Function at 0x422670
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
xor ebx, ebx
sub esp, 0x9c
mov edx, dword [esp + 0xbc]
mov esi, dword [edx]
mov eax, esi
and eax, 0xffffffcf
mov dword [edx], eax
mov eax, esi
and eax, 7
cmp eax, 4
ja case.default.0x42269a
jmp dword [eax*4 + 0x483b70]
fld st(0)
fadd st(1)
fadd dword [0x483bbc]
fstp qword [esp + 0x68]
sub dword [esp + 0x6c], 0x3400000
fld st(0)
fsub dword [0x483bc0]
fld qword [esp + 0x68]
fxch st(1)
fucom st(1)
fnstsw ax
sahf
ja 0x423602
fxch st(1)
fchs
fucompp
fnstsw ax
sahf
ja 0x42307d
jmp 0x4226f1
fstp st(0)
fstp st(0)
jmp 0x4226f1
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x4226f1
fstp st(0)
fstp qword [esp + 0x38]
cmp dword [esp + 0x20], 0xe
jg 0x422da0
mov eax, dword [esp + 0x50]
test eax, eax
js 0x422da0
mov esi, dword [esp + 0x48]
mov edx, dword [esp + 0x20]
test esi, esi
fld qword [edx*8 + 0x483be0]
jg 0x423113
mov eax, dword [esp + 0xc4]
shr eax, 0x1f
test al, al
je 0x423113
mov ecx, dword [esp + 0x48]
test ecx, ecx
jne 0x423081
fmul dword [0x483bc0]
fld qword [esp + 0x38]
fxch st(1)
fucompp
fnstsw ax
sahf
jae 0x423083
add edx, 2
xor edi, edi
mov dword [esp + 0x28], edx
mov dword [esp + 0x38], 0
mov byte [ebx], 0x31
lea esi, [ebx + 1]
mov dword [esp + 0x40], 0
mov dword [esp + 0x24], 0x20
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.00424100
test edi, edi
je 0x4227a1
cmp dword [esp + 0x40], edi
jne 0x4233bd
mov dword [esp], edi
call fcn.00424100
mov dword [esp], ebp
call fcn.00424100
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0xc8]
mov byte [esi], 0
test eax, eax
mov dword [edx], ecx
je 0x4227cd
mov eax, dword [esp + 0xcc]
mov dword [eax], esi
mov edx, dword [esp + 0xbc]
mov ecx, dword [esp + 0x24]
or dword [edx], ecx
lea esi, [esi]
add esp, 0x9c
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [esp + 0xb0]
xor edx, edx
mov edi, dword [eax]
cmp edi, 0x20
jle 0x42280e
mov eax, 0x20
add eax, eax
add edx, 1
cmp edi, eax
jg 0x422805
mov dword [esp], edx
call fcn.00424040
mov edx, dword [esp + 0xb8]
mov ebp, eax
lea eax, [edi - 1]
sar eax, 5
lea ebx, [edx + eax*4]
mov eax, dword [esp + 0xb8]
lea edx, [ebp + 0x14]
mov ecx, edx
mov dword [esp + 0x20], edx
mov edx, dword [eax]
add eax, 4
mov dword [ecx], edx
add ecx, 4
cmp ebx, eax
jae 0x422838
mov edx, dword [esp + 0x20]
sub ecx, edx
sar ecx, 2
nop
lea eax, [ecx - 1]
mov edx, dword [ebp + eax*4 + 0x14]
test edx, edx
jne 0x422d20
test eax, eax
mov ecx, eax
jne 0x422850
mov dword [ebp + 0x10], 0
mov dword [esp + 0x40], 0
mov dword [esp], ebp
call fcn.00424e20
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x50], ecx
test eax, eax
mov dword [esp + 0x8c], eax
jne 0x422cf1
mov ebx, dword [ebp + 0x10]
test ebx, ebx
jne 0x422960
mov dword [esp], ebp
call fcn.00424100
mov ecx, dword [esp + 0xc8]
mov eax, dword [esp + 0xcc]
mov dword [ecx], 1
mov dword [esp + 8], 1
mov dword [esp + 4], eax
mov dword [esp], 0x483b6d
call fcn.00423c70
add esp, 0x9c
mov ebx, eax
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov edx, dword [esp + 0xc8]
mov ecx, dword [esp + 0xcc]
mov dword [edx], 0xffff8000
mov dword [esp + 8], 3
mov dword [esp + 4], ecx
mov dword [esp], 0x483b69
call fcn.00423c70
add esp, 0x9c
