Function at 0x424220
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0xcc
call sub.msvcrt.dll_localeconv
mov eax, dword [eax]
mov dword [esp], eax
mov dword [esp + 0x28], eax
call sub.msvcrt.dll_strlen
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0xe8]
fldz
mov dword [esp + 0xa4], 0
mov dword [esp + 0xb4], 0
fstp qword [esp + 0xb8]
mov eax, dword [eax]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xe0]
mov edx, eax
mov dword [esp + 0xb0], eax
movzx eax, byte [edx]
cmp al, 0x2d
ja case.0x42428b.1
movzx ecx, al
jmp dword [ecx*4 + 0x49e10c]
mov eax, dword [esp + 0xe0]
mov dword [esp + 0xa4], 6
xor edx, edx
mov dword [esp + 0x3c], 0
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0xe4]
test ecx, ecx
je 0x4242d0
mov eax, dword [esp + 0xb0]
mov ebx, dword [esp + 0xe4]
mov dword [ebx], eax
mov eax, dword [esp + 0x3c]
test eax, eax
jne 0x424320
test edx, edx
je 0x424306
mov eax, dword [esp + 0x38]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [esp + 0xf0]
mov dword [esp], eax
call fcn.00429570
mov eax, dword [esp + 0xb4]
mov dword [esp], eax
call fcn.00428970
mov eax, dword [esp + 0xa4]
add esp, 0xcc
pop ebx
pop esi
pop edi
pop ebp
ret
or dword [esp + 0xa4], 8
jmp 0x4242d8
mov eax, edx
mov dword [esp + 0x3c], 0
add edx, 1
mov dword [esp + 0xb0], edx
movzx eax, byte [eax + 1]
test al, al
je case.0x42428b.0
cmp al, 0x30
mov dword [esp + 0x40], edx
mov dword [esp + 0x30], 0
je 0x424421
mov ebx, dword [esp + 0xe8]
movsx ecx, al
lea edx, [ecx - 0x30]
mov edi, dword [ebx + 0x10]
cmp edx, 9
mov dword [esp + 0x78], edi
ja 0x42447f
mov ebx, dword [esp + 0x40]
mov dword [esp + 0x20], 0
xor edi, edi
lea esi, [ebx + 1]
xor ebx, ebx
jmp 0x4243ca
lea edx, [edi + edi*4]
movsx eax, al
lea edi, [eax + edx*2 - 0x30]
mov dword [esp + 0xb0], esi
movsx ecx, byte [esi]
add ebx, 1
mov edx, esi
lea esi, [esi + 1]
lea ebp, [ecx - 0x30]
mov eax, ecx
cmp ebp, 9
ja 0x424490
cmp ebx, 8
jle 0x4243a0
cmp ebx, 0xf
jg 0x4243aa
mov ecx, dword [esp + 0x20]
movsx eax, al
lea edx, [ecx + ecx*4]
lea eax, [eax + edx*2 - 0x30]
mov dword [esp + 0x20], eax
jmp 0x4243aa
add edx, 1
mov dword [esp + 0xb0], edx
movzx eax, byte [edx]
cmp al, 0x2d
jbe 0x424288
cmp al, 0x30
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], edx
mov dword [esp + 0x30], 0
jne 0x424364
movzx eax, byte [edx + 1]
cmp al, 0x58
je 0x42567f
add edx, 1
cmp al, 0x78
je 0x42567f
nop
lea esi, [esi]
mov ecx, edx
mov dword [esp + 0xb0], edx
add edx, 1
movzx eax, byte [edx - 1]
cmp al, 0x30
je 0x424440
xor edx, edx
test al, al
je 0x4242b5
mov dword [esp + 0x40], ecx
mov dword [esp + 0x30], 1
jmp 0x424364
mov eax, edx
mov dword [esp + 0x3c], 1
jmp 0x42433a
mov edx, dword [esp + 0x40]
mov dword [esp + 0x20], 0
xor edi, edi
xor ebx, ebx
nop
mov eax, dword [esp + 0x28]
movsx ebp, byte [eax]
cmp ebp, ecx
je 0x4248a0
mov dword [esp + 0x28], ebx
xor ebp, ebp
xor esi, esi
mov dword [esp + 0x50], 0
mov eax, ecx
and eax, 0xffffffdf
cmp eax, 0x45
je 0x4245b0
xor eax, eax
mov edx, dword [esp + 0x28]
test edx, edx
jne 0x424731
mov eax, dword [esp + 0x30]
or eax, ebp
jne 0x424725
mov eax, dword [esp + 0x50]
test eax, eax
jne 0x4246e2
cmp ecx, 0x4e
je 0x424500
jle 0x4246d9
cmp ecx, 0x69
je 0x4258e7
cmp ecx, 0x6e
jne 0x4246e2
lea esi, [esp + 0xb0]
mov dword [esp + 4], 0x49e109
mov dword [esp], esi
call fcn.00429520
test eax, eax
je 0x4246e2
mov eax, dword [esp + 0xe8]
mov ebx, dword [esp + 0xec]
mov edx, dword [esp + 0xb0]
mov dword [esp + 0xa4], 4
mov eax, dword [eax + 8]
mov dword [esp + 0x20], eax
add eax, 1
mov dword [ebx], eax
xor ebx, ebx
cmp byte [edx], 0x28
je 0x425cd2
lea esi, [esi]
lea edi, [edi]
mov edi, dword [esp + 0xec]
mov dword [edi], eax
mov edx, dword [esp + 0xb4]
test ebx, ebx
je 0x4242b5
mov esi, dword [esp + 0x78]
test esi, esi
jne 0x424ca1
mov eax, dword [esp + 0xa4]
mov ebx, dword [edx + 0x10]
xor ecx, ecx
and eax, 0xfffffff8
test ebx, ebx
setg cl
add ecx, ecx
or eax, ecx
test al, 0x30
jne 0x424710
mov dword [esp + 0xa4], eax
jmp 0x4242b5
mov eax, dword [esp + 0x28]
or eax, ebp
or eax, dword [esp + 0x30]
je 0x4246e2
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xe0], eax
add eax, 1
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0xe0]
movsx ecx, byte [eax + 1]
cmp cl, 0x2b
je 0x42580d
cmp cl, 0x2d
je 0x424ba3
mov dword [esp + 0x48], 0
lea eax, [ecx - 0x30]
cmp eax, 9
ja 0x424cd0
cmp ecx, 0x30
jne 0x424632
mov eax, dword [esp + 0xb0]
add eax, 1
nop
lea esi, [esi]
mov dword [esp + 0xb0], eax
movsx ecx, byte [eax]
add eax, 1
cmp ecx, 0x30
je 0x424620
lea edx, [ecx - 0x31]
xor eax, eax
cmp edx, 8
ja 0x4244bf
mov eax, dword [esp + 0xb0]
lea edx, [ecx - 0x30]
lea ecx, [eax + 1]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], ecx
mov dword [esp + 0xb0], ecx
movsx ecx, byte [eax + 1]
lea eax, [ecx - 0x30]
cmp eax, 9
ja 0x4246ab
mov eax, dword [esp + 0x54]
mov dword [esp + 0x58], esi
mov dword [esp + 0x5c], ebp
add eax, 2
mov esi, esi
lea edi, [edi]
lea edx, [edx + edx*4]
mov dword [esp + 0xb0], eax
mov ebp, eax
add eax, 1
lea edx, [ecx + edx*2 - 0x30]
movsx ecx, byte [eax - 1]
lea esi, [ecx - 0x30]
cmp esi, 9
jbe 0x424680
mov esi, dword [esp + 0x58]
mov dword [esp + 0x58], ebp
mov ebp, dword [esp + 0x5c]
mov eax, dword [esp + 0x58]
sub eax, dword [esp + 0x54]
cmp eax, 8
jg 0x4258dd
cmp edx, 0x4e1f
jg 0x4258dd
mov eax, dword [esp + 0x48]
neg eax
xor eax, edx
add eax, dword [esp + 0x48]
jmp 0x4244bf
cmp ecx, 0x49
je 0x4258e7
mov eax, dword [esp + 0xe0]
mov dword [esp + 0xa4], 6
mov edx, dword [esp + 0xb4]
mov dword [esp + 0xb0], eax
jmp 0x4242b5
or eax, 0x40
mov dword [esp + 0xa4], eax
call sub.msvcrt.dll__errno
mov dword [eax], 0x22
mov edx, dword [esp + 0xb4]
jmp 0x4242b5
sub eax, esi
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0xa4], 1
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0xe8]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x30], eax
and eax, 3
mov esi, eax
sub esi, ecx
cmp eax, 2
mov dword [esp + 0x68], esi
je 0x42477c
lea esi, [ecx + 1]
cmp eax, 3
mov dword [esp + 0x68], esi
je 0x42477c
test eax, eax
sete al
movzx eax, al
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x28]
test ebx, ebx
mov esi, 0x10
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], 0
fild qword [esp + 0x30]
cmove ebx, eax
cmp eax, 0x10
cmovle esi, eax
fst qword [esp + 0xb8]
cmp esi, 9
jle 0x4247d2
fmul qword [esi*8 + 0x49e2f8]
mov eax, dword [esp + 0x20]
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], eax
fild qword [esp + 0x20]
faddp st(1)
fstp qword [esp + 0xb8]
jmp 0x4247d4
fstp st(0)
cmp dword [esp + 0x28], 0xf
jg 0x424940
cmp dword [esp + 0x38], 0x35
jg 0x424940
cmp dword [esp + 0x64], 0
je 0x425827
jle 0x424c5b
cmp dword [esp + 0x64], 0x16
jg 0x425847
mov eax, dword [esp + 0x64]
mov edx, dword [eax*4 + 0x49e200]
mov eax, dword [esp + 0xb8]
test eax, eax
je 0x425949
xor ecx, ecx
tzcnt ecx, eax
mov eax, 0x35
sub eax, ecx
mov ecx, dword [esp + 0x64]
fld qword [esp + 0xb8]
add eax, edx
cmp eax, 0x35
setle al
fmul qword [ecx*8 + 0x49e340]
lea ecx, [esp + 0xa4]
movzx eax, al
mov dword [esp + 4], eax
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 8], ecx
fstp qword [esp + 0xb8]
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xec]
mov edx, dword [esp + 0xe8]
mov dword [esp], eax
lea eax, [esp + 0xb8]
call fcn.00423d90
test eax, eax
jne 0x424725
xor eax, eax
jmp 0x424944
mov esi, eax
movzx eax, byte [eax + 1]
test al, al
je 0x425b97
cmp al, byte [edx + 1]
jne 0x42449f
mov dword [esp + 0x28], ebp
mov eax, 1
mov ebp, esi
jmp 0x4248cd
cmp cl, byte [edx + eax]
jne 0x424ac0
add eax, 1
movzx ecx, byte [ebp + eax]
mov esi, eax
test cl, cl
jne 0x4248c4
add edx, esi
