Function at 0x422860
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
xor eax, eax
fldz
push edi
xor edi, edi
push esi
push ebx
sub esp, 0xec
mov ebp, dword [esp + 0x100]
mov dword [esp + 0xdc], eax
xor eax, eax
mov ebx, ebp
mov dword [esp + 0x74], eax
xor eax, eax
mov dword [esp + 0x70], eax
xor eax, eax
mov dword [esp + 0x64], eax
xor eax, eax
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x108]
fstp qword [esp + 0xc8]
mov dword [esp + 0xe4], edi
mov eax, dword [eax]
mov dword [esp + 0xe0], ebp
mov dword [esp + 0x84], eax
movsx eax, byte [ebx]
cmp eax, 0x2d
ja case.0x4228cc.237
jmp dword [eax*4 + 0x48a820]
mov esi, 1
mov dword [esp + 0x64], esi
mov eax, ebx
inc ebx
mov dword [esp + 0xe0], ebx
cmp byte [eax + 1], 0
jne case.0x4228cc.237
xor ecx, ecx
mov dword [esp + 0x64], ecx
mov dword [esp + 0xe0], ebp
mov esi, 6
mov dword [esp + 0xdc], esi
mov ebx, dword [esp + 0xe4]
mov ebp, dword [esp + 0x104]
test ebp, ebp
je 0x422927
mov eax, dword [esp + 0xe0]
mov edx, dword [esp + 0x104]
mov dword [edx], eax
mov edi, dword [esp + 0x64]
test edi, edi
je 0x422937
or dword [esp + 0xdc], 8
test ebx, ebx
jne 0x422c42
mov eax, dword [esp + 0xdc]
add esp, 0xec
pop ebx
pop esi
pop edi
pop ebp
ret
cmp byte [ebx], 0x30
je 0x423599
mov dword [esp + 0x5c], ebx
mov esi, dword [esp + 0x108]
xor eax, eax
mov dword [esp + 0x80], eax
xor ecx, ecx
xor edx, edx
mov dword [esp + 0x40], ecx
xor eax, eax
mov esi, dword [esi + 0x10]
mov dword [esp + 0x78], edx
mov dword [esp + 0xa0], eax
mov dword [esp + 0x60], esi
xor esi, esi
mov dword [esp + 0x3c], esi
movsx esi, byte [ebx]
cmp esi, 0x2f
jle 0x4229e0
nop
lea esi, [esi]
cmp esi, 0x39
jg 0x4229e0
cmp dword [esp + 0x80], 8
jg 0x422c20
mov edi, dword [esp + 0x40]
lea eax, [edi + edi*4]
lea eax, [esi + eax*2 - 0x30]
mov dword [esp + 0x40], eax
inc dword [esp + 0x80]
mov eax, ebx
inc ebx
mov dword [esp + 0xe0], ebx
movsx esi, byte [eax + 1]
cmp esi, 0x2f
jg 0x4229a0
lea esi, [esi]
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x7c], ecx
call sub.msvcrt.dll_localeconv
mov eax, dword [eax]
movsx eax, byte [eax]
cmp eax, esi
je 0x4235df
xor edi, edi
cmp esi, 0x65
sete al
mov dword [esp + 0x98], edi
cmp esi, 0x45
sete dl
or eax, edx
test al, 1
je 0x422b20
mov eax, dword [esp + 0x80]
mov ebx, dword [esp + 0x74]
or eax, ebx
or eax, dword [esp + 0x70]
je 0x4228f2
mov ebp, dword [esp + 0xe0]
xor edi, edi
lea eax, [ebp + 1]
mov dword [esp + 0xe0], eax
mov ebx, eax
movsx esi, byte [ebp + 1]
cmp esi, 0x2b
je 0x423c4c
cmp esi, 0x2d
je 0x423c47
lea eax, [esi - 0x30]
cmp eax, 9
ja 0x423706
cmp esi, 0x30
jne 0x422a82
mov eax, ebx
inc ebx
mov dword [esp + 0xe0], ebx
movsx esi, byte [eax + 1]
cmp esi, 0x30
je 0x422a6f
lea eax, [esi - 0x31]
xor ecx, ecx
cmp eax, 8
mov dword [esp + 0x98], ecx
ja 0x422b20
sub esi, 0x30
mov ecx, ebx
inc ebx
mov dword [esp + 0x44], esi
mov dword [esp + 0xe0], ebx
movsx esi, byte [ecx + 1]
cmp esi, 0x2f
jle 0x422ae2
cmp esi, 0x39
jg 0x422ae2
lea edx, [ecx + 2]
mov dword [esp + 0xe0], edx
mov ebx, dword [esp + 0x44]
lea eax, [ebx + ebx*4]
lea eax, [esi + eax*2 - 0x30]
mov ebx, edx
lea edx, [edx + 1]
mov dword [esp + 0x44], eax
movsx esi, byte [edx - 1]
cmp esi, 0x2f
jle 0x422ae2
cmp esi, 0x39
jle 0x422ab9
sub ebx, ecx
cmp ebx, 8
setg al
cmp dword [esp + 0x44], 0x4e1f
setg dl
or eax, edx
test al, 1
mov edx, 0x4e1f
mov dword [esp + 0x98], edx
jne 0x422b12
mov eax, dword [esp + 0x44]
mov dword [esp + 0x98], eax
test edi, edi
je 0x422b20
neg dword [esp + 0x98]
lea esi, [esi]
mov eax, dword [esp + 0x80]
test eax, eax
jne 0x422c81
mov edx, dword [esp + 0x74]
or edx, dword [esp + 0x70]
jne 0x422905
mov eax, dword [esp + 0xa0]
test eax, eax
jne 0x4228f2
cmp esi, 0x4e
je 0x423749
jg 0x423737
cmp esi, 0x49
jne 0x4228f2
mov eax, 0x48a7fc
lea ebx, [esp + 0xe0]
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.00426b20