mov ebx, eax
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov ecx, dword [esp + 0xc8]
mov eax, dword [esp + 0xcc]
mov dword [ecx], 0xffff8000
mov dword [esp + 8], 8
mov dword [esp + 4], eax
mov dword [esp], str.Infinity
call fcn.00423c70
add esp, 0x9c
mov ebx, eax
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
lea eax, [esp + 0x8c]
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.00424800
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x40]
lea ecx, [eax + edx - 1]
fstp qword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
mov edx, ecx
mov dword [esp + 0x78], ecx
sar edx, 0x1f
mov eax, edx
xor eax, ecx
and ebx, 0xfffff
sub eax, edx
or ebx, 0x3ff00000
sub eax, 0x435
mov dword [esp + 0x3c], ebx
test eax, eax
fld qword [esp + 0x38]
fsub dword [0x483b84]
fmul qword [0x483b88]
fadd qword [0x483b90]
fild dword [esp + 0x78]
fmul qword [0x483b98]
faddp st(1)
jle 0x4229e1
mov dword [esp + 0x78], eax
fild dword [esp + 0x78]
fmul qword [0x483ba0]
faddp st(1)
fnstcw word [esp + 0x7e]
movzx eax, word [esp + 0x7e]
mov ah, 0xc
mov word [esp + 0x7c], ax
fldcw word [esp + 0x7c]
fist dword [esp + 0x20]
fldcw word [esp + 0x7e]
fldz
fucomp st(1)
fnstsw ax
sahf
ja 0x4230e0
fstp st(0)
mov eax, ecx
shl eax, 0x14
add eax, ebx
cmp dword [esp + 0x20], 0x16
mov dword [esp + 0x3c], eax
mov dword [esp + 0x5c], 1
ja 0x422a4f
mov edx, dword [esp + 0x20]
fld qword [edx*8 + 0x483be0]
fld qword [esp + 0x38]
fxch st(1)
fucompp
fnstsw ax
sahf
jbe 0x423010
sub dword [esp + 0x20], 1
mov dword [esp + 0x5c], 0
mov eax, dword [esp + 0x40]
mov dword [esp + 0x54], 0
sub eax, ecx
sub eax, 1
mov dword [esp + 0x4c], eax
js 0x4230b1
mov ecx, dword [esp + 0x20]
test ecx, ecx
js 0x4230c4
mov edx, dword [esp + 0x20]
add dword [esp + 0x4c], edx
mov dword [esp + 0x58], 0
mov dword [esp + 0x60], edx
cmp dword [esp + 0xc0], 9
ja 0x422d40
cmp dword [esp + 0xc0], 5
jle 0x423c0f
sub dword [esp + 0xc0], 4
xor eax, eax
cmp dword [esp + 0xc0], 3
je 0x423032
jg 0x423394
cmp dword [esp + 0xc0], 2
jne 0x422d4b
mov dword [esp + 0x64], 0
mov edx, dword [esp + 0xc4]
test edx, edx
jle 0x4235ae
cmp dword [esp + 0xc4], 0xe
setbe dl
mov ecx, dword [esp + 0xc4]
and edx, eax
mov dword [esp + 0x8c], ecx
mov eax, ecx
mov dword [esp + 0x70], ecx
mov dword [esp + 0x48], ecx
mov dword [esp], eax
mov byte [esp + 0x18], dl
call fcn.00423c30
mov ecx, dword [esp + 0xb0]
movzx edx, byte [esp + 0x18]
mov ecx, dword [ecx + 0xc]
mov ebx, eax
sub ecx, 1
cmp ecx, 0
mov dword [esp + 0x44], ecx
je 0x422b46
jl 0x423070
and esi, 8
jne 0x423020
test dl, dl
je 0x4226f5
mov edx, dword [esp + 0x44]
or edx, dword [esp + 0x20]
jne 0x4226f5
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x8c], 0
fld qword [esp + 0x38]
test eax, eax
je 0x422b80
fld1
fucomp st(1)
fnstsw ax
sahf
ja 0x4238c1
fld st(0)
mov eax, dword [esp + 0x48]
fadd st(1)
fadd dword [0x483bbc]
fstp qword [esp + 0x68]
sub dword [esp + 0x6c], 0x3400000
test eax, eax
je 0x4226b7
mov edx, dword [esp + 0x48]
fld st(0)
mov dword [esp + 0x74], 0
mov eax, dword [esp + 0x64]
test eax, eax
je 0x42361f
fld qword [esp + 0x68]
lea esi, [ebx + 1]
fld dword [0x483bc4]
fdiv qword [edx*8 + 0x483bd8]
fnstcw word [esp + 0x7e]
mov dword [esp + 0x8c], 0
