Function at 0x420ab0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0xdc
call sub.msvcrt.dll_localeconv
mov eax, dword [eax]
mov dword [esp], eax
mov dword [esp + 0x34], eax
call sub.msvcrt.dll_strlen
mov ebp, dword [esp + 0xf8]
mov edx, dword [esp + 0xf0]
mov dword [esp + 0xb4], 0
mov dword [esp + 0xc4], 0
mov ebp, dword [ebp]
mov dword [esp + 0xc0], edx
fldz
fstp qword [esp + 0xc8]
mov dword [esp + 0x58], eax
mov eax, edx
mov dword [esp + 0x40], ebp
movsx edx, byte [eax]
cmp dl, 0x2d
jbe 0x420bb2
mov ebx, eax
mov dword [esp + 0x5c], 0
cmp dl, 0x30
mov dword [esp + 0x44], 0
je 0x420e20
mov ebp, dword [esp + 0xf8]
cmp edx, 0x2f
mov edi, edx
mov ebp, dword [ebp + 0x10]
mov dword [esp + 0x88], ebp
jle 0x421f7a
cmp edx, 0x39
jg 0x421f7a
lea ebp, [ebx + 1]
xor esi, esi
mov dword [esp + 0x3c], ebx
xor eax, eax
xor ebx, ebx
mov dword [esp + 0x38], 0
jmp 0x420b9f
lea ecx, [esi + esi*4]
lea esi, [edx + ecx*2 - 0x30]
mov dword [esp + 0xc0], ebp
movsx edx, byte [ebp]
add eax, 1
mov ecx, ebp
cmp edx, 0x2f
mov edi, edx
jle 0x420c90
add ebp, 1
cmp edx, 0x39
jg 0x420c90
cmp eax, 8
jle 0x420b71
cmp eax, 0xf
jg 0x420b78
lea ecx, [ebx + ebx*4]
lea ebx, [edx + ecx*2 - 0x30]
jmp 0x420b78
movzx ecx, dl
jmp dword [ecx*4 + 0x483a0c]
mov dword [esp + 0x5c], 1
lea ebx, [eax + 1]
mov dword [esp + 0xc0], ebx
movsx edx, byte [eax + 1]
test dl, dl
jne 0x420b24
mov ecx, dword [esp + 0xf0]
xor edi, edi
mov dword [esp + 0xb4], 6
mov dword [esp + 0x5c], 0
mov dword [esp + 0xc0], ecx
mov ebx, dword [esp + 0xf4]
test ebx, ebx
je 0x420c1d
mov eax, dword [esp + 0xc0]
mov ebp, dword [esp + 0xf4]
mov dword [ebp], eax
mov ecx, dword [esp + 0x5c]
test ecx, ecx
jne 0x420c65
test edi, edi
je 0x420c53
mov eax, dword [esp + 0x100]
mov ebp, dword [esp + 0x40]
mov dword [esp + 8], edi
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.00424c00
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.00424100
mov eax, dword [esp + 0xb4]
add esp, 0xdc
pop ebx
pop esi
pop edi
pop ebp
ret
or dword [esp + 0xb4], 8
jmp 0x420c25
mov dword [esp + 0x5c], 0
jmp 0x420bc8
add eax, 1
mov dword [esp + 0xc0], eax
jmp 0x420b0e
mov dword [esp + 0x38], ebx
mov ebx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x34]
movsx ebp, byte [ebp]
cmp ebp, edx
mov dword [esp + 0x3c], ebp
je 0x421170
mov dword [esp + 0x48], ebx
mov ebp, eax
xor ebx, ebx
mov dword [esp + 0x34], 0
mov dword [esp + 0x3c], 0
mov edx, edi
and edx, 0xffffffdf
cmp edx, 0x45
je 0x420de5
xor edx, edx
test ebp, ebp
jne 0x420e88
mov ecx, dword [esp + 0x34]
or ecx, dword [esp + 0x44]
jne 0x420dd9
mov eax, dword [esp + 0x3c]
test eax, eax
jne 0x420e63
cmp edi, 0x4e
je 0x422233
nop
jg 0x422221
cmp edi, 0x49
jne 0x420e63
lea ebx, [esp + 0xc0]
mov dword [esp + 4], 0x483a00
mov dword [esp], ebx
call fcn.00424bb0
test eax, eax
je 0x420e63
mov dword [esp + 4], str.inity
mov dword [esp], ebx
sub dword [esp + 0xc0], 1
call fcn.00424bb0
test eax, eax
jne 0x420d52
add dword [esp + 0xc0], 1
mov ebp, dword [esp + 0xf8]
mov dword [esp + 0xb4], 3
mov dword [esp + 0x44], 0
mov eax, dword [ebp + 8]
add eax, 1
mov edx, dword [esp + 0xfc]
mov dword [edx], eax
mov edi, dword [esp + 0xc4]
mov eax, dword [esp + 0x44]
test eax, eax
je 0x420c01
mov ebp, dword [esp + 0x88]
test ebp, ebp
jne 0x421560
mov edx, dword [esp + 0xb4]
xor eax, eax
mov esi, dword [edi + 0x10]
and edx, 0xfffffff8
test esi, esi
setg al
add eax, eax
or eax, edx
test al, 0x30
mov dword [esp + 0xb4], eax
je 0x420c01
or eax, 0x40
mov dword [esp + 0xb4], eax
call sub.msvcrt.dll__errno
mov dword [eax], 0x22
mov edi, dword [esp + 0xc4]
jmp 0x420c01
mov edx, dword [esp + 0x34]
or edx, ebp
or edx, dword [esp + 0x44]
jne 0x421250
mov ecx, dword [esp + 0xf0]
mov dword [esp + 0xb4], 6
mov edi, dword [esp + 0xc4]
mov dword [esp + 0xc0], ecx
jmp 0x420c01
movzx eax, byte [ebx + 1]
cmp al, 0x58
je 0x421f10
cmp al, 0x78
je 0x421f10
lea eax, [ebx + 1]
mov dword [esp + 0xc0], eax
mov ebx, eax
lea eax, [eax + 1]
movsx edx, byte [eax - 1]
cmp dl, 0x30
je 0x420e37
xor edi, edi
test dl, dl
je 0x420c01
mov dword [esp + 0x44], 1
jmp 0x420b35
mov edx, dword [esp + 0xf0]
mov dword [esp + 0xb4], 6
mov edi, dword [esp + 0xc4]
mov dword [esp + 0xc0], edx
jmp 0x420c01
mov ecx, dword [esp + 0xf8]
sub edx, ebx
mov dword [esp + 0x30], edx
mov dword [esp + 0xb4], 1
mov edx, dword [ecx + 0xc]
and edx, 3
mov ecx, edx
sub ecx, dword [esp + 0x5c]
cmp edx, 2
mov dword [esp + 0x78], ecx
je 0x420ed1
mov ecx, dword [esp + 0x5c]
add ecx, 1
cmp edx, 3
mov dword [esp + 0x78], ecx
je 0x420ed1
test edx, edx
sete dl
movzx edx, dl
mov dword [esp + 0x78], edx
test eax, eax
mov dword [esp + 0x34], ebp
je 0x420edd
mov dword [esp + 0x34], eax
cmp ebp, 0x10
mov ebx, ebp
jle 0x420ee9
mov ebx, 0x10
xor edx, edx
cmp ebx, 9
mov dword [esp + 0x90], esi
mov dword [esp + 0x94], edx
fild qword [esp + 0x90]
fst qword [esp + 0xc8]
jle 0x420f40
fmul qword [ebx*8 + 0x483b98]
xor edx, edx
mov eax, dword [esp + 0x38]
mov dword [esp + 0x94], edx
mov dword [esp + 0x90], eax
fild qword [esp + 0x90]
faddp st(1)
fstp qword [esp + 0xc8]
jmp 0x420f42
fstp st(0)
cmp ebp, 0xf
jg 0x420f52
cmp dword [esp + 0x40], 0x35
jle 0x4210bd
mov eax, dword [esp + 0x30]
mov edx, ebp
sub edx, ebx
add eax, edx
cmp eax, 0
jle 0x421fb7
mov edx, eax
and edx, 0xf
je 0x420f81
fld qword [esp + 0xc8]
fmul qword [edx*8 + 0x483be0]
fstp qword [esp + 0xc8]
and eax, 0xfffffff0
jne 0x421390
fld qword [esp + 0xc8]
xor ebx, ebx
lea eax, [esp + 0xb8]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xbc]
mov dword [esp + 8], eax
fstp qword [esp]
call fcn.00424910
mov ecx, dword [esp + 0xbc]
mov edx, dword [esp + 0xb8]
add ecx, ebx
mov ebx, edx
sub ebx, dword [esp + 0x40]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xbc], ecx
test ebx, ebx
jle 0x421002
mov dword [esp], eax
mov dword [esp + 4], ebx
call fcn.00424d10
mov ecx, dword [esp + 0xbc]
mov eax, dword [esp + 0x40]
add ecx, ebx
mov dword [esp + 0xb8], eax
mov edx, eax
mov dword [esp + 0xbc], ecx
mov eax, dword [esp + 0xf8]
lea ebx, [ecx + edx]
sub ebx, dword [esp + 0x40]
mov eax, dword [eax + 8]
mov dword [esp + 0x28], eax
add eax, 1
cmp ebx, eax
jg 0x421ecd
mov eax, dword [esp + 0xf8]
mov eax, dword [eax + 4]
cmp ebx, eax
mov dword [esp + 0x60], eax
jge 0x4220e2
mov edi, ecx
sub edi, eax
cmp edi, 0
jle 0x4214af
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.00424500
add dword [esp + 0xb8], edi
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x60]
test eax, eax
mov dword [esp + 0xbc], edx
je 0x4215a5
add ebx, 1
cmp edx, ebx
jle 0x4215a9
mov edi, dword [esp + 0xc4]
mov ebp, dword [esp + 0x60]
mov edx, dword [esp + 0xfc]
mov dword [esp + 0xb4], 0x50
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov dword [edx], ebp
jmp 0x420d8e
cmp dword [esp + 0x30], 0
je 0x4220f6
jle 0x42150b
cmp dword [esp + 0x30], 0x16
jg 0x422120
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0x30]
test eax, eax
mov edx, dword [ecx*4 + 0x483ae0]
je 0x4222bd
bsf ecx, eax
mov eax, 0x35
sub eax, ecx
mov ecx, dword [esp + 0x30]
add eax, edx
fld qword [esp + 0xc8]
cmp eax, 0x35
setle al
movzx eax, al
fmul qword [ecx*8 + 0x483be0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x100]
lea ecx, [esp + 0xb4]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp], eax
fstp qword [esp + 0xc8]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xfc]
lea eax, [esp + 0xc8]
mov edx, dword [esp + 0xf8]
call fcn.004206f0
test eax, eax
jne 0x420dd9
xor eax, eax
jmp 0x420f56
mov ebp, dword [esp + 0x34]
movzx edx, byte [ebp + 1]
test dl, dl
je 0x4224b5
cmp dl, byte [ecx + 1]
jne 0x420cac
mov edx, 1
mov edi, ebp
mov dword [esp + 0x48], ebx
jmp 0x42119f
cmp bl, byte [ecx + edx]
jne 0x421370
add edx, 1
movzx ebx, byte [edi + edx]
mov ebp, edx
test bl, bl
jne 0x421196
mov ebx, dword [esp + 0x48]
add ecx, ebp
test eax, eax
mov dword [esp + 0xc0], ecx
movsx edi, byte [ecx]
je 0x421454
mov dword [esp + 0x48], ebx
mov ebp, eax
xor ebx, ebx
mov dword [esp + 0x34], 0
lea ecx, [edi - 0x30]
cmp ecx, 9
mov dword [esp + 0x50], ecx
mov dword [esp + 0x3c], 1
ja 0x420cc4
mov edx, dword [esp + 0xc0]
add dword [esp + 0x34], 1
mov dword [esp + 0x3c], edx
mov edi, dword [esp + 0x50]
test edi, edi
je 0x422206
add ebx, dword [esp + 0x34]
cmp dword [esp + 0x34], 1
je 0x42265b
mov edx, dword [esp + 0x34]
mov dword [esp + 0x60], ebp
lea edi, [ebp + edx - 1]
mov edx, ebp
mov ebp, dword [esp + 0x38]
jmp 0x421238
lea esi, [esi + esi*4]
add esi, esi
cmp edx, edi
je 0x4221d8
add edx, 1
lea ecx, [edx - 1]
cmp ecx, 8
jle 0x42122b
cmp edx, 0x10
jg 0x421230
lea ebp, [ebp + ebp*4]
add ebp, ebp
jmp 0x421230
mov edx, dword [esp + 0xc0]
mov dword [esp + 0xf0], edx
mov ecx, dword [esp + 0xf0]
add edx, 1
mov dword [esp + 0xc0], edx
movzx edx, byte [ecx + 1]
cmp dl, 0x2b
movsx edi, dl
je 0x4220a4
cmp dl, 0x2d
je 0x4214e2
mov dword [esp + 0x60], 0
lea edx, [edi - 0x30]
cmp edx, 9
ja 0x421590
cmp edi, 0x30
jne 0x4212c2
mov edx, dword [esp + 0xc0]
add edx, 1
nop
lea esi, [esi]
mov dword [esp + 0xc0], edx
movsx edi, byte [edx]
add edx, 1
cmp edi, 0x30
je 0x4212b0
lea ecx, [edi - 0x31]
xor edx, edx
cmp ecx, 8
ja 0x420cd4
mov ecx, dword [esp + 0xc0]
sub edi, 0x30
mov dword [esp + 0x30], edi
mov edx, ecx
add edx, 1
mov dword [esp + 0xc0], edx
movsx edi, byte [ecx + 1]
mov dword [esp + 0x50], ecx
cmp edi, 0x2f
jle 0x42133a
cmp edi, 0x39
jg 0x42133a
add edx, 1
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x64], ebp
jmp 0x421318
add edx, 1
cmp edi, 0x39
jg 0x421330
lea ecx, [ecx + ecx*4]
mov ebp, edx
lea ecx, [edi + ecx*2 - 0x30]
mov dword [esp + 0xc0], edx
movsx edi, byte [edx]
cmp edi, 0x2f
jg 0x421310
mov edx, ebp
mov ebp, dword [esp + 0x64]
mov dword [esp + 0x30], ecx
mov ecx, edx
mov edx, 0x4e1f
sub ecx, dword [esp + 0x50]
cmp ecx, 8
jg 0x42135b
mov edx, dword [esp + 0x30]
cmp edx, 0x4e1f
jle 0x42135b
mov edx, 0x4e1f
mov ecx, dword [esp + 0x60]
test ecx, ecx
je 0x420cd4
neg edx
jmp 0x420cd4
mov edi, dword [esp + 0x3c]
mov ebp, eax
xor ebx, ebx
mov dword [esp + 0x34], 0
mov dword [esp + 0x3c], 0
jmp 0x420cc4
sar eax, 4
cmp eax, 0xf
jle 0x422536
fld qword [0x483d00]
mov ecx, eax
xor edi, edi
mov edx, dword [esp + 0xcc]
sub ecx, 0x10
mov ebx, edx
and edx, 0x800fffff
or edx, 0x3ff00000
and ebx, 0x7ff00000
mov dword [esp + 0xcc], edx
shr ebx, 0x14
cmp ecx, 0xf
fld qword [esp + 0xc8]
lea edi, [edi + ebx - 0x3ff]
fmul st(1)
fstp qword [esp + 0xc8]
jg 0x4213a6
fstp st(0)
and eax, 0xf
mov ebx, edi
mov ecx, dword [esp + 0xcc]
mov edx, ecx
and ecx, 0x800fffff
and edx, 0x7ff00000
or ecx, 0x3ff00000
shr edx, 0x14
test eax, eax
lea ebx, [ebx + edx - 0x3ff]
mov dword [esp + 0xcc], ecx
je 0x42253d
fld qword [esp + 0xc8]
xor edx, edx
fld st(0)
test al, 1
je 0x42143f
fstp st(1)
fmul qword [edx*8 + 0x483ce0]
fld st(0)
add edx, 1
sar eax, 1
jne 0x421430
fxch st(1)
fstp qword [esp + 0xc8]
jmp 0x420f93
cmp edi, 0x30
jne 0x4225af
lea edx, [ecx + 1]
mov dword [esp + 0xc0], edx
movsx edi, byte [edx]
mov ebp, edx
sub ebp, ecx
add edx, 1
cmp edi, 0x30
je 0x421460
mov dword [esp + 0x34], ebp
lea edx, [edi - 0x31]
cmp edx, 8
ja 0x4221c3
mov ebp, dword [esp + 0xc0]
sub edi, 0x30
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x50], edi
mov dword [esp + 0x34], 1
mov dword [esp + 0x48], ebp
mov dword [esp + 0x3c], ebp
xor ebp, ebp
jmp 0x4211fc
je 0x421066
add edx, edi
test edx, edx
mov dword [esp + 0xb8], edx
jle 0x422571
mov eax, edi
neg eax
mov dword [esp + 4], eax
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.00424d10
jmp 0x421066
mov dword [esp + 0x60], 1
mov edx, dword [esp + 0xf0]
add edx, 2
mov dword [esp + 0xc0], edx
mov edx, dword [esp + 0xf0]
movsx edi, byte [edx + 2]
jmp 0x421290
mov eax, dword [esp + 0x30]
cmp eax, 0xffffffea
jl 0x420f56
neg eax
fld qword [esp + 0xc8]
fdiv qword [eax*8 + 0x483be0]
mov edx, dword [esp + 0x78]
lea eax, [esp + 0xb4]
mov ecx, dword [esp + 0x100]
mov dword [esp + 0xc], eax
mov dword [esp + 4], 0
mov dword [esp + 8], edx
mov dword [esp], ecx
fstp qword [esp + 0xc8]
jmp 0x421142
mov dword [edi + 0x10], 0
mov dword [esp + 0xb4], 0x50
call sub.msvcrt.dll__errno
mov edi, dword [esp + 0xc4]
mov dword [eax], 0x22
jmp 0x420c01
mov edx, dword [esp + 0xf0]
mov dword [esp + 0xc0], edx
xor edx, edx
jmp 0x420cd4
mov edx, dword [esp + 0x60]
mov dword [esp + 0x8c], edx
mov dword [esp + 0x44], 1
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x34]
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], esi
xor esi, esi
mov dword [esp + 4], ebp
mov ebp, dword [esp + 0x48]
mov dword [esp + 0x10], eax
mov dword [esp], ebp
call fcn.00424a40
mov ebp, dword [esp + 0x40]
add ebp, 1
mov dword [esp + 0x7c], ebp
mov ebp, dword [esp + 0x30]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x64]
neg ebp
sar eax, 0x1f
and ebp, eax
not eax
mov dword [esp + 0x58], ebp
mov ebp, dword [esp + 0x30]
add edx, 0xc
mov dword [esp + 0x80], edx
and eax, ebp
mov ebp, dword [esp + 0x78]
mov dword [esp + 0x3c], eax
and ebp, 1
mov dword [esp + 0x84], ebp
jmp 0x4217fe
mov edi, dword [esp + 0x78]
test edi, edi
je 0x4219e9
mov edx, dword [esp + 0x84]
xor edx, esi
mov dword [esp + 0x70], edx
je 0x422386
test esi, esi
je 0x421c60
fld1
xor esi, esi
fst qword [esp + 0x50]
mov dword [esp + 0xb4], 0x21
fstp qword [esp + 0x48]
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0x20
mov eax, dword [esp + 0xb8]
mov edx, dword [esp + 0xbc]
mov edi, dword [esp + 0x44]
add edx, eax
test edi, edi
mov dword [esp + 0x74], edx
jne 0x4216a4
cmp dword [esp + 0x40], eax
jg 0x421e02
lea eax, [esp + 0xb0]
fld qword [esp + 0x50]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xac]
mov dword [esp + 8], eax
fstp qword [esp]
call fcn.00424910
mov edi, eax
mov eax, dword [esp + 0xac]
cmp eax, 0
jl 0x421e40
je 0x4216e8
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.00424500
mov edi, eax
mov ebx, dword [esp + 0xc4]
test esi, esi
mov dword [esp + 4], edi
mov dword [esp], ebx
je 0x421a75
call fcn.00424670
mov esi, dword [esp + 0x44]
mov edx, dword [ebx + 0x10]
test esi, esi
mov dword [esp + 0xc4], eax
jne 0x421755
lea ecx, [edx - 1]
cmp ecx, dword [eax + 0x10]
jge 0x421734
add edx, 3
bsr ecx, dword [eax + edx*4 + 4]
bsr edx, dword [ebx + edx*4 + 4]
xor ecx, 0x1f
xor edx, 0x1f
cmp ecx, edx
jle 0x421755
mov edx, dword [esp + 0x60]
cmp dword [esp + 0x8c], edx
jne 0x421c10
sub dword [esp + 0xb8], 1
mov dword [esp + 0x44], 1
mov dword [esp], edi
call fcn.00424100
mov dword [esp], ebx
call fcn.00424100
mov edx, dword [esp + 0x70]
test edx, edx
jne 0x421af0
mov eax, dword [esp + 0x68]
test eax, eax
je 0x4217c4
mov eax, dword [esp + 0xbc]
add eax, dword [esp + 0xb8]
cmp dword [esp + 0x74], eax
jne 0x4217c4
fld qword [esp + 0x50]
fmul qword [0x483b50]
fld qword [esp + 0x48]
fsub dword [0x483b44]
fld st(1)
fchs
fucomp st(1)
fnstsw ax
sahf
jbe 0x421dd0
fstp st(0)
fld qword [esp + 0x48]
fucompp
fnstsw ax
sahf
jbe 0x4217c4
jmp 0x421df2
fstp st(0)
mov eax, dword [esp + 0x44]
xor esi, esi
test eax, eax
je 0x421c47
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.00424100
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.00424100
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.00424100
mov dword [esp], ebp
call fcn.00424100
mov edx, dword [esp + 0x64]
mov eax, dword [edx + 4]
mov dword [esp], eax
call fcn.00424040
mov ecx, dword [esp + 0x64]
mov ebp, dword [esp + 0x80]
mov edx, dword [ecx + 0x10]
mov dword [esp + 4], ebp
mov dword [esp + 0x34], eax
add eax, 0xc
