Function at 0x4df160
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5d4368
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x92c
mov ax, word [ebp + 8]
push ebx
push esi
push edi
mov esi, ecx
xor edi, edi
mov dword [esp + 0xc], edi
mov dword [esp + 0x24], edi
mov dword [esi + 0x138], edi
mov dword [esi + 0x12c], edi
mov dword [esi + 0x130], edi
mov word [esi + 0x170], ax
mov dword [esi + 0x134], edi
mov eax, dword [esi + 0x4f8]
dec eax
mov dword [esp + 0x28], edi
cmp eax, edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
jl 0x4df216
lea ebx, [eax*4]
inc eax
mov dword [esp + 0x10], eax
jmp 0x4df1da
xor edi, edi
mov ecx, dword [esi + 0x4f4]
push edi
mov ecx, dword [ebx + ecx]
call fcn.005012a0
test eax, eax
jge 0x4df202
mov edx, dword [esi + 0x4f4]
push edi
mov ecx, dword [ebx + edx]
call fcn.005012a0
sub dword [esi + 0x134], eax
inc edi
cmp edi, 4
jl 0x4df1da
mov eax, dword [esp + 0x10]
sub ebx, 4
dec eax
mov dword [esp + 0x10], eax
jne 0x4df1d8
xor ebx, ebx
mov dword [esp + 0x64], 0x5e2838
mov dword [esp + 0x68], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x6c], ebx
lea eax, [esp + 0x64]
mov ecx, esi
push eax
mov dword [esp + 0x944], ebx
call fcn.004dfca0
mov ecx, 0x200
xor eax, eax
lea edi, [esp + 0x138]
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x6c]
lea eax, [ecx - 1]
cmp eax, ebx
mov dword [esp + 0x10], eax
jl 0x4df34f
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x10]
xor ecx, ecx
mov edi, dword [edx + eax*4]
mov cl, byte [edi + 0x14c]
push ecx
mov ecx, esi
call fcn.004d5100
mov ebx, eax
mov ecx, edi
mov dword [esp + 0x20], ebx
call fcn.004ed3d0
test al, al
mov ecx, edi
je 0x4df2aa
call fcn.004f0530
fimul dword [esp + 0x20]
fadd qword [esp + 0x24]
fstp qword [esp + 0x24]
jmp 0x4df340
call fcn.004ed400
test al, al
je 0x4df2be
inc dword [esi + 0x138]
jmp 0x4df340
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x20]
test eax, eax
mov ecx, edi
je 0x4df318
call fcn.004f0530
fimul dword [esp + 0x20]
mov ecx, edi
fadd qword [esp + 0x24]
fstp qword [esp + 0x24]
call fcn.004ed390
test al, al
je 0x4df310
mov eax, dword [edi + 0x1ac]
cmp word [esp + eax*2 + 0x138], 0
jne 0x4df340
add dword [esi + 0x12c], ebx
mov edi, dword [edi + 0x1ac]
mov word [esp + edi*2 + 0x138], 1
jmp 0x4df340
add dword [esi + 0x12c], ebx
jmp 0x4df340
call fcn.004ed390
test al, al
je 0x4df33a
mov eax, dword [edi + 0x1ac]
cmp word [esp + eax*2 + 0x138], 0
jne 0x4df340
add dword [esi + 0x130], ebx
jmp 0x4df2fe
add dword [esi + 0x130], ebx
mov eax, dword [esp + 0x10]
dec eax
mov dword [esp + 0x10], eax
jns 0x4df266
xor eax, eax
mov dword [esp + 0x34], 1
mov dword [esi + 0x140], eax
mov dword [esi + 0x144], eax
mov eax, dword [esi + 0x160]
mov dword [esp + 0x38], 2
dec eax
mov dword [esp + 0x3c], 4
mov dword [esp + 0x40], 8
mov dword [esp + 0x44], 0x10
mov dword [esp + 0x48], 0x20
mov dword [esp + 0x4c], 0x40
mov dword [esp + 0x50], 0x80
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
js 0x4df5ef
lea ecx, [esp + eax*4 + 0x34]
inc eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x20], eax