movzx eax, word [esp + 0x7e]
mov ah, 0xc
mov word [esp + 0x7c], ax
fsubrp st(1)
fxch st(1)
fldcw word [esp + 0x7c]
fist dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x78], ecx
add ecx, 0x30
fild dword [esp + 0x78]
fsubp st(1)
fxch st(1)
mov byte [ebx], cl
fucom st(1)
fnstsw ax
sahf
ja 0x422cc0
fld st(1)
fsubr dword [0x483bb0]
fxch st(1)
fucom st(1)
fnstsw ax
fstp st(1)
sahf
ja 0x422fb8
mov eax, dword [esp + 0x8c]
add eax, 1
cmp eax, edx
mov dword [esp + 0x8c], eax
jge 0x4226e1
fld dword [0x483bb4]
jmp 0x422c87
fld st(1)
fsubr dword [0x483bb0]
fxch st(1)
fucom st(1)
fnstsw ax
fstp st(1)
sahf
ja 0x422fc0
mov eax, dword [esp + 0x8c]
add eax, 1
cmp edx, eax
mov dword [esp + 0x8c], eax
jle 0x4226e7
fxch st(1)
fxch st(2)
fmul st(1), st(0)
fmul st(2), st(0)
fxch st(2)
fldcw word [esp + 0x7c]
fist dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov eax, dword [esp + 0x78]
mov dword [esp + 0x78], eax
lea ecx, [eax + 0x30]
fild dword [esp + 0x78]
fsubp st(1)
fxch st(1)
mov byte [esi], cl
add esi, 1
fucom st(1)
fnstsw ax
sahf
jbe 0x422c53
fstp st(0)
fstp st(1)
fstp st(1)
jmp 0x422cc4
fstp st(0)
fstp st(1)
fldz
fxch st(1)
fucompp
fnstsw ax
sahf
jp 0x423b03
jne 0x423b03
mov edx, dword [esp + 0x74]
mov dword [esp + 0x24], 0
add edx, 1
mov dword [esp + 0x28], edx
jmp 0x4227a1
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.00424d10
mov eax, dword [esp + 0x8c]
mov edx, dword [esp + 0xb4]
sub dword [esp + 0x40], eax
add edx, eax
mov dword [esp + 0x50], edx
jmp 0x422896
bsr eax, dword [ebp + ecx*4 + 0x10]
mov dword [ebp + 0x10], ecx
shl ecx, 5
xor eax, 0x1f
sub ecx, eax
mov dword [esp + 0x40], ecx
jmp 0x422874
mov dword [esp + 0xc0], 0
mov dword [esp + 0x78], edi
xor edx, edx
fild dword [esp + 0x78]
fmul qword [0x483ba8]
mov dword [esp + 0x64], 1
mov dword [esp + 0x70], 0xffffffff
mov dword [esp + 0x48], 0xffffffff
mov dword [esp + 0xc4], 0
fldcw word [esp + 0x7c]
fistp dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov eax, dword [esp + 0x78]
add eax, 3
mov dword [esp + 0x8c], eax
jmp 0x422b0e
mov eax, dword [esp + 0x64]
test eax, eax
je 0x423100
cmp dword [esp + 0xc0], 1
jle 0x423705
mov eax, dword [esp + 0x48]
sub eax, 1
cmp dword [esp + 0x58], eax
jl 0x4235da
mov esi, dword [esp + 0x58]
sub esi, eax
mov eax, dword [esp + 0x48]
test eax, eax
js 0x423827
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x8c], edx
mov edi, edx
mov dword [esp + 0x50], ecx
mov dword [esp], 1
add dword [esp + 0x54], edi
add dword [esp + 0x4c], edi
call fcn.00424250
mov edi, eax
mov eax, dword [esp + 0x4c]
test eax, eax
jle 0x422e39
mov eax, dword [esp + 0x50]
test eax, eax
jle 0x422e39
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x50]
cmp eax, edx
jle 0x422e26
mov eax, edx
sub dword [esp + 0x54], eax
sub dword [esp + 0x50], eax
sub dword [esp + 0x4c], eax
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x58]
test eax, eax
jle 0x422e89
mov ecx, dword [esp + 0x64]
test ecx, ecx
je 0x4235c3
test esi, esi
jle 0x422e7d
mov dword [esp], edi
mov dword [esp + 4], esi
call fcn.004243e0
mov dword [esp + 4], ebp
mov dword [esp], eax
mov edi, eax
call fcn.00424280
mov dword [esp], ebp
mov dword [esp + 0x18], eax
call fcn.00424100
mov eax, dword [esp + 0x18]
mov ebp, eax
mov eax, dword [esp + 0x58]
sub eax, esi
jne 0x4235ef
mov dword [esp], 1
call fcn.00424250
mov edx, dword [esp + 0x60]
test edx, edx
mov dword [esp + 0x38], eax
jle 0x422eb5
mov edx, dword [esp + 0x60]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.004243e0
mov dword [esp + 0x38], eax
cmp dword [esp + 0xc0], 1
mov dword [esp + 0x58], 0
jle 0x423511
mov eax, dword [esp + 0x60]
mov esi, 0x1f
test eax, eax
je 0x422ee7
mov edx, dword [esp + 0x38]
mov eax, dword [edx + 0x10]
bsr esi, dword [edx + eax*4 + 0x10]
xor esi, 0x1f
sub esi, dword [esp + 0x4c]
mov ecx, dword [esp + 0x54]
sub esi, 4
and esi, 0x1f
add ecx, esi
mov eax, esi
test ecx, ecx
mov dword [esp + 0x8c], esi
jle 0x422f19
mov dword [esp], ebp
mov dword [esp + 4], ecx
call fcn.00424500
mov ebp, eax
mov eax, dword [esp + 0x8c]
add eax, dword [esp + 0x4c]
test eax, eax
jle 0x422f35
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.00424500
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x5c]
test eax, eax
jne 0x4233da
cmp dword [esp + 0xc0], 2
jle 0x4231f8
mov eax, dword [esp + 0x48]
test eax, eax
jg 0x4231f8
mov eax, dword [esp + 0x48]
test eax, eax
jne 0x42308d
mov eax, dword [esp + 0x38]
mov dword [esp + 8], 0
mov dword [esp + 4], 5
mov dword [esp], eax
call fcn.00424150
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 0x38], eax
call fcn.00424600
test eax, eax
jle 0x42308d
mov edx, dword [esp + 0x20]
add edx, 2
mov dword [esp + 0x28], edx
jmp 0x422769
movzx ecx, byte [eax - 1]
mov esi, eax
jmp 0x422fd2
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x422fd2
fstp st(0)
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x422fd2
fstp st(0)
fstp st(0)
fstp st(0)
fstp st(0)
cmp cl, 0x39
lea eax, [esi - 1]
jne 0x4239f2
cmp eax, ebx
jne 0x422fb0
add dword [esp + 0x74], 1
mov ecx, 0x31
mov byte [ebx], 0x30
mov byte [eax], cl
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x24], 0x20
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x4227a1
mov dword [esp + 0x5c], 0
jmp 0x422a4f
mov eax, 3
sub eax, dword [esp + 0x44]
mov dword [esp + 0x44], eax
jmp 0x422b46
mov dword [esp + 0x64], 0
mov edx, dword [esp + 0xc4]
add edx, dword [esp + 0x20]
mov dword [esp + 0x70], edx
add edx, 1
test edx, edx
mov dword [esp + 0x48], edx
jle 0x42358f
cmp edx, 0xe
mov dword [esp + 0x8c], edx
setbe dl
and edx, eax
mov eax, dword [esp + 0x48]
jmp 0x422b0e
mov dword [esp + 0x44], 2
jmp 0x422b3d
fstp st(0)
jmp 0x423083
fstp st(0)
mov dword [esp + 0x38], 0
xor edi, edi
mov ecx, dword [esp + 0xc4]
mov esi, ebx
mov dword [esp + 0x40], 0
mov dword [esp + 0x24], 0x10
neg ecx
mov dword [esp + 0x28], ecx
jmp 0x42277f
neg eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x4c], 0
jmp 0x422a6a
mov ecx, dword [esp + 0x20]
sub dword [esp + 0x54], ecx
mov dword [esp + 0x60], 0
neg ecx
mov dword [esp + 0x58], ecx
jmp 0x422a8a
fild dword [esp + 0x20]
fucompp
fnstsw ax
sahf
jp 0x4230f1
je 0x422a0c
sub dword [esp + 0x20], 1
jmp 0x422a0c
mov ecx, dword [esp + 0x54]
xor edi, edi
mov esi, dword [esp + 0x58]
mov dword [esp + 0x50], ecx
jmp 0x422e08
fld qword [esp + 0x38]
lea esi, [ebx + 1]
fld st(0)
fdiv st(2)
fnstcw word [esp + 0x7e]
mov dword [esp + 0x8c], 1
movzx eax, word [esp + 0x7e]
mov ah, 0xc
mov word [esp + 0x7c], ax
fldcw word [esp + 0x7c]
fistp dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x78], ecx
lea eax, [ecx + 0x30]
fild dword [esp + 0x78]
fmul st(2)
mov byte [ebx], al
fsubp st(1)
fldz
fxch st(1)
fucom st(1)
fnstsw ax
fstp st(1)
sahf
jnp 0x423b1b
mov eax, dword [esp + 0x8c]
cmp dword [esp + 0x48], eax
je 0x42355c
fld dword [0x483bb4]
mov edx, dword [esp + 0x48]
jmp 0x423197
mov eax, dword [esp + 0x8c]
cmp edx, eax
je 0x42355a
add eax, 1
fmul st(1), st(0)
mov dword [esp + 0x8c], eax
fld st(1)
fdiv st(3)
fldcw word [esp + 0x7c]
fistp dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x78], ecx
lea eax, [ecx + 0x30]
fild dword [esp + 0x78]
fmul st(3)
mov byte [esi], al
add esi, 1
fsubp st(2)
fldz
fxch st(2)
fucom st(2)
fnstsw ax
fstp st(2)
sahf
jp 0x423188
jne 0x423188
fstp st(0)
fstp st(0)
fstp st(0)
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], 0
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x4227a1
mov eax, dword [esp + 0x64]
test eax, eax
je 0x42343a
add esi, dword [esp + 0x50]
test esi, esi
jle 0x42321a
mov dword [esp], edi
mov dword [esp + 4], esi
call fcn.00424500
mov edi, eax
mov esi, dword [esp + 0x58]
mov edx, edi
test esi, esi
jne 0x423910
mov dword [esp + 0x28], ebx
mov esi, edx
mov dword [esp + 0x4c], ebx
mov ebx, edi
mov dword [esp + 0x8c], 1
mov dword [esp + 0x40], edi
jmp 0x423325
mov dword [esp], edx
mov dword [esp + 0x18], eax
call fcn.00424100
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0xc0]
or edx, eax
jne 0x42327b
mov ecx, dword [esp + 0xb8]
test byte [ecx], 1
jne 0x42327b
mov edx, dword [esp + 0x44]
test edx, edx
je 0x423b3d
test edi, edi
js 0x423771
or edi, dword [esp + 0xc0]
jne 0x42329c
mov edx, dword [esp + 0xb8]
test byte [edx], 1
je 0x423771
test eax, eax
jg 0x423969
mov edx, dword [esp + 0x28]
movzx eax, byte [esp + 0x2c]
mov ecx, dword [esp + 0x48]
mov byte [edx], al
add edx, 1
cmp dword [esp + 0x8c], ecx
mov dword [esp + 0x28], edx
je 0x423954
mov dword [esp], ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
call fcn.00424150
cmp ebx, esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
mov dword [esp], ebx
mov ebp, eax
je 0x423389
call fcn.00424150
mov dword [esp], esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
mov ebx, eax
call fcn.00424150
mov esi, eax
add dword [esp + 0x8c], 1
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00423ce0
mov dword [esp + 4], ebx
mov dword [esp], ebp
mov dword [esp + 0x34], eax
add eax, 0x30
mov dword [esp + 0x2c], eax
call fcn.00424600
mov dword [esp + 4], esi
mov edi, eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.00424670
mov edx, eax
mov eax, 1
mov ecx, dword [edx + 0xc]
test ecx, ecx
jne 0x423248
mov dword [esp + 4], edx
mov dword [esp], ebp
mov dword [esp + 0x18], edx
call fcn.00424600
mov edx, dword [esp + 0x18]
jmp 0x423248
call fcn.00424150
mov ebx, eax
mov esi, eax
jmp 0x42331d
cmp dword [esp + 0xc0], 4
je 0x42354d
cmp dword [esp + 0xc0], 5
jne 0x422d4b
mov dword [esp + 0x64], 1
jmp 0x42303a
mov edx, dword [esp + 0x40]
test edx, edx
je 0x422799
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.00424100
jmp 0x422799
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00424600
test eax, eax
jns 0x422f41
mov dword [esp], ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
sub dword [esp + 0x20], 1
call fcn.00424150
mov ebp, eax
mov eax, dword [esp + 0x64]
test eax, eax
jne 0x423b76
cmp dword [esp + 0xc0], 2
mov edx, dword [esp + 0x70]
jle 0x423436
cmp dword [esp + 0x70], 0
jle 0x423c19
mov dword [esp + 0x48], edx
mov esi, ebx
mov dword [esp + 0x24], edi
mov edi, dword [esp + 0x48]
mov dword [esp + 0x30], ebx
mov ebx, dword [esp + 0x38]
mov dword [esp + 0x8c], 1
jmp 0x423482
mov dword [esp], ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
call fcn.00424150
add dword [esp + 0x8c], 1
mov ebp, eax
mov dword [esp + 4], ebx
mov dword [esp], ebp
call fcn.00423ce0
add eax, 0x30
mov byte [esi], al
add esi, 1
cmp edi, dword [esp + 0x8c]
jg 0x423460
mov edi, dword [esp + 0x24]
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x40], 0
mov eax, dword [esp + 0x44]
test eax, eax
je 0x42385a
cmp dword [esp + 0x44], 2
je 0x423892
cmp dword [ebp + 0x10], 1
jle 0x423a44
movzx ecx, byte [esi - 1]
jmp 0x4234e6
movzx ecx, byte [eax - 1]
mov esi, eax
cmp cl, 0x39
lea eax, [esi - 1]
jne 0x4239b4
cmp eax, ebx
jne 0x4234e0
mov edx, dword [esp + 0x20]
mov byte [ebx], 0x31
mov dword [esp + 0x24], 0x20
add edx, 2
mov dword [esp + 0x28], edx
jmp 0x42277f
cmp dword [esp + 0x40], 1
jne 0x422ecb
mov ecx, dword [esp + 0xb0]
mov eax, dword [ecx + 4]
add eax, 1
cmp dword [esp + 0xb4], eax
jle 0x422ecb
add dword [esp + 0x54], 1
add dword [esp + 0x4c], 1
mov dword [esp + 0x58], 1
jmp 0x422ecb
mov dword [esp + 0x64], 1
jmp 0x422ada
fstp st(0)
mov eax, dword [esp + 0x44]
test eax, eax
je 0x42373c
fstp st(0)
fstp st(0)
cmp dword [esp + 0x44], 1
je 0x423849
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], 0x10
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x4227a1
cmp dword [esp + 0x48], 0xe
mov dword [esp + 0x8c], 1
setbe dl
and edx, eax
mov eax, 1
jmp 0x422b0e
mov edx, 1
mov dword [esp + 0xc4], 1
jmp 0x422af4
mov ecx, dword [esp + 0x58]
mov dword [esp], ebp
mov dword [esp + 4], ecx
call fcn.004243e0
mov ebp, eax
jmp 0x422e89
mov ecx, eax
xor esi, esi
sub ecx, dword [esp + 0x58]
mov dword [esp + 0x58], eax
add dword [esp + 0x60], ecx
jmp 0x422dd1
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.004243e0
mov ebp, eax
jmp 0x422e89
fstp st(0)
fstp st(0)
fstp st(0)
mov dword [esp + 0x28], 2
xor edi, edi
mov dword [esp + 0x38], 0
jmp 0x422769
fld qword [esp + 0x68]
mov esi, ebx
fnstcw word [esp + 0x7e]
fmul qword [edx*8 + 0x483bd8]
mov dword [esp + 0x8c], 1
movzx eax, word [esp + 0x7e]
fld qword [esp + 0x38]
mov ah, 0xc
fld dword [0x483bb4]
fxch st(3)
mov word [esp + 0x7c], ax
jmp 0x423663
fmul st(2)
add eax, 1
mov dword [esp + 0x8c], eax
fld st(0)
fldcw word [esp + 0x7c]
fist dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov eax, dword [esp + 0x78]
test eax, eax
je 0x423685
fstp st(1)
mov dword [esp + 0x78], eax
fild dword [esp + 0x78]
fsubp st(1)
jmp 0x423687
fstp st(0)
lea ecx, [eax + 0x30]
mov byte [esi], cl
mov eax, dword [esp + 0x8c]
add esi, 1
cmp eax, edx
jne 0x423655
fstp st(2)
fxch st(1)
fld dword [0x483bc4]
fld st(2)
fadd st(1)
fxch st(2)
fucom st(2)
fnstsw ax
fstp st(2)
sahf
ja 0x422fca
fsubrp st(2)
fxch st(1)
fucomp st(1)
fnstsw ax
sahf
jbe 0x4226ef
fstp st(1)
fldz
fxch st(1)
fucompp
fnstsw ax
sahf
jp 0x423a83
jne 0x423a83
mov dword [esp + 0x24], 0
jmp 0x4236ed
movzx ecx, byte [eax - 1]
mov esi, eax
cmp cl, 0x30
lea eax, [esi - 1]
je 0x4236e7
mov edx, dword [esp + 0x74]
add edx, 1
mov dword [esp + 0x28], edx
jmp 0x4227a1
mov eax, dword [esp + 0xb0]
sub edi, dword [esp + 0x40]
mov ecx, dword [eax + 4]
mov eax, dword [esp + 0x50]
sub eax, edi
cmp eax, ecx
jl 0x4239d1
mov edx, dword [esp + 0x54]
add edi, 1
mov dword [esp + 0x8c], edi
mov esi, dword [esp + 0x58]
mov dword [esp + 0x50], edx
jmp 0x422df2
fadd st(0)
fucom st(1)
fnstsw ax
sahf
ja 0x423845
fxch st(1)
fucompp
fnstsw ax
sahf
jp 0x423758
je 0x423a6e
mov edx, dword [esp + 0x20]
movzx ecx, byte [esi - 1]
mov dword [esp + 0x24], 0x10
mov dword [esp + 0x74], edx
jmp 0x4236ed
mov ecx, dword [esp + 0x44]
mov edx, esi
mov dword [esp + 0x40], ebx
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x4c]
mov edi, dword [esp + 0x2c]
test ecx, ecx
je 0x423a04
cmp dword [ebp + 0x10], 1
jle 0x4239fa
cmp dword [esp + 0x44], 2
je 0x423a20
mov dword [esp + 0x24], ebx
mov ebx, edx
jmp 0x4237df
mov dword [esp], ebp
mov ebx, edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
call fcn.00424150
mov ebp, eax
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00423ce0
add eax, 0x30
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00424600
test eax, eax
jle 0x423a90
movzx ecx, byte [esp + 0x2c]
mov byte [esi], cl
add esi, 1
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
mov dword [esp], ebx
call fcn.00424150
cmp dword [esp + 0x40], ebx
mov edi, eax
jne 0x4237ac
mov dword [esp + 0x40], eax
jmp 0x4237ac
mov edx, dword [esp + 0x54]
xor edi, edi
sub edx, dword [esp + 0x48]
mov dword [esp + 0x8c], 0
mov dword [esp + 0x50], edx
jmp 0x422df2
fstp st(0)
fstp st(0)
mov edx, dword [esp + 0x20]
movzx ecx, byte [esi - 1]
mov dword [esp + 0x74], edx
jmp 0x422fd2
mov dword [esp], ebp
mov dword [esp + 4], 1
call fcn.00424500
mov ebp, eax
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00424600
cmp eax, 0
jg 0x4234d4
jne 0x423892
test byte [esp + 0x2c], 1
jne 0x4234d4
cmp dword [ebp + 0x10], 1
jle 0x423bd2
mov dword [esp + 0x24], 0x10
jmp 0x4238a8
mov esi, eax
cmp byte [esi - 1], 0x30
lea eax, [esi - 1]
je 0x4238a6
mov edx, dword [esp + 0x20]
add edx, 1
mov dword [esp + 0x28], edx
jmp 0x42277f
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4226a1
mov eax, dword [esp + 0x70]
test eax, eax
jle 0x4226f1
fld st(0)
mov edx, dword [esp + 0x70]
fmul dword [0x483bb4]
mov dword [esp + 0x74], 0xffffffff
fst qword [esp + 0x38]
fld st(0)
fmul dword [0x483bb8]
fadd dword [0x483bbc]
fstp qword [esp + 0x68]
sub dword [esp + 0x6c], 0x3400000
jmp 0x422bb0
mov eax, dword [edi + 4]
mov dword [esp], eax
call fcn.00424040
lea edx, [eax + 0xc]
mov esi, eax
mov eax, dword [edi + 0x10]
mov dword [esp], edx
lea ecx, [eax*4 + 8]
lea eax, [edi + 0xc]
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
call sub.msvcrt.dll_memcpy
mov dword [esp + 4], 1
mov dword [esp], esi
call fcn.00424500
mov edx, eax
jmp 0x423228
mov edx, esi
mov esi, dword [esp + 0x28]
mov dword [esp + 0x40], ebx
mov edi, edx
