Function at 0x422af0
Capabilities:
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0xac
mov dword [esp + 0x14], eax
mov eax, dword [eax]
mov dword [esp + 0x10], edx
test eax, eax
mov dword [esp + 0x2c], ecx
sete al
test edx, edx
mov dword [esp + 0x74], 0
sete dl
mov dword [esp + 0x78], 0
or al, dl
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
jne 0x424351
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
call fcn.0042fa90
mov eax, dword [eax]
mov dword [esp + 0x4c], eax
call fcn.0042fa90
mov edi, dword [eax + 4]
mov dword [esp + 0x24], edi
test edi, edi
je 0x422b7a
xor eax, eax
cmp byte [edi], 0
cmovne eax, edi
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x10]
movzx eax, byte [eax]
test al, al
je 0x424196
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x30], 0
xor ebp, ebp
mov dword [esp + 0x18], 0
mov dword [esp + 0x38], ecx
mov dword [esp + 0x20], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x40], 0
test al, al
js 0x422db0
mov eax, dword [esp + 0x10]
movzx ebx, byte [eax]
lea esi, [eax + 1]
cmp bl, 0x25
je 0x422e28
mov dword [esp], ebx
call fcn.0042fa78
test eax, eax
jne 0x422cd0
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x78]
call fcn.00422a00
mov ebp, eax
cmp eax, 0xffffffff
je 0x42415b
mov eax, dword [esp + 0x18]
test eax, eax
je 0x422c26
mov dword [esp], ebp
call fcn.0042fa78
test eax, eax
jne 0x423000
cmp ebx, ebp
je 0x422e10
mov eax, dword [esp + 0x78]
lea ebx, [eax - 1]
mov eax, dword [esp + 0x14]
test byte [eax + 0x1004], 1
je 0x4238c0
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x78], ebx
mov eax, dword [ecx + 0x1008]
mov dword [ecx + eax*4 + 4], ebp
add eax, 1
mov dword [ecx + 0x1008], eax
cmp dword [esp + 0x20], 0xffffffff
je 0x423048
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x422c89
lea esi, [esi]
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call fcn.0042fa48
test ebx, ebx
jne 0x422c78
mov esi, dword [esp + 0x28]
mov dword [esp + 0x74], 0
test esi, esi
je 0x422cad
mov edi, dword [esp + 0x28]
mov eax, dword [edi]
mov dword [esp], eax
call fcn.0042fa48
mov dword [edi], 0
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.0042fa48
mov eax, dword [esp + 0x20]
add esp, 0xac
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 0x10], esi
mov dword [esp + 0x18], 1
mov eax, dword [esp + 0x10]
movzx eax, byte [eax]
test al, al
jne 0x422bcb
mov ebx, dword [esp + 0x18]
test ebx, ebx
je 0x422d4f
lea eax, [esp + 0x78]
mov esi, dword [esp + 0x14]
mov edi, eax
lea esi, [esi]
mov edx, edi
mov eax, esi
call fcn.00422a00
mov dword [esp], eax
mov ebx, eax
call fcn.0042fa78
test eax, eax
jne 0x422d00
cmp ebx, 0xffffffff
je 0x422d4f
mov eax, dword [esp + 0x78]
lea esi, [eax - 1]
mov eax, dword [esp + 0x14]
test byte [eax + 0x1004], 1
je 0x4251c9
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x78], esi
mov eax, dword [ecx + 0x1008]
mov dword [ecx + eax*4 + 4], ebx
add eax, 1
mov dword [ecx + 0x1008], eax
cmp dword [esp + 0x20], 0xffffffff
je 0x423048
mov ebx, dword [esp + 0x74]
mov esi, dword [esp + 0x80]
test ebx, ebx
je 0x422d81
lea esi, [esi]
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call fcn.0042fa48
test ebx, ebx
jne 0x422d70
mov edi, dword [esp + 0x28]
mov dword [esp + 0x74], 0
test edi, edi
je 0x422da1
mov eax, dword [edi]
mov dword [esp], eax
call fcn.0042fa48
mov dword [edi], 0
mov dword [esp], esi
call fcn.0042fa48
jmp 0x422cbc
mov edi, dword [esp + 0x10]
mov dword [esp], edi
call fcn.0042fae0
lea edx, [esp + 0x90]
mov dword [esp], edi
mov dword [esp + 8], edx
mov dword [esp + 4], eax
call fcn.0042f930
test eax, eax
jle 0x422bd3
mov esi, dword [esp + 0x10]
lea edi, [esp + 0x78]
lea ebx, [esi + eax]
mov eax, dword [esp + 0x14]
mov edx, edi
call fcn.00422a00
mov ebp, eax
cmp eax, 0xffffffff
je 0x42408c
movzx eax, byte [esi]
add esi, 1
cmp ebp, eax
jne 0x42408c
cmp esi, ebx
jne 0x422de6
jmp 0x422e18
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], esi
jmp 0x422cdc
mov eax, dword [esp + 0x10]
mov dword [esp + 0x44], 0
movzx edx, byte [eax + 1]
mov eax, edx
sub edx, 0x30
cmp edx, 9
jbe 0x423070
xor ebx, ebx
jmp 0x422e69
cmp al, 0x27
jne 0x422e80
mov edi, dword [esp + 0x24]
mov edx, ebx
movzx eax, byte [esi + 1]
or dh, 1
test edi, edi
cmovne ebx, edx
add esi, 1
cmp al, 0x2a
jne 0x422e50
movzx eax, byte [esi + 1]
or bl, 0x80
jmp 0x422e66
cmp al, 0x49
jne 0x422ea0
movzx eax, byte [esi + 1]
cmp al, 0x36
je 0x422f00
cmp al, 0x33
jne 0x422ef8
cmp byte [esi + 2], 0x32
je 0x422f18
or ebx, 4
add esi, 1
movzx edx, al
mov dword [esp + 0x34], 0
xor ecx, ecx
sub edx, 0x30
cmp edx, 9
ja 0x422f30
lea esi, [esi]
sub eax, 0x30
lea edx, [ecx + ecx*4]
add esi, 1
movsx eax, al
lea ecx, [eax + edx*2]
movzx edx, byte [esi]
mov eax, edx
sub edx, 0x30
cmp edx, 9
jbe 0x422eb8
mov dword [esp + 0x34], ecx
test ecx, ecx
je 0x422f30
test al, al
je 0x4240f6
sub eax, 0x4c
cmp al, 0x2e
ja case.0x422eee.1
movzx eax, al
jmp dword [eax*4 + 0x43d354]
or ebx, 4
jmp 0x422e66
cmp byte [esi + 2], 0x34
jne 0x422e9a
movzx eax, byte [esi + 3]
or ebx, 0xc
add esi, 2
jmp 0x422e66
movzx eax, byte [esi + 3]
or ebx, 4
add esi, 2
jmp 0x422e66
mov dword [esp + 0x34], 0xffffffff
jmp 0x422edc
mov dword [esp + 0x50], esi
movzx edx, byte [esi]
lea esi, cs:[esi]
nop
test dl, dl
je 0x424d4e
mov eax, dword [esp + 0x50]
mov esi, dword [esp + 0x18]
add eax, 1
mov dword [esp + 0x10], eax
test esi, esi
jne 0x423400
mov eax, edx
and eax, 0xffffffdf
cmp al, 0x43
je 0x423110
cmp dl, 0x5b
je 0x423110
mov ecx, 5
cmp dl, 0x6e
jne 0x423400
mov eax, 1
shl eax, cl
test eax, 0x90c1
jne case.0x42313e.51
cmp cl, 0xa
je 0x4232b9
cmp cl, 5
jne case.0x42313e.1
mov eax, ebx
and eax, 0x80
mov dword [esp + 0x18], eax
jne 0x423e17
mov eax, dword [esp + 0x78]
test bl, 8
je 0x424f8c
mov ebx, dword [esp + 0x44]
test ebx, ebx
jne 0x42554c
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
add ecx, 4
mov dword [esp + 0x38], ecx
mov dword [edx], eax
mov dword [edx + 4], 0
jmp 0x422cdc
mov edi, dword [esp + 0x14]
jmp 0x423020
mov dword [esp], eax
call fcn.0042fa78
test eax, eax
je 0x422c26
lea edx, [esp + 0x78]
mov eax, edi
call fcn.00422a00
mov ebp, eax
cmp eax, 0xffffffff
jne 0x423010
mov eax, dword [esp + 0x20]
add eax, 1
cmp eax, 1
ja 0x4230c0
lea esi, [esi]
lea edx, [esp + 0x80]
lea eax, [esp + 0x74]
call fcn.00422880
mov dword [esp + 0x20], 0xffffffff
mov eax, dword [esp + 0x20]
add esp, 0xac
pop ebx
pop esi
pop edi
pop ebp
ret
mov ebx, dword [esp + 0x10]
movsx edx, al
lea edi, [edx - 0x30]
movzx edx, byte [ebx + 2]
lea ecx, [ebx + 2]
mov dword [esp + 0x44], edi
mov ebx, edx
sub edx, 0x30
cmp edx, 9
ja 0x4230aa
nop
lea ebx, [edi + edi*4]
add ecx, 1
lea edi, [edx + ebx*2]
movzx edx, byte [ecx]
mov ebx, edx
sub edx, 0x30
cmp edx, 9
jbe 0x423090
mov dword [esp + 0x44], edi
cmp bl, 0x24
je 0x424148
mov dword [esp + 0x44], 0
jmp 0x422e46
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x422c89
lea esi, [esi]
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call fcn.0042fa48
test ebx, ebx
jne 0x4230d0
jmp 0x422c89
lea eax, [esi + 1]
movzx edx, byte [esi + 1]
or ebx, 4
mov dword [esp + 0x50], eax
jmp 0x422f50
mov edx, edi
mov ebp, 0xffffffff
mov byte [esp + 0x18], dl
call fcn.0042f9e8
movzx edx, byte [esp + 0x18]
mov dword [eax], esi
cmp dl, 0x63
je 0x423145
cmp dl, 0x73
je 0x4232b0
cmp dl, 0x67
jg 0x42395b
cmp dl, 0x24
jle case.0x42313e.1
lea eax, [edx - 0x25]
cmp al, 0x42
ja case.0x42313e.1
movzx eax, al
jmp dword [eax*4 + 0x43d410]
test bl, 4
jne case.0x42313e.30
mov ecx, dword [esp + 0x34]
mov eax, 1
cmp ecx, 0xffffffff
cmovne eax, ecx
mov dword [esp + 0x34], eax
mov eax, ebx
and eax, 0x80
mov dword [esp + 0x18], eax
jne 0x423dd5
test bh, 6
je 0x424ce8
mov edi, dword [esp + 0x44]
test edi, edi
jne 0x42571c
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x28], ecx
mov esi, dword [esp + 0x28]
test esi, esi
je 0x425682
mov ecx, dword [esp + 0x34]
mov eax, 0x400
cmp ecx, eax
cmovle eax, ecx
mov dword [esp], eax
mov dword [esp + 0x40], eax
call fcn.0042fa98
mov esi, eax
mov eax, dword [esp + 0x28]
mov dword [eax], esi
test esi, esi
je 0x425e01
mov edi, dword [esp + 0x74]
test edi, edi
je 0x4231e2
mov edx, dword [edi]
mov eax, edi
lea ecx, [edx + 1]
cmp edx, 0x1f
