Function at 0x10088850
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3c
mov eax, ecx
xor ecx, ecx
push ebx
push esi
push edi
mov ebx, edx
mov edi, dword [eax]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x2c], edi
mov dword [esp + 0x40], ecx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x30], ecx
cmp dword [eax + 0x110], ecx
jne 0x10088c54
mov eax, dword [ebp + 8]
cmp dword [eax + 0x40], ecx
jne 0x10088c54
cmp byte [ebx + 0x2b], 1
je 0x10088c54
cmp dword [ebp + 0xc], 0xb
jne 0x100888bd
cmp word [ebx + 0x20], cx
jl 0x100888b6
movzx ecx, byte [ebx + 0x2a]
mov dword [ebp + 0xc], ecx
cmp ecx, 0xb
jne 0x100888bd
mov dword [ebp + 0xc], 2
mov esi, dword [eax + 0x20]
cmp dword [esi], 1
jne 0x10088c54
cmp dword [esi + 0x1c], 0
jne 0x10088c54
cmp dword [eax + 0x24], 0
jne 0x10088c54
cmp dword [eax + 0x30], 0
jne 0x10088c54
cmp dword [eax + 0x28], 0
jne 0x10088c54
cmp dword [eax + 0x3c], 0
jne 0x10088c54
cmp dword [eax + 0x34], 0
jne 0x10088c54
test byte [eax + 4], 1
jne 0x10088c54
mov eax, dword [eax + 0x1c]
cmp dword [eax], 1
jne 0x10088c54
mov eax, dword [eax + 8]
cmp byte [eax], 0xb4
jne 0x10088c54
mov edx, dword [esi + 8]
test edx, edx
je 0x1008894f
mov edi, dword [edi + 0x10]
xor ecx, ecx
cmp dword [edi + 0xc], edx
lea eax, [edi + 0xc]
je 0x10088948
nop dword [eax + eax]
lea eax, [eax + 0x10]
inc ecx
cmp dword [eax], edx
jne 0x10088940
add ecx, ecx
mov eax, dword [edi + ecx*8]
jmp 0x10088952
mov eax, dword [esi + 0xc]
mov ecx, dword [esp + 0x18]
xor edx, edx
push eax
push dword [esi + 0x10]
call fcn.1006f660
mov edi, eax
add esp, 8
mov dword [esp + 0x1c], edi
test edi, edi
je 0x10088c54
mov eax, dword [edi + 0x14]
cmp eax, dword [ebx + 0x14]
jne 0x10088986
mov eax, dword [edi + 0x3c]
cmp eax, dword [ebx + 0x3c]
je 0x10088c54
mov esi, dword [edi + 0x1c]
mov ecx, esi
mov edx, dword [ebx + 0x1c]
mov eax, edx
shr ecx, 7
shr eax, 7
not ecx
not eax
xor ecx, eax
test cl, 1
jne 0x10088c54
cmp byte [edi + 0x2b], 0
jne 0x10088c54
movzx ecx, word [ebx + 0x22]
cmp cx, word [edi + 0x22]
jne 0x10088c54
mov ax, word [ebx + 0x20]
cmp ax, word [edi + 0x20]
jne 0x10088c54
test edx, 0x10000
je 0x100889df
test esi, 0x10000
je 0x10088c54
xor eax, eax
mov dword [esp + 0x28], 0
cmp ax, cx
jge 0x10088c10
xor ecx, ecx
mov edx, 0x200
mov dword [esp + 0x38], ecx
jmp 0x10088a04
mov edi, dword [esp + 0x1c]
mov esi, dword [ebx + 4]
mov edi, dword [edi + 4]
add esi, ecx
add edi, ecx
mov cx, word [esi + 0xe]
mov ax, word [edi + 0xe]
and cx, 0x60
and ax, 0x60
cmp cx, ax
jne 0x10088c54
test cx, cx
je 0x10088aa8
movzx eax, word [edi + 0xc]
test ax, ax
jne 0x10088a39
xor edx, edx
jmp 0x10088a5d
mov ecx, dword [esp + 0x1c]
cmp byte [ecx + 0x2b], 0
je 0x10088a47
xor edx, edx
jmp 0x10088a5d
mov edx, dword [ecx + 0x34]
test edx, edx
je 0x10088a5d
cmp dword [edx], eax
jge 0x10088a56
xor edx, edx
jmp 0x10088a5d
lea eax, [eax + eax*4]
mov edx, dword [edx + eax*4 - 0xc]
movzx eax, word [esi + 0xc]
test ax, ax
jne 0x10088a6a
xor eax, eax
jmp 0x10088a8e
cmp byte [ebx + 0x2b], 0
je 0x10088a74
xor eax, eax
jmp 0x10088a8e
mov ecx, dword [ebx + 0x34]
test ecx, ecx
jne 0x10088a7f
xor eax, eax
jmp 0x10088a8e
cmp dword [ecx], eax
jge 0x10088a87
xor eax, eax
jmp 0x10088a8e
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*4 - 0xc]
push 0xffffffffffffffff
push eax
xor ecx, ecx
call fcn.100657a0
add esp, 8
test eax, eax
jne 0x10088c54
mov edx, 0x200
mov al, byte [esi + 8]
cmp al, byte [edi + 8]
jne 0x10088c54
test word [edi + 0xe], dx
jne 0x10088abe
xor ecx, ecx
jmp 0x10088ada
mov eax, dword [edi]
cmp byte [eax], 0
je 0x10088acb
inc eax
cmp byte [eax], 0
jne 0x10088ac5
test byte [edi + 0xe], 4
je 0x10088ad7
inc eax
cmp byte [eax], 0
jne 0x10088ad1
lea ecx, [eax + 1]
test word [esi + 0xe], dx
je 0x10088b13
mov eax, dword [esi]
cmp byte [eax], 0
je 0x10088aed
inc eax
cmp byte [eax], 0
jne 0x10088ae7
test byte [esi + 0xe], 4
je 0x10088af9
inc eax
cmp byte [eax], 0
jne 0x10088af3
add eax, 1
je 0x10088b13
test ecx, ecx
je 0x10088c54
mov edx, ecx
mov ecx, eax
call fcn.100226c0
mov ecx, eax
jmp 0x10088b17
neg ecx
sbb ecx, ecx
test ecx, ecx
jne 0x10088c54
test byte [esi + 4], 0xf
je 0x10088b2f
test byte [edi + 4], 0xf
je 0x10088c54
test byte [esi + 0xe], 0x60
jne 0x10088beb
cmp dword [esp + 0x28], 0
jle 0x10088beb
movzx eax, word [esi + 0xc]
test ax, ax
jne 0x10088b51
xor edx, edx
jmp 0x10088b71
cmp byte [ebx + 0x2b], 0
je 0x10088b5b
xor edx, edx
jmp 0x10088b71
mov edx, dword [ebx + 0x34]
test edx, edx
je 0x10088b71
cmp dword [edx], eax
jge 0x10088b6a
xor edx, edx
jmp 0x10088b71
lea eax, [eax + eax*4]
mov edx, dword [edx + eax*4 - 0xc]
movzx eax, word [edi + 0xc]
test ax, ax
jne 0x10088b7e
xor esi, esi
jmp 0x10088ba2
mov ecx, dword [esp + 0x1c]
cmp byte [ecx + 0x2b], 0
je 0x10088b8c
xor esi, esi
jmp 0x10088ba2
mov esi, dword [ecx + 0x34]
test esi, esi
je 0x10088ba2
cmp dword [esi], eax
jge 0x10088b9b
xor esi, esi
jmp 0x10088ba2
lea eax, [eax + eax*4]
mov esi, dword [esi + eax*4 - 0xc]
xor ecx, ecx
test esi, esi
sete cl
xor eax, eax
test edx, edx
sete al
cmp eax, ecx
jne 0x10088c54
test edx, edx
je 0x10088beb
mov ecx, dword [esi + 8]
mov eax, dword [edx + 8]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10088be2
test dl, dl
je 0x10088bde
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10088be2
add eax, 2
add ecx, 2
test dl, dl
jne 0x10088bc2
xor eax, eax
jmp 0x10088be7
sbb eax, eax
or eax, 1
test eax, eax
jne 0x10088c54
mov esi, dword [esp + 0x28]
mov edx, 0x200
mov ecx, dword [esp + 0x38]
inc esi
movsx eax, word [ebx + 0x22]
add ecx, 0x10
mov dword [esp + 0x28], esi
mov dword [esp + 0x38], ecx
cmp esi, eax
jl 0x10088a00
mov edi, dword [ebx + 8]
mov ecx, 1
test edi, edi
je 0x10088c94
cmp byte [edi + 0x36], 0
mov eax, dword [esp + 0x30]
cmovne eax, ecx
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x1c]
mov esi, dword [eax + 8]
test esi, esi
je 0x10088c54
nop word [eax + eax]
mov edx, esi
mov ecx, edi
call fcn.10088760
test eax, eax
jne 0x10088c5d
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x10088c40
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x2c]
cmp eax, dword [edi + 0x2c]
jne 0x10088c88
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0x3c]
cmp eax, dword [ebx + 0x3c]
jne 0x10088c88
mov eax, dword [0x10165c38]
test eax, eax
je 0x10088c54
push 0x19b
call eax
add esp, 4
test eax, eax
je 0x10088c54
mov edi, dword [edi + 0x14]
mov ecx, 1
test edi, edi
jne 0x10088c20
mov ecx, dword [ebx + 0x10]
mov esi, dword [esp + 0x1c]
test ecx, ecx
je 0x10088cfd
mov eax, dword [esi + 0x10]
mov dword [esp + 0x44], eax
test eax, eax
je 0x10088c54
mov edx, dword [eax]
cmp edx, dword [ecx]
jne 0x10088c54
xor edi, edi
test edx, edx
jle 0x10088cfd
lea ebx, [eax + 8]
sub eax, ecx
lea esi, [ecx + 0x10]
mov dword [esp + 0x38], eax
mov al, byte [eax + esi]
cmp al, byte [esi]
jne 0x10088c54
mov edx, dword [ebx]
xor ecx, ecx
push 0xffffffffffffffff
push dword [esi - 8]
call fcn.100657a0
add esp, 8
test eax, eax
jne 0x10088c54
mov eax, dword [esp + 0x44]
inc edi
add esi, 0x14
add ebx, 0x14
cmp edi, dword [eax]
mov eax, dword [esp + 0x38]
jl 0x10088cc2
mov ebx, dword [esp + 0x24]
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x2c]
mov eax, dword [edi + 0x20]
mov ecx, dword [edi + 0x24]
and eax, 0x4000
or eax, 0
je 0x10088d1b
cmp dword [ebx + 0x30], 0
jne 0x10088c54
and ecx, 1
xor eax, eax
or eax, ecx
jne 0x10088c54
mov ecx, dword [esi + 0x3c]
mov dword [esp + 0x28], 0xffff8000
test ecx, ecx
je 0x10088d53
mov eax, dword [edi + 0x10]
xor edx, edx
add eax, 0xc
mov dword [esp + 0x28], edx
cmp dword [eax], ecx
je 0x10088d53
lea eax, [eax + 0x10]
inc edx
cmp dword [eax], ecx
jne 0x10088d47
mov dword [esp + 0x28], edx
mov edi, dword [esp + 0x18]
mov esi, dword [edi + 8]
mov dword [esp + 0x34], esi
test esi, esi
jne 0x10088d80
cmp dword [edi + 0x78], esi
jne 0x10088d73
mov eax, dword [edi]
test byte [eax + 0x50], 8
jne 0x10088d73
mov byte [edi + 0x17], 1
mov ecx, edi
call fcn.10043ca0
mov esi, eax
mov dword [esp + 0x34], eax
mov eax, dword [edi + 0x78]
mov edx, edi
mov ecx, dword [esp + 0x28]
test eax, eax
cmovne edx, eax
mov eax, 1
shl eax, cl
mov edi, dword [edx + 0x58]
test edi, eax
jne 0x10088dae
bts edi, ecx
mov dword [edx + 0x58], edi
cmp ecx, 1
jne 0x10088dae
mov ecx, edx
call fcn.10077f10
mov ecx, dword [esp + 0x18]
mov edx, dword [ebp + 0x10]
push ebx
mov eax, dword [ecx + 0x28]
mov dword [esp + 0x14], eax
lea edi, [eax + 1]
lea eax, [edi + 1]
mov dword [esp + 0x10], edi
mov dword [ecx + 0x28], eax
call fcn.10083e30
mov ecx, dword [esp + 0x1c]
add esp, 4
mov dword [esp + 0x44], eax
mov al, byte [ecx + 0x13]
test al, al
jne 0x10088dea
mov edx, dword [ecx + 0x2c]
inc edx
mov dword [ecx + 0x2c], edx
jmp 0x10088df9
dec al
mov byte [ecx + 0x13], al
movzx eax, al
mov edx, dword [ecx + eax*4 + 0xa0]
mov ecx, dword [esi + 0x6c]
mov dword [esp + 0x20], edx
cmp dword [esi + 0x70], ecx
jg 0x10088e1b
push 0
push edx
push 0
mov edx, 0x4b
mov ecx, esi
call fcn.10043ee0
add esp, 0xc
jmp 0x10088e4a
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x4b
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esp + 0x18]
mov al, byte [ecx + 0x13]
test al, al
jne 0x10088e5d
inc dword [ecx + 0x2c]
mov eax, dword [ecx + 0x2c]
jmp 0x10088e6c
dec al
mov byte [ecx + 0x13], al
movzx eax, al
mov eax, dword [ecx + eax*4 + 0xa0]
push 0x71
push ebx
push dword [ebp + 0x10]
mov edx, edi
mov dword [esp + 0x20], eax
call fcn.10083760
mov eax, dword [esp + 0x38]
add esp, 0xc
test byte [eax + 0x18], 4
jne 0x10088f85
cmp word [ebx + 0x20], 0
jge 0x10088e9b
cmp dword [ebx + 8], 0
jne 0x10088eb7
cmp dword [esp + 0x30], 0
jne 0x10088eb7
mov eax, dword [ebp + 0xc]
cmp eax, 2
je 0x10088f85
cmp eax, 1
je 0x10088f85
mov edi, dword [esi + 0x6c]
cmp dword [esi + 0x70], edi
jg 0x10088eda
push 0
push 0
push dword [esp + 0x14]
mov edx, 0x24
mov ecx, esi
call fcn.10043ee0
add esp, 0xc
mov edi, eax
jmp 0x10088f0d
mov edx, dword [esp + 0xc]
lea eax, [edi + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edi + edi*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x24
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x6c]
mov dword [esp + 0x40], ecx
cmp dword [esi + 0x70], ecx
jg 0x10088f34
push 0
push 0
push 0
mov edx, 9
mov ecx, esi
call fcn.10043ee0
add esp, 0xc
mov dword [esp + 0x40], eax
jmp 0x10088f67
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 9
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
mov edx, dword [esi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x10088f79
mov eax, 0x10168a60
jmp 0x10088f82
mov eax, dword [esi + 0x68]
lea ecx, [edi + edi*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov eax, dword [esp + 0x1c]
test byte [eax + 0x1c], 0x80
jne 0x10089436
mov edi, dword [esp + 0x10]
mov edx, edi
mov ecx, dword [esp + 0x18]
push 0x70
push eax
push dword [esp + 0x30]
call fcn.10083760
mov ecx, dword [esi + 0x6c]
add esp, 0xc
mov dword [esp + 0x3c], ecx
cmp dword [esi + 0x70], ecx
jg 0x10088fd4
push 0
push 0
push edi
mov edx, 0x24
mov ecx, esi
call fcn.10043ee0
add esp, 0xc
mov dword [esp + 0x3c], eax
mov edx, edi
jmp 0x10089005
lea eax, [ecx + 1]
mov edx, edi
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x24
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
cmp word [ebx + 0x20], 0
jl 0x10089112
mov edi, dword [esi + 0x6c]
cmp dword [esi + 0x70], edi
jg 0x10089036
push 0
push dword [esp + 0x18]
mov ecx, esi
push edx
mov edx, 0x87
call fcn.10043ee0
mov edx, dword [esp + 0x20]
add esp, 0xc
mov edi, eax
jmp 0x10089065
lea eax, [edi + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edi + edi*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x14]
mov dword [eax + ecx*4], 0x87
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x2c]
test byte [eax + 0x18], 4
jne 0x100890f9
mov ebx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ebx
jg 0x10089095
push edx
push 0
push dword [esp + 0x14]
mov edx, 0x1f
mov ecx, esi
call fcn.10043ee0
add esp, 0xc
mov ebx, eax
jmp 0x100890c8
mov edx, dword [esp + 0xc]
lea eax, [ebx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ebx + ebx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x14]
mov dword [eax + ecx*4], 0x1f
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
push dword [esp + 0x24]
mov edx, dword [ebp + 0xc]
mov ecx, dword [esp + 0x1c]
call fcn.10078350
mov eax, dword [esi]
add esp, 4
mov edx, dword [esi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x100890ed
mov eax, 0x10168a60
jmp 0x100890f6
mov eax, dword [esi + 0x68]
lea ecx, [ebx + ebx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
push dword [esp + 0x14]