test ebx, ebx
mov dword [esp + 0xb0], edx
movsx ecx, byte [edx]
je 0x424bcc
lea edx, [ecx - 0x30]
xor ebp, ebp
xor esi, esi
mov dword [esp + 0x28], ebx
cmp edx, 9
ja 0x42492b
test edx, edx
lea eax, [ebp + 1]
mov ecx, edx
jne 0x425afb
mov edx, dword [esp + 0xb0]
mov ebp, eax
lea eax, [edx + 1]
mov dword [esp + 0xb0], eax
movsx ecx, byte [edx + 1]
lea edx, [ecx - 0x30]
cmp edx, 9
jbe 0x4248ff
mov dword [esp + 0x50], 1
jmp 0x4244af
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x28]
sub edx, esi
add edx, eax
cmp edx, 0
jle 0x42571e
mov eax, edx
and eax, 0xf
je 0x424971
fld qword [esp + 0xb8]
fmul qword [eax*8 + 0x49e340]
fstp qword [esp + 0xb8]
and edx, 0xfffffff0
jne 0x424ae0
fld qword [esp + 0xb8]
xor esi, esi
lea eax, [esp + 0xa8]
fstp qword [esp]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xac]
mov dword [esp + 8], eax
call fcn.00429230
add esi, dword [esp + 0xac]
mov ecx, dword [esp + 0xa8]
mov ebp, dword [esp + 0x38]
mov dword [esp + 0xb4], eax
mov edx, esi
mov dword [esp + 0xac], esi
mov esi, ecx
sub esi, ebp
test esi, esi
jle 0x4249f0
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.00429660
add esi, dword [esp + 0xac]
mov dword [esp + 0xa8], ebp
mov ecx, ebp
mov edx, esi
mov dword [esp + 0xac], esi
lea eax, [edx + ecx]
sub eax, dword [esp + 0x38]
mov esi, eax
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0xe8]
mov eax, dword [eax + 8]
mov dword [esp + 0x20], eax
add eax, 1
cmp esi, eax
jg 0x425647
mov eax, dword [esp + 0xe8]
mov eax, dword [eax + 4]
cmp esi, eax
mov dword [esp + 0x50], eax
jge 0x42581a
mov esi, edx
sub esi, eax
cmp esi, 0
jle 0x424c2a
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.00428df0
add dword [esp + 0xa8], esi
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x78]
test eax, eax
je 0x424ce5
mov eax, dword [esp + 0x80]
add eax, 1
cmp dword [esp + 0x50], eax
jle 0x424ce5
mov edx, dword [esp + 0xb4]
mov eax, dword [esp + 0xec]
mov ebx, dword [esp + 0x50]
mov dword [esp + 0xa4], 0x50
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [eax], ebx
jmp 0x424578
mov ebp, dword [esp + 0x28]
xor esi, esi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x50], 0
mov ecx, ebp
xor ebp, ebp
jmp 0x4244af
sar edx, 4
cmp edx, 0xf
jle 0x425c24
fld qword [0x49e460]
mov esi, edx
xor ebp, ebp
lea esi, [esi]
lea edi, [edi]
mov eax, dword [esp + 0xbc]
sub esi, 0x10
mov ecx, eax
and eax, 0x800fffff
or eax, 0x3ff00000
and ecx, 0x7ff00000
mov dword [esp + 0xbc], eax
shr ecx, 0x14
cmp esi, 0xf
fld qword [esp + 0xb8]
lea ebp, [ebp + ecx - 0x3ff]
fmul st(1)
fstp qword [esp + 0xb8]
jg 0x424b00
fstp st(0)
and edx, 0xf
mov esi, ebp
mov eax, dword [esp + 0xbc]
mov ecx, eax
and eax, 0x800fffff
or eax, 0x3ff00000
and ecx, 0x7ff00000
shr ecx, 0x14
mov dword [esp + 0xbc], eax
xor eax, eax
test edx, edx
lea esi, [esi + ecx - 0x3ff]
fld qword [esp + 0xb8]
je 0x424983
test dl, 1
je 0x424b90
fmul qword [eax*8 + 0x49e440]
add eax, 1
sar edx, 1
jne 0x424b84
fst qword [esp + 0xb8]
jmp 0x424983
mov dword [esp + 0x48], 1
mov eax, dword [esp + 0xe0]
add eax, 2
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0xe0]
movsx ecx, byte [eax + 2]
jmp 0x4245fd
cmp ecx, 0x30
jne 0x425c8c
lea eax, [edx + 1]
nop
lea esi, [esi]
mov dword [esp + 0xb0], eax
movsx ecx, byte [eax]
mov ebp, eax
sub ebp, edx
add eax, 1
cmp ecx, 0x30
je 0x424be0
lea eax, [ecx - 0x31]
cmp eax, 8
ja 0x4258ba
mov eax, dword [esp + 0xb0]
lea esi, [ebp + 1]
sub ecx, 0x30
mov dword [esp + 0x28], 1
mov dword [esp + 0x40], eax
mov edx, eax
lea eax, [edi + edi*4]
xor ebp, ebp
lea edi, [ecx + eax*2]
jmp 0x424915
je 0x424a5d
add ecx, esi
test ecx, ecx
mov dword [esp + 0xa8], ecx
jle 0x425c4e
mov eax, dword [esp + 0xb4]
neg esi
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.00429660
jmp 0x424a5d
mov ecx, dword [esp + 0x64]
cmp ecx, 0xffffffea
