Function at 0x643150
Capabilities:
Authenticate hmac
Encode data using base64
Encode data using xor
Encrypt data using speck
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x15c
mov eax, dword [esp + 0x170]
mov dword [esp + 0x134], ecx
mov esi, dword [ecx]
mov dword [esp + 0xbc], 0
mov dword [esp + 0x13c], edx
mov ebp, dword [edx]
mov eax, dword [eax]
mov dword [esp + 4], eax
mov edi, esi
and edi, 0x800
sete byte [esp + 0x53]
mov edx, edi
shr edx, 0xb
mov dword [esp + 0x9c], edx
mov edx, esi
shr edx, 9
and edx, 1
mov dword [esp + 0xd4], edx
xor edx, 1
mov dword [esp + 0xf4], edx
mov dword [esp + 0x1c], esi
and esi, 1
mov dword [esp + 0xb4], esi
mov ebx, dword [esp + 0x194]
xor edx, edx
test ebx, ebx
setne dl
lea esi, [esp + 0xbc]
cmove esi, ebx
mov dword [esp + 0x138], esi
or edx, 2
mov dword [esp + 0xf0], edx
mov edx, dword [esp + 0x190]
lea esi, [edx + 0x88]
mov dword [esp + 0xb8], esi
lea edx, [edx + 0x64]
mov dword [esp + 0xc0], edx
mov dword [esp + 0x28], 0xfffffffe
mov dword [esp + 0x3c], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0xc4], ebp
mov dword [esp + 0xd8], ebp
mov dword [esp + 0xdc], 0
mov dword [esp + 0x44], 0xfffffffe
mov dword [esp + 0x4c], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x18], 0xfffffffe
mov dword [esp + 0x14], 0xfffffffe
mov dword [esp + 0x20], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x60], edi
jmp 0x6432c0
add ecx, 0xe
mov dword [esp + 4], eax
mov dword [esp + 0x64], ecx
jmp 0x6432c0
mov eax, str._b__w_
jmp 0x6432a0
movzx eax, word [eax]
mov ecx, dword [esp + 0x64]
test ecx, ecx
je 0x6432d9
test ax, ax
jne 0x6432d9
mov dword [esp + 4], ecx
movzx eax, word [ecx]
xor ecx, ecx
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x190]
mov edx, ecx
test ebx, ebx
je 0x643370
mov ecx, dword [edx + 0x10]
mov edx, dword [edx + 0x3c]
lea esi, [ecx + edx*2 - 0xc8]
cmp ebp, esi
ja 0x648524
mov edx, ebp
mov edi, dword [esp + 0xc4]
cmp edx, edi
cmovb edx, edi
mov ecx, dword [ebx]
mov esi, 0x7fffffeb
sub esi, ecx
mov ebp, edx
sub edx, edi
sar edx, 1
cmp esi, edx
jl 0x6485b7
add ecx, edx
mov dword [ebx], ecx
mov edi, dword [esp + 0xc]
test edi, edi
je 0x643390
mov ecx, edi
sub ecx, dword [esp + 0xd8]
jbe 0x64339f
mov edx, ebp
sub edx, edi
je 0x64335a
mov esi, dword [esp + 0xd8]
nop dword [eax]
movzx ebx, byte [edi]
inc edi
mov byte [esi], bl
inc esi
dec edx
jne 0x643350
sub ebp, ecx
mov ecx, dword [esp + 0xd8]
mov dword [esp + 0xc], ecx
jmp 0x64339f
mov ecx, dword [edx + 0x3c]
add ecx, ecx
add ecx, dword [edx + 0x10]
cmp dword [edx + 0x20], ecx
jbe 0x6433ad
jmp 0x648544
mov dword [esp + 0xc], 0
mov ebp, dword [esp + 0xd8]
mov dword [esp + 0xc4], ebp
mov ebx, dword [esp + 0x194]
movzx ecx, ax
test cx, cx
je 0x6433ec
cmp ecx, 0x5c
jne 0x6433cb
mov eax, dword [esp + 4]
movzx edx, word [eax + 2]
cmp edx, 0x45
je 0x6438f4
cmp dword [esp + 0x2c], 0
jne 0x643719
cmp ecx, 0x5c
jne 0x6433ec
mov eax, dword [esp + 4]
movzx edx, word [eax + 2]
cmp edx, 0x51
je 0x643908
test byte [esp + 0x1c], 8
je 0x64356b
cmp ecx, 0xff
ja 0x64356b
mov esi, dword [esp + 4]
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0xc]
lea eax, [esi + 2]
nop word cs:[eax + eax]
test byte [edx + ecx], 1
je 0x643440
mov dword [esp + 4], eax
movzx ecx, word [eax]
add eax, 2
cmp ecx, 0x100
jb 0x643420
jmp 0x643560
cmp ecx, 0x23
jne 0x643560
mov dword [esp + 4], eax
mov cx, word [eax]
test cx, cx
je 0x643633
mov dword [esp + 8], ebp
mov ebx, dword [esp + 0x60]
nop word cs:[eax + eax]
mov edx, dword [esp + 0x190]
mov edi, dword [edx + 0x1c]
mov edx, dword [edx + 0x84]
test edx, edx
je 0x6434c0
cmp eax, edi
jae 0x643520
sub esp, 0xc
push dword [esp + 0xa8]
push dword [esp + 0xc8]
push edi
push edx
push eax
call fcn.0065a200
add esp, 0x20
test eax, eax
jne 0x643707
mov edi, dword [esp + 4]
jmp 0x643522
mov edx, dword [esp + 0xb8]
mov edx, dword [edx]
lea ebx, [edx + edx]
sub edi, ebx
cmp eax, edi
jbe 0x6434da
mov edi, eax
mov ebx, dword [esp + 0x60]
jmp 0x643522
mov edi, dword [esp + 0x190]
cmp cx, word [edi + 0x8c]
mov ebx, dword [esp + 0x60]
jne 0x643520
cmp edx, 1
je 0x64391c
movzx ecx, word [eax + 2]
mov edi, dword [esp + 0x190]
cmp cx, word [edi + 0x8e]
mov edi, eax
jne 0x643522
jmp 0x643921
mov edi, eax
lea eax, [edi + 2]
test ebx, ebx
mov dword [esp + 4], eax
je 0x643549
movzx ecx, word [eax]
mov edx, ecx
and edx, 0xfc00
cmp edx, 0xdc00
jne 0x64354c
add edi, 4
mov dword [esp + 4], edi
mov eax, edi
mov cx, word [eax]
test cx, cx
jne 0x643470
jmp 0x643928
add eax, 0xfffffffe
cmp eax, esi
ja 0x6432c0
xor eax, eax
cmp ecx, 0x3e
jg 0x643645
lea edx, [ecx - 0x2a]
cmp edx, 2
jb 0x6436a3
cmp ecx, 0x28
jne 0x643ad1
mov eax, dword [esp + 4]
movzx edx, word [eax + 2]
cmp edx, 0x3f
jne 0x6435a5
movzx edx, word [eax + 4]
cmp edx, 0x23
je 0x644bc2
xor eax, eax
cmp dword [esp + 0x64], 0
jne 0x643adc
cmp dword [esp + 0x90], 0
je 0x643adc
test al, al
jne 0x643adc
mov edx, dword [esp + 0xdc]
test edx, edx
lea edx, [edx - 1]
mov dword [esp + 0xdc], edx
mov edx, 0
cmovg edx, dword [esp + 0x90]
jg 0x6438e8
test ebx, ebx
jne 0x6438e8
mov edx, dword [esp + 4]
mov esi, dword [esp + 0x190]
sub edx, dword [esi + 0x18]
shr edx, 1
mov esi, ebp
mov ebp, ebx
mov ebx, esi
mov edi, dword [esp + 0x90]
movzx esi, word [edi + 4]
sub edx, esi
mov word [edi + 6], dx
mov edx, ebx
mov ebx, ebp
mov ebp, edx
mov dword [esp + 0x90], 0
jmp 0x643adc
mov ecx, 0x23
cmp eax, esi
ja 0x6432c0
jmp 0x64356b
cmp ecx, 0x3f
je 0x6436a3
cmp ecx, 0x7b
jne 0x643ad1
mov eax, dword [esp + 4]
movzx edx, word [eax + 2]
add edx, 0xffffffd0
movzx esi, dx
xor edx, edx
cmp esi, 9
ja 0x643acc
add eax, 6
nop
movzx edx, word [eax - 2]
lea esi, [edx - 0x30]
movzx esi, si
add eax, 2
cmp esi, 0xa
jb 0x643670
movzx esi, dx
cmp esi, 0x2c
je 0x643a8d
mov edx, 1
cmp esi, 0x7d
je 0x643acc
xor edx, edx
jmp 0x643acc
mov al, 1
cmp ecx, 0x7c
ja case.0x6436ae.1
jmp dword [ecx*4 + 0x648908]
mov eax, dword [esp + 4]
add eax, 2
sub esp, 4
push 6
push 0x7d992c
push eax
call fcn.0065a4c0
add esp, 0x10
test eax, eax
mov ecx, dword [esp + 4]
je 0x6432ad
add ecx, 2
sub esp, 4
push 6
push str._:_:__
push ecx
call fcn.0065a4c0
add esp, 0x10
test eax, eax
jne 0x643b71
mov eax, str._b___w_
mov ecx, dword [esp + 4]
jmp 0x6432a0
mov eax, dword [esp + 0xb8]
mov edx, dword [eax]
mov eax, dword [esp + 4]
jmp 0x643921
test ebx, ebx
jne 0x643748
cmp dword [esp + 0x90], 0
je 0x643748
mov eax, dword [esp + 4]
mov edx, dword [esp + 0x190]
sub eax, dword [edx + 0x18]
shr eax, 1
mov esi, dword [esp + 0x90]
movzx edx, word [esi + 4]
sub eax, edx
mov word [esi + 6], ax
mov dword [esp + 0x90], 0
mov eax, dword [esp + 0x1c]
test ah, 0x40
je case.0x6436ae.1
mov eax, dword [esp + 4]
mov dword [ebp], 0xff0076
mov edx, dword [esp + 0x190]
sub eax, dword [edx + 0x18]
shr eax, 1
mov word [ebp + 4], ax
mov word [ebp + 6], 0
mov dword [esp + 0x90], ebp
lea ebp, [ebp + 8]
cmp dword [esp + 0x60], 0
mov word [esp + 0x124], cx
mov eax, 1
je 0x6437da
and ecx, 0xfc00
cmp ecx, 0xd800
jne 0x6437da
mov ecx, dword [esp + 4]
movzx edx, word [ecx + 2]
mov esi, edx
and esi, 0xfc00
mov eax, 1
cmp esi, 0xdc00
jne 0x6437da
add ecx, 2
mov dword [esp + 4], ecx
mov word [esp + 0x126], dx
mov eax, 2
mov ecx, dword [esp + 0x190]
mov edx, ecx
mov ecx, dword [edx + 0x20]
sub ecx, dword [edx + 0x10]
sar ecx, 1
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0x1c]
and ecx, 1
sete dl
or dl, byte [esp + 0x53]
jne 0x6438ad
movzx edx, word [esp + 0x124]
mov esi, edx
and esi, 0xfc00
cmp esi, 0xd800
jne 0x643839
shl edx, 0xa
and edx, 0xffc00
movzx esi, word [esp + 0x126]
and esi, 0x3ff
lea edx, [edx + esi + 0x10000]
mov esi, edx
sar esi, 0x1f
shr esi, 0x19
add esi, edx
mov edi, esi
and edi, 0x7fffff80
sar esi, 7
movzx esi, byte [esi + 0x7dd1f4]
shl esi, 7
sub edx, edi
add edx, esi
movzx edx, word [edx + edx + 0x7df3f4]
movzx edx, byte [edx*8 + 0x7dbb77]
test dx, dx
mov ebx, dword [esp + 0x194]
je 0x6438ad
mov dword [ebp], 0x90010
mov word [ebp + 4], dx
mov dword [esp + 0xc], ebp
lea ebp, [ebp + 6]
mov edx, dword [esp + 0x14]
cmp edx, 0xfffffffe
mov ecx, 0xffffffff
mov esi, dword [esp + 0x28]
cmove esi, ecx
mov dword [esp + 0x28], esi
cmove edx, ecx
mov dword [esp + 0x14], edx
jmp 0x6472fd
add ecx, 0x1d
mov word [ebp], cx
lea ecx, [ebp + 2]
test eax, eax
je 0x643945
mov edx, eax
lea esi, [esp + 0x124]
mov edi, ecx
nop word [eax + eax]
movzx ebx, word [esi]
mov word [edi], bx
add edi, 2
add esi, 2
dec edx
jne 0x6438d0
lea edx, [ebp + eax*2]
lea ecx, [ecx + eax*2]
jmp 0x643947
mov dword [esp + 0x90], edx
jmp 0x643adc
add eax, 2
mov dword [esp + 4], eax
mov dword [esp + 0x2c], 0
jmp 0x6472fd
add eax, 2
mov dword [esp + 4], eax
mov dword [esp + 0x2c], 1
jmp 0x6472fd
mov edx, 1
lea eax, [eax + edx*2]
mov dword [esp + 4], eax
mov ecx, 0x23
mov ebx, dword [esp + 0x194]
mov ebp, dword [esp + 8]
cmp eax, esi
ja 0x6432c0
jmp 0x64356b
mov edx, ebp
movzx esi, word [esp + 0x124]
cmp esi, 0xd
je 0x64395c
movzx edi, si
cmp edi, 0xa
jne 0x643967
mov ebx, dword [esp + 0xc0]
or byte [ebx + 1], 8
cmp eax, 1
sete bh
cmp dword [esp + 0xb4], 0
sete bl
or bl, bh
cmp dword [esp + 0x14], 0xfffffffe
jne 0x6439cb
test bl, bl
je 0x643a21
cmp eax, 1
mov ebx, dword [esp + 0x194]
jne 0x643b2a
mov dword [esp + 0x28], 0xffffffff
mov dword [esp + 0xc], ebp
mov ebp, ecx
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x14], eax
mov dword [esp + 0x34], esi
jmp 0x6472fd
test bl, bl
je 0x643a5b
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
movzx eax, word [edx]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x190]
mov edx, dword [edx + 0x68]
or edx, dword [esp + 0xb4]
mov dword [esp + 0xc], ebp
mov ebp, ecx
mov dword [esp + 0x18], edx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov ebx, dword [esp + 0x194]
jmp 0x6472fd
mov dword [esp + 0x28], 0xffffffff
mov dword [esp + 0xc], ebp
mov ebp, ecx
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov dword [esp + 0x18], 0xffffffff
mov dword [esp + 0x14], 0xffffffff
mov ebx, dword [esp + 0x194]
jmp 0x6472fd
mov dword [esp + 0xc], ebp
mov ebp, ecx
mov eax, dword [esp + 0x14]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov ebx, dword [esp + 0x194]
jmp 0x6472fd
movzx esi, word [eax - 2]
mov edx, 1
cmp esi, 0x7d
je 0x643acc
add esi, 0xffffffd0
movzx esi, si
xor edx, edx
cmp esi, 9
ja 0x643acc
nop dword [eax + eax]
movzx edx, word [eax]
lea esi, [edx - 0x30]
movzx esi, si
add eax, 2
cmp esi, 0xa
jb 0x643ab0
movzx eax, dx
xor edx, edx
cmp eax, 0x7d
sete dl
test edx, edx
setne al
cmp dword [esp + 0x64], 0
je 0x6435b2
mov edx, dword [esp + 0x1c]
test dh, 0x40
sete dl
cmp dword [esp + 0x64], 0
jne 0x643b1c
or dl, al
jne 0x643b1c
mov edx, dword [esp + 4]
mov dword [ebp], 0xff0076
mov esi, dword [esp + 0x190]
sub edx, dword [esi + 0x18]
shr edx, 1
mov word [ebp + 4], dx
mov word [ebp + 6], 0
mov dword [esp + 0x90], ebp
lea ebp, [ebp + 8]
cmp ecx, 0x7c
jbe switch.0x006436ae
jmp case.0x6436ae.1
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
movzx eax, word [edx]
mov dword [esp + 0xc], ebp
mov ebp, ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 0x68]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x34], esi
mov dword [esp + 0x28], 0xffffffff
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x14], eax
jmp 0x6472fd
mov eax, ebp
mov ebp, dword [esp + 0x190]
mov edi, eax
mov eax, dword [ebp + 0x20]
sub eax, dword [ebp + 0x10]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 4]
movzx eax, word [ecx + 2]
mov edx, eax
add edx, 0xffffffd2
movzx esi, dx
cmp esi, 0xf
ja 0x643c0f
mov esi, 0x9001
bt esi, edx
jae 0x643c0f
lea edx, [ecx + 4]
jmp 0x643bb3
add edx, 2
mov ebx, edi
movsx esi, word [edx]
movzx edi, si
cmp esi, 0x5b
jg 0x643bd0
cmp edi, 0x5b
jne 0x643bee
cmp word [edx + 2], ax
mov edi, ebx
jne 0x643bf5
jmp 0x643c0f
cmp edi, 0x5c
jne 0x643c08
movzx edi, word [edx + 2]
and edi, 0xfffe
cmp edi, 0x5c
mov edi, ebx
jne 0x643bf5
add edx, 2
add edx, 2
jmp 0x643bb3
test si, si
mov edi, ebx
je 0x643c0f
cmp si, ax
jne 0x643bb0
movzx esi, word [edx + 2]
cmp esi, 0x5d
jne 0x643bb0
jmp 0x6485de
cmp edi, 0x5d
mov edi, ebx
jne 0x643bf5
sar dword [esp + 0x3c], 1
xor ebp, ebp
mov dword [esp + 8], edi
jmp 0x643c28
mov ax, word [edx + 2]
mov ecx, edx
mov ebp, esi
lea edx, [ecx + 2]
mov dword [esp + 4], edx
movzx ebx, ax
cmp ebx, 0x5c
jne 0x643c50
movzx eax, word [ecx + 4]
add ecx, 4
cmp eax, 0x45
jne 0x643c70
mov dword [esp + 4], ecx
mov edx, ecx
mov esi, ebp
jmp 0x643c20
test ebp, ebp
jne 0x643c96
mov esi, 1
movzx ecx, ax
cmp ecx, 0x5e
je 0x643c20
jmp 0x643c96
sub esp, 4
push 3
push 0x7d9962
push ecx
call fcn.0065a4c0
add esp, 0x10
test eax, eax
jne 0x643ce0
mov edx, dword [esp + 4]
add edx, 6
mov dword [esp + 4], edx
mov esi, ebp
jmp 0x643c20
cmp ebx, 0x5d
jne 0x643d3b
mov eax, dword [esp + 0x190]
test byte [eax + 0x63], 2
je 0x643ce5
test ebp, ebp
mov ax, 0xd
mov cx, 0x9d
cmove ax, cx
mov word [edi], ax
mov dword [esp + 0xc], edi
lea ebp, [edi + 2]
mov edx, dword [esp + 0x14]
cmp edx, 0xfffffffe
mov ecx, 0xffffffff
cmove edx, ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x28], edx
jmp 0x643a0d
mov ebx, 0x5c
lea edi, [edi + 6]
mov dword [esp + 0x38], edi
