Function at 0x861640
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x58
mov rax, qword [rcx + 8]
mov r12, qword [rcx + 0x10]
mov rsi, qword [rcx]
mov edx, dword [rax + 0x84]
mov rbx, rax
mov qword [rsp + 0xa0], rcx
mov qword [rsp + 0x30], rax
test edx, edx
je 0x8616b9
jmp 0x861e58
lea rcx, str.first_value
cmp rax, rcx
je 0x8616cd
lea rcx, str.lead
cmp rax, rcx
je 0x861980
lea rdx, [0x00991080]
cmp rax, rdx
je 0x861980
mov rbx, qword [rbx + 0x40]
test rbx, rbx
je 0x861910
mov rdi, qword [rbx + 0x50]
lea rcx, str.nth_value
mov rax, qword [rdi + 0x38]
cmp rax, rcx
jne 0x861680
mov r13d, dword [rsi + 0x44]
movzx edx, byte [rsi + 0x1f]
mov r14d, dword [rbx + 0x64]
lea r15d, [r13 - 1]
mov dword [rsi + 0x44], r15d
test dl, dl
je 0x861ba0
sub edx, 1
mov byte [rsi + 0x1f], dl
movzx edx, dl
mov ebp, dword [rsi + rdx*4 + 0xe8]
mov r9d, dword [rbx + 0x60]
movsxd rdx, dword [r12 + 0x90]
cmp edx, dword [r12 + 0x94]
jge 0x861d10
lea ecx, [rdx + 1]
mov dword [r12 + 0x90], ecx
lea rcx, [rdx + rdx*2]
mov rdx, qword [r12 + 0x88]
lea rdx, [rdx + rcx*8]
mov dword [rdx + 8], r9d
mov dword [rdx + 0xc], 0
mov qword [rdx + 0x10], 0
mov qword [rdx], 0x4b
lea rdi, str.nth_value
cmp rax, rdi
je 0x861bb0
movsxd rax, dword [r12 + 0x90]
mov ecx, dword [r12 + 0x94]
cmp eax, ecx
jge 0x861e20
lea edx, [rax + 1]
lea r8, [rax + rax*2]
mov rax, qword [r12 + 0x88]
movabs rdi, 0x100000047
mov dword [r12 + 0x90], edx
lea rax, [rax + r8*8]
mov dword [rax + 8], ebp
mov dword [rax + 0xc], 0
mov qword [rax + 0x10], 0
mov qword [rax], rdi
mov r9d, dword [rbx + 0x68]
cmp edx, ecx
jge 0x861bfd
lea eax, [rdx + 1]
movsxd rdx, edx
lea r8, [rdx + rdx*2]
mov rdx, qword [r12 + 0x88]
mov dword [r12 + 0x90], eax
lea rdx, [rdx + r8*8]
lea r8d, [r9 + 1]
mov dword [rdx + 4], ebp
mov dword [rdx + 8], r9d
mov dword [rdx + 0xc], ebp
mov qword [rdx + 0x10], 0
mov dword [rdx], 0x6a
cmp eax, ecx
jge 0x861c31
lea edx, [rax + 1]
cdqe
lea r9, [rax + rax*2]
mov rax, qword [r12 + 0x88]
mov dword [r12 + 0x90], edx
lea rax, [rax + r9*8]
mov dword [rax + 4], r8d
mov dword [rax + 8], r15d
mov dword [rax + 0xc], ebp
mov qword [rax + 0x10], 0
mov dword [rax], 0x36
cmp ecx, edx
jle 0x861c5d
lea eax, [rdx + 1]
movsxd rdx, edx
lea r8, [rdx + rdx*2]
mov rdx, qword [r12 + 0x88]
mov dword [r12 + 0x90], eax
lea rdx, [rdx + r8*8]
mov dword [rdx + 4], r14d
mov dword [rdx + 8], 0
mov dword [rdx + 0xc], ebp
mov qword [rdx + 0x10], 0
mov dword [rdx], 0x1e
mov edx, dword [rbx + 0x60]
mov r9d, dword [rbx + 0x7c]
cmp ecx, eax
jle 0x861b60
lea ecx, [rax + 1]