test eax, eax
je 0x4228f2
dec dword [esp + 0xe0]
mov eax, 0x48a7ff
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.00426b20
mov edx, dword [esp + 0xe0]
cmp eax, 1
mov eax, 3
mov dword [esp + 0xdc], eax
mov ecx, dword [esp + 0x108]
adc edx, 0
mov dword [esp + 0xe0], edx
mov edx, dword [ecx + 8]
mov edi, dword [esp + 0x10c]
lea eax, [edx + 1]
mov dword [edi], eax
mov edi, dword [esp + 0x9c]
mov ebx, dword [esp + 0xe4]
test edi, edi
je 0x42290c
mov esi, dword [esp + 0x60]
test esi, esi
je 0x423d02
mov dword [ebx + 0x10], 0
mov ecx, 0x50
mov dword [esp + 0xdc], ecx
jmp 0x42290c
inc ebx
mov dword [esp + 0xe0], ebx
jmp 0x4228c0
cmp dword [esp + 0x80], 0xf
jg 0x4229c2
mov edx, dword [esp + 0x3c]
lea eax, [edx + edx*4]
lea eax, [esi + eax*2 - 0x30]
mov dword [esp + 0x3c], eax
jmp 0x4229c2
mov dword [esp + 8], ebx
mov ecx, dword [esp + 0x84]
mov ebx, dword [esp + 0x110]
mov dword [esp + 4], ecx
mov dword [esp], ebx
call fcn.00426b70
mov eax, dword [esp + 0xe4]
mov dword [esp], eax
call fcn.00425d70
mov eax, dword [esp + 0xdc]
add esp, 0xec
pop ebx
pop esi
pop edi
pop ebp
ret
xor ecx, ecx
mov ebx, 1
mov edx, dword [esp + 0x78]
mov dword [esp + 0x6c], ecx
mov ecx, dword [esp + 0x108]
mov dword [esp + 0xdc], ebx
sub dword [esp + 0x98], edx
mov eax, dword [ecx + 0xc]
mov ebx, dword [esp + 0x98]
and eax, 3
cmp eax, 2
je 0x423c6b
jg 0x423712
test eax, eax
je 0x423729
mov edi, dword [esp + 0x7c]
test edi, edi
jne 0x422cdc
mov edi, dword [esp + 0x80]
mov dword [esp + 0x7c], edi
mov edi, dword [esp + 0x80]
cmp edi, 0x10
jle 0x422ced
mov edi, 0x10
mov eax, dword [esp + 0x40]
xor edx, edx
push edx
push eax
fild qword [esp]
add esp, 8
cmp edi, 9
jle 0x422d17
fmul qword [edi*8 + 0x48a918]
xor edx, edx
mov eax, dword [esp + 0x3c]
push edx
push eax
fild qword [esp]
add esp, 8
faddp st(1)
cmp dword [esp + 0x84], 0x35
setle al
xor edx, edx
cmp dword [esp + 0x80], 0xf
setle dl
test edx, eax
je 0x423c14
cmp dword [esp + 0x98], 0
je 0x423e1a
jle 0x423f2d
cmp dword [esp + 0x98], 0x16
jg 0x423e66
fst qword [esp + 0xd0]
mov eax, dword [esp + 0xd0]
test eax, eax
je 0x423f8c
bsf eax, eax
mov edx, 0x35
sub edx, eax
mov eax, dword [esp + 0x98]
mov ebx, dword [esp + 0x6c]
mov esi, dword [esp + 0x110]
mov ecx, dword [eax*4 + 0x48a7a0]
lea eax, [esp + 0xdc]
mov dword [esp + 0x1c], eax
add edx, ecx
xor ecx, ecx
mov dword [esp + 0x18], ebx
cmp edx, 0x35
mov edx, dword [esp + 0x98]
mov dword [esp + 0x10], esi
mov eax, dword [esp + 0x10c]
setle cl
mov dword [esp + 0x14], ecx
fmul qword [edx*8 + 0x48a960]
mov edx, dword [esp + 0x108]
mov dword [esp + 0xc], eax
mov dword [esp + 8], edx
fst qword [esp + 0xc8]
fstp qword [esp]
xor ebx, ebx
call fcn.00422460
test eax, eax
jne 0x422905
mov eax, dword [esp + 0x80]
xor esi, esi
sub eax, edi
add ebx, eax
test ebx, ebx
jle 0x423d34
mov ecx, ebx
and ecx, 0xf
je 0x422e21
fld qword [ecx*8 + 0x48a960]
fmul qword [esp + 0xc8]
fstp qword [esp + 0xc8]
and ebx, 0xfffffff0
je 0x423c20
sar ebx, 4
cmp ebx, 0xf
lea ecx, [esp + 0xc8]
jle 0x422e7d
fld qword [0x48aa80]
nop
mov edx, dword [ecx + 4]
sub ebx, 0x10
mov eax, edx
and edx, 0x800fffff
and eax, 0x7ff00000
or edx, 0x3ff00000
mov dword [ecx + 4], edx
shr eax, 0x14
cmp ebx, 0xf
fld qword [esp + 0xc8]
lea esi, [eax + esi - 0x3ff]
fmul st(1)
fstp qword [esp + 0xc8]
jg 0x422e40
fstp st(0)
mov edx, dword [ecx + 4]
mov eax, edx
and eax, 0x7ff00000
shr eax, 0x14
and edx, 0x800fffff
or edx, 0x3ff00000
mov dword [ecx + 4], edx
lea esi, [eax + esi - 0x3ff]
xor eax, eax
mov dword [esp + 0x88], eax
test ebx, ebx
jle 0x423c20
fld qword [esp + 0xc8]
nop
lea esi, [esi]
test bl, 1
je 0x422eda
mov edi, dword [esp + 0x88]
fmul qword [edi*8 + 0x48aa60]
fst qword [esp + 0xc8]
inc dword [esp + 0x88]
sar ebx, 1
test ebx, ebx
jg 0x422ec0
fstp qword [esp]
lea eax, [esp + 0xc4]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc0]
mov dword [esp + 8], eax
call fcn.004265b0
mov dword [esp + 0xe4], eax
mov ecx, dword [esp + 0xc0]
mov ebx, dword [esp + 0xc4]
mov edi, dword [esp + 0x84]
add ecx, esi
mov esi, ebx
sub esi, edi
mov edx, ecx
test esi, esi
mov dword [esp + 0x88], esi
jle 0x422f64
mov dword [esp + 0xc0], ecx
mov dword [esp], eax
mov dword [esp + 4], esi
call fcn.004266f0
mov eax, dword [esp + 0xc0]
mov ecx, esi
mov edi, dword [esp + 0x84]
add ecx, eax
mov edx, ecx
mov dword [esp + 0xc4], edi
mov ebx, edi
mov edi, dword [esp + 0x108]
xor eax, eax
lea esi, [edx + ebx]
mov dword [esp + 0xac], eax
mov ebp, dword [esp + 0x84]
mov eax, dword [edi + 8]
sub esi, ebp
inc eax
cmp eax, esi
jl 0x423cd4
mov dword [esp + 0x68], esi
mov eax, dword [edi + 4]
cmp eax, esi
mov dword [esp + 0x94], eax
jle 0x423c5f
sub edx, eax
mov edi, 1
test edx, edx
mov dword [esp + 0x9c], edi
mov dword [esp + 0x88], edx
jle 0x423ee1
mov dword [esp + 4], edx
mov eax, dword [esp + 0xe4]
mov dword [esp + 0xc0], ecx
mov dword [esp], eax
call fcn.004261a0
mov dword [esp + 0xe4], eax
mov edx, dword [esp + 0x88]
add dword [esp + 0xc4], edx
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x94]
test eax, eax
mov dword [esp + 0x68], edx
mov dword [esp + 0xc0], edx
je 0x423013
lea eax, [esi + 1]
cmp eax, edx
jl 0x424158
mov edi, dword [esp + 0x40]
mov eax, dword [esp + 0x80]
mov edx, dword [esp + 0x7c]
mov dword [esp + 0xc], edi
mov ecx, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.004269d0
mov dword [esp + 0x30], eax
lea ebx, [eax + 0xc]
mov dword [esp + 0x28], ebx
lea esi, [esi]
lea edi, [edi]
mov esi, dword [esp + 0x30]
mov eax, dword [esi + 4]
mov dword [esp], eax
call fcn.00425ca0
mov dword [esp + 0x34], eax
mov eax, dword [esi + 0x10]
mov edi, dword [esp + 0x34]
mov esi, dword [esp + 0x28]
lea edx, [eax*4]
lea eax, [edx + 8]
add edi, 0xc
cmp eax, 7
jbe 0x4230b0
test edi, 4
je 0x4230b0
mov edi, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov eax, dword [edi + 0xc]
mov edi, ecx
add edi, 0x10
mov dword [ecx + 0xc], eax
mov esi, dword [esp + 0x30]
lea eax, [edx + 4]
add esi, 0x10
lea esi, [esi]
lea edi, [edi]
cld
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0xe4]
mov eax, dword [eax + 4]
mov dword [esp], eax
call fcn.00425ca0
mov dword [esp + 0x38], eax
mov edx, dword [esp + 0xe4]
mov edi, dword [esp + 0x38]
mov eax, dword [edx + 0x10]
lea esi, [edx + 0xc]
add edi, 0xc
lea ecx, [eax*4]
lea eax, [ecx + 8]
cmp eax, 7
jbe 0x423110
test edi, 4
je 0x423110
mov ebx, dword [esp + 0x38]
lea esi, [edx + 0x10]
mov eax, dword [edx + 0xc]
mov edi, ebx
add edi, 0x10
mov dword [ebx + 0xc], eax
lea eax, [ecx + 4]
nop
cld
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov dword [esp], 1
mov edi, dword [esp + 0xac]
mov esi, dword [esp + 0xc4]
mov eax, dword [esp + 0xc0]
mov ebx, edi
sub esi, edi
mov dword [esp + 0xa4], esi
add ebx, eax
call fcn.00425ee0
mov dword [esp + 0x2c], eax
mov ebp, dword [esp + 0x98]
test ebp, ebp
js 0x423b10
mov edi, dword [esp + 0x98]
xor edx, edx
xor esi, esi
mov dword [esp + 0xa8], edi
test ebx, ebx
js 0x423b03
add esi, ebx
mov ecx, dword [esp + 0xa4]
mov ebp, esi
mov eax, dword [esp + 0x84]
sub eax, ecx
inc eax
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0xa4]
lea ecx, [ebx + eax]
mov eax, dword [esp + 0x84]
sub ecx, eax
cmp ecx, dword [esp + 0x94]
jge 0x4231bb
mov eax, dword [esp + 0x94]
sub ecx, eax
add dword [esp + 0x88], ecx
mov ecx, dword [esp + 0x88]
lea esi, [ebp + ecx]
add edi, ecx
cmp edi, esi
mov ecx, edi
jle 0x4231d0
mov ecx, esi
cmp ecx, ebp
jle 0x4231d6
mov ecx, ebp
test ecx, ecx
jle 0x4231e0
sub esi, ecx
sub edi, ecx
sub ebp, ecx
test edx, edx
jle 0x42321e
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x2c]
mov dword [esp], ebx
call fcn.00426090
mov dword [esp + 0x2c], eax
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x38]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.00425f10
mov ecx, dword [esp + 0x38]
mov ebx, eax
mov dword [esp], ecx
call fcn.00425d70
mov dword [esp + 0x38], ebx
mov eax, dword [esp + 0xac]
sub esi, eax
test esi, esi
jle 0x423a40
mov dword [esp + 4], esi
mov ebx, dword [esp + 0x38]
mov dword [esp], ebx
call fcn.004261a0
mov dword [esp + 0x38], eax
mov esi, dword [esp + 0xa8]
test esi, esi
jle 0x423269
mov eax, dword [esp + 0xa8]
mov edx, dword [esp + 0x34]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.00426090
mov dword [esp + 0x34], eax
test edi, edi
jle 0x423281
mov dword [esp + 4], edi
mov ecx, dword [esp + 0x34]
mov dword [esp], ecx
call fcn.004261a0
mov dword [esp + 0x34], eax
test ebp, ebp
jle 0x423299
mov dword [esp + 4], ebp
mov ebx, dword [esp + 0x2c]
mov dword [esp], ebx
call fcn.004261a0
mov dword [esp + 0x2c], eax
mov esi, dword [esp + 0x34]
mov ebx, 0x20
mov edi, 1
mov dword [esp + 0x8c], ebx
mov eax, dword [esp + 0x38]
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.00426300
cmp dword [eax + 0x10], 1
mov ebp, eax
jle 0x423940
xor edx, edx
mov esi, dword [ebp + 0xc]
xor eax, eax
mov dword [esp + 0x90], edx
mov edx, dword [esp + 0x2c]
mov dword [ebp + 0xc], 0
mov dword [esp + 0x44], eax
mov dword [esp + 4], edx
mov dword [esp], ebp
call fcn.004262b0
mov ecx, eax
mov eax, dword [esp + 0x6c]
test eax, eax
setne al
xor edx, edx
test ecx, ecx
setle dl
test edx, eax
je 0x4237c1
mov eax, 1
mov dword [esp + 0xdc], eax
mov eax, dword [esp + 0x6c]
and eax, 1
xor eax, esi
mov dword [esp + 0x90], eax
je 0x424050
test esi, esi
jne 0x423b30
mov ecx, dword [esp + 0x94]
mov eax, 0x11
cmp dword [esp + 0x68], ecx
mov dword [esp + 0xdc], eax
je 0x4233c0
mov ebx, dword [esp + 0x84]
xor ecx, ecx
cmp ebx, 0x1f
mov dword [esp + 0x88], ebx
jle 0x423bc7
mov ebx, dword [esp + 0xe4]
mov eax, dword [ebx + ecx*4 + 0x14]
test eax, eax
jne 0x4233c0
sub dword [esp + 0x88], 0x20
inc ecx
cmp dword [esp + 0x88], 0x1f
jg 0x423370
cmp dword [esp + 0x88], 1
jle 0x424126
lea edx, [ebx + ecx*4]
mov eax, dword [edx + 0x14]
bsf ecx, eax
shr eax, cl
mov dword [edx + 0x14], eax
mov eax, dword [esp + 0x88]
dec eax
cmp ecx, eax
jge 0x424126
mov esi, esi
lea edi, [edi]
mov eax, 0x10
test esi, esi
mov dword [esp + 0x8c], eax
je 0x423a60
mov eax, 0x20
xor edi, edi
mov dword [esp + 0x8c], eax
fld1
fst qword [esp + 0x48]
fstp qword [esp + 0x50]
mov eax, dword [esp + 0xc4]
mov edx, dword [esp + 0xc0]
mov ecx, dword [esp + 0x9c]
add edx, eax
test ecx, ecx
mov dword [esp + 0x40], edx
jne 0x423418
cmp eax, dword [esp + 0x84]
jl 0x423b41
fld qword [esp + 0x50]
lea eax, [esp + 0xbc]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xb8]
mov dword [esp + 8], eax
fstp qword [esp]
call fcn.004265b0
mov esi, eax
mov eax, dword [esp + 0xb8]
test eax, eax
jl 0x423bd3
jle 0x42345b
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.004261a0
mov esi, eax
test edi, edi
mov ebx, dword [esp + 0xe4]
je 0x4238d3
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.00426300
mov dword [esp + 0xe4], eax
mov edi, dword [ebx + 0x10]
mov ecx, eax
mov edx, dword [esp + 0x9c]
dec edi
test edx, edx
jne 0x4234d0
cmp dword [eax + 0x10], edi
jle 0x4234a7
bsr edx, dword [eax + edi*4 + 0x14]
xor edx, 0x1f
bsr eax, dword [ebx + edi*4 + 0x14]
xor eax, 0x1f
cmp edx, eax
jle 0x4234d0
mov eax, dword [esp + 0x94]
cmp dword [esp + 0x68], eax
jne 0x423be6
dec dword [esp + 0xc4]
mov eax, 1
mov dword [esp + 0x9c], eax
nop
lea esi, [esi]
mov dword [esp], esi
call fcn.00425d70
mov dword [esp], ebx
call fcn.00425d70
mov ecx, dword [esp + 0x90]
test ecx, ecx
jne 0x42394b
mov edx, dword [esp + 0xc0]
mov eax, dword [esp + 0xc4]
add eax, edx
cmp dword [esp + 0x40], eax
sete dl
xor eax, eax
cmp dword [esp + 0x44], 0
setne al
