Function at 0x1a1e8b4
Capabilities:
Access peb ldr_data

Disassembly:
push 0x218
push 0x1aafe30
call fcn.01a36178
mov edi, edx
mov dword [ebp - 0xf0], edi
mov dword [ebp - 0x168], ecx
push 0x13
pop eax
mov word [ebp - 0x180], ax
push 0x14
pop eax
mov word [ebp - 0x17e], ax
mov dword [ebp - 0x17c], 0x19b6b40
mov ecx, dword [0x1ac92d0]
call fcn.01a204e5
xor ebx, ebx
push ebx
call fcn.01a13630
mov dword [0x1ac7bb8], eax
push ebx
call fcn.01a13630
mov dword [0x1ac7bc4], eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x120], eax
mov ebx, dword [eax + 0x30]
mov dword [ebp - 0x14c], ebx
push 0x30
pop eax
mov dword [ebp - 0x174], eax
mov dword [0x1ac7c00], eax
xor eax, eax
inc eax
mov byte [0x1ac7c04], al
mov eax, 0x1ac7c0c
mov dword [0x1ac7c10], eax
mov dword [0x1ac7c0c], eax
mov eax, 0x1ac7c14
mov dword [0x1ac7c18], eax
mov dword [0x1ac7c14], eax
mov eax, 0x1ac7c1c
mov dword [0x1ac7c20], eax
mov dword [0x1ac7c1c], eax
xor eax, eax
mov byte [0x1ac7c28], al
mov dword [0x1ac7c2c], eax
mov dword [ebx + 0xc], 0x1ac7c00
mov ecx, ebx
call fcn.01a5eca2
xor edx, edx
mov dword [0x1ac68e0], edx
mov eax, dword [ebx + 0x64]
xor ecx, ecx
inc ecx
cmp eax, ecx
mov ecx, 0x400
jbe 0x1a1e9a1
mov dword [0x1ac68e0], ecx
mov dword [0x1ac65d0], edx
cmp eax, 1
jbe 0x1a1e9b2
mov dword [0x1ac65d0], ecx
dec eax
neg eax
sbb eax, eax
and dword [0x1ac5860], eax
mov ecx, dword [ebx + 0x10]
mov edx, dword [ecx + 0x3c]
xor eax, eax
inc eax
test byte [ecx + 8], al
jne 0x1a1e9cd
add edx, ecx
mov dword [ebp - 0x118], edx
mov si, word [ecx + 0x38]
mov word [ebp - 0x11c], si
mov eax, dword [ebp - 0x11c]
add eax, 2
mov word [ebp - 0x11a], ax
mov dword [ebp - 0x114], 8
cmp si, word [ebp - 0x114]
jb 0x1a1ea66
push 0x5c
pop edi
cmp word [edx], di
jne 0x1a1ea60
push 0x3f
pop ebx
cmp word [edx + 2], bx
mov ebx, dword [ebp - 0x14c]
jne 0x1a1ea60
push 0x3f
pop ebx
cmp word [edx + 4], bx
mov ebx, dword [ebp - 0x14c]
jne 0x1a1ea60
cmp word [edx + 6], di
jne 0x1a1ea60
mov edi, 0xfff8
add si, di
mov word [ebp - 0x11c], si
add ax, di
mov word [ebp - 0x11a], ax
lea eax, [edx + 8]
mov dword [ebp - 0x118], eax
add word [ecx + 0x38], di
add word [ecx + 0x3a], di
mov eax, dword [ebp - 0x114]
add dword [ecx + 0x3c], eax
mov edi, dword [ebp - 0xf0]
xor eax, eax
inc eax
mov dword [ebp - 0x158], eax
xor ecx, ecx
mov byte [0x1ac7bc8], cl
mov byte [ebp - 0xe1], cl
mov dword [ebp - 0x170], ecx
lea eax, [ebp - 0xec]
push eax
push ecx
push ecx
push dword [ebx + 8]
push 3
pop eax
push eax
call fcn.019fba70
mov esi, dword [ebp - 0xec]
mov dword [0x1ac7b8c], esi
mov eax, 0x1ac7a00
push 0x20
pop ecx
mov edx, dword [ebp - 0x114]
mov dword [eax + 4], eax
mov dword [eax], eax
add eax, edx
sub ecx, 1
jne 0x1a1eab2
mov ecx, edi
call fcn.01a5ebcd
call fcn.01a1bf92
xor eax, eax
inc eax
push eax
call fcn.019db104
call fcn.019fe55e
xor edx, edx
inc edx
cmp eax, edx
jne 0x1a1eae9
mov dword [0x1ac7bc0], 0x19b1640
mov cl, byte [0x7ffe02d5]
push 3
pop eax
test al, cl
je 0x1a1eaff
mov al, byte [esi + 0x5f]
and al, dl
xor edx, edx
jmp 0x1a1eb03
xor edx, edx
mov al, dl
test al, al
je 0x1a1eb11
xor eax, eax
inc eax
mov byte [0x1ac84d8], al
jmp 0x1a1eb3a
and cl, 0xc
cmp cl, 4
je 0x1a1eb2b
mov ecx, esi
call fcn.01a06c29
neg al
sbb al, al
inc al
xor ecx, ecx
inc ecx
jmp 0x1a1eb30
xor ecx, ecx
inc ecx
mov al, cl
test al, al
jne 0x1a1eb3a
mov dword [0x1ac586c], ecx
mov esi, 0x1ac92d8
lea edi, [ebp - 0x3c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
shrd ecx, eax, 4
shr eax, 4
mov dword [ebp - 0x13c], eax
push 3
pop eax
and ecx, eax
mov dword [ebp - 0x13c], edx
movzx eax, cl
sub eax, 1
je 0x1a1eb8c
sub eax, 1
je 0x1a1eb82
sub eax, 1
jne 0x1a1eb92
mov dword [0x1ac586c], 2
jmp 0x1a1eb92
xor eax, eax
inc eax
mov dword [0x1ac586c], eax
jmp 0x1a1eb92
mov dword [0x1ac586c], edx
mov esi, 0x1ac92d8
lea edi, [ebp - 0x4c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40]
shrd ecx, eax, 4
shr eax, 4
mov dword [ebp - 0x13c], eax
push 3
pop eax
and ecx, eax
mov dword [ebp - 0x13c], edx
xor eax, eax
inc eax
cmp cl, al
jne 0x1a1ebca
mov byte [0x1ac7b90], al
jmp 0x1a1ec09
mov byte [0x1ac7b90], dl
mov esi, 0x1ac92d8
lea edi, [ebp - 0x5c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x50]
shrd ecx, eax, 4
shr eax, 4
mov dword [ebp - 0x13c], eax
push 3
pop eax
and ecx, eax
mov dword [ebp - 0x13c], edx
cmp cl, al
je 0x1a1ec06
mov byte [0x1ac7bbc], dl
jmp 0x1a1ec0e
xor eax, eax
inc eax
mov byte [0x1ac7bbc], al
mov eax, dword fs:[0x18]
mov ecx, dword [eax + 0xfdc]
test ecx, ecx
jns 0x1a1ec20
add eax, ecx
cmp eax, dword [eax + 0x18]
jne 0x1a1ec2d
mov eax, dword [eax + 0xe38]
jmp 0x1a1ec33
mov eax, dword [eax + 0x14d0]
mov eax, dword [eax]
mov dword [0x1ac7ba0], eax
mov ecx, edx
mov dword [0x1ac7bd0], ecx
xor edx, edx
inc edx
test dl, al
jne 0x1a1ec56
shr eax, 1
inc ecx
test dl, al
je 0x1a1ec49
mov dword [0x1ac7bd0], ecx
call fcn.01a5f2c6
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x12c]
push eax
mov esi, dword [ebp - 0xf0]
push esi
mov edx, ebx
lea ecx, [ebp - 0x11c]
call fcn.01a1e252
mov dword [ebp - 0xe0], eax
test eax, eax
jns 0x1a1ecc0
mov ecx, dword [0x1ac5760]
push 3
pop edx
test dl, cl
je 0x1a204d9
push eax
mov ecx, dword [ebp - 0x120]
push dword [ecx + 0x20]
push 0x19b6b58
xor eax, eax
push eax
push 0x19b6bac
push 0xeb3
jmp 0x1a204c0
mov ecx, dword [ebp - 0x12c]
call fcn.01a5ef5f
cmp dword [0x1ac8790], 0
je 0x1a1ecea
xor eax, eax
mov dword [ebx + 0xc], eax
mov dword [0x1ac7c30], 2
xor eax, eax
jmp 0x1a204df
push 2
pop eax
test byte [ebx + 0x68], al
je 0x1a1ecfb
xor ecx, ecx
inc ecx
or dword [0x1ac5760], ecx
test byte [0x1ac5760], 5
je 0x1a1ed2a
mov ecx, dword [ebp - 0x120]
push dword [ecx + 0x20]
push 0x19b6bc4
push eax
push 0x19b6bac
push 0xedc
push 0x19b55b0
call fcn.01a5b8e2
add esp, 0x18
xor al, al
je 0x1a1ed2f
int3
cmp byte [0x1ac7bc8], 0
jne 0x1a1ed65
lea eax, [ebp - 0x13c]
push eax
push 0xe
xor eax, eax
inc eax
push eax
push dword [ebx + 8]
call fcn.019e9a20
test eax, eax
je 0x1a1ed65
xor ecx, ecx
inc ecx
mov byte [0x1ac7bc8], cl
test byte [eax + 0x10], cl
je 0x1a1ed65
mov byte [ebp - 0xe1], cl
mov dword [0x1ac7bf0], esi
mov edi, dword [ebx + 0x1e8]
mov dword [ebp - 0x128], edi
mov eax, dword [ebx + 0x70]
mov dword [0x1ac7900], eax
mov eax, dword [ebx + 0x74]
mov dword [0x1ac7904], eax
push dword [ebx + 0x10]
call fcn.01a6b4c0
mov ecx, dword [eax + 0x38]
mov dword [ebp - 0x108], ecx
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x104], eax
mov ecx, dword [ebx + 8]
call fcn.019fc150
mov esi, eax
push 0x30
pop edi
push edi
xor eax, eax
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.01a28e60
add esp, 0xc
push 2
pop ecx
mov dword [ebp - 0xf4], ecx
mov dword [ebp - 0x8c], edi
test esi, esi
je 0x1a1ee6f
cmp dword [esi], 0x10
jb 0x1a1ede5
mov eax, dword [esi + 0xc]
not eax
and dword [ebx + 0x68], eax
cmp dword [esi], 0x14
jb 0x1a1edf0
mov eax, dword [esi + 0x10]
or dword [ebx + 0x68], eax
cmp dword [esi], 0x18
jb 0x1a1ee0e
mov eax, dword [esi + 0x14]
test eax, eax
je 0x1a1ee0e
mov edx, 0xffffd8f0
imul edx
mov dword [0x1ac7900], eax
mov dword [0x1ac7904], edx
cmp dword [esi], edi
jb 0x1a1ee33
mov eax, dword [esi + 0x2c]
test eax, eax
je 0x1a1ee33
mov edx, eax
and edx, 0xffff0fff
je 0x1a1ee29
mov dword [ebp - 0xf4], edx
and eax, 0xf000
mov dword [0x1ac84f0], eax
cmp dword [esi], 0x1c
jb 0x1a1ee42
mov eax, dword [esi + 0x18]
test eax, eax
je 0x1a1ee42
mov dword [ebp - 0x80], eax
cmp dword [esi], 0x20
jb 0x1a1ee51
mov eax, dword [esi + 0x1c]
test eax, eax
je 0x1a1ee51
mov dword [ebp - 0x7c], eax
cmp dword [esi], 0x28
jb 0x1a1ee60
mov eax, dword [esi + 0x24]
test eax, eax
je 0x1a1ee60
mov dword [ebp - 0x78], eax
cmp dword [esi], 0x2c
jb 0x1a1ee6f
mov eax, dword [esi + 0x28]
test eax, eax
je 0x1a1ee6f
mov dword [ebp - 0x74], eax
xor eax, eax
inc eax
test byte [ebx + 0x68], cl
je 0x1a1ee7d
or dword [0x1ac5760], eax
cmp dword [0x1ac7904], 0xfffffff7
jg 0x1a1ee99
jl 0x1a1ee94
cmp dword [0x1ac7900], 0x9e3b9800
jae 0x1a1ee99
mov byte [0x1ac78fc], al
call fcn.01a1722b
mov dword [ebp - 0xe0], eax
test eax, eax
js 0x1a204df
mov dword [ebx + 0x218], 0x1ac7be0
mov dword [ebx + 0x40], 0x1ac7bb0
mov dword [ebx + 0x150], 0x1ac7b98
mov edi, 0x80
mov dword [0x1ac7be0], edi
lea ecx, [ebx + 0x21c]
mov dword [0x1ac7be4], ecx
movsx eax, byte [ecx]
bts eax, 0
mov byte [ecx], al
lea eax, [ebx + 0x210]
mov dword [eax + 4], eax
mov dword [eax], eax
mov dword [0x1ac7bb0], 0x40
lea ecx, [ebx + 0x44]
mov dword [0x1ac7bb4], ecx
movsx eax, byte [ecx]
bts eax, 0
mov byte [ecx], al
mov dword [0x1ac7b98], 0x400
lea ecx, [ebx + 0x154]
mov dword [0x1ac7b9c], ecx
movsx eax, byte [ecx]
bts eax, 0
mov byte [ecx], al
xor eax, eax
inc eax
push eax
push 0x10
push dword [ebx + 0x40]
call fcn.01a0eaf0
test dword [ebx + 0x68], 0x1000
jne 0x1a1ef51
mov al, byte [0x1ac8796]
test al, al
je 0x1a1f016
push 0x10
pop esi
mov dword [ebp - 0x15c], esi
cmp byte [0x1ac7bf4], 0
jne 0x1a1ef8b
xor eax, eax
push eax
push eax
push 4
lea eax, [ebp - 0x15c]
push eax
push 4
push 0x19b6be0
lea eax, [ebp - 0x11c]
push eax
call fcn.01a06ff0
mov esi, dword [ebp - 0x15c]
jmp 0x1a1ef90
mov eax, 0xc0000034
mov dword [ebp - 0xe0], eax
test eax, eax
js 0x1a1ef9f
cmp esi, 0x10
jae 0x1a1efa6
mov esi, 0x1000000
jmp 0x1a1efb4
cmp esi, edi
jbe 0x1a1efb1
mov esi, 0x8000000
jmp 0x1a1efb4
shl esi, 0x14
test byte [0x1ac5760], 5
je 0x1a1efe1
mov eax, esi
shr eax, 0x14
push eax
push 0x19b6c18
push 2
push 0x19b6bac
push 0x100d
push 0x19b55b0
call fcn.01a5b8e2
add esp, 0x18
xor al, al
je 0x1a1efe6
int3
xor eax, eax
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1a0], esi
lea eax, [ebp - 0x1a8]
push eax
push 0xc
pop edx
xor ecx, ecx
call fcn.01a8cb44
mov dword [ebp - 0xe0], eax
mov al, byte [0x1ac8796]
test dword [ebx + 0x68], 0x1000
jne 0x1a1f023
test al, al
je 0x1a1f02e
xor edx, edx
inc edx
mov byte [0x1ac67c0], dl
jmp 0x1a1f031
xor edx, edx
inc edx
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0x1d8]
and eax, 0x400000
xor ecx, ecx
or eax, ecx
je 0x1a1f054
mov byte [0x1ac67c0], dl
mov byte [0x1ac67c1], dl
push ecx
push ecx
mov esi, 0x1ac79c0
push esi
call fcn.019e03e0
mov dword [ebp - 0xe0], eax
test eax, eax
js 0x1a204df
mov dword [ebx + 0x1c], esi
lea ecx, [ebp - 0x11c]
call fcn.01a097f3
mov esi, 0x1ac92d8
lea edi, [ebp - 0x2c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
shrd ecx, eax, 0xc
shr eax, 0xc
mov dword [ebp - 0x13c], eax
push 3
pop eax
and ecx, eax
xor eax, eax
mov dword [ebp - 0x13c], eax
xor edx, edx
inc edx
cmp cl, dl
jne 0x1a1f0b9
push eax
push eax
push edx
push eax
call fcn.01a1b080
mov eax, dword [ebp - 0xec]
push 3
pop ecx
cmp word [eax + 0x48], cx
mov ecx, dword [ebp - 0xf4]
ja 0x1a1f0db
cmp word [eax + 0x4a], 0x33
jae 0x1a1f0db
or ecx, 0x10000
lea edx, [ebp - 0x8c]
push edx
xor edx, edx
push edx
push dword [eax + 0x6c]
push dword [eax + 0x68]
push edx
push ecx
call fcn.019dd2b0
mov esi, eax
test esi, esi
jne 0x1a1f137
mov eax, dword [0x1ac5760]
push 3
pop ecx
test cl, al
je 0x1a1f128
push 0x19b6c40
xor eax, eax
push eax
push 0x19b6bac
push 0x106f
push 0x19b55b0
call fcn.01a5b8e2
add esp, 0x14
mov eax, dword [0x1ac5760]
test al, 0x10
je 0x1a1f12d
int3
mov eax, 0xc0000017
jmp 0x1a204df
mov dword [ebx + 0x18], esi
test dword [ebx + 0x68], 0x800000
je 0x1a1f148
call fcn.01a8c3ef
mov ecx, dword [ebp - 0x120]
call fcn.01a14164
mov dword [0x1ac7bf8], esi
xor eax, eax
mov dword [0x1ac60d0], eax
mov dword [0x1ac60d4], eax
mov dword [0x1ac60c0], eax
mov dword [ebp - 0xe0], eax
push 0x19b6c68
push 0x19b6d78
push eax
push esi
call fcn.01a18ff0
mov dword [0x1ac7bfc], eax
call fcn.01a18f65
mov dword [ebp - 0xe0], eax
test eax, eax
js 0x1a204df
push 0x1ac60b8
xor eax, eax
push eax
push eax
push 0x19b4f98
call fcn.01a02510
push 0x1ac65d8
xor eax, eax
push eax
push 0x1a86390
push 0x19b6b20
call fcn.01a02510
push 0x1ac8678
xor eax, eax
push eax
push 0x1a916f0
push 0x19b6aec
call fcn.01a02510
call fcn.01a0aa77
mov dword [ebp - 0xe0], eax
test eax, eax
js 0x1a204df
call fcn.01a19069
mov dword [ebp - 0xe0], eax
test eax, eax
js 0x1a204df
mov ecx, dword [ebx + 0x10]
mov dword [ebp - 0x148], ecx
mov eax, dword [ecx + 0x38]
mov dword [ebp - 0x108], eax
mov eax, dword [ecx + 0x3c]
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x118], eax
mov edx, dword [ebp - 0x12c]
test edx, edx
jne 0x1a1f233
cmp dword [ebp - 0x130], edx
je 0x1a1f280
xor eax, eax
push eax
push ecx
push 4
lea eax, [ebp - 0x170]
push eax
push 4
push 0x19b6d88
mov ecx, dword [ebp - 0x130]
call fcn.019d76ed
mov dword [ebp - 0xe0], eax
test eax, eax
js 0x1a1f280
cmp dword [0x1ac52dc], 0
je 0x1a1f280
cmp dword [ebp - 0x170], 0
je 0x1a1f280
xor eax, eax
mov dword [0x1ac52dc], eax
mov eax, dword [str._memicmp]
and dword [eax], 0xfffffbff
call fcn.019ece10
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.01a02c30
mov eax, dword [ebp - 0x154]
movzx edi, ax
add edi, 0x28
push edi
xor eax, eax
push eax
push esi
call fcn.019f3940
test eax, eax
je 0x1a1f12d
xor ecx, ecx
mov word [ebp - 0x138], cx
mov word [ebp - 0x136], di
mov dword [ebp - 0x134], eax
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x138]
push eax
call fcn.01a01550
push 0x19b10e0
lea eax, [ebp - 0x138]
