Function at 0x86f384
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd4
push ebx
push esi
mov esi, ecx
mov dword [ebp - 0x68], edx
xor ecx, ecx
mov dword [ebp - 0x7c], esi
push edi
mov dword [ebp - 0xac], ecx
mov eax, dword [esi]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0xa8], ecx
mov dword [ebp - 0x98], ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb0], ecx
mov dword [ebp - 0x6c], eax
cmp dword [esi + 0x24], ecx
jne 0x87023e
cmp byte [eax + 0x49], cl
jne 0x87023e
mov ecx, esi
call fcn.0085e0a2
mov ebx, eax
mov dword [ebp - 0x30], ebx
test ebx, ebx
je 0x87023e
mov edx, dword [ebx + 0x48]
mov ecx, dword [esi]
call fcn.00867d8e
mov dword [ebp - 0x18], eax
mov edx, ebx
lea eax, [ebp - 0x58]
mov ecx, esi
push eax
push dword [ebp + 8]
push 0x6f
call fcn.0086ed23
add esp, 0xc
mov dword [ebp - 0x34], eax
mov eax, dword [ebx + 0xc]
mov edx, ebx
mov ecx, esi
mov dword [ebp - 0x5c], eax
call fcn.0085b52a
test eax, eax
jne 0x87023e
push dword [ebp - 0x58]
mov edx, ebx
mov ecx, esi
call fcn.0085e0df
pop ecx
test eax, eax
jne 0x87023e
mov ecx, dword [esi + 0x28]
mov dword [ebp - 8], ecx
mov dword [ebp - 0x74], ecx
lea edx, [ecx + 1]
mov dword [esi + 0x28], edx
test byte [ebx + 0x24], 0x20
mov dword [ebp - 0x80], edx
jne 0x86f47e
and dword [ebp - 0x14], eax
jmp 0x86f48b
mov ecx, ebx
call fcn.00859f5b
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 8]
xor edi, edi
mov dword [ebp - 0x50], edi
test eax, eax
je 0x86f4af
cmp dword [ebp - 0x14], eax
cmove ecx, edx
inc edx
mov dword [esi + 0x28], edx
inc edi
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x86f497
mov dword [ebp - 0x50], edi
mov dword [ebp - 8], ecx
mov eax, dword [ebp + 0x1c]
test eax, eax
je 0x86f4c8
mov ecx, dword [eax + 0x1c]
mov edx, dword [eax + 0x20]
mov eax, dword [ebp - 0x74]
mov dword [ebp - 8], ecx
mov dword [ebp - 0x80], edx
mov dword [esi + 0x28], eax
mov edx, dword [ebp - 0x68]
push 0
mov dword [edx + 0x34], ecx
movsx eax, word [ebx + 0x2a]
mov ecx, dword [ebp - 0x6c]
add eax, edi
lea eax, [eax*4 + 2]
add eax, edi
push eax
call fcn.0082db2c
pop ecx
pop ecx
mov ecx, eax
mov dword [ebp - 0x20], ecx
test ecx, ecx
je 0x87023e
movsx eax, word [ebx + 0x2a]
lea eax, [ecx + eax*4]
lea ecx, [eax + edi*4]
mov dword [ebp - 0x94], eax
lea eax, [edi + 1]
mov dword [ebp - 0x3c], ecx
push eax
xor eax, eax
inc eax
push eax
push ecx
call fcn.008856c0
mov eax, dword [ebp - 0x3c]
add esp, 0xc
xor ecx, ecx
mov byte [eax + edi + 1], 0
xor eax, eax
cmp ax, word [ebx + 0x2a]
jge 0x86f540
mov esi, dword [ebp - 0x20]
or dword [esi + ecx*4], 0xffffffff
inc ecx
movsx eax, word [ebx + 0x2a]
cmp ecx, eax
jl 0x86f530
mov esi, dword [ebp - 0x7c]
mov edx, dword [ebp + 8]
lea edi, [ebp - 0xd0]
and dword [ebp - 0x28], 0
xor eax, eax
push 7
pop ecx
rep stosd dword es:[edi], eax
mov eax, dword [ebp + 0x1c]
xor cl, cl
mov edi, dword [ebp - 0x68]
mov dword [ebp - 0xc8], eax
mov eax, 0x200
mov word [ebp - 0xb8], ax
xor al, al
cmp dword [edx], 0
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xcc], edi
mov dword [ebp - 0x78], eax
mov byte [ebp - 1], cl
jle 0x86f6c0
lea eax, [edx + 4]
mov dword [ebp - 0x1c], eax
mov edx, dword [eax]
lea ecx, [ebp - 0xd0]
call fcn.008521bb
test eax, eax
jne 0x87023e
movsx eax, word [ebx + 0x2a]
xor edi, edi
test eax, eax
jle 0x86f61c
mov eax, dword [ebx + 4]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 4]
mov ecx, dword [eax]
call fcn.0082fd2a
test eax, eax
je 0x86f5db
mov eax, dword [ebp - 0x48]
inc edi
movsx ecx, word [ebx + 0x2a]
add eax, 0x10
mov dword [ebp - 0x48], eax
cmp edi, ecx
jl 0x86f5b6
jmp 0x86f61c
movsx eax, word [ebx + 0x28]
cmp edi, eax
jne 0x86f5f3
xor eax, eax
inc eax
mov byte [ebp - 1], al
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
jmp 0x86f613
cmp dword [ebp - 0x14], 0
je 0x86f613
mov ecx, dword [ebx + 4]
mov eax, edi
add eax, eax
xor edx, edx
inc edx
test byte [ecx + eax*8 + 0xf], dl
mov eax, dword [ebp - 0x78]
movzx eax, al
cmovne eax, edx
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov dword [ecx + edi*4], eax
movsx eax, word [ebx + 0x2a]
cmp edi, eax
jl 0x86f652
cmp dword [ebp - 0x14], 0
jne 0x86f6d4
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 4]
call fcn.00853d03
test eax, eax
je 0x86f6d4
xor eax, eax
or edi, 0xffffffff
inc eax
mov byte [ebp - 1], al
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
test edi, edi
jns 0x86f65d
mov edx, 0x4a4314
jmp 0x86f667
mov eax, dword [ebx + 4]
mov ecx, edi
add ecx, ecx
mov edx, dword [eax + ecx*8]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x18]
add ecx, ecx
mov eax, dword [eax + 0x10]
push dword [eax + ecx*8]
mov ecx, esi
push edx
push dword [ebx]
push 0x17
pop edx
call fcn.0085944e
xor ecx, ecx
add esp, 0xc
inc ecx
cmp eax, ecx
je 0x87023e
cmp eax, 2
jne 0x86f69c
mov eax, dword [ebp - 0x20]
or dword [eax + edi*4], 0xffffffff
mov edi, dword [ebp - 0x28]
mov ecx, dword [ebp + 8]
inc edi
mov eax, dword [ebp - 0x1c]
add eax, 0x18
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x1c], eax
cmp edi, dword [ecx]
jl 0x86f591
mov eax, dword [ebp - 0x78]
mov cl, byte [ebp - 1]
mov edi, dword [ebp - 0x68]
cmp dword [ebx + 0x38], 0
lea edx, [ecx + eax]
mov byte [ebp - 0x1c], dl
je 0x86f6f8
or eax, 0xffffffff
or ecx, 0xffffffff
jmp 0x86f70f
imul eax, dword [ebp - 0x28], 0x18
mov ecx, dword [ebp + 8]
push dword [eax + ecx + 8]
push 0x4a69b8
push esi
call fcn.0082fc54
xor eax, eax
add esp, 0xc
inc eax
mov byte [esi + 0x11], al
jmp 0x87023e
xorps xmm0, xmm0
movlpd qword [ebp - 0x90], xmm0
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x90]
mov dword [edi + 0x40], eax
movzx eax, dl
mov edx, ebx
push eax
push dword [ebp - 0x20]
mov dword [edi + 0x44], ecx
mov ecx, esi
mov dword [ebp - 0xa0], eax
call fcn.00861a43
pop ecx
pop ecx
mov ecx, dword [ebx + 8]
xor edi, edi
mov dword [ebp - 0x24], eax
mov dword [ebp - 0xc], edi
test ecx, ecx
je 0x86f7c5
mov ebx, dword [ebp - 0x3c]
cmp byte [ebp - 0x1c], 0
jne 0x86f844
cmp eax, 1
jg 0x86f844
cmp dword [ecx + 0x24], 0
jne 0x86f844
cmp ecx, dword [ebp - 0x14]
je 0x86f844
movzx eax, word [ecx + 0x32]
xor edx, edx
xor edi, edi
mov dword [ebp - 0x48], edx
test eax, eax
je 0x86f7a3
mov edx, dword [ecx + 4]
movzx eax, word [edx]
test ax, ax
js 0x86f80d
mov ebx, dword [ebp - 0x20]
cwde
cmp dword [ebx + eax*4], 0
mov ebx, dword [ebp - 0x3c]
jge 0x86f80d
movzx eax, word [ecx + 0x32]
inc edi
add edx, 2
cmp edi, eax
jl 0x86f77b
mov edx, dword [ebp - 0x48]
mov edi, dword [ebp - 0xc]
mov byte [edi + ebx + 1], 0
mov eax, dword [ebp - 0x94]
mov dword [eax + edi*4], edx
inc edi
mov ecx, dword [ecx + 0x14]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xc], edi
test ecx, ecx
jne 0x86f743
mov ebx, dword [ebp - 0x30]
cmp dword [ebp - 0x60], 0
je 0x86f7df
mov eax, dword [ebp - 0x50]
inc eax
push eax
xor eax, eax
inc eax
push eax
push dword [ebp - 0x3c]
call fcn.008856c0
add esp, 0xc
mov ecx, esi
call fcn.00869fa5
mov edi, eax
test edi, edi
je 0x87023e
cmp byte [esi + 0x12], 0
jne 0x86f7fd
mov ecx, edi
call fcn.00847f26
cmp dword [ebp - 0x34], 0
jne 0x86f855
cmp dword [ebp - 0x24], 0
jne 0x86f855
xor edx, edx
jmp 0x86f85a
inc dword [esi + 0x2c]
movzx eax, word [ecx + 0x34]
mov edx, dword [esi + 0x2c]
add eax, edx
cmp dword [ebp + 0x10], 5
mov dword [esi + 0x2c], eax
je 0x86f82e
cmp dword [ebp + 0x10], 0xb
jne 0x86f834
cmp byte [ecx + 0x36], 5
jne 0x86f834
xor eax, eax
inc eax
mov dword [ebp - 0x60], eax
mov edi, dword [ebp - 0xc]
test edx, edx
jne 0x86f7ab
jmp 0x86f7a6
inc dword [esi + 0x2c]
movzx eax, word [ecx + 0x34]
mov edx, dword [esi + 0x2c]
add eax, edx
mov dword [esi + 0x2c], eax
jmp 0x86f837
xor eax, eax
lea edx, [eax + 1]
push dword [ebp - 0x18]
mov ecx, esi
call fcn.0085d4cb
cmp dword [ebx + 0x38], 0
pop ecx
jne 0x86f8d1
inc dword [esi + 0x2c]
cmp byte [ebp - 0x78], 0
mov eax, dword [esi + 0x2c]
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x98], eax
lea ecx, [eax + 1]
mov dword [ebp - 0x44], ecx
mov dword [esi + 0x2c], ecx
mov dword [ebp - 0x10], ecx
jne 0x86f897
test edx, edx
jne 0x86f897
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x86f8ac
lea eax, [ecx + 1]
mov dword [ebp - 0xa8], eax
movsx eax, word [ebx + 0x2a]
add eax, ecx
mov dword [esi + 0x2c], eax
mov eax, dword [ebp - 0x24]
cmp byte [ebp - 0x1c], 0
jne 0x86f8ba
test edx, edx
jne 0x86f8ba
test eax, eax
je 0x86f8c3
inc dword [esi + 0x2c]
mov eax, dword [esi + 0x2c]
mov dword [ebp - 0x44], eax
mov eax, dword [esi + 0x2c]
inc eax
mov dword [ebp - 0x40], eax
movsx eax, word [ebx + 0x2a]
add dword [esi + 0x2c], eax
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x86f905
push dword [ebx]
lea edx, [ebp - 0xb4]
mov ecx, esi
call fcn.008594ca
mov eax, dword [ebp - 0x5c]
add esp, 4
test eax, eax
je 0x86f905
push dword [ebp - 8]
mov edx, ebx
push 0
push 0
push dword [ebp + 0xc]
call fcn.0085e140
add esp, 0x10
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0xd0]
call fcn.008521bb
test eax, eax
jne 0x87023e
cmp dword [ebx + 0x38], eax
je 0x86f942
push dword [ebp + 0x10]
mov edx, dword [ebp - 0x68]
mov ecx, esi
push dword [ebp + 0xc]
push dword [ebp - 0x20]
push dword [ebp - 0x38]
push dword [ebp + 8]
push ebx
call fcn.0087027b
add esp, 0x18
jmp 0x87023e
mov ecx, edi
call fcn.00844fbd
mov dword [ebp - 0x28], eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x6c]
test byte [eax + 0x1c], 0x80
je 0x86f985
cmp dword [esi + 0x7c], 0
jne 0x86f985
cmp byte [esi + 0x12], 0
jne 0x86f985
cmp dword [ebp + 0x1c], 0
jne 0x86f985
inc dword [esi + 0x2c]
mov ecx, edi
mov eax, dword [esi + 0x2c]
push eax
push 0
push 0x43
pop edx
mov dword [ebp - 0xa4], eax
call fcn.00844d77
pop ecx
pop ecx
test byte [ebx + 0x24], 0x20
jne 0x86f9a5
push dword [ebp - 0x10]
mov ecx, edi
push dword [ebp - 0x98]
push 0
push 0x46
pop edx
call fcn.00844cf3
add esp, 0xc
jmp 0x86fa12
mov eax, dword [ebp - 0x14]
mov edx, dword [esi + 0x2c]
inc edx
mov dword [ebp - 0x70], edx
movzx eax, word [eax + 0x32]
movsx ecx, ax
mov dword [ebp - 0x4c], eax
lea eax, [ecx + 1]
add dword [esi + 0x2c], eax
cmp dword [ebp + 0x1c], 0
mov eax, dword [esi + 0x2c]
mov dword [ebp - 0x2c], eax
jne 0x86fab4
mov eax, dword [esi + 0x28]
mov dword [ebp - 0x64], eax
inc eax
mov dword [esi + 0x28], eax
lea eax, [ecx - 1]
add eax, edx
mov ecx, edi
push eax
push edx
push 0
push 0x46
pop edx
call fcn.00844cf3
mov ecx, dword [ebp - 0x4c]
add esp, 0xc
movsx eax, cx
mov ecx, edi
push eax
push dword [ebp - 0x64]
push 0x6e
pop edx
call fcn.00844d77
mov edx, dword [ebp - 0x14]
pop ecx
pop ecx
mov ecx, esi
mov dword [ebp - 0x54], eax
call fcn.0084554f
cmp dword [ebp + 0x1c], 0
jne 0x86fab4
cmp byte [esi + 0x12], 0
mov eax, 0x1004
jne 0x86fa43
cmp dword [ebp - 0x34], 0
jne 0x86fa43
cmp dword [ebp - 0x24], 0
jne 0x86fa43
cmp byte [ebp - 0x1c], 0
jne 0x86fa43
cmp dword [ebp - 0x60], 0
lea ecx, [eax + 8]
cmove eax, ecx
push dword [ebp - 0x80]
mov edx, dword [ebp - 0x68]
mov ecx, esi
push eax
push 0
push 0
push dword [ebp + 0xc]
call fcn.00879734
add esp, 0x14
mov dword [ebp - 0x48], eax
test eax, eax
je 0x87023e
lea edx, [ebp - 0x90]
mov ecx, eax
call fcn.00875975
mov edx, eax
xor eax, eax
inc eax
mov dword [ebp - 0x18], edx
cmp edx, eax
je 0x86facf
mov ecx, esi
call fcn.0085d4f8
cmp edx, 2
jne 0x86facf
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 8]
test eax, eax
js 0x86fad2
cmp eax, ecx
je 0x86fad2
sub eax, dword [ebp - 0x74]
mov ebx, dword [ebp - 0x3c]
push 0
cmp byte [eax + ebx], 0
mov ebx, dword [ebp - 0x30]
pop eax
cmovne edx, eax
mov dword [ebp - 0x18], edx
jmp 0x86fad2
and dword [ebp - 0x48], 0
xor eax, eax
push 0x10
push dword [ebp - 0x28]
inc eax
push dword [ebp + 0xc]
mov dword [ebp - 0x18], eax
push esi
call fcn.008565b1
add esp, 0x10
mov ecx, dword [ebp - 8]
test byte [ebx + 0x24], 0x20
jne 0x86fb0f
push dword [ebp - 0x10]
push ecx
push 0x7d
pop edx
mov ecx, edi
call fcn.00844d77
mov edx, dword [ebp - 0x18]
