Function at 0x411f50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x13c
mov edx, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 8]
lea eax, [edx + edx]
mov dword [esp + 0x50], 0
mov dword [esp + 0x128], eax
add eax, ecx
push esi
mov esi, eax
mov dword [esp + 0x60], eax
xor eax, eax
mov dword [esp + 0x44], 0
mov dword [esp + 0x50], eax
mov dword [esp + 0x58], 0
mov dword [esp + 0x24], 0
lea eax, [esi - 2]
mov dword [esp + 0x20], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x48], eax
push edi
mov edi, dword [ebp + 0x14]
test ebx, ebx
jne 0x411ffa
cmp dword [ebp + 0xc], 0
jne 0x411ffa
test ecx, ecx
jne 0x411ffa
cmp edi, 0xfffffc19
jne 0x411ffa
cmp edx, edi
jne 0x411ffa
push ecx
push ecx
push ecx
push ecx
push ecx
xor edx, edx
call fcn.00409eb0
add esp, 0x14
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test dword [ebp + 0x1c], 0xe20f5a6f
je 0x41200f
mov eax, 0xfffffffd
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test ebx, ebx
je 0x412ff9
test ecx, ecx
je 0x412ff9
cmp dword [ebp + 0x20], 0
mov eax, dword [ebp + 0x24]
jne 0x412030
test eax, eax
jg 0x412ff9
test eax, eax
jns 0x412040
mov eax, 0xfffffff1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test edx, edx
js 0x412fed
cmp edx, edi
jg 0x412fed
mov ecx, dword [ebx]
cmp ecx, 0x50435245
je 0x412074
cmp ecx, 0x45524350
mov eax, 0xfffffffc
mov edx, 0xffffffe3
cmove eax, edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx eax, word [ebx + 0xc]
test al, 2
jne 0x412088
mov eax, 0xffffffe4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp + 0x1c]
mov dword [esp + 0xb4], 1
test ecx, 0x8000000
je 0x4120a5
mov eax, 2
jmp 0x4120ad
mov eax, ecx
shr eax, 0xf
and eax, 1
mov dword [esp + 0xf4], eax
mov dword [esp + 0x134], 0xfc00
mov dword [esp + 0x138], 0xdc00
test ecx, 0x2000
jne 0x4120fd
test edx, edx
jle 0x4120fd
cmp edx, edi
jge 0x4120fd
mov eax, esi
mov ecx, 0xfc00
mov ax, word [eax]
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x4120fd
mov eax, 0xfffffff5
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [ebp + 0xc], 0
movzx eax, word [ebx + 0x18]
mov dword [esp + 0x44], 0
mov dword [esp + 0x6c], 0x989680
mov dword [esp + 0x70], 0x1770
lea eax, [ebx + eax*2]
mov dword [esp + 0x114], 0
mov dword [esp + 0x90], eax
movzx eax, word [ebx + 0x1c]
movzx ebx, word [ebx + 0x1a]
mov dword [esp + 0x88], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x8c], ebx
mov eax, dword [eax + 0x20]
mov dword [esp + 0x38], eax
je 0x4121a6
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
test cl, 1
je 0x412168
mov edx, dword [eax + 4]
mov dword [esp + 0x44], edx
mov edx, dword [ebp + 0x18]
test cl, 2
je 0x412177
mov eax, dword [eax + 8]
mov dword [esp + 0x6c], eax
mov eax, dword [ebp + 0xc]
test cl, 0x10
je 0x412183
mov eax, dword [eax + 0x14]
mov dword [esp + 0x70], eax
test cl, 4
je 0x412195
