Function at 0x1018c9aa
Capabilities:
Encode data using base64
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x6c
push ebx
push ebp
push esi
mov esi, dword [esp + 0x7c]
push edi
mov dword [esp + 0x20], 0
mov edi, dword [esi]
mov eax, dword [edi + 0x60]
cmp dword [eax + 0x40], 0x28
jne 0x1018c86f
cmp byte [esi + 0x265], 0
je 0x1018c86f
test dword [edi + 8], 0x2000
jne 0x1018c86f
mov al, byte [esi + 0x154]
shr al, 2
not al
and al, 1
jmp 0x1018c871
xor al, al
mov byte [esi + 0x267], al
mov eax, 0x1e
movzx ebp, word [esi + 0x98]
mov edx, dword [esi + 0x180]
mov ebx, ebp
mov word [esi + 0x268], 0
mov dword [esp + 0x18], 0xffff
lea ecx, [ebx + edx]
add ecx, ecx
cmp ecx, eax
cmovb ecx, eax
movzx eax, word [esi + 0xbc]
cmp eax, ecx
jbe 0x1018c8c3
cmp ecx, 0xffff
cmova ecx, dword [esp + 0x18]
mov word [esi + 0xbc], cx
mov dword [esi + 0x26c], 0
mov dword [esi + 0x274], 0
test bp, bp
je 0x1018c8ff
lea ecx, [ebx + ebx*4]
mov eax, 0xcccccccd
mov ebx, 0x32
add ecx, ecx
cmp ecx, ebx
cmovb ecx, ebx
mul edx
shr edx, 3
cmp edx, ebx
cmovb edx, ebx
lea eax, [edx + ecx]
jmp 0x1018c906
lea eax, [edx*8 + 0x12c]
mov dword [esi + 0x270], eax
imul ecx, dword [edi + 0x10], 0x64
cmp eax, ecx
jbe 0x1018c91c
mov dword [esi + 0x270], ecx
mov eax, ecx
movzx ebp, word [esi + 0xde]
mov edi, 0x1018a6e0
movzx ebx, word [esi + 0xdc]
mov edx, 0x1018faf0
mov dword [esi + 0x278], eax
cmp bx, bp
mov eax, 0x1018a6c0
mov dword [esp + 0x1c], 0x10188e80
cmove edi, eax
mov dword [esi + 0x104], 0
mov eax, 0x1018fad0
mov ecx, 0x1018a5e0
cmove edx, eax
mov eax, 0x1018a5c0
cmove ecx, eax
mov eax, 0x10188e90
cmove eax, dword [esp + 0x1c]
mov dword [esi + 0x254], eax
mov dword [esi + 0x258], edi
mov dword [esi + 0x25c], edx
push esi
mov dword [esi + 0x260], ecx
call fcn.10188c70
movzx eax, byte [esi + 0x13c]
add esp, 4
cmp eax, 7
ja case.default.0x1018c9a3
jmp dword [eax*4 + 0x1018eefc]
mov dword [esi + 0x23c], 0x1018a770
jmp case.default.0x1018c9a3
mov dword [esi + 0x23c], 0x1018a870
jmp case.default.0x1018c9a3
mov dword [esi + 0x23c], 0x1018a8e0
jmp case.default.0x1018c9a3
mov dword [esi + 0x23c], 0x1018a740
jmp case.default.0x1018c9a3
mov dword [esi + 0x23c], 0x1018a8a0
jmp case.default.0x1018c9a3
mov dword [esi + 0x23c], 0x1018a840
jmp case.default.0x1018c9a3
mov dword [esi + 0x23c], 0x1018a790
jmp case.default.0x1018c9a3
mov dword [esi + 0x23c], fcn.1018a7e0
lea edx, [esi + 0xc]
mov dword [esp + 0x14], edx
nop
mov edi, dword [esi + 0x16c]
mov ebp, dword [esi + 0x168]
mov bl, byte [ebp + edi]
movzx eax, bl
mov byte [esi + 0x174], bl
mov dword [esp + 0x1c], eax
movsx ecx, byte [eax + 0x101ec000]
mov dword [esi + 0x178], ecx
test ecx, ecx
jns 0x1018ca65
lea eax, [edi + 1]
cmp eax, dword [esi + 0x170]
jge 0x1018eee5
movzx eax, byte [ebp + edi + 1]
lea edx, [esi + 0xc]
imul eax, ecx
mov ecx, 2
sub ecx, eax
mov dword [esi + 0x178], ecx
lea eax, [ecx + edi]
cmp eax, dword [esi + 0x170]
jg 0x1018eee5
mov eax, dword [esp + 0x1c]
mov ecx, dword [esi + 0x10]
mov bh, byte [eax + 0x101ebf00]
movzx eax, bh
shr eax, 4
sub ecx, eax
mov dword [esi + 0x1c], ecx
jns 0x1018cad3
cmp byte [esi + 0x235], 0
jne 0x1018ee5d
xor edx, edx
test bh, 0xf0
jbe 0x1018caca
mov eax, dword [esi + 0x18]
movzx ecx, dx
inc edx
mov dword [eax + ecx*4], 0
mov bl, byte [esi + 0x174]
movzx eax, bl
mov al, byte [eax + 0x101ebf00]
shr al, 4
movzx eax, al
cmp dx, ax
jb 0x1018caa2
mov dword [esi + 0x1c], 0
xor ecx, ecx
cmp bl, 0x91
jne 0x1018caed
mov eax, dword [esi]
mov eax, dword [eax + 0x2bc]
test eax, eax
je 0x1018cae8
mov eax, dword [eax]
jmp 0x1018cafa
mov eax, dword [esi + 0x20]
jmp 0x1018caff
movzx eax, bl
movzx eax, byte [eax + 0x101ebf00]
and eax, 0xf
add eax, ecx
mov dword [esi + 0x20], eax
mov ebp, dword [esi + 0x14]
cmp eax, ebp
jg 0x1018eed0
mov edx, dword [esi + 0x18]
movzx eax, bl
mov byte [esi + 0x17c], 1
mov dword [esi + 0xc], 0
lea edi, [edx + ecx*4]
cmp eax, 0x92
ja case.default.0x1018cb2c
jmp dword [eax*4 + 0x1018ef1c]
mov al, bl
and al, 1
movzx eax, al
shl ax, 0xe
movzx ecx, ax
mov eax, ecx
xor eax, 0x4000
movzx eax, ax
cmp bl, 4
jae 0x1018cb6c
mov word [esi + 0x12a], cx
mov word [esi + 0x12c], ax
mov word [esi + 0x126], cx
mov word [esi + 0x128], ax
test bl, 2
jne 0x1018cc9d
mov word [esi + 0x12e], cx
push esi
mov word [esi + 0x130], ax
call fcn.10188c70
jmp 0x1018ed77
movzx eax, word [edi]
lea ebx, [esi + 0x12a]
push ebx
push eax
movzx eax, word [edi + 4]
push eax
push esi
call fcn.1018a490
add esp, 0x10
test al, al
jne case.0x1018cb2c.33
mov eax, dword [ebx]
push esi
mov dword [esi + 0x126], eax
call fcn.10188c70
jmp 0x1018ed77
lea eax, [esi + 0x12e]
push eax
movzx eax, word [edi]
push eax
movzx eax, word [edi + 4]
push eax
push esi
call fcn.1018a490
add esp, 0x10
test al, al
jne case.0x1018cb2c.33
push esi
call fcn.10188c70
jmp 0x1018ed77
movsx ecx, word [edi]
movsx eax, word [edi + 4]
test ecx, ecx
jne 0x1018cbfd
test eax, eax
je 0x1018cc3a
mov dword [esp + 0x4c], eax
lea eax, [esp + 0x48]
push eax
mov dword [esp + 0x4c], ecx
call fcn.1017b5a0
mov eax, dword [esp + 0x4c]
add esp, 4
cdq
and edx, 3
add eax, edx
sar eax, 2
mov word [esi + 0x12a], ax
mov eax, dword [esp + 0x4c]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov word [esi + 0x12c], ax
mov eax, dword [esi + 0x12a]
push esi
mov dword [esi + 0x126], eax
call fcn.10188c70
jmp 0x1018ed77
movsx ecx, word [edi]
movsx eax, word [edi + 4]
test ecx, ecx
jne 0x1018cc60
test eax, eax
je 0x1018cc9d
mov dword [esp + 0x54], eax
lea eax, [esp + 0x50]
push eax
mov dword [esp + 0x54], ecx
call fcn.1017b5a0
mov eax, dword [esp + 0x54]
add esp, 4
cdq
and edx, 3
add eax, edx
sar eax, 2
mov word [esi + 0x12e], ax
mov eax, dword [esp + 0x54]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov word [esi + 0x130], ax
push esi
call fcn.10188c70
jmp 0x1018ed77
movsx eax, word [esi + 0x12a]
mov dword [edi], eax
movsx eax, word [esi + 0x12c]
mov dword [edi + 4], eax
jmp case.0x1018cb2c.33
movsx eax, word [esi + 0x12e]
mov dword [edi], eax
movsx eax, word [esi + 0x130]
mov dword [edi + 4], eax
jmp case.0x1018cb2c.33
mov eax, dword [esi + 0x12a]
push esi
mov dword [esi + 0x12e], eax
call fcn.10188c70
jmp 0x1018ed77
push edi
push esi
call fcn.101896b0
add esp, 8
jmp case.0x1018cb2c.33
mov ax, word [edi]
mov word [esi + 0x120], ax
jmp case.0x1018cb2c.33
mov ax, word [edi]
mov word [esi + 0x122], ax
jmp case.0x1018cb2c.33
mov ax, word [edi]
mov word [esi + 0x124], ax
jmp case.0x1018cb2c.33
mov eax, dword [edi]
sub eax, 0
je 0x1018cd6a
sub eax, 1
je 0x1018cd50
cmp byte [esi + 0x235], 0
je case.0x1018cb2c.33
mov dword [esi + 0xc], 0x86
