Function at 0x5aef40
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x6c7588
push eax
mov dword fs:[0], esp
sub esp, 0x28
push ebp
push esi
mov esi, ecx
push edi
mov eax, dword [esi + 0x220]
test eax, eax
je 0x5aef9d
mov ecx, dword [esi + 0x334]
mov edx, dword [esi + 0x218]
lea edi, [ecx + ecx*2]
lea ecx, [ecx + edi*4]
mov edi, dword [esi + 0x2dc]
add ecx, edi
mov edi, dword [edx + ecx*4 + 8]
lea ecx, [eax + eax*2]
lea ecx, [eax + ecx*4]
lea ecx, [edx + ecx*4]
mov edx, dword [ecx - 0x34]
sub ecx, 0x34
dec eax
cmp edx, edi
je 0x5aef9d
test eax, eax
jne 0x5aef8e
mov al, byte [esi + 0x2f8]
test al, al
je 0x5aefb6
mov eax, dword [esi + 0x32c]
mov byte [esp + 0xc], 0
test eax, eax
je 0x5aefbb
mov byte [esp + 0xc], 1
mov eax, dword [esi + 0x70]
mov edx, dword [esp + 0xc]
push edx
push 2
lea ecx, [eax + 0x10]
call fcn.0042df50
mov eax, dword [esi + 0x1c]
mov eax, dword [eax + 4]
add eax, 0x40
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
mov edx, dword [esi + 0x2dc]
lea ecx, [esp + 0x28]
mov dword [esp + 0x24], eax
push ecx
push edx
mov ecx, esi
call fcn.005aee00
lea ecx, [esp + 0x28]
call fcn.004bac50
fstp dword [esp + 0xc]
fld dword [esi + 0x304]
fstp dword [esp + 0x18]
fld dword [esi + 0x300]
fst dword [esp + 0x14]
fmul dword [0x6df988]
sub esp, 8
mov dword [esp + 0x44], 0
fstp qword [esp]
call fcn.006b1ba9
fmul dword [0x6d2238]
add esp, 8
sub esp, 8
fsubr dword [esp + 0x1c]
fstp dword [esp + 0x1c]
fld dword [esp + 0x14]
fmul dword [0x6df988]
fld dword [esp + 0x14]
fcomp dword [0x6d035c]
fstp qword [esp]
fnstsw ax
and eax, 0x100
jne 0x5af07c
call fcn.006b1ba9
fmul dword [0x6d2238]
fsubr dword [esp + 0x14]
jmp 0x5af091
call fcn.006b060e
fmul dword [0x6d2238]
fsubr dword [esp + 0x14]
fadd dword [0x6d2238]
fstp dword [esp + 0x18]
fld dword [esi + 0x1e8]
fld dword [esi + 0x1ec]
fld dword [esp + 0x1c]
fsub dword [esp + 0x18]
mov eax, dword [esp + 0x4c]
add esp, 8
fcom dword [0x6d21a4]
mov ecx, dword [eax + 0x1c]
mov dword [esp + 0xc], ecx
fnstsw ax
and eax, 0x100
jne 0x5af0db
fsub dword [0x6d2238]
fcom dword [0x6d21a4]
fnstsw ax
and eax, 0x100
je 0x5af0c6
fcom dword [0x6d9270]
fnstsw ax
test ah, 5
jp 0x5af0fb
fadd dword [0x6d2238]
fcom dword [0x6d9270]
fnstsw ax
test ah, 5
jnp 0x5af0e8
fst dword [esp + 0x44]
mov eax, dword [esp + 0x44]
mov ecx, 0x7fffffff
and eax, ecx
mov dword [esp + 0x44], eax
fld dword [esp + 0x44]
fcomp dword [0x6d670c]
fnstsw ax
test ah, 0x41
jp 0x5af15c
mov edx, dword [esp + 0x18]
mov eax, edx
mov dword [esp + 0x44], edx
and eax, ecx
mov dword [esp + 0x44], eax
fld dword [esp + 0x44]
fcomp dword [0x6d670c]
fnstsw ax
test ah, 0x41
jp 0x5af15c
mov eax, dword [esp + 0x10]
mov dword [esp + 0x18], 0
fstp st(0)
fstp st(0)
fstp st(0)
fld dword [esp + 0x10]
mov dword [esp + 0x14], eax
jmp 0x5af1cc
fmul st(1)
fchs
fld dword [esp + 0x18]
fmul st(3)
fsubp st(1)
fmul dword [esp + 0xc]
fadd dword [esp + 0x18]
fstp st(2)
fstp st(0)
fld dword [esp + 0xc]
fmul st(1)
fadd dword [esp + 0x14]
fcom dword [0x6d035c]
fnstsw ax
test ah, 5
jp 0x5af19e
fadd dword [0x6d2238]
fcom dword [0x6d035c]
fnstsw ax
test ah, 5
jnp 0x5af18b
fcom dword [0x6d2238]
fnstsw ax
and eax, 0x100
jne 0x5af1c2
fsub dword [0x6d2238]
fcom dword [0x6d2238]
fnstsw ax
and eax, 0x100
je 0x5af1ad
fxch st(1)
fstp dword [esp + 0x18]
fst dword [esp + 0x14]
fstp dword [esi + 0x300]
fld dword [esp + 0x18]
mov ecx, dword [esi + 0x70]
fstp dword [esi + 0x304]
call fcn.004332a0
mov ebp, dword [esi + 0x70]
lea ecx, [esp + 0x1c]
fld dword [esp + 0x20]
mov edi, dword [ebp + 4]
push ecx
fadd dword [esi + 0x1f0]
add edi, 0x10
lea ecx, [edi + 0x30]
fstp dword [esp + 0x24]
call fcn.00420920
mov eax, dword [edi + 0xc]
and eax, 0xfffdffff
mov dword [edi + 0xc], eax
mov edx, dword [ebp + 4]
push edx
call fcn.00404040
fld dword [esi + 0x300]
mov ecx, dword [esi + 0x70]
fmul dword [0x6d3150]
fstp dword [esp]
push 0x72c608
call fcn.004330e0
fld dword [esi + 0x314]
fdiv dword [esi + 0x1bc]
xor eax, eax
push 0
mov al, byte [esi + 0x2f8]
mov dword [esp + 0x48], eax
fmul dword [0x6d2238]
fsin
fadd dword [0x6d0348]
fimul dword [esp + 0x48]
fmul dword [0x6d1310]
call fcn.006b072c
mov ecx, dword [esi + 0x70]
push eax
push ecx
call fcn.005330f0
mov ecx, dword [esp + 0x40]
add esp, 0xc
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
add esp, 0x34
ret 4