push eax
call fcn.01a01550
mov al, byte [ebx + 3]
and al, 0x42
cmp al, 2
je 0x1a1f4f6
push 0x18
pop edi
mov dword [ebp - 0x198], edi
xor eax, eax
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x18c], 0x40
mov dword [ebp - 0x190], 0x19b1690
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], eax
lea eax, [ebp - 0x198]
push eax
push 3
pop eax
push eax
push 0x1ac78f8
call fcn.01a22ee0
mov dword [ebp - 0xe0], eax
cmp eax, 0xc0000034
jne 0x1a1f389
test byte [ebx + 3], 0x40
je 0x1a1f389
test byte [0x1ac5760], 5
je 0x1a1f377
push 0x19b6db4
push 2
push 0x19b6bac
push 0x115a
push 0x19b55b0
call fcn.01a5b8e2
add esp, 0x14
xor al, al
je 0x1a1f37c
int3
xor edx, edx
mov dword [ebp - 0xe0], edx
jmp 0x1a1f4f8
test eax, eax
jns 0x1a1f3bb
mov ecx, dword [0x1ac5760]
push 3
pop edx
test dl, cl
je 0x1a204d9
push eax
push 0x19b1690
push 0x19b6df4
xor eax, eax
push eax
push 0x19b6bac
push 0x1164
jmp 0x1a204c0
mov dword [ebp - 0x198], edi
mov eax, dword [0x1ac78f8]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x18c], 0x40
mov edi, 0x19b1680
mov dword [ebp - 0x190], edi
xor eax, eax
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], eax
lea eax, [ebp - 0x198]
push eax
xor eax, eax
inc eax
push eax
lea eax, [ebp - 0x178]
push eax
call fcn.01a23b80
mov dword [ebp - 0xe0], eax
test eax, eax
jns 0x1a1f43a
mov ecx, dword [0x1ac5760]
push 3
pop edx
test dl, cl
je 0x1a204d9
push eax
push edi
push 0x19b6df4
xor eax, eax
push eax
push 0x19b6bac
push 0x11a7
jmp 0x1a204c0
push 0x30
pop eax
push eax
xor eax, eax
push eax
push esi
call fcn.019f3940
mov edi, eax
test edi, edi
je 0x1a1f12d
xor eax, eax
mov word [0x1ac7908], ax
mov eax, dword [ebp - 0x174]
mov word [0x1ac790a], ax
mov dword [0x1ac790c], edi
lea eax, [ebp - 0x19c]
push eax
push 0x1ac7908
push dword [ebp - 0x178]
call fcn.01a23e70
mov dword [ebp - 0xe0], eax
test eax, eax
jns 0x1a1f4e1
cmp eax, 0xc0000023
jne 0x1a1f4ab
push edi
xor eax, eax
push eax
push esi
call fcn.019f1440
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x174], eax
jmp 0x1a1f43d
mov ecx, dword [0x1ac5760]
push 3
pop edx
test dl, cl
je 0x1a204d9
push eax
push 0x19b6e20
xor eax, eax
push eax
push 0x19b6bac
push 0x11ca
push 0x19b55b0
call fcn.01a5b8e2
add esp, 0x18
jmp 0x1a204cd
push dword [ebp - 0x178]
call fcn.01a22a30
push 0x1ac7908
call fcn.019ecc20
xor edx, edx
cmp byte [0x1ac7bf4], 0
je 0x1a1f528
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0xf4], 6
jmp 0x1a1f5db
mov ecx, dword [ebp - 0x148]
mov eax, dword [ecx + 0x24]
mov dword [ebp - 0x110], eax
mov eax, dword [ecx + 0x28]
mov dword [ebp - 0x10c], eax
test eax, eax
je 0x1a1f553
cmp word [ebp - 0x110], 0
je 0x1a1f553
cmp word [eax], dx
jne 0x1a1f519
push dword [ebp - 0x114]
push edx
push esi
call fcn.019f3940
mov esi, eax
mov dword [ebp - 0x10c], esi
test esi, esi
jne 0x1a1f593
mov eax, dword [0x1ac5760]
push 3
pop ecx
test cl, al
je 0x1a1f128
push 0x19b6e70
xor eax, eax
push eax
push 0x19b6bac
push 0x11fc
jmp 0x1a1f116
xor eax, eax
mov dword [ebp - 0x158], eax
call fcn.019ece10
mov ecx, dword [eax]
mov dword [esi], ecx
mov cx, word [eax + 4]
mov eax, dword [ebp - 0x10c]
mov word [eax + 4], cx
xor ecx, ecx
mov eax, dword [ebp - 0x10c]
mov word [eax + 6], cx
push 6
pop edi
mov dword [ebp - 0xf4], edi
mov word [ebp - 0x110], di
mov eax, dword [ebp - 0x114]
mov word [ebp - 0x10e], ax
call fcn.01a133d1
movzx esi, word [ebp - 0x138]
mov eax, dword [ebx + 0x10]
test dword [eax + 8], 0x20000000
je 0x1a1f5fa
lea esi, [esi*2 + 0x16]
mov edi, esi
movzx eax, byte [0x1ac58c0]
xor ecx, ecx
inc ecx
and eax, ecx
test al, al
jne 0x1a1f62d
mov eax, dword [ebp - 0x154]
movzx edi, ax
add edi, 9
lea edi, [esi + edi*2]
test byte [ebx + 3], 2
je 0x1a1f62d
xor ecx, ecx
mov eax, dword [ebp - 0x148]
mov word [eax + 0x30], cx
push edi
xor eax, eax
push eax
mov eax, dword fs:[0x30]
push dword [eax + 0x18]
call fcn.019f3940
mov dword [ebp - 0xfc], eax
test eax, eax
jne 0x1a1f670
mov eax, dword [0x1ac5760]
push 3
pop ecx
test cl, al
je 0x1a1f128
push 0x19b6eb4
xor eax, eax
push eax
push 0x19b6bac
push 0x124f
jmp 0x1a1f116
xor eax, eax
mov word [ebp - 0x100], ax
mov word [ebp - 0xfe], di
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.01a01550
movzx eax, word [ebp - 0x100]
shr eax, 1
push 0x3b
pop edx
mov ecx, dword [ebp - 0xfc]
mov word [ecx + eax*2 - 2], dx
mov eax, dword [ebp - 0x100]
mov dword [0x1ac84dc], eax
mov dword [0x1ac84e0], ecx
mov dword [0x1ac7ba8], eax
mov dword [0x1ac7bac], ecx
add eax, 0xfffffffe
mov word [0x1ac7ba8], ax
mov eax, dword [ebx + 0x10]
test dword [eax + 8], 0x20000000
je 0x1a1f6ff
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.01a01550
push 0x19b6ee0
lea eax, [ebp - 0x100]
push eax
call fcn.019eccf0
cmp edi, esi
jbe 0x1a1f761
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.01a01550
push 0x19b6ef8
lea eax, [ebp - 0x100]
push eax
call fcn.019eccf0
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.01a01550
push 0x19b4f54
lea eax, [ebp - 0x100]
push eax
call fcn.019eccf0
mov eax, dword [ebp - 0x100]
mov dword [0x1ac84e4], eax
mov eax, dword [ebp - 0xfc]
mov dword [0x1ac84e8], eax
mov eax, dword [0x1ac878c]
test eax, eax
je 0x1a1f77a
cmp eax, 0xffffffff
je 0x1a1f77a
lea ecx, [ebp - 0x108]
call fcn.01a5e1ed
lea eax, [ebp - 0x144]
push eax
xor eax, eax
push eax
push eax
push dword [ebp - 0xf0]
push 3
pop eax
push eax
call fcn.019fba70
xor ecx, ecx
call fcn.01a01343
mov edi, eax
test edi, edi
jne 0x1a1f7c8
mov eax, dword [0x1ac5760]
push 3
pop ecx
test cl, al
je 0x1a1f128
push 0x19b6f0c
xor eax, eax
push eax
push 0x19b6bac
push 0x12ba
jmp 0x1a1f116
mov dword [0x1ac7bec], edi
mov eax, dword [edi + 0x50]
or dword [eax + 0xc], 0xffffffff
mov eax, dword [edi + 0x50]
mov eax, dword [eax]
mov ecx, 0xffff
mov word [eax - 0x1c], cx
or dword [edi + 0x34], 0x204
mov eax, dword [0x1ac9240]
sub dword [edi + 0x80], eax
lea ecx, [edi + 0x24]
mov eax, dword [ebp - 0x138]
mov dword [ecx], eax
mov eax, dword [ebp - 0x134]
mov dword [ecx + 4], eax
push 0x19b16a0
push ecx
call fcn.01a01550
mov eax, dword [0x19b16a0]
mov esi, dword [0x1ac7bec]
mov dword [esi + 0x2c], eax
mov eax, dword [0x19b16a4]
mov dword [esi + 0x30], eax
mov eax, dword [ebp - 0xf0]
mov dword [esi + 0x18], eax
mov ecx, esi
call fcn.019e97ef
push 0x14a5
lea edx, [esi + 0x24]
mov ecx, dword [esi + 0x18]
call fcn.019fe8eb
mov edx, dword [ebp - 0x144]
mov ecx, dword [0x1ac7bec]
call fcn.01a1a4d5
mov ecx, dword [0x1ac7bec]
call fcn.01a0160f
mov dword [ebp - 0xe0], eax
test eax, eax
js 0x1a204df
push 0x14ae
mov ecx, dword [0x1ac7bec]
lea edx, [ecx + 0x24]
mov ecx, dword [ecx + 0x18]
call fcn.019fe8eb
mov eax, dword [0x1ac7bec]
mov eax, dword [eax + 0x50]
mov dword [eax + 0x20], 9
lea eax, [edi + 0x10]
mov edx, dword [0x1ac7c1c]
mov ecx, 0x1ac7c1c
cmp dword [edx + 4], ecx
je 0x1a1f8b3
push 3
pop eax
mov ecx, eax
int 0x29
mov dword [eax], edx
mov dword [eax + 4], ecx
mov dword [edx + 4], eax
mov dword [0x1ac7c1c], eax
call fcn.019dccc5
mov dword [ebp - 0xe0], eax
test eax, eax
jns 0x1a1f8f8
mov ecx, dword [0x1ac5760]
push 3
pop edx
test dl, cl
je 0x1a204d9
push eax
push 0x19b6f48
xor eax, eax
push eax
push 0x19b6bac
push 0x1309
jmp 0x1a1f4cf
xor ecx, ecx
call fcn.019fe5c8
push 0x50
xor eax, eax
push eax
lea eax, [ebp - 0xdc]
push eax
call fcn.01a28e60
xor eax, eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], eax
push 0x5c
push eax
lea eax, [ebp - 0x204]
push eax
call fcn.01a28e60
add esp, 0x18
lea eax, [ebp - 0xdc]
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x1f8], 0x200
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x200], eax
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x1f0], eax
lea ecx, [ebp - 0x204]
call fcn.01a01343
mov esi, eax
test esi, esi
jne 0x1a1f9a2
mov eax, dword [0x1ac5760]
push 3
pop ecx
test cl, al
je 0x1a1f128
push 0x19b6f7c
xor eax, eax
push eax
push 0x19b6bac
push 0x131e
jmp 0x1a1f116
mov dword [0x1ac79a4], esi
mov eax, dword [esi + 0x50]
or dword [eax + 0xc], 0xffffffff
mov eax, dword [esi + 0x50]
or dword [eax + 0xc], 0xffffffff
mov eax, dword [esi + 0x50]
mov eax, dword [eax]
mov ecx, 0xffff
mov word [eax - 0x1c], cx
mov eax, dword [ebp - 0x108]
mov dword [esi + 0x24], eax
mov eax, dword [ebp - 0x104]
mov dword [esi + 0x28], eax
or dword [esi + 0x34], 4
mov eax, dword [esi + 0x34]
cmp byte [0x1ac7bc8], 0
je 0x1a1f9ff
or eax, 0x400000
mov dword [esi + 0x34], eax
cmp byte [ebp - 0xe1], 0
je 0x1a1f9ff
or eax, 0x1000000
mov dword [esi + 0x34], eax
xor eax, eax
test byte [ebx + 3], 4
je 0x1a1fa0d
mov dword [esi + 0x80], eax
mov edi, eax
movzx edx, word [ebp - 0x108]
mov ecx, dword [ebp - 0x104]
add edx, ecx
mov eax, edx
je 0x1a1fa3e
jmp 0x1a1fa35
sub eax, 2
push 0x5c
pop ecx
cmp word [eax], cx
mov ecx, dword [ebp - 0x104]
je 0x1a1fa3b
cmp eax, ecx
ja 0x1a1fa24
jmp 0x1a1fa3e
lea edi, [eax + 2]
test edi, edi
je 0x1a1fa6f
sub edx, edi
mov word [esi + 0x2c], dx
movzx ecx, word [ebp - 0x106]
movzx eax, word [ebp - 0x108]
sub ecx, eax
cmp ecx, 2
jb 0x1a1fa66
lea eax, [edx + 2]
mov word [esi + 0x2e], ax
jmp 0x1a1fa6a
mov word [esi + 0x2e], dx
mov dword [esi + 0x30], edi
jmp 0x1a1fa7b
mov eax, dword [esi + 0x24]
mov dword [esi + 0x2c], eax
mov eax, dword [esi + 0x28]
mov dword [esi + 0x30], eax
mov ecx, dword [ebx + 8]
mov eax, dword [ebp - 0xec]
cmp dword [eax + 0x34], ecx
je 0x1a1faae
cmp byte [ebp - 0xe1], 0
jne 0x1a1faae
sub esp, 0xc
call fcn.01a5ded1
mov dword [ebp - 0xe0], eax
test eax, eax
js 0x1a204df
mov esi, dword [0x1ac79a4]
mov eax, dword [ebx + 8]
mov dword [esi + 0x18], eax
mov ecx, esi
call fcn.019e97ef
mov edi, 0x19b6bac
test byte [0x1ac5760], 5
je 0x1a1fafd
push 0x1ac6e40
lea eax, [ebp - 0x110]
push eax
lea eax, [esi + 0x24]
push eax
lea eax, [esi + 0x2c]
push eax
push 0x19b6fb8
push 2
push edi
push 0x1396
push 0x19b55b0
call fcn.01a5b8e2
add esp, 0x24
mov esi, dword [0x1ac79a4]
xor al, al
je 0x1a1fb02
int3
push 0x14a5
lea edx, [esi + 0x24]
mov ecx, dword [esi + 0x18]
call fcn.019fe8eb
mov edx, dword [ebp - 0xec]
mov ecx, dword [0x1ac79a4]
call fcn.01a1a4d5
mov ecx, dword [0x1ac79a4]
call fcn.01a0160f
mov dword [ebp - 0xe0], eax
test eax, eax
js 0x1a204df
mov eax, dword [0x1ac79a4]
mov eax, dword [eax + 0x50]
mov dword [eax + 0x20], 9
lea ecx, [ebp - 0x110]
call fcn.01a0fc71
mov dword [ebp - 0xe0], eax
test eax, eax
jns 0x1a1fb9c
mov ecx, dword [0x1ac5760]
push 3
pop edx
test dl, cl
je 0x1a1fb96
push eax
lea eax, [ebp - 0x110]
push eax
push 0x19b7010
xor eax, eax
push eax
push edi
push 0x13bb
push 0x19b55b0
call fcn.01a5b8e2
add esp, 0x1c
mov ecx, dword [0x1ac5760]
test cl, 0x10
je 0x1a1fb9c
int3
cmp dword [ebp - 0x158], 0
jne 0x1a1fbb1
lea eax, [ebp - 0x110]
push eax
call fcn.019f1410
test dword [ebx + 0x68], 0x2000100
je 0x1a1fd0e
xor ecx, ecx
call fcn.01a01343
mov esi, eax
test esi, esi
jne 0x1a1fbee
mov eax, dword [0x1ac5760]
push 3
pop ecx
test cl, al
je 0x1a1f128
push 0x19b7058
xor eax, eax
push eax
push edi
push 0x13d2
jmp 0x1a1f116
mov eax, dword [esi + 0x50]
or dword [eax + 0xc], 0xffffffff
mov eax, dword [esi + 0x50]
mov eax, dword [eax]
mov ecx, 0xffff
mov word [eax - 0x1c], cx
mov ecx, dword [ebp - 0x16c]
mov eax, dword [ecx + 0x34]
or dword [esi + 0x34], eax
mov eax, dword [ecx + 0x80]
mov dword [esi + 0x80], eax
xor eax, eax
mov word [esi + 0x3a], ax
mov eax, dword [ecx + 0x24]
mov dword [esi + 0x24], eax
mov eax, dword [ecx + 0x28]
mov dword [esi + 0x28], eax
mov eax, dword [ecx + 0x2c]
mov dword [esi + 0x2c], eax
mov eax, dword [ecx + 0x30]
mov dword [esi + 0x30], eax
mov eax, dword [ecx + 0x44]
mov dword [esi + 0x44], eax
mov eax, dword [ecx + 0x18]
mov dword [esi + 0x18], eax
mov ecx, esi
call fcn.019e97ef
push 0x14a5
lea edx, [esi + 0x24]
mov ecx, dword [esi + 0x18]
call fcn.019fe8eb
lea eax, [ebp - 0x144]
push eax
xor eax, eax
push eax
push eax
push dword [esi + 0x18]
push 3
pop eax
push eax
call fcn.019fba70
mov dword [ebp - 0xe0], eax
test eax, eax
js 0x1a204df
mov edx, dword [ebp - 0x144]
mov ecx, esi
call fcn.01a1a4d5
mov ecx, esi
call fcn.01a0160f
mov dword [ebp - 0xe0], eax
test eax, eax
js 0x1a204df
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + 0x1c]
mov dword [esi + 0x1c], eax
push 0x14ad
lea edx, [esi + 0x24]
mov ecx, dword [esi + 0x18]
call fcn.019fe8eb
mov eax, dword [esi + 0x50]
mov dword [eax + 0x20], 7
xor eax, eax
xor edx, edx
test dword [ebx + 0x68], 0x100
je 0x1a1fceb
push eax
push dword [ebp - 0xf0]
xor ecx, ecx
inc ecx
push ecx
push eax
xor cl, cl
call fcn.01a636cb
jmp 0x1a1fd00
mov byte [ebp - 0xf5], al
lea eax, [ebp - 0xf5]
push eax
mov ecx, dword [esi + 0x50]
call fcn.019e9599
mov dword [ebp - 0xe0], eax
test eax, eax
js 0x1a204df
call fcn.01a162f7
xor eax, eax
mov dword [ebp - 0x160], eax
cmp byte [0x1ac7bc8], al
je 0x1a1fd94
lea ecx, [ebp - 0x160]
call fcn.019d70c2
mov dword [ebp - 0xe0], eax
test eax, eax
js 0x1a204df
cmp byte [ebp - 0xe1], 0
je 0x1a1fd5b
mov ecx, dword [ebx + 8]
call fcn.019d81ad
mov dword [ebp - 0xe0], eax
test eax, eax
js 0x1a204df
mov eax, 0x400
mov ecx, dword [ebp - 0x120]
test word [ecx + 0xfca], ax
je 0x1a1fd94
mov edx, dword [0x7ffe0330]
mov eax, edx
and eax, 0x1f
push 0x20
pop ecx
sub ecx, eax
mov eax, dword [0x1ac7c34]
ror eax, cl
xor eax, edx
mov ecx, dword [ebp - 0x168]
mov dword [ecx + 0xb0], eax
call fcn.01a0e451
mov dword [ebp - 0xe0], eax
test eax, eax
jns 0x1a1fdc8
mov ecx, dword [0x1ac5760]
push 3
pop edx
test dl, cl
je 0x1a204d9
push eax
push 0x19b70a0
xor eax, eax
push eax
push edi
push 0x14aa
jmp 0x1a1f4cf
mov ecx, dword [ebp - 0x160]
test ecx, ecx
je 0x1a1fe1a
xor eax, eax
mov byte [ebp - 0xf6], al
lea eax, [ebp - 0xf6]
push eax
xor edx, edx
mov ecx, dword [ecx + 0x50]
call fcn.019e9599
mov dword [ebp - 0xe0], eax
test eax, eax
jns 0x1a1fe1a
mov ecx, dword [0x1ac5760]
push 3
pop edx
test dl, cl
je 0x1a204d9
push eax
push 0x19b70d8
xor eax, eax
push eax
push edi
push 0x14bd
jmp 0x1a1f4cf
xor edx, edx
mov dword [ebp - 0x164], edx
mov eax, dword [ebp - 0xec]
movzx ecx, word [eax + 0x5c]
push 2
pop eax
cmp cx, ax
je 0x1a1fe40
push 3
pop eax
cmp cx, ax
jne 0x1a2002c
lea eax, [ebp - 0x124]
push eax
mov esi, 0x19b10d8
push esi
push edx
push 0x4001
call fcn.01a00f00
mov dword [ebp - 0xe0], eax
test eax, eax
js 0x1a1ff94
push dword [ebp + 4]
xor eax, eax
push eax
push 0x1ac78f4
push eax
push 0x19b1688
push dword [ebp - 0x124]
call fcn.019fa7d0
mov dword [ebp - 0xe0], eax
test eax, eax
jns 0x1a1fec4
mov ecx, dword [0x1ac5760]
push 3
pop edx
test dl, cl
je 0x1a204d9
push eax
push esi
push 0x19b1688
push 0x19b7120
xor eax, eax
push eax
push edi
push 0x14eb
push 0x19b55b0
call fcn.01a5b8e2
add esp, 0x20
jmp 0x1a204cd
push dword [ebp + 4]
xor ecx, ecx
push ecx
lea eax, [ebp - 0x164]
push eax
push ecx
push 0x19b1698
push dword [ebp - 0x124]
call fcn.019fa7d0
push dword [ebp + 4]
xor eax, eax
push eax
push 0x1ac84d4
push eax
lea eax, [ebp - 0x180]
push eax
push dword [ebp - 0x124]
call fcn.019fa7d0
mov dword [ebp - 0xe0], eax
test eax, eax
jns 0x1a1ff67
mov ecx, dword [0x1ac5760]
push 3
pop edx
test dl, cl
je 0x1a1ff48
push eax
push esi
lea eax, [ebp - 0x180]
push eax
push 0x19b7120
xor eax, eax
inc eax
push eax
push edi
push 0x1502
push 0x19b55b0
call fcn.01a5b8e2
add esp, 0x20
mov eax, dword [ebp - 0xe0]
mov ecx, dword [0x1ac5760]
test cl, 0x40
je 0x1a1ff4e
int3
and dword [0x1ac84d4], 0
cmp eax, 0xc000007a
je 0x1a1ff67
cmp eax, 0xc0000139
jne 0x1a204df
call fcn.019ff0f0
mov dword [ebp - 0xe0], eax
test eax, eax
js 0x1a204df
call fcn.01a177b2
mov dword [ebp - 0xe0], eax
test eax, eax
js 0x1a204df
xor edx, edx
jmp 0x1a2002c
cmp eax, 0xc0000135
jne 0x1a204a3
lea eax, [ebp - 0x124]
push eax
mov esi, 0x19b10a8
push esi
xor eax, eax
push eax
push 0x4001
call fcn.01a00f00
mov dword [ebp - 0xe0], eax
test eax, eax
jns 0x1a1ffe9
mov ecx, dword [0x1ac5760]
push 3
pop edx
test dl, cl
je 0x1a204d9
push eax
push esi
push 0x19b7178
xor eax, eax
push eax
push edi
push 0x152f
jmp 0x1a204c0
call fcn.01a177b2
mov dword [ebp - 0xe0], eax
test eax, eax
jns 0x1a20024
cmp eax, 0xc0000135
je 0x1a20024
mov ecx, dword [0x1ac5760]
push 3
pop edx
test dl, cl
je 0x1a204d9
push eax
push 0x19b71b8
xor eax, eax
push eax
push edi
push 0x153f
jmp 0x1a1f4cf
xor edx, edx
mov dword [ebp - 0xe0], edx
mov eax, dword [0x1ac586c]
cmp eax, 0xffffffff
jne 0x1a20079
push edx
push 4
lea eax, [ebp - 0xe8]
push eax
push 0x22
push 0xffffffffffffffff
call fcn.01a22ad0
mov dword [ebp - 0xe0], eax
test eax, eax
js 0x1a20065
mov eax, dword [ebp - 0xe8]
and eax, 0x48
cmp al, 0x48
jne 0x1a20065
xor eax, eax
inc eax
jmp 0x1a200b5
movzx eax, byte [0x7ffe02d5]
shr eax, 2
push 3
pop ecx
and eax, ecx
mov dword [0x1ac586c], eax
push 2
pop ecx
cmp eax, ecx
jne 0x1a200a2
mov esi, dword [ebp - 0xec]
movzx edx, word [esi + 0x48]
cmp dx, word [ebp - 0xf4]
ja 0x1a2009b
jne 0x1a200a2
cmp word [esi + 0x4a], cx
jb 0x1a200a2
xor eax, eax
mov dword [0x1ac586c], eax
push 3
pop ecx
cmp eax, ecx
jne 0x1a200ba
movzx eax, byte [0x7ffe02d5]
shr eax, 2
and eax, ecx
mov dword [0x1ac586c], eax
xor esi, esi
mov ecx, esi
mov dword [ebp - 0xe8], ecx
mov dl, byte [0x7ffe02d5]
and dl, 3
cmp dl, 1
je 0x1a200e2
cmp byte [0x1ac84d8], cl
jne 0x1a200e2
test dl, dl
jne 0x1a200eb
push 0xa
jmp 0x1a200e4
push 0xd
pop ecx
mov dword [ebp - 0xe8], ecx
test ecx, ecx
je 0x1a20117
xor edx, edx
inc edx
mov byte [0x1ac84d8], dl
cmp eax, edx
jne 0x1a20105
or ecx, 0x40
mov dword [ebp - 0xe8], ecx
push 4
lea eax, [ebp - 0xe8]
push eax
push 0x22
push 0xffffffffffffffff
call fcn.01a22b20
xor ecx, ecx
call fcn.019fe5c8
xor ecx, ecx
call fcn.01a09b80
mov eax, dword [ebp - 0x128]
test eax, eax
je 0x1a20141
