Function at 0x6af6d8
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffd4
push ebx
push esi
xor edx, edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x6af920
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x318]
mov eax, dword [eax + 0x22c]
call fcn.004575f0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x31c]
call fcn.00480048
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x320]
call fcn.00480048
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x318]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x31c]
mov eax, dword [ebp - 0x20]
call fcn.0045ab1c
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x31c]
mov eax, dword [ebp - 0x20]
call fcn.0045aaac
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x360]
dec eax
test eax, eax
jl 0x6af90a
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 8], 0
mov dl, 1
mov eax, dword [0x4274cc]
call fcn.0042e00c
mov dword [ebp - 0x14], eax
mov dl, 1
mov eax, dword [0x4274cc]
call fcn.0042e00c
mov dword [ebp - 0xc], eax
mov dl, 1
mov eax, dword [0x4274cc]
call fcn.0042e00c
mov dword [ebp - 0x10], eax
xor eax, eax
push ebp
push 0x6af8f7
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x22c]
call fcn.004574a0
mov ebx, eax
lea ecx, [ebp - 0x28]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x364]
mov edx, dword [ebp - 8]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x28]
mov eax, ebx
call fcn.00456e9c
mov ecx, dword [ebp - 8]
xor edx, edx
mov eax, ebx
call fcn.00457084
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 4]
mov esi, dword [edx + 0x31c]
sub eax, dword [esi + 0x34]
mov dword [ebp - 0x2c], eax
fild dword [ebp - 0x2c]
fdiv dword [0x6af930]
call fcn.00402ff4
mov dword [ebp - 0x1c], eax
mov eax, dword [esi + 0x30]
add eax, 0x1e
imul dword [ebp - 8]
add eax, 0xa
mov dword [ebp - 0x18], eax
lea edx, [ebp - 0x1c]
mov eax, ebx
call fcn.0045733c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x370]
mov edx, dword [ebp - 8]
mov edx, dword [eax + edx*4]
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x31c]
mov edx, dword [eax + 0x34]
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x31c]
mov edx, dword [eax + 0x30]
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.006aed7c
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x370]
mov edx, dword [ebp - 8]
mov eax, dword [eax + edx*4]
call fcn.0042e6c0
cmp al, 7
jne 0x6af8ab
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.006af958
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.006afc0c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x31c]
xor ecx, ecx
mov edx, dword [ebp - 0xc]
call fcn.0047fabc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x320]
xor ecx, ecx
mov edx, dword [ebp - 0x10]
call fcn.0047fabc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6af8fe
mov eax, dword [ebp - 0x14]
call fcn.004044a8
mov eax, dword [ebp - 0xc]
call fcn.004044a8
mov eax, dword [ebp - 0x10]
call fcn.004044a8
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6af927
lea eax, [ebp - 0x28]
call fcn.004052bc
ret