mov edx, dword [esp + 0x6c]
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
lea ebx, [edx - 1]
test ebx, ebx
jl 0x4df597
mov eax, dword [esp + 0x68]
mov edi, dword [eax + ebx*4]
mov ecx, edi
mov edx, dword [edi]
call dword [edx + 0x20]
test eax, eax
je 0x4df517
mov ecx, dword [esp + 0x10]
mov al, byte [edi + 0x14c]
test byte [ecx], al
je 0x4df517
mov edx, dword [edi]
lea eax, [esp + 0xb8]
push eax
mov ecx, edi
call dword [edx]
fld qword [eax + 0x18]
fcomp qword [esp + 0x2c]
mov byte [esp + 0x940], 1
fnstsw ax
test ah, 1
jne 0x4df462
mov edx, dword [edi]
lea eax, [esp + 0xd8]
push eax
mov ecx, edi
call dword [edx]
mov ecx, dword [esp + 0xc]
fld qword [eax + 0x18]
or ecx, 1
fstp qword [esp + 0x2c]
mov dword [esp + 0xc], ecx
test byte [esp + 0xc], 1
je 0x4df47f
mov eax, dword [esp + 0xc]
lea ecx, [esp + 0xd8]
and al, 0xfe
mov dword [esp + 0xc], eax
call fcn.0042bd50
lea ecx, [esp + 0xb8]
mov byte [esp + 0x940], 0
call fcn.0042bd50
mov edx, dword [edi]
lea eax, [esp + 0x118]
push eax
mov ecx, edi
call dword [edx]
fld qword [eax + 0x10]
fcomp qword [esp + 0x5c]
mov byte [esp + 0x940], 2
fnstsw ax
test ah, 1
jne 0x4df4d7
mov edx, dword [edi]
lea eax, [esp + 0xf8]
push eax
mov ecx, edi
call dword [edx]
mov ecx, dword [esp + 0xc]
fld qword [eax + 0x10]
or ecx, 2
fstp qword [esp + 0x5c]
mov dword [esp + 0xc], ecx
test byte [esp + 0xc], 2
je 0x4df4f4
mov eax, dword [esp + 0xc]
lea ecx, [esp + 0xf8]
and al, 0xfd
mov dword [esp + 0xc], eax
call fcn.0042bd50
lea ecx, [esp + 0x118]
mov byte [esp + 0x940], 0
call fcn.0042bd50
fld qword [edi + 0x48]
fadd qword [esi + 0x140]
fstp qword [esi + 0x140]
mov eax, dword [edi + 0xd0]
test eax, eax
jne 0x4df590
mov edx, dword [edi]
lea eax, [esp + 0x78]
push eax
mov ecx, edi
call dword [edx]
fld qword [eax + 0x10]
fcomp qword [esp + 0x54]
mov byte [esp + 0x940], 3
fnstsw ax
test ah, 1
jne 0x4df562
mov edx, dword [edi]
lea eax, [esp + 0x98]
push eax
mov ecx, edi
call dword [edx]
mov ecx, dword [esp + 0xc]
fld qword [eax + 0x10]
or ecx, 4
fstp qword [esp + 0x54]
mov dword [esp + 0xc], ecx
test byte [esp + 0xc], 4
je 0x4df57f
mov eax, dword [esp + 0xc]
lea ecx, [esp + 0x98]
and al, 0xfb
mov dword [esp + 0xc], eax
call fcn.0042bd50
lea ecx, [esp + 0x78]
mov byte [esp + 0x940], 0
call fcn.0042bd50
dec ebx
jns 0x4df3f6
fld qword [esp + 0x14]
fcomp qword [esp + 0x5c]
fnstsw ax
test ah, 0x41
je 0x4df5b6
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x60]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edx
fld qword [esp + 0x14]
fcomp qword [esp + 0x54]
fnstsw ax
test ah, 0x41
jne 0x4df5d5
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], ecx
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x20]
sub ecx, 4
dec eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x20], eax
jne 0x4df3d7
fld qword [ebp + 0xc]
fcomp qword [0x5e2798]
fnstsw ax
test ah, 0x41
jne 0x4df630
lea ecx, [esi + 0x60]
call fcn.004f6c70
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 4]
cmp eax, 7
jne 0x4df630
fld qword [esp + 0x14]
fdiv qword [ebp + 0xc]
sub esp, 8
fstp qword [esp]
call dword [sym.imp.msvcrt.dll_ceil]
fmul qword [ebp + 0xc]
add esp, 8
fstp qword [esp + 0x14]
xor edi, edi
mov ecx, esi
mov dword [esi + 0x120], edi
mov dword [esi + 0x124], edi
call fcn.004e3060
test al, al
je 0x4df662
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esi + 0x120], eax
mov dword [esi + 0x124], ecx
jmp 0x4df8c7
mov ecx, esi
call fcn.004e3090
test al, al
je 0x4df860
mov al, byte [ebp + 0x14]
test al, al
je 0x4df8c7
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov dword [esi + 0x120], edx
push edi
mov ecx, esi
mov dword [esi + 0x124], eax
call fcn.004d7ba0
mov dword [esp + 0x34], 0x5e2984
mov dword [esp + 0x38], edi
mov dword [esp + 0x44], edi
mov dword [esp + 0x40], edi
mov dword [esp + 0x3c], edi
mov ecx, dword [esi + 0x318]
push 0xffffffffffffffff
push ecx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x948], 4
call fcn.004e5b10
mov edx, dword [esi + 0x318]
mov ecx, dword [esi + 0x314]
mov eax, dword [esp + 0x38]
mov edi, edx
dec edx
test edi, edi
je 0x4df6f9
inc edx
mov edi, dword [ecx]
add ecx, 8
mov dword [eax], edi
mov edi, dword [ecx - 4]
mov dword [eax + 4], edi
add eax, 8
dec edx
jne 0x4df6e2
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
mov ecx, 2
cmp edx, ecx
jle 0x4df729
lea edx, [eax + ecx*8]
add ecx, 2
mov edi, dword [edx]
mov dword [eax + ecx*8 - 8], edi
mov eax, dword [edx + 4]
mov edx, dword [esp + 0x38]
mov dword [edx + ecx*8 - 4], eax
mov eax, dword [esp + 0x3c]
cmp ecx, eax
mov eax, dword [esp + 0x38]
jl 0x4df706
mov ecx, dword [esp + 0x6c]
dec ecx
test ecx, ecx
mov dword [esp + 0x10], ecx
jl 0x4df7e4
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x10]
mov ecx, esi
mov edi, dword [edx + eax*4]
push edi
call fcn.004d80d0
mov ebx, eax
test ebx, ebx
je 0x4df7d1
mov edx, dword [edi]
lea eax, [esp + 0x98]
push eax
mov ecx, edi
inc ebx
call dword [edx]
mov ecx, dword [esp + 0x38]
mov byte [esp + 0x940], 5
fld qword [ecx + ebx*8]
fld qword [eax + 0x10]
fcompp
fnstsw ax
test ah, 1
je 0x4df782
fld qword [ecx + ebx*8]
jmp 0x4df79f
mov edx, dword [edi]
lea eax, [esp + 0x78]
push eax
mov ecx, edi
call dword [edx]
mov ecx, dword [esp + 0xc]
fld qword [eax + 0x10]
or ecx, 8
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x38]
mov al, byte [esp + 0xc]
fstp qword [ecx + ebx*8]
test al, 8
je 0x4df7bd
mov eax, dword [esp + 0xc]
lea ecx, [esp + 0x78]
and al, 0xf7
mov dword [esp + 0xc], eax
call fcn.0042bd50
lea ecx, [esp + 0x98]
mov byte [esp + 0x940], 4
call fcn.0042bd50
mov eax, dword [esp + 0x10]
dec eax
mov dword [esp + 0x10], eax
jns 0x4df73a
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
xor edi, edi
mov ecx, 2
mov dword [esi + 0x120], edi
cmp edx, ecx
mov dword [esi + 0x124], edi
jle 0x4df837
fld qword [eax + ecx*8 + 8]
fsub qword [eax + ecx*8]
mov eax, ecx
add ecx, 2
cdq
sub eax, edx
sar eax, 1
fstp qword [esi + eax*8 + 0x560]
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
cmp ecx, edx
fld qword [eax + ecx*8 - 8]
fsub qword [eax + ecx*8 - 0x10]
fadd qword [esi + 0x120]
fstp qword [esi + 0x120]
jl 0x4df7ff
mov dword [esp + 0x34], 0x5e2984
