Function at 0x4274d0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff8c
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 4], ecx
mov ebx, edx
mov esi, eax
lea edi, [ebp - 0x70]
xor eax, eax
push ebp
push 0x427d4c
push dword fs:[eax]
mov dword fs:[eax], esp
push ebx
lea eax, [ebp - 8]
push eax
call fcn.0041786c
push ebx
call fcn.00417310
mov byte [edi + 0x44], al
push ebx
call fcn.00417ba4
fstp dword [edi + 0x1c]
wait
push ebx
call fcn.00417d50
fstp dword [ebp - 0x74]
wait
push ebx
call fcn.00417b00
fadd dword [ebp - 0x74]
fstp dword [edi + 0x20]
wait
push ebx
call fcn.00417b00
fstp dword [edi + 0x24]
wait
push ebx
call fcn.00417e00
fstp dword [edi + 0x28]
wait
push ebx
call fcn.00417814
fstp dword [edi + 0x2c]
wait
push ebx
call fcn.004177e4
fstp dword [edi + 0x30]
wait
push ebx
call fcn.00417750
fstp dword [edi + 0x34]
wait
mov eax, dword [ebp - 4]
push eax
call fcn.00417ba4
fstp dword [edi + 0x38]
wait
mov eax, dword [ebp - 4]
push eax
call fcn.00417728
fstp dword [edi + 0x3c]
wait
mov eax, dword [ebp - 4]
push eax
call fcn.00417750
fstp dword [edi + 0x40]
wait
mov eax, dword [0x479ad4]
mov eax, dword [eax]
push eax
push ebx
push 0
call fcn.00417530
mov dword [edi], eax
mov eax, dword [0x479ad4]
mov eax, dword [eax]
push eax
push ebx
push 1
call fcn.00417530
mov dword [edi + 4], eax
mov eax, dword [0x479ad4]
mov eax, dword [eax]
push eax
push ebx
push 2
call fcn.00417530
mov dword [edi + 8], eax
mov eax, dword [0x479ad4]
mov eax, dword [eax]
push eax
push ebx
push 3
call fcn.00417530
mov dword [edi + 0xc], eax
mov dword [edi + 0x10], 1
xor eax, eax
mov dword [edi + 0x14], eax
xor eax, eax
mov dword [edi + 0x18], eax
cmp dword [ebp + 0xc], 0
je 0x4275f5
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
cmp dword [ebp + 0x10], 0
je 0x427616
mov eax, dword [ebp + 0x10]
cmp dword [eax], 2
jne 0x427616
xor eax, eax
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 1
xor eax, eax
mov dword [edi + 0x18], eax
jmp 0x427635
cmp dword [ebp + 0x10], 0
je 0x427635
mov eax, dword [ebp + 0x10]
cmp dword [eax], 3
jne 0x427635
xor eax, eax
mov dword [edi + 0x10], eax
xor eax, eax
mov dword [edi + 0x14], eax
mov dword [edi + 0x18], 1
mov dword [ebp - 0x10], 1
mov byte [ebp - 0x19], 0
mov eax, dword [ebp - 8]
mov edx, 0x427d64
call fcn.004040b8
je 0x42766d
mov eax, dword [ebp - 8]
mov edx, 0x427d74
call fcn.004040b8
je 0x42766d
mov eax, dword [ebp - 8]
mov edx, 0x427d84
call fcn.004040b8
jne 0x427671
mov byte [ebp - 0x19], 1
mov eax, esi
mov edx, 0x427d94
call fcn.004040b8
jne 0x427684
cmp dword [edi], 0
je 0x4276ea
mov eax, esi
mov edx, 0x427da0
call fcn.004040b8
jne 0x427698
cmp dword [edi + 4], 0
je 0x4276ea
mov eax, esi
mov edx, 0x427dac
call fcn.004040b8
jne 0x4276ac
cmp dword [edi + 8], 0
je 0x4276ea
cmp dword [edi + 0xc], 0
jne 0x4276f4
mov eax, esi
mov edx, 0x427db8
call fcn.004040b8
je 0x4276ea
mov eax, esi
mov edx, 0x427dc4
call fcn.004040b8
je 0x4276ea
mov eax, esi
mov edx, 0x427dd0
call fcn.004040b8
je 0x4276ea
mov eax, esi
mov edx, 0x427ddc
call fcn.004040b8
jne 0x4276f4
xor eax, eax
mov dword [ebp - 0xc], eax
jmp 0x427d1b
mov eax, esi
mov edx, 0x427d94
call fcn.004040b8
je 0x427772
mov eax, esi
mov edx, 0x427da0
call fcn.004040b8
je 0x427772
mov eax, esi
mov edx, 0x427dac
call fcn.004040b8
je 0x427772
mov eax, esi
mov edx, 0x427db8
call fcn.004040b8
je 0x427772
mov eax, esi
mov edx, 0x427de8
call fcn.004040b8
je 0x427772
cmp byte [ebp - 0x19], 0
je 0x4277fa
mov eax, esi
mov edx, 0x427dc4
call fcn.004040b8
je 0x427772
mov eax, esi
mov edx, 0x427dd0
call fcn.004040b8
je 0x427772
mov eax, esi
mov edx, 0x427ddc
call fcn.004040b8
jne 0x4277fa
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x18]
push eax
mov eax, edi
mov ecx, esi
mov edx, dword [ebp - 8]
call fcn.00427338
fld dword [ebp - 0x20]
fcomp dword [0x427dec]
fnstsw ax
sahf
jbe 0x4277b1
push dword [ebp - 0x20]
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d980
fstp dword [ebp - 0x20]
wait
fld dword [ebp - 0x24]
fcomp dword [0x427dec]
fnstsw ax
sahf
jbe 0x4277d0
push dword [ebp - 0x24]
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d934
fstp dword [ebp - 0x24]
wait
fld dword [ebp - 0x20]
fadd dword [ebp - 0x24]
fadd dword [ebp - 0x28]
fstp dword [ebp - 0xc]
wait
cmp dword [ebp - 0x14], 0
je 0x4277ee
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
jmp 0x427d1b
mov dword [ebp - 0x10], 1
jmp 0x427d1b
mov eax, esi
mov edx, 0x427df8
call fcn.004040b8
jne 0x42781e
push dword [edi + 0x20]
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d934
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x427e04
call fcn.004040b8
jne 0x427849
xor eax, eax
mov al, byte [edi + 0x44]
shl eax, 2
lea eax, [eax + eax*4]
add eax, 0x32
mov dword [ebp - 0x74], eax
fild dword [ebp - 0x74]
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x427e14
call fcn.004040b8
jne 0x42787a
fld xword [0x427e18]
fmul dword [edi + 0x40]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d980
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x427e2c
call fcn.004040b8
jne 0x4278b1
fld xword [0x427e30]
fmul dword [edi + 0x1c]
fadd dword [0x427e3c]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d980
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x427e48
call fcn.004040b8
jne 0x4278d7
push 0x42c80000
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d980
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x427e54
call fcn.004040b8
jne 0x427908
fld xword [0x427e5c]
fmul dword [edi + 0x40]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d980
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x427e70
call fcn.004040b8
jne 0x42793f
fld xword [0x427e18]
fmul dword [edi + 0x1c]
fadd dword [0x427e78]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d980
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x427e84
call fcn.004040b8
jne 0x427965
push 0x42280000
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d980
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x427e94
call fcn.004040b8
jne 0x427993
fld dword [edi + 0x20]
fsub dword [edi + 0x24]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d934
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x427ea4
call fcn.004040b8
jne 0x4279c7
fld dword [edi + 0x20]
fsub dword [edi + 0x24]
fmul dword [0x427eac]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d934
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x427eb8
call fcn.004040b8
jne 0x427a06
fld dword [edi + 0x20]
fsub dword [edi + 0x24]
fmul dword [0x427ec4]
fld dword [0x427ec8]
fmul dword [edi + 0x1c]
faddp st(1)
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d980
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x427ed4
call fcn.004040b8
jne 0x427a37
fld xword [0x427ee0]
fmul dword [edi + 0x3c]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d980
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x427ef4
call fcn.004040b8
jne 0x427a68
fld xword [0x427f00]
fmul dword [edi + 0x40]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d980
