Function at 0x852d00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x12c
mov edx, dword [esp + 0x150]
mov ebx, dword [esp + 0x14c]
mov esi, dword [esp + 0x148]
mov ecx, dword [esp + 0x144]
mov edi, dword [esp + 0x140]
test edi, edi
jne 0x852d66
test ecx, ecx
jne 0x852d66
test esi, esi
jne 0x852d66
cmp ebx, 0xfffffc19
jne 0x852d66
cmp edx, 0xfffffc19
jne 0x852d66
sub esp, 0xc
xor ecx, ecx
xor edx, edx
push 0
push 0
push 0
push 0
push 0
call fcn.00854020
add esp, 0x20
mov ebp, eax
jmp 0x852d78
mov ebp, 0xfffffffd
test dword [esp + 0x154], 0xe20f5a6f
je 0x852d85
mov eax, ebp
add esp, 0x12c
pop esi
pop edi
pop ebx
pop ebp
ret
test edi, edi
mov ebp, 0xfffffffe
je 0x852d78
test esi, esi
je 0x852d78
mov eax, dword [esp + 0x15c]
cmp dword [esp + 0x158], 0
jne 0x852dac
mov ebp, 0xfffffffe
test eax, eax
jg 0x852d78
test eax, eax
js 0x852e04
test ebx, ebx
js 0x852e0e
test edx, edx
mov ebp, 0xffffffe8
js 0x852d78
cmp edx, ebx
jg 0x852d78
mov eax, dword [edi]
cmp eax, 0x50435245
jne 0x852e18
mov ebp, 0xffffffe4
test byte [edi + 0xc], 2
je 0x852d78
mov eax, 0x800
and eax, dword [edi + 8]
mov dword [esp + 0x30], eax
shr eax, 0xb
mov dword [esp + 0x3c], eax
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0x154]
test eax, 0x8000000
je 0x852e32
mov eax, 2
jmp 0x852e38
mov ebp, 0xfffffff1
jmp 0x852d78
mov ebp, 0xffffffe0
jmp 0x852d78
cmp eax, 0x45524350
mov ebp, 0xffffffe3
je 0x852d78
mov ebp, 0xfffffffc
jmp 0x852d78
shr eax, 0xf
and eax, 1
lea edx, [esi + edx*2]
mov dword [esp + 0x58], edx
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0x154]
test ah, 0x20
jne 0x852ef0
cmp dword [esp + 0x30], 0
je 0x852ef0
sub esp, 4
lea eax, [esp + 0x12c]
push eax
push ebx
push esi
call fcn.008611f0
add esp, 0x10
test eax, eax
je 0x852ebe
cmp dword [esp + 0x15c], 2
jl 0x852e97
mov ecx, dword [esp + 0x128]
mov edx, dword [esp + 0x158]
mov dword [edx], ecx
mov dword [edx + 4], eax
cmp dword [esp + 0xf8], 1
mov ebp, 0xffffffe7
jg 0x852eab
mov ebp, 0xfffffff6
cmp eax, 2
jl 0x852d78
mov ebp, 0xfffffff6
jmp 0x852d78
mov eax, dword [esp + 0x150]
test eax, eax
jle 0x852ee9
cmp eax, ebx
jge 0x852ee9
mov eax, dword [esp + 0x58]
movzx eax, word [eax]
and eax, 0xfc00
mov ebp, 0xfffffff5
cmp eax, 0xdc00
je 0x852d78
mov ecx, dword [esp + 0x144]
movzx eax, word [edi + 0x22]
lea eax, [edi + eax*2]
mov dword [esp + 0xc], eax
mov dword [esp + 0x9c], eax
movzx ebp, word [edi + 0x26]
mov dword [esp + 0x8c], ebp
movzx edx, word [edi + 0x24]
mov dword [esp + 0x90], edx
mov dword [esp + 0x70], 0x989680
mov dword [esp + 0x74], 0x989680
mov dword [esp + 0x118], 0
mov eax, dword [edi + 0x30]
mov dword [esp + 8], eax
test ecx, ecx
je 0x852fc5
mov eax, dword [ecx]
mov dword [esp + 0x2c], 0
test al, 1
je 0x852f57
mov ecx, dword [ecx + 4]
mov dword [esp + 0x2c], ecx
mov ecx, 0x989680
test al, 2
je 0x852f6e
mov ecx, dword [esp + 0x144]
mov ecx, dword [ecx + 8]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 0x989680
test al, 0x10
mov dword [esp + 0x18], ebp
je 0x852f98
mov ebp, dword [esp + 0x144]
mov ecx, dword [ebp + 0x14]
mov ebp, dword [esp + 0x18]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x74], ecx
test al, 4
je 0x852fb1
mov ebp, dword [esp + 0x144]
mov ebp, dword [ebp + 0xc]
mov dword [esp + 0x118], ebp
mov ebp, dword [esp + 0x18]
test al, 8
mov ecx, dword [esp + 8]
je 0x852fe1
mov eax, dword [esp + 0x144]
mov ecx, dword [eax + 0x10]
jmp 0x852fe1
mov dword [esp + 0x2c], 0
mov dword [esp + 0x14], 0x989680
mov dword [esp + 0x10], 0x989680
mov ecx, dword [esp + 8]
mov eax, dword [edi + 0xc]
mov dword [esp + 0x38], eax
test ah, 0x20
je 0x852ffa
mov eax, dword [edi + 0x10]
cmp eax, dword [esp + 0x10]
jae 0x852ffa
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x38]
test ah, 0x40
je 0x853010
mov eax, dword [edi + 0x14]
cmp eax, dword [esp + 0x14]
jae 0x853010
mov dword [esp + 0x74], eax
test ecx, ecx
mov eax, 0x8a4f84
je 0x85301b
mov eax, ecx
imul edx, ebp
mov ebp, dword [edi + 8]
mov ecx, dword [esp + 0xc]
lea ecx, [ecx + edx*2]
mov dword [esp + 0xe0], ecx
mov dword [esp + 0xe4], esi
mov ecx, dword [esp + 0x150]
mov dword [esp + 0x104], ecx
lea ecx, [esi + ebx*2]
mov dword [esp + 0x14], ecx
mov dword [esp + 0xe8], ecx
mov ecx, ebp
shr ecx, 5
and ecx, 1
mov dword [esp + 0xc8], ecx
mov ecx, ebp
shr ecx, 0x1d
and ecx, 1
mov dword [esp + 0xc4], ecx
mov ecx, ebp
shr ecx, 0x19
and ecx, 1
mov dword [esp + 0xc0], ecx
mov dword [esp + 0x98], 0
mov edx, dword [esp + 0x154]
mov ecx, edx
shr ecx, 7
and ecx, 1
mov dword [esp + 0xb4], ecx
mov ecx, edx
shr ecx, 8
and ecx, 1
mov dword [esp + 0xb8], ecx
mov ecx, edx
shr ecx, 0xa
and ecx, 1
mov dword [esp + 0xcc], ecx
mov ecx, edx
shr ecx, 0x1c
and ecx, 1
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd4], 0
mov dword [esp + 0x120], 0
mov dword [esp + 0x11c], 0
mov dword [esp + 0x114], 0
mov ecx, dword [esp + 0x38]
shr ecx, 0xc
and ecx, 1
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xa8], eax
lea ecx, [eax + 0x100]
mov dword [esp + 0xac], ecx
add eax, 0x340
mov dword [esp + 0xb0], eax
mov ecx, edx
and ecx, 0x1800000
cmp ecx, 0x1000000
mov dword [esp + 0x10], ebp
je 0x853170
cmp ecx, 0x800000
mov eax, dword [esp + 0x15c]
je 0x85317b
mov ebp, 0xffffffe9
test ecx, ecx
jne 0x852d78
mov ebp, dword [esp + 0x10]
test ebp, 0x1800000
je 0x853182
mov ecx, ebp
shr ecx, 0x17
and ecx, 1
jmp 0x853184
xor ecx, ecx
mov eax, dword [esp + 0x15c]
jmp 0x85318b
mov ecx, 1
jmp 0x85318b
xor ecx, ecx
mov edx, dword [esp + 0x154]
mov dword [esp + 0xd8], ecx
test edx, 0x700000
mov edx, ebp
je 0x8531a3
mov edx, dword [esp + 0x154]
shr edx, 0x14
mov ecx, edx
and cl, 7
cmp cl, 5
ja case.default.0x8531b7
mov cx, 0xa
and edx, 7
jmp dword [edx*4 + 0x853ff4]
mov cx, 0xd
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 1
mov word [esp + 0xa0], cx
jmp 0x853227
mov ebp, 0xffffffe9
jmp 0x852d78
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 2
mov dword [esp + 0xa0], 0xa000d
jmp 0x853227
mov dword [esp + 0x84], 1
jmp 0x853227
mov dword [esp + 0x84], 2
mov ecx, dword [esp + 0x38]
test ch, 2
je 0x853244
mov ecx, dword [esp + 0xf8]
mov ebp, 0xfffffff3
test ecx, ecx
jne 0x852d78
mov ecx, 0xaaaaaaab
mul ecx
mov ecx, edx
shr ecx, 1
lea eax, [ecx + ecx*2]
mov dword [esp + 0x64], eax
lea eax, [eax + eax]
mov edx, 0x55555556
imul edx
mov dword [esp + 0x34], edx
movzx ebp, word [edi + 0x20]
test ebp, ebp
je 0x8532ac
cmp ecx, ebp
ja 0x8532ac
lea eax, [ebp + ebp*2]
lea eax, [eax*4 + 0xc]
sub esp, 0xc
push eax
call dword [0x891040]
add esp, 0x10
mov ecx, eax
mov dword [esp + 0x78], ecx
test ecx, ecx
je 0x853475
lea ebp, [ebp + ebp*2 + 3]
lea eax, [esp + 0x78]
mov dword [esp + 0x50], eax
mov dword [esp + 0x40], 1
jmp 0x8532cb
lea eax, [esp + 0x78]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x158]
mov dword [esp + 0x78], ecx
mov dword [esp + 0x40], 0
mov ebp, dword [esp + 0x64]
mov eax, dword [esp + 0x154]
mov edx, dword [esp + 0x10]
or edx, eax
and edx, 0x10
mov dword [esp + 0x48], edx
mov dword [esp + 0x7c], ebp
lea eax, [ebp + ebp]
mov edx, 0x55555556
imul edx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x80], eax
mov dword [esp + 0x100], 0
test ecx, ecx
mov edx, dword [esp + 0x15c]
je 0x853359
movzx edx, word [edi + 0x1e]
mov eax, ebp
sub eax, edx
cmp eax, 2
jl 0x853324
lea eax, [ecx + eax*4]
jmp 0x853327
lea eax, [ecx + 8]
lea edx, [ecx + ebp*4 - 4]
cmp edx, eax
jb 0x85333c
mov dword [edx], 0xffffffff
add edx, 0xfffffffc
cmp edx, eax
jae 0x85332f
mov edx, dword [esp + 0x15c]
test edx, edx
jle 0x853359
mov dword [ecx], 0xffffffff
cmp edx, 1
je 0x853359
mov dword [ecx + 4], 0xffffffff
cmp dword [esp + 0x48], 0
mov eax, dword [edi + 0xc]
je 0x8533b1
mov dword [esp + 0x24], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x20], 0
mov ebp, dword [esp + 0x10]
mov ecx, dword [esp + 0x34]
shr ecx, 0x1f
test al, 0x40
jne 0x853428
mov al, 1
mov dword [esp + 0x44], eax
mov dword [esp + 0x60], 0
mov dword [esp + 0x28], 0
jmp 0x8534f8
test al, 0x10
jne 0x85344c
mov dword [esp + 0x24], 0
cmp dword [esp + 0x2c], 0
je 0x85336b
mov ecx, dword [esp + 0x38]
and ecx, 0x100
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x20], 0
mov ebp, dword [esp + 0x10]
jne 0x853387
mov ebp, dword [esp + 0x2c]
mov ecx, dword [ebp + 4]
and ecx, 1
neg ecx
lea ebp, [ebp + 8]
mov dword [esp + 0x1c], ebp
mov ebp, dword [esp + 0x10]
and dword [esp + 0x1c], ecx
mov dword [esp + 0x24], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x20], 0
jmp 0x853387
mov dword [esp + 0xc], eax
mov ax, word [edi + 0x1a]
cmp byte [esp + 0xc], 0
mov dword [esp + 0x60], eax
js 0x85347f
mov dword [esp + 0x44], 0
mov dword [esp + 0x28], eax
jmp 0x8534f8
mov bp, word [edi + 0x18]
test al, 0x20
mov dword [esp + 0x18], ebp
jne 0x853f34
mov dword [esp + 0x20], 1
mov dword [esp + 0x1c], 0
mov dword [esp + 0x24], ebp
jmp 0x853383
mov ebp, 0xfffffffa
jmp 0x852d78
movzx ebp, ax
cmp ebp, 0xff
mov dword [esp + 0x28], eax
ja 0x85349d
mov edx, dword [esp + 0xac]
movzx eax, byte [edx + ebp]
mov dword [esp + 0x28], eax
mov dword [esp + 0x44], 0
cmp dword [esp + 0x30], 0
je 0x8534ed
mov eax, ebp
cmp ebp, 0x80
jb 0x8534ed
mov edx, eax
and edx, 0xff80
shr edx, 7
movzx edx, byte [edx + 0x894a84]
shl edx, 7
mov ebp, eax
and ebp, 0x7f
or ebp, edx
movzx edx, word [ebp + ebp + 0x896c84]
add eax, dword [edx*8 + 0x893408]
mov dword [esp + 0x44], 0
mov dword [esp + 0x28], eax
mov edx, dword [esp + 0x15c]
mov ebp, dword [esp + 0x10]
mov eax, dword [esp + 0x150]
lea eax, [esi + eax*2 - 2]
mov dword [esp + 0x68], eax
add dword [esp + 0x34], ecx
mov dword [esp + 0x5c], 0
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov dword [esp + 0x4c], 0
jmp 0x8537a0
add eax, 2
cmp eax, dword [esp + 0x14]
jae 0x853536
cmp word [eax], bp
jne 0x853528
cmp eax, dword [esp + 0x14]
mov dword [esp + 0x68], eax
jae 0x853fe1
mov ecx, dword [esp + 8]
mov dword [esp + 0xec], ecx
mov dword [esp + 0xf4], ecx
mov dword [esp + 0x6c], 0
mov dword [esp + 0x108], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x94], 0
mov edx, dword [esp + 0xe0]
sub esp, 0xc
push 0
push 0
lea eax, [esp + 0x80]
push eax
push 2
push ecx
call fcn.00854020
add esp, 0x20
mov ebp, eax
cmp dword [esp + 0xd4], 0
setne cl
cmp dword [esp + 0x5c], 0
sete al
and al, cl
je 0x8535c4
mov ecx, dword [esp + 0xf4]
mov dword [esp + 0x5c], ecx
mov ecx, dword [esp + 0x144]
mov edx, dword [esp + 0x15c]
test al, al
mov eax, dword [esp + 8]
jne 0x8535de
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x4c], eax
lea eax, [ebp + 0x3e4]
cmp eax, 4
ja case.default.0x8535ed
jmp dword [eax*4 + 0x85400c]
mov ebp, dword [esp + 0xec]
cmp ebp, dword [esp + 8]
jbe case.0x8535ed.995
jmp 0x853660
test ebp, ebp
jne 0x853dcd
mov eax, dword [esp + 8]
lea ebp, [eax + 2]
cmp dword [esp + 0x30], 0
mov dword [esp + 0x98], 0
je 0x853660
cmp ebp, dword [esp + 0x14]
jae 0x853660
mov ecx, eax
movzx eax, word [ecx + 2]
and eax, 0xfc00
cmp eax, 0xdc00
jne 0x853660
lea ebp, [ecx + 4]
test dword [esp + 0x10], 0x40000
jne 0x85366e
jmp 0x853722
mov eax, dword [esp + 0x94]
mov dword [esp + 0x98], eax
mov ebp, dword [esp + 8]
test dword [esp + 0x10], 0x40000
je 0x853722
mov ecx, dword [esp + 0x84]
mov eax, dword [esp + 0xe8]
test ecx, ecx
je 0x8536c3
cmp dword [esp + 8], eax
jae 0x853722
sub esp, 0xc
push dword [esp + 0x48]
lea edx, [esp + 0x98]
push edx
push eax
push ecx
push dword [esp + 0x24]
call fcn.00860ec0
add esp, 0x20
or eax, dword [esp + 0x48]
jne 0x853fe1
cmp ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x15c]
jbe 0x853737
jmp 0x853d0b
mov ecx, dword [esp + 0x88]
lea edx, [ecx + ecx]
sub eax, edx
mov edx, dword [esp + 0x15c]
cmp dword [esp + 8], eax
ja 0x853722
mov eax, dword [esp + 8]
movzx eax, word [eax]
cmp ax, word [esp + 0xa0]
jne 0x853722
cmp ecx, 1
je 0x853d0b
cmp dword [esp + 0x48], 0
jne 0x853d0b
cmp ebp, dword [esp + 0x14]
ja 0x853d0b
movzx eax, word [esp + 0xa2]
mov ecx, dword [esp + 8]
cmp word [ecx + 2], ax
jne 0x853737
jmp 0x853d0b
cmp dword [esp + 0x48], 0
jne 0x853d0b
cmp ebp, dword [esp + 0x14]
ja 0x853d0b
cmp ebp, dword [esp + 0x58]
jbe 0x85378d
cmp ebp, dword [esp + 0x14]
jae 0x85378d
movzx eax, word [ebp - 2]
cmp eax, 0xd
jne 0x85378d
movzx eax, word [ebp]
cmp eax, 0xa
jne 0x85378d
test byte [edi + 0xd], 8
jne 0x85378d
mov ecx, dword [esp + 0x84]
dec ecx
lea eax, [ebp + 2]
cmp dword [esp + 0x88], 2
mov edx, eax
je 0x853774
mov edx, ebp
cmp ecx, 2
jb 0x85377b
mov eax, edx
mov ebp, eax
mov edx, dword [esp + 0x15c]
jmp 0x85378d
mov eax, ecx
jmp 0x853c37
mov dword [esp + 0x11c], 0
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x10]
test ebp, 0x40000
mov ecx, dword [esp + 0x14]
je 0x85393d
cmp dword [esp + 0x30], 0
mov eax, dword [esp + 0xe8]
je 0x85387b
mov ecx, dword [esp + 8]
cmp ecx, eax
jae 0x85393d
mov ebp, dword [esp + 8]
mov ecx, dword [esp + 0x84]
test ecx, ecx
je 0x853807
sub esp, 0xc
push dword [esp + 0x48]
lea edx, [esp + 0x98]
push edx
push eax
push ecx
push ebp
call fcn.00860ec0
add esp, 0x20
test eax, eax
mov edx, dword [esp + 0x15c]
je 0x853847
jmp 0x85392e
mov ecx, dword [esp + 0x88]
lea edx, [ecx + ecx]
sub eax, edx
cmp ebp, eax
mov edx, dword [esp + 0x15c]
ja 0x853847
movzx eax, word [ebp]
cmp ax, word [esp + 0xa0]
jne 0x853847
cmp ecx, 1
je 0x85392e
movzx eax, word [ebp + 2]
cmp ax, word [esp + 0xa2]
je 0x85392e
lea ecx, [ebp + 2]
cmp ecx, dword [esp + 0x14]
jae 0x853865
movzx eax, word [ebp + 2]
and eax, 0xfc00
cmp eax, 0xdc00
jne 0x853865
add ebp, 4
mov ecx, ebp
mov eax, dword [esp + 0xe8]
cmp ecx, eax
mov ebp, ecx
jb 0x8537d2
jmp 0x85393d
mov ecx, dword [esp + 8]
cmp ecx, eax
jae 0x85393d
mov ecx, dword [esp + 8]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x84]
test ecx, ecx
je 0x8538cf
sub esp, 0xc
push dword [esp + 0x48]
lea edx, [esp + 0x98]
push edx
push eax
push ecx
push dword [esp + 0x28]
call fcn.00860ec0
add esp, 0x20
test eax, eax
jne 0x853932
mov eax, dword [esp + 0xe8]
mov edx, dword [esp + 0x15c]
mov ecx, dword [esp + 0xc]
jmp 0x853921
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x54], ecx
lea edx, [ecx + ecx]
mov ebp, eax
sub ebp, edx
mov ecx, dword [esp + 0xc]
cmp ecx, ebp
jbe 0x8538f2
mov edx, dword [esp + 0x15c]
jmp 0x853921
movzx edx, word [ecx]
cmp dx, word [esp + 0xa0]
