Function at 0x4b4340
Capabilities:
Check for peb ntglobalflag flag
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x4f39b0
mov eax, dword fs:[0]
push eax
sub esp, 0x70
mov eax, dword [0x52a6ec]
xor eax, esp
mov dword [esp + 0x68], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x52a6ec]
xor eax, esp
push eax
lea eax, [esp + 0x84]
mov dword fs:[0], eax
mov eax, dword [esp + 0x94]
push 1
mov esi, ecx
xor ebp, ebp
push 0x511348
lea ecx, [esp + 0x30]
mov dword [esp + 0x2c], eax
mov byte [esp + 0x23], 0
mov dword [esp + 0x44], 0xf
mov dword [esp + 0x40], ebp
mov byte [esp + 0x30], 0
call fcn.00404fd0
mov dword [esp + 0x8c], ebp
cmp dword [esp + 0x3c], 0x10
mov ecx, dword [esp + 0x28]
lea edx, [esi + 0x18]
mov dword [esp + 0x1c], edx
jae 0x4b43c7
lea ecx, [esp + 0x28]
mov edi, dword [edx + 0x10]
mov ebx, dword [esp + 0x38]
mov eax, edi
cmp edi, ebx
jb 0x4b43d6
mov eax, ebx
cmp dword [edx + 0x14], 0x10
jb 0x4b43de
mov edx, dword [edx]
call fcn.0040af80
cmp eax, ebp
jne 0x4b43f9
cmp edi, ebx
jae 0x4b43f0
or eax, 0xffffffff
jmp 0x4b43f7
xor eax, eax
cmp edi, ebx
setne al
cmp eax, ebp
sete al
test al, al
je 0x4b440c
lea ecx, [esi + 0x14]
call fcn.004b7e60
mov bl, 1
jmp 0x4b440e
xor bl, bl
mov dword [esp + 0x8c], 0xffffffff
cmp dword [esp + 0x3c], 0x10
jb 0x4b442d
mov ecx, dword [esp + 0x28]
push ecx
call fcn.004c9387
add esp, 4
test bl, bl
mov bl, 1
jne 0x4b4437
mov bl, byte [esp + 0x1b]
mov eax, dword [esi + 0x14]
cmp eax, 3
jne 0x4b4494
push 0xffffffffffffffff
push 0xffffffffffffffff
lea edx, [esp + 0x24]
call fcn.004b40b0
test al, al
je 0x4b462b
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov ecx, eax
and eax, 0x7fffffff
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x1c], edx
fild qword [esp + 0x1c]
and ecx, 0x80000000
mov dword [esp + 0x20], ecx
mov dword [esp + 0x1c], 0
fild qword [esp + 0x1c]
fchs
faddp st(1)
fstp qword [eax]
jmp 0x4b45ba
cmp eax, 4
jne 0x4b44b9
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.004b8490
mov edx, dword [esp + 0x28]
add esp, 4
fstp qword [edx]
lea ecx, [esi + 0x14]
call fcn.004b7e60
jmp 0x4b45ba
cmp eax, 2
jne 0x4b45cc
mov eax, dword [esp + 0x1c]
push 0xffffffffffffffff
push 0
push eax
lea ecx, [esp + 0x34]
mov dword [esp + 0x48], 0xf
mov dword [esp + 0x44], 0
mov byte [esp + 0x34], 0
call fcn.00406140
lea eax, [esp + 0x28]
mov dword [esp + 0x8c], 1
call fcn.00465d00
mov ecx, 0x50cbac
lea edi, [esp + 0x28]
call fcn.00439ed0
test al, al
jne 0x4b4587
mov ecx, str.infinity
call fcn.00439ed0
test al, al
jne 0x4b4587
mov ecx, 0x509054
call fcn.00439ed0
test al, al
je 0x4b4539
fld qword [0x52b728]
mov ecx, dword [esp + 0x24]
fstp qword [ecx]
jmp 0x4b4593
push str.Expected_double.
lea ecx, [esp + 0x64]
call fcn.004050f0
mov byte [esp + 0x8c], 2
mov edx, dword [esi + 0x38]
mov ecx, dword [esi + 0x34]
push esi
lea ebx, [esp + 0x64]
call fcn.004b1410
mov ecx, ebx
mov byte [esp + 0x8c], 1
call fcn.00406230
lea ecx, [esp + 0x28]
mov dword [esp + 0x8c], 0xffffffff
call fcn.00406230
jmp 0x4b462b
fld qword [0x52b718]
mov edx, dword [esp + 0x24]
fstp qword [edx]
lea ecx, [esi + 0x14]
call fcn.004b7e60
mov dword [esp + 0x8c], 0xffffffff
cmp dword [esp + 0x3c], 0x10
jb 0x4b45ba
mov eax, dword [esp + 0x28]
push eax
call fcn.004c9387
add esp, 4
test bl, bl
je 0x4b45c8
mov eax, dword [esp + 0x24]
fld qword [eax]
fchs
fstp qword [eax]
mov al, 1
jmp 0x4b462d
push 0x10
push str.Expected_double.
lea ecx, [esp + 0x4c]
mov dword [esp + 0x60], 0xf
mov dword [esp + 0x5c], 0
mov byte [esp + 0x4c], 0
call fcn.00404fd0
mov dword [esp + 0x8c], 3
mov edx, dword [esi + 0x38]
mov ecx, dword [esi + 0x34]
push esi
lea ebx, [esp + 0x48]
call fcn.004b1410
mov dword [esp + 0x8c], 0xffffffff
cmp dword [esp + 0x58], 0x10
jb 0x4b462b
mov ecx, dword [esp + 0x44]
push ecx
call fcn.004c9387
add esp, 4
xor al, al
mov ecx, dword [esp + 0x84]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.004c9392
add esp, 0x7c
ret 4