Function at 0x407b90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x42e9a8
push eax
mov dword fs:[0], esp
sub esp, 0x60
push ebx
push ebp
mov ebp, dword [esp + 0x78]
mov eax, dword [ebp + 0x1c]
test eax, eax
push esi
push edi
je 0x408550
mov ecx, eax
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x407bc0
sub ecx, esi
mov dword [esp + 0x80], ecx
je 0x408550
mov ebx, dword [0x42f070]
push 0
push 0
push 0xffffffffffffffff
push eax
push 0
push 0
call ebx
mov esi, eax
lea eax, [esi + esi]
push eax
call fcn.004251ca
mov ecx, dword [ebp + 0x1c]
add esp, 4
push esi
mov edi, eax
push edi
push 0xffffffffffffffff
push ecx
xor esi, esi
push esi
push esi
mov dword [esp + 0x98], edi
call ebx
lea edx, [esp + 0x1c]
push edx
push esi
push esi
mov dword [esp + 0x28], esi
call fcn.0042ce5d
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x1c]
push 3
push eax
mov dword [esp + 0x80], esi
call fcn.0042ce6d
cmp eax, esi
je 0x407c3d
mov dword [esp + 0x20], eax
mov edx, dword [esp + 0x90]
mov esi, dword [esp + 0x84]
lea ecx, [esp + 0x60]
push ecx
push 0xffffffffffffffff
push edi
lea ecx, [esp + 0x28]
lea eax, [esp + 0x20]
mov dword [esp + 0x78], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
call fcn.00403fa0
fld dword [esp + 0x68]
call fcn.0042de0c
mov ecx, dword [esp + 0x8c]
add eax, 0xa
cmp ecx, eax
jle 0x407cae
mov dword [esp + 0x8c], eax
fld dword [esp + 0x6c]
call fcn.0042de0c
mov esi, eax
mov eax, dword [esp + 0xd0]
add esi, 4
xor ebx, ebx
xor edi, edi
test eax, eax
mov dword [esp + 0x14], esi
je 0x407e2e
mov eax, dword [esp + 0xcc]
test eax, eax
mov eax, dword [ebp + 0x88]
jne 0x407d94
test eax, eax
jne 0x407d02
mov edx, dword [ebp + 0x50]
sub edx, dword [ebp + 0x40]
mov dword [esp + 0xd0], edx
fild dword [esp + 0xd0]
jmp 0x407d1b
cmp eax, 3
jne 0x407d36
mov eax, dword [ebp + 0x58]
sub eax, dword [ebp + 0x48]
mov dword [esp + 0xd0], eax
fild dword [esp + 0xd0]
fld qword [0x431878]
fsub qword [esp + 0xe8]
fmulp st(1)
call fcn.0042de0c
mov edi, eax
jmp 0x407e2e
cmp eax, 1
jne 0x407d63
mov ecx, dword [ebp + 0x54]
sub ecx, dword [ebp + 0x44]
mov dword [esp + 0xd0], ecx
fild dword [esp + 0xd0]
fld qword [0x431878]
fsub qword [esp + 0xe8]
fmulp st(1)
jmp 0x407e27
cmp eax, 2
jne 0x407e2e
mov edx, dword [ebp + 0x4c]
sub edx, dword [ebp + 0x3c]
mov dword [esp + 0xd0], edx
fild dword [esp + 0xd0]
fld qword [0x431878]
fsub qword [esp + 0xe8]
fmulp st(1)
jmp 0x407e27
test eax, eax
jne 0x407dc8
mov ecx, dword [ebp + 0x50]
mov eax, dword [ebp + 0x58]
add eax, ecx
mov dword [esp + 0xd0], eax
fild dword [esp + 0xd0]
fld qword [0x431878]
fsub qword [esp + 0xe8]
fmulp st(1)
fchs
call fcn.0042de0c
mov edi, eax
jmp 0x407e2e
cmp eax, 3
jne 0x407de6
fld qword [0x431878]
fsub qword [esp + 0xe8]
fimul dword [ebp + 0x58]
call fcn.0042de0c
mov edi, eax
jmp 0x407e2e
cmp eax, 1
jne 0x407dfd
fld qword [0x431878]
fsub qword [esp + 0xe8]
fimul dword [ebp + 0x54]
jmp 0x407e27
cmp eax, 2
jne 0x407e2e
mov ecx, dword [ebp + 0x54]
add ecx, dword [ebp + 0x4c]
mov dword [esp + 0xd0], ecx
fild dword [esp + 0xd0]
fld qword [0x431878]
fsub qword [esp + 0xe8]
fmulp st(1)
fchs
call fcn.0042de0c
mov ebx, eax
mov eax, dword [ebp + 0x88]
test eax, eax
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0
jne 0x407eaa
mov eax, dword [ebp + 0x54]
cdq
sub eax, edx
mov ecx, eax
mov eax, dword [esp + 0x8c]
cdq
sub eax, edx
mov edx, dword [ebp + 0x4c]
sar ecx, 1
sar eax, 1
sub ecx, eax
mov eax, dword [ebp + 0x40]
add ecx, edx
mov edx, dword [ebp + 0x48]
mov dword [esp + 0xd0], ecx
mov ecx, dword [ebp + 8]
fild dword [esp + 0xd0]
sub edx, ecx
add edx, eax
sub edx, esi
dec edx
fstp dword [esp + 0x50]
mov dword [esp + 0xd0], edx
fild dword [esp + 0xd0]
jmp 0x407f90
cmp eax, 3
jne 0x407ef9
mov eax, dword [ebp + 0x54]
cdq
sub eax, edx
mov ecx, eax
mov eax, dword [esp + 0x8c]
cdq
sub eax, edx
mov edx, dword [ebp + 0x40]
sar eax, 1
sar ecx, 1
sub ecx, eax
add ecx, dword [ebp + 0x4c]
mov eax, dword [ebp + 8]
mov dword [esp + 0xd0], ecx
lea ecx, [edx + eax + 1]
fild dword [esp + 0xd0]
mov dword [esp + 0xd0], ecx
fstp dword [esp + 0x50]
fild dword [esp + 0xd0]
jmp 0x407f90
cmp eax, 1
jne 0x407f3e
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0x4c]
add edx, eax
mov eax, dword [ebp + 0x58]
mov dword [esp + 0xd0], edx
fild dword [esp + 0xd0]
cdq
sub eax, edx
mov ecx, eax
fstp dword [esp + 0x50]
mov eax, esi
cdq
sub eax, edx
sar eax, 1
sar ecx, 1
sub ecx, eax
add ecx, dword [ebp + 0x50]
mov dword [esp + 0xd0], ecx
fild dword [esp + 0xd0]
jmp 0x407f90
cmp eax, 2
jne 0x407fa7
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0x44]
mov eax, dword [ebp + 0x3c]
sub edx, ecx
mov ecx, dword [esp + 0x8c]
add edx, eax
mov eax, dword [ebp + 0x58]
sub edx, ecx
dec edx
mov dword [esp + 0xd0], edx
fild dword [esp + 0xd0]
cdq
sub eax, edx
mov ecx, eax
fstp dword [esp + 0x50]
mov eax, esi
cdq
sub eax, edx
sar eax, 1
sar ecx, 1
sub ecx, eax
add ecx, dword [ebp + 0x50]
mov dword [esp + 0xd0], ecx
fild dword [esp + 0xd0]
fstp dword [esp + 0x54]
fild dword [esp + 0x8c]
fstp dword [esp + 0x58]
fild dword [esp + 0x14]
fstp dword [esp + 0x5c]
fld dword [esp + 0x50]
call fcn.0042de0c
fld dword [esp + 0x54]
mov dword [esp + 0x24], eax
call fcn.0042de0c
lea edx, [esp + 0x24]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x88]
push edx
push eax
call dword [0x42f384]
fld dword [esp + 0x58]
call fcn.0042de0c
fld dword [esp + 0x5c]
mov esi, dword [esp + 0xdc]
mov dword [esi], eax
call fcn.0042de0c
mov ecx, dword [esp + 0xe0]
mov edx, dword [esp + 0x24]
mov dword [ecx], eax
mov ecx, dword [esp + 0x94]
cmp edx, ecx
jge 0x40800d
mov edx, ecx
mov dword [esp + 0x24], edx
mov ecx, dword [esi]
mov esi, dword [esp + 0x9c]
lea ebp, [ecx + edx]
cmp ebp, esi
jle 0x408025
sub esi, ecx
mov edx, esi
mov dword [esp + 0x24], edx
mov ecx, dword [esp + 0x28]
mov esi, dword [esp + 0x98]
cmp ecx, esi
jge 0x40803a
mov ecx, esi
mov dword [esp + 0x28], ecx
mov esi, dword [esp + 0xa0]
lea ebp, [eax + ecx]
cmp ebp, esi
jle 0x408050
sub esi, eax
mov ecx, esi
mov dword [esp + 0x28], ecx
mov eax, dword [esp + 0xd4]
sub edx, ebx
mov dword [eax], edx
mov eax, dword [esp + 0xe4]
mov edx, dword [esp + 0xd8]
sub ecx, edi
test eax, eax
mov dword [edx], ecx
je 0x408536
mov edi, dword [esp + 0x84]
mov eax, dword [edi]
push 0
push eax
call fcn.0042ccbd
test eax, eax
je 0x40808d
mov dword [edi + 4], eax
mov edx, dword [esp + 0xa8]
test edx, edx
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0xec], 0
mov dword [esp + 0xe8], 0
jne 0x4080de
mov ecx, dword [esp + 0xac]
mov esi, dword [esp + 0xbc]
mov ebx, dword [esp + 0xb4]
mov eax, ecx
mov dword [esp + 0x8c], esi
jmp 0x408101
mov ecx, dword [esp + 0xc0]
mov eax, dword [esp + 0xb0]
mov ebx, dword [esp + 0xb8]
mov dword [esp + 0x8c], ecx
mov ecx, dword [esp + 0xac]
sub edx, 0
je 0x408151
dec edx
je 0x408134
dec edx
jne 0x40817f
mov edx, dword [esp + 0x60]
fld dword [esp + 0x60]
fadd dword [esp + 0x68]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x64]
mov dword [esp + 0x18], edx
fstp dword [esp + 0xe8]
mov dword [esp + 0xec], edx
jmp 0x40817f
mov edx, dword [esp + 0x60]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x64]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x60]
mov dword [esp + 0xe8], edx
jmp 0x408170
mov edx, dword [esp + 0x60]
fld dword [esp + 0x60]
fadd dword [esp + 0x68]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x64]
mov dword [esp + 0x18], edx
fstp dword [esp + 0xe8]
fld dword [esp + 0x64]
fadd dword [esp + 0x6c]
fstp dword [esp + 0xec]
movzx edx, al
or edx, 0xffffff00
shl edx, 8
movzx esi, ah
or edx, esi
shl edx, 8
shr eax, 0x10
movzx eax, al
or edx, eax
mov dword [esp + 0xac], edx
movzx edx, cl
or edx, 0xffffff00
movzx eax, ch
shl edx, 8
or edx, eax
shr ecx, 0x10
movzx ecx, cl
shl edx, 8
or edx, ecx
mov dword [esp + 0xd0], edx
lea edx, [esp + 0xe8]
push edx
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0xb4]
lea ecx, [esp + 0xd8]
lea esi, [esp + 0x4c]
call fcn.00403eb0
movzx ecx, byte [esp + 0xc4]
shl ecx, 8
movzx edx, bl
or edx, ecx
shl edx, 8
movzx eax, bh
or edx, eax
shl edx, 8
shr ebx, 0x10
movzx eax, bl
or edx, eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xac], edx
movzx edx, al
or edx, ecx
movzx ecx, ah
shl edx, 8
or edx, ecx
shr eax, 0x10
movzx eax, al
shl edx, 8
or edx, eax
lea ecx, [esp + 0xe8]
mov dword [esp + 0xb4], edx
push ecx
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0xb4]
lea ecx, [esp + 0xbc]
lea esi, [esp + 0x34]
call fcn.00403eb0
mov eax, dword [esp + 0x8c]
mov ebx, dword [esp + 0xc8]
movzx edx, al
movzx ecx, bl
shl ecx, 8
or edx, ecx
shl edx, 8
movzx esi, ah
or edx, esi
shl edx, 8
shr eax, 0x10
movzx eax, al
or edx, eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x8c], edx
movzx edx, al
or edx, ecx
movzx ecx, ah
shl edx, 8
or edx, ecx
shl edx, 8
shr eax, 0x10
movzx eax, al
or edx, eax
lea ecx, [esp + 0xe8]
mov dword [esp + 0xac], edx
push ecx
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x94]
lea ecx, [esp + 0xb4]
lea esi, [esp + 0x40]
call fcn.00403eb0
mov eax, dword [edi]
push 4
push eax
mov dword [esp + 0x58], 0x3f800000
mov dword [esp + 0x5c], 0x3f800000
call fcn.0042cd8d
test eax, eax
je 0x4082fb
mov dword [edi + 4], eax
test ebx, ebx
mov edi, dword [esp + 0x90]
jle 0x40839d
fld dword [esp + 0x50]
mov edx, dword [esp + 0x80]
fadd dword [0x43197c]
