Function at 0x85be5f
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push ebx
mov ebx, ecx
push esi
mov esi, edx
push edi
mov ecx, dword [ebx + 0x28]
mov dword [ebp - 0x10], ecx
mov eax, dword [esi + 0xc]
mov dword [ebp - 4], eax
lea eax, [ecx + 1]
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x1c], eax
lea eax, [ecx + 2]
mov ecx, dword [ebx]
mov dword [ebx + 0x28], eax
mov edx, dword [esi + 0x18]
call fcn.00867d8e
mov ecx, dword [ecx + 0x10]
mov edi, eax
mov edx, edi
mov dword [ebp - 0x18], edi
add edx, edx
push dword [ecx + edx*8]
mov ecx, ebx
push 0
push dword [esi]
push 0x1b
pop edx
call fcn.0085944e
add esp, 0xc
test eax, eax
jne 0x85c0ee
mov eax, dword [ebp - 4]
mov edx, edi
mov ecx, ebx
push dword [eax]
push 1
push dword [eax + 0x1c]
call fcn.008594f7
add esp, 0xc
mov ecx, ebx
call fcn.00869fa5
mov edi, eax
test edi, edi
je 0x85c0ee
cmp dword [ebp + 8], 0
mov eax, dword [ebp + 8]
jge 0x85beec
mov eax, dword [esi + 0x2c]
mov edx, esi
mov dword [ebp - 0x14], eax
mov ecx, ebx
call fcn.0085d8e3
mov edx, dword [ebx + 0x28]
push 0xfffffffffffffff7
mov dword [ebp - 0x24], eax
mov dword [ebp - 8], edx
lea ecx, [edx + 1]
mov dword [ebx + 0x28], ecx
mov ecx, eax
call fcn.00869533
push eax
movzx eax, word [esi + 0x32]
mov ecx, edi
push eax
push 0
push edx
push 0x6f
pop edx
call fcn.00844e3d
mov eax, dword [ebp - 4]
add esp, 0x14
mov esi, dword [ebp - 0x10]
mov ecx, ebx
mov edx, esi
push 0x6a
push eax
push dword [ebp - 0x18]
call fcn.0086202c
add esp, 0xc
mov ecx, edi
push 0
push esi
push 0x25
pop edx
call fcn.00844d77
mov ecx, ebx
mov esi, eax
call fcn.00857103
mov edx, eax
mov dword [ebp - 4], edx
call fcn.0085d4f8
xor ecx, ecx
lea eax, [ebp - 0x20]
push ecx
push ecx
push eax
push ecx
push edx
push dword [ebp - 0x10]
mov edx, dword [ebp - 0xc]
mov ecx, ebx
call fcn.0085ed2f
push dword [ebp - 4]
mov edx, 0x80
mov ecx, edi
push dword [ebp - 8]
call fcn.00844d77
mov edx, dword [ebp - 0x20]
mov ecx, ebx
call fcn.0085ee64
lea eax, [esi + 1]
mov ecx, edi
push eax
push dword [ebp - 0x10]
push 7
pop edx
call fcn.00844d77
add esp, 0x30
mov edx, esi
mov ecx, edi
call fcn.00845298
cmp dword [ebp + 8], 0
mov esi, dword [ebp - 0x14]
jge 0x85bfc9
push dword [ebp - 0x18]
mov edx, 0x87
mov ecx, edi
push esi
call fcn.00844d77
pop ecx
pop ecx
push 0xfffffffffffffff7
push dword [ebp - 0x24]
mov ecx, edi
push dword [ebp - 0x18]
push esi
mov esi, dword [ebp - 0x1c]
push esi
push 0x6b
pop edx
call fcn.00844e3d
add esp, 0x14
xor edx, edx
inc edx
mov ecx, edi
cmp dword [ebp + 8], 0
push 0x11
pop eax
cmovge edx, eax
call fcn.00845280
push 0
push dword [ebp - 8]
push 0x23
pop edx
call fcn.00844d77
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0xc]
pop ecx
pop ecx
mov ecx, edi
cmp byte [eax + 0x36], 0
je 0x85c05f
xor edx, edx
inc edx
call fcn.00844d8c
mov ecx, edi
mov esi, eax
call fcn.00845161
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0xc]
movzx ecx, word [eax + 0x32]
push ecx
push dword [ebp - 4]
mov ecx, edi
push esi
push dword [ebp - 8]
push 0x7a
pop edx
call fcn.00844f6e
push dword [ebp - 0xc]
mov ecx, ebx
push 2
pop edx
call fcn.0085d55d
add esp, 0x14
mov edx, esi
mov ecx, edi
call fcn.00845298
mov esi, dword [ebp - 0x1c]
jmp 0x85c067
call fcn.00845161
mov dword [ebp - 0x18], eax
push esi
push dword [ebp - 4]
mov ecx, edi
push dword [ebp - 8]
push 0x7b
pop edx
call fcn.00844cf3
add esp, 0xc
mov ecx, edi
push esi
push 0x7f
pop edx
call fcn.00844d63
pop ecx
push dword [ebp - 4]
mov edx, 0x81
mov ecx, edi
push esi
call fcn.00844d77
push 0x10
pop edx
mov ecx, edi
call fcn.00845280
mov edx, dword [ebp - 4]
mov ecx, ebx
call fcn.00857122
push dword [ebp - 0x18]
mov ebx, dword [ebp - 8]
mov ecx, edi
push ebx
push 3
pop edx
call fcn.00844d77
mov edx, dword [ebp - 0x24]
mov ecx, edi
call fcn.00845298
push dword [ebp - 0x10]
mov ecx, edi
push 0x72
pop edx
call fcn.00844d63
add esp, 0x14
mov ecx, edi
push esi
push 0x72
pop edx
call fcn.00844d63
pop ecx
push ebx
push 0x72
pop edx
mov ecx, edi
call fcn.00844d63
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret