Function at 0x81b731
Capabilities:
Authenticate hmac
Encode data using base64
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x16c
mov eax, dword [ebp + 8]
push ebx
xor ebx, ebx
mov dword [ebp - 0x124], ecx
mov ecx, dword [ecx]
push esi
mov esi, dword [eax]
mov eax, ecx
and eax, 0x800
mov dword [ebp - 0xc], 1
mov dword [ebp - 0x5c], eax
push edi
push ebx
pop eax
setne al
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x78], eax
mov eax, ecx
shr eax, 9
and eax, 1
mov dword [ebp - 0x13c], edx
mov edx, dword [edx]
mov dword [ebp - 0xf8], eax
xor eax, 1
and ecx, dword [ebp - 0xc]
mov dword [ebp - 0xfc], eax
push 0xfffffffffffffffe
pop eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x58], eax
mov eax, ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 8], edx
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 4], esi
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x98], 0xff
mov dword [ebp - 0x110], 0xfc00
mov dword [ebp - 0x114], 0xdc00
mov dword [ebp - 0x12c], 0x7b
mov dword [ebp - 0x120], 0x3a
mov dword [ebp - 0x140], 0x87
mov dword [ebp - 0x90], 0x30
mov dword [ebp - 0xb4], 0x39
mov dword [ebp - 0x128], 0x27
mov dword [ebp - 0x118], 0x1e
mov dword [ebp - 0x11c], 0x82
mov dword [ebp - 0x138], 0x5d
jmp 0x81b9de
mov eax, ebx
sub eax, 0x5b
je 0x81bde0
sub eax, 1
je 0x81c3e6
sub eax, 1
je 0x85a25e
sub eax, 1
je 0x85a233
sub eax, 0x1d
je 0x8595e3
sub eax, 1
je 0x81bbca
cmp dword [ebp - 0x5c], 0
mov ecx, dword [ebp - 0xc]
mov edi, ecx
mov word [ebp - 0x10c], bx
je 0x81b8cd
mov eax, 0xfc00
and ebx, eax
mov eax, 0xd800
cmp ebx, eax
je 0x85a284
push 2
pop esi
mov ebx, dword [ebp + 0x28]
mov dword [ebp - 0x28], edx
mov eax, dword [ebx + 0x20]
sub eax, dword [ebx + 0x10]
sar eax, 1
cmp dword [ebp - 0x5c], 0
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x2c]
je 0x81b93f
test cl, al
je 0x81b93f
movzx ecx, word [ebp - 0x10c]
mov edx, 0xfc00
mov eax, ecx
and eax, edx
mov edx, 0xd800
cmp eax, edx
je 0x85b521
mov eax, ecx
mov ecx, 0x80
cdq
idiv ecx
movzx eax, byte [eax + 0x8bff40]
shl eax, 7
add eax, edx
mov edx, dword [ebp - 8]
movzx eax, word [eax*2 + 0x8b1c40]
movzx eax, byte [eax*8 + 0x8af3f3]
test eax, eax
jne 0x81bdb6
mov eax, dword [ebp - 0x2c]
and eax, dword [ebp - 0xc]
push 0x1d
pop ecx
add eax, ecx
mov word [edx], ax
add edx, esi
xor eax, eax
mov dword [ebp - 8], edx
mov ecx, eax
test edi, edi
je 0x81b96c
mov ax, word [ebp + ecx*2 - 0x10c]
mov word [edx], ax
add edx, esi
inc ecx
cmp ecx, edi
jb 0x81b957
mov dword [ebp - 8], edx
mov ax, word [ebp - 0x10c]
push 0xd
pop ecx
cmp ax, cx
je 0x85b54d
push 0xa
pop ecx
cmp ax, cx
je 0x85b54d
mov ecx, dword [ebp - 0x34]
cmp ecx, 0xfffffffe
je 0x81c4f4
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x68], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x70], eax
cmp edi, dword [ebp - 0xc]
jne 0x85b582
movzx eax, word [edx - 2]
mov dword [ebp - 0x60], eax
mov eax, dword [ebx + 0x68]
or eax, ecx
mov dword [ebp - 0x54], eax
mov esi, dword [ebp - 4]
mov edx, dword [ebp - 8]
push 2
pop eax
add esi, eax
mov dword [ebp - 4], esi
mov eax, dword [ebp - 0x50]
movzx ebx, word [esi]
mov dword [ebp - 0x10], ebx
test ebx, ebx
je 0x81bc31
cmp dword [ebp + 0x2c], 0
mov edi, dword [ebp + 0x28]
mov ecx, dword [edi + 0x3c]
mov eax, dword [edi + 0x10]
lea ecx, [eax + ecx*2]
je 0x81bbbc
lea eax, [ecx - 0xc8]
cmp edx, eax
ja 0x85b6e4
mov eax, dword [ebp - 0xc0]
cmp edx, eax
jb 0x8587c9
mov ecx, edx
sub ecx, eax
mov eax, dword [ebp + 0x2c]
sar ecx, 1
mov edx, dword [eax]
mov eax, 0x7fffffeb
sub eax, edx
cmp eax, ecx
jl 0x85b80b
lea eax, [edx + ecx]
mov ecx, dword [ebp + 0x2c]
mov edx, dword [ebp - 0x28]
mov dword [ecx], eax
test edx, edx
je 0x81bc23
mov ecx, dword [ebp - 0xb0]
cmp edx, ecx
jbe 0x81ba85
mov esi, dword [ebp - 8]
mov eax, esi
sub eax, edx
and eax, 0xfffffffe
push eax
push edx
push ecx
call fcn.00822720
mov edx, dword [ebp - 0x28]
add esp, 0xc
mov ecx, dword [ebp - 0xb0]
sub edx, ecx
sar edx, 1
neg edx
mov dword [ebp - 0x28], ecx
lea esi, [esi + edx*2]
mov dword [ebp - 8], esi
mov esi, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov dword [ebp - 0xc0], edx
test ebx, ebx
je 0x81baaf
push 0x5c
pop ecx
cmp ebx, ecx
je 0x81c07b
cmp dword [ebp - 0x64], 0
jne 0x8587e8
cmp ebx, ecx
je 0x81c090
mov edi, dword [ebp - 0x2c]
and edi, 8
mov dword [ebp - 0x30], edi
jne 0x858855
push 0x28
pop eax
cmp ebx, eax
je 0x81bc3e
push 0x2a
pop eax
cmp ebx, eax
je 0x81c0a2
push 0x2b
pop eax
cmp ebx, eax
je 0x81c0a2
push 0x3f
pop eax
cmp ebx, eax
je 0x81c0a2
push 0x7b
pop eax
cmp ebx, eax
je 0x85899d
mov edx, dword [ebp - 0x88]
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x50]
test edx, edx
jne 0x8589b5
test dword [ebp - 0x2c], 0x4000
jne 0x8589f6
mov edx, dword [ebp - 8]
push 0x3f
pop eax
cmp ebx, eax
ja 0x81b86f
je 0x8595d7
mov eax, ebx
xor ecx, ecx
sub eax, ecx
je 0x81bbca
sub eax, 0x24
je 0x8595c2
sub eax, 4
je 0x81bc5d
sub eax, 1
je 0x81bbca
sub eax, 1
je 0x81c0ad
sub eax, 1
je 0x858a44
sub eax, 3
jne 0x81b8a7
mov ecx, dword [ebp - 0x34]
cmp ecx, 0xfffffffe
jne 0x81bb77
or ecx, 0xffffffff
mov dword [ebp - 0x34], ecx
mov ebx, dword [ebp + 0x28]
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x70], eax
mov eax, dword [ebx + 0x20]
sub eax, dword [ebx + 0x10]
sar eax, 1
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x2c]
shr eax, 2
and eax, dword [ebp - 0xc]
mov dword [ebp - 0x68], ecx
or eax, 0xc
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x28], edx
mov word [edx], ax
push 2
pop eax
add edx, eax
mov dword [ebp - 8], edx
jmp 0x81b9cd
cmp dword [edi + 0x20], ecx
jbe 0x81ba8e
jmp 0x85b8b5
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp - 0x34]
mov dword [eax], ecx
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp - 0x60]
mov dword [eax], ecx
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp - 0x54]
mov dword [eax], ecx
mov eax, dword [ebp - 0x13c]
mov dword [eax], edx
mov eax, dword [ebp + 8]
mov dword [eax], esi
mov eax, dword [ebp + 0x2c]
test eax, eax
je 0x81bc1b
sub edx, dword [ebp - 0xc0]
mov ebx, 0x7fffffeb
mov ecx, dword [eax]
sub ebx, ecx
sar edx, 1
cmp ebx, edx
jl 0x85b80b
add ecx, edx
mov dword [eax], ecx
mov eax, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
leave
ret
mov edx, dword [ebp - 0xb0]
mov dword [ebp - 8], edx
jmp 0x81ba88
test eax, eax
je 0x81b9ec
jmp 0x8587b4
push 0x3f
pop eax
cmp word [esi + 2], ax
jne 0x81baf5
push 0x23
pop eax
cmp word [esi + 4], ax
jne 0x81baf5
jmp 0x858958
add esi, 2
push 0x2a
mov dword [ebp - 4], esi
pop eax
movzx edx, word [esi]
cmp dx, ax
je 0x858a4c
mov eax, dword [ebp - 0x2c]
mov ecx, 0x85
mov dword [ebp - 0x24], ecx
xor edi, edi
mov ecx, dword [ebp + 0x28]
mov ebx, edi
mov dword [ebp - 0x3c], eax
push 0x3f
mov dword [ebp - 0x18], ebx
mov eax, dword [ecx + 0x20]
sub eax, dword [ecx + 0x10]
sar eax, 1
mov dword [ebp - 0x40], eax
pop eax
mov dword [ebp - 0x30], edi
cmp dx, ax
jne 0x81c23d
add esi, 2
mov dword [ebp - 4], esi
push 0x3a
pop edx
movzx ebx, word [esi]
mov eax, ebx
cmp eax, edx
jbe 0x858ccd
mov edx, esi
mov edi, ebx
mov dword [ebp - 0x1c], edx
sub eax, 0x3c
je 0x8593a9
sub eax, 1
je 0x85926b
sub eax, 1
je 0x85939f
sub eax, 5
je 0x8592f5
push 0xd
pop ebx
sub eax, ebx
je 0x8592ac
push 2
pop ebx
sub eax, ebx
je 0x85928f
push 0x2a
pop ebx
sub eax, ebx
je 0x85925b
xor ecx, ecx
push 0x29
mov eax, ecx
mov dword [ebp - 0x30], ecx
pop ebx
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x30]
cmp di, bx
je 0x85a527
mov ebx, edx
movzx eax, di
cmp di, word [ebp - 0x120]
je 0x81bd63
lea esi, [edx + 2]
movzx edi, di
push 0x69
pop edx
mov dword [ebp - 4], esi
cmp ax, dx
ja 0x85a4f7
jne 0x85a4ac
mov eax, dword [ebp - 0xc]
or dword [ecx], eax
movzx eax, word [esi]
mov ebx, esi
push 0x29
mov dword [ebp - 0x1c], ebx
mov edx, ebx
pop ebx
mov edi, eax
cmp ax, bx
jne 0x81bd1f
mov ebx, esi
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
or ecx, dword [ebp - 0x2c]
not eax
and ecx, eax
push 0x29
pop eax
mov dword [ebp - 0x3c], ecx
cmp word [esi], ax
jne 0x859202
mov edx, dword [ebp - 0xc]
mov eax, ecx
shr eax, 9
and eax, edx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0xf8], eax
xor eax, edx
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0x124]
mov dword [eax], ecx
xor eax, eax
mov dword [ebp - 0x28], eax
mov eax, ecx
and eax, edx
mov dword [ebp - 0x94], eax
jmp 0x81b9d0
push 0x10
pop ecx
mov word [edx], cx
add edx, esi
push 9
pop ecx
mov word [edx], cx
add edx, esi
mov word [edx], ax
add edx, esi
cmp dword [ebp - 0x34], 0xfffffffe
mov dword [ebp - 8], edx
je 0x85b540
mov esi, dword [ebp - 4]
jmp 0x81b9d3
push 6
lea ecx, [esi + 2]
mov edx, str._:_:__
call fcn.0081c609
pop ecx
test eax, eax
je 0x85aba8
mov ecx, dword [ebp - 4]
mov edx, 0x89cc70
push 6
lea ecx, [ecx + 2]
call fcn.0081c609
pop ecx
test eax, eax
je 0x85abaf
mov edx, dword [ebp + 0x28]
mov ecx, dword [ebp - 4]
mov ebx, dword [ebp - 8]
push 0x3a
mov eax, dword [edx + 0x20]
sub eax, dword [edx + 0x10]
sar eax, 1
mov dword [ebp - 0x40], eax
movzx eax, word [ecx + 2]
pop edi
mov dword [ebp - 0x28], ebx
cmp ax, di
je 0x85abc8
push 0x2e
pop edx
cmp ax, dx
je 0x85abc8
push 0x3d
pop edx
cmp ax, dx
je 0x85abc8
xor esi, esi
push 0x5c
mov eax, esi
pop edx
mov dword [ebp - 0x10], eax
add ecx, 2
mov dword [ebp - 4], ecx
movzx edi, word [ecx]
mov dword [ebp - 0x14], edi
cmp edi, edx
je 0x85abe0
test eax, eax
jne 0x81be7d
cmp edi, 0x5e
je 0x85ac1a
push 0x5d
pop ecx
cmp edi, ecx
je 0x85ac22
lea eax, [ebx + 6]
mov dword [ebp - 0x38], esi
push 0x20
mov dword [ebp - 0x18], eax
mov ebx, esi
mov dword [ebp - 0x20], eax
pop eax
push eax
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x70], esi
push esi
push eax
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x3c], esi
call fcn.00822340
mov esi, dword [ebp - 4]
add esp, 0xc
test edi, edi
je 0x85b428
mov edx, ebx
cmp dword [ebp - 0x5c], 0
mov dword [ebp - 0x80], ebx
mov ebx, edx
mov dword [ebp - 0x30], edx
je 0x81bee5
mov eax, edi
mov ecx, 0xfc00
and eax, ecx
cmp eax, 0xd800
je 0x85ac6a
mov ecx, dword [ebp - 0x18]
cmp dword [ebp - 0x20], ecx
ja 0x85aca6
cmp dword [ebp + 0x2c], 0
je 0x81bf02
mov eax, dword [ebp - 0x20]
cmp eax, ecx
ja 0x85acb1
cmp dword [ebp - 0x64], 0
jne 0x85acc5
cmp edi, 0x5b
je 0x85aced
push 0x5c
pop ecx
cmp edi, ecx
je 0x85af61
xor edx, edx
mov ecx, dword [ebp + 0x28]
mov ebx, dword [ebp - 0x2c]
push 0x5c
pop eax
cmp word [esi + 2], ax
je 0x85b231
push 0xd
pop eax
mov edx, esi
cmp edi, eax
je 0x85b25a
push 0xa
pop eax
cmp edi, eax
je 0x85b25a
mov ecx, dword [ebp - 0x64]
test ecx, ecx
jne 0x81bf61
push 0x2d
pop eax
cmp word [esi + 2], ax
je 0x85b266
mov eax, dword [ebp - 0x80]
mov ebx, eax
push 2
pop edx
mov dword [ebp - 0x1c], eax
cmp eax, edx
jl 0x81c070
test ecx, ecx
jne 0x81bf88
cmp dword [ebp - 0x3c], ecx
jne 0x81bf88
mov ecx, dword [ebp - 0xc]
cmp ebx, ecx
je 0x81c4e2
push edi
push edi
push dword [ebp + 0x28]
push dword [ebp - 0x2c]
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0xe0]
call fcn.0081c574
mov edx, eax
add esp, 0x10
add edx, dword [ebp - 0x30]
mov esi, dword [ebp - 4]
mov dword [ebp - 0x24], edx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x50]
push 2
pop edi
add esi, edi
mov dword [ebp - 4], esi
movzx edi, word [esi]
mov dword [ebp - 0x14], edi
test edi, edi
je 0x85b409
push 0x5d
pop eax
cmp edi, eax
jne 0x81bec3
cmp dword [ebp - 0x64], 0
jne 0x81bec3
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x20], ecx
ja 0x81bfe8
mov eax, dword [ebp - 0x70]
mov edi, dword [ebp - 0x34]
cmp edi, 0xfffffffe
jne 0x81bff6
or edi, 0xffffffff
