Function at 0x406f60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x368
fldz
push ebx
fst qword [esp + 0x54]
xor eax, eax
fldz
mov word [esp + 0xc], ax
fst dword [esp + 0x50]
push ebp
xor ebp, ebp
fxch st(1)
mov dword [esp + 0x14], ebp
xor ecx, ecx
mov word [esp + 0x28], cx
fst qword [esp + 0x2c]
fxch st(1)
push esi
fstp dword [esp + 0x28]
mov dword [esp + 0x10], ebp
fst qword [esp + 0x50]
fld dword [0x425848]
fsub qword [0x41f908]
fstp dword [0x425848]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x10], edx
fild dword [esp + 0x10]
fadd qword [esp + 0x50]
call fcn.0040aec0
mov dword [esp + 0x10], eax
fld dword [0x4235e0]
fsub qword [0x41f900]
mov esi, dword [esp + 0x384]
xor eax, eax
lea ecx, [esp + 0x64]
fstp dword [0x4235e0]
mov dword [esp + 0x70], ecx
mov ebx, 1
fstp qword [esp + 0x20]
mov word [esp + 0x20], ax
movzx edx, word [esp + 0x20]
movzx eax, word [esp + 0x20]
imul edx, eax
lea ecx, [esp + 0x68]
mov dword [esp + 0x64], ebp
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
push ecx
mov word [esp + 0x24], dx
dec dword [esp + 0x24]
push esi
call fcn.00401870
add esp, 8
test eax, eax
jl 0x40774a
mov edx, dword [esi + 8]
test byte [edx], bl
je 0x40774a
fld qword [0x425838]
lea eax, [esp + 0x1c]
fadd qword [esp + 0x5c]
push esi
push eax
fstp qword [0x425838]
fld qword [esp + 0x64]
fadd qword [0x41f350]
fstp qword [esp + 0x64]
call fcn.00402990
push ebp
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x48]
push edx
call fcn.004014d0
push 0x300
lea eax, [esp + 0x8c]
push ebp
push eax
call fcn.0040b130
mov ecx, dword [esp + 0x3a0]
push ecx
call fcn.00401b20
add esp, 0x24
cmp eax, 0x29f
jle 0x4070a9
mov dword [esp + 0x20], 6
jmp 0x4070d9
cmp eax, 0xef
jle 0x4070ba
mov dword [esp + 0x20], 5
jmp 0x4070d9
cmp eax, 0x4f
jle 0x4070c9
mov dword [esp + 0x20], 4
jmp 0x4070d9
xor edx, edx
cmp eax, 0x17
setg dl
lea edx, [edx + edx + 1]
mov dword [esp + 0x20], edx
push edi
mov edi, dword [esi + 4]
add edi, ebx
mov ebx, dword [esp + 0x37c]
push edi
push ebx
call fcn.00401a60
add esp, 8
mov dword [esp + 0x10], eax
cmp eax, ebp
jne 0x4076c0
lea eax, [esp + 0x84]
push edi
push eax
call fcn.00401a60
add esp, 8
mov dword [esp + 0x10], eax
cmp eax, ebp
jne 0x4076c0
lea ecx, [edi + edi]
push ecx
lea edx, [esp + 0x4c]
push edx
call fcn.00401a60
add esp, 8
mov dword [esp + 0x10], eax
cmp eax, ebp
jne 0x4076c0
mov ebp, dword [esp + 0x38c]
test ebp, ebp
je 0x407161
cmp dword [ebp + 8], 0
je 0x407161
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
mov edx, dword [ebp + 8]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], ecx
mov dword [esp + 0x44], edx
jmp 0x4071ed
lea eax, [esp + 0x3c]
push 1
push eax
call fcn.00402000
add esp, 8
mov dword [esp + 0x10], eax
test eax, eax
jne 0x4076c7
mov ecx, dword [esi + 4]
shl ecx, 6
push ecx
lea edx, [esp + 0x40]
push edx
call fcn.00402b10
add esp, 8
mov dword [esp + 0x10], eax
test eax, eax
jne 0x4076c7
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x3c]
mov ecx, 0xa33321d1
sub ecx, eax
push esi
push edx
mov eax, edx
push eax
mov dword [0x42456c], ecx
call fcn.00406e80
add esp, 0xc
mov dword [esp + 0x10], eax
test eax, eax
jne 0x4076c7
test ebp, ebp
je 0x4071e3
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x44]
mov dword [ebp], ecx
mov dword [ebp + 4], edx
mov dword [ebp + 8], eax
add dword [0x4258e0], 0xf19612e6
mov edi, dword [esp + 0x380]
push esi
push edi
call fcn.00401870
add esp, 8
test eax, eax
jl 0x407216
push esi
lea ecx, [esp + 0x88]
push edi
push ecx
call fcn.00406e80
add esp, 0xc
jmp 0x407227
lea edx, [esp + 0x84]
push edi
push edx
call fcn.00401be0
add esp, 8
fld qword [0x4250f0]
fsub qword [esp + 0x54]
fcomp qword [0x41f8f8]
fnstsw ax
test ah, 1
jne 0x40728d
or ecx, 0xffffffff
add dword [esp + 0x30], ecx
mov ax, word [esp + 0x30]
movsx edx, ax
add edx, 0x5fcba428
mov dword [esp + 0x10], edx
fild dword [esp + 0x10]
fld dword [esp + 0x2c]
fadd qword [0x41f8f0]
fucompp
fnstsw ax
fld dword [esp + 0x2c]
fsub qword [0x41f350]
fstp dword [esp + 0x2c]
test ah, 0x44
jp 0x40728d
fld qword [0x425ec8]
mov ax, word [esp + 0x18]
add dword [esp + 0x18], ecx
fstp st(0)
mov edi, dword [esp + 0x20]
lea ecx, [esp + 0x48]
push ecx
push edi
push esi
lea edx, [esp + 0x48]
push edx
lea eax, [esp + 0x94]
push eax
call fcn.00402e50
lea ecx, [esp + 0x50]
push ecx
push ebx
call fcn.00401be0
add esp, 0x1c
mov dword [esp + 0x10], eax
test eax, eax
jne 0x4076c7
lea edx, [esp + 0x48]
push edx
push edi
push esi
push ebx
call fcn.004034d0
mov ebx, dword [esp + 0x34]
add esp, 0x10
cmp ebx, 1
jle 0x407473
mov eax, dword [esi + 4]
dec ebx
mov ecx, ebx
mov ebp, 1
shl ebp, cl
inc eax
push eax
lea edi, [ebp + ebp*2]
lea edi, [esp + edi*4 + 0x7c]
push edi
call fcn.00401a60
add esp, 8
mov dword [esp + 0x10], eax
test eax, eax
jne 0x4076c0
fld dword [0x425aec]
fld qword [esp + 0x60]
fsubr qword [0x41f8e8]
fld qword [esp + 0x34]
faddp st(2)
fcompp
fnstsw ax
fld dword [0x425aec]
fsub qword [0x41f350]
fstp dword [0x425aec]
test ah, 1
jne 0x40735f
fld dword [0x42591c]
fcomp qword [0x41f8e0]
fnstsw ax
test ah, 5
jp 0x40735f
inc word [0x424580]
mov cx, word [0x424580]
lea edx, [esp + 0x84]
push edx
push edi
call fcn.00401be0
add esp, 8
mov dword [esp + 0x10], eax
test eax, eax
jne 0x4076c0
test ebx, ebx
jle 0x40739a
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x48]
push eax
push ecx
push esi
push edi
push edi
call fcn.00402e50
add esp, 0x14
sub ebx, 1
jne 0x407380
mov edx, dword [str.s_bi_v]
mov ecx, dword [esp + 0x24]
add edx, 0x614b1526
mov dword [esp + 0x34], edx
fild dword [esp + 0x34]
mov ebx, 1
shl ebx, cl
inc ebp
fmul qword [esp + 0x60]
cmp ebp, ebx
fstp qword [esp + 0x60]
jge 0x40745d
lea edi, [ebp + ebp*2]
lea edi, [esp + edi*4 + 0x78]
jmp 0x4073e0
fld dword [esp + 0x2c]
mov ax, word [esp + 0x18]
fsub qword [0x41f8d8]
movsx ecx, ax
mov dword [esp + 0x34], ecx
fild dword [esp + 0x34]
fmulp st(1)
call fcn.0040aec0
mov edx, dword [esi + 4]
inc edx
push edx
push edi
mov word [esp + 0x20], ax
call fcn.00401a60
add esp, 8
mov dword [esp + 0x10], eax
test eax, eax
jne 0x4076c0
lea eax, [edi - 0xc]
push eax
push edi
call fcn.00401be0
add esp, 8
mov dword [esp + 0x10], eax
test eax, eax
jne 0x4076c0
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x48]
push ecx
push edx
push esi
lea eax, [esp + 0x90]
push eax
push edi
call fcn.00402e50
inc ebp
add esp, 0x14
add edi, 0xc
cmp ebp, ebx
jl 0x4073e0
fld qword [esp + 0x54]
fld dword [0x42318c]
fsubr qword [0x41f8d0]
fsubp st(1)
fstp qword [esp + 0x54]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x384]
mov edx, 0xd990689a
sub edx, ecx
add edx, dword [esp + 0x14]
mov ecx, dword [eax + 4]
xor ebx, ebx
mov dword [esp + 0x14], edx
xor edi, edi
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], ebx
xor ebp, ebp
mov edi, edi
cmp dword [esp + 0x14], 0
jne 0x4074d0
mov eax, dword [esp + 0x18]
mov edx, eax
dec eax
mov dword [esp + 0x18], eax
test edx, edx
