Function at 0x48eb20
Capabilities:
Get process heap force flags

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4c6758
push eax
mov dword fs:[0], esp
sub esp, 0x18
push edi
mov edi, ecx
fld dword [esp + 0x30]
fcomp dword [0x4fc4b8]
mov ecx, dword [esp + 0x2c]
fnstsw ax
test ah, 0x44
jp 0x48eb81
test ecx, ecx
mov dword [esp + 0x24], 0xffffffff
je 0x48ed98
dec dword [ecx + 4]
jne 0x48ed98
mov eax, dword [ecx]
push 1
call dword [eax]
pop edi
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
add esp, 0x24
ret 0xc
mov edx, dword [ecx + 0x14]
mov eax, dword [edi + 0x20]
mov eax, dword [eax + edx*4]
fld dword [eax + 4]
push ebx
fld dword [eax]
push esi
fsub dword [ecx + 8]
mov esi, edx
fstp dword [esp + 0x1c]
fsub dword [ecx + 0xc]
fld dword [esp + 0x1c]
fmul dword [esp + 0x1c]
fld st(1)
fmul st(2)
faddp st(1)
fstp st(1)
fcom dword [0x4fc4b8]
fnstsw ax
test ah, 0x44
jnp 0x48ebcb
fsqrt
fcomp dword [0x4f1a10]
fnstsw ax
test ah, 5
jp 0x48ebd8
jmp 0x48ebcd
fstp st(0)
mov al, byte [ecx + 0x20]
test al, al
je 0x48ebd7
inc esi
jmp 0x48ebd8
dec esi
mov al, byte [esp + 0x3c]
test al, al
mov al, byte [ecx + 0x20]
je 0x48ebea
test al, al
jne 0x48ebf1
inc esi
jmp 0x48ebf3
test al, al
je 0x48ebf1
dec esi
jmp 0x48ebf3
mov esi, edx
fld dword [esp + 0x38]
mov ebx, 1
fcomp dword [0x4fc4b8]
fnstsw ax
test ah, 0x41
jne 0x48ed76
lea ecx, [ecx]
mov al, byte [ecx + 0x29]
test al, al
jne 0x48ed76
mov eax, dword [edi + 0x20]
mov eax, dword [eax + esi*4]
fld dword [eax + 4]
fld dword [eax]
fsub dword [ecx + 8]
fstp dword [esp + 0x14]
mov edx, dword [esp + 0x14]
mov eax, edx
fsub dword [ecx + 0xc]
mov dword [esp + 0xc], eax
mov dword [esp + 0x1c], edx
fst dword [esp + 0x20]
mov edx, dword [esp + 0x20]
fld dword [esp + 0x14]
mov dword [esp + 0x10], edx
fmul dword [esp + 0x14]
fld st(1)
fmul st(2)
faddp st(1)
fst dword [esp + 0x34]
fstp st(1)
fcom dword [0x4fc4b8]
fnstsw ax
test ah, 0x44
jp 0x48ec75
fstp st(0)
fld dword [0x4fc4b8]
jmp 0x48ec77
fsqrt
fld dword [esp + 0x34]
fcom dword [0x4fc4b8]
fnstsw ax
test ah, 0x44
jnp 0x48ecb1
fsqrt
fcom dword [0x4fc4b8]
fnstsw ax
test ah, 0x44
jnp 0x48ecb1
fdivr dword [0x4f1a10]
fld dword [esp + 0x14]
fmul st(1)
fstp dword [esp + 0xc]
fld dword [esp + 0x10]
fmul st(1)
fstp dword [esp + 0x10]
fstp st(0)
fld dword [esp + 0x38]
fsub st(1)
fcom dword [0x4fc4b8]
fld dword [esp + 0xc]
fnstsw ax
test ah, 0x41
jne 0x48ecd4
fmul st(2)
fld dword [esp + 0x10]
fmul st(3)
jmp 0x48ece0
fmul dword [esp + 0x38]
fld dword [esp + 0x10]
fmul dword [esp + 0x38]
fxch st(2)
fstp dword [esp + 0x38]
fld st(0)
fadd dword [ecx + 8]
fstp dword [ecx + 8]
fxch st(1)
fld st(0)
fadd dword [ecx + 0xc]
fstp dword [ecx + 0xc]
fld st(1)
fmul st(2)
fld st(1)
fmul st(2)
faddp st(1)
fxch st(2)
fstp st(1)
fstp st(0)
fcom dword [0x4fc4b8]
fnstsw ax
test ah, 0x44
jp 0x48ed1f
fstp st(0)
fld dword [0x4fc4b8]
jmp 0x48ed21
fsqrt
fsubrp st(1)
fabs
fcomp dword [0x4f1a10]
fnstsw ax
test ah, 5
jp 0x48ed61
mov al, byte [esp + 0x3c]
test al, al
je 0x48ed57
mov edx, dword [edi + 0x20]
test edx, edx
jne 0x48ed45
xor eax, eax
jmp 0x48ed4d
mov eax, dword [edi + 0x24]
sub eax, edx
sar eax, 2
add eax, 0xfffffff6
cmp esi, eax
jge 0x48ed5e
inc esi
jmp 0x48ed61
test esi, esi
jle 0x48ed5e
dec esi
jmp 0x48ed61
mov byte [ecx + 0x29], bl
fld dword [esp + 0x38]
fcomp dword [0x4fc4b8]
fnstsw ax
test ah, 0x41
je 0x48ec10
mov al, byte [esp + 0x3c]
mov dword [ecx + 0x14], esi
mov byte [ecx + 0x20], al
mov eax, dword [ecx + 4]
dec eax
mov dword [esp + 0x2c], 0xffffffff
mov dword [ecx + 4], eax
jne 0x48ed96
mov edx, dword [ecx]
push ebx
call dword [edx]
pop esi
pop ebx
mov ecx, dword [esp + 0x1c]
pop edi
mov dword fs:[0], ecx
add esp, 0x24
ret 0xc