Function at 0x6fe840
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x13c
push ebp
mov ebp, ecx
push edi
xor edi, edi
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x6fe858
mov ecx, dword [eax + 4]
jmp 0x6fe85a
xor ecx, ecx
mov edx, dword [0x855e48]
cmp edx, edi
je 0x6fe869
mov eax, dword [edx + 4]
jmp 0x6fe86b
xor eax, eax
push ebx
mov bl, byte [esp + 0x150]
cmp ecx, eax
push esi
jne 0x6fe937
cmp edx, edi
je 0x6fe885
mov ecx, dword [edx + 4]
jmp 0x6fe887
xor ecx, ecx
mov eax, dword [ecx]
lea edx, [esp + 0x24]
push edx
call dword [eax + 0x38]
lea esi, [ebp + 0x28]
lea eax, [esp + 0x30]
push eax
mov ecx, esi
mov dword [esp + 0x34], edi
call fcn.00704790
test al, al
je 0x6fe8ad
or eax, 0xffffffff
jmp 0x6fe8f5
mov ecx, dword [0x85c6bc]
cmp ecx, edi
je 0x6fe8ea
mov edx, dword [ecx]
push 2
call dword [edx + 8]
test al, al
je 0x6fe8ea
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x6fe8ce
mov eax, dword [eax + 4]
jmp 0x6fe8d0
xor eax, eax
mov ecx, dword [0x855e48]
cmp ecx, edi
je 0x6fe8df
mov ecx, dword [ecx + 4]
jmp 0x6fe8e1
xor ecx, ecx
cmp eax, ecx
jne 0x6fe8ea
or eax, 0xffffffff
jmp 0x6fe8f5
push esi
lea ecx, [ebp + 0x24]
call fcn.00705450
mov eax, dword [eax]
mov ecx, dword [ebp]
push eax
xor eax, eax
mov edx, dword [ecx]
test bl, bl
sete al
push eax
call dword [edx + 0x30]
fld dword [esp + 0x34]
push eax
sub esp, 8
fstp qword [esp]
fld dword [esp + 0x3c]
sub esp, 8
fstp qword [esp]
fld dword [esp + 0x40]
sub esp, 8
fstp qword [esp]
push str._1.2f___1.2f___1.2f___s___d___d
push str.WFRD
call fcn.0069d9d0
add esp, 0x2c
mov eax, dword [esp + 0x150]
mov dword [esp + 0x34], edi
cmp dword [eax + 0x44], 0xffffffff
je 0x6fe965
mov edx, dword [eax + 0x44]
lea ecx, [esp + 0x34]
push ecx
push edx
call fcn.00407b70
mov eax, dword [esp + 0x3c]
add esp, 8
cmp eax, edi
je 0x6fe965
mov eax, dword [eax]
jmp 0x6fe96a
mov eax, dword [0x89fe34]
cmp eax, 1
mov dword [esp + 0x10], eax
jge 0x6fe97b
mov dword [esp + 0x10], 1
mov eax, dword [ebp + 0x4c]
neg bl
sbb ebx, ebx
and eax, 1
and ebx, 0xfffffffe
add ebx, 2
add ebx, eax
mov eax, dword [ebp + 0xc]
cmp eax, edi
mov dword [esp + 0x34], ebx
je 0x6fe99d
mov eax, dword [eax + 4]
jmp 0x6fe99f
xor eax, eax
push ebx
mov ecx, eax
call fcn.0071fef0
test al, al
jne 0x6fe9b5
test bl, 1
je 0x6fe9b5
dec ebx
mov dword [esp + 0x34], ebx
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x6fe9c1
mov ecx, dword [eax + 4]
jmp 0x6fe9c3
xor ecx, ecx
mov eax, dword [0x855e48]
cmp eax, edi
je 0x6fe9d1
mov eax, dword [eax + 4]
jmp 0x6fe9d3
xor eax, eax
cmp ecx, eax
mov ebx, 3
jne 0x6fea8a
mov al, byte [0x80f45e]
test al, al
je 0x6fea8a
mov al, byte [0x85e278]
test al, 1
jne 0x6fea20
mov dl, al
push 0x430560
push ebx
or dl, 1
push 0x10