test eax, edx
je 0x423550
fld qword [esp + 0x50]
fmul qword [0x48a818]
fld qword [esp + 0x48]
fsub dword [0x48a80c]
fld st(1)
fchs
fucomp st(1)
fnstsw ax
sahf
jbe 0x423ad0
fstp st(0)
fld qword [esp + 0x48]
fucompp
fnstsw ax
sahf
ja 0x42418e
nop
lea esi, [esi]
xor eax, eax
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x9c]
test eax, eax
je 0x423ab0
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.00425d70
mov edx, dword [esp + 0x34]
mov dword [esp], edx
call fcn.00425d70
mov ecx, dword [esp + 0x2c]
mov dword [esp], ecx
call fcn.00425d70
mov dword [esp], ebp
call fcn.00425d70
jmp 0x423050
movsx eax, byte [ebx + 1]
cmp eax, 0x58
je 0x423c7a
mov edx, 1
cmp eax, 0x78
mov dword [esp + 0x70], edx
je 0x423c7a
nop
lea esi, [esi]
mov eax, ebx
inc ebx
mov dword [esp + 0xe0], ebx
movzx eax, byte [eax + 1]
cmp al, 0x30
je 0x4235c0
test al, al
jne 0x42295a
jmp 0x422905
mov eax, 1
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0xe0]
lea ebx, [eax + 1]
mov dword [esp + 0xe0], ebx
movsx esi, byte [eax + 1]
mov eax, dword [esp + 0x7c]
test eax, eax
jne 0x423680
cmp esi, 0x30
jne 0x423624
inc dword [esp + 0x74]
mov eax, ebx
inc ebx
mov dword [esp + 0xe0], ebx
movsx esi, byte [eax + 1]
cmp esi, 0x30
je 0x42360d
lea eax, [esi - 0x31]
cmp eax, 8
ja 0x4229fd
mov dword [esp + 0x5c], ebx
mov edi, dword [esp + 0x74]
xor eax, eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], edi
lea edi, [esi - 0x30]
jmp 0x42368c
mov eax, dword [esp + 0x80]
inc dword [esp + 0x80]
cmp eax, 8
jg 0x4236e5
mov edx, dword [esp + 0x40]
lea eax, [edx + edx*4]
lea eax, [edi + eax*2]
mov dword [esp + 0x40], eax
xor eax, eax
mov dword [esp + 0x74], eax
mov eax, ebx
inc ebx
mov dword [esp + 0xe0], ebx
movsx esi, byte [eax + 1]
lea edi, [esi - 0x30]
cmp edi, 9
ja 0x4229fd
inc dword [esp + 0x74]
test edi, edi
je 0x423672
mov eax, dword [esp + 0x74]
add dword [esp + 0x78], eax
cmp eax, 1
jle 0x423647
mov ecx, eax
dec ecx
jmp 0x4236c3
cmp dword [esp + 0x80], 0x10
jg 0x4236c0
mov esi, dword [esp + 0x3c]
lea eax, [esi + esi*4]
add eax, eax
mov dword [esp + 0x3c], eax
lea esi, [esi]
dec ecx
je 0x423647
mov eax, dword [esp + 0x80]
inc dword [esp + 0x80]
cmp eax, 8
jg 0x4236a6
mov edx, dword [esp + 0x40]
lea eax, [edx + edx*4]
add eax, eax
mov dword [esp + 0x40], eax
jmp 0x4236c0
cmp dword [esp + 0x80], 0x10
jg 0x42366c
mov ecx, dword [esp + 0x3c]
lea eax, [ecx + ecx*4]
lea eax, [edi + eax*2]
mov dword [esp + 0x3c], eax
jmp 0x42366c
mov dword [esp + 0xe0], ebp
jmp 0x422b20
cmp eax, 3
jne 0x422cc9
mov esi, dword [esp + 0x64]
inc esi
mov dword [esp + 0x6c], esi
jmp 0x422cc9
mov ebp, 1
mov dword [esp + 0x6c], ebp
jmp 0x422cc9
cmp esi, 0x69
je 0x422b64
cmp esi, 0x6e
jne 0x4228f2
mov eax, 0x48a805
lea ebx, [esp + 0xe0]
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.00426b20
test eax, eax
je 0x4228f2
mov esi, dword [esp + 0x108]
mov edi, 4
mov dword [esp + 0xdc], edi
mov edi, dword [esp + 0x10c]
mov edx, dword [esi + 8]
lea eax, [edx + 1]
mov dword [edi], eax
mov eax, dword [esp + 0xe0]
cmp byte [eax], 0x28
jne 0x422bc6
mov dword [esp + 4], esi
mov eax, dword [esp + 0x110]
mov dword [esp], ebx
mov dword [esp + 8], eax
call fcn.00426c90
mov dword [esp + 0xdc], eax
mov edx, dword [esi + 8]
jmp 0x422bc6
test ecx, ecx
jl 0x424060
je 0x423fa5
mov dword [esp], ebp
mov edx, dword [esp + 0x2c]
mov dword [esp + 4], edx
call fcn.00426aa0
fstp qword [esp + 0x50]
fld qword [esp + 0x50]
fld dword [0x48a808]
fucompp
fnstsw ax
sahf
jae 0x4233c0
fld qword [esp + 0x50]
test esi, esi
fld dword [0x48a80c]
fmul st(1), st(0)
fxch st(1)
fst qword [esp + 0x48]
fstp qword [esp + 0x50]
je 0x423820
mov eax, 0x10
xor edi, edi
mov dword [esp + 0x8c], eax
fld qword [0x48a810]
fld qword [esp + 0x48]
fxch st(1)
fucomp st(1)
fnstsw ax
sahf
jbe 0x423b90
fnstcw word [esp + 0xb6]
movzx eax, word [esp + 0xb6]
fld qword [esp + 0x48]
fxch st(1)
or ax, 0xc00
mov word [esp + 0xb4], ax
fldcw word [esp + 0xb4]
fistp dword [esp + 0x44]
fldcw word [esp + 0xb6]
cmp dword [esp + 0x6c], 1
fild dword [esp + 0x44]
fsub st(1), st(0)
fxch st(1)
fstp qword [esp + 0x48]
je 0x423c2c
jle 0x423ce0
fstp st(1)
cmp dword [esp + 0x6c], 2
jne 0x4233e8
test edi, edi
jne 0x4233e8
fld qword [esp + 0x48]
fldz
fxch st(1)
fucompp
fnstsw ax
sahf
jbe 0x4233e8
fstp st(0)
inc dword [esp + 0x44]
mov eax, 0x30
mov ebx, dword [esp + 0x8c]
fild dword [esp + 0x44]
sub eax, ebx
mov dword [esp + 0x8c], eax
jmp 0x4233e8
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.00426810
mov dword [esp + 0xe4], eax
mov edi, dword [eax + 0x10]
mov ecx, eax
dec edi
cmp dword [ebx + 0x10], edi
jle 0x423909
bsr edx, dword [eax + edi*4 + 0x14]
xor edx, 0x1f
bsr eax, dword [ebx + edi*4 + 0x14]
xor eax, 0x1f
cmp edx, eax
jge 0x4234d0
mov eax, dword [esp + 0x9c]
test eax, eax
je 0x423ba0
mov eax, dword [esp + 0xc4]
inc eax
cmp eax, dword [esp + 0x84]
mov dword [esp + 0xc4], eax
jne 0x4234d0
xor eax, eax
jmp 0x4234c4
mov ecx, dword [eax + 0x14]
test ecx, ecx
jne 0x4232ca
mov eax, dword [esp + 0x9c]
test eax, eax
jne 0x423c3b
mov ebx, dword [esp + 0x84]
mov eax, dword [esp + 0xc4]
sub ebx, eax
mov dword [esp + 0x88], ebx
test ebx, ebx
je 0x423c3b
jle 0x4241c0
mov dword [esp + 4], ebx
mov eax, dword [esp + 0xe4]
mov dword [esp], eax
call fcn.004261a0
mov dword [esp + 0xe4], eax
mov edx, dword [esp + 0xc0]
mov eax, dword [esp + 0x88]
sub edx, eax
mov dword [esp + 0xc0], edx
mov esi, dword [esp + 0x10c]
mov edi, dword [esp + 0x38]
mov dword [esi], edx
mov dword [esp], edi
call fcn.00425d70
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.00425d70
mov edx, dword [esp + 0x2c]
mov dword [esp], edx
call fcn.00425d70
mov ecx, dword [esp + 0x30]
mov dword [esp], ecx
call fcn.00425d70
mov dword [esp], ebp
call fcn.00425d70
mov ebx, dword [esp + 0x108]
mov eax, dword [esp + 0xc0]
cmp dword [ebx + 8], eax
jge 0x422bd2
mov eax, dword [esp + 0xe4]
mov ebp, 0xa3
mov dword [eax + 0x10], 0
mov dword [esp + 0xdc], ebp
call sub.msvcrt.dll__errno
mov dword [eax], 0x22
mov esi, dword [esp + 0x108]
mov edx, dword [esi + 8]
jmp 0x422bc6
jge 0x423243
neg esi
mov dword [esp + 4], esi
mov esi, dword [esp + 0x38]
mov dword [esp], esi
call fcn.004266f0
jmp 0x423243
mov eax, dword [esp + 0x9c]
test eax, eax
setne al
xor edx, edx
cmp dword [esp + 0xa4], 1
setle dl
test edx, eax
je 0x4233e2
mov ebx, dword [esp + 0xe4]
mov dword [ebx + 0x10], 0
mov eax, dword [esp + 0x94]
mov dword [esp + 0xc0], eax
mov eax, 0x50
mov dword [esp + 0xdc], eax
jmp 0x42394b
mov eax, dword [esp + 0xe4]
mov dword [esp], eax
call fcn.004267c0
mov dword [esp + 0xac], eax
jmp 0x423568
fucomp st(1)
fnstsw ax
sahf
jbe 0x423b99
fld1
fsubrp st(1)
fld qword [esp + 0x48]
fxch st(1)
fucompp
fnstsw ax
sahf
jbe 0x423550
mov esi, dword [esp + 0x8c]
or dword [esp + 0xdc], esi
jmp 0x42394b
sub edi, ebx
jmp 0x423175
mov edx, dword [esp + 0x98]
xor edi, edi
mov dword [esp + 0xa8], edi
xor edi, edi
neg edx
mov esi, edx
jmp 0x42316b
mov eax, 0x21
mov dword [esp + 0xdc], eax
jmp 0x4233c0
mov ecx, dword [esp + 0x84]
sub ecx, eax
mov eax, dword [esp + 0xe4]
mov dword [esp + 0x88], ecx
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.004261a0
mov dword [esp + 0xe4], eax
mov ebx, dword [esp + 0x88]
mov esi, dword [esp + 0x84]
sub dword [esp + 0xc0], ebx
mov dword [esp + 0xc4], esi
jmp 0x423418
fstp st(0)
fstp st(0)
jmp 0x4233ec
fstp st(0)
jmp 0x423550
mov dword [esp], ecx
mov eax, 1
mov dword [esp + 4], eax
call fcn.004266f0
inc dword [esp + 0xc0]
inc dword [esp + 0x68]
xor edi, edi
mov dword [esp + 0x44], edi
jmp 0x4234d0
mov ebx, dword [esp + 0xe4]
jmp 0x42338b
mov dword [esp], esi
neg eax
mov dword [esp + 4], eax
call fcn.004266f0
jmp 0x42345b
