Function at 0x46bf51
Capabilities:
Check for peb ntglobalflag flag

Disassembly:
push 0xffffffffffffffff
push 0x688c7b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x188
push ebx
push ebp
push esi
mov esi, ecx
push edi
lea ecx, [esp + 0xe8]
mov eax, dword [esi + 4]
mov ebx, dword [eax + 0x10]
call fcn.004ff6fd
mov ebp, 1
xor edi, edi
push ebp
push edi
push ecx
mov dword [esp + 0x1ac], edi
mov ecx, esp
mov dword [esp + 0x1c], esp
push edi
call fcn.0045cc6c
lea ecx, [esi + 0x136f]
push ecx
lea ecx, [esp + 0xf8]
call fcn.004ff89c
mov eax, 0x80
mov ecx, 6
mov dword [esp + 0xec], eax
mov dword [esp + 0xf0], eax
mov eax, 7
mov edx, 5
mov word [esp + 0x40], ax
mov word [esp + 0x46], ax
mov eax, 2
mov word [esp + 0x44], cx
mov word [esp + 0x4c], cx
mov word [esp + 0x50], dx
mov word [esp + 0x52], cx
mov word [esp + 0x58], dx
mov dword [esp + 0xfc], edi
mov dword [esp + 0x100], edi
mov word [esp + 0x3c], di
mov word [esp + 0x4a], ax
mov word [esp + 0x4e], ax
mov word [esp + 0x54], ax
mov ecx, 4
mov word [esp + 0x5a], ax
lea edx, [esp + 0x34]
lea edi, [esi + 0x10c6]
lea eax, [esp + 0x10]
mov word [esp + 0x56], cx
mov word [esp + 0x5e], cx
push edx
push eax
mov ecx, edi
mov word [esp + 0x46], bp
mov word [esp + 0x4a], bp
mov word [esp + 0x50], bp
mov word [esp + 0x64], 3
mov dword [esp + 0x3c], 0x20
mov dword [esp + 0x40], 0x630
call fcn.00574ca7
mov ecx, dword [eax]
mov dword [esp + 0x34], ecx
lea ecx, [esp + 0x10]
fild dword [esp + 0x34]
mov edx, dword [eax + 4]
lea eax, [esp + 0x2c]
mov dword [esp + 0x38], edx
push eax
fstp dword [esp + 0x24]
fild dword [esp + 0x3c]
push ecx
mov ecx, edi
mov dword [esp + 0x34], 0x70
mov dword [esp + 0x38], 0xbc
fstp dword [esp + 0x24]
call fcn.00574ca7
mov edx, eax
mov eax, dword [edx]
mov dword [esp + 0x2c], eax
mov ecx, dword [edx + 4]
mov ebp, eax
mov dword [esp + 0x10], ecx
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x60]
push eax
push ecx
mov ecx, edi
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x34], 0x70
mov dword [esp + 0x38], 0xc0
call fcn.00574ca7
fild dword [esp + 0x10]
mov ecx, dword [eax]
lea edx, [ebp + ebp]
mov dword [esp + 0x10], edx
mov dword [esp + 0x2c], ecx
fild dword [esp + 0x10]
mov edx, dword [eax + 4]
mov eax, dword [esp + 0x20]
fld dword [esp + 0x20]
mov dword [esp + 0x30], edx
mov dword [esp + 0x68], eax
fild dword [esp + 0x30]
fld dword [esp + 0x1c]
fxch st(3)
fadd dword [esp + 0x20]
fxch st(4)
fstp dword [esp + 0x60]
fxch st(1)
fadd dword [esp + 0x60]
fxch st(1)
fstp dword [esp + 0x10]
fxch st(1)
fadd dword [esp + 0x10]
fild dword [esp + 0x24]
fild dword [esp + 0x2c]
fld dword [esp + 0x20]
fadd st(2)
fxch st(4)
fadd st(2)
fxch st(1)
fstp dword [esp + 0x24]
fxch st(2)
fadd dword [esp + 0x24]
fxch st(3)
fstp dword [esp + 0x28]
fld dword [esp + 0x28]
fxch st(2)
mov eax, dword [esp + 0x28]
fst dword [esp + 0x28]
fld dword [esp + 0x28]
fld dword [esp + 0x1c]
fsub dword [esp + 0x24]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x78], eax
mov dword [esp + 0x6c], edx
mov ecx, ebx
fstp dword [esp + 0x24]
fld dword [esp + 0x1c]
fxch st(2)
fstp dword [esp + 0x88]
mov edx, dword [esp + 0x24]
fxch st(5)
fadd dword [esp + 0x60]
fxch st(1)
fadd dword [esp + 0x10]
fxch st(1)
mov eax, edx
mov dword [esp + 0x7c], edx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x8c], eax
fstp dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov dword [esp + 0x9c], edx
fld dword [esp + 0x20]
fxch st(1)
fstp dword [esp + 0x10]
mov edx, eax
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], edx
fld dword [esp + 0x10]
fxch st(4)
fstp dword [esp + 0x10]
mov edx, dword [esp + 0x10]
mov dword [esp + 0xac], eax
fxch st(4)
fstp dword [esp + 0xb8]
fxch st(1)
fstp dword [esp + 0xc8]
fxch st(2)
fstp dword [esp + 0xd8]
mov eax, edx
mov dword [esp + 0xbc], edx
fstp dword [esp + 0xdc]
mov dword [esp + 0xcc], eax
mov edx, dword [ebx]
fstp st(0)
call dword [edx + 0xd0]
xor ecx, ecx
mov cx, word [eax + 0xd84]
mov dword [esp + 0x10], ecx
fild dword [esp + 0x10]
fmul dword [0x7d9354]
fmul dword [0x7d930c]
fadd st(0), st(0)
fstp dword [esp + 0x1c]
fld dword [0x7d930c]
fmul dword [0x7d9368]
fld dword [esp + 0x1c]
fsub dword [0x7d9364]
fld dword [esp + 0x1c]
fld dword [esp + 0x1c]
fadd dword [0x7d930c]
fld st(3)
fxch st(2)
fsub st(4)
fxch st(2)
fadd dword [0x7d9364]
fld dword [0x7d930c]
fld dword [esp + 0x1c]
fsub dword [0x7d9358]
fst dword [esp + 0x10]
fld dword [esp + 0x10]
fcos
fmul qword [0x7d9344]
fsubr qword [0x7d9344]
fstp dword [esp + 0x84]
fsin
fsub qword [0x7d935c]
fmul qword [0x7d9344]
fstp dword [esp + 0x80]
fxch st(3)
fsub dword [0x7d9358]
fxch st(2)
fsub dword [0x7d9358]
fxch st(1)
fsubr dword [esp + 0x1c]
fxch st(4)
fstp dword [esp + 0x20]
fxch st(2)
fadd dword [esp + 0x20]
fld dword [esp + 0x20]
fld dword [esp + 0x20]
fcos
fmul qword [0x7d9344]
fsubr qword [0x7d9344]
fstp dword [esp + 0x94]
fxch st(2)
fst dword [esp + 0x10]
fld dword [esp + 0x10]
fxch st(3)
fsin
fsub qword [0x7d935c]
fmul qword [0x7d9344]
fstp dword [esp + 0x90]
fxch st(4)
fst dword [esp + 0x10]
fld dword [esp + 0x10]
fxch st(3)
fcos
fmul qword [0x7d9344]
mov edx, dword [esi + 0x137e]
push 0
lea eax, [esp + 0x14]
push 0
fsubr qword [0x7d9344]
fstp dword [esp + 0xac]
fxch st(3)
fst dword [esp + 0x18]
fld dword [esp + 0x18]
fxch st(5)
fsin
fsub qword [0x7d935c]
fmul qword [0x7d9344]
fstp dword [esp + 0xa8]
fxch st(1)
fst dword [esp + 0x18]
fld dword [esp + 0x18]
fxch st(3)
fcos
fmul qword [0x7d9344]
fsubr qword [0x7d9344]
fstp dword [esp + 0xbc]
fxch st(3)
fsin
fxch st(1)
fsin
fxch st(3)
fsin
fxch st(4)
fcos
fxch st(2)
fcos
fxch st(1)
fsub qword [0x7d935c]
fxch st(3)
fsub qword [0x7d935c]
fxch st(4)
fsub qword [0x7d935c]
fxch st(2)
fmul qword [0x7d9344]
fxch st(1)
fmul qword [0x7d9344]
fxch st(1)
fsubr qword [0x7d9344]
fxch st(3)
fmul qword [0x7d9344]
fxch st(1)
fsubr qword [0x7d9344]
fxch st(4)
fmul qword [0x7d9344]
fxch st(3)
fstp dword [esp + 0xcc]
fxch st(1)
fmul qword [0x7d9344]
fxch st(1)
fstp dword [esp + 0xb8]
fxch st(1)
fstp dword [esp + 0xc8]
fxch st(1)
fstp dword [esp + 0xdc]
fstp dword [esp + 0xd8]
fstp st(0)
fld dword [0x7d930c]
fmul dword [0x7d936c]
fld dword [esp + 0x24]
fld st(1)
fxch st(1)
fsub st(2)
fxch st(1)
fadd dword [0x7d9364]
fld dword [0x7d9314]
fxch st(2)
fsub dword [0x7d9358]
fxch st(1)
fsubr dword [esp + 0x24]
fld dword [0x7d9314]
fld dword [0x7d9314]
fxch st(3)
fst dword [esp + 0x18]
fld dword [esp + 0x18]
fcos
push eax
push edx
lea ecx, [esp + 0x4c]
push 0x3f4ccccd
lea edx, [esp + 0x7c]
push ecx
push edx
push 6
push 8
fmul qword [0x7d9344]
fsubr qword [0x7d9344]
fstp dword [esp + 0x108]
fxch st(2)
fst dword [esp + 0x34]
fld dword [esp + 0x34]
fxch st(3)
fsin
fsub qword [0x7d935c]
fmul qword [0x7d9344]
fstp dword [esp + 0x104]
fsin
fxch st(2)
fcos
fxch st(2)
fsub qword [0x7d935c]
fxch st(2)
fmul qword [0x7d9344]
fxch st(4)
fstp dword [esp + 0x34]
fxch st(1)
fmul qword [0x7d9344]
fxch st(3)
fsubr qword [0x7d9344]
fxch st(1)
fstp dword [esp + 0x38]
fxch st(1)
fstp dword [esp + 0x3c]
fstp dword [esp + 0x98]
fstp dword [esp + 0x94]
fstp st(0)
call fcn.005bf114
add esp, 0x24
lea ecx, [esp + 0xe8]
mov dword [esp + 0x1a0], 0xffffffff
call fcn.004ff821
mov ecx, dword [esp + 0x198]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x194
ret