jne 0x8538c2
cmp dword [esp + 0x54], 1
mov edx, dword [esp + 0x15c]
je 0x853939
mov ebp, dword [esp + 0xc]
movzx ecx, word [ebp + 2]
cmp cx, word [esp + 0xa2]
mov ecx, ebp
je 0x85393d
add ecx, 2
cmp ecx, eax
jb 0x85388b
jmp 0x85393d
mov ecx, ebp
jmp 0x85393d
mov edx, dword [esp + 0x15c]
mov ecx, dword [esp + 0xc]
mov eax, dword [edi + 8]
or eax, dword [esp + 0x154]
test eax, 0x4000000
jne 0x853c33
cmp dword [esp + 0x20], 0
mov edx, dword [esp + 0x18]
mov ebp, dword [esp + 0x24]
mov eax, dword [esp + 8]
mov dword [esp + 0xc], ecx
je 0x85399a
mov dword [esp + 0x18], edx
cmp dx, bp
jne 0x853a0b
cmp eax, ecx
mov edx, dword [esp + 0x15c]
jae 0x853c37
cmp word [eax], bp
je 0x853c37
add eax, 2
cmp eax, ecx
jb 0x853985
jmp 0x853c37
mov eax, dword [esp + 0x38]
test ah, 1
jne 0x853a47
cmp dword [esp + 0x1c], 0
mov edx, dword [esp + 0x15c]
je 0x853c33
mov eax, dword [esp + 8]
cmp eax, ecx
jae 0x853c37
mov ebp, eax
movzx ecx, word [eax]
cmp ecx, 0xff
jb 0x8539d7
mov ecx, 0xff
mov eax, ecx
shr eax, 3
mov edx, dword [esp + 0x1c]
movzx edx, byte [edx + eax]
and cl, 7
mov eax, 1
shl eax, cl
and eax, edx
jne 0x8539f5
add ebp, 2
mov ecx, dword [esp + 0xc]
test eax, eax
mov edx, dword [esp + 0x15c]
mov eax, ebp
je 0x8539bd
jmp 0x853c37
cmp eax, ecx
mov edx, dword [esp + 0x15c]
jae 0x853c37
mov ecx, edx
mov edx, eax
movzx eax, word [eax]
cmp ax, word [esp + 0x18]
je 0x853b3f
cmp ax, bp
je 0x853b3f
mov eax, edx
add eax, 2
cmp eax, dword [esp + 0xc]
mov edx, ecx
jb 0x853a1a
jmp 0x853c37
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0x150]
lea ecx, [eax + ecx*2]
cmp dword [esp + 8], ecx
mov edx, dword [esp + 0x15c]
jbe 0x853c33
cmp dword [esp + 0x30], 0
je 0x853b48
mov ecx, dword [esp + 0xc]
cmp dword [esp + 8], ecx
jb 0x853a8a
jmp 0x853bf7
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0x84]
test ecx, ecx
je 0x853ac0
mov ebp, dword [esp + 8]
cmp ebp, eax
jbe 0x853b08
sub esp, 0xc
push dword [esp + 0x48]
lea edx, [esp + 0x98]
push edx
push eax
push ecx
push ebp
call fcn.00860f70
add esp, 0x20
test eax, eax
je 0x853b08
jmp 0x853bf0
mov ecx, dword [esp + 0x88]
lea eax, [eax + ecx*2]
mov ebp, dword [esp + 8]
cmp ebp, eax
jb 0x853b08
lea eax, [ecx + ecx]
mov edx, ebp
sub edx, eax
movzx eax, word [edx]
cmp ax, word [esp + 0xa0]
jne 0x853b08
cmp ecx, 1
je 0x853bf0
neg ecx
mov ebp, dword [esp + 8]
movzx eax, word [ebp + ecx*2 + 2]
cmp ax, word [esp + 0xa2]
je 0x853bf0
lea eax, [ebp + 2]
mov ecx, dword [esp + 0xc]
cmp eax, ecx
jae 0x853b2e
movzx ecx, word [ebp + 2]
and ecx, 0xfc00
cmp ecx, 0xdc00
jne 0x853b2a
add ebp, 4
mov eax, ebp
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], eax
cmp eax, ecx
jb 0x853a83
jmp 0x853bf0
mov eax, edx
mov edx, ecx
jmp 0x853c37
mov ecx, dword [esp + 0xc]
cmp dword [esp + 8], ecx
jae 0x853bf7
mov ecx, dword [esp + 8]
lea ebp, [ecx + 2]
jmp 0x853b69
mov eax, dword [esp + 0xe4]
add ebp, 2
lea ecx, [ebp - 2]
mov edx, dword [esp + 0x84]
test edx, edx
je 0x853ba3
cmp ecx, eax
jbe 0x853bd8
sub esp, 0xc
push dword [esp + 0x48]
mov dword [esp + 0x64], ebp
lea ebp, [esp + 0x98]
push ebp
mov ebp, dword [esp + 0x68]
push eax
push edx
push ecx
call fcn.00860f70
add esp, 0x20
test eax, eax
je 0x853bd8
jmp 0x853be9
mov edx, dword [esp + 0x88]
lea eax, [eax + edx*2]
cmp ecx, eax
jb 0x853bd8
lea ecx, [edx + edx]
mov eax, ebp
sub eax, ecx
movzx ecx, word [eax - 2]
cmp cx, word [esp + 0xa0]
jne 0x853bd8
cmp edx, 1
je 0x853bf0
movzx eax, word [eax]
cmp ax, word [esp + 0xa2]
je 0x853bf0
add dword [esp + 8], 2
cmp ebp, dword [esp + 0xc]
jb 0x853b5f
jmp 0x853bf0
add ebp, 0xfffffffe
mov dword [esp + 8], ebp
mov edx, dword [esp + 0x15c]
mov ecx, dword [esp + 8]
movzx eax, word [ecx - 2]
cmp eax, 0xd
jne 0x853786
cmp ecx, dword [esp + 0xc]
jae 0x853c33
mov eax, dword [esp + 0x84]
dec eax
cmp eax, 1
ja 0x853c33
mov eax, dword [esp + 8]
movzx eax, word [eax]
cmp eax, 0xa
jne 0x853c2c
add dword [esp + 8], 2
mov edx, dword [esp + 0x15c]
mov eax, dword [esp + 8]
mov dword [esp + 8], eax
mov eax, dword [edi + 8]
or eax, dword [esp + 0x154]
and eax, 0x4000000
or eax, dword [esp + 0xf8]
jne 0x853544
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x853c7c
test byte [eax + 4], 2
je 0x853c7c
mov eax, dword [esp + 0x14]
sub eax, dword [esp + 8]
sar eax, 1
mov ecx, dword [esp + 0x2c]
cmp eax, dword [ecx + 0x28]
jb 0x853d0b
cmp byte [esp + 0x44], 0
jne 0x853544
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 8]
sub eax, ecx
cmp eax, 0x7cf
jg 0x853544
mov eax, dword [esp + 0x20]
lea eax, [ecx + eax*2]
cmp eax, dword [esp + 0x68]
jbe 0x853544
mov ebp, dword [esp + 0x60]
cmp bp, word [esp + 0x28]
je 0x85352b
cmp eax, dword [esp + 0x14]
jae 0x853536
movzx ecx, word [eax]
cmp cx, word [esp + 0x28]
mov edx, eax
je 0x853ce5
lea edx, [eax + 2]
cmp cx, bp
jne 0x853cea
cmp eax, dword [esp + 0x14]
jb 0x853cf6
jmp 0x853536
cmp cx, bp
je 0x853cda
mov eax, edx
cmp eax, dword [esp + 0x14]
jae 0x853536
cmp cx, bp
je 0x853536
cmp cx, word [esp + 0x28]
jne 0x853cc6
jmp 0x853536
mov ecx, dword [esp + 0x144]
xor ebp, ebp
cmp dword [esp + 0x40], 0
mov eax, dword [esp + 0x158]
je 0x853d56
sub esp, 0xc
mov eax, dword [esp + 0x5c]
push dword [eax]
call dword [0x891044]
mov edx, dword [esp + 0x16c]
mov eax, dword [esp + 0x168]
mov ecx, dword [esp + 0x154]
add esp, 0x10
test ebp, ebp
je 0x853d56
cmp ebp, 0xfffffff4
jne 0x852d78
cmp dword [esp + 0x4c], 0
je 0x853da6
mov dword [esp + 0x11c], 0
mov ebp, 0xfffffff4
cmp edx, 2
jl 0x853dab
mov edi, dword [esp + 0x5c]
sub edi, esi
sar edi, 1
mov dword [eax], edi
add ebx, ebx
sar ebx, 1
mov dword [eax + 4], ebx
mov ebp, 0xfffffff4
cmp edx, 2
je 0x853dab
mov edx, dword [esp + 0x4c]
sub edx, esi
sar edx, 1
mov dword [eax + 8], edx
mov ebp, 0xfffffff4
test ecx, ecx
jne 0x853db3
jmp 0x852d78
mov ebp, 0xffffffff
test ecx, ecx
je 0x852d78
test byte [ecx], 0x20
je 0x852d78
mov eax, dword [esp + 0x120]
mov ecx, dword [ecx + 0x18]
mov dword [ecx], eax
jmp 0x852d78
cmp ebp, 1
je 0x853dde
cmp ebp, 0xfffffc19
jne 0x853fbc
cmp dword [esp + 0x40], 0
je 0x853e3d
cmp dword [esp + 0x64], 6
jl 0x853e16
mov eax, dword [esp + 0x158]
lea eax, [eax + 8]
mov ecx, dword [esp + 0x78]
add ecx, 8
mov edx, dword [esp + 0x34]
lea edx, [edx*4 - 8]
sub esp, 4
push edx
push ecx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0x10
mov eax, dword [esp + 0x34]
cmp dword [esp + 0xfc], eax
jle 0x853e2b
or byte [esp + 0x102], 1
sub esp, 0xc
mov eax, dword [esp + 0x5c]
push dword [eax]
call dword [0x891044]
add esp, 0x10
mov eax, dword [esp + 0xfc]
mov ecx, eax
shr ecx, 0x1f
add ecx, eax
sar ecx, 1
cmp eax, dword [esp + 0x34]
mov edx, ecx
jl 0x853e57
xor edx, edx
test byte [esp + 0x102], 1
mov esi, ecx
je 0x853e65
mov esi, edx
cmp dword [esp + 0x158], 0
je 0x853ecc
movzx edx, word [edi + 0x1e]
cmp ecx, edx
jg 0x853ecc
lea edx, [edx + edx + 2]
mov ecx, dword [esp + 0x15c]
cmp edx, ecx
jg 0x853e88
mov ecx, edx
cmp eax, ecx
jge 0x853ecc
mov edx, dword [esp + 0x158]
mov edi, edx
lea edx, [edi + ecx*4]
lea ecx, [edi + eax*4]
lea edi, [edi + eax*4 + 4]
shl eax, 2
cmp edx, edi
ja 0x853ea8
mov edx, edi
sub edx, eax
mov eax, dword [esp + 0x158]
not eax
lea eax, [edx + eax + 4]
and eax, 0xfffffffc
sub esp, 4
push eax
push 0xff
push ecx
call sub.msvcrt.dll_memset
add esp, 0x10
xor ebp, ebp
cmp dword [esp + 0x15c], 2
jl 0x853f03
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0xec]
sub ecx, eax
sar ecx, 1
mov edx, dword [esp + 0x158]
mov dword [edx], ecx
mov ecx, dword [esp + 0xf0]
sub ecx, eax
sar ecx, 1
mov dword [edx + 4], ecx
mov ebp, esi
cmp dword [esp + 0x144], 0
je 0x852d78
mov eax, dword [esp + 0x144]
test byte [eax], 0x20
je 0x852d78
mov eax, dword [esp + 0x11c]
mov ecx, dword [esp + 0x144]
jmp 0x853dc3
movzx ecx, bp
cmp ecx, 0xff
mov dword [esp + 0x24], ebp
ja 0x853f52
mov edx, dword [esp + 0xac]
movzx edx, byte [edx + ecx]
mov dword [esp + 0x24], edx
mov dword [esp + 0x1c], 0
cmp dword [esp + 0x30], 0
mov dword [esp + 0x20], 1
je 0x853fb0
cmp ecx, 0x80
jb 0x853fb0
mov edx, ecx
and edx, 0xff80
shr edx, 7
movzx edx, byte [edx + 0x894a84]
shl edx, 7
mov ebp, ecx
and ebp, 0x7f
or ebp, edx
movzx edx, word [ebp + ebp + 0x896c84]
add ecx, dword [edx*8 + 0x893408]
mov dword [esp + 0x20], 1
mov dword [esp + 0x1c], 0
mov dword [esp + 0x24], ecx
mov edx, dword [esp + 0x15c]
jmp 0x853383
cmp dword [esp + 0x40], 0
mov ecx, dword [esp + 0x144]
mov eax, dword [esp + 0x158]
mov edx, dword [esp + 0x15c]
jne 0x853d22
jmp 0x853d49
mov ecx, dword [esp + 0x144]
mov edx, dword [esp + 0x15c]
jmp case.0x8535ed.996