Function at 0x426ac8
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff8c
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 4], ecx
mov ebx, edx
mov esi, eax
lea edi, [ebp - 0x70]
xor eax, eax
push ebp
push 0x427344
push dword fs:[eax]
mov dword fs:[eax], esp
push ebx
lea eax, [ebp - 8]
push eax
call fcn.00417048
push ebx
call fcn.00416bbc
mov byte [edi + 0x44], al
push ebx
call fcn.00417258
fstp dword [edi + 0x1c]
wait
push ebx
call fcn.00417388
fstp dword [ebp - 0x74]
wait
push ebx
call fcn.0041720c
fadd dword [ebp - 0x74]
fstp dword [edi + 0x20]
wait
push ebx
call fcn.0041720c
fstp dword [edi + 0x24]
wait
push ebx
call fcn.00417424
fstp dword [edi + 0x28]
wait
push ebx
call fcn.00416ff8
fstp dword [edi + 0x2c]
wait
push ebx
call fcn.00416fcc
fstp dword [edi + 0x30]
wait
push ebx
call fcn.00416f38
fstp dword [edi + 0x34]
wait
mov eax, dword [ebp - 4]
push eax
call fcn.00417258
fstp dword [edi + 0x38]
wait
mov eax, dword [ebp - 4]
push eax
call fcn.00416f10
fstp dword [edi + 0x3c]
wait
mov eax, dword [ebp - 4]
push eax
call fcn.00416f38
fstp dword [edi + 0x40]
wait
mov eax, dword [0x471a40]
mov eax, dword [eax]
push eax
push ebx
push 0
call fcn.00416d44
mov dword [edi], eax
mov eax, dword [0x471a40]
mov eax, dword [eax]
push eax
push ebx
push 1
call fcn.00416d44
mov dword [edi + 4], eax
mov eax, dword [0x471a40]
mov eax, dword [eax]
push eax
push ebx
push 2
call fcn.00416d44
mov dword [edi + 8], eax
mov eax, dword [0x471a40]
mov eax, dword [eax]
push eax
push ebx
push 3
call fcn.00416d44
mov dword [edi + 0xc], eax
mov dword [edi + 0x10], 1
xor eax, eax
mov dword [edi + 0x14], eax
xor eax, eax
mov dword [edi + 0x18], eax
cmp dword [ebp + 0xc], 0
je 0x426bed
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
cmp dword [ebp + 0x10], 0
je 0x426c0e
mov eax, dword [ebp + 0x10]
cmp dword [eax], 2
jne 0x426c0e
xor eax, eax
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 1
xor eax, eax
mov dword [edi + 0x18], eax
jmp 0x426c2d
cmp dword [ebp + 0x10], 0
je 0x426c2d
mov eax, dword [ebp + 0x10]
cmp dword [eax], 3
jne 0x426c2d
xor eax, eax
mov dword [edi + 0x10], eax
xor eax, eax
mov dword [edi + 0x14], eax
mov dword [edi + 0x18], 1
mov dword [ebp - 0x10], 1
mov byte [ebp - 0x19], 0
mov eax, dword [ebp - 8]
mov edx, 0x42735c
call fcn.00404074
je 0x426c65
mov eax, dword [ebp - 8]
mov edx, 0x42736c
call fcn.00404074
je 0x426c65
mov eax, dword [ebp - 8]
mov edx, 0x42737c
call fcn.00404074
jne 0x426c69
mov byte [ebp - 0x19], 1
mov eax, esi
mov edx, 0x42738c
call fcn.00404074
jne 0x426c7c
cmp dword [edi], 0
je 0x426ce2
mov eax, esi
mov edx, 0x427398
call fcn.00404074
jne 0x426c90
cmp dword [edi + 4], 0
je 0x426ce2
mov eax, esi
mov edx, 0x4273a4
call fcn.00404074
jne 0x426ca4
cmp dword [edi + 8], 0
je 0x426ce2
cmp dword [edi + 0xc], 0
jne 0x426cec
mov eax, esi
mov edx, 0x4273b0
call fcn.00404074
je 0x426ce2
mov eax, esi
mov edx, 0x4273bc
call fcn.00404074
je 0x426ce2
mov eax, esi
mov edx, 0x4273c8
call fcn.00404074
je 0x426ce2
mov eax, esi
mov edx, 0x4273d4
call fcn.00404074
jne 0x426cec
xor eax, eax
mov dword [ebp - 0xc], eax
jmp 0x427313
mov eax, esi
mov edx, 0x42738c
call fcn.00404074
je 0x426d6a
mov eax, esi
mov edx, 0x427398
call fcn.00404074
je 0x426d6a
mov eax, esi
mov edx, 0x4273a4
call fcn.00404074
je 0x426d6a
mov eax, esi
mov edx, 0x4273b0
call fcn.00404074
je 0x426d6a
mov eax, esi
mov edx, 0x4273e0
call fcn.00404074
je 0x426d6a
cmp byte [ebp - 0x19], 0
je 0x426df2
mov eax, esi
mov edx, 0x4273bc
call fcn.00404074
je 0x426d6a
mov eax, esi
mov edx, 0x4273c8
call fcn.00404074
je 0x426d6a
mov eax, esi
mov edx, 0x4273d4
call fcn.00404074
jne 0x426df2
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x18]
push eax
mov eax, edi
mov ecx, esi
mov edx, dword [ebp - 8]
call fcn.00426930
fld dword [ebp - 0x20]
fcomp dword [0x4273e4]
fnstsw ax
sahf
jbe 0x426da9
push dword [ebp - 0x20]
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf78
fstp dword [ebp - 0x20]
wait
fld dword [ebp - 0x24]
fcomp dword [0x4273e4]
fnstsw ax
sahf
jbe 0x426dc8
push dword [ebp - 0x24]
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf2c
fstp dword [ebp - 0x24]
wait
fld dword [ebp - 0x20]
fadd dword [ebp - 0x24]
fadd dword [ebp - 0x28]
fstp dword [ebp - 0xc]
wait
cmp dword [ebp - 0x14], 0
je 0x426de6
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
jmp 0x427313
mov dword [ebp - 0x10], 1
jmp 0x427313
mov eax, esi
mov edx, 0x4273f0
call fcn.00404074
jne 0x426e16
push dword [edi + 0x20]
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf2c
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x4273fc
call fcn.00404074
jne 0x426e41
xor eax, eax
mov al, byte [edi + 0x44]
shl eax, 2
lea eax, [eax + eax*4]
add eax, 0x32
mov dword [ebp - 0x74], eax
fild dword [ebp - 0x74]
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x42740c
call fcn.00404074
jne 0x426e72
fld xword [0x427410]
fmul dword [edi + 0x40]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf78
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x427424
call fcn.00404074
jne 0x426ea9
fld xword [0x427428]
fmul dword [edi + 0x1c]
fadd dword [0x427434]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf78
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x427440
call fcn.00404074
jne 0x426ecf
push 0x42c80000
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf78
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x42744c
call fcn.00404074
jne 0x426f00
fld xword [0x427454]
fmul dword [edi + 0x40]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf78
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x427468
call fcn.00404074
jne 0x426f37
fld xword [0x427410]
fmul dword [edi + 0x1c]
fadd dword [0x427470]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf78
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x42747c
call fcn.00404074
jne 0x426f5d
push 0x42280000
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf78
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x42748c
call fcn.00404074
jne 0x426f8b
fld dword [edi + 0x20]
fsub dword [edi + 0x24]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf2c
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x42749c
call fcn.00404074
jne 0x426fbf
fld dword [edi + 0x20]
fsub dword [edi + 0x24]
fmul dword [0x4274a4]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf2c
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x4274b0
call fcn.00404074
jne 0x426ffe
fld dword [edi + 0x20]
fsub dword [edi + 0x24]
fmul dword [0x4274bc]
fld dword [0x4274c0]
fmul dword [edi + 0x1c]
faddp st(1)
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf78
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x4274cc
call fcn.00404074
jne 0x42702f
fld xword [0x4274d8]
fmul dword [edi + 0x3c]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf78
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x4274ec
call fcn.00404074
jne 0x427060
fld xword [0x4274f8]
fmul dword [edi + 0x40]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf78
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x42750c
call fcn.00404074
jne 0x427086
push 0x42c80000
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf78
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x42751c
call fcn.00404074
jne 0x4270ba
fld dword [edi + 0x20]
fsub dword [edi + 0x24]
fmul dword [0x427524]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf2c
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x427530
call fcn.00404074
jne 0x4270eb
fld xword [0x427538]
fmul dword [edi + 0x20]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf2c
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x42754c
call fcn.00404074
jne 0x42711c
fld xword [0x427538]
fmul dword [edi + 0x20]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf2c
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x42755c
call fcn.00404074
jne 0x4271a5
fld xword [0x427568]
fmul dword [edi + 0x3c]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf2c
mov eax, dword [edi + 0x10]
add eax, dword [edi + 0x18]
mov dword [ebp - 0x74], eax
fild dword [ebp - 0x74]
fmulp st(1)
add esp, 0xfffffff4
fstp xword [esp]
wait
fld xword [0x427410]
fmul dword [edi + 0x40]
add esp, 0xfffffff4
fstp xword [esp]
wait
push 0x4005
push 0xc8000000
push 0
call fcn.00413188
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf2c
fild dword [edi + 0x14]
fmulp st(1)
add esp, 0xfffffff4
fstp xword [esp]
wait
call fcn.00413188
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x42757c
call fcn.00404074
jne 0x4271d6
fld xword [0x4274d8]
fmul dword [edi + 0x30]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf2c
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x427590
call fcn.00404074
jne 0x42720d
fld dword [0x4274c0]
fmul dword [edi + 0x20]
fadd dword [0x42759c]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf2c
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x4275a8
call fcn.00404074
jne 0x427234
xor eax, eax
mov al, byte [edi + 0x44]
add eax, eax
add eax, 0xe
mov dword [ebp - 0x74], eax
fild dword [ebp - 0x74]
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x4275c0
call fcn.00404074
jne 0x42726a
xor eax, eax
mov al, byte [edi + 0x44]
add eax, 0x19
mov dword [ebp - 0x74], eax
fild dword [ebp - 0x74]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf78
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x4275d0
call fcn.00404074
jne 0x427290
push 0x42c80000
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf78
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x4275e8
call fcn.00404074
jne 0x4272c1
fld xword [0x4275f4]
fmul dword [edi + 0x1c]
fadd dword [edi + 0x20]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041cf78
fstp dword [ebp - 0xc]
wait
jmp 0x427313
mov eax, esi
mov edx, 0x427608
call fcn.00404074
je 0x427307
mov eax, esi
mov edx, 0x427618
call fcn.00404074
je 0x427307
mov eax, esi
mov edx, 0x427628
call fcn.00404074
je 0x427307
mov eax, esi
mov edx, 0x42763c
call fcn.00404074
je 0x427307
mov eax, esi
mov edx, 0x427654
call fcn.00404074
jne 0x42730e
xor eax, eax
mov dword [ebp - 0xc], eax
jmp 0x427313
xor eax, eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
fild dword [ebp - 0x10]
mov eax, dword [ebp + 8]
fstp dword [eax + 4]
wait
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x18]
mov dword [eax + 8], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x42734b
lea eax, [ebp - 8]
call fcn.00403c68
ret