Function at 0x410824
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x16c
mov ebp, eax
mov ebx, dword [eax + 0x18]
mov dword [esp + 0x88], ebx
mov esi, dword [eax + 0x1c]
mov dword [esp + 0x8c], esi
mov ebx, dword [eax]
mov dword [esp + 0x50], ebx
mov esi, dword [eax + 4]
mov dword [esp + 0xb0], esi
mov ebx, dword [eax + 0xc]
mov dword [esp + 0xa4], ebx
mov esi, dword [eax + 0x10]
mov dword [esp + 0xa8], esi
mov dword [esp + 4], 0x10
mov ebx, dword [esp + 0x88]
mov dword [esp], ebx
call sub.msvcrt.dll_calloc
mov dword [esp + 0xac], eax
test eax, eax
je 0x410c53
mov dword [esp + 4], 0x10
mov dword [esp], ebx
call sub.msvcrt.dll_calloc
mov dword [esp + 0xa0], eax
test eax, eax
je 0x410c53
mov dword [esp + 4], 0x48
mov dword [esp], ebx
call sub.msvcrt.dll_calloc
mov dword [esp + 0x94], eax
test eax, eax
je 0x410c69
mov dword [esp + 4], ebx
lea eax, [ebp + 0x20]
mov dword [esp], eax
call fcn.00414620
test eax, eax
jne 0x410c69
test ebx, ebx
jle 0x410e2f
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x78], eax
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x48], eax
xor ecx, ecx
mov ebx, dword [esp + 0x50]
dec ebx
mov dword [esp + 0x80], ebx
mov dword [esp + 0x68], ebp
mov ebp, ecx
inc ebp
cmp dword [esp + 0x88], ebp
jle 0x410d32
mov edx, ebp
mov esi, dword [esp + 0x8c]
mov ecx, dword [esi + ebp*4 - 4]
mov ebx, dword [esi + edx*4]
sub ebx, ecx
cmp dword [esp + 0x50], ebx
jle 0x410d24
test ebx, ebx
js 0x410d41
add ebx, ecx
mov esi, dword [esp + 0x68]
mov eax, dword [esi]
mov edi, dword [esi + 0x14]
xor edx, edx
cmp ebx, eax
jl 0x41096f
nop
sub ebx, eax
inc edx
cmp eax, ebx
jle 0x410968
cmp ecx, eax
jl 0x41097b
nop
sub ecx, eax
dec edx
cmp eax, ecx
jle 0x410974
test ebx, ebx
jns 0x410985
nop
dec edx
add ebx, eax
js 0x410980
test ecx, ecx
jns 0x410991
lea esi, [esi]
inc edx
add ecx, eax
js 0x41098c
inc ebx
mov dword [esp + 0x5c], ebx
lea ebx, [ebx + ebx*4]
lea ebx, [edi + ebx*8]
mov dword [esp + 0x90], ebx
lea ebx, [ecx + ecx*4]
lea ebx, [edi + ebx*8]
mov dword [esp + 0xdc], edx
fild dword [esp + 0xdc]
lea esi, [eax + eax*4]
lea edi, [edi + esi*8]
mov esi, dword [esp + 0x90]
fld qword [esi]
fsub qword [ebx]
fld qword [edi]
fmul st(2)
faddp st(1)
fld qword [esi + 8]
fsub qword [ebx + 8]
fld qword [edi + 8]
fmul st(3)
faddp st(1)
fld qword [esi + 0x10]
fsub qword [ebx + 0x10]
fld qword [edi + 0x10]
fmul st(4)
faddp st(1)
fld qword [esi + 0x18]
fsub qword [ebx + 0x18]
fld qword [edi + 0x18]
fmul st(5)
faddp st(1)
fld qword [esi + 0x20]
fsub qword [ebx + 0x20]
fxch st(5)
fmul qword [edi + 0x20]
faddp st(5)
mov ebx, dword [esp + 0x5c]
sub ebx, ecx
mov ecx, ebx
imul eax, edx
add ecx, eax
mov dword [esp + 0xdc], ecx
fild dword [esp + 0xdc]
fld st(4)
fdiv st(1)
mov esi, dword [esp + 0x58]
fstp qword [esi]
fld st(3)
fdiv st(1)
fstp qword [esi + 8]
fld st(4)
fmul st(5)
fdiv st(1)
fsubp st(3)
fdiv st(2), st(0)
fxch st(4)
fmul st(3)
fdiv st(4)
fsubp st(1)
fdiv st(3)
fxch st(2)
fmul st(0)
fdiv st(3)
fsubp st(4)
fxch st(3)
fdivrp st(2)
fld st(2)
fsub st(2)
fmul st(0)
fld st(1)
fmul dword [0x427564]
fmul st(2)
faddp st(1)
fld st(0)
fsqrt
fucom st(0)
fnstsw ax
and ah, 0x45
cmp ah, 0x40
jne 0x4114a5
fstp st(1)
fld st(3)
fadd st(3)
faddp st(1)
fmul dword [0x427568]
fsub st(3), st(0)
fsubp st(2)
fld st(2)
fabs
fld st(2)
fabs
fxch st(1)
fucompp
fnstsw ax
test ah, 5
jne 0x410cd8
fstp st(1)
fld st(1)
fmul st(2)
fld st(1)
fmul st(2)
faddp st(1)
fld st(0)
fsqrt
fucom st(0)
fnstsw ax
and ah, 0x45
cmp ah, 0x40
jne 0x4114d2
fstp st(1)
fldz
fxch st(1)
fucom st(1)
fnstsw ax
fstp st(1)
and ah, 0x45
cmp ah, 0x40
je 0x410ca6
fxch st(1)
fchs
fdiv st(1)
mov ebx, dword [esp + 0x48]
fstp qword [ebx]
fdivp st(1)
fstp qword [ebx + 8]
add dword [esp + 0x48], 0x10
add dword [esp + 0x58], 0x10
cmp ebp, dword [esp + 0x88]
jne 0x410924
mov ebp, dword [esp + 0x68]
mov eax, dword [esp + 0x94]
mov dword [esp + 0x5c], eax
mov ebx, dword [esp + 0x88]
lea eax, [ebx + ebx*8]
mov edx, dword [esp + 0x94]
lea esi, [edx + eax*8]
fldz
lea ebx, [esp + 0x100]
mov edi, dword [esp + 0x78]
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x48], ebp
jmp 0x410bd8
fstp st(0)
fstp st(0)
fstp st(0)
mov dword [edx], 0
mov dword [edx + 4], 0
mov dword [edx + 8], 0
mov dword [edx + 0xc], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x18], 0
mov dword [edx + 0x1c], 0
mov dword [edx + 0x20], 0
mov dword [edx + 0x24], 0
mov dword [edx + 0x28], 0
mov dword [edx + 0x2c], 0
mov dword [edx + 0x30], 0
mov dword [edx + 0x34], 0
mov dword [edx + 0x38], 0
mov dword [edx + 0x3c], 0
mov dword [edx + 0x40], 0
mov dword [edx + 0x44], 0
jmp 0x410bc7
fstp st(0)
fstp st(0)
fstp st(0)
fstp st(0)
add ecx, 0x10
add edx, 0x48
add edi, 0x10
cmp edx, esi
je 0x410e69
fld qword [ecx]
fld qword [ecx + 8]
fld st(1)
fmul st(2)
fld st(1)
fmul st(2)
faddp st(1)
fucom st(3)
fnstsw ax
and ah, 0x45
xor ah, 0x40
je 0x410b3a
fxch st(1)
fst qword [esp + 0xe8]
fld st(2)
fchs
fst qword [esp + 0xf0]
fxch st(3)
fmul qword [edi + 8]
fld qword [edi]
fmul st(2)
fsubp st(1)
fst qword [esp + 0xf8]
lea ebp, [esp + 0xf0]
mov eax, edx
fld st(1)
fld st(2)
fmul st(1)
fdiv st(4)
fstp qword [eax]
fld st(4)
fmul st(1)
fdiv st(4)
fstp qword [eax + 8]
fmul st(1)
fdiv st(3)
fstp qword [eax + 0x10]
add eax, 0x18
cmp ebp, ebx
je 0x410bbf
fld qword [ebp]
add ebp, 8
jmp 0x410c28
mov dword [esp + 0x94], 0
mov dword [esp + 0xa0], 0
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call sub.msvcrt.dll_free
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
call sub.msvcrt.dll_free
mov eax, dword [esp + 0x94]
mov dword [esp], eax
call sub.msvcrt.dll_free
mov eax, 1
add esp, 0x16c
pop ebx
pop esi
pop edi
pop ebp
ret
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x410cb4
fstp st(0)
fstp st(0)
fstp st(0)
mov ebx, dword [esp + 0x48]
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
mov dword [ebx], 0
mov dword [ebx + 4], 0
jmp 0x410ae6
fstp st(2)
fxch st(1)
fld st(1)
fmul st(2)
fld st(1)
fmul st(2)
faddp st(1)
fld st(0)
fsqrt
fucom st(0)
fnstsw ax
and ah, 0x45
cmp ah, 0x40
jne 0x4114f5
fstp st(1)
fldz
fxch st(1)
fucom st(1)
fnstsw ax
fstp st(1)
and ah, 0x45
cmp ah, 0x40
je 0x410cae
fxch st(2)
fchs
fdiv st(2)
mov ebx, dword [esp + 0x48]
fstp qword [ebx]
fdivrp st(1)
fstp qword [ebx + 8]
jmp 0x410ae6
mov eax, ebx
cdq
idiv dword [esp + 0x50]
mov ebx, edx
jmp 0x410956
mov eax, ebp
cdq
idiv dword [esp + 0x88]
jmp 0x410934
mov eax, ebx
not eax
cdq
idiv dword [esp + 0x50]
mov ebx, dword [esp + 0x80]
sub ebx, edx
jmp 0x410956
fstp st(5)
fxch st(1)
fxch st(2)
fxch st(3)
fxch st(4)
fstp qword [esp + 0x68]
fld qword [esp + 0x128]
fst qword [esp + 0x60]
fld qword [esp + 0x140]
fst qword [esp + 0x80]
fxch st(1)
fmul st(4)
fxch st(1)
fmul st(3)
fsubrp st(1)
fdiv qword [esp + 0x68]
fld st(0)
fsub st(6)
fabs
fld qword [0x427570]
fucompp
fnstsw ax
test ah, 5
jne 0x4110c7
fld qword [esp + 0x60]
fmul st(2)
fstp qword [esp + 0x70]
fld qword [esp + 0x80]
fmul st(5)
fsubr qword [esp + 0x70]
fdiv qword [esp + 0x68]
fst qword [esp + 0x70]
fsub qword [esp + 0x48]
fabs
fld qword [0x427570]
fucompp
fnstsw ax
test ah, 5
jne 0x4110cd
fstp st(4)
fstp st(0)
fstp st(0)
fstp st(0)
fstp st(1)
mov eax, dword [esp + 0xd8]
add eax, dword [esp + 0x90]
fadd qword [esp + 0xb8]
fstp qword [eax]
fld qword [esp + 0xc0]
fadd qword [esp + 0x70]
fstp qword [eax + 8]
inc dword [esp + 0x58]
add dword [esp + 0x90], 0x10
add dword [esp + 0x5c], 0x48
mov ebx, dword [esp + 0xb4]
cmp dword [esp + 0x58], ebx
jne 0x410ec8
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call sub.msvcrt.dll_free
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
call sub.msvcrt.dll_free
mov eax, dword [esp + 0x94]
mov dword [esp], eax
call sub.msvcrt.dll_free
xor eax, eax
add esp, 0x16c
pop ebx
pop esi
pop edi
pop ebp
ret
fstp st(0)
mov ebp, dword [esp + 0x48]
mov ebx, dword [esp + 0x88]
dec ebx
mov dword [esp + 0xb4], ebx
mov dword [esp + 0x90], 0
mov dword [esp + 0x58], 0xffffffff
mov ebp, dword [ebp + 0x30]
mov dword [esp + 0xd8], ebp
fild dword [esp + 0xa4]
fstp qword [esp + 0xb8]
fild dword [esp + 0xa8]
fstp qword [esp + 0xc0]
lea ecx, [esp + 0x100]
lea ebp, [esp + 0x168]
lea esi, [esi]
mov edx, dword [esp + 0x58]
mov ebx, dword [esp + 0x8c]
mov eax, dword [ebx + edx*4 + 4]
mov esi, dword [esp + 0xb0]
lea edx, [esi + eax*8]
mov eax, dword [edx]
sub eax, dword [esp + 0xa4]
mov dword [esp + 0xdc], eax
fild dword [esp + 0xdc]
mov eax, dword [edx + 4]
sub eax, dword [esp + 0xa8]
mov dword [esp + 0xdc], eax
fild dword [esp + 0xdc]
fstp qword [esp + 0x48]
mov edx, dword [esp + 0x58]
cmp dword [esp + 0x88], edx
jle 0x411364
mov edi, dword [esp + 0x58]
test edi, edi
js 0x411487
lea eax, [edx + edx*8]
mov esi, dword [esp + 0x94]
lea eax, [esi + eax*8]
mov dword [esp + 0x50], eax
xor edx, edx
xor eax, eax
mov ebx, dword [esp + 0x50]
lea edi, [ebx + edx]
mov ebx, dword [esp + 0x5c]
lea esi, [ebx + edx]
lea ebx, [esp + 0x118]
add ebx, edx
fld qword [edi + eax*8]
fadd qword [esi + eax*8]
fstp qword [ebx + eax*8]
inc eax
cmp eax, 3
jne 0x410f5d
add edx, 0x18
cmp edx, 0x48
jne 0x410f44
fldz
jmp 0x410f7c
fstp st(0)
fstp st(0)
fld qword [esp + 0x118]
fld qword [esp + 0x138]
fld qword [esp + 0x120]
fld qword [esp + 0x130]
fld st(3)
fmul st(3)
fld st(2)
fmul st(2)
fsubp st(1)
fucom st(5)
fnstsw ax
and ah, 0x45
cmp ah, 0x40
jne 0x410d58
fstp st(0)
fxch st(3)
fucom st(2)
fnstsw ax
test ah, 0x45
jne 0x411050
fstp st(3)
fstp st(1)
fchs
fst qword [esp + 0xe8]
fxch st(1)
fst qword [esp + 0xf0]
fld st(1)
fmul st(2)
fld st(1)
fmul st(2)
faddp st(1)
fxch st(1)
fchs
fmul qword [esp + 0x48]
fld st(4)
fmul st(3)
fsubp st(1)
fstp qword [esp + 0xf8]
fld st(1)
xor ebx, ebx
lea eax, [ebx + ebx*2]
lea eax, [esp + eax*8 + 0x118]
lea edx, [esp + 0xf0]
fld st(2)
fmul st(1)
fdiv st(2)
fadd qword [eax]
fstp qword [eax]
add eax, 8
cmp edx, ecx
je 0x411038
fld qword [edx]
add edx, 8
fmul st(1)
fdiv st(2)
fadd qword [eax]
fstp qword [eax]
add eax, 8
cmp edx, ecx
jne 0x41101e
fstp st(0)
jmp 0x41103a
fstp st(0)
inc ebx
cmp ebx, 3
je 0x410f78
fld qword [esp + ebx*8 + 0xe8]
jmp 0x410ffc
fstp st(0)
fstp st(0)
fucom st(2)
fnstsw ax
and ah, 0x45
cmp ah, 0x40
je 0x411088
fchs
fst qword [esp + 0xe8]
fxch st(1)
fst qword [esp + 0xf0]
fld st(1)
fmul st(2)
fld st(1)
fmul st(2)
faddp st(1)
fxch st(1)
fchs
jmp 0x410fe7
fstp st(0)
fstp st(0)
fld1
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0x3ff00000
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
fldz
fchs
fld st(1)
fxch st(1)
jmp 0x410fe7
fstp st(0)
fxch st(4)
jmp 0x4110d1
fstp st(0)
fxch st(4)
fst qword [esp + 0x100]
fld qword [esp + 0x48]
fstp qword [esp + 0x108]
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0x3ff00000
lea edx, [esp + 0x108]
lea eax, [esp + 0x120]
fld st(3)
fld st(1)
fldz
fst qword [esp + 0x68]
fxch st(2)
fmul st(1)
fmul st(3)
faddp st(2)
fld qword [eax]
fmul st(1)
fmul qword [esp + 0x48]
faddp st(2)
fld qword [eax + 8]
fmulp st(1)
faddp st(1)
add eax, 0x18
cmp eax, ebp
je 0x41113c
fld qword [edx]
fld qword [eax - 8]
add edx, 8
jmp 0x411113
fstp qword [esp + 0x68]
fldz
fxch st(4)
fucom st(4)
fnstsw ax
fstp st(4)
and ah, 0x45
xor ah, 0x40
jne 0x411373
fstp st(1)
fld qword [esp + 0x48]
fsub dword [0x427568]
fstp qword [esp + 0x50]
fld qword [esp + 0x48]
fstp qword [esp + 0x78]
fst qword [esp + 0x70]
fldz
fxch st(2)
fucom st(2)
fnstsw ax
fstp st(2)
and ah, 0x45
fsub dword [0x427568]
fstp qword [esp + 0x60]
xor ah, 0x40
je 0x41126c
xor edx, edx
fstp qword [esp + 0x98]
fld qword [esp + 0x60]
push edx
fiadd dword [esp]
pop ebx
fld st(2)
fmul st(1)
fadd qword [esp + 0x80]
fchs
fdiv qword [esp + 0x98]
fld qword [esp + 0x48]
fsubr st(1)
fabs
fxch st(2)
fst qword [esp + 0x100]
fxch st(1)
fst qword [esp + 0x108]
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0x3ff00000
lea ebx, [esp + 0x108]
lea eax, [esp + 0x120]
fld st(3)
fld st(2)
fldz
fxch st(2)
fmul st(1)
fmul st(4)
faddp st(2)
fld qword [eax]
fmul st(1)
fmul st(3)
faddp st(2)
fld qword [eax + 8]
fmulp st(1)
faddp st(1)
add eax, 0x18
cmp eax, ebp
je 0x411224
fld qword [ebx]
fld qword [eax - 8]
add ebx, 8
jmp 0x4111fe
fld dword [0x427568]
fucomp st(4)
fnstsw ax
fstp st(3)
test ah, 5
jne 0x411250
fld qword [esp + 0x68]
fucomp st(3)
fnstsw ax
test ah, 0x45
jne 0x411258
fstp qword [esp + 0x78]
fstp qword [esp + 0x70]
fstp qword [esp + 0x68]
jmp 0x41125e
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x41125e
fstp st(0)
fstp st(0)
fstp st(0)
inc edx
cmp edx, 2
jne 0x41119b
fstp st(1)
jmp 0x411270
fstp st(0)
fstp st(1)
xor ebx, ebx
fldz
fld qword [esp + 0x68]
fld qword [esp + 0x60]
push ebx
fiadd dword [esp]
pop eax
xor esi, esi
jmp 0x41128a
fxch st(1)
fld qword [esp + 0x50]
push esi
fiadd dword [esp]
fxch st(1)
pop edx
fst qword [esp + 0x100]
fxch st(1)
fst qword [esp + 0x108]
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0x3ff00000
lea edx, [esp + 0x108]
lea eax, [esp + 0x120]
fld st(4)
fld st(2)
fld st(5)
fxch st(2)
fmul st(1)
fmul st(4)
faddp st(2)
fld qword [eax]
fmul st(1)
fmul st(3)
faddp st(2)
fld qword [eax + 8]
fmulp st(1)
faddp st(1)
add eax, 0x18
cmp eax, ebp
je 0x4112f8
fld qword [edx]
fld qword [eax - 8]
add edx, 8
jmp 0x4112d1
fxch st(3)
fucom st(3)
fnstsw ax
test ah, 0x45
jne 0x411314
fstp st(0)
fstp qword [esp + 0x78]
fst qword [esp + 0x70]
fxch st(1)
jmp 0x41131a
fstp st(3)
fstp st(0)
fxch st(1)
inc esi
cmp esi, 2
jne 0x411288
fstp st(1)
inc ebx
cmp ebx, 2
jne 0x411278
fstp st(0)
fstp st(0)
fstp st(0)
mov eax, dword [esp + 0xd8]
add eax, dword [esp + 0x90]
fld qword [esp + 0x70]
fadd qword [esp + 0xb8]
fstp qword [eax]
fld qword [esp + 0x78]
fadd qword [esp + 0xc0]
fstp qword [eax + 8]
jmp 0x410e0d
mov eax, edx
cdq
idiv dword [esp + 0x88]
jmp 0x410f31
fld qword [esp + 0x48]
fsub dword [0x427568]
fstp qword [esp + 0x50]
fld qword [esp + 0x48]
fstp qword [esp + 0x78]
fst qword [esp + 0x70]
fxch st(2)
xor edx, edx
fstp qword [esp + 0xc8]
fstp qword [esp + 0x98]
fxch st(2)
fstp qword [esp + 0xd0]
fld qword [esp + 0x50]
push edx
fiadd dword [esp]
pop esi
fld qword [esp + 0x98]
fmul st(1)
fadd qword [esp + 0x60]
fchs
fdiv st(2)
fld st(0)
fsub st(4)
fabs
fxch st(1)
fst qword [esp + 0x100]
fxch st(2)
fst qword [esp + 0x108]
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0x3ff00000
lea ebx, [esp + 0x108]
lea eax, [esp + 0x120]
fld st(3)
fld st(3)
fldz
fxch st(2)
fmul st(1)
fmul st(5)
faddp st(2)
fld qword [eax]
fmul st(1)
fmul st(3)
faddp st(2)
fld qword [eax + 8]
fmulp st(1)
faddp st(1)
add eax, 0x18
cmp eax, ebp
je 0x41142c
fld qword [ebx]
fld qword [eax - 8]
add ebx, 8
jmp 0x411406
fld dword [0x427568]
fucomp st(3)
fnstsw ax
fstp st(2)
test ah, 5
jne 0x41145a
fld qword [esp + 0x68]
fucomp st(2)
fnstsw ax
test ah, 0x45
jne 0x411462
fstp qword [esp + 0x78]
fxch st(1)
fstp qword [esp + 0x70]
fstp qword [esp + 0x68]
jmp 0x411468
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x411468
fstp st(0)
fstp st(0)
fstp st(0)
inc edx
cmp edx, 2
jne 0x4113a8
fld qword [esp + 0xc8]
fld qword [esp + 0xd0]
fxch st(3)
jmp 0x411172
mov eax, dword [esp + 0x58]
not eax
cdq
idiv dword [esp + 0x88]
mov ebx, dword [esp + 0xb4]
sub ebx, edx
mov edx, ebx
jmp 0x410f31
fstp st(0)
fstp qword [esp]
fstp qword [esp + 0x10]
fstp qword [esp + 0x20]
fstp qword [esp + 0x30]
call sub.msvcrt.dll_sqrt
fld qword [esp + 0x30]
fld qword [esp + 0x20]
fld qword [esp + 0x10]
fxch st(1)
fxch st(2)
fxch st(3)
jmp 0x410a76
fstp st(0)
fstp qword [esp]
fstp qword [esp + 0x10]
fstp qword [esp + 0x30]
call sub.msvcrt.dll_sqrt
fld qword [esp + 0x30]
fld qword [esp + 0x10]
fxch st(1)
fxch st(2)
jmp 0x410abf
fstp st(0)
fstp qword [esp]
fstp qword [esp + 0x10]
fstp qword [esp + 0x20]
call sub.msvcrt.dll_sqrt
fld qword [esp + 0x20]
fld qword [esp + 0x10]
fxch st(1)
fxch st(2)
jmp 0x410cfc