push 0x85e280
mov byte [0x85e278], dl
call fcn.00401000
push 0x7030f0
call fcn.0078c854
add esp, 4
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x6fea2c
mov eax, dword [eax + 4]
jmp 0x6fea2e
xor eax, eax
mov ecx, dword [eax + 0x7b4]
mov esi, dword [0x855eb8]
mov dword [esp + 0x24], ecx
mov edx, dword [eax + 0x7b8]
mov dword [esp + 0x28], edx
mov eax, dword [eax + 0x7bc]
mov dword [esp + 0x2c], eax
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x4c]
fld dword [esi + 0x48]
fld dword [esi + 0x38]
fld dword [esi + 0x28]
fstp dword [esp + 0x14]
lea eax, [esp + 0x24]
push edi
fstp dword [esp + 0x1c]
lea ecx, [esp + 0x18]
push eax
fstp dword [esp + 0x24]
push ecx
mov ecx, 0x85e280
call fcn.005f5b30
mov esi, 0x85e280
jmp 0x6feaa7
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x6fea96
mov ecx, dword [eax + 4]
jmp 0x6fea98
xor ecx, ecx
mov eax, dword [esp + 0x34]
mov edx, dword [ecx]
push eax
call dword [edx + 0xb0]
mov esi, eax
push 0x430560
push ebx
lea ecx, [esp + 0x98]
push 0x10
push ecx
call fcn.00401000
mov edx, dword [esi]
mov dword [esp + 0x90], edx
mov eax, dword [esi + 4]
mov dword [esp + 0x94], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x98], ecx
mov edx, dword [esi + 0xc]
mov dword [esp + 0x9c], edx
mov eax, dword [esi + 0x10]
mov dword [esp + 0xa0], eax
mov ecx, dword [esi + 0x14]
mov dword [esp + 0xa4], ecx
mov edx, dword [esi + 0x18]
mov dword [esp + 0xa8], edx
mov eax, dword [esi + 0x1c]
mov dword [esp + 0xac], eax
mov ecx, dword [esi + 0x20]
mov dword [esp + 0xb0], ecx
mov edx, dword [esi + 0x24]
mov dword [esp + 0xb4], edx
mov eax, dword [esi + 0x28]
mov dword [esp + 0xb8], eax
mov al, byte [0x80f45e]
mov ecx, dword [esi + 0x2c]
test al, al
mov dword [esp + 0xbc], ecx
je 0x6fed60
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x6feb4c
mov eax, dword [eax + 4]
jmp 0x6feb4e
xor eax, eax
mov ecx, dword [0x855e48]
cmp ecx, edi
je 0x6feb5d
mov ecx, dword [ecx + 4]
jmp 0x6feb5f
xor ecx, ecx
cmp eax, ecx
jne 0x6fed60
lea edx, [esp + 0x24]
push edx
call fcn.0070f500
mov eax, dword [ebp + 0xc]
add esp, 4
cmp eax, edi
je 0x6feb80
mov eax, dword [eax + 4]
jmp 0x6feb82
xor eax, eax
mov ecx, dword [eax + 0x7b8]
mov edx, dword [eax + 0x7bc]
fld dword [eax + 0x7b4]
mov eax, dword [esp + 0x24]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x54], ecx
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x64], ecx
fstp dword [esp + 0x5c]
lea ecx, [esp + 0x50]
mov dword [esp + 0x58], edx
mov dword [esp + 0x60], eax
call fcn.00463a10
lea ecx, [esp + 0xc0]
call fcn.004639e0
push edi
lea edx, [esp + 0xc4]
push 4
lea eax, [esp + 0x58]
push edx
push eax
lea ecx, [esp + 0x100]
call fcn.00463b40
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x134], edi
cmp eax, edi
mov dword [esp + 0x138], ebx
mov byte [esp + 0x13c], 1
mov byte [esp + 0x13d], 1
je 0x6fec84
cmp dword [eax + 4], edi
je 0x6fec84
cmp eax, edi
je 0x6fec2c
mov eax, dword [eax + 4]
jmp 0x6fec2e
xor eax, eax
cmp dword [eax + 0x774], edi
je 0x6fec4f
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x6fec42
mov eax, dword [eax + 4]
jmp 0x6fec44
xor eax, eax
mov ecx, dword [eax + 0x774]
call fcn.006e0660
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x6fec5b
mov eax, dword [eax + 4]
jmp 0x6fec5d
xor eax, eax
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x28]
test eax, eax
je 0x6fec84
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x6fec74
mov eax, dword [eax + 4]
jmp 0x6fec76
xor eax, eax
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x28]
mov ecx, eax
call fcn.0067c9a0
lea eax, [esp + 0xf0]
push edi
push eax
call fcn.00670ae0
mov ecx, eax
call fcn.00631460
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x6fed06
cmp dword [eax + 4], edi
je 0x6fed06
cmp eax, edi
je 0x6fecae
mov eax, dword [eax + 4]
jmp 0x6fecb0
xor eax, eax
cmp dword [eax + 0x774], edi
je 0x6fecd1
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x6fecc4
mov eax, dword [eax + 4]
jmp 0x6fecc6
xor eax, eax
mov ecx, dword [eax + 0x774]
call fcn.006e0680
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x6fecdd
mov eax, dword [eax + 4]
jmp 0x6fecdf
xor eax, eax
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x28]
test eax, eax
je 0x6fed06
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x6fecf6
mov eax, dword [eax + 4]
jmp 0x6fecf8
xor eax, eax
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x28]
mov ecx, eax
call fcn.0067c9f0
mov eax, dword [esp + 0xf0]
fld dword [eax + 4]
fcomp dword [0x7e0638]
fnstsw ax
test ah, 1
jne 0x6fed60
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x6fed29
mov eax, dword [eax + 4]
jmp 0x6fed2b
xor eax, eax
mov ecx, dword [eax + 0x7b4]
push edi
mov dword [esp + 0x18], ecx
mov edx, dword [eax + 0x7b8]
mov dword [esp + 0x1c], edx
mov eax, dword [eax + 0x7bc]
lea ecx, [esp + 0x18]
lea edx, [esp + 0x28]
push ecx
push edx
lea ecx, [esp + 0x9c]
mov dword [esp + 0x28], eax
call fcn.005f5b30
mov eax, dword [esp + 0x150]
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
mov cl, byte [eax + 0x62]
mov dword [esp + 0x38], edi
test cl, cl
je 0x6fefbb
fld dword [esp + 0x9c]
fld dword [esp + 0xac]
mov eax, dword [ebp + 0xc]
fstp dword [esp + 0x28]
fld dword [esp + 0xbc]
fstp dword [esp + 0x2c]
cmp eax, edi
je 0x6fedb7
mov eax, dword [eax + 4]
jmp 0x6fedb9
xor eax, eax
mov ecx, dword [eax + 0x7b8]
mov edx, dword [eax + 0x7bc]
fld dword [eax + 0x7b4]
fxch st(1)
fstp dword [esp + 0x50]
mov eax, dword [esp + 0x28]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x58], ecx
fstp dword [esp + 0x5c]
lea ecx, [esp + 0x50]
mov dword [esp + 0x60], edx
mov dword [esp + 0x64], eax
call fcn.00463a10
lea ecx, [esp + 0xc0]
call fcn.004639e0
push edi
lea ecx, [esp + 0xc4]
push 4
lea edx, [esp + 0x58]
push ecx
push edx
lea ecx, [esp + 0x100]
call fcn.00463b40
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x134], edi
cmp eax, edi
mov dword [esp + 0x138], ebx
mov byte [esp + 0x13c], 1
mov byte [esp + 0x13d], 1
je 0x6feeb9
cmp dword [eax + 4], edi
je 0x6feeb9
cmp eax, edi
je 0x6fee61
mov eax, dword [eax + 4]
jmp 0x6fee63
xor eax, eax
cmp dword [eax + 0x774], edi
je 0x6fee84
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x6fee77
mov eax, dword [eax + 4]
jmp 0x6fee79
xor eax, eax
mov ecx, dword [eax + 0x774]
call fcn.006e0660
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x6fee90
mov eax, dword [eax + 4]
jmp 0x6fee92
xor eax, eax
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x28]
test eax, eax
je 0x6feeb9
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x6feea9
mov eax, dword [eax + 4]
jmp 0x6feeab
xor eax, eax
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x28]
mov ecx, eax
call fcn.0067c9a0
lea eax, [esp + 0xf0]
push edi
push eax
call fcn.00670ae0
mov ecx, eax
call fcn.00631460
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x6fef3b
cmp dword [eax + 4], edi
je 0x6fef3b
cmp eax, edi
je 0x6feee3
mov eax, dword [eax + 4]
jmp 0x6feee5
xor eax, eax
cmp dword [eax + 0x774], edi
je 0x6fef06
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x6feef9
mov eax, dword [eax + 4]
jmp 0x6feefb
xor eax, eax
mov ecx, dword [eax + 0x774]
call fcn.006e0680
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x6fef12
mov eax, dword [eax + 4]
jmp 0x6fef14
xor eax, eax
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x28]
test eax, eax
je 0x6fef3b
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x6fef2b
mov eax, dword [eax + 4]
jmp 0x6fef2d
xor eax, eax
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x28]
mov ecx, eax
call fcn.0067c9f0
mov eax, dword [esp + 0xf0]
fld dword [eax + 4]
fld dword [esp + 0x68]
fmul st(1)
mov eax, dword [esp + 0x134]
cmp eax, edi
fstp dword [esp + 0x24]
fld dword [esp + 0x6c]
fmul st(1)
fstp dword [esp + 0x28]
fmul dword [esp + 0x70]
fld dword [esp + 0x24]
fadd dword [esp + 0x50]
fld dword [esp + 0x54]
fadd dword [esp + 0x28]
fstp dword [esp + 0x18]
fld dword [esp + 0x58]
fadd st(2)
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
fstp dword [esp + 0x1c]
mov edx, dword [esp + 0x1c]
fstp dword [esp + 0x40]
mov dword [esp + 0x48], edx
fstp st(0)
je 0x6fefbb
mov ecx, dword [eax + 0x4c]
cmp ecx, edi
je 0x6fefbb
mov eax, dword [ecx]
call dword [eax + 0x10]
mov edx, dword [eax]
mov ecx, eax
mov dword [esp + 0x38], eax
call dword [edx + 0x40]
test eax, eax
je 0x6fefbb
mov dword [esp + 0x38], edi
mov eax, dword [esp + 0x10]
cmp eax, edi
jle 0x6ff455
mov dword [esp + 0x30], eax
mov ebx, dword [esp + 0x150]
or esi, 0xffffffff
xor edi, edi
mov eax, dword [ebx + 0x30]
mov dword [esp + 0x10], edi
cmp eax, esi
je 0x6fefff
mov ecx, dword [ebx + 0x30]
lea eax, [esp + 0x10]
push eax
push ecx
call fcn.00428f80
mov eax, dword [esp + 0x18]
add esp, 8
cmp eax, edi
je 0x6fefff
fld dword [eax]
jmp 0x6ff005
fld dword [0x89fe2c]
fld dword [esp + 0x90]
fld dword [esp + 0xa0]
fstp dword [esp + 0x28]
fld dword [esp + 0xb0]
fstp dword [esp + 0x2c]
push 0x430560
push 3
fmul st(1)
lea edx, [esp + 0xc8]
push 0x10
push edx
fstp dword [esp + 0x24]
fld dword [esp + 0x38]
fmul st(1)
fstp dword [esp + 0x28]
fld dword [esp + 0x3c]
fmul st(1)
fstp dword [esp + 0x2c]
fstp st(0)
call fcn.00401000
mov ecx, 0x85cb40
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
call fcn.005e6780
and eax, 0x7fffffff
mov ecx, 0x1001
cdq
idiv ecx
push ecx
lea eax, [esp + 0x18]
lea ecx, [esp + 0xc4]
mov dword [esp + 0x24], edx
lea edx, [esp + 0x88]
fild dword [esp + 0x24]
fmul dword [0x7e547c]
fstp dword [esp]
push edx
push eax
call fcn.005f5900
mov ecx, dword [ebx + 0x40]
mov dword [esp + 0x3c], ecx
mov ecx, 0x85cb40
call fcn.005e6780
and eax, 0x7fffffff
mov ecx, 0x1001
cdq
idiv ecx
mov dword [esp + 0x20], edx
fild dword [esp + 0x20]
fmul dword [esp + 0x3c]
fmul dword [0x7e33ac]
fld st(0)
fsin
fstp dword [esp + 0x10]
fcos
fld dword [esp + 0xc0]
fld dword [esp + 0xc0]
fmul st(2)
fld dword [esp + 0xc8]
fmul dword [esp + 0x10]
fsubp st(1)
fstp dword [esp + 0xc0]
fld dword [esp + 0xc8]
fmul st(2)
fxch st(1)
fmul dword [esp + 0x10]
faddp st(1)
fstp dword [esp + 0xc8]
fld dword [esp + 0xd0]
fld dword [esp + 0xd0]
fmul st(2)
fld dword [esp + 0xd8]
fmul dword [esp + 0x10]
fsubp st(1)
fstp dword [esp + 0xd0]
fld dword [esp + 0xd8]
fmul st(2)
fxch st(1)
fmul dword [esp + 0x10]
faddp st(1)
fstp dword [esp + 0xd8]
fld dword [esp + 0xe0]
fld dword [esp + 0xe0]
fmul st(2)
fld dword [esp + 0xe8]
fmul dword [esp + 0x10]
fsubp st(1)
fstp dword [esp + 0xe0]
fld dword [esp + 0xe8]
fmul st(2)
fxch st(1)
fmul dword [esp + 0x10]
faddp st(1)
fstp dword [esp + 0xe8]
fstp st(0)
fld dword [esp + 0xc8]
fld dword [esp + 0xd8]
fld dword [esp + 0xe8]
fld st(2)
fstp dword [esp + 0x14]
fld st(1)
fstp dword [esp + 0x18]
fst dword [esp + 0x1c]
fld st(2)
fmulp st(3)
fld st(0)
fmul st(1)
faddp st(3)
fld st(1)
fmul st(2)
faddp st(3)
fxch st(2)
fst dword [esp + 0x20]
fxch st(2)
fstp st(0)
fstp st(0)
fcomp dword [0x7cd7b4]
fnstsw ax
test ah, 0x40
jne 0x6ff21f
mov edx, dword [esp + 0x20]
push edx
call fcn.00463ae0
fld st(0)
fmul dword [esp + 0x14]
fstp dword [esp + 0x14]
fld dword [esp + 0x18]
fmul st(1)
fstp dword [esp + 0x18]
fld dword [esp + 0x1c]
fmul st(1)
fstp dword [esp + 0x1c]
fstp st(0)
mov eax, dword [ebx + 0x30]
mov dword [esp + 0x10], edi
cmp eax, esi
je 0x6ff247
mov ecx, dword [ebx + 0x30]
lea eax, [esp + 0x10]
push eax
push ecx
call fcn.00428f80
mov eax, dword [esp + 0x18]
add esp, 8
cmp eax, edi
je 0x6ff247
fld dword [eax]
jmp 0x6ff24d
fld dword [0x89fe2c]
fld st(0)
fmul dword [esp + 0x14]
lea edx, [esp + 0x140]
lea eax, [esp + 0x90]
push edx
push eax
mov ecx, ebp
fstp dword [esp + 0x1c]
fld dword [esp + 0x20]
fmul st(1)
fstp dword [esp + 0x20]
fld dword [esp + 0x24]
fmul st(1)
fstp dword [esp + 0x24]
fstp st(0)
call fcn.006ffc60
fld dword [0x857290]
fmul dword [ebx + 0xb4]
fmul dword [0x7ce390]
fadd dword [ebp + 0x34]
fst dword [ebp + 0x34]
fst dword [esp + 0x10]
fcomp dword [0x857290]
fnstsw ax
test ah, 1
jne 0x6ff2bb
fld dword [0x857290]
fsubr dword [esp + 0x10]
fstp dword [esp + 0x10]
fld dword [esp + 0x10]
fcomp dword [0x7cd7b4]
fnstsw ax
test ah, 1
je 0x6ff2ef
fld dword [0x857290]
fadd dword [esp + 0x10]
fst dword [esp + 0x10]
fcomp dword [0x7cd7b4]
fnstsw ax
test ah, 1
je 0x6ff2ef
mov dword [esp + 0x10], 0
fld dword [esp + 0x10]
fcomp dword [0x857290]
fnstsw ax
test ah, 0x41
jne 0x6ff30a
mov ecx, dword [0x857290]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x20], edi
mov eax, edx
mov dword [ebp + 0x34], edx
mov dword [esp + 0x4c], eax
mov eax, dword [ebx + 0x30]
cmp eax, esi
je 0x6ff33e
lea ecx, [esp + 0x20]
mov edx, eax
push ecx
push edx
call fcn.00428f80
mov eax, dword [esp + 0x28]
add esp, 8
cmp eax, edi
je 0x6ff33e
fld dword [eax]
jmp 0x6ff344
fld dword [0x89fe2c]
fcomp dword [0x7cd7b4]
fnstsw ax
test ah, 0x40
jne 0x6ff391
mov eax, dword [ebx + 0x30]
mov dword [esp + 0x20], edi
cmp eax, esi
je 0x6ff379
mov ecx, dword [ebx + 0x30]
lea eax, [esp + 0x20]
push eax
push ecx
call fcn.00428f80
mov eax, dword [esp + 0x28]
add esp, 8
cmp eax, edi
je 0x6ff379
fld dword [eax]
jmp 0x6ff37f
fld dword [0x89fe2c]
fld dword [0x7cd794]
fdiv st(1)
fadd dword [esp + 0x10]
fstp dword [esp + 0x4c]
fstp st(0)
fld dword [ebp + 0x6c]
fld dword [ebp + 0x68]
fld dword [ebp + 0x64]
fld st(0)
fmul st(1)
fld st(2)
fmul st(3)
faddp st(1)
fld st(3)
fmul st(4)
faddp st(1)
fcomp dword [0x7cd7b4]
fstp st(0)
fnstsw ax
fstp st(0)
test ah, 0x40
fstp st(0)
je 0x6ff3c4
mov al, byte [ebx + 0x62]
test al, al
jne 0x6ff3d9
mov edx, dword [ebp + 0x64]
mov eax, dword [ebp + 0x68]
mov ecx, dword [ebp + 0x6c]
mov dword [esp + 0x40], edx
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x6ff3e5
mov eax, dword [eax + 4]