cdqe
neg r13d
mov dword [r12 + 0x90], ecx
lea rcx, [rax + rax*2]
mov rax, qword [r12 + 0x88]
lea rax, [rax + rcx*8]
mov qword [rax + 0x10], 0
mov dword [rax], 0x5e
mov rcx, qword [r12 + 0x18]
mov dword [rax + 4], r14d
mov dword [rax + 8], r9d
mov dword [rax + 0xc], edx
mov eax, dword [rcx + 0x44]
add eax, dword [rcx + 0x48]
js 0x861b88
mov edx, dword [r12 + 0x90]
mov rax, qword [rcx + 0x50]
movsxd r13, r13d
mov dword [rax + r13*4], edx
test ebp, ebp
je 0x8616ac
movzx eax, byte [rsi + 0x1f]
cmp al, 7
ja 0x8616ac
lea edx, [rax + 1]
mov byte [rsi + 0x1f], dl
mov rbx, qword [rbx + 0x40]
mov dword [rsi + rax*4 + 0xe8], ebp
test rbx, rbx
jne 0x8616b9
nop word [rax + rax]
mov rax, qword [rsp + 0xa0]
mov r9d, dword [rax + 0x18]
mov r8d, dword [rax + 0x1c]
movsxd rax, dword [r12 + 0x90]
cmp eax, dword [r12 + 0x94]
jge 0x8622d0
lea edx, [rax + 1]
mov dword [r12 + 0x90], edx
lea rdx, [rax + rax*2]
mov rax, qword [r12 + 0x88]
lea rax, [rax + rdx*8]
mov dword [rax + 4], r8d
mov dword [rax + 8], r9d
mov dword [rax + 0xc], 0
mov qword [rax + 0x10], 0
mov dword [rax], 0xa
add rsp, 0x58
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rax, qword [rbx + 0x70]
mov r13d, dword [rsi + 0x44]
mov r14d, dword [rbx + 0x64]
mov rax, qword [rax + 0x20]
lea r10d, [r13 - 1]
mov r11d, dword [rax]
movzx eax, byte [rsi + 0x1f]
mov dword [rsi + 0x44], r10d
test al, al
je 0x861e08
sub eax, 1
mov byte [rsi + 0x1f], al
movzx eax, al
mov ebp, dword [rsi + rax*4 + 0xe8]
mov rax, qword [rsp + 0x30]
mov r9d, dword [rbx + 0x60]
mov r15d, dword [rax + 0x58]
cmp r11d, 2
jg 0x861c90
movsxd rdx, dword [r12 + 0x90]
mov ecx, dword [r12 + 0x94]
cmp edx, ecx
jge 0x862340
lea eax, [rdx + 1]
lea r8, [rdx + rdx*2]
mov rdx, qword [r12 + 0x88]
mov dword [r12 + 0x90], eax
lea rdx, [rdx + r8*8]
mov dword [rdx + 8], r9d
mov dword [rdx + 0xc], 0
mov qword [rdx + 0x10], 0
mov qword [rdx], 0x4b
cmp ecx, eax
jle 0x861cd8
lea edx, [rax + 1]
cdqe
mov dword [r12 + 0x90], edx
lea rdx, [rax + rax*2]
mov rax, qword [r12 + 0x88]
lea rax, [rax + rdx*8]
mov dword [rax + 4], r15d
mov dword [rax + 8], ebp
mov dword [rax + 0xc], 0
mov qword [rax + 0x10], 0
mov dword [rax], 0x87
mov rax, qword [rdi + 0x38]
lea rdi, str.lead
cmp r11d, 1
jle 0x861d38
xor r11d, r11d
cmp rax, rdi
movzx eax, byte [rsi + 0x1f]
setne r11b
add r11d, 0x6a
test al, al
je 0x8622c0
sub eax, 1
mov byte [rsi + 0x1f], al
movzx eax, al
mov edi, dword [rsi + rax*4 + 0xe8]
mov eax, dword [rbx + 0x7c]
mov dword [rsp + 0x20], edi
mov r8d, r15d
mov edx, 0x5e