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x114], eax
test cl, 8
je 0x4121a2
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x10]
jmp 0x4121a6
mov eax, dword [esp + 0x38]
test eax, eax
mov edi, dword [ebp + 8]
mov ecx, 0x50a478
mov dword [esp + 0x100], edx
cmovne ecx, eax
mov dword [esp + 0xd8], 0
mov eax, dword [ebp + 8]
mov dword [esp + 0xcc], 0
mov dword [esp + 0x11c], 0
mov dword [esp + 0x118], 0
mov eax, dword [eax + 8]
mov dword [esp + 0x50], eax
or eax, dword [ebp + 0x1c]
mov dword [esp + 0x60], eax
movzx eax, word [edi + 0xc]
mov dword [esp + 0x3c], eax
movzx eax, word [edi + 0x1c]
imul ebx, eax
movzx eax, word [edi + 0x18]
mov edx, dword [esp + 0x50]
mov dword [esp + 0x110], 0
mov dword [esp + 0x9c], ecx
add ebx, eax
mov eax, edi
mov edi, dword [ebp + 0x14]
lea eax, [eax + ebx*2]
mov ebx, dword [ebp + 0x10]
mov dword [esp + 0xdc], eax
mov eax, ebx
mov dword [esp + 0xe0], eax
lea eax, [ebx + edi*2]
mov ebx, eax
mov dword [esp + 0x14], eax
mov eax, edx
mov dword [esp + 0xe4], ebx
shr eax, 5
and eax, 1
mov ebx, dword [ebp + 0x1c]
mov dword [esp + 0xc0], eax
mov eax, edx
shr eax, 0x1d
and eax, 1
mov dword [esp + 0xbc], eax
mov eax, edx
shr eax, 0x19
and eax, 1
mov dword [esp + 0xb8], eax
mov eax, ebx
shr eax, 7
and eax, 1
mov dword [esp + 0xac], eax
mov eax, ebx
shr eax, 8
and eax, 1
mov dword [esp + 0xb0], eax
mov eax, ebx
shr eax, 0xa
and eax, 1
mov dword [esp + 0xc4], eax
mov eax, ebx
shr eax, 0x1c
and eax, 1
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x3c]
shr eax, 0xc
and eax, 1
mov dword [esp + 0xd4], eax
lea eax, [ecx + 0x100]
mov dword [esp + 0xa0], eax
lea eax, [ecx + 0x340]
mov dword [esp + 0xa4], eax
mov eax, ebx
and eax, 0x1800000
je 0x41230c
cmp eax, 0x800000
je 0x412325
cmp eax, 0x1000000
jne 0x4123eb
mov dword [esp + 0xd0], 0
jmp 0x412330
test edx, 0x1800000
je 0x412325
mov eax, edx
shr eax, 0x17
and eax, 1
mov dword [esp + 0xd0], eax
jmp 0x412330
mov dword [esp + 0xd0], 1
test ebx, 0x700000
mov eax, ebx
cmove eax, edx
and eax, 0x700000
cmp eax, 0x300000
ja 0x4123dd
je 0x4123a7
test eax, eax
je 0x4123f7
cmp eax, 0x100000
je 0x41236e
cmp eax, 0x200000
jne 0x4123eb
mov ecx, 0xa
jmp 0x412373
mov ecx, 0xd
mov dx, word [esp + 0x96]
mov eax, 1
mov dword [esp + 0x18], ecx
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], eax
mov word [esp + 0x94], cx
mov dword [esp + 0x1c], edx
jmp 0x412446
mov eax, 2
mov dword [esp + 0x80], 0
mov ecx, 0xd
mov dword [esp + 0x84], eax
mov edx, 0xa
mov dword [esp + 0x18], ecx
mov dword [esp + 0x94], 0xa000d
mov dword [esp + 0x1c], edx
jmp 0x412446
cmp eax, 0x400000
je 0x41241c
cmp eax, 0x500000
je 0x4123f7
mov eax, 0xffffffe9
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dx, word [esp + 0x96]
mov cx, word [esp + 0x94]
mov dword [esp + 0x80], 2
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], ecx
jmp 0x41243f
mov ax, word [esp + 0x96]
mov dword [esp + 0x1c], eax
mov ax, word [esp + 0x94]
mov dword [esp + 0x80], 1
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x84]
cmp dword [esp + 0xf4], 0
mov dword [esp + 0x10], eax
je 0x41246e
mov ecx, dword [ebp + 8]
movzx eax, word [ecx + 0xc]
test eax, 0x200
je 0x41246e
mov eax, 0xfffffff3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xaaaaaaab
mul dword [ebp + 0x24]
mov eax, 0x55555556
shr edx, 1
lea ebx, [edx + edx*2]
lea ecx, [ebx + ebx]
mov dword [esp + 0x34], ebx
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 8]
movzx eax, word [eax + 0x12]
test ax, ax
je 0x41250a
mov ecx, eax
mov eax, 0x55555556
imul ebx
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jl 0x41250a
inc ecx
lea eax, [ecx + ecx*2]
mov dword [esp + 0x34], eax
shl eax, 2
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov edi, eax
add esp, 4
mov dword [esp + 0x74], edi
test edi, edi
jne 0x4124dd
lea eax, [edi - 6]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ax, word [esp + 0x96]
mov dword [esp + 0x1c], eax
mov ax, word [esp + 0x94]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 0x58], 1
mov dword [esp + 0x10], eax
jmp 0x412511
mov edi, dword [ebp + 0x20]
mov dword [esp + 0x74], edi
mov eax, dword [esp + 0x34]
mov ebx, edi
mov dword [esp + 0x78], eax
mov dword [esp + 0xa8], 0
mov dword [esp + 0xfc], 0xffffffff
lea ecx, [eax + eax]
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x7c], eax
test ebx, ebx
je 0x4125b7
mov eax, dword [esp + 0x34]
lea ecx, [ebx + eax*4]
mov eax, dword [ebp + 8]
mov edx, ecx
movzx eax, word [eax + 0x10]
shl eax, 2
sub edx, eax
lea eax, [ebx + 8]
cmp edx, eax
cmovb edx, eax
sub ecx, 4
cmp ecx, edx
jb 0x412581
nop
mov dword [ecx], 0xffffffff
sub ecx, 4
cmp ecx, edx
jae 0x412570
mov edi, dword [esp + 0x74]
mov dword [edi + 4], 0xffffffff
mov eax, dword [esp + 0x74]
mov dword [eax], 0xffffffff
mov ax, word [esp + 0x96]
mov edi, dword [esp + 0x84]
mov dword [esp + 0x1c], eax
mov ax, word [esp + 0x94]
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], edi
jmp 0x4125bb
mov edi, dword [esp + 0x10]
test byte [esp + 0x60], 0x10
jne 0x412731
mov edx, dword [ebp + 8]
movzx eax, word [edx + 0xc]
test al, 0x10
je 0x4126f9
movzx ebx, word [edx + 0x14]
movzx edx, bx
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0xa0]
mov dword [esp + 0x48], 1
mov dword [esp + 0x24], ebx
movzx ecx, bx
test al, 0x20
je 0x412728
mov eax, 0xff
cmp bx, ax
ja 0x4126c2
movzx ebx, byte [edx + ecx]
mov dword [esp + 0x24], ebx
mov ebx, dword [esp + 0x28]
cmp bx, 0x7f
ja 0x4126c6
mov eax, dword [esp + 0x24]
mov ecx, dword [ebp + 8]
movzx eax, ax
mov dword [esp + 0x12c], eax
movzx eax, bx
mov dword [esp + 0x128], eax
movzx eax, word [ecx + 0xc]
test al, 0x40
je 0x412741
movzx ebx, word [ecx + 0x16]
movzx edi, bx
mov dword [esp + 0x2c], edi
mov edi, dword [esp + 0x10]
mov dword [esp + 0x5c], 1
