Function at 0x4284d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x28c
mov dword [esp + 0x14], eax
mov dword [esp + 0x78], 0
mov eax, dword [eax]
mov dword [esp + 0x54], eax
cmp eax, 0x40
jg 0x4295ce
lea edi, [esp + 0x7c]
mov ebp, edi
mov eax, dword [esp + 0x54]
lea esi, [eax*4]
lea eax, [ebp + esi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 4]
lea ecx, [ecx + ecx*4]
mov ebx, dword [esp + 0x2a4]
add ebx, eax
fld1
mov dword [esp + 0x18], ebx
fiadd dword [esp + 0x18]
fstp dword [edx + ecx*4 + 4]
test eax, eax
jle 0x4293d0
xor ebx, ebx
mov dword [esp + 0x58], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
xor eax, eax
mov dword [esp + 0x18], ebp
mov dword [esp + 0x2c], ebx
mov ebp, edx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x68], edi
mov ebx, esi
mov esi, eax
lea esi, [esi]
mov eax, dword [esp + 0x2a4]
add eax, esi
mov dword [esp + 0x14], eax
fild dword [esp + 0x14]
fld1
fadd st(1)
fstp dword [esp + 0x24]
cmp ebx, 4
jae 0x429360
test ebx, ebx
je 0x42859d
mov eax, dword [esp + 0x18]
mov byte [eax], 0
lea eax, [ebx + 4]
cmp ebx, 0xfffffffc
jb 0x429310
test eax, eax
je 0x4285b4
mov eax, dword [esp + 0x48]
mov byte [eax], 0
mov ebx, dword [esp + 0x2c]
test ebx, ebx
je 0x429331
lea ecx, [esp + 0x78]
mov edi, dword [esp + 0x4c]
jmp 0x4285e5
mov eax, dword [ebx]
mov dword [ecx], eax
mov dword [ebx + 0x10], 0
mov dword [ebx], edi
mov edi, ebx
mov ebx, dword [ecx]
test ebx, ebx
je 0x4285f7
fcom dword [ebx + 0x18]
fnstsw ax
test ah, 5
je 0x4285d0
mov ecx, ebx
mov ebx, dword [ecx]
test ebx, ebx
jne 0x4285e5
mov ebx, edi
mov dword [esp + 0x4c], edi
fld dword [ebp + 4]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x2c], ecx
fld dword [esp + 0x24]
fcom st(1)
fnstsw ax
test ah, 5
jne 0x4287c6
mov edi, dword [esp + 0x58]
mov dword [esp + 0x14], edx
mov edx, ecx
jmp 0x428665
fstp st(0)
fstp st(1)
jmp 0x428650
fstp st(0)
fstp st(1)
lea esi, [esi]
lea esi, [esi]
nop
add ebp, 0x14
fld dword [ebp + 4]
fxch st(1)
fcom st(1)
fnstsw ax
test ah, 5
jne 0x4287b0
fld dword [ebp + 0xc]
fcom st(2)
fnstsw ax
test ah, 0x40
jne 0x428630
test ebx, ebx
je 0x428720
fld dword [ebp]
fld dword [ebp + 8]
fsub st(1)
fld st(2)
fsub st(5)
fdivp st(1)
mov ecx, ebx
mov ebx, dword [ebx]
fst dword [ecx + 8]
ftst
fnstsw ax
test ah, 0x40
jne 0x4287a0
fld1
fdiv st(1)
fstp dword [ecx + 0xc]
fld st(5)
fsub st(5)
fmulp st(1)
faddp st(1)
fisub dword [esp + 0x2a0]
fstp dword [ecx + 4]
fld1
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x4286bf
fchs
fstp dword [ecx + 0x10]
fxch st(2)
fstp dword [ecx + 0x14]
fxch st(1)
fst dword [ecx + 0x18]
test esi, esi
jne 0x428700
mov eax, dword [esp + 0x2a4]
test eax, eax
je 0x428710
fxch st(2)
fcom st(2)
fnstsw ax
fstp st(2)
test ah, 0x45
jne 0x428712
fxch st(1)
fst dword [ecx + 0x18]
fxch st(1)
jmp 0x428712
fstp st(0)
jmp 0x428712
fstp st(0)
mov dword [ecx], edx
mov dword [esp + 0x78], ecx
mov edx, ecx
jmp 0x428650
test edi, edi
jne 0x4292e0
fxch st(2)
mov dword [esp + 0x30], edx
fstp dword [esp + 0x2c]
fstp dword [esp + 0x28]
fxch st(1)
fstp dword [esp + 0x20]
fstp dword [esp + 0x1c]
mov dword [esp], 0xdac4
call sub.msvcrt.dll_malloc
test eax, eax
fld dword [esp + 0x20]
fld dword [esp + 0x28]
mov edx, dword [esp + 0x30]
je 0x428650
mov edi, dword [esp + 0x50]
mov dword [eax], edi
lea ecx, [eax + 0xdaa8]
fld dword [ebp]
fld dword [ebp + 8]
fsub st(1)
fld dword [esp + 0x1c]
fld st(0)
fld dword [esp + 0x2c]
fsub st(1), st(0)
fxch st(3)
fdivrp st(1)
fxch st(1)
fxch st(2)
fxch st(4)
fxch st(3)
fxch st(1)
mov dword [esp + 0x50], eax
mov edi, 0x7cf
jmp 0x42868b
fldz
jmp 0x42869f
fstp st(0)
fstp st(0)
mov dword [esp + 0x58], edi
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x14]
jmp 0x4287d0
fstp st(0)
fstp st(0)
lea esi, [esi]
mov edi, dword [esp + 0x2c]
test edi, edi
je 0x429380
mov eax, dword [esp + 0x48]
add eax, 4
mov dword [esp + 0x5c], eax
mov edi, dword [esp + 0x2c]
fcom dword [esp + 0x24]
fnstsw ax
mov word [esp + 0x46], ax
mov dword [esp + 0x60], esi
mov dword [esp + 0x64], edx
mov esi, ebp
mov ebp, dword [esp + 0x54]
jmp 0x42890a
fstp st(0)
mov dword [esp + 0x14], ebp
fild dword [esp + 0x14]
fcomp st(1)
fnstsw ax
test ah, 0x45
jne 0x4288c0
ftst
fnstsw ax
test ah, 5
jne 0x4293f0
mov ax, word [esp + 0x46]
test ah, 0x40
jne 0x4288d0
fnstcw word [esp + 0x6e]
mov ax, word [esp + 0x6e]
or ah, 0xc
mov word [esp + 0x6c], ax
fldcw word [esp + 0x6c]
fist dword [esp + 0x14]
fldcw word [esp + 0x6e]
mov ebx, dword [esp + 0x14]
fld dword [esp + 0x24]
fstp dword [esp + 0xc]
fst dword [esp + 8]
fxch st(1)
fst dword [esp + 4]
fstp dword [esp + 0x1c]
fst dword [esp]
fstp dword [esp + 0x14]
mov ecx, edi
mov edx, ebx
mov eax, dword [esp + 0x18]
call fcn.0040eea0
lea edx, [ebx + 1]
fld dword [esp + 0x24]
fstp dword [esp + 0xc]
fld dword [esp + 0x14]
fst dword [esp + 8]
fld dword [esp + 0x1c]
fst dword [esp + 4]
fstp dword [esp + 0x14]
fstp dword [esp]
mov ecx, edi
mov eax, dword [esp + 0x48]
call fcn.0040eea0
fld dword [esp + 0x14]
jmp 0x428900
fstp st(0)
jmp 0x428900
fstp st(0)
jmp 0x428900
fstp st(1)
fstp st(1)
jmp 0x428900
fstp st(1)
fstp st(1)
lea esi, [esi]
lea esi, [esi]
nop
mov edi, dword [edi]
test edi, edi
je 0x428a60
fld dword [edi + 4]
fld dword [edi + 8]
ftst
fnstsw ax
test ah, 0x40
jne 0x428810
fld st(0)
fadd st(2)
fstp dword [esp + 0x14]
fld dword [edi + 0xc]
fstp dword [esp + 0x1c]
fld dword [edi + 0x14]
fxch st(3)
fcom st(3)
fnstsw ax
test ah, 1
je 0x4292d0
fld st(3)
fsub st(1)
fmul st(2)
fadd st(3)
fxch st(1)
fxch st(2)
fxch st(3)
fxch st(4)
fxch st(1)
fld dword [edi + 0x18]
fld dword [esp + 0x24]
fcomp st(1)
fnstsw ax
test ah, 0x45
jne 0x4292b0
fld st(0)
fsub st(4)
fmul st(5)
fadd st(6)
fxch st(2)
ftst
fnstsw ax
test ah, 5
jne 0x428b40
fxch st(2)
ftst
fnstsw ax
test ah, 5
jne 0x428b50
mov dword [esp + 0x20], ebp
fild dword [esp + 0x20]
fxch st(3)
fcom st(3)
fnstsw ax
test ah, 1
je 0x428b60
fxch st(1)
fcom st(3)
fnstsw ax
fstp st(3)
test ah, 1
je 0x428b70
fstp st(5)
fxch st(1)
fxch st(2)
fxch st(3)
fxch st(4)
fnstcw word [esp + 0x6e]
mov ax, word [esp + 0x6e]
or ah, 0xc
mov word [esp + 0x6c], ax
fldcw word [esp + 0x6c]
fist dword [esp + 0x20]
fldcw word [esp + 0x6e]
fxch st(2)
mov edx, dword [esp + 0x20]
fldcw word [esp + 0x6c]
fist dword [esp + 0x20]
fldcw word [esp + 0x6e]
mov ecx, dword [esp + 0x20]
fld dword [edi + 0x10]
fst dword [esp + 0x20]
cmp edx, ecx
jne 0x429430
fstp st(6)
fxch st(1)
fxch st(2)
fxch st(3)
fxch st(4)
fxch st(5)
fxch st(4)
lea eax, [edx*4]
mov ecx, dword [esp + 0x18]
add ecx, eax
fsubp st(2)
fxch st(1)
fmulp st(3)
fld1
mov dword [esp + 0x14], edx
fiadd dword [esp + 0x14]
fsubr st(1), st(0)
fsubrp st(2)
faddp st(1)
fmul dword [0x46a900]
fmul st(1)
fadd dword [ecx]
fstp dword [ecx]
mov edx, dword [esp + 0x5c]
add eax, edx
fadd dword [eax]
fstp dword [eax]
mov edi, dword [edi]
test edi, edi
jne 0x42890a
fstp st(0)
jmp 0x428a62
fstp st(0)
mov edx, dword [esp + 0x64]
mov ebp, esi
mov esi, dword [esp + 0x60]
mov eax, dword [esp + 0x54]
test eax, eax
jle 0x428af9
fldz
xor eax, eax
fnstcw word [esp + 0x6e]
mov cx, word [esp + 0x6e]
or ch, 0xc
mov word [esp + 0x6c], cx
mov edi, dword [esp + 0x48]
mov dword [esp + 0x1c], ebp
lea esi, [esi]
lea esi, [esi]
fadd dword [edi + eax*4]
mov ebx, dword [esp + 0x18]
fld dword [ebx + eax*4]
fadd st(1)
fabs
fmul dword [0x46a918]
mov ecx, dword [edx + 8]
imul ecx, esi
mov ebp, dword [edx + 0xc]
add ebp, eax
add ecx, ebp
fadd dword [0x46a900]
fldcw word [esp + 0x6c]
fistp dword [esp + 0x14]
fldcw word [esp + 0x6e]
mov ebx, dword [esp + 0x14]
cmp ebx, 0xff
jle 0x428ae4
mov ebx, 0xff
mov byte [ecx], bl
inc eax
cmp eax, dword [edx]
jl 0x428aa0
fstp st(0)
mov ebp, dword [esp + 0x1c]
mov ebx, dword [esp + 0x2c]
test ebx, ebx
je 0x428b0f
mov eax, dword [esp + 0x2c]
lea esi, [esi]
fld dword [eax + 4]
fadd dword [eax + 8]
fstp dword [eax + 4]
mov eax, dword [eax]
test eax, eax
jne 0x428b00
inc esi
cmp esi, dword [edx + 4]
jge 0x4293a6
mov eax, dword [edx]
mov dword [esp + 0x54], eax
mov edi, dword [esp + 0x78]
mov dword [esp + 0x2c], edi
lea ebx, [eax*4]
jmp 0x428570
fstp st(0)
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x428b80
fstp st(0)
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x428b80
fstp st(0)
fstp st(0)
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x428b80
fstp st(0)
fstp st(0)
fstp st(0)
fstp st(0)
lea esi, [esi]
nop
test ebp, ebp
jle 0x4288e0
xor ebx, ebx
mov dword [esp + 0x1c], ebx
fild dword [esp + 0x1c]
fxch st(2)
fstp dword [esp + 0x28]
mov dword [esp + 0x20], edi
jmp 0x428d64
fcomp st(3)
fnstsw ax
test ah, 0x45
jne 0x428fc0
fxch st(3)
fcom st(1)
fnstsw ax
test ah, 0x40
jne 0x428c20
fxch st(2)
fstp dword [esp + 0x40]
fxch st(3)
fstp dword [esp + 0x3c]
fxch st(2)
fst dword [esp + 0xc]
fstp dword [esp + 0x38]
fst dword [esp + 8]
fstp dword [esp + 0x34]
fst dword [esp + 4]
fstp dword [esp + 0x30]
fst dword [esp]
fstp dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, edi
mov eax, dword [esp + 0x18]
call fcn.0040eea0
fld dword [esp + 0x40]
fld dword [esp + 0x3c]
fld dword [esp + 0x38]
fld dword [esp + 0x34]
fld dword [esp + 0x30]
fld dword [esp + 0x1c]
fxch st(3)
jmp 0x428c2a
fxch st(1)
fxch st(2)
fxch st(5)
fxch st(3)
fxch st(2)
fcom st(4)
fnstsw ax
test ah, 0x40
jne 0x428c80
fxch st(3)
fstp dword [esp + 0x38]
fstp dword [esp + 0x34]
fxch st(2)
fst dword [esp + 0xc]
fstp dword [esp + 0x30]
fxch st(2)
fst dword [esp + 8]
fstp dword [esp + 0x1c]
fxch st(1)
fstp dword [esp + 4]
fstp dword [esp]
mov ecx, dword [esp + 0x20]
mov edx, edi
mov eax, dword [esp + 0x18]
call fcn.0040eea0
fld dword [esp + 0x38]
fld dword [esp + 0x34]
fld dword [esp + 0x30]
fld dword [esp + 0x1c]
jmp 0x428c8a
fstp st(0)
fstp st(1)
fxch st(2)
fxch st(1)
fxch st(3)
fld dword [esp + 0x24]
fcom st(2)
fnstsw ax
test ah, 0x40
jne 0x428ce0
fxch st(4)
fstp dword [esp + 0x34]
fxch st(2)
fstp dword [esp + 0x30]
fxch st(2)
fstp dword [esp + 0xc]
fld dword [esp + 0x14]
fstp dword [esp + 8]
fxch st(1)
fstp dword [esp + 4]
fst dword [esp]
fstp dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, edi
mov eax, dword [esp + 0x18]
call fcn.0040eea0
fld dword [esp + 0x1c]
fld dword [esp + 0x30]
fld dword [esp + 0x34]
jmp 0x428d50
fstp st(0)
fstp st(1)
fxch st(2)
jmp 0x428d50
fstp st(0)
fstp st(2)
fstp st(2)
jmp 0x428d50
fstp st(0)
fstp st(3)
fxch st(1)
fxch st(2)
jmp 0x428d50
fstp st(0)
fstp st(2)
fstp st(0)
fxch st(2)
jmp 0x428d50
fxch st(2)
jmp 0x428d50
fstp st(0)
fstp st(3)
fxch st(1)
fxch st(2)
jmp 0x428d50
fstp st(0)
fstp st(2)
fstp st(2)
lea esi, [esi]
lea esi, [esi]
cmp ebx, ebp
je 0x428eb0
fxch st(2)
fxch st(1)
jmp 0x428d64
fxch st(1)
fxch st(2)
mov edi, ebx
inc ebx
mov dword [esp + 0x1c], ebx
fild dword [esp + 0x1c]
fld st(2)
fsub st(4)
fld dword [esp + 0x28]
fdiv st(1), st(0)
fxch st(1)
fadd st(3)
fld st(2)
fsub st(6)
fdivrp st(2)
fxch st(1)
fadd st(3)
fxch st(4)
fcom st(5)
fnstsw ax
mov edx, eax
fld dword [esp + 0x14]
test ah, 0x45
je 0x428bb0
fcomp st(1)
fnstsw ax
mov ecx, eax
test ah, 1
je 0x428ef0
fxch st(2)
fcom st(5)
fnstsw ax
test ah, 1
jne 0x428ff0
test dh, 0x45
je 0x428ec0
jmp 0x428dd2
fxch st(2)
and dh, 1
je 0x428f00
fstp st(4)
fxch st(1)
fxch st(2)
fcom st(1)
fnstsw ax
test ah, 0x40
jne 0x428e40
fxch st(3)
fstp dword [esp + 0x3c]
fst dword [esp + 0xc]
fstp dword [esp + 0x38]
fst dword [esp + 8]
fstp dword [esp + 0x34]
fst dword [esp + 4]
fstp dword [esp + 0x30]
fst dword [esp]
fstp dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, edi
mov eax, dword [esp + 0x18]
call fcn.0040eea0
fld dword [esp + 0x3c]
fld dword [esp + 0x38]
fld dword [esp + 0x34]
fld dword [esp + 0x30]
fld dword [esp + 0x1c]
jmp 0x428e46
fxch st(1)
fxch st(3)
fxch st(4)
fld dword [esp + 0x24]
fcom st(4)
fnstsw ax
test ah, 0x40
jne 0x428cf0
fxch st(5)
fstp dword [esp + 0x34]
fstp dword [esp + 0x30]
fstp dword [esp + 0x1c]
fxch st(2)
fstp dword [esp + 0xc]
fld dword [esp + 0x14]
fstp dword [esp + 8]
fstp dword [esp + 4]
fstp dword [esp]
mov ecx, dword [esp + 0x20]
mov edx, edi
mov eax, dword [esp + 0x18]
call fcn.0040eea0
fld dword [esp + 0x1c]
fld dword [esp + 0x30]
fld dword [esp + 0x34]
cmp ebx, ebp
jne 0x428d60
fstp st(0)
fstp st(0)
jmp 0x428eb4
fstp st(0)
fstp st(1)
mov edi, dword [esp + 0x20]
jmp 0x428900
fxch st(2)
jmp 0x428ed2
fxch st(2)
test ch, 0x45
je 0x429210
and ch, 1
jne 0x428dd0
fstp st(0)
fstp st(0)
jmp 0x428f04
fstp st(0)
fstp st(0)
jmp 0x428f04
fstp st(2)
fstp st(0)
fcom st(3)
fnstsw ax
mov edx, eax
test ah, 0x45
je 0x429180
fld dword [esp + 0x14]
fcomp st(1)
fnstsw ax
test ah, 1
je 0x429110
and dh, 1
je 0x429120
fxch st(1)
fcom st(2)
fnstsw ax
test ah, 0x40
jne 0x428f80
fxch st(2)
fst dword [esp + 0xc]
fstp dword [esp + 0x38]
fst dword [esp + 8]
fstp dword [esp + 0x34]
fst dword [esp + 4]
fstp dword [esp + 0x30]
fst dword [esp]
fstp dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, edi
mov eax, dword [esp + 0x18]
call fcn.0040eea0
fld dword [esp + 0x38]
fld dword [esp + 0x34]
fld dword [esp + 0x30]
fld dword [esp + 0x1c]
jmp 0x428f86
fxch st(1)
fxch st(2)
fxch st(3)
fld dword [esp + 0x24]
fcom st(4)
fnstsw ax
test ah, 0x40
jne 0x428d00
fxch st(1)
fstp dword [esp + 0x34]
fxch st(1)
fstp dword [esp + 0x30]
fstp dword [esp + 0xc]
fld dword [esp + 0x14]
fstp dword [esp + 8]
fxch st(1)
jmp 0x428cb3
fld dword [esp + 0x14]
fcomp st(1)
fnstsw ax
mov ecx, eax
test ah, 1
je 0x428ed2
fxch st(2)
fcom st(5)
fnstsw ax
test ah, 1
je 0x428ed0
fxch st(3)
jmp 0x428ff2
fxch st(3)
fcom st(4)
fnstsw ax
test ah, 0x40
jne 0x429060
fxch st(1)
fstp dword [esp + 0x40]
fxch st(1)
fstp dword [esp + 0x3c]
fxch st(2)
fst dword [esp + 0xc]
fstp dword [esp + 0x38]
fst dword [esp + 8]
fstp dword [esp + 0x34]
fst dword [esp + 4]
fstp dword [esp + 0x30]
fst dword [esp]
fstp dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, edi
mov eax, dword [esp + 0x18]
call fcn.0040eea0
fld dword [esp + 0x40]
fld dword [esp + 0x3c]
fld dword [esp + 0x38]
fld dword [esp + 0x34]
fld dword [esp + 0x30]
fld dword [esp + 0x1c]
fxch st(5)
jmp 0x42906a
fxch st(1)
fxch st(2)
fxch st(4)
fxch st(3)
fxch st(2)
fcom st(3)
fnstsw ax
test ah, 0x40
jne 0x4290d0
fxch st(5)
fstp dword [esp + 0x3c]
fstp dword [esp + 0x38]
fxch st(3)
fst dword [esp + 0xc]
fstp dword [esp + 0x34]
fxch st(1)
fst dword [esp + 8]
fstp dword [esp + 0x30]
fstp dword [esp + 4]
fst dword [esp]
fstp dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, edi
mov eax, dword [esp + 0x18]
call fcn.0040eea0
fld dword [esp + 0x3c]
fld dword [esp + 0x38]
fld dword [esp + 0x34]
fld dword [esp + 0x30]
fld dword [esp + 0x1c]
jmp 0x4290d6
fstp st(3)
fxch st(3)
fxch st(1)
fld dword [esp + 0x24]
fcom st(3)
fnstsw ax
test ah, 0x40
jne 0x428d10
fxch st(1)
fstp dword [esp + 0x34]
fxch st(4)
fstp dword [esp + 0x30]
fxch st(2)
fstp dword [esp + 0x1c]
fxch st(2)
fstp dword [esp + 0xc]
fld dword [esp + 0x14]
fstp dword [esp + 8]
fxch st(1)
jmp 0x428e73
fstp st(2)
fxch st(1)
jmp 0x429124
fstp st(2)
fxch st(1)
mov ax, word [esp + 0x46]
test ah, 0x40
jne 0x428d20
fstp dword [esp + 0x34]
fld dword [esp + 0x24]
fstp dword [esp + 0xc]
fld dword [esp + 0x14]
fstp dword [esp + 8]
fst dword [esp + 4]
fstp dword [esp + 0x30]
fst dword [esp]
fstp dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, edi
mov eax, dword [esp + 0x18]
call fcn.0040eea0
fld dword [esp + 0x34]
fld dword [esp + 0x30]
fld dword [esp + 0x1c]
jmp 0x428d50
fld dword [esp + 0x14]
fcomp st(1)
fnstsw ax
test ah, 0x45
jne 0x428f1b
fxch st(1)
fcom st(2)
fnstsw ax
test ah, 0x40
jne 0x4291e0
fxch st(2)
fst dword [esp + 0xc]
fstp dword [esp + 0x38]
fst dword [esp + 8]
fstp dword [esp + 0x34]
fst dword [esp + 4]
fstp dword [esp + 0x30]
fst dword [esp]
fstp dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, edi
mov eax, dword [esp + 0x18]
call fcn.0040eea0
fld dword [esp + 0x38]
fld dword [esp + 0x34]
fld dword [esp + 0x30]
fld dword [esp + 0x1c]
jmp 0x4291e6
fxch st(1)
fxch st(2)
fxch st(3)
fld dword [esp + 0x24]
fcom st(4)
fnstsw ax
test ah, 0x40
jne 0x428d30
fxch st(1)
fstp dword [esp + 0x34]
fxch st(1)
fstp dword [esp + 0x30]
fstp dword [esp + 0xc]
jmp 0x428fa7
fstp st(4)
fxch st(1)
fxch st(2)
fcom st(1)
fnstsw ax
test ah, 0x40
jne 0x429270
fxch st(2)
fstp dword [esp + 0x3c]
fst dword [esp + 0xc]
fstp dword [esp + 0x38]
fxch st(1)
fst dword [esp + 8]
fstp dword [esp + 0x34]
fst dword [esp + 4]
fstp dword [esp + 0x30]
fst dword [esp]
fstp dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, edi
mov eax, dword [esp + 0x18]
call fcn.0040eea0
fld dword [esp + 0x3c]
fld dword [esp + 0x38]
fld dword [esp + 0x34]
fld dword [esp + 0x30]
fld dword [esp + 0x1c]
jmp 0x429278
fxch st(1)
fxch st(3)
fxch st(2)
fxch st(4)
fld dword [esp + 0x24]
fcom st(4)
fnstsw ax
test ah, 0x40
jne 0x428d40
fxch st(5)
fstp dword [esp + 0x34]
fstp dword [esp + 0x30]
fstp dword [esp + 0x1c]
fxch st(2)
fstp dword [esp + 0xc]
fld dword [esp + 0x14]
fstp dword [esp + 8]
jmp 0x428e73
fstp st(0)
fld dword [esp + 0x24]
fld dword [esp + 0x14]
fxch st(2)
jmp 0x42896e
fstp st(3)
fxch st(1)
fxch st(2)
fld st(0)
fld st(3)
jmp 0x428950
dec edi
lea eax, [edi + edi]
add eax, edi
lea eax, [eax + eax*8]
lea ecx, [edi + eax + 4]
mov eax, dword [esp + 0x50]
add ecx, eax
je 0x428640
fld dword [ebp]
fld dword [ebp + 8]
fsub st(1)
fld st(2)
fsub st(5)
fdivp st(1)
jmp 0x42868b
mov edi, dword [esp + 0x48]
mov dword [edi + eax - 4], 0
mov ecx, ebx
shr ecx, 2
xor eax, eax
rep stosd dword es:[edi], eax
mov ebx, dword [esp + 0x2c]
test ebx, ebx
jne 0x4285c0
fld dword [ebp + 4]
fld dword [esp + 0x24]
fcomp st(1)
fnstsw ax
test ah, 5
jne 0x429384
fld dword [esp + 0x24]
mov edi, dword [esp + 0x58]
mov ebx, dword [esp + 0x4c]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x2c]
jmp 0x428665
mov edi, dword [esp + 0x18]
mov dword [edi + ebx - 4], 0
lea ecx, [ebx - 1]
shr ecx, 2
xor eax, eax
rep stosd dword es:[edi], eax
jmp 0x42859d
fstp st(0)
jmp 0x429390
fstp st(0)
fstp st(0)
lea esi, [esi]
nop
mov ecx, dword [esp + 0x54]
test ecx, ecx
jg 0x428a78
inc esi
cmp esi, dword [edx + 4]
jl 0x428b19
mov ebp, dword [esp + 0x18]
mov edi, dword [esp + 0x68]
mov ebx, dword [esp + 0x50]
test ebx, ebx
je 0x4293d0
lea esi, [esi]
lea esi, [esi]
mov eax, ebx
mov ebx, dword [ebx]
mov dword [esp], eax
call sub.msvcrt.dll_free
test ebx, ebx
jne 0x4293c0
cmp ebp, edi
je 0x4293dc
mov dword [esp], ebp
call sub.msvcrt.dll_free
add esp, 0x28c
pop ebx
pop esi
pop edi
pop ebp
ret
fld dword [esp + 0x24]
fxch st(2)
fcom st(2)
fnstsw ax
test ah, 0x40
jne 0x4288f0
fxch st(2)
fstp dword [esp + 0xc]
fst dword [esp + 8]
fxch st(1)
fst dword [esp + 4]
fstp dword [esp + 0x14]
fstp dword [esp]
mov ecx, edi
xor edx, edx
mov eax, dword [esp + 0x48]
call fcn.0040eea0
fld dword [esp + 0x14]
jmp 0x428900
fstp st(0)
fxch st(2)
fcom st(2)
fnstsw ax
test ah, 0x45
jne 0x429475
fstp st(5)
fxch st(1)
fxch st(2)
fxch st(3)
fxch st(4)
fxch st(3)
fsub st(4)
fxch st(1)
fsub st(4)
fld dword [esp + 0x24]
fsubr st(1), st(0)
fld dword [esp + 0x1c]
fchs
fstp dword [esp + 0x1c]
mov eax, edx
mov edx, ecx
mov ecx, eax
fsubrp st(2)
fld dword [esp + 0x14]
fxch st(5)
fxch st(4)
fxch st(2)
fxch st(1)
fxch st(3)
lea ebx, [edx + 1]
mov dword [esp + 0x14], ebx
fild dword [esp + 0x14]
fst dword [esp + 0x28]
fsub st(6)
fmul dword [esp + 0x1c]
fadd st(5)
mov dword [esp + 0x14], ecx
fild dword [esp + 0x14]
fst dword [esp + 0x30]
fsubrp st(7)
fxch st(6)
fmul dword [esp + 0x1c]
fadd st(5)
fstp dword [esp + 0x14]
fld dword [esp + 0x24]
fcom st(6)
fnstsw ax
test ah, 1
je 0x4294d0
fstp st(6)
fxch st(1)
fxch st(2)
fxch st(3)
fxch st(4)
fxch st(5)
fxch st(5)
fxch st(4)
fxch st(3)
fxch st(2)
fxch st(1)
jmp 0x4294d2
fstp st(0)
fld st(5)
fsub st(4)
fmul dword [esp + 0x20]
shl edx, 2
mov eax, dword [esp + 0x18]
add eax, edx
fld dword [esp + 0x28]
fsubrp st(2)
fmul st(1), st(0)
fxch st(1)
fmul dword [0x46a900]
fadd dword [eax]
fstp dword [eax]
fld dword [esp + 0x24]
fcom dword [esp + 0x14]
fnstsw ax
test ah, 1
je 0x429530
fsubr st(6), st(0)
fxch st(6)
mov eax, ecx
sub eax, ebx
mov dword [esp + 0x14], eax
fidiv dword [esp + 0x14]
fstp dword [esp + 0x1c]
fxch st(5)
fstp dword [esp + 0x14]
fxch st(1)
fxch st(2)
fxch st(3)
fxch st(4)
jmp 0x42953c
fstp st(0)
fstp st(5)
fxch st(1)
fxch st(2)
fxch st(3)
fxch st(4)
fld dword [esp + 0x1c]
fmul dword [esp + 0x20]
cmp ebx, ecx
jge 0x4295f8
fld dword [0x46a900]
fmul st(1)
mov ebx, dword [esp + 0x18]
lea eax, [ebx + edx + 4]
lea edx, [ecx*4]
lea ecx, [ebx + edx]
jmp 0x429572
fxch st(2)
fld st(0)
fadd st(3)
fadd dword [eax]
fstp dword [eax]
fxch st(2)
fadd st(1)
add eax, 4
cmp ecx, eax
jne 0x429570
fstp st(2)
fstp st(0)
fld dword [esp + 0x30]
fld1
fadd st(1)
mov eax, dword [esp + 0x18]
add eax, edx
fsubr st(4), st(0)
fsubrp st(1)
faddp st(3)
fxch st(2)
fmul dword [0x46a900]
fld dword [esp + 0x14]
fsubr st(2)
fmulp st(1)
fld dword [esp + 0x20]
fmul st(1), st(0)
fxch st(3)
faddp st(1)
fadd dword [eax]
fstp dword [eax]
mov eax, dword [esp + 0x5c]
add edx, eax
fsubrp st(2)
fmulp st(1)
fadd dword [edx]
fstp dword [edx]
jmp 0x428900
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], edx
lea eax, [eax*8 + 4]
mov dword [esp], eax
call sub.msvcrt.dll_malloc
mov ebp, eax
lea edi, [esp + 0x7c]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
jmp 0x4284fb
fstp st(0)
lea edx, [ecx*4]
jmp 0x429589