Function at 0x4273f0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4a45a0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x5c
push ebx
push esi
push edi
mov esi, ecx
xor edi, edi
mov dword [esp + 0x38], esi
mov word [esp + 0x32], di
mov word [esp + 0x30], di
mov dword [esp + 0x70], edi
mov word [esp + 0x36], di
mov word [esp + 0x34], di
mov ax, word [esi + 0xc]
mov cx, word [esi + 8]
cmp cx, ax
mov byte [esp + 0x70], 1
mov dword [esp + 0x4c], edi
jg 0x427455
mov dx, word [esi + 0xe]
cmp dx, word [esi + 0xa]
jl 0x427455
sub eax, ecx
jmp 0x427457
xor eax, eax
movsx eax, ax
mov dword [esp + 0x2c], eax
sub esp, 8
fild dword [esp + 0x34]
fdiv dword [ebp + 0x18]
fstp qword [esp]
call dword [sym.imp.MSVCRT.dll_floor]
add esp, 8
call sub.MSVCRT.dll__ftol
cmp ax, 1
jle 0x42773e
cmp dword [esi + 0x18], edi
jne 0x427491
cmp dword [esi + 0x1c], edi
je 0x42773e
mov cx, word [esi + 0xc]
mov dx, word [esi + 8]
cmp dx, cx
jg 0x4274ac
mov bx, word [esi + 0xe]
cmp bx, word [esi + 0xa]
jl 0x4274ac
sub ecx, edx
jmp 0x4274ae
xor ecx, ecx
movsx ecx, cx
inc ecx
mov dword [esp + 0x2c], ecx
fild dword [esp + 0x2c]
movsx edx, ax
mov dword [esp + 0x2c], edx
dec eax
fidiv dword [esp + 0x2c]
movsx ecx, word [esi + 0xc]
mov dword [esp + 0x2c], ecx
cmp ax, di
mov dword [esp + 0x28], eax
fstp dword [esp + 0x18]
fild dword [esp + 0x2c]
fstp dword [esp + 0xc]
jl 0x42773e
mov ebx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov ecx, 7
lea edi, [esp + 0x4c]
mov dword [esp + 0x10], 0x4f000000
rep movsd dword es:[edi], dword [esi]
mov edi, dword [esp + 0xc]
mov dword [esp + 0x14], 0xcf000000
mov esi, dword [esp + 0x54]
lea edx, [esp + 0x20]
push edx
mov eax, dword [esi + 0x18]
test eax, eax
je 0x427541
mov edx, dword [ebp + 0x14]
lea ecx, [esp + 0x20]
fld dword [esp + 0x10]
fsub dword [esp + 0x1c]
push ecx
mov ecx, dword [ebp + 0x10]
push edx
push ecx
push edi
push ecx
fstp dword [esp]
push eax
call fcn.00427760
add esp, 0x1c
jmp 0x42755f
fld dword [esp + 0x10]
fsub dword [esp + 0x1c]
lea eax, [esp + 0x20]
push eax
push edi
push ecx
mov ecx, dword [esi + 0x1c]
fstp dword [esp]
push ecx
call fcn.00427a50
add esp, 0x14
lea ecx, [esp + 0x4c]
call fcn.004403e0
fld dword [esp + 0x1c]
fcomp dword [esp + 0x10]
fnstsw ax
test ah, 1
je 0x42757f
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x10], edx
fld dword [esp + 0x20]
fcomp dword [esp + 0x14]
fnstsw ax
test ah, 0x41
jne 0x427596
mov eax, dword [esp + 0x20]
mov dword [esp + 0x14], eax
cmp esi, dword [ebx + 8]
jne 0x42750c
fld dword [esp + 0x10]
fcomp dword [esp + 0x14]
fnstsw ax
test ah, 1
je 0x427720
fld dword [esp + 0xc]
