Function at 0x4274a8
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff8c
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 4], ecx
mov ebx, edx
mov esi, eax
lea edi, [ebp - 0x70]
xor eax, eax
push ebp
push 0x427d24
push dword fs:[eax]
mov dword fs:[eax], esp
push ebx
lea eax, [ebp - 8]
push eax
call fcn.00417840
push ebx
call fcn.004172e4
mov byte [edi + 0x44], al
push ebx
call fcn.00417b78
fstp dword [edi + 0x1c]
wait
push ebx
call fcn.00417d24
fstp dword [ebp - 0x74]
wait
push ebx
call fcn.00417ad4
fadd dword [ebp - 0x74]
fstp dword [edi + 0x20]
wait
push ebx
call fcn.00417ad4
fstp dword [edi + 0x24]
wait
push ebx
call fcn.00417dd4
fstp dword [edi + 0x28]
wait
push ebx
call fcn.004177e8
fstp dword [edi + 0x2c]
wait
push ebx
call fcn.004177b8
fstp dword [edi + 0x30]
wait
push ebx
call fcn.00417724
fstp dword [edi + 0x34]
wait
mov eax, dword [ebp - 4]
push eax
call fcn.00417b78
fstp dword [edi + 0x38]
wait
mov eax, dword [ebp - 4]
push eax
call fcn.004176fc
fstp dword [edi + 0x3c]
wait
mov eax, dword [ebp - 4]
push eax
call fcn.00417724
fstp dword [edi + 0x40]
wait
mov eax, dword [0x477a90]
mov eax, dword [eax]
push eax
push ebx
push 0
call fcn.00417504
mov dword [edi], eax
mov eax, dword [0x477a90]
mov eax, dword [eax]
push eax
push ebx
push 1
call fcn.00417504
mov dword [edi + 4], eax
mov eax, dword [0x477a90]
mov eax, dword [eax]
push eax
push ebx
push 2
call fcn.00417504
mov dword [edi + 8], eax
mov eax, dword [0x477a90]
mov eax, dword [eax]
push eax
push ebx
push 3
call fcn.00417504
mov dword [edi + 0xc], eax
mov dword [edi + 0x10], 1
xor eax, eax
mov dword [edi + 0x14], eax
xor eax, eax
mov dword [edi + 0x18], eax
cmp dword [ebp + 0xc], 0
je 0x4275cd
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
cmp dword [ebp + 0x10], 0
je 0x4275ee
mov eax, dword [ebp + 0x10]
cmp dword [eax], 2
jne 0x4275ee
xor eax, eax
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 1
xor eax, eax
mov dword [edi + 0x18], eax
jmp 0x42760d
cmp dword [ebp + 0x10], 0
je 0x42760d
mov eax, dword [ebp + 0x10]
cmp dword [eax], 3
jne 0x42760d
xor eax, eax
mov dword [edi + 0x10], eax
xor eax, eax
mov dword [edi + 0x14], eax
mov dword [edi + 0x18], 1
mov dword [ebp - 0x10], 1
mov byte [ebp - 0x19], 0
mov eax, dword [ebp - 8]
mov edx, 0x427d3c
call fcn.004040b8
je 0x427645
mov eax, dword [ebp - 8]
mov edx, 0x427d4c
call fcn.004040b8
je 0x427645
mov eax, dword [ebp - 8]
mov edx, 0x427d5c
call fcn.004040b8
jne 0x427649
mov byte [ebp - 0x19], 1
mov eax, esi
mov edx, 0x427d6c
call fcn.004040b8
jne 0x42765c
cmp dword [edi], 0
je 0x4276c2
mov eax, esi
mov edx, 0x427d78
call fcn.004040b8
jne 0x427670
cmp dword [edi + 4], 0
je 0x4276c2
mov eax, esi
mov edx, 0x427d84
call fcn.004040b8
jne 0x427684
cmp dword [edi + 8], 0
je 0x4276c2
cmp dword [edi + 0xc], 0
jne 0x4276cc
mov eax, esi
mov edx, 0x427d90
call fcn.004040b8
je 0x4276c2
mov eax, esi
mov edx, 0x427d9c
call fcn.004040b8
je 0x4276c2
mov eax, esi
mov edx, 0x427da8
call fcn.004040b8
je 0x4276c2
mov eax, esi
mov edx, 0x427db4
call fcn.004040b8
jne 0x4276cc
xor eax, eax
mov dword [ebp - 0xc], eax
jmp 0x427cf3
mov eax, esi
mov edx, 0x427d6c
call fcn.004040b8
je 0x42774a
mov eax, esi
mov edx, 0x427d78
call fcn.004040b8
je 0x42774a
mov eax, esi
mov edx, 0x427d84
call fcn.004040b8
je 0x42774a
mov eax, esi
mov edx, 0x427d90
call fcn.004040b8
je 0x42774a
mov eax, esi
mov edx, 0x427dc0
call fcn.004040b8
je 0x42774a
cmp byte [ebp - 0x19], 0
je 0x4277d2
mov eax, esi
