Function at 0x4ffcd8
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0
push 0
push 0
push 0
push 0
push 0
push ebx
push esi
push edi
mov esi, ecx
mov edi, edx
mov ebx, eax
xor eax, eax
push ebp
push 0x500000
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp + 8]
call fcn.004045f8
mov edx, esi
mov eax, dword [ebx + 0xc]
call fcn.0053ac44
mov edx, edi
call fcn.0051c4f0
mov al, byte [eax + 0x30]
dec al
je 0x4ffd2b
sub al, 2
je 0x4fffbd
jmp 0x4fffe2
mov edx, esi
mov eax, dword [ebx + 0xc]
call fcn.0053ac44
mov edx, edi
call fcn.0051c4f0
cmp dword [eax + 0x20], 0
je 0x4ffd6d
mov edx, esi
mov eax, dword [ebx + 0xc]
call fcn.0053ac44
mov edx, edi
call fcn.0051c4f0
mov eax, dword [eax + 0x20]
push eax
mov eax, dword [ebx + 8]
call fcn.00526a60
mov eax, dword [eax + 0x30]
pop edx
call fcn.004d8420
mov dword [ebp - 8], eax
jmp 0x4ffd8f
mov edx, esi
mov eax, dword [ebx + 0xc]
call fcn.0053ac44
mov eax, dword [eax + 0x40]
push eax
mov eax, dword [ebx + 8]
call fcn.00526a60
mov eax, dword [eax + 0x30]
pop edx
call fcn.004d8420
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4fffe2
mov eax, dword [ebx + 0xc]
mov eax, dword [eax + 8]
imul edi
add esi, eax
mov eax, dword [ebx + 0x14]
fild qword [eax + esi*8]
lea eax, [ebp - 0x18]
call fcn.00416bac
mov eax, dword [ebp - 8]
movzx eax, byte [eax + 0x40]
cmp eax, 8
jg 0x4ffdda
je 0x4ffe45
add eax, 0xfffffffe
sub eax, 3
jb 0x4ffded
dec eax
sub eax, 2
jb 0x4fff3f
jmp 0x4fffe2
sub eax, 0xe
je 0x4ffded
sub eax, 0x17
je 0x4ffec2
jmp 0x4fffe2
mov eax, dword [ebp - 8]
mov edx, dword [0x4c7d2c]
call fcn.00403894
mov ebx, eax
lea eax, [ebp - 4]
mov edx, dword [ebx + 0xe0]
call fcn.00404690
cmp dword [ebp - 4], 0
jne 0x4ffe26
lea eax, [ebp - 0x18]
call fcn.00413194
mov edx, dword [ebp + 8]
call fcn.00409d48
jmp 0x4fffe2
lea eax, [ebp - 0x18]
call fcn.00414ae4
add esp, 0xfffffff4
fstp xword [esp]
wait
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 4]
call fcn.0040b71c
jmp 0x4fffe2
mov eax, dword [ebp - 8]
mov edx, dword [0x4c9420]
call fcn.00403894
mov ebx, eax
lea eax, [ebp - 4]
mov edx, dword [ebx + 0xe0]
call fcn.00404690
cmp dword [ebp - 4], 0
jne 0x4ffea3
cmp byte [ebx + 0xe8], 0
je 0x4ffe7f
mov bl, 4
mov esi, dword [0x65738c]
movzx esi, byte [esi]
jmp 0x4ffe83
xor ebx, ebx
xor esi, esi
lea eax, [ebp - 0x18]
call fcn.00415440
add esp, 0xfffffff8
fistp qword [esp]
wait
mov ecx, dword [ebp + 8]
mov edx, esi
mov eax, ebx
call fcn.0040b6e4
jmp 0x4fffe2
lea eax, [ebp - 0x18]
call fcn.00415440
add esp, 0xfffffff8
fistp qword [esp]
wait
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 4]
call fcn.0040b774
jmp 0x4fffe2
mov eax, dword [ebp - 8]
mov edx, dword [0x4c9624]
call fcn.00403894
mov ebx, eax
lea eax, [ebp - 4]
mov edx, dword [ebx + 0xe0]
call fcn.00404690
cmp dword [ebp - 4], 0
jne 0x4fff20
cmp byte [ebx + 0xe8], 0
je 0x4ffefc
mov bl, 4
mov esi, dword [0x65738c]
movzx esi, byte [esi]
jmp 0x4fff00
xor ebx, ebx
xor esi, esi
lea eax, [ebp - 0x18]
call fcn.00415440
add esp, 0xfffffff8
fistp qword [esp]
wait
mov ecx, dword [ebp + 8]
mov edx, esi
mov eax, ebx
call fcn.0040b6e4
jmp 0x4fffe2
lea eax, [ebp - 0x18]
call fcn.00415440
add esp, 0xfffffff8
fistp qword [esp]
wait
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 4]
call fcn.0040b774
jmp 0x4fffe2
mov eax, dword [ebp - 8]
mov edx, dword [0x4c8490]
call fcn.00403894
mov edi, eax
lea eax, [ebp - 4]
mov edx, dword [edi + 0xe0]
call fcn.00404690
cmp dword [ebp - 4], 0
jne 0x4fffa1
cmp byte [edi + 0xe8], 0
je 0x4fff79
mov bl, 4
mov esi, dword [0x65738c]
movzx esi, byte [esi]
jmp 0x4fff7d
xor ebx, ebx
xor esi, esi
lea eax, [ebp - 0x18]
call fcn.00414ae4
add esp, 0xfffffff4
fstp xword [esp]
wait
mov eax, dword [ebp + 8]
push eax
mov edx, dword [edi + 0xec]
mov ecx, esi
mov eax, ebx
call fcn.0040b6ac
jmp 0x4fffe2
lea eax, [ebp - 0x18]
call fcn.00414ae4
add esp, 0xfffffff4
fstp xword [esp]
wait
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 4]
call fcn.0040b71c
jmp 0x4fffe2
mov eax, dword [ebx + 0xc]
mov eax, dword [eax + 8]
imul edi
add esi, eax
mov eax, dword [ebx + 0x14]
fild qword [eax + esi*8]
fdiv dword [0x500010]
add esp, 0xfffffff4
fstp xword [esp]
wait
mov eax, dword [ebp + 8]
call fcn.0040b64c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x500007
lea eax, [ebp - 0x18]
call fcn.00412474
lea eax, [ebp - 4]
call fcn.004045f8
ret