fsub dword [esp + 0x18]
sub esp, 8
fstp qword [esp]
call dword [sym.imp.MSVCRT.dll_floor]
add esp, 8
call sub.MSVCRT.dll__ftol
mov ecx, dword [esp + 0x38]
mov cx, word [ecx + 8]
cmp ax, cx
jge 0x4275dd
mov eax, ecx
fld dword [esp + 0x10]
sub esp, 8
mov word [esp + 0x34], ax
fstp qword [esp]
call dword [sym.imp.MSVCRT.dll_floor]
call sub.MSVCRT.dll__ftol
fld dword [esp + 0x1c]
mov word [esp + 0x36], ax
mov edi, dword [esp + 0x34]
fstp qword [esp]
mov dword [esp + 0x38], edi
call dword [sym.imp.MSVCRT.dll_ceil]
call sub.MSVCRT.dll__ftol
fld dword [esp + 0x14]
mov esi, eax
fstp qword [esp]
call dword [sym.imp.MSVCRT.dll_ceil]
add esp, 8
call sub.MSVCRT.dll__ftol
mov word [esp + 0x26], si
mov word [esp + 0x24], ax
mov eax, dword [esp + 0x24]
xor esi, esi
cmp word [esp + 0x28], si
mov dword [esp + 0x34], eax
jne 0x427667
push eax
push edi
lea ecx, [esp + 0x44]
call fcn.004383d0
mov ecx, dword [esp + 0x38]
mov edx, dword [eax]
mov dword [ecx + 8], edx
mov eax, dword [eax + 4]
mov dword [ecx + 0xc], eax
jmp 0x427720
push 0x20
call sub.MFC42.DLL_operatornew
add esp, 4
cmp eax, esi
je 0x4276ac
mov ecx, 0x7fff
mov dword [eax], esi
mov edx, 0xffff8001
mov word [eax + 8], cx
mov word [eax + 0xa], cx
mov word [eax + 0xc], dx
mov word [eax + 0xe], dx
mov word [eax + 0x10], cx
mov word [eax + 0x12], cx
mov word [eax + 0x14], dx
mov word [eax + 0x16], dx
mov dword [eax + 0x18], esi
mov dword [eax + 0x1c], esi
mov dword [eax + 4], esi
mov esi, eax
mov ecx, dword [esp + 0x24]
push ecx
push edi
lea ecx, [esp + 0x4c]
call fcn.004383d0
mov edx, dword [eax]
mov dword [esi + 8], edx
mov eax, dword [eax + 4]
mov dword [esi + 0xc], eax
mov ecx, dword [ebx]
cmp dword [ecx], 0
jne 0x4276e6
mov dword [esi], esi
mov edx, dword [ebx]
mov dword [edx], esi
mov dword [ebx + 0xc], esi
mov dword [ebx + 4], esi
mov byte [ebx + 0x10], 0
mov dword [ebx + 8], 0
jmp 0x427720
mov eax, dword [ebx + 0xc]
mov dword [esi], eax
mov eax, dword [ebx + 8]
test eax, eax
je 0x427709
mov dword [eax], esi
mov eax, dword [ebx + 8]
cmp dword [ebx + 4], eax
jne 0x4276ff
mov dword [ebx + 4], esi
mov ecx, dword [ebx]
cmp eax, dword [ecx]
jne 0x42771d
mov dword [ecx], esi
jmp 0x42771d
mov ecx, dword [ebx + 4]
mov dword [ecx], esi
mov al, byte [ebx + 0x10]
test al, al
je 0x42771d
mov edx, dword [ebx]
mov dword [edx], esi
mov byte [ebx + 0x10], 0
mov dword [ebx + 0xc], esi
fld dword [esp + 0xc]
mov eax, dword [esp + 0x28]
fsub dword [esp + 0x18]
dec eax
test ax, ax
mov dword [esp + 0x28], eax
fstp dword [esp + 0xc]
jge 0x4274ea
mov ecx, dword [esp + 0x68]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x14