Function at 0x714f00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x12c
mov ebx, dword [esp + 0x14c]
mov esi, dword [esp + 0x148]
mov edi, dword [esp + 0x140]
test edi, edi
jne 0x714f63
cmp dword [esp + 0x144], 0
jne 0x714f63
test esi, esi
jne 0x714f63
cmp ebx, 0xfffffc19
jne 0x714f63
cmp dword [esp + 0x150], 0xfffffc19
jne 0x714f63
sub esp, 0xc
xor ecx, ecx
xor edx, edx
push 0
push 0
push 0
push 0
push 0
call fcn.00716260
add esp, 0x20
mov ebp, eax
jmp 0x714f75
mov ebp, 0xfffffffd
test dword [esp + 0x154], 0xe20f5a6f
je 0x714f82
mov eax, ebp
add esp, 0x12c
pop esi
pop edi
pop ebx
pop ebp
ret
test edi, edi
mov ebp, 0xfffffffe
je 0x714f75
test esi, esi
je 0x714f75
mov edx, dword [esp + 0x15c]
cmp dword [esp + 0x158], 0
jne 0x714fa9
mov ebp, 0xfffffffe
test edx, edx
jg 0x714f75
test edx, edx
js 0x7150a4
test ebx, ebx
js 0x7150ae
mov eax, dword [esp + 0x150]
test eax, eax
mov ebp, 0xffffffe8
js 0x714f75
cmp eax, ebx
jg 0x714f75
mov eax, dword [edi]
cmp eax, 0x50435245
jne 0x7150b8
mov ebp, 0xffffffe4
test byte [edi + 0xc], 2
je 0x714f75
mov eax, 0x800
and eax, dword [edi + 8]
mov dword [esp + 0x30], eax
mov ebp, eax
shr ebp, 0xb
mov eax, dword [esp + 0x154]
mov ecx, eax
shr eax, 0xf
and eax, 1
test ecx, 0x8000000
mov ecx, 2
cmove ecx, eax
mov dword [esp + 0x3c], ebp
mov dword [esp + 0xbc], ebp
mov dword [esp + 0xf8], ecx
mov eax, dword [esp + 0x150]
lea eax, [esi + eax*2]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x154]
test ah, 0x20
jne 0x715101
cmp dword [esp + 0x30], 0
je 0x715101
sub esp, 4
lea eax, [esp + 0x12c]
push eax
push ebx
push esi
call fcn.00764310
add esp, 0x10
test eax, eax
je 0x7150cf
cmp dword [esp + 0x15c], 2
jl 0x715084
mov ecx, dword [esp + 0x128]
mov edx, dword [esp + 0x158]
mov dword [edx], ecx
mov dword [edx + 4], eax
cmp dword [esp + 0xf8], 1
mov ebp, 0xffffffe7
mov ecx, 0xfffffff6
cmovle ebp, ecx
cmp eax, 2
cmovge ebp, ecx
jmp 0x714f75
mov ebp, 0xfffffff1
jmp 0x714f75
mov ebp, 0xffffffe0
jmp 0x714f75
cmp eax, 0x45524350
mov eax, 0xffffffe3
mov ebp, 0xfffffffc
cmove ebp, eax
jmp 0x714f75
mov eax, dword [esp + 0x150]
test eax, eax
mov edx, dword [esp + 0x15c]
jle 0x715101
cmp eax, ebx
jge 0x715101
mov eax, dword [esp + 0x58]
movzx eax, word [eax]
and eax, 0xfc00
mov ebp, 0xfffffff5
cmp eax, 0xdc00
je 0x714f75
mov ecx, dword [esp + 0x144]
test ecx, ecx
je 0x715161
mov eax, dword [ecx]
and eax, 0x48
cmp eax, 0x40
jne 0x715161
test dword [esp + 0x154], 0xe7ff5a7f
jne 0x715161
mov eax, dword [ecx + 0x1c]
test eax, eax
mov eax, dword [esp + 0x158]
je 0x715161
sub esp, 4
push edx
push eax
push dword [esp + 0x160]
push dword [esp + 0x160]
push ebx
push esi
push ecx
call fcn.0073abc0
mov ecx, dword [esp + 0x164]
add esp, 0x20
mov ebp, eax
cmp ebp, 0xffffffe1
jne 0x714f75
test ecx, ecx
movzx eax, word [edi + 0x22]
lea eax, [edi + eax*2]
mov dword [esp + 0xc], eax
mov dword [esp + 0x9c], eax
