Function at 0x4155a0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46958b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x40
fld qword [0x46e5a8]
push ebx
mov eax, 0xd
push esi
push edi
mov edi, ecx
mov ecx, dword [esp + 0x60]
fstp qword [edi + 0x90]
mov dword [esp + 0x1c], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push eax
or esi, 0xffffffff
push 0x471f60
mov dword [edi + 0x28], 2
mov dword [edi + 0x30], esi
mov dword [edi + 0x34], esi
call fcn.00409ec0
mov ecx, dword [eax]
mov ebx, 7
cmp ecx, ebx
jne 0x415a99
cmp dword [esp + 0x1c], ebx
je 0x41561a
xor eax, eax
jmp 0x41562d
lea ecx, [esp + 0xc]
push ecx
mov ecx, dword [esp + 0x28]
push 0x471f58
call fcn.00409ec0
mov ecx, dword [eax]
push ebp
mov ebp, 1
cmp ecx, ebp
jne 0x415640
mov edx, dword [esp + 0x18]
mov dword [edi + 0x28], edx
lea ecx, [esp + 0x10]
call fcn.00423a50
cmp dword [esp + 0x20], ebx
jne 0x415662
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x10]
push eax
push 0x471f4c
call fcn.00409ec0
mov eax, dword [esp + 0x10]
mov ebx, 4
cmp eax, ebx
jne 0x4156a0
push 8
call fcn.004588d2
add esp, 4
mov dword [esp + 0x64], eax
test eax, eax
mov dword [esp + 0x58], 0
je 0x415697
mov ecx, dword [esp + 0x18]
push ecx
mov ecx, eax
call fcn.00420c90
jmp 0x415699
xor eax, eax
mov dword [esp + 0x58], esi
mov dword [edi + 0x2c], eax
lea ecx, [esp + 0x10]
call fcn.00423a50
cmp dword [esp + 0x20], 7
je 0x4156b4
xor eax, eax
jmp 0x4156c7
mov ecx, dword [esp + 0x28]
lea edx, [esp + 0x10]
push edx
push 0x471f40
call fcn.00409f00
cmp dword [eax], 9
jne 0x4156ef
cmp dword [edi + 0x24], ebp
jne 0x4156e1
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [edi + 0x30], eax
mov dword [edi + 0x34], ecx
jmp 0x4156ef
push 0x471f0c
push esi
call fcn.00401070
add esp, 8
lea ecx, [esp + 0x10]
call fcn.00423a50
cmp dword [edi + 0x30], esi
jne 0x41574a
cmp dword [esp + 0x20], 7
je 0x415708
xor eax, eax
jmp 0x41571b
mov ecx, dword [esp + 0x28]
lea edx, [esp + 0x10]
push edx
push 0x471f00
call fcn.00409f00
cmp dword [eax], 9
jne 0x41574a
mov eax, dword [edi + 0x24]
cmp eax, ebx
je 0x41573c
cmp eax, 7
je 0x41573c
push 0x471f0c
push esi
call fcn.00401070
add esp, 8
jmp 0x41574a
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [edi + 0x30], eax
mov dword [edi + 0x34], ecx
lea ecx, [esp + 0x10]
call fcn.00423a50
cmp dword [edi + 0x30], esi
jne 0x4158c8
cmp dword [esp + 0x20], 7
je 0x415767
xor eax, eax
jmp 0x41577a
mov ecx, dword [esp + 0x28]
lea edx, [esp + 0x10]
push edx
push 0x471ef4
call fcn.00409f00
cmp dword [eax], 9
jne 0x4158c8
mov ecx, dword [esp + 0x60]
lea eax, [esp + 0x40]
push eax
push ecx
lea ecx, [esp + 0x18]
call fcn.00423a00
cmp dword [eax], 8
jne 0x4158bf
mov ecx, dword [esp + 0x48]
mov eax, dword [ecx]
lea edx, [esp + 0x30]
push edx
push 0x46fbd0
call dword [eax + 0x34]
mov ecx, eax
call fcn.00409ec0
push 0x471eec
lea ecx, [esp + 0x34]
call fcn.004062f0
test eax, eax
je 0x4157f6
cmp dword [edi + 0x24], ebp
jne 0x4157e3
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [edi + 0x30], ecx
mov dword [edi + 0x34], edx
jmp 0x4158b6
push 0x471f0c
push esi
call fcn.00401070
add esp, 8
jmp 0x4158b6
push 0x471ee4
lea ecx, [esp + 0x34]
call fcn.004062f0
test eax, eax
je 0x41583e
mov eax, dword [edi + 0x24]
cmp eax, ebp
jne 0x415829
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [edi + 0x24], 2
mov dword [edi + 0x30], eax
mov dword [edi + 0x34], ecx
jmp 0x4158b6
cmp eax, 2
jne 0x4157e3