mov dword [ebp - 0x34], edi
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0x7c], edx
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x84], edx
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x70], edx
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x68], edi
test eax, eax
jne 0x85b58f
mov ebx, dword [ebp + 0x2c]
test ebx, ebx
je 0x81c029
mov eax, dword [ebp - 0x20]
sub eax, ecx
sar eax, 1
add dword [ebx], eax
mov esi, dword [ebp - 0x10]
xor eax, eax
cmp esi, edx
mov edx, dword [ebp - 8]
push 0x6e
setne al
pop ecx
add eax, ecx
mov word [edx], ax
push 2
pop eax
add edx, eax
mov dword [ebp - 8], edx
test ebx, ebx
jne 0x81c069
test esi, esi
jne 0x85b6ce
push 0x20
pop eax
push eax
lea eax, [ebp - 0xe0]
push eax
push edx
call fcn.00820e20
mov edx, dword [ebp - 8]
add esp, 0xc
push 0x20
jmp 0x81bbb1
lea ebx, [eax + 1]
mov dword [ebp - 0x1c], ebx
jmp 0x81bf74
push 0x45
pop ecx
cmp word [esi + 2], cx
push 0x5c
pop ecx
jne 0x81ba9d
jmp 0x8587d3
push 0x51
pop ecx
cmp word [esi + 2], cx
jne 0x81baaf
jmp 0x8587da
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x50]
jmp 0x81bb0a
or eax, 0xffffffff
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x44], eax
mov edx, dword [ebp - 0x28]
test edx, edx
je 0x85b7d4
test ecx, ecx
jne 0x81c0e3
mov ebx, dword [ebp - 0x7c]
mov dword [ebp - 0x6c], ebx
mov ebx, dword [ebp - 0x68]
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x84]
mov dword [ebp - 0x60], ebx
mov ebx, dword [ebp - 0x70]
mov dword [ebp - 0x54], ebx
sub ecx, eax
mov dword [ebp - 0x48], edx
neg ecx
push 2
sbb ecx, ecx
xor ebx, ebx
pop eax
and ecx, eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x80], ecx
test edi, edi
jne 0x85961a
push 0x23
pop eax
push 0x28
pop ecx
push 0x3f
pop edx
cmp word [esi + 2], cx
je 0x859716
lea ecx, [esi + 2]
movzx eax, word [ecx]
push 0x2b
pop edi
cmp ax, di
je 0x85976b
cmp ax, dx
jne 0x859776
mov ebx, dword [ebp - 0xfc]
mov esi, ecx
mov dword [ebp - 4], esi
mov edx, dword [ebp - 0x28]
push 0x75
pop eax
mov dword [ebp - 0x24], ebx
cmp word [edx], ax
je 0x859781
mov edi, dword [ebp - 8]
movzx ecx, word [edx]
push 0x1d
pop eax
cmp cx, ax
je 0x859ea1
push 0x1e
pop eax
cmp cx, ax
je 0x859ea1
push 0x1f
pop eax
cmp cx, ax
je 0x859ea1
push 0x20
pop eax
cmp cx, ax
je 0x859ea1
cmp ecx, 0x17
jae 0x85980a
push 0x34
mov edi, ecx
pop ebx
mov dword [ebp - 0x18], edi
mov eax, ecx
push 0x10
pop ecx
cmp ax, cx
je 0x859f50
push 0xf
pop ecx
cmp ax, cx
je 0x859f50
or dword [ebp - 0x10], 0xffffffff
lea edi, [edx + 2]
or dword [ebp - 0x14], 0xffffffff
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 8]
mov dword [ebp - 8], edx
test eax, eax
je 0x81c22a
mov edx, dword [ebp - 0x24]
add edx, ebx
cmp dword [ebp - 0x4c], 0
mov dword [ebp - 0x30], edx
jne 0x859f97
mov ecx, dword [ebp - 0x44]
movzx eax, dx
cmp ecx, 0xffffffff
jne 0x859f65
mov ecx, dword [ebp - 0x28]
add eax, 0x21
push 2
mov word [ecx], ax
pop ecx
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x14]
cmp dword [ebp - 0x5c], 0
je 0x81c20a
test ebx, 0x10000000
jne 0x85a0c0
mov word [edi], bx
mov ebx, ecx
lea edx, [ebx + edi]
mov dword [ebp - 8], edx
test esi, esi
jns 0x859e8b
mov esi, dword [ebp - 4]
cmp dword [ebp - 0x1c], 0
jne 0x85a0de
mov ecx, dword [ebp + 0x28]
xor eax, eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x80]
or dword [ecx + 0x68], eax
jmp 0x81b9d0
test dword [ebp - 0x2c], 0x1000
jne 0x8595b2
mov edx, dword [ebp - 8]
inc dword [ecx + 0x40]
mov ax, word [ecx + 0x40]
mov ebx, dword [ebp - 0xc]
mov word [edx + 4], ax
mov esi, dword [ebp - 4]
mov ecx, dword [ecx + 0x58]
mov edi, dword [ebp + 0x28]
lea eax, [ecx + 1]
mov dword [edi + 0x58], eax
mov edi, dword [ebp - 0x24]
cmp ecx, 0xfa
jge 0x85b827
mov eax, 0x80
cmp edi, eax
mov eax, dword [ebp + 0x28]
jbe 0x85a53f
mov ecx, dword [eax + 0x20]
sub ecx, dword [eax + 0x10]
sar ecx, 1
mov dword [ebp - 0x40], ecx
xor ecx, ecx
mov dword [ebp - 0x28], edx
mov word [edx], di
mov edi, dword [eax + 0x68]
mov esi, dword [eax + 0x40]
mov eax, dword [ebp + 0x2c]
neg eax
mov dword [ebp - 0x8c], ecx
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x48], edx
sbb eax, eax
mov dword [ebp - 0x80], edi
and eax, ecx
xor edx, edx
mov ecx, dword [ebp - 0x24]
cmp ecx, 0x87
sete dl
cmp ecx, 0x7f
je 0x85a55b
cmp ecx, 0x80
je 0x85a55b
xor ecx, ecx
push eax
push dword [ebp + 0x28]
lea eax, [ebp - 0xa0]
push dword [ebp + 0x20]
push eax
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xe4]
push eax
mov eax, dword [ebp + 0x24]
add eax, edx
lea edx, [ebp - 0x48]
push eax
push ebx
push dword [ebp - 0x30]
lea eax, [ebp - 4]
push ecx
push dword [ebp + 0xc]
mov ecx, dword [ebp - 0x3c]
push eax
call fcn.0081b4ca
add esp, 0x34
test eax, eax
je 0x85b3ae
mov ecx, dword [ebp + 0x28]
mov eax, 0x81
mov ebx, dword [ebp - 0x24]
dec dword [ecx + 0x58]
cmp ebx, eax
je 0x85a563
mov eax, dword [ebp - 8]
mov edx, 0x80
cmp ebx, edx
jbe 0x85a57c
mov ecx, 0x87
cmp ebx, ecx
je 0x85a584
mov eax, dword [ebp - 0xa0]
mov esi, dword [ebp - 4]
push 0x29
pop edx
cmp word [esi], dx
jne 0x85b819
cmp dword [ebp + 0x2c], 0
jne 0x81c531
mov edx, dword [ebp - 0x48]
mov dword [ebp - 8], edx
cmp ebx, 0x91
je 0x81b9d3
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x84], ecx
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x70], ecx
mov ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x7c], ecx
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x68], ecx
xor ecx, ecx
mov dword [ebp - 0xa4], ecx
mov ecx, 0x81
cmp ebx, ecx
mov ecx, dword [ebp - 0x9c]
jb 0x85a638
cmp dword [ebp - 0x34], 0xfffffffe
je 0x85a5f1
test ecx, ecx
jns 0x85a619
test eax, eax
js 0x81b9d3
jmp 0x85a650
mov ebx, dword [ebp + 0xc]
lea edx, [ebp - 0xbc]
xor eax, eax
mov dword [ebp - 0x74], esi
mov esi, dword [ebp + 0x28]
lea ecx, [ebp - 4]
push eax
push dword [ebp - 0x2c]
push dword [esi + 0x40]
push ebx
call fcn.0081cb89
xor edx, edx
add esp, 0x10
mov edi, eax
cmp dword [ebx], edx
jne 0x85b3ae
test edi, edi
je 0x85a2b7
mov ecx, dword [ebp - 0x34]
cmp ecx, 0xfffffffe
jne 0x81c434
lea eax, [edi - 6]
cmp eax, 0x10
ja 0x81c434
or ecx, 0xffffffff
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x68], ecx
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x70], eax
cmp edi, 0x1b
je 0x85a306
cmp edi, 0x1c
je 0x85a680
test edi, edi
js 0x85aa60
push 0xf
pop eax
cmp edi, eax
je 0x85ab26
push 0x10
pop eax
cmp edi, eax
je 0x85ab26
mov ecx, dword [ebp - 0xc]
cmp edi, 5
je 0x85aadd
push 4
pop eax
cmp edi, eax
je 0x85aadd
cmp edi, ecx
je 0x85aadd
mov ebx, esi
push 0x1d
pop eax
cmp edi, eax
jge 0x85aaf0
push 0x10
pop ecx
lea eax, [edi - 6]
cmp ecx, eax
mov ecx, dword [ebx + 0x20]
sbb edx, edx
sub ecx, dword [ebx + 0x10]
not edx
sar ecx, 1
and edx, dword [ebp - 8]
cmp dword [ebp - 0x5c], 0
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x40], ecx
je 0x85ab13
mov edx, dword [ebp - 8]
push 2
pop esi
mov word [edx], di
add edx, esi
mov dword [ebp - 8], edx
jmp 0x81bdd8
push 0x5d
pop eax
cmp word [esi + 2], ax
jne 0x81bf88
jmp 0x85b436
mov ecx, dword [ebp - 0x60]
or dword [ebp - 0x68], 0xffffffff
mov dword [ebp - 0x84], ecx
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x70], ecx
mov ecx, dword [ebp - 0xc]
cmp edi, ecx
jne 0x85b559
movzx eax, ax
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x34], eax
cmp edi, ecx
jne 0x85b573
mov edx, dword [ebp - 8]
jmp 0x81bdd8
mov ebx, dword [ebp + 0x2c]
mov ecx, 0x7fffffeb
mov edi, dword [ebp - 0x8c]
mov edx, dword [ebx]
sub ecx, edx
lea eax, [edi - 4]
cmp ecx, eax
jl 0x85b80b
push 2
pop ecx
lea eax, [edi - 4]
add eax, edx
mov edx, dword [ebp - 8]
add edx, ecx
mov dword [ebx], eax
push 0x78
pop eax
mov word [edx], cx
add edx, ecx
mov word [edx], ax
add edx, ecx
mov word [edx], cx
add edx, ecx
jmp 0x81bbb4
mov esi, eax
xor eax, eax
mov dword [ebp - 4], esi
mov dword [ebp - 0x50], eax
movzx ebx, word [esi]
mov dword [ebp - 0x10], ebx
jmp 0x81b9ec
mov edx, eax
mov dword [ebp - 8], edx
jmp 0x81ba1e
xor ebx, ebx
mov dword [ebp - 0x64], ebx
jmp 0x8587e0
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x64], ecx
add esi, 2
jmp 0x81b9d3
mov eax, dword [ebp - 0x88]
test eax, eax
je 0x858810
cmp dword [ebp + 0x2c], 0
jne 0x858808
sub esi, dword [edi + 0x18]
sar esi, 1
sub si, word [eax + 4]
mov word [eax + 6], si
mov esi, dword [ebp - 4]
xor eax, eax
mov dword [ebp - 0x88], eax
test dword [ebp - 0x2c], 0x4000
je 0x85a27c
push 0x76
pop eax
mov word [edx], ax
mov ecx, 0xff
lea eax, [edx + 2]
mov dword [ebp - 0x88], edx
mov word [eax], cx
sub esi, dword [edi + 0x18]
push 2
pop ecx
add eax, ecx
sar esi, 1
xor ecx, ecx
lea edx, [eax + 4]
mov word [eax], si
mov word [eax + 2], cx
mov esi, dword [ebp - 4]
mov dword [ebp - 8], edx
jmp 0x81b8a7
mov ecx, esi
mov edx, 0xff
mov dword [ebp - 0x3c], ecx
mov eax, ecx
cmp ebx, edx
ja 0x85888b
mov eax, dword [ebp + 0x28]
mov edx, dword [eax + 0xc]
test byte [edx + ebx], 1
mov eax, ecx
je 0x858888
lea esi, [ecx + 2]
mov dword [ebp - 4], esi
mov ecx, esi
movzx ebx, word [esi]
mov eax, esi
cmp ebx, 0xff
jbe 0x85886b
mov dword [ebp - 0x10], ebx
push 0x23
pop ecx
cmp ebx, ecx
jne 0x8588e2
lea esi, [eax + 2]
mov dword [ebp - 4], esi
movzx eax, word [esi]
test ax, ax
je 0x8588e2
mov edi, esi
mov ebx, eax
mov eax, dword [ebp + 0x28]
mov edx, dword [eax + 0x84]
mov ecx, dword [eax + 0x1c]
test edx, edx
je 0x8588f3
cmp edi, ecx
jae 0x858920
push dword [ebp - 0x78]
lea edi, [eax + 0x88]
push edi
push ecx
mov ecx, esi
call fcn.00806cde
mov esi, dword [ebp - 4]
add esp, 0xc
test eax, eax
je 0x858920
mov edx, dword [edi]
lea esi, [esi + edx*2]
mov dword [ebp - 4], esi
mov edi, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
cmp esi, dword [ebp - 0x3c]
ja 0x81b9db
jmp 0x81babe
mov edx, dword [eax + 0x88]
lea eax, [edx + edx]
sub ecx, eax
cmp edi, ecx
ja 0x858920
mov ecx, dword [ebp + 0x28]
cmp bx, word [ecx + 0x8c]
jne 0x858920
cmp edx, dword [ebp - 0xc]
je 0x8588d6
mov ax, word [esi + 2]
cmp ax, word [ecx + 0x8e]
je 0x8588d6
add esi, 2
cmp dword [ebp - 0x5c], 0
mov dword [ebp - 4], esi
mov edi, esi
je 0x85894b
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x85894b
add esi, 2
mov dword [ebp - 4], esi
mov edi, esi
movzx eax, word [esi]
test ax, ax
je 0x8588dc
jmp 0x8588a2
add esi, 6
mov dword [ebp - 4], esi
movzx eax, word [esi]
test ax, ax
je 0x85898f
mov edx, esi
mov ecx, eax
push 0x29
pop eax
cmp cx, ax
je 0x858984
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edx, esi
movzx eax, word [esi]
mov ecx, eax
test ax, ax
jne 0x85896a
xor ecx, ecx
cmp word [esi], cx
jne 0x81b9d0
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x12
jmp 0x85b8be
lea ecx, [esi + 2]
call fcn.0089b079
mov esi, dword [ebp - 4]
test eax, eax
jne 0x81c0a2
jmp 0x81baf5
test eax, eax
jne 0x81bb0a
mov eax, dword [ebp - 0xac]
dec dword [ebp - 0xac]
test eax, eax
jg 0x81c0a5
cmp dword [ebp + 0x2c], ecx
jne 0x8589e9
mov eax, dword [ebp + 0x28]
sub esi, dword [eax + 0x18]
sar esi, 1
sub si, word [edx + 4]
mov word [edx + 6], si
mov esi, dword [ebp - 4]
xor eax, eax
mov dword [ebp - 0x88], eax
jmp 0x81c0a5
test ecx, ecx
jne 0x81bb17
test eax, eax
jne 0x81bb17
mov eax, dword [ebp - 8]
push 0x76
pop edx
mov dword [ebp - 0x88], eax
mov word [eax], dx
add eax, 2
mov edx, 0xff
push 2
mov word [eax], dx
pop edx
add eax, edx
mov edx, dword [ebp + 0x28]
sub esi, dword [edx + 0x18]
sar esi, 1
xor edx, edx
mov word [eax + 2], dx
lea edx, [eax + 4]
mov word [eax], si
mov esi, dword [ebp - 4]
mov dword [ebp - 8], edx
jmp 0x81bb1a
mov ecx, dword [ebp - 0xc]
jmp 0x81c0ad
movzx eax, word [esi + 2]
push 0x3a
pop ecx
cmp ax, cx
je 0x858a7a
mov ecx, 0xff
cmp ax, cx
ja 0x81bc72
mov edi, dword [ebp + 0x28]
mov ecx, eax
mov eax, dword [edi + 0xc]
test byte [ecx + eax], 2
je 0x81bc72
jmp 0x858a7d
mov edi, dword [ebp + 0x28]
add esi, 2
mov dword [ebp - 0x3c], 0x8c4f10
xor eax, eax
mov dword [ebp - 4], esi
mov ebx, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x28], eax
mov edx, 0xff
movzx eax, word [esi]
mov ecx, esi
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x38], esi
cmp ax, dx
ja 0x858ad6
mov ebx, dword [edi + 0xc]
mov edx, eax
mov edi, esi
movzx eax, dx
mov ecx, edi
test byte [eax + ebx], 2
je 0x858ad3
lea esi, [edi + 2]
mov dword [ebp - 4], esi
mov edi, esi
movzx eax, word [esi]
mov ecx, esi
mov edx, eax
cmp ax, word [ebp - 0x98]
jbe 0x858ab0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x38]
mov edi, ecx
sub edi, eax
push 0x3a
sar edi, 1
pop edx
mov dword [ebp - 0x30], edi
cmp word [esi], dx
jne 0x858b39
lea edx, [ecx + 2]
mov esi, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 4], esi
mov ebx, edx
movzx eax, word [esi]
test ax, ax
je 0x858b25
push 0x29
mov ecx, eax
pop edi
mov ebx, edx
cmp cx, di
je 0x858b1f
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edx, esi
movzx eax, word [esi]
mov ebx, esi
mov ecx, eax
test ax, ax
jne 0x858b04
mov edi, dword [ebp - 0x30]
mov edx, dword [ebp - 0x14]
sub ebx, edx
mov eax, 0xffff
sar ebx, 1
cmp ebx, eax
ja 0x85b711
mov eax, dword [ebp - 0x38]
push 0x29
pop ecx
cmp word [esi], cx
jne 0x858cc6
xor ecx, ecx
mov esi, 0x8c4df0
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x3c]
cmp edi, dword [esi]
jne 0x858b68
mov edx, ecx
mov ecx, eax
push edi
call fcn.0081c609
pop ecx
test eax, eax
je 0x858b85
mov ecx, dword [ebp - 0x3c]
inc ecx
add ecx, dword [esi]
add esi, 0xc
inc dword [ebp - 0x10]
mov dword [ebp - 0x3c], ecx
cmp esi, 0x8c4e5c
jge 0x858cb7
mov eax, dword [ebp - 0x38]
jmp 0x858b52
imul eax, dword [ebp - 0x10], 0xc
mov edi, 0x9e
mov ecx, dword [eax + 0x8c4df4]
cmp ecx, edi
jne 0x858c09
test ebx, ebx
jne 0x85b72d
mov esi, dword [ebp + 0x28]
mov eax, dword [ebp - 0xc]
mov ecx, dword [esi + 0x24]
mov dword [esi + 0x6c], eax
test ecx, ecx
je 0x858be4
mov eax, dword [ebp + 0x2c]
push 2
pop esi
test eax, eax
je 0x858bbf
add dword [eax], 3
jmp 0x858bdb
mov edx, dword [ebp - 8]
mov eax, 0xa0
mov word [edx], ax
add edx, esi
mov ax, word [ecx + 4]
mov word [edx], ax
add edx, esi
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 8], edx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x858bb6
mov esi, dword [ebp + 0x28]
mov ebx, dword [ebp - 8]
xor eax, eax
xor ecx, ecx
cmp dword [esi + 0x5c], ecx
setg al
add eax, edi
cmp dword [ebp - 0x34], 0xfffffffe
movzx eax, ax
mov ecx, eax
mov word [ebx], ax
jne 0x858c05
or dword [ebp - 0x34], 0xffffffff
mov eax, ecx
jmp 0x858c7b
test ebx, ebx
jne 0x858c20
test ecx, ecx
js 0x85b71f
mov ebx, dword [ebp - 8]
movzx eax, cx
mov word [ebx], ax
jmp 0x858c78
xor ecx, ecx
cmp dword [eax + 0x8c4df8], ecx
jl 0x85b72d
mov ecx, dword [ebp - 8]
movzx eax, word [eax + 0x8c4df8]
mov edx, dword [ebp + 0x2c]
mov edi, eax
push 2
mov word [ecx], ax
pop eax
add ecx, eax
lea eax, [ecx + 2]
test edx, edx
je 0x858c57
add dword [edx], ebx
xor edx, edx
mov word [ecx], dx
mov ebx, eax
jmp 0x858c71
lea esi, [ebx + ebx]
mov word [ecx], bx
push esi
push dword [ebp - 0x14]
mov ebx, eax
mov dword [ebp - 8], eax
push ebx
call fcn.00820e20
add esp, 0xc
add ebx, esi
xor eax, eax
mov word [ebx], ax
mov eax, edi
mov esi, dword [ebp + 0x28]
add ebx, 2
movzx eax, ax
mov edx, 0x96
mov dword [ebp - 8], ebx
mov ecx, ebx
cmp ax, dx
jb 0x858cb7
add edx, 3
mov dword [ebp - 8], ecx
cmp ax, dx
jbe 0x858cb1
mov edx, 0x9b
cmp ax, dx
ja 0x858cb7
or dword [esi + 0x64], 0x1000
mov dword [ebp - 8], ecx
jmp 0x858cb7
mov eax, dword [ebp - 0xc]
mov dword [esi + 0x70], eax
mov esi, dword [ebp - 4]
push 9
pop eax
cmp dword [ebp - 0x10], eax
jl 0x81b9d0
push 0x3c
jmp 0x85b88f
je 0x859264
push 0x28
pop edx
cmp eax, edx
ja 0x859222
mov edx, esi
je 0x858d7e
push 0x21
pop ecx
mov dword [ebp - 0x1c], esi
mov edi, ebx
sub eax, ecx
je 0x858d10
sub eax, 5
je 0x858d05
sub eax, 1
jne 0x85a4a4
jmp 0x8593ea
push 0x29
pop eax
mov dword [ebp - 0x14], eax
jmp 0x85a35a
lea ecx, [esi + 2]
mov esi, ecx
push 0x29
pop eax
mov dword [ebp - 4], esi
cmp word [esi], ax
jne 0x858d53
movzx eax, word [esi + 2]
push 0x2a
pop ebx
cmp ax, bx
je 0x858d53
push 0x2b
pop edx
cmp ax, dx
je 0x858d53
push 0x3f
pop edx
cmp ax, dx
je 0x858d53
push 0x7b
pop edx
cmp ax, dx
jne 0x858d64
add ecx, 4
call fcn.0089b079
test eax, eax
je 0x858d64
mov esi, dword [ebp - 4]
mov ecx, dword [ebp + 0x28]
push 0x7e
pop edi
mov dword [ebp - 0x24], edi
inc dword [ecx + 0x5c]
jmp 0x85a534
mov edx, dword [ebp - 8]
mov eax, 0x9d
push 2
mov word [edx], ax
pop eax
add edx, eax
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x81c4da
push 0x3f
pop eax
mov edi, 0x87
mov dword [ebp - 0x74], edx
mov dword [ebp - 0x24], edi
cmp word [esi + 2], ax
jne 0x858dde
push 0x43
pop ebx
cmp word [esi + 4], bx
jne 0x858dde
movzx eax, word [esi + 6]
push 3
pop ecx
push 0x30
pop ebx
jmp 0x858db5
cmp ax, word [ebp - 0xb4]
ja 0x858dba
inc ecx
movzx eax, word [esi + ecx*2]
cmp ax, bx
jae 0x858da7
push 0x29
pop eax
cmp word [esi + ecx*2], ax
jne 0x858dcc
lea edx, [ecx + 1]
lea edx, [esi + edx*2]
mov dword [ebp - 0x74], edx
push 0x28
pop eax
cmp word [edx], ax
jne 0x85b73b
mov ecx, dword [ebp + 0x28]
push 0x3f
pop eax
cmp word [edx + 2], ax
jne 0x858e22
movzx eax, word [edx + 4]
push 0x3d
pop ebx
cmp ax, bx
je 0x858e14
push 0x21
pop ebx
cmp ax, bx
je 0x858e14
push 0x3c
pop ebx
cmp ax, bx
jne 0x858e22
movzx eax, word [edx + 6]
push 0x3d
pop edx
cmp ax, dx
je 0x858e14
push 0x21
pop edx
cmp ax, dx
jne 0x858e22
mov eax, dword [ebp - 0xc]
mov dword [ecx + 0x80], eax
jmp 0x85a534
mov edi, dword [ebp - 8]
mov eax, 0x8d
push 2
or ebx, 0xffffffff
or dword [ebp - 0x14], ebx
mov edx, ebx
mov word [edi + 4], ax
mov esi, dword [ebp - 4]
pop eax
add esi, 2
mov dword [ebp - 0x18], eax
xor eax, eax
mov dword [ebp - 0x38], ebx
mov ebx, eax
mov dword [ebp - 0x10], eax
push 0x52
mov dword [ebp - 4], esi
movzx ecx, word [esi]
pop eax
mov dword [ebp - 0x28], ebx
cmp cx, ax
jne 0x858f59
push 0x26
pop eax
cmp word [esi + 2], ax
jne 0x858f59
or dword [ebp - 0x1c], edx
lea eax, [esi + 4]
mov dword [ebp - 4], eax
mov eax, 0x8f
mov word [edi + 4], ax
mov esi, dword [ebp - 4]
movzx eax, word [esi]
push 0x30
pop ecx
mov dword [ebp - 0x38], edx
cmp ax, cx
jb 0x858ea0
push 0x39
pop ecx
mov dword [ebp - 0x38], edx
cmp ax, cx
jbe 0x85b862
mov edx, 0xff
cmp ax, dx
ja 0x85b73b
mov ecx, dword [ebp + 0x28]
movzx eax, ax
push 0x10
mov ebx, dword [ecx + 0xc]
pop ecx
test byte [eax + ebx], cl
je 0x85b73b
mov eax, esi
mov dword [ebp - 0x10], eax
lea esi, [eax + 2]
mov dword [ebp - 4], esi
mov ecx, esi
movzx eax, word [esi]
mov edi, esi
cmp ax, dx
ja 0x858f0a
mov edx, ecx
mov ecx, eax
movzx eax, cx
push 0x10
pop ecx
mov dword [ebp - 0x14], edx
test byte [eax + ebx], cl
je 0x858f07
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edi, esi
movzx eax, word [esi]
mov edx, esi
mov ecx, eax
mov dword [ebp - 0x14], esi
cmp ax, word [ebp - 0x98]
jbe 0x858ede
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x10]
xor ebx, ebx
mov eax, dword [ebp + 0x2c]
mov edx, dword [ebp - 0x1c]
sar ecx, 1
test eax, eax
push 2
setne bl
mov dword [ebp - 0x14], ecx
pop eax
add ebx, eax
mov dword [ebp - 0x18], ebx
test edx, edx
jle 0x858ffd
movzx eax, word [esi]
lea esi, [edi + 2]
mov dword [ebp - 4], esi
mov ecx, esi
mov dword [ebp - 0x18], ebx
mov edi, esi
cmp ax, dx
je 0x858ffd
mov eax, dword [ebp + 0xc]
lea esi, [ecx - 2]
mov dword [eax], 0x1a
jmp 0x85b8be
push 0x3c
pop eax
cmp cx, ax
jne 0x858f72
push 0x3e
pop eax
add esi, 2
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], esi
jmp 0x858e83
push 0x27
pop eax
cmp cx, ax
je 0x858f64
push 0x2d
xor edi, edi
pop eax
mov dword [ebp - 0x1c], edi
cmp cx, ax
je 0x858faf
push 0x2b
pop eax
cmp cx, ax
je 0x858faf
mov eax, ecx
cmp cx, word [ebp - 0x90]
jb 0x858ea0
push 0x39
pop eax
cmp cx, ax
ja 0x858e83
mov dword [ebp - 0x38], edi
jmp 0x858fb8
add esi, 2
mov dword [ebp - 0x38], ecx
mov dword [ebp - 4], esi
movzx eax, word [esi]
mov edi, esi
push 0x30
pop ecx
cmp ax, cx
jb 0x859000
mov edx, eax
push 0x39
pop eax
cmp dx, ax
ja 0x859000
cmp ebx, 0xccccccb
jg 0x85b749
imul ecx, ebx, 0xa
add esi, 2
movzx ebx, dx
mov edi, esi
push 0x30
mov dword [ebp - 4], esi
movzx eax, word [esi]
add ecx, 0xffffffd0
mov edx, eax
add ebx, ecx
pop ecx
cmp ax, cx
jae 0x858fc7
jmp 0x859000
mov ebx, dword [ebp - 0x28]
mov ax, word [esi]
lea esi, [edi + 2]
push 0x29
pop edx
mov dword [ebp - 4], esi
mov ecx, esi
cmp ax, dx
jne 0x858f48
cmp dword [ebp + 0x2c], 0
jne 0x85a531
mov ecx, dword [ebp - 0x38]
test ecx, ecx
js 0x859079
test ebx, ebx
jle 0x85b77d
test ecx, ecx
je 0x85904a
mov eax, dword [ebp + 0x28]
push 0x2d
pop edx
mov eax, dword [eax + 0x40]
cmp ecx, edx
jne 0x859048
sub eax, ebx
lea ebx, [eax + 1]
jmp 0x85904a
add ebx, eax
test ebx, ebx
jle 0x85b87c
mov ecx, dword [ebp + 0x28]
cmp ebx, dword [ecx + 0x44]
jg 0x85b87c
mov edx, dword [ebp - 8]
mov word [edx + 6], bx
mov esi, dword [ebp - 4]
cmp ebx, dword [ecx + 0x4c]
jle 0x85a537
mov dword [ecx + 0x4c], ebx
jmp 0x85a537
mov edx, dword [ebp + 0x28]
xor ecx, ecx
mov ebx, dword [ebp - 0x14]
mov edi, ecx
mov eax, dword [edx + 0x2c]
mov dword [ebp - 0x58], eax
cmp dword [edx + 0x30], ecx
jle 0x8590cc
mov ecx, dword [ebp - 0x10]
lea edx, [eax + 2]
push ebx
call fcn.0089b977
pop ecx
test eax, eax
jne 0x8590b0
mov eax, dword [ebp - 0x58]
xor ecx, ecx
cmp word [eax + ebx*2 + 2], cx
jne 0x8590b0
mov edx, dword [ebp + 0x28]
jmp 0x8590c9
mov edx, dword [ebp + 0x28]
inc edi
mov ecx, dword [ebp - 0x58]
mov eax, dword [edx + 0x34]
lea ecx, [ecx + eax*2]
mov eax, ecx
mov dword [ebp - 0x58], ecx
cmp edi, dword [edx + 0x30]
jl 0x85908e
xor ecx, ecx
mov esi, dword [ebp - 4]
cmp edi, dword [edx + 0x30]
jge 0x859155
movzx eax, word [eax]
mov ecx, edi
mov esi, dword [ebp - 0xc]
inc edi
mov ebx, eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x38], ebx
cmp eax, dword [edx + 0x4c]
jle 0x8590ee
mov dword [edx + 0x4c], eax
cmp edi, dword [edx + 0x30]
jge 0x85912d
mov ebx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x58]
mov eax, dword [edx + 0x34]
push ebx
lea ecx, [ecx + eax*2]
mov dword [ebp - 0x58], ecx
lea edx, [ecx + 2]
mov ecx, dword [ebp - 0x10]
call fcn.0089b977
pop ecx
test eax, eax
jne 0x859127
mov ecx, dword [ebp - 0x58]
cmp word [ecx + ebx*2 + 2], ax
jne 0x859127
mov edx, dword [ebp + 0x28]
inc esi
inc edi
cmp edi, dword [edx + 0x30]
jl 0x8590f9
mov ebx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 8]
cmp esi, dword [ebp - 0xc]
jle 0x859146
mov ebx, dword [ebp - 0x18]
inc ebx
mov word [edx + 8], si
inc word [edx + 4]
movzx eax, cx
jmp 0x85914c
movzx eax, bx
mov ebx, dword [ebp - 0x18]
mov word [edx + 6], ax
jmp 0x8591fd
cmp dword [ebp - 0x1c], 0
jne 0x85b87c
mov eax, dword [ebp - 0x10]
push 0x52
pop edx
cmp word [eax], dx
jne 0x8591cf
mov edx, dword [ebp - 0xc]
cmp ebx, 1
jle 0x8591af
push 0x30
pop edi
movzx eax, word [eax + edx*2]
cmp ax, di
jb 0x85b87c
cmp ax, word [ebp - 0xb4]
ja 0x85b87c
cmp ecx, 0xccccccb
jg 0x85b852
imul ecx, ecx, 0xa
add eax, 0xffffffd0
add ecx, eax
mov eax, dword [ebp - 0x10]
inc edx
cmp edx, ebx
jl 0x859175
test ecx, ecx
jne 0x8591b4
mov ecx, 0xffff
mov edx, dword [ebp - 8]
mov eax, 0x8f
mov word [edx + 6], cx
mov ecx, dword [ebp + 0x28]
mov word [edx + 4], ax
mov esi, dword [ebp - 4]
jmp 0x85a537
cmp ebx, 6
jne 0x85b87c
push ebx
mov edx, str.DEFINE
mov ecx, eax
call fcn.0081c609
pop ecx
test eax, eax
jne 0x85b879
mov edx, dword [ebp - 8]
mov eax, 0x91
mov ebx, dword [ebp - 0xc]
mov word [edx + 4], ax
mov esi, dword [ebp - 4]
jmp 0x85921a
mov edx, dword [ebp - 8]
lea esi, [ebx + 2]
xor eax, eax
mov dword [ebp - 4], esi
mov edi, 0x83
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x24], edi
mov ebx, eax
mov ecx, dword [ebp + 0x28]
jmp 0x81c25e
push 0x2b
pop ecx
cmp eax, ecx
je 0x85924e
push 0x2d
pop ecx
cmp eax, ecx
je 0x85924e
mov edx, esi
mov edi, ebx
mov dword [ebp - 0x1c], edx
cmp eax, 0x2f
jbe 0x81bd06
push 0x39
pop ecx
mov dword [ebp - 0x1c], edx
cmp eax, ecx
ja 0x81bd06
push 0x29
pop eax
mov dword [ebp - 0x14], eax
mov edx, esi
jmp 0x85a3a5
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x30], eax
mov dword [ecx + 0x7c], eax
mov edi, 0x83
jmp 0x859271
inc dword [ecx + 0x5c]
push 0x7d
pop edi
add esi, 2
jmp 0x859284
mov edi, 0x80
mov ecx, dword [ebp + 0x28]
inc dword [ecx + 0x5c]
add esi, 4
mov dword [ebp - 0x24], edi
mov dword [ebp - 4], esi
jmp 0x85a534
xor eax, eax
add esi, 2
push 0x29
mov edi, eax
mov dword [ebp - 4], esi
pop eax
cmp word [esi], ax
jne 0x85b85a
mov ebx, ecx
jmp 0x85a89d
lea edx, [esi + 2]
mov esi, edx
push 0x3d
mov dword [ebp - 4], esi
pop ecx
movzx eax, word [esi]
cmp ax, cx
je 0x8592da
push 0x3e
pop ecx
cmp ax, cx
je 0x8592da
push 0x3c
pop ecx
cmp ax, cx
jne 0x85b784
mov edi, eax
jmp 0x8593ea
push 0x29
pop ecx
push 0x3e
mov dword [ebp - 0x14], ecx
mov esi, edx
xor edx, edx
pop ecx
cmp ax, cx
sete dl
mov dword [ebp - 0x10], edx
jmp 0x85a6d4
mov edx, dword [ebp - 8]
xor ebx, ebx
mov eax, dword [ebp - 0xc]
mov ecx, ebx
push 0x76
mov dword [ebp - 0xac], eax
pop eax
mov word [edx], ax
mov esi, dword [ebp - 4]
push 2
pop eax
add esi, eax
mov dword [ebp - 0x88], edx
add edx, eax
mov dword [ebp - 4], esi
push 0x30
pop edi
movzx eax, word [esi]
mov dword [ebp - 8], edx
cmp ax, di
jb 0x859369
mov edi, esi
mov edx, eax
push 0x39
pop eax
cmp dx, ax
ja 0x859366
imul ecx, ecx, 0xa
lea esi, [edi + 2]
movzx eax, dx
add eax, 0xffffffd0
mov dword [ebp - 4], esi
add ecx, eax
mov eax, 0xff
cmp ecx, eax
jg 0x85b78b
movzx eax, word [esi]
mov edi, esi
mov edx, eax
cmp ax, word [ebp - 0x90]
jae 0x859330
mov edx, dword [ebp - 8]
push 0x29
pop eax
cmp word [esi], ax
jne 0x85b799
mov word [edx], cx
mov ecx, dword [ebp + 0x28]
push 2
pop eax
add edx, eax
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 4]
sub eax, dword [ecx + 0x18]
sar eax, 1
inc eax
mov word [edx], ax
xor eax, eax
mov word [edx + 2], ax
push 4
pop eax
add edx, eax
jmp 0x81c4da
mov edi, 0x81
jmp 0x859271
movzx eax, word [esi + 2]
push 0x21
mov ecx, eax
pop edx
cmp ecx, edx
je 0x859276
push 0x3d
pop edx
cmp ax, dx
je 0x8595aa
mov edx, 0xff
cmp ax, dx
ja 0x85b7c3
mov eax, dword [ebp + 0x28]
mov edi, ebx
push 0x10
pop ebx
mov edx, esi
mov eax, dword [eax + 0xc]
test byte [ecx + eax], bl
je 0x85b7c3
lea esi, [edx + 2]
movzx ebx, di
push 0x30
mov dword [ebp - 4], esi
movzx eax, word [esi]
pop ecx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x38], esi
cmp ax, cx
jb 0x859410
push 0x39
pop ecx
cmp ax, cx
jbe 0x85b862
mov edx, 0xff
mov ecx, esi
cmp ax, dx
ja 0x859453
mov ecx, dword [ebp + 0x28]
mov edx, esi
push 0x10
pop ebx
mov edi, dword [ecx + 0xc]
mov ecx, eax
movzx eax, cx
mov dword [ebp - 0x10], edx
test byte [eax + edi], bl
je 0x85944d
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edx, esi
movzx eax, word [esi]
mov ecx, eax
mov dword [ebp - 0x10], esi
cmp ax, word [ebp - 0x98]
jbe 0x859429
mov ebx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x38]
sar ecx, 1
cmp dword [ebp + 0x2c], 0
mov dword [ebp - 0x10], ecx
je 0x85959a
mov edx, dword [ebp + 0x28]
push 0x3c
pop edi
push 0x3e
mov eax, dword [edx + 0x40]
inc eax
mov dword [ebp - 0x14], eax
xor eax, eax
cmp bx, di
pop ebx
sete al
dec eax
and eax, 0xffffffe9
add eax, ebx
cmp word [esi], ax
jne 0x85b871
cmp dword [edx + 0x30], 0x2710
jge 0x85b7b5
lea eax, [ecx + 2]
cmp eax, dword [edx + 0x34]
jle 0x8594af
push 0x20
mov dword [edx + 0x34], eax
pop eax
cmp ecx, eax
jg 0x85b86d
mov edi, dword [edx + 0x28]
xor eax, eax
mov ebx, eax
cmp dword [edx + 0x30], eax
jle 0x85951b
cmp ecx, dword [edi + 4]
jne 0x8594ff
mov edx, dword [edi]
push ecx
mov ecx, dword [ebp - 0x38]
call fcn.0089b977
pop ecx
test eax, eax
jne 0x8594fc
mov eax, dword [ebp - 0x14]
cmp dword [edi + 8], eax
je 0x859515
test dword [ebp - 0x2c], 0x80000
je 0x85b7a0
mov edx, dword [ebp + 0x28]
mov eax, dword [ebp - 0xc]
mov dword [edx + 0x78], eax
mov ecx, dword [ebp - 0x10]
inc ebx
add edi, 0xc
cmp ebx, dword [edx + 0x30]
jl 0x8594bb
jmp 0x859518
mov edx, dword [ebp + 0x28]
mov eax, dword [ebp - 0x14]
cmp dword [edi + 8], eax
jne 0x8594ee
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x41
jmp 0x85b3ae
mov edx, dword [ebp + 0x28]
mov esi, dword [ebp - 4]
mov eax, dword [edx + 0x30]
cmp ebx, eax
jl 0x85959a
mov ebx, dword [ebp + 0x28]
mov ecx, dword [ebx + 0x38]
cmp eax, ecx
jl 0x85956c
lea edi, [ecx + ecx]
imul eax, edi, 0xc
push eax
call fcn.008091b2
mov esi, eax
pop ecx
test esi, esi
je 0x85b7a7
imul eax, dword [ebx + 0x38], 0xc
push eax
push dword [ebx + 0x28]
push esi
call fcn.00820e20
add esp, 0xc
cmp dword [ebx + 0x38], 0x14
jle 0x859563
push dword [ebx + 0x28]
call fcn.008091bb
pop ecx
mov eax, dword [ebx + 0x30]
mov dword [ebx + 0x28], esi
mov dword [ebx + 0x38], edi
mov edx, dword [ebp - 0x38]
imul ecx, eax, 0xc
mov eax, dword [ebx + 0x28]
mov dword [ecx + eax], edx
imul ecx, dword [ebx + 0x30], 0xc
mov eax, dword [ebx + 0x28]
mov edx, dword [ebp - 0x10]
mov dword [ecx + eax + 4], edx
imul ecx, dword [ebx + 0x30], 0xc
mov eax, dword [ebx + 0x28]
mov edx, dword [ebp - 0x14]
mov dword [ecx + eax + 8], edx
inc dword [ebx + 0x30]
mov esi, dword [ebp - 4]
mov ecx, dword [ebp + 0x28]
push 2
pop eax
add esi, eax
mov dword [ebp - 4], esi
jmp 0x81c24a
push 0x7f
pop edi
jmp 0x85927b
mov edx, dword [ebp - 8]
mov edi, 0x83
mov dword [ebp - 0x24], edi
jmp 0x81c25e
test byte [ebp - 0x2c], 2
push 0
pop eax
setne al
mov dword [ebp - 0x28], ecx
add eax, 0x19
jmp 0x81bbac
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0xc]
jmp 0x81c0b0
test ecx, ecx
je 0x81b8a7
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x44]
push ebx
push eax
lea ecx, [esi + 2]
lea edx, [ebp - 0x4c]
call fcn.0089b11d
mov esi, eax
xor eax, eax
pop ecx
pop ecx
mov dword [ebp - 4], esi
cmp dword [ebx], eax
jne 0x85b8be
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x4c]
jmp 0x81c0b9
add esi, 2
mov edx, 0xff
movzx eax, word [esi]
mov ebx, dword [ebp + 0x28]
mov ecx, eax
cmp ax, dx
ja 0x85965f
mov edi, dword [ebx + 0xc]
mov edx, eax
push 2
pop ebx
movzx eax, dx
movzx ecx, dx
mov edx, dword [ebp - 0xc]
test byte [eax + edi], dl
je 0x859657
add esi, ebx
movzx eax, word [esi]
mov edx, eax
mov ecx, eax
cmp ax, word [ebp - 0x98]
jbe 0x859637
mov ebx, dword [ebp + 0x28]
mov edx, 0xff
push 0x23
pop eax
cmp cx, ax
jne 0x859709
push 2
pop eax
add esi, eax
movzx edi, word [esi]
test di, di
je 0x859622
mov edx, dword [ebx + 0x84]
mov ecx, dword [ebx + 0x1c]
test edx, edx
je 0x8596ac
cmp esi, ecx
jae 0x8596d6
push dword [ebp - 0x78]
lea edi, [ebx + 0x88]
push edi
push ecx
mov ecx, esi
call fcn.00806cde
add esp, 0xc
test eax, eax
je 0x8596d6
mov edx, dword [edi]
lea esi, [esi + edx*2]
jmp 0x85961d
mov edx, dword [ebx + 0x88]
lea eax, [edx + edx]
sub ecx, eax
cmp esi, ecx
ja 0x8596d6
cmp di, word [ebx + 0x8c]
jne 0x8596d6
cmp edx, dword [ebp - 0xc]
je 0x8596a4
mov ax, word [esi + 2]
cmp ax, word [ebx + 0x8e]
je 0x8596a4
push 2
pop ecx
add esi, ecx
cmp dword [ebp - 0x5c], 0
je 0x8596f8
mov ax, word [esi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x8596f8
add esi, ecx
movzx edi, word [esi]
test di, di
jne 0x859678
jmp 0x85961d
add esi, 0xfffffffe
xor ebx, ebx
mov dword [ebp - 4], esi
jmp 0x81c104
cmp word [esi + 4], dx
jne 0x81c114
cmp word [esi + 6], ax
jne 0x81c114
add esi, 8
mov dword [ebp - 4], esi
movzx eax, word [esi]
test ax, ax
je 0x85898f
mov edx, esi
mov ecx, eax
push 0x29
pop eax
cmp cx, ax
je 0x85975a
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edx, esi
movzx eax, word [esi]
mov ecx, eax
test ax, ax
jne 0x859740
cmp word [esi], bx
je 0x85898f
push 0x3f
pop edx
jmp 0x81c114
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
jmp 0x81c135
mov ebx, dword [ebp - 0xf8]
jmp 0x81c13a
push 4
pop esi
push esi
push edx
lea eax, [edx + 4]
push eax
call fcn.00822720
mov edx, dword [ebp - 0x28]
lea eax, [esi + 0x7d]
mov edi, dword [ebp - 8]
add esp, 0xc
add edi, 8
cmp dword [ebp + 0x2c], 0
mov dword [ebp - 8], edi
mov word [edx], ax
push 0x78
pop eax
mov word [edx + 2], si
mov word [edx + 8], ax
mov word [edx + 0xa], si
mov dword [ebp - 0x8c], 6
jne 0x859802
mov eax, dword [ebp + 0x28]
push 2
pop ecx
mov edx, dword [eax + 0x20]
mov eax, dword [eax + 0x10]
add eax, ecx
cmp edx, eax
jb 0x8597ff
mov eax, dword [ebp + 0x28]
mov ecx, dword [ebp - 0x28]
movzx esi, word [edx - 2]
push 2
sub ecx, dword [eax + 0x14]
pop eax
add ecx, eax
sar ecx, 1
cmp esi, ecx
jne 0x8597ff
lea eax, [esi + 2]
mov word [edx - 2], ax
mov esi, dword [ebp - 4]
mov edx, dword [ebp - 0x28]
jmp 0x81c14f
mov edx, dword [ebp - 0x28]
mov esi, dword [ebp - 4]
jmp 0x81c14f
push 0x6e
pop eax
cmp cx, ax
je 0x859e25
push 0x6f
pop eax
cmp cx, ax
je 0x859e25
push 0x70
pop eax
cmp cx, ax
je 0x859e25
push 0x71
pop eax
cmp cx, ax
je 0x859e25
cmp ecx, 0x72
je 0x859e25
push 0x73
pop eax
cmp cx, ax
je 0x859e25
cmp ecx, 0x74
je 0x859e25
push 0xa
lea eax, [ecx - 0x7d]
pop ebx
cmp ax, bx
ja 0x859e09
mov eax, dword [ebp - 0x40]
sub edi, edx
mov dword [ebp - 0x10], eax
mov ebx, edi
xor eax, eax
sar ebx, 1
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x3c], eax
mov eax, 0x87
mov dword [ebp - 0x38], ebx
cmp cx, ax
jne 0x859895
add eax, 0xa
cmp word [edx + 4], ax
je 0x81c22a
mov eax, 0x81
cmp cx, ax
mov ecx, dword [ebp - 0x4c]
jae 0x8598be
test ecx, ecx
jg 0x81c22a
mov eax, dword [ebp - 0x44]
test eax, eax
js 0x8598b6
cmp eax, 1
jle 0x8598c1
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x44], eax
jmp 0x8598c1
mov eax, dword [ebp - 0x44]
test ecx, ecx
jne 0x859985
push dword [ebp - 0x40]
lea esi, [edx + 2]
mov edx, dword [ebp - 0xc]
push dword [ebp + 0x28]
cmp eax, edx
mov eax, dword [ebp - 8]
push dword [ebp - 0x78]
mov word [eax], cx
jg 0x859929
mov edi, dword [ebp - 0x28]
mov ecx, edi
call fcn.0089a682
add esp, 0xc
lea eax, [ebx + ebx]
push eax
push edi
push esi
call fcn.00822720
add esp, 0xc
push 2
pop eax
add dword [ebp - 8], eax
cmp dword [ebp - 0x44], 0
jne 0x859916
mov eax, 0xa1
mov word [edi], ax
jmp 0x85a22b
mov eax, dword [ebp - 0x24]
add eax, 0x92
mov dword [ebp - 0x3c], edi
mov word [edi], ax
mov dword [ebp - 0x28], esi
jmp 0x859979
mov ecx, dword [ebp - 0x28]
push 3
pop edx
call fcn.0089a682
add esp, 0xc
and edi, 0xfffffffe
push edi
mov edi, dword [ebp - 0x28]
push edi
lea eax, [edi + 6]
push eax
call fcn.00822720
mov eax, dword [ebp - 0x24]
add esp, 0xc
add dword [ebp - 8], 6
mov ecx, esi
add eax, 0x92
mov edx, 0x83
mov word [edi], ax
mov eax, ecx
push 2
mov word [ecx], dx
pop edx
add ecx, edx
xor edx, edx
add eax, 4
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x28], eax
mov word [ecx], dx
mov edx, dword [ebp - 0x44]
mov esi, dword [ebp - 4]
dec edx
jmp 0x859ac4
mov eax, dword [ebp - 0xc]
cmp ecx, eax
jle 0x859abb
cmp dword [ebp + 0x2c], 0
je 0x8599e0
lea eax, [ecx - 1]
xor ecx, ecx
mov edi, eax
imul dword [ebp - 0x8c]
imul edi, dword [ebp - 0x8c]
cmp edx, ecx
jg 0x85b80b
jl 0x8599bf
cmp eax, 0x7fffffff
ja 0x85b80b
mov edx, dword [ebp + 0x2c]
mov eax, 0x7fffffeb
mov ecx, dword [edx]
sub eax, ecx
cmp eax, edi
jl 0x85b80b
lea eax, [ecx + edi]
mov ecx, dword [ebp - 0x4c]
mov dword [edx], eax
jmp 0x859abb
cmp dword [ebp - 0xa4], 0
je 0x8599fe
cmp dword [ebp - 0x54], 0
jge 0x8599fe
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x30], eax
mov ebx, eax
cmp ecx, eax
jle 0x859ab8
mov esi, dword [ebp + 0x28]
mov edi, dword [ebp - 0x38]
mov eax, dword [ebp - 8]
add edi, edi
mov dword [ebp - 0x18], edi
mov ecx, dword [esi + 0x10]
mov esi, dword [esi + 0x20]
push edi
push edx
sub esi, ecx
push eax
sar esi, 1
call fcn.00820e20
add esp, 0xc
jmp 0x859a44
mov ecx, edx
call fcn.0089aa0e
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
test eax, eax
jne 0x85b3ae
mov edx, dword [ebp + 0x28]
mov eax, dword [ebp - 0x10]
sub eax, esi
add eax, 0xffffff9c
add eax, dword [edx + 0x3c]
mov ecx, dword [edx + 0x10]
lea eax, [ecx + eax*2]
cmp dword [edx + 0x20], eax
ja 0x859a30
mov eax, dword [ebp - 0x10]
lea edx, [ecx + eax*2]
lea eax, [ecx + esi*2]
cmp edx, eax
jae 0x859a94
mov edi, dword [ebp - 0x38]
mov ebx, dword [ebp + 0x28]
mov cx, word [edx]
mov eax, dword [ebx + 0x20]
add cx, di
push 2
mov word [eax], cx
pop eax
add dword [ebx + 0x20], eax
add edx, eax
mov ecx, dword [ebx + 0x10]
lea eax, [ecx + esi*2]
cmp edx, eax
jb 0x859a70
mov edi, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x28]
add eax, edi
inc ebx
mov dword [ebp - 0x10], esi
mov esi, dword [ebp + 0x28]
mov dword [ebp - 8], eax
mov dword [ebp - 0x30], ebx
cmp ebx, dword [ebp - 0x4c]
jl 0x859a1c
mov esi, dword [ebp - 4]
mov ecx, dword [ebp - 0x4c]
mov ebx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x44]
test edx, edx
jle 0x859ac9
sub edx, ecx
mov dword [ebp - 0x44], edx
test edx, edx
js 0x859c7f
mov edi, dword [ebp + 0x2c]
test edi, edi
je 0x859b21
test edx, edx
jle 0x859b21
mov eax, dword [ebp - 0x8c]
add eax, 5
mov ecx, eax
imul ecx, edx
push 4
imul edx
pop ebx
sub ecx, ebx
xor ebx, ebx
cmp edx, ebx
jg 0x85b80b
jl 0x859b06
cmp eax, 0x7fffffff
ja 0x85b80b
mov edx, dword [edi]
mov eax, 0x7fffffeb
sub eax, edx
cmp eax, ecx
jl 0x85b80b
lea eax, [edx + ecx]
mov dword [edi], eax
jmp 0x859c2d
lea eax, [edx - 1]
mov dword [ebp - 0x3c], eax
test eax, eax
js 0x859c2d
mov edx, dword [ebp + 0x28]
mov esi, dword [ebp - 0x24]
add esi, 0x92
mov dword [ebp - 0x30], esi
mov ecx, dword [edx + 0x20]
mov edi, dword [edx + 0x10]
lea edx, [ebx + ebx]
sub ecx, edi
mov edi, dword [ebp - 8]
push 2
sar ecx, 1
mov ebx, ecx
mov word [edi], si
pop esi
add edi, esi
mov dword [ebp - 8], edi
test eax, eax
je 0x859b85
mov ecx, dword [ebp - 0x14]
mov eax, 0x83
mov word [edi], ax
add edi, esi
test ecx, ecx
jne 0x859b74
xor eax, eax
jmp 0x859b7a
mov eax, edi
sub eax, ecx
sar eax, 1
mov dword [ebp - 0x14], edi
mov word [edi], ax
add edi, esi
mov dword [ebp - 8], edi
push edx
push dword [ebp - 0x28]
push edi
call fcn.00820e20
mov esi, dword [ebp - 0x10]
add esp, 0xc
jmp 0x859bab
mov ecx, edx
call fcn.0089aa0e
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
test eax, eax
jne 0x85b3ae
mov edx, dword [ebp + 0x28]
mov eax, esi
sub eax, ebx
add eax, 0xffffff9c
add eax, dword [edx + 0x3c]
mov edi, dword [edx + 0x10]
mov ecx, dword [edx + 0x20]
lea eax, [edi + eax*2]
cmp ecx, eax
ja 0x859b97
lea esi, [edi + esi*2]
lea eax, [edi + ebx*2]
cmp esi, eax
jae 0x859c0c
xor eax, eax
cmp dword [ebp - 0x3c], eax
setne al
lea eax, [eax*2 + 1]
movzx edx, ax
mov edi, dword [ebp + 0x28]
mov cx, word [esi]
add cx, dx
add cx, word [ebp - 0x38]
mov eax, dword [edi + 0x20]
push 2
mov word [eax], cx
mov ecx, dword [edi + 0x20]
add ecx, 2
mov dword [edi + 0x20], ecx
mov edi, dword [edi + 0x10]
pop eax
add esi, eax
lea eax, [edi + ebx*2]
cmp esi, eax
jb 0x859be1
mov eax, dword [ebp - 0x38]
mov esi, dword [ebp - 0x30]
mov dword [ebp - 0x10], ebx
lea edx, [eax + eax]
mov eax, dword [ebp - 0x3c]
add dword [ebp - 8], edx
sub eax, 1
mov dword [ebp - 0x3c], eax
jns 0x859b47
mov esi, dword [ebp - 4]
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x859c77
mov esi, dword [ebp - 8]
push 2
pop edi
mov ecx, esi
mov edx, esi
sub ecx, ebx
sar ecx, 1
inc ecx
lea eax, [ecx + ecx]
sub edx, eax
movzx eax, word [edx + 2]
test eax, eax
jne 0x859c54
mov ebx, eax
jmp 0x859c59
neg eax
lea ebx, [ebx + eax*2]
push 0x78
pop eax
mov word [esi], ax
add esi, edi
movzx eax, cx
mov word [esi], ax
add esi, edi
mov word [edx + 2], ax
test ebx, ebx
jne 0x859c3a
mov dword [ebp - 8], esi
mov esi, dword [ebp - 4]
mov edx, dword [ebp - 8]
jmp 0x81c220
mov edx, dword [ebp - 8]
mov esi, 0x81
lea ebx, [edx - 4]
movzx eax, word [ebx + 2]
mov edi, ebx
add eax, eax
sub edi, eax
movzx ecx, word [edi]
cmp cx, si
je 0x859ca7
mov eax, ecx
cmp cx, word [ebp - 0x11c]
jne 0x859cb7
cmp dword [ebp - 0x1c], 0
mov eax, ecx
je 0x859cb7
mov eax, 0x83
mov word [edi], ax
cmp ax, si
je 0x859dfb
mov ecx, 0x82
cmp ax, cx
je 0x859dfb
cmp dword [ebp + 0x2c], 0
jne 0x859d07
mov esi, edi
xor eax, eax
mov edx, ebx
push eax
push dword [ebp + 0x28]
mov ecx, esi
push dword [ebp - 0x78]
call fcn.0081c633
add esp, 0xc
test eax, eax
jne 0x859d00
movzx eax, word [esi + 2]
push 0x77
lea esi, [esi + eax*2]
pop eax
cmp word [esi], ax
je 0x859cd6
jmp 0x859d04
add word [edi], 5
mov edx, dword [ebp - 8]
movzx eax, word [edi]
mov esi, 0x87
mov ecx, eax
cmp ax, si
jne 0x859d32
movzx eax, word [edi + 2]
mov ecx, esi
push 0x77
pop ebx
cmp word [edi + eax*2], bx
lea ebx, [edx - 4]
lea eax, [esi + 5]
je 0x859d37
mov word [edi], ax
mov ecx, eax
jmp 0x859d37
mov eax, 0x8c
cmp dword [ebp - 0x1c], 0
je 0x859ded
cmp cx, si
je 0x859d5c
cmp cx, ax
je 0x859d5c
lea eax, [ecx + 1]
push 0x7b
mov word [edi], ax
pop eax
push 2
mov word [ebx], ax
pop ebx
jmp 0x859dcb
push dword [ebp - 0x40]
mov esi, edx
xor eax, eax
push dword [ebp + 0x28]
mov word [edx], ax
sub esi, edi
push dword [ebp - 0x78]
mov ecx, edi
sar esi, 1
push 2
pop ebx
mov edx, ebx
call fcn.0089a682
add esp, 0xc
lea eax, [esi + esi]
push eax
lea eax, [edi + 4]
push edi
push eax
call fcn.00822720
mov edx, dword [ebp - 8]
add esp, 0xc
xor ecx, ecx
push 4
pop eax
add edx, eax
movzx eax, word [edi]
cmp ax, word [ebp - 0x140]
push 0x7b
sete cl
dec ecx
and ecx, 5
add ecx, 0x84
mov word [edi], cx
pop eax
mov word [edx], ax
add edx, ebx
lea eax, [esi + 2]
mov word [edx], ax
add edx, ebx
mov dword [ebp - 8], edx
mov word [edi + 2], ax
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x859dda
mov ecx, 0x94
mov word [eax], cx
cmp dword [ebp - 0x4c], ebx
jge 0x81c21d
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x81c21d
mov eax, dword [ebp - 0x24]
add eax, 0x79
mov word [ebx], ax
jmp 0x85a22b
mov eax, dword [ebp - 0x24]
add eax, 0x79
mov word [ebx], ax
jmp 0x81c21d
mov eax, 0x9d
cmp cx, ax
je 0x81c22a
mov eax, dword [ebp + 0xc]
mov dword [eax], 0xb
jmp 0x85b8be
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x859e34
mov dword [ebp - 8], edx
jmp 0x81c22a
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
jne 0x859e5a
cmp eax, 0xffffffff
jne 0x859e50
lea eax, [ebx + 0x62]
jmp 0x859e48
lea eax, [ebx + 0x64]
mov edx, dword [ebp - 8]
push 2
pop ecx
jmp 0x859e94
cmp eax, dword [ebp - 0xc]
jne 0x859e64
lea eax, [ebx + 0x66]
jmp 0x859e48
cmp ecx, dword [ebp - 0xc]
jne 0x859e64
cmp eax, 0xffffffff
je 0x859e45
mov edx, dword [ebp - 8]
lea eax, [ebx + 0x68]
push 2
pop ecx
mov word [edx], ax
add edx, ecx
mov ax, word [ebp - 0x4c]
mov word [edx], ax
add edx, ecx
mov eax, dword [ebp - 0x44]
inc eax
neg eax
sbb eax, eax
and eax, dword [ebp - 0x44]
mov dword [ebp - 0x44], eax
jmp 0x859e94
mov eax, dword [ebp - 0x10]
mov word [edx], si
add edx, 2
mov word [edx], ax
add edx, ecx
mov dword [ebp - 8], edx
jmp 0x81c21d
push 0x1e
mov eax, ecx
pop ebx
sub eax, ebx
je 0x859ec1
sub eax, 1
je 0x859ebc
sub eax, 1
je 0x859eb8
xor eax, eax
jmp 0x859ec4
push 0x27
jmp 0x859ec3
push 0x1a
pop ebx
jmp 0x859ec6
push 0xd
pop eax
mov ebx, eax
cmp dword [ebp - 0x5c], 0
je 0x859f19
lea edx, [edi - 2]
mov ax, word [edx]
and ax, word [ebp - 0x110]
cmp ax, word [ebp - 0x114]
jne 0x859f16
push 2
pop eax
sub edx, eax
sub edi, edx
sar edi, 1
lea eax, [edi + edi]
push eax
push edx
lea eax, [ebp - 0x16c]
push eax
call fcn.00820e20
mov edx, dword [ebp - 0x28]
add esp, 0xc
mov esi, dword [ebp - 4]
or edi, 0x10000000
mov dword [ebp - 0x18], edi
movzx eax, word [edx]
jmp 0x81c195
mov edx, dword [ebp - 0x28]
mov eax, ecx
movzx edi, word [edi - 2]
mov dword [ebp - 0x18], edi
cmp cx, word [ebp - 0x118]
ja 0x81c195
cmp dword [ebp - 0x4c], 1
jle 0x81c195
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x60], edi
mov eax, dword [eax + 0x68]
or eax, dword [ebp - 0x94]
mov dword [ebp - 0x54], eax
jmp 0x81c193
lea edi, [edx + 2]
movzx eax, word [edi]
mov dword [ebp - 0x14], eax
movzx eax, word [edx + 4]
mov dword [ebp - 0x10], eax
jmp 0x81c1b8
cmp ecx, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
push 2
jne 0x859f7d
add eax, 0x25
jmp 0x85a0b7
add eax, 0x27
jmp 0x859f85
lea eax, [edx + 0x27]
mov word [ecx], ax
mov ax, word [ebp - 0x44]
pop ecx
mov word [edi], ax
add edi, ecx
jmp 0x81c1f8
cmp dword [ebp - 0x4c], 1
jne 0x859fcb
cmp eax, 0xffffffff
jne 0x859faa
mov ecx, dword [ebp - 0x28]
lea eax, [edx + 0x23]
jmp 0x859fc3
mov dword [ebp - 8], ecx
cmp eax, dword [ebp - 0xc]
je 0x81c22a
lea eax, [edx + 0x27]
mov word [ecx], ax
add ecx, 2
mov eax, dword [ebp - 0x44]
dec eax
lea edi, [ecx + 2]
jmp 0x81c1ec
mov ecx, dword [ebp - 0x28]
lea eax, [ebx + 0x29]
push 2
mov word [ecx], ax
lea edi, [ecx + 2]
mov ax, word [ebp - 0x4c]
mov word [edi], ax
mov eax, dword [ebp - 0x44]
pop ecx
add edi, ecx
test eax, eax
jns 0x85a043
cmp dword [ebp - 0x5c], 0
mov ebx, dword [ebp - 0x18]
je 0x85a01d
test ebx, 0x10000000
je 0x85a01d
mov esi, ebx
lea eax, [ebp - 0x16c]
and esi, 7
add esi, esi
push esi
push eax
push edi
call fcn.00820e20
mov edx, dword [ebp - 0x30]
add esp, 0xc
add edi, esi
push 2
pop ecx
jmp 0x85a036
mov eax, dword [ebp - 0x14]
mov word [edi], bx
add edi, ecx
test eax, eax
js 0x85a036
mov word [edi], ax
add edi, ecx
mov eax, dword [ebp - 0x10]
mov word [edi], ax
add edi, ecx
lea eax, [edx + 0x21]
mov word [edi], ax
add edi, ecx
jmp 0x81c1f5
cmp eax, dword [ebp - 0x4c]
je 0x81c1f2
cmp dword [ebp - 0x5c], 0
mov ebx, dword [ebp - 0x18]
je 0x85a07a
test ebx, 0x10000000
je 0x85a07a
mov esi, ebx
lea eax, [ebp - 0x16c]
and esi, 7
add esi, esi
push esi
push eax
push edi
call fcn.00820e20
mov edx, dword [ebp - 0x30]
add esp, 0xc
jmp 0x85a07f
mov word [edi], bx
mov esi, ecx
lea ecx, [esi + edi]
mov esi, dword [ebp - 0x14]
test esi, esi
js 0x85a09a
mov eax, dword [ebp - 0x10]
mov word [ecx], si
add ecx, 2
push 2
mov word [ecx], ax
pop eax
add ecx, eax
mov eax, dword [ebp - 0x44]
lea edi, [ecx + 2]
sub eax, dword [ebp - 0x4c]
mov dword [ebp - 0x44], eax
movzx edx, dx
push 2
cmp eax, 1
jne 0x859f82
lea eax, [edx + 0x25]
mov word [ecx], ax
pop ecx
jmp 0x81c1f8
and ebx, 7
lea eax, [ebp - 0x16c]
add ebx, ebx
push ebx
push eax
push edi
call fcn.00820e20
add esp, 0xc
push 2
pop ecx
jmp 0x81c20f
mov eax, dword [ebp - 0x48]
movzx ecx, word [eax]
mov eax, ecx
cmp eax, 0x50
ja 0x85a159
je 0x85a116
push 0x1d
pop ecx
cmp eax, ecx
jb 0x85a19f
push 0x20
pop ecx
cmp eax, ecx
jbe 0x85a116
push 0x29
pop ecx
cmp eax, ecx
je 0x85a116
cmp eax, 0x36
je 0x85a116
push 0x43
pop ecx
cmp eax, ecx
jne 0x85a19f
cmp dword [ebp - 0x5c], 0
movzx ecx, byte [eax + 0x8c2140]
mov eax, dword [ebp - 0x48]
lea ecx, [eax + ecx*2]
mov dword [ebp - 0x48], ecx
je 0x85a19f
mov ax, word [ecx - 2]
mov ebx, 0xfc00
and ax, bx
mov ebx, 0xd800
cmp ax, bx
jne 0x85a19f
lea eax, [ecx + 2]
jmp 0x85a154
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
movzx ecx, word [ecx + 2]
lea eax, [eax + ecx*2]
mov dword [ebp - 0x48], eax
jmp 0x85a19f
push 0x5d
pop ebx
cmp eax, ebx
je 0x85a17e
push 0x6d
pop ebx
cmp eax, ebx
jbe 0x85a19f
push 0x6f
pop ebx
cmp eax, ebx
jbe 0x85a178
push 0x70
pop eax
cmp cx, ax
jne 0x85a19f
jmp 0x85a147
add dword [ebp - 0x48], 0x22
jmp 0x85a19f
mov eax, dword [ebp - 0x48]
push 0x10
pop ecx
movzx eax, word [eax + 4]
cmp ax, cx
je 0x85a199
push 0xf
pop ecx
cmp ax, cx
je 0x85a199
push 6
jmp 0x85a19b
push 0xa
pop eax
add dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x48]
mov edi, edx
sub edi, ecx
mov ebx, edi
sar ebx, 1
test ebx, ebx
jle 0x81c22a
movzx eax, word [ecx]
push 0x76
pop esi
cmp eax, esi
jae 0x85a1ce
mov al, byte [eax + 0x8c4c10]
test al, al
je 0x85a1ce
movzx eax, al
mov word [ecx], ax
jmp 0x85a22b
push dword [ebp - 0x40]
xor eax, eax
push dword [ebp + 0x28]
mov word [edx], ax
push dword [ebp - 0x78]
mov ecx, dword [ebp - 0x48]
push 2
pop esi
mov edx, esi
call fcn.0089a682
mov eax, dword [ebp - 0x48]
add esp, 0xc
and edi, 0xfffffffe
push edi
push eax
add eax, 4
push eax
call fcn.00822720
mov edx, dword [ebp - 8]
lea ecx, [esi + 0x7f]
add esp, 0xc
push 4
pop eax
add edx, eax
mov eax, dword [ebp - 0x48]
push 0x78
mov word [eax], cx
lea ecx, [ebx + 2]
pop eax
mov word [edx], ax
add edx, esi
mov word [edx], cx
add edx, esi
mov eax, dword [ebp - 0x48]
mov dword [ebp - 8], edx
mov word [eax + 2], cx
mov esi, dword [ebp - 4]
jmp 0x81c22a
xor eax, eax
test byte [ebp - 0x2c], 2
mov dword [ebp - 0x28], eax
je 0x85a250
cmp dword [ebp - 0x34], 0xfffffffe
jne 0x85a24c
or dword [ebp - 0x34], 0xffffffff
or dword [ebp - 0x68], 0xffffffff
push 0x1c
jmp 0x85a252
push 0x1b
pop ecx
mov word [edx], cx
add edx, 2
jmp 0x81c4da
mov eax, dword [ebp + 0x28]
test dword [eax + 0x60], 0x2000000
je 0x81b8a7
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x40
jmp 0x85b8be
mov edx, dword [ebp - 8]
jmp 0x81b8a7
add esi, 2
mov ebx, 0xfc00
push 2
mov ax, word [esi]
and ax, bx
mov ebx, 0xdc00
cmp ax, bx
jne 0x81b8cf
mov dword [ebp - 4], esi
mov ax, word [esi]
pop esi
mov word [ebp - 0x10a], ax
mov edi, esi
jmp 0x81b8d0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x5c], edx
je 0x85a2e9
mov ecx, 0xffff
cmp eax, ecx
jbe 0x85a2e9
mov ecx, eax
jmp 0x85a2d1
mov ecx, edi
lea edx, [ebp - 0x10c]
call fcn.0089b9a7
mov edx, dword [ebp - 8]
mov edi, eax
mov ecx, dword [ebp - 0xc]
jmp 0x81b8cd
mov ecx, dword [ebp - 0xc]
mov word [ebp - 0x10c], ax
jmp 0x85a2fc
mov word [ebp - 0x10c], di
mov edx, dword [ebp - 8]
mov edi, ecx
jmp 0x81b8cd
mov eax, dword [esi + 0x20]
xor ebx, ebx
sub eax, dword [esi + 0x10]
mov esi, dword [ebp - 4]
add esi, 2
sar eax, 1
push 0x3c
pop edi
mov dword [ebp - 4], esi
cmp word [esi], di
lea edx, [esi + 2]
push 0x3e
sete bl
mov dword [ebp - 0x40], eax
dec ebx
mov dword [ebp - 0x80], edx
pop eax
and ebx, 0xffffffe9
add ebx, eax
movzx eax, word [edx]
push 0x2b
pop ecx
mov dword [ebp - 0x14], ebx
cmp ax, cx
je 0x85a365
push 0x2d
pop ecx
cmp ax, cx
je 0x85a365
push 0x30
pop ecx
cmp ax, cx
jb 0x85a35a
push 0x39
pop ecx
cmp ax, cx
jbe 0x85a365
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
jmp 0x85a6d4
lea edi, [esi + 4]
movzx eax, word [edi]
mov ecx, eax
cmp ax, word [ebp - 0x90]
jb 0x85a397
push 2
pop ebx
push 0x39
pop edx
cmp cx, dx
ja 0x85a391
add edi, ebx
movzx eax, word [edi]
mov ecx, eax
cmp ax, word [ebp - 0x90]
jae 0x85a37c
mov edx, dword [ebp - 0x80]
mov ebx, dword [ebp - 0x14]
cmp word [edi], bx
jne 0x85b85e
mov esi, edx
mov dword [ebp - 4], esi
movzx ecx, word [esi]
push 0x2b
pop eax
movzx ebx, cx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x3c], ebx
cmp cx, ax
jne 0x85a472
lea esi, [edx + 2]
push 0x30
mov dword [ebp - 4], esi
movzx eax, word [esi]
pop edx
cmp ax, dx
jb 0x85a3d6
push 0x39
pop edx
cmp ax, dx
jbe 0x85a3e9
mov eax, dword [ebp + 0xc]
push 0x3f
pop edx
mov dword [eax], edx
jmp 0x85b8be
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edx, esi
xor eax, eax
mov edi, eax
movzx eax, word [esi]
cmp ax, word [ebp - 0x90]
jb 0x85a43a
push 0x30
mov ebx, eax
pop ecx
push 0x39
pop eax
cmp bx, ax
ja 0x85a434
cmp edi, 0xccccccb
jg 0x85b82b
imul ecx, edi, 0xa
lea esi, [edx + 2]
movzx edi, bx
mov edx, esi
push 0x30
mov dword [ebp - 4], esi
movzx eax, word [esi]
add ecx, 0xffffffd0
mov ebx, eax
add edi, ecx
pop ecx
cmp ax, cx
jae 0x85a400
mov ebx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
cmp word [esi], ax
jne 0x85b85a
push 0x2d
pop eax
cmp cx, ax
jne 0x85a661
test edi, edi
je 0x85b856
mov ebx, dword [ebp + 0x28]
mov eax, dword [ebx + 0x40]
sub eax, edi
lea edi, [eax + 1]
test edi, edi
jg 0x85a89d
jmp 0x85b87c
push 0x2d
pop eax
cmp cx, ax
jne 0x85a3eb
movzx eax, word [esi + 2]
mov dword [ebp - 0x1c], edx
movzx edi, cx
cmp ax, word [ebp - 0x90]
jb 0x85a4a4
mov dword [ebp - 0x1c], edx
movzx edi, cx
cmp ax, word [ebp - 0xb4]
jbe 0x85a3e3
mov edx, dword [ebp - 0x1c]
jmp 0x81bd06
push 0x2d
pop edx
cmp ax, dx
je 0x85a4ef
cmp eax, 0x4a
je 0x85a4da
cmp eax, 0x55
je 0x85a4cf
cmp eax, 0x58
jne 0x85b7de
or dword [ecx], 0x40
jmp 0x81bd4d
or dword [ecx], 0x200
jmp 0x81bd4d
mov eax, dword [ebp + 0x28]
or dword [ecx], 0x80000
or dword [eax + 0x64], 0x400
jmp 0x81bd4d
lea ecx, [ebp - 0x10]
jmp 0x81bd4d
push 0x6d
pop edx
cmp ax, dx
je 0x85a51f
push 0x73
pop edx
cmp ax, dx
je 0x85a51b
push 0x78
pop eax
cmp di, ax
jne 0x85b7de
or dword [ecx], 8
jmp 0x81bd4d
push 4
jmp 0x85a521
push 2
pop eax
jmp 0x81bd4b
mov ebx, dword [ebp - 0x1c]
mov ecx, eax
jmp 0x81bd69
mov ecx, dword [ebp + 0x28]
mov edx, dword [ebp - 8]
mov ebx, dword [ebp - 0x18]
jmp 0x81c25e
xor ecx, ecx
cmp dword [eax + 0x80], ecx
je 0x81c289
mov dword [ebp - 0x28], ecx
mov dword [eax + 0x80], ecx
jmp 0x81c299
mov ecx, dword [ebp - 0xc]
jmp 0x81c2e2
cmp dword [ecx + 0x40], esi
ja 0x81c360
mov eax, dword [ebp - 8]
mov edx, 0x82
mov word [eax], dx
jmp 0x81c346
dec dword [ecx + 0x5c]
jmp 0x81c353
cmp dword [ebp + 0x2c], 0
jne 0x81c360
mov ecx, eax
xor eax, eax
push 0x78
mov esi, eax
pop edi
movzx eax, word [ecx + 2]
mov edx, esi
inc esi
lea ecx, [ecx + eax*2]
cmp word [ecx], di
jne 0x85a597
mov eax, dword [ebp - 8]
mov ecx, 0x91
mov edi, dword [ebp - 0x80]
cmp word [eax + 4], cx
jne 0x85a5c7
cmp edx, dword [ebp - 0xc]
jge 0x85b7ef
mov ebx, ecx
jmp 0x81c360
push 2
pop eax
cmp edx, eax
jge 0x85b7fd
cmp esi, dword [ebp - 0xc]
jne 0x81c360
or eax, 0xffffffff
or ecx, eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
jmp 0x81c366
test ecx, ecx
js 0x85a60c
mov ebx, dword [ebp - 0xe4]
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0xa4], ecx
jmp 0x85a610
or dword [ebp - 0x34], 0xffffffff
or dword [ebp - 0x68], 0xffffffff
jmp 0x81c3d9
test eax, eax
jns 0x85a650
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xb8], eax
mov eax, ecx
or eax, edi
mov dword [ebp - 0xa0], eax
jmp 0x81c3d9
cmp ebx, 0x7d
jne 0x81b9d3
test eax, eax
js 0x81b9d3
test ecx, ecx
jmp 0x81c3db
mov ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x54], eax
jmp 0x81b9d3
push 0x2b
pop eax
cmp bx, ax
jne 0x85a89a
test edi, edi
je 0x85b856
mov ebx, dword [ebp + 0x28]
add edi, dword [ebx + 0x40]
jmp 0x85a89d
mov esi, dword [ebp - 4]
push 0x3c
pop edi
lea ecx, [esi + 2]
movzx eax, word [ecx]
cmp ax, di
je 0x85a6aa
cmp ax, word [ebp - 0x128]
je 0x85a6aa
cmp ax, word [ebp - 0x12c]
je 0x85a6aa
push 0x45
jmp 0x85b7d6
mov dword [ebp - 4], ecx
mov esi, ecx
movzx eax, word [ecx]
mov dword [ebp - 0x10], edx
cmp ax, di
jne 0x85a6c2
push 0x3e
pop eax
mov dword [ebp - 0x14], eax
jmp 0x85a6d4
push 0x27
pop ecx
mov dword [ebp - 0x14], ecx
cmp ax, cx
je 0x85a6d4
mov dword [ebp - 0x14], 0x7d
add esi, 2
push 0x30
mov dword [ebp - 4], esi
mov ecx, esi
pop edx
movzx eax, word [esi]
mov dword [ebp - 0x30], ecx
cmp ax, dx
jb 0x85a6f6
push 0x39
pop edx
cmp ax, dx
jbe 0x85b862
mov edx, 0xff
mov ebx, esi
cmp ax, dx
ja 0x85a734
mov ecx, dword [ebp + 0x28]
mov edx, esi
mov edi, dword [ecx + 0xc]
mov ecx, eax
movzx eax, cx
mov ebx, edx
push 0x10
pop ecx
test byte [eax + edi], cl
je 0x85a731
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edx, esi
movzx eax, word [esi]
mov ebx, esi
mov ecx, eax
cmp ax, word [ebp - 0x98]
jbe 0x85a70c
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp + 0x2c]
sub ebx, ecx
sar ebx, 1
test edx, edx
je 0x85a7f4
xor eax, eax
mov edi, eax
mov dword [ebp - 0x3c], edi
test ebx, ebx
je 0x85b875
mov eax, dword [ebp - 0x14]
cmp word [esi], ax
jne 0x85b871
push 0x20
pop eax
cmp ebx, eax
jg 0x85b86d
mov ecx, dword [ebp + 0x28]
cmp dword [ebp - 0x10], edi
jne 0x85a774
inc dword [ecx + 0x54]
mov eax, dword [edx]
push 9
pop esi
add eax, esi
mov dword [edx], eax
cmp dword [ecx + 0x7c], edi
je 0x85a787
add eax, 8
mov dword [edx], eax
mov esi, dword [ecx + 0x28]
xor eax, eax
mov ecx, dword [ecx + 0x30]
mov edx, eax
mov dword [ebp - 0x40], edx
test ecx, ecx
jle 0x85a7ef
cmp ebx, dword [esi + 4]
jne 0x85a7de
mov edx, dword [esi]
mov ecx, dword [ebp - 0x30]
push ebx
call fcn.0089b977
pop ecx
test eax, eax
jne 0x85a7db
mov edi, dword [esi + 8]
mov dword [ebp - 0x3c], edi
cmp dword [ebp - 0x10], eax
jne 0x85a89a
mov eax, dword [ebp + 0x28]
mov ecx, dword [eax + 0x24]
jmp 0x85a7ce
movzx eax, word [ecx + 4]
cmp eax, edi
je 0x85a7d4
mov ecx, dword [ecx]
test ecx, ecx
jne 0x85a7c4
jmp 0x85a7db
mov eax, dword [ebp - 0xc]
mov word [ecx + 6], ax
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp + 0x28]
inc edx
add esi, 0xc
mov dword [ebp - 0x40], edx
mov ecx, dword [ecx + 0x30]
cmp edx, ecx
jl 0x85a798
mov ebx, dword [ebp + 0x28]
jmp 0x85a85a
mov edi, dword [ebp + 0x28]
xor edx, edx
mov dword [ebp - 0x40], edx
mov eax, dword [edi + 0x2c]
mov dword [ebp - 0x58], eax
cmp dword [edi + 0x30], edx
jle 0x85a847
push ebx
lea edx, [eax + 2]
call fcn.0089b977
pop ecx
test eax, eax
jne 0x85a826
mov eax, dword [ebp - 0x58]
xor ecx, ecx
cmp word [eax + ebx*2 + 2], cx
jne 0x85a826
mov edx, dword [ebp - 0x40]
jmp 0x85a844
mov eax, dword [edi + 0x34]
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x40]
inc edx
mov dword [ebp - 0x40], edx
lea ecx, [ecx + eax*2]
mov dword [ebp - 0x58], ecx
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x58]
cmp edx, dword [edi + 0x30]
jl 0x85a807
mov esi, dword [ebp - 4]
mov ebx, edi
mov ecx, dword [ebx + 0x30]
cmp edx, ecx
jge 0x85b87c
movzx edi, word [eax]
mov dword [ebp - 0x3c], edi
cmp dword [ebp - 0x10], 0
jne 0x85a89d
cmp dword [ebp + 0x2c], 0
jne 0x85aa62
xor eax, eax
cmp dword [ebx + 0x78], eax
je 0x85aa62
mov eax, dword [ebx + 0x34]
mov ebx, dword [ebp - 0x58]
mov esi, dword [ebp - 0xc]
mov dword [ebp - 0x80], edx
inc edx
mov dword [ebp - 0x40], edx
lea eax, [ebx + eax*2]
mov dword [ebp - 0x10], eax
cmp edx, ecx
jge 0x85aa62
mov edi, edx
jmp 0x85a996
mov ebx, dword [ebp + 0x28]
mov ecx, dword [ebx + 0x20]
sub ecx, dword [ebx + 0x10]
mov eax, dword [ebp - 8]
mov esi, dword [ebx + 0x14]
sar ecx, 1
cmp dword [ebp + 0x2c], 0
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x40], ecx
jne 0x85a955
xor ecx, ecx
mov word [eax], cx
test edi, edi
je 0x85a8d6
mov edx, dword [ebp - 0x78]
mov ecx, dword [ebx + 0x14]
push edi
call fcn.0089a39a
mov esi, eax
mov eax, dword [ebp - 8]
pop ecx
test esi, esi
jne 0x85a92a
cmp edi, dword [ebx + 0x44]
jg 0x85b879
mov eax, dword [ebx + 0x14]
mov ecx, dword [ebx + 0x3c]
lea esi, [eax + edi*2]
mov eax, dword [ebx + 0x10]
lea eax, [eax + ecx*2]
add eax, 0xffffff38
cmp dword [ebx + 0x20], eax
jb 0x85a910
mov ecx, ebx
call fcn.0089aa0e
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
test eax, eax
jne 0x85b3ae
mov edx, dword [ebp - 8]
mov ecx, edx
sub ecx, dword [ebx + 0x14]
mov eax, dword [ebx + 0x20]
push 2
pop edi
add ecx, edi
sar ecx, 1
mov word [eax], cx
add dword [ebx + 0x20], edi
jmp 0x85a958
xor ecx, ecx
cmp word [esi + 2], cx
jne 0x85a955
cmp dword [ebp + 0x24], ecx
jg 0x85a955
push ebx
push dword [ebp - 0x78]
mov edx, eax
mov ecx, esi
push dword [ebp + 0x20]
call fcn.0089a9d0
add esp, 0xc
test eax, eax
je 0x85a955
push 0x28
jmp 0x85b882
mov edx, dword [ebp - 8]
mov edi, dword [ebp - 0x34]
push 0x75
pop eax
mov word [edx], ax
sub esi, dword [ebx + 0x14]
sar esi, 1
push 4
pop eax
mov word [edx + 2], si
add edx, eax
xor eax, eax
mov dword [ebp - 8], edx
mov dword [ebp - 0xa4], eax
cmp edi, 0xfffffffe
jne 0x85a985
or edi, 0xffffffff
mov dword [ebp - 0x34], edi
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x68], edi
jmp 0x81bdd8
mov eax, dword [ebp - 0x10]
lea edx, [eax + 2]
lea ecx, [ebx + 2]
call fcn.0089b94c
mov ecx, dword [ebp - 0x10]
test eax, eax
jne 0x85a9bb
mov edx, dword [ebp + 0x28]
inc esi
inc edi
mov eax, dword [edx + 0x34]
lea ecx, [ecx + eax*2]
mov dword [ebp - 0x10], ecx
cmp edi, dword [edx + 0x30]
jl 0x85a993
mov edi, dword [ebp - 0x3c]
cmp esi, dword [ebp - 0xc]
jle 0x85aa62
cmp dword [ebp - 0x34], 0xfffffffe
jne 0x85a9d1
or dword [ebp - 0x34], 0xffffffff
mov ebx, dword [ebp + 0x28]
mov edx, dword [ebp - 8]
push 0x73
pop edi
mov eax, dword [ebx + 0x20]
sub eax, dword [ebx + 0x10]
sar eax, 1
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x2c]
and eax, 1
mov dword [ebp - 0x28], edx
add eax, edi
mov word [edx], ax
mov eax, dword [ebp - 0x80]
push 2
pop edi
add edx, edi
mov word [edx], ax
add edx, edi
mov word [edx], si
add edx, edi
mov edi, dword [ebp - 0x58]
mov dword [ebp - 8], edx
cmp edi, ecx
jae 0x81bdd8
mov esi, dword [ebp - 0x10]
movzx edx, word [edi]
push 0x20
pop eax
cmp edx, eax
mov eax, dword [ebp - 0xc]
jae 0x85aa27
mov ecx, edx
shl eax, cl
or dword [ebx + 0x50], eax
cmp edx, dword [ebx + 0x4c]
jle 0x85aa32
mov dword [ebx + 0x4c], edx
mov ecx, dword [ebx + 0x24]
jmp 0x85aa41
movzx eax, word [ecx + 4]
cmp eax, edx
je 0x85aa47
mov ecx, dword [ecx]
test ecx, ecx
jne 0x85aa37
jmp 0x85aa4e
mov eax, dword [ebp - 0xc]
mov word [ecx + 6], ax
mov eax, dword [ebx + 0x34]
lea edi, [edi + eax*2]
cmp edi, esi
jb 0x85aa16
mov dword [ebp - 0x58], edi
jmp 0x81b9cd
neg edi
cmp dword [ebp - 0x34], 0xfffffffe
jne 0x85aa70
or dword [ebp - 0x34], 0xffffffff
or dword [ebp - 0x68], 0xffffffff
mov ebx, dword [ebp + 0x28]
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0xc]
push 0x71
mov eax, dword [ebx + 0x20]
sub eax, dword [ebx + 0x10]
sar eax, 1
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x2c]
and eax, ecx
mov dword [ebp - 0x28], edx
pop esi
add eax, esi
mov word [edx], ax
push 2
pop eax
add edx, eax
push 0x20
mov word [edx], di
add edx, eax
pop eax
cmp edi, eax
mov dword [ebp - 8], edx
mov eax, ecx
jge 0x85aaae
mov ecx, edi
shl eax, cl
or dword [ebx + 0x50], eax
cmp edi, dword [ebx + 0x4c]
jle 0x85aab9
mov dword [ebx + 0x4c], edi
mov ecx, dword [ebx + 0x24]
jmp 0x85aac8
movzx eax, word [ecx + 4]
cmp eax, edi
je 0x85aad1
mov ecx, dword [ecx]
test ecx, ecx
jne 0x85aabe
jmp 0x81bdd8
mov eax, dword [ebp - 0xc]
mov word [ecx + 6], ax
jmp 0x81bdd8
mov ebx, esi
cmp dword [ebx + 0x48], edx
jne 0x81c49d
mov dword [ebx + 0x48], ecx
jmp 0x81c49d
cmp edi, 0x22
jg 0x81c4a8
mov eax, dword [ebp - 4]
mov esi, dword [edi*4 + 0x8c39cc]
add eax, 2
push 2
pop edx
mov dword [ebp - 0x50], eax
sub esi, edx
jmp 0x81b9d0
cmp edi, 0xe
jne 0x81c4cf
push 0xd
pop eax
mov edi, eax
jmp 0x81c4cf
push ebx
lea eax, [ebp - 0xec]
mov dword [ebp - 0xe8], edx
push eax
lea eax, [ebp - 0xe8]
mov dword [ebp - 0xec], edx
push eax
lea edx, [ebp - 0x130]
lea ecx, [ebp - 4]
call fcn.0089af65
add esp, 0xc
test eax, eax
je 0x85b3ae
mov eax, dword [esi + 0x20]
sub eax, dword [esi + 0x10]
mov edx, dword [ebp - 8]
sar eax, 1
push 0x10
pop ecx
mov dword [ebp - 0x40], eax
xor eax, eax
cmp edi, ecx
mov dword [ebp - 0x28], edx
push 0xf
sete al
xor ecx, ecx
cmp eax, dword [ebp - 0x130]
pop eax
setne cl
add ecx, eax
mov ax, word [ebp - 0xe8]
mov word [edx], cx
push 2
pop esi
add edx, esi
mov word [edx], ax
add edx, esi
mov ax, word [ebp - 0xec]
mov word [edx], ax
jmp 0x81c4d8
mov esi, str._b__w_
jmp 0x85abb4
mov esi, str._b___w_
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
add eax, 0xe
mov dword [ebp - 0x50], eax
mov dword [ebp - 4], esi
jmp 0x81b9de
lea edx, [ebp - 0x74]
call fcn.0089a93a
test eax, eax
jne 0x85b6f2
mov ecx, dword [ebp - 4]
jmp 0x81be52
push 0x45
pop edx
cmp word [ecx + 2], dx
push 0x5c
pop edx
jne 0x85abf1
add ecx, 2
jmp 0x85ac12
push 3
mov edx, 0x8c8000
lea ecx, [ecx + 2]
call fcn.0081c609
pop ecx
test eax, eax
jne 0x81be88
mov ecx, dword [ebp - 4]
push 0x5c
add ecx, 6
pop edx
mov eax, dword [ebp - 0x10]
jmp 0x81be5c
mov eax, dword [ebp - 0xc]
jmp 0x81be59
mov ecx, dword [ebp + 0x28]
test dword [ecx + 0x60], 0x2000000
je 0x81be88
mov edx, dword [ebp - 8]
neg eax
mov ecx, dword [ebp - 0x34]
sbb eax, eax
and eax, 0xffffff70
add eax, 0x9d
mov word [edx], ax
push 2
pop eax
add edx, eax
mov dword [ebp - 8], edx
cmp ecx, 0xfffffffe
jne 0x85ac5c
or ecx, 0xffffffff
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x68], ecx
jmp 0x81bdd8
movzx edi, word [esi]
mov eax, edi
mov dword [ebp - 0x14], edi
and eax, ecx
mov ecx, 0xd800
cmp eax, ecx
jne 0x81bee5
add esi, 2
mov ecx, 0x3ff
and edi, ecx
shl edi, 0xa
movzx eax, word [esi]
and eax, ecx
mov dword [ebp - 4], esi
or edi, eax
add edi, 0x10000
mov dword [ebp - 0x14], edi
jmp 0x81bee5
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x70], eax
jmp 0x81bef1
mov edi, dword [ebp + 0x2c]
sub eax, ecx
sar eax, 1
mov dword [ebp - 0x20], ecx
add dword [edi], eax
mov edi, dword [ebp - 0x14]
jmp 0x81bf02
push 0x5c
pop ebx
cmp edi, ebx
jne 0x81bf20
push 0x45
pop ebx
cmp word [esi + 2], bx
jne 0x81bf20
xor ebx, ebx
add esi, 2
mov dword [ebp - 0x64], ebx
mov ebx, dword [ebp - 0x1c]
jmp 0x81bfaf
movzx eax, word [esi + 2]
push 0x3a
pop ecx
cmp ax, cx
je 0x85ad0d
push 0x2e
pop ecx
cmp ax, cx
je 0x85ad0d
push 0x3d
pop ecx
cmp ax, cx
jne 0x81bf20
lea edx, [ebp - 0x74]
mov ecx, esi
call fcn.0089a93a
mov esi, dword [ebp - 4]
test eax, eax
je 0x81bf20
xor eax, eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp + 0x28]
push 0x3a
mov ebx, dword [eax + 8]
pop eax
cmp word [esi + 2], ax
jne 0x85b88d
lea ecx, [esi + 4]
push 0x5e
pop edx
mov dword [ebp - 4], ecx
mov eax, ecx
cmp word [ecx], dx
jne 0x85ad5b
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x38], eax
lea eax, [ecx + 2]
mov ecx, eax
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x74]
sub edx, eax
sar edx, 1
call fcn.0089a8ef
mov edi, eax
test edi, edi
js 0x85b880
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0xc]
test cl, al
je 0x85ad88
push 2
pop ecx
cmp edi, ecx
jg 0x85ad88
xor ecx, ecx
mov edi, ecx
jmp 0x85ad8a
xor ecx, ecx
test eax, 0x20000000
je 0x85ae50
mov edx, ecx
mov ecx, dword [ebp - 0x30]
mov eax, ecx
neg eax
sbb eax, eax
and eax, 0xe
add eax, edi
mov esi, dword [eax*4 + 0x8c3a60]
test esi, esi
je 0x85ade6
mov ecx, dword [ebp - 0x74]
add ecx, 2
add esi, 0xfffffffe
mov dword [ebp - 0x50], ecx
jmp 0x85addb
push str._n_v_f_r
push ecx
push dword [ebp - 0x2c]
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0xe0]
call fcn.0089a5f8
add esp, 0xc
mov esi, dword [ebp - 4]
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
jmp 0x81bfac
mov eax, edi
sub eax, 8
je 0x85aea9
sub eax, 1
je 0x85ae9b
sub eax, 1
je 0x85ae9e
test ecx, ecx
je 0x85ae50
cmp dword [ebp - 0x70], 0
jne 0x85ae19
mov eax, dword [ebp - 0x74]
push 0x5d
pop ecx
cmp word [eax + 4], cx
je 0x85ae50
mov eax, dword [ebp - 0x20]
push 2
pop ecx
mov word [eax], cx
mov edx, dword [ebp - 0x20]
add edx, ecx
mov ecx, 0x100
mov dword [ebp - 0x20], edx
call fcn.0089b9a7
mov ecx, dword [ebp - 0x20]
lea edx, [ecx + eax*2]
mov ecx, 0x10ffff
mov dword [ebp - 0x20], edx
call fcn.0089b9a7
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax*2]
mov dword [ebp - 0x20], eax
imul esi, edi, 0xc
push 0x20
pop edi
push edi
mov eax, dword [esi + 0x8c4c90]
add eax, ebx
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.00820e20
mov eax, dword [esi + 0x8c4c94]
add esp, 0xc
mov esi, dword [esi + 0x8c4c98]
test eax, eax
js 0x85aef6
lea edx, [eax + ebx]
xor ebx, ebx
mov ecx, ebx
test esi, esi
js 0x85aee3
mov al, byte [edx + ecx]
or byte [ebp + ecx - 0x160], al
inc ecx
cmp ecx, edi
jb 0x85ae8a
jmp 0x85aef8
push 0xc
pop edx
test edx, edx
jne 0x85aeac
push 0xd
pop eax
mov edx, eax
jmp 0x85aeac
push 0xb
pop edx
mov eax, dword [ebp - 0x20]
add ecx, 3
push 2
pop ebx
mov word [eax], cx
xor ecx, ecx
mov eax, dword [ebp - 0x20]
add eax, ebx
mov dword [ebp - 0x20], eax
mov word [eax], dx
mov eax, dword [ebp - 0x20]
add eax, ebx
mov dword [ebp - 0x20], eax
mov word [eax], cx
mov esi, dword [ebp - 0x74]
add dword [ebp - 0x20], ebx
add esi, ebx
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x3c], eax
jmp 0x85addb
mov al, byte [edx + ecx]
not al
and byte [ebp + ecx - 0x160], al
inc ecx
cmp ecx, edi
jb 0x85aee3
jmp 0x85aef8
xor ebx, ebx
test esi, esi
jns 0x85aefe
neg esi
mov edx, dword [ebp - 0xc]
cmp esi, edx
jne 0x85af0e
and byte [ebp - 0x15f], 0xc3
jmp 0x85af1c
push 2
pop eax
cmp esi, eax
jne 0x85af1c
and byte [ebp - 0x155], 0x7f
cmp dword [ebp - 0x30], 0
mov ecx, ebx
je 0x85af3b
mov al, byte [ebp + ecx - 0x160]
not al
or byte [ebp + ecx - 0xe0], al
inc ecx
cmp ecx, edi
jb 0x85af24
jmp 0x85af4e
mov al, byte [ebp + ecx - 0x160]
or byte [ebp + ecx - 0xe0], al
inc ecx
cmp ecx, edi
jb 0x85af3b
mov esi, dword [ebp - 0x74]
push 2
pop eax
mov ebx, eax
add esi, 2
mov dword [ebp - 0x1c], ebx
jmp 0x81bfa9
push dword [ebp - 0xc]
mov eax, dword [ebp + 0x28]
lea edx, [ebp - 0xbc]
push dword [ebp - 0x2c]
lea ecx, [ebp - 4]
push dword [eax + 0x40]
push dword [ebp + 0xc]
call fcn.0081cb89
mov esi, eax
xor edx, edx
mov eax, dword [ebp + 0xc]
add esp, 0x10
cmp dword [eax], edx
jne 0x85b3ae
test esi, esi
jne 0x85afaa
mov edi, dword [ebp - 0xbc]
jmp 0x85af9f
push 8
pop edi
mov esi, dword [ebp - 4]
mov dword [ebp - 0x14], edi
jmp 0x81bf22
cmp esi, 5
je 0x85af9c
cmp esi, 0xc
je 0x85b89f
cmp esi, 0x1a
jne 0x85afe5
mov esi, dword [ebp - 4]
push 0x5c
pop eax
cmp word [esi + 2], ax
jne 0x85afda
push 0x45
pop ecx
cmp word [esi + 4], cx
jne 0x85afda
add esi, 4
jmp 0x85addb
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x64], eax
jmp 0x85addb
cmp esi, 0x19
je 0x85add8
mov ecx, dword [ebp + 0x28]
inc dword [ebp - 0x24]
add dword [ebp - 0x1c], 2
mov edi, dword [ecx + 8]
cmp esi, 0x10
jg 0x85b1a5
cmp esi, 0xf
jge 0x85b117
sub esi, 6
je 0x85b0f3
sub esi, 1
je 0x85b0d7
sub esi, 1
je 0x85b0ab
sub esi, 1
je 0x85b087
sub esi, 1
je 0x85b063
sub esi, 1
jne 0x85b1e1
xor eax, eax
push 0x20
mov ecx, eax
pop edx
mov al, byte [edi + ecx + 0xa0]
or byte [ebp + ecx - 0xe0], al
inc ecx
cmp ecx, edx
jb 0x85b042
mov edx, dword [ebp - 0x24]
mov esi, dword [ebp - 4]
mov ebx, dword [ebp - 0x1c]
jmp 0x81bfac
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x38], eax
xor eax, eax
push 0x20
mov ecx, eax
pop edx
mov al, byte [edi + ecx + 0xa0]
not al
or byte [ebp + ecx - 0xe0], al
inc ecx
cmp ecx, edx
jb 0x85b070
jmp 0x85b055
xor eax, eax
lea eax, [ebp - 0xe0]
sub edi, eax
lea ecx, [ebp - 0xe0]
add ecx, edx
push 0x20
mov al, byte [ecx + edi]
or byte [ecx], al
inc edx
pop eax
cmp edx, eax
jb 0x85b091
jmp 0x85add8
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x38], eax
xor eax, eax
lea eax, [ebp - 0xe0]