mov rcx, r12
mov dword [rsp + 0x40], r10d
lea r9d, [rax + 1]
mov dword [rsp + 0x3c], r11d
call fcn.007ff320
mov r11d, dword [rsp + 0x3c]
mov r9d, ebp
mov r8d, edi
mov dword [rsp + 0x20], ebp
mov rcx, r12
mov edx, r11d
call fcn.007ff320
test edi, edi
mov r10d, dword [rsp + 0x40]
je 0x861df0
movzx eax, byte [rsi + 0x1f]
mov edx, dword [r12 + 0x90]
mov ecx, dword [r12 + 0x94]
cmp al, 7
ja 0x861d96
lea r8d, [rax + 1]
mov byte [rsi + 0x1f], r8b
mov dword [rsi + rax*4 + 0xe8], edi
cmp ecx, edx
jg 0x861d9e
nop word [rax + rax]
mov dword [rsp + 0x20], ebp
mov r9d, r10d
mov edx, 0x1e
mov rcx, r12
mov r8d, r14d
call fcn.0074a520
mov eax, dword [r12 + 0x90]
mov edx, dword [rbx + 0x60]
mov ecx, dword [r12 + 0x94]
mov r9d, dword [rbx + 0x7c]
cmp eax, ecx
jl 0x86187f
nop word cs:[rax + rax]
mov dword [rsp + 0x20], edx
mov rcx, r12
mov r8d, r14d
mov edx, 0x5e
neg r13d
call fcn.0074a520
mov rcx, qword [r12 + 0x18]
mov eax, dword [rcx + 0x44]
add eax, dword [rcx + 0x48]
jns 0x8618c9
lea rdx, [r12 + 0x90]
mov r8d, r13d
call fcn.00774670
jmp 0x8618dc
mov ecx, dword [rsi + 0x38]
lea ebp, [rcx + 1]
mov dword [rsi + 0x38], ebp
jmp 0x8616f9
mov rdi, qword [rsp + 0x30]
mov eax, dword [rbx + 0x7c]
mov edx, 0x5e
mov rcx, r12
mov r8d, dword [rdi + 0x58]
mov dword [rsp + 0x20], ebp
lea r9d, [rax + 1]
call fcn.007ff320
mov edx, ebp
mov rcx, rsi
mov r8d, 2
call fcn.0085fec0
mov edx, dword [r12 + 0x90]
mov r9d, dword [rbx + 0x68]
mov ecx, dword [r12 + 0x94]
cmp edx, ecx
jl 0x8617b6
mov dword [rsp + 0x20], ebp
mov r8d, ebp
mov rcx, r12
mov edx, 0x6a
call fcn.0074a520
mov r9d, dword [rbx + 0x68]
mov eax, dword [r12 + 0x90]
mov ecx, dword [r12 + 0x94]
lea r8d, [r9 + 1]
cmp eax, ecx
jl 0x8617f8
mov dword [rsp + 0x20], ebp
mov edx, 0x36
mov rcx, r12
mov r9d, r15d
call fcn.0074a520
mov edx, dword [r12 + 0x90]
mov ecx, dword [r12 + 0x94]
cmp ecx, edx
jg 0x861836
mov dword [rsp + 0x20], ebp
mov rcx, r12
xor r9d, r9d
mov r8d, r14d
mov edx, 0x1e
call fcn.0074a520
mov eax, dword [r12 + 0x90]
mov ecx, dword [r12 + 0x94]
jmp 0x861870
mov eax, dword [rbx + 0x7c]
mov dword [rsp + 0x20], r9d
mov rcx, r12
mov r8d, r15d
mov edx, 0x5e
mov dword [rsp + 0x40], r10d
lea r9d, [rax + 2]
mov dword [rsp + 0x3c], r11d
call fcn.007ff320
mov r10d, dword [rsp + 0x40]
mov r11d, dword [rsp + 0x3c]
mov eax, dword [r12 + 0x90]
mov ecx, dword [r12 + 0x94]
cmp ecx, eax
jg 0x861a23
mov r9d, ebp
mov r8d, r15d
mov edx, 0x87
mov rcx, r12
mov dword [rsp + 0x20], 0
mov dword [rsp + 0x40], r10d
mov dword [rsp + 0x3c], r11d
call fcn.0074a520
