Function at 0x4c983c
Capabilities:
Access peb ldr_data
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x60ea4e
mov eax, dword fs:[0]
push eax
sub esp, 0xfc
push esi
mov eax, dword [0x6ac9e8]
xor eax, esp
push eax
lea eax, [esp + 0x104]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [0x6b1ff8]
lea eax, [esp + 0x40]
push eax
call fcn.0050e8e0
mov eax, dword [esi + 0x4f4]
mov ecx, eax
shr ecx, 0x10
movzx edx, cl
mov dword [esp + 8], edx
mov ecx, eax
shr ecx, 8
fild dword [esp + 8]
movzx edx, cl
fld qword [0x621ee8]
fmul st(1), st(0)
mov dword [esp + 8], edx
fxch st(1)
movzx ecx, al
fstp dword [esp + 0x2c]
fild dword [esp + 8]
mov edx, dword [esp + 0x2c]
mov dword [esp + 8], ecx
shr eax, 0x18
fmul st(1)
mov dword [esp + 0x40], edx
fstp dword [esp + 0x30]
fild dword [esp + 8]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x44], eax
fmul st(1)
lea eax, [esp + 0x40]
push eax
fstp dword [esp + 0x38]
mov ecx, dword [esp + 0x38]
fild dword [esp + 0xc]
mov dword [esp + 0x4c], ecx
mov ecx, dword [0x6b1ff8]
fmulp st(1)
fstp dword [esp + 0x3c]
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x50], edx
call fcn.0050e8b0
mov ecx, dword [0x6b1ff8]
push 1
push 0x16
call fcn.0050f050
mov eax, dword [esi + 0x4a8]
cmp eax, 3
ja case.default.0x4c9566
jmp dword [eax*4 + 0x4c9970]
mov ecx, esi
call fcn.004c8d20
mov ecx, esi
call fcn.00568220
mov ecx, esi
call fcn.004c8da0
mov ecx, esi
call fcn.004c8db0
mov ecx, esi
call fcn.00568280
mov ecx, esi
call fcn.004c8e20
jmp case.default.0x4c9566
fld1
fcomp dword [esi + 0x4bc]
fnstsw ax
test ah, 0x44
jnp case.0x4c9566.0
fldz
fcomp dword [esi + 0x4bc]
fnstsw ax
test ah, 5
jp case.default.0x4c9566
mov ecx, esi
call fcn.004c8e50
mov ecx, esi
call fcn.00568220
mov ecx, esi
call fcn.00568280
mov ecx, esi
call fcn.004c8f80
jmp case.default.0x4c9566
mov ecx, esi
call fcn.004c8fb0
mov ecx, esi
call fcn.00568220
mov ecx, esi
call fcn.00568280
mov ecx, esi
call fcn.004c9450
jmp case.default.0x4c9566
mov ecx, esi
call fcn.004c9200
mov ecx, esi
call fcn.00568220
mov ecx, esi
call fcn.00568280
mov ecx, esi
call fcn.004c9450
mov ecx, dword [0x6b1ff8]
push 0x16
call fcn.0050f070
fld1
fst dword [esp + 0x2c]
mov ecx, dword [esp + 0x2c]
fst dword [esp + 0x30]
mov edx, dword [esp + 0x30]
fst dword [esp + 0x34]
mov eax, dword [esp + 0x34]
fstp dword [esp + 0x38]
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x44], edx
lea edx, [esp + 0x40]
mov dword [esp + 0x4c], ecx
mov ecx, dword [0x6b1ff8]
push edx
mov dword [esp + 0x4c], eax
call fcn.0050e8b0
cmp byte [0x6babcc], 0
je 0x4c9957
fld dword [esi + 0x448]
mov ecx, esi
fstp dword [esp + 8]
fld dword [esi + 0x44c]
fstp dword [esp + 0x24]
fld dword [esi + 0x450]
fstp dword [esp + 0x28]
fldz
fst dword [esp + 0x18]
fld dword [0x622478]
fstp dword [esp + 0x1c]
fstp dword [esp + 0x20]
call fcn.004cfb80
fmul qword [0x622188]
push ecx
lea eax, [esp + 0x88]
fstp dword [esp + 0x40]
fld dword [esp + 0x40]
fstp dword [esp]
push eax
call fcn.0058f3c8
lea ecx, [esp + 0x84]
push ecx
lea edx, [esp + 0x1c]
push edx
mov eax, edx
push eax
call fcn.0058e2af
fld dword [esp + 0x18]
fld qword [0x627060]
mov ecx, esi
fmul st(1), st(0)
fxch st(1)
fstp dword [esp + 0x18]
fld dword [esp + 0x1c]
fmul st(1)
fstp dword [esp + 0x1c]
fmul dword [esp + 0x20]
fstp dword [esp + 0x20]
fld dword [esp + 8]
fadd dword [esp + 0x18]
fstp dword [esp + 0x18]
fld dword [esp + 0x24]
fadd dword [esp + 0x1c]
fstp dword [esp + 0x1c]
fld dword [esp + 0x28]
fadd dword [esp + 0x20]
fstp dword [esp + 0x20]
fldz
fst dword [esp + 0xc]
fld dword [0x622478]
fstp dword [esp + 0x10]
fstp dword [esp + 0x14]
call fcn.004cfba0
fmul qword [0x622188]
push ecx
lea ecx, [esp + 0xc8]
fstp dword [esp + 0x40]
fld dword [esp + 0x40]
fstp dword [esp]
push ecx
call fcn.0058f3c8
lea edx, [esp + 0xc4]
push edx
lea eax, [esp + 0x10]
push eax
mov ecx, eax
push ecx
call fcn.0058e2af
fld dword [esp + 0xc]
fld qword [0x627060]
fmul st(1), st(0)
fxch st(1)
fstp dword [esp + 0xc]
fld dword [esp + 0x10]
fmul st(1)
fstp dword [esp + 0x10]
fmul dword [esp + 0x14]
fstp dword [esp + 0x14]
fld dword [esp + 8]
fadd dword [esp + 0xc]
test byte [0x6babd4], 1
fstp dword [esp + 0xc]
fld dword [esp + 0x24]
fadd dword [esp + 0x10]
fstp dword [esp + 0x10]
fld dword [esp + 0x28]
fadd dword [esp + 0x14]
fstp dword [esp + 0x14]
jne 0x4c97f4
or dword [0x6babd4], 1
mov ecx, 0x6babd0
mov dword [esp + 0x10c], 0
call fcn.00510090
push 0x61fc00
call fcn.005c6092
add esp, 4
mov dword [esp + 0x10c], 0xffffffff
mov ecx, dword [0x6b1ff8]
push 0
push 2
push 0
call fcn.0050f090
mov ecx, dword [0x6b1ff8]
push 2
push 1
push 0
call fcn.0050f090
mov ecx, dword [0x6b1ff8]
push 1
push 4
push 0
call fcn.0050f090
mov ecx, dword [0x6b1ff8]
push 0
push 7
call fcn.0050f050
mov ecx, dword [0x6b1ff8]
push 0
push 0x89
call fcn.0050e910
fld1
sub esp, 0x10
fst dword [esp + 0xc]
fldz
mov ecx, 0x6babd0
fstp dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp]
call fcn.0050fed0
fld dword [esp + 0x14]
sub esp, 0x18
fstp dword [esp + 0x14]
mov ecx, 0x6babd0
fld dword [esp + 0x28]
fstp dword [esp + 0x10]
fld dword [esp + 0x24]
fstp dword [esp + 0xc]
fld dword [esp + 0x40]
fstp dword [esp + 8]
fld dword [esp + 0x3c]
fstp dword [esp + 4]
fld dword [esp + 0x20]
fstp dword [esp]
call fcn.00510150
fld1
sub esp, 0x10
fst dword [esp + 0xc]
mov ecx, 0x6babd0
fst dword [esp + 8]
fstp dword [esp + 4]
fldz
fstp dword [esp]
call fcn.0050fed0
fld dword [esp + 0x20]
sub esp, 0x18
fstp dword [esp + 0x14]
fld dword [esp + 0x34]
mov ecx, 0x6babd0
fstp dword [esp + 0x10]
fld dword [esp + 0x30]
fstp dword [esp + 0xc]
fld dword [esp + 0x40]
fstp dword [esp + 8]
fld dword [esp + 0x3c]
fstp dword [esp + 4]
fld dword [esp + 0x20]
fstp dword [esp]
call fcn.00510150
mov ecx, dword [0x6b1ff8]
push 1
push 0x89
call fcn.0050e910
mov ecx, dword [0x6b1ff8]
push 7
call fcn.0050f070
mov ecx, dword [0x6b1ff8]
push 2
push 0
call fcn.0050f0c0
mov ecx, dword [0x6b1ff8]
push 1
push 0
call fcn.0050f0c0
mov ecx, dword [0x6b1ff8]
push 4
push 0
call fcn.0050f0c0
mov ecx, dword [0x6b1ff8]
call fcn.0050f110
mov ecx, dword [esp + 0x104]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x108
ret