jbe 0x4231fe
mov dword [esp], 0x88
call fcn.0042fa98
mov ecx, 1
xor edx, edx
mov dword [eax], 0
mov dword [eax + 4], edi
mov dword [eax], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x74], eax
mov dword [eax + edx*4 + 8], ecx
mov eax, dword [esp + 0x14]
lea edi, [esp + 0x78]
mov edx, edi
call fcn.00422a00
mov ebp, eax
cmp eax, 0xffffffff
je 0x425750
and ebx, 0x600
mov dword [esp + 0x44], edi
mov eax, esi
mov edi, dword [esp + 0x34]
mov esi, ebx
mov ebx, ebp
jmp 0x42326a
sub edi, 1
mov byte [eax], bl
lea ebp, [eax + 1]
test edi, edi
jle 0x42469c
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x14]
call fcn.00422a00
mov ebx, eax
cmp eax, 0xffffffff
je 0x42469c
mov eax, ebp
test esi, esi
je 0x423240
mov ecx, dword [esp + 0x28]
mov edx, dword [ecx]
mov ecx, dword [esp + 0x40]
lea ebp, [edx + ecx]
cmp eax, ebp
jne 0x423240
lea eax, [edi - 1]
cmp ecx, edi
cmovl eax, ecx
lea ebp, [ecx + eax]
mov dword [esp + 4], ebp
mov dword [esp], edx
call fcn.0042fab8
test eax, eax
je 0x425db5
mov ecx, dword [esp + 0x28]
mov dword [ecx], eax
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x40], ebp
add eax, ecx
jmp 0x423240
test bl, 4
jne case.0x42313e.46
mov eax, ebx
and eax, 0x80
mov dword [esp + 0x18], eax
jne 0x423360
test bh, 6
je 0x424be9
mov ebp, dword [esp + 0x44]
test ebp, ebp
jne 0x42531f
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x28], ecx
mov edi, dword [esp + 0x28]
test edi, edi
je 0x425682
mov dword [esp], 0x64
call fcn.0042fa98
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x48], eax
mov dword [ecx], eax
test eax, eax
je 0x424539
mov esi, dword [esp + 0x74]
test esi, esi
je 0x42332e
mov edx, dword [esi]
mov eax, esi
lea ecx, [edx + 1]
cmp edx, 0x1f
jbe 0x42334a
mov dword [esp], 0x88
call fcn.0042fa98
mov ecx, 1
xor edx, edx
mov dword [eax], 0
mov dword [eax + 4], esi
mov dword [eax], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x74], eax
mov dword [eax + edx*4 + 8], ecx
mov dword [esp + 0x40], 0x64
mov eax, dword [esp + 0x14]
lea edi, [esp + 0x78]
mov edx, edi
call fcn.00422a00
mov ebp, eax
cmp eax, 0xffffffff
je 0x425657
mov esi, ebx
mov dword [esp + 0x50], ebx
mov ebp, dword [esp + 0x48]
mov ebx, eax
and esi, 0x600
mov dword [esp + 0x44], edi
mov edi, dword [esp + 0x18]
mov dword [esp + 0x48], esi
mov esi, dword [esp + 0x34]
jmp 0x4233d9
mov ecx, dword [esp + 0x28]
mov ebp, eax
mov edx, dword [ecx]
mov ecx, dword [esp + 0x40]
add ecx, edx
cmp eax, ecx
je 0x424ba3
test esi, esi
jle 0x4233c1
sub esi, 1
je 0x424446
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x14]
call fcn.00422a00
mov ebx, eax
cmp eax, 0xffffffff
je 0x424446
mov dword [esp], ebx
call fcn.0042fa78
test eax, eax
jne 0x424d10
test edi, edi
jne 0x4233b4
mov edx, dword [esp + 0x48]
mov byte [ebp], bl
lea eax, [ebp + 1]
test edx, edx
jne 0x42339e
mov ebp, eax
jmp 0x4233b4
mov byte [esp + 0x18], dl
lea edi, [esp + 0x78]
call fcn.0042f9e8
mov esi, dword [eax]
call fcn.0042f9e8
cmp ebp, 0xffffffff
movzx edx, byte [esp + 0x18]
mov dword [eax], 0
je 0x424154
mov dword [esp + 0x18], ebx
mov ebp, edx
nop
mov eax, dword [esp + 0x14]
mov edx, edi
call fcn.00422a00
mov ebx, eax
cmp eax, 0xffffffff
je 0x4234a0
mov dword [esp], eax
call fcn.0042fa78
test eax, eax
jne 0x423430
mov edx, ebp
mov ebp, ebx
mov ebx, dword [esp + 0x18]
mov byte [esp + 0x18], dl
call fcn.0042f9e8
movzx edx, byte [esp + 0x18]
mov dword [eax], esi
mov eax, dword [esp + 0x78]
lea esi, [eax - 1]
mov eax, dword [esp + 0x14]
test byte [eax + 0x1004], 1
je 0x424c5a
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x78], esi
mov eax, dword [ecx + 0x1008]
mov dword [ecx + eax*4 + 4], ebp
add eax, 1
mov dword [ecx + 0x1008], eax
jmp 0x423110
mov ebx, dword [esp + 0x18]
mov edi, ebp
jmp 0x4234c4
mov dword [esp], 0xffffffff
call fcn.0042fa78
test eax, eax
je 0x4230f9
call fcn.0042f9e8
cmp dword [eax], 4
jne 0x4234b0
mov eax, dword [esp + 0x20]
add eax, 1
cmp eax, 1
jbe 0x423048
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x422c89
lea esi, [esi]
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call fcn.0042fa48
test ebx, ebx
jne 0x4234f0
jmp 0x422c89
mov ecx, dword [esp + 0x34]
mov eax, 1
cmp ecx, 0xffffffff
cmovne eax, ecx
mov dword [esp + 0x34], eax
mov eax, ebx
and eax, 0x80
mov dword [esp + 0x18], eax
jne 0x4235c8
test bh, 6
je 0x423930
mov edx, dword [esp + 0x44]
test edx, edx
jne 0x424c20
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x28], ecx
mov eax, dword [esp + 0x28]
test eax, eax
je 0x425682
mov ecx, dword [esp + 0x34]
mov eax, 0x400
cmp ecx, eax
cmovle eax, ecx
mov dword [esp + 0x40], eax
add eax, eax
mov dword [esp], eax
call fcn.0042fa98
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x3c], eax
mov dword [ecx], eax
test eax, eax
je 0x424539
mov esi, dword [esp + 0x74]
test esi, esi
je 0x42359e
mov edx, dword [esi]
mov eax, esi
lea ecx, [edx + 1]
cmp edx, 0x1f
jbe 0x4235ba
mov dword [esp], 0x88
call fcn.0042fa98
mov ecx, 1
xor edx, edx
mov dword [eax], 0
mov dword [eax + 4], esi
mov dword [eax], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x74], eax
mov dword [eax + edx*4 + 8], ecx
mov eax, dword [esp + 0x14]
lea edi, [esp + 0x78]
mov edx, edi
call fcn.00422a00
mov ebp, eax
cmp eax, 0xffffffff
je 0x42541b
mov dword [esp + 0x44], ebx
lea eax, [esp + 0x98]
mov esi, ebp
mov dword [esp + 0x98], 0
mov ebp, eax
mov dword [esp + 0x9c], 0
mov eax, esi
mov byte [esp + 0x8b], al
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x423698
test dword [esp + 0x44], 0x600
je 0x423698
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x40]
mov eax, dword [eax]
lea ebx, [ecx + ecx]
lea ecx, [eax + ebx]
cmp dword [esp + 0x3c], ecx
jne 0x423698
mov ecx, dword [esp + 0x34]
lea edx, [ecx - 1]
mov dword [esp + 0x3c], edx
mov edx, dword [esp + 0x40]
cmp edx, ecx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x3c], ebp
mov ebp, edi
mov edi, esi
mov esi, ebx
cmovle ecx, edx
add edx, ecx
mov ebx, edx
lea ecx, [ebx + ebx]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0042fab8
test eax, eax
je 0x425bd3
mov ecx, dword [esp + 0x28]
mov edx, ebx
mov ebx, esi
mov esi, edi
mov dword [esp + 0x40], edx
mov edi, ebp
mov ebp, dword [esp + 0x3c]
mov dword [ecx], eax
add eax, ebx
mov dword [esp + 0x3c], eax
lea esi, [esi]
mov eax, dword [esp + 0x18]
xor ebx, ebx
test eax, eax
mov eax, edi
cmove ebx, dword [esp + 0x3c]
mov edi, esi
mov esi, eax
lea eax, [esp + 0x8b]
mov dword [esp + 0xc], ebp
mov dword [esp + 8], 1
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0042f790
cmp eax, 0xfffffffe
jne 0x424218
mov eax, dword [esp + 0x14]
mov edx, esi
call fcn.00422a00
mov edi, eax
cmp eax, 0xffffffff
je 0x423842
mov byte [esp + 0x8b], al
jmp 0x4236ab
mov eax, ebx
and eax, 0x80
mov dword [esp + 0x18], eax
jne 0x423799
test bh, 6
je 0x4238d7
mov ebp, dword [esp + 0x44]
test ebp, ebp
jne 0x424c8b
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x28], ecx
mov edi, dword [esp + 0x28]
test edi, edi
je 0x425682
mov dword [esp], 0xc8
call fcn.0042fa98
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x3c], eax
mov dword [ecx], eax
test eax, eax
je 0x424539
mov esi, dword [esp + 0x74]
test esi, esi
je 0x423767
mov edx, dword [esi]
mov eax, esi
lea ecx, [edx + 1]
cmp edx, 0x1f
jbe 0x423783
mov dword [esp], 0x88
call fcn.0042fa98
mov ecx, 1
xor edx, edx
mov dword [eax], 0
mov dword [eax + 4], esi
mov dword [eax], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x74], eax
mov dword [eax + edx*4 + 8], ecx
mov dword [esp + 0x40], 0x64
mov eax, dword [esp + 0x14]
lea edi, [esp + 0x78]
mov edx, edi
call fcn.00422a00
mov ebp, eax
cmp eax, 0xffffffff
je 0x425625
mov dword [esp + 0x44], ebx
lea eax, [esp + 0x98]
mov esi, ebp
mov dword [esp + 0x98], 0
mov ebp, eax
mov dword [esp + 0x9c], 0
mov dword [esp], esi
call fcn.0042fa78
test eax, eax
jne 0x42557e
mov edx, dword [esp + 0x18]
mov ecx, esi
test edx, edx
cmove eax, dword [esp + 0x3c]
mov ebx, eax
mov eax, edi
mov edi, esi
mov esi, eax
lea eax, [esp + 0x8b]
mov dword [esp + 0xc], ebp
mov dword [esp + 8], 1
mov dword [esp + 4], eax
mov dword [esp], ebx
mov byte [esp + 0x8b], cl
call fcn.0042f790
cmp eax, 0xfffffffe
jne 0x4241a5
mov eax, dword [esp + 0x14]
mov edx, esi