mov dword [esp + 0x30], ebx
movzx ecx, bx
test al, al
jns 0x412743
mov eax, 0xff
cmp bx, ax
ja 0x41268d
cmp word [esp + 0x2c], 0x7f
movzx ebx, byte [edx + ecx]
mov dword [esp + 0x30], ebx
jbe 0x412743
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x5172a0]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x50a8c0]
mov ax, word [eax*8 + 0x5161c4]
add ax, word [esp + 0x2c]
movzx ebx, ax
mov dword [esp + 0x30], ebx
jmp 0x412743
mov ebx, dword [esp + 0x28]
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x5172a0]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x50a8c0]
mov ax, word [eax*8 + 0x5161c4]
add ax, bx
movzx eax, ax
mov dword [esp + 0x24], eax
jmp 0x412626
test dword [esp + 0x3c], 0x100
jne 0x412731
mov eax, dword [esp + 0x44]
test eax, eax
je 0x412731
mov edx, dword [esp + 0xa0]
xor ebx, ebx
test byte [eax + 4], 1
je 0x412721
add eax, 8
mov dword [esp + 0x40], eax
xor eax, eax
jmp 0x412626
mov ebx, dword [esp + 0x28]
jmp 0x412622
mov edx, dword [esp + 0xa0]
xor ebx, ebx
xor eax, eax
jmp 0x412626
xor ebx, ebx
mov ecx, dword [esp + 0x2c]
movzx eax, cx
mov dword [esp + 0x144], eax
movzx eax, bx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x140], eax
mov eax, ecx
movzx eax, ax
mov dword [esp + 0x13c], eax
nop dword [eax + eax]
test dword [esp + 0x50], 0x40000
je 0x412810
mov edx, dword [esp + 0xe4]
mov ebx, esi
cmp esi, edx
jae 0x412810
nop
cmp dword [esp + 0x80], 0
je 0x4128a5
cmp ebx, edx
jae case.default.0x412887
movzx ecx, word [ebx]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4127d1
movzx eax, word [ebx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp dword [esp + 0x80], 2
jne 0x412875
cmp ecx, 0xa
je case.0x412887.10
cmp ecx, 0xd
jne case.default.0x412887
lea eax, [edx - 2]
cmp ebx, eax
jae case.0x412887.10
cmp word [ebx + 2], 0xa
mov eax, 2
je 0x412805
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x84], eax
mov eax, dword [ebp + 8]
mov edi, dword [eax + 8]
or edi, dword [ebp + 0x1c]
and edi, 0x4000000
jne 0x412b20
cmp dword [esp + 0x48], edi
je 0x412917
cmp esi, ebx
jae 0x412b28
mov eax, dword [esp + 0x128]
cmp ax, word [esp + 0x12c]
je 0x4128fe
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
movzx eax, word [esi]
cmp ax, cx
je 0x412b28
cmp ax, dx
je 0x412b28
add esi, 2
cmp esi, ebx
jb 0x412854
jmp 0x412b28
cmp ecx, 0x85
ja 0x41288e
je case.0x412887.10
add ecx, 0xfffffff6
cmp ecx, 3
ja case.default.0x412887
jmp dword [ecx*4 + 0x413008]
sub ecx, 0x2028
je case.0x412887.10
sub ecx, 1
je case.0x412887.10
jmp case.default.0x412887
lea eax, [edi + edi]
mov ecx, edx
sub ecx, eax
cmp ebx, ecx
ja case.default.0x412887
mov eax, dword [esp + 0x18]
cmp word [ebx], ax
jne case.default.0x412887
cmp edi, 1
je 0x412810
mov eax, dword [esp + 0x1c]
cmp word [ebx + 2], ax
je 0x412810
add ebx, 2
cmp ebx, dword [esp + 0x14]
jae 0x4128f1
