Function at 0x5b27d0
Capabilities:
Create thread
Resume thread

Disassembly:
push 0xffffffffffffffff
push 0x5e0006
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa34
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0xa60]
xor ebx, ebx
cmp edi, ebx
mov dword [esp + 0x38], ebx
jne 0x5b28c6
push 0xa4
call sub.mfc42u.dll_operatornew
add esp, 4
mov dword [esp + 0x24], eax
mov edi, dword [esp + 0xa78]
mov ebp, dword [esp + 0xa58]
cmp eax, ebx
mov dword [esp + 0xa4c], ebx
je 0x5b2863
mov ecx, dword [esp + 0xa68]
mov edx, dword [esp + 0xa74]
push edi
push ecx
mov ecx, dword [esp + 0xa74]
push edx
mov edx, dword [esp + 0xa68]
push ecx
mov ecx, dword [esp + 0xa64]
push edx
push ebp
push ecx
mov ecx, eax
call fcn.005b3410
mov esi, eax
jmp 0x5b2865
xor esi, esi
mov edx, dword [edi]
push 0xe10
mov ecx, edi
mov dword [esp + 0xa50], 0xffffffff
call dword [edx + 0x24]
mov edi, dword [esp + 0xa7c]
push 0xffffffffffffffff
mov ecx, edi
mov ebx, dword [edi + 8]
lea eax, [ebx + 1]
push eax
call fcn.0046d900
mov ecx, dword [edi + 4]
lea edx, [esp + 0x38]
push edx
push 4
push esi
push 0x5b27b0
push 0
push 0
mov dword [ecx + ebx*4], esi
call dword [sym.imp.msvcrt.dll__beginthreadex]
add esp, 0x18
mov dword [esi + 8], eax
push eax
call dword [sym.imp.kernel32.dll_ResumeThread]
lea eax, [ebp + ebp*2]
jmp 0x5b2f07
fild dword [esp + 0xa54]
mov dword [esp + 0x20], ebx
fsqrt
call sub.msvcrt.dll__ftol
mov esi, dword [esp + 0xa58]
mov ebp, dword [esp + 0xa7c]
imul eax, esi
imul eax, edi
cmp eax, 0xc8
jge 0x5b2b62
test esi, esi
mov dword [esp + 0x10], ebx
jle 0x5b2957
mov eax, dword [esp + 0xa5c]
mov dword [esp + 0x14], 0x63001c
mov dword [esp + 0x1c], eax
mov edx, dword [esp + 0xa54]
xor ecx, ecx
test edx, edx
jle 0x5b2947
lea edi, [esi*4]
add ecx, dword [eax]
add eax, edi
dec edx
jne 0x5b2926
test ecx, ecx
je 0x5b2947
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
inc edx
mov dword [eax], ebx
add eax, 4
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x1c]
inc ebx
add eax, 4
cmp ebx, esi
mov dword [esp + 0x1c], eax
jl 0x5b2912
mov eax, dword [esp + 0x10]
push 0xa4
cmp eax, esi
jne 0x5b2a06
call sub.mfc42u.dll_operatornew
add esp, 4
mov dword [esp + 0x24], eax
mov edi, dword [esp + 0xa78]
mov dword [esp + 0xa4c], 1
test eax, eax
je 0x5b29bf
mov ecx, dword [esp + 0xa70]
mov edx, dword [esp + 0xa68]
push edi
push ecx
mov ecx, dword [esp + 0xa6c]
push edx
mov edx, dword [esp + 0xa68]
push ecx
mov ecx, dword [esp + 0xa64]
push edx
push esi
push ecx
mov ecx, eax
call fcn.005b3510
mov esi, eax
jmp 0x5b29c1
xor esi, esi
mov ebx, dword [esp + 0xa60]
mov edx, dword [esi]
push ebx
mov ecx, esi
mov dword [esp + 0xa50], 0xffffffff
call dword [edx + 0x14]
mov eax, dword [edi]
push 0xe10
mov ecx, edi
call dword [eax + 0x24]
mov edi, dword [ebp + 8]
push 0xffffffffffffffff
lea ecx, [edi + 1]
push ecx
mov ecx, ebp
call fcn.0046d900
mov edx, dword [ebp + 4]
mov dword [esp + 0x20], ebx
mov dword [edx + edi*4], esi
jmp 0x5b2ec6
call sub.mfc42u.dll_operatornew
add esp, 4
mov dword [esp + 0x24], eax
mov edi, dword [esp + 0xa78]
mov dword [esp + 0xa4c], 2
test eax, eax
je 0x5b2a67
mov ecx, dword [esp + 0xa70]
mov edx, dword [esp + 0xa68]
push 0x63001c
push esi
push edi
push ecx
mov ecx, dword [esp + 0xa74]
push edx
mov edx, dword [esp + 0xa70]
push ecx
mov ecx, dword [esp + 0x28]
push edx
mov edx, dword [esp + 0xa70]
push ecx
push edx
mov ecx, eax
call fcn.005b35d0
mov ebx, eax
jmp 0x5b2a69
xor ebx, ebx
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xa60]
dec eax
mov dword [esp + 0xa4c], 0xffffffff
cmp eax, ecx
jge 0x5b2a8b
mov dword [esp + 0xa60], eax
mov eax, dword [esp + 0xa60]
mov edx, dword [ebx]
push eax
mov ecx, ebx
call dword [edx + 0x14]
mov edx, dword [edi]
push 0xe10
mov ecx, edi
call dword [edx + 0x24]
mov eax, dword [ebp + 8]
push 0xffffffffffffffff
mov dword [esp + 0x2c], eax
inc eax
push eax
mov ecx, ebp
call fcn.0046d900
mov eax, dword [ebp + 4]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0xa60]
push 0xa4
mov dword [eax + ecx*4], ebx
mov dword [esp + 0x24], edx
call sub.mfc42u.dll_operatornew
add esp, 4
mov dword [esp + 0x24], eax
test eax, eax
mov dword [esp + 0xa4c], 3
je 0x5b2b31
mov ecx, dword [esp + 0x10]
lea edx, [ecx*4 + 0x63001c]
push edx
mov edx, dword [esp + 0xa74]
push esi
push edi
push edx
mov edx, dword [esp + 0xa78]
push edx
mov edx, dword [esp + 0xa78]
push edx
mov edx, dword [esp + 0xa74]
sub esi, ecx
mov ecx, dword [esp + 0xa6c]
push edx
push esi
push ecx
mov ecx, eax
call fcn.005b35d0
mov esi, eax
jmp 0x5b2b33
xor esi, esi
mov edx, dword [esi]
push 0
mov ecx, esi
mov dword [esp + 0xa50], 0xffffffff
call dword [edx + 0x14]
mov edi, dword [ebp + 8]
push 0xffffffffffffffff
mov ecx, ebp
lea eax, [edi + 1]
push eax
call fcn.0046d900
mov ecx, dword [ebp + 4]
mov dword [ecx + edi*4], esi
jmp 0x5b2ec6
mov eax, 0x66666667
mov dword [esp + 0x10], 0xa
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ecx, edx
lea edx, [ecx + ecx*4]
shl edx, 1
cmp edx, esi
jge 0x5b2b9c
mov eax, esi
inc ecx
cdq
idiv ecx
imul ecx, eax
cmp ecx, esi
mov dword [esp + 0x10], eax
jge 0x5b2b9c
inc eax
mov dword [esp + 0x10], eax
xor ecx, ecx
cmp esi, ebx
jle 0x5b2c41
mov edx, dword [esp + 0xa54]
mov dword [ecx*4 + 0x63001c], ecx
cmp edx, ebx
mov dword [esp + ecx*4 + 0x44], ebx
jle 0x5b2bda
mov eax, dword [esp + 0xa5c]
lea ebx, [esi*4]
lea eax, [eax + ecx*4]
mov edi, dword [eax]
add eax, ebx
add dword [esp + ecx*4 + 0x44], edi
dec edx
jne 0x5b2bcd
xor ebx, ebx
inc ecx
cmp ecx, esi
jl 0x5b2ba6
cmp esi, ebx
jle 0x5b2c41
mov edx, 1
xor ecx, ecx
mov dword [esp + 0x14], edx
cmp edx, esi
jge 0x5b2c32
lea eax, [esp + ecx + 0x44]
mov ebx, dword [esp + edx*4 + 0x44]
mov edi, dword [eax]
cmp ebx, edi
jle 0x5b2c29
mov esi, dword [ecx + 0x63001c]
mov edi, dword [edx*4 + 0x63001c]
mov dword [edx*4 + 0x63001c], esi
mov esi, dword [eax]
mov dword [esp + edx*4 + 0x44], esi
mov esi, dword [esp + 0xa58]
mov dword [ecx + 0x63001c], edi
mov dword [eax], ebx
inc edx
cmp edx, esi
jl 0x5b2bf6
mov edx, dword [esp + 0x14]
inc edx
add ecx, 4
mov dword [esp + 0x14], edx
lea eax, [edx - 1]
cmp eax, esi
jl 0x5b2bee
fild dword [esp + 0xa60]
mov ebx, dword [esp + 0xa78]
push 0xe10
mov ecx, ebx
fidiv dword [esp + 0xa5c]
mov edx, dword [ebx]
fstp qword [esp + 0x40]
call dword [edx + 0x24]
test esi, esi
mov dword [esp + 0x28], 0
jle 0x5b2ec6
mov eax, dword [esp + 0x10]
mov edi, esi
neg eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x14], 0x63001c
mov dword [esp + 0x1c], edi
jmp 0x5b2c9b
mov ebx, dword [esp + 0xa78]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
cmp eax, edi
jge 0x5b2ca5
mov edi, eax
push 0xa4
mov dword [esp + 0x1c], edi
call sub.mfc42u.dll_operatornew
add esp, 4
mov dword [esp + 0x34], eax
test eax, eax
mov dword [esp + 0xa4c], 4
je 0x5b2d06
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xa70]
push ecx
mov ecx, dword [esp + 0xa6c]
push esi
push ebx
push edx
mov edx, dword [esp + 0xa74]
push ecx
mov ecx, dword [esp + 0xa70]
push edx
mov edx, dword [esp + 0xa6c]
push ecx
push edi
push edx
mov ecx, eax
call fcn.005b35d0
mov dword [esp + 0x2c], eax
jmp 0x5b2d0e
mov dword [esp + 0x2c], 0
fild dword [esp + 0x18]
mov dword [esp + 0xa4c], 0xffffffff
fmul qword [esp + 0x3c]
fadd qword [0x5e2790]
call sub.msvcrt.dll__ftol
cmp eax, 1
jge 0x5b2d36
mov eax, 1
mov ecx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x20]
add ebx, eax
push eax
mov edx, dword [ecx]
mov dword [esp + 0x24], ebx
call dword [edx + 0x14]
mov ecx, dword [ebp + 8]
mov eax, dword [ebp + 4]
mov ebx, ecx
mov dword [esp + 0x34], ebx
inc ebx
test ebx, ebx
jne 0x5b2d80
test eax, eax
je 0x5b2d73
push eax
mov dword [esp + 0x34], ecx
call sub.mfc42u.dll_operatordelete
add esp, 4
mov dword [ebp + 4], 0
xor eax, eax
mov dword [ebp + 0xc], eax
mov dword [ebp + 8], eax
jmp 0x5b2e87
test eax, eax
jne 0x5b2db8
lea edi, [ebx*4]
push edi
call sub.mfc42u.dll_operatornew
mov edx, eax
mov ecx, edi
mov dword [ebp + 4], edx
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
add esp, 4
and ecx, 3
rep stosb byte es:[edi], al
mov dword [ebp + 0xc], ebx
mov dword [ebp + 8], ebx
jmp 0x5b2e87
mov edi, dword [ebp + 0xc]
cmp ebx, edi
jg 0x5b2de9
cmp ecx, ebx
jge 0x5b2dd9
mov edx, ebx
lea eax, [eax + ecx*4]
sub edx, ecx
push edx
push eax
call fcn.005463a0
mov dword [ebp + 8], ebx
jmp 0x5b2e87
jle 0x5b2de1
sub ecx, ebx
mov dword [esp + 0x30], ecx
mov dword [ebp + 8], ebx
jmp 0x5b2e87
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x5b2e13
mov eax, ecx
cdq
and edx, 7
add eax, edx
sar eax, 3
cmp eax, 4
jge 0x5b2e07
mov eax, 4
jmp 0x5b2e13
cmp eax, 0x400
jle 0x5b2e13
mov eax, 0x400
add eax, edi
cmp ebx, eax
mov dword [esp + 0x18], eax
jl 0x5b2e21
mov dword [esp + 0x18], ebx
mov ecx, dword [esp + 0x18]
lea edx, [ecx*4]
push edx
call sub.mfc42u.dll_operatornew
mov ecx, dword [ebp + 8]
mov esi, dword [ebp + 4]
shl ecx, 2
mov edx, ecx
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, ebx
and ecx, 3
add esp, 4
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp + 8]
mov dword [esp + 0x30], eax
sub edx, ecx
lea eax, [eax + ecx*4]
push edx
push eax
call fcn.005463a0
mov ecx, dword [ebp + 4]
push ecx
call sub.mfc42u.dll_operatordelete
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x1c]
mov esi, dword [esp + 0xa5c]
add esp, 4
mov dword [ebp + 4], edx
mov dword [ebp + 8], ebx
mov dword [ebp + 0xc], eax
mov ecx, dword [ebp + 4]
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x2c]
mov edi, dword [esp + 0x1c]
mov dword [ecx + eax*4], edx
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x24]
add ecx, eax
add edi, edx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x28], ecx
shl eax, 2
add edx, eax
cmp ecx, esi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x14], edx
jl 0x5b2c90
mov eax, dword [ebp + 8]
xor esi, esi
test eax, eax
jle 0x5b2f03
mov edi, dword [sym.imp.msvcrt.dll__beginthreadex]
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x38]
push ecx
push 4
mov ebx, dword [eax + esi*4]
push ebx
push 0x5b2770
push 0
push 0
call edi
add esp, 0x18
mov dword [ebx + 8], eax
push eax
call dword [sym.imp.kernel32.dll_ResumeThread]
mov eax, dword [ebp + 8]
inc esi
cmp esi, eax
jl 0x5b2ed5
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0xa44]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xa40
ret