mov dword [esp], eax
lea edx, [edx*4 + 8]
mov dword [esp + 8], edx
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0xc4]
mov eax, dword [eax + 4]
mov dword [esp], eax
call fcn.00424040
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0xc4]
mov edx, dword [esp + 0x30]
mov ecx, dword [eax + 0x10]
add eax, 0xc
add edx, 0xc
mov dword [esp], edx
mov dword [esp + 4], eax
lea ecx, [ecx*4 + 8]
mov dword [esp + 8], ecx
call sub.msvcrt.dll_memcpy
mov ebx, dword [esp + 0xb8]
mov dword [esp], 1
mov ebp, dword [esp + 0xbc]
call fcn.00424250
sub ebx, esi
add ebp, esi
test ebp, ebp
mov dword [esp + 0x38], eax
js 0x421c00
mov edi, dword [esp + 0x58]
mov edx, dword [esp + 0x3c]
add edi, ebp
mov eax, dword [esp + 0x7c]
add ebp, ebx
sub ebp, dword [esp + 0x40]
sub eax, ebx
cmp dword [esp + 0x60], ebp
jle 0x4218c6
sub ebp, dword [esp + 0x60]
add eax, ebp
lea ecx, [edi + eax]
lea ebp, [edx + eax]
mov edx, ecx
cmp ecx, ebp
jle 0x4218d4
mov edx, ebp
cmp edx, edi
jle 0x4218da
mov edx, edi
test edx, edx
jle 0x4218e4
sub ecx, edx
sub ebp, edx
sub edi, edx
mov eax, dword [esp + 0x58]
test eax, eax
je 0x421938
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x38]
mov dword [esp + 0x20], ecx
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.004243e0
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.00424280
mov edx, dword [esp + 0x30]
mov dword [esp], edx
mov dword [esp + 0x24], eax
call fcn.00424100
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x30], eax
sub ecx, esi
cmp ecx, 0
jle 0x421a58
mov eax, dword [esp + 0x30]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.00424500
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x421977
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x34]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.004243e0
mov dword [esp + 0x34], eax
test ebp, ebp
jle 0x42198f
mov eax, dword [esp + 0x34]
mov dword [esp + 4], ebp
mov dword [esp], eax
call fcn.00424500
mov dword [esp + 0x34], eax
test edi, edi
jle 0x4219a7
mov eax, dword [esp + 0x38]
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.00424500
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.00424670
cmp dword [eax + 0x10], 1
mov ebp, eax
jle 0x421ae0
mov eax, dword [esp + 0x38]
mov esi, dword [ebp + 0xc]
mov dword [ebp + 0xc], 0
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00424600
test eax, eax
jle 0x421630
cmp eax, 0
jl 0x4222d8
je 0x42239d
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00424b20
fld dword [0x483b40]
fucomp st(1)
fnstsw ax
sahf
jb 0x421d10
fstp st(0)
test esi, esi
jne 0x421e70
mov dword [esp + 0x70], 0
cmp ebx, 1
jle 0x422480
fld1
mov esi, 1
fst qword [esp + 0x50]
mov dword [esp + 0x68], 0
fstp qword [esp + 0x48]
mov dword [esp + 0x6c], 0x10
jmp 0x42167e
je 0x421957
mov eax, dword [esp + 0x30]
neg ecx
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.00424d10
jmp 0x421957
call fcn.00424e60
mov edx, dword [eax + 0x10]
mov dword [esp + 0xc4], eax
lea ecx, [edx - 1]
cmp ecx, dword [ebx + 0x10]
jge 0x421aa7
add edx, 3
bsr ecx, dword [eax + edx*4 + 4]
bsr edx, dword [ebx + edx*4 + 4]
xor ecx, 0x1f
xor edx, 0x1f
cmp ecx, edx
jge 0x421755
mov ecx, dword [esp + 0x44]
test ecx, ecx
je 0x421ea0
mov eax, dword [esp + 0xb8]
add eax, 1
cmp dword [esp + 0x40], eax
mov dword [esp + 0xb8], eax
sete al
movzx eax, al
sub eax, 1
and dword [esp + 0x44], eax
jmp 0x421755
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x4219c7
nop
lea esi, [esi]
mov eax, dword [esp + 0x44]
test eax, eax
je 0x421f8d
mov eax, dword [esp + 0xbc]
mov edx, dword [esp + 0xfc]
mov dword [edx], eax
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.00424100
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.00424100
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.00424100
mov eax, dword [esp + 0x64]
mov dword [esp], eax
call fcn.00424100
mov dword [esp], ebp
call fcn.00424100
mov ebp, dword [esp + 0xf8]
mov eax, dword [esp + 0xbc]
cmp dword [ebp + 8], eax
jge 0x420d7b
mov ebp, dword [esp + 0xf8]
mov eax, dword [ebp + 0xc]
and eax, 3
cmp eax, 2
je 0x42245d
cmp eax, 3
je 0x42244c
cmp eax, 1
je 0x421ed5
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.00424100
mov ebp, dword [esp + 0xf8]
mov edx, dword [esp + 0xfc]
mov ecx, dword [esp + 0x100]
mov dword [esp + 0xc4], 0
mov eax, dword [ebp + 8]
mov dword [esp + 0xb4], 0x11
mov dword [edx], eax
mov edx, dword [ebp]
lea eax, [edx + 0x1f]
sar eax, 5
lea eax, [ecx + eax*4]
cmp ecx, eax
jae 0x421bdf
mov dword [ecx], 0xffffffff
add ecx, 4
cmp eax, ecx
ja 0x421bd2
xor edi, edi
and edx, 0x1f
je 0x420d82
mov ecx, 0x20
sub ecx, edx
shr dword [eax - 4], cl
jmp 0x420d82
mov edx, dword [esp + 0x3c]
mov edi, dword [esp + 0x58]
sub edx, ebp
jmp 0x4218ae
mov dword [esp + 4], 1
mov dword [esp], eax
call fcn.00424500
mov dword [esp], edi
sub dword [esp + 0xbc], 1
sub dword [esp + 0x8c], 1
mov dword [esp + 0xc4], eax
call fcn.00424100
mov dword [esp], ebx
call fcn.00424100
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.00424e20
mov esi, eax
jmp 0x4217d2
mov edx, dword [esp + 0x60]
cmp dword [esp + 0x8c], edx
mov dword [esp + 0xb4], 0x11
je 0x421a2b
cmp dword [esp + 0x40], 0x1f
jle 0x42246e
mov edx, dword [esp + 0xc4]
mov esi, dword [edx + 0x14]
test esi, esi
jne 0x421a2b
mov eax, dword [esp + 0x40]
xor esi, esi
jmp 0x421cad
mov ecx, dword [edx + esi*4 + 0x14]
test ecx, ecx
jne 0x421a2b
sub eax, 0x20
add esi, 1
cmp eax, 0x1f
jg 0x421ca1
cmp eax, 1
jle 0x421cd8
add esi, 4
sub eax, 1
mov edi, dword [edx + esi*4 + 4]
bsf ecx, edi
shr edi, cl
cmp eax, ecx
mov dword [edx + esi*4 + 4], edi
jg 0x421a2b
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x8c]
mov dword [esp], edx
mov dword [esp + 4], ecx
sub eax, 1
mov dword [esp + 0xbc], eax
mov dword [esp + 0xb8], ecx
call fcn.00420a30
mov dword [esp + 0xc4], eax
jmp 0x421af0
fld dword [0x483b44]
cmp esi, 1
fmul st(1), st(0)
fxch st(1)
sbb ecx, ecx
and ecx, 0x10
add ecx, 0x10
cmp esi, 1
sbb esi, esi
and esi, 1
fstp qword [esp + 0x48]
fld qword [0x483b48]
fld qword [esp + 0x48]
fxch st(1)
fucomp st(1)
fnstsw ax
mov dword [esp + 0x6c], ecx
sahf
jbe 0x421e53
fnstcw word [esp + 0x9a]
fld st(0)
cmp dword [esp + 0x78], 1
movzx eax, word [esp + 0x9a]
mov ah, 0xc
mov word [esp + 0x98], ax
fldcw word [esp + 0x98]
fistp dword [esp + 0x68]
fldcw word [esp + 0x9a]
fild dword [esp + 0x68]
fst qword [esp + 0x50]
fsubp st(1)
fst qword [esp + 0x48]
je 0x4220b1
cmp dword [esp + 0x78], 2
je 0x4220d3
fucompp
fnstsw ax
sahf
jb 0x421dc0
add dword [esp + 0x68], 1
mov eax, 0x30
sub eax, dword [esp + 0x6c]
fild dword [esp + 0x68]
mov dword [esp + 0x6c], eax
fstp qword [esp + 0x50]
nop
mov dword [esp + 0x70], 0
jmp 0x42167e
fucomp st(1)
fnstsw ax
sahf
jbe 0x4217c2
fsubr dword [0x483b3c]
fld qword [esp + 0x48]
fxch st(1)
fucompp
fnstsw ax
sahf
jbe 0x4217c4
mov edx, dword [esp + 0x6c]
or dword [esp + 0xb4], edx
jmp 0x421af0
mov ebx, dword [esp + 0x40]
sub ebx, eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00424500
mov ecx, dword [esp + 0x40]
sub dword [esp + 0xbc], ebx
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xc4], eax
jmp 0x4216a4
neg eax
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00424d10
jmp 0x4216e8
fstp st(0)
fstp st(0)
fld qword [esp + 0x48]
fstp qword [esp + 0x50]
mov dword [esp + 0x68], 0
jmp 0x421dc0
fld1
xor esi, esi
fst qword [esp + 0x50]
mov dword [esp + 0x68], 0
fstp qword [esp + 0x48]
mov dword [esp + 0x6c], 0x20
mov dword [esp + 0x70], 0
jmp 0x42167e
mov dword [esp + 4], 1
mov dword [esp], eax
call fcn.00424d10
add dword [esp + 0xbc], 1
add dword [esp + 0x8c], 1
mov dword [esp + 0x68], 0
jmp 0x421755
mov dword [esp + 0x44], 0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xb4], 0xa3
mov dword [eax + 0x10], 0
call sub.msvcrt.dll__errno
mov ebp, dword [esp + 0xf8]
mov dword [eax], 0x22
mov eax, dword [ebp + 8]
add eax, 1
jmp 0x420d72
mov ebp, dword [esp + 0x5c]
lea eax, [esp + 0xc4]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0xf8]
mov dword [esp + 8], eax
lea eax, [esp + 0xc0]
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.00424fe0
mov edi, dword [esp + 0xc4]
cmp eax, 6
mov dword [esp + 0xb4], eax
jne 0x420c01
mov edx, dword [esp + 0xf0]
mov dword [esp + 0x5c], 0
mov dword [esp + 0xc0], edx
jmp 0x420c01
mov ecx, ebx
xor esi, esi
mov dword [esp + 0x38], 0
xor eax, eax
jmp 0x420c98
mov eax, dword [esp + 0xb8]
mov ebx, dword [esp + 0x40]
sub ebx, eax
cmp ebx, 0
jne 0x422186
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x44], 0
jmp 0x421b03
je 0x420f8a
neg eax
mov edx, eax
and edx, 0xf
je 0x421fdb
fld qword [esp + 0xc8]
fdiv qword [edx*8 + 0x483be0]
fstp qword [esp + 0xc8]
and eax, 0xfffffff0
je 0x420f8a
sar eax, 4
cmp eax, 0xf
jle 0x422654
fld qword [0x483cc0]
mov ecx, eax
xor edi, edi
lea esi, [esi]
mov edx, dword [esp + 0xcc]
sub ecx, 0x10
mov ebx, edx
and edx, 0x800fffff
or edx, 0x3ff00000
and ebx, 0x7ff00000
mov dword [esp + 0xcc], edx
shr ebx, 0x14
cmp ecx, 0xf
fld qword [esp + 0xc8]
lea edi, [edi + ebx - 0x3ff]
fmul st(1)
fstp qword [esp + 0xc8]
jg 0x422000
fstp st(0)
and eax, 0xf
mov ecx, dword [esp + 0xcc]
mov edx, ecx
and ecx, 0x800fffff
and edx, 0x7ff00000
or ecx, 0x3ff00000
shr edx, 0x14
lea ebx, [edi + edx - 0x3ff]
xor edx, edx
mov dword [esp + 0xcc], ecx
test eax, eax
fld qword [esp + 0xc8]
jle 0x420f93
test al, 1
je 0x422091
fmul qword [edx*8 + 0x483ca0]
add edx, 1
sar eax, 1
jne 0x422086
fst qword [esp + 0xc8]
jmp 0x420f93
mov dword [esp + 0x60], 0
jmp 0x4214ea
fstp st(0)
fstp st(0)
test esi, esi
je 0x421dc0
fldz
fld qword [esp + 0x48]
fucompp
fnstsw ax
sahf
ja 0x421da4
jmp 0x421dc0
fstp st(0)
fstp st(0)
test esi, esi
jne 0x421dc0
nop
jmp 0x4220bd
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x44], 0
jmp 0x4215b8
lea eax, [esp + 0xb4]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 4], 1
mov dword [esp + 8], ecx
mov dword [esp], eax
jmp 0x421142
mov eax, dword [esp + 0x30]
mov edx, 0x25
sub edx, ebp
cmp eax, edx
jg 0x420f56
mov eax, 0xf
fld qword [esp + 0xc8]
sub eax, ebp
mov edx, dword [esp + 0x30]
fmul qword [eax*8 + 0x483be0]
mov ecx, dword [esp + 0x78]
mov dword [esp + 4], 0
sub edx, eax
lea eax, [esp + 0xb4]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x100]
fmul qword [edx*8 + 0x483be0]
mov dword [esp + 8], ecx
mov dword [esp], eax
fstp qword [esp + 0xc8]
jmp 0x421142
jle 0x42251a
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00424500
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x44], 0
sub eax, ebx
mov dword [esp + 0xbc], eax
jmp 0x421b03
mov dword [esp + 0x48], ebx
xor ebp, ebp
xor ebx, ebx
mov dword [esp + 0x3c], 1
jmp 0x420cc4
mov dword [esp + 0x38], ebp
mov ecx, dword [esp + 0x34]
mov ebp, dword [esp + 0x60]
lea edx, [ebp + ecx - 1]
cmp edx, 8
lea ebp, [edx + 1]
jg 0x422549
mov ecx, dword [esp + 0x50]
lea edx, [esi + esi*4]
mov dword [esp + 0x34], 0
lea esi, [ecx + edx*2]
mov edx, dword [esp + 0x3c]
add edx, 1
mov dword [esp + 0xc0], edx
mov edx, dword [esp + 0x3c]
movsx edi, byte [edx + 1]
jmp 0x4211d4
cmp edi, 0x69
je 0x420d0f
cmp edi, 0x6e
jne 0x420e63
lea ebx, [esp + 0xc0]
mov dword [esp + 4], 0x483a09
mov dword [esp], ebx
call fcn.00424bb0
test eax, eax
je 0x420e63
mov ebp, dword [esp + 0xf8]
mov edx, dword [esp + 0xfc]
mov dword [esp + 0xb4], 4
mov dword [esp + 0x44], 0
mov ebp, dword [ebp + 8]
mov eax, ebp
add eax, 1
mov dword [edx], eax
mov edx, dword [esp + 0xc0]
cmp byte [edx], 0x28
jne 0x420d72
mov ebp, dword [esp + 0xf8]
mov ecx, dword [esp + 0x100]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.00425960
mov dword [esp + 0xb4], eax
mov eax, dword [ebp + 8]
add eax, 1
jmp 0x420d72
mov eax, dword [esp + 0xcc]
or eax, 0x100000
bsf ecx, eax
mov eax, 0x15
sub eax, ecx
jmp 0x4210fd
cmp esi, 1
sbb eax, eax
and eax, 0x10
add eax, 0x11
cmp ebx, 1
mov dword [esp + 0xb4], eax
jg 0x421af0
test esi, esi
jne 0x421af0
mov edx, dword [esp + 0x60]
cmp dword [esp + 0x8c], edx
je 0x421af0
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x421af0
mov dword [esp], ebp
mov dword [esp + 4], 1
call fcn.00424500
mov ebp, eax
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00424600
test eax, eax
jle 0x421f8d
mov dword [esp + 0xb4], 0x11
mov dword [esp + 0x44], 0
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0xc4]
sub dword [esp + 0xbc], ecx
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xb8], ecx
call fcn.00420a30
mov dword [esp + 0xc4], eax
jmp 0x421af0
cmp esi, 1
sbb eax, eax
and eax, 0x10
add eax, 0x11
mov dword [esp + 0xb4], eax
jmp 0x421af0
test esi, esi
je 0x4224bf
mov eax, dword [esp + 0x44]
test eax, eax
je 0x42259f
mov edx, dword [esp + 0xb8]
mov edi, dword [esp + 0xc4]
mov dword [esp + 0x58], edx
sar edx, 5
lea eax, [edi + 0x14]
lea ecx, [edi + edx*4 + 0x14]
cmp eax, ecx
jae 0x4223f2
cmp dword [edi + 0x14], 0xffffffff
lea eax, [edi + 0x18]
je 0x4223ee
jmp 0x42259f
mov edx, dword [eax]
add eax, 4
cmp edx, 0xffffffff
jne 0x42259f
cmp ecx, eax
ja 0x4223e0
mov ecx, dword [esp + 0x58]
and ecx, 0x1f
je 0x42240b
or edx, 0xffffffff
shl edx, cl
or edx, dword [eax]
add edx, 1
jne 0x42259f
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x60]
mov dword [edi + 0x10], 1
mov dword [edi + 0x14], 1
mov dword [esp + 0xb8], 1
lea eax, [ecx + edx - 1]
mov dword [esp + 0xbc], eax
mov eax, 1
mov dword [esp + 0xb4], 0x21
jmp 0x421f94
mov eax, dword [esp + 0x5c]
test eax, eax
jne 0x421ed5
jmp 0x421b83
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x421ed5
jmp 0x421b83
mov eax, dword [esp + 0x40]
xor esi, esi
mov edx, dword [esp + 0xc4]
jmp 0x421cb8
mov eax, dword [esp + 0x44]
test eax, eax
je 0x421a34
mov edx, dword [esp + 0xc4]
mov dword [edx + 0x10], 0
mov edx, dword [esp + 0x60]
mov dword [esp + 0xb4], 0x50
mov dword [esp + 0xbc], edx
jmp 0x421af0
mov ebp, 1
jmp 0x4211b0
cmp ebx, 1
je 0x4225bc
mov dword [esp + 0xb4], 0x21
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x4224e5
cmp dword [esp + 0x40], ebx
jg 0x421f8d
mov edx, dword [esp + 0xc4]
mov eax, dword [edx + 0x14]
test al, 1
je 0x421af0
test esi, esi
jne 0x42260e
cmp ebx, 1
je 0x422493
sub eax, 1
mov dword [edx + 0x14], eax
mov dword [esp + 0xb4], 0x11
jmp 0x421af0
mov eax, ebx
neg eax
mov dword [esp + 4], eax
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.00424d10
jmp 0x4221a6
xor ebx, ebx
jmp 0x4213f1
fld qword [esp + 0xc8]
jmp 0x420f93
cmp ebp, 0x10
mov dword [esp + 0x34], 0
jg 0x422206
mov ecx, dword [esp + 0x38]
lea edx, [ecx + ecx*4]
mov ecx, dword [esp + 0x50]
lea edx, [ecx + edx*2]
mov dword [esp + 0x38], edx
jmp 0x422206
cmp edx, 0xffffffff
jl 0x42108b
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xb8], 1
mov dword [eax + 0x10], 1
mov dword [eax + 0x14], 1
jmp 0x421066
mov dword [esp + 0xb4], 0x11
jmp 0x4224d3
mov dword [esp + 0x34], 0
jmp 0x42147a
mov edx, dword [esp + 0x60]
cmp dword [esp + 0x8c], edx
mov dword [esp + 0xb4], 1
jne 0x422355
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xb4], 0x21
cmp dword [eax + 0x10], 1
jne 0x421af0
cmp dword [eax + 0x14], 1
jne 0x421af0
mov dword [esp + 0x88], 1
jmp 0x421af0
mov dword [esp], edx
call fcn.00420650
mov ecx, dword [esp + 0xb8]
mov edx, dword [eax + 0x10]
mov dword [esp + 0xc4], eax
bsr eax, dword [eax + edx*4 + 0x10]
mov edx, ecx
neg edx
and edx, 0x1f
xor eax, 0x1f
cmp edx, eax
je 0x422644
add ecx, 1
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xb4], 0x21
jmp 0x421af0
xor edi, edi
jmp 0x422049
mov edx, ebp
jmp 0x4221e8