mov r11d, dword [rsp + 0x3c]
mov r10d, dword [rsp + 0x40]
jmp 0x861a5c
mov dword [rsp + 0x20], 0
xor r8d, r8d
mov edx, 0x4b
mov rcx, r12
call fcn.0074a520
mov rax, qword [rdi + 0x38]
jmp 0x861748
xor r9d, r9d
mov ecx, dword [r12 + 0x94]
cmp rax, rdi
movsxd rax, dword [r12 + 0x90]
sete r9b
lea r9d, [r9 + r9 - 1]
cmp eax, ecx
jge 0x862308
lea edx, [rax + 1]
lea r8, [rax + rax*2]
mov rax, qword [r12 + 0x88]
mov dword [r12 + 0x90], edx
lea rax, [rax + r8*8]
mov dword [rax + 4], ebp
mov dword [rax + 8], r9d
mov dword [rax + 0xc], 0
mov qword [rax + 0x10], 0
mov dword [rax], 0x56
cmp ecx, edx
jle 0x861b20
lea eax, [rdx + 1]
movsxd rdx, edx
lea r8, [rdx + rdx*2]
mov rdx, qword [r12 + 0x88]
mov dword [r12 + 0x90], eax
lea rdx, [rdx + r8*8]
mov dword [rdx], 0x1e
mov r9d, dword [rbx + 0x7c]
mov dword [rdx + 4], r14d
mov dword [rdx + 8], r10d
mov dword [rdx + 0xc], ebp
mov qword [rdx + 0x10], 0
mov edx, dword [rbx + 0x60]
cmp eax, ecx
jl 0x86187f
jmp 0x861b60
mov edx, dword [r12 + 0x90]
mov ecx, dword [r12 + 0x94]
jmp 0x861d96
mov eax, dword [rsi + 0x38]
lea ebp, [rax + 1]
mov dword [rsi + 0x38], ebp
jmp 0x8619b7
mov dword [rsp + 0x20], 0
mov edx, 0x47
mov rcx, r12
mov r9d, ebp
mov r8d, 1
call fcn.0074a520
mov edx, dword [r12 + 0x90]
mov ecx, dword [r12 + 0x94]
jmp 0x8617aa
mov ebp, dword [rax + 0x64]
mov rax, qword [rax + 0x18]
xor edi, edi
test rax, rax
je 0x861e68
mov edi, dword [rax]
mov eax, dword [rsi + 0x44]
lea ebx, [rax - 1]
lea r13d, [rax - 2]
mov dword [rsp + 0x44], eax
movzx eax, byte [rsi + 0x1f]
mov dword [rsp + 0x48], ebx
mov dword [rsi + 0x44], r13d
test al, al
je 0x862388
lea edx, [rax - 1]
movzx ecx, dl
mov byte [rsi + 0x1f], dl
mov ebx, dword [rsi + rcx*4 + 0xe8]
mov dword [rsp + 0x3c], ebx
test dl, dl
je 0x8625ff
sub eax, 2
mov dword [rsp + 0x40], 0
xor r15d, r15d
mov byte [rsi + 0x1f], al
movzx eax, al
mov r14d, dword [rsi + rax*4 + 0xe8]
test edi, edi
jne 0x8623b0
mov rax, qword [rsp + 0x30]
mov r8d, dword [rax + 0x58]
movsxd rax, dword [r12 + 0x90]
cmp eax, dword [r12 + 0x94]
jge 0x862480
lea edx, [rax + 1]
mov ebx, dword [rsp + 0x3c]
mov dword [r12 + 0x90], edx
lea rdx, [rax + rax*2]
mov rax, qword [r12 + 0x88]
lea rax, [rax + rdx*8]
mov dword [rax + 4], r8d
mov dword [rax + 8], ebx
mov dword [rax + 0xc], 0
mov qword [rax + 0x10], 0
mov dword [rax], 0x87
mov rax, qword [rsp + 0xa0]
mov r9d, r15d
mov rdx, qword [rax + 8]
mov rcx, qword [rax]
call fcn.00861540
mov rbx, qword [rsp + 0x30]
mov r9d, dword [rbx + 0x5c]
movsxd rax, dword [r12 + 0x90]
cmp eax, dword [r12 + 0x94]