pop ecx
pop ecx
test edx, edx
jne 0x86fbcc
push dword [ebp - 0x10]
mov edx, 0x91
mov ecx, edi
push dword [ebp - 0x98]
call fcn.00844d77
pop ecx
pop ecx
jmp 0x86fbc9
mov eax, dword [ebp - 0x4c]
and dword [ebp - 0x84], 0
cwde
test eax, eax
jle 0x86fb53
mov esi, dword [ebp - 0x84]
mov eax, dword [ebp - 0x70]
mov edx, ebx
add eax, esi
push eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 4]
movsx eax, word [eax + esi*2]
push eax
push ecx
mov ecx, edi
call fcn.00855062
mov ecx, dword [ebp - 0x4c]
add esp, 0xc
movsx eax, cx
inc esi
mov ecx, dword [ebp - 8]
cmp esi, eax
jl 0x86fb24
mov esi, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x86fb81
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x86fb6d
mov edx, eax
mov ecx, edi
call fcn.008453e3
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x4c]
movsx eax, cx
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x2c], eax
jmp 0x86fbcc
mov edx, dword [ebp - 0x14]
push eax
push ecx
mov ecx, dword [ebp - 0x6c]
call fcn.008620b2
pop ecx
mov ecx, dword [ebp - 0x4c]
push eax
push dword [ebp - 0x2c]
movsx eax, cx
mov ecx, edi
push eax
push dword [ebp - 0x70]
push 0x65
pop edx
call fcn.00844e3d
mov ecx, dword [ebp - 0x4c]
add esp, 0x14
movsx eax, cx
mov edx, 0x81
mov ecx, edi
push eax
push dword [ebp - 0x70]
push dword [ebp - 0x2c]
push dword [ebp - 0x64]
call fcn.00844f6e
add esp, 0x10
mov edx, dword [ebp - 0x18]
cmp dword [ebp + 0x1c], 0
jne 0x86fd68
cmp edx, 2
je 0x86fbe6
mov ecx, dword [ebp - 0x48]
call fcn.0087a027
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x5c]
test ecx, ecx
jne 0x86fc81
xor eax, eax
mov dword [ebp - 0x54], eax
test edx, edx
je 0x86fc2d
cmp dword [ebp - 0x90], eax
jl 0x86fc12
mov eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x3c]
mov byte [eax + ecx], 0
mov ecx, dword [ebp - 0x8c]
test ecx, ecx
js 0x86fc33
mov esi, dword [ebp - 0x3c]
mov eax, ecx
sub eax, dword [ebp - 0x74]
mov byte [eax + esi], 0
mov esi, dword [ebp - 0x7c]
jmp 0x86fc33
mov ecx, dword [ebp - 0x8c]
cmp edx, 2
jne 0x86fc55
xor eax, eax
test ecx, ecx
mov ecx, dword [ebp - 0x50]
setns al
sub ecx, eax
test ecx, ecx
jle 0x86fc55
push 0x14
pop edx
mov ecx, edi
call fcn.00844d55
mov dword [ebp - 0x54], eax
xor eax, eax
mov edx, ebx
push eax
push eax
push dword [ebp - 0x3c]
mov ecx, esi
push dword [ebp - 0x74]
push eax
push 0x6b
call fcn.00863eaf
mov eax, dword [ebp - 0x54]
add esp, 0x18
test eax, eax
je 0x86fc7e
mov edx, eax
mov ecx, edi
call fcn.00845298
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x86fcea
test ecx, ecx
jne 0x86fcbc
mov ecx, dword [ebp - 8]
cmp dword [ebp - 0x90], ecx
je 0x86fcbc
cmp dword [ebp - 0x8c], ecx
je 0x86fcbc
push dword [ebp - 0x9c]
push dword [ebp - 0x2c]
push dword [ebp - 0x28]
push ecx
push 0x1d
pop edx
mov ecx, edi
call fcn.00844f6e
mov eax, dword [ebp - 0x18]
add esp, 0x10
xor ecx, ecx
inc ecx
cmp eax, ecx
je 0x86fccd
mov ecx, edi
call fcn.00844fbd
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x14], 0
mov ecx, edi
push dword [ebp - 0x28]
mov eax, dword [ebp - 0x10]
cmovne eax, dword [ebp - 0x2c]
push eax
push 0x32
pop edx
call fcn.00844d77
pop ecx
pop ecx
jmp 0x86fd68
cmp dword [ebp - 0x14], 0
mov ecx, edi
je 0x86fd3a
call fcn.00844fbd
push dword [ebp - 0x28]
mov ecx, edi
mov dword [ebp - 0xc], eax
push dword [ebp - 0x64]
push 0x25
pop edx
call fcn.00844d77
push dword [ebp - 0x2c]
mov ecx, edi
push dword [ebp - 0x64]
push 0x7c
pop edx
call fcn.00844d77
push 0
push dword [ebp - 0x2c]
mov ecx, edi
mov dword [ebp - 0xac], eax
push dword [ebp - 0xc]
push dword [ebp - 8]
push 0x1d
pop edx
call fcn.00844f6e
add esp, 0x20
jmp 0x86fd68
push dword [ebp - 0x10]
push dword [ebp - 0x28]
push dword [ebp - 0x98]
push 0x2a
pop edx
call fcn.00844cf3
add esp, 0xc
mov dword [ebp - 0xc], eax
mov ecx, edi
push dword [ebp - 0x10]
push eax
push dword [ebp - 8]
push 0x20
pop edx
call fcn.00844cf3
add esp, 0xc
cmp byte [ebp - 1], 0
je 0x86fd8a
push dword [ebp - 0x44]
mov edx, dword [ebp - 0x38]
mov ecx, esi
call fcn.0085600b
pop ecx
push dword [ebp - 0x44]
mov ecx, edi
push 0x11
pop edx
call fcn.00844d63
pop ecx
cmp byte [ebp - 0x78], 0
mov eax, dword [ebp - 0x24]
jne 0x86fda0
test eax, eax
jne 0x86fda4
cmp dword [ebp - 0x34], eax
je 0x86fe78
test eax, eax
je 0x86fdaf
mov edx, ebx
mov ecx, esi
call fcn.00861974
jmp 0x86fdb1
xor eax, eax
push dword [ebp + 0x10]
mov edx, dword [ebp - 0x34]
mov ecx, esi
push ebx
push 3
push 0
push dword [ebp + 8]
mov dword [ebp - 0x38], eax
call fcn.0086f2a7
mov edx, dword [ebp - 0x38]
add esp, 0x14
and dword [ebp - 0x84], 0
or edx, eax
xor eax, eax
mov dword [ebp - 0x38], edx
cmp ax, word [ebx + 0x2a]
jge 0x86fe5a
mov esi, dword [ebp - 0x84]
xor ecx, ecx
mov dword [ebp - 0x50], ecx
cmp edx, 0xffffffff
je 0x86fe29
cmp esi, 0x20
jge 0x86fe06
xor eax, eax
mov ecx, esi
inc eax
shl eax, cl
test edx, eax
jne 0x86fe29
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebx + 4]
test byte [eax + ecx + 0xf], 1
jne 0x86fe29
mov eax, dword [ebp - 0xa8]
mov ecx, edi
add eax, esi
push eax
push 0
push 0x46
pop edx
call fcn.00844d77
pop ecx
pop ecx
jmp 0x86fe42
mov eax, dword [ebp - 0xa8]
mov edx, ebx
add eax, esi
mov ecx, edi
push eax
push esi
push dword [ebp - 8]
call fcn.00855062
add esp, 0xc
mov ecx, dword [ebp - 0x50]
inc esi
movsx eax, word [ebx + 0x2a]
add ecx, 0x10
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x50], ecx
cmp esi, eax
jl 0x86fdee
mov esi, dword [ebp - 0x7c]
cmp byte [ebp - 1], 0
jne 0x86fe78
cmp dword [ebp - 0x14], 0
jne 0x86fe78
push dword [ebp - 0x44]
mov ecx, edi
push dword [ebp - 0x10]
push 0x4b
pop edx
call fcn.00844d77
pop ecx
pop ecx
push dword [ebp + 0x10]
mov edx, dword [ebp - 0x34]
xor eax, eax
push ebx
inc eax
mov ecx, esi
push eax
push eax
push dword [ebp + 8]
call fcn.0086f2a7
mov edx, dword [ebp - 0x30]
add esp, 0x14
mov dword [ebp - 0x84], eax
xor ebx, ebx
xor eax, eax
cmp ax, word [edx + 0x2a]
jge 0x86ff44
movsx eax, word [edx + 0x28]
cmp ebx, eax
jne 0x86fec5
mov eax, dword [ebp - 0x40]
mov ecx, edi
add eax, ebx
push eax
push 0
push 0x46
pop edx
call fcn.00844d77
pop ecx
jmp 0x86ff33
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax + ebx*4]
test ecx, ecx
js 0x86fee8
mov eax, dword [ebp - 0x40]
imul edx, ecx, 0x18
add eax, ebx
push eax
mov eax, dword [ebp + 8]
mov ecx, esi
mov edx, dword [edx + eax + 4]
call fcn.0085600b
jmp 0x86ff33
mov eax, dword [ebp - 0x58]
xor ecx, ecx
inc ecx
and eax, ecx
mov dword [ebp - 0x54], eax
je 0x86ff08
cmp ebx, 0x1f
jg 0x86ff08
mov eax, ecx
mov ecx, ebx
shl eax, cl
test dword [ebp - 0x84], eax
je 0x86feb0
mov eax, dword [ebp - 0x40]
mov ecx, esi
add eax, ebx
push eax
push dword [ebp - 8]
push ebx
call fcn.008551a1
add esp, 0xc
cmp dword [ebp - 0x54], 0
je 0x86ff34
mov edx, dword [ebp - 0x40]
xor eax, eax
inc eax
mov ecx, esi
push eax
lea edx, [ebx + edx]
call fcn.00854f76
pop ecx
mov edx, dword [ebp - 0x30]
inc ebx
movsx eax, word [edx + 0x2a]
cmp ebx, eax
jl 0x86fea8
xor eax, eax
inc eax
test byte [ebp - 0x58], al
je 0x86fff8
push dword [ebp - 0x40]
mov ecx, edi
call fcn.0086216b
mov ebx, dword [ebp - 0x30]
xor eax, eax
mov edx, dword [ebp - 0x34]
inc eax
pop ecx
push dword [ebp - 0xc]
mov ecx, esi
push dword [ebp + 0x10]
push dword [ebp - 0x10]
push ebx
push eax
push dword [ebp + 8]
push 0x6f
call fcn.0086f253
add esp, 0x1c
mov ecx, edi
cmp dword [ebp - 0x14], 0
je 0x86ffa2
push dword [ebp - 0x9c]
push dword [ebp - 0x2c]
push dword [ebp - 0xc]
push dword [ebp - 8]
push 0x1d
pop edx
call fcn.00844f6e
add esp, 0x10
jmp 0x86ffb6
push dword [ebp - 0x10]
push dword [ebp - 0xc]
push dword [ebp - 8]
push 0x20
pop edx
call fcn.00844cf3
add esp, 0xc
mov edx, dword [ebp - 0x30]
xor eax, eax
xor ebx, ebx
cmp ax, word [edx + 0x2a]
jge 0x86fff8
mov esi, dword [ebp - 8]
mov eax, dword [ebp - 0x20]
cmp dword [eax + ebx*4], 0
jge 0x86ffec
movsx eax, word [edx + 0x28]
cmp ebx, eax
je 0x86ffec
mov eax, dword [ebp - 0x40]
mov ecx, edi
add eax, ebx
push eax
push ebx
push esi
call fcn.00855062
mov edx, dword [ebp - 0x30]
add esp, 0xc
movsx eax, word [edx + 0x2a]
inc ebx
cmp ebx, eax
jl 0x86ffc6
mov esi, dword [ebp - 0x7c]
cmp dword [ebp - 0x5c], 0
jne 0x870161
mov ebx, dword [ebp - 0x20]
lea eax, [ebp - 0x60]
push 0
push ebx
push eax
push dword [ebp - 0xc]
and dword [ebp - 0x58], 0
mov ecx, esi
push dword [ebp + 0x10]
push dword [ebp - 0x1c]
push dword [ebp - 0x10]
push dword [ebp - 0x44]
push dword [ebp - 0x80]
push dword [ebp - 8]
push dword [ebp - 0x94]
call fcn.0086329c
add esp, 0x2c
cmp dword [ebp - 0x24], 0
je 0x870058
push dword [ebp - 0xa0]
mov ecx, esi
push ebx
mov ebx, dword [ebp - 0x30]
mov edx, ebx
push 0
push dword [ebp - 0x10]
call fcn.008615a7
add esp, 0x10
jmp 0x87005b
mov ebx, dword [ebp - 0x30]
cmp dword [ebp - 0x60], 0
jne 0x870067
cmp byte [ebp - 0x1c], 0
je 0x8700a0
cmp dword [ebp - 0x14], 0
mov ecx, edi
je 0x87008a
push dword [ebp - 0x9c]
push dword [ebp - 0x2c]
push 0
push dword [ebp - 8]
push 0x1d
pop edx
call fcn.00844f6e
add esp, 0x10
jmp 0x87009d
push dword [ebp - 0x10]
push 0
push dword [ebp - 8]
push 0x20
pop edx
call fcn.00844cf3
add esp, 0xc
mov dword [ebp - 0x58], eax
push 0xffffffffffffffff
push dword [ebp - 0x94]
mov edx, ebx
mov ecx, esi
push dword [ebp - 0x80]
push dword [ebp - 8]
call fcn.0085ec71
xor eax, eax
add esp, 0x10
inc eax
cmp dword [ebp - 0x24], eax
jg 0x8700c9
mov al, byte [ebp - 0x1c]
test al, al
je 0x8700dd
push 0
push dword [ebp - 8]
mov ecx, edi
push 0x78
pop edx
call fcn.00844d77
mov al, byte [ebp - 0x1c]
pop ecx
pop ecx
cmp dword [ebp - 0x60], 0
jne 0x8700e7
test al, al
je 0x8700f1
mov edx, dword [ebp - 0x58]
mov ecx, edi
call fcn.00845298
cmp dword [ebp - 0x24], 0
je 0x870111
push dword [ebp - 0xa0]
mov edx, ebx
mov ecx, esi
push dword [ebp - 0x20]
push dword [ebp - 0x44]
push 0
call fcn.008615a7
add esp, 0x10
cmp dword [ebp - 0x18], 2
mov edx, ebx
push 0
push 0
push 4
pop eax
push 6
pop ecx
cmove eax, ecx
mov ecx, esi
push eax
push dword [ebp - 0x94]
push dword [ebp - 0x44]
push dword [ebp - 0x80]
push dword [ebp - 8]
call fcn.00863d0b
add esp, 0x1c
cmp dword [ebp - 0x24], 0
je 0x870164
push dword [ebp - 0xa0]
mov edx, ebx
mov ecx, esi
push dword [ebp - 0x20]
push dword [ebp - 0x10]
push dword [ebp + 8]
call fcn.00861f35
add esp, 0x10
jmp 0x870164
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebp - 0xa4]
test eax, eax
je 0x87017f
xor ecx, ecx
inc ecx
push ecx
push eax
push 0x50
pop edx
mov ecx, edi
call fcn.00844d77
pop ecx
pop ecx
push dword [ebp - 0xc]
mov edx, dword [ebp - 0x34]
mov ecx, esi
push dword [ebp + 0x10]
push dword [ebp - 0x10]
push ebx
push 2
push dword [ebp + 8]
push 0x6f
call fcn.0086f253
mov eax, dword [ebp - 0x18]
xor ebx, ebx
inc ebx
add esp, 0x1c
cmp eax, ebx
je 0x8701e7
mov edx, dword [ebp - 0xc]
mov ecx, edi
cmp eax, 2
jne 0x8701c0
call fcn.00844fff
mov ecx, dword [ebp - 0x48]
call fcn.0087a027
jmp 0x8701e7
cmp dword [ebp - 0x14], 0
je 0x8701e2
call fcn.00844fff
push dword [ebp - 0xac]
mov ecx, edi
push dword [ebp - 0x64]
push 7
pop edx
call fcn.00844d77
pop ecx
pop ecx
jmp 0x8701e7
call fcn.00844d8c
mov edx, dword [ebp - 0x28]
mov ecx, edi
call fcn.00844fff
cmp byte [esi + 0x12], 0
jne 0x87020a
cmp dword [esi + 0x7c], 0
jne 0x87020a
cmp dword [ebp + 0x1c], 0
jne 0x87020a
mov ecx, esi
call fcn.008624fc
mov eax, dword [ebp - 0xa4]
test eax, eax
je 0x87023e
push ebx
push eax
push 0x4e
pop edx
mov ecx, edi
call fcn.00844d77
mov edx, ebx
mov ecx, edi
call fcn.008460e2
push 0
push 0x4a69cc
push 0
xor edx, edx
mov ecx, edi
call fcn.0084614a
add esp, 0x14
lea ecx, [ebp - 0xb4]
call fcn.008594e3
mov esi, dword [ebp - 0x6c]
mov ecx, esi
mov edx, dword [ebp - 0x20]
call fcn.0082d90a
mov edx, dword [ebp - 0x68]
mov ecx, esi
call fcn.0085d0b4
mov edx, dword [ebp + 8]
mov ecx, esi
call fcn.008539d0
mov edx, dword [ebp + 0xc]
mov ecx, esi
call fcn.00852fd7
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret