Function at 0x425bd0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
xor ebx, ebx
sub esp, 0x9c
mov edx, dword [esp + 0xbc]
mov esi, dword [edx]
mov eax, esi
and eax, 0xffffffcf
mov dword [edx], eax
mov eax, esi
and eax, 7
cmp eax, 4
ja case.default.0x425bfa
jmp dword [eax*4 + 0x48ff30]
fld st(0)
fadd st(1)
fadd dword [0x48ff7c]
fstp qword [esp + 0x68]
sub dword [esp + 0x6c], 0x3400000
fld st(0)
fsub dword [0x48ff80]
fld qword [esp + 0x68]
fxch st(1)
fucom st(1)
fnstsw ax
sahf
ja 0x426b62
fxch st(1)
fchs
fucompp
fnstsw ax
sahf
ja 0x4265dd
jmp 0x425c51
fstp st(0)
fstp st(0)
jmp 0x425c51
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x425c51
fstp st(0)
fstp qword [esp + 0x38]
cmp dword [esp + 0x20], 0xe
jg 0x426300
mov eax, dword [esp + 0x50]
test eax, eax
js 0x426300
mov esi, dword [esp + 0x48]
mov edx, dword [esp + 0x20]
test esi, esi
fld qword [edx*8 + 0x48ffa0]
jg 0x426673
mov eax, dword [esp + 0xc4]
shr eax, 0x1f
test al, al
je 0x426673
mov ecx, dword [esp + 0x48]
test ecx, ecx
jne 0x4265e1
fmul dword [0x48ff80]
fld qword [esp + 0x38]
fxch st(1)
fucompp
fnstsw ax
sahf
jae 0x4265e3
add edx, 2
xor edi, edi
mov dword [esp + 0x28], edx
mov dword [esp + 0x38], 0
mov byte [ebx], 0x31
lea esi, [ebx + 1]
mov dword [esp + 0x40], 0
mov dword [esp + 0x24], 0x20
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.00427660
test edi, edi
je 0x425d01
cmp dword [esp + 0x40], edi
jne 0x42691d
mov dword [esp], edi
call fcn.00427660
mov dword [esp], ebp
call fcn.00427660
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0xc8]
mov byte [esi], 0
test eax, eax
mov dword [edx], ecx
je 0x425d2d
mov eax, dword [esp + 0xcc]
mov dword [eax], esi
mov edx, dword [esp + 0xbc]
mov ecx, dword [esp + 0x24]
or dword [edx], ecx
lea esi, [esi]
add esp, 0x9c
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [esp + 0xb0]
xor edx, edx
mov edi, dword [eax]
cmp edi, 0x20
jle 0x425d6e
mov eax, 0x20
add eax, eax
add edx, 1
cmp edi, eax
jg 0x425d65
mov dword [esp], edx
call fcn.004275a0
mov edx, dword [esp + 0xb8]
mov ebp, eax
lea eax, [edi - 1]
sar eax, 5
lea ebx, [edx + eax*4]
mov eax, dword [esp + 0xb8]
lea edx, [ebp + 0x14]
mov ecx, edx
mov dword [esp + 0x20], edx
mov edx, dword [eax]
add eax, 4
mov dword [ecx], edx
add ecx, 4
cmp ebx, eax
jae 0x425d98
mov edx, dword [esp + 0x20]
sub ecx, edx
sar ecx, 2
nop
lea eax, [ecx - 1]
mov edx, dword [ebp + eax*4 + 0x14]
test edx, edx
jne 0x426280
test eax, eax
mov ecx, eax
jne 0x425db0
mov dword [ebp + 0x10], 0
mov dword [esp + 0x40], 0
mov dword [esp], ebp
call fcn.00428380
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x50], ecx
test eax, eax
mov dword [esp + 0x8c], eax
jne 0x426251
mov ebx, dword [ebp + 0x10]
test ebx, ebx
jne 0x425ec0
mov dword [esp], ebp
call fcn.00427660
mov ecx, dword [esp + 0xc8]
mov eax, dword [esp + 0xcc]
mov dword [ecx], 1
mov dword [esp + 8], 1
mov dword [esp + 4], eax
mov dword [esp], 0x48ff2d
call fcn.004271d0
add esp, 0x9c
mov ebx, eax
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov edx, dword [esp + 0xc8]
mov ecx, dword [esp + 0xcc]
mov dword [edx], 0xffff8000
mov dword [esp + 8], 3
mov dword [esp + 4], ecx
mov dword [esp], 0x48ff29
call fcn.004271d0
add esp, 0x9c