jge 0x862290
lea edx, [rax + 1]
mov dword [r12 + 0x90], edx
lea rdx, [rax + rax*2]
mov rax, qword [r12 + 0x88]
lea rax, [rax + rdx*8]
mov qword [rax], 0x4b
mov rbx, qword [rbx + 0x40]
mov dword [rax + 8], r9d
mov dword [rax + 0xc], 0
mov qword [rax + 0x10], 0
test rbx, rbx
jne 0x861f40
mov rax, qword [rsp + 0x30]
mov r9d, r13d
mov r8d, ebp
mov edx, 0x17
mov rcx, r12
mov eax, dword [rax + 0x84]
mov dword [rsp + 0x20], eax
call fcn.007ff320
mov ebx, dword [r12 + 0x90]
cmp ebx, dword [r12 + 0x94]
jge 0x862458
lea eax, [rbx + 1]
mov dword [r12 + 0x90], eax
movsxd rax, ebx
lea rdx, [rax + rax*2]
mov rax, qword [r12 + 0x88]
lea rax, [rax + rdx*8]
mov dword [rax + 4], ebp
mov dword [rax + 8], r14d
mov dword [rax + 0xc], 0
mov qword [rax + 0x10], 0
mov dword [rax], 0x87
mov rax, qword [rsp + 0x30]
mov r9d, r13d
mov edx, 0x36
mov rcx, r12
mov r8d, dword [rax + 0x88]
mov dword [rsp + 0x20], r14d
call fcn.007ff320
mov rax, qword [rsp + 0x30]
movzx eax, byte [rax + 0x24]
cmp al, 0x55
je 0x862430
cmp al, 0x42
je 0x86213b
mov rcx, qword [rsp + 0x30]
mov r13, qword [rcx + 0x18]
test r13, r13
je 0x862408
xor r9d, r9d
xor r8d, r8d
mov rdx, r13
mov rcx, rsi
call fcn.007da640
mov rcx, qword [rsp + 0x30]
mov dword [rsp + 0x4c], 0
mov r13, rax
cmp byte [rcx + 0x24], 0x5e
je 0x862540
test r13, r13
je 0x862610
mov rax, qword [rsp + 0xa0]
mov r9d, dword [rsp + 0x40]
mov r8d, ebp
mov rdx, qword [rax + 8]
mov rcx, qword [rax]
call fcn.00861540
mov dword [rsp + 0x20], edi
mov r9d, r15d
mov rcx, r12
mov r8d, dword [rsp + 0x40]
mov edx, 0x5a
call fcn.007ff320
mov rax, qword [r12]
cmp byte [rax + 0x67], 0
jne 0x86250d
movsxd rax, dword [r12 + 0x90]
lea rdx, [rax + rax*2]
mov rax, qword [r12 + 0x88]
lea rax, [rax + rdx*8 - 0x18]
mov byte [rax + 1], 0xf8
mov qword [rax + 0x10], r13
mov eax, dword [r12 + 0x90]
mov r9d, dword [rsp + 0x48]
mov edx, 0xe
mov rcx, r12
lea r8d, [rax + 1]
mov dword [rsp + 0x20], r8d
call fcn.007ff320
mov r10d, dword [rsp + 0x4c]
test r10d, r10d
je 0x86213b
mov rcx, qword [r12]
mov edx, dword [r12 + 0x90]
lea rax, [0x00868dc0]
cmp byte [rcx + 0x67], 0
je 0x8624f5
mov dword [rax + 8], edx
mov rax, qword [rsp + 0xa0]
mov rdx, qword [rsp + 0x30]
xor r9d, r9d
mov r8d, ebp
mov eax, dword [rax + 0x20]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rax]
call fcn.0085f340
mov rcx, qword [r12 + 0x18]
mov r8d, dword [rsp + 0x44]
mov eax, dword [rcx + 0x44]
neg r8d
add eax, dword [rcx + 0x48]
js 0x8623f0
mov edx, dword [r12 + 0x90]
mov rax, qword [rcx + 0x50]
