Function at 0x616830
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x6883aa
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x74
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov eax, dword [ebx + 0x28]
mov edi, ecx
sub esp, 0x18
mov dword [esp + 0x38], 0
lea esi, [edi + 0x60]
mov dword [esp + 0x28], esp
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
mov dword [esi], eax
mov ecx, dword [ebx + 0x2c]
mov dword [esi + 4], ecx
mov edx, dword [ebx + 0x30]
mov dword [esi + 8], edx
mov eax, dword [ebx + 0x34]
mov dword [esi + 0xc], eax
mov ecx, dword [ebx + 0x38]
mov dword [esi + 0x10], ecx
mov edx, dword [ebx + 0x3c]
mov dword [esi + 0x14], edx
lea eax, [esp + 0x50]
fld qword [edi + 0x68]
fld qword [edi + 0x50]
fld qword [edi + 0x48]
fld qword [esi]
fsub st(1)
mov ecx, esp
push eax
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x64], 0
fstp qword [esp + 0x54]
mov dword [esp + 0x68], 0
fstp st(0)
fxch st(1)
fsub st(1)
fstp qword [esp + 0x5c]
fstp st(0)
call fcn.00657020
call fcn.006570d0
fcom qword [0x69db18]
add esp, 0x18
fnstsw ax
test ah, 0x41
jne 0x616a6a
fcom qword [0x6a31d8]
fnstsw ax
test ah, 1
je 0x616a6a
fcom qword [0x6a31d0]
fnstsw ax
test ah, 1
jne 0x61694d
fcom qword [0x6a31c8]
fnstsw ax
test ah, 1
je 0x61694d
push 0
push 0
push 0
push 0
push 0xbff00000
push 0
fstp st(0)
lea ecx, [esp + 0x80]
jmp 0x616a82
fcom qword [0x6a31c0]
fnstsw ax
test ah, 0x41
jne 0x616984
fcom qword [0x6a31b8]
fnstsw ax
test ah, 1
je 0x616984
push 0
push 0
push 0x3ff00000
push 0
push 0
push 0
fstp st(0)
lea ecx, [esp + 0x80]
jmp 0x616a82
fcom qword [0x6a31b0]
fnstsw ax
test ah, 0x41
jne 0x6169bb
fcom qword [0x6a31a8]
fnstsw ax
test ah, 1
je 0x6169bb
push 0
push 0
push 0xbff00000
push 0
push 0
push 0
fstp st(0)
lea ecx, [esp + 0x80]
jmp 0x616a82
fcom qword [0x6a31c0]
fnstsw ax
test ah, 0x41
je 0x6169e3
push 0x40468000
lea ecx, [esp + 0x6c]
push 0
push ecx
fstp st(0)
call fcn.00657290
add esp, 0xc
jmp 0x616a87
fcom qword [0x6a31b8]
fnstsw ax
test ah, 0x41
jne 0x616a15
fcom qword [0x6a31d0]
fnstsw ax
test ah, 0x41
je 0x616a15
push 0x4060e000
lea edx, [esp + 0x6c]
push 0
push edx
fstp st(0)
call fcn.00657290
add esp, 0xc
jmp 0x616a87
fcom qword [0x6a31c8]
fnstsw ax
test ah, 0x41
jne 0x616a47
fcom qword [0x6a31b0]
fnstsw ax
test ah, 0x41
je 0x616a47
push 0x406c2000
lea eax, [esp + 0x6c]
push 0
push eax
fstp st(0)
call fcn.00657290
add esp, 0xc
jmp 0x616a87
fcomp qword [0x6a31a8]
fnstsw ax
test ah, 0x41
jne 0x616a91
push 0x4073b000
lea ecx, [esp + 0x6c]
push 0
push ecx
call fcn.00657290
add esp, 0xc
jmp 0x616a87
push 0
push 0
push 0
push 0
push 0x3ff00000
push 0
fstp st(0)
lea ecx, [esp + 0x80]
call fcn.00657770
push eax
lea ecx, [esp + 0x24]
call fcn.006578b0
mov ecx, dword [edi + 0x38]
push 1
call fcn.005ba220
fcomp qword [0x691ac0]
fnstsw ax
test ah, 0x41
jne 0x616ab4
mov ecx, dword [edi + 0x38]
push 1
call fcn.005ba220
jmp 0x616b08
lea ecx, [esp + 0x50]
call fcn.0064dc20
lea edx, [esp + 0x50]
lea eax, [esp + 0x20]
push edx
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00657880
sub esp, 0x18
lea eax, [edi + 0x48]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.0064dc70
push ebx
call fcn.005f83a0
add esp, 0x38
test eax, eax
je 0x616afb
lea ecx, [esp + 0x50]
push ecx
jmp 0x616afc
push esi
lea eax, [edi + 0x48]
push eax
call fcn.0064def0
add esp, 8
fstp qword [esp + 0x14]
fld qword [edi + 0x48]
fld qword [esp + 0x20]
fmul qword [esp + 0x14]
sub esp, 8
mov ecx, esi
fadd st(1)
fstp qword [esp]
fstp st(0)
call fcn.0064dcb0
fld qword [edi + 0x50]
fld qword [esp + 0x28]
fmul qword [esp + 0x14]
sub esp, 8
mov ecx, esi
fadd st(1)
fstp qword [esp]
fstp st(0)
call fcn.0064dcc0
push 0
push 0
mov ecx, esi
call fcn.0064dce0
push 0xb8
call fcn.0065e5d0
mov ebx, eax
add esp, 4
mov dword [esp + 0x10], ebx
test ebx, ebx
mov dword [esp + 0x88], 0
je 0x616b9d
sub esp, 0x18
mov ecx, esp
mov dword [esp + 0x2c], esp
push esi
call fcn.0064dc70
sub esp, 0x18
lea eax, [edi + 0x48]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.0064dc70
mov ecx, ebx
call fcn.004c79e0
mov esi, eax
jmp 0x616b9f
xor esi, esi
mov edx, dword [edi + 0x34]
mov dword [esp + 0x88], 0xffffffff
mov eax, dword [edx + 0x29c]
push eax
push esi
call fcn.004937b0
add esp, 8
test eax, eax
je 0x616bcd
mov ecx, dword [edi + 0x34]
push 1
mov edx, dword [ecx]
call dword [edx + 0x64]
jmp 0x616bda
test esi, esi
je 0x616bda
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax + 4]
mov ecx, edi
call fcn.00616340
mov ecx, dword [edi + 0x38]
mov dword [edi + 0x10], 0
call fcn.005b9530
mov ecx, dword [edi + 0x34]
push 0
push 0
push 0
call fcn.0065ec30
mov edi, dword [edi + 0x34]
push 1
mov ecx, edi
mov edx, dword [edi]
call dword [edx + 0x64]
mov ecx, dword [esp + 0x80]
pop edi
pop esi
mov eax, 1
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4