mov dword [esp], ecx
mov eax, 1
mov dword [esp + 4], eax
call fcn.004261a0
dec dword [esp + 0xc0]
dec dword [esp + 0x68]
mov dword [esp + 0xe4], eax
xor eax, eax
mov dword [esp + 0x90], eax
jmp 0x423bbc
fstp qword [esp + 0xc8]
jmp 0x422df0
fld qword [esp + 0xc8]
jmp 0x422ee7
fstp st(1)
test edi, edi
jne 0x42389c
jmp 0x4233e8
mov edx, dword [esp + 0xc0]
jmp 0x4239b0
mov edi, 1
lea ebx, [ebp + 2]
mov dword [esp + 0xe0], ebx
movsx esi, byte [eax + 1]
jmp 0x422a5e
mov dword [esp + 0xc0], ecx
jmp 0x423013
mov edx, dword [esp + 0x64]
sub eax, edx
mov dword [esp + 0x6c], eax
jmp 0x422cc9
mov edx, dword [esp + 0x64]
lea eax, [esp + 0xe4]
mov ecx, dword [esp + 0x10c]
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0x108]
lea eax, [esp + 0xe0]
mov dword [esp + 0x10], edx
mov dword [esp + 8], ecx
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00426eb0
mov dword [esp + 0xdc], eax
cmp eax, 6
jne 0x422905
mov dword [esp + 0xe0], ebp
xor edi, edi
mov dword [esp + 0x64], edi
jmp 0x422905
mov dword [esp + 0xc0], ecx
jmp 0x423a08
mov esi, dword [esp + 0x6c]
test esi, esi
jne 0x423eda
fld qword [esp + 0x48]
fucomp st(2)
fnstsw ax
fstp st(1)
sahf
jb 0x4233e8
jmp 0x4238af
mov eax, dword [esp + 0xdc]
mov edx, dword [ebx + 0x10]
and eax, 0xfffffff8
test edx, edx
jle 0x423d16
or eax, 2
mov dword [esp + 0xdc], eax
test al, 0x30
je 0x42290c
or eax, 0x40
mov dword [esp + 0xdc], eax
jmp 0x42290c
jge 0x423c20
neg ebx
mov ecx, ebx
and ecx, 0xf
je 0x423d58
fld qword [ecx*8 + 0x48a960]
fdivr qword [esp + 0xc8]
fstp qword [esp + 0xc8]
and ebx, 0xfffffff0
je 0x423c20
sar ebx, 4
cmp ebx, 0xf
lea ecx, [esp + 0xc8]
jle 0x423db3
fld qword [0x48aa40]
mov edx, dword [ecx + 4]
sub ebx, 0x10
mov eax, edx
and edx, 0x800fffff
and eax, 0x7ff00000
or edx, 0x3ff00000
mov dword [ecx + 4], edx
shr eax, 0x14
cmp ebx, 0xf
fld qword [esp + 0xc8]
lea esi, [eax + esi - 0x3ff]
fmul st(1)
fstp qword [esp + 0xc8]
jg 0x423d76
fstp st(0)
mov edx, dword [ecx + 4]
xor ebp, ebp
mov eax, edx
and eax, 0x7ff00000
and edx, 0x800fffff
shr eax, 0x14
or edx, 0x3ff00000
test ebx, ebx
lea esi, [eax + esi - 0x3ff]
mov dword [ecx + 4], edx
mov dword [esp + 0x88], ebp
jle 0x423c20
fld qword [esp + 0xc8]
test bl, 1
je 0x423e08
mov eax, dword [esp + 0x88]
fmul qword [eax*8 + 0x48aa20]
fst qword [esp + 0xc8]
inc dword [esp + 0x88]
sar ebx, 1
test ebx, ebx
jg 0x423dee
jmp 0x422ee7
fst qword [esp + 0xc8]
mov esi, 1
mov edx, dword [esp + 0x110]
mov dword [esp + 0x14], esi
lea eax, [esp + 0xdc]
mov ecx, dword [esp + 0x10c]
mov dword [esp + 0x1c], eax
mov esi, dword [esp + 0x108]
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x18], eax
mov dword [esp + 8], esi
fstp qword [esp]
jmp 0x422de3
mov eax, dword [esp + 0x80]
mov ecx, 0xf
sub ecx, eax
lea eax, [ecx + 0x16]
cmp eax, dword [esp + 0x98]
jl 0x423c14
fmul qword [ecx*8 + 0x48a960]
mov esi, dword [esp + 0x98]
lea eax, [esp + 0xdc]
mov dword [esp + 0x1c], eax
xor eax, eax
mov ebx, dword [esp + 0x110]
mov dword [esp + 0x14], eax
sub esi, ecx
mov eax, dword [esp + 0x108]
fmul qword [esi*8 + 0x48a960]
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x6c]
mov esi, dword [esp + 0x10c]
mov dword [esp + 8], eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0xc], esi
jmp 0x422dd7
fstp st(1)
jmp 0x4233e8
jge 0x422fee
mov dword [esp + 0xc0], ecx
mov ecx, dword [esp + 0x88]
lea eax, [ebx + ecx]
mov dword [esp + 0xc4], eax
test eax, eax
jle 0x424245
neg dword [esp + 0x88]
mov eax, dword [esp + 0x88]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xe4]
mov dword [esp], eax
call fcn.004266f0
jmp 0x422fee
cmp dword [esp + 0x98], 0xffffffea
jl 0x423c14
mov eax, dword [esp + 0x98]
mov edx, dword [esp + 0x6c]
mov ecx, dword [esp + 0x110]
shl eax, 3
mov ebx, dword [esp + 0x10c]
neg eax
fdiv qword [eax + 0x48a960]
mov dword [esp + 0x18], edx
mov esi, dword [esp + 0x108]
lea eax, [esp + 0xdc]
mov dword [esp + 0x1c], eax
xor eax, eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 8], esi
jmp 0x422dd7
mov eax, dword [esp + 0xd4]
mov edx, 0x15
or eax, 0x100000
bsf eax, eax
jmp 0x422d77
test esi, esi
je 0x4241a1
mov ebx, dword [esp + 0x9c]
test ebx, ebx
je 0x423fe1
mov ecx, dword [esp + 0xc4]
mov ebx, dword [esp + 0xe4]
mov eax, ecx
lea edx, [ebx + 0x14]
sar eax, 5
lea edi, [edx + eax*4]
cmp edx, edi
jae 0x4241e1
mov eax, dword [edx]
add edx, 4
inc eax
je 0x423fd1
mov eax, 0x11
mov dword [esp + 0xdc], eax
mov edi, dword [esp + 0x84]
cmp dword [esp + 0xa4], edi
setl al
xor edx, edx
cmp dword [esp + 0x9c], 0
sete dl
test edx, eax
jne 0x42394b
mov ebx, dword [esp + 0xe4]
test byte [ebx + 0x14], 1
je 0x42394b
test esi, esi
jne 0x4242ab
cmp dword [esp + 0xa4], 1
je 0x423a88
mov dword [esp], ebx
call fcn.004223b0
mov eax, 0x11
jmp 0x423aa2
cmp esi, 1
sbb eax, eax
and eax, 0x10
add eax, 0x11
jmp 0x423aa2
cmp esi, 1
sbb eax, eax
and eax, 0x10
add eax, 0x11
test esi, esi
setne dl
cmp dword [esp + 0xa4], 1
mov dword [esp + 0xdc], eax
setg al
or eax, edx
test al, 1
jne 0x42394b
mov edi, dword [esp + 0x9c]
test edi, edi
mov edi, dword [esp + 0x94]
setne al
cmp dword [esp + 0x68], edi
sete dl
or eax, edx
test al, 1
jne 0x42394b
mov dword [esp], ebp
mov esi, 1
mov dword [esp + 4], esi
call fcn.004261a0
mov ebp, eax
mov eax, dword [esp + 0x2c]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.004262b0
test eax, eax
mov edx, 0x11
jle 0x42394b
mov ecx, dword [esp + 0x94]
cmp dword [esp + 0x68], ecx
jne 0x42427c
mov eax, 0x21
mov dword [esp + 0xdc], eax
mov eax, dword [esp + 0xe4]
cmp dword [eax + 0x10], 1
jne 0x42394b
cmp dword [eax + 0x14], 1
jne 0x42394b
mov eax, 1
mov dword [esp + 0x60], eax
jmp 0x42394b
mov dword [esp], ebx
mov edx, dword [esp + 0x68]
mov esi, dword [esp + 0x84]
dec edx
mov dword [esp + 0xc0], edx
mov dword [esp + 0xc4], esi
mov dword [esp + 4], esi
call fcn.004223f0
mov dword [esp + 0xe4], eax
jmp 0x42394b
mov ebx, dword [esp + 0xe4]
mov ecx, 0x50
mov esi, dword [esp + 0x94]
mov edi, dword [esp + 0x10c]
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0
mov dword [esp + 0xdc], ecx
mov dword [edi], esi
jmp 0x422be8
mov eax, dword [esp + 0x8c]
or dword [esp + 0xdc], eax
jmp 0x42394b
cmp dword [esp + 0xa4], 1
je 0x424272
mov edi, 0x21
mov dword [esp + 0xdc], edi
jmp 0x423fed
mov eax, dword [esp + 0x88]
neg eax
mov dword [esp + 4], eax
mov eax, dword [esp + 0xe4]
mov dword [esp], eax
call fcn.004266f0
jmp 0x423999
and ecx, 0x1f
je 0x4241f8
mov eax, 0xffffffff
shl eax, cl
mov ecx, dword [edx]
or eax, ecx
inc eax
jne 0x423fe1
mov dword [ebx + 0x10], 1
mov ecx, dword [esp + 0x94]
mov eax, 1
mov dword [ebx + 0x14], 1
mov ebx, dword [esp + 0x84]
mov dword [esp + 0xc4], eax
mov eax, 0x21
lea edx, [ecx + ebx - 1]
mov dword [esp + 0xdc], eax
xor eax, eax
mov dword [esp + 0xc0], edx
mov dword [esp + 0x9c], eax
jmp 0x42395a
inc eax
jl 0x424158
mov eax, dword [esp + 0xe4]
mov edx, 1
mov dword [esp + 0xc4], edx
mov dword [eax + 0x14], 1
mov dword [eax + 0x10], 1
jmp 0x422fee
mov edx, 1
jmp 0x4240e0
mov dword [esp + 0xdc], edx
mov ebx, dword [esp + 0x84]
mov eax, dword [esp + 0xe4]
sub dword [esp + 0xc0], ebx
mov dword [esp + 0xc4], ebx
mov dword [esp + 4], ebx
mov dword [esp], eax
jmp 0x424147
mov dword [esp], ebx
call fcn.004222e0
mov dword [esp + 0xe4], eax
mov ecx, dword [esp + 0xc4]
mov edx, eax
mov eax, ecx
and eax, 0x1f
mov dword [esp + 0x88], eax
je 0x4242e6
mov ebx, dword [esp + 0x88]
mov eax, 0x20
sub eax, ebx
mov dword [esp + 0x88], eax
mov eax, dword [edx + 0x10]
dec eax
sar eax, 5
bsr eax, dword [edx + eax*4 + 0x14]
xor eax, 0x1f
cmp eax, dword [esp + 0x88]
je 0x424308
lea eax, [ecx + 1]
mov dword [esp + 0xc4], eax
mov edx, 0x21
mov dword [esp + 0xdc], edx
jmp 0x42394b