call fcn.00422a00
mov edi, eax
cmp eax, 0xffffffff
je 0x42387e
mov ecx, eax
jmp 0x4237fd
call fcn.0042f9e8
cmp dword [esp + 0x20], 0xffffffff
mov dword [eax], 0x2a
je 0x423048
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x422c89
lea esi, [esi]
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call fcn.0042fa48
test ebx, ebx
jne 0x423868
jmp 0x422c89
call fcn.0042f9e8
cmp dword [esp + 0x20], 0xffffffff
mov dword [eax], 0x2a
je 0x423048
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x422c89
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call fcn.0042fa48
test ebx, ebx
jne 0x4238a0
jmp 0x422c89
mov eax, dword [eax]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.0042fb08
mov dword [esp + 0x78], ebx
jmp 0x422c61
mov esi, dword [esp + 0x44]
test esi, esi
jne 0x424ca8
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0x3c]
test ecx, ecx
jne 0x423799
jmp 0x42390c
fstp st(0)
jmp 0x42390c
fstp st(0)
jmp 0x42390c
fstp st(0)
lea eax, [esp + 0x80]
mov ecx, dword [esp + 0x28]
lea edx, [esp + 0x74]
mov dword [esp], eax
mov eax, dword [esp + 0x20]
call fcn.00422970
mov dword [esp + 0x20], eax
jmp 0x422cbc
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x424c3d
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], ecx
mov eax, dword [esp + 0x3c]
test eax, eax
jne 0x4235c8
jmp 0x42390c
lea ecx, [edx - 0x69]
cmp cl, 0xf
jbe 0x422f93
cmp dword [esp + 0x20], 0xffffffff
je 0x423048
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x422c89
nop
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call fcn.0042fa48
test ebx, ebx
jne 0x423980
jmp 0x422c89
lea eax, [esi + 1]
movzx edx, byte [esi + 1]
or ebx, 0xc
mov dword [esp + 0x50], eax
jmp 0x422f50
movzx edx, byte [esi + 1]
mov eax, edx
and eax, 0xfffffff7
cmp al, 0x53
je 0x4239bf
cmp dl, 0x73
jne case.0x422eee.1
lea eax, [esi + 1]
or bh, 2
mov dword [esp + 0x50], eax
jmp 0x422f58
movzx edx, byte [esi + 1]
cmp dl, 0x68
je 0x424420
lea eax, [esi + 1]
or ebx, 2
mov dword [esp + 0x50], eax
jmp 0x422f50
lea eax, [esi + 1]
movzx edx, byte [esi + 1]
or ebx, 8
mov dword [esp + 0x50], eax
jmp 0x422f50
movzx edx, byte [esi + 1]
cmp dl, 0x6c
je 0x424433
lea eax, [esi + 1]
or ebx, 4
mov dword [esp + 0x50], eax
jmp 0x422f50
movzx edx, byte [esi + 1]
cmp dl, 0x6c
je 0x42440a
lea eax, [esi + 1]
or bh, 4
mov dword [esp + 0x50], eax
jmp 0x422f50
sub edx, 0x58
cmp dl, 0x20
ja case.0x423a40.1
movzx edx, dl
jmp dword [edx*4 + 0x43d51c]
mov dword [esp + 0x30], 0xa
or ebx, 0x10
mov eax, dword [esp + 0x14]
lea edi, [esp + 0x78]
mov edx, edi
call fcn.00422a00
mov ebp, eax
cmp eax, 0xffffffff
je 0x425657
lea eax, [eax - 0x2b]
mov dword [esp + 0x18], 0
and eax, 0xfffffffd
je 0x424d7b
mov esi, dword [esp + 0x34]
test esi, esi
setne al
cmp ebp, 0x30
jne 0x424760
test al, al
je 0x424760
mov ebp, dword [esp + 0x18]
lea ecx, [ebp + 1]
mov eax, ebp
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x80]
test esi, esi
jle 0x424e70
sub esi, 1
mov dword [esp + 0x34], esi
lea esi, [esp + 0x7c]
mov edx, esi
call fcn.00422900
mov edx, edi
mov byte [eax + ebp], 0x30
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x14]
call fcn.00422a00
mov ebp, eax
mov eax, dword [esp + 0x34]
test eax, eax
jne 0x424e99
mov edx, dword [esp + 0x30]
test edx, edx
je 0x425c66
mov eax, dword [esp + 0x50]
mov dword [esp + 0x18], eax
cmp dword [esp + 0x18], 1
jne 0x423b24
mov eax, dword [esp + 0x80]
movzx eax, byte [eax]
sub eax, 0x2b
test al, 0xfd
je 0x42487a
mov dword [esp + 0x18], 1
cmp ebp, 0xffffffff
je 0x423b5c
mov eax, dword [esp + 0x78]
lea esi, [eax - 1]
mov eax, dword [esp + 0x14]
test byte [eax + 0x1004], 1
je 0x425365
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x78], esi
mov eax, dword [ecx + 0x1008]
mov dword [ecx + eax*4 + 4], ebp
add eax, 1
mov dword [ecx + 0x1008], eax
mov ecx, dword [esp + 0x80]
lea esi, [esp + 0x7c]
mov edi, dword [esp + 0x18]
mov edx, esi
mov eax, edi
call fcn.00422900
mov ecx, ebx
mov dword [esp + 0x80], eax
mov esi, eax
mov byte [eax + edi], 0
mov eax, ebx
and eax, 0x10
and ecx, 8
mov dword [esp + 0x18], ecx
je 0x4246e7
test eax, eax
mov eax, dword [esp + 0x30]
mov dword [esp], esi
mov dword [esp + 8], eax
lea eax, [esp + 0x84]
mov dword [esp + 4], eax
je 0x424edc
call fcn.0042f000
cmp esi, dword [esp + 0x84]
je 0x42390c
and ebx, 0x80
mov dword [esp + 0x18], 0
jne 0x422cdc
mov edi, dword [esp + 0x44]
test edi, edi
jne 0x425566
mov edi, dword [esp + 0x38]
mov ecx, dword [edi]
add edi, 4
mov dword [esp + 0x38], edi
mov dword [ecx], eax
mov dword [ecx + 4], edx
add dword [esp + 0x20], 1
mov dword [esp + 0x18], 0
jmp 0x422cdc
mov ecx, dword [esp + 0x34]
xor eax, eax
lea edi, [esp + 0x78]
mov edx, edi
test ecx, ecx
setg al
sub ecx, eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x34], ecx
call fcn.00422a00
mov dword [esp + 0x64], eax
cmp eax, 0xffffffff
je 0x4259bc
mov eax, dword [esp + 0x64]
sub eax, 0x2b
and eax, 0xfffffffd
jne 0x424a24
mov ecx, dword [esp + 0x34]
test ecx, ecx
je 0x42390c
mov eax, dword [esp + 0x14]
mov edx, edi
call fcn.00422a00
mov ebp, eax
cmp eax, 0xffffffff
je 0x42390c
mov ecx, dword [esp + 0x34]
xor eax, eax
test ecx, ecx
setg al
sub ecx, eax
mov dword [esp + 0x34], ecx
mov dword [esp], ebp
call fcn.0042fb00
cmp eax, 0x6e
je 0x42544d
cmp eax, 0x69
je 0x425080
mov eax, dword [esp + 0x34]
mov byte [esp + 0x54], 0x65
mov dword [esp + 0x18], 0
test eax, eax
je 0x423cb1
cmp ebp, 0x30
je 0x425387
mov eax, ebx
mov dword [esp + 0x60], ebx
mov ebx, ebp
and eax, 0x100
mov dword [esp + 0x50], edi
mov edi, dword [esp + 0x34]
mov byte [esp + 0x58], 0
mov byte [esp + 0x5c], 0
mov dword [esp + 0x68], eax
jmp 0x423d6d
test byte [esp + 0x60], 0x40
je 0x423cf0
mov dword [esp], ebx
call fcn.0042fa88
test eax, eax
jne 0x424080
mov eax, dword [esp + 0x18]
test eax, eax
je 0x423d0a
mov dword [esp], ebx
call fcn.0042fb00
cmp byte [esp + 0x54], al
je 0x4244a2
mov eax, dword [esp + 0x4c]
movzx eax, byte [eax]
test edi, edi
jle 0x424126
cmp byte [esp + 0x5c], 0
je 0x424282
mov ecx, edi
test al, al
je 0x423d4c
mov esi, dword [esp + 0x24]
test esi, esi
je 0x425182
cmp byte [esi], 0
jne 0x425182
test edi, edi
cmovg edi, ecx
test edi, edi
je 0x4245d8
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x14]
call fcn.00422a00
mov ebx, eax
cmp eax, 0xffffffff
je 0x4245d8
xor eax, eax
test edi, edi
setg al
sub edi, eax
lea eax, [ebx - 0x30]
cmp eax, 9
jbe 0x424080
cmp byte [esp + 0x58], 0
je 0x423cd9
mov ecx, dword [esp + 0x80]
mov esi, dword [esp + 0x18]
movzx eax, byte [esp + 0x54]
cmp byte [ecx + esi - 1], al
jne 0x423d0a
lea eax, [ebx - 0x2b]
and eax, 0xfffffffd
jne 0x423d0a
lea esi, [esi]
mov esi, dword [esp + 0x18]
lea edx, [esp + 0x7c]
mov eax, esi
call fcn.00422900
mov dword [esp + 0x80], eax
mov byte [eax + esi], bl
lea eax, [esi + 1]
mov dword [esp + 0x18], eax
jmp 0x423d44
mov eax, dword [esp + 0x14]
lea edi, [esp + 0x78]
mov edx, edi
call fcn.00422a00
mov ebp, eax
cmp eax, 0xffffffff
je 0x425750
mov esi, dword [esp + 0x34]
mov ebx, dword [esp + 0x14]
mov eax, ebp
jmp 0x423e0e
mov edx, edi
mov eax, ebx
call fcn.00422a00
cmp eax, 0xffffffff
je 0x423e15
sub esi, 1
test esi, esi
jg 0x423e00
mov ebp, eax
mov dword [esp + 0x18], 0
jmp 0x422cdc
mov dword [esp + 0x30], 0x10
jmp case.0x423a40.1
mov eax, ebx
mov ecx, ebx
and eax, 0x80
and ecx, 4
mov dword [esp + 0x54], eax
mov dword [esp + 0x18], ecx
je 0x4244dd
test eax, eax
jne 0x423ee9
test bh, 6
je 0x425145
mov edx, dword [esp + 0x44]
test edx, edx
jne 0x42583f
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x28], ecx
mov eax, dword [esp + 0x28]
test eax, eax
je 0x425682
mov dword [esp], 0xc8
call fcn.0042fa98
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x3c], eax
mov dword [ecx], eax
test eax, eax
je 0x424539
mov esi, dword [esp + 0x74]
test esi, esi
je 0x423eb7
mov edx, dword [esi]
mov eax, esi
lea ecx, [edx + 1]
cmp edx, 0x1f
jbe 0x423ed3
mov dword [esp], 0x88
call fcn.0042fa98
mov ecx, 1
xor edx, edx
mov dword [eax], 0
mov dword [eax + 4], esi
mov dword [esp + 0x74], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x28]
mov dword [eax + edx*4 + 8], ecx
mov dword [esp + 0x40], 0x64
mov eax, dword [esp + 0x50]
mov esi, dword [esp + 0x80]
movzx ebp, byte [eax + 1]
add eax, 2
mov ecx, ebp
cmp cl, 0x5e
mov ecx, dword [esp + 0x34]
cmovne eax, dword [esp + 0x10]
test ecx, ecx
mov dword [esp + 0x10], eax
mov eax, 0x7fffffff
cmovns eax, ecx
cmp dword [esp + 0x7c], 0xff
mov dword [esp + 0x34], eax
ja 0x423f4e
mov dword [esp + 0x7c], 0x100
test esi, esi
je 0x423f39
mov dword [esp], esi
call fcn.0042fa48
mov dword [esp], 0x100
call fcn.0042fa98
mov dword [esp + 0x80], eax
mov esi, eax
lea edi, [esi + 4]
mov ecx, esi
xor eax, eax
mov dword [esi], 0
mov dword [esi + 0xfc], 0
and edi, 0xfffffffc
sub ecx, edi
add ecx, 0x100
shr ecx, 2
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x10]
movsx edx, byte [eax]
movzx eax, dl
cmp dl, 0x5d
je 0x4245c1
cmp dl, 0x2d
je 0x4245c1
add dword [esp + 0x10], 1
test al, al
je 0x424570
mov edx, dword [esp + 0x10]
jmp 0x423fbe
mov byte [esi + eax], 1
mov ebx, dword [esp + 0x10]
movzx eax, byte [edx]
add edx, 1
test al, al
je 0x424570
cmp al, 0x5d
je 0x424a2d
mov dword [esp + 0x10], ebx
cmp al, 0x2d
jne 0x423fa8
movzx ecx, byte [edx]
test cl, cl
je 0x423fa8
cmp cl, 0x5d
je 0x423fa8
movzx edi, byte [edx - 2]
mov ebx, edi
cmp cl, bl
jb 0x423fa8
cmp bl, cl
jae 0x42581a
mov ebx, dword [esp + 0x10]
mov ecx, edi
movzx eax, cl
add ecx, 1
mov byte [esi + eax], 1
movzx eax, byte [edx]
cmp cl, al
jb 0x423ff2
jmp 0x423fb3
mov eax, dword [esp + 0x14]
lea edi, [esp + 0x78]
mov edx, edi
call fcn.00422a00
mov ebp, eax
cmp eax, 0xffffffff
je 0x425657
cmp eax, 0x25
je 0x423e17
mov dword [esp], 1
mov edx, dword [esp + 0x14]
mov ecx, edi
call fcn.00422a90
jmp 0x42390c
mov dword [esp + 0x30], 0
or ebx, 0x10
jmp case.0x423a40.1
mov dword [esp + 0x30], 0xa
jmp case.0x423a40.1
and ebx, 0xfffffff1
mov dword [esp + 0x30], 0x10
or ebx, 0x24
jmp case.0x423a40.1
mov dword [esp + 0x30], 8
jmp case.0x423a40.1
mov ecx, dword [esp + 0x80]
jmp 0x423db0
mov eax, dword [esp + 0x78]
lea ebx, [eax - 1]
mov eax, dword [esp + 0x14]
test byte [eax + 0x1004], 1
je 0x424ddf
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x78], ebx
mov eax, dword [ecx + 0x1008]
mov dword [ecx + eax*4 + 4], ebp
add eax, 1
mov dword [ecx + 0x1008], eax
mov eax, dword [esp + 0x20]
add eax, 1
cmp eax, 1
jbe 0x423048
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x422c89
lea esi, cs:[esi]
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call fcn.0042fa48
test ebx, ebx
jne 0x4240e0
jmp 0x422c89
cmp dword [esp + 0x20], 0xffffffff
je 0x423048
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x422c89
lea esi, [esi]
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call fcn.0042fa48
test ebx, ebx
jne 0x424110
jmp 0x422c89
cmp byte [esp + 0x5c], 0
je 0x424692
mov ecx, 0x7fffffff
test al, al
jne 0x423d2a
mov byte [esp + 0x5c], 1
jmp 0x423d44
movzx eax, byte [ecx + 1]
lea esi, [ecx + 1]
jmp 0x422e46
mov edi, edx
jmp 0x4234c4
mov eax, dword [esp + 0x20]
add eax, 1
cmp eax, 1
jbe 0x423048
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x422c89
lea esi, cs:[esi]
nop
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call fcn.0042fa48
test ebx, ebx
jne 0x424180
jmp 0x422c89
mov dword [esp + 0x20], 0
xor esi, esi
jmp 0x422da1
mov ecx, esi
mov esi, edi
mov edi, ecx
cmp eax, 1
jne 0x4257c2
mov eax, dword [esp + 0x18]
add dword [esp + 0x3c], 2
mov ebx, dword [esp + 0x3c]
test eax, eax
jne 0x4241e6
test dword [esp + 0x44], 0x600
je 0x4241e6
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x28]
lea ecx, [eax + eax]
mov eax, dword [edx]
add eax, ecx
cmp ebx, eax
je 0x4257d2
mov eax, dword [esp + 0x34]
test eax, eax
jle 0x4241f7
sub eax, 1
mov dword [esp + 0x34], eax
je 0x42420d
mov eax, dword [esp + 0x14]
mov edx, edi
call fcn.00422a00
mov esi, eax
cmp eax, 0xffffffff
jne 0x4237d8
mov ebp, esi
jmp 0x4255b3
mov ecx, esi
mov esi, edi
mov edi, ecx
cmp eax, 1
jne 0x4257c2
sub dword [esp + 0x34], 1
mov eax, dword [esp + 0x34]
add dword [esp + 0x3c], 2
test eax, eax
jle 0x42424f
mov eax, dword [esp + 0x14]
mov edx, ecx
call fcn.00422a00
mov esi, eax
cmp eax, 0xffffffff
jne 0x423607
cmp dword [esp + 0x18], 0
mov ebp, esi
jne 0x423e17
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
lea ecx, [eax + eax]
mov eax, dword [esp + 0x28]
call fcn.00422840
add dword [esp + 0x20], 1
mov dword [esp + 0x28], 0
jmp 0x422cdc
mov ecx, edi
movzx edx, al
mov ebp, dword [esp + 0x4c]
cmp edx, ebx
jne 0x42436d
mov dword [esp + 0x34], edi
mov edx, ebx
mov edi, dword [esp + 0x50]
mov ebx, ecx
jmp 0x4242d7
test ebx, ebx
je 0x424dc5
mov eax, dword [esp + 0x14]
mov edx, edi
call fcn.00422a00
mov edx, eax
cmp eax, 0xffffffff
je 0x424361
movzx esi, byte [ebp]
sub ebx, 1
mov eax, esi
cmp edx, esi
jne 0x424dd2
mov esi, ebp
add ebp, 1
cmp byte [ebp], 0
jne 0x4242a8
mov edi, dword [esp + 0x34]
mov ecx, ebx
mov ebx, edx
mov edx, dword [esp + 0x4c]
cmp byte [edx], 0
je 0x425ba0
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x80]
mov dword [esp + 0x18], ebx
mov ebx, ecx
sub edx, esi
mov ecx, eax
mov ebp, edx
nop
lea edx, [esp + 0x7c]
mov eax, esi
call fcn.00422900
mov ecx, eax
mov dword [esp + 0x80], eax
mov eax, esi
add esi, 1
movzx edx, byte [ebp + esi - 1]
mov byte [ecx + eax], dl
cmp byte [ebp + esi], 0
jne 0x424310
mov ecx, ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x18], esi
test edi, edi
jle 0x42413e
mov edi, ecx
jmp 0x42413e
call fcn.0042f9e8
mov dword [eax], 0x16
jmp 0x423058
mov ecx, ebx
mov edi, dword [esp + 0x34]
mov ebx, eax
movzx eax, byte [esi + 1]
test al, al
je 0x4242ea
mov eax, dword [esp + 0x68]
test eax, eax
je 0x423d2a
mov eax, dword [esp + 0x4c]
mov esi, dword [esp + 0x24]
sub ebp, eax
xor eax, eax
test ebp, ebp
jle 0x425931
mov dword [esp + 0x34], ebx
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x6c], ecx
mov ebx, dword [esp + 0x24]
jmp 0x4243b2
add esi, 1
mov eax, esi
sub eax, ebx
cmp eax, ebp
jge 0x4243ba
movzx ecx, byte [edx + eax]
cmp byte [esi], cl
je 0x4243a7
mov ebx, dword [esp + 0x34]
mov ecx, dword [esp + 0x6c]
cmp ebp, eax
jne 0x423d36
movzx eax, byte [esi]
cmp ebx, eax
jne 0x423d36
mov ebp, ecx
jmp 0x4243fb
test ebp, ebp
je 0x424403
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x14]
call fcn.00422a00
mov ebx, eax
cmp eax, 0xffffffff
je 0x424403
movzx eax, byte [esi]
sub ebp, 1
cmp ebx, eax
jne 0x424403
add esi, 1
cmp byte [esi], 0
jne 0x4243d9
mov ecx, ebp
jmp 0x423d36
lea eax, [esi + 2]
movzx edx, byte [esi + 2]
or ebx, 0x404
mov dword [esp + 0x50], eax
jmp 0x422f50
lea eax, [esi + 2]
movzx edx, byte [esi + 2]
or ebx, 1
mov dword [esp + 0x50], eax
jmp 0x422f50
lea eax, [esi + 2]
movzx edx, byte [esi + 2]
or ebx, 0xc
mov dword [esp + 0x50], eax
jmp 0x422f50
mov dword [esp + 0x48], ebp
mov ebp, ebx
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x423e17
mov eax, dword [esp + 0x48]
mov edi, dword [esp + 0x28]
mov byte [eax], 0
lea ebx, [eax + 1]
test edi, edi
je 0x42448c
mov eax, dword [edi]
test eax, eax
je 0x42448c
mov edx, ebx
sub edx, eax
cmp dword [esp + 0x40], edx
je 0x42448c
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.0042fab8
test eax, eax
je 0x42448c
mov dword [edi], eax
add dword [esp + 0x20], 1
mov dword [esp + 0x48], ebx
mov dword [esp + 0x28], 0
jmp 0x422cdc
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x80]
lea edx, [esp + 0x7c]
mov eax, esi
call fcn.00422900
movzx ecx, byte [esp + 0x54]
mov byte [esp + 0x58], 1
mov dword [esp + 0x80], eax
mov byte [eax + esi], cl
lea eax, [esi + 1]
mov dword [esp + 0x18], eax
mov byte [esp + 0x5c], 1
jmp 0x423d44
mov eax, dword [esp + 0x54]
test eax, eax
jne 0x423ee9
test bh, 6
je 0x42504d
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x425a1e
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x28], ecx
mov ebp, dword [esp + 0x28]
test ebp, ebp
je 0x425682
mov dword [esp], 0x64
call fcn.0042fa98
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x48], eax
mov dword [ecx], eax
test eax, eax
jne 0x423ea3
test bh, 4
mov eax, 0xffffffff
cmove eax, dword [esp + 0x20]
lea edx, [esp + 0x74]
mov edi, eax
lea eax, [esp + 0x80]
mov dword [esp], eax
mov eax, edi
call fcn.00422970
mov dword [esp + 0x20], eax
jmp 0x422cbc
cmp dword [esp + 0x20], 0xffffffff
je 0x423048
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x424594
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call fcn.0042fa48
test ebx, ebx
jne 0x424583
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x74], 0
test ebx, ebx
je 0x422da1
mov edi, dword [esp + 0x28]
mov eax, dword [edi]
mov dword [esp], eax
call fcn.0042fa48
mov dword [edi], 0
jmp 0x422da1
mov ecx, dword [esp + 0x10]
mov byte [esi + edx], 1
add ecx, 1
movzx eax, byte [ecx]
mov dword [esp + 0x10], ecx
jmp 0x423f91
mov ebp, ebx
mov ebx, dword [esp + 0x60]
mov edi, dword [esp + 0x18]
test edi, edi
je 0x42390c
test bl, 0x40
je 0x4245fa
cmp dword [esp + 0x18], 2
je 0x42390c
lea esi, [esp + 0x7c]
mov edx, esi
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x80]
mov eax, esi
call fcn.00422900
mov byte [eax + esi], 0
mov edi, eax
mov esi, ebx
mov dword [esp + 0x80], eax
lea eax, [esp + 0x84]
and esi, 0x80
mov dword [esp + 4], eax
mov dword [esp], edi
test bl, 8
jne 0x42500a
and ebx, 4
je 0x424fc3
call fcn.004260f0
test esi, esi
jne 0x424cc5
cmp edi, dword [esp + 0x84]
je 0x423902
cmp dword [esp + 0x64], 0x2d
fstp qword [esp + 0x18]
fld qword [esp + 0x18]
jne 0x424672
fchs
mov ebx, dword [esp + 0x44]
test ebx, ebx
jne 0x4258a4
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx]
fstp qword [eax]
lea eax, [ecx + 4]
mov dword [esp + 0x38], eax
jmp 0x423bf7
mov ecx, 0x7fffffff
jmp 0x424284
mov eax, dword [esp + 0x28]
mov dword [esp + 0x48], ebp
mov ebp, ebx
test eax, eax
je 0x424270
mov edi, dword [esp + 0x28]
mov eax, dword [edi]
test eax, eax
je 0x424270
mov edx, dword [esp + 0x48]
sub edx, eax
cmp dword [esp + 0x40], edx
je 0x424270
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.0042fab8
test eax, eax
je 0x424270
mov dword [edi], eax
jmp 0x424270
test eax, eax
mov eax, dword [esp + 0x30]
mov dword [esp], esi
mov dword [esp + 8], eax
lea eax, [esp + 0x84]
mov dword [esp + 4], eax
je 0x424df6
call fcn.0042faf0
cmp esi, dword [esp + 0x84]
je 0x42390c
test bl, 0x80
jne 0x422cdc
test bl, 4
jne 0x4252ff
test bl, 2
jne 0x42599b
and bl, 1
je 0x425bef
cmp dword [esp + 0x44], 0
jne 0x425b85
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
add ecx, 4
mov dword [esp + 0x38], ecx
mov byte [edx], al
jmp 0x423bf7
mov ecx, dword [esp + 0x30]
mov edx, 0xa
test ecx, ecx
cmovne edx, ecx
mov dword [esp + 0x30], edx
cmp ebp, 0xffffffff
je 0x425ba9
test al, al
je 0x425ba9
mov eax, ebx
mov dword [esp + 0x58], ebx
mov ebx, ebp
and eax, 0x100
mov dword [esp + 0x50], edi
mov edi, dword [esp + 0x34]
mov dword [esp + 0x54], eax
jmp 0x424801
lea eax, [ebx - 0x30]
cmp eax, 9
ja 0x424893
mov ecx, dword [esp + 0x30]
lea eax, [ebx - 0x2f]
cmp eax, ecx
jg 0x424814
mov eax, dword [esp + 0x18]
mov esi, eax
add eax, 1
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x80]
lea edx, [esp + 0x7c]
mov eax, esi
call fcn.00422900
mov edx, dword [esp + 0x50]
mov byte [eax + esi], bl
mov dword [esp + 0x80], eax
xor eax, eax
test edi, edi
setg al
sub edi, eax
mov eax, dword [esp + 0x14]
call fcn.00422a00
mov ebx, eax
cmp eax, 0xffffffff
je 0x424814
test edi, edi
je 0x424814
cmp dword [esp + 0x30], 0x10
jne 0x4247a0
mov dword [esp], ebx
call fcn.0042fa88
test eax, eax
jne 0x4247b7
mov ebp, ebx
mov edi, dword [esp + 0x50]
mov ebx, dword [esp + 0x58]
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x423b00
test bl, 0x20
je 0x42487a
mov dword [esp], ebp
call fcn.0042fb00
cmp al, 0x28
jne 0x42487a
mov eax, 0x6e
mov dword [esp + 0x18], ebx
mov esi, 0x43d341
mov ebx, eax
jmp 0x424868
mov dword [esp], eax
call fcn.0042fb00
cmp bl, al
jne 0x42487a
movzx ebx, byte [esi + 1]
add esi, 1
test bl, bl
je 0x4249fa
mov eax, dword [esp + 0x14]
mov edx, edi
call fcn.00422a00
mov ebp, eax
cmp eax, 0xffffffff
jne 0x42484d
mov dword [esp], 0
mov edx, dword [esp + 0x14]
mov ecx, edi
mov eax, ebp
call fcn.00422a90
jmp 0x42390c
cmp dword [esp + 0x30], 0xa
jne 0x424814
mov eax, dword [esp + 0x54]
test eax, eax
je 0x424814
mov esi, dword [esp + 0x24]
test edi, edi
mov ebp, 0x7fffffff
cmovg ebp, edi
movzx edx, byte [esi]
mov eax, edx
cmp edx, ebx
jne 0x4252da
mov edx, ebx
mov dword [esp + 0x34], edi
mov ebx, ebp
mov ebp, dword [esp + 0x50]
jmp 0x424902
test ebx, ebx
je 0x424927
mov eax, dword [esp + 0x14]
mov edx, ebp
call fcn.00422a00
mov edx, eax
cmp eax, 0xffffffff
je 0x4249c8
movzx edi, byte [esi]
sub ebx, 1
mov eax, edi
cmp edx, edi
jne 0x4249f0
mov edi, esi
add esi, 1
cmp byte [esi], 0
jne 0x4248d8
mov edi, dword [esp + 0x34]
mov ebp, ebx
mov ebx, edx
test edi, edi
mov eax, dword [esp + 0x18]
cmovle ebp, edi
lea esi, [eax - 1]
mov edi, ebp
jmp 0x4247c4
mov ebx, dword [esp + 0x58]
mov edi, ebp
mov ebp, edx
cmp dword [esp + 0x24], esi
jae 0x42481e
xor eax, eax
mov edx, dword [esp + 0x14]
mov ecx, edi
mov dword [esp], eax
mov eax, ebp
lea ebp, [esi - 1]
call fcn.00422a90
cmp dword [esp + 0x24], ebp
jae 0x425ca5
mov ecx, ebp
mov dword [esp + 0x34], ebp
mov edx, dword [esp + 0x14]
mov ebp, esi
mov dword [esp + 0x50], edi
mov esi, ecx
mov edi, ebx
jmp 0x424994
mov dword [esp + 0x78], ebx
mov ebx, dword [edx + 0x1008]
mov dword [edx + ebx*4 + 4], eax
add ebx, 1
mov dword [edx + 0x1008], ebx
mov eax, dword [esp + 0x24]
sub esi, 1
cmp esi, eax
je 0x425c93
mov ecx, dword [esp + 0x78]
movzx eax, byte [esi]
lea ebx, [ecx - 1]
test byte [edx + 0x1004], 1
jne 0x42496e
mov ecx, dword [edx]
mov dword [esp], eax
mov dword [esp + 0x54], edx
mov dword [esp + 4], ecx
call fcn.0042fb08
mov dword [esp + 0x78], ebx
mov edx, dword [esp + 0x54]
jmp 0x424985
mov eax, edi
mov edi, dword [esp + 0x34]
mov ebp, ebx
mov ebx, edx
movzx eax, byte [eax + 1]
test al, al
je 0x424914
mov ebp, ebx
mov edi, dword [esp + 0x50]
mov ebx, dword [esp + 0x58]
jmp 0x42492f
mov ebp, ebx
mov edi, dword [esp + 0x34]
mov ebx, edx
jmp 0x4249d6
mov ecx, dword [esp + 0x80]
lea esi, [esp + 0x7c]
xor eax, eax
mov ebx, dword [esp + 0x18]
mov edx, esi
call fcn.00422900
mov dword [esp + 0x18], 1
mov byte [eax], 0x30
mov ecx, eax
jmp 0x423b67
mov ebp, dword [esp + 0x64]
jmp 0x423c79
mov eax, ebp
mov ecx, dword [esp + 0x18]
lea edi, [esp + 0x78]
mov dword [esp + 0x10], edx
cmp al, 0x5e
mov eax, dword [esp + 0x78]
mov edx, edi
sete byte [esp + 0x44]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x14]
test ecx, ecx
je 0x424eff
call fcn.00422a00
mov ebp, eax
cmp eax, 0xffffffff
je 0x425657
lea eax, [esp + 0x98]
mov dword [esp + 0x60], ebx
mov dword [esp + 0x50], eax
mov eax, ebx
mov ebx, ebp
mov ebp, dword [esp + 0x34]
and eax, 0x600
mov dword [esp + 0x18], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x5c], eax
jmp 0x424ad1
sub ebp, 1
test ebp, ebp
jle 0x4251e0
mov eax, dword [esp + 0x14]
mov edx, edi
call fcn.00422a00
mov ebx, eax
cmp eax, 0xffffffff
je 0x4251e0
movzx eax, byte [esp + 0x44]
cmp byte [esi + ebx], al
je 0x4256e2
mov eax, dword [esp + 0x54]
test eax, eax
jne 0x424ab0
mov eax, dword [esp + 0x50]
mov dword [esp + 8], 1
mov byte [esp + 0x8b], bl
mov dword [esp + 0xc], eax
lea eax, [esp + 0x8b]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call fcn.0042f790
cmp eax, 0xfffffffe
je 0x425178
mov ecx, dword [esp + 0x5c]
add dword [esp + 0x3c], 2
test ecx, ecx
je 0x424c7e
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x18], 0
mov edx, dword [ecx]
mov ecx, dword [esp + 0x40]
add ecx, ecx
lea eax, [edx + ecx]
cmp dword [esp + 0x3c], eax
jne 0x424ab0
mov dword [esp + 0x18], ecx
mov dword [esp + 0x34], edi
mov edi, esi
mov esi, ebx
mov ebx, ecx
mov eax, dword [esp + 0x18]
mov dword [esp], edx
add eax, eax
mov dword [esp + 4], eax
call fcn.0042fab8
test eax, eax
je 0x425dd1
mov edx, dword [esp + 0x28]
mov ecx, ebx
mov ebx, esi
mov esi, edi
mov edi, dword [esp + 0x34]
mov dword [edx], eax
add eax, ecx
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x18], 0
mov dword [esp + 0x40], eax
jmp 0x424ab0
mov eax, dword [esp + 0x40]
mov dword [esp + 0x34], edi
mov edi, esi
mov esi, ebx
lea ecx, [eax + eax]
mov ebx, ecx
mov dword [esp + 4], ebx
mov dword [esp], edx
call fcn.0042fab8
mov ebp, eax
test eax, eax
je 0x425d42
mov eax, dword [esp + 0x28]
mov ecx, ebx
mov ebx, esi
mov esi, edi
mov edi, dword [esp + 0x34]
mov dword [eax], ebp
mov eax, dword [esp + 0x40]
mov dword [esp + 0x40], ecx
add ebp, eax
jmp 0x4233b4
mov esi, dword [esp + 0x44]
test esi, esi
jne 0x4252e3
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x48], ecx
mov ecx, dword [esp + 0x48]
test ecx, ecx
jne 0x423360
jmp 0x42390c
mov ecx, dword [esp + 0x2c]
mov edi, dword [esp + 0x44]
lea eax, [ecx + edi*4 - 4]
cmp edi, 1
cmove eax, ecx
mov eax, dword [eax]
mov dword [esp + 0x28], eax
jmp 0x423550
mov ecx, dword [esp + 0x2c]
mov edi, dword [esp + 0x44]
lea eax, [ecx + edi*4 - 4]
cmp edi, 1
cmove eax, ecx
mov eax, dword [eax]
mov dword [esp + 0x3c], eax
jmp 0x42394d
mov eax, dword [esp + 0x14]
mov byte [esp + 0x18], dl
mov eax, dword [eax]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.0042fb08
mov dword [esp + 0x78], esi
movzx edx, byte [esp + 0x18]
jmp 0x423110
mov dword [esp + 0x18], 0
jmp 0x424ab0
mov ecx, dword [esp + 0x2c]
mov edi, dword [esp + 0x44]
lea eax, [ecx + edi*4 - 4]
cmp edi, 1
cmove eax, ecx
mov eax, dword [eax]
mov dword [esp + 0x28], eax
jmp 0x423729
mov ecx, dword [esp + 0x2c]
mov edi, dword [esp + 0x44]
lea eax, [ecx + edi*4 - 4]
cmp edi, 1
cmove eax, ecx
mov eax, dword [eax]
mov dword [esp + 0x3c], eax
jmp 0x4238f4
fstp st(0)
jmp 0x424ccf
fstp st(0)
jmp 0x424ccf
fstp st(0)
cmp dword [esp + 0x84], edi
jne 0x423e17
jmp 0x42390c
mov ecx, dword [esp + 0x44]
test ecx, ecx
jne 0x425738
mov eax, dword [esp + 0x38]
mov esi, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
test esi, esi
jne 0x42320c
jmp 0x42390c
mov eax, dword [esp + 0x78]
mov dword [esp + 0x48], ebp
mov ebp, ebx
lea ebx, [eax - 1]
mov eax, dword [esp + 0x14]
test byte [eax + 0x1004], 1
je 0x425965
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x78], ebx
mov eax, dword [ecx + 0x1008]
mov dword [ecx + eax*4 + 4], ebp
add eax, 1
mov dword [ecx + 0x1008], eax
jmp 0x42444c
cmp dword [esp + 0x20], 0xffffffff
je 0x423048
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x422c89
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call fcn.0042fa48
test ebx, ebx
jne 0x424d65
jmp 0x422c89
mov ecx, dword [esp + 0x80]
lea esi, [esp + 0x7c]
xor eax, eax
mov edx, esi
call fcn.00422900
mov ecx, ebp
mov edx, edi
mov byte [eax], cl
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x80], eax
xor eax, eax
test ecx, ecx
setg al
sub ecx, eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x34], ecx
call fcn.00422a00
mov dword [esp + 0x18], 1
mov ebp, eax
jmp 0x423a80
mov ecx, ebx
mov edi, dword [esp + 0x34]
mov ebx, edx
jmp 0x424375
mov ecx, ebx
mov edi, dword [esp + 0x34]
mov ebx, edx
jmp 0x42436d
mov eax, dword [eax]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.0042fb08
mov dword [esp + 0x78], ebx
jmp 0x4240bf
call fcn.0042faf8
cmp dword [esp + 0x84], esi
je 0x42390c
test bl, 0x80
jne 0x423e17
test bl, 4
jne 0x4252ff
test bl, 2
jne 0x42599b
and bl, 1
je 0x425c43
cmp dword [esp + 0x44], 0
je 0x424746
mov ebx, dword [esp + 0x2c]
mov edx, dword [esp + 0x44]
xor ecx, ecx
jmp 0x424e48
mov ecx, 1
sub edx, 1
jne 0x424e43
test cl, cl
je 0x424e5d
mov ecx, dword [esp + 0x2c]
mov edi, dword [esp + 0x44]
lea ebx, [ecx + edi*4 - 4]
mov edx, dword [ebx]
mov byte [edx], al
jmp 0x423bf7
lea esi, [esp + 0x7c]
mov edx, esi
mov esi, dword [esp + 0x18]
mov eax, esi
call fcn.00422900
mov edx, edi
mov byte [eax + esi], 0x30
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x14]
call fcn.00422a00
mov ebp, eax
mov dword [esp], ebp
call fcn.0042fb00
cmp eax, 0x78
je 0x4253e2
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x424eba
mov dword [esp + 0x30], 8
mov ecx, dword [esp + 0x34]
test ecx, ecx
je 0x423af8
cmp ebp, 0xffffffff
je 0x423af8
mov eax, dword [esp + 0x50]
mov dword [esp + 0x18], eax
jmp 0x424783
call fcn.0042ed50
cmp esi, dword [esp + 0x84]
je 0x42390c
and ebx, 0x80
jne 0x423e17
jmp 0x423bd9
call fcn.00422a00
mov ebp, eax
cmp eax, 0xffffffff
je 0x425657
mov eax, ebx
mov dword [esp + 0x5c], ebx
mov ebx, ebp
mov ebp, dword [esp + 0x34]
and eax, 0x600
mov dword [esp + 0x34], edi
mov edi, dword [esp + 0x48]
mov dword [esp + 0x50], eax
jmp 0x424f65
mov ecx, dword [esp + 0x28]
mov edi, eax
mov edx, dword [ecx]
mov ecx, dword [esp + 0x40]
add ecx, edx
cmp eax, ecx
je 0x4255f1
sub ebp, 1
je 0x425268
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x14]
call fcn.00422a00
mov ebx, eax
cmp eax, 0xffffffff
je 0x425268
movzx eax, byte [esp + 0x44]
cmp byte [esi + ebx], al
je 0x4256a4
mov ecx, dword [esp + 0x54]
test ecx, ecx
jne 0x424f44
mov edx, dword [esp + 0x50]
mov byte [edi], bl
lea eax, [edi + 1]
test edx, edx
jne 0x424f2e
mov edi, eax
jmp 0x424f44
mov ecx, ebx
and ecx, 4
mov dword [esp + 0x18], ecx
je 0x42533b
mov ecx, dword [esp + 0x44]
test ecx, ecx
jne 0x425825
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
add ecx, 4
mov dword [esp + 0x38], ecx
mov dword [edx], eax
mov dword [esp + 0x18], 0
jmp 0x422cdc
call fcn.00426050
test esi, esi
jne 0x424cc9
cmp edi, dword [esp + 0x84]
je 0x423906
fld st(0)
mov ecx, dword [esp + 0x44]
cmp dword [esp + 0x64], 0x2d
fchs
fcmovne st(0), st(1)
fstp st(1)
test ecx, ecx
jne 0x42585b
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx]
fstp dword [eax]
lea eax, [ecx + 4]
mov dword [esp + 0x38], eax
jmp 0x423bf7
call fcn.004260f0
test esi, esi
jne 0x424ccd
cmp edi, dword [esp + 0x84]
je 0x42390a
cmp dword [esp + 0x64], 0x2d
jne 0x42502d
fchs
mov esi, dword [esp + 0x44]
test esi, esi
jne 0x425a3a
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx]
fstp xword [eax]
lea eax, [ecx + 4]
mov dword [esp + 0x38], eax
jmp 0x423bf7
mov edi, dword [esp + 0x44]
test edi, edi
jne 0x425940
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x48], ecx
mov esi, dword [esp + 0x48]
test esi, esi
jne 0x423ee9
jmp 0x42390c
lea esi, [esp + 0x7c]
mov ecx, dword [esp + 0x80]
xor eax, eax
mov edx, esi
call fcn.00422900
mov ecx, ebp
mov dword [esp + 0x50], esi
mov ebp, dword [esp + 0x34]
mov dword [esp + 0x80], eax
mov byte [eax], cl
mov eax, 1
mov dword [esp + 0x58], ebx
mov esi, eax
jmp 0x425114
mov eax, dword [esp + 0x14]
mov edx, edi
call fcn.00422a00
mov ebx, eax
cmp eax, 0xffffffff
je 0x425118
mov dword [esp], eax
call fcn.0042fb00
mov edx, eax
movsx eax, byte [esi + 0x43d34a]
cmp edx, eax
jne 0x425118
xor eax, eax
test ebp, ebp
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x50]
setg al
sub ebp, eax
mov eax, esi
call fcn.00422900
cmp byte [esi + 0x43d34b], 0
mov ecx, eax
mov dword [esp + 0x80], eax
lea eax, [esi + 1]
mov byte [ecx + esi], bl
je 0x4258cb
mov esi, eax
test ebp, ebp
jne 0x4250b4
cmp dword [esp + 0x20], 0xffffffff
je 0x423048
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x422c89
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call fcn.0042fa48
test ebx, ebx
jne 0x42512f
jmp 0x422c89
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x425888
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
add eax, 4
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], ecx
mov eax, dword [esp + 0x3c]
test eax, eax
jne 0x423ee9
jmp 0x42390c
add dword [esp + 0x18], 1
jmp 0x424abb
mov ebp, ebx
mov ebx, dword [esp + 0x60]
cmp ebp, 0xffffffff
je 0x4245de
mov eax, dword [esp + 0x78]
lea esi, [eax - 1]
mov eax, dword [esp + 0x14]
test byte [eax + 0x1004], 1
je 0x4259eb
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x78], esi
mov eax, dword [ecx + 0x1008]
mov dword [ecx + eax*4 + 4], ebp
add eax, 1
mov dword [ecx + 0x1008], eax
jmp 0x4245de
mov eax, dword [eax]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0042fb08
mov dword [esp + 0x78], esi
jmp 0x422d4f
mov ebp, ebx
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x4257c2
mov eax, dword [esp + 0x58]
cmp dword [esp + 0x78], eax
je 0x42390c
mov edi, dword [esp + 0x54]
mov dword [esp + 0x18], 0
test edi, edi
jne 0x422cdc
mov eax, dword [esp + 0x3c]
mov edi, dword [esp + 0x28]
xor esi, esi
mov word [eax], si
lea ebx, [eax + 2]
test edi, edi
je 0x42524a
mov eax, dword [edi]
test eax, eax
je 0x42524a
mov ecx, dword [esp + 0x40]
mov edx, ebx
sub edx, eax
add ecx, ecx
cmp ecx, edx
je 0x42524a
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.0042fab8
test eax, eax
je 0x42524a
mov dword [edi], eax
add dword [esp + 0x20], 1
mov dword [esp + 0x18], 0
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x28], 0
jmp 0x422cdc
mov dword [esp + 0x48], edi
mov ebp, ebx
mov eax, dword [esp + 0x58]
cmp dword [esp + 0x78], eax
je 0x42390c
mov edi, dword [esp + 0x54]
test edi, edi
jne 0x422cdc
mov eax, dword [esp + 0x48]
mov edi, dword [esp + 0x28]
mov byte [eax], 0
lea ebx, [eax + 1]
test edi, edi
je 0x4252bc
mov eax, dword [edi]
test eax, eax
je 0x4252bc
mov edx, ebx
sub edx, eax
cmp dword [esp + 0x40], edx
je 0x4252bc
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.0042fab8
test eax, eax
je 0x4252bc
mov dword [edi], eax
add dword [esp + 0x20], 1
mov dword [esp + 0x18], 0
mov dword [esp + 0x48], ebx
mov dword [esp + 0x28], 0
jmp 0x422cdc
mov esi, dword [esp + 0x24]
jmp 0x4249d6
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x2c]
cmp ecx, 1
je 0x4252f4
lea eax, [eax + ecx*4 - 4]
mov eax, dword [eax]
mov dword [esp + 0x48], eax
jmp 0x424c06
mov esi, dword [esp + 0x44]
test esi, esi
jne 0x425a02
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
add ecx, 4
mov dword [esp + 0x38], ecx
mov dword [edx], eax
jmp 0x423bf7
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x2c]
cmp ecx, 1
je 0x425330
lea eax, [eax + ecx*4 - 4]
mov eax, dword [eax]
mov dword [esp + 0x28], eax
jmp 0x4232f0
test bl, 2
je 0x42551a
mov edx, dword [esp + 0x44]
test edx, edx
jne 0x425bb9
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
add ecx, 4
mov dword [esp + 0x38], ecx
mov word [edx], ax
jmp 0x422cdc
mov eax, dword [eax]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.0042fb08
mov dword [esp + 0x78], esi
mov ecx, dword [esp + 0x80]
lea esi, [esp + 0x7c]
jmp 0x423b67
mov ecx, dword [esp + 0x80]
lea esi, [esp + 0x7c]
xor eax, eax
mov edx, esi
call fcn.00422900
mov edx, edi
mov byte [eax], 0x30
mov dword [esp + 0x50], eax
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x14]
call fcn.00422a00
mov ebp, eax
mov eax, dword [esp + 0x34]
test eax, eax
jle 0x425768
sub eax, 1
mov dword [esp + 0x18], eax
jne 0x425d20
xor eax, eax
mov dword [esp + 0x18], 1
mov dword [esp + 0x34], eax
jmp 0x423cb1
test dword [esp + 0x30], 0xffffffef
jne 0x424eba
mov ecx, dword [esp + 0x34]
xor eax, eax
mov edx, edi
test ecx, ecx
setg al
sub ecx, eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x34], ecx
call fcn.00422a00
mov dword [esp + 0x30], 0x10
mov ebp, eax
jmp 0x424eba
mov eax, dword [esp + 0x20]
add eax, 1
cmp eax, 1
jbe 0x423048
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x422c89
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call fcn.0042fa48
test ebx, ebx
jne 0x425437
jmp 0x422c89
mov ecx, dword [esp + 0x80]
lea esi, [esp + 0x7c]
xor eax, eax
mov edx, esi
call fcn.00422900
mov ecx, ebp
mov dword [esp + 0x50], ebx
mov dword [esp + 0x80], eax
mov byte [eax], cl
mov eax, 1
mov ebx, eax
jmp 0x4254e5
mov eax, dword [esp + 0x14]
mov edx, edi
call fcn.00422a00
mov ebp, eax
cmp eax, 0xffffffff
je 0x4254ed
mov dword [esp], eax
call fcn.0042fb00
mov edx, eax
movsx eax, byte [ebx + 0x43d346]
cmp edx, eax
jne 0x4254ed
mov ecx, dword [esp + 0x34]
xor eax, eax
mov edx, esi
test ecx, ecx
setg al
sub ecx, eax
mov eax, ebx
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x80]
call fcn.00422900
lea ecx, [ebx + 1]
cmp byte [ebx + 0x43d347], 0
mov dword [esp + 0x18], ecx
mov ecx, ebp
mov dword [esp + 0x80], eax
mov byte [eax + ebx], cl
je 0x42595c
mov ebx, dword [esp + 0x18]
mov edx, dword [esp + 0x34]
test edx, edx
jne 0x425479
cmp dword [esp + 0x20], 0xffffffff
je 0x423048
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x422c89
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call fcn.0042fa48
test ebx, ebx
jne 0x425504
jmp 0x422c89
and ebx, 1
mov dword [esp + 0x18], ebx
je 0x42597c
cmp dword [esp + 0x44], 0
jne 0x425b6b
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
add ecx, 4
mov dword [esp + 0x38], ecx
mov byte [edx], al
xor eax, eax
mov dword [esp + 0x18], eax
jmp 0x422cdc
mov edi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x44]
mov edx, edi
cmp ecx, 1
je 0x42555f
lea edx, [edi + ecx*4 - 4]
mov edx, dword [edx]
jmp 0x422fee
mov edi, dword [esp + 0x44]
mov ecx, dword [esp + 0x2c]
cmp edi, 1
je 0x425577
lea ecx, [ecx + edi*4 - 4]
mov ecx, dword [ecx]
jmp 0x423bf2
mov eax, dword [esp + 0x78]
mov ebp, esi
lea ebx, [eax - 1]
mov eax, dword [esp + 0x14]
test byte [eax + 0x1004], 1
je 0x425e13
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x78], ebx
mov eax, dword [ecx + 0x1008]
mov dword [ecx + eax*4 + 4], esi
add eax, 1
mov dword [ecx + 0x1008], eax
mov ecx, dword [esp + 0x18]
test ecx, ecx
jne 0x423e17
mov eax, dword [esp + 0x3c]
lea ebx, [eax + 2]
mov word [eax], 0
mov eax, dword [esp + 0x40]
mov edx, ebx
lea ecx, [eax + eax]
mov eax, dword [esp + 0x28]
call fcn.00422840
xor edx, edx
add dword [esp + 0x20], 1
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x28], edx
jmp 0x422cdc
mov eax, dword [esp + 0x40]
lea ecx, [eax + eax]
mov edi, ecx
mov dword [esp + 4], edi
mov dword [esp], edx
call fcn.0042fab8
test eax, eax
je 0x425c7b
mov ecx, edi
mov edi, dword [esp + 0x28]
mov dword [edi], eax
mov edi, dword [esp + 0x40]
mov dword [esp + 0x40], ecx
add edi, eax
jmp 0x424f44
mov eax, dword [esp + 0x20]
add eax, 1
cmp eax, 1
jbe 0x423048
mov ebx, dword [esp + 0x74]
test ebx, ebx
je 0x422c89
mov eax, ebx
mov ebx, dword [ebx + 4]
mov dword [esp], eax
call fcn.0042fa48
test ebx, ebx
jne 0x425641
jmp 0x422c89
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x28]
lea edx, [esp + 0x74]
test eax, eax
cmovne ebp, eax
lea eax, [esp + 0x80]
mov dword [esp], eax
mov eax, ebp
call fcn.00422970
mov dword [esp + 0x20], eax
jmp 0x422cbc
lea eax, [esp + 0x80]
xor ecx, ecx
lea edx, [esp + 0x74]
mov dword [esp], eax
mov eax, dword [esp + 0x20]
call fcn.00422970
mov dword [esp + 0x20], eax
jmp 0x422cbc
mov eax, dword [esp + 0x78]
mov ebp, ebx
mov dword [esp + 0x48], edi
lea ebx, [eax - 1]
mov eax, dword [esp + 0x14]
test byte [eax + 0x1004], 1
je 0x425a61
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x78], ebx
mov eax, dword [ecx + 0x1008]
mov dword [ecx + eax*4 + 4], ebp
add eax, 1
mov dword [ecx + 0x1008], eax
jmp 0x42526e
mov eax, dword [esp + 0x78]
mov ebp, ebx
lea ebx, [eax - 1]
mov eax, dword [esp + 0x14]
test byte [eax + 0x1004], 1
je 0x425e5c
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x78], ebx
mov eax, dword [ecx + 0x1008]
mov dword [ecx + eax*4 + 4], ebp
add eax, 1
mov dword [ecx + 0x1008], eax
jmp 0x4251e2
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x2c]
cmp ecx, 1
je 0x42572d
lea eax, [eax + ecx*4 - 4]
mov eax, dword [eax]
mov dword [esp + 0x28], eax
jmp 0x423198
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x2c]
cmp ecx, 1
je 0x425749
lea eax, [eax + ecx*4 - 4]
mov esi, dword [eax]
jmp 0x424d01
cmp dword [esp + 0x20], 0
jne 0x42390c
mov dword [esp + 0x20], 0xffffffff
jmp 0x42390c
mov dword [esp], ebp
call fcn.0042fb00
mov dword [esp + 0x18], 1
cmp eax, 0x78
jne 0x423cb1
mov ecx, dword [esp + 0x50]
mov edx, esi
mov eax, 1
and bh, 0xfe
or ebx, 0x40
call fcn.00422900
mov ecx, ebp
mov edx, edi
mov byte [eax + 1], cl
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x14]
call fcn.00422a00
mov byte [esp + 0x54], 0x70
mov dword [esp + 0x18], 2
mov ebp, eax
jmp 0x423cb1
call fcn.0042f9e8
mov dword [eax], 0x2a
jmp 0x42390c
mov dword [esp + 0x3c], ebp
mov ebx, ecx
mov ebp, edi
mov edi, esi
mov esi, ecx
lea eax, [ebx + ebx]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov eax, dword [eax]
mov dword [esp], eax
call fcn.0042fab8
test eax, eax
je 0x425def
mov edx, dword [esp + 0x28]
mov ecx, esi
mov dword [esp + 0x40], ebx
mov esi, edi
mov edi, ebp
mov ebp, dword [esp + 0x3c]
mov dword [edx], eax
add eax, ecx
mov dword [esp + 0x3c], eax
jmp 0x4241e6
add edx, 1
movzx eax, cl
jmp 0x423fca
mov edi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x44]
mov edx, edi
cmp ecx, 1
je 0x425838
lea edx, [edi + ecx*4 - 4]
mov edx, dword [edx]
jmp 0x424fb4
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x2c]
cmp ecx, 1
je 0x425850
lea eax, [eax + ecx*4 - 4]
mov eax, dword [eax]
mov dword [esp + 0x28], eax
jmp 0x423e79
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x2c]
cmp ecx, 1
je 0x42586c
lea eax, [eax + ecx*4 - 4]
mov edx, dword [esp + 0x84]
mov eax, dword [eax]
fstp dword [eax]
cmp edi, edx
jne 0x423bf7
jmp 0x42390c
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x2c]
cmp ecx, 1
je 0x425899
lea eax, [eax + ecx*4 - 4]
mov eax, dword [eax]
mov dword [esp + 0x3c], eax
jmp 0x425162
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x2c]
cmp ecx, 1
je 0x4258b5
lea eax, [eax + ecx*4 - 4]
mov eax, dword [eax]
fstp qword [eax]
cmp edi, dword [esp + 0x84]
jne 0x423bf7
jmp 0x42390c
mov dword [esp + 0x18], eax
mov eax, ebp
mov dword [esp + 0x54], esi
mov esi, dword [esp + 0x50]
mov dword [esp + 0x34], ebp
mov ebp, ebx
mov ebx, dword [esp + 0x58]
test eax, eax
je 0x4245fe
mov eax, dword [esp + 0x14]
mov edx, edi
mov dword [esp + 0x50], ecx
call fcn.00422a00
mov ebp, eax
cmp eax, 0xffffffff
je 0x4245fe
mov dword [esp], eax
call fcn.0042fb00
mov ecx, dword [esp + 0x50]
cmp eax, 0x69
je 0x425a78
xor eax, eax
mov edx, dword [esp + 0x14]
mov ecx, edi
mov dword [esp], eax
mov eax, ebp
call fcn.00422a90
jmp 0x4245fe
jne 0x423d2a
jmp 0x4243ca
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x2c]
cmp ecx, 1
je 0x425951
lea eax, [eax + ecx*4 - 4]
mov eax, dword [eax]
mov dword [esp + 0x48], eax
jmp 0x42506a
mov ebx, dword [esp + 0x50]
jmp 0x4245fe
mov eax, dword [eax]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.0042fb08
mov dword [esp + 0x78], ebx
jmp 0x42444c
cmp dword [esp + 0x44], 0
jne 0x425b4f
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
add ecx, 4
mov dword [esp + 0x38], ecx
mov dword [edx], eax
jmp 0x422cdc
mov ebx, dword [esp + 0x44]
test ebx, ebx
jne 0x425c29
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
add ecx, 4
mov dword [esp + 0x38], ecx
mov word [edx], ax
jmp 0x423bf7
mov eax, dword [esp + 0x20]
test eax, eax
cmove eax, dword [esp + 0x64]
mov edi, eax
lea eax, [esp + 0x80]
mov ecx, dword [esp + 0x28]
mov dword [esp], eax
lea edx, [esp + 0x74]
mov eax, edi
call fcn.00422970
mov dword [esp + 0x20], eax
jmp 0x422cbc
mov eax, dword [eax]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.0042fb08
mov dword [esp + 0x78], esi
jmp 0x4245de
mov edi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x44]
mov edx, edi
cmp ecx, 1
je 0x425a15
lea edx, [edi + ecx*4 - 4]
mov edx, dword [edx]
mov dword [edx], eax
jmp 0x423bf7
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x2c]
cmp ecx, 1
je 0x425a2f
lea eax, [eax + ecx*4 - 4]
mov eax, dword [eax]
mov dword [esp + 0x28], eax
jmp 0x42450f
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x2c]
cmp ecx, 1
je 0x425a4b
lea eax, [eax + ecx*4 - 4]
mov eax, dword [eax]
fstp xword [eax]
cmp edi, dword [esp + 0x84]
jne 0x423bf7
jmp 0x42390c
mov eax, dword [eax]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.0042fb08
mov dword [esp + 0x78], ebx
jmp 0x42526e
mov eax, dword [esp + 0x34]
test eax, eax
jle 0x425a87
sub eax, 1
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x18]
mov edx, esi
call fcn.00422900
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x50], 0x43d34e
mov dword [esp + 0x80], eax
add ecx, 2
mov dword [esp + 0x54], ecx
mov ecx, ebp
mov byte [eax + edx], cl
jmp 0x425b3f
mov eax, dword [esp + 0x14]
mov edx, edi
call fcn.00422a00
mov ebp, eax
cmp eax, 0xffffffff
je 0x42390c
mov dword [esp], eax
call fcn.0042fb00
mov edx, eax
mov eax, dword [esp + 0x50]
movsx eax, byte [eax + 1]
cmp edx, eax
jne 0x42390c
mov eax, dword [esp + 0x34]
test eax, eax
jle 0x425af9
sub eax, 1
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x80]
mov eax, dword [esp + 0x54]
mov edx, esi
call fcn.00422900
mov ecx, dword [esp + 0x54]
add dword [esp + 0x50], 1
mov dword [esp + 0x80], eax
lea edx, [ecx + 1]
mov dword [esp + 0x18], edx
mov edx, ecx
mov ecx, ebp
mov byte [eax + edx], cl
mov eax, dword [esp + 0x50]
cmp byte [eax + 1], 0
je 0x4245fe
mov eax, dword [esp + 0x18]
mov dword [esp + 0x54], eax
cmp dword [esp + 0x34], 0
jne 0x425aba
jmp 0x42390c
mov edi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x44]
mov edx, edi
cmp ecx, 1
je 0x425b62
lea edx, [edi + ecx*4 - 4]
mov edx, dword [edx]
mov dword [edx], eax
jmp 0x422cdc
mov edi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x44]
mov edx, edi
cmp ecx, 1
je 0x425b7e
lea edx, [edi + ecx*4 - 4]
mov edx, dword [edx]
jmp 0x42553f
mov ebx, dword [esp + 0x2c]
mov edx, dword [esp + 0x44]
xor ecx, ecx
jmp 0x425b96
mov ecx, 1
sub edx, 1
jne 0x425b91
jmp 0x424e4d
mov esi, dword [esp + 0x18]
jmp 0x42433e
cmp dword [esp + 0x18], 0
je 0x42482a
jmp 0x423b07
mov edi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x44]
mov edx, edi
cmp ecx, 1
je 0x425bcc
lea edx, [edi + ecx*4 - 4]
mov edx, dword [edx]
jmp 0x42535d
mov eax, dword [esp + 0x40]
lea ecx, [eax + 1]
cmp ecx, ebx
jae 0x423048
mov eax, dword [esp + 0x28]
mov ebx, ecx
mov eax, dword [eax]
jmp 0x423662
cmp dword [esp + 0x44], 0
je 0x42530b
mov ebx, dword [esp + 0x2c]
mov edx, dword [esp + 0x44]
xor ecx, ecx
jmp 0x425c0b
mov ecx, 1
sub edx, 1
jne 0x425c06
test cl, cl
je 0x425c20
mov ecx, dword [esp + 0x2c]
mov edi, dword [esp + 0x44]
lea ebx, [ecx + edi*4 - 4]
mov edx, dword [ebx]
mov dword [edx], eax
jmp 0x423bf7
mov edi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x44]
mov edx, edi
cmp ecx, 1
je 0x425c3c
lea edx, [edi + ecx*4 - 4]
mov edx, dword [edx]
jmp 0x4259b4
cmp dword [esp + 0x44], 0
je 0x42530b
mov ebx, dword [esp + 0x2c]
mov edx, dword [esp + 0x44]
xor ecx, ecx
jmp 0x425c5f
mov ecx, 1
sub edx, 1
jne 0x425c5a
jmp 0x425c10
mov eax, dword [esp + 0x50]
mov dword [esp + 0x30], 8
mov dword [esp + 0x18], eax
jmp 0x423b00
mov eax, dword [esp + 0x40]
add eax, 1
cmp eax, edi
jae 0x425cd8
mov ecx, dword [esp + 0x28]
mov edi, eax
mov edx, dword [ecx]
jmp 0x4255fa
mov esi, ebp
mov ebp, dword [esp + 0x34]
mov ebx, edi
mov edi, dword [esp + 0x50]
sub eax, esi
lea ebp, [eax + ebp + 1]
mov eax, dword [esp + 0x18]
movzx ebp, byte [ebp]
test eax, eax
je 0x42482a
sub eax, 1
jne 0x423b29
mov eax, dword [esp + 0x80]
movzx eax, byte [eax]
sub eax, 0x2b
test al, 0xfd
jne 0x423b29
jmp 0x42487a
mov ecx, dword [esp + 0x5c]
or eax, 0xffffffff
and ch, 4
jne 0x425d00
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x40]
xor ebp, ebp
mov eax, dword [eax]
mov byte [eax + ecx - 1], 0
mov eax, dword [esp + 0x20]
mov dword [esp + 0x28], ebp
add eax, 1
lea edx, [esp + 0x80]
mov ecx, dword [esp + 0x28]
mov dword [esp], edx
lea edx, [esp + 0x74]
call fcn.00422970
mov dword [esp + 0x20], eax
jmp 0x422cbc
mov dword [esp], ebp
call fcn.0042fb00
cmp eax, 0x78
je 0x425d5a
mov eax, dword [esp + 0x18]
mov dword [esp + 0x18], 1
mov dword [esp + 0x34], eax
jmp 0x423cb1
mov eax, dword [esp + 0x40]
add eax, 1
cmp eax, ebx
jae 0x425da0
mov ecx, dword [esp + 0x28]
mov ebx, eax
mov edx, dword [ecx]
jmp 0x424bb4
mov ecx, dword [esp + 0x50]
mov edx, esi
mov eax, 1
and bh, 0xfe
or ebx, 0x40
call fcn.00422900
mov ecx, ebp
mov edx, edi
mov byte [eax + 1], cl
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x14]
call fcn.00422a00
sub dword [esp + 0x34], 2
mov byte [esp + 0x54], 0x70
mov ebp, eax
mov dword [esp + 0x18], 2
jmp 0x423cb1
mov ecx, dword [esp + 0x50]
or eax, 0xffffffff
and ch, 4
jne 0x425d00
jmp 0x425ce4
mov eax, dword [esp + 0x40]
add eax, 1
cmp eax, ebp
jae 0x423048
mov ecx, dword [esp + 0x28]
mov ebp, eax
mov edx, dword [ecx]
jmp 0x42328a
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x18]
add eax, 1
cmp eax, ecx
jae 0x425e2a
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x18], eax
mov edx, dword [ecx]
jmp 0x424b5e
mov eax, dword [esp + 0x40]
add eax, 1
cmp eax, ebx
jae 0x425e73
mov ebx, eax
jmp 0x4257de
test bh, 4
mov eax, 0xffffffff
cmove eax, dword [esp + 0x20]
jmp 0x4259c7
mov eax, dword [eax]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.0042fb08
mov dword [esp + 0x78], ebx
jmp 0x4255b3
mov edi, dword [esp + 0x60]
or eax, 0xffffffff
and edi, 0x400
jne 0x425d00
mov eax, dword [esp + 0x28]
xor edx, edx
mov dword [esp + 0x28], edx
mov eax, dword [eax]
mov word [eax + ebx - 2], 0
mov eax, dword [esp + 0x20]
add eax, 1
jmp 0x425d00
mov eax, dword [eax]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.0042fb08
mov dword [esp + 0x78], ebx
jmp 0x4251e2
mov ecx, dword [esp + 0x44]
or eax, 0xffffffff
and ch, 4
jne 0x425d00
mov eax, dword [esp + 0x28]
xor ebx, ebx
mov dword [esp + 0x28], ebx
mov eax, dword [eax]
mov word [eax + esi - 2], 0
mov eax, dword [esp + 0x20]
add eax, 1
jmp 0x425d00