movsxd r8, r8d
mov dword [rax + r8*4], edx
movsxd rax, dword [r12 + 0x90]
cmp eax, dword [r12 + 0x94]
jge 0x8624b0
lea edx, [rax + 1]
lea rcx, [rax + rax*2]
mov rax, qword [r12 + 0x88]
mov dword [r12 + 0x90], edx
lea rax, [rax + rcx*8]
mov dword [rax + 4], ebp
mov dword [rax + 8], ebx
mov dword [rax + 0xc], 0
mov qword [rax + 0x10], 0
mov dword [rax], 0x27
mov rax, qword [r12]
cmp byte [rax + 0x67], 0
jne 0x8622f0
sub ebx, 1
mov rcx, qword [r12 + 0x88]
movsxd rbx, ebx
lea rax, [rbx + rbx*2]
shl rax, 3
mov dword [rcx + rax + 8], edx
lea rax, [rcx + rax + 0x30]
mov dword [rax + 8], edx
test r14d, r14d
je 0x862228
movzx eax, byte [rsi + 0x1f]
cmp al, 7
ja 0x862245
lea edx, [rax + 1]
mov byte [rsi + 0x1f], dl
mov dword [rsi + rax*4 + 0xe8], r14d
mov ebx, dword [rsp + 0x3c]
test ebx, ebx
je 0x862245
movzx eax, byte [rsi + 0x1f]
cmp al, 7
ja 0x862245
lea edx, [rax + 1]
mov byte [rsi + 0x1f], dl
mov dword [rsi + rax*4 + 0xe8], ebx
test edi, edi
je 0x862268
cmp edi, 1
je 0x862563
cmp edi, dword [rsi + 0x28]
jle 0x862268
mov eax, dword [rsp + 0x40]
mov dword [rsi + 0x28], edi
mov dword [rsi + 0x2c], eax
nop dword [rax]
mov rax, qword [rsp + 0xa0]
mov r8d, 1
mov rdx, qword [rax + 8]
mov rcx, qword [rax]
call fcn.0085eeb0
jmp 0x861910
mov dword [rsp + 0x20], 0
xor r8d, r8d
mov edx, 0x4b
mov rcx, r12
call fcn.0074a520
mov rbx, qword [rbx + 0x40]
test rbx, rbx
jne 0x861f40
jmp 0x861f98
mov eax, dword [rsi + 0x38]
lea edi, [rax + 1]
mov dword [rsi + 0x38], edi
jmp 0x861a9b
mov dword [rsp + 0x20], 0
mov edx, 0xa
mov rcx, r12
call fcn.0074a520
jmp 0x86196e
mov dword [0x00868dc8], edx
lea rax, [0x00868dc0]
jmp 0x86220a
mov edx, 0x56
mov rcx, r12
mov r8d, ebp
mov dword [rsp + 0x3c], r10d
mov dword [rsp + 0x20], 0
call fcn.0074a520
mov edx, dword [r12 + 0x90]
mov r10d, dword [rsp + 0x3c]
mov ecx, dword [r12 + 0x94]
jmp 0x861d96
mov rcx, r12
xor r8d, r8d
mov edx, 0x4b
mov dword [rsp + 0x40], r10d
mov dword [rsp + 0x20], 0
mov dword [rsp + 0x3c], r11d
call fcn.0074a520
mov r11d, dword [rsp + 0x3c]
mov r10d, dword [rsp + 0x40]
mov eax, dword [r12 + 0x90]
mov ecx, dword [r12 + 0x94]
jmp 0x861a1b
mov eax, dword [rsi + 0x38]
add eax, 1
mov dword [rsp + 0x3c], eax
mov r14d, eax
add r14d, 1
mov dword [rsp + 0x40], 0
xor r15d, r15d
mov dword [rsi + 0x38], r14d
test edi, edi
je 0x861eca
cmp edi, 1
je 0x8625ac
mov eax, dword [rsi + 0x28]
mov r15d, dword [rsi + 0x2c]
cmp edi, eax
jg 0x8624d8
lea ebx, [rdi + r15]
sub eax, edi
mov dword [rsp + 0x40], ebx
mov dword [rsi + 0x2c], ebx
mov dword [rsi + 0x28], eax
