Function at 0x4a26a0
Capabilities:
Access peb ldr_data
Get process heap flags
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4db166
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x170
push ebx
push ebp
push esi
push edi
push fcn.004011f0
push fcn.00426a10
push 3
lea eax, [esp + 0x50]
push 0xc
push eax
call fcn.004ce784
mov ecx, dword [esp + 0x194]
mov esi, dword [esp + 0x198]
mov edi, dword [esp + 0x190]
mov dword [esp + 0x188], 0
mov eax, dword [ecx]
lea ebx, [esi + 0xc]
push ebx
push esi
lea edx, [eax + eax*2]
lea eax, [edi + edx*4]
mov dword [esp + 0x1c], eax
call fcn.0043e550
fstp dword [esp + 0x70]
lea ebp, [esi + 0x18]
push ebp
push ebx
call fcn.0043e550
fstp dword [esp + 0x7c]
push esi
push ebp
call fcn.0043e550
mov ebx, dword [esp + 0x1b4]
xor ecx, ecx
fstp dword [esp + 0x88]
fld dword [ebx]
fadd st(0), st(0)
mov dword [esp + 0x54], ecx
add esp, 0x18
mov dword [esp + 0x40], ecx
mov byte [esp + 0x13], cl
mov ebp, edi
mov dword [esp + 0x38], 0xffffffff
fstp dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov dword [esp + 0x1c], ebp
mov ecx, eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x34], ecx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
lea eax, [ecx - 0x18]
cmp edi, eax
je 0x4a2b87
lea edi, [ecx - 0xc]
jmp 0x4a2791
mov ebp, dword [esp + 0x1c]
lea edx, [esp + 0xc0]
push ebp
push edx
lea ecx, [esp + 0x4c]
call fcn.004051b0
lea esi, [ebp + 0xc]
cmp esi, edi
mov dword [esp + 0x74], esi
mov dword [esp + 0x18], esi
je 0x4a2b74
lea eax, [esp + 0x174]
push esi
push eax
lea ecx, [esp + 0x58]
call fcn.004051b0
push esi
push ebp
call fcn.0043e550
fld st(0)
fsub dword [esp + 0x70]
add esp, 8
fabs
fld dword [ebx]
fcompp
fnstsw ax
test ah, 0x41
je 0x4a280f
fld st(0)
fsub dword [esp + 0x6c]
fabs
fld dword [ebx]
fcompp
fnstsw ax
test ah, 0x41
je 0x4a280f
fld st(0)
fsub dword [esp + 0x70]
fabs
fld dword [ebx]
fcompp
fnstsw ax
test ah, 0x41
jne 0x4a2bc2
mov eax, dword [esp + 0x14]
lea ebx, [esi + 0xc]
fstp dword [esp + 0x78]
cmp ebx, eax
je 0x4a2b53
jmp 0x4a282c
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
lea ecx, [esp + 0x108]
push ebx
push ecx
lea ecx, [esp + 0x64]
call fcn.004051b0
push ebx
push esi
call fcn.0043e550
fstp dword [esp + 0x84]
push ebp
push ebx
call fcn.0043e550
fstp dword [esp + 0x90]
or ebp, 0xffffffff
add esp, 0x10
mov edi, ebp
mov dword [esp + 0x40], ebp
mov dword [esp + 0x38], ebp
mov dword [esp + 0x3c], edi
xor edx, edx
xor ecx, ecx
lea esi, [esp + 0x78]
fld dword [esi]
fsub dword [esp + edx + 0x68]
mov eax, dword [esp + 0x19c]
fabs
fld st(0)
fcomp dword [eax]
fnstsw ax
test ah, 1
je 0x4a28ad
fcom dword [esp + edx + 0x20]
fnstsw ax
test ah, 1
je 0x4a28ad
fstp dword [esp + edx + 0x20]
mov dword [esp + edx + 0x38], ecx
mov ebp, dword [esp + 0x40]
mov edi, dword [esp + 0x3c]
jmp 0x4a28af
fstp st(0)
inc ecx
add esi, 4
cmp ecx, 3
jl 0x4a2876
add edx, 4
cmp edx, 0xc
jl 0x4a2870
mov eax, dword [esp + 0x38]
cmp eax, 0xffffffff
je 0x4a2b24
cmp edi, 0xffffffff
je 0x4a2b24
cmp ebp, 0xffffffff
je 0x4a2b24
cmp eax, edi
je 0x4a2b24
cmp edi, ebp
je 0x4a2b24
cmp ebp, eax
je 0x4a2b24
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x28]