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [edi + 0x30], edx
mov dword [edi + 0x34], eax
jmp 0x4158b6
push 0x471ed8
lea ecx, [esp + 0x34]
call fcn.004062f0
test eax, eax
je 0x415865
cmp dword [edi + 0x24], ebx
jne 0x4157e3
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [edi + 0x30], ecx
mov dword [edi + 0x34], edx
jmp 0x4158b6
push 0x471ec8
lea ecx, [esp + 0x34]
call fcn.004062f0
test eax, eax
je 0x415898
cmp dword [edi + 0x24], 5
jne 0x4157e3
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [edi + 0x24], 6
mov dword [edi + 0x30], eax
mov dword [edi + 0x34], ecx
jmp 0x4158b6
cmp dword [esp + 0x30], ebx
mov eax, dword [esp + 0x38]
je 0x4158a7
mov eax, 0x46fbcc
push eax
push 0x471ea8
push esi
call fcn.00401070
add esp, 0xc
lea ecx, [esp + 0x30]
call fcn.00423a50
lea ecx, [esp + 0x40]
call fcn.00423a50
lea ecx, [esp + 0x10]
call fcn.00423a50
mov eax, dword [esp + 0x20]
mov esi, 7
cmp eax, esi
jne 0x4158f1
mov ecx, dword [esp + 0x28]
lea edx, [esp + 0x10]
push edx
push 0x471e98
call fcn.00409ec0
mov eax, dword [esp + 0x10]
cmp eax, ebp
je 0x41595a
cmp eax, 2
jne 0x415908
fld qword [esp + 0x18]
fstp qword [edi + 0x90]
lea ecx, [esp + 0x10]
call fcn.00423a50
cmp dword [esp + 0x20], esi
jne 0x41592a
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x10]
push eax
push 0x471e90
call fcn.00409ec0
mov eax, dword [esp + 0x10]
cmp eax, ebp
je 0x415960
cmp eax, 2
jne 0x415968
fld qword [esp + 0x18]
fmul qword [0x470a88]
fld qword [0x46e5a8]
fld st(1)
fucompp
fnstsw ax
test ah, 0x44
jnp 0x415966
fstp qword [edi + 0x98]
jmp 0x415968
fild dword [esp + 0x18]
jmp 0x415902
fild dword [esp + 0x18]
jmp 0x41593b
fstp st(0)
lea ecx, [esp + 0x10]
call fcn.00423a50
cmp dword [esp + 0x20], esi
jne 0x41598a
lea ecx, [esp + 0x10]
push ecx
mov ecx, dword [esp + 0x2c]
push 0x471e88
call fcn.00409ec0
mov eax, dword [esp + 0x10]
cmp eax, ebp
je 0x4159ba
cmp eax, 2
jne 0x4159c2
fld qword [esp + 0x18]
fmul qword [0x470a88]
fld qword [0x46e5a8]
fld st(1)
fucompp
fnstsw ax
test ah, 0x44
jnp 0x4159c0
fstp qword [edi + 0xa0]
jmp 0x4159c2
fild dword [esp + 0x18]
jmp 0x41599b
fstp st(0)
lea ecx, [esp + 0x10]
call fcn.00423a50
cmp dword [esp + 0x20], esi
je 0x4159d5
xor eax, eax
jmp 0x4159e8
mov ecx, dword [esp + 0x28]
lea edx, [esp + 0x10]
push edx
push 0x471e7c
call fcn.00409ec0
cmp dword [eax], 6
jne 0x415a53
xor esi, esi
lea ebx, [edi + 0x70]
mov edx, dword [esp + 0x10]
cmp edx, 6
mov ecx, dword [esp + 0x18]
je 0x415a03
xor eax, eax
jmp 0x415a06
mov eax, dword [ecx + 0xc]
cmp esi, eax
jge 0x415a53
cmp edx, 6
je 0x415a13
xor eax, eax
jmp 0x415a1e
lea eax, [esp + 0x40]
push eax
push esi
call fcn.004011a0
mov eax, dword [eax]
cmp eax, ebp
je 0x415a29
cmp eax, 2
jne 0x415a41
cmp dword [esp + 0x40], ebp
jne 0x415a35
fild dword [esp + 0x48]
jmp 0x415a39
fld qword [esp + 0x48]
fmul qword [0x470a88]
fstp qword [ebx]
lea ecx, [esp + 0x40]
call fcn.00423a50
inc esi
add ebx, 8
cmp esi, 4
jl 0x4159f2
lea ecx, [esp + 0x10]
call fcn.00423a50
cmp dword [esp + 0x20], 7
jne 0x415a76
lea ecx, [esp + 0x10]
push ecx
mov ecx, dword [esp + 0x2c]
push 0x471e70
call fcn.00409ec0
mov eax, dword [esp + 0x10]
cmp eax, ebp
pop ebp
je 0x415ab6
cmp eax, 2
jne 0x415a90
fld qword [esp + 0x14]
call fcn.00458858
mov dword [edi + 0x10], eax
lea ecx, [esp + 0xc]
call fcn.00423a50
lea ecx, [esp + 0x1c]
call fcn.00423a50
mov ecx, dword [esp + 0x4c]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x4c
ret 8
fild dword [esp + 0x14]
jmp 0x415a88