mov ebx, eax
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov ecx, dword [esp + 0xc8]
mov eax, dword [esp + 0xcc]
mov dword [ecx], 0xffff8000
mov dword [esp + 8], 8
mov dword [esp + 4], eax
mov dword [esp], str.Infinity
call fcn.004271d0
add esp, 0x9c
mov ebx, eax
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
lea eax, [esp + 0x8c]
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.00427d60
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x40]
lea ecx, [eax + edx - 1]
fstp qword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
mov edx, ecx
mov dword [esp + 0x78], ecx
sar edx, 0x1f
mov eax, edx
xor eax, ecx
and ebx, 0xfffff
sub eax, edx
or ebx, 0x3ff00000
sub eax, 0x435
mov dword [esp + 0x3c], ebx
test eax, eax
fld qword [esp + 0x38]
fsub dword [0x48ff44]
fmul qword [0x48ff48]
fadd qword [0x48ff50]
fild dword [esp + 0x78]
fmul qword [0x48ff58]
faddp st(1)
jle 0x425f41
mov dword [esp + 0x78], eax
fild dword [esp + 0x78]
fmul qword [0x48ff60]
faddp st(1)
fnstcw word [esp + 0x7e]
movzx eax, word [esp + 0x7e]
mov ah, 0xc
mov word [esp + 0x7c], ax
fldcw word [esp + 0x7c]
fist dword [esp + 0x20]
fldcw word [esp + 0x7e]
fldz
fucomp st(1)
fnstsw ax
sahf
ja 0x426640
fstp st(0)
mov eax, ecx
shl eax, 0x14
add eax, ebx
cmp dword [esp + 0x20], 0x16
mov dword [esp + 0x3c], eax
mov dword [esp + 0x5c], 1
ja 0x425faf
mov edx, dword [esp + 0x20]
fld qword [edx*8 + 0x48ffa0]
fld qword [esp + 0x38]
fxch st(1)
fucompp
fnstsw ax
sahf
jbe 0x426570
sub dword [esp + 0x20], 1
mov dword [esp + 0x5c], 0
mov eax, dword [esp + 0x40]
mov dword [esp + 0x54], 0
sub eax, ecx
sub eax, 1
mov dword [esp + 0x4c], eax
js 0x426611
mov ecx, dword [esp + 0x20]
test ecx, ecx
js 0x426624
mov edx, dword [esp + 0x20]
add dword [esp + 0x4c], edx
mov dword [esp + 0x58], 0
mov dword [esp + 0x60], edx
cmp dword [esp + 0xc0], 9
ja 0x4262a0
cmp dword [esp + 0xc0], 5
jle 0x42716f
sub dword [esp + 0xc0], 4
xor eax, eax
cmp dword [esp + 0xc0], 3
je 0x426592
jg 0x4268f4
cmp dword [esp + 0xc0], 2
jne 0x4262ab
mov dword [esp + 0x64], 0
mov edx, dword [esp + 0xc4]
test edx, edx
jle 0x426b0e
cmp dword [esp + 0xc4], 0xe
setbe dl
mov ecx, dword [esp + 0xc4]
and edx, eax
mov dword [esp + 0x8c], ecx
mov eax, ecx
mov dword [esp + 0x70], ecx
mov dword [esp + 0x48], ecx
mov dword [esp], eax
mov byte [esp + 0x18], dl
call fcn.00427190
mov ecx, dword [esp + 0xb0]
movzx edx, byte [esp + 0x18]
mov ecx, dword [ecx + 0xc]
mov ebx, eax
sub ecx, 1
cmp ecx, 0
mov dword [esp + 0x44], ecx
je 0x4260a6
jl 0x4265d0
and esi, 8
jne 0x426580
test dl, dl
je 0x425c55
mov edx, dword [esp + 0x44]
or edx, dword [esp + 0x20]
jne 0x425c55
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x8c], 0
fld qword [esp + 0x38]
test eax, eax
je 0x4260e0
fld1
fucomp st(1)
fnstsw ax
sahf
ja 0x426e21
fld st(0)
mov eax, dword [esp + 0x48]
fadd st(1)
fadd dword [0x48ff7c]
fstp qword [esp + 0x68]
sub dword [esp + 0x6c], 0x3400000
test eax, eax
je 0x425c17
mov edx, dword [esp + 0x48]
fld st(0)
mov dword [esp + 0x74], 0
mov eax, dword [esp + 0x64]
test eax, eax
je 0x426b7f
fld qword [esp + 0x68]
lea esi, [ebx + 1]
fld dword [0x48ff84]
fdiv qword [edx*8 + 0x48ff98]
fnstcw word [esp + 0x7e]
mov dword [esp + 0x8c], 0
movzx eax, word [esp + 0x7e]
mov ah, 0xc
mov word [esp + 0x7c], ax
fsubrp st(1)
fxch st(1)
fldcw word [esp + 0x7c]
fist dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x78], ecx
add ecx, 0x30
fild dword [esp + 0x78]
fsubp st(1)
fxch st(1)
mov byte [ebx], cl
fucom st(1)
fnstsw ax
sahf
ja 0x426220
fld st(1)
fsubr dword [0x48ff70]
fxch st(1)
fucom st(1)
fnstsw ax
fstp st(1)
sahf
ja 0x426518
mov eax, dword [esp + 0x8c]
add eax, 1
cmp eax, edx
mov dword [esp + 0x8c], eax
jge 0x425c41
fld dword [0x48ff74]
jmp 0x4261e7
fld st(1)
fsubr dword [0x48ff70]
fxch st(1)
fucom st(1)
fnstsw ax
fstp st(1)
sahf
ja 0x426520
mov eax, dword [esp + 0x8c]
add eax, 1
cmp edx, eax
mov dword [esp + 0x8c], eax
jle 0x425c47
fxch st(1)
fxch st(2)
fmul st(1), st(0)
fmul st(2), st(0)
fxch st(2)
fldcw word [esp + 0x7c]
fist dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov eax, dword [esp + 0x78]
mov dword [esp + 0x78], eax
lea ecx, [eax + 0x30]
fild dword [esp + 0x78]
fsubp st(1)
fxch st(1)
mov byte [esi], cl
add esi, 1
fucom st(1)
fnstsw ax
sahf
jbe 0x4261b3
fstp st(0)
fstp st(1)
fstp st(1)
jmp 0x426224
fstp st(0)
fstp st(1)
fldz
fxch st(1)
fucompp
fnstsw ax
sahf
jp 0x427063
jne 0x427063
mov edx, dword [esp + 0x74]
mov dword [esp + 0x24], 0
add edx, 1
mov dword [esp + 0x28], edx
jmp 0x425d01
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.00428270
mov eax, dword [esp + 0x8c]
mov edx, dword [esp + 0xb4]
sub dword [esp + 0x40], eax
add edx, eax
mov dword [esp + 0x50], edx
jmp 0x425df6
bsr eax, dword [ebp + ecx*4 + 0x10]
mov dword [ebp + 0x10], ecx
shl ecx, 5
xor eax, 0x1f
sub ecx, eax
mov dword [esp + 0x40], ecx
jmp 0x425dd4
mov dword [esp + 0xc0], 0
mov dword [esp + 0x78], edi
xor edx, edx
fild dword [esp + 0x78]
fmul qword [0x48ff68]
mov dword [esp + 0x64], 1
mov dword [esp + 0x70], 0xffffffff
mov dword [esp + 0x48], 0xffffffff
mov dword [esp + 0xc4], 0
fldcw word [esp + 0x7c]
fistp dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov eax, dword [esp + 0x78]
add eax, 3
mov dword [esp + 0x8c], eax
jmp 0x42606e
mov eax, dword [esp + 0x64]
test eax, eax
je 0x426660
cmp dword [esp + 0xc0], 1
jle 0x426c65
mov eax, dword [esp + 0x48]
sub eax, 1
cmp dword [esp + 0x58], eax
jl 0x426b3a
mov esi, dword [esp + 0x58]
sub esi, eax
mov eax, dword [esp + 0x48]
test eax, eax
js 0x426d87
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x8c], edx
mov edi, edx
mov dword [esp + 0x50], ecx
mov dword [esp], 1
add dword [esp + 0x54], edi
add dword [esp + 0x4c], edi
call fcn.004277b0
mov edi, eax
mov eax, dword [esp + 0x4c]
test eax, eax
jle 0x426399
mov eax, dword [esp + 0x50]
test eax, eax
jle 0x426399
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x50]
cmp eax, edx
jle 0x426386
mov eax, edx
sub dword [esp + 0x54], eax
sub dword [esp + 0x50], eax
sub dword [esp + 0x4c], eax
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x58]
test eax, eax
jle 0x4263e9
mov ecx, dword [esp + 0x64]
test ecx, ecx
je 0x426b23
test esi, esi
jle 0x4263dd
mov dword [esp], edi
mov dword [esp + 4], esi
call fcn.00427940
mov dword [esp + 4], ebp
mov dword [esp], eax
mov edi, eax
call fcn.004277e0
mov dword [esp], ebp
mov dword [esp + 0x18], eax
call fcn.00427660
mov eax, dword [esp + 0x18]
mov ebp, eax
mov eax, dword [esp + 0x58]
sub eax, esi
jne 0x426b4f
mov dword [esp], 1
call fcn.004277b0
mov edx, dword [esp + 0x60]
test edx, edx
mov dword [esp + 0x38], eax
jle 0x426415
mov edx, dword [esp + 0x60]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00427940
mov dword [esp + 0x38], eax
cmp dword [esp + 0xc0], 1
mov dword [esp + 0x58], 0
jle 0x426a71
mov eax, dword [esp + 0x60]
mov esi, 0x1f
test eax, eax
je 0x426447
mov edx, dword [esp + 0x38]
mov eax, dword [edx + 0x10]
bsr esi, dword [edx + eax*4 + 0x10]
xor esi, 0x1f
sub esi, dword [esp + 0x4c]
mov ecx, dword [esp + 0x54]
sub esi, 4
and esi, 0x1f
add ecx, esi
mov eax, esi
test ecx, ecx
mov dword [esp + 0x8c], esi
jle 0x426479
mov dword [esp], ebp
mov dword [esp + 4], ecx
call fcn.00427a60
mov ebp, eax
mov eax, dword [esp + 0x8c]
add eax, dword [esp + 0x4c]
test eax, eax
jle 0x426495
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.00427a60
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x5c]
test eax, eax
jne 0x42693a
cmp dword [esp + 0xc0], 2
jle 0x426758
mov eax, dword [esp + 0x48]
test eax, eax
jg 0x426758
mov eax, dword [esp + 0x48]
test eax, eax
jne 0x4265ed
mov eax, dword [esp + 0x38]
mov dword [esp + 8], 0
mov dword [esp + 4], 5
mov dword [esp], eax
call fcn.004276b0
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 0x38], eax
call fcn.00427b60
test eax, eax
jle 0x4265ed
mov edx, dword [esp + 0x20]
add edx, 2
mov dword [esp + 0x28], edx
jmp 0x425cc9
movzx ecx, byte [eax - 1]
mov esi, eax
jmp 0x426532
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x426532
fstp st(0)
fstp st(0)
fstp st(0)
fstp st(0)
jmp 0x426532
fstp st(0)
fstp st(0)
fstp st(0)
fstp st(0)
cmp cl, 0x39
lea eax, [esi - 1]
jne 0x426f52
cmp eax, ebx
jne 0x426510
add dword [esp + 0x74], 1
mov ecx, 0x31
mov byte [ebx], 0x30
mov byte [eax], cl
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x24], 0x20
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x425d01
mov dword [esp + 0x5c], 0
jmp 0x425faf
mov eax, 3
sub eax, dword [esp + 0x44]
mov dword [esp + 0x44], eax
jmp 0x4260a6
mov dword [esp + 0x64], 0
mov edx, dword [esp + 0xc4]
add edx, dword [esp + 0x20]
mov dword [esp + 0x70], edx
add edx, 1
test edx, edx
mov dword [esp + 0x48], edx
jle 0x426aef
cmp edx, 0xe
mov dword [esp + 0x8c], edx
setbe dl
and edx, eax
mov eax, dword [esp + 0x48]
jmp 0x42606e
mov dword [esp + 0x44], 2
jmp 0x42609d
fstp st(0)
jmp 0x4265e3
fstp st(0)
mov dword [esp + 0x38], 0
xor edi, edi
mov ecx, dword [esp + 0xc4]
mov esi, ebx
mov dword [esp + 0x40], 0
mov dword [esp + 0x24], 0x10
neg ecx
mov dword [esp + 0x28], ecx
jmp 0x425cdf
neg eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x4c], 0
jmp 0x425fca
mov ecx, dword [esp + 0x20]
sub dword [esp + 0x54], ecx
mov dword [esp + 0x60], 0
neg ecx
mov dword [esp + 0x58], ecx
jmp 0x425fea
fild dword [esp + 0x20]
fucompp
fnstsw ax
sahf
jp 0x426651
je 0x425f6c
sub dword [esp + 0x20], 1
jmp 0x425f6c
mov ecx, dword [esp + 0x54]
xor edi, edi
mov esi, dword [esp + 0x58]
mov dword [esp + 0x50], ecx
jmp 0x426368
fld qword [esp + 0x38]
lea esi, [ebx + 1]
fld st(0)
fdiv st(2)
fnstcw word [esp + 0x7e]
mov dword [esp + 0x8c], 1
movzx eax, word [esp + 0x7e]
mov ah, 0xc
mov word [esp + 0x7c], ax
fldcw word [esp + 0x7c]
fistp dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x78], ecx
lea eax, [ecx + 0x30]
fild dword [esp + 0x78]
fmul st(2)
mov byte [ebx], al
fsubp st(1)
fldz
fxch st(1)
fucom st(1)
fnstsw ax
fstp st(1)
sahf
jnp 0x42707b
mov eax, dword [esp + 0x8c]
cmp dword [esp + 0x48], eax
je 0x426abc
fld dword [0x48ff74]
mov edx, dword [esp + 0x48]
jmp 0x4266f7
mov eax, dword [esp + 0x8c]
cmp edx, eax
je 0x426aba
add eax, 1
fmul st(1), st(0)
mov dword [esp + 0x8c], eax
fld st(1)
fdiv st(3)
fldcw word [esp + 0x7c]
fistp dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x78], ecx
lea eax, [ecx + 0x30]
fild dword [esp + 0x78]
fmul st(3)
mov byte [esi], al
add esi, 1
fsubp st(2)
fldz
fxch st(2)
fucom st(2)
fnstsw ax
fstp st(2)
sahf
jp 0x4266e8
jne 0x4266e8
fstp st(0)
fstp st(0)
fstp st(0)
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], 0
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x425d01
mov eax, dword [esp + 0x64]
test eax, eax
je 0x42699a
add esi, dword [esp + 0x50]
test esi, esi
jle 0x42677a
mov dword [esp], edi
mov dword [esp + 4], esi
call fcn.00427a60
mov edi, eax
mov esi, dword [esp + 0x58]
mov edx, edi
test esi, esi
jne 0x426e70
mov dword [esp + 0x28], ebx
mov esi, edx
mov dword [esp + 0x4c], ebx
mov ebx, edi
mov dword [esp + 0x8c], 1
mov dword [esp + 0x40], edi
jmp 0x426885
mov dword [esp], edx
mov dword [esp + 0x18], eax
call fcn.00427660
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0xc0]
or edx, eax
jne 0x4267db
mov ecx, dword [esp + 0xb8]
test byte [ecx], 1
jne 0x4267db
mov edx, dword [esp + 0x44]
test edx, edx
je 0x42709d
test edi, edi
js 0x426cd1
or edi, dword [esp + 0xc0]
jne 0x4267fc
mov edx, dword [esp + 0xb8]
test byte [edx], 1
je 0x426cd1
test eax, eax
jg 0x426ec9
mov edx, dword [esp + 0x28]
movzx eax, byte [esp + 0x2c]
mov ecx, dword [esp + 0x48]
mov byte [edx], al
add edx, 1
cmp dword [esp + 0x8c], ecx
mov dword [esp + 0x28], edx
je 0x426eb4
mov dword [esp], ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
call fcn.004276b0
cmp ebx, esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
mov dword [esp], ebx
mov ebp, eax
je 0x4268e9
call fcn.004276b0
mov dword [esp], esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
mov ebx, eax
call fcn.004276b0
mov esi, eax
add dword [esp + 0x8c], 1
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00427240
mov dword [esp + 4], ebx
mov dword [esp], ebp
mov dword [esp + 0x34], eax
add eax, 0x30
mov dword [esp + 0x2c], eax
call fcn.00427b60
mov dword [esp + 4], esi
mov edi, eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.00427bd0
mov edx, eax
mov eax, 1
mov ecx, dword [edx + 0xc]
test ecx, ecx
jne 0x4267a8
mov dword [esp + 4], edx
mov dword [esp], ebp
mov dword [esp + 0x18], edx
call fcn.00427b60
mov edx, dword [esp + 0x18]
jmp 0x4267a8
call fcn.004276b0
mov ebx, eax
mov esi, eax
jmp 0x42687d
cmp dword [esp + 0xc0], 4
je 0x426aad
cmp dword [esp + 0xc0], 5
jne 0x4262ab
mov dword [esp + 0x64], 1
jmp 0x42659a
mov edx, dword [esp + 0x40]
test edx, edx
je 0x425cf9
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.00427660
jmp 0x425cf9
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00427b60
test eax, eax
jns 0x4264a1
mov dword [esp], ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
sub dword [esp + 0x20], 1
call fcn.004276b0
mov ebp, eax
mov eax, dword [esp + 0x64]
test eax, eax
jne 0x4270d6
cmp dword [esp + 0xc0], 2
mov edx, dword [esp + 0x70]
jle 0x426996
cmp dword [esp + 0x70], 0
jle 0x427179
mov dword [esp + 0x48], edx
mov esi, ebx
mov dword [esp + 0x24], edi
mov edi, dword [esp + 0x48]
mov dword [esp + 0x30], ebx
mov ebx, dword [esp + 0x38]
mov dword [esp + 0x8c], 1
jmp 0x4269e2
mov dword [esp], ebp
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
call fcn.004276b0
add dword [esp + 0x8c], 1
mov ebp, eax
mov dword [esp + 4], ebx
mov dword [esp], ebp
call fcn.00427240
add eax, 0x30
mov byte [esi], al
add esi, 1
cmp edi, dword [esp + 0x8c]
jg 0x4269c0
mov edi, dword [esp + 0x24]
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x40], 0
mov eax, dword [esp + 0x44]
test eax, eax
je 0x426dba
cmp dword [esp + 0x44], 2
je 0x426df2
cmp dword [ebp + 0x10], 1
jle 0x426fa4
movzx ecx, byte [esi - 1]
jmp 0x426a46
movzx ecx, byte [eax - 1]
mov esi, eax
cmp cl, 0x39
lea eax, [esi - 1]
jne 0x426f14
cmp eax, ebx
jne 0x426a40
mov edx, dword [esp + 0x20]
mov byte [ebx], 0x31
mov dword [esp + 0x24], 0x20
add edx, 2
mov dword [esp + 0x28], edx
jmp 0x425cdf
cmp dword [esp + 0x40], 1
jne 0x42642b
mov ecx, dword [esp + 0xb0]
mov eax, dword [ecx + 4]
add eax, 1
cmp dword [esp + 0xb4], eax
jle 0x42642b
add dword [esp + 0x54], 1
add dword [esp + 0x4c], 1
mov dword [esp + 0x58], 1
jmp 0x42642b
mov dword [esp + 0x64], 1
jmp 0x42603a
fstp st(0)
mov eax, dword [esp + 0x44]
test eax, eax
je 0x426c9c
fstp st(0)
fstp st(0)
cmp dword [esp + 0x44], 1
je 0x426da9
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], 0x10
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x425d01
cmp dword [esp + 0x48], 0xe
mov dword [esp + 0x8c], 1
setbe dl
and edx, eax
mov eax, 1
jmp 0x42606e
mov edx, 1
mov dword [esp + 0xc4], 1
jmp 0x426054
mov ecx, dword [esp + 0x58]
mov dword [esp], ebp
mov dword [esp + 4], ecx
call fcn.00427940
mov ebp, eax
jmp 0x4263e9
mov ecx, eax
xor esi, esi
sub ecx, dword [esp + 0x58]
mov dword [esp + 0x58], eax
add dword [esp + 0x60], ecx
jmp 0x426331
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00427940
mov ebp, eax
jmp 0x4263e9
fstp st(0)
fstp st(0)
fstp st(0)
mov dword [esp + 0x28], 2
xor edi, edi
mov dword [esp + 0x38], 0
jmp 0x425cc9
fld qword [esp + 0x68]
mov esi, ebx
fnstcw word [esp + 0x7e]
fmul qword [edx*8 + 0x48ff98]
mov dword [esp + 0x8c], 1
movzx eax, word [esp + 0x7e]
fld qword [esp + 0x38]
mov ah, 0xc
fld dword [0x48ff74]
fxch st(3)
mov word [esp + 0x7c], ax
jmp 0x426bc3
fmul st(2)
add eax, 1
mov dword [esp + 0x8c], eax
fld st(0)
fldcw word [esp + 0x7c]
fist dword [esp + 0x78]
fldcw word [esp + 0x7e]
mov eax, dword [esp + 0x78]
test eax, eax
je 0x426be5
fstp st(1)
mov dword [esp + 0x78], eax
fild dword [esp + 0x78]
fsubp st(1)
jmp 0x426be7
fstp st(0)
lea ecx, [eax + 0x30]
mov byte [esi], cl
mov eax, dword [esp + 0x8c]
add esi, 1
cmp eax, edx
jne 0x426bb5
fstp st(2)
fxch st(1)
fld dword [0x48ff84]
fld st(2)
fadd st(1)
fxch st(2)
fucom st(2)
fnstsw ax
fstp st(2)
sahf
ja 0x42652a
fsubrp st(2)
fxch st(1)
fucomp st(1)
fnstsw ax
sahf
jbe 0x425c4f
fstp st(1)
fldz
fxch st(1)
fucompp
fnstsw ax
sahf
jp 0x426fe3
jne 0x426fe3
mov dword [esp + 0x24], 0
jmp 0x426c4d
movzx ecx, byte [eax - 1]
mov esi, eax
cmp cl, 0x30
lea eax, [esi - 1]
je 0x426c47
mov edx, dword [esp + 0x74]
add edx, 1
mov dword [esp + 0x28], edx
jmp 0x425d01
mov eax, dword [esp + 0xb0]
sub edi, dword [esp + 0x40]
mov ecx, dword [eax + 4]
mov eax, dword [esp + 0x50]
sub eax, edi
cmp eax, ecx
jl 0x426f31
mov edx, dword [esp + 0x54]
add edi, 1
mov dword [esp + 0x8c], edi
mov esi, dword [esp + 0x58]
mov dword [esp + 0x50], edx
jmp 0x426352
fadd st(0)
fucom st(1)
fnstsw ax
sahf
ja 0x426da5
fxch st(1)
fucompp
fnstsw ax
sahf
jp 0x426cb8
je 0x426fce
mov edx, dword [esp + 0x20]
movzx ecx, byte [esi - 1]
mov dword [esp + 0x24], 0x10
mov dword [esp + 0x74], edx
jmp 0x426c4d
mov ecx, dword [esp + 0x44]
mov edx, esi
mov dword [esp + 0x40], ebx
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x4c]
mov edi, dword [esp + 0x2c]
test ecx, ecx
je 0x426f64
cmp dword [ebp + 0x10], 1
jle 0x426f5a
cmp dword [esp + 0x44], 2
je 0x426f80
mov dword [esp + 0x24], ebx
mov ebx, edx
jmp 0x426d3f
mov dword [esp], ebp
mov ebx, edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
call fcn.004276b0
mov ebp, eax
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00427240
add eax, 0x30
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00427b60
test eax, eax
jle 0x426ff0
movzx ecx, byte [esp + 0x2c]
mov byte [esi], cl
add esi, 1
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
mov dword [esp], ebx
call fcn.004276b0
cmp dword [esp + 0x40], ebx
mov edi, eax
jne 0x426d0c
mov dword [esp + 0x40], eax
jmp 0x426d0c
mov edx, dword [esp + 0x54]
xor edi, edi
sub edx, dword [esp + 0x48]
mov dword [esp + 0x8c], 0
mov dword [esp + 0x50], edx
jmp 0x426352
fstp st(0)
fstp st(0)
mov edx, dword [esp + 0x20]
movzx ecx, byte [esi - 1]
mov dword [esp + 0x74], edx
jmp 0x426532
mov dword [esp], ebp
mov dword [esp + 4], 1
call fcn.00427a60
mov ebp, eax
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00427b60
cmp eax, 0
jg 0x426a34
jne 0x426df2
test byte [esp + 0x2c], 1
jne 0x426a34
cmp dword [ebp + 0x10], 1
jle 0x427132
mov dword [esp + 0x24], 0x10
jmp 0x426e08
mov esi, eax
cmp byte [esi - 1], 0x30
lea eax, [esi - 1]
je 0x426e06
mov edx, dword [esp + 0x20]
add edx, 1
mov dword [esp + 0x28], edx
jmp 0x425cdf
mov eax, dword [esp + 0x48]
test eax, eax
je 0x425c01
mov eax, dword [esp + 0x70]
test eax, eax
jle 0x425c51
fld st(0)
mov edx, dword [esp + 0x70]
fmul dword [0x48ff74]
mov dword [esp + 0x74], 0xffffffff
fst qword [esp + 0x38]
fld st(0)
fmul dword [0x48ff78]
fadd dword [0x48ff7c]
fstp qword [esp + 0x68]
sub dword [esp + 0x6c], 0x3400000
jmp 0x426110
mov eax, dword [edi + 4]
mov dword [esp], eax
call fcn.004275a0
lea edx, [eax + 0xc]
mov esi, eax
mov eax, dword [edi + 0x10]
mov dword [esp], edx
lea ecx, [eax*4 + 8]
lea eax, [edi + 0xc]
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
call sub.msvcrt.dll_memcpy
mov dword [esp + 4], 1
mov dword [esp], esi
call fcn.00427a60
mov edx, eax
jmp 0x426788
mov edx, esi
mov esi, dword [esp + 0x28]
mov dword [esp + 0x40], ebx
mov edi, edx
mov ebx, dword [esp + 0x4c]
jmp 0x426a13
cmp dword [esp + 0x44], 2
je 0x426804
cmp dword [esp + 0x2c], 0x39
mov edx, esi
mov dword [esp + 0x40], ebx
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x4c]
je 0x426fbc
movzx eax, byte [esp + 0x2c]
mov edi, edx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], 0x20
add eax, 1
add ecx, 1
mov byte [esi], al
add esi, 1
mov dword [esp + 0x28], ecx
jmp 0x425cdf
add ecx, 1
mov byte [eax], cl
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x24], 0x20
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x425cdf
mov edi, dword [esp + 0x50]
mov esi, dword [esp + 0x58]
sub edi, ecx
mov ecx, dword [esp + 0x54]
add edi, 1
mov dword [esp + 0x8c], edi
mov dword [esp + 0x50], ecx
jmp 0x426352
add ecx, 1
jmp 0x42654f
cmp dword [ebp + 0x14], 0
jne 0x426cf9
test eax, eax
jg 0x42700f
mov dword [esp + 0x24], 0
cmp dword [ebp + 0x10], 1
jg 0x426f80
cmp dword [ebp + 0x14], 0
je 0x426f88
mov dword [esp + 0x24], 0x10
movzx eax, byte [esp + 0x2c]
mov edi, edx
mov byte [esi], al
mov ecx, dword [esp + 0x20]
add esi, 1
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x425cdf
mov ecx, dword [ebp + 0x14]
test ecx, ecx
jne 0x426a34
mov dword [esp + 0x24], 0
jmp 0x426e08
mov byte [esi], 0x39
mov edi, edx
add esi, 1
mov ecx, 0x39
jmp 0x426a46
mov edx, dword [esp + 0x20]
and ecx, 1
movzx ecx, byte [esi - 1]
mov dword [esp + 0x74], edx
jne 0x426532
mov dword [esp + 0x24], 0x10
jmp 0x426c4d
cmp dword [esp + 0x2c], 0x39
mov edx, ebx
mov ebx, dword [esp + 0x24]
je 0x426fbc
add dword [esp + 0x2c], 1
mov dword [esp + 0x24], 0x20
jmp 0x426f88
mov dword [esp], ebp
mov dword [esp + 4], 1
mov dword [esp + 0x18], edx
call fcn.00427a60
mov ebp, eax
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00427b60
mov edx, dword [esp + 0x18]
cmp eax, 0
jle 0x42710e
mov ecx, dword [esp + 0x34]
add ecx, 0x31
cmp edi, 0x39
mov dword [esp + 0x2c], ecx
je 0x426fbc
mov dword [esp + 0x24], 0x20
jmp 0x426f74
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x24], 0x10
add ecx, 1
mov dword [esp + 0x28], ecx
jmp 0x425d01
jne 0x4266cb
fstp st(0)
fstp st(0)
mov edx, dword [esp + 0x20]
mov dword [esp + 0x24], 0
add edx, 1
mov dword [esp + 0x28], edx
jmp 0x425d01
cmp dword [esp + 0x2c], 0x39
mov edx, esi
mov dword [esp + 0x40], ebx
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x4c]
je 0x426fbc
test edi, edi
jle 0x427149
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x24], 0x20
add ecx, 0x31
mov dword [esp + 0x2c], ecx
jmp 0x426f88
mov dword [esp], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
call fcn.004276b0
cmp dword [esp + 0x70], 0
mov edi, eax
jg 0x427101
cmp dword [esp + 0xc0], 2
jg 0x427125
mov edx, dword [esp + 0x70]
mov dword [esp + 0x48], edx
jmp 0x426764
jne 0x427056
test byte [esp + 0x2c], 1
je 0x427056
nop
jmp 0x427042
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x48], ecx
jmp 0x4264bb
cmp dword [ebp + 0x14], 0
mov dword [esp + 0x24], 0
jne 0x426dfc
jmp 0x426e08
cmp dword [ebp + 0x10], 1
mov dword [esp + 0x24], 0x10
jg 0x426f88
cmp dword [ebp + 0x14], 1
sbb eax, eax
not eax
and eax, 0x10
mov dword [esp + 0x24], eax
jmp 0x426f88
mov eax, 1
jmp 0x426010
mov dword [esp + 0x48], edx
jmp 0x4264bb