Function at 0x4fdeb0
Capabilities:
Access peb ldr_data
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5480a4
mov eax, dword fs:[0]
push eax
sub esp, 0x68
push ebx
push esi
push edi
mov eax, dword [0x598c90]
xor eax, esp
push eax
lea eax, [esp + 0x78]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0x34], edi
mov ecx, dword [edi + 0x1c]
lea eax, [edi + 0x18]
mov dword [esp + 0x1c], eax
mov eax, dword [eax]
mov dword [esp + 0x18], eax
fild dword [esp + 0x18]
lea eax, [edi + 0x1c]
mov dword [esp + 0x18], ecx
fstp dword [esp + 0x24]
sub esp, 0x10
fild dword [esp + 0x28]
mov dword [esp + 0x24], eax
mov ecx, 0xffffffaa
lea eax, [esp + 0x40]
fstp dword [esp + 0x28]
fld dword [esp + 0x28]
fadd qword [0x572c28]
fstp dword [esp + 0x30]
fld dword [esp + 0x30]
fstp dword [esp + 0xc]
fldz
fstp dword [esp + 8]
fld1
fst dword [esp + 4]
fstp dword [esp]
call fcn.00453820
lea esi, [esp + 0x3c]
mov edx, eax
call fcn.00476750
lea esi, [esp + 0x34]
mov edx, eax
call fcn.00476750
fldz
push eax
sub esp, 0x10
fst dword [esp + 0xc]
mov ecx, 0xffffffaa
fstp dword [esp + 8]
lea eax, [esp + 0x54]
fld dword [0x572f78]
fstp dword [esp + 4]
fld1
fstp dword [esp]
call fcn.00453820
lea esi, [esp + 0x58]
mov edx, eax
call fcn.00476750
lea esi, [esp + 0x58]
mov edx, eax
call fcn.00476840
push eax
lea edx, [esp + 0x64]
push edx
xor al, al
call fcn.00476b70
mov ebx, dword [ebp + 8]
lea eax, [esp + 0x4c]
push eax
mov esi, ebx
mov dword [esp + 0x84], 0
call fcn.004789d0
fld dword [esp + 0x18]
sub esp, 0x10
fstp dword [esp + 0xc]
fld dword [esp + 0x34]
fstp dword [esp + 8]
fldz
fst dword [esp + 4]
fstp dword [esp]
push ebx
call fcn.00478f40
mov eax, edi
call fcn.0043b3f0
lea esi, [esp + 0x44]
mov dword [esp + 0x24], eax
call fcn.004859b0
mov byte [esp + 0x80], 1
mov eax, 0x571cbc
lea esi, [esp + 0x18]
call fcn.0041aed0
mov ecx, esi
push ecx
lea eax, [esp + 0x48]
mov byte [esp + 0x84], 2
call fcn.00485c40
mov ecx, esi
mov byte [esp + 0x80], 1
call fcn.0041add0
lea edx, [esp + 0x44]
push edx
mov esi, ebx
call fcn.00478af0
push 0
push 0x1000281
lea eax, [esp + 0x48]
push eax
mov ecx, edi
call fcn.00434820
push eax
call fcn.00478940
lea esi, [esp + 0x30]
mov eax, edi
call fcn.0043b2f0
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 0x14]
mov byte [esp + 0x80], 3
fld dword [edi + 0xd0]
mov edx, dword [esp + 0x24]
fstp dword [esp + 0x28]
mov eax, dword [edx]
mov esi, dword [ecx]
fld dword [eax + 0xc]
fstp dword [esp + 0x24]
mov dword [esp + 0x20], esi
fild dword [esp + 0x20]
fdiv dword [esp + 0x24]
call fcn.00537c70
cmp eax, 1
mov dword [esp + 0x18], eax
jg 0x4fe0ab
mov dword [esp + 0x18], 1
lea ecx, [edi + 0xac]
lea eax, [esp + 0x24]
call fcn.00476250
fld dword [esp + 0x28]
mov ecx, dword [edi + 0xcc]
mov edx, dword [esp + 0x18]
mov edi, dword [edi + 0xc8]
mov eax, dword [esp + 0x1c]
mov eax, dword [eax]
push ecx
fstp dword [esp]
push edx
lea edx, [esp + 0x2c]
push edx
lea edx, [ecx + ecx]
sub esi, edx
push esi
lea edx, [edi + edi]
sub eax, edx
push eax
push ecx
push edi
mov edi, dword [esp + 0x48]
mov esi, ebx
call fcn.00478db0
lea ecx, [esp + 0x30]
mov byte [esp + 0x80], 1
call fcn.0041add0
mov ecx, dword [esp + 0x34]
push 0
push 0x1000282
lea eax, [esp + 0x48]
push eax
call fcn.00434820
push eax
call fcn.00478940
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov edi, dword [esp + 0x1c]
mov eax, dword [edi]
push edx
push eax
push 0
push ebx
mov esi, 1
xor eax, eax
call fcn.00479160
push 0x59f750
mov esi, ebx
call fcn.00478940
fld1
mov esi, dword [esp + 0x14]
sub esp, 0x14
fst dword [esp + 0x10]
fst dword [esp + 0xc]
fild dword [edi]
fld1
fsub st(1), st(0)
fxch st(1)
fstp dword [esp + 0x48]
fld dword [esp + 0x48]
fstp dword [esp + 8]
fisubr dword [esi]
fstp dword [esp + 0x48]
fld dword [esp + 0x48]
fstp dword [esp + 4]
fstp dword [esp]
push ebx
call fcn.00479230
fld1
sub esp, 0x14
fst dword [esp + 0x10]
fild dword [esi]
fld1
fsub st(1), st(0)
fxch st(1)
fstp dword [esp + 0x48]
fld dword [esp + 0x48]
fstp dword [esp + 0xc]
fxch st(1)
fst dword [esp + 8]
fstp dword [esp + 4]
fisubr dword [edi]
fstp dword [esp + 0x48]
fld dword [esp + 0x48]
fstp dword [esp]
push ebx
call fcn.00479230
fld dword [0x572d58]
sub esp, 8
fstp dword [esp + 4]
mov ecx, 0xffffffaa
fld1
lea eax, [esp + 0x48]
fstp dword [esp]
call fcn.00453820
lea esi, [esp + 0x44]
mov edx, eax
call fcn.00476750
mov ecx, eax
lea eax, [esp + 0x3c]
call fcn.004763b0
push eax
mov esi, ebx
call fcn.00478940
mov ecx, dword [esp + 0x14]
fild dword [ecx]
sub esp, 0x10
fmul qword [0x572c90]
fld qword [0x572c40]
fsub st(1), st(0)
fxch st(1)
fstp dword [esp + 0x44]
fld dword [esp + 0x44]
fstp dword [esp + 0xc]
fisubr dword [edi]
fstp dword [esp + 0x44]
fld dword [esp + 0x44]
fstp dword [esp + 8]
fld1
fst dword [esp + 4]
fstp dword [esp]
push ebx
call fcn.00478f40
lea edx, [esp + 0x44]
push edx
call fcn.004859e0
lea eax, [esp + 0x4c]
push eax
call fcn.00476c70
mov ecx, dword [esp + 0x78]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4