movzx eax, word [edi + 0x26]
mov dword [esp + 8], eax
mov dword [esp + 0x8c], eax
movzx edx, word [edi + 0x24]
mov dword [esp + 0x90], edx
mov dword [esp + 0x70], 0x989680
mov dword [esp + 0x74], 0x989680
mov dword [esp + 0x118], 0
mov eax, dword [edi + 0x30]
mov dword [esp + 0x10], eax
je 0x7151f2
mov eax, dword [ecx]
mov dword [esp + 0x2c], 0
test al, 1
je 0x7151c8
mov ebp, dword [ecx + 4]
mov dword [esp + 0x2c], ebp
mov ebp, 0x989680
test al, 2
je 0x7151d8
mov ebp, dword [ecx + 8]
mov dword [esp + 0x70], ebp
mov dword [esp + 0x14], 0x989680
test al, 0x10
jne 0x71520d
test al, 4
jne 0x715224
test al, 8
jne 0x715240
mov ecx, dword [esp + 0x10]
jmp 0x715243
mov dword [esp + 0x2c], 0
mov dword [esp + 0x14], 0x989680
mov ebp, 0x989680
mov ecx, dword [esp + 0x10]
jmp 0x715243
mov dword [esp + 0x1c], ebp
mov ebp, dword [ecx + 0x14]
mov dword [esp + 0x14], ebp
mov dword [esp + 0x74], ebp
mov ebp, dword [esp + 0x1c]
test al, 4
je 0x7151e8
mov ecx, dword [esp + 0x144]
mov ecx, dword [ecx + 0xc]
mov dword [esp + 0x118], ecx
mov ecx, dword [esp + 0x144]
test al, 8
je 0x7151ec
mov ecx, dword [ecx + 0x10]
mov eax, dword [edi + 0xc]
mov dword [esp + 0x38], eax
test ah, 0x20
je 0x71525a
mov eax, dword [edi + 0x10]
cmp eax, ebp
jae 0x71525a
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x38]
test ah, 0x40
je 0x715270
mov eax, dword [edi + 0x14]
cmp eax, dword [esp + 0x14]
jae 0x715270
mov dword [esp + 0x74], eax
test ecx, ecx
mov eax, 0x874ef0
cmovne eax, ecx
imul edx, dword [esp + 8]
mov ebp, dword [edi + 8]
mov ecx, dword [esp + 0xc]
lea ecx, [ecx + edx*2]
mov dword [esp + 0xe0], ecx
mov dword [esp + 0xe4], esi
mov ecx, dword [esp + 0x150]
mov dword [esp + 0x104], ecx
lea ecx, [esi + ebx*2]
mov dword [esp + 0x14], ecx
mov dword [esp + 0xe8], ecx
mov ecx, ebp
shr ecx, 5
and ecx, 1
mov dword [esp + 0xc8], ecx
mov ecx, ebp
shr ecx, 0x1d
and ecx, 1
mov dword [esp + 0xc4], ecx
mov ecx, ebp
shr ecx, 0x19
and ecx, 1
mov dword [esp + 0xc0], ecx
mov dword [esp + 0x98], 0
mov edx, dword [esp + 0x154]
mov ecx, edx
shr ecx, 7
and ecx, 1
mov dword [esp + 0xb4], ecx
mov ecx, edx
shr ecx, 8
and ecx, 1
mov dword [esp + 0xb8], ecx
mov ecx, edx
shr ecx, 0xa
and ecx, 1
mov dword [esp + 0xcc], ecx
mov ecx, edx
shr ecx, 0x1c
and ecx, 1
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd4], 0
mov dword [esp + 0x120], 0
mov dword [esp + 0x11c], 0
mov dword [esp + 0x114], 0
mov ecx, dword [esp + 0x38]
shr ecx, 0xc
and ecx, 1
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xa8], eax
lea ecx, [eax + 0x100]
mov dword [esp + 0xac], ecx
add eax, 0x340
mov dword [esp + 0xb0], eax
mov ecx, edx
and ecx, 0x1800000
cmp ecx, 0x1000000
mov dword [esp + 0x10], ebp
je 0x7153d1
cmp ecx, 0x800000
mov eax, dword [esp + 0x15c]
je 0x7153dc
mov ebp, 0xffffffe9
test ecx, ecx
jne 0x714f75
mov ebp, dword [esp + 0x10]
test ebp, 0x1800000
je 0x7153e3
mov ecx, ebp
shr ecx, 0x17
and ecx, 1
jmp 0x7153e5
xor ecx, ecx
mov eax, dword [esp + 0x15c]
jmp 0x7153e5
mov ecx, 1
jmp 0x7153e5
xor ecx, ecx
mov dword [esp + 0xd8], ecx
mov ecx, dword [esp + 0x154]
test ecx, 0x700000
mov edx, ecx
cmove edx, ebp
shr edx, 0x14
mov ecx, edx
and cl, 7
cmp cl, 5
ja case.default.0x715412
mov cx, 0xa
and edx, 7
jmp dword [edx*4 + 0x716234]
mov cx, 0xd
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 1
mov word [esp + 0xa0], cx
jmp 0x715482
mov ebp, 0xffffffe9
jmp 0x714f75
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 2
mov dword [esp + 0xa0], 0xa000d
jmp 0x715482
mov dword [esp + 0x84], 1
jmp 0x715482
mov dword [esp + 0x84], 2
mov ecx, dword [esp + 0x38]
test ch, 2
je 0x71549f
mov ecx, dword [esp + 0xf8]
mov ebp, 0xfffffff3
test ecx, ecx
jne 0x714f75
mov ecx, 0xaaaaaaab
mul ecx
mov ecx, edx
shr ecx, 1
lea eax, [ecx + ecx*2]
mov dword [esp + 0x64], eax
lea eax, [eax + eax]
mov edx, 0x55555556
imul edx
mov dword [esp + 0x34], edx
movzx ebp, word [edi + 0x20]
test ebp, ebp
je 0x715507
cmp ecx, ebp
ja 0x715507
lea eax, [ebp + ebp*2]
lea eax, [eax*4 + 0xc]
sub esp, 0xc
push eax
call dword [0x860e74]
add esp, 0x10
mov ecx, eax
mov dword [esp + 0x78], ecx
test ecx, ecx
je 0x7156df
lea ebp, [ebp + ebp*2 + 3]
lea eax, [esp + 0x78]
mov dword [esp + 0x50], eax
mov dword [esp + 0x40], 1
jmp 0x715526
lea eax, [esp + 0x78]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x158]
mov dword [esp + 0x78], ecx
mov dword [esp + 0x40], 0
mov ebp, dword [esp + 0x64]
mov eax, dword [esp + 0x10]
or eax, dword [esp + 0x154]
and eax, 0x10
mov dword [esp + 0x48], eax
mov dword [esp + 0x7c], ebp
lea eax, [ebp + ebp]
mov edx, 0x55555556
imul edx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x80], eax
mov dword [esp + 0x100], 0
test ecx, ecx
mov edx, dword [esp + 0x15c]
je 0x7155b5
movzx edx, word [edi + 0x1e]
lea eax, [ecx + ebp*4 - 4]
sub ebp, edx
lea edx, [ecx + ebp*4]
mov dword [esp + 0xc], edx
lea edx, [ecx + 8]
cmp ebp, 2
cmovge edx, dword [esp + 0xc]
cmp eax, edx
jb 0x715598
mov dword [eax], 0xffffffff
add eax, 0xfffffffc
cmp eax, edx
jae 0x71558b
mov edx, dword [esp + 0x15c]
test edx, edx
jle 0x7155b5
mov dword [ecx], 0xffffffff
cmp edx, 1
je 0x7155b5
mov dword [ecx + 4], 0xffffffff
cmp dword [esp + 0x48], 0
mov eax, dword [edi + 0xc]
je 0x715614
mov dword [esp + 0x24], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
mov ebp, dword [esp + 0x10]
mov ecx, dword [esp + 0x34]
shr ecx, 0x1f
test al, 0x40
jne 0x71568b
mov al, 1
mov dword [esp + 0x44], eax
mov dword [esp + 0x60], 0
mov dword [esp + 0x28], 0
mov eax, dword [esp + 0x150]
jmp 0x715769
test al, 0x10
jne 0x7156b6
mov dword [esp + 0x24], 0
cmp dword [esp + 0x2c], 0
je 0x7155c7
mov ecx, dword [esp + 0x38]
and ecx, 0x100
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
mov ebp, dword [esp + 0x10]
jne 0x7155e3
mov ebp, dword [esp + 0x2c]
mov ecx, dword [ebp + 4]
and ecx, 1
neg ecx
lea ebp, [ebp + 8]
mov dword [esp + 0x18], ebp
mov ebp, dword [esp + 0x10]
and dword [esp + 0x18], ecx
mov dword [esp + 0x24], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
jmp 0x7155e3
mov dword [esp + 0xc], eax
mov ax, word [edi + 0x1a]
cmp byte [esp + 0xc], 0
mov dword [esp + 0x60], eax
js 0x7156e9
mov dword [esp + 0x44], 0
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x150]
jmp 0x715769
mov bp, word [edi + 0x18]
test al, 0x20
mov dword [esp + 0x1c], ebp
jne 0x7160c5
mov dword [esp + 0x20], 1
mov dword [esp + 0x18], 0
mov dword [esp + 0x24], ebp
jmp 0x7155df
mov ebp, 0xfffffffa
jmp 0x714f75
movzx edx, ax
mov ebp, edx
cmp edx, 0xff
mov dword [esp + 0x28], eax
ja 0x715709
mov edx, dword [esp + 0xac]
movzx eax, byte [edx + ebp]
mov dword [esp + 0x28], eax
mov dword [esp + 0x44], 0
cmp dword [esp + 0x30], 0
je 0x715757
cmp ebp, 0x80
jb 0x715757
mov eax, ebp
mov edx, eax
and edx, 0xff80
shr edx, 7
movzx edx, byte [edx + 0x8649f0]
shl edx, 7
and ebp, 0x7f
or ebp, edx
movzx edx, word [ebp + ebp + 0x866bf0]
add eax, dword [edx*8 + 0x863374]
mov dword [esp + 0x44], 0
mov dword [esp + 0x28], eax
mov edx, dword [esp + 0x15c]
mov eax, dword [esp + 0x150]
mov ebp, dword [esp + 0x10]
lea eax, [esi + eax*2 - 2]
mov dword [esp + 0x68], eax
add dword [esp + 0x34], ecx
mov dword [esp + 0x5c], 0
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov dword [esp + 0x4c], 0
jmp 0x715a0a
add eax, 2
cmp eax, dword [esp + 0x14]
jae 0x7157a0
cmp word [eax], bp
jne 0x715792
cmp eax, dword [esp + 0x14]
mov dword [esp + 0x68], eax
jae 0x71616b
mov ecx, dword [esp + 8]
mov dword [esp + 0xec], ecx
mov dword [esp + 0xf4], ecx
mov dword [esp + 0x6c], 0
mov dword [esp + 0x108], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x94], 0
mov edx, dword [esp + 0xe0]
sub esp, 0xc
mov ebp, ecx
push 0
push 0
lea eax, [esp + 0x80]
push eax
push 2
push ebp
call fcn.00716260
add esp, 0x20
mov ebp, eax
cmp dword [esp + 0xd4], 0
setne al
mov edx, dword [esp + 0x5c]
test edx, edx
sete cl
and cl, al
cmovne edx, dword [esp + 0xf4]
mov dword [esp + 0x5c], edx
test cl, cl
mov eax, dword [esp + 0x4c]
cmovne eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
lea eax, [ebp + 0x3e4]
cmp eax, 4
ja case.default.0x715851
mov edx, dword [esp + 0x15c]
jmp dword [eax*4 + 0x71624c]
mov ebp, dword [esp + 0xec]
cmp ebp, dword [esp + 8]
jbe case.0x715851.995
jmp 0x7158cc
test ebp, ebp
mov edx, dword [esp + 0x15c]
jne 0x715f69
mov eax, dword [esp + 8]
lea ebp, [eax + 2]
cmp dword [esp + 0x30], 0
mov dword [esp + 0x98], 0
je 0x7158cc
cmp ebp, dword [esp + 0x14]
jae 0x7158cc
mov ecx, eax
movzx eax, word [ecx + 2]
and eax, 0xfc00
lea ecx, [ecx + 4]
cmp eax, 0xdc00
cmove ebp, ecx
test dword [esp + 0x10], 0x40000
jne 0x7158da
jmp 0x71598e
mov eax, dword [esp + 0x94]
mov dword [esp + 0x98], eax
mov ebp, dword [esp + 8]
test dword [esp + 0x10], 0x40000
je 0x71598e
mov ecx, dword [esp + 0x84]
mov eax, dword [esp + 0xe8]
test ecx, ecx
je 0x71592f
cmp dword [esp + 8], eax
jae 0x71598e
sub esp, 0xc
push dword [esp + 0x48]
lea edx, [esp + 0x98]
push edx
push eax
push ecx
push dword [esp + 0x24]
call fcn.00763fe0
add esp, 0x20
or eax, dword [esp + 0x48]
jne 0x71616b
cmp ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x15c]
jbe 0x7159a3
jmp case.0x715851.996
mov ecx, dword [esp + 0x88]
lea edx, [ecx + ecx]
sub eax, edx
mov edx, dword [esp + 0x15c]
cmp dword [esp + 8], eax
ja 0x71598e
mov eax, dword [esp + 8]
movzx eax, word [eax]
cmp ax, word [esp + 0xa0]
jne 0x71598e
cmp ecx, 1
je case.0x715851.996
cmp dword [esp + 0x48], 0
jne case.0x715851.996
cmp ebp, dword [esp + 0x14]
ja case.0x715851.996
movzx eax, word [esp + 0xa2]
mov ecx, dword [esp + 8]
cmp word [ecx + 2], ax
jne 0x7159a3
jmp case.0x715851.996
cmp dword [esp + 0x48], 0
jne case.0x715851.996
cmp ebp, dword [esp + 0x14]
ja case.0x715851.996
cmp ebp, dword [esp + 0x58]
jbe 0x7159f7
cmp ebp, dword [esp + 0x14]
jae 0x7159f7
movzx eax, word [ebp - 2]
cmp eax, 0xd
jne 0x7159f7
movzx eax, word [ebp]
cmp eax, 0xa
jne 0x7159f7
test byte [edi + 0xd], 8
jne 0x7159f7
mov eax, dword [esp + 0x84]
dec eax
lea ecx, [ebp + 2]
cmp dword [esp + 0x88], 2
cmove ebp, ecx
cmp eax, 2
cmovb ebp, ecx
jmp 0x7159f7
mov eax, ecx
jmp 0x715ea6
mov eax, dword [esp + 8]
mov edx, ebp
jmp 0x715ea6
mov dword [esp + 0x11c], 0
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x10]
test ebp, 0x40000
mov ecx, dword [esp + 0x14]
je 0x715ba7
cmp dword [esp + 0x30], 0
mov eax, dword [esp + 0xe8]
je 0x715ae5
mov ecx, dword [esp + 8]
cmp ecx, eax
jae 0x715ba7
mov ebp, dword [esp + 8]
mov ecx, dword [esp + 0x84]
test ecx, ecx
je 0x715a71
sub esp, 0xc
push dword [esp + 0x48]
lea edx, [esp + 0x98]
push edx
push eax
push ecx
push ebp
call fcn.00763fe0
add esp, 0x20
test eax, eax
mov edx, dword [esp + 0x15c]
je 0x715ab1
jmp 0x715b98
mov ecx, dword [esp + 0x88]
lea edx, [ecx + ecx]
sub eax, edx
cmp ebp, eax
mov edx, dword [esp + 0x15c]
ja 0x715ab1
movzx eax, word [ebp]
cmp ax, word [esp + 0xa0]
jne 0x715ab1
cmp ecx, 1
je 0x715b98
movzx eax, word [ebp + 2]
cmp ax, word [esp + 0xa2]
je 0x715b98
lea ecx, [ebp + 2]
cmp ecx, dword [esp + 0x14]
jae 0x715acf
movzx eax, word [ebp + 2]
and eax, 0xfc00
cmp eax, 0xdc00
jne 0x715acf
add ebp, 4
mov ecx, ebp
mov eax, dword [esp + 0xe8]
cmp ecx, eax
mov ebp, ecx
jb 0x715a3c
jmp 0x715ba7
mov ecx, dword [esp + 8]
cmp ecx, eax
jae 0x715ba7
mov ecx, dword [esp + 8]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x84]
test ecx, ecx
je 0x715b39
sub esp, 0xc
push dword [esp + 0x48]
lea edx, [esp + 0x98]
push edx
push eax
push ecx
push dword [esp + 0x28]
call fcn.00763fe0
add esp, 0x20
test eax, eax
jne 0x715b9c
mov eax, dword [esp + 0xe8]
mov edx, dword [esp + 0x15c]
mov ecx, dword [esp + 0xc]
jmp 0x715b8b
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x54], ecx
lea edx, [ecx + ecx]
mov ebp, eax
sub ebp, edx
mov ecx, dword [esp + 0xc]
cmp ecx, ebp
jbe 0x715b5c
mov edx, dword [esp + 0x15c]
jmp 0x715b8b
movzx edx, word [ecx]
cmp dx, word [esp + 0xa0]
jne 0x715b2c
cmp dword [esp + 0x54], 1
mov edx, dword [esp + 0x15c]
je 0x715ba3
mov ebp, dword [esp + 0xc]
movzx ecx, word [ebp + 2]
cmp cx, word [esp + 0xa2]
mov ecx, ebp
je 0x715ba7
add ecx, 2
cmp ecx, eax
jb 0x715af5
jmp 0x715ba7
mov ecx, ebp
jmp 0x715ba7
mov edx, dword [esp + 0x15c]
mov ecx, dword [esp + 0xc]
mov eax, dword [edi + 8]
or eax, dword [esp + 0x154]
test eax, 0x4000000
jne 0x715ea2
cmp dword [esp + 0x20], 0
mov edx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x24]
mov eax, dword [esp + 8]
mov dword [esp + 0xc], ecx
je 0x715c04
mov dword [esp + 0x1c], edx
cmp dx, bp
jne 0x715c75
cmp eax, ecx
mov edx, dword [esp + 0x15c]
jae 0x715ea6
cmp word [eax], bp
je 0x715ea6
add eax, 2
cmp eax, ecx
jb 0x715bef
jmp 0x715ea6
mov eax, dword [esp + 0x38]
test ah, 1
jne 0x715cb1
cmp dword [esp + 0x18], 0
mov edx, dword [esp + 0x15c]
je 0x715ea2
mov eax, dword [esp + 8]
cmp eax, ecx
jae 0x715ea6
mov ebp, eax
movzx ecx, word [eax]
cmp ecx, 0xff
jb 0x715c41
mov ecx, 0xff
mov eax, ecx
shr eax, 3
mov edx, dword [esp + 0x18]
movzx edx, byte [edx + eax]
and cl, 7
mov eax, 1
shl eax, cl
and eax, edx
jne 0x715c5f
add ebp, 2
mov ecx, dword [esp + 0xc]
test eax, eax
mov edx, dword [esp + 0x15c]
mov eax, ebp
je 0x715c27
jmp 0x715ea6
cmp eax, ecx
mov edx, dword [esp + 0x15c]
jae 0x715ea6
mov ecx, edx
mov edx, eax
movzx eax, word [eax]
cmp ax, word [esp + 0x1c]
je 0x715da9
cmp ax, bp
je 0x715da9
mov eax, edx
add eax, 2
cmp eax, dword [esp + 0xc]
mov edx, ecx
jb 0x715c84
jmp 0x715ea6
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0x150]
lea ecx, [eax + ecx*2]
cmp dword [esp + 8], ecx
mov edx, dword [esp + 0x15c]
jbe 0x715ea2
cmp dword [esp + 0x30], 0
je 0x715db2
mov ecx, dword [esp + 0xc]
cmp dword [esp + 8], ecx
jb 0x715cf4
jmp 0x715e61
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0x84]
test ecx, ecx
je 0x715d2a
mov ebp, dword [esp + 8]
cmp ebp, eax
jbe 0x715d72
sub esp, 0xc
push dword [esp + 0x48]
lea edx, [esp + 0x98]
push edx
push eax
push ecx
push ebp
call fcn.00764090
add esp, 0x20
test eax, eax
je 0x715d72
jmp 0x715e5a
mov ecx, dword [esp + 0x88]
lea eax, [eax + ecx*2]
mov ebp, dword [esp + 8]
cmp ebp, eax
jb 0x715d72
lea eax, [ecx + ecx]
mov edx, ebp
sub edx, eax
movzx eax, word [edx]
cmp ax, word [esp + 0xa0]
jne 0x715d72
cmp ecx, 1
je 0x715e5a
neg ecx
mov ebp, dword [esp + 8]
movzx eax, word [ebp + ecx*2 + 2]
cmp ax, word [esp + 0xa2]
je 0x715e5a
lea eax, [ebp + 2]
mov ecx, dword [esp + 0xc]
cmp eax, ecx
jae 0x715d98
movzx ecx, word [ebp + 2]
and ecx, 0xfc00
cmp ecx, 0xdc00
jne 0x715d94
add ebp, 4
mov eax, ebp
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], eax
cmp eax, ecx
jb 0x715ced
jmp 0x715e5a
mov eax, edx
mov edx, ecx
jmp 0x715ea6
mov ecx, dword [esp + 0xc]
cmp dword [esp + 8], ecx
jae 0x715e61
mov ecx, dword [esp + 8]
lea ebp, [ecx + 2]
jmp 0x715dd3
mov eax, dword [esp + 0xe4]
add ebp, 2
lea ecx, [ebp - 2]
mov edx, dword [esp + 0x84]
test edx, edx
je 0x715e0d
cmp ecx, eax
jbe 0x715e42
sub esp, 0xc
push dword [esp + 0x48]
mov dword [esp + 0x64], ebp
lea ebp, [esp + 0x98]
push ebp
mov ebp, dword [esp + 0x68]
push eax
push edx
push ecx
call fcn.00764090
add esp, 0x20
test eax, eax
je 0x715e42
jmp 0x715e53
mov edx, dword [esp + 0x88]
lea eax, [eax + edx*2]
cmp ecx, eax
jb 0x715e42
lea ecx, [edx + edx]
mov eax, ebp
sub eax, ecx
movzx ecx, word [eax - 2]
cmp cx, word [esp + 0xa0]
jne 0x715e42
cmp edx, 1
je 0x715e5a
movzx eax, word [eax]
cmp ax, word [esp + 0xa2]
je 0x715e5a
add dword [esp + 8], 2
cmp ebp, dword [esp + 0xc]
jb 0x715dc9
jmp 0x715e5a
add ebp, 0xfffffffe
mov dword [esp + 8], ebp
mov edx, dword [esp + 0x15c]
mov ecx, dword [esp + 8]
movzx eax, word [ecx - 2]
cmp eax, 0xd
jne 0x7159e5
cmp ecx, dword [esp + 0xc]
jae 0x715ea2
mov ebp, edx
mov eax, dword [esp + 0x84]
dec eax
cmp eax, 1
ja 0x7159ec
mov edx, dword [esp + 8]
movzx eax, word [edx]
lea ecx, [edx + 2]
cmp eax, 0xa
mov eax, edx
cmove eax, ecx
jmp 0x7159f0
mov eax, dword [esp + 8]
mov dword [esp + 8], eax
mov eax, dword [edi + 8]
or eax, dword [esp + 0x154]
and eax, 0x4000000
or eax, dword [esp + 0xf8]
jne 0x7157ae
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x715eeb
test byte [eax + 4], 2
je 0x715eeb
mov eax, dword [esp + 0x14]
sub eax, dword [esp + 8]
sar eax, 1
mov ecx, dword [esp + 0x2c]
cmp eax, dword [ecx + 0x28]
jb case.0x715851.996
cmp byte [esp + 0x44], 0
jne 0x7157ae
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 8]
sub eax, ecx
cmp eax, 0x7cf
jg 0x7157ae
mov eax, dword [esp + 0x20]
lea eax, [ecx + eax*2]
cmp eax, dword [esp + 0x68]
jbe 0x7157ae
mov ebp, dword [esp + 0x60]
cmp bp, word [esp + 0x28]
je 0x715795
cmp eax, dword [esp + 0x14]
jae 0x7157a0
movzx ecx, word [eax]
cmp cx, word [esp + 0x28]
mov edx, eax
je 0x715f44
lea edx, [eax + 2]
cmp cx, bp
cmovne eax, edx
cmp eax, dword [esp + 0x14]
jae 0x7157a0
cmp cx, bp
je 0x7157a0
cmp cx, word [esp + 0x28]
jne 0x715f35
jmp 0x7157a0
cmp ebp, 1
je 0x715f7a
cmp ebp, 0xfffffc19
jne 0x71614d
cmp dword [esp + 0x40], 0
je 0x715fd9
cmp dword [esp + 0x64], 6
jl 0x715fb2
mov eax, dword [esp + 0x158]
lea eax, [eax + 8]
mov ecx, dword [esp + 0x78]
add ecx, 8
mov edx, dword [esp + 0x34]
lea edx, [edx*4 - 8]
sub esp, 4
push edx
push ecx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0x10
mov eax, dword [esp + 0x34]
cmp dword [esp + 0xfc], eax
jle 0x715fc7
or byte [esp + 0x102], 1
sub esp, 0xc
mov eax, dword [esp + 0x5c]
push dword [eax]
