Function at 0x561d98
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffa8
push ebx
push esi
push edi
mov dword [ebp - 4], ecx
mov esi, edx
mov ebx, eax
mov eax, dword [ebp + 0x14]
sub eax, dword [ebp + 0x18]
sub eax, 2
mov edi, dword [ebp + 0xc]
sub edi, dword [ebp + 0x10]
sub edi, 2
cmp edi, eax
jne 0x561dd5
mov dword [ebp - 0x34], eax
fild dword [ebp - 0x34]
fild dword [esi + 0x34]
fdivp st(1)
fstp xword [ebp - 0x30]
wait
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
jmp 0x561e1f
cmp edi, eax
jle 0x561dfd
mov dword [ebp - 0x34], eax
fild dword [ebp - 0x34]
fild dword [esi + 0x34]
fdivp st(1)
fstp xword [ebp - 0x30]
wait
mov dword [ebp - 0x14], eax
fild dword [esi + 0x30]
fld xword [ebp - 0x30]
fmulp st(1)
call fcn.004036a0
mov dword [ebp - 0x18], eax
jmp 0x561e1f
mov dword [ebp - 0x34], edi
fild dword [ebp - 0x34]
fild dword [esi + 0x30]
fdivp st(1)
fstp xword [ebp - 0x30]
wait
fild dword [esi + 0x34]
fld xword [ebp - 0x30]
fmulp st(1)
call fcn.004036a0
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], edi
cmp dword [ebp - 0x14], 0
jle 0x562045
cmp dword [ebp - 0x18], 0
jle 0x562045
mov eax, dword [ebp + 0x18]
add eax, dword [ebp + 0x14]
sub eax, dword [ebp - 0x14]
add eax, 2
sar eax, 1
jns 0x561e46
adc eax, 0
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0x10]
add eax, dword [ebp + 0xc]
sub eax, dword [ebp - 0x18]
add eax, 2
sar eax, 1
jns 0x561e5c
adc eax, 0
mov dword [ebp - 0x20], eax
mov dl, 1
mov eax, dword [0x435a48]
call fcn.0043cdbc
mov dword [ebp - 8], eax
mov dl, 1
mov eax, dword [0x52ca70]
call fcn.0052caf0
mov dword [ebp - 0xc], eax
mov dl, 1
mov eax, dword [0x52ca70]
call fcn.0052caf0
mov dword [ebp - 0x10], eax
xor eax, eax
push ebp
push 0x56203e
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, dword [esi + 0x30]
mov edx, dword [esi + 0x34]
mov eax, dword [ebp - 0xc]
mov edi, dword [eax]
call dword [edi]
mov ecx, dword [esi + 0x30]
mov edx, dword [esi + 0x34]
mov eax, dword [ebp - 8]
mov edi, dword [eax]
call dword [edi + 0x64]
movzx eax, byte [ebx + 0xd]
push eax
mov eax, dword [ebp - 8]
call fcn.0043d390
mov edx, eax
movzx ecx, byte [ebx + 0xc]
mov eax, ebx
call fcn.005644d8
push 1
push 1
mov eax, ebx
call fcn.00565a28
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x34], eax
fild dword [ebp - 0x34]
fld xword [ebp - 0x30]
fdivp st(1)
call fcn.004036a0
push eax
mov eax, ebx
call fcn.0056597c
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x50], eax
fild dword [ebp - 0x50]
fld xword [ebp - 0x30]
fdivp st(1)
call fcn.004036a0
lea ecx, [ebp - 0x4c]
pop edx
call fcn.00422c7c
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x40], eax
mov eax, ebx
call fcn.00565a28
mov edi, eax
sub edi, dword [ebp - 0x20]
mov eax, ebx
call fcn.0056575c
add edi, eax
mov dword [ebp - 0x34], edi
fild dword [ebp - 0x34]
fld xword [ebp - 0x30]
fdivp st(1)
call fcn.004036a0
push eax
mov eax, ebx
call fcn.0056597c
mov edi, eax
sub edi, dword [ebp - 0x1c]
mov eax, ebx
call fcn.005658ac
add edi, eax
mov dword [ebp - 0x50], edi
fild dword [ebp - 0x50]
fld xword [ebp - 0x30]
fdivp st(1)
call fcn.004036a0
lea ecx, [ebp - 0x58]
pop edx
call fcn.00422c7c
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 8]
call fcn.0043d390
mov edx, eax
mov eax, ebx
pop ecx
call fcn.00564d48
push 0
mov eax, dword [ebp + 8]
push eax
push 1
mov eax, dword [ebp - 8]
call fcn.0043d390
mov edx, eax
xor ecx, ecx
mov eax, esi
call fcn.0047b9c8
push 0xcc0020
push 0
push 0
mov eax, dword [ebp - 8]
call fcn.0043d390
call fcn.004382e4
push eax
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
push 0
push 0
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x20]
push eax
call sub.gdi32.dll_BitBlt
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 4]
call fcn.004382e4
mov edx, eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
call dword [ebx + 4]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x562045
mov eax, dword [ebp - 8]
call fcn.00404748
mov eax, dword [ebp - 0xc]
call fcn.00404748
mov eax, dword [ebp - 0x10]
call fcn.00404748
ret
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14