Function at 0x4241e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0xdc
call sub.msvcrt.dll_localeconv
mov eax, dword [eax]
mov dword [esp], eax
mov dword [esp + 0x34], eax
call sub.msvcrt.dll_strlen
mov ebp, dword [esp + 0xf8]
mov edx, dword [esp + 0xf0]
mov dword [esp + 0xb4], 0
mov dword [esp + 0xc4], 0
mov ebp, dword [ebp]
mov dword [esp + 0xc0], edx
fldz
fstp qword [esp + 0xc8]
mov dword [esp + 0x58], eax
mov eax, edx
mov dword [esp + 0x40], ebp
movsx edx, byte [eax]
cmp dl, 0x2d
jbe 0x424112
mov ebx, eax
mov dword [esp + 0x5c], 0
cmp dl, 0x30
mov dword [esp + 0x44], 0
je 0x424380
mov ebp, dword [esp + 0xf8]
cmp edx, 0x2f
mov edi, edx
mov ebp, dword [ebp + 0x10]
mov dword [esp + 0x88], ebp
jle 0x4254da
cmp edx, 0x39
jg 0x4254da
lea ebp, [ebx + 1]
xor esi, esi
mov dword [esp + 0x3c], ebx
xor eax, eax
xor ebx, ebx
mov dword [esp + 0x38], 0
jmp 0x4240ff
lea ecx, [esi + esi*4]
lea esi, [edx + ecx*2 - 0x30]
mov dword [esp + 0xc0], ebp
movsx edx, byte [ebp]
add eax, 1
mov ecx, ebp
cmp edx, 0x2f
mov edi, edx
jle 0x4241f0
add ebp, 1
cmp edx, 0x39
jg 0x4241f0
cmp eax, 8
jle 0x4240d1
cmp eax, 0xf
jg 0x4240d8
lea ecx, [ebx + ebx*4]
lea ebx, [edx + ecx*2 - 0x30]
jmp 0x4240d8
movzx ecx, dl
jmp dword [ecx*4 + 0x48fdcc]
mov dword [esp + 0x5c], 1
lea ebx, [eax + 1]
mov dword [esp + 0xc0], ebx
movsx edx, byte [eax + 1]
test dl, dl
jne 0x424084
mov ecx, dword [esp + 0xf0]
xor edi, edi
mov dword [esp + 0xb4], 6
mov dword [esp + 0x5c], 0
mov dword [esp + 0xc0], ecx
mov ebx, dword [esp + 0xf4]
test ebx, ebx
je 0x42417d
mov eax, dword [esp + 0xc0]
mov ebp, dword [esp + 0xf4]
mov dword [ebp], eax
mov ecx, dword [esp + 0x5c]
test ecx, ecx
jne 0x4241c5
test edi, edi
je 0x4241b3
mov eax, dword [esp + 0x100]
mov ebp, dword [esp + 0x40]
mov dword [esp + 8], edi
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.00428160
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.00427660
mov eax, dword [esp + 0xb4]
add esp, 0xdc
pop ebx
pop esi
pop edi
pop ebp
ret
or dword [esp + 0xb4], 8
jmp 0x424185
mov dword [esp + 0x5c], 0
jmp 0x424128
add eax, 1
mov dword [esp + 0xc0], eax
jmp 0x42406e
mov dword [esp + 0x38], ebx
mov ebx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x34]
movsx ebp, byte [ebp]
cmp ebp, edx
mov dword [esp + 0x3c], ebp
je 0x4246d0
mov dword [esp + 0x48], ebx
mov ebp, eax
xor ebx, ebx
mov dword [esp + 0x34], 0
mov dword [esp + 0x3c], 0
mov edx, edi
and edx, 0xffffffdf
cmp edx, 0x45
je 0x424345
xor edx, edx
test ebp, ebp
jne 0x4243e8
mov ecx, dword [esp + 0x34]
or ecx, dword [esp + 0x44]
jne 0x424339
mov eax, dword [esp + 0x3c]
test eax, eax
jne 0x4243c3
cmp edi, 0x4e
je 0x425793
nop
jg 0x425781
cmp edi, 0x49
jne 0x4243c3
lea ebx, [esp + 0xc0]
mov dword [esp + 4], 0x48fdc0
mov dword [esp], ebx
call fcn.00428110
test eax, eax
je 0x4243c3
mov dword [esp + 4], str.inity
mov dword [esp], ebx
sub dword [esp + 0xc0], 1
call fcn.00428110
test eax, eax
jne 0x4242b2
add dword [esp + 0xc0], 1
mov ebp, dword [esp + 0xf8]
mov dword [esp + 0xb4], 3
mov dword [esp + 0x44], 0
mov eax, dword [ebp + 8]
add eax, 1
mov edx, dword [esp + 0xfc]
mov dword [edx], eax
mov edi, dword [esp + 0xc4]
mov eax, dword [esp + 0x44]
test eax, eax
je 0x424161
mov ebp, dword [esp + 0x88]
test ebp, ebp
jne 0x424ac0
mov edx, dword [esp + 0xb4]
xor eax, eax
mov esi, dword [edi + 0x10]
and edx, 0xfffffff8
test esi, esi
setg al
add eax, eax
or eax, edx
test al, 0x30
mov dword [esp + 0xb4], eax
je 0x424161
or eax, 0x40
mov dword [esp + 0xb4], eax
call sub.msvcrt.dll__errno
mov dword [eax], 0x22
mov edi, dword [esp + 0xc4]
jmp 0x424161
mov edx, dword [esp + 0x34]
or edx, ebp
or edx, dword [esp + 0x44]
jne 0x4247b0
mov ecx, dword [esp + 0xf0]
mov dword [esp + 0xb4], 6
mov edi, dword [esp + 0xc4]
mov dword [esp + 0xc0], ecx
jmp 0x424161
movzx eax, byte [ebx + 1]
cmp al, 0x58
je 0x425470