mov esi, dword [esp + 0x84]
lea ecx, [esp + 0x50]
push ecx
fstp dword [esp + 0x54]
push 0xffffffffffffffff
fld dword [esp + 0x5c]
push edx
fadd dword [0x43197c]
lea eax, [esp + 0x44]
lea ecx, [esp + 0x28]
fstp dword [esp + 0x60]
call fcn.00403f50
fld dword [esp + 0x50]
mov ecx, dword [esp + 0x80]
fsub dword [0x431978]
lea eax, [esp + 0x50]
push eax
push 0xffffffffffffffff
fstp dword [esp + 0x58]
push ecx
fld dword [esp + 0x60]
lea eax, [esp + 0x44]
fsub dword [0x431978]
lea ecx, [esp + 0x28]
fstp dword [esp + 0x60]
call fcn.00403f50
fld dword [esp + 0x50]
fsub dword [0x431978]
fstp dword [esp + 0x50]
fld dword [esp + 0x54]
fsub dword [0x431978]
fstp dword [esp + 0x54]
mov eax, dword [esp + 0xc4]
test eax, eax
jle 0x4084f5
fld dword [esp + 0x50]
mov eax, dword [esp + 0x80]
fadd dword [0x431978]
mov esi, dword [esp + 0x84]
lea edx, [esp + 0x50]
push edx
push 0xffffffffffffffff
fstp dword [esp + 0x58]
push eax
lea eax, [esp + 0x38]
lea ecx, [esp + 0x28]
call fcn.00403f50
fld dword [esp + 0x54]
fsub dword [0x431978]
mov ebx, dword [esp + 0x80]
lea ecx, [esp + 0x50]
push ecx
push 0xffffffffffffffff
fstp dword [esp + 0x5c]
push ebx
lea eax, [esp + 0x38]
lea ecx, [esp + 0x28]
call fcn.00403f50
fld dword [esp + 0x50]
fsub dword [0x431978]
lea edx, [esp + 0x50]
push edx
push 0xffffffffffffffff
push ebx
fstp dword [esp + 0x5c]
lea eax, [esp + 0x38]
lea ecx, [esp + 0x28]
call fcn.00403f50
fld dword [esp + 0x50]
fsub dword [0x431978]
lea eax, [esp + 0x50]
push eax
push 0xffffffffffffffff
push ebx
fstp dword [esp + 0x5c]
lea eax, [esp + 0x38]
lea ecx, [esp + 0x28]
call fcn.00403f50
fld dword [esp + 0x54]
fadd dword [0x431978]
lea ecx, [esp + 0x50]
push ecx
push 0xffffffffffffffff
push ebx
fstp dword [esp + 0x60]
lea eax, [esp + 0x38]
lea ecx, [esp + 0x28]
call fcn.00403f50
fld dword [esp + 0x54]
fadd dword [0x431978]
lea edx, [esp + 0x50]
push edx
push 0xffffffffffffffff
push ebx
fstp dword [esp + 0x60]
lea eax, [esp + 0x38]
lea ecx, [esp + 0x28]
call fcn.00403f50
fld dword [esp + 0x50]
fadd dword [0x431978]
lea eax, [esp + 0x50]
push eax
push 0xffffffffffffffff
push ebx
fstp dword [esp + 0x5c]
lea eax, [esp + 0x38]
lea ecx, [esp + 0x28]
call fcn.00403f50
fld dword [esp + 0x50]
fadd dword [0x431978]
lea ecx, [esp + 0x50]
push ecx
push 0xffffffffffffffff
fstp dword [esp + 0x58]
push ebx
lea eax, [esp + 0x38]
lea ecx, [esp + 0x28]
call fcn.00403f50
fld dword [esp + 0x50]
fsub dword [0x431978]
fstp dword [esp + 0x50]
fld dword [esp + 0x54]
fsub dword [0x431978]
fstp dword [esp + 0x54]
mov eax, dword [esp + 0x80]
mov esi, dword [esp + 0x84]
lea edx, [esp + 0x50]
push edx
push 0xffffffffffffffff
push eax
lea eax, [esp + 0x50]
lea ecx, [esp + 0x28]
call fcn.00403f50
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.0042cd3d
mov edx, dword [esp + 0x30]
push edx
call fcn.0042cd3d
mov eax, dword [esp + 0x48]
push eax
call fcn.0042cd3d
mov ecx, dword [esp + 0x80]
push ecx
call fcn.00425131
mov edx, dword [esp + 0x20]
add esp, 4
push edx
call fcn.0042ce8d
mov ecx, dword [esp + 0x70]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x6c
ret 0x70