Function at 0x419fe0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4d3491
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x184
push ebx
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov dword [esp + 0x14], ebx
mov eax, dword [esi + 0x44]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x28], ebx
imul ecx, dword [eax + 0xc]
mov eax, dword [esi + 0x4c]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov edx, dword [eax + 8]
mov dword [esp + 0x34], ebx
cmp edx, ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x1c], ebx
jle 0x41a1a0
mov edx, dword [eax + 0xc]
xor edi, edi
test edx, edx
jle 0x41a18f
mov eax, dword [esp + 0x14]
add ecx, eax
mov dword [esp + 0x18], ecx
push edi
push ebx
mov ecx, esi
call fcn.0041c180
mov ecx, eax
call fcn.0047a5a0
mov ecx, eax
call fcn.0047a010
push eax
lea ecx, [esp + 0x44]
call fcn.00479310
lea ecx, [esp + 0xf8]
push 5
push ecx
lea ecx, [esp + 0x48]
mov dword [esp + 0x1a0], 0
call fcn.004794a0
mov edx, dword [esp + 0x100]
mov byte [esp + 0x198], 1
test edx, edx
jle 0x41a0dc
mov ecx, dword [esp + 0x188]
lea ebx, [esp + 0x20]
lea eax, [esp + 0x20]
sub ecx, ebx
fld qword [ecx + eax]
fadd qword [eax]
add eax, 8
dec edx
fstp qword [eax - 8]
jne 0x41a0ca
mov ebx, dword [esp + 0x1c]
push edi
push ebx
mov ecx, esi
call fcn.0041c180
mov ecx, eax
call fcn.0047a5a0
mov ecx, eax
call fcn.0047a040
fld qword [eax]
fcomp qword [0x4db678]
fnstsw ax
test ah, 0x41
jne 0x41a117
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0xc]
mov edx, 1
shl edx, cl
or eax, edx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xe8]
test eax, eax
je 0x41a131
mov ecx, dword [esp + 0x14]
mov eax, 1
shl eax, cl
or dword [esp + 0xc], eax
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
inc eax
inc edx
lea ecx, [esp + 0xf8]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edx
mov byte [esp + 0x198], 0
call fcn.0044c440
lea ecx, [esp + 0x48]
mov dword [esp + 0x198], 2
call fcn.0044c440
mov ecx, dword [esi + 0x4c]
inc edi
mov dword [esp + 0x198], 0xffffffff
mov dword [esp + 0x40], 0x4db6c8
cmp edi, dword [ecx + 0xc]
jl 0x41a067
mov ecx, dword [esp + 0x10]
mov eax, dword [esi + 0x4c]
inc ebx
mov dword [esp + 0x1c], ebx
cmp ebx, dword [eax + 8]
jl 0x41a050
mov eax, dword [esi + 0x44]
mov ecx, 4
mov edx, dword [eax + 0x10]
imul edx, dword [eax + 0xc]
mov dword [esp + 0x10], edx
lea eax, [esp + 0x20]
fild dword [esp + 0x10]
fld qword [eax]
fdiv st(1)
add eax, 8
dec ecx
fstp qword [eax - 8]
jne 0x41a1bb
mov ecx, dword [esp + 0xc]
mov eax, dword [esi + 4]
mov edi, dword [ebp + 8]
push ecx
push eax
mov ecx, edi
fstp st(0)
call fcn.00411f20
mov ecx, eax
call fcn.00411f00
mov ecx, esi
call fcn.004422a0
mov ecx, eax
mov dword [esp + 0x10], eax
call fcn.00441c90
mov edx, dword [esi + 0x44]
mov ebx, eax
mov ecx, edi
mov eax, dword [edx + 0x14]
push eax
call fcn.00411f20
mov ecx, dword [esi + 0x44]
xor edi, edi
mov eax, dword [ecx + 0x14]
test eax, eax
jle 0x41a273
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
push edx
mov edx, dword [esp + 0x34]
push eax
mov eax, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x34]
push edx
mov edx, dword [esp + 0x34]
push eax
mov eax, dword [esp + 0x34]
push ecx
mov ecx, dword [ebp + 8]
push edx
push eax
push ebx
call fcn.00411f20
mov ecx, eax
call fcn.00411f40
mov ecx, eax
call fcn.00411f40
mov ecx, eax
call fcn.00411f40
mov ecx, eax
call fcn.00411f40
mov ecx, dword [esp + 0x10]
inc edi
call fcn.00441ca0
mov ecx, dword [esi + 0x44]
mov ebx, eax
cmp edi, dword [ecx + 0x14]
jl 0x41a212
mov ecx, dword [esp + 0x190]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4