Function at 0x421b00
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5096f8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x24
mov eax, dword [0x575f54]
push ebx
push esi
push edi
mov edi, ecx
mov dword [esp + 0x14], eax
mov esi, dword [ebp + 8]
lea ecx, [esp + 0x24]
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, esi
mov dword [esp + 0x40], 0
call fcn.0041ede0
fld qword [esi + 0x28]
fld dword [ebp + 0x10]
fsub qword [esi + 0x88]
call fcn.004a1790
cdq
xor eax, edx
sub eax, edx
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fxch st(1)
fadd qword [esp + 0x24]
fdivp st(1)
call fcn.004a1790
mov dword [esp + 0x10], eax
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004e07b2
mov ecx, edi
call fcn.004216b0
mov ecx, dword [0x575f54]
mov ebx, eax
mov dword [esp + 0xc], ecx
lea edx, [esp + 0xc]
mov ecx, esi
push edx
mov byte [esp + 0x3c], 1
call fcn.0041ee20
lea eax, [esp + 0x18]
mov ecx, esi
push eax
call fcn.0041f100
mov edx, dword [esp + 0x10]
cmp edx, eax
jle 0x421bc6
mov dword [esp + 0x10], eax
mov edx, eax
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + edx*8]
mov eax, dword [eax + edx*8 + 4]
add eax, ecx
mov dword [esp + 0x20], ecx
cmp eax, 0xffffffff
je 0x421c08
sub eax, ecx
push eax
push ecx
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x18]
call fcn.004d937f
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x3c], 2
call fcn.004e0b76
mov byte [esp + 0x38], 1
lea ecx, [esp + 0x1c]
jmp 0x421c2f
lea edx, [esp + 0x1c]
push ecx
push edx
lea ecx, [esp + 0x14]
call fcn.004d935c
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x3c], 3
call fcn.004e0b76
mov byte [esp + 0x38], 1
lea ecx, [esp + 0x1c]
call fcn.004e0a3d
mov eax, dword [esp + 0xc]
mov eax, dword [eax - 8]
test eax, eax
je 0x421c44
cdq
sub eax, edx
sar eax, 1
fld dword [ebp + 0xc]
fsub qword [esi + 0x70]
push eax
lea edx, [esp + 0x10]
sub esp, 8
fstp qword [esp]
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.004e07b2
mov ecx, esi
call fcn.0041f6d0
mov ecx, dword [esp + 0x20]
push eax
lea edx, [eax + ecx]
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x14]
mov dword [edi + 0x8c], edx
call fcn.004d9491
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x3c], 4
call fcn.004e0b76
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 1
call fcn.004e0a3d
mov ecx, dword [ebx + 0x50]
mov eax, dword [edi + 0x194]
mov edx, dword [ebx + 0x54]
imul eax, ecx
sub ecx, edx
sub esp, 8
cdq
idiv ecx
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x14]
fild dword [esp + 0x24]
fld qword [esi + 0x48]
fld qword [esi + 0x28]
fxch st(1)
fadd st(2)
fxch st(1)
fadd qword [esp + 0x2c]
fimul dword [esp + 0x18]
mov ecx, dword [eax - 8]
fsubp st(1)
fstp qword [esp]
push ecx
push eax
mov ecx, ebx
fstp st(0)
call fcn.00434330
mov dword [esp + 0x24], eax
sub esp, 8
fild dword [esp + 0x2c]
mov ecx, edi
fmul qword [esi + 0x60]
fmul qword [esp + 0x34]
fmul qword [0x5155e8]
fadd qword [esi + 0x70]
fstp qword [esp]
call fcn.00420ba0
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004dc4d8
add esp, 4
lea ecx, [esp + 0xc]
mov byte [esp + 0x38], 0
call fcn.004e0a3d
lea ecx, [esp + 0x14]
mov dword [esp + 0x38], 0xffffffff
call fcn.004e0a3d
mov ecx, dword [esp + 0x30]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0xc