mov edx, 0x427d9c
call fcn.004040b8
je 0x42774a
mov eax, esi
mov edx, 0x427da8
call fcn.004040b8
je 0x42774a
mov eax, esi
mov edx, 0x427db4
call fcn.004040b8
jne 0x4277d2
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x18]
push eax
mov eax, edi
mov ecx, esi
mov edx, dword [ebp - 8]
call fcn.00427310
fld dword [ebp - 0x20]
fcomp dword [0x427dc4]
fnstsw ax
sahf
jbe 0x427789
push dword [ebp - 0x20]
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d958
fstp dword [ebp - 0x20]
wait
fld dword [ebp - 0x24]
fcomp dword [0x427dc4]
fnstsw ax
sahf
jbe 0x4277a8
push dword [ebp - 0x24]
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d90c
fstp dword [ebp - 0x24]
wait
fld dword [ebp - 0x20]
fadd dword [ebp - 0x24]
fadd dword [ebp - 0x28]
fstp dword [ebp - 0xc]
wait
cmp dword [ebp - 0x14], 0
je 0x4277c6
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
jmp 0x427cf3
mov dword [ebp - 0x10], 1
jmp 0x427cf3
mov eax, esi
mov edx, 0x427dd0
call fcn.004040b8
jne 0x4277f6
push dword [edi + 0x20]
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d90c
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427ddc
call fcn.004040b8
jne 0x427821
xor eax, eax
mov al, byte [edi + 0x44]
shl eax, 2
lea eax, [eax + eax*4]
add eax, 0x32
mov dword [ebp - 0x74], eax
fild dword [ebp - 0x74]
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427dec
call fcn.004040b8
jne 0x427852
fld xword [0x427df0]
fmul dword [edi + 0x40]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d958
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427e04
call fcn.004040b8
jne 0x427889
fld xword [0x427e08]
fmul dword [edi + 0x1c]
fadd dword [0x427e14]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d958
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427e20
call fcn.004040b8
jne 0x4278af
push 0x42c80000
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d958
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427e2c
call fcn.004040b8
jne 0x4278e0
fld xword [0x427e34]
fmul dword [edi + 0x40]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d958
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427e48
call fcn.004040b8
jne 0x427917
fld xword [0x427df0]
fmul dword [edi + 0x1c]
fadd dword [0x427e50]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d958
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427e5c
call fcn.004040b8
jne 0x42793d
push 0x42280000
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d958
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427e6c
call fcn.004040b8
jne 0x42796b
fld dword [edi + 0x20]
fsub dword [edi + 0x24]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d90c
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427e7c
call fcn.004040b8
jne 0x42799f
fld dword [edi + 0x20]
fsub dword [edi + 0x24]
fmul dword [0x427e84]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d90c
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427e90
call fcn.004040b8
jne 0x4279de
fld dword [edi + 0x20]
fsub dword [edi + 0x24]
fmul dword [0x427e9c]
fld dword [0x427ea0]
fmul dword [edi + 0x1c]
faddp st(1)
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d958
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427eac
call fcn.004040b8
jne 0x427a0f
fld xword [0x427eb8]
fmul dword [edi + 0x3c]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d958
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427ecc
call fcn.004040b8
jne 0x427a40
fld xword [0x427ed8]
