Function at 0x1b10f6
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x238
mov eax, dword [0x1f0858]
mov dword [esp + 0x38], 0xb725897d
mov dword [esp + 0x3c], 0xb35bb532
mov dword [esp + 0x40], 0xbf2ab124
mov dword [esp + 0x44], 0xbb69bd5d
mov dword [esp + 0x48], 0xa774b965
mov dword [esp + 0x4c], 0xa382a574
mov dword [esp + 0x50], 0xaf55a188
mov dword [esp + 0x54], 0xab38ad45
mov dword [esp + 0x58], 0x57c5a944
mov dword [esp + 0x5c], 0x53cd55cf
mov dword [esp + 0x60], 0x5fac5170
mov dword [esp + 0x64], 0x5b7a5da0
mov dword [esp + 0x68], 0x47965989
mov dword [esp + 0x6c], 0x43924596
mov dword [esp + 0x70], 0x4f6e4187
mov dword [esp + 0x74], 0x4ba34db7
mov dword [esp + 0x78], 0x77ac49da
mov dword [esp + 0x7c], 0x73b575a8
mov dword [esp + 0x80], 0x7fe67150
mov dword [esp + 0x84], 0x7ba67da6
mov dword [esp + 0x88], 0x67467951
mov dword [esp + 0x8c], 0x63f265a5
mov dword [esp + 0x90], 0x6ffa61f0
mov dword [esp + 0x94], 0x6b916d81
mov dword [esp + 0x98], 0x17f86985
mov dword [esp + 0x9c], 0x13fb15e3
mov dword [esp + 0xa0], 0x1fcd118c
mov dword [esp + 0xa4], 0x1bc51dc1
mov dword [esp + 0xa8], 0x7d419c3
mov dword [esp + 0xac], 0x3d805db
mov dword [esp + 0xb0], 0xf260120
mov dword [esp + 0xb4], 0xbc20dfb
mov dword [esp + 0xb8], 0x37c309f4
mov dword [esp + 0xbc], 0x33e635c0
mov dword [esp + 0xc0], 0x3faa3110
mov dword [esp + 0xc4], 0x3bad3dd5
mov dword [esp + 0xc8], 0x270639d5
mov dword [esp + 0xcc], 0x23cf25ef
mov dword [esp + 0xd0], 0x2fb921cf
mov dword [esp + 0xd4], 0x2b032dbf
mov dword [esp + 0xd8], 0xd7192908
mov dword [esp + 0xdc], 0xd34cd53c
mov dword [esp + 0xe0], 0xdf4bd143
mov dword [esp + 0xe4], 0xdb09dd31
mov dword [esp + 0xe8], 0xc717d909
mov dword [esp + 0xec], 0xc310c51d
mov dword [esp + 0xf0], 0xcf1cc110
mov dword [esp + 0xf4], 0xcb18cd1c
mov dword [esp + 0xf8], 0xf7d6c918
mov dword [esp + 0xfc], 0xf313f50b
mov dword [esp + 0x100], 0xff1ff11a
mov dword [esp + 0x104], 0xfb13fd62
mov dword [esp + 0x108], 0xe73bf92b
mov dword [esp + 0x10c], 0xe339e53b
mov dword [esp + 0x110], 0xef31e132
mov dword [esp + 0x114], 0xebeaed36
mov word [esp + 0x118], 0
mov dword [esp + 4], 0
mov ecx, dword [esp + 4]
cmp ecx, 0xe1
ja 0x1b0663
nop
mov ecx, dword [esp + 4]
mov edx, dword [esp + 4]
movzx edx, byte [esp + edx + 0x38]
mov esi, ecx
xor esi, 0xfc5919de
and ecx, 0xfc5919de
lea ecx, [esi + ecx*2]
xor ecx, edx
mov dword [esp + 8], ecx
mov ecx, dword [esp + 8]
add cl, 0xaa
mov edx, dword [esp + 4]
mov byte [esp + edx + 0x38], cl
inc dword [esp + 4]
mov ecx, dword [esp + 4]
cmp ecx, 0xe2
jb 0x1b0620
lea ecx, [esp + 0x38]
push 0
push 0
push 0
push 0
push ecx
call eax
mov esi, eax
xor eax, eax
test esi, esi
setne al
jmp dword [eax*4 + 0x1eaf80]
xor ebx, ebx
jmp 0x1b08b4
mov eax, dword [0x1f085c]
mov dword [esp + 0x38], 0x131210db
mov dword [esp + 0x3c], 0
mov dword [esp + 4], 0
mov ecx, dword [esp + 4]
cmp ecx, 7
ja 0x1b06e5
nop
mov ecx, dword [esp + 4]
mov edx, dword [esp + 4]
movzx edx, byte [esp + edx + 0x38]
add ecx, 0xc2e71abc
xor ecx, edx
mov dword [esp + 8], ecx
mov ecx, dword [esp + 8]
add cl, 0x54
mov edx, dword [esp + 4]
mov byte [esp + edx + 0x38], cl
inc dword [esp + 4]
mov ecx, dword [esp + 4]
cmp ecx, 8
jb 0x1b06b0
movzx ecx, word [esp + 0x38]
push 0
push ecx
push 0x1f088c
push esi
call eax
mov edi, eax
xor eax, eax
test edi, edi
setne al
xor ebx, ebx
jmp dword [eax*4 + 0x1eaf88]
mov eax, dword [0x1f0860]
mov dword [esp + 8], 0x69ea6b64
mov word [esp + 0xc], 0
mov byte [esp + 0xe], 0
mov dword [esp + 4], 0
mov ecx, dword [esp + 4]
cmp ecx, 6
ja 0x1b079a
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 4]
mov edx, dword [esp + 4]
movzx edx, byte [esp + edx + 8]
mov ebx, ecx
xor ebx, 0xd2ba9c67
and ecx, 0xd2ba9c67
lea ecx, [ebx + ecx*2]
lea ebx, [ecx + edx]
and ecx, edx
mov edx, ebx
not edx
and edx, ecx
add edx, ecx
not ecx
and ecx, ebx
sub ecx, edx
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x38]
mov edx, ecx
xor edx, 3
and ecx, 0x7c
add ecx, ecx
sub ecx, edx
mov edx, dword [esp + 4]
mov byte [esp + edx + 8], cl
inc dword [esp + 4]
mov ecx, dword [esp + 4]
cmp ecx, 7
jb 0x1b0740
mov edx, dword [esp + 8]
mov dword [esp + 0x38], 0x97259928
mov dword [esp + 0x3c], 0x933e953b
mov word [esp + 0x40], 0x9190
mov dword [esp + 0x42], 0
mov dword [esp], 0
mov ebx, dword [esp]
cmp ebx, 0xd
ja 0x1b080b
nop
nop
nop
nop
mov ebx, dword [esp]
mov ebp, dword [esp]
movzx ebp, byte [esp + ebp + 0x38]
mov ecx, ebx
xor ecx, 0x14d759e6
and ebx, 0x14d759e6
lea ecx, [ecx + ebx*2]
xor ecx, ebp
mov dword [esp + 4], ecx
mov ecx, dword [esp + 4]
add cl, 0x82
mov ebx, dword [esp]
mov byte [esp + ebx + 0x38], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 0xe
jb 0x1b07d0
push edx
push 0
push 0
push 0
push dword [esp + 0x25c]
lea ecx, [esp + 0x4c]
push ecx
push edi
call eax
mov ebp, eax
xor eax, eax
test ebp, ebp
setne al
jmp dword [eax*4 + 0x1eaf90]
xor ebx, ebx
jmp dword [0x1eafe0]
mov eax, dword [esp + 0x264]
xor ecx, ecx
test eax, eax
setg cl
jmp dword [ecx*4 + 0x1eaf98]
movzx eax, byte [0x1f0990]
jmp dword [eax*4 + 0x1eafa0]
push eax
push eax
push eax
push eax
push ebp
call dword [0x1f0868]
movzx eax, byte [0x1f0990]
jmp dword [eax*4 + 0x1eafa0]
jmp dword [0x1eafac]
xor ebx, ebx
push ebp
call dword [0x1f0884]
jmp dword [0x1eafe0]
push edi
call dword [0x1f0884]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push edi
call dword [0x1f0884]
jmp dword [0x1eafe8]
push esi
call dword [0x1f0884]
mov eax, ebx
add esp, 0x238
pop esi
pop edi
pop ebx
pop ebp
ret
jmp dword [0x1eafc8]
mov eax, dword [esp + 0x25c]
mov dword [esp + 0x38], 0
lea ecx, [esp + 0x38]
push ecx
push ebx
push eax
push ebp
call dword [0x1f0880]
xor ecx, ecx
test eax, eax
setne cl
xor ebx, ebx
jmp dword [ecx*4 + 0x1eafc0]
push 0
push ebp
call dword [0x1f0874]
push 0
push ebp
call dword [0x1f0874]
jmp dword [0x1eafd0]
xor ecx, ecx
test eax, eax
setne cl
xor ebx, ebx
jmp dword [ecx*4 + 0x1eafd8]
jmp 0x1b087d
mov bl, 1
jmp 0x1b087d
xor eax, eax
mov edx, dword [esp + 0x250]
mov ecx, edx
neg ecx
sbb eax, eax
push 0
mov ebx, dword [esp + 0x264]
push ebx
push dword [esp + 0x260]
push dword [esp + 0x260]
push eax
push edx
push ebp
call dword [0x1f0870]
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x1eafb8]
mov dword [esp + 8], 0x13a51153
mov dword [esp + 0xc], 0x6fd56ddb
mov dword [esp + 0x10], 0x6bd769d1
mov dword [esp + 0x14], 0x6706652e
mov dword [esp + 0x18], 0x63c561c7
mov dword [esp + 0x1c], 0x7fc07ddf
mov dword [esp + 0x20], 0x7bcf79df
mov dword [esp + 0x24], 0x77d175fb
mov dword [esp + 0x28], 0x73fb71d2
mov dword [esp + 0x2c], 0x4f0b4dfc
mov dword [esp + 0x30], 0x4948
mov byte [esp + 0x34], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x2c
ja 0x1b0a3a
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov eax, dword [esp]
movzx eax, byte [esp + eax + 8]
mov edx, ecx
not edx
or edx, 0x1d1e34bc
add edx, ecx
xor ecx, 0x1d1e34bc
lea ebx, [ecx + edx*2]
lea ecx, [ecx + edx*2]
add ecx, 2
and ecx, eax
add eax, ebx
add eax, 2
add ecx, ecx
sub eax, ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
mov ecx, eax
not ecx
and ecx, 0xac
and eax, 0x53
sub eax, ecx
mov ecx, dword [esp]
mov byte [esp + ecx + 8], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x2d
jb 0x1b09e0
movzx ecx, word [esp + 8]
lea eax, [esp + 0x38]
test cx, cx
je 0x1b0a61
lea edx, [esp + 0xa]
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x1b0a50
mov word [eax], 0
movzx ecx, word [0x1f0992]
test cx, cx
je 0x1b0a95
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax + edx], cx
movzx ecx, word [edx + 0x1f0994]
add edx, 2
test cx, cx
jne 0x1b0a80
add eax, edx
mov word [eax], 0
mov eax, dword [0x1f086c]
mov dword [esp + 8], 0x81666764
mov byte [esp + 0xc], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 4
ja 0x1b0b0e
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 8]
mov ebx, ecx
not ebx
or ebx, 0x611a5199
add ebx, ecx
xor ecx, 0x611a5199
lea ecx, [ecx + ebx*2]
add ecx, 2
xor ecx, edx
mov dword [esp + 4], ecx
mov ecx, dword [esp + 4]
mov edx, ecx
not edx
and edx, 0xfd
and ecx, 2
sub ecx, edx
mov edx, dword [esp]
mov byte [esp + edx + 8], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 5
jb 0x1b0ac0
lea ecx, [esp + 0x38]
push dword [esp + 8]
push 0xffffffffffffffff
push ecx
push ebp
call eax
mov dword [esp + 8], 0x13a51153
mov dword [esp + 0xc], 0x6fd56ddb
mov dword [esp + 0x10], 0x6bd769d1
mov dword [esp + 0x14], 0x6706652e
mov dword [esp + 0x18], 0x63c561c7
mov dword [esp + 0x1c], 0x7fc07ddf
mov dword [esp + 0x20], 0x7bcf79df
mov dword [esp + 0x24], 0x77d175fb
mov dword [esp + 0x28], 0x73fb71d2
mov dword [esp + 0x2c], 0x4f0b4dfc
mov dword [esp + 0x30], 0x4948
mov byte [esp + 0x34], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x2c
ja 0x1b0bea
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov eax, dword [esp]
movzx eax, byte [esp + eax + 8]
mov edx, ecx
not edx
or edx, 0x1d1e34bc
add edx, ecx
xor ecx, 0x1d1e34bc
lea ebx, [ecx + edx*2]
lea ecx, [ecx + edx*2]
add ecx, 2
and ecx, eax
add eax, ebx
add eax, 2
add ecx, ecx
sub eax, ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
mov ecx, eax
not ecx
and ecx, 0xac
and eax, 0x53
sub eax, ecx
mov ecx, dword [esp]
mov byte [esp + ecx + 8], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x2d
jb 0x1b0b90
movzx ecx, word [esp + 8]
lea eax, [esp + 0x38]
test cx, cx
je 0x1b0c11
lea edx, [esp + 0xa]
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x1b0c00
mov word [eax], 0
movzx ecx, word [0x1f0992]
test cx, cx
je 0x1b0c45
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax + edx], cx
movzx ecx, word [edx + 0x1f0994]
add edx, 2
test cx, cx
jne 0x1b0c30
add eax, edx
mov word [eax], 0
mov eax, dword [0x1f086c]
mov dword [esp + 8], 0x81666764
mov byte [esp + 0xc], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 4
ja 0x1b0cbe
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 8]
mov ebx, ecx
not ebx
or ebx, 0x611a5199
add ebx, ecx
xor ecx, 0x611a5199
lea ecx, [ecx + ebx*2]
add ecx, 2
xor ecx, edx
mov dword [esp + 4], ecx
mov ecx, dword [esp + 4]
mov edx, ecx
not edx
and edx, 0xfd
and ecx, 2
sub ecx, edx
mov edx, dword [esp]
mov byte [esp + edx + 8], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 5
jb 0x1b0c70
lea ecx, [esp + 0x38]
push dword [esp + 8]
push 0xffffffffffffffff
push ecx
push ebp
call eax
jmp dword [0x1eafb0]
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
shr eax, 0x1f
jmp dword [eax*4 + 0x1eb6bc]
jmp dword [0x1eb6c8]
jmp case.0x1b067b.38
mov ecx, dword [esp + 0xbc]
mov ebx, dword [esp + 0xa8]
lea eax, [ecx + ecx*2]
shr eax, 2
movzx edx, byte [ebx + ecx - 1]
cmp edx, 0x3d
je 0x1b0ed1
cmp edx, 0x2e
jne 0x1b0ed2
dec eax
movzx ecx, byte [ebx + ecx - 2]
cmp ecx, 0x3d
je 0x1b0ee1
cmp ecx, 0x2e
jne 0x1b0ee2
dec eax
push eax
call fcn.001ac630
add esp, 4
mov esi, eax
push eax
push ebx
call fcn.001db920
add esp, 8
push dword [esp + 0xa8]
call fcn.001de970
add esp, 4
push esi
call fcn.001a3ab0
add esp, 4
mov ebx, eax
jmp dword [0x1eb73c]
push esi
call fcn.001ac640
add esp, 4
push ebx
call fcn.001b6020
add esp, 4
xor eax, eax
test ebx, ebx
setne al
jmp dword [eax*4 + 0x1eb744]
push ebx
call fcn.001a4670
add esp, 4
xor eax, eax
cmp dword [esp + 0xb0], 0
setg al
jmp dword [eax*4 + 0x1eb74c]
lea ecx, [esp + 0x230]
push 1
call fcn.001acfb0
mov eax, 0xffffffff
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [eax + 0x1f0b95], 0
lea eax, [eax + 1]
jne 0x1b0f70
mov dword [esp + 0x28], 0x16000424
mov dword [esp + 0x2c], 0xef125b03
mov word [esp + 0x30], 0x790c
mov dword [esp + 0x32], 0
mov dword [esp + 4], 0
mov ecx, dword [esp + 4]
cmp ecx, 0xd
ja 0x1b0ff0
nop
nop
nop
nop
mov ecx, dword [esp + 4]
mov edx, dword [esp + 4]
movzx edx, byte [esp + edx + 0x28]
mov esi, ecx
xor esi, 0x5e05a668
and ecx, 0xde05a668
lea ecx, [esi + ecx*2]
xor ecx, edx
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x10]
add cl, 0xf8
mov edx, dword [esp + 4]
mov byte [esp + edx + 0x28], cl
inc dword [esp + 4]
mov ecx, dword [esp + 4]
cmp ecx, 0xe
jb 0x1b0fb0
lea esi, [esp + 0x230]
mov ecx, esi
push eax
push 0x1f0b94
lea eax, [esp + 0x30]
push eax
call fcn.001ad1b0
mov ecx, esi
call fcn.001ad8b0
mov ecx, esi
call fcn.001acff0
xor eax, eax
cmp dword [esp + 0xb4], 0
setg al
jmp dword [eax*4 + 0x1eb754]
jmp dword [0x1eb6dc]
push 0x104
push edi
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov ecx, dword [esp + 0xac]
mov esi, dword [esp + 0x24]
lea eax, [ecx + ecx*2]
shr eax, 2
movzx edx, byte [esi + ecx - 1]
cmp edx, 0x3d
je 0x1b105d
cmp edx, 0x2e
jne 0x1b105e
dec eax
movzx ecx, byte [esi + ecx - 2]
cmp ecx, 0x3d
je 0x1b106d
cmp ecx, 0x2e
jne 0x1b106e
dec eax
push eax
call fcn.001ac630
add esp, 4
push eax
push esi
call fcn.001db920
add esp, 8
push dword [esp + 0x24]
call fcn.001de970
add esp, 4
jmp case.0x1b067b.35
dec eax
push eax
call fcn.001ac630
add esp, 4
mov esi, eax
push eax
push ebx
call fcn.001db920
add esp, 8
push dword [esp + 0x24]
call fcn.001de970
add esp, 4
jmp dword [0x1eb6e4]
push 0x104
push edi
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov ecx, dword [esp + 0xac]
mov ebx, dword [esp + 0x24]
lea eax, [ecx + ecx*2]
shr eax, 2
movzx edx, byte [ebx + ecx - 1]
cmp edx, 0x3d
je 0x1b10e4
cmp edx, 0x2e
jne 0x1b10e5
dec eax
movzx ecx, byte [ebx + ecx - 2]
cmp ecx, 0x3d
je 0x1b1090
cmp ecx, 0x2e
je 0x1b1090
jmp 0x1b1091
mov eax, dword [esp + 0x10]
mov dword [esp + 4], 0x80878685
mov word [esp + 8], 0
mov byte [esp + 0xa], 0
mov dword [esp + 0x20], 0
mov ecx, dword [esp + 0x20]
cmp ecx, 6
ja 0x1b1172
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x20]
movzx edx, byte [esp + edx + 4]
mov esi, ecx
xor esi, 0xfa434561
and ecx, 0xfa434561
lea ecx, [esi + ecx*2]
lea esi, [ecx + edx]
and ecx, edx
add ecx, ecx
sub esi, ecx
mov dword [esp + 0xc], esi
mov ecx, dword [esp + 0xc]
mov edx, ecx
xor edx, 0xe5
and ecx, 0x1a
add ecx, ecx
sub ecx, edx
mov edx, dword [esp + 0x20]
mov byte [esp + edx + 4], cl
inc dword [esp + 0x20]
mov ecx, dword [esp + 0x20]
cmp ecx, 7
jb 0x1b111f
mov ecx, dword [0x1f1ba0]
test ecx, ecx
je case.0x1b1024.0
mov edx, dword [esp + 4]
xor esi, esi
mov edi, dword [0x1f1ba4]
cmp dword [edi + esi*8], 0x625b6034
je 0x1b1198
inc esi
cmp ecx, esi
jne 0x1b1188
jmp case.0x1b1024.0
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
je case.0x1b1024.0
push eax
push 1
push dword [0x1f1ba8]
push ecx
call fcn.001e1c60
add esp, 0x10
lea ecx, [esp + 0xab0]
call fcn.001acff0
lea ecx, [esp + 0xb18]
call fcn.001acff0
lea ecx, [esp + 0xb80]
call fcn.001acff0
lea ecx, [esp + 0xbe8]
call fcn.001acff0
lea ecx, [esp + 0xc50]
call fcn.001acff0
lea ecx, [esp + 0xc8]
call fcn.001acff0
mov al, 1
jmp 0x1b299c
xor eax, eax
cmp dword [esp + 0xb0], 0
setg al
jmp dword [eax*4 + 0x1eb74c]
xor eax, eax
cmp dword [esp + 0xb4], 0
setg al
jmp dword [eax*4 + 0x1eb754]
jmp dword [0x1eb75c]
push 0x1f082c
call fcn.001dacc0
add esp, 4
mov ecx, dword [0x1ea684]
mov dword [esp + 0xc8], 0x1959ad76
mov dword [esp + 0x130], 0
mov eax, dword [esp + 0x130]
cmp eax, 3
ja 0x1b12e7
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x130]
mov edx, dword [esp + 0x130]
movzx edx, byte [esp + edx + 0xc8]
mov esi, eax
xor esi, 0x31793ebb
and eax, 0x31793ebb
lea eax, [esi + eax*2]
lea esi, [eax + edx]
and eax, edx
mov edx, esi
xor edx, eax
add edx, eax
not eax
and eax, esi
add eax, eax
sub eax, edx
mov dword [esp + 0x230], eax
mov eax, dword [esp + 0x230]
mov edx, eax
xor edx, 0xa7
and eax, 0x58
add eax, eax
sub eax, edx
mov edx, dword [esp + 0x130]
mov byte [esp + edx + 0xc8], al
inc dword [esp + 0x130]
mov eax, dword [esp + 0x130]
cmp eax, 4
jb 0x1b1270
mov edx, dword [str.c2CoW0__4]
mov dword [esp + 0x230], 0x367e1211
mov dword [esp + 0x234], 0x760d707e
mov dword [esp + 0x238], 0x7e0d7466
mov dword [esp + 0x23c], 0x6757679
mov dword [esp + 0x240], 0x6d3c7c7f
mov dword [esp + 0x244], 0x535b0f01
mov dword [esp + 0x248], 0xf44494e
mov dword [esp + 0x24c], 0x9753090d
mov byte [esp + 0x250], 0
mov dword [esp + 0x28], 0
mov eax, dword [esp + 0x28]
cmp eax, 0x20
ja 0x1b13aa
nop
nop
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x28]
movzx esi, byte [esp + esi + 0x230]
mov edi, eax
xor edi, 0x30f1cbac
and eax, 0x30f1cbac
lea eax, [edi + eax*2]
xor eax, esi
mov dword [esp + 0x130], eax
mov eax, dword [esp + 0x130]
add al, 0xa4
mov esi, dword [esp + 0x28]
mov byte [esp + esi + 0x230], al
inc dword [esp + 0x28]
mov eax, dword [esp + 0x28]
cmp eax, 0x21
jb 0x1b1360
movzx ebx, byte [esp + 0x230]
lea eax, [esp + 0xa30]
test bl, bl
je 0x1b13db
lea eax, [esp + 0xa30]
lea esi, [esp + 0x231]
nop
nop
nop
nop
nop
mov byte [eax], bl
inc eax
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x1b13d0
mov byte [eax], 0
movzx ebx, byte [edx]
test bl, bl
je 0x1b13fb
inc edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], bl
inc eax
movzx ebx, byte [edx]
inc edx
test bl, bl
jne 0x1b13f0
mov byte [eax], 0
movzx edx, byte [esp + 0xc8]
test dl, dl
je 0x1b142b
lea esi, [esp + 0xc9]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], dl
inc eax
movzx edx, byte [esi]
inc esi
test dl, dl
jne 0x1b1420
mov byte [eax], 0
movzx edx, byte [ecx]
test dl, dl
je 0x1b144b
inc ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], dl
inc eax
movzx edx, byte [ecx]
inc ecx
test dl, dl
jne 0x1b1440
mov byte [eax], 0
mov dword [esp + 0x230], 0xc157c789
mov dword [esp + 0x234], 0xcd5ec356
mov dword [esp + 0x238], 0xc958cfa3
mov dword [esp + 0x23c], 0xf59dcb54
mov dword [esp + 0x240], 0xf16df788
mov dword [esp + 0x244], 0xfd9df360
mov dword [esp + 0x248], 0xf9deffa6
mov dword [esp + 0x24c], 0xe56afb9b
mov dword [esp + 0x250], 0xe172e774
mov dword [esp + 0x254], 0xed8fe38b
mov dword [esp + 0x258], 0xe972ef8f
mov dword [esp + 0x25c], 0x157beb83
mov dword [esp + 0x260], 0x11471782
mov dword [esp + 0x264], 0x1d451388
mov dword [esp + 0x268], 0x19871f85
mov dword [esp + 0x26c], 0x54d1b81
mov dword [esp + 0x270], 0x197076a
mov dword [esp + 0x274], 0xd950392
mov dword [esp + 0x278], 0x9910f5b
mov dword [esp + 0x27c], 0x359e0b9a
mov dword [esp + 0x280], 0x31a0375b
mov dword [esp + 0x284], 0x3da3335d
mov dword [esp + 0x288], 0x39513f50
mov dword [esp + 0x28c], 0x250d3b54
mov dword [esp + 0x290], 0x2126272e
mov byte [esp + 0x294], 0
lea ecx, [esp + 0xa30]
sub eax, ecx
mov dword [esp + 0x28], 0
mov edx, dword [esp + 0x28]
cmp edx, 0x64
ja 0x1b15ed
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp + 0x28]
mov esi, dword [esp + 0x28]
movzx esi, byte [esp + esi + 0x230]
mov edi, edx
xor edi, 0xdc930051
and edx, 0xdc930051
lea edx, [edi + edx*2]
lea edi, [edx + esi]
and edx, esi
mov esi, edi
not esi
and esi, edx
add esi, edx
not edx
and edx, edi
sub edx, esi
mov dword [esp + 0x130], edx
mov edx, dword [esp + 0x130]
add dl, 0x6b
mov esi, dword [esp + 0x28]
mov byte [esp + esi + 0x230], dl
inc dword [esp + 0x28]
mov edx, dword [esp + 0x28]
cmp edx, 0x65
jb 0x1b1590
mov dword [esp + 0x130], 0x1fbf19eb
mov dword [esp + 0x134], 0xe34b1dac
mov word [esp + 0x138], 0xe1e0
mov dword [esp + 0x13a], 0
mov word [esp + 0x13e], 0
mov dword [esp + 0xc8], 0
mov edx, dword [esp + 0xc8]
cmp edx, 0xf
ja 0x1b1695
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp + 0xc8]
mov esi, dword [esp + 0xc8]
movzx esi, byte [esp + esi + 0x130]
mov edi, edx
xor edi, 0xd7dc4f7a
and edx, 0xd7dc4f7a
lea edx, [edi + edx*2]
xor edx, esi
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x28]
add dl, 0x9e
mov esi, dword [esp + 0xc8]
mov byte [esp + esi + 0x130], dl
inc dword [esp + 0xc8]
mov edx, dword [esp + 0xc8]
cmp edx, 0x10
jb 0x1b1640
lea edx, [esp + 0xac]
lea esi, [esp + 0x24]
lea edi, [esp + 0x230]
lea ebx, [esp + 0x130]
push edx
push esi
push eax
push ecx
push edi
push ebx
push 0x1f088c
call fcn.001afa80
add esp, 0x1c
jmp dword [0x1eb6d0]
push 0x1f082c
call fcn.001dacc0
add esp, 4
mov ecx, dword [0x1ea684]
mov dword [esp + 0xc8], 0x1959ad76
mov dword [esp + 0x130], 0
mov eax, dword [esp + 0x130]
cmp eax, 3
ja 0x1b1777
nop
nop
nop
nop
mov eax, dword [esp + 0x130]
mov edx, dword [esp + 0x130]
movzx edx, byte [esp + edx + 0xc8]
mov esi, eax
xor esi, 0x31793ebb
and eax, 0x31793ebb
lea eax, [esi + eax*2]
lea esi, [eax + edx]
and eax, edx
mov edx, esi
xor edx, eax
add edx, eax
not eax
and eax, esi
add eax, eax
sub eax, edx
mov dword [esp + 0x230], eax
mov eax, dword [esp + 0x230]
mov edx, eax
xor edx, 0xa7
and eax, 0x58
