Function at 0xb0ce64
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0xa
push 0
push 0
dec ecx
jne 0xb0ce6d
xchg dword [ebp - 4], ecx
push ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0xb0d4bd
push dword fs:[eax]
mov dword fs:[eax], esp
xor ecx, ecx
mov dl, 1
mov eax, dword [0xaf44ec]
call fcn.00af4758
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
call fcn.00af4898
mov dx, word [0xb0d4cc]
not edx
and dx, ax
mov eax, dword [ebp - 0x18]
call fcn.00af49ec
mov eax, dword [ebp - 0x18]
call fcn.00af4898
mov dx, word [0xb0d4d0]
not edx
and dx, ax
mov eax, dword [ebp - 0x18]
call fcn.00af49ec
mov eax, dword [ebp - 0x18]
call fcn.00af4898
mov edx, eax
or dx, word [0xb0d4d4]
mov eax, dword [ebp - 0x18]
call fcn.00af49ec
mov eax, dword [ebp - 0x18]
call fcn.00af48a4
mov edx, 0xb0d4e0
call fcn.00af4320
mov eax, dword [ebp - 0x18]
call fcn.00af48ac
mov edx, 0xb0d4f0
mov ecx, dword [eax]
call dword [ecx]
mov eax, dword [ebp - 0x18]
call fcn.00af48ac
call fcn.00af0688
mov ecx, 0xb0d508
mov edx, 0xb0d514
call fcn.00af10e8
mov eax, dword [ebp - 0x18]
call fcn.00af48ac
call fcn.00af0688
mov ecx, 0xb0d524
mov edx, 0xb0d558
call fcn.00af10e8
mov eax, dword [ebp - 0x18]
call fcn.00af48ac
call fcn.00af0688
mov ecx, 0xb0d56c
mov edx, 0xb0d59c
call fcn.00af10e8
mov eax, dword [ebp - 0x18]
call fcn.00af48ac
call fcn.00af0688
mov ecx, 0xb0d5b0
mov edx, 0xb0d5d8
call fcn.00af10e8
mov eax, dword [ebp - 0x18]
call fcn.00af48ac
call fcn.00af0688
mov ecx, 0xb0d5ec
mov edx, 0xb0d618
call fcn.00af10e8
mov eax, dword [ebp - 0x18]
call fcn.00af48ac
call fcn.00af0688
mov ecx, 0xb0d62c
mov edx, 0xb0d65c
call fcn.00af10e8
mov eax, dword [ebp - 0x18]
call fcn.00af48ac
call fcn.00af0624
mov edx, 0xb0d670
call fcn.00af0750
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
call fcn.00af0624
mov edx, 0xb0d684
call fcn.00af0750
add eax, 8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 8]
call fcn.00405240
mov eax, dword [ebp - 0x18]
call fcn.00af48ac
call fcn.00af0624
mov edx, 0xb0d698
call fcn.00af0750
call fcn.00af0624
mov edx, 0xb0d6ac
call fcn.00af0750
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
call fcn.00af0624
mov edx, 0xb0d6c0
call fcn.00af0750
add eax, 8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xc]
call fcn.00405240
mov eax, dword [ebp - 0x20]
call fcn.00af0624
mov edx, 0xb0d6d4
call fcn.00af0750
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 8]
push dword [eax + 0x34]
push dword [eax + 0x30]
lea edx, [ebp - 0x30]
mov eax, 0xb0d6e8
call fcn.0040e1d4
push dword [ebp - 0x30]
push 0xb0d6fc
mov eax, dword [ebp - 8]
push dword [eax + 0x34]
push dword [eax + 0x30]
lea edx, [ebp - 0x34]
mov eax, 0xb0d708
call fcn.0040e1d4
push dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
call fcn.00af0624
mov edx, 0xb0d71c
call fcn.00af0750
add eax, 8
mov edx, 3
call fcn.0040556c
mov eax, dword [ebp - 0x24]
call fcn.00af0624
mov edx, 0xb0d72c
call fcn.00af0750
add eax, 8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x24]
call fcn.00405240
mov eax, dword [ebp - 0x24]
call fcn.00af0624
mov edx, 0xb0d740
call fcn.00af0750
add eax, 8
push eax
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
call fcn.0040ae2c
mov edx, dword [ebp - 0x38]
pop eax
call fcn.00405240
mov eax, dword [ebp - 0x24]
call fcn.00af0624
mov edx, 0xb0d754
call fcn.00af0750
add eax, 8
push eax
lea edx, [ebp - 0x3c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x2c]
call fcn.0040ae2c
mov edx, dword [ebp - 0x3c]
pop eax
call fcn.00405240
mov eax, dword [ebp - 8]
cmp byte [eax + 0x10], 0
je 0xb0d14e
mov eax, dword [ebp - 0x24]
call fcn.00af0624
mov edx, 0xb0d768
call fcn.00af0750
add eax, 8
mov edx, 0xb0d778
call fcn.00405240
jmp 0xb0d16d
mov eax, dword [ebp - 0x24]
call fcn.00af0624
mov edx, 0xb0d768
call fcn.00af0750
add eax, 8
mov edx, 0xb0d788
call fcn.00405240
mov eax, dword [ebp - 0x20]
call fcn.00af0624
mov edx, 0xb0d798
call fcn.00af0750
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x38]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0xb0d487
inc eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x10], 0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x38]
call fcn.00af8898
cmp dword [eax + 0x20], 0
je 0xb0d2aa
mov eax, dword [ebp - 0x28]
call fcn.00af0624
mov edx, 0xb0d7ac
call fcn.00af0750
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
call fcn.00af0624
mov edx, 0xb0d7c0
call fcn.00af0750
add eax, 8
push eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x38]
call fcn.00af8898
mov edx, dword [eax + 0x20]
pop eax
call fcn.00405240
mov eax, dword [ebp - 0x1c]
call fcn.00af0624
mov edx, 0xb0d7d4
call fcn.00af0750
add eax, 8
push eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x38]
call fcn.00af8898
mov edx, dword [eax + 0x24]
pop eax
call fcn.00405240
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x38]
call fcn.00af8898
fild qword [eax + 0x10]
fdiv dword [0xb0d7dc]
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea edx, [ebp - 0x14]
mov eax, 0xb0d7e8
call fcn.0040cc18
mov al, byte [0xb0d4d4]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x44]
mov edx, dword [0xba25f0]
mov dl, byte [edx]
call fcn.004053d4
mov edx, dword [ebp - 0x44]
mov ecx, 0xb0d7f8
mov eax, dword [ebp - 0x14]
call fcn.00410968
mov edx, dword [ebp - 0x40]
lea eax, [ebp - 0x14]
call fcn.00405284
mov eax, dword [ebp - 0x1c]
call fcn.00af0624
mov edx, 0xb0d804
call fcn.00af0750
add eax, 8
mov edx, dword [ebp - 0x14]
call fcn.00405240
jmp 0xb0d47b
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x38]
call fcn.00af8898
cmp dword [eax + 0x20], 0
jne 0xb0d47b
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x38]
call fcn.00af8898
cmp dword [eax + 0x30], 0
je 0xb0d47b
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x38]
call fcn.00af8898
cmp dword [eax + 0x38], 0
je 0xb0d47b
mov eax, dword [ebp - 0x28]
call fcn.00af0624
mov edx, 0xb0d818
call fcn.00af0750
mov dword [ebp - 0x1c], eax
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0x10]
inc eax
call fcn.0040ae2c
mov eax, dword [ebp - 0x1c]
call fcn.00af0624
mov edx, 0xb0d82c
call fcn.00af0750
add eax, 8
mov edx, dword [ebp - 0x14]
call fcn.00405240
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x38]
call fcn.00af8898
mov eax, dword [eax + 0x38]
push eax
mov ecx, 0xb0d844
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.00b0c2e8
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x38]
call fcn.00af8898
fild qword [eax + 0x18]
fdiv dword [0xb0d7dc]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea edx, [ebp - 0x14]
mov eax, 0xb0d858
call fcn.0040cc18
mov al, byte [0xb0d4d4]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x4c]
mov edx, dword [0xba25f0]
mov dl, byte [edx]
call fcn.004053d4
mov edx, dword [ebp - 0x4c]
mov ecx, 0xb0d7f8
mov eax, dword [ebp - 0x14]
call fcn.00410968
mov edx, dword [ebp - 0x48]
lea eax, [ebp - 0x14]
call fcn.00405284
mov eax, dword [ebp - 0x1c]
call fcn.00af0624
mov edx, 0xb0d868
call fcn.00af0750
add eax, 8
mov edx, dword [ebp - 0x14]
call fcn.00405240
mov eax, dword [ebp - 0x1c]
call fcn.00af0624
mov edx, 0xb0d7d4
call fcn.00af0750
add eax, 8
push eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x38]
call fcn.00af8898
mov edx, dword [eax + 0x24]
pop eax
call fcn.00405240
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x38]
call fcn.00af8898
fild qword [eax + 0x10]
fdiv dword [0xb0d7dc]
fabs
add esp, 0xfffffff4
fstp xword [esp]
wait
lea edx, [ebp - 0x14]
mov eax, 0xb0d7e8
call fcn.0040cc18
mov al, byte [0xb0d4d4]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x54]
mov edx, dword [0xba25f0]
mov dl, byte [edx]
call fcn.004053d4
mov edx, dword [ebp - 0x54]
mov ecx, 0xb0d7f8
mov eax, dword [ebp - 0x14]
call fcn.00410968
mov edx, dword [ebp - 0x50]
lea eax, [ebp - 0x14]
call fcn.00405284
mov eax, dword [ebp - 0x1c]
call fcn.00af0624
mov edx, 0xb0d804
call fcn.00af0750
add eax, 8
mov edx, dword [ebp - 0x14]
call fcn.00405240
inc dword [ebp - 0x10]
dec dword [ebp - 0x2c]
jne 0xb0d19f
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18]
call fcn.00af48c0
mov eax, dword [ebp - 0x18]
call fcn.0040429c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xb0d4c4
lea eax, [ebp - 0x54]
mov edx, 0xa
call fcn.00405210
lea eax, [ebp - 0x14]
call fcn.004051ec
ret