle 0x496a84
lea ebx, [eax]
xor edx, edx
mov dx, word [edi]
mov dword [esp + 0x40], edx
fild dword [esp + 0x40]
fadd dword [esp + 0x10]
fcom qword [0x4e48e0]
fnstsw ax
test ah, 0x41
jne 0x4969fb
fstp st(0)
mov word [esi], 0x7fff
jmp 0x496a19
fcom qword [0x4e48d8]
fnstsw ax
test ah, 1
je 0x496a11
fstp st(0)
mov word [esi], 0x8001
jmp 0x496a19
call fcn.004cd7a0
mov word [esi], ax
add edi, 2
dec ebx
mov esi, edi
jne 0x4969d4
jmp 0x496a84
cmp eax, ebx
jle 0x496a84
lea ebx, [eax]
xor eax, eax
mov ax, word [edi]
mov dword [esp + 0x40], eax
fild dword [esp + 0x40]
fmul dword [esp + 0x18]
fadd dword [esp + 0x10]
fcom qword [0x4e48e0]
fnstsw ax
test ah, 0x41
jne 0x496a54
fstp st(0)
mov word [esi], 0x7fff
jmp 0x496a78
fcom qword [0x4e48d8]
fnstsw ax
test ah, 1
je 0x496a6a
fstp st(0)
mov word [esi], 0x8001
jmp 0x496a78
fadd qword [0x4dbbc8]
call fcn.004cd7a0
mov word [esi], ax
add edi, 2
dec ebx
mov esi, edi
jne 0x496a29
jmp 0x496a84
fstp st(0)
lea ecx, [esp + 0x40]
push 2
push ecx
lea ecx, [esp + 0x28]
call fcn.004cd05c
mov eax, dword [eax]
push 0x5073f8
push eax
call dword [0x4daa2c]
add esp, 8
lea ecx, [esp + 0x40]
test eax, eax
setne bl
call fcn.004ccc6c
pop edi
pop esi
test bl, bl
je 0x496afe
mov ecx, dword [esp + 0x30]
push 1
call fcn.00493510
mov dword [ebp + 0x1a4], 0
jmp 0x496afe
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
push edx
mov edx, dword [esp + 0xc]
push eax
mov eax, dword [esp + 0x40]
push ecx
mov ecx, dword [esp + 0x40]
push edx
push eax
push ecx
call fcn.00496620
add esp, 0x18
mov dword [esp + 0x1c], eax
jmp 0x496afe
fstp st(0)
lea ecx, [esp + 0x18]
mov dword [esp + 0x28], 0xffffffff
call fcn.004ccc6c
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x24
ret 0xc