cmp al, 0x78
je 0x425470
lea eax, [ebx + 1]
mov dword [esp + 0xc0], eax
mov ebx, eax
lea eax, [eax + 1]
movsx edx, byte [eax - 1]
cmp dl, 0x30
je 0x424397
xor edi, edi
test dl, dl
je 0x424161
mov dword [esp + 0x44], 1
jmp 0x424095
mov edx, dword [esp + 0xf0]
mov dword [esp + 0xb4], 6
mov edi, dword [esp + 0xc4]
mov dword [esp + 0xc0], edx
jmp 0x424161
mov ecx, dword [esp + 0xf8]
sub edx, ebx
mov dword [esp + 0x30], edx
mov dword [esp + 0xb4], 1
mov edx, dword [ecx + 0xc]
and edx, 3
mov ecx, edx
sub ecx, dword [esp + 0x5c]
cmp edx, 2
mov dword [esp + 0x78], ecx
je 0x424431
mov ecx, dword [esp + 0x5c]
add ecx, 1
cmp edx, 3
mov dword [esp + 0x78], ecx
je 0x424431
test edx, edx
sete dl
movzx edx, dl
mov dword [esp + 0x78], edx
test eax, eax
mov dword [esp + 0x34], ebp
je 0x42443d
mov dword [esp + 0x34], eax
cmp ebp, 0x10
mov ebx, ebp
jle 0x424449
mov ebx, 0x10
xor edx, edx
cmp ebx, 9
mov dword [esp + 0x90], esi
mov dword [esp + 0x94], edx
fild qword [esp + 0x90]
fst qword [esp + 0xc8]
jle 0x4244a0
fmul qword [ebx*8 + 0x48ff58]
xor edx, edx
mov eax, dword [esp + 0x38]
mov dword [esp + 0x94], edx
mov dword [esp + 0x90], eax
fild qword [esp + 0x90]
faddp st(1)
fstp qword [esp + 0xc8]
jmp 0x4244a2
fstp st(0)
cmp ebp, 0xf
jg 0x4244b2
cmp dword [esp + 0x40], 0x35
jle 0x42461d
mov eax, dword [esp + 0x30]
mov edx, ebp
sub edx, ebx
add eax, edx
cmp eax, 0
jle 0x425517
mov edx, eax
and edx, 0xf
je 0x4244e1
fld qword [esp + 0xc8]
fmul qword [edx*8 + 0x48ffa0]
fstp qword [esp + 0xc8]
and eax, 0xfffffff0
jne 0x4248f0
fld qword [esp + 0xc8]
xor ebx, ebx
lea eax, [esp + 0xb8]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xbc]
mov dword [esp + 8], eax
fstp qword [esp]
call fcn.00427e70
mov ecx, dword [esp + 0xbc]
mov edx, dword [esp + 0xb8]
add ecx, ebx
mov ebx, edx
sub ebx, dword [esp + 0x40]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xbc], ecx
test ebx, ebx
jle 0x424562
mov dword [esp], eax
mov dword [esp + 4], ebx
call fcn.00428270
mov ecx, dword [esp + 0xbc]
mov eax, dword [esp + 0x40]
add ecx, ebx
mov dword [esp + 0xb8], eax
mov edx, eax
mov dword [esp + 0xbc], ecx
mov eax, dword [esp + 0xf8]
lea ebx, [ecx + edx]
sub ebx, dword [esp + 0x40]
mov eax, dword [eax + 8]
mov dword [esp + 0x28], eax
add eax, 1
cmp ebx, eax
jg 0x42542d
mov eax, dword [esp + 0xf8]
mov eax, dword [eax + 4]
cmp ebx, eax
mov dword [esp + 0x60], eax
jge 0x425642
mov edi, ecx
sub edi, eax
cmp edi, 0
jle 0x424a0f
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.00427a60
add dword [esp + 0xb8], edi
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x60]
test eax, eax
mov dword [esp + 0xbc], edx
je 0x424b05
add ebx, 1
cmp edx, ebx
jle 0x424b09
mov edi, dword [esp + 0xc4]
mov ebp, dword [esp + 0x60]
mov edx, dword [esp + 0xfc]
mov dword [esp + 0xb4], 0x50
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov dword [edx], ebp
jmp 0x4242ee
cmp dword [esp + 0x30], 0
je 0x425656
jle 0x424a6b
cmp dword [esp + 0x30], 0x16
jg 0x425680
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0x30]
test eax, eax
mov edx, dword [ecx*4 + 0x48fea0]
je 0x42581d
bsf ecx, eax
mov eax, 0x35
sub eax, ecx
mov ecx, dword [esp + 0x30]
add eax, edx
fld qword [esp + 0xc8]
cmp eax, 0x35
setle al
movzx eax, al
fmul qword [ecx*8 + 0x48ffa0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x100]
lea ecx, [esp + 0xb4]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp], eax
fstp qword [esp + 0xc8]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xfc]
lea eax, [esp + 0xc8]
mov edx, dword [esp + 0xf8]
call fcn.00423c50
test eax, eax
jne 0x424339
xor eax, eax
jmp 0x4244b6
mov ebp, dword [esp + 0x34]
movzx edx, byte [ebp + 1]
test dl, dl
je 0x425a15
cmp dl, byte [ecx + 1]
jne 0x42420c
mov edx, 1
mov edi, ebp
mov dword [esp + 0x48], ebx
jmp 0x4246ff
cmp bl, byte [ecx + edx]
jne 0x4248d0
add edx, 1
