Function at 0x585650
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x63233e
mov eax, dword fs:[0]
push eax
sub esp, 0x16c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x68b740]
xor eax, esp
push eax
lea eax, [esp + 0x180]
mov dword fs:[0], eax
mov ebp, ecx
mov dword [esp + 0x1c], ebp
xor esi, esi
push 0x11c
lea eax, [esp + 0x68]
push esi
push eax
mov dword [esp + 0x30], esi
mov dword [esp + 0x6c], esi
call sub.MSVCR80.dll_memset
lea eax, [ebp + 0x3c]
add esp, 0xc
push eax
mov dword [esp + 0x38], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push esi
mov ecx, ebp
call fcn.00584710
mov edx, dword [ebp + 0x1c]
mov eax, dword [ebp + 0x18]
sub edx, 0x800
push edx
lea edx, [eax + 0x400]
push edx
add eax, 0xfffffc00
lea ecx, [ebp + 0x325c0]
push eax
mov dword [esp + 0x34], ecx
call fcn.005f9f60
lea esi, [esp + 0x68]
lea ebx, [ebp + 0x31e4c]
mov dword [esp + 0x14], 9
mov ecx, dword [ebx]
test ecx, ecx
je 0x58572b
lea eax, [esi + 0x10]
push eax
push esi
lea edi, [esi + 0xc]
push edi
lea edx, [esi - 4]
push edx
lea eax, [esi + 8]
push eax
lea edx, [esi - 8]
push edx
call fcn.005f8ae0
mov eax, dword [edi]
add dword [esp + 0x24], eax
lea ecx, [esi + 4]
push ecx
mov ecx, dword [ebx]
call fcn.005f8a80
add dword [ebp + 0x48e68], eax
mov dword [esi + 0x14], eax
add ebx, 4
add esi, 0x20
sub dword [esp + 0x14], 1
jne 0x5856f1
mov ebp, dword [ebp + 0x48e68]
test ebp, ebp
je 0x58584c
lea edx, [ebp*4]
push edx
call dword [sym.imp.MSVCR80.dll_malloc]
mov ecx, dword [esp + 0x20]
add esp, 4
test eax, eax
mov dword [ecx + 0x48e64], eax
mov dword [ecx + 0x48e68], 0
je 0x58584c
lea esi, [esp + 0x7c]
mov dword [esp + 0x14], 9
nop
cmp dword [esi], 0
je 0x58583e
lea esp, [esp]
add dword [esi], 0xffffffff
mov eax, dword [esi]
imul eax, eax, 0xe4
add eax, dword [esi - 0x10]
xor ecx, ecx
mov ebp, eax
mov eax, dword [esp + 0x1c]
cmp dword [eax + 0x48e68], ecx
jbe 0x5857ee
mov edx, dword [esp + 0x1c]
mov eax, dword [ebp + 0xc8]
mov edi, dword [edx + 0x48e64]
mov edi, edi
mov ebx, dword [edi]
mov edx, dword [ebx + 0xc8]
cmp eax, edx
jl 0x5857ee
jne 0x5857dc
mov edx, dword [ebp + 0xcc]
cmp edx, dword [ebx + 0xcc]
jl 0x5857ee
mov edx, dword [esp + 0x1c]
add ecx, 1
add edi, 4
cmp ecx, dword [edx + 0x48e68]
jb 0x5857c0
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0x48e68]
cmp eax, ecx
jbe 0x585816
mov edi, dword [esp + 0x1c]
mov edx, dword [edi + 0x48e64]
mov ebx, dword [edx + eax*4 - 4]
lea edx, [edx + eax*4]
sub eax, 1
cmp eax, ecx
mov dword [edx], ebx
ja 0x585800
mov edx, dword [esi]
mov eax, dword [esp + 0x1c]
imul edx, edx, 0xe4
add edx, dword [esi - 0x10]
mov edi, dword [eax + 0x48e64]
mov dword [edi + ecx*4], edx
add dword [eax + 0x48e68], 1
cmp dword [esi], 0
jne 0x585790
add esi, 0x20
sub dword [esp + 0x14], 1
jne 0x585780
lea ecx, [esp + 0x38]
call dword [sym.imp.engine.dll_public:_void___thiscall_KList::constructor_void_]
mov dword [esp + 0x14], 0
mov edi, edi
mov eax, dword [esp + 0x14]
shl eax, 5
lea ecx, [esp + eax + 0x78]
xor ebp, ebp
cmp dword [ecx], ebp
mov dword [esp + 0x2c], ecx
jbe 0x585a21
lea eax, [esp + eax + 0x68]
mov dword [esp + 0x20], eax
xor ebx, ebx
mov ecx, dword [esp + 0x20]
mov esi, dword [ecx]
lea ecx, [esp + 0x38]
add esi, ebx
call dword [sym.imp.engine.dll_public:_class_KNode____thiscall_KList::GetHead_void_const]
mov ecx, eax
test ecx, ecx
je 0x585903
jmp 0x5858a0
mov edx, dword [esi + 0x30]
fld dword [edx + 0xdc]
fsub dword [ecx + 0x10]
fstp dword [esp + 0x18]
fld dword [esp + 0x18]
fabs
fstp dword [esp + 0x18]
fld dword [esp + 0x18]
fcomp dword [0x64f138]
fnstsw ax
test ah, 5
jp 0x5858f7
fld dword [edx + 0xe0]
fsub dword [ecx + 0x14]
fstp dword [esp + 0x18]
fld dword [esp + 0x18]
fabs
fstp dword [esp + 0x18]
fld dword [esp + 0x18]
fcomp dword [0x64f134]
fnstsw ax
test ah, 5
jnp 0x58599f
call dword [sym.imp.engine.dll_public:_class_KNode____thiscall_KNode::GetNext_void_const]
mov ecx, eax
test ecx, ecx
jne 0x5858a0
push 0x30
call sub.MSVCR80.dll_void____cdecl_operator_new_unsigned_int_
mov edi, eax
add esp, 4
mov dword [esp + 0x18], edi
test edi, edi
mov dword [esp + 0x188], 0
je 0x585934
mov ecx, edi
call dword [sym.imp.engine.dll_public:_void___thiscall_KNode::constructor_void_]
mov dword [edi], vtable.._AVTreeObjSet__BI___Preprocess_KScenePlaceC__AAEXXZ_.0
mov eax, edi
jmp 0x585936
xor eax, eax
test eax, eax
mov dword [esp + 0x188], 0xffffffff
je 0x585a19
mov dword [eax + 0x2c], esi
mov edx, dword [esi + 0x10]
mov dword [eax + 0x1c], edx
mov ecx, dword [esi + 0x14]
mov dword [eax + 0x20], ecx
mov edx, dword [esi + 0x1c]
mov dword [eax + 0x24], edx
mov ecx, dword [esi + 0x20]
mov dword [eax + 0x28], ecx
mov edx, dword [esi + 0x30]
fld dword [edx + 0xdc]
push eax
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fst dword [esi + 0x24]
fstp dword [eax + 0x10]
mov ecx, dword [esi + 0x30]
fld dword [ecx + 0xe0]
lea ecx, [esp + 0x3c]
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fst dword [esi + 0x28]
fstp dword [eax + 0x14]
call dword [sym.imp.engine.dll_public:_void___thiscall_KList::AddHead_class_KNode__]
jmp 0x585a05
fld dword [ecx + 0x10]
mov edi, dword [esi + 0x10]
fstp dword [esi + 0x24]
fld dword [ecx + 0x14]
fstp dword [esi + 0x28]
mov eax, dword [ecx + 0x2c]
cmp edi, dword [eax + 0x10]
jge 0x5859be
mov dword [esi + 4], eax
mov dword [ecx + 0x2c], esi
jmp 0x5859dd
cmp dword [eax + 4], 0
je 0x5859d4
mov edx, dword [eax + 4]
cmp edi, dword [edx + 0x10]
jl 0x5859d4
mov eax, edx
cmp dword [eax + 4], 0
jne 0x5859c4
mov edx, dword [eax + 4]
mov dword [esi + 4], edx
mov dword [eax + 4], esi
mov eax, dword [ecx + 0x1c]
cmp eax, dword [esi + 0x10]
jle 0x5859f1
mov edx, dword [esi + 0x10]
mov dword [ecx + 0x1c], edx
mov eax, dword [esi + 0x14]
mov dword [ecx + 0x20], eax
mov edx, dword [ecx + 0x24]
cmp edx, dword [esi + 0x1c]
jge 0x585a05
mov eax, dword [esi + 0x1c]
mov dword [ecx + 0x24], eax
mov edx, dword [esi + 0x20]
mov dword [ecx + 0x28], edx
mov eax, dword [esp + 0x2c]
add ebp, 1
add ebx, 0x34
cmp ebp, dword [eax]
jb 0x585883
jmp 0x585a21
mov dword [esp + 0x14], 9
mov eax, dword [esp + 0x14]
add eax, 1
cmp eax, 9
mov dword [esp + 0x14], eax
jb 0x585860
lea ecx, [esp + 0x38]
call dword [sym.imp.engine.dll_public:_class_KNode____thiscall_KList::GetHead_void_const]
test eax, eax
je 0x585a6a
mov edx, dword [eax + 0x20]
sub edx, dword [eax + 0x28]
mov ecx, dword [eax + 0x1c]
sub ecx, dword [eax + 0x24]
mov esi, edx
imul esi, edx
mov edx, ecx
imul edx, ecx
add esi, edx
mov ecx, eax
mov dword [eax + 0x18], esi
call dword [sym.imp.engine.dll_public:_class_KNode____thiscall_KNode::GetNext_void_const]
test eax, eax
jne 0x585a43
lea ecx, [esp + 0x44]
call dword [sym.imp.engine.dll_public:_void___thiscall_KList::constructor_void_]
lea ecx, [esp + 0x38]
call dword [sym.imp.engine.dll_public:_class_KNode____thiscall_KList::GetHead_void_const]
mov esi, eax
xor ebx, ebx
test esi, esi
je 0x585ad5
mov edi, dword [sym.imp.engine.dll_public:_void___thiscall_KNode::Remove_void_]
lea esp, [esp]
mov ecx, esi
call dword [sym.imp.engine.dll_public:_class_KNode____thiscall_KNode::GetNext_void_const]
cmp eax, ebx
je 0x585ab6
lea esp, [esp]
mov ecx, dword [esi + 0x18]
cmp ecx, dword [eax + 0x18]
jge 0x585aaa
mov esi, eax
mov ecx, eax
call dword [sym.imp.engine.dll_public:_class_KNode____thiscall_KNode::GetNext_void_const]
cmp eax, ebx
jne 0x585aa0
mov ecx, esi
call edi
push esi
lea ecx, [esp + 0x48]
call dword [sym.imp.engine.dll_public:_void___thiscall_KList::AddTail_class_KNode__]
lea ecx, [esp + 0x38]
call dword [sym.imp.engine.dll_public:_class_KNode____thiscall_KList::GetHead_void_const]
mov esi, eax
cmp esi, ebx
jne 0x585a90
lea ecx, [esp + 0x44]
call dword [sym.imp.engine.dll_public:_class_KNode____thiscall_KList::RemoveHead_void_]
mov esi, eax
cmp esi, ebx
je 0x585b29
mov edi, dword [esp + 0x28]
lea esp, [esp]
mov eax, dword [esi + 0x2c]
cmp eax, ebx
je 0x585b0f
mov edx, dword [eax + 4]
mov dword [esi + 0x2c], edx
push eax
mov ecx, edi
mov dword [eax + 4], ebx
call fcn.005f9ea0
mov eax, dword [esi + 0x2c]
cmp eax, ebx
jne 0x585af7
mov eax, dword [esi]
mov edx, dword [eax]
push 1
mov ecx, esi
call edx
lea ecx, [esp + 0x44]
call dword [sym.imp.engine.dll_public:_class_KNode____thiscall_KList::RemoveHead_void_]
mov esi, eax
cmp esi, ebx
jne 0x585af0
mov eax, dword [esp + 0x24]
cmp eax, ebx
je 0x585c4c
add eax, eax
add eax, eax
add eax, eax
push eax
call dword [sym.imp.MSVCR80.dll_malloc]
mov ebp, eax
add esp, 4
xor ebx, ebx
test ebp, ebp
mov dword [esp + 0x2c], ebp
je 0x585c4c
lea ecx, [esp + 0x74]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x20], 9
jmp 0x585b70
mov edx, dword [esp + 0x14]
cmp dword [edx], 0
jbe 0x585c10
mov eax, edx
mov esi, dword [eax - 0x10]
mov eax, dword [eax]
lea edi, [ebp + ebx*8]
mov dword [esp + 0x24], edi
mov dword [esp + 0x18], eax
mov eax, dword [esi + 0x1c]
sub eax, dword [esi + 0x10]
mov edx, dword [esi + 0x20]
sub edx, dword [esi + 0x14]
mov ecx, eax
imul ecx, eax
imul edx, edx
add edx, ecx
xor ecx, ecx
test ebx, ebx
jbe 0x585bf3
lea esp, [esp]
cmp edx, dword [ebp + ecx*8]
jg 0x585bbf
add ecx, 1
cmp ecx, ebx
jb 0x585bb0
jmp 0x585bf3
cmp ebx, ecx
jbe 0x585beb
mov eax, edi
mov edi, ebx
sub edi, ecx
lea esp, [esp]
mov ebp, dword [eax - 8]
mov dword [eax], ebp
mov ebp, dword [eax - 4]
mov dword [eax + 4], ebp
sub eax, 8
sub edi, 1
jne 0x585bd0
mov edi, dword [esp + 0x24]
mov ebp, dword [esp + 0x2c]
mov dword [ebp + ecx*8 + 4], esi
mov dword [ebp + ecx*8], edx
cmp ecx, ebx
jne 0x585bfc
mov dword [edi + 4], esi
mov dword [edi], edx
add edi, 8
add ebx, 1
add esi, 0x34
sub dword [esp + 0x18], 1
mov dword [esp + 0x24], edi
jne 0x585b90
add dword [esp + 0x14], 0x20
sub dword [esp + 0x20], 1
jne 0x585b70
test ebx, ebx
jbe 0x585c42
mov edi, dword [esp + 0x28]
lea esi, [ebp + 4]
jmp 0x585c30
mov edx, dword [esi]
push edx
mov ecx, edi
call fcn.005f9f40
add esi, 8
sub ebx, 1
jne 0x585c30
push ebp
call dword [sym.imp.MSVCR80.dll_free]
add esp, 4
mov ebp, dword [esp + 0x28]
lea esi, [esp + 0x70]
mov dword [esp + 0x20], 9
lea esp, [esp]
xor edi, edi
cmp dword [esi], edi
jbe 0x585c7f
xor ebx, ebx
mov eax, dword [esi - 0x10]
add eax, ebx
push eax
mov ecx, ebp
call fcn.005fb8d0
add edi, 1
add ebx, 0x34
cmp edi, dword [esi]
jb 0x585c68
add esi, 0x20
sub dword [esp + 0x20], 1
jne 0x585c60
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x30], 0
lea esi, [ebx + 0x31e4c]
mov edi, 9
mov ecx, dword [esi]
test ecx, ecx
je 0x585cc1
lea edx, [esp + 0x30]
push edx
call fcn.005f8ac0
test eax, eax
je 0x585cc1
push eax
mov eax, dword [esp + 0x34]
push eax
mov ecx, ebp
call fcn.005fba90
add esi, 4
sub edi, 1
jne 0x585ca0
mov eax, dword [ebx + 0x20]
shl eax, 9
sub eax, 0x250
mov dword [esp + 0x50], eax
add eax, 0x6a0
mov dword [esp + 0x58], eax
mov eax, dword [ebx + 0x24]
shl eax, 0xa
sub eax, 0x450
lea ecx, [esp + 0x50]
mov dword [esp + 0x54], eax
add eax, 0xca0
push ecx
mov ecx, ebp
mov dword [esp + 0x60], eax
call fcn.005fabe0
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [esp + 0x180]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x178
ret