cmp edi, eax
jg 0x862608
lea edx, [rdi + rbx]
sub eax, edi
mov dword [rsi + 0x2c], edx
mov dword [rsi + 0x28], eax
jmp 0x861eca
lea rdx, [r12 + 0x90]
call fcn.00774670
jmp 0x862191
cmp al, 0x5e
je 0x862540
mov r9d, dword [rsp + 0x48]
xor r8d, r8d
mov edx, 9
mov rcx, r12
call fcn.007ff390
jmp 0x86213b
mov dword [rsp + 0x20], r14d
mov r9d, dword [rsp + 0x48]
mov edx, 0x35
mov rcx, r12
mov r8d, dword [rsp + 0x3c]
call fcn.007ff320
jmp 0x86213b
mov r9d, r14d
mov r8d, ebp
mov edx, 0x87
mov rcx, r12
mov dword [rsp + 0x20], 0
call fcn.0074a520
jmp 0x86200a
mov dword [rsp + 0x20], 0
mov r9d, dword [rsp + 0x3c]
mov edx, 0x87
mov rcx, r12
call fcn.0074a520
mov rax, qword [rsp + 0x30]
mov r8d, dword [rax + 0x58]
jmp 0x861f24
mov edx, 0x27
mov r9d, ebx
mov r8d, ebp
mov rcx, r12
mov dword [rsp + 0x20], 0
call fcn.0074a520
mov edx, dword [r12 + 0x90]
jmp 0x8621dd
mov eax, dword [rsi + 0x38]
lea r15d, [rax + 1]
add eax, edi
mov dword [rsi + 0x38], eax
lea ebx, [rax + 1]
add eax, edi
mov dword [rsp + 0x40], ebx
mov dword [rsi + 0x38], eax
jmp 0x861eca
movsxd rax, r10d
lea rcx, [rax + rax*2]
mov rax, qword [r12 + 0x88]
lea rax, [rax + rcx*8]
jmp 0x862138
cmp qword [rax + 0x308], 0
jne 0x8620ee
sub dword [r13], 1
jne 0x8620ee
mov rcx, qword [r13 + 0x10]
mov rdx, r13
call fcn.007ae1d0
jmp 0x8620ee
mov dword [rsp + 0x20], r14d
mov r8d, dword [rsp + 0x3c]
xor r9d, r9d
mov rcx, r12
mov edx, 0x35
call fcn.007ff320
mov dword [rsp + 0x4c], eax
jmp 0x862081
mov edi, dword [rsp + 0x40]
test edi, edi
je 0x862584
movzx eax, byte [rsi + 0x1f]
cmp al, 7
ja 0x862268
lea edx, [rax + 1]
mov byte [rsi + 0x1f], dl
mov dword [rsi + rax*4 + 0xe8], edi
test r15d, r15d
je 0x862268
movzx eax, byte [rsi + 0x1f]
cmp al, 7
ja 0x862268
lea edx, [rax + 1]
mov byte [rsi + 0x1f], dl
mov dword [rsi + rax*4 + 0xe8], r15d
jmp 0x862268
movzx eax, byte [rsi + 0x1f]
test al, al
je 0x8625e2
lea edx, [rax - 1]
movzx ecx, dl
mov byte [rsi + 0x1f], dl
mov r15d, dword [rsi + rcx*4 + 0xe8]
test dl, dl
je 0x86262a
sub eax, 2
mov byte [rsi + 0x1f], al
movzx eax, al
mov eax, dword [rsi + rax*4 + 0xe8]
mov dword [rsp + 0x40], eax
jmp 0x861eca
mov eax, dword [rsi + 0x38]
lea r15d, [rax + 1]
mov dword [rsi + 0x38], r15d
mov eax, r15d
add eax, 1
mov dword [rsp + 0x40], eax
mov dword [rsi + 0x38], eax
jmp 0x861eca
mov r14d, dword [rsi + 0x38]
jmp 0x862395
mov eax, dword [rsi + 0x38]
jmp 0x8624e4
mov r9d, dword [rsp + 0x48]
xor r8d, r8d
mov edx, 9
mov rcx, r12
call fcn.007ff390
jmp 0x862111
mov eax, dword [rsi + 0x38]
jmp 0x8625f0