call dword [0x860e78]
add esp, 0x10
mov eax, dword [esp + 0xfc]
mov ecx, eax
shr ecx, 0x1f
add ecx, eax
sar ecx, 1
xor esi, esi
cmp eax, dword [esp + 0x34]
cmovl esi, ecx
test byte [esp + 0x102], 1
cmove esi, ecx
cmp dword [esp + 0x158], 0
je 0x71605d
movzx edx, word [edi + 0x1e]
cmp ecx, edx
jg 0x71605d
lea ecx, [edx + edx + 2]
mov edx, dword [esp + 0x15c]
cmp ecx, edx
cmovg ecx, edx
cmp eax, ecx
jge 0x71605d
mov edx, dword [esp + 0x158]
mov ebx, edx
lea ecx, [ebx + ecx*4]
lea edx, [ebx + eax*4]
lea edi, [ebx + eax*4 + 4]
shl eax, 2
cmp ecx, edi
cmova edi, ecx
sub edi, eax
mov eax, ebx
not eax
lea eax, [edi + eax + 4]
and eax, 0xfffffffc
sub esp, 4
push eax
push 0xff
push edx
call sub.msvcrt.dll_memset
add esp, 0x10
xor ebp, ebp
cmp dword [esp + 0x15c], 2
jl 0x716094
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0xec]
sub ecx, eax
sar ecx, 1
mov edx, dword [esp + 0x158]
mov dword [edx], ecx
mov ecx, dword [esp + 0xf0]
sub ecx, eax
sar ecx, 1
mov dword [edx + 4], ecx
mov ebp, esi
cmp dword [esp + 0x144], 0
je 0x714f75
mov eax, dword [esp + 0x144]
test byte [eax], 0x20
je 0x714f75
mov eax, dword [esp + 0x11c]
mov ecx, dword [esp + 0x144]
jmp 0x71622a
movzx ecx, bp
cmp ecx, 0xff
mov dword [esp + 0x24], ebp
ja 0x7160e3
mov edx, dword [esp + 0xac]
movzx edx, byte [edx + ecx]
mov dword [esp + 0x24], edx
mov dword [esp + 0x18], 0
cmp dword [esp + 0x30], 0
mov dword [esp + 0x20], 1
je 0x716141
cmp ecx, 0x80
jb 0x716141
mov edx, ecx
and edx, 0xff80
shr edx, 7
movzx edx, byte [edx + 0x8649f0]
shl edx, 7
mov ebp, ecx
and ebp, 0x7f
or ebp, edx
movzx edx, word [ebp + ebp + 0x866bf0]
add ecx, dword [edx*8 + 0x863374]
mov dword [esp + 0x20], 1
mov dword [esp + 0x18], 0
mov dword [esp + 0x24], ecx
mov edx, dword [esp + 0x15c]
jmp 0x7155df
cmp dword [esp + 0x40], 0
mov ecx, dword [esp + 0x144]
mov eax, dword [esp + 0x158]
mov edx, dword [esp + 0x15c]
jne 0x716189
jmp 0x7161b0
mov edx, dword [esp + 0x15c]
xor ebp, ebp
cmp dword [esp + 0x40], 0
mov ecx, dword [esp + 0x144]
mov eax, dword [esp + 0x158]
je 0x7161bd
sub esp, 0xc
mov eax, dword [esp + 0x5c]
push dword [eax]
call dword [0x860e78]
mov edx, dword [esp + 0x16c]
mov eax, dword [esp + 0x168]
mov ecx, dword [esp + 0x154]
add esp, 0x10
test ebp, ebp
je 0x7161bd
cmp ebp, 0xfffffff4
jne 0x714f75
cmp dword [esp + 0x4c], 0
je 0x71620d
mov dword [esp + 0x11c], 0
mov ebp, 0xfffffff4
cmp edx, 2
jl 0x716212
mov edi, dword [esp + 0x5c]
sub edi, esi
sar edi, 1
mov dword [eax], edi
add ebx, ebx
sar ebx, 1
mov dword [eax + 4], ebx
mov ebp, 0xfffffff4
cmp edx, 2
je 0x716212
mov edx, dword [esp + 0x4c]
sub edx, esi
sar edx, 1
mov dword [eax + 8], edx
mov ebp, 0xfffffff4
test ecx, ecx
jne 0x71621a
jmp 0x714f75
mov ebp, 0xffffffff
test ecx, ecx
je 0x714f75
test byte [ecx], 0x20
je 0x714f75
mov eax, dword [esp + 0x120]
mov ecx, dword [ecx + 0x18]
mov dword [ecx], eax
jmp 0x714f75