movzx ebx, byte [edi + edx]
mov ebp, edx
test bl, bl
jne 0x4246f6
mov ebx, dword [esp + 0x48]
add ecx, ebp
test eax, eax
mov dword [esp + 0xc0], ecx
movsx edi, byte [ecx]
je 0x4249b4
mov dword [esp + 0x48], ebx
mov ebp, eax
xor ebx, ebx
mov dword [esp + 0x34], 0
lea ecx, [edi - 0x30]
cmp ecx, 9
mov dword [esp + 0x50], ecx
mov dword [esp + 0x3c], 1
ja 0x424224
mov edx, dword [esp + 0xc0]
add dword [esp + 0x34], 1
mov dword [esp + 0x3c], edx
mov edi, dword [esp + 0x50]
test edi, edi
je 0x425766
add ebx, dword [esp + 0x34]
cmp dword [esp + 0x34], 1
je 0x425bbb
mov edx, dword [esp + 0x34]
mov dword [esp + 0x60], ebp
lea edi, [ebp + edx - 1]
mov edx, ebp
mov ebp, dword [esp + 0x38]
jmp 0x424798
lea esi, [esi + esi*4]
add esi, esi
cmp edx, edi
je 0x425738
add edx, 1
lea ecx, [edx - 1]
cmp ecx, 8
jle 0x42478b
cmp edx, 0x10
jg 0x424790
lea ebp, [ebp + ebp*4]
add ebp, ebp
jmp 0x424790
mov edx, dword [esp + 0xc0]
mov dword [esp + 0xf0], edx
mov ecx, dword [esp + 0xf0]
add edx, 1
mov dword [esp + 0xc0], edx
movzx edx, byte [ecx + 1]
cmp dl, 0x2b
movsx edi, dl
je 0x425604
cmp dl, 0x2d
je 0x424a42
mov dword [esp + 0x60], 0
lea edx, [edi - 0x30]
cmp edx, 9
ja 0x424af0
cmp edi, 0x30
jne 0x424822
mov edx, dword [esp + 0xc0]
add edx, 1
nop
lea esi, [esi]
mov dword [esp + 0xc0], edx
movsx edi, byte [edx]
add edx, 1
cmp edi, 0x30
je 0x424810
lea ecx, [edi - 0x31]
xor edx, edx
cmp ecx, 8
ja 0x424234
mov ecx, dword [esp + 0xc0]
sub edi, 0x30
mov dword [esp + 0x30], edi
mov edx, ecx
add edx, 1
mov dword [esp + 0xc0], edx
movsx edi, byte [ecx + 1]
mov dword [esp + 0x50], ecx
cmp edi, 0x2f
jle 0x42489a
cmp edi, 0x39
jg 0x42489a
add edx, 1
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x64], ebp
jmp 0x424878
add edx, 1
cmp edi, 0x39
jg 0x424890
lea ecx, [ecx + ecx*4]
mov ebp, edx
lea ecx, [edi + ecx*2 - 0x30]
mov dword [esp + 0xc0], edx
movsx edi, byte [edx]
cmp edi, 0x2f
jg 0x424870
mov edx, ebp
mov ebp, dword [esp + 0x64]
mov dword [esp + 0x30], ecx
mov ecx, edx
mov edx, 0x4e1f
sub ecx, dword [esp + 0x50]
cmp ecx, 8
jg 0x4248bb
mov edx, dword [esp + 0x30]
cmp edx, 0x4e1f
jle 0x4248bb
mov edx, 0x4e1f
mov ecx, dword [esp + 0x60]
test ecx, ecx
je 0x424234
neg edx
jmp 0x424234
mov edi, dword [esp + 0x3c]
mov ebp, eax
xor ebx, ebx
mov dword [esp + 0x34], 0
mov dword [esp + 0x3c], 0
jmp 0x424224
sar eax, 4
cmp eax, 0xf
jle 0x425a96
fld qword [0x4900c0]
mov ecx, eax
xor edi, edi
mov edx, dword [esp + 0xcc]
sub ecx, 0x10
mov ebx, edx
and edx, 0x800fffff
or edx, 0x3ff00000
and ebx, 0x7ff00000
mov dword [esp + 0xcc], edx
shr ebx, 0x14
cmp ecx, 0xf
fld qword [esp + 0xc8]
lea edi, [edi + ebx - 0x3ff]
fmul st(1)
fstp qword [esp + 0xc8]
jg 0x424906
fstp st(0)
and eax, 0xf
mov ebx, edi
mov ecx, dword [esp + 0xcc]
mov edx, ecx
and ecx, 0x800fffff
and edx, 0x7ff00000
or ecx, 0x3ff00000
shr edx, 0x14
test eax, eax
lea ebx, [ebx + edx - 0x3ff]
mov dword [esp + 0xcc], ecx
je 0x425a9d
fld qword [esp + 0xc8]
xor edx, edx
fld st(0)
test al, 1
je 0x42499f
fstp st(1)
fmul qword [edx*8 + 0x4900a0]
fld st(0)
add edx, 1
sar eax, 1
jne 0x424990
fxch st(1)
fstp qword [esp + 0xc8]
jmp 0x4244f3
cmp edi, 0x30
jne 0x425b0f
lea edx, [ecx + 1]
mov dword [esp + 0xc0], edx
movsx edi, byte [edx]
mov ebp, edx
sub ebp, ecx
add edx, 1
cmp edi, 0x30
je 0x4249c0
mov dword [esp + 0x34], ebp
lea edx, [edi - 0x31]
cmp edx, 8
ja 0x425723
mov ebp, dword [esp + 0xc0]
sub edi, 0x30
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x50], edi
mov dword [esp + 0x34], 1
mov dword [esp + 0x48], ebp
mov dword [esp + 0x3c], ebp
xor ebp, ebp
jmp 0x42475c
je 0x4245c6
add edx, edi
test edx, edx
mov dword [esp + 0xb8], edx
jle 0x425ad1
mov eax, edi
neg eax
mov dword [esp + 4], eax
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.00428270
jmp 0x4245c6
mov dword [esp + 0x60], 1
mov edx, dword [esp + 0xf0]
add edx, 2