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x6c], 0
mov ecx, dword [esp + 0x64]
jmp 0x643d98
lea edi, [edi + 6]
mov dword [esp + 0x38], edi
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x6c], 0
test ax, ax
mov ecx, dword [esp + 0x64]
je 0x644f05
mov eax, dword [esp + 0x1c]
mov edx, eax
and edx, 1
mov dword [esp + 0x8c], edx
and eax, 0x800
cmp eax, 1
sbb eax, eax
or eax, 0x10ffff
mov dword [esp + 0x48], eax
mov dword [esp + 0x24], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0x54], 0
xor edx, edx
mov dword [esp + 0x58], edi
mov dword [esp + 0x30], ebp
jmp 0x6446d0
movzx eax, word [edx - 6]
cmp eax, 0x51
jne 0x643e5e
lea eax, [edx - 4]
mov dword [esp + 4], eax
movzx esi, word [edx - 4]
cmp esi, 0x5c
jne 0x643e65
movzx eax, word [edx - 2]
cmp eax, 0x45
jne 0x643e80
mov dword [esp + 4], edx
movzx esi, word [edx]
add edx, 8
cmp esi, 0x5c
je 0x643ded
add edx, 0xfffffff8
mov dword [esp + 0x2c], 0
jmp 0x643e70
mov dl, byte [esp + 0x5c]
jmp 0x643e97
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1f
mov ecx, 6
mov ebx, dword [esp + 0x194]
xor esi, esi
mov eax, dword [esp + 0x10]
cmp ecx, 0x12
jne 0x64447c
jmp 0x644484
add edx, 0xfffffff8
xor ecx, ecx
jmp 0x643e88
add edx, 0xfffffffc
mov dword [esp + 0x2c], 1
mov eax, edx
test si, si
jne 0x644acf
jmp 0x644aee
add edx, 0xfffffffc
mov ecx, 1
mov eax, edx
mov dword [esp + 0x2c], ecx
test ecx, ecx
setne dl
mov si, 0x5c
movzx esi, si
cmp dword [esp + 0x60], 0
mov dword [esp + 0x104], esi
je 0x643eeb
mov ecx, esi
and ecx, 0xfc00
mov edi, ebp
cmp ecx, 0xd800
jne 0x643eed
shl esi, 0xa
and esi, 0xffc00
movzx ecx, word [eax + 2]
add eax, 2
and ecx, 0x3ff
lea esi, [esi + ecx + 0x10000]
mov dword [esp + 0x104], esi
mov dword [esp + 4], eax
test dl, dl
je 0x643ef5
jmp 0x64444c
mov edi, ebp
test dl, dl
jne 0x64444c
cmp esi, 0x5b
je 0x643f6b
cmp esi, 0x5c
jne 0x64444c
lea ecx, [esp + 4]
lea edx, [esp + 0x104]
push 1
push dword [esp + 0x20]
mov eax, dword [esp + 0x198]
push dword [eax + 0x40]
mov eax, dword [esp + 0x180]
mov esi, eax
push esi
call fcn.00649440
add esp, 0x10
mov ecx, 6
cmp dword [esi], 0
jne 0x644466
cmp eax, 5
mov ebp, edi
mov esi, dword [esp + 0x2c]
je 0x64441b
test eax, eax
jne 0x644436
mov edi, ebp
mov esi, dword [esp + 0x104]
cmp esi, ebx
jb 0x644454
jmp 0x6441d0
mov ebp, edi
movzx ecx, word [eax + 2]
mov esi, 0x5b
lea edx, [ecx - 0x2e]
movzx edi, dx
cmp edi, 0xf
ja 0x64444a
mov edi, 0x9001
bt edi, edx
mov edi, ebp
jae 0x64444c
add eax, 4
jmp 0x643f9d
add eax, 2
movsx edx, word [eax]
mov esi, 0x5b
movzx edi, dx
cmp edx, 0x5b
jg 0x643fbf
cmp edi, 0x5b
jne 0x643fdd
cmp word [eax + 2], cx
mov edi, ebp
jne 0x643ff4
jmp 0x6441c3
cmp edi, 0x5c
jne 0x643fe9
movzx esi, word [eax + 2]
and esi, 0xfffe
cmp esi, 0x5c
mov edi, ebp
jne 0x643ff4
add eax, 2
add eax, 2
jmp 0x643f9d
test dx, dx
mov edi, ebp
jne 0x643ff4
jmp 0x64444c
cmp edi, 0x5d
mov edi, ebp
je 0x64444c
cmp dx, cx
jne 0x643f9a
movzx edx, word [eax + 2]
cmp edx, 0x5d
jne 0x643f9a
mov eax, dword [esp + 0x174]
mov dword [eax], 0x53
jmp 0x644461
test ebx, ebx
js 0x6449c8
cmp ebx, 3
mov edi, ebx
mov eax, 0
cmovl edi, eax
cmp dword [esp + 0x8c], 0
cmove edi, ebx
test dword [esp + 0x1c], 0x20000000
jne 0x64448d
shl edi, 2
mov eax, dword [edi + edi*2 + 0x7d99d8]
mov ebp, dword [esp + 0xa8]
mov ecx, dword [ebp + eax + 0x1c]
mov dword [esp + 0x120], ecx
mov ecx, dword [ebp + eax + 0x18]
mov dword [esp + 0x11c], ecx
mov ecx, dword [ebp + eax + 0x14]
mov dword [esp + 0x118], ecx
mov ecx, dword [ebp + eax + 0x10]
mov dword [esp + 0x114], ecx
mov ecx, dword [ebp + eax + 0xc]
mov dword [esp + 0x110], ecx
mov ecx, dword [ebp + eax + 8]
mov dword [esp + 0x10c], ecx
mov ecx, dword [ebp + eax]
mov eax, dword [ebp + eax + 4]
mov dword [esp + 0x108], eax
mov dword [esp + 0x104], ecx
mov ecx, dword [edi + edi*2 + 0x7d99dc]
mov eax, dword [edi + edi*2 + 0x7d99e0]
test ecx, ecx
js 0x6440ed
add ebp, ecx
xor ecx, ecx
test eax, eax
js 0x6440d9
movzx edx, byte [ebp + ecx]
or byte [esp + ecx + 0x104], dl
inc ecx
cmp ecx, 0x20
jne 0x6440c5
jmp 0x6440ed
movzx edx, byte [ebp + ecx]
not dl
and byte [esp + ecx + 0x104], dl
inc ecx
cmp ecx, 0x20
jne 0x6440d9
mov edx, dword [esp + 0x98]
mov ecx, eax
neg ecx
cmovl ecx, eax
cmp ecx, 1
mov ebx, dword [esp + 0x194]
je 0x644551
cmp ecx, 2
mov ebp, dword [esp + 8]
jne 0x644563
mov al, 0x7f
mov ecx, 0xb
jmp 0x64455c
mov esi, edx
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc8], 0
sub esp, 4
lea ecx, [esp + 8]
lea edx, [esp + 0x108]
push dword [esp + 0x178]
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0xd8]
push eax
call fcn.00649f50
add esp, 0x10
test eax, eax
je 0x6444f9
xor ecx, ecx
cmp ebx, 0x10
sete cl
xor eax, eax
cmp dword [esp + 0x104], ecx
sete al
add eax, 3
mov ecx, dword [esp + 0x38]
mov word [ecx], ax
movzx eax, word [esp + 0xcc]
mov word [ecx + 2], ax
movzx eax, word [esp + 0xc8]
lea edx, [ecx + 6]
mov dword [esp + 0x38], edx
mov word [ecx + 4], ax
mov ecx, 0x12
mov dword [esp + 0xac], 1
jmp 0x644504
mov esi, 0x5b
cmp esi, ebx
jb 0x644454
mov ebp, edi
je 0x644af2
cmp esi, 0xd
je 0x6441e2
cmp esi, 0xa
jne 0x6441ed
mov eax, dword [esp + 0xc0]
or byte [eax + 1], 8
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push esi
push ebx
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.0064a4f0
add esp, 0x10
add dword [esp + 0x24], eax
mov ecx, 0x12
mov eax, 2
mov esi, dword [esp + 0x2c]
jmp 0x644470
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx + 0x40]
not dl
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x644225
jmp 0x644299
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx + 0x40]
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x64423e
jmp 0x6442bb
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx]
not dl
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x644255
jmp 0x644299
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx]
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x64426d
jmp 0x6442bb
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx + 0xa0]
not dl
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x644283
mov dword [esp + 0x54], 1
jmp 0x6442bb
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx + 0xa0]
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x6442a7
mov dword [esp + 0x10], edi
mov eax, ebx
mov dword [esp + 0x24], eax
jmp case.0x64489d.25
test byte [esp + 0x1c], 0x40
jne 0x6487fa
mov eax, dword [esp + 4]
movzx ebx, word [eax]
jmp case.0x64489d.5
mov dword [esp + 0x10], edi
mov esi, dword [0x7db018]
test esi, esi
je 0x6445b4
lea eax, [esi - 1]
lea ecx, [esp + 0x6c]
mov edi, edx
lea edx, [esp + 0x38]
push eax
push 0
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.0064a4f0
mov edx, edi
add esp, 0x10
cmp esi, 0xffffffff
mov ecx, ebp
jne 0x6445b8
jmp 0x6443b8
mov eax, dword [0x7db018]
cmp eax, 0xffffffff
je 0x64451d
mov dword [esp + 0x2c], edx
mov esi, 0x7db018
mov ebx, dword [esp + 0x1c]
mov ecx, eax
inc ecx
cmp ecx, dword [esi + 4]
lea esi, [esi + 4]
je 0x644345
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push dword [esi - 4]
push eax
push dword [esp + 0x198]
push ebx
call fcn.0064a4f0
add esp, 0x10
mov eax, dword [esi]
cmp eax, 0xffffffff
jne 0x644343
jmp 0x644408
mov dword [esp + 0x10], edi
mov esi, dword [0x7db068]
test esi, esi
je 0x644605
lea eax, [esi - 1]
lea ecx, [esp + 0x6c]
mov edi, edx
lea edx, [esp + 0x38]
push eax
push 0
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.0064a4f0
mov edx, edi
add esp, 0x10
cmp esi, 0xffffffff
mov ecx, ebp
jne 0x644609
xor esi, esi
jmp 0x644523
mov eax, dword [0x7db068]
cmp eax, 0xffffffff
je 0x64451d
mov dword [esp + 0x2c], edx
mov esi, 0x7db068
mov ebx, dword [esp + 0x1c]
mov ecx, eax
inc ecx
cmp ecx, dword [esi + 4]
lea esi, [esi + 4]
je 0x6443dc
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push dword [esi - 4]
push eax
push dword [esp + 0x198]
push ebx
call fcn.0064a4f0
add esp, 0x10
mov eax, dword [esi]
cmp eax, 0xffffffff
jne 0x6443da
mov dword [esp + 0x10], edi
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x24], eax
xor esi, esi
jmp case.0x64489d.25
mov edi, ebp
mov dword [esp + 0x104], 8
mov esi, 8
cmp esi, ebx
jb 0x644454
jmp 0x6441d0
mov eax, dword [esp + 0x174]
mov dword [eax], 0x53
mov ecx, 6
jmp 0x64446c
mov edi, ebp
cmp esi, ebx
jae 0x6441d0
mov eax, dword [esp + 0x174]
mov dword [eax], 8
mov ecx, 6
mov ebp, edi
mov esi, dword [esp + 0x2c]
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x194]
cmp ecx, 0x12
je 0x644484
test ecx, ecx
jne 0x6458f1
mov dword [esp + 0x10], eax
jmp case.0x64489d.25
mov ecx, dword [esp + 0x68]
test ecx, ecx
mov eax, 0xe
cmove eax, ecx
add eax, edi
mov ecx, 0x62bd8af
bt ecx, eax
jb 0x64452e
lea eax, [edi - 8]
cmp eax, 2
ja 0x644663
add eax, 0xb
mov edx, dword [esp + 0x68]
add edx, 3
mov ecx, dword [esp + 0x38]
mov word [ecx], dx
mov word [ecx + 2], ax
lea eax, [ecx + 6]
mov dword [esp + 0x38], eax
mov word [ecx + 4], 0
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
mov ecx, 0x12
mov dword [esp + 0xac], 1
jmp 0x6449da
mov ecx, 6
mov eax, esi
mov dword [esp + 0x24], eax
mov ebx, dword [esp + 0x194]
xor esi, esi
mov eax, edi
cmp ecx, 0x12
jne 0x64447c
jmp 0x644484
xor esi, esi
mov dword [esp + 0x10], edi
mov eax, edx
mov dword [esp + 0x24], eax
jmp case.0x64489d.25
mov eax, dword [eax*4 + 0x7d9968]
add eax, 0xfffffffe
mov dword [esp + 4], eax
mov ecx, 0x12
mov eax, dword [esp + 0x98]
mov dword [esp + 0x64], eax
jmp 0x6449da
mov al, 0xc3
mov ecx, 1
mov ebp, dword [esp + 8]
and byte [esp + ecx + 0x104], al
cmp dword [esp + 0x68], 0
je 0x644582
xor eax, eax
movzx ecx, byte [esp + eax + 0x104]
not cl
or byte [esp + eax + 0x6c], cl
inc eax
cmp eax, 0x20
jne 0x64456c
jmp 0x644596
xor eax, eax
movzx ecx, byte [esp + eax + 0x104]
or byte [esp + eax + 0x6c], cl
inc eax
cmp eax, 0x20
jne 0x644584
mov dword [esp + 4], edx
mov ecx, 0x12
mov dword [esp + 0x10], 2
mov dword [esp + 0x24], 1
jmp 0x643e4a
xor esi, esi
mov ecx, ebp
mov dword [esp + 0x2c], edx
mov ebx, 0x7db01c
jmp 0x6445c8
add ebx, 4
mov esi, eax
mov eax, dword [ebx]
inc esi
cmp eax, esi
je 0x6445c3
mov ebp, ecx
cmp eax, 0xffffffff
mov edi, dword [esp + 0x48]
je 0x6445dd
dec eax
mov edi, eax
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push edi
push esi
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.0064a4f0
add esp, 0x10
mov eax, dword [ebx]
cmp eax, 0xffffffff
mov ecx, ebp
jne 0x6445c3
jmp 0x644654
xor esi, esi
mov ecx, ebp
mov dword [esp + 0x2c], edx
mov ebx, 0x7db06c
jmp 0x644619
add ebx, 4
mov esi, eax
mov eax, dword [ebx]
inc esi
cmp eax, esi
je 0x644614
mov ebp, ecx
cmp eax, 0xffffffff
mov edi, dword [esp + 0x48]
je 0x64462e
dec eax
mov edi, eax
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push edi
push esi
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.0064a4f0
add esp, 0x10
mov eax, dword [ebx]
cmp eax, 0xffffffff
mov ecx, ebp
jne 0x644614
xor esi, esi
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x24], eax
jmp case.0x64489d.25
cmp dword [esp + 0x68], 0
je 0x644042
cmp dword [esp + 0xc], 0
jne 0x644682
movzx eax, word [esi + 4]
cmp eax, 0x5d
je 0x644042
mov eax, dword [esp + 0x38]
lea ecx, [eax + 2]
mov dword [esp + 0x38], ecx
mov word [eax], 2
sub esp, 8
push ecx
push pe_nt_image_headers32
call fcn.0065a380
add esp, 0x10
add eax, eax
add eax, dword [esp + 0x38]
mov dword [esp + 0x38], eax
sub esp, 8
push eax
push 0x10ffff
call fcn.0065a380
add esp, 0x10
add eax, eax
add dword [esp + 0x38], eax
jmp 0x644042
mov dword [esp + 0x64], ecx
cmp dword [esp + 0x60], 0
je 0x644721
mov eax, ebx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x644721
mov eax, dword [esp + 4]
movzx ebx, word [eax]
mov ecx, ebx
and ecx, 0xfc00
cmp ecx, 0xd800
jne 0x644721
shl ebx, 0xa
and ebx, 0xffc00
movzx ecx, word [eax + 2]
add eax, 2
and ecx, 0x3ff
lea ebx, [ebx + ecx + 0x10000]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
cmp eax, edi
mov ecx, 1
cmova edx, ecx
cmp dword [esp + 0x194], 0
je 0x64474c
sub eax, edi
jbe 0x64474c
sar eax, 1
mov ecx, dword [esp + 0x194]
add dword [ecx], eax
mov dword [esp + 0x38], edi
cmp dword [esp + 0x2c], 0
mov dword [esp + 0xc], edx
je 0x644788
mov ebp, dword [esp + 8]
cmp ebx, 0x5c
jne case.0x64489d.5
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
mov ebx, 0x5c
cmp ecx, 0x45
jne case.0x64489d.5
add eax, 2
mov dword [esp + 4], eax
xor esi, esi
jmp case.0x64489d.25
mov ebp, dword [esp + 8]
cmp ebx, 0x5c
je 0x64485b
cmp ebx, 0x5b
jne case.0x64489d.5
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
mov ebx, 0x5b
lea edx, [ecx - 0x2e]
movzx esi, dx
cmp esi, 0xf
ja case.0x64489d.5
mov esi, 0x9001
bt esi, edx
jae case.0x64489d.5
lea esi, [eax + 4]
mov dword [esp + 0x5c], esi
jmp 0x6447e3
add esi, 2
movsx edx, word [esi]
mov ebx, 0x5b
movzx edi, dx
cmp edx, 0x5b
jg 0x644810
cmp edi, 0x5b
jne 0x64482d
cmp word [esi + 2], cx
mov ebp, dword [esp + 8]
jne 0x64483a
jmp 0x6449ea
cmp edi, 0x5c
jne 0x64484d
movzx edi, word [esi + 2]
and edi, 0xfffe
cmp edi, 0x5c
mov ebp, dword [esp + 8]
jne 0x64483a
add esi, 2
jmp 0x6447e0
test dx, dx
mov ebp, dword [esp + 8]
je case.0x64489d.5
cmp dx, cx
jne 0x6447e0
movzx edx, word [esi + 2]
cmp edx, 0x5d
jne 0x6447e0
jmp 0x64492c
cmp edi, 0x5d
mov ebp, dword [esp + 8]
jne 0x64483a
jmp case.0x64489d.5
lea ecx, [esp + 4]
lea edx, [esp + 0xe0]
push 1
push dword [esp + 0x20]
mov eax, dword [esp + 0x198]
push dword [eax + 0x40]
mov eax, dword [esp + 0x180]
mov esi, eax
push esi
call fcn.00649440
add esp, 0x10
cmp dword [esi], 0
jne 0x6485c4
cmp eax, 0x1a
ja case.0x64489d.1
xor esi, esi
mov ebx, 8
jmp dword [eax*4 + 0x648fb8]
mov ebx, dword [esp + 0xe0]
jmp case.0x64489d.5
mov ebx, eax
lea ecx, [eax - 6]
cmp ecx, 0x1c
mov esi, dword [esp + 0x10]
ja case.0x6448d4.12
mov eax, dword [esp + 0x190]
mov eax, dword [eax + 8]
mov edx, dword [esp + 0x24]
inc edx
lea edi, [esi + 2]
jmp dword [ecx*4 + 0x649024]
mov eax, dword [esp + 4]
mov dword [esp + 0x64], eax
mov eax, dword [ebx*4 + 0x7d9a0c]
add eax, 0xfffffffe
mov dword [esp + 4], eax
xor esi, esi
mov dword [esp + 0x10], edi
jmp case.0x64489d.25
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
mov esi, 1
cmp ecx, 0x5c
jne case.0x64489d.25
movzx ecx, word [eax + 4]
mov esi, 1
cmp ecx, 0x45
jne case.0x64489d.25
add eax, 4
jmp 0x64477d
movzx ecx, cx
cmp ecx, 0x3a
jne 0x643e31
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 8]
mov dword [esp + 0xa8], ecx
mov ebp, dword [esp + 0x5c]
mov dword [esp + 4], ebp
movzx ecx, word [ebp]
xor edx, edx
cmp ecx, 0x5e
jne 0x644972
add eax, 6
mov dword [esp + 4], eax
mov edx, 1
mov ebp, eax
mov dword [esp + 0x54], 1
mov dword [esp + 0x68], edx
lea eax, [esi + 2]
mov dword [esp + 0x98], eax
mov eax, esi
sub eax, ebp
sar eax, 1
mov edx, str.alpha
xor ebx, ebx
mov dword [esp + 0x5c], eax
movzx edi, byte [ebx + 0x7d9c03]
cmp eax, edi
jne 0x6449be
sub esp, 4
push eax
push edx
push ebp
mov dword [esp + 0x3c], edx
call fcn.0065a4c0
mov edx, dword [esp + 0x3c]
add esp, 0x10
test eax, eax
mov eax, dword [esp + 0x5c]
je 0x644014
lea edx, [edx + edi + 1]
inc ebx
cmp ebx, 0xe
jne 0x644991
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1e
mov ecx, 6
mov ebx, dword [esp + 0x194]
mov ebp, dword [esp + 8]
jmp 0x643e4a
mov ebx, 0x5b
mov ecx, dword [esp + 4]
movzx eax, word [ecx + 2]
cmp eax, 0x5c
jne 0x644a42
mov edx, ecx
add edx, 4
nop word cs:[eax + eax]
mov esi, edx
movzx eax, word [esi]
cmp eax, 0x45
jne 0x644a4f
mov dword [esp + 4], esi
movzx eax, word [esi + 2]
lea edx, [esi + 4]
mov dword [esp + 0x2c], 0
cmp eax, 0x5c
mov ecx, esi
je 0x644a10
add edx, 0xfffffffc
xor edi, edi
mov ecx, esi
cmp ebx, 0xd
jne 0x644a61
jmp 0x644a66
mov edi, dword [esp + 0x2c]
mov edx, ecx
cmp ebx, 0xd
jne 0x644a61
jmp 0x644a66
add esi, 0xfffffffc
mov ax, 0x5c
mov edi, dword [esp + 0x2c]
mov edx, esi
cmp ebx, 0xd
je 0x644a66
cmp ebx, 0xa
jne 0x644a71
mov esi, dword [esp + 0xc0]
or byte [esi + 1], 8
mov esi, edi
test esi, esi
jne 0x644af6
movzx eax, ax
xor esi, esi
cmp eax, 0x2d
jne 0x644af6
lea eax, [edx + 4]
mov dword [esp + 4], eax
movzx esi, word [edx + 4]
cmp esi, 0x5c
jne 0x644ac2
lea eax, [edx + 8]
add edx, 0xc
nop word [eax + eax]
movzx esi, word [eax - 2]
cmp esi, 0x45
jne 0x643ded
mov dword [esp + 4], eax
movzx esi, word [eax]
add eax, 4
add edx, 4
cmp esi, 0x5c
je 0x644aa0
add eax, 0xfffffffc
mov dword [esp + 0x2c], 0
test si, si
je 0x644aee
mov edx, dword [esp + 0x2c]
test edx, edx
setne byte [esp + 0x5c]
movzx edi, si
cmp edi, 0x5d
jne 0x643e2b
test edx, edx
jne 0x643e2b
mov dword [esp + 4], ecx
mov esi, dword [esp + 0x2c]
xor eax, eax
mov ecx, dword [esp + 0x10]
cmp ecx, 2
setl al
add ecx, eax
mov dword [esp + 0x10], ecx
cmp ecx, 1
jne 0x644b29
mov eax, esi
or eax, dword [esp + 0xac]
jne 0x644b29
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
cmp ecx, 0x5d
je 0x64513a
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push ebx
push ebx
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.0064a4f0
add esp, 0x10
add dword [esp + 0x24], eax
mov eax, dword [esp + 4]
lea ecx, [eax + 2]
mov dword [esp + 4], ecx
movzx ebx, word [eax + 2]
test ebx, ebx
je 0x644b6f
mov ecx, dword [esp + 0x64]
mov ebp, dword [esp + 0x30]
mov edi, dword [esp + 0x58]
mov edx, dword [esp + 0xc]
jmp 0x644b9c
mov ecx, dword [esp + 0x64]
test ecx, ecx
mov ebp, dword [esp + 0x30]
mov edi, dword [esp + 0x58]
mov edx, dword [esp + 0xc]
je 0x644f2b
lea eax, [ecx + 2]
mov dword [esp + 4], eax
movzx ebx, word [ecx + 2]
xor ecx, ecx
test ebx, ebx
je 0x644f2d
test esi, esi
mov dword [esp + 0x2c], esi
jne 0x6446d0
cmp ebx, 0x5d
mov dword [esp + 0x2c], esi
jne 0x6446d0
mov dword [esp + 0x2c], 0
jmp 0x644f39
add eax, 4
movzx ecx, word [eax + 2]
add eax, 2
test cx, cx
sete dl
cmp ecx, 0x29
setne dh
xor dh, dl
jne 0x644bc5
test cx, cx
mov dword [esp + 4], eax
jne 0x6472fd
jmp 0x648667
mov eax, dword [esp + 0x1c]
shr eax, 1
and eax, 1
add eax, 0x19
mov word [ebp], ax
jmp 0x645295
mov ecx, dword [esp + 4]
lea eax, [ecx + 2]
mov dword [esp + 4], eax
movzx eax, word [ecx + 2]
cmp eax, 0x2a
jne 0x6451cc
mov dword [esp + 8], ebp
movzx eax, word [ecx + 4]
cmp eax, 0x3a
mov ebp, dword [esp + 0x190]
je 0x645319
movzx edx, ax
cmp edx, 0xff
ja 0x644c4b
mov edx, dword [ebp + 0xc]
test byte [edx + eax], 2
jne 0x645319
mov eax, dword [ebp + 0x20]
sub eax, dword [ebp + 0x10]
sar eax, 1
mov dword [esp + 0x3c], eax
mov ebx, dword [esp + 0x1c]
test bh, 0x10
je 0x645560
jmp 0x645585
mov dword [esp + 8], ebp
mov esi, 0xffffffff
jmp 0x644cd4
mov dword [esp + 8], ebp
mov esi, 0xffffffff
mov edi, 1
jmp 0x644cd6
mov ecx, dword [esp + 0x14]
cmp ecx, 0xfffffffe
mov eax, 0xffffffff
cmove ecx, eax
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0x20]
sub edx, dword [eax + 0x10]
sar edx, 1
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0x1c]
shr eax, 2
and eax, 1
or eax, 0xc
mov word [ebp], ax
mov dword [esp + 0xc], ebp
lea ebp, [ebp + 2]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x28], ecx
jmp 0x645513
mov dword [esp + 8], ebp
mov esi, 1
xor edi, edi
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x648643
test edi, edi
mov eax, dword [esp + 0x18]
cmove eax, dword [esp + 0x44]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x14]
cmove eax, dword [esp + 0x28]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x20]
cmove eax, dword [esp + 0x40]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x34]
cmove eax, dword [esp + 0x4c]
mov dword [esp + 0x34], eax
cmp esi, edi
setne byte [esp + 0xac]
test bl, 8
mov dword [esp + 0xa0], ecx
mov ebp, dword [esp + 4]
mov dword [esp + 0x10], edi
je 0x644d58
movzx eax, word [ebp + 2]
add ebp, 2
cmp eax, 0xff
mov ebx, dword [esp + 0x194]
jbe 0x645b9e
jmp 0x645c9b
mov ebx, dword [esp + 0x194]
jmp 0x645caa
mov dword [esp + 8], ebp
lea ecx, [esp + 4]
lea edx, [esp + 0xe0]
push 0
push dword [esp + 0x20]
mov eax, dword [esp + 0x198]
push dword [eax + 0x40]
mov eax, dword [esp + 0x180]
mov esi, eax
push esi
call fcn.00649440
add esp, 0x10
cmp dword [esi], 0
jne 0x6485c4
test eax, eax
je 0x6452a5
lea ebp, [eax - 6]
cmp ebp, 0x11
mov edi, eax
mov edx, dword [esp + 0x14]
mov esi, edx
mov ecx, 0xffffffff
cmovb esi, ecx
cmp edx, 0xfffffffe
cmovne esi, edx
mov edx, edi
mov dword [esp + 0x28], esi
cmp edx, 0x1c
mov ebx, dword [esp + 0x194]
je 0x645723
mov eax, ebp
cmp edx, 0x1b
mov ebp, dword [esp + 8]
jne 0x645776
mov eax, dword [esp + 0x190]
mov ecx, dword [eax + 0x20]
sub ecx, dword [eax + 0x10]
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 4]
lea eax, [ecx + 2]
mov dword [esp + 4], eax
movzx edx, word [ecx + 2]
cmp edx, 0x3c
mov esi, 0x27
mov edx, 0x3e
cmove esi, edx
mov dword [esp + 0x30], esi
movzx edx, word [ecx + 4]
cmp edx, 0x2b
je 0x644e3b
movzx esi, dx
cmp esi, 0x2d
je 0x644e3b
add edx, 0xffffffd0
movzx edx, dx
cmp edx, 9
ja 0x646c5e
lea edx, [ecx + 4]
add ecx, 6
movzx esi, word [ecx]
lea edi, [esi - 0x30]
movzx edi, di
add ecx, 2
cmp edi, 0xa
jb 0x644e41
cmp dword [esp + 0x30], esi
jne 0x645a7e
mov dword [esp + 4], edx
mov ecx, 0xa3
mov eax, edx
jmp 0x645a90
mov cx, 0x5d
mov eax, dword [esp + 0x190]
test byte [eax + 0x63], 2
je 0x644ef3
jmp 0x6486a4
test byte [esp + 0x1c], 2
jne 0x645271
mov word [ebp], 0x1b
jmp 0x645295
mov cx, 0x7b
test al, al
je 0x644ef3
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
mov edx, ecx
add edx, 0xffffffd0
movzx edx, dx
cmp edx, 9
ja 0x645530
add eax, 4
xor edi, edi
mov ebx, dword [esp + 0x1c]
movzx ecx, cx
lea edx, [edi + edi*4]
lea edi, [ecx + edx*2 - 0x30]
cmp edi, 0xffff
jg 0x64862f
movzx ecx, word [eax]
mov edx, ecx
add edx, 0xffffffd0
movzx edx, dx
add eax, 2
cmp edx, 9
jbe 0x644ec2
add eax, 0xfffffffe
jmp 0x645539
mov word [esp + 0x124], cx
mov eax, 1
jmp 0x6437da
mov dword [esp + 0x24], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0x54], 0
xor edx, edx
test ebx, ebx
jne 0x644f39
jmp 0x648655
xor ecx, ecx
mov dword [esp + 0x2c], esi
test ebx, ebx
je 0x648655
mov dword [esp + 0x64], ecx
mov eax, dword [esp + 0x38]
mov ebx, edx
mov edx, dword [esp + 0x14]
cmp edx, 0xfffffffe
mov ecx, 0xffffffff
cmove edx, ecx
mov dword [esp + 0x14], edx
test ebx, ebx
jne 0x644f5e
cmp eax, edi
jbe 0x644f82
mov ecx, dword [esp + 0x1c]
and ecx, 0x20000000
cmp dword [esp + 0x54], 0
je 0x6450c8
mov edx, dword [esp + 0xac]
or edx, ecx
jne 0x6450c8
mov ebx, dword [esp + 0x194]
test ebx, ebx
je 0x644fb6
sub eax, edi
sar eax, 1
add dword [ebx], eax
xor eax, eax
cmp ebp, dword [esp + 0x54]
sete al
mov ecx, 0x6f
sub ecx, eax
mov eax, dword [esp + 8]
mov word [eax], cx
mov dword [esp + 0xc], eax
lea ebp, [eax + 0x22]
jmp 0x64550b
xor eax, eax
cmp ebp, dword [esp + 0x54]
sete al
mov ecx, 0x6f
sub ecx, eax
mov esi, dword [esp + 8]
lea eax, [esi + 2]
mov word [esi], cx
test ebp, ebp
je 0x64507c
not byte [esp + 0x6c]
not byte [esp + 0x6d]
not byte [esp + 0x6e]
not byte [esp + 0x6f]
not byte [esp + 0x70]
not byte [esp + 0x71]
not byte [esp + 0x72]
not byte [esp + 0x73]
not byte [esp + 0x74]
not byte [esp + 0x75]
not byte [esp + 0x76]
not byte [esp + 0x77]
not byte [esp + 0x78]
not byte [esp + 0x79]
not byte [esp + 0x7a]
not byte [esp + 0x7b]
not byte [esp + 0x7c]
not byte [esp + 0x7d]
not byte [esp + 0x7e]
not byte [esp + 0x7f]
not byte [esp + 0x80]
not byte [esp + 0x81]
not byte [esp + 0x82]
not byte [esp + 0x83]
not byte [esp + 0x84]
not byte [esp + 0x85]
not byte [esp + 0x86]
not byte [esp + 0x87]
not byte [esp + 0x88]
not byte [esp + 0x89]
not byte [esp + 0x8a]
not byte [esp + 0x8b]
mov ecx, dword [esp + 0x88]
mov dword [eax + 0x1c], ecx
mov ecx, dword [esp + 0x84]
mov dword [eax + 0x18], ecx
mov ecx, dword [esp + 0x80]
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x7c]
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x78]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x74]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x70]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [esp + 0xc], esi
lea ebp, [esi + 0x22]
jmp 0x64550b
test ecx, ecx
mov edx, dword [esp + 0x60]
jne 0x64537d
test ebp, ebp
mov esi, dword [esp + 8]
jne 0x645398
cmp dword [esp + 0x54], 0
je 0x645398
lea ecx, [eax + 2]
test edx, edx
mov dword [esp + 0x38], ecx
mov word [eax], 2
je 0x645383
sub esp, 8
push ecx
push pe_nt_image_headers32
call fcn.0065a380
add esp, 0x10
add eax, eax
add eax, dword [esp + 0x38]
mov dword [esp + 0x38], eax
sub esp, 8
push eax
push 0x10ffff
call fcn.0065a380
add esp, 0x10
add eax, eax
add eax, dword [esp + 0x38]
mov dword [esp + 0x38], eax
jmp 0x645398
add eax, 2
mov dword [esp + 4], eax
cmp dword [esp + 0x30], 0
je 0x645349
mov edi, esi
mov ecx, dword [esp + 0x14]
cmp ecx, 0xfffffffe
mov eax, 0xffffffff
cmove ecx, eax
mov dword [esp + 0x14], ecx
mov esi, dword [esp + 0x8c]
test esi, esi
sete al
or al, byte [esp + 0x53]
jne 0x6452df
mov eax, ebx
sar eax, 0x1f
shr eax, 0x19
add eax, ebx
mov ecx, eax
and ecx, 0x7fffff80
sar eax, 7
movzx eax, byte [eax + 0x7dd1f4]
shl eax, 7
mov edx, ebx
sub edx, ecx
add edx, eax
movzx eax, word [edx + edx + 0x7df3f4]
movzx eax, byte [eax*8 + 0x7dbb77]
test ax, ax
je 0x6452df
mov dword [ebp], 0x9000f
mov word [ebp + 4], ax
mov dword [esp + 0xc], ebp
lea ebp, [ebp + 6]
jmp 0x64586a
mov edx, dword [esp + 0x190]
mov esi, dword [edx + 0x20]
sub esi, dword [edx + 0x10]
sar esi, 1
mov dword [esp + 0x3c], esi
movzx eax, ax
cmp eax, 0x3f
mov ebx, dword [esp + 0x1c]
jne 0x645550
lea eax, [ecx + 4]
mov dword [esp + 4], eax
movzx esi, word [ecx + 4]
lea edx, [esi - 0x21]
movzx edx, dx
cmp edx, 0x5b
ja case.0x645223.1
mov dword [esp + 0x10], 1
mov dword [esp + 0x30], 0x29
mov dword [esp + 0x58], 0x27
xor edi, edi
jmp dword [edx*4 + 0x648afc]
mov ebx, ebp
lea eax, [ecx + 6]
mov dword [esp + 4], eax
movzx eax, word [ecx + 6]
cmp eax, 0x29
jne 0x64525d
movzx eax, word [ecx + 8]
lea edx, [eax - 0x2a]
movzx edx, dx
cmp edx, 0x15
ja 0x647f84
mov esi, 0x200003
bt esi, edx
jae 0x647f84
mov ebp, dword [esp + 0x190]
inc dword [ebp + 0x5c]
mov edi, 0x7e
jmp 0x647d6e
mov ecx, dword [esp + 0x14]
cmp ecx, 0xfffffffe
mov eax, 0xffffffff
mov edx, dword [esp + 0x28]
cmove edx, eax
mov dword [esp + 0x28], edx
cmove ecx, eax
mov dword [esp + 0x14], ecx
mov word [ebp], 0x1c
add ebp, 2
mov dword [esp + 0xc], 0
jmp 0x6472fd
cmp dword [esp + 0x60], 0
mov eax, dword [esp + 0xe0]
je 0x645849
cmp eax, 0xffff
jbe 0x645849
sub esp, 8
lea ecx, [esp + 0x12c]
push ecx
push eax
call fcn.0065a380
add esp, 0x10
mov ebp, dword [esp + 8]
jmp 0x6437da
add esi, 0x1f
cmp dword [esp + 0x60], 0
mov word [ebp], si
je 0x64585f
cmp ebx, 0x10000
jb 0x64585f
lea esi, [ebp + 2]
sub esp, 8
push esi
push ebx
call fcn.0065a380
add esp, 0x10
mov dword [esp + 0xc], ebp
lea ebp, [esi + eax*2]
jmp 0x64586a
lea esi, [ecx + 4]
mov dword [esp + 4], esi
mov edx, dword [ebp + 0xc]
add ecx, 6
movzx edi, ax
test byte [edx + edi], 2
je 0x645873
mov dword [esp + 4], ecx
movzx eax, word [ecx]
add ecx, 2
cmp eax, 0x100
jb 0x645326
jmp case.0x6458c8.2
cmp dword [esp + 0x60], 0
mov dword [esp + 0x2c], esi
je 0x645906
cmp ebx, 0x10000
jb 0x645906
sub esp, 8
lea eax, [esp + 0x12c]
push eax
push ebx
call fcn.0065a380
add esp, 0x10
jmp 0x645913
mov esi, dword [esp + 8]
jmp 0x645398
mov word [eax + 2], pe_nt_image_headers32
lea ecx, [eax + 6]
mov dword [esp + 0x38], ecx
mov word [eax + 4], 0xffff
mov eax, ecx
xor ebx, ebx
test ebp, ebp
setne bl
lea ecx, [eax + 2]
mov dword [esp + 0x38], ecx
mov word [eax], 0
mov word [esi], 0x70
mov edx, ebx
or edx, 4
cmp dword [esp + 0xac], 0
cmove dx, bx
mov word [esi + 4], dx
cmp dword [esp + 0x24], 0
jle 0x6454f4
lea eax, [esi + 6]
or edx, 2
mov word [esi + 4], dx
sub ecx, eax
mov ebx, dword [esp + 0x194]
je 0x6453f1
movzx edx, byte [esi + ecx + 5]
mov byte [esi + ecx + 0x25], dl
dec ecx
jne 0x6453e5
test ebp, ebp
je 0x6454ab
cmp dword [esp + 0xac], 0
jne 0x6454ab
not byte [esp + 0x6c]
not byte [esp + 0x6d]
not byte [esp + 0x6e]
not byte [esp + 0x6f]
not byte [esp + 0x70]
not byte [esp + 0x71]
not byte [esp + 0x72]
not byte [esp + 0x73]
not byte [esp + 0x74]
not byte [esp + 0x75]
not byte [esp + 0x76]
not byte [esp + 0x77]
not byte [esp + 0x78]
not byte [esp + 0x79]
not byte [esp + 0x7a]
not byte [esp + 0x7b]
not byte [esp + 0x7c]
not byte [esp + 0x7d]
not byte [esp + 0x7e]
not byte [esp + 0x7f]
not byte [esp + 0x80]
not byte [esp + 0x81]
not byte [esp + 0x82]
not byte [esp + 0x83]
not byte [esp + 0x84]
not byte [esp + 0x85]
not byte [esp + 0x86]
not byte [esp + 0x87]
not byte [esp + 0x88]
not byte [esp + 0x89]
not byte [esp + 0x8a]
not byte [esp + 0x8b]
mov ecx, dword [esp + 0x88]
mov dword [eax + 0x1c], ecx
mov ecx, dword [esp + 0x84]
mov dword [eax + 0x18], ecx
mov ecx, dword [esp + 0x80]
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x7c]
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x78]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x74]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x70]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov ecx, dword [esp + 0x38]
add ecx, 0x20
jmp 0x6454fb
mov ebx, dword [esp + 0x194]
mov eax, ecx
sub eax, esi
shr eax, 1
mov word [esi + 2], ax
mov dword [esp + 0xc], esi
mov ebp, ecx
mov eax, dword [esp + 0x14]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
jmp 0x6472fd
add eax, 2
xor edi, edi
mov ebx, dword [esp + 0x1c]
mov dword [esp + 8], ebp
movzx ecx, cx
cmp ecx, 0x7d
jne 0x64582d
mov esi, edi
jmp 0x645a65
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x190]
test bh, 0x10
jne 0x645585
mov eax, dword [ebp + 0x40]
inc eax
mov dword [ebp + 0x40], eax
mov ecx, dword [esp + 8]
mov word [ecx + 4], ax
mov edi, 0x85
mov dword [esp + 0x10], 0
mov esi, 1
mov ecx, ebx
jmp 0x645596
mov edi, 0x83
xor esi, esi
mov ecx, ebx
mov dword [esp + 0x10], 0
mov eax, dword [ebp + 0x58]
lea edx, [eax + 1]
mov dword [ebp + 0x58], edx
cmp eax, 0xfa
jge 0x6486c8
mov edx, edi
cmp edi, 0x80
mov dword [esp + 0x30], esi
ja 0x6455dd
cmp dword [ebp + 0x80], 0
je 0x6455dd
mov eax, ebp
mov dword [eax + 0x80], 0
mov ebx, eax
mov dword [esp + 0xc], 0
mov eax, dword [esp + 8]
jmp 0x6455f5
mov edi, ebp
mov eax, dword [edi + 0x20]
sub eax, dword [edi + 0x10]
sar eax, 1
mov dword [esp + 0x3c], eax
mov ebx, edi
mov eax, dword [esp + 8]
mov dword [esp + 0xc], eax
mov edi, edx
mov word [eax], di
mov dword [esp + 0xa0], eax
mov esi, dword [ebx + 0x40]
mov eax, dword [ebx + 0x68]
mov dword [esp + 0x58], eax
mov dword [esp + 0xbc], 0
lea eax, [edi - 0x7f]
xor edx, edx
cmp eax, 2
setb dl
mov ebp, edx
xor eax, eax
cmp edi, 0x87
sete al
add eax, dword [esp + 0x18c]
sub esp, 0xc
lea edx, [esp + 0xac]
push dword [esp + 0x144]
push ebx
push dword [esp + 0x19c]
lea ebx, [esp + 0xe8]
push ebx
lea ebx, [esp + 0x104]
push ebx
lea ebx, [esp + 0x104]
push ebx
lea ebx, [esp + 0x124]
push ebx
push eax
push dword [esp + 0x5c]
push dword [esp + 0x40]
push ebp
push dword [esp + 0x1ac]
lea eax, [esp + 0x40]
push eax
call fcn.00641980
add esp, 0x40
test eax, eax
je 0x6485c4
mov eax, dword [esp + 0x190]
dec dword [eax + 0x58]
cmp edi, 0x81
mov ebp, dword [esp + 8]
jne 0x6456bc
mov eax, dword [esp + 0x190]
cmp dword [eax + 0x40], esi
ja 0x6456bc
mov word [ebp], 0x82
cmp edi, 0x80
mov ebx, dword [esp + 0x194]
ja 0x6456d5
mov eax, dword [esp + 0x190]
dec dword [eax + 0x5c]
test ebx, ebx
jne 0x645955
cmp edi, 0x87
jne 0x645955
mov eax, 0xffffffff
mov ecx, ebp
movzx edx, word [ecx + 2]
movzx esi, word [ecx + edx*2]
lea ecx, [ecx + edx*2]
inc eax
cmp esi, 0x78
jne 0x6456f0
movzx ecx, word [ebp + 4]
cmp ecx, 0x91
jne 0x645928
mov edi, 0x91
test eax, eax
jle 0x645955
jmp 0x64878e
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
cmp ecx, 0x27
mov ebp, dword [esp + 8]
je 0x645745
movzx edx, cx
cmp edx, 0x3c
je 0x645745
cmp edx, 0x7b
jne 0x648722
add eax, 2
mov dword [esp + 4], eax
movzx ecx, cx
cmp ecx, 0x27
mov edx, 0x7d
cmove edx, ecx
cmp ecx, 0x3c
mov ecx, 0x3e
cmove edx, ecx
mov dword [esp + 0x30], edx
mov dword [esp + 0x10], 0
jmp 0x646c82
test edx, edx
js 0x646944
lea ecx, [edx - 0xf]
cmp ecx, 1
ja 0x6469ac
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc8], 0
sub esp, 4
lea ecx, [esp + 8]
lea edx, [esp + 0x108]
push dword [esp + 0x178]
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0xd8]
push eax
call fcn.00649f50
add esp, 0x10
test eax, eax
je 0x646ff3
xor eax, eax
cmp edi, 0x10
sete al
mov ecx, dword [esp + 0x190]
mov edx, dword [ecx + 0x20]
sub edx, dword [ecx + 0x10]
sar edx, 1
mov dword [esp + 0x3c], edx
xor ecx, ecx
cmp dword [esp + 0x104], eax
sete cl
mov eax, 0x10
sub eax, ecx
mov word [ebp], ax
movzx eax, word [esp + 0xcc]
mov word [ebp + 2], ax
movzx eax, word [esp + 0xc8]
mov word [ebp + 4], ax
mov dword [esp + 0xc], ebp
lea ebp, [ebp + 6]
xor ecx, ecx
jmp 0x646ff8
lea edx, [eax + 2]
movzx ecx, word [eax + 2]
mov esi, 0xffffffff
cmp ecx, 0x7d
jne 0x645a0d
mov eax, edx
jmp 0x645a65
mov word [esp + 0x124], ax
mov eax, 1
mov ebp, dword [esp + 8]
jmp 0x6437da
mov word [ebp + 2], bx
mov dword [esp + 0xc], ebp
lea ebp, [ebp + 4]
mov dword [esp + 0x2c], edi
jmp 0x643a61
xor ebx, ebx
cmp edi, 0x3a
mov edi, 0
jne 0x6458ac
mov ebx, ecx
jmp 0x645886
add ebx, 2
mov ax, word [ebx]
test ax, ax
je 0x645896
movzx edx, ax
cmp edx, 0x29
jne 0x645883
mov dword [esp + 4], ebx
sub ebx, ecx
sar ebx, 1
cmp ebx, 0x10000
mov edi, ecx
jae 0x64880c
movzx eax, ax
cmp eax, 0x29
jne case.0x6458c8.2
add ecx, 0xfffffffe
sub ecx, esi
sar ecx, 1
cmp ecx, 6
ja case.0x6458c8.2
jmp dword [ecx*4 + 0x648e4c]
sub esp, 4
push 0
push 0x7d9b0f
push esi
call fcn.0065a4c0
add esp, 0x10
xor ecx, ecx
test eax, eax
je 0x647c41
jmp case.0x6458c8.2
mov dword [esp + 0xc], ebp
mov dword [esp + 0x2c], esi
test ecx, ecx
jne 0x647024
jmp 0x6472fd
mov word [esp + 0x124], bx
mov eax, 1
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x40], ecx
jmp 0x6437da
cmp eax, 2
jge 0x6487a0
mov edi, 0x87
test eax, eax
jne 0x645955
mov dword [esp + 0xd0], 0xffffffff
mov dword [esp + 0xe4], 0xffffffff
mov edi, 0x87
mov eax, dword [esp + 4]
movzx eax, word [eax]
cmp eax, 0x29
jne 0x6486da
test ebx, ebx
je 0x64599d
mov eax, dword [ebx]
mov edx, 0x7fffffeb
sub edx, eax
mov ecx, dword [esp + 0xbc]
add ecx, 0xfffffffc
cmp edx, ecx
jl 0x6485b7
add ecx, eax
mov dword [ebx], ecx
mov dword [ebp + 2], 0x780002
mov word [ebp + 6], 2
add ebp, 8
jmp 0x6472fd
mov ebp, dword [esp + 0xa0]
cmp edi, 0x91
je 0x6472fd
cmp edi, 0x81
jl 0x646b65
cmp dword [esp + 0x14], 0xfffffffe
mov ecx, dword [esp + 0xe4]
jne 0x6470a7
mov eax, ecx
shr eax, 0x1f
xor eax, 1
mov dword [esp + 0xb0], eax
cmp ecx, 0xfffffffe
mov dword [esp + 0x14], 0xffffffff
mov eax, 0xffffffff
cmovg eax, ecx
mov dword [esp + 8], eax
test ecx, ecx
mov ecx, dword [esp + 0x100]
mov eax, dword [esp + 0x34]
cmovs ecx, eax
mov dword [esp + 0x10], ecx
jmp 0x6470f5
mov dword [esp + 0x10], edi
lea esi, [ecx - 0x30]
movzx esi, si
xor edi, edi
cmp esi, 9
ja 0x645a53
add eax, 4
xor esi, esi
lea edx, [esi + esi*4]
movzx ecx, cx
lea esi, [ecx + edx*2 - 0x30]
cmp esi, 0xffff
jg 0x64862f
movzx ecx, word [eax]
mov edx, ecx
add edx, 0xffffffd0
movzx edx, dx
add eax, 2
cmp edx, 9
jbe 0x645a23
add eax, 0xfffffffe
mov edx, eax
mov edi, esi
cmp edi, dword [esp + 0x10]
mov esi, edi
jl 0x64881e
mov eax, edx
mov edi, dword [esp + 0x10]
mov ecx, dword [esp + 0x174]
cmp dword [ecx], 0
mov dword [esp + 4], eax
je 0x644cda
jmp 0x6485c4
mov ecx, dword [esp + 0x174]
mov dword [ecx], 0x39
mov ecx, 6
mov ebx, dword [esp + 0x194]
mov ebp, dword [esp + 8]
cmp cl, 0x86
je 0x646c77
sar dword [esp + 0x3c], 1
cmp cl, 0xa3
jne 0x64699b
mov si, word [eax]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x14], ecx
movzx ecx, si
cmp ecx, 0x2b
jne 0x645afb
lea edx, [eax + 2]
mov dword [esp + 4], edx
movzx esi, word [eax + 2]
mov eax, esi
add eax, 0xffffffd0
movzx eax, ax
cmp eax, 0xa
mov eax, edx
jb 0x645b1a
jmp 0x6487c4
cmp ecx, 0x2d
jne 0x645b1a
movzx esi, word [eax + 2]
lea edx, [esi - 0x30]
movzx edx, dx
cmp edx, 9
ja case.0x645223.1
add eax, 2
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
lea edx, [esi - 0x30]
movzx edx, dx
cmp edx, 9
ja 0x646901
add eax, 2
xor edx, edx
mov ebp, dword [esp + 0x190]
mov ebx, dword [esp + 0x194]
cmp edx, 0xccccccc
jge 0x648679
lea edx, [edx + edx*4]
mov dword [esp + 4], eax
movzx esi, si
lea edi, [esi + edx*2 - 0x30]
movzx esi, word [eax]
mov edx, esi
add edx, 0xffffffd0
movzx edx, dx
add eax, 2
cmp edx, 0xa
mov edx, edi
jb 0x645b40
jmp 0x646911
mov eax, dword [esp + 0xb8]
mov eax, dword [eax]
jmp 0x645b88
xor eax, eax
jmp 0x645b9e
mov eax, 1
lea ecx, [ebp + eax*2]
movzx eax, word [ebp + eax*2]
cmp eax, 0x100
mov ebp, ecx
jae 0x645c9d
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 0xc]
add ebp, 2
movzx eax, ax
test byte [ecx + eax], 1
je 0x645bc7
movzx eax, word [ebp]
add ebp, 2
cmp eax, 0x100
jb 0x645bab
jmp 0x645c98
cmp eax, 0x23
jne 0x645c98
movzx ecx, word [ebp]
xor eax, eax
test cx, cx
je 0x645b9e
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0x1c]
mov eax, dword [eax + 0x84]
test eax, eax
je 0x645c18
cmp ebp, edx
jae 0x645c63
sub esp, 0xc
push dword [esp + 0xa8]
push dword [esp + 0xc8]
push edx
push eax
push ebp
call fcn.0065a200
add esp, 0x20
test eax, eax
je 0x645c63
jmp 0x645b74
mov eax, dword [esp + 0xb8]
mov eax, dword [eax]
mov edi, ebp
mov ebp, esi
lea esi, [eax + eax]
sub edx, esi
mov esi, ebp
mov ebp, edi
cmp ebp, edx
ja 0x645c63
mov edx, dword [esp + 0x190]
cmp cx, word [edx + 0x8c]
jne 0x645c63
cmp eax, 1
je 0x645b83
movzx ecx, word [ebp + 2]
mov edx, dword [esp + 0x190]
cmp cx, word [edx + 0x8e]
je 0x645b88
lea eax, [ebp + 2]
cmp dword [esp + 0x60], 0
je 0x645c7f
movzx ecx, word [ebp + 2]
and ecx, 0xfc00
cmp ecx, 0xdc00
je 0x645c83
mov ebp, eax
jmp 0x645c86
add ebp, 4
movzx ecx, word [ebp]
test cx, cx
jne 0x645bdb
jmp 0x645b7f
add ebp, 0xfffffffe
mov ecx, ebp
add ecx, 0xfffffffe
mov dword [esp + 4], ecx
mov ebp, ecx
mov ecx, dword [esp + 0xc]
movzx eax, word [ebp + 2]
cmp eax, 0x28
jne 0x645d06
movzx eax, word [ebp + 4]
xor edx, edx
cmp eax, 0x3f
mov edi, dword [esp + 0xd4]
jne 0x645d39
movzx eax, word [ebp + 6]
xor edx, edx
cmp eax, 0x23
mov edi, dword [esp + 0xd4]
jne 0x645d39
add ebp, 6
movzx eax, word [ebp + 2]
add ebp, 2
test ax, ax
sete cl
cmp eax, 0x29
setne dl
xor dl, cl
jne 0x645cda
test ax, ax
mov dword [esp + 4], ebp
je 0x648667
mov ax, word [ebp + 2]
mov ecx, dword [esp + 0xc]
add ebp, 2
movzx eax, ax
cmp eax, 0x3f
je 0x645d2c
xor edx, edx
cmp eax, 0x2b
mov edi, dword [esp + 0xd4]
jne 0x645d39
mov dword [esp + 4], ebp
xor edi, edi
mov edx, 1
jmp 0x645d39
mov dword [esp + 4], ebp
xor edx, edx
mov edi, dword [esp + 0xf4]
movzx eax, word [ecx]
cmp eax, 0x75
mov dword [esp + 0x24], edx
jne 0x645dc1
add dword [esp + 8], 8
test ebx, ebx
mov eax, dword [ecx]
mov dword [ecx + 4], eax
mov dword [ecx], 0x40081
mov dword [ecx + 8], 0x40078
mov dword [esp + 0xbc], 6
mov ebp, ecx
jne 0x645e3b
mov eax, dword [esp + 0x190]
mov ecx, dword [eax + 0x10]
mov eax, dword [eax + 0x20]
add ecx, 2
cmp eax, ecx
jb 0x645e3b
lea edx, [ebp + 2]
movzx ecx, word [eax - 2]
mov dword [esp + 0x98], esi
mov esi, dword [esp + 0x190]
sub edx, dword [esi + 0x14]
mov esi, dword [esp + 0x98]
sar edx, 1
cmp edx, ecx
mov edx, dword [esp + 0x24]
jne 0x645e3b
add ecx, 2
mov word [eax - 2], cx
mov ax, word [ebp]
mov ebp, dword [esp + 0x60]
lea ecx, [eax - 0x1d]
movzx ecx, cx
cmp ecx, 3
ja 0x645ed6
lea ecx, [eax - 0x1e]
movzx edx, cx
mov dword [esp + 0x54], 0
cmp edx, 2
ja 0x645df2
lea ecx, [edx + edx*2]
lea ecx, [edx + ecx*4 + 0xd]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 8]
movzx ecx, word [edx - 2]
test ebp, ebp
je 0x64607d
mov edx, ecx
and edx, 0xfc00
movzx edx, dx
cmp edx, 0xdc00
jne 0x64607d
mov eax, dword [esp + 8]
mov eax, dword [eax - 4]
mov dword [esp + 0x150], eax
mov eax, dword [esp + 0xc]
mov ax, word [eax]
mov dword [esp + 0x48], 0x10000002
jmp 0x6460ad
mov eax, dword [esp + 8]
sub eax, ebp
mov dword [esp + 0x54], eax
sar eax, 1
mov dword [esp + 0x48], eax
mov ecx, ebp
mov eax, dword [esp + 0x10]
test eax, eax
je 0x645f42
cmp eax, 2
jl 0x645fd1
test ebx, ebx
je 0x646606
mov eax, dword [esp + 0x10]
lea ecx, [eax - 1]
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x14c], ecx
fild dword [esp + 0x14c]
mov dword [esp + 0x148], eax
fimul dword [esp + 0x148]
fld qword [0x7d98a0]
fxch st(1)
fucompi st(1)
fstp st(0)
ja 0x6485b7
imul eax, ecx
mov ecx, dword [ebx]
mov edx, 0x7fffffeb
sub edx, ecx
cmp edx, eax
jl 0x6485b7
add ecx, eax
mov dword [ebx], ecx
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x24]
jmp 0x645fdc
movzx ecx, ax
mov dword [esp + 0x54], 0x34
mov dword [esp + 0x48], ecx
cmp ecx, 0x16
jbe 0x6460b1
lea ecx, [eax - 0x6e]
movzx ecx, cx
cmp ecx, 6
ja 0x64659a
test esi, esi
mov eax, dword [esp + 0xc]
je 0x64611b
cmp dword [esp + 0x10], 0
jne 0x646972
cmp esi, 0xffffffff
jne 0x646972
add edi, 0x62
mov eax, dword [esp + 8]
mov word [eax], di
add eax, 2
mov dword [esp + 8], eax
mov ebp, dword [esp + 0x190]
test edx, edx
jne 0x6471ce
jmp 0x6472d1
cmp esi, 1
mov eax, dword [esp + 8]
mov word [eax], 0
jg 0x6463f1
sub esp, 4
mov edx, 1
mov ecx, dword [esp + 0x10]
push dword [esp + 0x40]
push dword [esp + 0x198]
push dword [esp + 0xa8]
call fcn.006490a0
mov ecx, dword [esp + 0x1c]
add esp, 0x10
cmp dword [esp + 0x54], 0
je 0x645fa1
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0xc]
movzx ecx, byte [ecx + eax - 1]
mov edx, dword [esp + 0xc]
mov byte [edx + eax + 1], cl
mov ecx, dword [esp + 0xc]
dec eax
jne 0x645f89
add dword [esp + 8], 2
test esi, esi
je 0x64687b
lea eax, [edi + 0x92]
mov word [ecx], ax
mov dword [esp + 0xa8], ecx
lea ebp, [ecx + 2]
mov dword [esp + 0x5c], 0
dec esi
mov ecx, ebp
jmp 0x646469
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x5c], 0
test esi, esi
mov eax, 0
cmovg eax, dword [esp + 0x10]
sub esi, eax
mov dword [esp + 0xa8], 0
mov eax, dword [esp + 0x18]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x58], eax
test esi, esi
js 0x646480
test ebx, ebx
je 0x64612b
test esi, esi
je 0x64612b
mov eax, dword [esp + 0xbc]
add eax, 5
mov dword [esp + 0x140], esi
fild dword [esp + 0x140]
mov dword [esp + 0x144], eax
fimul dword [esp + 0x144]
fld qword [0x7d98a0]
fxch st(1)
fucompi st(1)
fstp st(0)
ja 0x6485b7
imul eax, esi
add eax, 0xfffffffc
mov ecx, dword [ebx]
mov edx, 0x7fffffeb
sub edx, ecx
cmp edx, eax
jl 0x6485b7
add ecx, eax
mov dword [ebx], ecx
jmp 0x64639b
mov dword [esp + 0x48], ecx
cmp dword [esp + 0x10], 2
jl 0x6460ad
movzx edx, ax
cmp edx, 0x1e
ja 0x6460ad
mov edx, dword [esp + 0x190]
mov edx, dword [edx + 0x68]
or edx, dword [esp + 0xb4]
mov dword [esp + 0x30], edx
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x58], ecx
mov edx, dword [esp + 0x24]
add eax, 0xfffffff1
movzx eax, ax
mov ecx, 0xffffffff
cmp eax, 1
mov eax, 0xffffffff
ja 0x6460d2
mov eax, dword [esp + 0xc]
movzx ecx, word [eax + 2]
movzx eax, word [eax + 4]
test esi, esi
je 0x646117
mov dword [esp + 0x20], eax
add edi, dword [esp + 0x54]
mov eax, dword [esp + 0x10]
cmp eax, 1
mov dword [esp + 0x18], ecx
je 0x6464c6
test eax, eax
mov ebp, eax
jne 0x6464e0
cmp esi, 1
je 0x6468c7
cmp esi, 0xffffffff
mov eax, dword [esp + 0xc]
jne 0x6468db
add edi, 0x21
jmp 0x6468ce
mov eax, dword [esp + 0xc]
mov dword [esp + 8], eax
mov ebp, dword [esp + 0x190]
jmp 0x6472d1
test esi, esi
jle 0x64639b
add edi, 0x92
mov dword [esp + 0x68], edi
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x20]
mov dword [esp + 0x10], eax
mov edi, esi
mov eax, esi
mov dword [esp + 0xc], ecx
mov ebx, dword [esp + 8]
mov esi, dword [esp + 0x10]
sub esi, edx
sar esi, 1
mov dword [esp + 0xa8], esi
dec eax
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0x68]
mov word [ebx], ax
mov dword [esp + 0x98], edi
je 0x6461b0
lea eax, [ebx + 4]
mov word [ebx + 2], 0x83
mov ecx, eax
mov edx, dword [esp + 0x5c]
sub ecx, edx
shr ecx, 1
test edx, edx
mov edx, 0
cmovne dx, cx
mov ecx, dword [esp + 0xc]
mov word [ebx + 4], dx
add ebx, 6
mov dword [esp + 0x5c], eax
jmp 0x6461b3
add ebx, 2
sub esp, 4
push dword [esp + 0x58]
push ecx
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0x10
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0x10]
mov edi, dword [eax + 0x20]
mov ecx, dword [eax + 0x3c]
mov dword [esp + 0x18], edx
lea eax, [edx + ecx*2]
mov ebp, dword [esp + 0x8c]
mov edx, ebp
mov esi, dword [esp + 0xa8]
sub edx, esi
mov dword [esp + 0x20], edx
lea eax, [eax + edx*2 - 0xc8]
mov dword [esp + 0x10], edi
cmp edi, eax
jbe 0x6462e4
mov ebp, dword [esp + 0x60]
mov dword [esp + 8], ebx
lea esi, [ecx + ecx]
cmp esi, 0x32001
jl 0x64621c
mov esi, 0x32000
cmp ecx, 0x31fff
mov eax, 0x48
jg 0x648615
mov edx, esi
sub edx, ecx
cmp edx, 0x64
jl 0x648615
lea eax, [esi + esi]
sub esp, 0xc
push eax
call dword [0x7d97a8]
add esp, 0x10
test eax, eax
je 0x648610
mov edi, dword [esp + 0x190]
mov ecx, dword [edi + 0x3c]
add ecx, ecx
sub esp, 4
push ecx
push dword [edi + 0x10]
push eax
mov dword [esp + 0x28], eax
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x28]
add esp, 0x10
mov eax, dword [edi + 0x10]
mov ebx, dword [edi + 0x20]
sub ebx, eax
add ebx, edx
mov dword [edi + 0x20], ebx
cmp dword [edi + 0x3c], 0x801
jl 0x6462a0
sub esp, 0xc
push eax
call dword [0x7d97ac]
mov edx, dword [esp + 0x28]
add esp, 0x10
mov ebx, dword [edi + 0x20]
mov dword [edi + 0x10], edx
mov dword [edi + 0x3c], esi
mov eax, dword [esp + 0x174]
mov dword [eax], 0
mov ecx, dword [edi + 0x3c]
lea eax, [edx + ecx*2]
mov edx, dword [esp + 0x20]
lea eax, [eax + edx*2 - 0xc8]
cmp ebx, eax
mov eax, ebx
mov ebx, dword [esp + 8]
ja 0x64620c
mov dword [esp + 0x10], eax
mov ebp, dword [esp + 0x8c]
mov esi, dword [esp + 0xa8]
cmp ebp, esi
mov edx, ebp
mov ecx, esi
jge 0x64636a
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0x98]
mov esi, edx
mov eax, dword [esp + 0x18]
lea ecx, [eax + ecx*2]
xor edx, edx
cmp dword [esp + 0xec], 0
setne dl
mov edi, edx
lea edx, [eax + esi*2]
lea ebx, [eax + esi*2 + 2]
cmp ebx, ecx
cmovbe ebx, ecx
neg eax
add esi, esi
sub eax, esi
mov esi, dword [esp + 0x48]
lea esi, [esi + edi*2 + 1]
lea edi, [ebx + eax - 1]
shr edi, 1
mov eax, dword [esp + 0x10]
movzx ebx, word [edx]
add ebx, esi
mov word [eax], bx
add eax, 2
add edx, 2
cmp edx, ecx
jb 0x646333
mov ecx, dword [esp + 0x10]
lea ecx, [ecx + edi*2 + 2]
mov eax, dword [esp + 0x190]
mov dword [esp + 0x10], ecx
mov dword [eax + 0x20], ecx
mov edx, ebp
mov ebx, dword [esp + 8]
mov ecx, dword [esp + 0xa8]
jmp 0x646371
mov edx, dword [esp + 0x98]
mov eax, dword [esp + 0x48]
lea ebx, [ebx + eax*2]
cmp edx, 1
mov eax, dword [esp + 0xec]
mov edi, eax
mov dword [esp + 0x8c], ecx
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x18]
jg 0x64615a
jmp 0x64639f
mov ebx, dword [esp + 8]
mov ecx, dword [esp + 0x5c]
test ecx, ecx
je 0x6465e3
mov eax, ecx
mov edi, ebx
mov ebp, dword [esp + 0x190]
mov ebx, ecx
mov ecx, edi
sub ecx, ebx
shr ecx, 1
inc ecx
movzx edx, word [ebx]
lea esi, [edx + edx]
sub eax, esi
test edx, edx
mov word [edi], 0x78
mov word [edi + 2], cx
lea edi, [edi + 4]
mov word [ebx], cx
cmove eax, edx
test eax, eax
mov ebx, eax
jne 0x6463b8
mov dword [esp + 8], edi
mov ebx, dword [esp + 0x194]
jmp 0x6465f5
sub esp, 4
mov edx, 3
mov ecx, dword [esp + 0x10]
push dword [esp + 0x40]
push dword [esp + 0x198]
push dword [esp + 0xa8]
call fcn.006490a0
mov ecx, dword [esp + 0x1c]
add esp, 0x10
cmp dword [esp + 0x54], 0
je 0x64643e
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0xc]
movzx ecx, byte [ecx + eax - 1]
mov edx, dword [esp + 0xc]
mov byte [edx + eax + 5], cl
mov ecx, dword [esp + 0xc]
dec eax
jne 0x646426
lea eax, [edi + 0x92]
mov word [ecx], ax
lea eax, [ecx + 4]
mov dword [esp + 0x5c], eax
mov dword [ecx + 2], 0x83
lea ecx, [ecx + 6]
add dword [esp + 8], 6
mov dword [esp + 0xa8], 0
dec esi
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x8c], eax
mov edx, dword [esp + 0x24]
test esi, esi
jns 0x646015
mov dword [esp + 0x68], edi
mov ecx, dword [esp + 8]
lea edi, [ecx - 4]
movzx eax, word [ecx - 2]
add eax, eax
mov dword [esp + 0xc], edi
sub edi, eax
mov dword [esp + 0x18], eax
neg eax
movzx esi, word [ecx + eax - 4]
cmp esi, 0x81
jne 0x64652e
test edx, edx
mov ebp, dword [esp + 0x190]
mov ecx, dword [esp + 0x10]
jne 0x64654f
jmp 0x646846
cmp esi, 1
je 0x646b33
cmp esi, 0xffffffff
jne 0x6468e3
add edi, 0x23
jmp 0x6468ca
mov ecx, dword [esp + 0x54]
add ecx, 0x29
mov eax, dword [esp + 0xc]
mov word [eax], cx
mov ecx, eax
mov word [ecx + 2], bp
mov eax, ebp
lea ebp, [ecx + 4]
test esi, esi
js 0x64688c
sub esi, eax
je 0x64715a
test dword [esp + 0x48], 0x10000000
sete al
or al, byte [esp + 0x53]
je 0x646bce
mov eax, dword [esp + 0x48]
mov word [ecx + 4], ax
add ecx, 6
jmp 0x646c01
test edx, edx
mov ebp, dword [esp + 0x190]
mov ecx, dword [esp + 0x10]
je 0x646834
movzx eax, si
cmp eax, 0x82
jne 0x646834
mov word [edi], 0x83
mov si, 0x83
test ebx, ebx
jne 0x6469f5
mov ebx, edi
sub esp, 4
mov ecx, ebx
mov edx, dword [esp + 0x10]
push 0
push ebp
push dword [esp + 0xa8]
call fcn.00642b90
add esp, 0x10
test eax, eax
jne 0x6469e0
movzx eax, word [ebx + 2]
movzx ecx, word [ebx + eax*2]
lea ebx, [ebx + eax*2]
cmp ecx, 0x77
je 0x646562
jmp 0x6469e6
lea ecx, [eax - 0x7d]
movzx ecx, cx
cmp ecx, 0xa
ja 0x646861
mov edx, dword [esp + 8]
mov ecx, dword [esp + 0xc]
sub edx, ecx
mov dword [esp + 0x54], edx
sar edx, 1
mov dword [esp + 0x48], edx
movzx eax, ax
cmp eax, 0x87
jne 0x646b1d
movzx eax, word [ecx + 4]
cmp eax, 0x91
mov edx, dword [esp + 0x24]
jne 0x645e4d
jmp 0x646b33
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x194]
mov ebp, dword [esp + 0x190]
mov edx, dword [esp + 0x24]
test edx, edx
jne 0x6471ce
jmp 0x6472d1
mov dword [esp + 0x68], edi
cmp dword [esp + 0xb0], 0
setne al
mov edx, dword [esp + 0x30]
test edx, edx
sets cl
and cl, al
cmovne edx, dword [esp + 0x14]
mov dword [esp + 0x30], edx
test cl, cl
mov eax, dword [esp + 0x58]
cmovne eax, dword [esp + 0x34]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x190]
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x18], ecx
mov eax, dword [eax + 0x20]
mov dword [esp + 0x5c], 1
mov dword [esp + 0x98], esi
mov esi, dword [esp + 0x3c]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
sub eax, dword [esp + 0x18]
mov ebp, eax
sar ebp, 1
sub esp, 4
push dword [esp + 0x58]
push ecx
mov dword [esp + 0x14], edx
push edx
call sub.msvcrt.dll_memcpy
add esp, 0x10
mov eax, dword [esp + 0x190]
mov ecx, eax
mov edx, dword [ecx + 0x10]
mov eax, dword [ecx + 0x20]
mov ecx, dword [ecx + 0x3c]
mov dword [esp + 0x18], edx
lea edx, [edx + ecx*2]
mov edi, esi
sub edi, ebp
mov dword [esp + 0x20], edi
lea edx, [edx + edi*2 - 0xc8]
cmp eax, edx
jbe 0x64677f
mov dword [esp + 0x8c], esi
lea edi, [ecx + ecx]
cmp edi, 0x32001
jl 0x6466c8
mov edi, 0x32000
cmp ecx, 0x31fff
mov eax, 0x48
jg 0x648615
mov edx, edi
sub edx, ecx
cmp edx, 0x64
jl 0x648615
lea eax, [edi + edi]
sub esp, 0xc
push eax
call dword [0x7d97a8]
add esp, 0x10
test eax, eax
je 0x648610
mov esi, dword [esp + 0x190]
mov ecx, dword [esi + 0x3c]
add ecx, ecx
sub esp, 4
push ecx
push dword [esi + 0x10]
push eax
mov dword [esp + 0x28], eax
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x28]
add esp, 0x10
mov ecx, dword [esi + 0x10]
mov eax, dword [esi + 0x20]
sub eax, ecx
add eax, edx
mov dword [esi + 0x20], eax
cmp dword [esi + 0x3c], 0x801
jl 0x64674c
sub esp, 0xc
push ecx
call dword [0x7d97ac]
mov edx, dword [esp + 0x28]
add esp, 0x10
mov eax, dword [esi + 0x20]
mov dword [esi + 0x10], edx
mov dword [esi + 0x3c], edi
mov ecx, dword [esp + 0x174]
mov dword [ecx], 0
mov ecx, dword [esi + 0x3c]
lea edx, [edx + ecx*2]
mov esi, dword [esp + 0x20]
lea edx, [edx + esi*2 - 0xc8]
cmp eax, edx
ja 0x6466b8
mov esi, dword [esp + 0x8c]
cmp esi, ebp
mov ecx, ebp
jge 0x6467df
mov ebp, ecx
mov edi, dword [esp + 0x18]
lea ecx, [edi + ecx*2]
mov ebx, esi
lea edx, [edi + ebx*2]
lea esi, [edi + ebx*2 + 2]
cmp esi, ecx
cmovbe esi, ecx
neg edi
add ebx, ebx
sub edi, ebx
lea esi, [esi + edi - 1]
shr esi, 1
mov dword [esp + 0x20], esi
mov edi, eax
mov esi, dword [esp + 0x48]
movzx ebx, word [edx]
add ebx, esi
mov word [edi], bx
add edi, 2
add edx, 2
cmp edx, ecx
jb 0x6467b2
mov ecx, dword [esp + 0x20]
lea eax, [eax + ecx*2 + 2]
mov ecx, dword [esp + 0x190]
mov dword [ecx + 0x20], eax
mov ebx, dword [esp + 0x194]
jmp 0x6467e1
mov ebp, ecx
mov edx, dword [esp + 8]
mov edi, dword [esp + 0x5c]
mov ecx, dword [esp + 0x48]
lea edx, [edx + ecx*2]
inc edi
mov dword [esp + 0x5c], edi
cmp edi, dword [esp + 0x10]
mov esi, ebp
mov ecx, dword [esp + 0xc]
jl 0x646664
mov dword [esp + 0x8c], ebp
mov dword [esp + 8], edx
mov eax, dword [esp + 0x30]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x20], eax
mov edx, dword [esp + 0x24]
mov edi, dword [esp + 0x68]
mov esi, dword [esp + 0x98]
jmp 0x645fdc
lea eax, [esi - 0x81]
movzx eax, ax
cmp eax, 1
ja 0x646558
mov eax, dword [esp + 0x68]
add eax, 0x79
mov ecx, dword [esp + 0xc]
mov word [ecx], ax
test edx, edx
jne 0x6471ce
jmp 0x6472d1
movzx eax, ax
cmp eax, 0x9d
mov ebp, dword [esp + 0x190]
je 0x6472d1
jmp 0x6487b2
mov word [ecx], 0xa1
mov ebp, dword [esp + 0x190]
jmp 0x6472d1
mov esi, dword [esp + 0x48]
test esi, 0x10000000
sete al
or al, byte [esp + 0x53]
je 0x646b3f
mov word [ecx + 4], si
mov eax, dword [esp + 0x18]
test eax, eax
js 0x64714b
mov word [ecx + 6], ax
mov eax, dword [esp + 0x20]
mov word [ecx + 8], ax
add ecx, 0xa
jmp 0x64714e
add edi, 0x25
mov eax, dword [esp + 0xc]
mov word [eax], di
add eax, 2
mov ecx, eax
jmp 0x64715c
add edi, 0x27
mov word [eax], di
jmp 0x6468f3
add edi, 0x27
mov eax, dword [esp + 8]
mov word [eax], di
add esi, 0xffff
mov word [eax + 2], si
add eax, 4
mov ecx, eax
jmp 0x64715c
mov ebp, dword [esp + 0x190]
mov ebx, dword [esp + 0x194]
xor edx, edx
movzx eax, si
cmp dword [esp + 0x30], eax
jne 0x64877c
cmp ecx, 0x2d
jne 0x646b04
test edx, edx
je 0x6487e8
mov eax, dword [ebp + 0x40]
sub eax, edx
inc eax
test eax, eax
mov edx, eax
jg 0x647343
jmp 0x648734
neg edx
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov esi, edx
mov edx, dword [esp + 0x28]
mov eax, edx
mov ebp, dword [esp + 0x190]
jmp 0x647485
mov eax, edi
mov edi, dword [esp + 8]
cmp dword [esp + 0x10], 1
mov ebp, dword [esp + 0x190]
jne 0x646c3c
cmp esi, 0xffffffff
jne 0x646c3c
add eax, 0x64
jmp 0x646c53
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x34]
jmp 0x647008
cmp edx, 5
ja 0x6477dd
mov ecx, 0x32
bt ecx, edx
jae 0x6477dd
mov ecx, dword [esp + 0x190]
cmp dword [ecx + 0x48], 0
jne 0x647807
mov dword [ecx + 0x48], 1
jmp 0x647807
add esi, 5
mov word [edi], si
mov ebx, dword [esp + 0x194]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
movzx eax, si
cmp eax, 0x87
jne 0x646a19
movzx eax, word [edi + 2]
movzx eax, word [edi + eax*2]
mov si, 0x87
cmp eax, 0x77
je 0x646a19
mov word [edi], 0x8c
mov si, 0x8c
test edx, edx
je 0x646ac6
movzx eax, si
cmp eax, 0x8c
je 0x646a36
cmp eax, 0x87
jne 0x646ad9
mov dword [esp + 0xc], edi
mov edi, dword [esp + 8]
mov esi, edi
sub esi, dword [esp + 0xc]
shr esi, 1
mov word [edi], 0
sub esp, 4
mov edx, 2
mov ecx, dword [esp + 0x10]
push dword [esp + 0x40]
push ebp
push dword [esp + 0xa8]
call fcn.006490a0
add esp, 0x10
mov eax, edi
mov edi, dword [esp + 0xc]
sub eax, edi
je 0x646a89
mov ecx, dword [esp + 8]
sub ecx, dword [esp + 0x18]
dec ecx
movzx edx, byte [ecx + eax - 4]
mov byte [ecx + eax], dl
dec eax
jne 0x646a7e
add esi, 2
movzx eax, word [edi]
cmp eax, 0x87
mov ax, 0x89
mov cx, 0x84
cmove ax, cx
mov word [edi], ax
mov eax, dword [esp + 8]
mov word [eax + 4], 0x7b
mov word [eax + 6], si
add eax, 8
mov dword [esp + 8], eax
mov word [edi + 2], si
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
jmp 0x646ae6
mov eax, dword [esp + 0x68]
add eax, 0x79
mov ecx, dword [esp + 0xc]
mov word [ecx], ax
jmp 0x6472d1
inc esi
mov word [edi], si
mov eax, dword [esp + 0xc]
mov word [eax], 0x7b
mov eax, dword [esp + 0xa8]
test eax, eax
je 0x646af6
mov word [eax], 0x94
cmp ecx, 2
jge 0x6471c6
jmp 0x6472d1
cmp ecx, 0x2b
jne 0x647343
test edx, edx
je 0x6487e8
add edx, dword [ebp + 0x40]
jmp 0x647343
cmp eax, 0x80
ja 0x64791e
cmp dword [esp + 0x10], 0
jle 0x647915
mov ebp, dword [esp + 0x190]
jmp 0x6472d1
lea esi, [esi + esi]
and esi, 0xe
sub esp, 4
push esi
lea eax, [esp + 0x158]
push eax
push ebp
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x34]
add esp, 0x10
add ebp, esi
jmp 0x647150
cmp edi, 0x7d
sete al
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xe4]
or edx, ecx
setns dl
and dl, al
mov esi, dword [esp + 0x18]
cmove ecx, esi
test dl, dl
mov eax, dword [esp + 0xe8]
mov ebx, dword [esp + 0x20]
cmove eax, ebx
mov dword [esp + 0xb0], 0
mov edx, dword [esp + 0x14]
mov dword [esp + 0x28], edx
mov dword [esp + 0x44], esi
mov edx, dword [esp + 0x34]
mov dword [esp + 0x4c], edx
mov dword [esp + 0x40], ebx
mov ebx, dword [esp + 0x194]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x20], eax
jmp 0x6472fd
mov dword [esp + 0x68], edi
mov edi, esi
mov eax, dword [esp + 0x48]
lea esi, [eax + eax]
and esi, 0xe
sub esp, 4
push esi
lea eax, [esp + 0x158]
push eax
push ebp
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x34]
mov ecx, esi
mov esi, edi
mov edi, dword [esp + 0x78]
add esp, 0x10
add ecx, ebp
mov eax, dword [esp + 0x18]
test eax, eax
js 0x646c17
mov word [ecx], ax
mov eax, dword [esp + 0x20]
mov word [ecx + 2], ax
add ecx, 4
cmp esi, 1
jne 0x646c2a
add edi, 0x25
mov word [ecx], di
add ecx, 2
jmp 0x64715c
add edi, 0x27
mov word [ecx], di
mov word [ecx + 2], si
add ecx, 4
jmp 0x64715c
cmp dword [esp + 0x10], 0
jne 0x6477ab
cmp esi, 1
jne 0x6477ab
add eax, 0x66
mov word [edi], ax
add edi, 2
jmp 0x6477cc
mov dword [esp + 0xa4], 1
mov ecx, 0x86
cmp cl, 0x86
jne 0x645aa4
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x14], ecx
mov dword [esp + 8], ebp
lea edi, [eax + 2]
mov dword [esp + 4], edi
movzx ecx, word [eax + 2]
lea edx, [ecx - 0x30]
movzx edx, dx
cmp edx, 9
jbe 0x648702
movzx edx, cx
cmp edx, 0xff
mov ebp, dword [esp + 0x190]
mov ebx, dword [esp + 0x194]
mov edx, ebx
ja 0x646d05
mov ebx, edx
mov edx, dword [ebp + 0xc]
add eax, 4
movzx esi, cx
test byte [edx + esi], 0x10
je 0x646cfe
mov dword [esp + 4], eax
movzx ecx, word [eax]
add eax, 2
cmp ecx, 0x100
jb 0x646ce3
add eax, 0xfffffffe
mov edx, ebx
jmp 0x646d07
mov eax, edi
sub eax, edi
mov ebx, eax
sar ebx, 1
test edx, edx
mov edx, dword [esp + 0x10]
mov esi, ebx
mov dword [esp + 0xc], esi
je 0x646ddb
test ebx, ebx
je 0x648758
cmp cx, word [esp + 0x30]
jne 0x648746
cmp eax, 0x41
jge 0x64876a
test edx, edx
jne 0x646d42
inc dword [ebp + 0x54]
mov edx, dword [esp + 0x194]
mov eax, dword [edx]
lea ecx, [eax + 9]
mov dword [edx], ecx
cmp dword [ebp + 0x7c], 0
je 0x646d5b
add eax, 0x11
mov dword [edx], eax
mov eax, dword [ebp + 0x30]
test eax, eax
mov ecx, dword [esp + 0xc]
jle 0x646e26
mov esi, dword [ebp + 0x28]
xor ebx, ebx
xor edx, edx
cmp ecx, dword [esi + 4]
jne 0x646dcb
sub esp, 4
push ecx
push dword [esi]
push edi
mov ebp, edi
mov edi, edx
call fcn.0065a470
mov ecx, dword [esp + 0x1c]
mov edx, edi
mov edi, ebp
mov ebp, dword [esp + 0x1a0]
add esp, 0x10
test eax, eax
jne 0x646dcb
cmp dword [esp + 0x10], 0
mov edx, dword [esi + 8]
jne 0x647862
mov eax, dword [ebp + 0x24]
test eax, eax
je 0x646dcb
movzx ecx, word [eax + 4]
cmp edx, ecx
je 0x646dc1
mov eax, dword [eax]
test eax, eax
jne 0x646db1
jmp 0x646dc7
mov word [eax + 6], 1
mov ecx, dword [esp + 0xc]
inc ebx
add esi, 0xc
mov eax, dword [ebp + 0x30]
cmp ebx, eax
jl 0x646d71
jmp 0x647329
mov esi, dword [ebp + 0x2c]
mov eax, dword [ebp + 0x30]
xor ebx, ebx
test eax, eax
jle 0x647310
lea eax, [esi + 2]
sub esp, 4
push dword [esp + 0x10]
push eax
push edi
call fcn.0065a470
add esp, 0x10
test eax, eax
jne 0x646e13
mov eax, dword [esp + 0xc]
cmp word [esi + eax*2 + 2], 0
je 0x64730d
mov eax, dword [ebp + 0x30]
mov ecx, dword [ebp + 0x34]
lea esi, [esi + ecx*2]
inc ebx
cmp ebx, eax
jl 0x646deb
jmp 0x647310
xor edx, edx
xor ebx, ebx
jmp 0x647329
mov dword [esp + 8], ebp
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
lea ecx, [esp + 0xfc]
jmp 0x646e62
or dword [edi], esi
jmp 0x646e62
add edx, 2
mov eax, edx
lea ecx, [esp + 0xf8]
mov edx, eax
movzx esi, word [edx]
cmp esi, 0x29
je 0x64703f
movzx eax, si
cmp eax, 0x3a
je 0x64703f
lea eax, [edx + 2]
mov dword [esp + 4], eax
lea esi, [esi - 0x2d]
movzx ebx, si
cmp ebx, 0x4b
ja case.0x646e99.1
mov esi, 1
mov edi, ecx
jmp dword [ebx*4 + 0x648d1c]
or byte [ecx + 2], 8
mov esi, 0x400
mov edi, dword [esp + 0xc0]
jmp case.0x646e99.60
mov esi, 0x200
mov edi, ecx
or dword [edi], esi
jmp 0x646e62
mov esi, 0x40
mov edi, ecx
or dword [edi], esi
jmp 0x646e62
mov esi, 2
mov edi, ecx
or dword [edi], esi
jmp 0x646e62
mov esi, 4
mov edi, ecx
or dword [edi], esi
jmp 0x646e62
mov esi, 8
mov edi, ecx
or dword [edi], esi
jmp 0x646e62
sub esp, 4
push 1
push 0x7d9b23
push esi
call fcn.0065a4c0
add esp, 0x10
mov ecx, 4
test eax, eax
je 0x647c41
jmp case.0x6458c8.2
sub esp, 4
push 4
push str.MARK
push esi
call fcn.0065a4c0
add esp, 0x10
test eax, eax
je 0x647895
sub esp, 4
push 4
push str.FAIL
push esi
call fcn.0065a4c0
add esp, 0x10
test eax, eax
je 0x647b54
sub esp, 4
push 4
push str.SKIP
push esi
call fcn.0065a4c0
add esp, 0x10
test eax, eax
je 0x647c35
sub esp, 4
push 4
push str.THEN
push esi
call fcn.0065a4c0
add esp, 0x10
mov ecx, 8
test eax, eax
mov ebp, dword [esp + 0x190]
je 0x647c41
jmp case.0x6458c8.2
sub esp, 4
push 5
push str.PRUNE
push esi
call fcn.0065a4c0
add esp, 0x10
mov ecx, 6
test eax, eax
je 0x647c41
jmp case.0x6458c8.2
sub esp, 4
push 6
push str.ACCEPT
push esi
call fcn.0065a4c0
add esp, 0x10
test eax, eax
je 0x64789f
sub esp, 4
push 6
push str.COMMIT
push esi
call fcn.0065a4c0
add esp, 0x10
mov ecx, 3
test eax, eax
je 0x647c41
jmp case.0x6458c8.2
mov ecx, 6
test ecx, ecx
mov eax, dword [esp + 0x34]
je 0x647032
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], edx
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x14], eax
test ecx, ecx
je 0x6472fd
cmp ecx, 4
je 0x6472fd
jmp 0x648714
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
jmp 0x647849
mov eax, dword [esp + 0xfc]
or eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xf8]
not ecx
and ecx, eax
movzx eax, si
cmp eax, 0x29
jne 0x647882
mov eax, ecx
shr eax, 9
and eax, 1
mov dword [esp + 0xd4], eax
xor eax, 1
mov dword [esp + 0xf4], eax
mov eax, ecx
and eax, 1
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x134]
mov dword [eax], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x1c], ecx
mov ebx, dword [esp + 0x194]
jmp 0x6472f9
mov dword [esp + 0xb0], 0
test ecx, ecx
js 0x6470e5
mov eax, dword [esp + 0xd0]
test eax, eax
jns 0x6470e5
mov eax, dword [esp + 0x100]
mov dword [esp + 0xe8], eax
or ecx, dword [esp + 0x58]
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xb0], 0
mov eax, dword [esp + 0x14]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0xd0]
test edx, edx
mov ebx, dword [esp + 0x18]
cmovs edx, ebx
mov esi, dword [esp + 0xe8]
mov ecx, dword [esp + 0x20]
cmovs esi, ecx
mov edi, dword [esp + 0x14]
mov dword [esp + 0x28], edi
mov dword [esp + 0x44], ebx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x40], ecx
mov dword [esp + 0x18], edx
mov eax, dword [esp + 8]
mov dword [esp + 0x14], eax
mov dword [esp + 0x20], esi
mov eax, dword [esp + 0x10]
mov dword [esp + 0x34], eax
mov ebx, dword [esp + 0x194]
jmp 0x6472fd
add ecx, 6
mov ebp, ecx
add edi, 0x21
mov word [ebp], di
add ebp, 2
mov ecx, ebp
mov ebp, dword [esp + 0x190]
mov edi, dword [esp + 0x48]
test edi, 0x10000000
sete al
or al, byte [esp + 0x53]
je 0x647182
mov word [ecx], di
add ecx, 2
mov dword [esp + 8], ecx
jmp 0x6471a8
add edi, edi
and edi, 0xe
sub esp, 4
push edi
lea eax, [esp + 0x158]
push eax
mov esi, ecx
push esi
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x34]
add esp, 0x10
add esi, edi
mov dword [esp + 8], esi
mov ecx, dword [esp + 0x18]
test ecx, ecx
js 0x6471c6
mov eax, dword [esp + 8]
mov word [eax], cx
mov ecx, dword [esp + 0x20]
mov word [eax + 2], cx
add eax, 4
mov dword [esp + 8], eax
test edx, edx
je 0x6472d1
mov ebx, dword [esp + 0xa0]
movzx eax, word [ebx]
lea ecx, [eax - 0x1d]
movzx ecx, cx
cmp ecx, 0x53
ja case.0x6471e3.4
jmp dword [ecx*4 + 0x648e68]
cmp dword [esp + 0x60], 0
movzx eax, byte [eax + 0x7daf74]
lea ebx, [ebx + eax*2]
mov dword [esp + 0xa0], ebx
je case.0x6471e3.4
movzx eax, word [ebx - 2]
and eax, 0xfc00
cmp eax, 0xd800
jne case.0x6471e3.4
add ebx, 2
jmp 0x647241
add ebx, 0x22
jmp 0x647241
movzx eax, byte [0x7dafd1]
movzx ecx, word [ebx + 4]
add ecx, 0xfffffff1
movzx ecx, cx
xor edx, edx
cmp ecx, 2
setb dl
lea eax, [eax + edx*2]
jmp 0x64723e
movzx eax, word [ebx + 2]
lea ebx, [ebx + eax*2]
mov dword [esp + 0xa0], ebx
mov esi, dword [esp + 8]
sub esi, ebx
test esi, esi
jle 0x6472ca
movzx eax, word [ebx]
cmp eax, 0x75
ja 0x64726b
movzx eax, byte [eax + 0x7d9a98]
test ax, ax
je 0x64726b
mov word [ebx], ax
jmp 0x6472ca
mov edi, esi
shr edi, 1
mov eax, dword [esp + 8]
mov word [eax], 0
sub esp, 4
mov edx, 2
mov ecx, ebx
push dword [esp + 0x40]
push ebp
push dword [esp + 0xa8]
call fcn.006490a0
add esp, 0x10
movzx eax, byte [ebx + esi - 1]
mov byte [ebx + esi + 3], al
dec esi
jne 0x647296
add edi, 2
mov eax, dword [esp + 0xa0]
mov word [eax], 0x81
mov ecx, dword [esp + 8]
mov word [ecx + 4], 0x78
mov word [ecx + 6], di
add ecx, 8
mov dword [esp + 8], ecx
mov word [eax + 2], di
mov ebx, dword [esp + 0x194]
xor eax, eax
mov cl, byte [esp + 0xac]
mov al, cl
add eax, eax
or dword [ebp + 0x68], eax
mov dword [esp + 0xc], 0
mov eax, dword [esp + 0x30]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x20], eax
mov ebp, dword [esp + 8]
mov eax, dword [esp + 4]
add eax, 2
mov dword [esp + 4], eax
jmp 0x6432c0
mov eax, dword [ebp + 0x30]
mov dword [esp + 0x94], esi
cmp ebx, eax
jge 0x648734
mov ecx, dword [esp + 0x94]
movzx edx, word [ecx]
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x647455
mov dword [esp + 0xa4], ecx
mov ebx, dword [esp + 0x194]
mov eax, dword [ebp + 0x20]
mov dword [esp + 0x3c], eax
mov edi, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
mov esi, ebx
test ebx, ebx
je 0x6473ad
mov ebx, ecx
mov edx, dword [esp + 8]
sub ebx, ecx
mov eax, dword [esp + 0x3c]
sub eax, edi
sar eax, 1
mov dword [esp + 0x3c], eax
mov word [edx], 0x75
shr ebx, 1
mov word [edx + 2], bx
mov dword [esp + 0xc], edx
lea ebp, [edx + 4]
mov edx, dword [esp + 0x14]
cmp edx, 0xfffffffe
mov ecx, 0xffffffff
cmove edx, ecx
mov dword [esp + 0xb0], 0
mov dword [esp + 0x14], edx
mov dword [esp + 0x28], edx
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov ebx, esi
jmp 0x6472fd
mov eax, dword [esp + 8]
mov word [eax], 0
test edx, edx
mov ebx, ecx
mov dword [esp + 0xc], edi
je 0x6473e2
sub esp, 4
push edx
push dword [esp + 0xa4]
push ecx
mov edi, edx
mov ebx, ecx
call fcn.006400f0
mov ecx, ebx
mov edx, edi
mov edi, dword [esp + 0x1c]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x647527
cmp dword [esp + 0x18c], 0
jg 0x647358
movzx eax, word [ebx + 2]
test ax, ax
jne 0x647358
mov dword [esp + 0x28], ecx
cmp dword [esp + 0x188], 0
je 0x6486b6
mov esi, dword [esp + 0x188]
mov ecx, dword [esi + 4]
cmp ecx, ebx
jb 0x6486b6
sub esp, 4
mov edx, dword [esp + 0xc]
push 0
push ebp
push dword [esp + 0xa8]
call fcn.00642b90
add esp, 0x10
test eax, eax
je 0x6478ef
mov esi, dword [esi]
test esi, esi
jne 0x64741e
jmp 0x6486b6
mov dword [esp + 0x10], edx
mov dword [esp + 0xa4], 0
cmp dword [esp + 0x194], 0
je 0x647555
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0x194]
mov esi, dword [esp + 0x10]
cmp eax, 0xfffffffe
mov ecx, eax
mov eax, 0xffffffff
cmove edx, eax
mov dword [esp + 0x28], edx
cmove ecx, eax
mov dword [esp + 0x14], ecx
mov eax, dword [ebp + 0x20]
sub eax, dword [ebp + 0x10]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x1c]
and eax, 1
add eax, 0x71
mov ecx, dword [esp + 8]
mov word [ecx], ax
mov edx, esi
mov word [ecx + 2], dx
mov eax, 1
mov ecx, edx
shl eax, cl
cmp edx, 0x20
mov ecx, 1
cmovge eax, ecx
or dword [ebp + 0x50], eax
cmp edx, dword [ebp + 0x4c]
jle 0x6474dd
mov dword [ebp + 0x4c], edx
sar dword [esp + 0x3c], 1
mov eax, dword [esp + 8]
lea eax, [eax + 4]
mov ecx, dword [ebp + 0x24]
test ecx, ecx
je 0x647507
mov edi, dword [esp + 8]
mov esi, edx
movzx edx, word [ecx + 4]
cmp esi, edx
mov edx, esi
je 0x647516
mov ecx, dword [ecx]
test ecx, ecx
jne 0x6474f3
jmp 0x64751c
mov ecx, dword [esp + 8]
mov dword [esp + 0xc], ecx
mov ebp, eax
jmp 0x6472fd
mov word [ecx + 6], 1
mov dword [esp + 0xc], edi
mov ebp, eax
jmp 0x6472fd
mov dword [esp + 0x28], ecx
cmp edx, dword [ebp + 0x44]
jg 0x648734
mov ecx, dword [ebp + 0x3c]
lea eax, [edi + ecx*2 - 0xc8]
cmp eax, dword [esp + 0x3c]
jbe 0x6476d3
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x3c]
jmp 0x647785
cmp dword [ebp + 0x78], 0
je 0x647872
lea ecx, [ebx + 1]
mov dword [esp + 0xa4], 0
cmp ecx, eax
jge 0x647909
mov ecx, dword [esp + 0x94]
lea eax, [ecx + 2]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x34]
lea edi, [ecx + eax*2]
mov esi, 1
lea eax, [edi + 2]
sub esp, 8
push eax
push dword [esp + 0x18]
call fcn.0065a3d0
add esp, 0x10
test eax, eax
jne 0x6475b5
mov eax, dword [ebp + 0x34]
lea edi, [edi + eax*2]
lea eax, [ebx + esi + 1]
inc esi
cmp eax, dword [ebp + 0x30]
jl 0x64758e
mov dword [esp + 0xc], edi
mov dword [esp + 0xa4], 0
cmp esi, 2
jl 0x647c03
mov ecx, dword [esp + 0x14]
cmp ecx, 0xfffffffe
mov eax, 0xffffffff
cmove ecx, eax
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0x20]
sub edx, dword [eax + 0x10]
mov eax, dword [esp + 0x1c]
and eax, 1
add eax, 0x73
mov ecx, dword [esp + 8]
mov word [ecx], ax
sar edx, 1
mov dword [esp + 0x3c], edx
mov word [ecx + 2], bx
mov word [ecx + 4], si
lea eax, [ecx + 6]
mov dword [esp + 0x30], eax
mov dword [esp + 0xa4], 0
mov eax, dword [esp + 0xc]
cmp dword [esp + 0x94], eax
jae 0x6476bb
mov ebp, dword [esp + 0x190]
mov edx, dword [ebp + 0x24]
mov eax, dword [ebp + 0x34]
mov dword [esp + 0x10], eax
mov esi, dword [ebp + 0x50]
mov eax, dword [ebp + 0x4c]
mov ecx, dword [esp + 0x94]
mov ebp, ecx
movzx ecx, word [ecx]
mov ebx, 1
shl ebx, cl
cmp ecx, 0x20
mov edi, 1
cmovae ebx, edi
cmp eax, ecx
jge 0x647674
mov eax, dword [esp + 0x190]
mov dword [eax + 0x4c], ecx
mov eax, ecx
test edx, edx
je 0x64768e
mov edi, edx
cmp word [edi + 4], cx
je 0x647688
mov edi, dword [edi]
test edi, edi
jne 0x64767a
jmp 0x64768e
mov word [edi + 6], 1
or esi, ebx
mov ecx, ebp
mov edi, dword [esp + 0x10]
lea ecx, [ecx + edi*2]
cmp ecx, dword [esp + 0xc]
jb 0x64764d
mov dword [esp + 0x94], ecx
mov eax, dword [esp + 0x190]
mov dword [eax + 0x50], esi
mov dword [esp + 0xa4], 0
mov eax, dword [esp + 8]
mov dword [esp + 0xc], eax
mov ebp, dword [esp + 0x30]
mov ebx, dword [esp + 0x194]
jmp 0x6472fd
mov dword [esp + 0x10], edx
lea esi, [ecx + ecx]
cmp esi, 0x32001
mov eax, 0x32000
cmovge esi, eax
cmp ecx, 0x31fff
mov eax, 0x48
jg 0x648615
mov edx, esi
sub edx, ecx
cmp edx, 0x64
jl 0x648615
lea eax, [esi + esi]
sub esp, 0xc
push eax
call dword [0x7d97a8]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x648610
mov ebp, dword [esp + 0x190]
mov eax, dword [ebp + 0x3c]
add eax, eax
sub esp, 4
push eax
push dword [ebp + 0x10]
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0x10
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 0x20]
sub eax, ecx
add eax, ebx
mov dword [ebp + 0x20], eax
cmp dword [ebp + 0x3c], 0x801
jl 0x647762
sub esp, 0xc
push ecx
call dword [0x7d97ac]
add esp, 0x10
mov eax, dword [ebp + 0x20]
mov dword [ebp + 0x10], ebx
mov dword [ebp + 0x3c], esi
mov ecx, dword [esp + 0x174]
mov dword [ecx], 0
mov ecx, dword [ebp + 0x14]
mov edi, dword [esp + 0x194]
mov esi, edi
mov edx, dword [esp + 0x10]
mov edi, dword [esp + 0x28]
lea ebx, [edi + edx*2]
mov edi, dword [esp + 8]
lea edx, [edi + 2]
sub edx, ecx
shr edx, 1
mov word [eax], dx
add eax, 2
mov dword [ebp + 0x20], eax
mov edx, edi
mov edi, dword [esp + 0xc]
jmp 0x64735c
add eax, 0x68
cmp esi, 0xffffffff
mov word [edi], ax
mov eax, dword [esp + 0x10]
mov word [edi + 2], ax
mov eax, 0
cmovne ax, si
mov word [edi + 4], ax
add edi, 6
mov dword [esp + 8], edi
test edx, edx
jne 0x6471ce
jmp 0x6472d1
lea ecx, [edx - 0x1d]
cmp ecx, 5
mov ecx, dword [esp + 0x190]
ja 0x647807
mov eax, dword [esp + 4]
add eax, 2
mov dword [esp + 0x64], eax
mov eax, dword [edx*4 + 0x7d9a0c]
add eax, 0xfffffffe
mov dword [esp + 4], eax
jmp 0x64783d
cmp eax, 0x11
mov eax, 0
cmovb eax, ebp
mov dword [esp + 0xc], eax
mov eax, dword [ecx + 0x20]
sub eax, dword [ecx + 0x10]
sar eax, 1
mov dword [esp + 0x3c], eax
mov eax, edx
xor eax, 0xe
or eax, dword [esp + 0x9c]
mov ax, 0xd
cmove dx, ax
mov word [ebp], dx
add ebp, 2
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x14], eax
jmp 0x6472fd
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa4], eax
jmp 0x64733c
mov dword [esp + 0xa4], 0
jmp 0x647472
add edx, 2
mov dword [esp + 4], edx
mov edi, 0x83
xor esi, esi
jmp 0x647a2c
mov ecx, 1
jmp 0x647c41
test ebx, ebx
jne 0x6487d6
mov eax, dword [esp + 0x190]
mov dword [eax + 0x6c], 1
mov eax, dword [eax + 0x24]
mov ebx, dword [esp + 0x194]
test eax, eax
je 0x647d0f
mov esi, dword [esp + 8]
test ebx, ebx
je 0x6478d4
add dword [ebx], 3
jmp 0x6478e4
mov word [esi], 0xa0
movzx ecx, word [eax + 4]
mov word [esi + 2], cx
add esi, 4
mov eax, dword [eax]
test eax, eax
jne 0x6478cb
jmp 0x647d13
mov edi, dword [esp + 0x194]
mov esi, edi
mov edx, dword [esp + 8]
mov edi, dword [esp + 0xc]
mov ecx, dword [esp + 0x28]
jmp 0x64735c
mov ebx, dword [esp + 0x194]
jmp 0x647c11
xor eax, eax
test esi, esi
setne al
mov esi, eax
mov edx, dword [esp + 0x24]
jmp 0x645e4d
mov dword [esp + 8], ebp
movzx edx, word [ecx + 6]
cmp edx, 0x3f
jne 0x647966
movzx edx, word [ecx + 8]
cmp edx, 0x43
jne 0x647966
lea edx, [ecx + 0xa]
movzx esi, word [edx]
lea edi, [esi - 0x30]
movzx edi, di
add edx, 2
cmp edi, 0xa
jb 0x647940
movzx esi, si
cmp esi, 0x29
cmove eax, edx
movzx edx, word [eax]
cmp edx, 0x28
jne 0x6488a2
movzx edx, word [eax + 2]
cmp edx, 0x3f
jne 0x647b5e
movzx edx, word [eax + 4]
cmp edx, 0x21
je 0x6479a2
movzx edx, dx
cmp edx, 0x3d
je 0x6479a2
cmp edx, 0x3c
jne 0x647b5e
movzx eax, word [eax + 6]
cmp eax, 0x3d
je 0x6479a2
movzx eax, ax
cmp eax, 0x21
jne 0x647b5e
mov ebp, dword [esp + 0x190]
mov dword [ebp + 0x80], 1
mov edi, 0x87
xor esi, esi
mov ecx, dword [esp + 0x1c]
jmp 0x64558e
mov ebx, ebp
movzx edx, word [ecx + 6]
cmp edx, 0x21
je 0x647d58
movzx esi, dx
cmp esi, 0x3d
jne 0x647d85
mov ebp, dword [esp + 0x190]
inc dword [ebp + 0x5c]
add ecx, 8
mov dword [esp + 4], ecx
mov edi, 0x7f
jmp 0x647d6e
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x190]
inc dword [ebp + 0x5c]
add ecx, 6
mov dword [esp + 4], ecx
mov edi, 0x7d
jmp 0x64558a
mov dword [esp + 8], ebp
add ecx, 6
mov dword [esp + 4], ecx
mov edi, 0x81
xor esi, esi
mov ecx, ebx
mov dword [esp + 0x10], 0
mov ebp, dword [esp + 0x190]
jmp 0x645596
mov ebx, ebp
mov word [ebp], 0x76
lea eax, [ecx + 6]
mov dword [esp + 4], eax
movzx edx, word [ecx + 6]
mov ecx, edx
add ecx, 0xffffffd0
movzx esi, cx
xor ecx, ecx
cmp esi, 9
ja 0x647a86
xor ecx, ecx
lea ecx, [ecx + ecx*4]
movzx edx, dx
lea ecx, [edx + ecx*2 - 0x30]
movzx edx, word [eax + 2]
add eax, 2
mov esi, edx
add esi, 0xffffffd0
movzx esi, si
cmp esi, 0xa
jb 0x647a64
mov dword [esp + 4], eax
lea ebp, [ebx + 2]
movzx edx, dx
cmp edx, 0x29
jne 0x647c1e
cmp ecx, 0x100
jl 0x647f25
mov eax, dword [esp + 0x174]
mov dword [eax], 0x26
mov eax, 6
jmp 0x647f47
lea eax, [ecx + 6]
mov dword [esp + 4], eax
movzx ecx, word [ecx + 6]
mov edx, ecx
add edx, 0xffffffc3
movzx edx, dx
cmp edx, 2
jae 0x647d43
movzx ecx, cx
xor edx, edx
cmp ecx, 0x3e
sete dl
mov dword [esp + 0x10], edx
mov dword [esp + 0x30], 0x29
jmp case.0x645223.5
mov dword [esp + 8], ebp
lea eax, [ecx + 6]
mov dword [esp + 4], eax
movzx eax, word [ecx + 6]
xor edx, edx
cmp eax, 0x29
mov ebp, dword [esp + 0x190]
mov ebx, dword [esp + 0x194]
je 0x647343
jmp 0x64877c
mov eax, dword [esp + 0x190]
mov dword [eax + 0x7c], 1
mov edi, 1
mov dword [esp + 0x10], edi
mov dword [esp + 8], ebp
add ecx, 6
mov dword [esp + 4], ecx
mov edi, 0x83
xor esi, esi
mov ecx, ebx
mov ebp, dword [esp + 0x190]
jmp 0x645596
mov ecx, 5
jmp 0x647c3a
lea ebx, [ecx + 6]
mov eax, dword [esp + 8]
mov word [eax + 4], 0x8d
mov dword [esp + 4], ebx
movzx eax, word [ebx]
mov edx, eax
add edx, 0xffffffd9
movzx edx, dx
cmp edx, 0x2b
ja case.0x647b83.1
jmp dword [edx*4 + 0x648c6c]
movzx eax, ax
mov dword [esp + 0x58], eax
lea ebx, [ecx + 8]
mov dword [esp + 4], ebx
mov ax, word [ecx + 8]
lea ecx, [eax - 0x30]
movzx ecx, cx
cmp ecx, 9
ja 0x6480bc
add ebx, 2
xor ecx, ecx
cmp ecx, 0xccccccc
jge 0x64884e
movzx eax, ax
lea ecx, [ecx + ecx*4]
lea ecx, [eax + ecx*2 - 0x30]
mov dword [esp + 4], ebx
movzx eax, word [ebx]
mov edx, eax
add edx, 0xffffffd0
movzx edx, dx
add ebx, 2
cmp edx, 0xa
jb 0x647bb0
add ebx, 0xfffffffe
mov dl, 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x30], 2
mov dword [esp + 0xc], 0xffffffff
mov esi, ebx
xor ebx, ebx
jmp 0x648204
mov ebx, dword [esp + 0x194]
mov ebp, dword [esp + 0x190]
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x28]
jmp 0x647481
mov eax, dword [esp + 0x174]
mov dword [eax], 0x27
mov eax, 6
jmp 0x647f47
mov ecx, 7
mov ebp, dword [esp + 0x190]
lea eax, [ecx + ecx*2]
test ebx, ebx
je 0x647c7c
mov edx, edi
add ecx, 0xfffffffe
cmp ecx, 3
jbe 0x6487d6
mov edi, dword [esp + 0x194]
test edi, edi
mov eax, dword [eax*4 + 0x7d9b44]
mov esi, dword [esp + 8]
mov word [esi], ax
je 0x647ca0
add dword [edi], ebx
mov word [esi + 2], 0
add esi, 4
jmp 0x647cc4
cmp ecx, 1
jbe 0x64883c
movzx eax, word [eax*4 + 0x7d9b40]
mov esi, dword [esp + 8]
mov word [esi], ax
add esi, 2
mov ebx, dword [esp + 0x194]
jmp 0x647cd1
mov dword [esp + 0xc], eax
lea eax, [esi + 4]
mov word [esi + 2], bx
lea ecx, [ebx + ebx]
sub esp, 4
push ecx
push edx
push eax
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0x1c]
add esp, 0x10
lea esi, [esi + ebx*2 + 4]
mov ebx, edi
movzx eax, ax
mov word [esi], 0
add esi, 2
lea ecx, [eax - 0x96]
movzx ecx, cx
cmp ecx, 4
jae 0x647ce8
mov dword [ebp + 0x70], 1
jmp 0x647d00
add eax, 0xffffff66
movzx eax, ax
cmp eax, 1
ja 0x647d00
mov eax, dword [esp + 0xc0]
or byte [eax + 1], 0x10
mov dword [esp + 0xc], 0
mov ebp, esi
jmp 0x6472fd
mov esi, dword [esp + 8]
xor eax, eax
mov ebp, dword [esp + 0x190]
cmp dword [ebp + 0x5c], 0
setg al
or eax, 0x9e
mov word [esi], ax
add esi, 2
mov edx, dword [esp + 0x14]
cmp edx, 0xfffffffe
mov ecx, 0xffffffff
cmove edx, ecx
mov dword [esp + 0x14], edx
jmp 0x647cd1
mov dword [esp + 0x58], 0x3e
movzx ecx, cx
cmp ecx, 0x3c
je case.0x645223.6
jmp 0x64887e
mov ebp, dword [esp + 0x190]
inc dword [ebp + 0x5c]
add ecx, 8
mov dword [esp + 4], ecx
mov edi, 0x80
xor esi, esi
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x10], 0
mov dword [esp + 8], ebx
jmp 0x645596
cmp edx, 0xff
mov ebp, ebx
ja 0x6488ca
mov esi, dword [esp + 0x190]
mov esi, dword [esi + 0xc]
mov dword [esp + 0x58], 0x3e
test byte [esi + edx], 0x10
je 0x6488ca
mov edi, dword [esp + 0x58]
mov dword [esp + 8], ebp
lea ecx, [eax + 2]
mov dword [esp + 0x10], ecx
mov dword [esp + 4], ecx
movzx ecx, word [eax + 2]
lea edx, [ecx - 0x30]
movzx edx, dx
cmp edx, 9
jbe 0x648702
movzx edx, cx
cmp edx, 0xff
ja 0x647e1a
mov edx, dword [esp + 0x190]
mov edx, dword [edx + 0xc]
add eax, 4
movzx esi, cx
test byte [edx + esi], 0x10
je 0x647e08
mov dword [esp + 4], eax
movzx ecx, word [eax]
add eax, 2
cmp ecx, 0x100
jb 0x647ded
add eax, 0xfffffffe
cmp dword [esp + 0x194], 0
jne 0x647e2c
jmp 0x6480a7
mov eax, dword [esp + 0x10]
cmp dword [esp + 0x194], 0
je 0x6480a7
movzx ecx, cx
cmp edi, ecx
jne 0x648746
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 0x30]
cmp ecx, 0x2710
jge 0x648890
sub eax, dword [esp + 0x10]
mov edi, eax
sar edi, 1
mov edx, dword [esp + 0x190]
mov esi, edx
mov edx, dword [esi + 0x40]
mov dword [esp + 0xc], edx
mov ebp, edi
lea edx, [edi + 2]
cmp edx, dword [esi + 0x34]
jle 0x647e82
mov esi, dword [esp + 0x190]
mov dword [esi + 0x34], edx
cmp eax, 0x41
jge 0x64876a
inc dword [esp + 0xc]
test ecx, ecx
jle 0x647efa
mov edi, dword [esp + 0x190]
mov esi, dword [edi + 0x28]
add esi, 8
xor ebx, ebx
jmp 0x647ec5
mov eax, dword [esp + 0xc]
cmp dword [esi], eax
je 0x648305
test dword [esp + 0x1c], 0x80000
je 0x64886c
mov edi, dword [esp + 0x190]
mov dword [edi + 0x78], 1
jmp 0x647eed
cmp ebp, dword [esi - 4]
jne 0x647ee1
sub esp, 4
push ebp
push dword [esi - 8]
push dword [esp + 0x1c]
call fcn.0065a470
add esp, 0x10
test eax, eax
je 0x647e9b
mov eax, dword [esp + 0xc]
cmp dword [esi], eax
je 0x64882a
inc ebx
mov ecx, dword [edi + 0x30]
add esi, 0xc
cmp ebx, ecx
jl 0x647ec5
jmp 0x647efc
xor ebx, ebx
cmp ebx, ecx
jl 0x6480a7
mov eax, dword [esp + 0x190]
mov esi, dword [eax + 0x38]
cmp ecx, esi
jge 0x648015
mov eax, dword [esp + 0x190]
mov ebx, dword [eax + 0x28]
jmp 0x648086
mov edx, ebx
mov word [edx + 2], cx
mov ecx, dword [esp + 0x190]
sub eax, dword [ecx + 0x18]
shr eax, 1
inc eax
mov word [edx + 4], ax
mov word [edx + 6], 0
lea ebp, [edx + 8]
xor eax, eax
test eax, eax
mov ecx, eax
mov edx, 4
cmove ecx, edx
mov edx, dword [esp + 0xc]
cmove edx, eax
mov dword [esp + 0xc], edx
mov dword [esp + 0xdc], 1
mov dword [esp + 0x90], ebx
mov ebx, dword [esp + 0x194]
test ecx, ecx
jne 0x647024
jmp 0x6472fd
movzx eax, ax
cmp eax, 0x7b
jne 0x647ff6
movzx eax, word [ecx + 0xa]
add eax, 0xffffffd0
movzx eax, ax
cmp eax, 9
ja 0x647ff6
add ecx, 0xe
movzx eax, word [ecx - 2]
lea edx, [eax - 0x30]
movzx edx, dx
add ecx, 2
cmp edx, 0xa
jb 0x647f9e
movzx eax, ax
cmp eax, 0x7d
je 0x64525d
cmp eax, 0x2c
jne 0x647ff6
movzx eax, word [ecx - 2]
cmp eax, 0x7d
je 0x64525d
add eax, 0xffffffd0
movzx eax, ax
cmp eax, 9
ja 0x647ff6
movzx eax, word [ecx]
lea edx, [eax - 0x30]
movzx edx, dx
add ecx, 2
cmp edx, 0xa
jb 0x647fd9
movzx eax, ax
cmp eax, 0x7d
je 0x64525d
mov ebp, ebx
mov word [ebp], 0x9d
add ebp, 2
mov dword [esp + 0xc], 0
mov ebx, dword [esp + 0x194]
jmp 0x6472fd
lea eax, [esi*8]
lea eax, [eax + eax*2]
sub esp, 0xc
push eax
call dword [0x7d97a8]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x6488e3
add esi, esi
mov eax, dword [esp + 0x190]
mov edi, eax
mov eax, dword [edi + 0x38]
shl eax, 2
lea eax, [eax + eax*2]
sub esp, 4
push eax
push dword [edi + 0x28]
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0x10
cmp dword [edi + 0x38], 0x15
jl 0x648076
sub esp, 0xc
mov eax, dword [esp + 0x19c]
push dword [eax + 0x28]
call dword [0x7d97ac]
add esp, 0x10
mov eax, dword [esp + 0x190]
mov dword [eax + 0x28], ebx
mov dword [eax + 0x38], esi
mov ecx, dword [eax + 0x30]
lea eax, [ecx + ecx*2]
mov edx, dword [esp + 0x10]
mov dword [ebx + eax*4], edx
mov dword [ebx + eax*4 + 4], ebp
mov edx, dword [esp + 0xc]
mov dword [ebx + eax*4 + 8], edx
inc ecx
mov eax, dword [esp + 0x190]
mov dword [eax + 0x30], ecx
add dword [esp + 4], 2
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x190]
jmp 0x645560
mov dl, 1
xor ecx, ecx
mov dword [esp + 0x30], 2
mov dword [esp + 0xc], 0xffffffff
mov esi, ebx
mov ebx, 0
mov dword [esp + 0x10], 0
jmp 0x648204
add ecx, 8
mov dword [esp + 4], ecx
mov dword [esp + 0x10], 0x27
jmp 0x64814d
lea ecx, [eax - 0x30]
movzx ecx, cx
mov dword [esp + 0x58], 0
cmp ecx, 9
mov dword [esp + 0x10], 0
jbe 0x647b9c
jmp 0x648152
add ecx, 8
mov dword [esp + 4], ecx
mov dword [esp + 0x10], 0x3e
jmp 0x64814d
movzx eax, word [ecx + 8]
cmp eax, 0x26
jne 0x6482f4
add ecx, 0xa
mov dword [esp + 4], ecx
mov eax, dword [esp + 8]
mov word [eax + 4], 0x8f
mov dword [esp + 0x10], 0xffffffff
mov ebx, ecx
mov ax, word [ebx]
lea ecx, [eax - 0x30]
movzx ecx, cx
cmp ecx, 9
jbe 0x648702
movzx ecx, ax
cmp ecx, 0xff
ja 0x6488a2
movzx eax, ax
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 0xc]
test byte [ecx + eax], 0x10
je 0x6488a2
lea esi, [ebx + 2]
mov dword [esp + 4], esi
movzx eax, word [ebx + 2]
cmp eax, 0xff
ja 0x6481b9
lea esi, [ebx + 4]
movzx edx, ax
test byte [ecx + edx], 0x10
je 0x6481b6
mov dword [esp + 4], esi
movzx eax, word [esi]
add esi, 2
cmp eax, 0xff
jbe 0x64819c
add esi, 0xfffffffe
mov ecx, esi
sub ecx, ebx
sar ecx, 1
mov dword [esp + 0xc], ecx
cmp dword [esp + 0x10], 0
jle 0x6481ed
lea edx, [esi + 2]
mov dword [esp + 4], edx
cmp ax, word [esp + 0x10]
jne 0x6488b4
mov ax, word [edx]
mov dword [esp + 0x58], 0xffffffff
xor ecx, ecx
mov esi, edx
jmp 0x6481f7
mov dword [esp + 0x58], 0xffffffff
xor ecx, ecx
mov edx, dword [esp + 0xf0]
mov dword [esp + 0x30], edx
xor edx, edx
lea edi, [esi + 2]
mov dword [esp + 4], edi
movzx eax, ax
cmp eax, 0x29
jne 0x6488b4
cmp dword [esp + 0x194], 0
je 0x648242
mov edi, 0x87
mov dword [esp + 0x10], 0
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x190]
mov esi, dword [esp + 0x30]
jmp 0x645596
test dl, dl
je 0x648284
test ecx, ecx
jle 0x6488f5
cmp dword [esp + 0x58], 0
je 0x64832e
cmp dword [esp + 0x58], 0x2d
jne 0x64831c
mov eax, 1
sub eax, ecx
mov ecx, dword [esp + 0x190]
add eax, dword [ecx + 0x40]
mov ecx, eax
test ecx, ecx
jg 0x64832e
jmp 0x648734
mov eax, dword [esp + 0x190]
mov ecx, dword [eax + 0x2c]
mov dword [esp + 0x94], ecx
mov eax, dword [eax + 0x30]
xor esi, esi
test eax, eax
jle 0x648384
mov edi, dword [esp + 0x94]
lea eax, [edi + 2]
sub esp, 4
push dword [esp + 0x10]
push eax
push ebx
call fcn.0065a470
add esp, 0x10
test eax, eax
jne 0x6482d1
mov eax, dword [esp + 0xc]
cmp word [edi + eax*2 + 2], 0
je 0x64837a
mov eax, dword [esp + 0x190]
mov ecx, eax
mov eax, dword [ecx + 0x30]
mov ecx, dword [ecx + 0x34]
lea edi, [edi + ecx*2]
mov dword [esp + 0x94], edi
inc esi
cmp esi, eax
jl 0x6482a2
jmp 0x648384
mov dword [esp + 0x10], 0
mov ax, 0x52
jmp 0x648170
mov eax, dword [esp + 0x190]
mov ecx, dword [eax + 0x30]
cmp ebx, ecx
jge 0x647f04
jmp 0x6480a7
mov eax, dword [esp + 0x190]
add ecx, dword [eax + 0x40]
test ecx, ecx
jle 0x648734
mov eax, dword [esp + 0x190]
cmp ecx, dword [eax + 0x44]
jg 0x648734
mov eax, dword [esp + 8]
mov word [eax + 6], cx
mov eax, dword [esp + 0x190]
cmp ecx, dword [eax + 0x4c]
jle 0x648221
mov ebp, dword [esp + 0x190]
mov dword [ebp + 0x4c], ecx
mov edi, 0x87
mov dword [esp + 0x10], 0
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x30]
jmp 0x645596
mov eax, dword [esp + 0x190]
mov eax, dword [eax + 0x30]
cmp esi, eax
jge 0x648444
mov ecx, dword [esp + 0x94]
movzx ecx, word [ecx]
mov word [esp + 0x10], cx
movzx ecx, cx
mov edx, dword [esp + 0x190]
cmp dword [edx + 0x4c], ecx
jge 0x6483b4
mov edx, dword [esp + 0x190]
mov dword [edx + 0x4c], ecx
lea ecx, [esi + 1]
cmp ecx, eax
jge 0x6484a5
mov ebp, 1
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 0x34]
lea edi, [eax + ecx*2 + 2]
lea eax, [eax + ecx*2]
mov dword [esp + 0x94], eax
sub esp, 4
push dword [esp + 0x10]
push edi
push ebx
call fcn.0065a470
add esp, 0x10
test eax, eax
jne 0x648414
mov eax, dword [esp + 0xc]
cmp word [edi + eax*2], 0
jne 0x648414
lea eax, [esi + ebp + 1]
inc ebp
mov ecx, dword [esp + 0x190]
cmp eax, dword [ecx + 0x30]
jl 0x6483c4
cmp ebp, 2
jl 0x6484a5
mov eax, dword [esp + 8]
mov word [eax + 6], si
mov word [eax + 8], bp
mov esi, dword [esp + 0x30]
inc esi
inc word [eax + 4]
mov edi, 0x87
mov dword [esp + 0x10], 0
jmp 0x6484f9
cmp dword [esp + 0x10], 0
jne 0x648734
movzx eax, word [ebx]
cmp eax, 0x52
jne 0x6484b7
cmp dword [esp + 0xc], 2
jl 0x648509
xor eax, eax
mov ecx, 1
movzx edx, word [ebx + ecx*2]
lea esi, [edx - 0x30]
movzx esi, si
cmp esi, 0xa
jae 0x648734
cmp eax, 0xccccccc
jge 0x648692
lea eax, [eax + eax*4]
lea eax, [edx + eax*2 - 0x30]
inc ecx
cmp ecx, dword [esp + 0xc]
jl 0x648469
test eax, eax
mov ecx, dword [esp + 8]
mov word [ecx + 4], 0x8f
jne 0x648517
jmp 0x648513
mov eax, dword [esp + 8]
movzx ecx, word [esp + 0x10]
mov word [eax + 6], cx
jmp 0x648221
cmp dword [esp + 0xc], 6
jne 0x648734
sub esp, 4
push 6
push str.DEFINE
push ebx
call fcn.0065a4c0
add esp, 0x10
test eax, eax
jne 0x648734
mov eax, dword [esp + 8]
mov word [eax + 4], 0x91
mov edi, 0x87
mov dword [esp + 0x10], 0
mov esi, 1
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x190]
jmp 0x645596
mov eax, dword [esp + 8]
mov word [eax + 4], 0x8f
mov ax, 0xffff
mov ecx, dword [esp + 8]
mov word [ecx + 6], ax
jmp 0x648221
lea eax, [ecx + edx*2]
cmp ebp, eax
mov eax, 0x57
mov ecx, 0x34
cmovb ecx, eax
mov eax, dword [esp + 0x174]
mov dword [eax], ecx
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x34
jmp 0x6485c4
mov eax, dword [esp + 0x178]
mov ecx, dword [esp + 0x34]
mov dword [eax], ecx
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0x14]
mov dword [eax], ecx
mov eax, dword [esp + 0x180]
mov ecx, dword [esp + 0x20]
mov dword [eax], ecx
mov eax, dword [esp + 0x184]
mov ecx, dword [esp + 0x18]
mov dword [eax], ecx
mov eax, dword [esp + 0x13c]
mov dword [eax], ebp
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x170]
mov dword [ecx], eax
test ebx, ebx
je 0x6485fa
mov eax, dword [ebx]
mov ecx, 0x7fffffeb
sub ecx, eax
sub ebp, dword [esp + 0xc4]
sar ebp, 1
cmp ecx, ebp
jge 0x6485f6
mov eax, dword [esp + 0x174]
mov dword [eax], 0x14
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x170]
mov dword [ecx], eax
xor eax, eax
add esp, 0x15c
pop esi
pop edi
pop ebx
pop ebp
ret
movzx eax, ax
cmp eax, 0x3a
mov eax, 0xd
mov ecx, 0x1f
cmove ecx, eax
jmp 0x648536
add eax, ebp
mov dword [ebx], eax
mov eax, 1
jmp 0x6485d3
mov eax, dword [esp + 0x174]
mov dword [eax], 0x47
jmp 0x6485c4
mov eax, 0x15
mov ecx, dword [esp + 0x174]
mov dword [ecx], eax
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3c
jmp 0x6485c4
mov ecx, 5
mov edx, dword [esp + 0x174]
mov dword [edx], ecx
mov dword [esp + 4], eax
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 9
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 6
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x12
jmp 0x6485c4
add eax, 0xfffffffe
movzx ecx, word [eax + 2]
add eax, 2
add ecx, 0xffffffd0
movzx ecx, cx
cmp ecx, 0xa
jb 0x64867c
mov dword [esp + 4], eax
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3d
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x40
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x28
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x52
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0xe
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0xc
mov dword [esp + 4], edx
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x54
jmp 0x6485c4
cmp ecx, 6
je 0x6485c4
jmp 0x6485d3
mov eax, dword [esp + 0x174]
mov dword [eax], 0x45
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0xf
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x2a
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3e
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x30
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1d
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x36
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1b
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0xb
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3f
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3b
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3a
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 7
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x4b
jmp 0x6485c4
mov ecx, 4
mov eax, edx
jmp 0x648634
mov eax, dword [esp + 0x174]
mov dword [eax], 0x41
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x42
jmp 0x6485c4
add ebx, 0xfffffffe
movzx eax, word [ebx + 2]
add ebx, 2
add eax, 0xffffffd0
movzx eax, ax
cmp eax, 0xa
jb 0x648851
mov dword [esp + 4], ebx
jmp 0x648692
mov eax, dword [esp + 0x174]
mov dword [eax], 0x2b
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x29
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x31
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1c
jmp 0x6485c4
mov dword [esp + 4], esi
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1a
jmp 0x6485c4
add ecx, 6
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x174]
mov dword [eax], 0x18
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x15
jmp 0x6485c4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x23
jmp 0x6485c4