jmp case.0x1018cb2c.33
movups xmm0, xmmword [esi + 0x90]
mov eax, dword [esi + 0xb0]
movups xmmword [esi + 0x24], xmm0
movups xmm0, xmmword [esi + 0xa0]
jmp 0x1018cd82
movups xmm0, xmmword [esi + 0xb4]
mov eax, dword [esi + 0xd4]
movups xmmword [esi + 0x24], xmm0
movups xmm0, xmmword [esi + 0xc4]
movups xmmword [esi + 0x34], xmm0
mov dword [esi + 0x44], eax
mov ax, word [edi]
mov word [esi + 0x15c], ax
jmp case.0x1018cb2c.33
mov eax, dword [edi]
sub eax, 0
je 0x1018cdd7
sub eax, 1
je 0x1018cdbd
cmp byte [esi + 0x235], 0
je case.0x1018cb2c.33
mov dword [esi + 0xc], 0x86
jmp case.0x1018cb2c.33
movups xmm0, xmmword [esi + 0x90]
mov eax, dword [esi + 0xb0]
movups xmmword [esi + 0x48], xmm0
movups xmm0, xmmword [esi + 0xa0]
jmp 0x1018cdef
movups xmm0, xmmword [esi + 0xb4]
mov eax, dword [esi + 0xd4]
movups xmmword [esi + 0x48], xmm0
movups xmm0, xmmword [esi + 0xc4]
movups xmmword [esi + 0x58], xmm0
mov dword [esi + 0x68], eax
mov ax, word [edi]
mov word [esi + 0x15e], ax
jmp case.0x1018cb2c.33
mov eax, dword [edi]
sub eax, 0
je 0x1018ce44
sub eax, 1
je 0x1018ce2a
cmp byte [esi + 0x235], 0
je case.0x1018cb2c.33
mov dword [esi + 0xc], 0x86
jmp case.0x1018cb2c.33
movups xmm0, xmmword [esi + 0x90]
mov eax, dword [esi + 0xb0]
movups xmmword [esi + 0x6c], xmm0
movups xmm0, xmmword [esi + 0xa0]
jmp 0x1018ce5c
movups xmm0, xmmword [esi + 0xb4]
mov eax, dword [esi + 0xd4]
movups xmmword [esi + 0x6c], xmm0
movups xmm0, xmmword [esi + 0xc4]
movups xmmword [esi + 0x7c], xmm0
mov dword [esi + 0x8c], eax
mov ax, word [edi]
mov word [esi + 0x160], ax
jmp case.0x1018cb2c.33
mov eax, dword [edi]
sub eax, 0
je 0x1018ceb4
sub eax, 1
je 0x1018ce9a
cmp byte [esi + 0x235], 0
je case.0x1018cb2c.33
mov dword [esi + 0xc], 0x86
jmp case.0x1018cb2c.33
movups xmm0, xmmword [esi + 0x90]
mov eax, dword [esi + 0xb0]
movups xmmword [esi + 0x24], xmm0
movups xmm0, xmmword [esi + 0xa0]
jmp 0x1018cecc
movups xmm0, xmmword [esi + 0xb4]
mov eax, dword [esi + 0xd4]
movups xmmword [esi + 0x24], xmm0
movups xmm0, xmmword [esi + 0xc4]
movups xmmword [esi + 0x34], xmm0
mov dword [esi + 0x44], eax
movups xmm0, xmmword [esi + 0x24]
movups xmmword [esi + 0x48], xmm0
movups xmm0, xmmword [esi + 0x34]
movups xmmword [esi + 0x58], xmm0
mov dword [esi + 0x68], eax
movups xmm0, xmmword [esi + 0x24]
movups xmmword [esi + 0x6c], xmm0
movups xmm0, xmmword [esi + 0x34]
movups xmmword [esi + 0x7c], xmm0
mov dword [esi + 0x8c], eax
movzx eax, word [edi]
mov word [esi + 0x15c], ax
movzx eax, word [edi]
mov word [esi + 0x15e], ax
movzx eax, word [edi]
mov word [esi + 0x160], ax
jmp case.0x1018cb2c.33
mov eax, dword [edi]
test eax, eax
jns 0x1018cf31
mov dword [esi + 0xc], 0x84
jmp case.0x1018cb2c.33
cmp eax, 0xffff
cmovg eax, dword [esp + 0x18]
mov dword [esi + 0x134], eax
jmp case.0x1018cb2c.33
mov dword [esi + 0x13c], 1
mov dword [esi + 0x23c], 0x1018a870
jmp case.0x1018cb2c.33
mov dword [esi + 0x13c], 0
mov dword [esi + 0x23c], 0x1018a8a0
jmp case.0x1018cb2c.33
mov eax, dword [edi]
mov dword [esi + 0x138], eax
jmp case.0x1018cb2c.33
mov edi, 1
nop word [eax + eax]
push esi
call fcn.1018ab00
add esp, 4
cmp al, 1
je case.0x1018cb2c.33
movzx eax, byte [esi + 0x174]
sub eax, 0x58
je 0x1018cfb5
sub eax, 1
jne 0x1018cfb6
dec edi
jmp 0x1018cfb6
inc edi
test edi, edi
jne 0x1018cf90
jmp case.0x1018cb2c.33
mov edx, dword [edi]
test edx, edx
jne 0x1018cfcd
test ecx, ecx
je 0x1018cf25
add edx, dword [esi + 0x16c]
mov dword [esi + 0x16c], edx
js 0x1018cf25
mov ecx, dword [esi + 0x1b0]
test ecx, ecx
jle 0x1018cffe
mov eax, dword [esi + 0x1b8]
add ecx, ecx
mov eax, dword [eax + ecx*8 - 4]
cmp edx, dword [eax + 8]
jg 0x1018cf25
mov byte [esi + 0x17c], 0
cmp dword [edi], 0
jge case.0x1018cb2c.33
inc dword [esi + 0x274]
mov eax, dword [esi + 0x274]
cmp eax, dword [esi + 0x278]
jbe case.0x1018cb2c.33
mov dword [esi + 0xc], 0x8b
jmp case.0x1018cb2c.33
mov eax, dword [edi]
mov dword [esi + 0x144], eax
jmp case.0x1018cb2c.33
mov eax, dword [edi]
mov dword [esi + 0x148], eax
jmp case.0x1018cb2c.33
mov eax, dword [esi + 0x108]
mov dword [esp + 0x24], eax
mov eax, dword [edi]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x24]
imul edx
mov ecx, edx
sar ecx, 0x1f
add ecx, 0x8000
add eax, ecx
adc edx, 0
shr eax, 0x10
shl edx, 0x10
add eax, edx
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x28]
mov dword [esi + 0x14c], eax
jmp case.0x1018cb2c.33
mov eax, dword [edi]
mov dword [edi + 4], eax
jmp case.0x1018cb2c.33
mov dword [esi + 0x20], 0
jmp case.0x1018cb2c.33
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov dword [edi], eax
mov dword [edi + 4], ecx
jmp case.0x1018cb2c.33
mov eax, dword [esi + 0x10]
mov dword [edi], eax
jmp case.0x1018cb2c.33
mov eax, dword [edi]
test eax, eax
jle 0x1018d0d6
cmp eax, ecx
jg 0x1018d0d6
sub ecx, eax
mov eax, dword [edx + ecx*4]
mov dword [edi], eax
jmp case.0x1018cb2c.33
cmp byte [esi + 0x235], 0
je 0x1018d0e6
mov dword [esi + 0xc], 0x86
xor eax, eax
mov dword [edi], eax
jmp case.0x1018cb2c.33
mov eax, dword [edi]
test eax, eax
jle 0x1018cd37
cmp eax, ecx
jg 0x1018cd37
sub ecx, eax
lea eax, [eax*4 - 4]
mov edi, dword [edx + ecx*4]
lea ecx, [edx + ecx*4]
push eax
lea eax, [ecx + 4]
push eax
push ecx
call sub.VCRUNTIME140.dll_memmove
mov ecx, dword [esi + 0x1c]
add esp, 0xc
mov eax, dword [esi + 0x18]
mov dword [eax + ecx*4 - 4], edi
jmp case.0x1018cb2c.33
movzx ebp, word [edi]
movzx ebx, word [edi + 4]
cmp bp, word [esi + 0x50]
jae 0x1018cd37
cmp bx, word [esi + 0x2c]
jae 0x1018cd37
mov eax, dword [esi + 0x58]
mov ecx, ebp
lea edx, [eax + ecx*8]
mov eax, dword [esi + 0x34]
mov ecx, ebx
lea ecx, [eax + ecx*8]
mov eax, dword [ecx + 4]
sub eax, dword [edx + 4]
push eax
mov eax, dword [ecx]
sub eax, dword [edx]
push eax
mov eax, dword [esi + 0x240]
push esi
call eax
cdq
sub eax, edx
mov edi, eax
lea eax, [esi + 0x48]
sar edi, 1
push edi
push ebp
push eax
mov eax, dword [esi + 0x24c]
push esi
call eax
neg edi
lea eax, [esi + 0x24]
push edi
push ebx
push eax
mov eax, dword [esi + 0x24c]
push esi
call eax
add esp, 0x2c
jmp case.0x1018cb2c.33
movzx eax, word [edi]
cmp ax, word [esi + 0x2c]
jb 0x1018d1be
cmp byte [esi + 0x235], 0
je case.0x1018cb2c.33
mov dword [esi + 0xc], 0x86
jmp case.0x1018cb2c.33
cmp word [esi + 0x12e], 0
mov ecx, eax
mov edx, dword [esi + 0x3c]
sete bl
add edx, ecx
lea ebx, [ebx*8 + 0xf7]
mov al, bl
and al, 0xef
cmp word [esi + 0x130], 0
movzx ecx, al
movzx eax, bl
cmove ecx, eax
and byte [edx], cl
jmp case.0x1018cb2c.33
mov ebx, dword [esi + 0x1a8]
mov edx, dword [edi + 4]
inc ebx
cmp edx, ebx
jae 0x1018cd44
mov ebp, dword [esi + 0x198]
lea eax, [edx + edx*2]
lea ecx, [eax*8]
mov eax, dword [esi + 0x190]
add ecx, ebp
cmp ebx, eax
jne 0x1018d226
cmp dword [ecx + 0xc], edx
je 0x1018d246
mov ecx, ebp
lea eax, [eax + eax*2]
lea eax, [ecx + eax*8]
cmp ecx, eax
jae 0x1018d240
cmp dword [ecx + 0xc], edx
je 0x1018d23e
add ecx, 0x18
cmp ecx, eax
jb 0x1018d232
cmp ecx, eax
je 0x1018cd44
cmp byte [ecx + 0x10], 0
je 0x1018cd44
mov edx, dword [esi + 0x1b0]
cmp edx, dword [esi + 0x1b4]
jl 0x1018d26a
mov dword [esi + 0xc], 0x82
jmp case.0x1018cb2c.33
cmp dword [edi], 0
jle case.0x1018cb2c.33
mov eax, dword [esi + 0x164]
shl edx, 4
add edx, dword [esi + 0x1b8]
mov dword [edx], eax
mov eax, dword [esi + 0x16c]
inc eax
mov dword [edx + 4], eax
mov eax, dword [edi]
mov dword [edx + 8], eax
mov dword [edx + 0xc], ecx
inc dword [esi + 0x1b0]
push dword [ecx + 4]
push dword [ecx]
push esi
call fcn.10189300
mov byte [esi + 0x17c], 0
add esp, 0xc
mov eax, dword [edi]
add dword [esi + 0x26c], eax
mov eax, dword [esi + 0x26c]
cmp eax, dword [esi + 0x270]
jbe case.0x1018cb2c.33
mov dword [esi + 0xc], 0x8b
jmp case.0x1018cb2c.33
mov edx, dword [edi]
mov edi, dword [esi + 0x1a8]
inc edi
cmp edx, edi
jae 0x1018cd44
mov ebx, dword [esi + 0x198]
lea eax, [edx + edx*2]
lea ecx, [ebx + eax*8]
mov eax, dword [esi + 0x190]
cmp edi, eax
jne 0x1018d303
cmp dword [ecx + 0xc], edx
je 0x1018d324
mov ecx, ebx
lea eax, [eax + eax*2]
lea eax, [ecx + eax*8]
cmp ecx, eax
jae 0x1018d31e
nop
cmp dword [ecx + 0xc], edx
je 0x1018d31c
add ecx, 0x18
cmp ecx, eax
jb 0x1018d310
cmp ecx, eax
je 0x1018cd44
cmp byte [ecx + 0x10], 0
je 0x1018cd44
mov edx, dword [esi + 0x1b0]
cmp edx, dword [esi + 0x1b4]
jl 0x1018d348
mov dword [esi + 0xc], 0x82
jmp case.0x1018cb2c.33
mov eax, dword [esi + 0x164]
shl edx, 4
add edx, dword [esi + 0x1b8]
mov dword [edx], eax
mov eax, dword [esi + 0x16c]
inc eax
mov dword [edx + 8], 1
mov dword [edx + 4], eax
mov dword [edx + 0xc], ecx
inc dword [esi + 0x1b0]
push dword [ecx + 4]
push dword [ecx]
push esi
call fcn.10189300
add esp, 0xc
mov byte [esi + 0x17c], 0
jmp case.0x1018cb2c.33
mov ebp, dword [esi + 0x164]
cmp ebp, 3
jne 0x1018d3a4
mov dword [esi + 0xc], 0x9c
jmp case.0x1018cb2c.33
mov edx, dword [esi + 0x190]
mov ebx, dword [esi + 0x198]
mov ecx, dword [edi]
lea eax, [edx + edx*2]
lea eax, [ebx + eax*8]
cmp ebx, eax
jae 0x1018d3ce
nop dword [eax]
cmp dword [ebx + 0xc], ecx
je 0x1018d3cc
add ebx, 0x18
cmp ebx, eax
jb 0x1018d3c0
cmp ebx, eax
jne 0x1018d3e1
cmp edx, dword [esi + 0x194]
jae 0x1018d3e9
lea eax, [edx + 1]
mov dword [esi + 0x190], eax
cmp ecx, 0xffff
jbe 0x1018d3f5
mov dword [esi + 0xc], 0x8c
jmp case.0x1018cb2c.33
movzx edx, cx
mov dword [ebx], ebp
mov dword [ebx + 0xc], edx
mov eax, dword [esi + 0x16c]
inc eax
mov word [ebx + 0x10], 1
mov dword [ebx + 4], eax
mov dword [ebx + 0x14], 0
cmp ecx, dword [esi + 0x1a8]
jbe 0x1018d422
mov dword [esi + 0x1a8], edx
push esi
call fcn.1018ab00
add esp, 4
test al, al
jne case.0x1018cb2c.33
movzx eax, byte [esi + 0x174]
sub eax, 0x2c
je 0x1018d469
sub eax, 1
je 0x1018d45b
sub eax, 0x5c
je 0x1018d469
push esi
call fcn.1018ab00
add esp, 4
test al, al
je 0x1018d433
jmp case.0x1018cb2c.33
mov eax, dword [esi + 0x16c]
mov dword [ebx + 8], eax
jmp case.0x1018cb2c.33
mov dword [esi + 0xc], 0x89
jmp case.0x1018cb2c.33
mov ecx, dword [esi + 0x1b0]
test ecx, ecx
jg 0x1018d48b
mov dword [esi + 0xc], 0x88
jmp case.0x1018cb2c.33
dec ecx
mov dword [esi + 0x1b0], ecx
shl ecx, 4
add ecx, dword [esi + 0x1b8]
dec dword [ecx + 8]
mov byte [esi + 0x17c], 0
cmp dword [ecx + 8], 0
jle 0x1018d4c2
inc dword [esi + 0x1b0]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + 4]
mov dword [esi + 0x16c], eax
jmp case.0x1018cb2c.33
push dword [ecx + 4]
push dword [ecx]
push esi
call fcn.10189300
add esp, 0xc
jmp case.0x1018cb2c.33
movzx edi, word [edi]
cmp di, word [esi + 0x2c]
jb 0x1018d4f7
cmp byte [esi + 0x235], 0
je case.0x1018cb2c.33
mov dword [esi + 0xc], 0x86
jmp case.0x1018cb2c.33
test bl, 1
je 0x1018d542
mov eax, dword [esi + 0x34]
mov ecx, edi
push dword [eax + ecx*8 + 4]
push dword [eax + ecx*8]
mov eax, dword [esi + 0x240]
push esi
call eax
mov ecx, dword [esi + 0x23c]
add esp, 0xc
mov ebx, eax
mov eax, dword [esi + 0x10c]
push eax
push ebx
push esi
cmp ecx, fcn.1018a7e0
jne 0x1018d539
call fcn.1018a7e0
add esp, 0xc
sub eax, ebx
jmp 0x1018d544
call ecx
add esp, 0xc
sub eax, ebx
jmp 0x1018d544
xor eax, eax
push eax
push edi
lea eax, [esi + 0x24]
push eax
mov eax, dword [esi + 0x24c]
push esi
call eax
add esp, 0x10
mov word [esi + 0x120], di
mov word [esi + 0x122], di
jmp case.0x1018cb2c.33
push esi
call fcn.10189900
jmp 0x1018ed77
push esi
call fcn.1018a180
jmp 0x1018ed77
push edi
push esi
call fcn.10189ff0
add esp, 8
jmp case.0x1018cb2c.33
cmp dword [edi], 2
jb 0x1018d5ac
cmp byte [esi + 0x235], 0
je case.0x1018cb2c.33
mov dword [esi + 0xc], 0x86
jmp case.0x1018cb2c.33
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x38]
push eax
lea eax, [esp + 0x38]
push eax
push esi
call fcn.10188da0
add esp, 0x14
test al, al
jne case.0x1018cb2c.33
movzx eax, word [esi + 0x160]
test ax, ax
jne 0x1018d5e3
movzx ebx, word [esi + 0x74]
jmp 0x1018d608
cmp eax, 1
jne 0x1018d606
movzx eax, word [esi + 0x76]
test ax, ax
jle 0x1018d606
movsx ecx, ax
mov eax, dword [esi + 0x88]
mov ax, word [eax + ecx*2 - 2]
inc ax
movzx ebx, ax
jmp 0x1018d608
xor ebx, ebx
xor eax, eax
xor edi, edi
cmp ax, bx
jae case.0x1018cb2c.33
mov bp, word [esp + 0x10]
xor edx, edx
nop dword [eax]
mov ecx, dword [esi + 0x7c]
cmp dword [esp + 0x68], ecx
jne 0x1018d62e
cmp bp, di
je 0x1018d68e
cmp word [esi + 0x12e], 0
je 0x1018d656
mov eax, dword [esi]
mov eax, dword [eax + 0x60]
cmp dword [eax + 0x40], 0x28
jne 0x1018d64c
cmp byte [esi + 0x267], 0
jne 0x1018d653
mov eax, dword [esp + 0x2c]
add dword [edx + ecx], eax
mov ecx, dword [esi + 0x7c]
cmp word [esi + 0x130], 0
je 0x1018d68e
mov eax, dword [esi]
mov eax, dword [eax + 0x60]
cmp dword [eax + 0x40], 0x28
jne 0x1018d686
cmp byte [esi + 0x267], 0
je 0x1018d686
cmp byte [esi + 0x268], 0
je 0x1018d686
cmp byte [esi + 0x269], 0
jne 0x1018d68e
mov eax, dword [esp + 0x30]
add dword [edx + ecx + 4], eax
inc edi
add edx, 8
cmp di, bx
jb 0x1018d620
jmp case.0x1018cb2c.33
push edi
push esi
call fcn.1018a2b0
add esp, 8
jmp case.0x1018cb2c.33
push esi
call fcn.10189370
jmp 0x1018ed77
movzx ebx, word [edi]
mov ecx, ebx
cmp bx, word [esi + 0x50]
jae 0x1018cd37
movzx eax, word [esi + 0x120]
cmp ax, word [esi + 0x2c]
jae 0x1018cd37
cmp word [esi + 0x15e], 0
mov ebp, ecx
jne 0x1018d720
mov edx, eax
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + edx*8]
mov edx, dword [eax + edx*8 + 4]
mov eax, dword [esi + 0x54]
mov dword [eax + ebp*8], ecx
mov dword [eax + ebp*8 + 4], edx
lea eax, [esi + 0x48]
push dword [edi + 4]
push ebx
push eax
mov eax, dword [esi + 0x250]
push esi
call eax
mov eax, dword [esi + 0x54]
add esp, 0x10
mov ecx, dword [eax + ebp*8]
mov edx, dword [eax + ebp*8 + 4]
mov eax, dword [esi + 0x58]
mov dword [eax + ebp*8], ecx
mov dword [eax + ebp*8 + 4], edx
movzx ecx, word [esi + 0x120]
mov eax, dword [esi + 0x34]
lea edx, [eax + ecx*8]
mov eax, dword [esi + 0x58]
lea ecx, [eax + ebp*8]
mov eax, dword [ecx + 4]
sub eax, dword [edx + 4]
push eax
mov eax, dword [ecx]
sub eax, dword [edx]
push eax
mov eax, dword [esi + 0x240]
push esi
call eax
mov ecx, dword [edi + 4]
sub ecx, eax
lea eax, [esi + 0x48]
push ecx
push ebx
push eax
mov eax, dword [esi + 0x24c]
push esi
call eax
mov ax, word [esi + 0x120]
add esp, 0x1c
test byte [esi + 0x174], 1
mov word [esi + 0x122], ax
mov word [esi + 0x124], bx
je case.0x1018cb2c.33
mov word [esi + 0x120], bx
jmp case.0x1018cb2c.33
mov edi, dword [esi + 0x134]
cmp dword [esi + 0x10], edi
jl 0x1018d846
mov ax, word [esi + 0x120]
cmp ax, word [esi + 0x2c]
jae 0x1018d846
mov eax, ecx
test edi, edi
jle 0x1018d858
nop word [eax + eax]
lea eax, [ecx - 1]
mov dword [esi + 0x1c], eax
movzx edi, word [edx + eax*4]
cmp di, word [esi + 0x50]
jb 0x1018d7df
cmp byte [esi + 0x235], 0
jne 0x1018cd44
jmp 0x1018d823
movzx ecx, word [esi + 0x120]
mov eax, dword [esi + 0x34]
lea edx, [eax + ecx*8]
mov eax, dword [esi + 0x58]
mov ecx, edi
lea ecx, [eax + ecx*8]
mov eax, dword [ecx + 4]
sub eax, dword [edx + 4]
push eax
mov eax, dword [ecx]
sub eax, dword [edx]
push eax
mov eax, dword [esi + 0x240]
push esi
call eax
neg eax
push eax
push edi
lea eax, [esi + 0x48]
push eax
mov eax, dword [esi + 0x24c]
push esi
call eax
mov eax, dword [esi + 0x1c]
add esp, 0x1c
mov edx, dword [esi + 0x18]
dec dword [esi + 0x134]
mov ecx, eax
cmp dword [esi + 0x134], 0
jg 0x1018d7c0
mov dword [esi + 0x134], 1
mov dword [esi + 0x20], eax
jmp case.0x1018cb2c.33
cmp byte [esi + 0x235], 0
mov eax, ecx
je 0x1018d858
mov dword [esi + 0xc], 0x86
mov dword [esi + 0x134], 1
mov dword [esi + 0x20], eax
jmp case.0x1018cb2c.33
mov dword [esi + 0x13c], 2
mov dword [esi + 0x23c], 0x1018a840
jmp case.0x1018cb2c.33
movzx ebx, word [edi]
mov ebp, ebx
mov eax, dword [esi + 0x144]
mov ecx, dword [edi + 4]
mov dword [esp + 0x24], eax
cmp bx, word [esi + 0x2c]
jae 0x1018d993
cmp ecx, dword [esi + 0x180]
jae 0x1018d993
mov eax, dword [esi + 0x258]
cmp eax, 0x1018a6c0
jne 0x1018d8c3
mov eax, dword [esi + 0x184]
mov edi, dword [eax + ecx*4]
jmp 0x1018d8cc
push ecx
push esi
call eax
add esp, 8
mov edi, eax
cmp word [esi + 0x15c], 0
jne 0x1018d916
movsx eax, word [esi + 0x12e]
push eax
push edi
call fcn.1018c0c0
mov ecx, dword [esi + 0x30]
mov dword [ecx + ebp*8], eax
movsx eax, word [esi + 0x130]
push eax
push edi
call fcn.1018c0c0
mov ecx, dword [esi + 0x30]
add esp, 0x10
mov dword [ecx + ebp*8 + 4], eax
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + ebp*8]
mov edx, dword [eax + ebp*8 + 4]
mov eax, dword [esi + 0x34]
mov dword [eax + ebp*8], ecx
mov dword [eax + ebp*8 + 4], edx
mov eax, dword [esi + 0x34]
push dword [eax + ebp*8 + 4]
push dword [eax + ebp*8]
mov eax, dword [esi + 0x240]
push esi
call eax
add esp, 0xc
mov ebp, eax
test byte [esi + 0x174], 1
je 0x1018d96c
mov ecx, dword [esi + 0x23c]
mov eax, edi
sub eax, ebp
cdq
xor eax, edx
sub eax, edx
cmp eax, dword [esp + 0x24]
mov eax, dword [esi + 0x10c]
cmovg edi, ebp
push eax
push edi
push esi
cmp ecx, fcn.1018a7e0
jne 0x1018d965
call fcn.1018a7e0
jmp 0x1018d967
call ecx
mov edi, eax
add esp, 0xc
sub edi, ebp
lea eax, [esi + 0x24]
push edi
push ebx
push eax
mov eax, dword [esi + 0x24c]
push esi
call eax
add esp, 0x10
mov word [esi + 0x120], bx
mov word [esi + 0x122], bx
jmp case.0x1018cb2c.33
cmp byte [esi + 0x235], 0
je 0x1018d9a3
mov dword [esi + 0xc], 0x86
mov word [esi + 0x120], bx
mov word [esi + 0x122], bx
jmp case.0x1018cb2c.33
mov ecx, dword [esi + 0x16c]
mov eax, dword [esi + 0x168]
sub ebp, dword [esi + 0x10]
inc ebp
movzx eax, byte [ecx + eax + 1]
mov dword [esp + 0x24], eax
movzx eax, ax
mov dword [esp + 0x1c], eax
cmp eax, ebp
jb 0x1018d9e6
mov dword [esi + 0xc], 0x82
jmp case.0x1018cb2c.33
mov ebp, dword [esp + 0x24]
mov ebx, 1
mov ecx, ebx
cmp cx, bp
ja 0x1018da24
nop word [eax + eax]
mov ecx, dword [esi + 0x16c]
mov eax, dword [esi + 0x168]
movzx edx, bx
inc ebx
add ecx, edx
movzx eax, byte [ecx + eax + 1]
mov dword [edi + edx*4 - 4], eax
cmp bx, bp
jbe 0x1018da00
mov eax, dword [esp + 0x1c]
add dword [esi + 0x20], eax
jmp case.0x1018cb2c.33
mov ecx, dword [esi + 0x16c]
mov eax, dword [esi + 0x168]
sub ebp, dword [esi + 0x10]
inc ebp
mov dl, byte [eax + ecx + 1]
movzx ebx, dl
mov dword [esp + 0x24], ebx
cmp ebx, ebp
jb 0x1018da57
mov dword [esi + 0xc], 0x82
jmp case.0x1018cb2c.33
lea eax, [ecx + 2]
mov dword [esi + 0x16c], eax
test dl, dl
je 0x1018daac
nop dword [eax]
nop dword [eax + eax]
add dword [esi + 0x16c], 2
lea edi, [edi + 4]
mov edx, dword [esi + 0x16c]
mov eax, 0x100
add edx, dword [esi + 0x168]
cwde
movzx ecx, byte [edx - 2]
movsx ecx, cx
imul ecx, eax
movzx eax, byte [edx - 1]
add cx, ax
movsx eax, cx
mov dword [edi - 4], eax
sub ebx, 1
jne 0x1018da70
mov ebx, dword [esp + 0x24]
add dword [esi + 0x20], ebx
mov byte [esi + 0x17c], 0
jmp case.0x1018cb2c.33
movzx eax, word [esi + 0x1d8]
mov edx, dword [edi]
cmp edx, eax
jb 0x1018dae1
cmp byte [esi + 0x235], 0
je case.0x1018cb2c.33
mov dword [esi + 0xc], 0x86
jmp case.0x1018cb2c.33
mov ecx, dword [esi + 0x1dc]
mov eax, dword [edi + 4]
mov dword [ecx + edx*4], eax
jmp case.0x1018cb2c.33
movzx eax, word [esi + 0x1d8]
mov ecx, dword [edi]
cmp ecx, eax
jb 0x1018db1f
cmp byte [esi + 0x235], 0
je 0x1018db14
mov dword [esi + 0xc], 0x86
jmp case.0x1018cb2c.33
mov dword [edi], 0
jmp case.0x1018cb2c.33
mov eax, dword [esi + 0x1dc]
mov eax, dword [eax + ecx*4]
mov dword [edi], eax
jmp case.0x1018cb2c.33
mov ecx, dword [edi]
cmp ecx, dword [esi + 0x180]
jb 0x1018db52
cmp byte [esi + 0x235], 0
je case.0x1018cb2c.33
mov dword [esi + 0xc], 0x86
jmp case.0x1018cb2c.33
mov eax, dword [esi + 0x25c]
mov edx, dword [edi + 4]
cmp eax, 0x1018fad0
jne 0x1018db70
mov eax, dword [esi + 0x184]
mov dword [eax + ecx*4], edx
jmp case.0x1018cb2c.33
push edx
push ecx
push esi
call eax
add esp, 0xc
jmp case.0x1018cb2c.33
mov ecx, dword [edi]
cmp ecx, dword [esi + 0x180]
jb 0x1018db9c
cmp byte [esi + 0x235], 0
je 0x1018db14
mov dword [esi + 0xc], 0x86
jmp case.0x1018cb2c.33
mov eax, dword [esi + 0x258]
cmp eax, 0x1018a6c0
jne 0x1018dbb9
mov eax, dword [esi + 0x184]
mov eax, dword [eax + ecx*4]
mov dword [edi], eax
jmp case.0x1018cb2c.33
push ecx
push esi
call eax
add esp, 8
mov dword [edi], eax
jmp case.0x1018cb2c.33
movzx eax, word [esi + 0x74]
mov ecx, dword [edi]
cmp ecx, eax
jb 0x1018dbea
cmp byte [esi + 0x235], 0
je 0x1018dbe1
mov dword [esi + 0xc], 0x86
xor eax, eax
mov dword [edi], eax
jmp case.0x1018cb2c.33
test bl, 1
je 0x1018dc0c
mov eax, dword [esi + 0x78]
push dword [eax + ecx*8 + 4]
push dword [eax + ecx*8]
mov eax, dword [esi + 0x244]
push esi
call eax
add esp, 0xc
mov dword [edi], eax
jmp case.0x1018cb2c.33
mov eax, dword [esi + 0x7c]
push dword [eax + ecx*8 + 4]
push dword [eax + ecx*8]
mov eax, dword [esi + 0x240]
push esi
call eax
add esp, 0xc
mov dword [edi], eax
jmp case.0x1018cb2c.33
movzx ebp, word [edi]
cmp bp, word [esi + 0x74]
jb 0x1018dc4b
cmp byte [esi + 0x235], 0
je case.0x1018cb2c.33
mov dword [esi + 0xc], 0x86
jmp case.0x1018cb2c.33
mov eax, dword [esi + 0x7c]
mov ebx, ebp
shl ebx, 3
push dword [ebx + eax + 4]
push dword [ebx + eax]
mov eax, dword [esi + 0x240]
push esi
call eax
mov ecx, dword [edi + 4]
sub ecx, eax
lea eax, [esi + 0x6c]
push ecx
push ebp
push eax
mov eax, dword [esi + 0x24c]
push esi
call eax
add esp, 0x1c
cmp word [esi + 0x160], 0
jne case.0x1018cb2c.33
mov eax, dword [esi + 0x7c]
mov ecx, dword [ebx + eax]
mov edx, dword [ebx + eax + 4]
mov eax, dword [esi + 0x78]
mov dword [ebx + eax], ecx
mov dword [ebx + eax + 4], edx
jmp case.0x1018cb2c.33
movzx eax, word [edi]
movzx ebp, word [edi + 4]
cmp ax, word [esi + 0x2c]
jae 0x1018d0d6
cmp bp, word [esi + 0x50]
jae 0x1018d0d6
test bl, 1
je 0x1018dcf1
mov eax, dword [esi + 0x58]
mov ecx, ebp
lea edx, [eax + ecx*8]
mov eax, dword [esi + 0x34]
movzx ecx, word [edi]
lea ecx, [eax + ecx*8]
mov eax, dword [ecx + 4]
sub eax, dword [edx + 4]
push eax
mov eax, dword [ecx]
sub eax, dword [edx]
push eax
mov eax, dword [esi + 0x240]
push esi
call eax
add esp, 0xc
mov dword [edi], eax
jmp case.0x1018cb2c.33
cmp word [esi + 0x15c], 0
je 0x1018de0b
cmp word [esi + 0x15e], 0
je 0x1018de0b
mov ecx, eax
mov eax, dword [esi + 0x38]
lea ebx, [eax + ecx*8]
mov eax, dword [esi + 0x5c]
mov ecx, ebp
lea ebp, [eax + ecx*8]
mov eax, dword [esi + 0xe0]
cmp eax, dword [esi + 0xe4]
jne 0x1018dd83
mov eax, dword [ebx + 4]
sub eax, dword [ebp + 4]
push eax
mov eax, dword [ebx]
sub eax, dword [ebp]
push eax
mov eax, dword [esi + 0x244]
push esi
call eax
mov dword [esp + 0x30], eax
add esp, 0xc
mov eax, dword [esi + 0xe0]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x1c]
imul edx
mov ecx, edx
sar ecx, 0x1f
add ecx, 0x8000
add eax, ecx
adc edx, 0
shr eax, 0x10
shl edx, 0x10
add eax, edx
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x34]
mov dword [edi], eax
jmp case.0x1018cb2c.33
mov dword [esp + 0x1c], eax
mov eax, dword [ebx]
sub eax, dword [ebp]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x1c]
imul edx
mov ecx, edx
sar ecx, 0x1f
add ecx, 0x8000
add eax, ecx
adc edx, 0
shr eax, 0x10
shl edx, 0x10
add eax, edx
mov dword [esp + 0x3c], eax
mov eax, dword [esi + 0xe4]
mov dword [esp + 0x1c], eax
mov eax, dword [ebx + 4]
sub eax, dword [ebp + 4]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x1c]
imul edx
mov ecx, edx
sar ecx, 0x1f
add ecx, 0x8000
add eax, ecx
adc edx, 0
shr eax, 0x10
shl edx, 0x10
add eax, edx
mov dword [esp + 0x38], eax
push dword [esp + 0x38]
mov eax, dword [esi + 0x244]
push dword [esp + 0x40]
push esi
call eax
add esp, 0xc
mov dword [edi], eax
jmp case.0x1018cb2c.33
mov ecx, eax
mov eax, dword [esi + 0x30]
lea edx, [eax + ecx*8]
mov eax, dword [esi + 0x54]
mov ecx, ebp
lea ecx, [eax + ecx*8]
mov eax, dword [edx + 4]
sub eax, dword [ecx + 4]
push eax
mov eax, dword [edx]
sub eax, dword [ecx]
push eax
mov eax, dword [esi + 0x244]
push esi
call eax
add esp, 0xc
mov dword [edi], eax
jmp case.0x1018cb2c.33
mov eax, dword [esi + 0x254]
cmp eax, 0x10188e80
jne 0x1018de55
movzx eax, word [esi + 0x100]
mov dword [edi], eax
jmp case.0x1018cb2c.33
push esi
call eax
add esp, 4
mov dword [edi], eax
jmp case.0x1018cb2c.33
mov eax, dword [esi]
mov eax, dword [eax + 0x60]
cmp dword [eax + 0x40], 0x23
jne 0x1018de95
mov eax, dword [esi + 0x254]
cmp eax, 0x10188e80
jne 0x1018de88
movzx eax, word [esi + 0x100]
mov dword [edi], eax
jmp case.0x1018cb2c.33
push esi
call eax
add esp, 4
mov dword [edi], eax
jmp case.0x1018cb2c.33
mov eax, dword [esi + 0xd8]
mov dword [edi], eax
jmp case.0x1018cb2c.33
mov byte [esi + 0x140], 1
jmp case.0x1018cb2c.33
mov byte [esi + 0x140], 0
jmp case.0x1018cb2c.33
mov dword [esi + 0xc], 0x87
jmp case.0x1018cb2c.33
mov eax, dword [edi]
xor ecx, ecx
cmp eax, dword [edi + 4]
setl cl
mov dword [edi], ecx
jmp case.0x1018cb2c.33
mov eax, dword [edi]
xor ecx, ecx
cmp eax, dword [edi + 4]
setle cl
mov dword [edi], ecx
jmp case.0x1018cb2c.33
mov eax, dword [edi]
xor ecx, ecx
cmp eax, dword [edi + 4]
setg cl
mov dword [edi], ecx
jmp case.0x1018cb2c.33
mov eax, dword [edi]
xor ecx, ecx
cmp eax, dword [edi + 4]
setge cl
mov dword [edi], ecx
jmp case.0x1018cb2c.33
mov eax, dword [edi]
xor ecx, ecx
cmp eax, dword [edi + 4]
sete cl
mov dword [edi], ecx
jmp case.0x1018cb2c.33
mov eax, dword [edi]
xor ecx, ecx
cmp eax, dword [edi + 4]
setne cl
mov dword [edi], ecx
jmp case.0x1018cb2c.33
mov ecx, dword [esi + 0x23c]
mov eax, dword [edi]
cmp ecx, 0x1018a840
jne 0x1018df85
test eax, eax
js 0x1018df60
add eax, 0x10
mov edx, 0
and eax, 0xffffffe0
cmovge edx, eax
xor ecx, ecx
and dl, 0x7f
cmp dl, 0x40
sete cl
mov dword [edi], ecx
jmp case.0x1018cb2c.33
mov edx, 0x10
sub edx, eax
xor eax, eax
and edx, 0xffffffe0
neg edx
test edx, edx
cmovg edx, eax
xor ecx, ecx
and dl, 0x7f
cmp dl, 0x40
sete cl
mov dword [edi], ecx
jmp case.0x1018cb2c.33
push 0
push eax
push esi
call ecx
mov edx, eax
xor ecx, ecx
and dl, 0x7f
add esp, 0xc
cmp dl, 0x40
sete cl
mov dword [edi], ecx
jmp case.0x1018cb2c.33
mov ecx, dword [esi + 0x23c]
mov eax, dword [edi]
cmp ecx, 0x1018a840
jne 0x1018dff6
test eax, eax
js 0x1018dfd6
add eax, 0x10
mov ecx, 0
and eax, 0xffffffe0
cmovge ecx, eax
mov eax, 0
test cl, 0x7f
sete al
mov dword [edi], eax
jmp case.0x1018cb2c.33
mov ecx, 0x10
sub ecx, eax
xor eax, eax
and ecx, 0xffffffe0
neg ecx
test ecx, ecx
cmovg ecx, eax
test cl, 0x7f
sete al
mov dword [edi], eax
jmp case.0x1018cb2c.33
push 0
push eax
push esi
call ecx
mov ecx, eax
add esp, 0xc
test cl, 0x7f
mov eax, 0
sete al
mov dword [edi], eax
jmp case.0x1018cb2c.33
cmp dword [edi], 0
jne case.0x1018cb2c.33
mov edi, 1
xor bl, bl
push esi
call fcn.1018ab00
add esp, 4
cmp al, 1
je case.0x1018cb2c.33
movzx eax, byte [esi + 0x174]
sub eax, 0x1b
je 0x1018e052
sub eax, 0x3d
je 0x1018e04f
sub eax, 1
jne 0x1018e058
sub edi, 1
jmp 0x1018e055
inc edi
jmp 0x1018e058
cmp edi, 1
sete bl
test bl, bl
je 0x1018e023
jmp case.0x1018cb2c.33
cmp dword [edi], 0
je 0x1018d0e6
cmp dword [edi + 4], 0
je 0x1018d0e6
mov eax, 1
mov dword [edi], eax
jmp case.0x1018cb2c.33
cmp dword [edi], 0
jne 0x1018e094
cmp dword [edi + 4], 0
jne 0x1018e094
xor eax, eax
mov dword [edi], eax
jmp case.0x1018cb2c.33
mov eax, 1
mov dword [edi], eax
jmp case.0x1018cb2c.33
xor eax, eax
cmp dword [edi], eax
sete al
mov dword [edi], eax
jmp case.0x1018cb2c.33
mov eax, dword [esi + 0x254]
cmp eax, 0x10188e80
jne 0x1018e0c4
movzx eax, word [esi + 0x100]
jmp 0x1018e0cd
push esi
call eax
mov ecx, dword [esi + 0x1c]
add esp, 4
mov ebp, dword [edi]
mov ebx, 1
mov dword [esp + 0x1c], eax
cmp ebp, ebx
jb 0x1018e1e5
mov ecx, dword [esi + 0x1c]
cmp ecx, 2
jl 0x1018e1cc
mov eax, dword [esi + 0x18]
add ecx, 0xfffffffe
mov dword [esi + 0x1c], ecx
movzx edi, word [eax + ecx*4 + 4]
mov edx, dword [eax + ecx*4]
cmp di, word [esi + 0x2c]
jae 0x1018e1ab
movzx eax, byte [esi + 0x174]
mov ecx, edx
shr ecx, 4
and ecx, 0xf
sub eax, 0x71
je 0x1018e125
sub eax, 1
jne 0x1018e128
add ecx, 0x20
jmp 0x1018e128
add ecx, 0x10
movzx eax, word [esi + 0x150]
add eax, ecx
cmp dword [esp + 0x1c], eax
jne 0x1018e1a6
and edx, 0xf
sub edx, 8
js 0x1018e140
inc edx
movzx eax, word [esi + 0x152]
mov ecx, 6
sub ecx, eax
mov eax, dword [esi]
shl edx, cl
mov eax, dword [eax + 0x60]
cmp dword [eax + 0x40], 0x28
jne 0x1018e194
cmp byte [esi + 0x267], 0
je 0x1018e194
cmp byte [esi + 0x268], 0
je 0x1018e176
cmp byte [esi + 0x269], 0
jne 0x1018e1a6
cmp byte [esi + 0x234], 0
je 0x1018e189
cmp word [esi + 0x130], 0
jne 0x1018e194
mov eax, dword [esi + 0x3c]
mov ecx, edi
test byte [ecx + eax], 0x10
je 0x1018e1a6
push edx
push edi
lea eax, [esi + 0x24]
push eax
mov eax, dword [esi + 0x24c]
push esi
call eax
add esp, 0x10
mov ecx, dword [esi + 0x1c]
jmp 0x1018e1bb
cmp byte [esi + 0x235], 0
je 0x1018e1bb
mov dword [esi + 0xc], 0x86
inc ebx
cmp ebx, ebp
jbe 0x1018e0e0
mov dword [esi + 0x20], ecx
jmp case.0x1018cb2c.33
cmp byte [esi + 0x235], 0
je 0x1018e1dc
mov dword [esi + 0xc], 0x81
mov dword [esi + 0x1c], 0
xor ecx, ecx
mov dword [esi + 0x20], ecx
jmp case.0x1018cb2c.33
mov ax, word [edi]
mov word [esi + 0x150], ax
jmp case.0x1018cb2c.33
mov eax, dword [edi]
cmp eax, 6
jbe 0x1018e20f
mov dword [esi + 0xc], 0x84
jmp case.0x1018cb2c.33
mov word [esi + 0x152], ax
jmp case.0x1018cb2c.33
mov eax, dword [edi + 4]
add dword [edi], eax
jmp case.0x1018cb2c.33
mov eax, dword [edi + 4]
sub dword [edi], eax
jmp case.0x1018cb2c.33
mov eax, dword [edi + 4]
test eax, eax
jne 0x1018e242
mov dword [esi + 0xc], 0x85
jmp case.0x1018cb2c.33
push eax
push 0x40
push dword [edi]
call fcn.10178a70
add esp, 0xc
mov dword [edi], eax
jmp case.0x1018cb2c.33
push 0x40
push dword [edi + 4]
push dword [edi]
call fcn.10178990
add esp, 0xc
mov dword [edi], eax
jmp case.0x1018cb2c.33
mov eax, dword [edi]
test eax, eax
jns case.0x1018cb2c.33
neg eax
mov dword [edi], eax
jmp case.0x1018cb2c.33
mov eax, dword [edi]
neg eax
mov dword [edi], eax
jmp case.0x1018cb2c.33
and dword [edi], 0xffffffc0
jmp case.0x1018cb2c.33
mov eax, dword [edi]
add eax, 0x3f
and eax, 0xffffffc0
mov dword [edi], eax
jmp case.0x1018cb2c.33
mov edx, dword [esi + eax*4 - 0x94]
mov eax, dword [esi + 0x23c]
mov ecx, dword [edi]
cmp eax, fcn.1018a7e0
jne 0x1018e30e
mov eax, dword [esi + 0x1e8]
mov ebx, dword [esi + 0x1e4]
sub eax, ebx
mov ebp, dword [esi + 0x1e0]
test ecx, ecx
js 0x1018e2eb
add ecx, eax
add ecx, edx
mov eax, ecx
cdq
idiv ebp
sub ecx, edx
lea eax, [ecx + ebx]
test eax, eax
cmovns ebx, eax
mov eax, ebx
mov dword [edi], eax
jmp case.0x1018cb2c.33
sub eax, ecx
lea ecx, [eax + edx]
mov eax, ecx
cdq
idiv ebp
mov eax, edx
sub eax, ecx
sub eax, ebx
test eax, eax
jle 0x1018dc22
mov eax, ebx
neg eax
mov dword [edi], eax
jmp case.0x1018cb2c.33
push edx
push ecx
push esi
call eax
add esp, 0xc
mov dword [edi], eax
jmp case.0x1018cb2c.33
mov ecx, dword [edi]
mov eax, dword [esi + eax*4 - 0xa4]
test ecx, ecx
js 0x1018e33a
add eax, ecx
xor ecx, ecx
test eax, eax
cmovns ecx, eax
mov dword [edi], ecx
jmp case.0x1018cb2c.33
sub ecx, eax
xor eax, eax
test ecx, ecx
cmovg ecx, eax
mov dword [edi], ecx
jmp case.0x1018cb2c.33
mov ebx, dword [edi]
cmp ebx, dword [esi + 0x180]
jb 0x1018e36d
cmp byte [esi + 0x235], 0
je case.0x1018cb2c.33
mov dword [esi + 0xc], 0x86
jmp case.0x1018cb2c.33
mov eax, dword [esi + 0x108]
mov dword [esp + 0x1c], eax
mov eax, dword [edi + 4]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x1c]
imul edx
mov ecx, edx
sar ecx, 0x1f
add ecx, 0x8000
add eax, ecx
adc edx, 0
shr eax, 0x10
shl edx, 0x10
add eax, edx
mov dword [esp + 0x40], eax
mov ecx, dword [esi + 0x184]
mov eax, dword [esp + 0x40]
mov dword [ecx + ebx*4], eax
jmp case.0x1018cb2c.33
push edi
push esi
call fcn.101891b0
add esp, 8
jmp case.0x1018cb2c.33
mov eax, dword [esi + 0x254]
cmp eax, 0x10188e80
jne 0x1018e3db
movzx eax, word [esi + 0x100]
jmp 0x1018e3e1
push esi
call eax
add esp, 4
mov ebp, dword [edi]
mov ebx, 1
mov dword [esp + 0x1c], eax
cmp ebp, ebx
jb 0x1018e4bb
mov ecx, dword [esi + 0x1c]
cmp ecx, 2
jl 0x1018e4a4
mov eax, dword [esi + 0x18]
add ecx, 0xfffffffe
mov dword [esi + 0x1c], ecx
mov edi, dword [eax + ecx*4 + 4]
mov edx, dword [eax + ecx*4]
cmp edi, dword [esi + 0x180]
jb 0x1018e427
cmp byte [esi + 0x235], 0
jne 0x1018cd44
jmp 0x1018e490
movzx eax, byte [esi + 0x174]
mov ecx, edx
shr ecx, 4
and ecx, 0xf
sub eax, 0x74
je 0x1018e445
sub eax, 1
jne 0x1018e448
add ecx, 0x20
jmp 0x1018e448
add ecx, 0x10
movzx eax, word [esi + 0x150]
add eax, ecx
cmp dword [esp + 0x1c], eax
jne 0x1018e490
and edx, 0xf
sub edx, 8
js 0x1018e460
inc edx
movzx eax, word [esi + 0x152]
mov ecx, 6
sub ecx, eax
mov eax, dword [esi + 0x260]
shl edx, cl
cmp eax, 0x1018a5c0
jne 0x1018e488
mov eax, dword [esi + 0x184]
add dword [eax + edi*4], edx
jmp 0x1018e490
push edx
push edi
push esi
call eax
add esp, 0xc
inc ebx
cmp ebx, ebp
jbe 0x1018e3f4
mov eax, dword [esi + 0x1c]
mov dword [esi + 0x20], eax
jmp case.0x1018cb2c.33
cmp byte [esi + 0x235], 0
je 0x1018e4b4
mov dword [esi + 0xc], 0x81
mov dword [esi + 0x1c], 0
mov eax, dword [esi + 0x1c]
mov dword [esi + 0x20], eax
jmp case.0x1018cb2c.33
push dword [edi]
push 0x4000
push esi
call fcn.1018a910
add esp, 0xc
mov dword [esi + 0x13c], 6
mov dword [esi + 0x23c], 0x1018a790
jmp case.0x1018cb2c.33
push dword [edi]
push 0x2d41
push esi
call fcn.1018a910
add esp, 0xc
mov dword [esi + 0x13c], 7
mov dword [esi + 0x23c], fcn.1018a7e0
jmp case.0x1018cb2c.33
cmp dword [edi + 4], 0
je case.0x1018cb2c.33
jmp case.0x1018cb2c.28
cmp dword [edi + 4], 0
jne case.0x1018cb2c.33
jmp case.0x1018cb2c.28
mov dword [esi + 0x13c], 5
mov dword [esi + 0x23c], 0x1018a770
jmp case.0x1018cb2c.33
mov dword [esi + 0x13c], 4
mov dword [esi + 0x23c], 0x1018a8e0
jmp case.0x1018cb2c.33
mov dword [esi + 0x13c], 3
mov dword [esi + 0x23c], 0x1018a740
jmp case.0x1018cb2c.33
mov eax, dword [esi]
mov eax, dword [eax + 0x60]
cmp dword [eax + 0x40], 0x28
jne 0x1018e5ad
cmp byte [esi + 0x267], 0
je 0x1018e5ad
cmp byte [esi + 0x268], 0
je 0x1018e5ad
cmp byte [esi + 0x269], 0
mov eax, ecx
jne 0x1018d858
mov edi, dword [esi + 0x134]
mov eax, ecx
cmp dword [esi + 0x10], edi
jge 0x1018e5e0
cmp byte [esi + 0x235], 0
je 0x1018d858
mov dword [esi + 0xc], 0x81
mov dword [esi + 0x134], 1
mov dword [esi + 0x20], eax
jmp case.0x1018cb2c.33
test edi, edi
jle 0x1018d858
nop dword [eax + eax]
lea eax, [ecx - 1]
mov dword [esi + 0x1c], eax
movzx ecx, word [edx + eax*4]
cmp cx, word [esi + 0x98]
jb 0x1018e612
cmp byte [esi + 0x235], 0
jne 0x1018cd44
jmp 0x1018e622
mov eax, dword [esi + 0xa8]
xor byte [eax + ecx], 1
mov eax, dword [esi + 0x1c]
mov edx, dword [esi + 0x18]
dec dword [esi + 0x134]
mov ecx, eax
cmp dword [esi + 0x134], 0
jg 0x1018e5f0
mov dword [esi + 0x134], 1
mov dword [esi + 0x20], eax
jmp case.0x1018cb2c.33
mov eax, dword [esi]
mov eax, dword [eax + 0x60]
cmp dword [eax + 0x40], 0x28
jne 0x1018e66f
cmp byte [esi + 0x267], 0
je 0x1018e66f
cmp byte [esi + 0x268], 0
je 0x1018e66f
cmp byte [esi + 0x269], 0
jne case.0x1018cb2c.33
movzx ebx, word [edi + 4]
movzx ecx, word [esi + 0x98]
movzx eax, word [edi]
cmp bx, cx
jae 0x1018cd37
cmp ax, cx
jae 0x1018cd37
mov edx, eax
cmp ax, bx
ja case.0x1018cb2c.33
nop word [eax + eax]
mov eax, dword [esi + 0xa8]
movzx ecx, dx
inc edx
or byte [ecx + eax], 1
cmp dx, bx
jbe 0x1018e6a0
jmp case.0x1018cb2c.33
mov eax, dword [esi]
mov eax, dword [eax + 0x60]
cmp dword [eax + 0x40], 0x28
jne 0x1018e6e2
cmp byte [esi + 0x267], 0
je 0x1018e6e2
cmp byte [esi + 0x268], 0
je 0x1018e6e2
cmp byte [esi + 0x269], 0
jne case.0x1018cb2c.33
movzx ebx, word [edi + 4]
movzx ecx, word [esi + 0x98]
movzx eax, word [edi]
cmp bx, cx
jae 0x1018cd37
cmp ax, cx
jae 0x1018cd37
mov edx, eax
cmp ax, bx
ja case.0x1018cb2c.33
nop dword [eax]
mov eax, dword [esi + 0xa8]
movzx ecx, dx
inc edx
and byte [ecx + eax], 0xfe
cmp dx, bx
jbe 0x1018e710
jmp case.0x1018cb2c.33
mov eax, dword [edi]
movzx ecx, al
cmp ecx, 0xff
jne 0x1018e741
mov byte [esi + 0x155], 1
jmp case.0x1018cb2c.33
test al, al
je 0x1018e7dd
test eax, 0x100
je 0x1018e762
movzx eax, word [esi + 0x100]
cmp eax, ecx
ja 0x1018e762
mov byte [esi + 0x155], 1
test dword [edi], 0x200
je 0x1018e77a
cmp byte [esi + 0x11d], 0
je 0x1018e77a
mov byte [esi + 0x155], 1
test dword [edi], 0x400
je 0x1018e792
cmp byte [esi + 0x11e], 0
je 0x1018e792
mov byte [esi + 0x155], 1
test dword [edi], 0x800
je 0x1018e7ac
movzx eax, word [esi + 0x100]
cmp eax, ecx
jbe 0x1018e7ac
mov byte [esi + 0x155], 0
test dword [edi], 0x1000
je 0x1018e7c4
cmp byte [esi + 0x11d], 0
je 0x1018e7c4
mov byte [esi + 0x155], 0
test dword [edi], 0x2000
je case.0x1018cb2c.33
cmp byte [esi + 0x11e], 0
je case.0x1018cb2c.33
mov byte [esi + 0x155], 0
jmp case.0x1018cb2c.33
movzx ecx, word [edi]
movzx eax, word [edi + 4]
cmp cx, word [esi + 0x50]
jae 0x1018cd37
cmp ax, word [esi + 0x74]
jae 0x1018cd37
mov edx, ecx
mov ecx, dword [esi + 0x54]
shl edx, 3
add ecx, edx
mov dword [esp + 0x1c], edx
mov edx, eax
mov eax, dword [esi + 0x78]
shl edx, 3
add eax, edx
mov dword [esp + 0x44], edx
mov edx, dword [ecx]
sub edx, dword [eax]
mov ebp, dword [eax + 4]
mov eax, dword [ecx + 4]
mov edi, eax
sub edi, ebp
mov dword [esp + 0x24], eax
test edx, edx
jne 0x1018e841
test edi, edi
jne 0x1018e841
mov edx, 0x4000
xor bl, bl
lea eax, [esi + 0x126]
test bl, 1
push eax
mov eax, edx
mov cl, bl
cmove eax, edi
sub ebp, dword [esp + 0x28]
test cl, 1
push eax
cmove ebp, edx
push ebp
call fcn.1018a610
mov ecx, dword [esi + 0x58]
add esp, 0xc
add ecx, dword [esp + 0x1c]
mov eax, dword [esi + 0x7c]
add eax, dword [esp + 0x44]
mov edi, dword [ecx]
mov ebp, dword [ecx + 4]
mov ecx, ebp
sub edi, dword [eax]
mov edx, dword [eax + 4]
sub ecx, edx
test edi, edi
jne 0x1018e891
test ecx, ecx
jne 0x1018e891
mov edi, 0x4000
xor bl, bl
lea eax, [esi + 0x12a]
and bl, 1
push eax
mov eax, edi
cmove eax, ecx
sub edx, ebp
test bl, bl
push eax
cmove edx, edi
push edx
call fcn.1018a610
push esi
call fcn.10188c70
add esp, 0x10
jmp case.0x1018cb2c.33
mov ebx, dword [edi]
xor ecx, ecx
mov edx, dword [esi]
test bl, 1
je 0x1018e8cd
mov eax, dword [edx + 0x60]
mov ecx, dword [eax + 0x40]
mov eax, edx
test bl, 2
je 0x1018e8e3
cmp byte [esi + 0x11d], 0
je 0x1018e8e3
or ecx, 0x100
test bl, 4
je 0x1018e8f7
cmp byte [esi + 0x11e], 0
je 0x1018e8f7
or ecx, 0x200
test bl, 8
je 0x1018e90d
cmp dword [eax + 0x2bc], 0
mov edx, eax
je 0x1018e90d
or ecx, 0x400
test bl, 0x20
je 0x1018e921
cmp byte [esi + 0x264], 0
je 0x1018e921
or ecx, 0x1000
mov eax, dword [edx + 0x60]
cmp dword [eax + 0x40], 0x28
jne 0x1018e995
cmp byte [esi + 0x265], 0
je 0x1018e995
mov edx, ecx
or edx, 0x2000
test bl, 0x40
cmove edx, ecx
mov ebp, edx
test ebx, 0x100
je 0x1018e95a
cmp byte [esi + 0x266], 0
je 0x1018e95a
or ebp, 0x8000
mov ecx, ebp
or ecx, 0x20000
test ebx, 0x400
cmove ecx, ebp
mov edx, ecx
or edx, 0x40000
test ebx, 0x800
cmove edx, ecx
mov ecx, edx
test ebx, 0x1000
je 0x1018e995
cmp byte [esi + 0x26a], 0
je 0x1018e995
or ecx, 0x80000
mov dword [edi], ecx
jmp case.0x1018cb2c.33
cmp dword [esi + 0x164], 3
jne 0x1018e9b1
mov dword [esi + 0xc], 0x9c
jmp case.0x1018cb2c.33
mov edx, dword [esi + 0x19c]
mov ebx, dword [esi + 0x1a4]
lea eax, [edx + edx*2]
lea eax, [ebx + eax*8]
cmp ebx, eax
jae 0x1018e9de
mov ecx, dword [edi]
nop dword [eax]
cmp dword [ebx + 0xc], ecx
je 0x1018e9dc
add ebx, 0x18
cmp ebx, eax
jb 0x1018e9d0
cmp ebx, eax
jne 0x1018e9f5
cmp edx, dword [esi + 0x1a0]
jae 0x1018ea74
lea eax, [edx + 1]
mov dword [esi + 0x19c], eax
mov eax, dword [edi]
cmp eax, 0xff
ja 0x1018ea74
movzx eax, al
mov dword [ebx + 0xc], eax
mov eax, dword [esi + 0x16c]
inc eax
mov dword [ebx + 4], eax
mov eax, dword [esi + 0x164]
mov dword [ebx], eax
mov byte [ebx + 0x10], 1
mov eax, dword [edi]
cmp eax, dword [esi + 0x1ac]
jbe 0x1018ea2d
movzx eax, al
mov dword [esi + 0x1ac], eax
push esi
call fcn.1018ab00
add esp, 4
test al, al
jne case.0x1018cb2c.33
nop
movzx eax, byte [esi + 0x174]
sub eax, 0x2c
je 0x1018d469
sub eax, 1
je 0x1018d45b
sub eax, 0x5c
je 0x1018d469
push esi
call fcn.1018ab00
add esp, 4
test al, al
je 0x1018ea40
jmp case.0x1018cb2c.33
mov dword [esi + 0xc], 0x8d
jmp case.0x1018cb2c.33
mov edx, dword [edi + 8]
mov ecx, dword [edi + 4]
mov eax, dword [edi]
mov dword [edi + 8], eax
mov dword [edi + 4], edx
mov dword [edi], ecx
jmp case.0x1018cb2c.33
mov eax, dword [edi + 4]
cmp eax, dword [edi]
jle case.0x1018cb2c.33
mov dword [edi], eax
jmp case.0x1018cb2c.33
mov eax, dword [edi + 4]
cmp eax, dword [edi]
jge case.0x1018cb2c.33
mov dword [edi], eax
jmp case.0x1018cb2c.33
mov eax, dword [edi]
test eax, eax
js case.0x1018cb2c.33
movzx eax, ax
mov dword [esi + 0x158], eax
jmp case.0x1018cb2c.33
mov ebx, dword [edi + 4]
mov edx, dword [edi]
lea eax, [ebx - 1]
cmp eax, 2
ja 0x1018cd37
lea ecx, [ebx - 1]
mov eax, 1
shl eax, cl
test edx, edx
je 0x1018eb0d
cmp edx, eax
je 0x1018eb0d
cmp byte [esi + 0x235], 0
je case.0x1018cb2c.33
mov dword [esi + 0xc], 0x86
jmp case.0x1018cb2c.33
not al
and al, byte [esi + 0x154]
or al, dl
mov byte [esi + 0x154], al
cmp ebx, 3
jne case.0x1018cb2c.33
mov eax, dword [esi]
mov eax, dword [eax + 0x60]
cmp dword [eax + 0x40], 0x28
jne case.0x1018cb2c.33
cmp edx, 4
setne al
mov byte [esi + 0x267], al
jmp case.0x1018cb2c.33
mov eax, dword [esi]
mov eax, dword [eax + 0x2bc]
test eax, eax
je case.0x1018cb2c.40
sub ebp, dword [esi + 0x10]
mov edx, dword [eax]
inc ebp
mov eax, dword [eax + 8]
mov dword [esp + 0x44], eax
cmp edx, ebp
jb 0x1018eb73
mov dword [esi + 0xc], 0x82
jmp case.0x1018cb2c.33
mov ebp, dword [esp + 0x44]
test ebp, ebp
je 0x1018ec36
xor ebx, ebx
test edx, edx
je case.0x1018cb2c.33
cmp edx, 0x10
jb 0x1018ec09
lea eax, [ebp - 4]
lea eax, [eax + edx*4]
lea ecx, [edx - 1]
lea ecx, [edi + ecx*4]
cmp edi, eax
ja 0x1018eba2
cmp ecx, ebp
jae 0x1018ec09
mov eax, edx
lea ecx, [ebp + 0x30]
and eax, 0xfffffff0
mov esi, ebp
mov dword [esp + 0x24], eax
sub esi, edi
mov eax, 2
mov dword [esp + 0x44], esi
movd xmm1, eax
lea eax, [edi + 0x10]
movups xmm0, xmmword [ecx - 0x30]
add ebx, 0x10
lea eax, [eax + 0x40]
lea ecx, [ecx + 0x40]
psrad xmm0, xmm1
movups xmmword [eax - 0x50], xmm0
movups xmm0, xmmword [esi + eax - 0x40]
psrad xmm0, xmm1
movups xmmword [eax - 0x40], xmm0
movups xmm0, xmmword [ecx - 0x50]
psrad xmm0, xmm1
movups xmmword [eax - 0x30], xmm0
movups xmm0, xmmword [ecx - 0x40]
psrad xmm0, xmm1
movups xmmword [eax - 0x20], xmm0
cmp ebx, dword [esp + 0x24]
jb 0x1018ebc2
mov esi, dword [esp + 0x80]
cmp ebx, edx
jae case.0x1018cb2c.33
sub ebp, edi
lea ecx, [edi + ebx*4]
sub edx, ebx
nop dword [eax + eax]
mov eax, dword [ecx + ebp]
lea ecx, [ecx + 4]
sar eax, 2
mov dword [ecx - 4], eax
sub edx, 1
jne 0x1018ec20
jmp case.0x1018cb2c.33
test edx, edx
je case.0x1018cb2c.33
mov ecx, edx
xor eax, eax
rep stosd dword es:[edi], eax
jmp case.0x1018cb2c.33
mov eax, dword [esi]
cmp dword [eax + 0x2bc], 0
je case.0x1018cb2c.40
mov dword [edi], 0x11
jmp case.0x1018cb2c.33
cmp bl, 0xe0
jb 0x1018ec77
push edi
push esi
call fcn.10189d80
add esp, 8
jmp case.0x1018cb2c.33
cmp bl, 0xc0
jb 0x1018ec8b
push edi
push esi
call fcn.10189b00
add esp, 8
jmp case.0x1018cb2c.33
cmp bl, 0xb8
jb 0x1018ed11
sub ebp, dword [esi + 0x10]
mov ecx, 0xb7
movzx eax, bl
inc ebp
sub ax, cx
movzx eax, ax
mov ebx, eax
cmp ebx, ebp
jb 0x1018ecb8
mov dword [esi + 0xc], 0x82
jmp case.0x1018cb2c.33
inc dword [esi + 0x16c]
xor ecx, ecx
cmp cx, ax
jae 0x1018ed08
nop word [eax + eax]
add dword [esi + 0x16c], 2
lea edi, [edi + 4]
mov edx, dword [esi + 0x16c]
mov eax, 0x100
add edx, dword [esi + 0x168]
cwde
movzx ecx, byte [edx - 2]
movsx ecx, cx
imul ecx, eax
movzx eax, byte [edx - 1]
add cx, ax
movsx eax, cx
mov dword [edi - 4], eax
sub ebx, 1
jne 0x1018ecd0
mov byte [esi + 0x17c], 0
jmp case.0x1018cb2c.33
cmp bl, 0xb0
jb case.0x1018cb2c.40
sub ebp, dword [esi + 0x10]
mov ecx, 0xaf
movzx eax, bl
inc ebp
sub ax, cx
movzx eax, ax
mov dword [esp + 0x44], eax
movzx eax, ax
cmp eax, ebp
jb 0x1018ed3c
mov dword [esi + 0xc], 0x82
jmp case.0x1018cb2c.33
mov ebp, dword [esp + 0x44]
mov ebx, 1
mov eax, ebx
cmp ax, bp
ja case.0x1018cb2c.33
nop dword [eax]
mov ecx, dword [esi + 0x16c]
mov eax, dword [esi + 0x168]
movzx edx, bx
inc ebx
add ecx, edx
movzx eax, byte [ecx + eax]
mov dword [edi + edx*4 - 4], eax
cmp bx, bp
jbe 0x1018ed50
jmp case.0x1018cb2c.33
push esi
call fcn.1018a520
add esp, 4
mov eax, dword [esi + 0xc]
test eax, eax
je 0x1018ee0f
cmp eax, 0x80
jne 0x1018eeeb
mov eax, dword [esi + 0x19c]
mov ecx, dword [esi + 0x1a4]
lea eax, [eax + eax*2]
lea edx, [ecx + eax*8]
cmp ecx, edx
jae 0x1018ee86
cmp byte [ecx + 0x10], 0
je 0x1018edbb
mov al, byte [esi + 0x174]
cmp al, byte [ecx + 0xc]
je 0x1018edc0
add ecx, 0x18
jmp 0x1018eda2
mov edx, dword [esi + 0x1b0]
cmp edx, dword [esi + 0x1b4]
jge 0x1018ee71
mov eax, dword [esi + 0x164]
shl edx, 4
add edx, dword [esi + 0x1b8]
mov dword [edx], eax
mov eax, dword [esi + 0x16c]
inc eax
mov dword [edx + 8], 1
mov dword [edx + 4], eax
mov dword [edx + 0xc], ecx
push dword [ecx + 4]
push dword [ecx]
push esi
call fcn.10189300
add esp, 0xc
cmp al, 1
je 0x1018eeeb
jmp 0x1018ee3e
cmp byte [esi + 0x17c], 0
mov eax, dword [esi + 0x20]
mov dword [esi + 0x10], eax
je 0x1018ee2a
mov eax, dword [esi + 0x178]
add dword [esi + 0x16c], eax
mov eax, dword [esp + 0x20]
inc eax
mov dword [esp + 0x20], eax
cmp eax, 0xf4240
ja 0x1018eec3
mov eax, dword [esi + 0x16c]
cmp eax, dword [esi + 0x170]
jge 0x1018ee9b
cmp byte [esi + 0x1ec], 0
jne 0x1018eeb9
lea edx, [esi + 0xc]
jmp 0x1018ca10
mov eax, dword [esp + 0x14]
pop edi
pop esi
pop ebp
mov dword [eax], 0x81
mov eax, dword [eax]
pop ebx
add esp, 0x6c
ret
mov eax, dword [esp + 0x14]
pop edi
mov dword [esi + 0xc], 0x86
pop esi
mov eax, dword [eax]
pop ebp
pop ebx
add esp, 0x6c
ret
mov eax, dword [esp + 0x14]
pop edi
mov dword [esi + 0xc], 0x80
pop esi
mov eax, dword [eax]
pop ebp
pop ebx
add esp, 0x6c
ret
cmp dword [esi + 0x1b0], 0
jle 0x1018eeb9
mov eax, dword [esp + 0x14]
pop edi
mov dword [esi + 0xc], 0x83
pop esi
mov eax, dword [eax]
pop ebp
pop ebx
add esp, 0x6c
ret
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x6c
ret
pop edi
pop esi
pop ebp
mov eax, 0x8b
pop ebx
add esp, 0x6c
ret
mov eax, dword [esp + 0x14]
pop edi
mov dword [esi + 0xc], 0x82
pop esi
mov eax, dword [eax]
pop ebp
pop ebx
add esp, 0x6c
ret
mov dword [edx], 0x83
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x6c
ret