sub eax, 0
mov dword [esp + 0x30], edx
mov dword [esp + 0x34], ecx
je 0x4a2a80
dec eax
je 0x4a29d2
dec eax
jne 0x4a2b1d
mov eax, edi
sub eax, 0
je 0x4a2983
dec eax
jne 0x4a2b1d
mov esi, dword [esp + 0x1a0]
lea edx, [esp + 0x50]
lea eax, [esp + 0xa8]
push edx
push eax
lea ecx, [esi + 0x18]
call fcn.004051b0
lea ecx, [esp + 0x44]
lea edx, [esp + 0x168]
push ecx
push edx
mov ecx, esi
call fcn.004051b0
lea eax, [esp + 0x5c]
lea ecx, [esp + 0x84]
push eax
push ecx
lea ecx, [esi + 0xc]
call fcn.004051b0
mov byte [esp + 0x13], 1
jmp 0x4a2b3c
mov esi, dword [esp + 0x1a0]
lea edx, [esp + 0x50]
lea eax, [esp + 0x120]
push edx
push eax
lea ecx, [esi + 0x18]
call fcn.004051b0
lea ecx, [esp + 0x44]
lea edx, [esp + 0xd8]
push ecx
push edx
lea ecx, [esi + 0xc]
call fcn.004051b0
lea eax, [esp + 0x5c]
lea ecx, [esp + 0x150]
push eax
push ecx
mov ecx, esi
call fcn.004051b0
mov byte [esp + 0x13], 1
jmp 0x4a2b3c
mov eax, edi
sub eax, 0
je 0x4a2a31
sub eax, 2
jne 0x4a2b1d
mov esi, dword [esp + 0x1a0]
lea edx, [esp + 0x50]
lea eax, [esp + 0xf0]
push edx
push eax
mov ecx, esi
call fcn.004051b0
lea ecx, [esp + 0x44]
lea edx, [esp + 0x138]
push ecx
push edx
lea ecx, [esi + 0x18]
call fcn.004051b0
lea eax, [esp + 0x5c]
lea ecx, [esp + 0x90]
push eax
push ecx
lea ecx, [esi + 0xc]
call fcn.004051b0
mov byte [esp + 0x13], 1
jmp 0x4a2b3c
mov esi, dword [esp + 0x1a0]
lea edx, [esp + 0x50]
lea eax, [esp + 0x9c]
push edx
push eax
lea ecx, [esi + 0xc]
call fcn.004051b0
lea ecx, [esp + 0x44]
lea edx, [esp + 0xb4]
push ecx
push edx
lea ecx, [esi + 0x18]
call fcn.004051b0
lea eax, [esp + 0x5c]
lea ecx, [esp + 0xcc]
push eax
push ecx
mov ecx, esi
call fcn.004051b0
mov byte [esp + 0x13], 1
jmp 0x4a2b3c
mov eax, edi
dec eax
je 0x4a2ad8
dec eax
jne 0x4a2b1d
mov esi, dword [esp + 0x1a0]
lea edx, [esp + 0x50]
lea eax, [esp + 0xe4]
push edx
push eax
mov ecx, esi
call fcn.004051b0
lea ecx, [esp + 0x44]
lea edx, [esp + 0xfc]
push ecx
push edx
lea ecx, [esi + 0xc]
call fcn.004051b0
lea eax, [esp + 0x5c]
lea ecx, [esp + 0x114]
push eax
push ecx
lea ecx, [esi + 0x18]
call fcn.004051b0
mov byte [esp + 0x13], 1
jmp 0x4a2b3c
mov esi, dword [esp + 0x1a0]
lea edx, [esp + 0x44]
lea eax, [esp + 0x12c]
push edx
push eax
mov ecx, esi
call fcn.004051b0
lea ecx, [esp + 0x50]
lea edx, [esp + 0x144]
push ecx
push edx
lea ecx, [esi + 0xc]
call fcn.004051b0
lea eax, [esp + 0x5c]
lea ecx, [esp + 0x15c]
push eax
push ecx
lea ecx, [esi + 0x18]
call fcn.004051b0
mov byte [esp + 0x13], 1
jmp 0x4a2b3c
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
mov eax, dword [esp + 0x14]
add ebx, 0xc
cmp ebx, eax
jne 0x4a2824
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x19c]
mov edx, dword [esp + 0x14]
add esi, 0xc
mov dword [esp + 0x18], esi
lea edi, [edx - 0xc]
cmp esi, edi
jne 0x4a27b6
mov esi, dword [esp + 0x74]
mov eax, dword [esp + 0x14]
mov dword [esp + 0x1c], esi
add eax, 0xffffffe8
cmp esi, eax
jne 0x4a278d
push fcn.004011f0
push 3
lea ecx, [esp + 0x4c]
push 0xc
push ecx
mov dword [esp + 0x198], 0xffffffff
call fcn.004ce690
mov ecx, dword [esp + 0x180]
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x17c
ret
fstp st(0)
jmp 0x4a2b5a