sub edi, eax
lea ecx, [ebp - 0xe0]
add ecx, edx
push 0x20
mov al, byte [ecx + edi]
not al
or byte [ecx], al
inc edx
pop eax
cmp edx, eax
jb 0x85b0bb
jmp 0x85add8
xor eax, eax
push 0x20
mov ecx, eax
pop edx
mov al, byte [edi + ecx + 0x40]
or byte [ebp + ecx - 0xe0], al
inc ecx
cmp ecx, edx
jb 0x85b0de
jmp 0x85b055
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x38], eax
xor eax, eax
push 0x20
mov ecx, eax
pop edx
mov al, byte [edi + ecx + 0x40]
not al
or byte [ebp + ecx - 0xe0], al
inc ecx
cmp ecx, edx
jb 0x85b100
jmp 0x85b055
push eax
xor ecx, ecx
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0xf0]
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0xf4], ecx
lea edx, [ebp - 0x134]
push eax
lea ecx, [ebp - 4]
call fcn.0089af65
add esp, 0xc
test eax, eax
je 0x85b3ae
xor eax, eax
push 0x10
pop ecx
cmp esi, ecx
push 2
sete al
xor ecx, ecx
cmp eax, dword [ebp - 0x134]
mov eax, dword [ebp - 0x20]
sete cl
add ecx, 3
pop edx
mov word [eax], cx
mov ecx, dword [ebp - 0x20]
mov ax, word [ebp - 0xf0]
add ecx, edx
mov dword [ebp - 0x20], ecx
mov word [ecx], ax
mov ecx, dword [ebp - 0x20]
mov ax, word [ebp - 0xf4]
add ecx, edx
mov dword [ebp - 0x20], ecx
mov word [ecx], ax
add dword [ebp - 0x20], edx
mov edx, ebx
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x3c], eax
jmp 0x81bfa6
cmp esi, 0x12
je 0x85b227
cmp esi, 0x13
je 0x85b206
cmp esi, 0x14
je 0x85adbe
cmp esi, 0x15
je 0x85b1fd
add esi, 0xffffffe3
cmp esi, 5
ja 0x85b1e1
mov esi, dword [esi*4 + 0x8c3a40]
mov edx, ebx
mov ecx, dword [ebp - 4]
mov ebx, dword [ebp - 0x1c]
push 2
pop eax
mov dword [ebp - 0x50], ecx
sub esi, eax
jmp 0x81bfa9
mov ebx, dword [ebp - 0x2c]
mov esi, dword [ebp - 4]
test bl, 0x40
jne 0x85b897
movzx edi, word [esi]
xor edx, edx
mov dword [ebp - 0x14], edi
jmp 0x81bf28
push 0xffffffffffffffff
push str._n_v_f_r
jmp 0x85b20d
push 0xffffffffffffffff
push 0x8c53f0
push ecx
push dword [ebp - 0x2c]
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0xe0]
call fcn.0089a4e3
add esp, 0x10
jmp 0x85add8
push 0x8c53f0
jmp 0x85adc3
push 0x5c
pop ebx
push 0x45
pop edi
cmp word [esi + 4], di
jne 0x85b24c
add esi, 4
mov dword [ebp - 0x64], edx
mov dword [ebp - 4], esi
cmp word [esi + 2], bx
je 0x85b237
mov edi, dword [ebp - 0x14]
mov ecx, dword [ebp + 0x28]
mov ebx, dword [ebp - 0x2c]
jmp 0x81bf35
or dword [ecx + 0x64], 0x800
jmp 0x81bf4d
push 0x5c
lea esi, [edx + 4]
pop ecx
mov dword [ebp - 4], esi
mov edi, esi
push 0x45
pop eax
cmp word [esi], cx
jne 0x85b2c5
cmp word [esi + 2], ax
jne 0x85b28c
add esi, 4
mov dword [ebp - 4], esi
mov edi, esi
cmp word [esi], cx
je 0x85b279
cmp word [esi], cx
jne 0x85b2c5
push 0x51
pop eax
cmp word [esi + 2], ax
push 0x45
pop eax
jne 0x85b2c5
lea esi, [edi + 4]
mov dword [ebp - 4], esi
cmp word [esi], cx
jne 0x85b2bd
cmp word [esi + 2], ax
jne 0x85b2bd
add esi, 4
mov dword [ebp - 4], esi
mov edi, esi
cmp word [esi], cx
je 0x85b291
jmp 0x85b2c3
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x64], eax
mov edi, esi
movzx eax, word [esi]
mov ecx, eax
test ax, ax
je 0x85b3f9
cmp dword [ebp - 0x64], 0
jne 0x85b2e6
cmp ax, word [ebp - 0x138]
je 0x85b3f9
cmp dword [ebp - 0x5c], 0
mov dword [ebp - 0xa8], ecx
je 0x85b32a
mov eax, ecx
mov edx, ecx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x85b32c
movzx eax, word [esi + 2]
mov edx, 0x3ff
and ecx, edx
lea esi, [edi + 2]
and eax, edx
shl ecx, 0xa
or ecx, eax
mov dword [ebp - 4], esi
add ecx, 0x10000
mov dword [ebp - 0xa8], ecx
mov edx, ecx
jmp 0x85b32c
mov edx, eax
cmp dword [ebp - 0x64], 0
jne 0x85b3bf
push 0x5c
pop eax
cmp edx, eax
jne 0x85b376
push dword [ebp - 0xc]
mov eax, dword [ebp + 0x28]
lea edx, [ebp - 0xa8]
push ebx
mov ebx, dword [ebp + 0xc]
lea ecx, [ebp - 4]
push dword [eax + 0x40]
push ebx
call fcn.0081cb89
xor ecx, ecx
add esp, 0x10
cmp dword [ebx], ecx
jne 0x85b3ae
test eax, eax
je 0x85b3b6
cmp eax, 5
jne 0x85b3a8
push 8
pop ecx
mov dword [ebp - 0xa8], ecx
jmp 0x85b3bc
cmp edx, 0x5b
jne 0x85b3bf
movzx eax, word [esi + 2]
push 0x3a
pop edx
cmp ax, dx
je 0x85b397
push 0x2e
pop edx
cmp ax, dx
je 0x85b397
push 0x3d
pop edx
cmp ax, dx
jne 0x85b3bf
lea edx, [ebp - 0x74]
mov ecx, esi
call fcn.0089a93a
test eax, eax
je 0x85b3b6
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x53
mov esi, dword [ebp - 4]
jmp 0x85b8be
mov ecx, dword [ebp - 0xa8]
mov esi, dword [ebp - 4]
mov edi, dword [ebp - 0x14]
cmp ecx, edi
jb 0x85b8aa
je 0x85b401
push 2
pop eax
mov ebx, eax
push 0xd
pop eax
mov dword [ebp - 0x1c], ebx
cmp ecx, eax
je 0x85b3e7
push 0xa
pop eax
cmp ecx, eax
je 0x85b3e7
mov eax, dword [ebp + 0x28]
jmp 0x85b3f1
mov eax, dword [ebp + 0x28]
or dword [eax + 0x64], 0x800
push ecx
push edi
push eax
jmp 0x81bf8d
mov edi, dword [ebp - 0x14]
mov esi, edx
mov dword [ebp - 4], esi
mov ecx, dword [ebp - 0x64]
jmp 0x81bf61
cmp dword [ebp - 0x50], 0
je 0x85b428
xor esi, esi
mov dword [ebp - 0x50], esi
lea esi, [eax + 2]
mov dword [ebp - 4], esi
movzx edi, word [esi]
mov dword [ebp - 0x14], edi
test edi, edi
jne 0x81bfc8
mov eax, dword [ebp + 0xc]
mov dword [eax], 6
jmp 0x85b8be
mov eax, dword [ebp - 0x60]
add esi, edx
cmp dword [ebp - 0x10], 0
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 4], esi
mov dword [ebp - 0x70], eax
je 0x85b505
mov ecx, dword [ebp - 0x34]
cmp ecx, 0xfffffffe
jne 0x85b462
or ecx, 0xffffffff
mov dword [ebp - 0x34], ecx
mov ebx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x68], ecx
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x7c], eax
test ebx, ebx
je 0x85b4c6
mov eax, dword [ebp - 0xc]
test al, cl
je 0x85b4c6
mov eax, edi
mov esi, 0x80
cdq
idiv esi
movzx eax, byte [eax + 0x8bff40]
shl eax, 7
add eax, edx
movzx eax, word [eax*2 + 0x8b1c40]
movzx eax, byte [eax*8 + 0x8af3f3]
test eax, eax
je 0x85b4c6
mov edx, dword [ebp - 8]
push 0xf
pop ecx
push 2
mov word [edx], cx
pop edi
add edx, edi
push 9
pop ecx
mov word [edx], cx
add edx, edi
mov word [edx], ax
add edx, edi
jmp 0x81c4da
mov edx, dword [ebp - 8]
mov eax, ecx
and eax, dword [ebp - 0xc]
push 0x1f
pop ecx
add eax, ecx
push 2
pop ecx
mov word [edx], ax
add edx, ecx
mov dword [ebp - 8], edx
test ebx, ebx
je 0x85b4fd
mov eax, 0xffff
cmp edi, eax
jbe 0x85b4fd
mov ecx, edi
call fcn.0089b9a7
mov edx, dword [ebp - 8]
lea edx, [edx + eax*2]
jmp 0x81c4da
mov word [edx], di
jmp 0x81c56d
cmp dword [ebp - 0x5c], 0
je 0x85a2f5
mov eax, 0xffff
cmp edi, eax
jbe 0x85a2f5
jmp 0x85a2cf
mov eax, dword [ebp - 0x10a]
mov edx, 0x3ff
and ecx, edx
and eax, edx
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
jmp 0x81b90b
or dword [ebp - 0x68], 0xffffffff
or dword [ebp - 0x34], 0xffffffff
jmp 0x81bdd8
or dword [ebx + 0x64], 0x800
jmp 0x81b98b
cmp dword [ebp - 0x94], 0
je 0x81c512
or dword [ebp - 0x54], 0xffffffff
or dword [ebp - 0x34], 0xffffffff
jmp 0x81b9cd
movzx ecx, word [edx - 2]
mov eax, dword [ebx + 0x68]
mov dword [ebp - 0x60], ecx
jmp 0x81b9ca
test ecx, ecx
jne 0x81b9cd
jmp 0x81b9be
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
jne 0x85b5ae
test edx, edx
je 0x85b622
mov eax, dword [ebp - 0x2c]
and eax, 0x20000000
je 0x81c019
jmp 0x85b5b6
mov eax, dword [ebp - 0x2c]
and eax, 0x20000000
mov esi, dword [ebp - 0x10]
test edx, edx
je 0x85b625
test esi, esi
jne 0x85b625
test eax, eax
jne 0x85b625
mov eax, dword [ebp - 0x20]
push 2
pop ecx
mov word [eax], cx
mov eax, dword [ebp - 0x20]
add eax, ecx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x5c], esi
je 0x85b605
mov edx, eax
mov ecx, 0x100
call fcn.0089b9a7
mov ecx, dword [ebp - 0x20]
lea edx, [ecx + eax*2]
mov ecx, 0x10ffff
mov dword [ebp - 0x20], edx
call fcn.0089b9a7
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax*2]
mov dword [ebp - 0x20], eax
jmp 0x85b625
mov edx, 0x100
mov word [eax], dx
mov edx, 0xffff
mov eax, dword [ebp - 0x20]
add eax, ecx
mov dword [ebp - 0x20], eax
mov word [eax], dx
add dword [ebp - 0x20], ecx
jmp 0x85b625
mov esi, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov edi, dword [ebp - 8]
push 2
pop edx
mov word [eax], cx
add dword [ebp - 0x20], edx
push 0x70
pop eax
mov word [edi], ax
push 4
pop eax
add edi, eax
xor eax, eax
test esi, esi
setne al
movzx eax, ax
mov word [edi], ax
mov ecx, eax
test ebx, ebx
je 0x85b65f
push 4
pop ecx
or eax, ecx
mov word [edi], ax
movzx ecx, ax
mov eax, dword [ebp - 0x24]
test eax, eax
jle 0x85b6b8
or ecx, edx
mov word [edi], cx
add edi, edx
mov eax, dword [ebp - 0x20]
sub eax, edi
and eax, 0xfffffffe
push eax
lea eax, [edi + 0x20]
push edi
push eax
call fcn.00822720
add esp, 0xc
test esi, esi
je 0x85b69c
test ebx, ebx
jne 0x85b69c
push 0x20
xor eax, eax
pop ecx
not byte [ebp + eax - 0xe0]
inc eax
cmp eax, ecx
jb 0x85b690
push 0x20
pop eax
push eax
lea eax, [ebp - 0xe0]
push eax
push edi
call fcn.00820e20
mov eax, dword [ebp - 0x20]
add esp, 0xc
add eax, 0x20
jmp 0x85b6bb
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 8], eax
sub eax, edx
sar eax, 1
mov word [edx + 2], ax
jmp 0x81b9cd
push 0x20
xor eax, eax
pop ecx
not byte [ebp + eax - 0xe0]
inc eax
cmp eax, ecx
jb 0x85b6d3
jmp 0x81c052
cmp edx, ecx
push 0x23
sbb eax, eax
pop ecx
and eax, ecx
add eax, 0x34
jmp 0x85b707
mov esi, dword [ebp - 4]
xor eax, eax
push 0xd
pop ecx
cmp word [esi + 2], di
sete al
dec eax
and eax, 0x12
add eax, ecx
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
jmp 0x85b8be
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x4b
jmp 0x85b8be
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x42
jmp 0x85b3ae
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x3b
jmp 0x85b3ae
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x1c
jmp 0x85b8be
movzx eax, word [esi]
cmp ax, cx
jb 0x85b852
push 0x30
mov ecx, eax
pop edx
push 0x39
pop eax
cmp cx, ax
ja 0x85b852
push 2
pop eax
add esi, eax
mov dword [ebp - 4], esi
movzx eax, word [esi]
mov ecx, eax
cmp ax, dx
jae 0x85b75a
jmp 0x85b852
push 0x23
jmp 0x85b88f
push 0x29
jmp 0x85b88f
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x26
jmp 0x85b8be
push 0x27
jmp 0x85b88f
push 0x2b
jmp 0x85b882
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x15
jmp 0x85b3ae
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x31
jmp 0x85b8be
mov eax, dword [ebp + 0xc]
add esi, 2
mov dword [eax], 0x18
jmp 0x85b8be
push 9
pop eax
mov dword [ebx], eax
jmp 0x85b8be
mov eax, dword [ebp + 0xc]
add esi, 0xfffffffe
mov dword [eax], 0xc
jmp 0x85b8be
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x36
jmp 0x85b3ae
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x1b
jmp 0x85b3ae
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x14
jmp 0x85b8be
mov eax, dword [ebp + 0xc]
mov dword [eax], 0xe
jmp 0x85b8be
push 0x52
jmp 0x85b88f
movzx eax, word [esi]
cmp ax, cx
jb 0x85b852
push 0x30
mov ecx, eax
pop ebx
push 0x39
pop eax
cmp cx, ax
ja 0x85b852
lea esi, [edx + 2]
mov dword [ebp - 4], esi
mov edx, esi
movzx eax, word [esi]
mov ecx, eax
cmp ax, bx
jae 0x85b838
push 0x3d
jmp 0x85b88f
push 0x3a
jmp 0x85b88f
push 0x1d
jmp 0x85b88f
push 0x39
jmp 0x85b88f
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x54
jmp 0x85b8be
push 0x30
jmp 0x85b88f
push 0x2a
jmp 0x85b88f
push 0x3e
jmp 0x85b88f
mov esi, dword [ebp - 4]
push 0xf
jmp 0x85b88f
push 0x1e
mov eax, dword [ebp + 0xc]
pop ecx
mov dword [eax], ecx
jmp 0x85b3ae
push 0x1f
mov eax, dword [ebp + 0xc]
pop ecx
mov dword [eax], ecx
jmp 0x85b8be
mov dword [eax], 7
jmp 0x85b8be
mov dword [eax], 0x47
jmp 0x85b3ae
mov eax, dword [ebp + 0xc]
mov dword [eax], 8
jmp 0x85b8be
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x34
mov eax, dword [ebp + 8]
mov dword [eax], esi
xor eax, eax
jmp 0x81bc1e