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x427f14
call fcn.004040b8
jne 0x427a8e
push 0x42c80000
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d980
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x427f24
call fcn.004040b8
jne 0x427ac2
fld dword [edi + 0x20]
fsub dword [edi + 0x24]
fmul dword [0x427f2c]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d934
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x427f38
call fcn.004040b8
jne 0x427af3
fld xword [0x427f40]
fmul dword [edi + 0x20]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d934
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x427f54
call fcn.004040b8
jne 0x427b24
fld xword [0x427f40]
fmul dword [edi + 0x20]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d934
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x427f64
call fcn.004040b8
jne 0x427bad
fld xword [0x427f70]
fmul dword [edi + 0x3c]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d934
mov eax, dword [edi + 0x10]
add eax, dword [edi + 0x18]
mov dword [ebp - 0x74], eax
fild dword [ebp - 0x74]
fmulp st(1)
add esp, 0xfffffff4
fstp xword [esp]
wait
fld xword [0x427e18]
fmul dword [edi + 0x40]
add esp, 0xfffffff4
fstp xword [esp]
wait
push 0x4005
push 0xc8000000
push 0
call fcn.00413400
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d934
fild dword [edi + 0x14]
fmulp st(1)
add esp, 0xfffffff4
fstp xword [esp]
wait
call fcn.00413400
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x427f84
call fcn.004040b8
jne 0x427bde
fld xword [0x427ee0]
fmul dword [edi + 0x30]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d934
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x427f98
call fcn.004040b8
jne 0x427c15
fld dword [0x427ec8]
fmul dword [edi + 0x20]
fadd dword [0x427fa4]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d934
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x427fb0
call fcn.004040b8
jne 0x427c3c
xor eax, eax
mov al, byte [edi + 0x44]
add eax, eax
add eax, 0xe
mov dword [ebp - 0x74], eax
fild dword [ebp - 0x74]
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x427fc8
call fcn.004040b8
jne 0x427c72
xor eax, eax
mov al, byte [edi + 0x44]
add eax, 0x19
mov dword [ebp - 0x74], eax
fild dword [ebp - 0x74]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d980
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x427fd8
call fcn.004040b8
jne 0x427c98
push 0x42c80000
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d980
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x427ff0
call fcn.004040b8
jne 0x427cc9
fld xword [0x427ffc]
fmul dword [edi + 0x1c]
fadd dword [edi + 0x20]
add esp, 0xfffffffc
fstp dword [esp]
wait
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0041d980
fstp dword [ebp - 0xc]
wait
jmp 0x427d1b
mov eax, esi
mov edx, 0x428010
call fcn.004040b8
je 0x427d0f
mov eax, esi
mov edx, 0x428020
call fcn.004040b8
je 0x427d0f
mov eax, esi
mov edx, 0x428030
call fcn.004040b8
je 0x427d0f
mov eax, esi
mov edx, 0x428044
call fcn.004040b8
je 0x427d0f
mov eax, esi
mov edx, 0x42805c
call fcn.004040b8
jne 0x427d16
xor eax, eax
mov dword [ebp - 0xc], eax
jmp 0x427d1b
xor eax, eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
fild dword [ebp - 0x10]
mov eax, dword [ebp + 8]
fstp dword [eax + 4]
wait
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x18]
mov dword [eax + 8], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x427d53
lea eax, [ebp - 8]
call fcn.00403cac
ret