mov ax, word [ebx]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x4128f1
add ebx, 2
cmp ebx, edx
jb 0x412790
jmp 0x412810
mov eax, dword [esp + 0x28]
cmp word [esi], ax
je 0x412b28
add esi, 2
cmp esi, ebx
jb 0x412902
jmp 0x412b28
test dword [esp + 0x3c], 0x100
je 0x412ad8
mov eax, dword [esp + 0x130]
mov ecx, dword [esp + 0xe0]
add eax, ecx
cmp esi, eax
jbe 0x412b28
cmp esi, ebx
jae 0x412ab1
lea edx, [esi - 2]
mov dword [esp + 0x20], edx
lea edi, [esi - 4]
nop
cmp dword [esp + 0x80], 0
je 0x412a43
cmp esi, ecx
jbe 0x4129ce
mov eax, dword [esp + 0x20]
movzx eax, word [eax]
mov ecx, eax
and eax, 0xfc00
cmp eax, 0xdc00
jne 0x41297c
movzx ecx, word [edi]
mov edx, edi
movzx ecx, cx
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4129a7
movzx eax, word [edx + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp dword [esp + 0x80], 2
jne 0x412a16
cmp ecx, 0xa
je case.0x412a2c.10
cmp ecx, 0xd
je case.0x412a2c.11
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0xe0]
add esi, 2
add edx, 2
add edi, 2
mov dword [esp + 0x20], edx
cmp esi, ebx
jae 0x412ab1
mov ax, word [esi]
and ax, word [esp + 0x134]
cmp ax, word [esp + 0x138]
jne 0x412950
add esi, 2
add edx, 2
add edi, 2
mov dword [esp + 0x20], edx
cmp esi, ebx
jb 0x412950
jmp 0x412ab1
cmp ecx, 0x85
ja 0x412a33
je case.0x412a2c.11
add ecx, 0xfffffff6
cmp ecx, 3
ja case.default.0x412a2c
jmp dword [ecx*4 + 0x413018]
sub ecx, 0x2028
je case.0x412a2c.11
sub ecx, 1
jmp 0x4129bd
mov eax, dword [esp + 0x10]
lea ecx, [eax + eax]
mov eax, dword [esp + 0xe0]
add eax, ecx
cmp esi, eax
jb 0x4129c7
mov eax, esi
sub eax, ecx
mov ecx, dword [esp + 0x18]
cmp word [eax], cx
jne 0x4129c7
cmp dword [esp + 0x10], 1
je 0x412ab1
mov ecx, dword [esp + 0x1c]
cmp word [eax + 2], cx
jne 0x4129c7
jmp 0x412ab1
cmp edx, dword [esp + 0xe0]
jbe 0x412a98
cmp word [edx - 2], 0xd
mov eax, 2
je 0x412a9d
mov eax, 1
mov dword [esp + 0x84], eax
jmp 0x412ab1
mov dword [esp + 0x84], 1
cmp word [esi - 2], 0xd
jne 0x412b28
mov eax, dword [esp + 0x80]
cmp eax, 1
je 0x412ac9
cmp eax, 2
jne 0x412b28
cmp esi, ebx
jae 0x412b28
cmp word [esi], 0xa
jne 0x412b28
add esi, 2
jmp 0x412b28
cmp dword [esp + 0x40], 0
je 0x412b28
cmp esi, ebx
jae 0x412b28
nop dword [eax]
nop word [eax + eax]
movzx edx, word [esi]
mov eax, 0xff
cmp edx, 0xff
cmova edx, eax
mov eax, 1
mov ecx, edx
shr edx, 3
and ecx, 7
shl eax, cl
mov ecx, dword [esp + 0x40]
test byte [edx + ecx], al
jne 0x412b28
add esi, 2
cmp esi, ebx
jb 0x412af0
test edi, edi
jne 0x412be0
cmp dword [esp + 0xf4], 0
jne 0x412be0
mov ecx, dword [esp + 0x44]
mov ebx, dword [esp + 0x14]
test ecx, ecx
je 0x412b53
test byte [ecx + 4], 2
je 0x412b53
mov eax, ebx
sub eax, esi
sar eax, 1
cmp eax, dword [ecx + 0x28]
jb 0x412bb3
cmp dword [esp + 0x5c], 0
je 0x412be0
mov eax, ebx
sub eax, esi
and eax, 0xfffffffe
cmp eax, 0x7d0
jge 0x412be0
mov eax, dword [esp + 0x48]
lea ecx, [esi + eax*2]