mov ebx, dword [esp + 0x4c]
jmp 0x4234b3
cmp dword [esp + 0x44], 2
je 0x4232a4
cmp dword [esp + 0x2c], 0x39
mov edx, esi
mov dword [esp + 0x40], ebx
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x4c]
je 0x423a5c
movzx eax, byte [esp + 0x2c]
mov edi, edx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], 0x20
add eax, 1
add ecx, 1
mov byte [esi], al
add esi, 1
mov dword [esp + 0x28], ecx
jmp 0x42277f
add ecx, 1
mov byte [eax], cl
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], 0x20
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x42277f
mov edi, dword [esp + 0x50]
mov esi, dword [esp + 0x58]
sub edi, ecx
mov ecx, dword [esp + 0x54]
add edi, 1
mov dword [esp + 0x8c], edi
mov dword [esp + 0x50], ecx
jmp 0x422df2
add ecx, 1
jmp 0x422fef
cmp dword [ebp + 0x14], 0
jne 0x423799
test eax, eax
jg 0x423aaf
mov dword [esp + 0x24], 0
cmp dword [ebp + 0x10], 1
jg 0x423a20
cmp dword [ebp + 0x14], 0
je 0x423a28
mov dword [esp + 0x24], 0x10
movzx eax, byte [esp + 0x2c]
mov edi, edx
mov byte [esi], al
mov ecx, dword [esp + 0x20]
add esi, 1
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x42277f
mov ecx, dword [ebp + 0x14]
test ecx, ecx
jne 0x4234d4
mov dword [esp + 0x24], 0
jmp 0x4238a8
mov byte [esi], 0x39
mov edi, edx
add esi, 1
mov ecx, 0x39
jmp 0x4234e6
mov edx, dword [esp + 0x20]
and ecx, 1
movzx ecx, byte [esi - 1]
mov dword [esp + 0x74], edx
jne 0x422fd2
mov dword [esp + 0x24], 0x10
jmp 0x4236ed
cmp dword [esp + 0x2c], 0x39
mov edx, ebx
mov ebx, dword [esp + 0x24]
je 0x423a5c
add dword [esp + 0x2c], 1
mov dword [esp + 0x24], 0x20
jmp 0x423a28
mov dword [esp], ebp
mov dword [esp + 4], 1
mov dword [esp + 0x18], edx
call fcn.00424500
mov ebp, eax
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00424600
mov edx, dword [esp + 0x18]
cmp eax, 0
jle 0x423bae
mov ecx, dword [esp + 0x34]
add ecx, 0x31
cmp edi, 0x39
mov dword [esp + 0x2c], ecx
je 0x423a5c
mov dword [esp + 0x24], 0x20
jmp 0x423a14
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x24], 0x10
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x4227a1
jne 0x42316b
fstp st(0)
fstp st(0)
mov edx, dword [esp + 0x20]
mov dword [esp + 0x24], 0
add edx, 1
mov dword [esp + 0x28], edx
jmp 0x4227a1
cmp dword [esp + 0x2c], 0x39
mov edx, esi
mov dword [esp + 0x40], ebx
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x4c]
je 0x423a5c
test edi, edi
jle 0x423be9
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x24], 0x20
add ecx, 0x31
mov dword [esp + 0x2c], ecx
jmp 0x423a28
mov dword [esp], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
call fcn.00424150
cmp dword [esp + 0x70], 0
mov edi, eax
jg 0x423ba1
cmp dword [esp + 0xc0], 2
jg 0x423bc5
mov edx, dword [esp + 0x70]
mov dword [esp + 0x48], edx
jmp 0x423204
jne 0x423af6
test byte [esp + 0x2c], 1
je 0x423af6
nop
jmp 0x423ae2
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x48], ecx
jmp 0x422f5b
cmp dword [ebp + 0x14], 0
mov dword [esp + 0x24], 0
jne 0x42389c
jmp 0x4238a8
cmp dword [ebp + 0x10], 1
mov dword [esp + 0x24], 0x10
jg 0x423a28
cmp dword [ebp + 0x14], 1
sbb eax, eax
not eax
and eax, 0x10
mov dword [esp + 0x24], eax
jmp 0x423a28
mov eax, 1
jmp 0x422ab0
mov dword [esp + 0x48], edx
jmp 0x422f5b