cmp eax, edi
mov byte [esp + 0x940], 6
je 0x4df854
push eax
call sub.mfc42u.dll_operatordelete
add esp, 4
mov byte [esp + 0x940], 0
xor edi, edi
jmp 0x4df8c7
mov ecx, dword [esp + 0x14]
mov al, byte [ebp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esi + 0x120], ecx
test al, al
mov dword [esi + 0x124], edx
je 0x4df883
push edi
mov ecx, esi
call fcn.004d7ba0
mov eax, dword [esi + 0x318]
mov ecx, 4
cmp eax, ecx
jle 0x4df8c7
mov eax, dword [esi + 0x314]
fld qword [eax + ecx*8]
fcomp qword [esp + 0x14]
lea edx, [eax + ecx*8]
fnstsw ax
test ah, 1
je 0x4df8ba
fld qword [edx]
fsub qword [edx - 8]
fsubr qword [esi + 0x120]
fstp qword [esi + 0x120]
mov eax, dword [esi + 0x318]
add ecx, 2
cmp ecx, eax
jl 0x4df892
fld qword [esi + 0x120]
fcomp qword [0x5e27e0]
fnstsw ax
test ah, 1
je 0x4df8eb
mov dword [esi + 0x118], edi
mov dword [esi + 0x11c], edi
jmp 0x4df99e
fld qword [esi + 0x90]
fcomp qword [0x5e28b0]
fnstsw ax
test ah, 0x41
je 0x4df928
fld qword [esi + 0x90]
fcomp qword [0x5e28a8]
fnstsw ax
test ah, 1
jne 0x4df928
fld qword [esi + 0x90]
fmul qword [0x5e2640]
fsubr qword [0x5e2858]
fmul qword [esi + 0x78]
jmp 0x4df92b
fld qword [esi + 0x78]
fld qword [esp + 0x24]
fdiv qword [esi + 0x120]
fst qword [esp + 0x24]
fdiv st(1)
fld qword [0x5e2858]
fcompp
fnstsw ax
test ah, 1
fstp st(0)
je 0x4df954
fld qword [0x5e2858]
jmp 0x4df998
fld qword [esi + 0x90]
fcomp qword [0x5e28b0]
fnstsw ax
test ah, 0x41
je 0x4df991
fld qword [esi + 0x90]
fcomp qword [0x5e28a8]
fnstsw ax
test ah, 1
jne 0x4df991
fld qword [esi + 0x90]
fmul qword [0x5e2640]
fsubr qword [0x5e2858]
fmul qword [esi + 0x78]
jmp 0x4df994
fld qword [esi + 0x78]
fdivr qword [esp + 0x24]
fstp qword [esi + 0x118]
cmp dword [esi + 0x28], edi
jne 0x4dfa51
mov ebx, dword [esi + 0x520]
mov dword [esp + 0x14], 0
dec ebx
mov dword [esp + 0x18], 0x3ff00000
js 0x4df9fc
mov ecx, dword [esi + 0x51c]
mov edi, dword [ecx + ebx*4]
mov ecx, edi
mov edx, dword [edi]
call dword [edx + 0x20]
test eax, eax
je 0x4df9f7
mov ecx, edi
call fcn.0050b020
fld qword [eax + 0x10]
fcomp qword [esp + 0x14]
fnstsw ax
test ah, 1
jne 0x4df9f7
mov ecx, edi
call fcn.0050b020
fld qword [eax + 0x10]
fstp qword [esp + 0x14]
dec ebx
jns 0x4df9c0
xor edi, edi
fld qword [ebp + 0xc]
fcomp qword [0x5e2798]
fnstsw ax
test ah, 0x41
jne 0x4dfa3d
lea ecx, [esi + 0x60]
call fcn.004f6c70
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 4]
cmp eax, 7
jne 0x4dfa3d
fld qword [esp + 0x14]
fdiv qword [ebp + 0xc]
sub esp, 8
fstp qword [esp]
call dword [sym.imp.msvcrt.dll_ceil]
fmul qword [ebp + 0xc]
add esp, 8
fstp qword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esi + 0x330], eax
mov dword [esi + 0x334], ecx
fld qword [esi + 0x90]
fmul qword [0x5e2640]
mov dword [esp + 0x64], 0x5e2838
fsubr qword [0x5e2858]
fdivr qword [esp + 0x2c]
fstp qword [esp + 0x2c]
mov eax, dword [esp + 0x68]
mov dword [esp + 0x940], 7
cmp eax, edi
je 0x4dfa8f
push eax
call sub.mfc42u.dll_operatordelete
add esp, 4
mov ecx, dword [esp + 0x938]
pop edi
fld qword [esp + 0x28]
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x10