Function at 0x48e520
Capabilities:
Get process heap force flags

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4c6758
push eax
mov dword fs:[0], esp
sub esp, 0x18
push edi
mov edi, ecx
fld dword [esp + 0x30]
fcomp dword [0x4fc4b8]
mov ecx, dword [esp + 0x2c]
fnstsw ax
test ah, 0x44
jp 0x48e581
test ecx, ecx
mov dword [esp + 0x24], 0xffffffff
je 0x48e752
dec dword [ecx + 4]
jne 0x48e752
mov eax, dword [ecx]
push 1
call dword [eax]
pop edi
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
add esp, 0x24
ret 0x10
mov al, byte [ecx + 0x20]
mov edx, dword [ecx + 0x14]
push ebx
mov bl, byte [esp + 0x38]
test bl, bl
je 0x48e597
test al, al
jne 0x48e59c
inc edx
jmp 0x48e59c
test al, al
je 0x48e59c
dec edx
fld dword [esp + 0x34]
fcomp dword [0x4fc4b8]
fnstsw ax
test ah, 0x41
jne 0x48e714
push esi
mov al, byte [ecx + 0x29]
test al, al
jne 0x48e713
mov eax, dword [edi + 0x20]
mov eax, dword [eax + edx*4]
fld dword [eax + 4]
fld dword [eax]
fsub dword [ecx + 8]
fstp dword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov dword [esp + 0x1c], eax
fsub dword [ecx + 0xc]
mov dword [esp + 0xc], eax
fst dword [esp + 0x20]
mov eax, dword [esp + 0x20]
fld dword [esp + 0x14]
mov dword [esp + 0x10], eax
fmul dword [esp + 0x14]
fld st(1)
fmul st(2)
faddp st(1)
fst dword [esp + 0x3c]
fstp st(1)
fcom dword [0x4fc4b8]
fnstsw ax
test ah, 0x44
jp 0x48e615
fstp st(0)
fld dword [0x4fc4b8]
jmp 0x48e617
fsqrt
fld dword [esp + 0x3c]
fcom dword [0x4fc4b8]
fnstsw ax
test ah, 0x44
jnp 0x48e651
fsqrt
fcom dword [0x4fc4b8]
fnstsw ax
test ah, 0x44
jnp 0x48e651
fdivr dword [0x4f1a10]
fld dword [esp + 0x14]
fmul st(1)
fstp dword [esp + 0xc]
fmul dword [esp + 0x10]
fstp dword [esp + 0x10]
jmp 0x48e653
fstp st(0)
fld dword [esp + 0x38]
fsub st(1)
fcom dword [0x4fc4b8]
fld dword [esp + 0xc]
fnstsw ax
test ah, 0x41
jne 0x48e674
fmul st(2)
fld dword [esp + 0x10]
fmul st(3)
jmp 0x48e680
fmul dword [esp + 0x38]
fld dword [esp + 0x10]
fmul dword [esp + 0x38]
fxch st(2)
fstp dword [esp + 0x38]
fld st(0)
fadd dword [ecx + 8]
fstp dword [ecx + 8]
fxch st(1)
fld st(0)
fadd dword [ecx + 0xc]
fstp dword [ecx + 0xc]
fld st(1)
fmul st(2)
fld st(1)
fmul st(2)
faddp st(1)
fxch st(2)
fstp st(1)
fstp st(0)
fcom dword [0x4fc4b8]
fnstsw ax
test ah, 0x44
jp 0x48e6bf
fstp st(0)
fld dword [0x4fc4b8]
jmp 0x48e6c1
fsqrt
fsubrp st(1)
fabs
fcomp dword [0x4f1a10]
fnstsw ax
test ah, 5
jp 0x48e6fe
test bl, bl
je 0x48e6f3
mov esi, dword [edi + 0x20]
test esi, esi
jne 0x48e6e1
xor eax, eax
jmp 0x48e6e9
mov eax, dword [edi + 0x24]
sub eax, esi
sar eax, 2
add eax, 0xfffffff6
cmp edx, eax
jge 0x48e6fa
inc edx
jmp 0x48e6fe
test edx, edx
jle 0x48e6fa
dec edx
jmp 0x48e6fe
mov byte [ecx + 0x29], 1
fld dword [esp + 0x38]
fcomp dword [0x4fc4b8]
fnstsw ax
test ah, 0x41
je 0x48e5b2
pop esi
mov al, byte [esp + 0x3c]
test al, al
je 0x48e730
test bl, bl
je 0x48e729
cmp byte [ecx + 0x20], 0
jne 0x48e730
dec edx
jmp 0x48e730
cmp byte [ecx + 0x20], 0
je 0x48e730
inc edx
test al, al
mov dword [ecx + 0x14], edx
jne 0x48e73a
mov byte [ecx + 0x20], bl
mov eax, dword [ecx + 4]
dec eax
mov dword [esp + 0x28], 0xffffffff
pop ebx
mov dword [ecx + 4], eax
jne 0x48e752
mov edx, dword [ecx]
push 1
call dword [edx]
mov ecx, dword [esp + 0x1c]
pop edi
mov dword fs:[0], ecx
add esp, 0x24
ret 0x10