Function at 0x538600
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5d8fe8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6c
push ebx
push esi
push edi
mov edi, dword [ebp + 0x14]
mov edx, ecx
xor ebx, ebx
movsx eax, word [edi + 0xe]
mov dword [esp + 0xc], edx
mov dword [esp + 0x30], 0x5f0828
lea ecx, [eax + eax*4]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x3c], ebx
lea ecx, [ecx + ecx*8]
mov dword [esp + 0x38], ebx
lea eax, [eax + ecx*2]
mov ecx, dword [edx + 0x24]
lea edx, [ecx + eax*8]
mov dword [esp + 0x10], edx
mov dword [esp + 0x80], ebx
mov dword [esp + 0x44], 0x5e27fc
mov dword [esp + 0x48], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x50], ebx
mov dword [esp + 0x4c], ebx
mov esi, dword [ebp + 0x18]
push 0xffffffffffffffff
lea ecx, [esp + 0x48]
mov byte [esp + 0x84], 1
mov eax, dword [esi + 8]
push eax
call fcn.0046d900
mov eax, dword [esi + 8]
mov ecx, dword [esi + 4]
mov edx, eax
dec eax
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x48]
test edx, edx
je 0x5386c7
mov edx, dword [esp + 0x1c]
inc eax
mov dword [esp + 0x14], eax
mov eax, dword [edx]
add edx, 4
mov dword [ecx], eax
mov eax, dword [esp + 0x14]
add ecx, 4
dec eax
mov dword [esp + 0x14], eax
jne 0x5386b2
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x44]
push ecx
push edx
mov ecx, edi
call fcn.005279e0
mov eax, dword [ebp + 0xc]
lea ecx, [esp + 0x58]
push eax
call fcn.004b6cb0
mov ecx, dword [edi + 0x50]
mov eax, dword [edi + 0x48]
mov edx, dword [edi + 0x54]
mov dword [esp + 0x60], ecx
mov ecx, dword [edi + 0x4c]
mov dword [esp + 0x68], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x64], edx
mov edx, dword [ebp + 0x10]
mov dword [esp + 0x6c], ecx
mov ecx, dword [eax + 0x1c]
push edx
mov edx, dword [eax + 0x18]
mov eax, dword [esp + 0x68]
push ecx
mov ecx, dword [esp + 0x68]
push edx
push eax
push ecx
mov ecx, dword [esp + 0x20]
mov byte [esp + 0x94], 2
call fcn.00536ad0
fstp qword [esp + 0x58]
lea edx, [esp + 0x30]
lea eax, [esp + 0x44]
push edx
lea ecx, [esp + 0x5c]
push eax
push ecx
mov ecx, dword [esp + 0x18]
call fcn.0052f8a0
mov edx, dword [esp + 0x10]
push esi
fstp qword [esp + 0x28]
push edx
mov ecx, edi
call fcn.005277b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x68], ecx
fmul qword [eax + 0x70]
mov eax, dword [esp + 0x38]
mov dword [esp + 0x6c], edx
cmp eax, ebx
fadd qword [esp + 0x24]
fstp qword [esp + 0x1c]
fld qword [esp + 0x60]
fst qword [esp + 0x24]
jle 0x5387d7
mov ecx, dword [esp + 0x34]
mov edx, eax
add ecx, 0x48
fld qword [ecx + 8]
fld st(1)
fcompp
fnstsw ax
test ah, 0x41
je 0x5387a3
fstp st(0)
fld qword [ecx + 8]
fld qword [ecx]
fcomp qword [esp + 0x68]
fnstsw ax
test ah, 1
jne 0x5387b6
fld qword [ecx]
fstp qword [esp + 0x68]
add ecx, 0x60
dec edx
jne 0x538790
fstp qword [esp + 0x24]
fld qword [edi + 0x48]
fcomp qword [esp + 0x68]
fnstsw ax
test ah, 0x41
jne 0x5387db
fld qword [edi + 0x48]
fstp qword [esp + 0x14]
jmp 0x5387eb
fstp st(0)
jmp 0x5387c0
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], eax
lea ecx, [esp + 0x58]
lea ebx, [edi + 0x38]
call fcn.004b7060
mov ecx, dword [ebp + 0xc]
fld qword [esp + 0x14]
fsub qword [ecx]
mov ecx, ebx
fmulp st(1)
fstp qword [esp + 0x14]
call fcn.004b7060
mov edx, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x24]
fld qword [edi + 0x48]
fsub qword [edx]
fmulp st(1)
fadd qword [esp + 0x14]
fdivr qword [esp + 0x1c]
fcom qword [ebp + 0x1c]
fnstsw ax
test ah, 0x41
jne 0x538971
mov eax, dword [esp + 0x38]
fstp qword [ebp + 0x1c]
inc eax
cmp eax, 0xffffffff
je 0x538840
mov dword [ebx + 0x10], eax
mov esi, dword [ebx + 4]
test esi, esi
je 0x538880
mov eax, dword [ebx + 8]
mov ecx, eax
dec eax
test ecx, ecx
je 0x53886d
inc eax
mov dword [esp + 0x14], eax
push 0
mov ecx, esi
call fcn.00546850
mov eax, dword [esp + 0x14]
add esi, 0x60
dec eax
mov dword [esp + 0x14], eax
jne 0x538856
mov eax, dword [ebx + 4]
push eax
call sub.mfc42u.dll_operatordelete
add esp, 4
mov dword [ebx + 4], 0
mov al, byte [ebp + 8]
xor ecx, ecx
test al, al
mov dword [ebx + 0xc], ecx
mov dword [ebx + 8], ecx
je 0x5388ce
mov eax, dword [esp + 0x10]
cmp word [eax], cx
jne 0x5388ce
fld qword [eax + 0x298]
fcomp qword [eax + 0x2b0]
fnstsw ax
test ah, 0x40
je 0x5388ce
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
fld qword [edx + 8]
fcomp qword [eax]
fnstsw ax
test ah, 1
je 0x5388ce
push ebx
push ecx
mov ecx, dword [esp + 0x14]
push edi
call fcn.00536b50
jmp 0x5388e2
push 0xffffffffffffffff
push 1
mov ecx, ebx
call fcn.005442f0
mov ecx, dword [ebx + 4]
push edi
call fcn.00530160
mov esi, dword [ebx + 8]
mov ecx, dword [esp + 0x38]
push 0xffffffffffffffff
lea edx, [esi + ecx]
mov ecx, ebx
push edx
call fcn.005442f0
mov ecx, dword [ebx + 4]
mov eax, dword [esp + 0x34]
lea esi, [esi + esi*2]
shl esi, 5
add esi, ecx
mov ecx, dword [esp + 0x38]
test ecx, ecx
je 0x538936
mov dword [esp + 0x14], ecx
jmp 0x538917
mov eax, dword [esp + 0x1c]
mov edx, eax
add eax, 0x60
mov ecx, esi
push edx
mov dword [esp + 0x20], eax
add esi, 0x60
call fcn.00530160
mov eax, dword [esp + 0x14]
dec eax
mov dword [esp + 0x14], eax
jne 0x538913
mov esi, dword [ebp + 0x18]
mov al, byte [ebp + 8]
test al, al
je 0x538bf2
mov eax, dword [ebp + 0xc]
fld qword [eax + 0x18]
fsub qword [esp + 0x24]
fld qword [0x5e46c8]
fcomp st(1)
fnstsw ax
test ah, 1
je 0x538975
fstp st(0)
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0x40140000
jmp 0x538979
fstp st(0)
jmp 0x538939
fstp qword [esp + 0x1c]
mov edx, dword [ebp + 0x10]
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x58]
push ecx
mov ecx, dword [esp + 0x20]
push edx
push edi
push 0
push 0
push eax
push ecx
mov ecx, dword [esp + 0x28]
call fcn.00536e40
test al, al
je 0x538bf2
mov ecx, dword [esp + 0x38]
cmp ecx, 0xffffffff
je 0x5389af
mov dword [esp + 0x40], ecx
mov eax, dword [esp + 0x34]
test eax, eax
je 0x5389f9
test ecx, ecx
mov dword [esp + 0x14], eax
je 0x5389e8
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x14]
push 0
call fcn.00546850
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
add ecx, 0x60
dec eax
mov dword [esp + 0x14], ecx
mov dword [esp + 0x1c], eax
jne 0x5389c3
mov eax, dword [esp + 0x34]
push eax
call sub.mfc42u.dll_operatordelete
add esp, 4
mov dword [esp + 0x34], 0
mov edx, dword [esi + 8]
xor eax, eax
push 0xffffffffffffffff
push edx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x44], eax
mov dword [esp + 0x40], eax
call fcn.0046d900
mov ecx, dword [esi + 8]
mov eax, dword [esi + 4]
mov edx, ecx
dec ecx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x48]
test edx, edx
je 0x538a45
inc ecx
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
add ecx, 4
mov dword [eax], edx
mov edx, dword [esp + 0x1c]
add eax, 4
dec edx
mov dword [esp + 0x1c], edx
jne 0x538a30
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x44]
push eax
push ecx
mov ecx, edi
call fcn.005279e0
movsx ecx, word [edi + 0x10]
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x14], edx
fild dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0xc]
fmul qword [edx + 0x298]
mov edx, dword [esp + 0x74]
push ecx
push edx
fadd qword [eax + 8]
mov eax, dword [esp + 0x78]
push eax
fstp qword [esp + 0x6c]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x6c]
push ecx
mov ecx, dword [esp + 0x1c]
push edx
call fcn.00536ad0
mov eax, dword [esp + 0x10]
push esi
fstp qword [esp + 0x5c]
push eax
mov ecx, edi
call fcn.005277b0
mov esi, dword [esp + 0xc]
fmul qword [esi + 0x70]
fstp qword [esp + 0x1c]
fld qword [esp + 0x58]
fcomp qword [esp + 0x68]
fnstsw ax
test ah, 1
je 0x538b24
lea ecx, [esp + 0x30]
lea edx, [esp + 0x44]
push ecx
lea eax, [esp + 0x5c]
push edx
push eax
mov ecx, esi
call fcn.0052f8a0
fadd qword [esp + 0x1c]
mov edx, dword [esp + 0x38]
test edx, edx
fstp qword [esp + 0x1c]
fld qword [esp + 0x58]
fst qword [esp + 0x68]
jle 0x538b44
mov ecx, dword [esp + 0x34]
add ecx, 0x48
fld qword [ecx]
fld st(1)
fcompp
fnstsw ax
test ah, 0x41
je 0x538b1c
fstp st(0)
fld qword [ecx]
fst qword [esp + 0x68]
add ecx, 0x60
dec edx
jne 0x538b07
jmp 0x538b44
mov edx, dword [ebp + 0xc]
fld qword [edx]
fadd qword [0x5e27e0]
fst qword [esp + 0x68]
fld qword [esp + 0x14]
fcomp st(1)
fnstsw ax
test ah, 0x41
je 0x538b44
fst qword [esp + 0x14]
fld qword [edi + 0x48]
fcomp st(1)
fnstsw ax
test ah, 0x41
jne 0x538b55
fstp st(0)
fld qword [edi + 0x48]
fstp qword [esp + 0x24]
lea ecx, [esp + 0x58]
call fcn.004b7060
mov eax, dword [ebp + 0xc]
lea ecx, [edi + 0x38]
fld qword [esp + 0x24]
fsub qword [eax]
fmulp st(1)
fstp qword [esp + 0x24]
call fcn.004b7060
mov ecx, dword [ebp + 0xc]
fld qword [esp + 0x14]
fsub qword [ecx]
fmulp st(1)
fadd qword [esp + 0x24]
fdivr qword [esp + 0x1c]
fcom qword [ebp + 0x1c]
fnstsw ax
test ah, 0x41
jne 0x538bf0
movsx eax, word [edi + 0x10]
fstp qword [ebp + 0x1c]
add eax, dword [esp + 0x38]
cmp eax, 0xffffffff
je 0x538ba9
mov dword [ebx + 0x10], eax
mov eax, dword [ebx + 4]
test eax, eax
je 0x538bcd
mov edx, dword [ebx + 8]
push edx
push eax
call fcn.00545e10
mov eax, dword [ebx + 4]
push eax
call sub.mfc42u.dll_operatordelete
add esp, 4
mov dword [ebx + 4], 0
xor eax, eax
push ebx
mov dword [ebx + 0xc], eax
mov dword [ebx + 8], eax
mov eax, dword [ebp + 0x10]
mov ecx, esi
push eax
push edi
call fcn.00536b50
lea ecx, [esp + 0x30]
push ecx
mov ecx, ebx
call fcn.00544480
jmp 0x538bf2
fstp st(0)
lea ecx, [esp + 0x58]
mov byte [esp + 0x80], 1
call fcn.0042bd50
lea ecx, [esp + 0x44]
mov byte [esp + 0x80], 0
call fcn.0040a7f0
lea ecx, [esp + 0x30]
mov dword [esp + 0x80], 0xffffffff
call fcn.00544920
mov ecx, dword [esp + 0x78]
pop edi
fld qword [ebp + 0x1c]
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x20