mov dword [esp + 0xc0], edx
mov edx, dword [esp + 0xf0]
movsx edi, byte [edx + 2]
jmp 0x4247f0
mov eax, dword [esp + 0x30]
cmp eax, 0xffffffea
jl 0x4244b6
neg eax
fld qword [esp + 0xc8]
fdiv qword [eax*8 + 0x48ffa0]
mov edx, dword [esp + 0x78]
lea eax, [esp + 0xb4]
mov ecx, dword [esp + 0x100]
mov dword [esp + 0xc], eax
mov dword [esp + 4], 0
mov dword [esp + 8], edx
mov dword [esp], ecx
fstp qword [esp + 0xc8]
jmp 0x4246a2
mov dword [edi + 0x10], 0
mov dword [esp + 0xb4], 0x50
call sub.msvcrt.dll__errno
mov edi, dword [esp + 0xc4]
mov dword [eax], 0x22
jmp 0x424161
mov edx, dword [esp + 0xf0]
mov dword [esp + 0xc0], edx
xor edx, edx
jmp 0x424234
mov edx, dword [esp + 0x60]
mov dword [esp + 0x8c], edx
mov dword [esp + 0x44], 1
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x34]
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], esi
xor esi, esi
mov dword [esp + 4], ebp
mov ebp, dword [esp + 0x48]
mov dword [esp + 0x10], eax
mov dword [esp], ebp
call fcn.00427fa0
mov ebp, dword [esp + 0x40]
add ebp, 1
mov dword [esp + 0x7c], ebp
mov ebp, dword [esp + 0x30]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x64]
neg ebp
sar eax, 0x1f
and ebp, eax
not eax
mov dword [esp + 0x58], ebp
mov ebp, dword [esp + 0x30]
add edx, 0xc
mov dword [esp + 0x80], edx
and eax, ebp
mov ebp, dword [esp + 0x78]
mov dword [esp + 0x3c], eax
and ebp, 1
mov dword [esp + 0x84], ebp
jmp 0x424d5e
mov edi, dword [esp + 0x78]
test edi, edi
je 0x424f49
mov edx, dword [esp + 0x84]
xor edx, esi
mov dword [esp + 0x70], edx
je 0x4258e6
test esi, esi
je 0x4251c0
fld1
xor esi, esi
fst qword [esp + 0x50]
mov dword [esp + 0xb4], 0x21
fstp qword [esp + 0x48]
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0x20
mov eax, dword [esp + 0xb8]
mov edx, dword [esp + 0xbc]
mov edi, dword [esp + 0x44]
add edx, eax
test edi, edi
mov dword [esp + 0x74], edx
jne 0x424c04
cmp dword [esp + 0x40], eax
jg 0x425362
lea eax, [esp + 0xb0]
fld qword [esp + 0x50]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xac]
mov dword [esp + 8], eax
fstp qword [esp]
call fcn.00427e70
mov edi, eax
mov eax, dword [esp + 0xac]
cmp eax, 0
jl 0x4253a0
je 0x424c48
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.00427a60
mov edi, eax
mov ebx, dword [esp + 0xc4]
test esi, esi
mov dword [esp + 4], edi
mov dword [esp], ebx
je 0x424fd5
call fcn.00427bd0
mov esi, dword [esp + 0x44]
mov edx, dword [ebx + 0x10]
test esi, esi
mov dword [esp + 0xc4], eax
jne 0x424cb5
lea ecx, [edx - 1]
cmp ecx, dword [eax + 0x10]
jge 0x424c94
add edx, 3
bsr ecx, dword [eax + edx*4 + 4]
bsr edx, dword [ebx + edx*4 + 4]
xor ecx, 0x1f
xor edx, 0x1f
cmp ecx, edx
jle 0x424cb5
mov edx, dword [esp + 0x60]
cmp dword [esp + 0x8c], edx
jne 0x425170
sub dword [esp + 0xb8], 1
mov dword [esp + 0x44], 1
mov dword [esp], edi
call fcn.00427660
mov dword [esp], ebx
call fcn.00427660
mov edx, dword [esp + 0x70]
test edx, edx
jne 0x425050
mov eax, dword [esp + 0x68]
test eax, eax
je 0x424d24
mov eax, dword [esp + 0xbc]
add eax, dword [esp + 0xb8]
cmp dword [esp + 0x74], eax
jne 0x424d24
fld qword [esp + 0x50]
fmul qword [0x48ff10]
fld qword [esp + 0x48]
fsub dword [0x48ff04]
fld st(1)
fchs
fucomp st(1)
fnstsw ax
sahf
jbe 0x425330
fstp st(0)
fld qword [esp + 0x48]
fucompp
fnstsw ax
sahf
jbe 0x424d24
jmp 0x425352
fstp st(0)
mov eax, dword [esp + 0x44]
xor esi, esi
test eax, eax
je 0x4251a7
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.00427660
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.00427660
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.00427660
mov dword [esp], ebp
call fcn.00427660
mov edx, dword [esp + 0x64]
mov eax, dword [edx + 4]
mov dword [esp], eax
call fcn.004275a0
mov ecx, dword [esp + 0x64]
mov ebp, dword [esp + 0x80]
mov edx, dword [ecx + 0x10]
mov dword [esp + 4], ebp
mov dword [esp + 0x34], eax
add eax, 0xc
mov dword [esp], eax
lea edx, [edx*4 + 8]
mov dword [esp + 8], edx
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0xc4]
mov eax, dword [eax + 4]
mov dword [esp], eax
call fcn.004275a0
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0xc4]
mov edx, dword [esp + 0x30]
mov ecx, dword [eax + 0x10]
add eax, 0xc
add edx, 0xc
mov dword [esp], edx
mov dword [esp + 4], eax
lea ecx, [ecx*4 + 8]
mov dword [esp + 8], ecx
call sub.msvcrt.dll_memcpy
mov ebx, dword [esp + 0xb8]
mov dword [esp], 1
mov ebp, dword [esp + 0xbc]
call fcn.004277b0
sub ebx, esi
add ebp, esi
test ebp, ebp
mov dword [esp + 0x38], eax
js 0x425160
mov edi, dword [esp + 0x58]
mov edx, dword [esp + 0x3c]
add edi, ebp
mov eax, dword [esp + 0x7c]
add ebp, ebx
sub ebp, dword [esp + 0x40]
sub eax, ebx
cmp dword [esp + 0x60], ebp
jle 0x424e26
sub ebp, dword [esp + 0x60]
add eax, ebp
lea ecx, [edi + eax]
lea ebp, [edx + eax]
mov edx, ecx
cmp ecx, ebp
jle 0x424e34
mov edx, ebp
cmp edx, edi
jle 0x424e3a
mov edx, edi
test edx, edx
jle 0x424e44
sub ecx, edx
sub ebp, edx
sub edi, edx
mov eax, dword [esp + 0x58]
test eax, eax
je 0x424e98
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x38]
mov dword [esp + 0x20], ecx
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00427940
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.004277e0
mov edx, dword [esp + 0x30]
mov dword [esp], edx
mov dword [esp + 0x24], eax
call fcn.00427660
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x30], eax
sub ecx, esi
cmp ecx, 0
jle 0x424fb8
mov eax, dword [esp + 0x30]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.00427a60
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x424ed7
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x34]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00427940
mov dword [esp + 0x34], eax
test ebp, ebp
jle 0x424eef
mov eax, dword [esp + 0x34]
mov dword [esp + 4], ebp
mov dword [esp], eax
call fcn.00427a60
mov dword [esp + 0x34], eax
test edi, edi
jle 0x424f07
mov eax, dword [esp + 0x38]
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.00427a60
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.00427bd0
cmp dword [eax + 0x10], 1
mov ebp, eax
jle 0x425040
mov eax, dword [esp + 0x38]
mov esi, dword [ebp + 0xc]
mov dword [ebp + 0xc], 0
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00427b60
test eax, eax
jle 0x424b90
cmp eax, 0
jl 0x425838
je 0x4258fd
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00428080
fld dword [0x48ff00]
fucomp st(1)
fnstsw ax
sahf
jb 0x425270
fstp st(0)
test esi, esi
jne 0x4253d0
mov dword [esp + 0x70], 0
cmp ebx, 1
jle 0x4259e0
fld1
mov esi, 1
fst qword [esp + 0x50]
mov dword [esp + 0x68], 0
fstp qword [esp + 0x48]
mov dword [esp + 0x6c], 0x10
jmp 0x424bde
je 0x424eb7
mov eax, dword [esp + 0x30]
neg ecx
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.00428270
jmp 0x424eb7
call fcn.004283c0
mov edx, dword [eax + 0x10]
mov dword [esp + 0xc4], eax
lea ecx, [edx - 1]
cmp ecx, dword [ebx + 0x10]
jge 0x425007
add edx, 3
bsr ecx, dword [eax + edx*4 + 4]
bsr edx, dword [ebx + edx*4 + 4]
xor ecx, 0x1f
xor edx, 0x1f
cmp ecx, edx
jge 0x424cb5
mov ecx, dword [esp + 0x44]
test ecx, ecx
je 0x425400
mov eax, dword [esp + 0xb8]
add eax, 1
cmp dword [esp + 0x40], eax
mov dword [esp + 0xb8], eax
sete al
movzx eax, al
sub eax, 1
and dword [esp + 0x44], eax
jmp 0x424cb5
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x424f27
nop
lea esi, [esi]
mov eax, dword [esp + 0x44]
test eax, eax
je 0x4254ed
mov eax, dword [esp + 0xbc]
mov edx, dword [esp + 0xfc]
mov dword [edx], eax
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.00427660
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.00427660
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.00427660
mov eax, dword [esp + 0x64]
mov dword [esp], eax
call fcn.00427660
mov dword [esp], ebp
call fcn.00427660
mov ebp, dword [esp + 0xf8]
mov eax, dword [esp + 0xbc]
cmp dword [ebp + 8], eax
jge 0x4242db
mov ebp, dword [esp + 0xf8]
mov eax, dword [ebp + 0xc]
and eax, 3
cmp eax, 2
je 0x4259bd
cmp eax, 3
je 0x4259ac
cmp eax, 1
je 0x425435
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.00427660
mov ebp, dword [esp + 0xf8]
mov edx, dword [esp + 0xfc]
mov ecx, dword [esp + 0x100]
mov dword [esp + 0xc4], 0
mov eax, dword [ebp + 8]
mov dword [esp + 0xb4], 0x11
mov dword [edx], eax
mov edx, dword [ebp]
lea eax, [edx + 0x1f]
sar eax, 5
lea eax, [ecx + eax*4]
cmp ecx, eax
jae 0x42513f
mov dword [ecx], 0xffffffff
add ecx, 4
cmp eax, ecx
ja 0x425132
xor edi, edi
and edx, 0x1f
je 0x4242e2
mov ecx, 0x20
sub ecx, edx
shr dword [eax - 4], cl
jmp 0x4242e2
mov edx, dword [esp + 0x3c]
mov edi, dword [esp + 0x58]
sub edx, ebp
jmp 0x424e0e
mov dword [esp + 4], 1
mov dword [esp], eax
call fcn.00427a60
mov dword [esp], edi
sub dword [esp + 0xbc], 1
sub dword [esp + 0x8c], 1
mov dword [esp + 0xc4], eax
call fcn.00427660
mov dword [esp], ebx
call fcn.00427660
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.00428380
mov esi, eax
jmp 0x424d32
mov edx, dword [esp + 0x60]
cmp dword [esp + 0x8c], edx
mov dword [esp + 0xb4], 0x11
je 0x424f8b
cmp dword [esp + 0x40], 0x1f
jle 0x4259ce
mov edx, dword [esp + 0xc4]
mov esi, dword [edx + 0x14]
test esi, esi
jne 0x424f8b
mov eax, dword [esp + 0x40]
xor esi, esi
jmp 0x42520d
mov ecx, dword [edx + esi*4 + 0x14]
test ecx, ecx
jne 0x424f8b
sub eax, 0x20
add esi, 1
cmp eax, 0x1f
jg 0x425201
cmp eax, 1
jle 0x425238
add esi, 4
sub eax, 1
mov edi, dword [edx + esi*4 + 4]
bsf ecx, edi
shr edi, cl
cmp eax, ecx
mov dword [edx + esi*4 + 4], edi
jg 0x424f8b
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x8c]
mov dword [esp], edx
mov dword [esp + 4], ecx
sub eax, 1
mov dword [esp + 0xbc], eax
mov dword [esp + 0xb8], ecx
call fcn.00423f90
mov dword [esp + 0xc4], eax
jmp 0x425050
fld dword [0x48ff04]
cmp esi, 1
fmul st(1), st(0)
fxch st(1)
sbb ecx, ecx
and ecx, 0x10
add ecx, 0x10
cmp esi, 1
sbb esi, esi
and esi, 1
fstp qword [esp + 0x48]
fld qword [0x48ff08]
fld qword [esp + 0x48]
fxch st(1)
fucomp st(1)
fnstsw ax
mov dword [esp + 0x6c], ecx
sahf
jbe 0x4253b3
fnstcw word [esp + 0x9a]
fld st(0)
cmp dword [esp + 0x78], 1
movzx eax, word [esp + 0x9a]
mov ah, 0xc
mov word [esp + 0x98], ax
fldcw word [esp + 0x98]
fistp dword [esp + 0x68]
fldcw word [esp + 0x9a]
fild dword [esp + 0x68]
fst qword [esp + 0x50]
fsubp st(1)
fst qword [esp + 0x48]
je 0x425611
cmp dword [esp + 0x78], 2
je 0x425633
fucompp
fnstsw ax
sahf
jb 0x425320
add dword [esp + 0x68], 1
mov eax, 0x30
sub eax, dword [esp + 0x6c]
fild dword [esp + 0x68]
mov dword [esp + 0x6c], eax
fstp qword [esp + 0x50]
nop
mov dword [esp + 0x70], 0
jmp 0x424bde
fucomp st(1)
fnstsw ax
sahf
jbe 0x424d22
fsubr dword [0x48fefc]
fld qword [esp + 0x48]
fxch st(1)
fucompp
fnstsw ax
sahf
jbe 0x424d24
mov edx, dword [esp + 0x6c]
or dword [esp + 0xb4], edx
jmp 0x425050
mov ebx, dword [esp + 0x40]
sub ebx, eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00427a60
mov ecx, dword [esp + 0x40]
sub dword [esp + 0xbc], ebx
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xc4], eax
jmp 0x424c04
neg eax
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00428270
jmp 0x424c48
fstp st(0)
fstp st(0)
fld qword [esp + 0x48]
fstp qword [esp + 0x50]
mov dword [esp + 0x68], 0
jmp 0x425320
fld1
xor esi, esi
fst qword [esp + 0x50]
mov dword [esp + 0x68], 0
fstp qword [esp + 0x48]
mov dword [esp + 0x6c], 0x20
mov dword [esp + 0x70], 0
jmp 0x424bde
mov dword [esp + 4], 1
mov dword [esp], eax
call fcn.00428270
add dword [esp + 0xbc], 1
add dword [esp + 0x8c], 1
mov dword [esp + 0x68], 0
jmp 0x424cb5
mov dword [esp + 0x44], 0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xb4], 0xa3