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x1c]
call fcn.10083f60
add esp, 4
jmp 0x100891b1
cmp dword [ebx + 8], 0
jne 0x10089160
mov eax, dword [esp + 0x2c]
test byte [eax + 0x18], 8
jne 0x10089160
mov edi, dword [esi + 0x6c]
cmp dword [esi + 0x70], edi
jg 0x10089147
push 0
push dword [esp + 0x18]
mov edx, 0x7f
mov ecx, esi
push dword [esp + 0x14]
call fcn.10043ee0
add esp, 0xc
mov edi, eax
jmp 0x100891b1
mov edx, dword [esp + 0xc]
lea eax, [edi + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edi + edi*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x7f
jmp 0x10089195
mov edi, dword [esi + 0x6c]
cmp dword [esi + 0x70], edi
jg 0x10089182
push 0
push dword [esp + 0x18]
mov ecx, esi
push edx
mov edx, 0x87
call fcn.10043ee0
add esp, 0xc
mov edi, eax
jmp 0x100891b1
lea eax, [edi + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edi + edi*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x87
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x14]
mov dword [eax + ecx*4 + 0x10], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 8], edx
mov eax, dword [esp + 0x2c]
test byte [eax + 0x18], 4
je 0x1008921b
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x100891e1
push 0
push 0
push dword [esp + 0x14]
mov edx, 0x89
mov ecx, esi
call fcn.10043ee0
add esp, 0xc
mov ebx, 0x98
jmp 0x10089220
mov edx, dword [esp + 0xc]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov ebx, 0x98
mov dword [eax + ecx*4], 0x89
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x10089220
mov ebx, 0xa9
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x10089245
push dword [esp + 0x14]
mov edx, 0x81
mov ecx, esi
push dword [esp + 0x14]
push dword [esp + 0x14]
call fcn.10043ee0
add esp, 0xc
jmp 0x10089278
mov edx, dword [esp + 0xc]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x10]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x14]
mov dword [eax + ecx*4], 0x81
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x6c]
mov edx, dword [esp + 0xc]
cmp dword [esi + 0x70], ecx
jg 0x1008929e
push dword [esp + 0x14]
mov ecx, esi
push dword [esp + 0x24]
push edx
mov edx, 0x80
call fcn.10043ee0
add esp, 0xc
jmp 0x100892d1
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov esi, dword [esp + 0x34]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x20]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x14]
mov dword [eax + ecx*4], 0x80
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x2c]
test byte [eax + 0x18], 4
jne 0x10089326
mov ecx, dword [esi]
cmp byte [ecx + 0x57], 0
je 0x100892f6
push dword [esp + 0x24]
mov edx, 0xfffffffb
call fcn.10044b40
add esp, 4
jmp 0x10089326
mov eax, dword [esi + 0x6c]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x68]
cmp byte [eax + ecx*4 - 0x13], 0
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x24]
je 0x1008931f
push 0xfffffffffffffffb
push ecx
lea edx, [eax - 0x14]
mov ecx, esi
call fcn.10044c30
add esp, 8
jmp 0x10089326
mov dword [eax - 4], ecx
mov byte [eax - 0x13], 0xfb
mov eax, dword [esi + 0x6c]
test eax, eax
jle 0x10089338
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x68]
mov word [eax + ecx*4 - 0x12], bx
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x1008935c
push 0
push edi
push dword [esp + 0x18]
mov edx, 0x27
mov ecx, esi
call fcn.10043ee0
mov edx, dword [esp + 0x1c]
add esp, 0xc
jmp 0x1008938b
mov edx, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x27
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x100893a9
push 0
push 0
push edx
mov edx, 0x7a
mov ecx, esi
call fcn.10043ee0
add esp, 0xc
jmp 0x100893d8
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x7a
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x6c]
mov edi, dword [esp + 0xc]
cmp dword [esi + 0x70], ecx
jg 0x10089401
push 0
push 0
push edi
mov edx, 0x7a
mov ecx, esi
call fcn.10043ee0
mov ebx, dword [esp + 0x30]
add esp, 0xc
jmp 0x1008949b
mov ebx, dword [esp + 0x24]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x7a
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
jmp 0x1008949b
mov edx, dword [ebp + 0x10]
mov edi, dword [esp + 0x18]
cmp edx, 1
je 0x10089466
mov eax, dword [edi]
mov ecx, edx
add ecx, ecx
mov eax, dword [eax + 0x10]
mov eax, dword [eax + ecx*8 + 4]
cmp byte [eax + 9], 0
je 0x10089466
push dword [ebx]
mov ecx, edi
push 1
push dword [ebx + 0x14]
call fcn.1006e7c0
add esp, 0xc
mov edx, dword [esp + 0x28]
cmp edx, 1
je 0x10089497
mov eax, dword [edi]
mov ecx, edx
add ecx, ecx
mov eax, dword [eax + 0x10]
mov eax, dword [eax + ecx*8 + 4]
cmp byte [eax + 9], 0
je 0x10089497
mov eax, dword [esp + 0x1c]
mov ecx, edi
push dword [eax]
push 0
push dword [eax + 0x14]
call fcn.1006e7c0
add esp, 0xc
mov edi, dword [esp + 0xc]
mov eax, dword [ebx + 8]
mov dword [esp + 0x24], eax
test eax, eax
je 0x1008999a
nop word [eax + eax]
mov eax, dword [esp + 0x1c]
mov byte [esp + 0x38], 0
mov edi, dword [eax + 8]
test edi, edi
je 0x100894dc
mov esi, dword [esp + 0x24]
mov edx, edi
mov ecx, esi
call fcn.10088760
test eax, eax
jne 0x100894d8
mov edi, dword [edi + 0x14]
test edi, edi
jne 0x100894c4
mov esi, dword [esp + 0x34]
mov ecx, dword [esi + 0x6c]
mov edx, dword [edi + 0x2c]
cmp dword [esi + 0x70], ecx
jg 0x10089501
push dword [esp + 0x28]
mov ecx, esi
push edx
push dword [esp + 0x18]
mov edx, 0x70
call fcn.10043ee0
add esp, 0xc
jmp 0x10089530
mov ebx, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x28]
mov dword [eax + ecx*4], 0x70
mov dword [eax + ecx*4 + 4], ebx
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x18]
mov edx, edi
mov ecx, eax
mov ebx, dword [eax + 8]
call fcn.100788a0
mov edx, eax
test edx, edx
je 0x10089570
mov ecx, dword [ebx]
cmp byte [ecx + 0x57], 0
je 0x1008955e
push edx
mov edx, 0xfffffff8
call fcn.10044b40
add esp, 4
jmp 0x10089570
mov eax, dword [ebx + 0x6c]
lea ecx, [eax + eax*4]
mov eax, dword [ebx + 0x68]
mov byte [eax + ecx*4 - 0x13], 0xf8
mov dword [eax + ecx*4 - 4], edx
mov edx, dword [esp + 0x24]
mov ecx, dword [esi + 0x6c]
mov edx, dword [edx + 0x2c]
cmp dword [esi + 0x70], ecx
jg 0x10089598
push dword [ebp + 0x10]
mov ecx, esi
push edx
push dword [esp + 0x14]
mov edx, 0x71
call fcn.10043ee0
add esp, 0xc
jmp 0x100895c6
mov ebx, dword [esp + 0xc]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [ebp + 0x10]
mov dword [eax + ecx*4], 0x71