cmp dword [eax + 8], esi
je 0x1a20141
mov dword [ebx + 0x1ec], esi
mov ecx, eax
call fcn.019d280b
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0x1d8]
and eax, 0x400000
or eax, esi
je 0x1a2015e
xor eax, eax
inc eax
mov byte [0x1ac67c0], al
mov esi, dword [ebp - 0x148]
mov ecx, dword [esi + 0x2a0]
call fcn.019e1547
xor edx, edx
inc edx
mov dword [0x1ac84d0], edx
mov ecx, dword [0x1ac79a4]
mov eax, dword [ecx + 0x50]
mov dword [eax + 0x20], 2
mov eax, dword [ebp - 0x1f0]
and dword [eax], 0
cmp byte [ebp - 0xe1], 0
je 0x1a201a1
call fcn.019d7f5b
jmp 0x1a201d7
or dword [ebp - 0x1f8], edx
lea ecx, [ebp - 0x204]
call fcn.019eee00
xor eax, eax
lea ecx, [eax + 1]
call fcn.019fe5c8
mov eax, dword [ebp - 0xe0]
test eax, eax
js 0x1a201e1
mov edx, dword [ebp - 0x1f0]
mov ecx, dword [0x1ac79a4]
call fcn.019e650c
mov dword [ebp - 0xe0], eax
test eax, eax
jns 0x1a20206
mov ecx, dword [0x1ac5760]
push 3
pop edx
test dl, cl
je 0x1a204d9
push eax
push 0x19b71f0
xor eax, eax
push eax
push edi
push 0x1618
jmp 0x1a1f4cf
mov dword [0x1ac84d0], 2
cmp byte [ebx + 2], 0
je 0x1a2021b
call fcn.01a5e7d0
call fcn.01a162f7
cmp byte [0x1ac84d8], 0
jne 0x1a202bc
mov al, byte [0x7ffe02d5]
push 3
pop ecx
and al, cl
push 2
pop ecx
cmp al, cl
jne 0x1a20256
test dword [esi + 8], 0x20000
jne 0x1a20256
mov eax, dword [ebp - 0xec]
xor edx, edx
inc edx
cmp word [eax + 0x5c], dx
jne 0x1a2028c
mov ecx, dword [ebp - 0xec]
call fcn.01a5e3d4
test al, al
jne 0x1a20289
mov ecx, dword [ebp - 0xec]
call fcn.01a5faf0
test al, al
je 0x1a20289
mov ecx, dword [ebp - 0xec]
call fcn.01a5e2ef
test al, al
jne 0x1a20289
xor eax, eax
mov ecx, eax
jmp 0x1a2028c
push 2
pop ecx
mov dword [ebp - 0xe8], ecx
xor eax, eax
inc eax
cmp dword [0x1ac586c], eax
jne 0x1a202a6
or ecx, 0x40
mov dword [ebp - 0xe8], ecx
test ecx, ecx
je 0x1a202bc
push 4
lea eax, [ebp - 0xe8]
push eax
push 0x22
push 0xffffffffffffffff
call fcn.01a22b20
mov esi, dword [0x1ac78f4]
test esi, esi
je 0x1a20301
xor eax, eax
push eax
mov ecx, esi
call dword [0x1ac91d0]
xor edx, edx
xor eax, eax
lea ecx, [eax + 1]
call esi
mov dword [ebp - 0xe0], eax
test eax, eax
js 0x1a204df
mov ecx, dword [ebp - 0x164]
call fcn.01a1ace8
mov dword [ebp - 0xe0], eax
test eax, eax
js 0x1a204df
mov eax, dword [ebp - 0x168]
mov dword [0x1ac7bd8], eax
xor ecx, ecx
call fcn.019fe5c8
call fcn.019e3fab
mov eax, dword [0x1ac79a4]
mov byte [ebp - 0xf7], 0
lea ecx, [ebp - 0xf7]
push ecx
mov edx, dword [ebp - 0x1f0]
mov ecx, dword [eax + 0x50]
call fcn.019e9599
mov dword [ebp - 0xe0], eax
push ecx
push eax
push 9
pop edx
call fcn.019e3ffa
mov edx, dword [ebp - 0x1f0]
mov ecx, dword [0x1ac79a4]
mov ecx, dword [ecx + 0x50]
call fcn.01a0d752
call fcn.01a162f7
xor ecx, ecx
mov dword [0x1ac7bd8], ecx
cmp byte [ebp - 0x90], cl
je 0x1a2037f
push dword [ebp - 0xdc]
call fcn.019f8ed0
xor ecx, ecx
mov eax, dword [ebp - 0xe0]
test eax, eax
jns 0x1a203ae
mov ecx, dword [0x1ac5760]
push 3
pop edx
test dl, cl
je 0x1a204d9
push eax
push 0x19b7250
xor eax, eax
push eax
push edi
push 0x169f
jmp 0x1a1f4cf
mov edx, dword [0x1ac79a4]
cmp word [edx + 0x3a], cx
je 0x1a20427
mov dword [ebp - 0x228], 0x24
xor eax, eax
inc eax
mov dword [ebp - 0x224], eax
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x220]
rep stosd dword es:[edi], eax
mov edx, dword [edx + 0x48]
lea ecx, [ebp - 0x228]
call fcn.019eab50
xor eax, eax
mov dword [ebp - 4], eax
mov edx, dword [0x1ac79a4]
lea ecx, [eax + 1]
call fcn.019ed2f5
mov dword [ebp - 4], 0xfffffffe
mov edi, dword [ebp - 0x128]
call fcn.01a2041b
jmp 0x1a2042d
mov edi, dword [ebp - 0x128]
cmp byte [0x1ac8470], 0
je 0x1a2045e
push dword [0x1ac91f4]
call fcn.019d7eb0
mov esi, eax
push edi
lea eax, [ebp - 0x11c]
push eax
mov ecx, esi
call dword [0x1ac91d0]
call esi
test al, al
jne 0x1a2045e
call fcn.01a35ed2
mov esi, dword [ebx + 0x14c]
test esi, esi
je 0x1a20472
mov ecx, esi
call dword [0x1ac91d0]
call esi
cmp dword [ebp - 0x12c], 0
je 0x1a20486
push dword [ebp - 0x12c]
call fcn.01a22a30
cmp dword [ebp - 0x130], 0
je 0x1a1ece3
push dword [ebp - 0x130]
call fcn.01a22a30
jmp 0x1a1ece3
mov ecx, dword [0x1ac5760]
push 3
pop edx
test dl, cl
je 0x1a204d9
push eax
push esi
push 0x19b7178
xor eax, eax
push eax
push edi
push 0x154a
push 0x19b55b0
call fcn.01a5b8e2
add esp, 0x1c
mov eax, dword [ebp - 0xe0]
mov ecx, dword [0x1ac5760]
test cl, 0x10
je 0x1a204df
int3
call fcn.01a361c0
ret