mov eax, ecx
jl 0x424944
fld qword [esp + 0xb8]
neg eax
fdiv qword [eax*8 + 0x49e340]
lea eax, [esp + 0xa4]
fstp qword [esp + 0xb8]
mov dword [esp + 4], 0
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 8], eax
jmp 0x424868
mov dword [edx + 0x10], 0
mov dword [esp + 0xa4], 0x50
call sub.msvcrt.dll__errno
mov edx, dword [esp + 0xb4]
mov dword [eax], 0x22
jmp 0x4242b5
mov eax, dword [esp + 0xe0]
mov dword [esp + 0xb0], eax
xor eax, eax
jmp 0x4244bf
mov eax, dword [esp + 0x50]
mov dword [esp + 0x30], 1
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.00429360
mov dword [esp + 0x6c], eax
add eax, 0xc
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x38]
add eax, 1
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x64]
mov edx, eax
neg edx
test eax, eax
mov eax, 0
cmovs eax, edx
xor ebx, ebx
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x68]
and eax, 1
mov dword [esp + 0x84], eax
jmp 0x424ff4
mov eax, dword [esp + 0x20]
mov dword [esp + 4], esi
mov dword [esp + 0x48], edx
mov dword [esp], eax
call fcn.00428df0
mov edx, dword [esp + 0x48]
mov dword [esp + 0x20], eax
test ebp, ebp
je 0x424d9c
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], ebp
mov dword [esp + 0x48], edx
mov dword [esp], eax
call fcn.00428c80
mov edx, dword [esp + 0x48]
mov dword [esp + 0x2c], eax
test edx, edx
jle 0x424db4
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00428df0
mov dword [esp + 0x2c], eax
test edi, edi
jle 0x424dcc
mov eax, dword [esp + 0x28]
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.00428df0
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call fcn.00428f70
cmp dword [eax + 0x10], 1
mov ebp, eax
jle 0x4251d2
mov eax, dword [esp + 0x28]
mov ebx, dword [ebp + 0xc]
mov dword [ebp + 0xc], 0
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00428f20
test eax, eax
jg 0x425160
mov edi, dword [esp + 0x68]
test edi, edi
je 0x425160
mov eax, dword [esp + 0x84]
xor eax, ebx
mov dword [esp + 0x5c], eax
je 0x425966
test ebx, ebx
je 0x4253c5
fld1
mov dword [esp + 0xa4], 0x21
xor esi, esi
mov dword [esp + 0x7c], 0x20
mov dword [esp + 0x58], 0
fst qword [esp + 0x40]
fstp qword [esp + 0x48]
mov eax, dword [esp + 0xa8]
mov ebx, dword [esp + 0xac]
mov edx, dword [esp + 0x30]
add ebx, eax
mov dword [esp + 0x60], ebx
test edx, edx
jne 0x424e82
cmp dword [esp + 0x38], eax
jg 0x425580
lea eax, [esp + 0xa0]
movsd xmm0, qword [esp + 0x40]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x9c]
movsd qword [esp], xmm0
mov dword [esp + 8], eax
call fcn.00429230
mov edi, eax
mov eax, dword [esp + 0x9c]
test eax, eax
js 0x4255b5
je 0x424ec9
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.00428df0
mov edi, eax
mov eax, dword [esp + 0x58]
mov ebx, dword [esp + 0xb4]
mov dword [esp + 4], edi
test eax, eax
mov dword [esp], ebx
je 0x425300
call fcn.00428f70
mov ecx, dword [esp + 0x30]
mov dword [esp + 0xb4], eax
mov edx, dword [ebx + 0x10]
test ecx, ecx
jne 0x425480
lea ecx, [edx - 1]
cmp ecx, dword [eax + 0x10]
jge 0x424f1d
add edx, 3
bsr ecx, dword [eax + edx*4 + 4]
bsr edx, dword [ebx + edx*4 + 4]
xor ecx, 0x1f
xor edx, 0x1f
cmp ecx, edx
jle 0x424f40
mov edx, dword [esp + 0x50]
cmp dword [esp + 0x80], edx
jne 0x425370
sub dword [esp + 0xa8], 1
mov dword [esp + 0x30], 1
nop
mov dword [esp], edi
call fcn.00428970
mov dword [esp], ebx
call fcn.00428970
mov eax, dword [esp + 0x5c]
test eax, eax
jne 0x4251e0
test esi, esi
je 0x424fb2
mov eax, dword [esp + 0xa8]
add eax, dword [esp + 0xac]
cmp dword [esp + 0x60], eax
jne 0x424fb2
fld qword [esp + 0x40]
fmul qword [0x49e270]
fld qword [esp + 0x48]
fsub dword [0x49e264]
fld st(1)
fchs
fucompi st(1)
jbe 0x425550
fstp st(0)
fld qword [esp + 0x48]
fucompi st(1)
fstp st(0)
ja 0x42556e
jmp 0x424fb2
fstp st(0)
mov eax, dword [esp + 0x30]
test eax, eax
je 0x4253a7
mov dword [esp + 0x30], 1
xor ebx, ebx
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call fcn.00428970
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call fcn.00428970
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call fcn.00428970
mov dword [esp], ebp
call fcn.00428970
mov edi, dword [esp + 0x6c]
mov ebp, 0
mov eax, dword [edi + 4]
mov dword [esp], eax
call fcn.004288a0
mov edx, dword [edi + 0x10]
mov edi, dword [esp + 0x70]
mov dword [esp + 0x2c], eax
add eax, 0xc
mov dword [esp], eax
lea edx, [edx*4 + 8]
mov dword [esp + 4], edi
mov dword [esp + 8], edx
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0xb4]
mov eax, dword [eax + 4]
mov dword [esp], eax
call fcn.004288a0
mov edi, eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xb4]
lea edx, [edi + 0xc]
mov ecx, dword [eax + 0x10]
add eax, 0xc
mov dword [esp], edx
mov dword [esp + 4], eax
lea ecx, [ecx*4 + 8]
mov dword [esp + 8], ecx
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0xa8]
mov dword [esp], 1
mov esi, dword [esp + 0xac]
sub eax, ebx
mov dword [esp + 0x40], eax
add esi, ebx
call fcn.00428ad0
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x64]
test eax, eax
cmovg ebp, eax
test esi, esi
js 0x425362
mov eax, dword [esp + 0x54]
lea edi, [eax + esi]
mov eax, ebp
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x74]
add esi, ecx
sub esi, dword [esp + 0x38]
sub edx, ecx
cmp dword [esp + 0x50], esi
jle 0x4250c8
sub esi, dword [esp + 0x50]
add edx, esi
lea esi, [edi + edx]
add edx, eax
mov eax, edx
cmp esi, edx
cmovle eax, esi
cmp eax, edi
cmovg eax, edi
test eax, eax
jle 0x4250e3
sub esi, eax
sub edx, eax
sub edi, eax
mov eax, dword [esp + 0x54]
test eax, eax
je 0x42512f
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x58], edx
mov dword [esp], eax
call fcn.00428c80
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 0x28], eax
mov dword [esp + 4], ecx
call fcn.00428b00
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x48], eax
mov dword [esp], ecx
call fcn.00428970
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x58]
mov dword [esp + 0x20], eax
sub esi, ebx
cmp esi, 0
jg 0x424d60
je 0x424d7c
mov eax, dword [esp + 0x20]
neg esi
mov dword [esp + 0x48], edx
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.00429660
mov edx, dword [esp + 0x48]
jmp 0x424d7c
test eax, eax
js 0x42597d
je 0x425a2d
mov eax, dword [esp + 0x28]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00429460
fld dword [0x49e260]
fucompi st(1)
jb 0x425490
fstp st(0)
test ebx, ebx
jne 0x4255f0
mov dword [esp + 0x5c], 0
cmp dword [esp + 0x40], 1
jg 0x4251b1
mov ecx, dword [esp + 0x30]
test ecx, ecx
jne 0x425b66
fld1
xor esi, esi
mov dword [esp + 0x7c], 0x10
mov dword [esp + 0x58], 1
fst qword [esp + 0x40]
fstp qword [esp + 0x48]
jmp 0x424e5c
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x424dec
lea esi, [esi]
mov eax, dword [esp + 0x30]
test eax, eax
je 0x4256fc
mov eax, dword [esp + 0xac]
mov ebx, 1
mov edi, dword [esp + 0xec]
mov dword [edi], eax
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call fcn.00428970
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call fcn.00428970
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call fcn.00428970
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
call fcn.00428970
mov dword [esp], ebp
call fcn.00428970
mov eax, dword [esp + 0xe8]
mov edi, dword [esp + 0xac]
cmp dword [eax + 8], edi
jge 0x424569
mov eax, dword [esp + 0xe8]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x20], eax
and eax, 3
cmp eax, 2
je 0x425ad9
cmp eax, 3
je 0x425aea
cmp eax, 1
je 0x425649
mov eax, dword [esp + 0xb4]
mov dword [esp], eax
call fcn.00428970
mov eax, dword [esp + 0xe8]
mov edi, dword [esp + 0xec]
mov dword [esp + 0xb4], 0
mov dword [esp + 0xa4], 0x11
mov eax, dword [eax + 8]
mov dword [edi], eax
mov eax, dword [esp + 0xe8]
mov edi, dword [esp + 0xf0]
mov ecx, dword [eax]
lea eax, [ecx + 0x1f]
sar eax, 5
lea edx, [edi + eax*4]
mov eax, edi
cmp edi, edx
jae 0x4252e1
add eax, 4
mov dword [eax - 4], 0xffffffff
cmp edx, eax
ja 0x4252d3
and ecx, 0x1f
je 0x4252f2
mov eax, 0x20
sub eax, ecx
mov ecx, eax
shr dword [edx - 4], cl
xor edx, edx
jmp 0x424570
call fcn.004297c0
mov edx, dword [eax + 0x10]
mov dword [esp + 0xb4], eax
lea ecx, [edx - 1]
cmp ecx, dword [ebx + 0x10]
jge 0x425332
add edx, 3
bsr ecx, dword [eax + edx*4 + 4]
bsr edx, dword [ebx + edx*4 + 4]
xor ecx, 0x1f
xor edx, 0x1f
cmp ecx, edx
jge 0x424f40
mov edx, dword [esp + 0x30]
test edx, edx
je 0x425620
mov eax, dword [esp + 0xa8]
add eax, 1
cmp dword [esp + 0x38], eax
mov dword [esp + 0xa8], eax
setne al
movzx eax, al
mov dword [esp + 0x30], eax
jmp 0x424f40
mov eax, ebp
mov edi, dword [esp + 0x54]
sub eax, esi
jmp 0x4250ac
mov dword [esp + 4], 1
mov dword [esp], eax
call fcn.00428df0
mov dword [esp], edi
mov dword [esp + 0xb4], eax
sub dword [esp + 0xac], 1
sub dword [esp + 0x80], 1
call fcn.00428970
mov dword [esp], ebx
call fcn.00428970
mov eax, dword [esp + 0xb4]
mov dword [esp], eax
call fcn.00429780
mov dword [esp + 0x30], 0
mov ebx, eax
jmp 0x424fc8
mov edi, dword [esp + 0x50]
cmp dword [esp + 0x80], edi
mov dword [esp + 0xa4], 0x11
je 0x42519e
xor ecx, ecx
cmp dword [esp + 0x38], 0x1f
mov edx, dword [esp + 0xb4]
mov eax, dword [esp + 0x38]
jle 0x425427
mov esi, dword [edx + 0x14]
test esi, esi
jne 0x42519e
mov eax, dword [esp + 0x38]
xor ecx, ecx
jmp 0x42541c
mov ebx, dword [edx + ecx*4 + 0x14]
test ebx, ebx
jne 0x42519e
sub eax, 0x20
add ecx, 1
cmp eax, 0x1f
jg 0x425410
cmp eax, 1
jle 0x425448
lea esi, [edx + ecx*4]
xor ecx, ecx
sub eax, 1
mov ebx, dword [esi + 0x14]
tzcnt ecx, ebx
shr ebx, cl
cmp eax, ecx
mov dword [esi + 0x14], ebx
jg 0x42519e
mov eax, dword [esp + 0x80]
mov dword [esp], edx
sub eax, 1
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
mov dword [esp + 0xa8], eax
call fcn.00424190
mov dword [esp + 0xb4], eax
jmp 0x4251e0
mov dword [esp + 0x30], 1
jmp 0x424f40
fld dword [0x49e264]
cmp ebx, 1
sbb eax, eax
fmul st(1), st(0)
and eax, 0x10
add eax, 0x10
mov dword [esp + 0x7c], eax
xor eax, eax
cmp ebx, 1
setb al
fld st(1)
mov dword [esp + 0x58], eax
fstp qword [esp + 0x48]
fld qword [0x49e268]
fucompi st(2)
jbe 0x4255d0
fld st(1)
mov eax, dword [esp + 0x68]
fstp qword [esp + 0x40]
cmp eax, 1
cvttsd2si esi, qword [esp + 0x40]
mov dword [esp + 0x40], esi
fild dword [esp + 0x40]
fsub st(2), st(0)
fxch st(2)
fst qword [esp + 0x48]
je 0x4258c9
cmp eax, 2
jne 0x4256e9
fstp st(0)
fstp st(0)
test byte [esp + 0x58], 1
jne 0x4256f3
fldz
fld qword [esp + 0x48]
fucompi st(1)
fstp st(0)
jbe 0x4256f3
fstp st(0)
jmp 0x42551e
fstp st(0)
add esi, 1
mov eax, 0x30
sub eax, dword [esp + 0x7c]
mov dword [esp + 0x40], esi
fild dword [esp + 0x40]
fstp qword [esp + 0x40]
mov dword [esp + 0x7c], eax
mov dword [esp + 0x5c], 0
jmp 0x424e5c
fucompi st(1)
jbe 0x424fb0
fsubr dword [0x49e25c]
fld qword [esp + 0x48]
fxch st(1)
fucompi st(1)
fstp st(0)
jbe 0x424fb2
mov eax, dword [esp + 0x7c]
or dword [esp + 0xa4], eax
jmp 0x4251e0
mov edi, dword [esp + 0x38]
mov ebx, edi
sub ebx, eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00428df0
sub dword [esp + 0xac], ebx
mov dword [esp + 0xb4], eax
mov dword [esp + 0xa8], edi
jmp 0x424e82
neg eax
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.00429660
jmp 0x424ec9
fstp st(0)
fstp st(0)
movsd xmm1, qword [esp + 0x48]
xor esi, esi
movsd qword [esp + 0x40], xmm1
jmp 0x42553a
fld1
xor esi, esi
mov dword [esp + 0x7c], 0x20
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
fst qword [esp + 0x40]
fstp qword [esp + 0x48]
jmp 0x424e5c
mov dword [esp + 4], 1
mov dword [esp], eax
xor esi, esi
call fcn.00429660
add dword [esp + 0xac], 1
add dword [esp + 0x80], 1
jmp 0x424f40
xor ebx, ebx
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xa4], 0xa3
mov dword [eax + 0x10], 0
call sub.msvcrt.dll__errno
mov dword [eax], 0x22
mov eax, dword [esp + 0xe8]
mov eax, dword [eax + 8]
add eax, 1
jmp 0x424560
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x10], eax
lea eax, [esp + 0xb4]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xec]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 4], eax
lea eax, [esp + 0xb0]
mov dword [esp], eax
call fcn.00429940
cmp eax, 6
mov dword [esp + 0xa4], eax
mov edx, dword [esp + 0xb4]
jne 0x4242b5
mov eax, dword [esp + 0xe0]
mov dword [esp + 0x3c], 0
mov dword [esp + 0xb0], eax
jmp 0x4242b5
fucompi st(1)
fstp st(0)
jae 0x42551c
fstp qword [esp + 0x40]
jmp 0x42553a
mov eax, dword [esp + 0xa8]
mov ebx, dword [esp + 0x38]
sub ebx, eax
cmp ebx, 0
jne 0x425883
mov eax, dword [esp + 0xac]
jmp 0x4251f8
je 0x42497a
neg edx
mov eax, edx
and eax, 0xf
je 0x425742
fld qword [esp + 0xb8]
fdiv qword [eax*8 + 0x49e340]
fstp qword [esp + 0xb8]
and edx, 0xfffffff0
je 0x42497a
sar edx, 4
cmp edx, 0xf
mov ebp, edx
jle 0x425d19
fld qword [0x49e420]
mov ecx, edx
xor esi, esi
mov eax, dword [esp + 0xbc]
sub ecx, 0x10
mov edx, eax
and eax, 0x800fffff
or eax, 0x3ff00000
and edx, 0x7ff00000
mov dword [esp + 0xbc], eax
shr edx, 0x14
cmp ecx, 0xf
fld qword [esp + 0xb8]
lea esi, [esi + edx - 0x3ff]
fmul st(1)
fstp qword [esp + 0xb8]
jg 0x425763
fstp st(0)
and ebp, 0xf
mov edx, dword [esp + 0xbc]
mov eax, edx
and eax, 0x7ff00000
shr eax, 0x14
lea esi, [esi + eax - 0x3ff]
mov eax, edx
and eax, 0x800fffff
or eax, 0x3ff00000
mov dword [esp + 0xbc], eax
xor eax, eax
test ebp, ebp
fld qword [esp + 0xb8]
jle 0x424983
lea esi, [esi]
lea edi, [edi]
test ebp, 1
je 0x4257ff
fmul qword [eax*8 + 0x49e400]
sar ebp, 1
add eax, 1
test ebp, ebp
jg 0x4257f0
jmp 0x424b97
mov dword [esp + 0x48], 0
jmp 0x424bab
mov dword [esp + 0x30], 0
jmp 0x424cf8
lea eax, [esp + 0xa4]
mov dword [esp + 4], 1
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 8], eax
jmp 0x424868
mov edx, 0x25
sub edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x64]
mov eax, ecx
cmp ecx, edx
jg 0x424944
mov eax, 0xf
sub eax, dword [esp + 0x28]
fld qword [esp + 0xb8]
fmul qword [eax*8 + 0x49e340]
sub ecx, eax
fmul qword [ecx*8 + 0x49e340]
jmp 0x424c7a
jle 0x425ba1
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00428df0
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0xac]
sub eax, ebx
xor ebx, ebx
mov dword [esp + 0xac], eax
jmp 0x4251f8
mov dword [esp + 0x28], 0
xor esi, esi
jmp 0x42492b
fstp st(0)
fstp st(0)
test byte [esp + 0x58], 1
jne 0x425508
jmp 0x4256f3
mov edx, 0x4e1f
jmp 0x4246c8
lea ebx, [esp + 0xb0]
mov dword [esp + 4], 0x49e100
mov dword [esp], ebx
call fcn.00429520
test eax, eax
je 0x4246e2
mov dword [esp + 4], str.inity
mov dword [esp], ebx
sub dword [esp + 0xb0], 1
call fcn.00429520
test eax, eax
jne 0x42592a
add dword [esp + 0xb0], 1
mov eax, dword [esp + 0xe8]
mov dword [esp + 0xa4], 3
xor ebx, ebx
mov eax, dword [eax + 8]
add eax, 1
jmp 0x424560
mov ecx, dword [esp + 0xbc]
mov eax, 0x15
or ecx, 0x100000
tzcnt ecx, ecx
sub eax, ecx
jmp 0x42482d
cmp ebx, 1
sbb eax, eax
and eax, 0x10
add eax, 0x11
mov dword [esp + 0xa4], eax
jmp 0x4251e0
cmp ebx, 1
sbb eax, eax
and eax, 0x10
add eax, 0x11
test ebx, ebx
mov dword [esp + 0xa4], eax
jne 0x4251e0
cmp dword [esp + 0x40], 1
jg 0x4251e0
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x4251e0
mov ebx, dword [esp + 0x80]
cmp dword [esp + 0x50], ebx
je 0x4251e0
mov dword [esp], ebp
mov dword [esp + 4], 1
call fcn.00428df0
mov ebp, eax
mov eax, dword [esp + 0x28]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00428f20
test eax, eax
jle 0x4256fc
mov dword [esp + 0xa4], 0x11
mov dword [esp + 0x30], 0
mov eax, dword [esp + 0x38]
sub dword [esp + 0xac], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb4]
mov dword [esp], eax
call fcn.00424190
mov dword [esp + 0xb4], eax
jmp 0x4251e0
test ebx, ebx
je 0x425bbd
mov edi, dword [esp + 0x30]
test edi, edi
je 0x425c7c
mov ecx, dword [esp + 0xa8]
mov esi, dword [esp + 0xb4]
mov edx, ecx
lea eax, [esi + 0x14]
sar edx, 5
lea edx, [eax + edx*4]
cmp eax, edx
jae 0x425a81
cmp dword [esi + 0x14], 0xffffffff
lea eax, [esi + 0x18]
je 0x425a7d
jmp 0x425c7c
add eax, 4
cmp dword [eax - 4], 0xffffffff
jne 0x425c7c
cmp edx, eax
ja 0x425a70
and ecx, 0x1f
je 0x425a98
or edx, 0xffffffff
shl edx, cl
or edx, dword [eax]
mov eax, edx
add eax, 1
jne 0x425c7c
mov eax, dword [esp + 0x38]
mov ebx, dword [esp + 0x50]
mov dword [esi + 0x10], 1
mov dword [esi + 0x14], 1
mov dword [esp + 0xa8], 1
mov dword [esp + 0xa4], 0x21
lea eax, [eax + ebx - 1]
mov dword [esp + 0xac], eax
mov eax, 1
jmp 0x425703
mov ebp, dword [esp + 0x3c]
test ebp, ebp
je 0x425649
jmp 0x42527c
mov edi, dword [esp + 0x3c]
test edi, edi
jne 0x425649
jmp 0x42527c
add esi, eax
cmp eax, 1
mov eax, dword [esp + 0x28]
je 0x425b46
add ebp, eax
mov dword [esp + 0x50], esi
mov dword [esp + 0x48], ebx
mov dword [esp + 0x28], ebp
mov esi, dword [esp + 0x20]
jmp 0x425b23
lea edi, [edi + edi*4]
add edi, edi
cmp eax, ebp
je 0x425b3a
add eax, 1
lea ebx, [eax - 1]
cmp ebx, 8
jle 0x425b1a
cmp eax, 0x10
jg 0x425b1f
lea esi, [esi + esi*4]
add esi, esi
jmp 0x425b1f
mov dword [esp + 0x20], esi
mov ebx, dword [esp + 0x48]
mov esi, dword [esp + 0x50]
mov eax, dword [esp + 0x28]
lea ebp, [eax + 1]
cmp eax, 8
mov dword [esp + 0x28], ebp
jg 0x425c2b
mov edx, dword [esp + 0xb0]
jmp 0x424c1d
mov edx, dword [esp + 0xb4]
mov dword [esp + 0x30], 1
mov eax, dword [esp + 0x50]
mov dword [edx + 0x10], 0
mov dword [esp + 0xa4], 0x50
mov dword [esp + 0xac], eax
jmp 0x4251e0
mov esi, 1
jmp 0x4248db
mov eax, ebx
neg eax
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb4]
mov dword [esp], eax
call fcn.00429660
jmp 0x4258a3
cmp dword [esp + 0x40], 1
je 0x425c93
mov dword [esp + 0xa4], 0x21
mov esi, dword [esp + 0x30]
test esi, esi
jne 0x425be9
mov edi, dword [esp + 0x38]
cmp dword [esp + 0x40], edi
jl 0x4256fc
mov edx, dword [esp + 0xb4]
mov eax, dword [edx + 0x14]
test al, 1
je 0x4251e0
test ebx, ebx
jne 0x425d20
cmp dword [esp + 0x40], 1
je 0x425b75
sub eax, 1
mov dword [esp + 0xa4], 0x11
mov dword [edx + 0x14], eax
jmp 0x4251e0
xor esi, esi
jmp 0x424b49
cmp dword [esp + 0x28], 0x10
jg 0x425c40
mov eax, dword [esp + 0x20]
lea eax, [eax + eax*4]
lea eax, [edx + eax*2]
mov dword [esp + 0x20], eax
mov edx, dword [esp + 0xb0]
xor ebp, ebp
jmp 0x424915
cmp ecx, 0xffffffff
jl 0x424a88
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xa8], 1
mov dword [eax + 0x10], 1
mov dword [eax + 0x14], 1
jmp 0x424a5d
mov dword [esp + 0xa4], 0x11
jmp 0x425bd3
xor ebp, ebp
jmp 0x424bf6
mov ebx, dword [esp + 0x80]
cmp dword [esp + 0x50], ebx
jne 0x425d09
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xa4], 0x21
cmp dword [eax + 0x10], 1
jne 0x4251e0
cmp dword [eax + 0x14], 1
mov eax, dword [esp + 0x40]
cmovne eax, dword [esp + 0x78]
mov dword [esp + 0x78], eax
jmp 0x4251e0
mov eax, dword [esp + 0xf0]
mov dword [esp], esi
mov dword [esp + 8], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 4], eax
call fcn.0042a2c0
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0xe8]
mov eax, dword [eax + 8]
add eax, 1
jmp 0x424560
mov dword [esp + 0xa4], 1
jmp 0x4259fc
xor esi, esi
jmp 0x4257aa
mov dword [esp], edx
call fcn.00423cf0
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0xa8]
mov dword [esp + 0xb4], eax
bsr ecx, dword [eax + ecx*4 + 0x10]
mov eax, edx
neg eax
and eax, 0x1f
xor ecx, 0x1f
cmp ecx, eax
je 0x425d56
add edx, 1
mov dword [esp + 0xa8], edx
mov dword [esp + 0xa4], 0x21
jmp 0x4251e0