mov dword [eax + ecx*4 + 4], ebx
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x18]
mov ecx, eax
mov edx, dword [esp + 0x24]
mov ebx, dword [eax + 8]
call fcn.100788a0
mov edx, eax
test edx, edx
je 0x10089608
mov ecx, dword [ebx]
cmp byte [ecx + 0x57], 0
je 0x100895f6
push edx
mov edx, 0xfffffff8
call fcn.10044b40
add esp, 4
jmp 0x10089608
mov eax, dword [ebx + 0x6c]
lea ecx, [eax + eax*4]
mov eax, dword [ebx + 0x68]
mov byte [eax + ecx*4 - 0x13], 0xf8
mov dword [eax + ecx*4 - 4], edx
mov eax, dword [esi + 0x6c]
test eax, eax
jle 0x1008961f
lea ecx, [eax + eax*4]
mov edx, 1
mov eax, dword [esi + 0x68]
mov word [eax + ecx*4 - 0x12], dx
mov edx, dword [esi + 0x6c]
mov dword [esp + 0x44], edx
cmp dword [esi + 0x70], edx
jg 0x10089648
push 0
push 0
push dword [esp + 0x18]
mov edx, 0x24
mov ecx, esi
call fcn.10043ee0
add esp, 0xc
mov dword [esp + 0x44], eax
jmp 0x1008967b
lea eax, [edx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [edx + edx*4]
mov eax, dword [esi + 0x68]
mov edx, dword [esp + 0x10]
mov dword [eax + ecx*4], 0x24
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x2c]
test byte [eax + 0x18], 4
je 0x1008977e
movzx eax, word [edi + 0x34]
xor ecx, ecx
mov dword [esp + 0x30], ecx
test eax, eax
je 0x100896c8
mov ebx, dword [edi + 0x20]
nop word [eax + eax]
mov edx, dword [ebx]
test edx, edx
je 0x100896c8
mov ecx, 0x1015042c
call fcn.100226c0
mov ecx, dword [esp + 0x30]
test eax, eax
jne 0x100896c8
movzx eax, word [edi + 0x34]
inc ecx
add ebx, 4
mov dword [esp + 0x30], ecx
cmp ecx, eax
jl 0x100896a0
movzx eax, word [edi + 0x34]
cmp ecx, eax
jne 0x100897a4
mov ecx, dword [esi + 0x6c]
mov bl, 0x90
mov edi, dword [esp + 0xc]
cmp dword [esi + 0x70], ecx
jg 0x100896f8
push 0
push 0
push edi
mov edx, 0x89
mov ecx, esi
call fcn.10043ee0
add esp, 0xc
jmp 0x10089727
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x89
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x1008974e
push 0
push dword [esp + 0x14]
mov edx, 0x81
mov ecx, esi
push edi
call fcn.10043ee0
mov edx, dword [esp + 0x2c]
add esp, 0xc
jmp 0x1008980a
mov edx, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x20]
mov dword [eax + ecx*4], 0x81
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 0xc], 0
jmp 0x10089802
mov eax, dword [esp + 0x1c]
mov ebx, dword [esp + 0x38]
test byte [eax + 0x1c], 0x80
je 0x100897a8
mov eax, dword [esp + 0x24]
movzx ebx, bl
mov al, byte [eax + 0x38]
and al, 3
cmp al, 2
mov eax, 1
cmove ebx, eax
jmp 0x100897a8
mov ebx, dword [esp + 0x38]
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x100897d3
push 1
push dword [esp + 0x24]
mov edx, 0x86
mov ecx, esi
push dword [esp + 0x18]
call fcn.10043ee0
mov edi, dword [esp + 0x18]
add esp, 0xc
mov edx, dword [esp + 0x20]
jmp 0x1008980a
mov edx, dword [esp + 0x10]
lea eax, [ecx + 1]
mov edi, dword [esp + 0xc]
lea ecx, [ecx + ecx*4]
mov dword [esi + 0x6c], eax
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x20]
mov dword [eax + ecx*4], 0x86
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 1
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x10089827
push 0
push edx
push edi
mov edx, 0x8a
mov ecx, esi
call fcn.10043ee0
add esp, 0xc
jmp 0x10089856
mov edi, dword [esp + 0xc]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x8a
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi + 0x6c]
test eax, eax
jle 0x1008986e
lea ecx, [eax + eax*4]
or bl, 8
mov eax, dword [esi + 0x68]
movzx edx, bl
mov word [eax + ecx*4 - 0x12], dx
mov ebx, dword [esp + 0x44]
mov ecx, dword [esi + 0x6c]
lea edx, [ebx + 1]
cmp dword [esi + 0x70], ecx
jg 0x10089895
push 0
push edx
push dword [esp + 0x18]
mov edx, 0x27
mov ecx, esi
call fcn.10043ee0
add esp, 0xc
jmp 0x100898c8
mov edi, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4 + 4], edi
mov edi, dword [esp + 0xc]
mov dword [eax + ecx*4], 0x27
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
mov edx, dword [esi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x100898da
mov eax, 0x10168a60
jmp 0x100898e3
mov eax, dword [esi + 0x68]
lea ecx, [ebx + ebx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x10089907
push 0
push 0
push dword [esp + 0x18]
mov edx, 0x7a
mov ecx, esi
call fcn.10043ee0
add esp, 0xc
jmp 0x1008993a
mov edx, dword [esp + 0x10]
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x7a
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x10089958
push 0
push 0
push edi
mov edx, 0x7a
mov ecx, esi
call fcn.10043ee0
add esp, 0xc
jmp 0x10089987
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x7a
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 0x14]
mov dword [esp + 0x24], eax
test eax, eax
jne 0x100894b0
mov ecx, dword [esp + 0x3c]
test ecx, ecx
je 0x100899c0
mov eax, dword [esi]
mov edx, dword [esi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x100899b4
mov eax, 0x10168a60
jmp 0x100899bd
mov eax, dword [esi + 0x68]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
test ecx, ecx
je 0x100899e0
mov al, byte [edx + 0x13]
cmp al, 8
jae 0x100899e0
movzx eax, al
mov dword [edx + eax*4 + 0xa0], ecx
inc byte [edx + 0x13]
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x100899fc
mov al, byte [edx + 0x13]
cmp al, 8
jae 0x100899fc
movzx eax, al
mov dword [edx + eax*4 + 0xa0], ecx
inc byte [edx + 0x13]
mov ebx, dword [esp + 0x40]
test ebx, ebx
je 0x10089ae2
cmp dword [edx + 0x74], 0
je 0x10089a15
mov ecx, edx
call fcn.10083fd0
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x10089a34
push 0
push 0
push 0
mov edx, 0x46
mov ecx, esi
call fcn.10043ee0
add esp, 0xc
jmp 0x10089a67
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x46
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esi]
mov edx, dword [esi + 0x6c]
cmp byte [eax + 0x57], 0
je 0x10089a79
mov eax, 0x10168a60
jmp 0x10089a82
mov eax, dword [esi + 0x68]
lea ecx, [ebx + ebx*4]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
mov ecx, dword [esi + 0x6c]
cmp dword [esi + 0x70], ecx
jg 0x10089aaa
push 0
push 0
push edi
mov edx, 0x7a
mov ecx, esi
call fcn.10043ee0
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ecx + 1]
mov dword [esi + 0x6c], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x68]
mov dword [eax + ecx*4], 0x7a
mov dword [eax + ecx*4 + 4], edi
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret