Function at 0x550090
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6b3a30
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x90
push ebx
push esi
mov esi, ecx
xor ebx, ebx
lea ecx, [esp + 0x50]
mov dword [esi + 0x1e8], ebx
mov dword [esp + 0xc], 0x497423f0
call fcn.004441b0
fld dword [0x22094c8]
fld dword [0x22094cc]
mov eax, dword [0x85cfbc]
fld dword [0x22094d0]
mov ecx, dword [eax + 0xe4]
cmp ecx, ebx
fst dword [esp + 0x7c]
fld dword [eax + 0x18]
mov dword [esp + 0xa0], ebx
fld dword [eax + 0x14]
fst dword [esp + 0x10]
fld dword [eax + 0x10]
fst dword [esp + 0x14]
fstp dword [esp + 0x2c]
fstp dword [esp + 0x30]
fst dword [esp + 0x34]
je 0x55013a
fld dword [eax + 0x24]
fld dword [eax + 0x20]
fld dword [eax + 0x1c]
fld dword [esp + 0x14]
fsub st(1)
fstp dword [esp + 0x2c]
fstp st(0)
fld dword [esp + 0x10]
fsub st(1)
fstp dword [esp + 0x30]
fstp st(0)
fxch st(1)
fsub st(1)
fstp dword [esp + 0x34]
mov eax, dword [esp + 0x2c]
fstp st(0)
mov ecx, dword [esp + 0x30]
fld st(2)
mov edx, dword [esp + 0x34]
fstp dword [esp + 0x20]
fld st(1)
mov dword [esp + 0x14], eax
fstp dword [esp + 0x24]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x7c]
fstp dword [esp + 0x28]
mov dword [esp + 0x18], ecx
fxch st(1)
mov dword [esp + 0x54], ecx
fstp dword [esp + 0x5c]
lea ecx, [esp + 0x14]
mov dword [esp + 0x1c], edx
fstp dword [esp + 0x60]
mov dword [esp + 0x58], edx
mov dword [esp + 0x64], eax
call fcn.005bfb50
push ebx
lea ecx, [esp + 0x48]
push ecx
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x5c]
push eax
mov ecx, 0x859d2c
call fcn.005a4f00
test al, al
jne 0x5502d2
push ebx
lea ecx, [esp + 0x48]
push ecx
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x5c]
push eax
mov ecx, 0x85a11c
call fcn.005a7450
test al, al
jne 0x5502d2
push ebx
lea ecx, [esp + 0x48]
push ecx
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x5c]
push eax
mov ecx, 0x85a234
call fcn.005a7450
test al, al
jne 0x5502d2
push ebx
lea ecx, [esp + 0x48]
push ecx
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x5c]
push eax
mov ecx, 0x85a1a8
call fcn.005a7450
test al, al
jne 0x5502d2
push ebx
lea ecx, [esp + 0x48]
push ecx
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x5c]
push eax
mov ecx, 0x85a464
call fcn.005a7450
test al, al
jne 0x5502d2
mov ecx, dword [0x719a54]
push ecx
mov ecx, dword [esi + 0x1cc]
sub esp, 0xc
mov edx, esp
mov dword [esp + 0x20], esp
push 0x41200000
sub esp, 0xc
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esi + 0x1d0]
mov dword [eax + 4], ecx
mov ecx, dword [esi + 0x1d4]
mov dword [esp + 0x30], esp
push edx
mov dword [eax + 8], ecx
call fcn.00421690
lea edx, [esp + 0x38]
add esp, 0x14
push edx
call fcn.00421690
add esp, 0x14
lea ecx, [esp + 0x14]
call fcn.004379c0
fld dword [esi + 0x1ec]
fsub dword [0x6bc85c]
fcompp
fnstsw ax
test ah, 0x41
jne 0x5502b9
lea eax, [esp + 0x14]
push eax
mov ecx, esi
call fcn.004396f0
mov dword [esi + 0x1e8], 1
jmp 0x5502e6
mov ecx, dword [esi + 0x1b4]
mov dword [esi], ecx
mov edx, dword [esi + 0x1b8]
mov dword [esi + 4], edx
mov eax, dword [esi + 0x1bc]
jmp 0x5502e3
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x4c]
mov dword [esi], ecx
mov dword [esi + 4], edx
mov dword [esi + 8], eax
fld dword [esi + 4]
fcomp dword [0x6bca18]
fnstsw ax
test ah, 5
jp 0x550320
fld dword [esi + 4]
fcomp dword [0x6bb5fc]
fnstsw ax
test ah, 0x41
jne 0x550320
lea ecx, [esi + 0x1c0]
mov dword [esi + 4], 0xbe99999a
mov dword [0x22094cc], 0xbe99999a
push ecx
jmp 0x550358
fld dword [esi + 4]
fcomp dword [0x6bc8a4]
fnstsw ax
test ah, 0x41
jne 0x550360
fld dword [esi + 4]
fcomp dword [0x6bb5fc]
fnstsw ax
test ah, 5
jp 0x550360
lea edx, [esi + 0x1c0]
mov dword [esi + 4], 0x3e99999a
mov dword [0x22094cc], 0x3e99999a
push edx
mov ecx, esi
push esi
call fcn.0054fe70
fld dword [esi + 0x1d8]
mov edx, dword [esi + 0x1e4]
fld dword [esi + 0x1dc]
mov ecx, dword [esi + 0x1e0]
mov dword [esp + 8], edx
fxch st(1)
fmul dword [esp + 8]
mov dword [esp + 0x7c], ecx
mov eax, dword [esi + 4]
mov dword [0x220e058], eax
fstp dword [esp + 0x14]
fmul dword [esp + 8]
fld dword [esp + 0x7c]
fmul dword [esp + 8]
fld dword [esp + 0x14]
fmul dword [0x719a54]
fstp dword [esp + 0x14]
fxch st(1)
fmul dword [0x719a54]
fstp dword [esp + 0x18]
fmul dword [0x719a54]
fld dword [esp + 0x14]
fmul dword [esp + 0x14]
fld st(1)
fmul st(2)
faddp st(1)
fld dword [esp + 0x18]
fmul dword [esp + 0x18]
faddp st(1)
fsqrt
fld dword [esi + 0x1f0]
fsub dword [0x6bc85c]
fxch st(1)
fcompp
fnstsw ax
test ah, 5
jp 0x550415
fld dword [esp + 0x14]
fadd dword [esi + 0xc]
fstp dword [esi + 0xc]
fld dword [esp + 0x18]
fadd dword [esi + 0x10]
fstp dword [esi + 0x10]
fadd dword [esi + 0x14]
fstp dword [esi + 0x14]
mov dword [esi + 0x1e8], 1
jmp 0x550447
fstp st(0)
fld dword [0x6bca08]
fld dword [0x220e244]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x550447
mov eax, dword [esi + 0x1c0]
mov dword [esi + 0xc], eax
mov ecx, dword [esi + 0x1c4]
mov dword [esi + 0x10], ecx
mov edx, dword [esi + 0x1c8]
mov dword [esi + 0x14], edx
cmp dword [0x7198c8], ebx
jne 0x5504e0
fld dword [esp + 0x34]
fsub dword [esi + 8]
fld dword [esp + 0x30]
fsub dword [esi + 4]
fld dword [esp + 0x2c]
fsub dword [esi]
fst dword [esp + 0x44]
fld st(1)
fstp dword [esp + 0x48]
fld st(2)
fstp dword [esp + 0x4c]
fld st(0)
fmul st(1)
fld st(2)
fmul st(3)
faddp st(1)
fld st(3)
fmul st(4)
faddp st(1)
fstp st(3)
fstp st(0)
fstp st(0)
fsqrt
fcomp dword [0x6bca18]
fnstsw ax
test ah, 5
jp 0x5504e0
mov eax, dword [0x85cfbc]
fld dword [eax + 0x24]
fld dword [eax + 0x20]
fld dword [eax + 0x1c]
fmul dword [0x6bca18]
fstp dword [esp + 0x14]
fmul dword [0x6bca18]
fstp dword [esp + 0x18]
fmul dword [0x6bca18]
fsubr dword [esp + 0x34]
fld dword [esp + 0x30]
fsub dword [esp + 0x18]
fld dword [esp + 0x2c]
fsub dword [esp + 0x14]
fstp dword [esi]
fstp dword [esi + 4]
fstp dword [esi + 8]
fld dword [0x22094d0]
lea eax, [esp + 0x68]
fsub dword [0x22094dc]
push eax
fld dword [0x22094cc]
mov ecx, eax
fsub dword [0x22094d8]
push ecx
fld dword [0x22094c8]
fsub dword [0x22094d4]
fstp dword [esp + 0x70]
fstp dword [esp + 0x74]
fstp dword [esp + 0x78]
call fcn.005e40eb
fld dword [esp + 0x70]
fmul dword [0x22094e8]
fld dword [esp + 0x6c]
fmul dword [0x22094e4]
faddp st(1)
fld dword [esp + 0x68]
fmul dword [0x22094e0]
faddp st(1)
fcomp dword [0x6c2488]
fnstsw ax
test ah, 5
jp 0x5506ce
cmp dword [0x85d05c], ebx
je 0x5506ce
mov dword [0x85d05c], 1
fld dword [esi + 8]
fst dword [esp + 8]
lea ecx, [esp + 0x80]
fld dword [esi + 4]
mov dword [esp + 0x8c], 0
fst dword [esp + 0x10]
mov dword [esp + 0x90], 0x459c4000
fld dword [esi]
mov dword [esp + 0x94], 0x461c4000
fst dword [esp + 0x80]
mov dword [esp + 0x5c], 0
fst dword [esp + 0x14]
mov dword [esp + 0x60], 0x459c4000
fld st(1)
mov dword [esp + 0x64], 0x461c4000
fstp dword [esp + 0x84]
fld st(2)
fstp dword [esp + 0x88]
fstp dword [esp + 0x50]
fstp dword [esp + 0x54]
fstp dword [esp + 0x58]
call fcn.005bfb50
lea ecx, [esp + 0x2c]
mov dword [esp + 0xc], 0
call fcn.004441b0
fld dword [0x6bb638]
fsub dword [esp + 8]
mov ecx, dword [esp + 8]
fld dword [0x6bb768]
mov edx, dword [esp + 0x14]
fsub dword [esp + 0x10]
mov eax, dword [esp + 0x10]
fld dword [esp + 0x14]
mov dword [esp + 0x2c], edx
fchs
mov edx, dword [esp + 0xc]
fld st(0)
push edx
fmul st(1)
mov dword [esp + 0x34], eax
fld st(2)
mov dword [esp + 0x38], ecx
fmul st(3)
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x14]
faddp st(1)
push ecx
fld st(3)
lea edx, [esp + 0x5c]
fmul st(4)
push edx
mov ecx, 0x85a11c
mov byte [esp + 0xb0], 1
faddp st(1)
fsqrt
fld dword [0x6bc4dc]
fdiv st(1)
fstp dword [esp + 0x18]
fstp st(0)
fmul dword [esp + 0x18]
fstp dword [esp + 0x48]
fmul dword [esp + 0x18]
fstp dword [esp + 0x4c]
fmul dword [esp + 0x18]
fstp dword [esp + 0x50]
call fcn.005a7450
test al, al
jne 0x5506a1
lea eax, [esp + 0x74]
push eax
lea ecx, [esp + 0x30]
push ecx
mov ecx, 0x71d0fc
call fcn.005a2ce0
test al, al
je 0x5506a7
mov dword [0x85d05c], ebx
lea ecx, [esp + 0x2c]
mov byte [esp + 0xa0], bl
call fcn.005bfb50
cmp dword [0x85d05c], ebx
je 0x5506d4
cmp dword [0x85d3ac], ebx
je 0x5506d4
mov eax, 1
jmp 0x5506d6
mov dword [0x85d05c], ebx
xor eax, eax
push eax
mov ecx, 0x85d090
call fcn.0054bee0
lea ecx, [esp + 0x50]
mov dword [esp + 0xa0], 0xffffffff
call fcn.005bfb50
mov ecx, dword [esp + 0x98]
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x9c
ret