fmul dword [edi + 0x40]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d958
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427eec
call fcn.004040b8
jne 0x427a66
push 0x42c80000
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d958
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427efc
call fcn.004040b8
jne 0x427a9a
fld dword [edi + 0x20]
fsub dword [edi + 0x24]
fmul dword [0x427f04]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d90c
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427f10
call fcn.004040b8
jne 0x427acb
fld xword [0x427f18]
fmul dword [edi + 0x20]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d90c
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427f2c
call fcn.004040b8
jne 0x427afc
fld xword [0x427f18]
fmul dword [edi + 0x20]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d90c
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427f3c
call fcn.004040b8
jne 0x427b85
fld xword [0x427f48]
fmul dword [edi + 0x3c]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d90c
mov eax, dword [edi + 0x10]
add eax, dword [edi + 0x18]
mov dword [ebp - 0x74], eax
fild dword [ebp - 0x74]
fmulp st(1)
add esp, 0xfffffff4
fstp xword [esp]
wait
fld xword [0x427df0]
fmul dword [edi + 0x40]
add esp, 0xfffffff4
fstp xword [esp]
wait
push 0x4005
push 0xc8000000
push 0
call fcn.004133f0
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d90c
fild dword [edi + 0x14]
fmulp st(1)
add esp, 0xfffffff4
fstp xword [esp]
wait
call fcn.004133f0
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427f5c
call fcn.004040b8
jne 0x427bb6
fld xword [0x427eb8]
fmul dword [edi + 0x30]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d90c
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427f70
call fcn.004040b8
jne 0x427bed
fld dword [0x427ea0]
fmul dword [edi + 0x20]
fadd dword [0x427f7c]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d90c
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427f88
call fcn.004040b8
jne 0x427c14
xor eax, eax
mov al, byte [edi + 0x44]
add eax, eax
add eax, 0xe
mov dword [ebp - 0x74], eax
fild dword [ebp - 0x74]
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427fa0
call fcn.004040b8
jne 0x427c4a
xor eax, eax
mov al, byte [edi + 0x44]
add eax, 0x19
mov dword [ebp - 0x74], eax
fild dword [ebp - 0x74]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d958
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427fb0
call fcn.004040b8
jne 0x427c70
push 0x42c80000
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d958
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427fc8
call fcn.004040b8
jne 0x427ca1
fld xword [0x427fd4]
fmul dword [edi + 0x1c]
fadd dword [edi + 0x20]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d958
fstp dword [ebp - 0xc]
wait
jmp 0x427cf3
mov eax, esi
mov edx, 0x427fe8
call fcn.004040b8
je 0x427ce7
mov eax, esi
mov edx, 0x427ff8
call fcn.004040b8
je 0x427ce7
mov eax, esi
mov edx, 0x428008
call fcn.004040b8
je 0x427ce7
mov eax, esi
mov edx, 0x42801c
call fcn.004040b8
je 0x427ce7
mov eax, esi
mov edx, 0x428034
call fcn.004040b8
jne 0x427cee
xor eax, eax
mov dword [ebp - 0xc], eax
jmp 0x427cf3
xor eax, eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
fild dword [ebp - 0x10]
mov eax, dword [ebp + 8]
fstp dword [eax + 4]
wait
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x18]
mov dword [eax + 8], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x427d2b
lea eax, [ebp - 8]
call fcn.00403cac
ret