je 0x4075e3
fld qword [esp + 0x54]
mov dword [esp + 0x14], 0x20
fmul qword [0x41f8c8]
fstp qword [esp + 0x54]
fld qword [0x4230a0]
mov eax, dword [esp + 0x384]
mov edx, dword [eax + 8]
fsubr qword [0x41f8c0]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov eax, dword [edx + eax*4]
fstp qword [esp + 0x54]
dec ecx
shr eax, cl
mov dword [esp + 0x14], ecx
and eax, 1
jne 0x40752b
test ebx, ebx
je 0x4074a0
cmp ebx, 1
jne 0x40752b
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x37c]
lea ecx, [esp + 0x48]
push ecx
push edx
push esi
push eax
push eax
call fcn.00402e50
add esp, 0x14
jmp 0x4074a0
mov edx, dword [esp + 0x24]
inc edi
mov ecx, edx
sub ecx, edi
shl eax, cl
mov ebx, 2
or ebp, eax
cmp edi, edx
jne 0x4074a0
mov edi, dword [esp + 0x20]
mov ebx, edx
test ebx, ebx
jle 0x40756d
nop
lea eax, [esp + 0x48]
push eax
mov eax, dword [esp + 0x380]
push edi
push esi
push eax
push eax
call fcn.00402e50
add esp, 0x14
sub ebx, 1
jne 0x407550
lea ecx, [esp + 0x48]
push ecx
mov ecx, dword [esp + 0x380]
push edi
lea edx, [ebp + ebp*2]
push esi
lea eax, [esp + edx*4 + 0x84]
push eax
push ecx
call fcn.00402e50
mov ebx, 1
add dword [esp + 0x44], ebx
fld dword [0x425ee0]
mov dx, word [esp + 0x44]
mov ecx, dword [esp + 0x30]
movsx eax, dx
mov dword [esp + 0x48], eax
add esp, 0x14
xor edi, edi
fild dword [esp + 0x34]
mov dword [esp + 0x34], ecx
xor ebp, ebp
faddp st(1)
fild dword [esp + 0x34]
fmulp st(1)
call fcn.0040aec0
mov dword [esp + 0x1c], eax
fld dword [0x425ee0]
fsub qword [0x41f350]
fstp dword [0x425ee0]
jmp 0x4074a0
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x34], edx
fild dword [esp + 0x34]
fadd dword [esp + 0x2c]
call fcn.0040aec0
mov ecx, dword [esp + 0x24]
mov ebx, 1
rol ebx, cl
mov dword [esp + 0x1c], eax
test edi, edi
jle 0x40767b
mov dword [esp + 0x1c], edi
nop
fld dword [esp + 0x5c]
mov edi, dword [esp + 0x37c]
fadd qword [0x41f8b8]
lea eax, [esp + 0x48]
push eax
fsub qword [0x41f8b0]
fadd qword [0x425838]
mov ecx, dword [esp + 0x24]
push ecx
push esi
push edi
fstp qword [0x425838]
push edi
call fcn.00402e50
add ebp, ebp
add esp, 0x14
test ebp, ebx
je 0x40766a
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x48]
push edx
push eax
push esi
lea ecx, [esp + 0x90]
push ecx
push edi
call fcn.00402e50
add esp, 0x14
sub dword [esp + 0x1c], 1
fld dword [0x41f8ac]
fstp dword [esp + 0x2c]
jne 0x407610
mov dx, word [0x4258f0]
movsx eax, dx
add eax, 0x7b96f5ac
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x37c]
lea ecx, [esp + 0x48]
fild dword [esp + 0x5c]
push ecx
fadd dword [0x425878]
fstp dword [0x425878]
dec word [0x4258f0]
mov edx, dword [esp + 0x24]
push edx
push esi
push eax
call fcn.004034d0
add esp, 0x10
mov ebp, dword [esp + 0x38c]
mov esi, dword [esp + 0x24]
lea ecx, [esi - 1]
mov eax, 1
shl eax, cl
mov edx, 1
mov ecx, esi
shl edx, cl
cmp eax, edx
jge 0x407703
lea esi, [eax + eax*2]
sub edx, eax
lea esi, [esp + esi*4 + 0x78]
mov edi, edx
lea ecx, [ecx]
push 0
push esi
call fcn.004025e0
add esp, 8
add esi, 0xc
sub edi, 1
jne 0x4076f0
pop edi
push 0
lea ecx, [esp + 0x48]
lea edx, [esp + 0x84]
test ebp, ebp
je 0x40772d
push ecx
push edx
call fcn.004025e0
mov eax, dword [esp + 0x18]
add esp, 0xc
pop esi
pop ebp
pop ebx
add esp, 0x368
ret
lea eax, [esp + 0x3c]
push eax
push ecx
push edx
call fcn.004025e0
mov eax, dword [esp + 0x1c]
add esp, 0x10
pop esi
pop ebp
pop ebx
add esp, 0x368
ret
pop esi
pop ebp
mov eax, 0xfffffffc
pop ebx
add esp, 0x368
ret