Function at 0x4dd3c0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x83bef8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x78
push ebx
push esi
push edi
mov esi, ecx
mov dword [esp + 0x18], 0
movsx eax, byte [0xb612ec]
inc eax
cdq
mov ecx, 5
idiv ecx
mov ecx, dword [0xbd00f8]
mov eax, dword [esp + 0x94]
mov edi, dword [esp + 0x98]
push 0
push 0
push 4
push 0
push 0x3f800000
mov dword [esp + 0xa0], 0
mov byte [0xb612ec], dl
movsx eax, byte [ecx + eax]
mov dword [esp + 0x20], eax
movsx ebx, dl
fild dword [esp + 0x20]
mov ecx, dword [ebx*4 + 0x8ae598]
push ecx
push 0x40000000
fstp dword [esp + 0x28]
mov edx, dword [esp + 0x28]
push edx
sub esp, 0xc
mov ecx, esp
mov eax, edi
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
push esi
mov dword [ecx + 4], edx
push 0
mov dword [ecx + 8], eax
push 4
lea ecx, [esp + 0x48]
call fcn.004efe50
lea ecx, [esp + 0x10]
push ecx
mov ecx, 0xb62cb0
call fcn.004efb10
push 0x13
push 0x8a
mov ecx, 0xb5f8b8
mov dword [esi + 0x7c], eax
call fcn.004d88c0
test al, al
je 0x4dd223
fld dword [ebx*4 + 0x8ae598]
mov eax, dword [edi]
fmul dword [0x858cc8]
push 0
push 0
push 4
push 0
push 0x3f800000
push ecx
mov ecx, dword [edi + 4]
fstp dword [esp]
fld dword [esp + 0x24]
push 0x40000000
fsub dword [0x85f100]
sub esp, 0x10
mov edx, esp
fstp dword [esp + 0xc]
mov dword [edx], eax
mov eax, dword [edi + 8]
push esi
mov dword [edx + 4], ecx
push 0x1a
push 0x13
lea ecx, [esp + 0x48]
mov dword [edx + 8], eax
call fcn.004efe50
fld dword [esp + 0xc]
fadd dword [0x858b3c]
lea ecx, [esp + 0x10]
push ecx
mov ecx, 0xb62cb0
fstp dword [esp + 0x24]
mov dword [esp + 0x20], 1
call fcn.004efb10
jmp 0x4dd234
push 0x13
push 0x8a
mov ecx, 0xb5f8b8
call fcn.004d88a0
lea ecx, [esp + 0x10]
mov dword [esp + 0x8c], 0xffffffff
call fcn.004ef660
mov ecx, dword [esp + 0x84]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x84
ret 8
push 0xffffffffffffffff
push 0x83bf18
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x78
push esi
push edi
mov esi, ecx
mov dword [esp + 0x14], 0
mov ecx, dword [0xbd00f8]
mov eax, dword [esp + 0x90]
movsx edx, byte [ecx + eax]
mov edi, dword [esp + 0x94]
push 0
push 0
push 4
push 0
mov dword [esp + 0x18], edx
push 0x3f19999a
push 0x3f400000
fild dword [esp + 0x20]
push 0x40000000
mov ecx, edi
mov dword [esp + 0xa4], 0
fstp dword [esp + 0x24]
mov eax, dword [esp + 0x24]
push eax
mov eax, dword [ecx]
sub esp, 0xc
mov edx, esp
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov ecx, dword [ecx + 8]
push esi
mov dword [edx + 4], eax
push 3
mov dword [edx + 8], ecx
push 2
lea ecx, [esp + 0x44]
call fcn.004efe50
lea edx, [esp + 0xc]
push edx
mov ecx, 0xb62cb0
mov dword [esp + 0x1c], 3
mov dword [esp + 0x30], 0x3d75c290
call fcn.004efb10
fld dword [esp + 8]
push 0
fadd dword [0x858ba4]
push 0
push 4
push 0
push 0x3f19999a
push 0x3fe3d70a
push 0x40000000
mov dword [esi + 0x7c], eax
mov ecx, dword [edi]
mov edx, dword [edi + 4]
sub esp, 0x10
fstp dword [esp + 0xc]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edi + 8]
push esi
mov dword [eax + 4], edx
push 0
mov dword [eax + 8], ecx
push 0
lea ecx, [esp + 0x44]
call fcn.004efe50
lea edx, [esp + 0xc]
push edx
mov ecx, 0xb62cb0
mov dword [esp + 0x30], 0x3d75c290
mov dword [esp + 0x1c], 4
call fcn.004efb10
lea ecx, [esp + 0xc]
mov dword [esi + 0x80], eax
mov dword [esp + 0x88], 0xffffffff
call fcn.004ef660
mov ecx, dword [esp + 0x80]
pop edi
mov dword fs:[0], ecx
pop esi
add esp, 0x84
ret 8
mov eax, dword [esp + 4]
cmp eax, 0x89
je 0x4dd3ee
jle 0x4dd3d4
cmp eax, 0x8c
jle 0x4dd416
mov edx, dword [ecx + 0x84]
test edx, edx
je 0x4dd416
mov edx, dword [ecx + 0x7c]
test edx, edx
jne 0x4dd416
mov dword [esp + 4], eax
jmp 0x4dd0d0
mov eax, dword [ecx + 0x84]
test eax, eax
je 0x4dd416
mov eax, dword [ecx + 0x7c]
test eax, eax
jne 0x4dd416
mov eax, dword [ecx + 0x80]
test eax, eax
jne 0x4dd416
mov dword [esp + 4], 0x89
jmp 0x4dd270
ret 8