cmp ecx, dword [esp + 0x4c]
jbe 0x412be0
cmp ecx, ebx
jae 0x412bb3
mov eax, dword [esp + 0x13c]
cmp ax, word [esp + 0x140]
je 0x412bba
nop
movzx eax, word [ecx]
mov edi, ecx
add ecx, 2
mov dword [esp + 0x4c], edi
mov edx, eax
cmp ax, word [esp + 0x144]
je 0x412bdc
cmp dx, word [esp + 0x30]
je 0x412bdc
cmp ecx, ebx
jb 0x412b90
xor edi, edi
jmp 0x412e66
mov edx, dword [esp + 0x2c]
nop
movzx eax, word [ecx]
mov edi, ecx
mov dword [esp + 0x4c], ecx
add ecx, 2
cmp ax, dx
je 0x412bdc
cmp ecx, ebx
jb 0x412bc0
xor edi, edi
jmp 0x412e66
cmp edi, ebx
jae 0x412bb3
mov edx, dword [esp + 0xdc]
lea eax, [esp + 0x68]
push 0
push 0
push eax
push 2
push esi
mov ecx, esi
mov dword [esp + 0xfc], esi
mov dword [esp + 0x104], esi
mov dword [esp + 0x7c], 0
mov dword [esp + 0x118], 0
mov dword [esp + 0x10c], 0
call fcn.00409eb0
add esp, 0x14
mov edi, eax
cmp dword [esp + 0xcc], 0
je 0x412c47
mov eax, dword [esp + 0x54]
test eax, eax
cmove eax, dword [esp + 0xf0]
mov dword [esp + 0x54], eax
cmp edi, 0xfffffc1d
jg 0x412c64
je 0x412ca6
cmp edi, 0xfffffc1a
jne 0x412e56
xor edi, edi
jmp 0x412e62
cmp edi, 0xfffffc20
jg 0x412c9e
je 0x412ca6
cmp edi, 0xfffffc1e
je 0x412c91
cmp edi, 0xfffffc1f
jne 0x412e62
mov edx, esi
mov dword [esp + 0xd8], 1
jmp 0x412cd2
mov edx, dword [esp + 0xe8]
cmp edx, esi
je 0x412ca6
jmp 0x412cd2
test edi, edi
jne 0x412e4d
lea edx, [esi + 2]
mov dword [esp + 0xd8], 0
cmp edx, dword [esp + 0x14]
jae 0x412cd2
mov ax, word [edx]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x412cd2
add edx, 2
mov ax, word [esp + 0x96]
xor edi, edi
test dword [esp + 0x50], 0x40000
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x1c], eax
mov ax, word [esp + 0x94]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 0x10], eax
je 0x412ded
mov ebx, dword [esp + 0xe4]
test ecx, ecx
je 0x412dc0
cmp esi, ebx
jae 0x412ded
movzx ecx, word [esi]
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x412d4e
movzx eax, word [esi + 2]
and ecx, 0x3ff
and eax, 0x3ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
cmp dword [esp + 0x80], 2
jne 0x412d8a
cmp ecx, 0xa
je case.0x412d9c.10
cmp ecx, 0xd
jne case.default.0x412d9c
lea eax, [ebx - 2]
cmp esi, eax
jae 0x412d79
cmp word [esi + 2], 0xa
mov eax, 2
je 0x412d7e
mov eax, 1
mov dword [esp + 0x84], eax
jmp 0x412e62
cmp ecx, 0x85
ja 0x412da3
je case.0x412d9c.10
add ecx, 0xfffffff6
cmp ecx, 3
ja case.default.0x412d9c
jmp dword [ecx*4 + 0x413028]
sub ecx, 0x2028
je case.0x412d9c.10
sub ecx, 1
jne case.default.0x412d9c
mov dword [esp + 0x84], 1
jmp 0x412e62
add eax, eax
sub ebx, eax
cmp esi, ebx
ja case.default.0x412d9c
mov eax, dword [esp + 0x18]
cmp word [esi], ax
jne case.default.0x412d9c
cmp dword [esp + 0x10], 1
je 0x412e62
mov ecx, dword [esp + 0x1c]
cmp word [esi + 2], cx
je 0x412e62
mov ecx, dword [esp + 0x80]
test byte [esp + 0x60], 0x10
mov esi, edx
mov ebx, dword [esp + 0x14]
