Function at 0x4518a0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49255d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb0
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x48], 0x497f34
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0x49bc74
mov dword [ebp - 4], 0
mov eax, dword [ebp + 8]
mov edx, dword [eax]
mov ecx, dword [ebp + 8]
call dword [edx + 0x1c]
push 1
mov ecx, dword [ebp + 8]
call fcn.0047686a
push 0xff8080
mov eax, dword [ebp + 8]
mov edx, dword [eax]
mov ecx, dword [ebp + 8]
call dword [edx + 0x30]
mov eax, dword [ebp - 0xbc]
fld qword [eax + 0x10]
fchs
fmul qword [0x495b28]
sub esp, 8
fstp qword [esp]
call fcn.0040ba60
add esp, 8
mov dword [ebp - 0x9c], eax
mov ecx, dword [ebp - 0xbc]
fld qword [ebp + 0xc]
fmul qword [ecx + 0x18]
sub esp, 8
fstp qword [esp]
call fcn.0040ba60
add esp, 8
mov dword [ebp - 0x98], eax
push 0x4ab5a4
xor edx, edx
push edx
xor eax, eax
push eax
xor ecx, ecx
push ecx
xor edx, edx
push edx
xor eax, eax
push eax
xor ecx, ecx
push ecx
xor edx, edx
push edx
xor eax, eax
push eax
push 0
push 0
mov ecx, dword [ebp - 0x9c]
push ecx
push 0
mov edx, dword [ebp - 0x98]
push edx
call dword [0x49513c]
push eax
lea ecx, [ebp - 0x48]
call fcn.004771a3
lea eax, [ebp - 0x48]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 0x28]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x4c], edx
lea eax, [ebp - 0x50]
push eax
mov ecx, dword [0x4b0720]
call fcn.00429f80
mov ecx, dword [ebp - 0xbc]
add ecx, 4
mov dword [ebp - 0xb0], ecx
mov edx, dword [ebp - 0xb0]
mov eax, dword [edx]
mov ecx, dword [eax - 8]
mov dword [ebp - 0xa8], ecx
mov edx, dword [ebp - 0xb0]
mov eax, dword [edx]
mov dword [ebp - 0xac], eax
lea ecx, [ebp - 0xa4]
push ecx
mov edx, dword [ebp - 0xa8]
push edx
mov eax, dword [ebp - 0xac]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
call dword [0x495140]
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x70], ecx
mov edx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0xbc]
add ecx, 4
push ecx
lea ecx, [ebp - 0x58]
call fcn.00472207
mov byte [ebp - 4], 1
push 0x20
push 1
lea ecx, [ebp - 0x58]
call fcn.0046b9b6
push 0xd
push 2
lea ecx, [ebp - 0x58]
call fcn.0046b9b6
mov edx, dword [0x4abd64]
mov dword [ebp - 0x24], edx
mov byte [ebp - 4], 2
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x20], 0
cmp dword [ebp - 0x54], 0xffffffff
je 0x451c0c
push 0
push 0xd
lea ecx, [ebp - 0x58]
call fcn.00472967
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xffffffff
je 0x451b74
mov eax, dword [ebp - 0x54]
push eax
lea ecx, [ebp - 0x5c]
push ecx
lea ecx, [ebp - 0x58]
call fcn.0046bbd2
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x54]
add edx, 2
push edx
push 0
lea ecx, [ebp - 0x58]
call fcn.0046b8da
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x60], ecx
fild dword [ebp - 0x20]
mov edx, dword [ebp - 0xbc]
fmul qword [edx + 0x18]
fmul qword [ebp + 0xc]
sub esp, 8
fstp qword [esp]
call fcn.0040ba60
add esp, 8
mov ecx, dword [ebp - 0x60]
add ecx, eax
mov dword [ebp - 0x60], ecx
mov edx, dword [ebp - 0xbc]
mov eax, dword [edx + 0x14]
push eax
mov ecx, dword [edx + 0x10]
push ecx
mov edx, dword [ebp - 0x60]
push edx
mov eax, dword [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x50]
push edx
lea eax, [ebp - 0x7c]
push eax
call fcn.00411310
add esp, 0x1c
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x60], edx
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax - 8]
mov dword [ebp - 0xb4], ecx
mov edx, dword [ebp - 0xb4]
push edx
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, dword [ebp - 0x60]
push ecx
mov edx, dword [ebp - 0x64]
push edx
mov eax, dword [ebp + 8]
mov edx, dword [eax]
mov ecx, dword [ebp + 8]
call dword [edx + 0x5c]
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x5c]
call fcn.00472492
jmp 0x451c07
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x6c], ecx
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x68], edx
fild dword [ebp - 0x20]
mov eax, dword [ebp - 0xbc]
fmul qword [eax + 0x18]
fmul qword [ebp + 0xc]
sub esp, 8
fstp qword [esp]
call fcn.0040ba60
add esp, 8
mov ecx, dword [ebp - 0x68]
add ecx, eax
mov dword [ebp - 0x68], ecx
mov edx, dword [ebp - 0xbc]
mov eax, dword [edx + 0x14]
push eax
mov ecx, dword [edx + 0x10]
push ecx
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x6c]
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x50]
push edx
lea eax, [ebp - 0x84]
push eax
call fcn.00411310
add esp, 0x1c
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x68], edx
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax - 8]
mov dword [ebp - 0xb8], ecx
mov edx, dword [ebp - 0xb8]
push edx
mov eax, dword [ebp - 0x58]
push eax
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x6c]
push edx
mov eax, dword [ebp + 8]
mov edx, dword [eax]
mov ecx, dword [ebp + 8]
call dword [edx + 0x5c]
jmp 0x451a82
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x8c], eax
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x88], ecx
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x94], edx
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x90], eax
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x88]
mov dword [ebp - 0x28], ecx
push 3
push 3
lea edx, [ebp - 0x34]
push edx
call dword [fcn.004956a4]
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
mov edx, dword [ebp - 0x30]
push edx
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
call dword [0x495148]
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
call dword [edx + 0x28]
push 0xffffffffffffffff
mov eax, dword [ebp + 8]
mov edx, dword [eax]
mov ecx, dword [ebp + 8]
call dword [edx + 0x20]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x24]
call fcn.00472492
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x58]
call fcn.00472492
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x48], 0x49bc74
mov dword [ebp - 0x48], 0x497f34
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x48]
call fcn.004771fa
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc