Things that immediately pop out to me:
- ecx may not be preserved through the calling of 421900. If this is the case, mov ecx, [4A5AE0], and then add ecx, 9
- if ecx is preserved through the calling, then you need to replace add ecx,8 with add ecx,5. (at 0x423ab1)
ALSO if you want karma to be...