jmp 0x6ff3e7
xor eax, eax
mov esi, eax
cmp esi, edi
je 0x6ff420
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x2c]
test eax, eax
je 0x6ff420
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2c]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x28]
mov edi, eax
test edi, edi
je 0x6ff420
mov ecx, edi
call fcn.0067c8b0
test eax, eax
je 0x6ff420
mov ecx, edi
call fcn.0067c8b0
mov esi, eax
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x4c]
lea ecx, [esp + 0x40]
push eax
push ecx
push edx
lea eax, [esp + 0x20]
push esi
lea ecx, [esp + 0x150]
push eax
push ecx
push ebx
call fcn.00718f20
mov eax, dword [esp + 0x4c]
add esp, 0x1c
dec eax
mov dword [esp + 0x30], eax
jne 0x6fefcb
mov esi, dword [esp + 0x150]
mov al, byte [esi + 0x70]
test al, al
je 0x6ff765
push 0xa0
call fcn.00672b70
xor ebx, ebx
add esp, 4
cmp eax, ebx
je 0x6ff765
mov ecx, eax
call fcn.0064ea60
mov edi, eax
cmp edi, ebx
je 0x6ff765
fld dword [esp + 0x9c]
fstp dword [esp + 0x24]
fld dword [esp + 0xac]
mov eax, dword [esi + 0x2c]
mov dword [esp + 0x30], ebx
fstp dword [esp + 0x28]
fld dword [esp + 0xbc]
fstp dword [esp + 0x2c]
cmp eax, 0xffffffff
je 0x6ff4d6
lea edx, [esp + 0x30]
push edx
push eax
call fcn.00428f80
mov eax, dword [esp + 0x38]
add esp, 8
cmp eax, ebx
je 0x6ff4d6
fld dword [eax]
jmp 0x6ff4dc
fld dword [0x89fe2c]
fld st(0)
fmul dword [esp + 0x90]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x50], ecx
fadd dword [esp + 0x9c]
mov dword [esp + 0x54], edx
mov dword [esp + 0x58], eax
fstp dword [esp + 0x14]
fld dword [esp + 0xa0]
fmul st(1)
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x50]
fadd dword [esp + 0xac]
fstp dword [esp + 0x18]
mov edx, dword [esp + 0x18]
fmul dword [esp + 0xb0]
mov dword [esp + 0x60], edx
fadd dword [esp + 0xbc]
fst dword [esp + 0x1c]
fstp dword [esp + 0x64]
call fcn.00463a10
lea ecx, [esp + 0xc0]
call fcn.004639e0
push ebx
lea eax, [esp + 0xc4]
push 4
lea ecx, [esp + 0x58]
push eax
push ecx
lea ecx, [esp + 0x100]
call fcn.00463b40
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x134], ebx
cmp eax, ebx
mov dword [esp + 0x138], 3
mov byte [esp + 0x13c], 1
mov byte [esp + 0x13d], 1
je 0x6ff602
cmp dword [eax + 4], ebx
je 0x6ff602
cmp eax, ebx
je 0x6ff5aa
mov eax, dword [eax + 4]
jmp 0x6ff5ac
xor eax, eax
cmp dword [eax + 0x774], ebx
je 0x6ff5cd
mov eax, dword [ebp + 0xc]
cmp eax, ebx
je 0x6ff5c0
mov eax, dword [eax + 4]
jmp 0x6ff5c2
xor eax, eax
mov ecx, dword [eax + 0x774]
call fcn.006e0660
mov eax, dword [ebp + 0xc]
cmp eax, ebx
je 0x6ff5d9
mov eax, dword [eax + 4]
jmp 0x6ff5db
xor eax, eax
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x28]
test eax, eax
je 0x6ff602
mov eax, dword [ebp + 0xc]
cmp eax, ebx
je 0x6ff5f2
mov eax, dword [eax + 4]
jmp 0x6ff5f4
xor eax, eax
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x28]
mov ecx, eax
call fcn.0067c9a0
lea eax, [esp + 0xf0]
push ebx
push eax
call fcn.00670ae0
mov ecx, eax
call fcn.00631460
mov eax, dword [ebp + 0xc]
cmp eax, ebx
je 0x6ff684
cmp dword [eax + 4], ebx
je 0x6ff684
cmp eax, ebx
je 0x6ff62c
mov eax, dword [eax + 4]
jmp 0x6ff62e
xor eax, eax
cmp dword [eax + 0x774], ebx
je 0x6ff64f
mov eax, dword [ebp + 0xc]
cmp eax, ebx
je 0x6ff642
mov eax, dword [eax + 4]
jmp 0x6ff644
xor eax, eax
mov ecx, dword [eax + 0x774]
call fcn.006e0680
mov eax, dword [ebp + 0xc]
cmp eax, ebx
je 0x6ff65b
mov eax, dword [eax + 4]
jmp 0x6ff65d
xor eax, eax
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x28]
test eax, eax
je 0x6ff684
mov eax, dword [ebp + 0xc]
cmp eax, ebx
je 0x6ff674
mov eax, dword [eax + 4]
jmp 0x6ff676
xor eax, eax
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x28]
mov ecx, eax
call fcn.0067c9f0
mov eax, dword [esp + 0xf0]
push 0x104
fld dword [eax + 4]
fld st(0)
fmul dword [esp + 0x6c]
fstp dword [esp + 0x88]
fld st(0)
fmul dword [esp + 0x70]
fstp dword [esp + 0x8c]
fmul dword [esp + 0x74]
fld dword [esp + 0x88]
fadd dword [esp + 0x54]
fstp dword [esp + 0x18]
fld dword [esp + 0x8c]
fadd dword [esp + 0x58]
fstp dword [esp + 0x1c]
fadd dword [esp + 0x5c]
fstp dword [esp + 0x20]
call fcn.00672b70
add esp, 4
cmp eax, ebx
je 0x6ff709
push 0x3f4ccccd
push ebx
push ebx
push 0x3f4ccccd
lea ecx, [esp + 0x24]
push 0x3dcccccd
lea edx, [esp + 0x38]
push ecx
push edx
mov ecx, eax
call fcn.00787da0
mov esi, eax
jmp 0x6ff70b
xor esi, esi
mov eax, dword [edi]
push esi
mov ecx, edi
call dword [eax + 0x4c]
mov eax, dword [esi + 4]
dec eax
mov dword [esi + 4], eax
jne 0x6ff722
mov edx, dword [esi]
mov ecx, esi
call dword [edx]
mov eax, dword [edi]
push 0x3f19999a
mov ecx, edi
call dword [eax + 0xd4]
mov ecx, dword [edi + 0x3c]
cmp ecx, ebx
je 0x6ff749
mov edx, dword [ecx]
push ebx
call dword [edx + 0xf0]
push eax
mov ecx, edi
call fcn.005fe850
push edi
call fcn.00670ae0
mov ecx, eax
call fcn.00622070
mov eax, dword [edi + 4]
dec eax
mov dword [edi + 4], eax
jne 0x6ff765
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov eax, dword [ebp]
pop esi
pop ebx
mov ecx, dword [eax + 0x78]
mov edx, dword [eax + 0x7c]
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x34], ecx
test eax, eax
mov dword [esp + 0x28], edx
je 0x6ff784
mov eax, dword [eax + 4]
jmp 0x6ff786
xor eax, eax
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x28]
push ecx
mov ecx, dword [esp + 0x30]
push edx
push ecx
mov ecx, eax
call fcn.0071ff50
mov eax, dword [ebp + 0x4c]
pop edi
inc eax
mov dword [ebp + 0x4c], eax
pop ebp
add esp, 0x13c
ret 8