mov dword [eax + 0x10], 0
call sub.msvcrt.dll__errno
mov ebp, dword [esp + 0xf8]
mov dword [eax], 0x22
mov eax, dword [ebp + 8]
add eax, 1
jmp 0x4242d2
mov ebp, dword [esp + 0x5c]
lea eax, [esp + 0xc4]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0xf8]
mov dword [esp + 8], eax
lea eax, [esp + 0xc0]
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.00428540
mov edi, dword [esp + 0xc4]
cmp eax, 6
mov dword [esp + 0xb4], eax
jne 0x424161
mov edx, dword [esp + 0xf0]
mov dword [esp + 0x5c], 0
mov dword [esp + 0xc0], edx
jmp 0x424161
mov ecx, ebx
xor esi, esi
mov dword [esp + 0x38], 0
xor eax, eax
jmp 0x4241f8
mov eax, dword [esp + 0xb8]
mov ebx, dword [esp + 0x40]
sub ebx, eax
cmp ebx, 0
jne 0x4256e6
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x44], 0
jmp 0x425063
je 0x4244ea
neg eax
mov edx, eax
and edx, 0xf
je 0x42553b
fld qword [esp + 0xc8]
fdiv qword [edx*8 + 0x48ffa0]
fstp qword [esp + 0xc8]
and eax, 0xfffffff0
je 0x4244ea
sar eax, 4
cmp eax, 0xf
jle 0x425bb4
fld qword [0x490080]
mov ecx, eax
xor edi, edi
lea esi, [esi]
mov edx, dword [esp + 0xcc]
sub ecx, 0x10
mov ebx, edx
and edx, 0x800fffff
or edx, 0x3ff00000
and ebx, 0x7ff00000
mov dword [esp + 0xcc], edx
shr ebx, 0x14
cmp ecx, 0xf
fld qword [esp + 0xc8]
lea edi, [edi + ebx - 0x3ff]
fmul st(1)
fstp qword [esp + 0xc8]
jg 0x425560
fstp st(0)
and eax, 0xf
mov ecx, dword [esp + 0xcc]
mov edx, ecx
and ecx, 0x800fffff
and edx, 0x7ff00000
or ecx, 0x3ff00000
shr edx, 0x14
lea ebx, [edi + edx - 0x3ff]
xor edx, edx
mov dword [esp + 0xcc], ecx
test eax, eax
fld qword [esp + 0xc8]
jle 0x4244f3
test al, 1
je 0x4255f1
fmul qword [edx*8 + 0x490060]
add edx, 1
sar eax, 1
jne 0x4255e6
fst qword [esp + 0xc8]
jmp 0x4244f3
mov dword [esp + 0x60], 0
jmp 0x424a4a
fstp st(0)
fstp st(0)
test esi, esi
je 0x425320
fldz
fld qword [esp + 0x48]
fucompp
fnstsw ax
sahf
ja 0x425304
jmp 0x425320
fstp st(0)
fstp st(0)
test esi, esi
jne 0x425320
nop
jmp 0x42561d
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x44], 0
jmp 0x424b18
lea eax, [esp + 0xb4]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 4], 1
mov dword [esp + 8], ecx
mov dword [esp], eax
jmp 0x4246a2
mov eax, dword [esp + 0x30]
mov edx, 0x25
sub edx, ebp
cmp eax, edx
jg 0x4244b6
mov eax, 0xf
fld qword [esp + 0xc8]
sub eax, ebp
mov edx, dword [esp + 0x30]
fmul qword [eax*8 + 0x48ffa0]
mov ecx, dword [esp + 0x78]
mov dword [esp + 4], 0
sub edx, eax
lea eax, [esp + 0xb4]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x100]
fmul qword [edx*8 + 0x48ffa0]
mov dword [esp + 8], ecx
mov dword [esp], eax
fstp qword [esp + 0xc8]
jmp 0x4246a2
jle 0x425a7a
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00427a60
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x44], 0
sub eax, ebx
mov dword [esp + 0xbc], eax
jmp 0x425063
mov dword [esp + 0x48], ebx
xor ebp, ebp
xor ebx, ebx
mov dword [esp + 0x3c], 1
jmp 0x424224
mov dword [esp + 0x38], ebp
mov ecx, dword [esp + 0x34]
mov ebp, dword [esp + 0x60]
lea edx, [ebp + ecx - 1]
cmp edx, 8
lea ebp, [edx + 1]
jg 0x425aa9
mov ecx, dword [esp + 0x50]
lea edx, [esi + esi*4]
mov dword [esp + 0x34], 0
lea esi, [ecx + edx*2]
mov edx, dword [esp + 0x3c]
add edx, 1
mov dword [esp + 0xc0], edx
mov edx, dword [esp + 0x3c]
movsx edi, byte [edx + 1]
jmp 0x424734
cmp edi, 0x69
je 0x42426f
cmp edi, 0x6e
jne 0x4243c3
lea ebx, [esp + 0xc0]
mov dword [esp + 4], 0x48fdc9
mov dword [esp], ebx
call fcn.00428110
test eax, eax
je 0x4243c3
mov ebp, dword [esp + 0xf8]
mov edx, dword [esp + 0xfc]
mov dword [esp + 0xb4], 4
mov dword [esp + 0x44], 0
mov ebp, dword [ebp + 8]
mov eax, ebp
add eax, 1
mov dword [edx], eax
mov edx, dword [esp + 0xc0]
cmp byte [edx], 0x28
jne 0x4242d2
mov ebp, dword [esp + 0xf8]
mov ecx, dword [esp + 0x100]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.00428ec0
mov dword [esp + 0xb4], eax
mov eax, dword [ebp + 8]
add eax, 1
jmp 0x4242d2
mov eax, dword [esp + 0xcc]
or eax, 0x100000
bsf ecx, eax
mov eax, 0x15
sub eax, ecx
jmp 0x42465d
cmp esi, 1
sbb eax, eax
and eax, 0x10
add eax, 0x11
cmp ebx, 1
mov dword [esp + 0xb4], eax
jg 0x425050
test esi, esi
jne 0x425050
mov edx, dword [esp + 0x60]
cmp dword [esp + 0x8c], edx
je 0x425050
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x425050
mov dword [esp], ebp
mov dword [esp + 4], 1
call fcn.00427a60
mov ebp, eax
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00427b60
test eax, eax
jle 0x4254ed
mov dword [esp + 0xb4], 0x11
mov dword [esp + 0x44], 0
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0xc4]
sub dword [esp + 0xbc], ecx
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xb8], ecx
call fcn.00423f90
mov dword [esp + 0xc4], eax
jmp 0x425050
cmp esi, 1
sbb eax, eax
and eax, 0x10
add eax, 0x11
mov dword [esp + 0xb4], eax
jmp 0x425050
test esi, esi
je 0x425a1f
mov eax, dword [esp + 0x44]
test eax, eax
je 0x425aff
mov edx, dword [esp + 0xb8]
mov edi, dword [esp + 0xc4]
mov dword [esp + 0x58], edx
sar edx, 5
lea eax, [edi + 0x14]
lea ecx, [edi + edx*4 + 0x14]
cmp eax, ecx
jae 0x425952
cmp dword [edi + 0x14], 0xffffffff
lea eax, [edi + 0x18]
je 0x42594e
jmp 0x425aff
mov edx, dword [eax]
add eax, 4
cmp edx, 0xffffffff
jne 0x425aff
cmp ecx, eax
ja 0x425940
mov ecx, dword [esp + 0x58]
and ecx, 0x1f
je 0x42596b
or edx, 0xffffffff
shl edx, cl
or edx, dword [eax]
add edx, 1
jne 0x425aff
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x60]
mov dword [edi + 0x10], 1
mov dword [edi + 0x14], 1
mov dword [esp + 0xb8], 1
lea eax, [ecx + edx - 1]
mov dword [esp + 0xbc], eax
mov eax, 1
mov dword [esp + 0xb4], 0x21
jmp 0x4254f4
mov eax, dword [esp + 0x5c]
test eax, eax
jne 0x425435
jmp 0x4250e3
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x425435
jmp 0x4250e3
mov eax, dword [esp + 0x40]
xor esi, esi
mov edx, dword [esp + 0xc4]
jmp 0x425218
mov eax, dword [esp + 0x44]
test eax, eax
je 0x424f94
mov edx, dword [esp + 0xc4]
mov dword [edx + 0x10], 0
mov edx, dword [esp + 0x60]
mov dword [esp + 0xb4], 0x50
mov dword [esp + 0xbc], edx
jmp 0x425050
mov ebp, 1
jmp 0x424710
cmp ebx, 1
je 0x425b1c
mov dword [esp + 0xb4], 0x21
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x425a45
cmp dword [esp + 0x40], ebx
jg 0x4254ed
mov edx, dword [esp + 0xc4]
mov eax, dword [edx + 0x14]
test al, 1
je 0x425050
test esi, esi
jne 0x425b6e
cmp ebx, 1
je 0x4259f3
sub eax, 1
mov dword [edx + 0x14], eax
mov dword [esp + 0xb4], 0x11
jmp 0x425050
mov eax, ebx
neg eax
mov dword [esp + 4], eax
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.00428270
jmp 0x425706
xor ebx, ebx
jmp 0x424951
fld qword [esp + 0xc8]
jmp 0x4244f3
cmp ebp, 0x10
mov dword [esp + 0x34], 0
jg 0x425766
mov ecx, dword [esp + 0x38]
lea edx, [ecx + ecx*4]
mov ecx, dword [esp + 0x50]
lea edx, [ecx + edx*2]
mov dword [esp + 0x38], edx
jmp 0x425766
cmp edx, 0xffffffff
jl 0x4245eb
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xb8], 1
mov dword [eax + 0x10], 1
mov dword [eax + 0x14], 1
jmp 0x4245c6
mov dword [esp + 0xb4], 0x11
jmp 0x425a33
mov dword [esp + 0x34], 0
jmp 0x4249da
mov edx, dword [esp + 0x60]
cmp dword [esp + 0x8c], edx
mov dword [esp + 0xb4], 1
jne 0x4258b5
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xb4], 0x21
cmp dword [eax + 0x10], 1
jne 0x425050
cmp dword [eax + 0x14], 1
jne 0x425050
mov dword [esp + 0x88], 1
jmp 0x425050
mov dword [esp], edx
call fcn.00423bb0
mov ecx, dword [esp + 0xb8]
mov edx, dword [eax + 0x10]
mov dword [esp + 0xc4], eax
bsr eax, dword [eax + edx*4 + 0x10]
mov edx, ecx
neg edx
and edx, 0x1f
xor eax, 0x1f
cmp edx, eax
je 0x425ba4
add ecx, 1
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xb4], 0x21
jmp 0x425050
xor edi, edi
jmp 0x4255a9
mov edx, ebp
jmp 0x425748