add eax, eax
sub eax, edx
mov edx, dword [esp + 0x130]
mov byte [esp + edx + 0xc8], al
inc dword [esp + 0x130]
mov eax, dword [esp + 0x130]
cmp eax, 4
jb 0x1b1700
mov edx, dword [str.c2CoW0__4]
mov dword [esp + 0x230], 0x367e1211
mov dword [esp + 0x234], 0x760d707e
mov dword [esp + 0x238], 0x7e0d7466
mov dword [esp + 0x23c], 0x6757679
mov dword [esp + 0x240], 0x6d3c7c7f
mov dword [esp + 0x244], 0x535b0f01
mov dword [esp + 0x248], 0xf44494e
mov dword [esp + 0x24c], 0x9753090d
mov byte [esp + 0x250], 0
mov dword [esp + 0x28], 0
mov eax, dword [esp + 0x28]
cmp eax, 0x20
ja 0x1b183a
nop
nop
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x28]
movzx esi, byte [esp + esi + 0x230]
mov edi, eax
xor edi, 0x30f1cbac
and eax, 0x30f1cbac
lea eax, [edi + eax*2]
xor eax, esi
mov dword [esp + 0x130], eax
mov eax, dword [esp + 0x130]
add al, 0xa4
mov esi, dword [esp + 0x28]
mov byte [esp + esi + 0x230], al
inc dword [esp + 0x28]
mov eax, dword [esp + 0x28]
cmp eax, 0x21
jb 0x1b17f0
movzx ebx, byte [esp + 0x230]
lea eax, [esp + 0xa30]
test bl, bl
je 0x1b186b
lea eax, [esp + 0xa30]
lea esi, [esp + 0x231]
nop
nop
nop
nop
nop
mov byte [eax], bl
inc eax
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x1b1860
mov byte [eax], 0
movzx ebx, byte [edx]
test bl, bl
je 0x1b188b
inc edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], bl
inc eax
movzx ebx, byte [edx]
inc edx
test bl, bl
jne 0x1b1880
mov byte [eax], 0
movzx edx, byte [esp + 0xc8]
test dl, dl
je 0x1b18bb
lea esi, [esp + 0xc9]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], dl
inc eax
movzx edx, byte [esi]
inc esi
test dl, dl
jne 0x1b18b0
mov byte [eax], 0
movzx edx, byte [ecx]
test dl, dl
je 0x1b18db
inc ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], dl
inc eax
movzx edx, byte [ecx]
inc ecx
test dl, dl
jne 0x1b18d0
mov byte [eax], 0
mov dword [esp + 0x230], 0xc157c789
mov dword [esp + 0x234], 0xcd5ec356
mov dword [esp + 0x238], 0xc958cfa3
mov dword [esp + 0x23c], 0xf59dcb54
mov dword [esp + 0x240], 0xf16df788
mov dword [esp + 0x244], 0xfd9df360
mov dword [esp + 0x248], 0xf9deffa6
mov dword [esp + 0x24c], 0xe56afb9b
mov dword [esp + 0x250], 0xe172e774
mov dword [esp + 0x254], 0xed8fe38b
mov dword [esp + 0x258], 0xe972ef8f
mov dword [esp + 0x25c], 0x157beb83
mov dword [esp + 0x260], 0x11471782
mov dword [esp + 0x264], 0x1d451388
mov dword [esp + 0x268], 0x19871f85
mov dword [esp + 0x26c], 0x54d1b81
mov dword [esp + 0x270], 0x197076a
mov dword [esp + 0x274], 0xd950392
mov dword [esp + 0x278], 0x9910f5b
mov dword [esp + 0x27c], 0x359e0b9a
mov dword [esp + 0x280], 0x31a0375b
mov dword [esp + 0x284], 0x3da3335d
mov dword [esp + 0x288], 0x39513f50
mov dword [esp + 0x28c], 0x250d3b54
mov dword [esp + 0x290], 0x2126272e
mov byte [esp + 0x294], 0
lea ecx, [esp + 0xa30]
sub eax, ecx
mov dword [esp + 0x28], 0
mov edx, dword [esp + 0x28]
cmp edx, 0x64
ja 0x1b1a7d
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp + 0x28]
mov esi, dword [esp + 0x28]
movzx esi, byte [esp + esi + 0x230]
mov edi, edx
xor edi, 0xdc930051
and edx, 0xdc930051
lea edx, [edi + edx*2]
lea edi, [edx + esi]
and edx, esi
mov esi, edi
not esi
and esi, edx
add esi, edx
not edx
and edx, edi
sub edx, esi
mov dword [esp + 0x130], edx
mov edx, dword [esp + 0x130]
add dl, 0x6b
mov esi, dword [esp + 0x28]
mov byte [esp + esi + 0x230], dl
inc dword [esp + 0x28]
mov edx, dword [esp + 0x28]
cmp edx, 0x65
jb 0x1b1a20
mov dword [esp + 0x130], 0x1fbf19eb
mov dword [esp + 0x134], 0xe34b1dac
mov word [esp + 0x138], 0xe1e0
mov dword [esp + 0x13a], 0
mov word [esp + 0x13e], 0
mov dword [esp + 0xc8], 0
mov edx, dword [esp + 0xc8]
cmp edx, 0xf
ja 0x1b1b25
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp + 0xc8]
mov esi, dword [esp + 0xc8]
movzx esi, byte [esp + esi + 0x130]
mov edi, edx
xor edi, 0xd7dc4f7a
and edx, 0xd7dc4f7a
lea edx, [edi + edx*2]
xor edx, esi
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x28]
add dl, 0x9e
mov esi, dword [esp + 0xc8]
mov byte [esp + esi + 0x130], dl
inc dword [esp + 0xc8]
mov edx, dword [esp + 0xc8]
cmp edx, 0x10
jb 0x1b1ad0
lea edx, [esp + 0xac]
lea esi, [esp + 0x24]
lea edi, [esp + 0x230]
lea ebx, [esp + 0x130]
push edx
push esi
push eax
push ecx
push edi
push ebx
push 0x1f088c
call fcn.001afa80
add esp, 0x1c
jmp case.0x1b067b.32
movzx eax, al
xor esi, esi
jmp dword [eax*4 + 0x1eb6d4]
xor eax, eax
test esi, esi
sete al
jmp dword [eax*4 + 0x1eb6ec]
jmp dword [0x1eb6f8]
push esi
call fcn.001a3ab0
add esp, 4
nop
push esi
call fcn.001a3ab0
add esp, 4
jmp dword [0x1eb6fc]
jmp dword [0x1eb704]
push esi
mov esi, eax
call fcn.001ac640
mov eax, esi
add esp, 4
mov dword [esp + 0xb8], eax
push eax
call fcn.001a4400
add esp, 4
mov ebx, eax
mov word [esp + 0x230], 0x3806
mov byte [esp + 0x232], 0x8a
mov word [esp + 0x233], 0
mov byte [esp + 0x235], 0
mov dword [esp + 0x28], 0
mov eax, dword [esp + 0x28]
cmp eax, 5
ja 0x1b1c3a
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x28]
movzx ecx, byte [esp + ecx + 0x230]
mov edx, eax
xor edx, 0xfa0067a3
and eax, 0xfa0067a3
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp + 0x130], eax
mov eax, dword [esp + 0x130]
add al, 0xd1
mov ecx, dword [esp + 0x28]
mov byte [esp + ecx + 0x230], al
inc dword [esp + 0x28]
mov eax, dword [esp + 0x28]
cmp eax, 6
jb 0x1b1bf0
push edi
push ebx
call fcn.001a4480
add esp, 8
xor ecx, ecx
test eax, eax
setg cl
jmp dword [ecx*4 + 0x1eb70c]
call fcn.001da3c0
movzx eax, al
jmp dword [eax*4 + 0x1eb714]
mov dword [esp + 0x28], 0x2e5e1
mov dword [esp + 0x130], 0
mov eax, dword [esp + 0x130]
cmp eax, 3
ja 0x1b1cee
mov eax, dword [esp + 0x130]
mov ecx, dword [esp + 0x130]
movzx ecx, byte [esp + ecx + 0x28]
mov edx, eax
xor edx, 0x4f011040
add eax, eax
and eax, 0x9e022080
mov esi, eax
and esi, edx
xor eax, edx
lea edx, [eax + esi*2]
and eax, ecx
xor edx, ecx
lea ecx, [edx + eax*2]
mov edx, ecx
xor edx, eax
add edx, eax
not eax
and eax, ecx
add eax, eax
sub eax, edx
mov dword [esp + 0x230], eax
mov eax, dword [esp + 0x230]
add al, 0xc0
mov ecx, dword [esp + 0x130]
mov byte [esp + ecx + 0x28], al
inc dword [esp + 0x130]
mov eax, dword [esp + 0x130]
cmp eax, 4
jb 0x1b1c80
lea eax, [esp + 0x28]
push eax
push ebx
call fcn.001a4480
add esp, 8
mov dword [esp + 0xb4], eax
mov word [esp + 0x230], 0x8091
mov byte [esp + 0x232], 0x2a
mov word [esp + 0x233], 0
mov byte [esp + 0x235], 0
mov dword [esp + 0x28], 0
mov eax, dword [esp + 0x28]
cmp eax, 5
ja 0x1b1da7
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x28]
movzx ecx, byte [esp + ecx + 0x230]
mov edx, eax
xor edx, 0x4bcaea47
and eax, 0xcbcaea47
lea eax, [edx + eax*2]
lea edx, [eax + ecx]
and eax, ecx
mov ecx, edx
xor ecx, eax
add ecx, eax
not eax
and eax, edx
add eax, eax
sub eax, ecx
mov dword [esp + 0x130], eax
mov eax, dword [esp + 0x130]
mov ecx, eax
not ecx
and ecx, 0x63
and eax, 0x9c
sub eax, ecx
mov ecx, dword [esp + 0x28]
mov byte [esp + ecx + 0x230], al
inc dword [esp + 0x28]
mov eax, dword [esp + 0x28]
cmp eax, 6
jb 0x1b1d40
push edi
mov dword [esp + 0xc8], ebx
push ebx
call fcn.001a4480
add esp, 8
mov dword [esp + 0x230], 0x9f3f5f0
mov byte [esp + 0x234], 0
mov dword [esp + 0x28], 0
mov ecx, dword [esp + 0x28]
cmp ecx, 4
ja 0x1b1e3b
nop
nop
nop
nop
mov ebx, dword [esp + 0x28]
mov ecx, dword [esp + 0x28]
movzx ecx, byte [esp + ecx + 0x230]
lea esi, [ebx + ebx]
and esi, 0xefc9ba86
mov edx, ebx
not edx
or edx, 0x77e4dd43
add edx, ebx
sub ebx, esi
lea edx, [ebx + edx*2]
add edx, 0x77e4dd45
xor edx, ecx
mov dword [esp + 0x130], edx
mov ecx, dword [esp + 0x130]
add cl, 0xb1
mov edx, dword [esp + 0x28]
mov byte [esp + edx + 0x230], cl
inc dword [esp + 0x28]
mov ecx, dword [esp + 0x28]
cmp ecx, 5
jb 0x1b1de0
xor ecx, ecx
test eax, eax
setg cl
mov dword [esp + 0xc0], ecx
push edi
mov esi, dword [esp + 0xc8]
push esi
call fcn.001a4480
add esp, 8
mov dword [esp + 0xb0], eax
push esi
call fcn.001b2ca0
add esp, 4
push dword [esp + 0xb8]
call fcn.001a4670
add esp, 4
lea esi, [esp + 0xc8]
mov ecx, esi
push 1
call fcn.001acfb0
push esi
call fcn.001c4780
add esp, 4
mov ecx, esi
call fcn.001ad8b0
lea esi, [esp + 0xc50]
mov ecx, esi
push 3
call fcn.001acfb0
push esi
call fcn.001c4fd0
add esp, 4
mov ecx, esi
call fcn.001ad8b0
lea esi, [esp + 0xbe8]
mov ecx, esi
push 1
call fcn.001acfb0
push esi
call fcn.001c52d0
add esp, 4
mov ecx, esi
call fcn.001ad8b0
lea ebx, [esp + 0xb80]
mov ecx, ebx
push 1
call fcn.001acfb0
push ebx
call fcn.001c7860
add esp, 4
push ebx
call fcn.001c82b0
add esp, 4
push ebx
call fcn.001c8710
add esp, 4
push ebx
call fcn.001cb970
add esp, 4
mov ecx, ebx
call fcn.001ad8b0
lea esi, [esp + 0xb18]
mov ecx, esi
push 1
call fcn.001acfb0
push esi
call fcn.001ca660
add esp, 4
mov ecx, esi
call fcn.001ad8b0
lea esi, [esp + 0xab0]
mov ecx, esi
push 1
call fcn.001acfb0
push esi
call fcn.001cd7e0
add esp, 4
push esi
call fcn.001d43d0
add esp, 4
mov eax, dword [esp + 0xc0]
jmp dword [eax*4 + 0x1eb71c]
jmp dword [0x1eb728]
push esi
call fcn.001d4550
add esp, 4
jmp dword [0x1eb728]
lea ecx, [esp + 0xab0]
call fcn.001ad8b0
call dword [sym.imp.ole32.dll_CoUninitialize]
mov dword [esp + 0x28], 0xbeada1e2
mov word [esp + 0x2c], 0x90b8
mov byte [esp + 0x2e], 0xd2
mov dword [esp + 0x2f], 0
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x10]
cmp eax, 0xa
ja 0x1b2004
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
movzx ecx, byte [esp + ecx + 0x28]
mov edx, eax
xor edx, 0x1830cc4e
and eax, 0x1830cc4e
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp + 0x230], eax
mov eax, dword [esp + 0x230]
add al, 0x7a
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x28], al
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, 0xb
jb 0x1b1fc0
mov ecx, dword [0x1ea684]
mov dword [esp + 0x10], 0x13d7abee
mov word [esp + 0x14], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 5
ja 0x1b2069
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov edx, dword [esp + 4]
movzx edx, byte [esp + edx + 0x10]
add eax, 0x785d14fc
xor eax, edx
mov dword [esp + 0x230], eax
mov eax, dword [esp + 0x230]
add al, 0x14
mov edx, dword [esp + 4]
mov byte [esp + edx + 0x10], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 6
jb 0x1b2030
mov edx, dword [str.c2CoW0__4]
mov dword [esp + 0x230], 0x92aaa6a9
mov dword [esp + 0x234], 0xb0aeb8bf
mov dword [esp + 0x238], 0xa0a1bca5
mov dword [esp + 0x23c], 0x71b7b6bd
mov dword [esp + 0x240], 0xa298b4a2
mov dword [esp + 0x244], 0x49525758
mov dword [esp + 0x248], 0xaa828894
mov byte [esp + 0x24c], 0x6c
mov word [esp + 0x24d], 0
mov byte [esp + 0x24f], 0
mov dword [esp + 0xc], 0
mov eax, dword [esp + 0xc]
cmp eax, 0x1f
ja 0x1b2145
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0xc]
mov esi, dword [esp + 0xc]
movzx esi, byte [esp + esi + 0x230]
mov ebx, eax
xor ebx, 0xa156498e
and eax, 0x2156498e
lea eax, [ebx + eax*2]
lea ebx, [eax + esi]
and eax, esi
mov esi, ebx
not esi
and esi, eax
add esi, eax
not eax
and eax, ebx
sub eax, esi
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add al, 0x3a
mov esi, dword [esp + 0xc]
mov byte [esp + esi + 0x230], al
inc dword [esp + 0xc]
mov eax, dword [esp + 0xc]
cmp eax, 0x20
jb 0x1b20f0
movzx ebx, byte [esp + 0x230]
lea eax, [esp + 0x130]
test bl, bl
je 0x1b216b
lea esi, [esp + 0x231]
nop
mov byte [eax], bl
inc eax
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x1b2160
mov byte [eax], 0
movzx ebx, byte [edx]
test bl, bl
je 0x1b218b
inc edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], bl
inc eax
movzx ebx, byte [edx]
inc edx
test bl, bl
jne 0x1b2180
mov byte [eax], 0
movzx edx, byte [esp + 0x10]
test dl, dl
je 0x1b21ab
lea esi, [esp + 0x11]
nop
nop
nop
nop
nop
mov byte [eax], dl
inc eax
movzx edx, byte [esi]
inc esi
test dl, dl
jne 0x1b21a0
mov byte [eax], 0
movzx edx, byte [ecx]
test dl, dl
je 0x1b21cb
inc ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], dl
inc eax
movzx edx, byte [ecx]
inc ecx
test dl, dl
jne 0x1b21c0
mov byte [eax], 0
movzx ecx, byte [esp + 0x28]
test cl, cl
je 0x1b21eb
lea edx, [esp + 0x29]
nop
nop
nop
nop
nop
mov byte [eax], cl
inc eax
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x1b21e0
mov byte [eax], 0
movzx ecx, byte [0x1f082c]
test cl, cl
je 0x1b2211
xor edx, edx
nop
nop
nop
nop
nop
mov byte [eax + edx], cl
movzx ecx, byte [edx + 0x1f082d]
inc edx
test cl, cl
jne 0x1b2200
add eax, edx
mov byte [eax], 0
mov dword [esp + 0x230], 0x178519e7
mov dword [esp + 0x234], 0x139e1586
mov dword [esp + 0x238], 0xf9c118d
mov dword [esp + 0x23c], 0xbdf0d80
mov dword [esp + 0x240], 0x78f09e4
mov dword [esp + 0x244], 0x39f0594
mov dword [esp + 0x248], 0x3f1e01c6
mov dword [esp + 0x24c], 0x3baa3ddd
mov dword [esp + 0x250], 0x37a239a8
mov dword [esp + 0x254], 0x33ad35ad
mov dword [esp + 0x258], 0x2fa231d1
mov dword [esp + 0x25c], 0x2bb92db5
mov dword [esp + 0x260], 0x27f529ba
mov dword [esp + 0x264], 0x23f725ac
mov dword [esp + 0x268], 0xdf5521ab
mov dword [esp + 0x26c], 0xdb0fdd57
mov dword [esp + 0x270], 0xd745d942
mov dword [esp + 0x274], 0xd347d55a
mov dword [esp + 0x278], 0xcf43d105
mov dword [esp + 0x27c], 0xcb5ecd42
mov dword [esp + 0x280], 0xc754c955
mov dword [esp + 0x284], 0xc351c55b
mov dword [esp + 0x288], 0xff63c15c
mov dword [esp + 0x28c], 0xfbcffd60
mov dword [esp + 0x290], 0xf7f6f9ce
mov dword [esp + 0x10], 0
mov edx, dword [esp + 0x10]
cmp edx, 0x63
ja 0x1b23a8
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
movzx edx, byte [esp + edx + 0x230]
mov ebx, esi
xor ebx, 0xa8922a46
mov ecx, esi
xor ecx, 0x576dd5b9
or esi, 0x28922a46
and esi, ecx
lea ecx, [ebx + esi*2]
lea esi, [ecx + edx]
mov ebx, edx
not ebx
or ebx, ecx
add edx, ebx
inc edx
sub esi, edx
mov ecx, esi
not ecx
and ecx, edx
not edx
and edx, esi
sub edx, ecx
mov dword [esp + 0x28], edx
mov ecx, dword [esp + 0x28]
add cl, 0xa2
mov edx, dword [esp + 0x10]
mov byte [esp + edx + 0x230], cl
inc dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
cmp ecx, 0x64
jb 0x1b2340
lea ebx, [esp + 0x130]
sub eax, ebx
mov dword [esp + 0x28], 0x49d54b9d
mov dword [esp + 0x2c], 0x45d147d8
mov dword [esp + 0x30], 0x4344
mov dword [esp + 4], 0
mov ecx, dword [esp + 4]
cmp ecx, 0xb
ja 0x1b2436
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 4]
mov edx, dword [esp + 4]
movzx edx, byte [esp + edx + 0x28]
mov esi, ecx
xor esi, 0xd0595893
and ecx, 0xd0595893
lea ecx, [esi + ecx*2]
lea esi, [ecx + edx]
not edx
or ecx, edx
sub edx, ecx
lea ecx, [esi + edx*2]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x10]
mov ecx, edx
not ecx
and ecx, 0xdf
and edx, 0x20
sub edx, ecx
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x28], dl
inc dword [esp + 4]
mov ecx, dword [esp + 4]
cmp ecx, 0xc
jb 0x1b23e0
lea ecx, [esp + 0xbc]
lea edx, [esp + 0xa8]
lea esi, [esp + 0x230]
push ecx
push edx
push eax
push ebx
push esi
lea eax, [esp + 0x3c]
push eax
push 0x1f088c
call fcn.001afa80
add esp, 0x1c
jmp case.0x1b1f5d.3
lea ecx, [esp + 0x130]
sub eax, ecx
lea edx, [esp + 0xbc]
lea esi, [esp + 0xa8]
push edx
push esi
push eax
push ecx
push edi
lea eax, [esp + 0x3c]
push eax
push 0x1f088c
call fcn.001afa80
add esp, 0x1c
jmp dword [0x1eb730]
lea ecx, [esp + 0xab0]
call fcn.001ad8b0
call dword [sym.imp.ole32.dll_CoUninitialize]
mov dword [esp + 0x28], 0xbeada1e2
mov word [esp + 0x2c], 0x90b8
mov byte [esp + 0x2e], 0xd2
mov dword [esp + 0x2f], 0
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x10]
cmp eax, 0xa
ja 0x1b2534
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
movzx ecx, byte [esp + ecx + 0x28]
mov edx, eax
xor edx, 0x1830cc4e
and eax, 0x1830cc4e
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp + 0x230], eax
mov eax, dword [esp + 0x230]
add al, 0x7a
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x28], al
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, 0xb
jb 0x1b24f0
mov ecx, dword [0x1ea684]
mov dword [esp + 0x10], 0x13d7abee
mov word [esp + 0x14], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 5
ja 0x1b2599
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov edx, dword [esp + 4]
movzx edx, byte [esp + edx + 0x10]
add eax, 0x785d14fc
xor eax, edx
mov dword [esp + 0x230], eax
mov eax, dword [esp + 0x230]
add al, 0x14
mov edx, dword [esp + 4]
mov byte [esp + edx + 0x10], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 6
jb 0x1b2560
lea eax, [esp + 0x24d]
mov edx, dword [str.c2CoW0__4]
mov dword [esp + 0x230], 0x92aaa6a9
mov dword [esp + 0x234], 0xb0aeb8bf
mov dword [esp + 0x238], 0xa0a1bca5
mov dword [esp + 0x23c], 0x71b7b6bd
mov dword [esp + 0x240], 0xa298b4a2
mov dword [esp + 0x244], 0x49525758
mov dword [esp + 0x248], 0xaa828894
mov byte [esp + 0x24c], 0x6c
mov byte [eax + 2], 0
mov word [eax], 0
mov dword [esp + 0xc], 0
mov eax, dword [esp + 0xc]
cmp eax, 0x1f
ja 0x1b2675
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0xc]
mov esi, dword [esp + 0xc]
movzx esi, byte [esp + esi + 0x230]
mov ebx, eax
xor ebx, 0xa156498e
and eax, 0x2156498e
lea eax, [ebx + eax*2]
lea ebx, [eax + esi]
and eax, esi
mov esi, ebx
not esi
and esi, eax
add esi, eax
not eax
and eax, ebx
sub eax, esi
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add al, 0x3a
mov esi, dword [esp + 0xc]
mov byte [esp + esi + 0x230], al
inc dword [esp + 0xc]
mov eax, dword [esp + 0xc]
cmp eax, 0x20
jb 0x1b2620
movzx ebx, byte [esp + 0x230]
lea eax, [esp + 0x130]
test bl, bl
je 0x1b26ab
lea esi, [esp + 0x231]
lea eax, [esp + 0x130]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], bl
inc eax
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x1b26a0
mov byte [eax], 0
movzx ebx, byte [edx]
test bl, bl
je 0x1b26cb
inc edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], bl
inc eax
movzx ebx, byte [edx]
inc edx
test bl, bl
jne 0x1b26c0
mov byte [eax], 0
movzx edx, byte [esp + 0x10]
test dl, dl
je 0x1b26eb
lea esi, [esp + 0x11]
nop
nop
nop
nop
nop
mov byte [eax], dl
inc eax
movzx edx, byte [esi]
inc esi
test dl, dl
jne 0x1b26e0
mov byte [eax], 0
movzx edx, byte [ecx]
test dl, dl
je 0x1b270b
inc ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], dl
inc eax
movzx edx, byte [ecx]
inc ecx
test dl, dl
jne 0x1b2700
mov byte [eax], 0
movzx ecx, byte [esp + 0x28]
test cl, cl
je 0x1b272b
lea edx, [esp + 0x29]
nop
nop
nop
nop
nop
mov byte [eax], cl
inc eax
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x1b2720
mov byte [eax], 0
movzx ecx, byte [0x1f082c]
test cl, cl
je 0x1b2751
xor edx, edx
nop
nop
nop
nop
nop
mov byte [eax + edx], cl
movzx ecx, byte [edx + 0x1f082d]
inc edx
test cl, cl
jne 0x1b2740
add eax, edx
mov byte [eax], 0
mov dword [esp + 0x230], 0x178519e7
mov dword [esp + 0x234], 0x139e1586
mov dword [esp + 0x238], 0xf9c118d
mov dword [esp + 0x23c], 0xbdf0d80
mov dword [esp + 0x240], 0x78f09e4
mov dword [esp + 0x244], 0x39f0594
mov dword [esp + 0x248], 0x3f1e01c6
mov dword [esp + 0x24c], 0x3baa3ddd
mov dword [esp + 0x250], 0x37a239a8
mov dword [esp + 0x254], 0x33ad35ad
mov dword [esp + 0x258], 0x2fa231d1
mov dword [esp + 0x25c], 0x2bb92db5
mov dword [esp + 0x260], 0x27f529ba
mov dword [esp + 0x264], 0x23f725ac
mov dword [esp + 0x268], 0xdf5521ab
mov dword [esp + 0x26c], 0xdb0fdd57
mov dword [esp + 0x270], 0xd745d942
mov dword [esp + 0x274], 0xd347d55a
mov dword [esp + 0x278], 0xcf43d105
mov dword [esp + 0x27c], 0xcb5ecd42
mov dword [esp + 0x280], 0xc754c955
mov dword [esp + 0x284], 0xc351c55b
mov dword [esp + 0x288], 0xff63c15c
mov dword [esp + 0x28c], 0xfbcffd60
mov dword [esp + 0x290], 0xf7f6f9ce
mov dword [esp + 0x10], 0
mov ecx, dword [esp + 0x10]
cmp ecx, 0x63
ja 0x1b28e8
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
movzx ecx, byte [esp + ecx + 0x230]
mov esi, edx
xor esi, 0xa8922a46
mov ebx, edx
xor ebx, 0x576dd5b9
or edx, 0x28922a46
and edx, ebx
lea esi, [esi + edx*2]
lea edx, [esi + ecx]
mov ebx, ecx
not ebx
or ebx, esi
add ecx, ebx
inc ecx
sub edx, ecx
mov esi, edx
not esi
and esi, ecx
not ecx
and ecx, edx
sub ecx, esi
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x28]
add cl, 0xa2
mov edx, dword [esp + 0x10]
mov byte [esp + edx + 0x230], cl
inc dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
cmp ecx, 0x64
jb 0x1b2880
mov dword [esp + 0x28], 0x49d54b9d
mov dword [esp + 0x2c], 0x45d147d8
mov dword [esp + 0x30], 0x4344
mov dword [esp + 4], 0
mov ecx, dword [esp + 4]
cmp ecx, 0xb
ja 0x1b2470
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x28]
mov esi, edx
xor esi, 0xd0595893
and edx, 0xd0595893
lea edx, [esi + edx*2]
lea esi, [edx + ecx]
not ecx
or edx, ecx
sub ecx, edx
lea ecx, [esi + ecx*2]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x10]
mov edx, ecx
not edx
and edx, 0xdf
and ecx, 0x20
sub ecx, edx
mov edx, dword [esp + 4]
mov byte [esp + edx + 0x28], cl
inc dword [esp + 4]
mov ecx, dword [esp + 4]
cmp ecx, 0xc
jb 0x1b2920
jmp 0x1b2470
movzx eax, al
jmp dword [eax*4 + 0x1eb734]
push dword [esp + 0xb8]
call fcn.001a4670
add esp, 4
call dword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x1eb76c]
mov dword [esp + 0x28], 0x79e97ba1
mov dword [esp + 0x2c], 0x7d2c7fdc
mov dword [esp + 0x30], 0x71fa73e7
mov dword [esp + 0x34], 0x751677eb
mov dword [esp + 0x38], 0x69ff6b12
mov dword [esp + 0x3c], 0x6dc96ffc
mov dword [esp + 0x40], 0x61f663fa
mov dword [esp + 0x44], 0x65376700
mov dword [esp + 0x48], 0x59c55bf7
mov dword [esp + 0x4c], 0x5d3e5fca
mov dword [esp + 0x50], 0x51c153f9
mov dword [esp + 0x54], 0x550457f4
mov dword [esp + 0x58], 0x49c24bcf
mov dword [esp + 0x5c], 0x4d2e4fd3
mov dword [esp + 0x60], 0x4113432a
mov dword [esp + 0x64], 0x452647e5
mov dword [esp + 0x68], 0xb925bbd0
mov dword [esp + 0x6c], 0xbd25bf2b
mov dword [esp + 0x70], 0xb139b32d
mov dword [esp + 0x74], 0xb5d6b724
mov dword [esp + 0x78], 0xa93eabe5
mov dword [esp + 0x7c], 0xadfbafc8
mov dword [esp + 0x80], 0xa1f3a3cc
mov dword [esp + 0x84], 0xa537a732
mov dword [esp + 0x88], 0x990c9b02
mov dword [esp + 0x8c], 0x9d399f03
mov dword [esp + 0x90], 0x91f29301
mov dword [esp + 0x94], 0x95f697ca
mov dword [esp + 0x98], 0x89118b30
mov dword [esp + 0x9c], 0x8dee8f14
mov dword [esp + 0xa0], 0x818283ea
mov dword [esp + 0xa4], 0
mov dword [esp + 0x10], 0
mov ecx, dword [esp + 0x10]
cmp ecx, 0x7f
ja 0x1b2b40
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
movzx edx, byte [esp + edx + 0x28]
mov esi, ecx
xor esi, 0xdb96c33f
and ecx, 0xdb96c33f
lea ecx, [esi + ecx*2]
lea esi, [ecx + edx]
and ecx, edx
add ecx, ecx
sub esi, ecx
mov dword [esp + 0x230], esi
mov ecx, dword [esp + 0x230]
add cl, 0xc5
mov edx, dword [esp + 0x10]
mov byte [esp + edx + 0x28], cl
inc dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
cmp ecx, 0x80
jb 0x1b2af0
movzx ecx, word [esp + 0x28]
test cx, cx
je 0x1b2b71
lea edi, [esp + 0x230]
lea edx, [esp + 0x2a]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edi], cx
add edi, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x1b2b60
mov word [edi], 0
movzx ecx, word [eax]
test cx, cx
je 0x1b2ba1
add eax, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edi], cx
add edi, 2
movzx ecx, word [eax]
add eax, 2
test cx, cx
jne 0x1b2b90
mov dword [edi], 0x220022
mov dword [edi + 4], 0x22
mov dword [esp + 0x68], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0x44
mov dword [esp + 0x54], 1
push 0xc9be8534
push dword [0x1f1b94]
call fcn.001e47c0
add esp, 8
lea ecx, [esp + 0x10]
lea edx, [esp + 0x230]
push ecx
lea ecx, [esp + 0x2c]
push ecx
push 0
push 0
push 0x8000000
push 0
push 0
push 0
push edx
push 0
call eax
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x1eb774]
push 0
call fcn.001e46d0
add esp, 4
push 0
call fcn.001e46d0
add esp, 4
jmp dword [0x1eb764]
int3
xor ebx, ebx
mov dword [esp + 0x44], esi
jmp 0x1b2d68
xor eax, eax
jmp dword [0x1eb790]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, edi
call fcn.001acff0
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, dword [esp + 0x114]
inc ebx
push esi
call fcn.001a4630
add esp, 4
xor ecx, ecx
cmp ebx, eax
setb cl
mov al, 1
jmp dword [ecx*4 + 0x1eb794]
mov dword [esp + 0x114], ebx
jmp dword [0x1eb7a0]
push 3
push edi
push ebx
call fcn.001a45d0
add esp, 0xc
jmp dword [0x1eb7a8]
push dword [esp + 0x114]
push esi
call fcn.001a4640
add esp, 8
mov ebx, eax
mov word [esp + 0x50], 0x49f4
mov dword [esp + 0x52], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 5
ja 0x1b2e20
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x50]
mov edx, eax
xor edx, 0x2032e5ee
and eax, 0x2032e5ee
lea eax, [edx + eax*2]
lea edx, [eax + ecx]
and eax, ecx
add eax, eax
sub edx, eax
mov dword [esp + 0xb8], edx
mov eax, dword [esp + 0xb8]
add al, 0x5a
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 6
jb 0x1b2e70
jmp 0x1b2e20
xor ecx, ecx
test eax, eax
sete cl
jmp dword [ecx*4 + 0x1eb7ac]
mov dword [esp + 4], 0x8b00
mov dword [esp + 0xb8], 0
mov eax, dword [esp + 0xb8]
cmp eax, 3
ja 0x1b2f49
nop
nop
nop
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xb8]
movzx ecx, byte [esp + ecx + 4]
mov edx, eax
xor edx, 0xf06328a3
and eax, 0xf06328a3
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x50]
mov ecx, eax
not ecx
and ecx, 0x2f
and eax, 0xd0
sub eax, ecx
mov ecx, dword [esp + 0xb8]
mov byte [esp + ecx + 4], al
inc dword [esp + 0xb8]
mov eax, dword [esp + 0xb8]
cmp eax, 4
jb 0x1b2ef0
lea eax, [esp + 4]
push eax
push ebx
call fcn.001a43b0
add esp, 8
fnstcw word [esp + 0x10a]
movzx eax, word [esp + 0x10a]
or eax, 0xc00
mov word [esp + 0x11e], ax
fldcw word [esp + 0x11e]
fistp dword [esp + 0x138]
fldcw word [esp + 0x10a]
mov eax, dword [esp + 0x138]
xor ecx, ecx
cmp eax, 2
setl cl
jmp dword [ecx*4 + 0x1eb7b4]
xor ecx, ecx
cmp eax, 3
setl cl
jmp dword [ecx*4 + 0x1eb7bc]
sete al
movzx eax, al
jmp dword [eax*4 + 0x1eb7c4]
mov dword [esp + 0x20], 0xeb4d
mov dword [esp + 0xb8], 0
mov eax, dword [esp + 0xb8]
cmp eax, 3
ja 0x1b302d
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xb8]
movzx ecx, byte [esp + ecx + 0x20]
mov edx, eax
xor edx, 0xa7870d7
and eax, 0xa7870d7
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x50]
add al, 0xcd
mov ecx, dword [esp + 0xb8]
mov byte [esp + ecx + 0x20], al
inc dword [esp + 0xb8]
mov eax, dword [esp + 0xb8]
cmp eax, 4
jb 0x1b2fe0
push 2
lea eax, [esp + 0x24]
push eax
push ebx
call fcn.001a45d0
add esp, 0xc
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x1eb864]
mov word [esp + 0x50], 0x2190
lea eax, [esp + 0x54]
mov word [eax + 2], 0
mov dword [eax - 2], 0
mov dword [esp + 0x14], 0
mov eax, dword [esp + 0x14]
cmp eax, 7
ja 0x1b30be
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
movzx ecx, byte [esp + ecx + 0x50]
mov edx, eax
xor edx, 0x5fdbe2c8
and eax, 0xdfdbe2c8
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x38]
add al, 0x18
mov ecx, dword [esp + 0x14]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 0x14]
mov eax, dword [esp + 0x14]
cmp eax, 8
jb 0x1b3080
push 2
push edi
push ebx
call fcn.001a45d0
add esp, 0xc
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x1eb86c]
mov dword [esp + 0x118], 0x2793
mov dword [esp + 0x14], 0
mov eax, dword [esp + 0x14]
cmp eax, 3
ja 0x1b3144
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
movzx ecx, byte [esp + ecx + 0x118]
mov edx, eax
xor edx, 0x42f00909
and eax, 0xc2f00909
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x38]
add al, 0xd3
mov ecx, dword [esp + 0x14]
mov byte [esp + ecx + 0x118], al
inc dword [esp + 0x14]
mov eax, dword [esp + 0x14]
cmp eax, 4
jb 0x1b3100
push 5
lea eax, [esp + 0x11c]
push eax
push ebx
call fcn.001a45d0
add esp, 0xc
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x1eb874]
mov word [esp + 0xb8], 0xe16a
lea eax, [esp + 0xba]
mov word [eax + 4], 0
mov dword [eax], 0
mov dword [esp + 0x14], 0
mov eax, dword [esp + 0x14]
cmp eax, 7
ja 0x1b31f5
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
movzx ecx, byte [esp + ecx + 0xb8]
mov edx, eax
xor edx, 0xc3132da8
and eax, 0xc3132da8
lea eax, [edx + eax*2]
lea edx, [eax + ecx]
and eax, ecx
mov ecx, edx
not ecx
and ecx, eax
add ecx, eax
not eax
and eax, edx
sub eax, ecx
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x38]
add al, 0xb8
mov ecx, dword [esp + 0x14]
mov byte [esp + ecx + 0xb8], al
inc dword [esp + 0x14]
mov eax, dword [esp + 0x14]
cmp eax, 8
jb 0x1b31a0
push 2
lea eax, [esp + 0xbc]
push eax
push ebx
call fcn.001a45d0
add esp, 0xc
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x1eb87c]
mov word [esp + 4], 0xf944
lea eax, [esp + 6]
mov byte [eax + 2], 0
mov word [eax], 0
mov dword [esp + 0x14], 0
mov eax, dword [esp + 0x14]
cmp eax, 4
ja 0x1b328a
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
movzx eax, byte [esp + eax + 4]
mov edx, ecx
xor edx, 0xe689b1d6
and ecx, 0xe689b1d6
lea ecx, [edx + ecx*2]
mov edx, ecx
add ecx, eax
not eax
or edx, eax
sub eax, edx
lea eax, [ecx + eax*2]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x38]
add al, 0xd2
mov ecx, dword [esp + 0x14]
mov byte [esp + ecx + 4], al
inc dword [esp + 0x14]
mov eax, dword [esp + 0x14]
cmp eax, 5
jb 0x1b3240
push 3
lea eax, [esp + 8]
push eax
push ebx
call fcn.001a45d0
add esp, 0xc
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x1eb884]
jmp case.0x1b067b.89
xor ecx, ecx
test eax, eax
setle cl
jmp dword [ecx*4 + 0x1eb7cc]
mov word [esp + 0x50], 0xc9b8
lea eax, [esp + 0x54]
mov byte [eax], 0
mov word [eax - 2], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 4
ja 0x1b333e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x50]
mov edx, eax
xor edx, 0x9d3506ce
and eax, 0x1d3506ce
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0xb8]
mov ecx, eax
xor ecx, 6
and eax, 0x79
add eax, eax
sub eax, ecx
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 5
jb 0x1b32f0
push edi
push ebx
call fcn.001a4350
add esp, 8
mov dword [esp + 0x18], eax
mov word [esp + 0x50], 0x910a
mov dword [esp + 0x52], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 5
ja 0x1b33b4
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x50]
mov edx, eax
xor edx, 0xcdc43724
and eax, 0xcdc43724
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0xb8]
add al, 0x4c
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 6
jb 0x1b3370
push edi
push ebx
call fcn.001a4350
add esp, 8
mov ebx, dword [esp + 0x18]
test ebx, ebx
sete dl
test eax, eax
sete cl
or cl, dl
movzx ecx, cl
jmp dword [ecx*4 + 0x1eb934]
mov ecx, ebx
mov edx, ebx
nop
nop
nop
nop
mov esi, ecx
inc ecx
cmp byte [esi], 0
jne 0x1b33e0
mov dword [esp + 0x10], eax
xor ebx, ebx
cmp esi, edx
jbe case.0x1b067b.198
cmp byte [edx], 0
je case.0x1b067b.198
xor ebx, ebx
mov edi, dword [esp + 0x18]
nop
nop
nop
mov dword [esp + 0x50], 0
lea eax, [esp + 0x50]
push eax
push esi
push edi
call fcn.001b0ce0
add esp, 0xc
lea ecx, [edi + eax]
inc ebx
cmp ecx, esi
jae case.0x1b067b.198
cmp byte [edi + eax], 0
mov edi, ecx
jne 0x1b3400
mov eax, ebx
inc eax
lea eax, [ebx + ebx + 2]
jns 0x1b3435
mov eax, 0xffffffff
push eax
call fcn.001ac630
add esp, 4
mov dword [esp + 0x50], 0
lea ecx, [eax + ebx*2]
mov ebx, eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x1c], ecx
cmp eax, ecx
mov eax, dword [esp + 0x10]
mov edi, dword [esp + 0x18]
jae 0x1b373c
mov ebx, dword [esp + 0x34]
cmp edi, esi
jae 0x1b373c
mov ebx, dword [esp + 0x34]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [edi], 0
je 0x1b373c
lea eax, [esp + 0x50]
push eax
push esi
push edi
call fcn.001b0ce0
add esp, 0xc
movzx ecx, word [esp + 0x50]
mov word [ebx], cx
add ebx, 2
cmp ebx, dword [esp + 0x1c]
jae 0x1b3738
add edi, eax
cmp edi, esi
mov eax, dword [esp + 0x10]
jb 0x1b3480
jmp 0x1b373c
jmp dword [0x1eb9c0]
sete al
movzx eax, al
jmp dword [eax*4 + 0x1eb7d4]
mov word [esp + 0x50], 0x39a8
mov dword [esp + 0x52], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 5
ja 0x1b353d
nop
mov ecx, dword [esp + 4]
mov eax, dword [esp + 4]
movzx eax, byte [esp + eax + 0x50]
mov edx, ecx
xor edx, 0x91f8680a
add ecx, ecx
and ecx, 0x23f0d014
mov esi, ecx
and esi, edx
xor ecx, edx
lea ecx, [ecx + esi*2]
xor ecx, eax
mov dword [esp + 0xb8], ecx
mov eax, dword [esp + 0xb8]
add al, 0xce
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 6
jb 0x1b34f0
push 2
push edi
push ebx
call fcn.001a45d0
add esp, 0xc
xor ecx, ecx
test eax, eax
setne cl
mov esi, dword [esp + 0x44]
jmp dword [ecx*4 + 0x1eb7dc]
mov word [esp + 0xb8], 0x891d
lea eax, [esp + 0xba]
mov word [eax + 4], 0
mov dword [eax], 0
mov dword [esp + 0x20], 0
mov eax, dword [esp + 0x20]
cmp eax, 7
ja 0x1b35d4
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x20]
movzx ecx, byte [esp + ecx + 0xb8]
mov edx, eax
xor edx, 0x3ed6f49e
and eax, 0x3ed6f49e
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
add al, 0xea
mov ecx, dword [esp + 0x20]
mov byte [esp + ecx + 0xb8], al
inc dword [esp + 0x20]
mov eax, dword [esp + 0x20]
cmp eax, 8
jb 0x1b3590
push 5
lea eax, [esp + 0xbc]
push eax
push ebx
call fcn.001a45d0
add esp, 0xc
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x1eb7e4]
mov word [esp + 4], 0x27ae
lea eax, [esp + 6]
mov byte [eax + 2], 0
mov word [eax], 0
mov dword [esp + 0x20], 0
mov eax, dword [esp + 0x20]
cmp eax, 4
ja 0x1b3680
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x20]
movzx eax, byte [esp + eax + 4]
mov edx, ecx
not edx
or edx, 0x31aa3479
add edx, ecx
xor ecx, 0xb1aa3479
lea esi, [ecx + edx*2]
lea ecx, [ecx + edx*2]
add ecx, 2
lea edx, [eax + esi]
add edx, 2
not eax
or ecx, eax
sub eax, ecx
lea eax, [edx + eax*2]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
mov ecx, eax
xor ecx, 0x5d
and eax, 0x22
add eax, eax
sub eax, ecx
mov ecx, dword [esp + 0x20]
mov byte [esp + ecx + 4], al
inc dword [esp + 0x20]
mov eax, dword [esp + 0x20]
cmp eax, 5
jb 0x1b3620
push 2
lea eax, [esp + 8]
push eax
push ebx
call fcn.001a45d0
add esp, 0xc
xor ecx, ecx
test eax, eax
setne cl
mov esi, dword [esp + 0x44]
jmp dword [ecx*4 + 0x1eb7ec]
mov word [esp + 0x2c], 0x11ac
lea eax, [esp + 0x2d]
mov byte [eax + 5], 0
mov dword [eax + 1], 0
mov dword [esp + 0x20], 0
mov eax, dword [esp + 0x20]
cmp eax, 6
ja 0x1b3715
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x20]
movzx ecx, byte [esp + ecx + 0x2c]
mov edx, eax
xor edx, 0x1a2842fc
and eax, 0x1a2842fc
lea eax, [edx + eax*2]
lea edx, [eax + ecx]
and eax, ecx
add eax, eax
sub edx, eax
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0x14]
add al, 0x14
mov ecx, dword [esp + 0x20]
mov byte [esp + ecx + 0x2c], al
inc dword [esp + 0x20]
mov eax, dword [esp + 0x20]
cmp eax, 7
jb 0x1b36d0
push 3
lea eax, [esp + 0x30]
push eax
push ebx
call fcn.001a45d0
add esp, 0xc
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x1eb7f4]
jmp case.0x1b067b.89
mov eax, dword [esp + 0x10]
mov word [ebx], 0
lea esi, [eax - 1]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [esi + 1], 0
lea esi, [esi + 1]
jne 0x1b3750
xor edi, edi
cmp eax, esi
jae case.0x1b067b.199
cmp byte [eax], 0
je case.0x1b067b.199
xor edi, edi
mov ebx, dword [esp + 0x10]
nop
nop
nop
nop
nop
nop
mov dword [esp + 0x50], 0
lea eax, [esp + 0x50]
push eax
push esi
push ebx
call fcn.001b0ce0
add esp, 0xc
lea ecx, [ebx + eax]
inc edi
cmp ecx, esi
jae case.0x1b067b.199
cmp byte [ebx + eax], 0
mov ebx, ecx
jne 0x1b3770
mov eax, edi
inc eax
lea eax, [edi + edi + 2]
jns 0x1b37a5
mov eax, 0xffffffff
push eax
call fcn.001ac630
add esp, 4
mov dword [esp + 0x50], 0
lea ecx, [eax + edi*2]
mov edi, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x1c], ecx
cmp eax, ecx
mov ebx, dword [esp + 0x10]
jae 0x1b380b
mov edi, dword [esp + 0x24]
cmp ebx, esi
jae 0x1b380b
mov edi, dword [esp + 0x24]
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [ebx], 0
je 0x1b380b
lea eax, [esp + 0x50]
push eax
push esi
push ebx
call fcn.001b0ce0
add esp, 0xc
movzx ecx, word [esp + 0x50]
mov word [edi], cx
add edi, 2
cmp edi, dword [esp + 0x1c]
jae 0x1b380b
add ebx, eax
cmp ebx, esi
jb 0x1b37e0
mov word [edi], 0
mov word [esp + 0x50], 0xc1ad
mov byte [esp + 0x52], 0x4e
lea eax, [esp + 0x54]
mov byte [eax + 1], 0
mov word [eax - 1], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 5
ja 0x1b3890
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x50]
mov edx, eax
xor edx, 0x89458512
and eax, 0x9458512
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0xb8]
mov ecx, eax
not ecx
and ecx, 0x5a
and eax, 0xa5
sub eax, ecx
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 6
jb 0x1b3840
lea edi, [esp + 0x50]
push edi
push dword [ebp + 8]
call fcn.001a4420
add esp, 8
xor ecx, ecx
mov dword [esp + 0x40], eax
test eax, eax
setne cl
mov dword [esp + 0x18], 0
xor ebx, ebx
jmp dword [ecx*4 + 0x1eb93c]
push dword [esp + 0x40]
call fcn.001a4630
add esp, 4
mov ecx, eax
mov dword [esp + 0x18], eax
mov ecx, 0xc
mul ecx
seto dl
mov ecx, 0xffffffff
mov esi, 0xffffffff
add eax, 4
jb 0x1b38e9
mov esi, eax
test dl, dl
jne 0x1b38ef
mov ecx, esi
push ecx
call fcn.001ac630
add esp, 4
mov ebx, eax
mov ecx, dword [esp + 0x18]
mov dword [eax], ecx
add ebx, 4
xor eax, eax
test ecx, ecx
sete al
jmp dword [eax*4 + 0x1eb944]
mov eax, dword [esp + 0x18]
lea eax, [eax + eax*2]
lea eax, [ebx + eax*4]
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov byte [ebx + 8], 0
lea ecx, [ebx + 0xc]
xor edx, edx
cmp ecx, eax
sete dl
jmp dword [edx*4 + 0x1eb94c]
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov byte [ecx + 8], 0
add ecx, 0xc
xor edx, edx
cmp ecx, eax
sete dl
jmp dword [edx*4 + 0x1eb94c]
xor esi, esi
xor eax, eax
cmp esi, dword [esp + 0x18]
setb al
mov dword [esp + 0x28], ebx
jmp dword [eax*4 + 0x1eb964]
push esi
push dword [esp + 0x44]
call fcn.001a4640
add esp, 8
mov ebx, eax
mov dword [esp + 4], 0x364b45
mov dword [esp + 0xb8], 0
mov eax, dword [esp + 0xb8]
cmp eax, 3
ja 0x1b3a04
nop
nop
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xb8]
movzx ecx, byte [esp + ecx + 4]
mov edx, eax
xor edx, 0x2a09bd36
and eax, 0x2a09bd36
lea eax, [edx + eax*2]
lea edx, [eax + ecx]
and eax, ecx
add eax, eax
sub edx, eax
mov dword [esp + 0x50], edx
mov eax, dword [esp + 0x50]
add al, 0xf2
mov ecx, dword [esp + 0xb8]
mov byte [esp + ecx + 4], al
inc dword [esp + 0xb8]
mov eax, dword [esp + 0xb8]
cmp eax, 4
jb 0x1b39b0
lea eax, [esp + 4]
push eax
push ebx
call fcn.001a4350
add esp, 8
mov dword [esp + 0x10], eax
mov word [esp + 0x50], 0xc7ad
mov byte [esp + 0x52], 0x4e
mov word [esp + 0x53], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 4
ja 0x1b3a79
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x50]
add eax, 0x5a594c12
xor eax, ecx
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0xb8]
add al, 0xa6
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 5
jb 0x1b3a40
push edi
push ebx
call fcn.001a4350
add esp, 8
mov dword [esp + 0x1c], eax
mov dword [esp + 0x50], 0x61041b10
mov word [esp + 0x54], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 5
ja 0x1b3b1c
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx edx, byte [esp + ecx + 0x50]
mov ecx, eax
not ecx
or ecx, 0x17f6b569
add ecx, eax
xor eax, 0x17f6b569
lea edi, [eax + ecx*2]
lea ecx, [eax + ecx*2]
add ecx, 2
lea eax, [edx + edi]
add eax, 2
and ecx, edx
mov edx, eax
not edx
and edx, ecx
mov edi, ecx
not edi
and eax, edi
sub eax, edx
mov edx, eax
not edx
and edx, ecx
and eax, edi
sub eax, edx
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0xb8]
add al, 0xf3
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 6
jb 0x1b3ab0
lea edi, [esp + 0x50]
push edi
push ebx
call fcn.001a4480
add esp, 8
xor edx, edx
test eax, eax
setg dl
lea eax, [esi + esi*2]
mov ebx, dword [esp + 0x28]
lea ecx, [ebx + eax*4]
push edx
push dword [esp + 0x14]
push dword [esp + 0x24]
call fcn.001ba840
inc esi
xor eax, eax
cmp esi, dword [esp + 0x18]
setb al
jmp dword [eax*4 + 0x1eb964]
mov ecx, edi
push 2
call fcn.001acfb0
push dword [esp + 0x18]
push ebx
mov esi, ebx
mov ebx, dword [esp + 0x2c]
push ebx
push dword [esp + 0x40]
push edi
call fcn.001bb450
add esp, 0x14
mov ecx, edi
call fcn.001ad8b0
movzx eax, al
jmp dword [eax*4 + 0x1eb96c]
mov dword [esp + 0x28], esi
mov eax, dword [esp + 0x54]
shr eax, 0xa
push 0xa
push 0xb
lea ecx, [esp + 0xc]
push ecx
push eax
call fcn.001ba990
add esp, 0x10
mov dword [esp + 0x2c], 0x3f307f77
lea ecx, [esp + 0x2d]
mov byte [ecx + 5], 0
mov word [ecx + 3], 0
mov dword [esp + 0x38], 0
mov ecx, dword [esp + 0x38]
cmp ecx, 6
ja case.0x1b067b.215
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x38]
movzx edx, byte [esp + edx + 0x2c]
mov esi, ecx
not esi
or esi, 0x11ff430a
add esi, ecx
xor ecx, 0x91ff430a
lea edi, [ecx + esi*2]
lea ecx, [ecx + esi*2]
add ecx, 2
lea esi, [edx + edi]
add esi, 2
and ecx, edx
mov edx, esi
not edx
and edx, ecx
add edx, ecx
not ecx
and ecx, esi
sub ecx, edx
mov dword [esp + 0xb8], ecx
mov ecx, dword [esp + 0xb8]
mov edx, ecx
not edx
and edx, 0x32
and ecx, 0xcd
sub ecx, edx
mov edx, dword [esp + 0x38]
mov byte [esp + edx + 0x2c], cl
inc dword [esp + 0x38]
mov ecx, dword [esp + 0x38]
cmp ecx, 7
jb 0x1b3be0
mov dword [esp + 0xb8], 0x838c7871
mov dword [esp + 0xbc], 0x357d8181
mov dword [esp + 0xc0], 0x958d7472
mov dword [esp + 0xc4], 0x992a6f6f
mov dword [esp + 0xc8], 0x669b2f9d
mov dword [esp + 0xcc], 0x6022679e
mov dword [esp + 0xd0], 0xa697959c
mov dword [esp + 0xd4], 0x1da5aca3
mov dword [esp + 0xd8], 0xac5b5cac
mov dword [esp + 0xdc], 0xa112a757
mov dword [esp + 0xe0], 0xb1a217a5
mov dword [esp + 0xe4], 0x4abf0b4f
mov dword [esp + 0xe8], 0xb349b9be
mov dword [esp + 0xec], 0xb4b6037c
mov dword [esp + 0xf0], 0x79ba44b0
mov dword [esp + 0xf4], 0xc03f38c8
mov dword [esp + 0xf8], 0xc47ecb3b
mov dword [esp + 0xfc], 0x1f35d9cb
mov dword [esp + 0x100], 0x5774
mov dword [esp + 0x14], 0
mov ecx, dword [esp + 0x14]
cmp ecx, 0x4b
ja 0x1b3d86
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x14]
movzx edx, byte [esp + edx + 0xb8]
mov esi, ecx
xor esi, 0x27c76a05
and ecx, 0x27c76a05
lea ecx, [esi + ecx*2]
xor ecx, edx
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x38]
add cl, 0xe7
mov edx, dword [esp + 0x14]
mov byte [esp + edx + 0xb8], cl
inc dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
cmp ecx, 0x4c
jb 0x1b3d40
lea ecx, [0x1f0b93]
lea edi, [esp + 0x50]
cmp byte [ecx + 1], 0
lea ecx, [ecx + 1]
jne 0x1b3d90
movzx edx, byte [esp + 0xb8]
test dl, dl
je 0x1b3dc2
xor esi, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ecx + esi], dl
movzx edx, byte [esp + esi + 0xb9]
inc esi
test dl, dl
jne 0x1b3db0
add ecx, esi
mov byte [ecx], 0
movzx edx, byte [eax]
test dl, dl
je 0x1b3ddb
inc eax
nop
nop
nop
mov byte [ecx], dl
inc ecx
movzx edx, byte [eax]
inc eax
test dl, dl
jne 0x1b3dd0
mov byte [ecx], 0
movzx eax, byte [esp + 0x2c]
test al, al
je 0x1b3dfb
lea edx, [esp + 0x2d]
nop
nop
nop
nop
nop
mov byte [ecx], al
inc ecx
movzx eax, byte [edx]
inc edx
test al, al
jne 0x1b3df0
mov byte [ecx], 0
xor eax, eax
mov esi, dword [esp + 0x28]
test esi, esi
sete al
jmp dword [eax*4 + 0x1eb974]
xor eax, eax
test esi, esi
sete al
jmp dword [eax*4 + 0x1eb974]
lea eax, [esi - 4]
mov dword [esp + 0x10], eax
mov eax, dword [esi - 4]
lea ecx, [eax + eax*2]
mov ebx, esi
lea edi, [esi + ecx*4]
xor ecx, ecx
test eax, eax
sete cl
jmp dword [ecx*4 + 0x1eb97c]
lea edi, [esp + 0x50]
mov ebx, dword [esp + 0x24]
mov esi, dword [esp + 0x10]
jmp dword [0x1eb98c]
add edi, 0xfffffff4
xor eax, eax
cmp edi, ebx
sete al
jmp dword [eax*4 + 0x1eb984]
mov eax, dword [edi - 0xc]
test eax, eax
je 0x1b3e71
push eax
call fcn.001ac640
add esp, 4
mov eax, dword [edi - 8]
test eax, eax
je 0x1b3e50
push eax
call fcn.001ac640
add esp, 4
jmp 0x1b3e50
mov word [esp + 0x38], 0xb6c2
mov byte [esp + 0x3a], 0x36
mov dword [esp + 0x3b], 0
mov dword [esp + 0x20], 0
mov eax, dword [esp + 0x20]
cmp eax, 6
ja 0x1b3ef0
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x20]
movzx ecx, byte [esp + ecx + 0x38]
lea edx, [eax + ecx]
add edx, 0xd0023176
add eax, 0xd0023176
and eax, ecx
add eax, eax
sub edx, eax
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0x14]
add al, 0xb2
mov ecx, dword [esp + 0x20]
mov byte [esp + ecx + 0x38], al
inc dword [esp + 0x20]
mov eax, dword [esp + 0x20]
cmp eax, 7
jb 0x1b3eb0
push 3
lea eax, [esp + 0x3c]
push eax
push ebx
call fcn.001a45d0
add esp, 0xc
xor ecx, ecx
test eax, eax
sete cl
jmp dword [ecx*4 + 0x1eb7fc]
mov word [esp + 0x50], 0x4fbc
lea eax, [esp + 0x54]
mov byte [eax], 0
mov word [eax - 2], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 4
ja 0x1b3fa2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x50]
mov edx, eax
not edx
or edx, 0x3f9b628d
add edx, eax
xor eax, 0xbf9b628d
lea esi, [eax + edx*2]
lea eax, [eax + edx*2]
add eax, 2
lea edx, [ecx + esi]
add edx, 2
and eax, ecx
mov ecx, edx
not ecx
and ecx, eax
add ecx, eax
not eax
and eax, edx
sub eax, ecx
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0xb8]
add al, 0x3f
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 5
jb 0x1b3f40
push edi
push ebx
call fcn.001a4350
add esp, 8
mov dword [esp + 0x28], eax
mov word [esp + 0x50], 0x891d
lea eax, [esp + 0x54]
mov word [eax + 2], 0
mov dword [eax - 2], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 7
ja 0x1b4024
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x50]
mov edx, eax
xor edx, 0xd95c2e5e
and eax, 0xd95c2e5e
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0xb8]
add al, 0x2a
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 8
jb 0x1b3fe0
push edi
push ebx
call fcn.001a4420
add esp, 8
mov dword [esp + 0x40], eax
mov dword [esp + 4], 0x314a
mov dword [esp + 0xb8], 0
mov eax, dword [esp + 0xb8]
cmp eax, 3
ja 0x1b40af
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xb8]
movzx ecx, byte [esp + ecx + 4]
lea edx, [eax + ecx]
add edx, 0xb51a4834
add eax, 0xb51a4834
and eax, ecx
add eax, eax
sub edx, eax
mov dword [esp + 0x50], edx
mov eax, dword [esp + 0x50]
add al, 0xfc
mov ecx, dword [esp + 0xb8]
mov byte [esp + ecx + 4], al
inc dword [esp + 0xb8]
mov eax, dword [esp + 0xb8]
cmp eax, 4
jb 0x1b4060
lea eax, [esp + 4]
push eax
push ebx
call fcn.001a4350
add esp, 8
mov dword [esp + 0x48], eax
mov word [esp + 0x50], 0x8124
lea eax, [esp + 0x54]
mov word [eax + 2], 0
mov dword [eax - 2], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 7
ja 0x1b4134
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x50]
mov edx, eax
xor edx, 0x58ff4f60
and eax, 0xd8ff4f60
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0xb8]
add al, 0x20
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 8
jb 0x1b40f0
push edi
push ebx
call fcn.001a43b0
add esp, 8
mov dword [esp + 4], 0x7eee12
fnstcw word [esp + 0x112]
movzx eax, word [esp + 0x112]
or eax, 0xc00
mov word [esp + 0x126], ax
fldcw word [esp + 0x126]
fistp dword [esp + 0x134]
fldcw word [esp + 0x112]
mov eax, dword [esp + 0x134]
mov dword [esp + 0x24], eax
mov dword [esp + 0xb8], 0
mov eax, dword [esp + 0xb8]
cmp eax, 3
ja 0x1b41ed
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xb8]
movzx ecx, byte [esp + ecx + 4]
mov edx, eax
xor edx, 0xfd9231ea
and eax, 0xfd9231ea
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x50]
add al, 0x6e
mov ecx, dword [esp + 0xb8]
mov byte [esp + ecx + 4], al
inc dword [esp + 0xb8]
mov eax, dword [esp + 0xb8]
cmp eax, 4
jb 0x1b41a0
lea eax, [esp + 4]
push eax
push ebx
call fcn.001a43b0
add esp, 8
mov word [esp + 0x50], 0x9d86
mov byte [esp + 0x52], 0x22
mov dword [esp + 0x53], 0
fnstcw word [esp + 0x110]
movzx eax, word [esp + 0x110]
or eax, 0xc00
mov word [esp + 0x124], ax
fldcw word [esp + 0x124]
fistp dword [esp + 0x130]
fldcw word [esp + 0x110]
mov eax, dword [esp + 0x130]
mov dword [esp + 0x4c], eax
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 6
ja 0x1b42b8
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x50]
mov edx, eax
xor edx, 0x9a94bac8
and eax, 0x1a94bac8
lea eax, [edx + eax*2]
lea edx, [eax + ecx]
and eax, ecx
add eax, eax
sub edx, eax
mov dword [esp + 0xb8], edx
mov eax, dword [esp + 0xb8]
mov ecx, eax
xor ecx, 0xe8
and eax, 0x17
add eax, eax
sub eax, ecx
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 7
jb 0x1b4260
push edi
push ebx
call fcn.001a4480
add esp, 8
mov dword [esp + 0x104], eax
mov eax, dword [esp + 0x28]
lea edi, [eax - 1]
cmp byte [edi + 1], 0
lea edi, [edi + 1]
jne 0x1b42d0
xor ebx, ebx
cmp eax, edi
jae 0x1b4317
cmp byte [eax], 0
je 0x1b4317
xor ebx, ebx
mov esi, dword [esp + 0x28]
nop
nop
nop
nop
nop
nop
mov dword [esp + 0x50], 0
lea eax, [esp + 0x50]
push eax
push edi
push esi
call fcn.001b0ce0
add esp, 0xc
lea ecx, [esi + eax]
inc ebx
cmp ecx, edi
jae 0x1b4317
cmp byte [esi + eax], 0
mov esi, ecx
jne 0x1b42f0
mov eax, ebx
inc eax
lea eax, [ebx + ebx + 2]
jns 0x1b4325
mov eax, 0xffffffff
push eax
call fcn.001ac630
add esp, 4
mov dword [esp + 0x50], 0
lea ecx, [eax + ebx*2]
mov esi, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], ecx
cmp eax, ecx
mov ecx, dword [esp + 0x28]
jae 0x1b4937
mov esi, dword [esp + 0x10]
cmp ecx, edi
jae 0x1b4937
mov esi, dword [esp + 0x10]
mov dword [esp + 0x18], ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [ecx], 0
je 0x1b4937
lea eax, [esp + 0x50]
push eax
push edi
push ecx
mov ebx, ecx
call fcn.001b0ce0
add esp, 0xc
movzx ecx, word [esp + 0x50]
mov word [esi], cx
add esi, 2
cmp esi, dword [esp + 0x1c]
jae 0x1b4933
add ebx, eax
cmp ebx, edi
mov ecx, ebx
mov ebx, dword [esp + 0x18]
jb 0x1b4370
jmp 0x1b4937
mov word [esp + 0x2c], 0x9682
mov byte [esp + 0x2e], 0x16
mov dword [esp + 0x2f], 0
mov dword [esp + 0x14], 0
mov eax, dword [esp + 0x14]
cmp eax, 6
ja 0x1b4426
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
movzx eax, byte [esp + eax + 0x2c]
mov edx, ecx
not edx
or edx, 0x67caee06
add edx, ecx
xor ecx, 0x67caee06
lea ecx, [ecx + edx*2]
add ecx, 2
xor ecx, eax
mov dword [esp + 0x38], ecx
mov eax, dword [esp + 0x38]
add al, 0xe2
mov ecx, dword [esp + 0x14]
mov byte [esp + ecx + 0x2c], al
inc dword [esp + 0x14]
mov eax, dword [esp + 0x14]
cmp eax, 7
jb 0x1b43e0
push 3
lea eax, [esp + 0x30]
push eax
push ebx
call fcn.001a45d0
add esp, 0xc
xor ecx, ecx
test eax, eax
sete cl
jmp dword [ecx*4 + 0x1eb88c]
mov word [esp + 0x50], 0xcb55
lea eax, [esp + 0x54]
mov byte [eax + 2], 0
mov dword [eax - 2], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 6
ja 0x1b44b3
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x50]
add eax, 0x76a80fd3
xor eax, ecx
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0xb8]
mov ecx, eax
xor ecx, 0x1f
and eax, 0x60
add eax, eax
sub eax, ecx
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 7
jb 0x1b4470
push edi
push ebx
call fcn.001a4350
add esp, 8
mov dword [esp + 0x18], eax
mov word [esp + 0x50], 0x3140
lea eax, [esp + 0x54]
mov word [eax + 2], 0
mov dword [eax - 2], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 7
ja 0x1b4548
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 4]
mov eax, dword [esp + 4]
movzx eax, byte [esp + eax + 0x50]
mov edx, ecx
not edx
or edx, 0xd3f534
add edx, ecx
xor ecx, 0xd3f534
lea ecx, [ecx + edx*2]
add ecx, 2
xor ecx, eax
mov dword [esp + 0xb8], ecx
mov eax, dword [esp + 0xb8]
mov ecx, eax
not ecx
and ecx, 4
and eax, 0xfb
sub eax, ecx
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 8
jb 0x1b44f0
push edi
push ebx
call fcn.001a4350
add esp, 8
mov dword [esp + 0x24], eax
mov word [esp + 0x50], 0xbb17
mov dword [esp + 0x52], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 5
ja 0x1b45cc
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 4]
mov eax, dword [esp + 4]
movzx eax, byte [esp + eax + 0x50]
mov edx, ecx
not edx
or edx, 0x7e53c99f
add edx, ecx
xor ecx, 0xfe53c99f
lea ecx, [ecx + edx*2]
add ecx, 2
xor ecx, eax
mov dword [esp + 0xb8], ecx
mov eax, dword [esp + 0xb8]
add al, 0xe5
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 6
jb 0x1b4580
push edi
push ebx
call fcn.001a4420
add esp, 8
mov dword [esp + 0x28], eax
mov word [esp + 0x50], 0x39a6
lea eax, [esp + 0x54]
mov byte [eax], 0
mov word [eax - 2], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 4
ja 0x1b4670
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x50]
mov edx, eax
xor edx, 0x40a6000a
and eax, 0xc0a6000a
lea edx, [edx + eax*2]
lea eax, [edx + ecx]
mov esi, ecx
not esi
or esi, edx
add ecx, esi
inc ecx
mov esi, ecx
xor esi, eax
mov edx, ecx
not edx
and eax, edx
add eax, eax
sub eax, esi
mov esi, eax
not esi
and esi, ecx
and eax, edx
sub eax, esi
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0xb8]
mov ecx, eax
xor ecx, 0x32
and eax, 0x4d
add eax, eax
sub eax, ecx
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 5
jb 0x1b4600
push edi
push ebx
call fcn.001a4350
add esp, 8
mov dword [esp + 0x104], eax
mov dword [esp + 4], 0x768
mov dword [esp + 0xb8], 0
mov eax, dword [esp + 0xb8]
cmp eax, 3
ja 0x1b4718
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xb8]
movzx ecx, byte [esp + ecx + 4]
mov edx, eax
not edx
or edx, 0x20004781
add edx, eax
xor eax, 0xa0004781
lea esi, [eax + edx*2]
lea eax, [eax + edx*2]
add eax, 2
lea edx, [ecx + esi]
add edx, 2
and eax, ecx
mov ecx, edx
not ecx
and ecx, eax
add ecx, eax
not eax
and eax, edx
sub eax, ecx
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x50]
mov ecx, eax
xor ecx, 0x85
and eax, 0x7a
add eax, eax
sub eax, ecx
mov ecx, dword [esp + 0xb8]
mov byte [esp + ecx + 4], al
inc dword [esp + 0xb8]
mov eax, dword [esp + 0xb8]
cmp eax, 4
jb 0x1b46a0
lea eax, [esp + 4]
push eax
push ebx
call fcn.001a43b0
add esp, 8
mov word [esp + 0x50], 0xe616
mov byte [esp + 0x52], 0x7a
mov dword [esp + 0x53], 0
fnstcw word [esp + 0x10e]
movzx eax, word [esp + 0x10e]
or eax, 0xc00
mov word [esp + 0x122], ax
fldcw word [esp + 0x122]
fistp dword [esp + 0x12c]
fldcw word [esp + 0x10e]
mov eax, dword [esp + 0x12c]
mov dword [esp + 0x40], eax
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 6
ja 0x1b47c9
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x50]
add eax, 0x215aeb
xor eax, ecx
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0xb8]
add al, 0x69
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 7
jb 0x1b4790
push edi
push ebx
call fcn.001a43b0
add esp, 8
xor edi, edi
mov ebx, 0xfffffffe
mov eax, dword [esp + 0x18]
nop
nop
add ebx, 2
cmp byte [eax + edi], 0
lea edi, [edi + 1]
jne 0x1b47e0
fnstcw word [esp + 0x10c]
movzx eax, word [esp + 0x10c]
or eax, 0xc00
mov word [esp + 0x120], ax
fldcw word [esp + 0x120]
fistp dword [esp + 0x128]
fldcw word [esp + 0x10c]
mov eax, dword [esp + 0x128]
mov dword [esp + 0x34], eax
lea eax, [ebx + 2]
test edi, edi
jns 0x1b4834
mov eax, 0xffffffff
push eax
call fcn.001ac630
add esp, 4
mov dword [esp + 0x50], 0
add ebx, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], eax
cmp eax, ebx
mov ecx, dword [esp + 0x18]
jae 0x1b48a4
lea esi, [ecx + edi]
dec esi
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x10], eax
cmp ecx, esi
jae 0x1b48a4
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x10], eax
cmp byte [ecx], 0
je 0x1b48a4
lea eax, [esp + 0x50]
push eax
push esi
push ecx
mov edi, ecx
call fcn.001b0ce0
add esp, 0xc
movzx ecx, word [esp + 0x50]
mov edx, dword [esp + 0x10]
mov word [edx], cx
add edx, 2
mov dword [esp + 0x10], edx
cmp edx, ebx
jae 0x1b48a4
add edi, eax
cmp edi, esi
mov ecx, edi
jb 0x1b486f
mov eax, dword [esp + 0x10]
mov word [eax], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xbc], 0
mov dword [esp + 0xb8], 0
lea ecx, [esp + 0xb8]
mov esi, dword [esp + 0x1c]
push esi
call fcn.001dea50
jmp dword [0x1eb894]
push esi
call fcn.001ac640
add esp, 4
lea ecx, [esp + 0xb8]
push 0x400
call fcn.001decf0
not eax
shr eax, 0x1f
lea edi, [esp + 0x50]
mov esi, dword [esp + 0x44]
jmp dword [eax*4 + 0x1eb89c]
mov dword [esp + 0x38], 0
mov esi, dword [esp + 0xb8]
jmp dword [0x1eb8a4]
mov ebx, dword [esp + 0x18]
mov word [esi], 0
lea eax, [esp + 4]
push eax
push 0
push 0
push ebx
push dword [esp + 0x20]
push 0
call dword [0x1f1b9c]
mov edi, dword [esp + 4]
jmp dword [0x1eb808]
mov eax, 0xffffffff
test edi, edi
js 0x1b4968
lea eax, [edi + edi]
push eax
call fcn.001ac630
add esp, 4
lea ecx, [esp + 4]
push ecx
push edi
push eax
push ebx
push dword [esp + 0x20]
push 0
call dword [0x1f1b9c]
jmp case.0x1b3f07.3
push eax
call fcn.001ac630
add esp, 4
mov esi, eax
lea eax, [esp + 4]
push eax
push dword [esp + 8]
push esi
push ebx
push dword [esp + 0x20]
push 0
call dword [0x1f1b9c]
jmp dword [0x1eb810]
mov eax, 0xffffffff
test edi, edi
js 0x1b4990
lea eax, [edi + edi]
jmp 0x1b4990
mov dword [esp + 0x34], esi
jmp dword [0x1eb814]
push dword [esp + 0x10]
call fcn.001ac640
add esp, 4
mov ecx, dword [esp + 0x48]
mov eax, ecx
jmp 0x1b5e5f
mov ecx, dword [esp + 0x48]
mov esi, ecx
jmp 0x1b5e57
mov eax, edi
mov edi, esi
mov dword [esp + 0x24], eax
sub edi, eax
sar edi, 1
mov eax, edi
mov edx, dword [esp + 0x18]
and eax, edx
xor edx, edi
lea ecx, [edx + eax*2]
and edx, 1
or ecx, 1
add ecx, edx
lea eax, [ecx + ecx]
test ecx, ecx
jns 0x1b4a1f
mov eax, 0xffffffff
push eax
call fcn.001ac630
add esp, 4
mov ebx, eax
mov dword [esp + 0x10], eax
cmp esi, dword [esp + 0x24]
je 0x1b4adb
mov eax, dword [esp + 0x48]
mov eax, dword [eax + 4]
lea ecx, [edi - 1]
mov edx, edi
and edx, 3
je 0x1b4a80
mov dword [esp + 0x24], edi
mov dword [esp + 0x18], ecx
xor esi, esi
mov ebx, dword [esp + 0x10]
movzx ecx, word [eax]
mov edi, edx
xor edx, edx
test cx, cx
setne dl
lea eax, [eax + edx*2]
mov edx, edi
mov word [ebx], cx
add ebx, 2
inc esi
cmp edi, esi
jne 0x1b4a57
mov edi, dword [esp + 0x24]
sub edi, esi
mov ecx, dword [esp + 0x18]
jmp 0x1b4a84
mov ebx, dword [esp + 0x10]
cmp ecx, 3
jb 0x1b4adb
movzx ecx, word [eax]
xor edx, edx
test cx, cx
setne dl
mov word [ebx], cx
lea ecx, [eax + edx*2]
movzx eax, word [eax + edx*2]
xor edx, edx
test ax, ax
setne dl
mov word [ebx + 2], ax
lea eax, [ecx + edx*2]
movzx ecx, word [ecx + edx*2]
xor edx, edx
test cx, cx
setne dl
mov word [ebx + 4], cx
lea ecx, [eax + edx*2]
movzx edx, word [eax + edx*2]
xor eax, eax
test dx, dx
setne al
lea eax, [ecx + eax*2]
mov word [ebx + 6], dx
add ebx, 8
add edi, 0xfffffffc
jne 0x1b4a89
mov edx, dword [esp + 0x1c]
movzx eax, word [edx]
test ax, ax
je 0x1b4b6c
mov ecx, edx
add ecx, 2
mov esi, dword [esp + 0x10]
mov word [ebx], ax
add ebx, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1b4af4
mov word [ebx], 0
jmp dword [0x1eb8ec]
push edx
call fcn.001ac640
add esp, 4
sub ebx, esi
mov eax, 0xffffffff
cmp ebx, 0xfffffffe
jl 0x1b4b2a
add ebx, 2
mov eax, ebx
push eax
call fcn.001ac630
add esp, 4
mov dword [esp + 0x4c], eax
push eax
push esi
call fcn.001dbba0
add esp, 8
jmp dword [0x1eb8f4]
push esi
call fcn.001ac640
add esp, 4
mov ecx, dword [esp + 0x104]
mov eax, ecx
jmp 0x1b5f79
mov ecx, dword [esp + 0x104]
mov edi, ecx
jmp 0x1b5f71
mov esi, dword [esp + 0x10]
mov word [ebx], 0
jmp dword [0x1eb8ec]
push dword [esp + 0x24]
call fcn.001ac640
add esp, 4
jmp dword [0x1eb92c]
mov ecx, dword [esp + 0x24]
mov eax, ecx
mov esi, eax
inc eax
cmp byte [esi], 0
jne 0x1b4b93
mov edx, esi
sub edx, ecx
mov eax, edx
and eax, 1
mov dword [esp + 0x18], edx
mov ecx, edx
xor ecx, 1
lea edi, [ecx + eax*2]
lea eax, [edi + edi]
test edi, edi
jns 0x1b4bbc
mov eax, 0xffffffff
push eax
call fcn.001ac630
add esp, 4
mov dword [esp + 0x50], 0
lea ecx, [eax + edi*2]
add ecx, 0xfffffffe
mov edi, eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x10], ecx
cmp eax, ecx
mov ebx, dword [esp + 0x24]
jae 0x1b4c1c
mov edi, dword [esp + 0x1c]
cmp ebx, esi
jae 0x1b4c1c
mov edi, dword [esp + 0x1c]
cmp byte [ebx], 0
je 0x1b4c1c
lea eax, [esp + 0x50]
push eax
push esi
push ebx
call fcn.001b0ce0
add esp, 0xc
movzx ecx, word [esp + 0x50]
mov word [edi], cx
add edi, 2
cmp edi, dword [esp + 0x10]
jae 0x1b4c1c
add ebx, eax
cmp ebx, esi
jb 0x1b4bf1
mov word [edi], 0
mov eax, dword [esp + 0x48]
mov edi, dword [eax + 4]
movzx eax, word [eax]
and eax, 0xfffffffe
add eax, edi
add eax, 0xfffffffe
xor edx, edx
cmp eax, edi
setae dl
mov esi, eax
mov ecx, eax
jmp dword [edx*4 + 0x1eb8d4]
movzx edx, word [ecx]
xor ebx, ebx
test dx, dx
setne bl
mov esi, eax
jmp dword [ebx*4 + 0x1eb8dc]
xor ebx, ebx
cmp dx, 0x5c
sete bl
mov esi, ecx
jmp dword [ebx*4 + 0x1eb8e4]
add ecx, 0xfffffffe
xor edx, edx
cmp ecx, edi
setae dl
mov esi, eax
jmp dword [edx*4 + 0x1eb8d4]
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
add ecx, 0xc
xor edx, edx
cmp ecx, esi
sete dl
jmp dword [edx*4 + 0x1eb9e4]
push dword [esp + 0x28]
call fcn.001ac640
add esp, 4
mov esi, dword [esp + 0x44]
jmp dword [0x1eb85c]
mov word [esp + 0x50], 0x8938
lea eax, [esp + 0x54]
mov byte [eax], 0
mov word [eax - 2], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 4
ja 0x1b4d3e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 4]
mov eax, dword [esp + 4]
movzx eax, byte [esp + eax + 0x50]
lea edx, [ecx + ecx]
and edx, 0x13f63844
sub ecx, edx
add ecx, 0x89fb1c22
mov esi, ecx
and esi, edx
xor ecx, edx
lea ecx, [ecx + esi*2]
xor ecx, eax
mov dword [esp + 0xb8], ecx
mov eax, dword [esp + 0xb8]
add al, 0x56
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 5
jb 0x1b4cf0
push edi
push ebx
call fcn.001a4350
add esp, 8
mov dword [esp + 0x18], eax
mov word [esp + 0x50], 0x8906
lea eax, [esp + 0x54]
mov word [eax + 2], 0
mov dword [eax - 2], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 7
ja 0x1b4de1
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x50]
mov edx, eax
xor edx, 0x865439a2
and eax, 0x65439a2
lea edx, [edx + eax*2]
lea eax, [edx + ecx]
mov esi, ecx
not esi
or esi, edx
lea edx, [ecx + esi]
add ecx, esi
inc ecx
mov esi, eax
not esi
and esi, ecx
not ecx
and ecx, eax
lea eax, [esi + edx]
inc eax
sub ecx, eax
mov dword [esp + 0xb8], ecx
mov eax, dword [esp + 0xb8]
add al, 0xd6
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 8
jb 0x1b4d80
push edi
push ebx
call fcn.001a4350
add esp, 8
jmp dword [0x1eb9c4]
mov ebx, dword [esp + 0x18]
test ebx, ebx
sete dl
test eax, eax
sete cl
or cl, dl
movzx ecx, cl
mov esi, dword [esp + 0x44]
jmp dword [ecx*4 + 0x1eb9cc]
mov ecx, ebx
mov edx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, ecx
inc ecx
cmp byte [esi], 0
jne 0x1b4e20
mov dword [esp + 0x1c], eax
xor ebx, ebx
cmp esi, edx
jbe 0x1b4e67
cmp byte [edx], 0
je 0x1b4e67
xor ebx, ebx
mov edi, dword [esp + 0x18]
nop
nop
nop
mov dword [esp + 0x50], 0
lea eax, [esp + 0x50]
push eax
push esi
push edi
call fcn.001b0ce0
add esp, 0xc
lea ecx, [edi + eax]
inc ebx
cmp ecx, esi
jae 0x1b4e67
cmp byte [edi + eax], 0
mov edi, ecx
jne 0x1b4e40
mov eax, ebx
inc eax
lea eax, [ebx + ebx + 2]
jns 0x1b4e75
mov eax, 0xffffffff
push eax
call fcn.001ac630
add esp, 4
mov dword [esp + 0x50], 0
lea ecx, [eax + ebx*2]
mov ebx, eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x10], ecx
cmp eax, ecx
mov eax, dword [esp + 0x1c]
mov edi, dword [esp + 0x18]
jae 0x1b5034
mov ebx, dword [esp + 0x4c]
cmp edi, esi
jae 0x1b5034
mov ebx, dword [esp + 0x4c]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [edi], 0
je 0x1b5034
lea eax, [esp + 0x50]
push eax
push esi
push edi
call fcn.001b0ce0
add esp, 0xc
movzx ecx, word [esp + 0x50]
mov word [ebx], cx
add ebx, 2
cmp ebx, dword [esp + 0x10]
jae 0x1b5030
add edi, eax
cmp edi, esi
mov eax, dword [esp + 0x1c]
jb 0x1b4ec0
jmp 0x1b5034
mov word [esp + 0x50], 0x8938
lea eax, [esp + 0x54]
mov byte [eax], 0
mov word [eax - 2], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 4
ja 0x1b4f7e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 4]
mov eax, dword [esp + 4]
movzx eax, byte [esp + eax + 0x50]
lea edx, [ecx + ecx]
and edx, 0x13f63844
sub ecx, edx
add ecx, 0x89fb1c22
mov esi, ecx
and esi, edx
xor ecx, edx
lea ecx, [ecx + esi*2]
xor ecx, eax
mov dword [esp + 0xb8], ecx
mov eax, dword [esp + 0xb8]
add al, 0x56
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 5
jb 0x1b4f30
push edi
push ebx
call fcn.001a4350
add esp, 8
mov word [esp + 0x50], 0x8906
lea eax, [esp + 0x54]
mov word [eax + 2], 0
mov dword [eax - 2], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 7
ja 0x1b5021
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x50]
mov edx, eax
xor edx, 0x865439a2
and eax, 0x65439a2
lea edx, [edx + eax*2]
lea eax, [edx + ecx]
mov esi, ecx
not esi
or esi, edx
lea edx, [ecx + esi]
add ecx, esi
inc ecx
mov esi, eax
not esi
and esi, ecx
not ecx
and ecx, eax
lea eax, [esi + edx]
inc eax
sub ecx, eax
mov dword [esp + 0xb8], ecx
mov eax, dword [esp + 0xb8]
add al, 0xd6
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 8
jb 0x1b4fc0
push edi
push ebx
call fcn.001a4350
add esp, 8
jmp case.0x1b4c3e.59
mov eax, dword [esp + 0x1c]
mov word [ebx], 0
xor edi, edi
mov esi, 0xfffffffe
add esi, 2
cmp byte [eax + edi], 0
lea edi, [edi + 1]
jne 0x1b5040
lea eax, [esi + 2]
test edi, edi
jns 0x1b5058
mov eax, 0xffffffff
push eax
call fcn.001ac630
add esp, 4
mov dword [esp + 0x50], 0
add esi, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x34], eax
cmp eax, esi
mov ecx, dword [esp + 0x1c]
jae 0x1b50d5
lea ebx, [ecx + edi]
dec ebx
mov eax, dword [esp + 0x34]
mov dword [esp + 0x10], eax
cmp ecx, ebx
jae 0x1b50d5
mov eax, dword [esp + 0x34]
mov dword [esp + 0x10], eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [ecx], 0
je 0x1b50d5
lea eax, [esp + 0x50]
push eax
push ebx
push ecx
mov edi, ecx
call fcn.001b0ce0
add esp, 0xc
movzx ecx, word [esp + 0x50]
mov edx, dword [esp + 0x10]
mov word [edx], cx
add edx, 2
mov dword [esp + 0x10], edx
cmp edx, esi
jae 0x1b50d5
add edi, eax
cmp edi, ebx
mov ecx, edi
jb 0x1b50a0
mov eax, dword [esp + 0x10]
mov word [eax], 0
mov word [esp + 0x50], 0x1703
mov byte [esp + 0x52], 0x9e
mov word [esp + 0x53], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 4
ja 0x1b5171
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x50]
mov edx, eax
xor edx, 0x178585a5
and eax, 0x178585a5
lea edx, [edx + eax*2]
lea eax, [edx + ecx]
mov esi, ecx
not esi
or esi, edx
lea edx, [ecx + esi]
add ecx, esi
inc ecx
mov esi, eax
not esi
and esi, ecx
not ecx
and ecx, eax
lea eax, [esi + edx]
inc eax
sub ecx, eax
mov dword [esp + 0xb8], ecx
mov eax, dword [esp + 0xb8]
add al, 0xc7
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 5
jb 0x1b5110
lea edi, [esp + 0x50]
push edi
push dword [ebp + 8]
call fcn.001a4420
add esp, 8
xor ecx, ecx
mov dword [esp + 0x28], eax
test eax, eax
setne cl
mov dword [esp + 0x18], 0
xor ebx, ebx
jmp dword [ecx*4 + 0x1eb9d4]
push dword [esp + 0x28]
call fcn.001a4630
add esp, 4
mov ebx, eax
mov ecx, 0xc
mul ecx
seto dl
mov ecx, 0xffffffff
mov esi, 0xffffffff
add eax, 4
jb 0x1b51c6
mov esi, eax
test dl, dl
jne 0x1b51cc
mov ecx, esi
push ecx
call fcn.001ac630
add esp, 4
mov dword [eax], ebx
add eax, 4
xor ecx, ecx
test ebx, ebx
sete cl
mov dword [esp + 0x40], ebx
jmp dword [ecx*4 + 0x1eb9dc]
lea ecx, [ebx + ebx*2]
lea esi, [eax + ecx*4]
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
lea ecx, [eax + 0xc]
xor edx, edx
cmp ecx, esi
sete dl
jmp dword [edx*4 + 0x1eb9e4]
mov dword [esp + 0x18], eax
xor ecx, ecx
xor eax, eax
mov dword [esp + 0x1c], 0
cmp ecx, ebx
setb al
jmp dword [eax*4 + 0x1eb9ec]
jmp dword [0x1eba00]
mov dword [esp + 0x40], ebx
mov esi, dword [esp + 0x4c]
mov ebx, dword [esp + 0x18]
jmp dword [0x1eba14]
mov ecx, edi
push 3
call fcn.001acfb0
push dword [esp + 0x40]
push ebx
push dword [esp + 0x3c]
push esi
push edi
call fcn.001bfae0
add esp, 0x14
mov ecx, edi
call fcn.001ad8b0
nop
nop
nop
nop
nop
mov ecx, edi
push 3
call fcn.001acfb0
push dword [esp + 0x40]
push ebx
push dword [esp + 0x3c]
push esi
push edi
call fcn.001bfae0
add esp, 0x14
mov ecx, edi
call fcn.001ad8b0
jmp dword [0x1eba1c]
mov edx, esi
xor eax, eax
test ebx, ebx
sete al
jmp dword [eax*4 + 0x1eba24]
lea esi, [ebx - 4]
mov eax, dword [ebx - 4]
lea ecx, [eax + eax*2]
lea edi, [ebx + ecx*4]
xor ecx, ecx
test eax, eax
sete cl
mov ebx, edx
jmp dword [ecx*4 + 0x1eba2c]
push esi
call fcn.001ac640
add esp, 4
lea edi, [esp + 0x50]
mov esi, dword [esp + 0x44]
jmp dword [0x1eba3c]
jmp dword [0x1eba44]
mov edx, dword [esp + 0x1c]
inc edx
xor eax, eax
mov ebx, dword [esp + 0x40]
mov ecx, edx
mov dword [esp + 0x1c], edx
cmp edx, ebx
setb al
jmp dword [eax*4 + 0x1eb9ec]
jmp dword [0x1eba04]
push dword [esp + 0x1c]
push dword [esp + 0x2c]
call fcn.001a4640
add esp, 8
mov ebx, eax
mov word [esp + 0x50], 0x475d
mov byte [esp + 0x52], 0xf2
mov dword [esp + 0x53], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 6
ja 0x1b53a4
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x50]
mov edx, eax
xor edx, 0x9ac43bd4
and eax, 0x1ac43bd4
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0xb8]
add al, 0xdc
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 7
jb 0x1b5360
push edi
push ebx
call fcn.001a4350
add esp, 8
mov edi, eax
mov word [esp + 0x50], 0x876d
mov byte [esp + 0x52], 0xe
mov word [esp + 0x53], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 4
ja 0x1b5438
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 4]
mov eax, dword [esp + 4]
movzx eax, byte [esp + eax + 0x50]
mov edx, ecx
not edx
or edx, 0x2e03c502
add edx, ecx
xor ecx, 0xae03c502
lea esi, [ecx + edx*2]
lea ecx, [ecx + edx*2]
add ecx, 2
and ecx, eax
add eax, esi
add eax, 2
add ecx, ecx
sub eax, ecx
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0xb8]
add al, 0xf6
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 5
jb 0x1b53e0
lea eax, [esp + 0x50]
push eax
push ebx
call fcn.001a4350
add esp, 8
mov dword [esp + 0x24], eax
mov word [esp + 0x50], 0x1505
mov byte [esp + 0x52], 0x96
lea eax, [esp + 0x54]
mov byte [eax + 1], 0
mov word [eax - 1], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 5
ja 0x1b54db
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x50]
mov edx, eax
xor edx, 0xe3967a66
mov esi, eax
xor esi, 0x1c698599
or eax, 0x63967a66
and eax, esi
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0xb8]
mov ecx, eax
xor ecx, 0xfe
and eax, 1
add eax, eax
sub eax, ecx
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 6
jb 0x1b5480
lea eax, [esp + 0x50]
push eax
push ebx
call fcn.001a4350
add esp, 8
mov ecx, dword [esp + 0x1c]
lea ecx, [ecx + ecx*2]
mov edx, dword [esp + 0x18]
mov dword [edx + ecx*4], 0
mov dword [edx + ecx*4 + 4], edi
lea edi, [edx + ecx*4]
mov dword [edx + ecx*4 + 8], eax
xor esi, esi
mov ebx, 0xfffffffe
mov eax, dword [esp + 0x24]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add ebx, 2
cmp byte [eax + esi], 0
lea esi, [esi + 1]
jne 0x1b5520
test esi, esi
jns 0x1b5540
mov eax, 0xffffffff
jmp 0x1b5543
lea eax, [ebx + 2]
push eax
call fcn.001ac630
add esp, 4
mov dword [edi], eax
mov ecx, dword [esp + 0x24]
lea edi, [ecx + esi]
dec edi
mov dword [esp + 0x50], 0
cmp edi, ecx
mov dword [esp + 0x10], eax
jbe 0x1b55b0
add ebx, eax
cmp eax, ebx
jae 0x1b55b0
nop
nop
nop
nop
cmp byte [ecx], 0
je 0x1b55b0
lea eax, [esp + 0x50]
push eax
push edi
push ecx
mov esi, ecx
call fcn.001b0ce0
add esp, 0xc
movzx ecx, word [esp + 0x50]
mov edx, dword [esp + 0x10]
mov word [edx], cx
add edx, 2
mov dword [esp + 0x10], edx
cmp edx, ebx
jae 0x1b55b0
add esi, eax
cmp esi, edi
mov ecx, esi
jb 0x1b5570
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x10]
mov word [eax], 0
lea edi, [esp + 0x50]
jmp case.0x1b4c3e.76
lea edi, [esp + 0x50]
mov word [edx], 0
jmp dword [0x1eba0c]
push dword [esp + 0x1c]
push dword [esp + 0x2c]
call fcn.001a4640
add esp, 8
mov esi, eax
mov word [esp + 0x50], 0x475d
mov byte [esp + 0x52], 0xf2
mov dword [esp + 0x53], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 6
ja 0x1b5654
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x50]
mov edx, eax
xor edx, 0x9ac43bd4
and eax, 0x1ac43bd4
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0xb8]
add al, 0xdc
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 7
jb 0x1b5610
push edi
push esi
call fcn.001a4350
add esp, 8
mov ebx, eax
mov word [esp + 0x50], 0x876d
mov byte [esp + 0x52], 0xe
mov word [esp + 0x53], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 4
ja 0x1b56e8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 4]
mov eax, dword [esp + 4]
movzx eax, byte [esp + eax + 0x50]
mov edx, ecx
not edx
or edx, 0x2e03c502
add edx, ecx
xor ecx, 0xae03c502
lea edi, [ecx + edx*2]
lea ecx, [ecx + edx*2]
add ecx, 2
and ecx, eax
add eax, edi
add eax, 2
add ecx, ecx
sub eax, ecx
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0xb8]
add al, 0xf6
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 5
jb 0x1b5690
lea eax, [esp + 0x50]
push eax
push esi
call fcn.001a4350
add esp, 8
mov dword [esp + 0x10], eax
mov word [esp + 0x50], 0x1505
mov byte [esp + 0x52], 0x96
lea eax, [esp + 0x54]
mov byte [eax + 1], 0
mov word [eax - 1], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 5
ja 0x1b578b
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x50]
mov edx, eax
xor edx, 0xe3967a66
mov edi, eax
xor edi, 0x1c698599
or eax, 0x63967a66
and eax, edi
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0xb8]
mov ecx, eax
xor ecx, 0xfe
and eax, 1
add eax, eax
sub eax, ecx
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 6
jb 0x1b5730
lea eax, [esp + 0x50]
push eax
push esi
call fcn.001a4350
add esp, 8
mov ecx, dword [esp + 0x1c]
lea ecx, [ecx + ecx*2]
mov edx, dword [esp + 0x18]
mov dword [edx + ecx*4], 0
mov dword [edx + ecx*4 + 4], ebx
lea esi, [edx + ecx*4]
mov dword [edx + ecx*4 + 8], eax
xor edi, edi
mov ebx, 0xfffffffe
mov eax, dword [esp + 0x10]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add ebx, 2
cmp byte [eax + edi], 0
lea edi, [edi + 1]
jne 0x1b57d0
test edi, edi
jns 0x1b57f0
mov eax, 0xffffffff
jmp 0x1b57f3
lea eax, [ebx + 2]
push eax
call fcn.001ac630
add esp, 4
mov edx, eax
mov dword [esi], eax
mov eax, dword [esp + 0x10]
lea esi, [eax + edi]
dec esi
mov dword [esp + 0x50], 0
cmp esi, eax
jbe 0x1b55c0
add ebx, edx
cmp edx, ebx
lea edi, [esp + 0x50]
jae 0x1b55c4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [eax], 0
je 0x1b55c4
push edi
push esi
push eax
mov edi, eax
mov dword [esp + 0x1c], edx
call fcn.001b0ce0
mov edx, dword [esp + 0x1c]
add esp, 0xc
movzx ecx, word [esp + 0x50]
mov word [edx], cx
add edx, 2
cmp edx, ebx
jae 0x1b55c0
add edi, eax
cmp edi, esi
mov eax, edi
lea edi, [esp + 0x50]
jb 0x1b5830
jmp 0x1b55c4
add edi, 0xfffffff4
xor eax, eax
cmp edi, dword [esp + 0x18]
sete al
jmp dword [eax*4 + 0x1eba34]
mov eax, dword [edi - 0xc]
test eax, eax
je 0x1b5880
push eax
call fcn.001ac640
add esp, 4
jmp 0x1b5880
mov esi, dword [esp + 0x44]
mov ebx, edx
jmp dword [0x1eba3c]
push ebx
call fcn.001ac640
add esp, 4
jmp dword [0x1eba44]
push ebx
call fcn.001a4630
add esp, 4
xor ecx, ecx
cmp esi, eax
setb cl
jmp dword [ecx*4 + 0x1eb81c]
mov dword [esp + 0x1c], esi
push esi
push ebx
call fcn.001a4610
add esp, 8
push eax
call fcn.001a4390
add esp, 4
mov esi, eax
xor eax, eax
test esi, esi
sete al
jmp dword [eax*4 + 0x1eb83c]
mov eax, esi
mov edi, eax
inc eax
cmp byte [edi], 0
jne 0x1b5900
mov ebx, edi
sub ebx, esi
mov eax, ebx
inc eax
jns 0x1b5920
mov eax, 0xffffffff
jmp 0x1b5927
lea eax, [ebx*2 + 2]
push eax
call fcn.001ac630
add esp, 4
mov dword [esp + 0xb8], 0
lea ecx, [eax + ebx*2]
mov ebx, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], ecx
cmp eax, ecx
jae 0x1b59a0
mov ebx, dword [esp + 0x18]
cmp esi, edi
jae 0x1b59a0
mov ebx, dword [esp + 0x18]
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [esi], 0
je 0x1b59a0
lea eax, [esp + 0xb8]
push eax
push edi
push esi
call fcn.001b0ce0
add esp, 0xc
movzx ecx, word [esp + 0xb8]
mov word [ebx], cx
add ebx, 2
cmp ebx, dword [esp + 0x10]
jae 0x1b59a0
add esi, eax
cmp esi, edi
jb 0x1b5960
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
xor eax, eax
cmp dword [esp + 0x104], 0
setg al
mov word [ebx], 0
push 0
push eax
push dword [esp + 0x2c]
push dword [esp + 0x58]
mov esi, dword [esp + 0x28]
push esi
push dword [esp + 0x48]
push dword [esp + 0x40]
lea edi, [esp + 0x6c]
push edi
call fcn.001c1c60
add esp, 0x20
mov ebx, dword [esp + 0x40]
jmp dword [0x1eb844]
push esi
call fcn.001ac640
add esp, 4
nop
nop
nop
nop
nop
nop
jmp dword [0x1eb854]
mov esi, dword [esp + 0x1c]
inc esi
jmp case.0x1b067b.112
jmp dword [0x1eb834]
mov esi, dword [esp + 0x44]
jmp dword [0x1eb85c]
push dword [esp + 0x34]
call fcn.001ac640
add esp, 4
mov ecx, edi
call fcn.001ad8b0
jmp case.0x1b4c3e.57
xor ecx, ecx
cmp eax, 0xc0000004
sete cl
jmp dword [ecx*4 + 0x1eb8c4]
mov eax, dword [esp + 0x38]
add eax, 2
push eax
call fcn.001de8e0
add esp, 4
mov dword [esp + 0x48], eax
mov edx, dword [esp + 0x38]
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x50], 0x80878685
lea eax, [esp + 0x54]
mov byte [eax + 2], 0
mov word [eax], 0
add edx, 2
mov dword [esp + 0x2c], 0
mov eax, dword [esp + 0x2c]
cmp eax, 6
ja 0x1b5ad3
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + 0x2c]
movzx esi, byte [esp + esi + 0x50]
mov edi, eax
xor edi, 0xfa434561
and eax, 0xfa434561
lea eax, [edi + eax*2]
lea edi, [eax + esi]
and eax, esi
add eax, eax
sub edi, eax
mov dword [esp + 4], edi
mov eax, dword [esp + 4]
mov esi, eax
xor esi, 0xe5
and eax, 0x1a
add eax, eax
sub eax, esi
mov esi, dword [esp + 0x2c]
mov byte [esp + esi + 0x50], al
inc dword [esp + 0x2c]
mov eax, dword [esp + 0x2c]
cmp eax, 7
jb 0x1b5a81
mov eax, dword [esp + 0x50]
mov esi, dword [0x1f1ba0]
test esi, esi
je case.default.0x1b5b21
xor edi, edi
mov ebx, dword [0x1f1ba4]
cmp dword [ebx + edi*8], 0x1b788dcf
je 0x1b5af9
inc edi
cmp esi, edi
jne 0x1b5ae9
jmp case.default.0x1b5b21
mov esi, dword [ebx + edi*8 + 4]
cmp esi, eax
je case.default.0x1b5b21
push 0
push edx
push dword [esp + 0x50]
push 0x2b
push ecx
push 5
push dword [0x1f1ba8]
push esi
call fcn.001e1c60
add esp, 0x20
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x1eb8cc]
jmp dword [0x1eb904]
jmp dword [0x1eb92c]
push dword [esp + 0x4c]
call fcn.001ac640
add esp, 4
mov ecx, edi
call fcn.001ad8b0
mov ecx, edi
call fcn.001acff0
push dword [esp + 0x48]
call fcn.001de970
add esp, 4
lea edi, [esp + 0x50]
mov esi, dword [esp + 0x44]
lea ecx, [esp + 0xb8]
call fcn.001deeb0
jmp case.0x1b067b.89
mov dword [esp + 0x50], 0x80878685
lea eax, [esp + 0x54]
mov byte [eax + 2], 0
mov word [eax], 0
mov dword [esp + 0x2c], 0
mov eax, dword [esp + 0x2c]
cmp eax, 6
ja 0x1b5cc2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x2c]
movzx ecx, byte [esp + ecx + 0x50]
mov edx, eax
xor edx, 0xfa434561
and eax, 0xfa434561
lea eax, [edx + eax*2]
lea edx, [eax + ecx]
and eax, ecx
add eax, eax
sub edx, eax
mov dword [esp + 4], edx
mov eax, dword [esp + 4]
mov ecx, eax
xor ecx, 0xe5
and eax, 0x1a
add eax, eax
sub eax, ecx
mov ecx, dword [esp + 0x2c]
mov byte [esp + ecx + 0x50], al
inc dword [esp + 0x2c]
mov eax, dword [esp + 0x2c]
cmp eax, 7
jb 0x1b5c70
mov eax, dword [esp + 0x50]
mov ecx, dword [0x1f1ba0]
test ecx, ecx
je 0x1b5cf0
xor edx, edx
mov edi, dword [0x1f1ba4]
cmp dword [edi + edx*8], 0x1b788dcf
je 0x1b5ce8
inc edx
cmp ecx, edx
jne 0x1b5cd8
jmp 0x1b5cf0
mov ecx, dword [edi + edx*8 + 4]
cmp ecx, eax
jne 0x1b5cf6
jmp dword [0x1eb8ac]
lea eax, [esp + 0x38]
push eax
push 0
push 0
push 0x2b
push esi
push 5
push dword [0x1f1ba8]
push ecx
call fcn.001e1c60
add esp, 0x20
jmp dword [0x1eb8ac]
jmp dword [0x1eb9a8]
push ebx
call fcn.001ac640
add esp, 4
push ebx
call fcn.001ac640
add esp, 4
jmp dword [0x1eb9ac]
mov esi, dword [esp + 0x1c]
mov eax, esi
and eax, 1
xor esi, 1
lea esi, [esi + eax*2]
push ebx
call fcn.001a4630
add esp, 4
xor ecx, ecx
cmp esi, eax
setb cl
jmp dword [ecx*4 + 0x1eb8fc]
jmp dword [0x1eb910]
push esi
call fcn.001ac640
add esp, 4
jmp case.0x1b4c3e.19
mov eax, esi
mov edi, eax
inc eax
cmp byte [edi], 0
jne 0x1b5d70
mov ebx, edi
sub ebx, esi
mov eax, ebx
inc eax
lea eax, [ebx + ebx + 2]
jns 0x1b5d8a
mov eax, 0xffffffff
push eax
call fcn.001ac630
add esp, 4
mov dword [esp + 4], 0
lea ecx, [eax + ebx*2]
mov ebx, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], ecx
cmp eax, ecx
jae 0x1b5deb
mov ebx, dword [esp + 0x18]
cmp esi, edi
jae 0x1b5deb
mov ebx, dword [esp + 0x18]
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [esi], 0
je 0x1b5deb
lea eax, [esp + 4]
push eax
push edi
push esi
call fcn.001b0ce0
add esp, 0xc
movzx ecx, word [esp + 4]
mov word [ebx], cx
add ebx, 2
cmp ebx, dword [esp + 0x10]
jae 0x1b5deb
add esi, eax
cmp esi, edi
jb 0x1b5dc0
mov word [ebx], 0
push 0
push 0
push dword [esp + 0x48]
push dword [esp + 0x40]
mov esi, dword [esp + 0x28]
push esi
push dword [esp + 0x60]
push dword [esp + 0x3c]
lea edi, [esp + 0x6c]
push edi
call fcn.001c1c60
add esp, 0x20
mov ebx, dword [esp + 0x28]
jmp dword [0x1eb924]
push esi
push ebx
call fcn.001a4610
add esp, 8
push esi
push ebx
call fcn.001a4610
add esp, 8
jmp dword [0x1eb914]
mov dword [esp + 0x1c], esi
push eax
call fcn.001a4390
add esp, 4
mov esi, eax
xor eax, eax
test esi, esi
sete al
jmp dword [eax*4 + 0x1eb91c]
lea eax, [esi + 1]
cmp byte [esi], 0
je 0x1b5e63
mov esi, eax
jmp 0x1b5e57
xor edi, edi
cmp esi, ecx
jbe 0x1b5ea7
cmp byte [ecx], 0
je 0x1b5ea7
xor edi, edi
mov ebx, dword [esp + 0x48]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov dword [esp + 0x50], 0
lea eax, [esp + 0x50]
push eax
push esi
push ebx
call fcn.001b0ce0
add esp, 0xc
lea ecx, [ebx + eax]
inc edi
cmp ecx, esi
jae 0x1b5ea7
cmp byte [ebx + eax], 0
mov ebx, ecx
jne 0x1b5e80
mov eax, edi
inc eax
lea eax, [edi + edi + 2]
jns 0x1b5eb5
mov eax, 0xffffffff
push eax
call fcn.001ac630
add esp, 4
mov dword [esp + 0x50], 0
lea ecx, [eax + edi*2]
mov edi, eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x10], ecx
cmp eax, ecx
mov ebx, dword [esp + 0x48]
jae 0x1b5f1b
mov edi, dword [esp + 0x28]
cmp ebx, esi
jae 0x1b5f1b
mov edi, dword [esp + 0x28]
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [ebx], 0
je 0x1b5f1b
lea eax, [esp + 0x50]
push eax
push esi
push ebx
call fcn.001b0ce0
add esp, 0xc
movzx ecx, word [esp + 0x50]
mov word [edi], cx
add edi, 2
cmp edi, dword [esp + 0x10]
jae 0x1b5f1b
add ebx, eax
cmp ebx, esi
jb 0x1b5ef0
mov word [edi], 0
lea edi, [esp + 0x50]
mov ecx, edi
push 1
call fcn.001acfb0
xor esi, esi
mov ebx, dword [esp + 0x40]
jmp case.0x1b067b.112
push dword [esp + 0x34]
call fcn.001ac640
add esp, 4
jmp case.0x1b4c3e.57
push esi
call fcn.001ac640
add esp, 4
push esi
call fcn.001ac640
add esp, 4
jmp dword [0x1eb994]
jmp dword [0x1eb99c]
mov esi, dword [esp + 0x44]
jmp dword [0x1eb9b4]
lea eax, [edi + 1]
cmp byte [edi], 0
je 0x1b5f7d
mov edi, eax
jmp 0x1b5f71
push edi
push ecx
call fcn.001ba7f0
add esp, 8
mov esi, eax
inc eax
lea eax, [esi + esi + 2]
jns 0x1b5f95
mov eax, 0xffffffff
push eax
call fcn.001ac630
add esp, 4
mov dword [esp + 0x50], 0
lea ecx, [eax + esi*2]
mov esi, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x10], ecx
cmp eax, ecx
mov ebx, dword [esp + 0x104]
jae 0x1b5ff5
mov esi, dword [esp + 0x24]
cmp ebx, edi
jae 0x1b5ff5
mov esi, dword [esp + 0x24]
cmp byte [ebx], 0
je 0x1b5ff5
lea eax, [esp + 0x50]
push eax
push edi
push ebx
call fcn.001b0ce0
add esp, 0xc
movzx ecx, word [esp + 0x50]
mov word [esi], cx
add esi, 2
cmp esi, dword [esp + 0x10]
jae 0x1b5ff5
add ebx, eax
cmp ebx, edi
jb 0x1b5fca
mov word [esi], 0
lea edi, [esp + 0x50]
mov ecx, edi
push 1
call fcn.001acfb0
xor esi, esi
mov ebx, dword [esp + 0x28]
jmp case.0x1b067b.176
int3
test byte [eax + ecx*4], ah
add eax, dword [eax]
add al, dh
scasd eax, dword es:[edi]
push ds
add bh, al
test byte [esp + eax*4], ah
add eax, dword [eax]
add byte [eax - 0xffffff], dl
loopne 0x1b6bb4
invalid
call fcn.001ae010
mov dword [esp + 0x7f4], 0
inc eax
je 0x1b6bce
invalid
inc edi
test byte [esp + esi*8], ah
pop es
add byte [eax], al
add byte [eax], al
add byte [eax], al
mov eax, dword [esp + 0x7f8]
mov ecx, dword [esp + 0x7f4]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x4f4]
mov ecx, dword [esp + 0x4f8]
mov eax, dword [ecx + eax*4]
mov edi, dword [esp + 0x34]
jmp eax
je 0x1b6bc2
fcomp qword [ebx + ecx*4]
test byte [esp + edx], ah
add al, 0
add byte [ebx + 0x418248c], cl
add byte [eax], al
mov eax, dword [ecx + eax*4]
jmp eax
mov dword [esp], edi
call fcn.001ac770
mov esi, edi
add esi, eax
mov dword [esp + 0x370], edi
mov dword [esp], edi
mov dword [esp + 4], esi
call fcn.001ba7f0
mov ebx, eax
mov dword [esp + 0x31c], ebx
sub ebx, 0xffffffff
mov ecx, 2
mov eax, ebx
mul ecx
seto dl
mov ecx, 0xffffffff
test dl, 1
jne 0x1b6c5f
mov ecx, eax
mov dword [esp], ecx
call fcn.001ac630
mov edi, eax
shl ebx, 1
mov edx, edi
add edx, ebx
cmp esi, 0
mov ebx, dword [esp + 0x370]
jne 0x1b6c8b
mov dword [esp], ebx
mov esi, edx
call fcn.001ac770
mov edx, esi
mov esi, ebx
add esi, eax
mov dword [esp + 0x354], 0
mov dword [esp + 0x320], edi
mov eax, edx
add eax, 0xfffffffe
mov ecx, edi
sub ecx, eax
setb al
mov ecx, ebx
sub ecx, esi
setb cl
and al, cl
test al, 1
jne 0x1b6cb8
jmp 0x1b6cf7
cmp byte [ebx], 0
je 0x1b6cf7
lea eax, [esp + 0x354]
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp + 0x368], edx
call fcn.001b0ce0
mov edx, dword [esp + 0x368]
add ebx, eax
mov eax, dword [esp + 0x354]
mov ecx, edi
add ecx, 2
mov word [edi], ax
mov edi, ecx
jmp 0x1b6c9d
mov word [edi], 0
mov eax, dword [0x1f1b9c]
lea esi, [esp + 0x32c]
mov dword [esp + 0x14], esi
mov ecx, dword [esp + 0x31c]
mov dword [esp + 8], ecx
mov edi, dword [esp + 0x320]
mov dword [esp + 4], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp], 0
call eax
sub esp, 0x18
mov ecx, dword [esp + 0x32c]
add ecx, ecx
mov eax, 0xffffffff
jb 0x1b6d50
mov eax, ecx
mov dword [esp], eax
call fcn.001ac630
mov edx, dword [0x1f1b9c]
mov ecx, dword [esp + 0x32c]
mov dword [esp + 0x14], esi
mov ebx, eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], ebx
mov eax, dword [esp + 0x31c]
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [esp], 0
call edx
sub esp, 0x18
mov dword [esp + 0x88c], 0
mov eax, dword [esp + 0x890]
mov ecx, dword [esp + 0x88c]
mov eax, dword [eax + ecx*4]
mov edi, dword [esp + 0x34]
mov esi, dword [esp + 0x44]
jmp eax
call fcn.001ae010
mov dword [esp + 0x8e4], 0
mov eax, dword [esp + 0x8e8]
mov ecx, dword [esp + 0x8e4]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.001ae010
xor ebx, ebx
mov eax, dword [esp + 0x48]
sub eax, 1
sete dl
mov dword [esp + 0x7cc], 0
mov eax, dword [esp + 0x7d0]
mov ecx, dword [esp + 0x7cc]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.001ae010
lea eax, [esp + 0x4c]
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.001af3a0
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.001af3a0
lea ecx, [esp + 0x90]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.001af3a0
mov dword [esp + 0x644], 1
mov eax, dword [esp + 0x648]
mov ecx, dword [esp + 0x644]
mov eax, dword [eax + ecx*4]
jmp eax
mov ecx, dword [esp + 0x474]
mov edx, dword [esp + 0x478]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov al, byte [esp + 0x1a0]
mov byte [esp + 0x1e8], al
mov byte [esp + 0x300], 0x16
mov byte [esp + 0x301], 0xe7
mov byte [esp + 0x302], 0x7a
mov eax, 3
mov byte [esp + eax + 0x300], 0
add eax, 1
cmp eax, 6
jne 0x1b6e9a
mov dword [esp + 0xec], 0
mov eax, dword [esp + 0xec]
cmp eax, 6
jae 0x1b6f02
mov eax, dword [esp + 0xec]
mov ecx, dword [esp + 0xec]
movzx ecx, byte [esp + ecx + 0x300]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001baca0
mov ecx, dword [esp + 0xec]
mov byte [esp + ecx + 0x300], al
mov eax, dword [esp + 0xec]
inc eax
mov dword [esp + 0xec], eax
jmp 0x1b6eb5
lea eax, [esp + 0x300]
mov dword [esp + 4], eax
mov dword [esp], esi
mov dword [esp + 8], 3
call fcn.001a45d0
xor ecx, ecx
test eax, eax
setne cl
mov dword [esp + 0x8ec], ecx
mov eax, dword [esp + 0x8f0]
mov ecx, dword [esp + 0x8ec]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [esp + 0x2c], edi
call fcn.001ae010
lea eax, [esp + 0x924]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x944]
mov dword [esp + 0x20], eax
mov dword [esp + 4], esi
mov dword [esp], edi
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
call dword [esp + 0x314]
sub esp, 0x28
xor ecx, ecx
test eax, eax
setne al
mov dword [esp + 0x544], 1
mov edx, dword [esp + 0x548]
mov esi, dword [esp + 0x544]
mov edx, dword [edx + esi*4]
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x2c]
jmp edx
mov eax, dword [esp + 0x8b4]
mov ecx, dword [esp + 0x8b8]
mov eax, dword [ecx + eax*4]
mov ebx, dword [esp + 0x3c]
mov edi, dword [esp + 0x34]
jmp eax
call fcn.001ae010
mov dword [esp + 0x8ac], 1
mov eax, dword [esp + 0x8b0]
mov ecx, dword [esp + 0x8ac]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esp + 0x3c]
mov edi, dword [esp + 0x34]
mov esi, dword [esp + 0x318]
jmp eax
mov eax, dword [esp + 0x324]
mov word [eax], 0
mov al, byte [esp + 0x98]
mov byte [esp + 0x210], al
mov byte [esp + 0x9c], 0xdf
mov byte [esp + 0x9d], 0xfb
mov byte [esp + 0x9e], 0x4e
mov byte [esp + 0x9f], 0xf9
mov byte [esp + 0xa0], 0x43
mov byte [esp + 0xa1], 0xff
mov byte [esp + 0xa2], 0x4d
mov byte [esp + 0xa3], 0xfd
mov byte [esp + 0xa4], 0x4c
mov byte [esp + 0xa5], 0xf3
mov byte [esp + 0xa6], 0x29
mov byte [esp + 0xa7], 0xf1
mov byte [esp + 0xa8], 0x5c
mov byte [esp + 0xa9], 0xf7
mov byte [esp + 0xaa], 0xf6
mov byte [esp + 0xab], 0xf5
mov eax, 0x10
mov byte [esp + eax + 0x9c], 0
add eax, 1
cmp eax, 0x11
jne 0x1b70b7
mov dword [esp + 0x110], 0
mov eax, dword [esp + 0x110]
cmp eax, 0x11
jae 0x1b711f
mov eax, dword [esp + 0x110]
mov ecx, dword [esp + 0x110]
movzx ecx, byte [esp + ecx + 0x9c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001bae60
mov ecx, dword [esp + 0x110]
mov byte [esp + ecx + 0x9c], al
mov eax, dword [esp + 0x110]
inc eax
mov dword [esp + 0x110], eax
jmp 0x1b70d2
lea eax, [esp + 0x9c]
mov dword [esp + 4], eax
lea esi, [esp + 0xa0c]
mov dword [esp], esi
call fcn.001af3a0
lea ecx, [esp + 0x988]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.001af3a0
mov ebx, eax
sub ebx, esi
sar ebx, 1
mov eax, dword [0x1f1b9c]
lea edi, [esp + 0x144]
mov dword [esp + 0x14], edi
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp], 0
call eax
sub esp, 0x18
mov eax, dword [esp + 0x144]
add eax, 4
add eax, eax
mov ecx, 0xffffffff
jb 0x1b719b
mov ecx, eax
mov dword [esp], ecx
call fcn.001ac630
mov edx, dword [0x1f1b9c]
mov ecx, dword [esp + 0x144]
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x2c], eax
mov dword [esp + 0xc], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], 0
call edx
sub esp, 0x18
xor eax, eax
cmp dword [esp + 0x48], 0
sete cl
mov dword [esp + 0x804], 1
mov edx, dword [esp + 0x808]
mov esi, dword [esp + 0x804]
mov edx, dword [edx + esi*4]
mov edi, dword [esp + 0x34]
jmp edx
xor ecx, 0x32
xlatb
mov eax, dword [esp + 0x38c]
mov ecx, dword [esp + 0x390]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x90c]
mov ecx, dword [esp + 0x910]
mov eax, dword [ecx + eax*4]
xor edi, edi
jmp eax
mov al, byte [esp + 0xc0]
mov byte [esp + 0x1f0], al
mov byte [esp + 0x14c], 0xa5
mov byte [esp + 0x14d], 0x41
mov eax, 2
mov byte [esp + eax + 0x14c], 0
add eax, 1
cmp eax, 7
jne 0x1b7272
mov dword [esp + 0xf0], 0
mov eax, dword [esp + 0xf0]
cmp eax, 7
jae 0x1b72da
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xf0]
movzx ecx, byte [esp + ecx + 0x14c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001bace0
mov ecx, dword [esp + 0xf0]
mov byte [esp + ecx + 0x14c], al
mov eax, dword [esp + 0xf0]
inc eax
mov dword [esp + 0xf0], eax
jmp 0x1b728d
lea eax, [esp + 0x14c]
mov dword [esp + 4], eax
mov dword [esp], esi
mov dword [esp + 8], 3
call fcn.001a45d0
xor ecx, ecx
test eax, eax
sete al
mov dword [esp + 0x8dc], 0
mov edx, dword [esp + 0x8e0]
mov dword [esp + 0x44], esi
mov esi, dword [esp + 0x8dc]
mov edx, dword [edx + esi*4]
mov esi, dword [esp + 0x44]
jmp edx
call fcn.001ae010
mov dword [esp + 0x50c], 0
mov eax, dword [esp + 0x510]
mov ecx, dword [esp + 0x50c]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x85c]
mov ecx, dword [esp + 0x860]
mov eax, dword [ecx + eax*4]
jmp eax
xor eax, eax
mov ecx, dword [esp + 0x48]
sub ecx, 1
sete al
mov dword [esp + 0x734], eax
mov eax, dword [esp + 0x738]
mov ecx, dword [esp + 0x734]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esp + 0x3c]
jmp eax
mov dword [esp], edx
call fcn.001ac640
mov eax, dword [esp + 0x6e4]
mov ecx, dword [esp + 0x6e8]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.001ae010
xor eax, eax
mov ecx, dword [esp + 0x48]
sub ecx, 2
sete cl
mov dword [esp + 0x794], 0
mov edx, dword [esp + 0x798]
mov esi, dword [esp + 0x794]
mov edx, dword [edx + esi*4]
jmp edx
mov eax, dword [esp + 0x69c]
mov ecx, dword [esp + 0x6a0]
mov eax, dword [ecx + eax*4]
mov dword [esp + 0x2c], 0
mov dword [esp + 0x48], 0
mov ebx, dword [esp + 0x3c]
mov edi, dword [esp + 0x34]
jmp eax
mov eax, dword [esp + 0x714]
mov ecx, dword [esp + 0x718]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x844]
mov ecx, dword [esp + 0x848]
mov eax, dword [ecx + eax*4]
jmp eax
in eax, dx
clc
mov esp, edi
cmp ebp, esp
and al, bl
mov eax, dword [esp + 0x40c]
mov ecx, dword [esp + 0x410]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x77c]
mov ecx, dword [esp + 0x780]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x82c]
mov ecx, dword [esp + 0x830]
mov eax, dword [ecx + eax*4]
lea edi, [esp + 0x988]
mov dword [esp + 0x164], 0
jmp eax
mov esi, dword [esp + 0x924]
mov al, byte [esp + 0x1cc]
mov byte [esp + 0x264], al
mov byte [esp + 0x1d0], 0x85
mov byte [esp + 0x1d1], 0x86
mov byte [esp + 0x1d2], 0x87
mov byte [esp + 0x1d3], 0x80
mov eax, 4
mov byte [esp + eax + 0x1d0], 0
add eax, 1
cmp eax, 7
jne 0x1b7724
mov dword [esp + 0xd8], 0
mov eax, dword [esp + 0xd8]
cmp eax, 7
jae 0x1b778c
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xd8]
movzx ecx, byte [esp + ecx + 0x1d0]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001bac20
mov ecx, dword [esp + 0xd8]
mov byte [esp + ecx + 0x1d0], al
mov eax, dword [esp + 0xd8]
inc eax
mov dword [esp + 0xd8], eax
jmp 0x1b773f
mov edi, dword [esp + 0x1d0]
xor ebx, ebx
cmp ebx, dword [0x1f1ba0]
jb 0x1b779f
jmp 0x1b77f5
mov eax, dword [0x1f1ba4]
cmp dword [eax + ebx*8], 0x625b6034
sete cl
test cl, 1
jne 0x1b77b5
jmp 0x1b77e9
mov eax, dword [eax + ebx*8 + 4]
cmp eax, edi
je 0x1b77e9
mov byte [esp + 0xc5], cl
mov ecx, dword [0x1f1ba8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 1
mov dword [esp + 0xc], esi
call fcn.001e1c60
mov cl, byte [esp + 0xc5]
test cl, 1
je 0x1b77f0
jmp 0x1b77f5
add ebx, 1
jmp 0x1b7795
mov eax, dword [esp + 0x534]
mov ecx, dword [esp + 0x538]
mov eax, dword [ecx + eax*4]
mov ebx, dword [esp + 0x3c]
mov edi, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
jmp eax
lea edi, [esp + 0x944]
xor eax, eax
mov ecx, 0x11
rep stosd dword es:[edi], eax
mov dword [esp + 0x944], 0x44
mov eax, dword [esp + 0x56c]
mov ecx, dword [esp + 0x570]
mov eax, dword [ecx + eax*4]
jmp eax
invalid
call fcn.001ae010
mov dword [esp + 0x864], 0
mov eax, dword [esp + 0x868]
mov ecx, dword [esp + 0x864]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x3ec]
mov ecx, dword [esp + 0x3f0]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x8fc]
mov ecx, dword [esp + 0x900]
mov ecx, dword [ecx + eax*4]
mov al, 1
jmp ecx
call fcn.001ae010
call fcn.001accf0
mov ecx, eax
mov edx, 0x38e38e39
mov eax, ecx
imul edx
mov eax, edx
shr eax, 0x1f
sar edx, 3
sar dword [edx + 0x38e38e39], 0x89
enter 0xffffffffffffeaf7, 0xffffffffffffff89
rol cl, 1
call 0x4163b33
add edx, eax
shl edx, 2
lea eax, [edx + edx*8]
neg eax
movsx ecx, byte [ecx + eax + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ]
mov eax, edi
add eax, 2
mov word [edi], cx
mov ecx, dword [esp + 0x164]
inc ecx
mov dword [esp + 0x7ec], 0
mov edx, dword [esp + 0x7f0]
mov esi, dword [esp + 0x7ec]
mov edx, dword [edx + esi*4]
jmp edx
jle 0x1b7a02
sub dword [ecx + 0x1e], esi
cmp ch, byte [edx]
xor cl, byte [ebx + 0x3bc2484]
add byte [eax], al
mov ecx, dword [esp + 0x3c0]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, byte [esp + 0x180]
mov byte [esp + 0x21c], al
mov byte [esp + 0x2d8], 0xb2
mov byte [esp + 0x2d9], 0xe7
mov byte [esp + 0x2da], 0x76
mov byte [esp + 0x2db], 0xe1
mov byte [esp + 0x2dc], 0x6d
mov byte [esp + 0x2dd], 0xe3
mov byte [esp + 0x2de], 0xb1
mov byte [esp + 0x2df], 0xdd
mov byte [esp + 0x2e0], 0xdc
mov byte [esp + 0x2e1], 0xdf
mov eax, 0xa
mov byte [esp + eax + 0x2d8], 0
add eax, 1
cmp eax, 0xd
jne 0x1b7af3
mov dword [esp + 0x120], 0
mov eax, dword [esp + 0x120]
cmp eax, 0xd
jae 0x1b7b5b
mov eax, dword [esp + 0x120]
mov ecx, dword [esp + 0x120]
movzx ecx, byte [esp + ecx + 0x2d8]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001baf20
mov ecx, dword [esp + 0x120]
mov byte [esp + ecx + 0x2d8], al
mov eax, dword [esp + 0x120]
inc eax
mov dword [esp + 0x120], eax
jmp 0x1b7b0e
lea eax, [esp + 0x2d8]
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.001bab70
mov eax, dword [esp + 0x784]
mov ecx, dword [esp + 0x788]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, byte [esp + 0xb0]
mov byte [esp + 0x208], al
mov byte [esp + 0xb4], 0x98
mov byte [esp + 0xb5], 0x99
mov byte [esp + 0xb6], 0x9c
mov byte [esp + 0xb7], 0x1c
mov eax, 4
mov byte [esp + eax + 0xb4], 0
add eax, 1
cmp eax, 5
jne 0x1b7bb4
mov dword [esp + 0x108], 0
mov eax, dword [esp + 0x108]
cmp eax, 5
jae 0x1b7c1c
mov eax, dword [esp + 0x108]
mov ecx, dword [esp + 0x108]
movzx ecx, byte [esp + ecx + 0xb4]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001bae30
mov ecx, dword [esp + 0x108]
mov byte [esp + ecx + 0xb4], al
mov eax, dword [esp + 0x108]
inc eax
mov dword [esp + 0x108], eax
jmp 0x1b7bcf
mov eax, dword [esp + 0xb4]
mov eax, dword [eax + 0x14]
mov dword [esp], eax
call fcn.001acce0
call fcn.001accf0
mov ebx, eax
and ebx, 0xf
or ebx, 0x10
mov dword [esp + 0x834], 0
mov eax, dword [esp + 0x838]
mov ecx, dword [esp + 0x834]
mov eax, dword [eax + ecx*4]
jmp eax
mov al, cl
and eax, 1
mov dword [esp + 0x684], eax
mov eax, dword [esp + 0x688]
mov ecx, dword [esp + 0x684]
mov eax, dword [eax + ecx*4]
xor esi, esi
jmp eax
call fcn.001ae010
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.001ac770
mov edi, eax
and edi, 1
or eax, 1
add edi, eax
mov dword [esp + 0x71c], 0
mov eax, dword [esp + 0x720]
mov ecx, dword [esp + 0x71c]
mov eax, dword [eax + ecx*4]
jmp eax
jae 0x1b7c78
pop ds
inc esp
xchg edi, eax
inc ebp
or ebp, esi
mov eax, dword [0x1f1b94]
mov dword [esp], eax
mov dword [esp + 4], 0xc9be8534
call fcn.001e47c0
mov eax, dword [esp + 0x3ac]
mov ecx, dword [esp + 0x3b0]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.001ae010
mov dword [esp + 0x52c], 1
mov eax, dword [esp + 0x530]
mov ecx, dword [esp + 0x52c]
mov eax, dword [eax + ecx*4]
jmp eax
mov byte [esp + 0x3b], dl
mov edx, dword [esp + 0x318]
xor edx, 1
mov eax, dword [esp + 0x48]
xor eax, 2
xor ecx, ecx
or edx, eax
sete cl
mov dword [esp + 0x624], ecx
mov eax, dword [esp + 0x628]
mov ecx, dword [esp + 0x624]
mov eax, dword [eax + ecx*4]
xor esi, esi
mov dword [esp + 0x2c], 0
jmp eax
xor eax, eax
mov edx, dword [esp + 0x2c]
test edx, edx
sete al
mov dword [esp + 0x4c4], eax
mov eax, dword [esp + 0x4c8]
mov ecx, dword [esp + 0x4c4]
mov eax, dword [eax + ecx*4]
jmp eax
mov al, cl
and eax, 1
mov dword [esp + 0x7fc], eax
mov eax, dword [esp + 0x800]
mov ecx, dword [esp + 0x7fc]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.001ae010
mov dword [esp + 0x724], 0
mov eax, dword [esp + 0x728]
mov ecx, dword [esp + 0x724]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.001ae010
mov dword [esp + 0x30c], 0xffffffff
mov dword [esp + 0x308], 0xb8797400
mov al, byte [esp + 0x24c]
mov byte [esp + 0x258], al
mov byte [esp + 0x250], 0x85
mov byte [esp + 0x251], 0x86
mov byte [esp + 0x252], 0x87
mov byte [esp + 0x253], 0x80
mov eax, 4
mov byte [esp + eax + 0x250], 0
add eax, 1
cmp eax, 7
jne 0x1b7e15
mov dword [esp + 0xe4], 0
mov eax, dword [esp + 0xe4]
cmp eax, 7
jae 0x1b7e7d
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0xe4]
movzx ecx, byte [esp + ecx + 0x250]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001bac20
mov ecx, dword [esp + 0xe4]
mov byte [esp + ecx + 0x250], al
mov eax, dword [esp + 0xe4]
inc eax
mov dword [esp + 0xe4], eax
jmp 0x1b7e30
mov esi, dword [esp + 0x250]
xor ebx, ebx
cmp ebx, dword [0x1f1ba0]
jb 0x1b7e90
jmp 0x1b7efb
mov eax, dword [0x1f1ba4]
cmp dword [eax + ebx*8], 0x7e28bda7
sete cl
test cl, 1
jne 0x1b7ea6
jmp 0x1b7eef
mov eax, dword [eax + ebx*8 + 4]
cmp eax, esi
je 0x1b7eef
mov byte [esp + 0xc7], cl
mov ecx, dword [0x1f1ba8]
xor edx, edx
lea edx, [esp + 0x308]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 3
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], edx
call fcn.001e1c60
mov cl, byte [esp + 0xc7]
test cl, 1
je 0x1b7ef6
jmp 0x1b7efb
add ebx, 1
jmp 0x1b7e86
mov al, byte [esp + 0x1c0]
mov byte [esp + 0x268], al
mov byte [esp + 0x1c4], 0x85
mov byte [esp + 0x1c5], 0x86
mov byte [esp + 0x1c6], 0x87
mov byte [esp + 0x1c7], 0x80
mov eax, 4
mov byte [esp + eax + 0x1c4], 0
add eax, 1
cmp eax, 7
jne 0x1b7f2e
mov dword [esp + 0xd4], 0
mov eax, dword [esp + 0xd4]
cmp eax, 7
jae 0x1b7f96
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0xd4]
movzx ecx, byte [esp + ecx + 0x1c4]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001bac20
mov ecx, dword [esp + 0xd4]
mov byte [esp + ecx + 0x1c4], al
mov eax, dword [esp + 0xd4]
inc eax
mov dword [esp + 0xd4], eax
jmp 0x1b7f49
mov esi, dword [esp + 0x1c4]
xor ebx, ebx
cmp ebx, dword [0x1f1ba0]
jb 0x1b7fa9
jmp 0x1b7fff
mov eax, dword [0x1f1ba4]
cmp dword [eax + ebx*8], 0x625b6034
sete cl
test cl, 1
jne 0x1b7fbf
jmp 0x1b7ff3
mov eax, dword [eax + ebx*8 + 4]
cmp eax, esi
je 0x1b7ff3
mov byte [esp + 0xc3], cl
mov ecx, dword [0x1f1ba8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 1
mov dword [esp + 0xc], edi
call fcn.001e1c60
mov cl, byte [esp + 0xc3]
test cl, 1
je 0x1b7ffa
jmp 0x1b7fff
add ebx, 1
jmp 0x1b7f9f
mov dword [esp + 0x504], 1
mov eax, dword [esp + 0x508]
mov ecx, dword [esp + 0x504]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esp + 0x3c]
mov esi, dword [esp + 0x30]
jmp eax
mov cl, al
and ecx, 1
mov dword [esp + 0x8d4], ecx
mov eax, dword [esp + 0x8d8]
mov ecx, dword [esp + 0x8d4]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.001ae010
mov dword [esp + 0x84c], 0
mov eax, dword [esp + 0x850]
mov ecx, dword [esp + 0x84c]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [esp], ebx
mov dword [esp + 4], edi
call fcn.001a4640
mov esi, eax
mov al, byte [esp + 0x1a4]
mov byte [esp + 0x1e4], al
mov byte [esp + 0x340], 0x5d
mov byte [esp + 0x341], 0xc9
mov eax, 2
mov byte [esp + eax + 0x340], 0
add eax, 1
cmp eax, 8
jne 0x1b80bb
mov dword [esp + 0xe8], 0
mov eax, dword [esp + 0xe8]
cmp eax, 8
jae 0x1b8123
mov eax, dword [esp + 0xe8]
mov ecx, dword [esp + 0xe8]
movzx ecx, byte [esp + ecx + 0x340]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001bac60
mov ecx, dword [esp + 0xe8]
mov byte [esp + ecx + 0x340], al
mov eax, dword [esp + 0xe8]
inc eax
mov dword [esp + 0xe8], eax
jmp 0x1b80d6
lea eax, [esp + 0x340]
mov dword [esp + 4], eax
mov dword [esp], esi
mov dword [esp + 8], 2
call fcn.001a45d0
xor ecx, ecx
test eax, eax
setne cl
mov dword [esp + 0x8f4], ecx
mov eax, dword [esp + 0x8f8]
mov ecx, dword [esp + 0x8f4]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, edi
sub eax, 0xc72e58d7
add eax, 1
add eax, 0xc72e58d7
mov ecx, 2
mul ecx
seto dl
mov ecx, 0xffffffff
test dl, 1
jne 0x1b8184
mov ecx, eax
mov dword [esp], ecx
call fcn.001ac630
mov esi, eax
mov al, byte [esp + 0x8c]
mov byte [esp + 0x230], al
mov byte [esp + 0x90], 0xc2
mov byte [esp + 0x91], 0xe1
mov byte [esp + 0x92], 0xe2
mov byte [esp + 0x93], 0xe3
mov eax, 4
mov byte [esp + eax + 0x90], 0
add eax, 1
cmp eax, 6
jne 0x1b81c1
mov dword [esp + 0x138], 0
mov eax, dword [esp + 0x138]
cmp eax, 6
jae 0x1b8229
mov eax, dword [esp + 0x138]
mov ecx, dword [esp + 0x138]
movzx ecx, byte [esp + ecx + 0x90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001bb040
mov ecx, dword [esp + 0x138]
mov byte [esp + ecx + 0x90], al
mov eax, dword [esp + 0x138]
inc eax
mov dword [esp + 0x138], eax
jmp 0x1b81dc
mov al, byte [esp + 0x88]
mov byte [esp + 0x238], al
mov byte [esp + 0x4c], 0x14
mov byte [esp + 0x4d], 0xbb
mov byte [esp + 0x4e], 0x2b
mov byte [esp + 0x4f], 0xb9
mov byte [esp + 0x50], 0x31
mov byte [esp + 0x51], 0xbf
mov byte [esp + 0x52], 0x25
mov byte [esp + 0x53], 0xbd
mov byte [esp + 0x54], 0x2a
mov byte [esp + 0x55], 0xb3
mov byte [esp + 0x56], 0x27
mov byte [esp + 0x57], 0xb1
mov byte [esp + 0x58], 0x28
mov byte [esp + 0x59], 0xb7
mov byte [esp + 0x5a], 0x2d
mov byte [esp + 0x5b], 0xb5
mov byte [esp + 0x5c], 0x28
mov byte [esp + 0x5d], 0xab
mov byte [esp + 0x5e], 0x36
mov byte [esp + 0x5f], 0xa9
mov byte [esp + 0x60], 0x88
mov byte [esp + 0x61], 0xaf
mov byte [esp + 0x62], 0x7d
mov byte [esp + 0x63], 0xad
mov byte [esp + 0x64], 0x37
mov byte [esp + 0x65], 0xa3
mov byte [esp + 0x66], 0x2a
mov byte [esp + 0x67], 0xa1
mov byte [esp + 0x68], 0x3b
mov byte [esp + 0x69], 0xa7
mov byte [esp + 0x6a], 0x43
mov byte [esp + 0x6b], 0xa5
mov byte [esp + 0x6c], 0x84
mov byte [esp + 0x6d], 0x5b
mov byte [esp + 0x6e], 0xbc
mov byte [esp + 0x6f], 0x59
mov byte [esp + 0x70], 0xd7
mov byte [esp + 0x71], 0x5f
mov byte [esp + 0x72], 0xce
mov byte [esp + 0x73], 0x5d
mov byte [esp + 0x74], 0xbb
mov byte [esp + 0x75], 0x53
mov byte [esp + 0x76], 0xc7
mov byte [esp + 0x77], 0x51
mov byte [esp + 0x78], 0xc5
mov byte [esp + 0x79], 0x57
mov byte [esp + 0x7a], 0x76
mov byte [esp + 0x7b], 0x55
mov byte [esp + 0x7c], 0x87
mov byte [esp + 0x7d], 0x4b
mov byte [esp + 0x7e], 0xd0
mov byte [esp + 0x7f], 0x49
mov byte [esp + 0x80], 0x68
mov byte [esp + 0x81], 0x4f
mov byte [esp + 0x82], 0x68
mov byte [esp + 0x83], 0x4d
mov byte [esp + 0x84], 0x4c
mov byte [esp + 0x85], 0x43
mov eax, 0x3a
mov byte [esp + eax + 0x4c], 0
add eax, 1
cmp eax, 0x3c
jne 0x1b8370
mov dword [esp + 0x130], 0
mov eax, dword [esp + 0x130]
cmp eax, 0x3c
jae 0x1b83cf
mov eax, dword [esp + 0x130]
mov ecx, dword [esp + 0x130]
movzx ecx, byte [esp + ecx + 0x4c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001bb010
mov ecx, dword [esp + 0x130]
mov byte [esp + ecx + 0x4c], al
mov eax, dword [esp + 0x130]
inc eax
mov dword [esp + 0x130], eax
jmp 0x1b8388
mov dword [esp + 0x65c], 0
mov eax, dword [esp + 0x660]
mov ecx, dword [esp + 0x65c]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.001ae010
mov dword [esp + 0x704], 0
mov eax, dword [esp + 0x708]
mov ecx, dword [esp + 0x704]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x444]
mov ecx, dword [esp + 0x448]
mov eax, dword [ecx + eax*4]
jmp eax
xor eax, eax
mov cl, byte [esp + 0xca]
mov al, cl
and eax, 1
mov dword [esp + 0x6dc], eax
mov eax, dword [esp + 0x6e0]
mov ecx, dword [esp + 0x6dc]
mov eax, dword [eax + ecx*4]
jmp eax
invalid
xor eax, eax
sub esi, 2
sete al
mov dword [esp + 0x584], eax
mov eax, dword [esp + 0x588]
mov ecx, dword [esp + 0x584]
mov eax, dword [eax + ecx*4]
mov esi, dword [esp + 0x30]
jmp eax
scasb al, byte es:[edi]
xchg dword [ebp - 0x56], esi
mov dword [esp], esi
call fcn.001babc0
mov eax, dword [esp + 0x3dc]
mov ecx, dword [esp + 0x3e0]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.001ae010
mov dword [esp + 0x524], 0
mov eax, dword [esp + 0x528]
mov ecx, dword [esp + 0x524]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.001ae010
mov dword [esp + 0x744], 0
mov eax, dword [esp + 0x748]
mov ecx, dword [esp + 0x744]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x73c]
mov ecx, dword [esp + 0x740]
mov ecx, dword [ecx + eax*4]
mov eax, 4
xor esi, esi
jmp ecx
mov eax, dword [0x1f1b94]
mov dword [esp], eax
mov dword [esp + 4], 0x46483752
call fcn.001e47c0
mov edi, eax
call fcn.001ae010
call fcn.001ae010
mov eax, dword [esp + 0xbc]
mov dword [esp + 0xc], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0x1c3c00
mov dword [esp + 4], 0
mov dword [esp], 0
call edi
sub esp, 0x18
mov edi, eax
xor eax, eax
test edi, edi
setne al
mov dword [esp + 0x514], eax
mov eax, dword [esp + 0x518]
mov ecx, dword [esp + 0x514]
mov eax, dword [eax + ecx*4]
mov esi, dword [esp + 0x30]
jmp eax
call fcn.001ae010
mov dword [esp], esi
call fcn.001babc0
mov edi, eax
add edi, 0x1d
mov dword [esp + 0x674], 1
mov eax, dword [esp + 0x678]
mov ecx, dword [esp + 0x674]
mov eax, dword [eax + ecx*4]
jmp eax
xchg dword [ebx + 0x29], edi
invalid
mov dword [esp + 0x378], esi
add ebx, 9
add ebx, edi
mov dword [esp + 0x374], eax
add ebx, eax
sub ebx, 0x496c960a
add ebx, 1
add ebx, 0x496c960a
mov ecx, 2
mov eax, ebx
mul ecx
seto dl
mov ecx, 0xffffffff
test dl, 1
jne 0x1b875a
mov ecx, eax
mov dword [esp], ecx
call fcn.001ac630
mov esi, eax
mov al, byte [esp + 0x174]
mov byte [esp + 0x228], al
mov byte [esp + 0x2b0], 2
mov byte [esp + 0x2b1], 0x8b
mov byte [esp + 0x2b2], 1
mov byte [esp + 0x2b3], 0x89
mov byte [esp + 0x2b4], 0x3a
mov byte [esp + 0x2b5], 0x87
mov byte [esp + 0x2b6], 0x3a
mov byte [esp + 0x2b7], 0x85
mov byte [esp + 0x2b8], 0x30
mov byte [esp + 0x2b9], 0x83
mov byte [esp + 0x2ba], 0x36
mov byte [esp + 0x2bb], 0x81
mov byte [esp + 0x2bc], 0x4d
mov byte [esp + 0x2bd], 0x9f
mov byte [esp + 0x2be], 0x50
mov byte [esp + 0x2bf], 0x9d
mov byte [esp + 0x2c0], 0x9c
mov byte [esp + 0x2c1], 0x9b
mov eax, 0x12
mov ebx, dword [esp + 0x2c]
mov byte [esp + eax + 0x2b0], 0
add eax, 1
cmp eax, 0x17
jne 0x1b880b
mov dword [esp + 0x12c], 0
mov eax, dword [esp + 0x12c]
cmp eax, 0x17
jae 0x1b8873
mov eax, dword [esp + 0x12c]
mov ecx, dword [esp + 0x12c]
movzx ecx, byte [esp + ecx + 0x2b0]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001bafd0
mov ecx, dword [esp + 0x12c]
mov byte [esp + ecx + 0x2b0], al
mov eax, dword [esp + 0x12c]
inc eax
mov dword [esp + 0x12c], eax
jmp 0x1b8826
lea eax, [esp + 0x2b0]
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.001af3a0
mov word [eax], 0x20
mov ecx, eax
add ecx, 4
mov word [eax + 2], 0x22
mov dword [esp + 4], ebx
mov dword [esp], ecx
call fcn.001af3a0
mov edx, ebx
mov ebx, eax
add ebx, 2
mov word [eax], 0x22
mov dword [esp + 0x6ec], 0
mov eax, dword [esp + 0x6f0]
mov ecx, dword [esp + 0x6ec]
mov eax, dword [eax + ecx*4]
mov dword [esp + 0x30], esi
jmp eax
mov al, cl
and eax, 1
mov dword [esp + 0x814], eax
mov eax, dword [esp + 0x818]
mov ecx, dword [esp + 0x814]
mov eax, dword [eax + ecx*4]
jmp eax
mov edx, dword [esp + 0x6f4]
mov ecx, dword [esp + 0x6f8]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.001ae010
mov edi, dword [esp + 0xbc]
mov eax, dword [esp + 0x190]
mov dword [esp + 0x5ec], 1
mov ecx, dword [esp + 0x5f0]
mov edx, dword [esp + 0x5ec]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esp + 0x48c]
mov ecx, dword [esp + 0x490]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.001ae010
mov dword [esp + 0x83c], 0
mov eax, dword [esp + 0x840]
mov ecx, dword [esp + 0x83c]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [esp + 0x324], edi
call fcn.001ae010
mov dword [esp + 0x80c], 1
mov eax, dword [esp + 0x810]
mov ecx, dword [esp + 0x80c]
mov eax, dword [eax + ecx*4]
jmp eax
mov edi, ebx
add edi, 2
mov word [ebx], 0x2c
shl ecx, 1
mov esi, edi
add esi, ecx
mov ebx, dword [esp + 0x378]
mov dword [esp], ebx
call fcn.001ac770
mov edx, ebx
add edx, eax
mov dword [esp + 0x34c], 0
mov eax, esi
add eax, 0xfffffffe
mov ecx, edi
sub ecx, eax
setb al
mov ecx, ebx
sub ecx, edx
setb cl
and al, cl
test al, 1
jne 0x1b8b9c
jmp 0x1b8bdb
cmp byte [ebx], 0
je 0x1b8bdb
lea eax, [esp + 0x34c]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0x35c], edx
call fcn.001b0ce0
mov edx, dword [esp + 0x35c]
add ebx, eax
mov eax, dword [esp + 0x34c]
mov ecx, edi
add ecx, 2
mov word [edi], ax
mov edi, ecx
jmp 0x1b8b81
mov word [edi], 0
mov eax, dword [esp + 0x6a4]
mov ecx, dword [esp + 0x6a8]
mov eax, dword [ecx + eax*4]
mov esi, dword [esp + 0x30]
jmp eax
pop ecx
push esp
sub ah, al
mov ecx, 0xe81aa683
in al, dx
inc eax
invalid
mov eax, dword [esp + 0x654]
mov ecx, dword [esp + 0x658]
mov eax, dword [ecx + eax*4]
jmp eax
mov esi, dword [esp + 0x934]
mov al, byte [esp + 0x1b4]
mov byte [esp + 0x26c], al
mov byte [esp + 0x1b8], 0x85
mov byte [esp + 0x1b9], 0x86
mov byte [esp + 0x1ba], 0x87
mov byte [esp + 0x1bb], 0x80
mov eax, 4
mov byte [esp + eax + 0x1b8], 0
add eax, 1
cmp eax, 7
jne 0x1b8c8c
mov dword [esp + 0xd0], 0
mov eax, dword [esp + 0xd0]
cmp eax, 7
jae 0x1b8cf4
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xd0]
movzx ecx, byte [esp + ecx + 0x1b8]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001bac20
mov ecx, dword [esp + 0xd0]
mov byte [esp + ecx + 0x1b8], al
mov eax, dword [esp + 0xd0]
inc eax
mov dword [esp + 0xd0], eax
jmp 0x1b8ca7
mov edi, dword [esp + 0x1b8]
xor ebx, ebx
cmp ebx, dword [0x1f1ba0]
jb 0x1b8d07
jmp 0x1b8d5d
mov eax, dword [0x1f1ba4]
cmp dword [eax + ebx*8], 0x625b6034
sete cl
test cl, 1
jne 0x1b8d1d
jmp 0x1b8d51
mov eax, dword [eax + ebx*8 + 4]
cmp eax, edi
je 0x1b8d51
mov byte [esp + 0xc2], cl
mov ecx, dword [0x1f1ba8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 1
mov dword [esp + 0xc], esi
call fcn.001e1c60
mov cl, byte [esp + 0xc2]
test cl, 1
je 0x1b8d58
jmp 0x1b8d5d
add ebx, 1
jmp 0x1b8cfd
mov eax, dword [esp + 0x4e4]
mov ecx, dword [esp + 0x4e8]
mov eax, dword [ecx + eax*4]
mov esi, dword [esp + 0x30]
jmp eax
mov eax, dword [esp + 0x51c]
mov ecx, dword [esp + 0x520]
mov eax, dword [ecx + eax*4]
jmp eax
mov edx, dword [esp + 0x7e4]
mov esi, dword [esp + 0x7e8]
mov edx, dword [esi + edx*4]
mov dword [esp + 0x164], ecx
mov edi, eax
jmp edx
mov eax, dword [esp + 0x63c]
mov ecx, dword [esp + 0x640]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x39c]
mov ecx, dword [esp + 0x3a0]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x634]
mov ecx, dword [esp + 0x638]
mov ecx, dword [ecx + eax*4]
xor eax, eax
jmp ecx
sub esp, dword [ebp + 0x2227b9fa]
adc eax, 0x24848be9
dec esp
add al, 0
add byte [ebx + 0x450248c], cl
add byte [eax], al
mov eax, dword [ecx + eax*4]
jmp eax
lea ebx, [esp + 0x9c8]
xor eax, eax
mov ecx, 0x11
mov edi, ebx
rep stosd dword es:[edi], eax
mov dword [esp + 0x9c8], 0x44
mov eax, dword [0x1f1b94]
mov dword [esp], eax
mov dword [esp + 4], 0xc9be8534
call fcn.001e47c0
lea ecx, [esp + 0x934]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x20], ebx
mov dword [esp + 4], esi
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x8000000
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp], 0
call eax
sub esp, 0x28
xor ecx, ecx
leave
test eax, eax
setne cl
mov dword [esp + 0x4ec], ecx
mov eax, dword [esp + 0x4f0]
mov ecx, dword [esp + 0x4ec]
mov eax, dword [eax + ecx*4]
jmp eax
dec ebp
mov byte [esi - 0x64], bl
jecxz 0x1b8e7b
push ecx
invalid
mov dword [esp], esi
call fcn.001ac640
mov eax, dword [esp + 0x5bc]
mov ecx, dword [esp + 0x5c0]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.001ae010
mov dword [esp + 0x49c], 1
mov eax, dword [esp + 0x4a0]
mov ecx, dword [esp + 0x49c]
mov eax, dword [eax + ecx*4]
jmp eax
push eax
invalid
push 0xea577504
jle 0x1b8f78
inc edi
mov eax, dword [esp + 0x404]
mov ecx, dword [esp + 0x408]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, byte [esp + 0x18c]
mov byte [esp + 0x200], al
mov byte [esp + 0x330], 0x30
mov byte [esp + 0x331], 0x81
mov eax, 2
mov byte [esp + eax + 0x330], 0
add eax, 1
cmp eax, 7
jne 0x1b8fdb
mov byte [esp + 0x3b], dl
mov dword [esp + 0x104], 0
mov eax, dword [esp + 0x104]
cmp eax, 7
jae 0x1b9047
mov eax, dword [esp + 0x104]
mov ecx, dword [esp + 0x104]
movzx ecx, byte [esp + ecx + 0x330]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001bae00
mov ecx, dword [esp + 0x104]
mov byte [esp + ecx + 0x330], al
mov eax, dword [esp + 0x104]
inc eax
mov dword [esp + 0x104], eax
jmp 0x1b8ffa
lea eax, [esp + 0x330]
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.001a4350
mov edi, eax
xor eax, eax
test edi, edi
setne al
mov dword [esp + 0x894], eax
mov eax, dword [esp + 0x898]
mov ecx, dword [esp + 0x894]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x914]
mov ecx, dword [esp + 0x918]
mov ecx, dword [ecx + eax*4]
xor eax, eax
jmp ecx
mov al, cl
and eax, 1
mov dword [esp + 0x78c], eax
mov eax, dword [esp + 0x790]
mov ecx, dword [esp + 0x78c]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esp + 0x2c]
mov esi, dword [esp + 0x44]
jmp eax
call fcn.001ae010
mov dword [esp], esi
call fcn.001ac770
inc eax
mov dword [esp + 0x6fc], 1
mov edx, dword [esp + 0x700]
mov ecx, dword [esp + 0x6fc]
mov ecx, dword [edx + ecx*4]
jmp ecx
test esi, esi
setne al
mov byte [esp + 0xcb], al
movzx eax, al
mov dword [esp + 0x70c], eax
mov eax, dword [esp + 0x710]
mov ecx, dword [esp + 0x70c]
mov ecx, dword [eax + ecx*4]
xor eax, eax
jmp ecx
mov dword [esp], edx
call fcn.001ac640
mov eax, dword [esp + 0x4bc]
mov ecx, dword [esp + 0x4c0]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.001ae010
mov dword [esp + 0x694], 0
mov eax, dword [esp + 0x698]
mov ecx, dword [esp + 0x694]
mov eax, dword [eax + ecx*4]
jmp eax
mov al, byte [esp + 0xc9]
mov bl, al
and ebx, 1
mov dword [esp + 0x7ac], ebx
mov eax, dword [esp + 0x7b0]
mov ecx, dword [esp + 0x7ac]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.001ae010
mov eax, edi
inc eax
mov dword [esp + 0x47c], 0
mov ecx, dword [esp + 0x480]
mov edx, dword [esp + 0x47c]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esp + 0x45c]
mov ecx, dword [esp + 0x460]
mov eax, dword [ecx + eax*4]
jmp eax
mov cl, al
and ecx, 1
mov dword [esp + 0x53c], ecx
mov eax, dword [esp + 0x540]
mov ecx, dword [esp + 0x53c]
mov eax, dword [eax + ecx*4]
mov edi, dword [esp + 0x34]
jmp eax
call fcn.001ae010
mov dword [esp + 0x5a4], 1
mov eax, dword [esp + 0x5a8]
mov ecx, dword [esp + 0x5a4]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.001ae010
mov dword [esp + 0x884], 1
mov eax, dword [esp + 0x888]
mov ecx, dword [esp + 0x884]
mov eax, dword [eax + ecx*4]
mov esi, dword [esp + 0x320]
jmp eax
mov eax, dword [esp + 0x8c4]
mov ecx, dword [esp + 0x8c8]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.001ae010
xor eax, eax
mov ecx, dword [esp + 0x164]
sub ecx, ebx
setb cl
mov dword [esp + 0x81c], 0
mov edx, dword [esp + 0x820]
mov esi, dword [esp + 0x81c]
mov edx, dword [edx + esi*4]
jmp edx
mov al, byte [esp + 0x3b]
mov dl, al
and edx, 1
mov dword [esp + 0x574], edx
mov eax, dword [esp + 0x578]
mov ecx, dword [esp + 0x574]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.001ae010
mov dword [esp + 0x7b4], 1
mov eax, dword [esp + 0x7b8]
mov ecx, dword [esp + 0x7b4]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.001ae010
xor eax, eax
mov ecx, dword [esp + 0x48]
sub ecx, 2
sete cl
mov dword [esp + 0x68c], 1
mov edx, dword [esp + 0x690]
mov esi, dword [esp + 0x68c]
mov edx, dword [edx + esi*4]
jmp edx
xor eax, eax
test esi, esi
sete al
mov dword [esp + 0x57c], eax
mov eax, dword [esp + 0x580]
mov ecx, dword [esp + 0x57c]
mov eax, dword [eax + ecx*4]
mov esi, dword [esp + 0x30]
jmp eax
mov eax, dword [esp + 0x66c]
mov ecx, dword [esp + 0x670]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.001ae010
mov dword [esp + 0x74c], 0
mov eax, dword [esp + 0x750]
mov ecx, dword [esp + 0x74c]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esp + 0x3c]
jmp eax
call fcn.001ae010
mov dword [esp], esi
call fcn.001ac630
mov dword [esp + 0x60c], 0
mov edx, dword [esp + 0x610]
mov ecx, dword [esp + 0x60c]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov dword [edx + 0x7b], 0x24448d37
dec esp
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.001af3a0
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.001af3a0
lea ecx, [esp + 0x90]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.001af3a0
mov eax, dword [esp + 0x3cc]
mov ecx, dword [esp + 0x3d0]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x874]
mov ecx, dword [esp + 0x878]
mov eax, dword [ecx + eax*4]
mov esi, dword [esp + 0x44]
jmp eax
call fcn.001ae010
mov dword [esp + 0x67c], 1
mov eax, dword [esp + 0x680]
mov ecx, dword [esp + 0x67c]
mov eax, dword [eax + ecx*4]
mov esi, dword [esp + 0x2c]
jmp eax
mov al, byte [esp + 0x188]
mov byte [esp + 0x214], al
mov byte [esp + 0x158], 0x1e
mov byte [esp + 0x159], 0x4b
mov byte [esp + 0x15a], 0xd1
mov byte [esp + 0x15b], 0x49
mov byte [esp + 0x15c], 0xc0
mov byte [esp + 0x15d], 0x47
mov byte [esp + 0x15e], 0xdd
mov byte [esp + 0x15f], 0x45
mov byte [esp + 0x160], 0x44
mov byte [esp + 0x161], 0x43
mov eax, 0xa
mov ebx, dword [esp + 0x2c]
mov esi, dword [esp + 0x44]
mov byte [esp + eax + 0x158], 0
add eax, 1
cmp eax, 0xc
jne 0x1b9453
mov dword [esp + 0x118], 0
mov eax, dword [esp + 0x118]
cmp eax, 0xc
jae 0x1b94bb
mov eax, dword [esp + 0x118]
mov ecx, dword [esp + 0x118]
movzx ecx, byte [esp + ecx + 0x158]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001bae90
mov ecx, dword [esp + 0x118]
mov byte [esp + ecx + 0x158], al
mov eax, dword [esp + 0x118]
inc eax
mov dword [esp + 0x118], eax
jmp 0x1b946e
lea eax, [esp + 0x158]
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.001bab70
mov eax, dword [esp + 0x7dc]
mov ecx, dword [esp + 0x7e0]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, byte [esp + 0x184]
mov byte [esp + 0x218], al
mov byte [esp + 0x2e8], 0xb2
mov byte [esp + 0x2e9], 0xe7
mov byte [esp + 0x2ea], 0x7a
mov byte [esp + 0x2eb], 0xe1
mov byte [esp + 0x2ec], 0x74
mov byte [esp + 0x2ed], 0xe3
mov byte [esp + 0x2ee], 0x76
mov byte [esp + 0x2ef], 0xdd
mov byte [esp + 0x2f0], 0xdc
mov byte [esp + 0x2f1], 0xdf
mov eax, 0xa
mov byte [esp + eax + 0x2e8], 0
add eax, 1
cmp eax, 0xf
jne 0x1b9544
mov dword [esp + 0x11c], 0
mov ebx, dword [esp + 0x2c]
mov esi, dword [esp + 0x44]
mov eax, dword [esp + 0x11c]
cmp eax, 0xf
jae 0x1b95b4
mov eax, dword [esp + 0x11c]
mov ecx, dword [esp + 0x11c]
movzx ecx, byte [esp + ecx + 0x2e8]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001baee0
mov ecx, dword [esp + 0x11c]
mov byte [esp + ecx + 0x2e8], al
mov eax, dword [esp + 0x11c]
inc eax
mov dword [esp + 0x11c], eax
jmp 0x1b9567
lea eax, [esp + 0x2e8]
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.001bab70
mov eax, dword [esp + 0x7a4]
mov ecx, dword [esp + 0x7a8]
mov eax, dword [ecx + eax*4]
jmp eax
loop 0x1b9636
out dx, eax
loop 0x1b9648
push es
bound esi, qword [esi + 0xc2484c7]
add eax, dword [eax]
add bh, bh
invalid
mov byte [esp + eax + 0x244], 0
add eax, 1
cmp eax, 7
jne 0x1b962b
mov dword [esp + 0xe0], 0
mov eax, dword [esp + 0xe0]
cmp eax, 7
jae 0x1b9693
and al, 0xe0
add byte [eax], al
add byte [ebx + 0x417307f8], al
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0xe0]
movzx ecx, byte [esp + ecx + 0x244]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001bac20
mov ecx, dword [esp + 0xe0]
mov byte [esp + ecx + 0x244], al
mov eax, dword [esp + 0xe0]
inc eax
mov dword [esp + 0xe0], eax
jmp 0x1b9646
mov esi, dword [esp + 0x244]
xor ebx, ebx
cmp ebx, dword [0x1f1ba0]
jb 0x1b96a6
jmp 0x1b9711
mov eax, dword [0x1f1ba4]
cmp dword [eax + ebx*8], 0x7e28bda7
sete cl
test cl, 1
jne 0x1b96bc
jmp 0x1b9705
mov eax, dword [eax + ebx*8 + 4]
cmp eax, esi
je 0x1b9705
mov byte [esp + 0xc8], cl
mov ecx, dword [0x1f1ba8]
xor edx, edx
lea edx, [esp + 0x308]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 3
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], edx
call fcn.001e1c60
mov cl, byte [esp + 0xc8]
test cl, 1
je 0x1b970c
jmp 0x1b9711
add ebx, 1
jmp 0x1b969c
mov al, byte [esp + 0x1a8]
mov byte [esp + 0x270], al
mov byte [esp + 0x1ac], 0x85
mov byte [esp + 0x1ad], 0x86
mov byte [esp + 0x1ae], 0x87
mov byte [esp + 0x1af], 0x80
mov eax, 4
mov byte [esp + eax + 0x1ac], 0
add eax, 1
cmp eax, 7
jne 0x1b9744
mov dword [esp + 0xcc], 0
mov eax, dword [esp + 0xcc]
cmp eax, 7
jae 0x1b97ac
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0xcc]
movzx ecx, byte [esp + ecx + 0x1ac]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001bac20
mov ecx, dword [esp + 0xcc]
mov byte [esp + ecx + 0x1ac], al
mov eax, dword [esp + 0xcc]
inc eax
mov dword [esp + 0xcc], eax
jmp 0x1b975f
mov esi, dword [esp + 0x1ac]
xor ebx, ebx
cmp ebx, dword [0x1f1ba0]
jb 0x1b97bf
jmp 0x1b9815
mov eax, dword [0x1f1ba4]
cmp dword [eax + ebx*8], 0x625b6034
sete cl
test cl, 1
jne 0x1b97d5
jmp 0x1b9809
mov eax, dword [eax + ebx*8 + 4]
cmp eax, esi
je 0x1b9809
mov byte [esp + 0xc4], cl
mov ecx, dword [0x1f1ba8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 1
mov dword [esp + 0xc], edi
call fcn.001e1c60
mov cl, byte [esp + 0xc4]
test cl, 1
je 0x1b9810
jmp 0x1b9815
add ebx, 1
jmp 0x1b97b5
mov eax, dword [esp + 0x394]
mov ecx, dword [esp + 0x398]
mov eax, dword [ecx + eax*4]
jmp eax
mov ecx, edi
and ecx, 1
shl ecx, 1
mov eax, edi
xor eax, 1
add eax, ecx
mov ecx, 2
mul ecx
seto dl
mov ecx, 0xffffffff
test dl, 1
jne 0x1b9873
mov ecx, eax
mov dword [esp], ecx
call fcn.001ac630
mov al, byte [esp + 0x8c]
mov byte [esp + 0x22c], al
mov byte [esp + 0x90], 0xc2
mov byte [esp + 0x91], 0xe1
mov byte [esp + 0x92], 0xe2
mov byte [esp + 0x93], 0xe3
mov eax, 4
mov byte [esp + eax + 0x90], 0
add eax, 1
cmp eax, 6
jne 0x1b98ae
mov dword [esp + 0x13c], 0
mov eax, dword [esp + 0x13c]
cmp eax, 6
jae 0x1b9916
mov eax, dword [esp + 0x13c]
mov ecx, dword [esp + 0x13c]
movzx ecx, byte [esp + ecx + 0x90]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001bb040
mov ecx, dword [esp + 0x13c]
mov byte [esp + ecx + 0x90], al
mov eax, dword [esp + 0x13c]
inc eax
mov dword [esp + 0x13c], eax
jmp 0x1b98c9
mov al, byte [esp + 0x88]
mov byte [esp + 0x234], al
mov byte [esp + 0x4c], 0x14
mov byte [esp + 0x4d], 0xbb
mov byte [esp + 0x4e], 0x2b
mov byte [esp + 0x4f], 0xb9
mov byte [esp + 0x50], 0x31
mov byte [esp + 0x51], 0xbf
mov byte [esp + 0x52], 0x25
mov byte [esp + 0x53], 0xbd
mov byte [esp + 0x54], 0x2a
mov byte [esp + 0x55], 0xb3
mov byte [esp + 0x56], 0x27
mov byte [esp + 0x57], 0xb1
mov byte [esp + 0x58], 0x28
mov byte [esp + 0x59], 0xb7
mov byte [esp + 0x5a], 0x2d
mov byte [esp + 0x5b], 0xb5
mov byte [esp + 0x5c], 0x28
mov byte [esp + 0x5d], 0xab
mov byte [esp + 0x5e], 0x36
mov byte [esp + 0x5f], 0xa9
mov byte [esp + 0x60], 0x88
mov byte [esp + 0x61], 0xaf
mov byte [esp + 0x62], 0x7d
mov byte [esp + 0x63], 0xad
mov byte [esp + 0x64], 0x37
mov byte [esp + 0x65], 0xa3
mov byte [esp + 0x66], 0x2a
mov byte [esp + 0x67], 0xa1
mov byte [esp + 0x68], 0x3b
mov byte [esp + 0x69], 0xa7
mov byte [esp + 0x6a], 0x43
mov byte [esp + 0x6b], 0xa5
mov byte [esp + 0x6c], 0x84
mov byte [esp + 0x6d], 0x5b
mov byte [esp + 0x6e], 0xbc
mov byte [esp + 0x6f], 0x59
mov byte [esp + 0x70], 0xd7
mov byte [esp + 0x71], 0x5f
mov byte [esp + 0x72], 0xce
mov byte [esp + 0x73], 0x5d
mov byte [esp + 0x74], 0xbb
mov byte [esp + 0x75], 0x53
mov byte [esp + 0x76], 0xc7
mov byte [esp + 0x77], 0x51
mov byte [esp + 0x78], 0xc5
mov byte [esp + 0x79], 0x57
mov byte [esp + 0x7a], 0x76
mov byte [esp + 0x7b], 0x55
mov byte [esp + 0x7c], 0x87
mov byte [esp + 0x7d], 0x4b
mov byte [esp + 0x7e], 0xd0
mov byte [esp + 0x7f], 0x49
mov byte [esp + 0x80], 0x68
mov byte [esp + 0x81], 0x4f
mov byte [esp + 0x82], 0x68
mov byte [esp + 0x83], 0x4d
mov byte [esp + 0x84], 0x4c
mov byte [esp + 0x85], 0x43
mov eax, 0x3a
mov byte [esp + eax + 0x4c], 0
add eax, 1
cmp eax, 0x3c
jne 0x1b9a5d
mov dword [esp + 0x134], 0
mov eax, dword [esp + 0x134]
cmp eax, 0x3c
jae 0x1b9abc
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x134]
movzx ecx, byte [esp + ecx + 0x4c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001bb010
mov ecx, dword [esp + 0x134]
mov byte [esp + ecx + 0x4c], al
mov eax, dword [esp + 0x134]
inc eax
mov dword [esp + 0x134], eax
jmp 0x1b9a75
mov eax, dword [esp + 0x3d4]
mov ecx, dword [esp + 0x3d8]
mov eax, dword [ecx + eax*4]
jmp eax
mov dword [esp], esi
call fcn.001ac630
mov eax, dword [esp + 0x3c4]
mov ecx, dword [esp + 0x3c8]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.001ae010
mov eax, dword [0x1f1b94]
mov dword [esp], eax
mov dword [esp + 4], 0xc9be8534
call fcn.001e47c0
mov dword [esp + 0x55c], 0
mov edx, dword [esp + 0x560]
mov ecx, dword [esp + 0x55c]
mov ecx, dword [edx + ecx*4]
jmp ecx
call fcn.001ae010
mov dword [esp + 0x86c], 0
mov eax, dword [esp + 0x870]
mov ecx, dword [esp + 0x86c]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x6b4]
mov ecx, dword [esp + 0x6b8]
mov eax, dword [ecx + eax*4]
mov esi, dword [esp + 0x30]
jmp eax
mov eax, dword [esp + 0x5b4]
mov ecx, dword [esp + 0x5b8]
mov eax, dword [ecx + eax*4]
mov dword [esp + 0x2c], 0
mov esi, dword [esp + 0x30]
jmp eax
mov eax, dword [esp + 0x4dc]
mov ecx, dword [esp + 0x4e0]
mov eax, dword [ecx + eax*4]
mov ebx, dword [esp + 0x3c]
mov edi, dword [esp + 0x34]
jmp eax
mov dword [esp + 0x314], eax
mov eax, dword [esp + 0x554]
mov ecx, dword [esp + 0x558]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.001babe0
mov ebx, eax
inc ebx
mov eax, ebx
add eax, eax
mov esi, 0xffffffff
jb 0x1b9c52
mov esi, eax
mov eax, dword [esp + 0x61c]
mov ecx, dword [esp + 0x620]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x4fc]
mov ecx, dword [esp + 0x500]
mov eax, dword [ecx + eax*4]
jmp eax
mov edx, dword [esp + 0x604]
mov ecx, dword [esp + 0x608]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esp + 0x8cc]
mov ecx, dword [esp + 0x8d0]
mov eax, dword [ecx + eax*4]
jmp eax
movzx eax, dl
and eax, 1
mov dword [esp + 0x89c], eax
mov eax, dword [esp + 0x8a0]
mov ecx, dword [esp + 0x89c]
mov eax, dword [eax + ecx*4]
mov esi, dword [esp + 0x44]
jmp eax
mov al, byte [esp + 0x19c]
mov byte [esp + 0x1f4], al
mov byte [esp + 0x338], 0xcf
mov byte [esp + 0x339], 0x5b
mov eax, 2
mov byte [esp + eax + 0x338], 0
add eax, 1
cmp eax, 6
jne 0x1b9d08
mov dword [esp + 0xf8], 0
mov eax, dword [esp + 0xf8]
cmp eax, 6
jae 0x1b9d70
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0xf8]
movzx ecx, byte [esp + ecx + 0x338]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001bad20
mov ecx, dword [esp + 0xf8]
mov byte [esp + ecx + 0x338], al
mov eax, dword [esp + 0xf8]
inc eax
mov dword [esp + 0xf8], eax
jmp 0x1b9d23
lea eax, [esp + 0x338]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.001a4350
mov cl, byte [esp + 0x198]
mov byte [esp + 0x1f8], cl
mov byte [esp + 0x2f8], 0x5a
mov byte [esp + 0x2f9], 0x4b
mov byte [esp + 0x2fa], 0x3e
mov ecx, 3
mov byte [esp + ecx + 0x2f8], 0
add ecx, 1
cmp ecx, 5
jne 0x1b9dae
mov dword [esp + 0x168], eax
mov dword [esp + 0xfc], 0
mov eax, dword [esp + 0xfc]
cmp eax, 5
jae 0x1b9e1d
mov eax, dword [esp + 0xfc]
mov ecx, dword [esp + 0xfc]
movzx ecx, byte [esp + ecx + 0x2f8]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001bad60
mov ecx, dword [esp + 0xfc]
mov byte [esp + ecx + 0x2f8], al
mov eax, dword [esp + 0xfc]
inc eax
mov dword [esp + 0xfc], eax
jmp 0x1b9dd0
call fcn.001ae010
call fcn.001ae010
lea eax, [esp + 0x2f8]
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.001a43b0
fnstcw word [esp + 0x156]
movzx eax, word [esp + 0x156]
or eax, 0xc00
mov word [esp + 0x276], ax
fldcw word [esp + 0x276]
fistp dword [esp + 0x380]
fldcw word [esp + 0x156]
mov ecx, dword [esp + 0x380]
mov al, byte [esp + 0x194]
mov byte [esp + 0x1fc], al
mov byte [esp + 0x148], 0xf7
mov byte [esp + 0x149], 0x9b
mov eax, 2
mov byte [esp + eax + 0x148], 0
add eax, 1
cmp eax, 4
jne 0x1b9e95
mov dword [esp + 0x48], ecx
mov dword [esp + 0x100], 0
mov eax, dword [esp + 0x100]
cmp eax, 4
jae 0x1b9f01
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0x100]
movzx ecx, byte [esp + ecx + 0x148]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001badb0
mov ecx, dword [esp + 0x100]
mov byte [esp + ecx + 0x148], al
mov eax, dword [esp + 0x100]
inc eax
mov dword [esp + 0x100], eax
jmp 0x1b9eb4
mov dword [esp + 0x34], edi
mov dword [esp + 0x3c], ebx
lea eax, [esp + 0x148]
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.001a43b0
fnstcw word [esp + 0x154]
movzx eax, word [esp + 0x154]
or eax, 0xc00
mov word [esp + 0x274], ax
fldcw word [esp + 0x274]
fistp dword [esp + 0x37c]
fldcw word [esp + 0x154]
mov eax, dword [esp + 0x37c]
mov dword [esp + 0x318], eax
lea edi, [esp + 0xa6c]
add edi, 0x800
mov esi, dword [esp + 0x168]
mov dword [esp], esi
call fcn.001ac770
mov edx, esi
mov ebx, edx
add ebx, eax
mov dword [esp + 0x358], 0
lea esi, [esp + 0xa6c]
mov eax, edi
add eax, 0xfffffffe
mov ecx, esi
sub ecx, eax
setb al
mov ecx, edx
sub ecx, ebx
setb cl
and al, cl
test al, 1
jne 0x1b9faa
jmp 0x1b9fe9
cmp byte [edx], 0
je 0x1b9fe9
lea eax, [esp + 0x358]
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0x168], edx
call fcn.001b0ce0
mov edx, dword [esp + 0x168]
add edx, eax
mov eax, dword [esp + 0x358]
mov ecx, esi
add ecx, 2
mov word [esi], ax
mov esi, ecx
jmp 0x1b9f8f
mov word [esi], 0
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
lea eax, [esp + 0xbc]
mov dword [esp + 4], eax
lea eax, [esp + 0xa6c]
mov dword [esp], eax
call fcn.001af3e0
movzx eax, al
mov dword [esp + 0x8bc], eax
mov eax, dword [esp + 0x8c0]
mov ecx, dword [esp + 0x8bc]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [esp], esi
call fcn.001ac640
mov eax, dword [esp + 0x454]
mov ecx, dword [esp + 0x458]
mov eax, dword [ecx + eax*4]
jmp eax
retf
xor eax, 0x8b17dff4
test byte [esp], ah
add eax, dword [eax]
add byte [ebx + 0x3e8248c], cl
add byte [eax], al
mov eax, dword [ecx + eax*4]
jmp eax
mov edx, ebx
add edx, 2
mov word [ebx], 0x2c
mov eax, dword [esp + 0x6d4]
mov ecx, dword [esp + 0x6d8]
mov eax, dword [ecx + eax*4]
jmp eax
mov byte [esp + 0xc9], dl
mov eax, dword [esp + 0x7c4]
mov ecx, dword [esp + 0x7c8]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.001ae010
mov dword [esp + 0x5ac], 1
mov eax, dword [esp + 0x5b0]
mov ecx, dword [esp + 0x5ac]
mov eax, dword [eax + ecx*4]
jmp eax
mov ecx, dword [esp + 0x5e4]
mov edx, dword [esp + 0x5e8]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov al, byte [esp + 0x17c]
mov byte [esp + 0x220], al
mov byte [esp + 0x2d0], 0x7a
mov byte [esp + 0x2d1], 0x71
mov byte [esp + 0x2d2], 0xe6
mov eax, 3
mov byte [esp + eax + 0x2d0], 0
add eax, 1
cmp eax, 5
jne 0x1ba2d0
mov dword [esp + 0x124], 0
mov edi, dword [esp + 0x2c]
mov eax, dword [esp + 0x124]
cmp eax, 5
jae 0x1ba33c
mov eax, dword [esp + 0x124]
mov ecx, dword [esp + 0x124]
movzx ecx, byte [esp + ecx + 0x2d0]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001baf50
mov ecx, dword [esp + 0x124]
mov byte [esp + ecx + 0x2d0], al
mov eax, dword [esp + 0x124]
inc eax
mov dword [esp + 0x124], eax
jmp 0x1ba2ef
lea eax, [esp + 0x2d0]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.001a4350
mov dword [esp + 0x40], eax
mov al, byte [esp + 0x178]
mov byte [esp + 0x224], al
mov byte [esp + 0x2c8], 0x83
mov byte [esp + 0x2c9], 0x9d
mov byte [esp + 0x2ca], 0x2a
mov eax, 3
mov byte [esp + eax + 0x2c8], 0
add eax, 1
cmp eax, 7
jne 0x1ba37e
mov dword [esp + 0x128], 0
mov eax, dword [esp + 0x128]
cmp eax, 7
jae 0x1ba3e6
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x128]
movzx ecx, byte [esp + ecx + 0x2c8]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001bafa0
mov ecx, dword [esp + 0x128]
mov byte [esp + ecx + 0x2c8], al
mov eax, dword [esp + 0x128]
inc eax
mov dword [esp + 0x128], eax
jmp 0x1ba399
lea eax, [esp + 0x2c8]
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.001a4350
mov esi, eax
mov dword [esp], edi
call fcn.001babc0
mov ebx, eax
cmp dword [esp + 0x40], 0
setne al
mov byte [esp + 0xca], al
movzx eax, al
add byte [edi], cl
xchg ebp, eax
ror byte [eax + 0xca2484], 0
add byte [edi], cl
mov dh, 0xc0
mov dword [esp + 0x72c], eax
mov eax, dword [esp + 0x730]
mov ecx, dword [esp + 0x72c]
mov eax, dword [eax + ecx*4]
xor edi, edi
jmp eax
xor eax, eax
mov ecx, esi
sub ecx, 2
setl al
mov dword [esp + 0x58c], eax
mov eax, dword [esp + 0x590]
mov ecx, dword [esp + 0x58c]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.001ae010
test esi, esi
sete dl
mov dword [esp + 0x8a4], 0
mov eax, dword [esp + 0x8a8]
mov ecx, dword [esp + 0x8a4]
mov eax, dword [eax + ecx*4]
jmp eax
jecxz 0x1ba409
push cs
pop ebx
mov eax, dword [esp + 0x384]
mov ecx, dword [esp + 0x388]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.001ae010
mov dword [esp], esi
call fcn.001ac640
mov dword [esp + 0x87c], 1
mov eax, dword [esp + 0x880]
mov ecx, dword [esp + 0x87c]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x190]
mov ecx, dword [esp + 0xbc]
mov edx, dword [esp + 0x76c]
mov esi, dword [esp + 0x770]
mov edx, dword [esi + edx*4]
jmp edx
call fcn.001ae010
lea ebx, [esi + edi*2]
mov dword [esp + 0x6bc], 0
dec dword [ebp - 0x7b3881e4]
and al, 0xbc
push es
add byte [eax], al
add byte [eax], al
add byte [eax], al
mov eax, dword [esp + 0x6c0]
mov ecx, dword [esp + 0x6bc]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0xbc]
xor ecx, ecx
test eax, eax
setne cl
mov dword [esp + 0x4d4], ecx
mov ecx, dword [esp + 0x4d8]
mov edx, dword [esp + 0x4d4]
mov ecx, dword [ecx + edx*4]
jmp ecx
jmp 0x1ba4c8
mov esp, 0xdcbcaa7a
movsd dword es:[edi], dword [esi]
aas
jge 0x1ba4e6
test byte [eax + esi*4], ah
add byte [eax], al
add byte [eax + 0x2042484], cl
add byte [eax], al
mov byte [esp + 0xb4], 0x98
mov byte [esp + 0xb5], 0x99
mov byte [esp + 0xb6], 0x9c
mov byte [esp + 0xb7], 0x1c
mov eax, 4
mov byte [esp + eax + 0xb4], 0
add eax, 1
cmp eax, 5
jne 0x1ba58e
mov dword [esp + 0x10c], 0
mov eax, dword [esp + 0x10c]
cmp eax, 5
jae 0x1ba5f6
mov eax, dword [esp + 0x10c]
mov ecx, dword [esp + 0x10c]
movzx ecx, byte [esp + ecx + 0xb4]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.001bae30
mov ecx, dword [esp + 0x10c]
mov byte [esp + ecx + 0xb4], al
mov eax, dword [esp + 0x10c]
inc eax
mov dword [esp + 0x10c], eax
jmp 0x1ba5a9
mov eax, dword [esp + 0xb4]
mov eax, dword [eax + 0x14]
mov dword [esp], eax
call fcn.001acce0
call fcn.001accf0
mov eax, dword [esp + 0x43c]
mov ecx, dword [esp + 0x440]
mov eax, dword [ecx + eax*4]
jmp eax
mov dword [esp + 0x30], esi
mov eax, dword [esp + 0x59c]
mov ecx, dword [esp + 0x5a0]
mov eax, dword [ecx + eax*4]
xor edx, edx
jmp eax
call fcn.001ae010
mov dword [esp + 0x79c], 1
mov eax, dword [esp + 0x7a0]
mov ecx, dword [esp + 0x79c]
mov eax, dword [eax + ecx*4]
jmp eax
xor eax, eax
test esi, esi
sete al
mov dword [esp + 0x4b4], eax
mov eax, dword [esp + 0x4b8]
mov ecx, dword [esp + 0x4b4]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.001ae010
mov dword [esp + 0x7d4], 1
mov eax, dword [esp + 0x7d8]
mov ecx, dword [esp + 0x7d4]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [esp], esi
call fcn.001ac640
mov eax, dword [esp + 0x4ac]
mov ecx, dword [esp + 0x4b0]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
call fcn.001de970
mov dword [esp + 0xbc], 0
not ebx
shr ebx, 0x1f
mov dword [esp + 0x754], ebx
mov eax, dword [esp + 0x758]
mov ecx, dword [esp + 0x754]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x494]
mov ecx, dword [esp + 0x498]
mov eax, dword [ecx + eax*4]
jmp eax
xor eax, eax
mov cl, byte [esp + 0xcb]
mov al, cl
and eax, 1
mov dword [esp + 0x6ac], eax
mov eax, dword [esp + 0x6b0]
mov ecx, dword [esp + 0x6ac]
mov eax, dword [eax + ecx*4]
mov ecx, dword [esp + 0x374]
jmp eax
inc edx
pop ss
fnstenv [edx]
fiadd dword [esi]
and cl, byte cs:[ebx + 0x4342484]
add byte [eax], al
mov ecx, dword [esp + 0x438]
mov eax, dword [ecx + eax*4]
jmp eax
int1
cwde
push ds
sub eax, 0x1c24848b
add al, 0
add byte [ebx + 0x420248c], cl
add byte [eax], al
mov eax, dword [ecx + eax*4]
jmp eax
mov dword [esp], eax
call fcn.001de970
mov eax, dword [esp + 0x4cc]
mov ecx, dword [esp + 0x4d0]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.001ae010
mov dword [esp + 0x4a4], 0
mov eax, dword [esp + 0x4a8]
mov ecx, dword [esp + 0x4a4]
mov eax, dword [eax + ecx*4]
jmp eax
push es
sbb eax, dword [eax]
mov dword [esi], eax
sbb eax, dword [eax]
lodsd eax, dword [esi]
or byte [ebx], bl
add byte [edi], al
pop es
sbb eax, dword [eax]
xor dword [eax], ecx
sbb eax, dword [eax]
cmp dword [eax], ecx
sbb eax, dword [eax]
dec esi
or byte [ebx], bl
add byte [eax + ecx + 0x1b], bl
add byte [eax], ch
or dword [ebx], ebx
add byte [ebp + 8], dh
sbb eax, dword [eax]
or word [ebx], bx
add byte [ebx + ecx], bl
sbb eax, dword [eax]
sub byte [ecx], cl
sbb eax, dword [eax]
or word [ebx], bx
add byte [ebx + 8], bh
sbb eax, dword [eax]
invalid
pop ebx
sbb eax, dword [eax]
lea ecx, [ebx + 0x1b]
add dl, dh
dec ecx
sbb eax, dword [eax]
inc ebp
dec esp
sbb eax, dword [eax]
dec ecx
sbb eax, dword [eax]
pop ecx
dec esp
sbb eax, dword [eax]
imul ecx, dword [ebx + ebx], 0xfffffff2
dec ecx
sbb eax, dword [eax]
adc byte [ebx + 0x1b], cl
add byte [ecx], bl
dec ebx
sbb eax, dword [eax]
inc edi
dec ebx
sbb eax, dword [eax]
pop esi
dec ebx
sbb eax, dword [eax]
sub byte [ebx + 0x1b], bl
add byte [ebp + 93], bl
sbb eax, dword [eax]
jnp 0x1eb951
sbb eax, dword [eax]
pop ebx
sbb eax, dword [eax]
and byte [esi + 0x1b], bl
add byte [edx], ch
pop esi
sbb eax, dword [eax]
cmp bl, byte [esi + 0x1b]
add byte [eax], ah
pop esi
sbb eax, dword [eax]
outsb dx, byte [esi]
pop ebp
sbb eax, dword [eax]
aaa
pop ebp
sbb eax, dword [eax]
arpl word [ebp + 0x1b], bx
add byte [edi], dh
pop ebp
sbb eax, dword [eax]
xor al, 0x5b
sbb eax, dword [eax]
inc eax
pop ebx
sbb eax, dword [eax]
fdiv dword [ebx]
sbb eax, dword [eax]
pushal
sub eax, 995754011
sbb eax, dword [eax]
mov esp, 0x11001b38
cmp dword [ebx], ebx
add byte [edx + 0x39], ah
sbb eax, dword [eax]
inc eax
cmp dword [ebx], ebx
add byte [edx + 0x39], ah
sbb eax, dword [eax]
add dword [eax], eax
add byte [eax], al
add dword [eax], eax
add byte [eax], al
add dword [eax], eax
add byte [eax], al
adc ah, byte [eax + 0x1b]
add byte [edx + 59], bl
sbb eax, dword [eax]
cmp byte [ecx], 0x1b
add byte [ebp + 268442427], cl
cmp dword [ebx], ebx
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [edx], dl
pushal
sbb eax, dword [eax]
pop edx
cmp ebx, dword [ebx]
add byte [eax - 0x72ffe4c7], al
cmp ebx, dword [ebx]
add byte [eax], dl
sbb eax, dword ds:[eax]
push ds
sbb eax, dword ds:[eax]
popal
pop edi
sbb eax, dword [eax]
popal
sbb eax, dword ds:[eax]
sbb eax, dword ds:[eax]
popal
sbb eax, dword ds:[eax]
sbb eax, dword ds:[eax]
push edx
pop edi
sbb eax, dword [eax]
dec ecx
pop edi
sbb eax, dword [eax]
popal
pop edi
sbb eax, dword [eax]
dec ecx
pop edi
sbb eax, dword [eax]
sbb dword [ebp + 0x1b], ebx
add byte [edi + 95], ah
sbb eax, dword [eax]
pop ds
pop ebp
sbb eax, dword [eax]
sub byte [ebp + 0x1b], bl
add byte [edi + 95], ah
sbb eax, dword [eax]
pop ds
pop ebp
sbb eax, dword [eax]
cmp byte [edi + 0x1b], bl
add byte [eax + 45], dl
sbb eax, dword [eax]
cld
dec esi
sbb eax, dword [eax]
ror byte [ebx + ebx], 0xf1
dec ebp
sbb eax, dword [eax]
cld
dec esi
sbb eax, dword [eax]
cmovle ebx, dword [ebx]
add byte [eax + 45], ah
sbb eax, dword [eax]
inc esi
push edx
sbb eax, dword [eax]
popfd
push ecx
sbb eax, dword [eax]
in al, dx
push ecx
sbb eax, dword [eax]
pop ss
push edx
sbb eax, dword [eax]
or byte [ebx + ebx], 0x17
push edx
sbb eax, dword [eax]
inc eax
push edx
sbb eax, dword [eax]
sbb eax, 0x40001b53
push edx
sbb eax, dword [eax]
inc eax
push edx
sbb eax, dword [eax]
inc eax
push edx
sbb eax, dword [eax]
inc esi
push edx
sbb eax, dword [eax]
iretd