jne 0x412e66
cmp edx, ebx
ja 0x412e66
cmp edx, dword [esp + 0x64]
jbe 0x412e39
cmp word [edx - 2], 0xd
jne 0x412e39
cmp edx, ebx
jae 0x412e39
cmp word [edx], 0xa
jne 0x412e39
mov edi, dword [ebp + 8]
mov eax, 0x800
test word [edi + 0xc], ax
mov eax, dword [esp + 0x10]
jne 0x412e39
cmp ecx, 1
je 0x412e36
cmp ecx, 2
je 0x412e36
cmp eax, 2
jne 0x412e39
lea esi, [edx + 2]
mov edi, dword [esp + 0x10]
mov dword [esp + 0x118], 0
jmp 0x412770
cmp edi, 1
je 0x412edd
cmp edi, 0xfffffc19
je 0x412edd
mov ebx, dword [esp + 0x14]
cmp dword [esp + 0x58], 0
je 0x412e7a
push dword [esp + 0x74]
call dword [0x526b54]
add esp, 4
test edi, edi
je 0x412e8c
cmp edi, 0xfffffff4
je 0x412e8c
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x54]
test eax, eax
je 0x412eb3
cmp dword [ebp + 0x24], 1
jle 0x412eac
sub eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x20]
sub ebx, dword [ebp + 0x10]
sar eax, 1
sar ebx, 1
mov dword [ecx], eax
mov dword [ecx + 4], ebx
mov eax, 0xfffffff4
jmp 0x412eb6
or eax, 0xffffffff
mov ecx, dword [ebp + 0xc]
test ecx, ecx
je 0x412ffe
test byte [ecx], 0x20
je 0x412ffe
mov edx, dword [ecx + 0x18]
mov ecx, dword [esp + 0x11c]
mov dword [edx], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [esp + 0x58], 0
mov edi, dword [esp + 0x38]
je 0x412f33
mov esi, dword [esp + 0x74]
cmp edi, 4
jl 0x412f0c
lea eax, [edi*4 - 8]
push eax
lea eax, [esi + 8]
push eax
mov eax, dword [ebp + 0x20]
add eax, 8
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0xa8]
mov ecx, 1
cmp dword [esp + 0xf8], edi
push esi
cmovg eax, ecx
mov dword [esp + 0xac], eax
call dword [0x526b54]
add esp, 4
cmp dword [esp + 0xa8], 0
mov ecx, dword [esp + 0xf8]
je 0x412f4c
cmp ecx, edi
jl 0x412f4c
xor esi, esi
jmp 0x412f55
mov eax, ecx
cdq
sub eax, edx
mov esi, eax
sar esi, 1
mov eax, dword [ebp + 8]
movzx edi, word [eax + 0x10]
mov eax, ecx
cdq
sub eax, edx
mov edx, dword [ebp + 0x20]
sar eax, 1
cmp eax, edi
jg 0x412f9d
test edx, edx
je 0x412f9d
lea eax, [edi*2 + 2]
cmp eax, dword [ebp + 0x24]
lea edi, [edx + ecx*4]
cmovg eax, dword [esp + 0x34]
xor ebx, ebx
lea eax, [edx + eax*4]
mov ecx, eax
sub ecx, edi
add ecx, 3
shr ecx, 2
cmp edi, eax
cmova ecx, ebx
test ecx, ecx
je 0x412f9d
or eax, 0xffffffff
rep stosd dword es:[edi], eax
cmp dword [ebp + 0x24], 2
jge 0x412fa7
xor esi, esi
jmp 0x412fcc
mov eax, dword [esp + 0xe8]
sub eax, dword [esp + 0xe0]
sar eax, 1
mov dword [edx], eax
mov eax, dword [esp + 0xec]
sub eax, dword [esp + 0xe0]
sar eax, 1
mov dword [edx + 4], eax
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x412fe4
test byte [eax], 0x20
je 0x412fe4
mov edx, dword [eax + 0x18]
mov ecx, dword [esp + 0x118]
mov dword [edx], ecx
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xffffffe8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xfffffffe
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret