Function at 0x6bc850
Capabilities:
Authenticate hmac
Encode data using base64
Encode data using xor
Encrypt data using speck
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x15c
mov eax, dword [esp + 0x170]
mov dword [esp + 0x134], ecx
mov esi, dword [ecx]
mov dword [esp + 0xbc], 0
mov dword [esp + 0x13c], edx
mov ebp, dword [edx]
mov eax, dword [eax]
mov dword [esp + 4], eax
mov edi, esi
and edi, 0x800
sete byte [esp + 0x53]
mov edx, edi
shr edx, 0xb
mov dword [esp + 0x9c], edx
mov edx, esi
shr edx, 9
and edx, 1
mov dword [esp + 0xd4], edx
xor edx, 1
mov dword [esp + 0xf4], edx
mov dword [esp + 0x1c], esi
and esi, 1
mov dword [esp + 0xb4], esi
mov ebx, dword [esp + 0x194]
xor edx, edx
test ebx, ebx
setne dl
lea esi, [esp + 0xbc]
cmove esi, ebx
mov dword [esp + 0x138], esi
or edx, 2
mov dword [esp + 0xf0], edx
mov edx, dword [esp + 0x190]
lea esi, [edx + 0x88]
mov dword [esp + 0xb8], esi
lea edx, [edx + 0x64]
mov dword [esp + 0xc0], edx
mov dword [esp + 0x28], 0xfffffffe
mov dword [esp + 0x3c], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0xc4], ebp
mov dword [esp + 0xd8], ebp
mov dword [esp + 0xdc], 0
mov dword [esp + 0x44], 0xfffffffe
mov dword [esp + 0x4c], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x18], 0xfffffffe
mov dword [esp + 0x14], 0xfffffffe
mov dword [esp + 0x20], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x60], edi
jmp 0x6bc9c0
add ecx, 0xe
mov dword [esp + 4], eax
mov dword [esp + 0x64], ecx
jmp 0x6bc9c0
mov eax, str._b__w_
jmp 0x6bc9a0
movzx eax, word [eax]
mov ecx, dword [esp + 0x64]
test ecx, ecx
je 0x6bc9d9
test ax, ax
jne 0x6bc9d9
mov dword [esp + 4], ecx
movzx eax, word [ecx]
xor ecx, ecx
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x190]
mov edx, ecx
test ebx, ebx
je 0x6bca70
mov ecx, dword [edx + 0x10]
mov edx, dword [edx + 0x3c]
lea esi, [ecx + edx*2 - 0xc8]
cmp ebp, esi
ja 0x6c1c24
mov edx, ebp
mov edi, dword [esp + 0xc4]
cmp edx, edi
cmovb edx, edi
mov ecx, dword [ebx]
mov esi, 0x7fffffeb
sub esi, ecx
mov ebp, edx
sub edx, edi
sar edx, 1
cmp esi, edx
jl 0x6c1cb7
add ecx, edx
mov dword [ebx], ecx
mov edi, dword [esp + 0xc]
test edi, edi
je 0x6bca90
mov ecx, edi
sub ecx, dword [esp + 0xd8]
jbe 0x6bca9f
mov edx, ebp
sub edx, edi
je 0x6bca5a
mov esi, dword [esp + 0xd8]
nop dword [eax]
movzx ebx, byte [edi]
inc edi
mov byte [esi], bl
inc esi
dec edx
jne 0x6bca50
sub ebp, ecx
mov ecx, dword [esp + 0xd8]
mov dword [esp + 0xc], ecx
jmp 0x6bca9f
mov ecx, dword [edx + 0x3c]
add ecx, ecx
add ecx, dword [edx + 0x10]
cmp dword [edx + 0x20], ecx
jbe 0x6bcaad
jmp 0x6c1c44
mov dword [esp + 0xc], 0
mov ebp, dword [esp + 0xd8]
mov dword [esp + 0xc4], ebp
mov ebx, dword [esp + 0x194]
movzx ecx, ax
test cx, cx
je 0x6bcaec
cmp ecx, 0x5c
jne 0x6bcacb
mov eax, dword [esp + 4]
movzx edx, word [eax + 2]
cmp edx, 0x45
je 0x6bcff4
cmp dword [esp + 0x2c], 0
jne 0x6bce19
cmp ecx, 0x5c
jne 0x6bcaec
mov eax, dword [esp + 4]
movzx edx, word [eax + 2]
cmp edx, 0x51
je 0x6bd008
test byte [esp + 0x1c], 8
je 0x6bcc6b
cmp ecx, 0xff
ja 0x6bcc6b
mov esi, dword [esp + 4]
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0xc]
lea eax, [esi + 2]
nop word cs:[eax + eax]
test byte [edx + ecx], 1
je 0x6bcb40
mov dword [esp + 4], eax
movzx ecx, word [eax]
add eax, 2
cmp ecx, 0x100
jb 0x6bcb20
jmp 0x6bcc60
cmp ecx, 0x23
jne 0x6bcc60
mov dword [esp + 4], eax
mov cx, word [eax]
test cx, cx
je 0x6bcd33
mov dword [esp + 8], ebp
mov ebx, dword [esp + 0x60]
nop word cs:[eax + eax]
mov edx, dword [esp + 0x190]
mov edi, dword [edx + 0x1c]
mov edx, dword [edx + 0x84]
test edx, edx
je 0x6bcbc0
cmp eax, edi
jae 0x6bcc20
sub esp, 0xc
push dword [esp + 0xa8]
push dword [esp + 0xc8]
push edi
push edx
push eax
call fcn.006d3900
add esp, 0x20
test eax, eax
jne 0x6bce07
mov edi, dword [esp + 4]
jmp 0x6bcc22
mov edx, dword [esp + 0xb8]
mov edx, dword [edx]
lea ebx, [edx + edx]
sub edi, ebx
cmp eax, edi
jbe 0x6bcbda
mov edi, eax
mov ebx, dword [esp + 0x60]
jmp 0x6bcc22
mov edi, dword [esp + 0x190]
cmp cx, word [edi + 0x8c]
mov ebx, dword [esp + 0x60]
jne 0x6bcc20
cmp edx, 1
je 0x6bd01c
movzx ecx, word [eax + 2]
mov edi, dword [esp + 0x190]
cmp cx, word [edi + 0x8e]
mov edi, eax
jne 0x6bcc22
jmp 0x6bd021
mov edi, eax
lea eax, [edi + 2]
test ebx, ebx
mov dword [esp + 4], eax
je 0x6bcc49
movzx ecx, word [eax]
mov edx, ecx
and edx, 0xfc00
cmp edx, 0xdc00
jne 0x6bcc4c
add edi, 4
mov dword [esp + 4], edi
mov eax, edi
mov cx, word [eax]
test cx, cx
jne 0x6bcb70
jmp 0x6bd028
add eax, 0xfffffffe
cmp eax, esi
ja 0x6bc9c0
xor eax, eax
cmp ecx, 0x3e
jg 0x6bcd45
lea edx, [ecx - 0x2a]
cmp edx, 2
jb 0x6bcda3
cmp ecx, 0x28
jne 0x6bd1d1
mov eax, dword [esp + 4]
movzx edx, word [eax + 2]
cmp edx, 0x3f
jne 0x6bcca5
movzx edx, word [eax + 4]
cmp edx, 0x23
je 0x6be2c2
xor eax, eax
cmp dword [esp + 0x64], 0
jne 0x6bd1dc
cmp dword [esp + 0x90], 0
je 0x6bd1dc
test al, al
jne 0x6bd1dc
mov edx, dword [esp + 0xdc]
test edx, edx
lea edx, [edx - 1]
mov dword [esp + 0xdc], edx
mov edx, 0
cmovg edx, dword [esp + 0x90]
jg 0x6bcfe8
test ebx, ebx
jne 0x6bcfe8
mov edx, dword [esp + 4]
mov esi, dword [esp + 0x190]
sub edx, dword [esi + 0x18]
shr edx, 1
mov esi, ebp
mov ebp, ebx
mov ebx, esi
mov edi, dword [esp + 0x90]
movzx esi, word [edi + 4]
sub edx, esi
mov word [edi + 6], dx
mov edx, ebx
mov ebx, ebp
mov ebp, edx
mov dword [esp + 0x90], 0
jmp 0x6bd1dc
mov ecx, 0x23
cmp eax, esi
ja 0x6bc9c0
jmp 0x6bcc6b
cmp ecx, 0x3f
je 0x6bcda3
cmp ecx, 0x7b
jne 0x6bd1d1
mov eax, dword [esp + 4]
movzx edx, word [eax + 2]
add edx, 0xffffffd0
movzx esi, dx
xor edx, edx
cmp esi, 9
ja 0x6bd1cc
add eax, 6
nop
movzx edx, word [eax - 2]
lea esi, [edx - 0x30]
movzx esi, si
add eax, 2
cmp esi, 0xa
jb 0x6bcd70
movzx esi, dx
cmp esi, 0x2c
je 0x6bd18d
mov edx, 1
cmp esi, 0x7d
je 0x6bd1cc
xor edx, edx
jmp 0x6bd1cc
mov al, 1
cmp ecx, 0x7c
ja case.0x6bcdae.1
jmp dword [ecx*4 + 0x6c2008]
mov eax, dword [esp + 4]
add eax, 2
sub esp, 4
push 6
push 0x7b318c
push eax
call fcn.006d3bc0
add esp, 0x10
test eax, eax
mov ecx, dword [esp + 4]
je 0x6bc9ad
add ecx, 2
sub esp, 4
push 6
push str._:_:__
push ecx
call fcn.006d3bc0
add esp, 0x10
test eax, eax
jne 0x6bd271
mov eax, str._b___w_
mov ecx, dword [esp + 4]
jmp 0x6bc9a0
mov eax, dword [esp + 0xb8]
mov edx, dword [eax]
mov eax, dword [esp + 4]
jmp 0x6bd021
test ebx, ebx
jne 0x6bce48
cmp dword [esp + 0x90], 0
je 0x6bce48
mov eax, dword [esp + 4]
mov edx, dword [esp + 0x190]
sub eax, dword [edx + 0x18]
shr eax, 1
mov esi, dword [esp + 0x90]
movzx edx, word [esi + 4]
sub eax, edx
mov word [esi + 6], ax
mov dword [esp + 0x90], 0
mov eax, dword [esp + 0x1c]
test ah, 0x40
je case.0x6bcdae.1
mov eax, dword [esp + 4]
mov dword [ebp], 0xff0076
mov edx, dword [esp + 0x190]
sub eax, dword [edx + 0x18]
shr eax, 1
mov word [ebp + 4], ax
mov word [ebp + 6], 0
mov dword [esp + 0x90], ebp
lea ebp, [ebp + 8]
cmp dword [esp + 0x60], 0
mov word [esp + 0x124], cx
mov eax, 1
je 0x6bceda
and ecx, 0xfc00
cmp ecx, 0xd800
jne 0x6bceda
mov ecx, dword [esp + 4]
movzx edx, word [ecx + 2]
mov esi, edx
and esi, 0xfc00
mov eax, 1
cmp esi, 0xdc00
jne 0x6bceda
add ecx, 2
mov dword [esp + 4], ecx
mov word [esp + 0x126], dx
mov eax, 2
mov ecx, dword [esp + 0x190]
mov edx, ecx
mov ecx, dword [edx + 0x20]
sub ecx, dword [edx + 0x10]
sar ecx, 1
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0x1c]
and ecx, 1
sete dl
or dl, byte [esp + 0x53]
jne 0x6bcfad
movzx edx, word [esp + 0x124]
mov esi, edx
and esi, 0xfc00
cmp esi, 0xd800
jne 0x6bcf39
shl edx, 0xa
and edx, 0xffc00
movzx esi, word [esp + 0x126]
and esi, 0x3ff
lea edx, [edx + esi + 0x10000]
mov esi, edx
sar esi, 0x1f
shr esi, 0x19
add esi, edx
mov edi, esi
and edi, 0x7fffff80
sar esi, 7
movzx esi, byte [esi + 0x7b6a54]
shl esi, 7
sub edx, edi
add edx, esi
movzx edx, word [edx + edx + 0x7b8c54]
movzx edx, byte [edx*8 + 0x7b53d7]
test dx, dx
mov ebx, dword [esp + 0x194]
je 0x6bcfad
mov dword [ebp], 0x90010
mov word [ebp + 4], dx
mov dword [esp + 0xc], ebp
lea ebp, [ebp + 6]
mov edx, dword [esp + 0x14]
cmp edx, 0xfffffffe
mov ecx, 0xffffffff
mov esi, dword [esp + 0x28]
cmove esi, ecx
mov dword [esp + 0x28], esi
cmove edx, ecx
mov dword [esp + 0x14], edx
jmp 0x6c09fd
add ecx, 0x1d
mov word [ebp], cx
lea ecx, [ebp + 2]
test eax, eax
je 0x6bd045
mov edx, eax
lea esi, [esp + 0x124]
mov edi, ecx
nop word [eax + eax]
movzx ebx, word [esi]
mov word [edi], bx
add edi, 2
add esi, 2
dec edx
jne 0x6bcfd0
lea edx, [ebp + eax*2]
lea ecx, [ecx + eax*2]
jmp 0x6bd047
mov dword [esp + 0x90], edx
jmp 0x6bd1dc
add eax, 2
mov dword [esp + 4], eax
mov dword [esp + 0x2c], 0
jmp 0x6c09fd
add eax, 2
mov dword [esp + 4], eax
mov dword [esp + 0x2c], 1
jmp 0x6c09fd
mov edx, 1
lea eax, [eax + edx*2]
mov dword [esp + 4], eax
mov ecx, 0x23
mov ebx, dword [esp + 0x194]
mov ebp, dword [esp + 8]
cmp eax, esi
ja 0x6bc9c0
jmp 0x6bcc6b
mov edx, ebp
movzx esi, word [esp + 0x124]
cmp esi, 0xd
je 0x6bd05c
movzx edi, si
cmp edi, 0xa
jne 0x6bd067
mov ebx, dword [esp + 0xc0]
or byte [ebx + 1], 8
cmp eax, 1
sete bh
cmp dword [esp + 0xb4], 0
sete bl
or bl, bh
cmp dword [esp + 0x14], 0xfffffffe
jne 0x6bd0cb
test bl, bl
je 0x6bd121
cmp eax, 1
mov ebx, dword [esp + 0x194]
jne 0x6bd22a
mov dword [esp + 0x28], 0xffffffff
mov dword [esp + 0xc], ebp
mov ebp, ecx
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x14], eax
mov dword [esp + 0x34], esi
jmp 0x6c09fd
test bl, bl
je 0x6bd15b
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
movzx eax, word [edx]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x190]
mov edx, dword [edx + 0x68]
or edx, dword [esp + 0xb4]
mov dword [esp + 0xc], ebp
mov ebp, ecx
mov dword [esp + 0x18], edx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov ebx, dword [esp + 0x194]
jmp 0x6c09fd
mov dword [esp + 0x28], 0xffffffff
mov dword [esp + 0xc], ebp
mov ebp, ecx
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov dword [esp + 0x18], 0xffffffff
mov dword [esp + 0x14], 0xffffffff
mov ebx, dword [esp + 0x194]
jmp 0x6c09fd
mov dword [esp + 0xc], ebp
mov ebp, ecx
mov eax, dword [esp + 0x14]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov ebx, dword [esp + 0x194]
jmp 0x6c09fd
movzx esi, word [eax - 2]
mov edx, 1
cmp esi, 0x7d
je 0x6bd1cc
add esi, 0xffffffd0
movzx esi, si
xor edx, edx
cmp esi, 9
ja 0x6bd1cc
nop dword [eax + eax]
movzx edx, word [eax]
lea esi, [edx - 0x30]
movzx esi, si
add eax, 2
cmp esi, 0xa
jb 0x6bd1b0
movzx eax, dx
xor edx, edx
cmp eax, 0x7d
sete dl
test edx, edx
setne al
cmp dword [esp + 0x64], 0
je 0x6bccb2
mov edx, dword [esp + 0x1c]
test dh, 0x40
sete dl
cmp dword [esp + 0x64], 0
jne 0x6bd21c
or dl, al
jne 0x6bd21c
mov edx, dword [esp + 4]
mov dword [ebp], 0xff0076
mov esi, dword [esp + 0x190]
sub edx, dword [esi + 0x18]
shr edx, 1
mov word [ebp + 4], dx
mov word [ebp + 6], 0
mov dword [esp + 0x90], ebp
lea ebp, [ebp + 8]
cmp ecx, 0x7c
jbe switch.0x006bcdae
jmp case.0x6bcdae.1
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
movzx eax, word [edx]
mov dword [esp + 0xc], ebp
mov ebp, ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 0x68]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x34], esi
mov dword [esp + 0x28], 0xffffffff
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x14], eax
jmp 0x6c09fd
mov eax, ebp
mov ebp, dword [esp + 0x190]
mov edi, eax
mov eax, dword [ebp + 0x20]
sub eax, dword [ebp + 0x10]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 4]
movzx eax, word [ecx + 2]
mov edx, eax
add edx, 0xffffffd2
movzx esi, dx
cmp esi, 0xf
ja 0x6bd30f
mov esi, 0x9001
bt esi, edx
jae 0x6bd30f
lea edx, [ecx + 4]
jmp 0x6bd2b3
add edx, 2
mov ebx, edi
movsx esi, word [edx]
movzx edi, si
cmp esi, 0x5b
jg 0x6bd2d0
cmp edi, 0x5b
jne 0x6bd2ee
cmp word [edx + 2], ax
mov edi, ebx
jne 0x6bd2f5
jmp 0x6bd30f
cmp edi, 0x5c
jne 0x6bd308
movzx edi, word [edx + 2]
and edi, 0xfffe
cmp edi, 0x5c
mov edi, ebx
jne 0x6bd2f5
add edx, 2
add edx, 2
jmp 0x6bd2b3
test si, si
mov edi, ebx
je 0x6bd30f
cmp si, ax
jne 0x6bd2b0
movzx esi, word [edx + 2]
cmp esi, 0x5d
jne 0x6bd2b0
jmp 0x6c1cde
cmp edi, 0x5d
mov edi, ebx
jne 0x6bd2f5
sar dword [esp + 0x3c], 1
xor ebp, ebp
mov dword [esp + 8], edi
jmp 0x6bd328
mov ax, word [edx + 2]
mov ecx, edx
mov ebp, esi
lea edx, [ecx + 2]
mov dword [esp + 4], edx
movzx ebx, ax
cmp ebx, 0x5c
jne 0x6bd350
movzx eax, word [ecx + 4]
add ecx, 4
cmp eax, 0x45
jne 0x6bd370
mov dword [esp + 4], ecx
mov edx, ecx
mov esi, ebp
jmp 0x6bd320
test ebp, ebp
jne 0x6bd396
mov esi, 1
movzx ecx, ax
cmp ecx, 0x5e
je 0x6bd320
jmp 0x6bd396
sub esp, 4
push 3
push 0x7b31c2
push ecx
call fcn.006d3bc0
add esp, 0x10
test eax, eax
jne 0x6bd3e0
mov edx, dword [esp + 4]
add edx, 6
mov dword [esp + 4], edx
mov esi, ebp
jmp 0x6bd320
cmp ebx, 0x5d
jne 0x6bd43b
mov eax, dword [esp + 0x190]
test byte [eax + 0x63], 2
je 0x6bd3e5
test ebp, ebp
mov ax, 0xd
mov cx, 0x9d
cmove ax, cx
mov word [edi], ax
mov dword [esp + 0xc], edi
lea ebp, [edi + 2]
mov edx, dword [esp + 0x14]
cmp edx, 0xfffffffe
mov ecx, 0xffffffff
cmove edx, ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x28], edx
jmp 0x6bd10d
mov ebx, 0x5c
lea edi, [edi + 6]
mov dword [esp + 0x38], edi
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x6c], 0
mov ecx, dword [esp + 0x64]
jmp 0x6bd498
lea edi, [edi + 6]
mov dword [esp + 0x38], edi
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x6c], 0
test ax, ax
mov ecx, dword [esp + 0x64]
je 0x6be605
mov eax, dword [esp + 0x1c]
mov edx, eax
and edx, 1
mov dword [esp + 0x8c], edx
and eax, 0x800
cmp eax, 1
sbb eax, eax
or eax, 0x10ffff
mov dword [esp + 0x48], eax
mov dword [esp + 0x24], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0x54], 0
xor edx, edx
mov dword [esp + 0x58], edi
mov dword [esp + 0x30], ebp
jmp 0x6bddd0
movzx eax, word [edx - 6]
cmp eax, 0x51
jne 0x6bd55e
lea eax, [edx - 4]
mov dword [esp + 4], eax
movzx esi, word [edx - 4]
cmp esi, 0x5c
jne 0x6bd565
movzx eax, word [edx - 2]
cmp eax, 0x45
jne 0x6bd580
mov dword [esp + 4], edx
movzx esi, word [edx]
add edx, 8
cmp esi, 0x5c
je 0x6bd4ed
add edx, 0xfffffff8
mov dword [esp + 0x2c], 0
jmp 0x6bd570
mov dl, byte [esp + 0x5c]
jmp 0x6bd597
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1f
mov ecx, 6
mov ebx, dword [esp + 0x194]
xor esi, esi
mov eax, dword [esp + 0x10]
cmp ecx, 0x12
jne 0x6bdb7c
jmp 0x6bdb84
add edx, 0xfffffff8
xor ecx, ecx
jmp 0x6bd588
add edx, 0xfffffffc
mov dword [esp + 0x2c], 1
mov eax, edx
test si, si
jne 0x6be1cf
jmp 0x6be1ee
add edx, 0xfffffffc
mov ecx, 1
mov eax, edx
mov dword [esp + 0x2c], ecx
test ecx, ecx
setne dl
mov si, 0x5c
movzx esi, si
cmp dword [esp + 0x60], 0
mov dword [esp + 0x104], esi
je 0x6bd5eb
mov ecx, esi
and ecx, 0xfc00
mov edi, ebp
cmp ecx, 0xd800
jne 0x6bd5ed
shl esi, 0xa
and esi, 0xffc00
movzx ecx, word [eax + 2]
add eax, 2
and ecx, 0x3ff
lea esi, [esi + ecx + 0x10000]
mov dword [esp + 0x104], esi
mov dword [esp + 4], eax
test dl, dl
je 0x6bd5f5
jmp 0x6bdb4c
mov edi, ebp
test dl, dl
jne 0x6bdb4c
cmp esi, 0x5b
je 0x6bd66b
cmp esi, 0x5c
jne 0x6bdb4c
lea ecx, [esp + 4]
lea edx, [esp + 0x104]
push 1
push dword [esp + 0x20]
mov eax, dword [esp + 0x198]
push dword [eax + 0x40]
mov eax, dword [esp + 0x180]
mov esi, eax
push esi
call fcn.006c2b40
add esp, 0x10
mov ecx, 6
cmp dword [esi], 0
jne 0x6bdb66
cmp eax, 5
mov ebp, edi
mov esi, dword [esp + 0x2c]
je 0x6bdb1b
test eax, eax
jne 0x6bdb36
mov edi, ebp
mov esi, dword [esp + 0x104]
cmp esi, ebx
jb 0x6bdb54
jmp 0x6bd8d0
mov ebp, edi
movzx ecx, word [eax + 2]
mov esi, 0x5b
lea edx, [ecx - 0x2e]
movzx edi, dx
cmp edi, 0xf
ja 0x6bdb4a
mov edi, 0x9001
bt edi, edx
mov edi, ebp
jae 0x6bdb4c
add eax, 4
jmp 0x6bd69d
add eax, 2
movsx edx, word [eax]
mov esi, 0x5b
movzx edi, dx
cmp edx, 0x5b
jg 0x6bd6bf
cmp edi, 0x5b
jne 0x6bd6dd
cmp word [eax + 2], cx
mov edi, ebp
jne 0x6bd6f4
jmp 0x6bd8c3
cmp edi, 0x5c
jne 0x6bd6e9
movzx esi, word [eax + 2]
and esi, 0xfffe
cmp esi, 0x5c
mov edi, ebp
jne 0x6bd6f4
add eax, 2
add eax, 2
jmp 0x6bd69d
test dx, dx
mov edi, ebp
jne 0x6bd6f4
jmp 0x6bdb4c
cmp edi, 0x5d
mov edi, ebp
je 0x6bdb4c
cmp dx, cx
jne 0x6bd69a
movzx edx, word [eax + 2]
cmp edx, 0x5d
jne 0x6bd69a
mov eax, dword [esp + 0x174]
mov dword [eax], 0x53
jmp 0x6bdb61
test ebx, ebx
js 0x6be0c8
cmp ebx, 3
mov edi, ebx
mov eax, 0
cmovl edi, eax
cmp dword [esp + 0x8c], 0
cmove edi, ebx
test dword [esp + 0x1c], 0x20000000
jne 0x6bdb8d
shl edi, 2
mov eax, dword [edi + edi*2 + 0x7b3238]
mov ebp, dword [esp + 0xa8]
mov ecx, dword [ebp + eax + 0x1c]
mov dword [esp + 0x120], ecx
mov ecx, dword [ebp + eax + 0x18]
mov dword [esp + 0x11c], ecx
mov ecx, dword [ebp + eax + 0x14]
mov dword [esp + 0x118], ecx
mov ecx, dword [ebp + eax + 0x10]
mov dword [esp + 0x114], ecx
mov ecx, dword [ebp + eax + 0xc]
mov dword [esp + 0x110], ecx
mov ecx, dword [ebp + eax + 8]
mov dword [esp + 0x10c], ecx
mov ecx, dword [ebp + eax]
mov eax, dword [ebp + eax + 4]
mov dword [esp + 0x108], eax
mov dword [esp + 0x104], ecx
mov ecx, dword [edi + edi*2 + 0x7b323c]
mov eax, dword [edi + edi*2 + 0x7b3240]
test ecx, ecx
js 0x6bd7ed
add ebp, ecx
xor ecx, ecx
test eax, eax
js 0x6bd7d9
movzx edx, byte [ebp + ecx]
or byte [esp + ecx + 0x104], dl
inc ecx
cmp ecx, 0x20
jne 0x6bd7c5
jmp 0x6bd7ed
movzx edx, byte [ebp + ecx]
not dl
and byte [esp + ecx + 0x104], dl
inc ecx
cmp ecx, 0x20
jne 0x6bd7d9
mov edx, dword [esp + 0x98]
mov ecx, eax
neg ecx
cmovl ecx, eax
cmp ecx, 1
mov ebx, dword [esp + 0x194]
je 0x6bdc51
cmp ecx, 2
mov ebp, dword [esp + 8]
jne 0x6bdc63
mov al, 0x7f
mov ecx, 0xb
jmp 0x6bdc5c
mov esi, edx
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc8], 0
sub esp, 4
lea ecx, [esp + 8]
lea edx, [esp + 0x108]
push dword [esp + 0x178]
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0xd8]
push eax
call fcn.006c3650
add esp, 0x10
test eax, eax
je 0x6bdbf9
xor ecx, ecx
cmp ebx, 0x10
sete cl
xor eax, eax
cmp dword [esp + 0x104], ecx
sete al
add eax, 3
mov ecx, dword [esp + 0x38]
mov word [ecx], ax
movzx eax, word [esp + 0xcc]
mov word [ecx + 2], ax
movzx eax, word [esp + 0xc8]
lea edx, [ecx + 6]
mov dword [esp + 0x38], edx
mov word [ecx + 4], ax
mov ecx, 0x12
mov dword [esp + 0xac], 1
jmp 0x6bdc04
mov esi, 0x5b
cmp esi, ebx
jb 0x6bdb54
mov ebp, edi
je 0x6be1f2
cmp esi, 0xd
je 0x6bd8e2
cmp esi, 0xa
jne 0x6bd8ed
mov eax, dword [esp + 0xc0]
or byte [eax + 1], 8
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push esi
push ebx
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.006c3bf0
add esp, 0x10
add dword [esp + 0x24], eax
mov ecx, 0x12
mov eax, 2
mov esi, dword [esp + 0x2c]
jmp 0x6bdb70
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx + 0x40]
not dl
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x6bd925
jmp 0x6bd999
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx + 0x40]
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x6bd93e
jmp 0x6bd9bb
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx]
not dl
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x6bd955
jmp 0x6bd999
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx]
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x6bd96d
jmp 0x6bd9bb
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx + 0xa0]
not dl
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x6bd983
mov dword [esp + 0x54], 1
jmp 0x6bd9bb
mov ebx, edx
xor ecx, ecx
movzx edx, byte [eax + ecx + 0xa0]
or byte [esp + ecx + 0x6c], dl
inc ecx
xor esi, esi
cmp ecx, 0x20
jne 0x6bd9a7
mov dword [esp + 0x10], edi
mov eax, ebx
mov dword [esp + 0x24], eax
jmp case.0x6bdf9d.25
test byte [esp + 0x1c], 0x40
jne 0x6c1efa
mov eax, dword [esp + 4]
movzx ebx, word [eax]
jmp case.0x6bdf9d.5
mov dword [esp + 0x10], edi
mov esi, dword [0x7b4878]
test esi, esi
je 0x6bdcb4
lea eax, [esi - 1]
lea ecx, [esp + 0x6c]
mov edi, edx
lea edx, [esp + 0x38]
push eax
push 0
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.006c3bf0
mov edx, edi
add esp, 0x10
cmp esi, 0xffffffff
mov ecx, ebp
jne 0x6bdcb8
jmp 0x6bdab8
mov eax, dword [0x7b4878]
cmp eax, 0xffffffff
je 0x6bdc1d
mov dword [esp + 0x2c], edx
mov esi, 0x7b4878
mov ebx, dword [esp + 0x1c]
mov ecx, eax
inc ecx
cmp ecx, dword [esi + 4]
lea esi, [esi + 4]
je 0x6bda45
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push dword [esi - 4]
push eax
push dword [esp + 0x198]
push ebx
call fcn.006c3bf0
add esp, 0x10
mov eax, dword [esi]
cmp eax, 0xffffffff
jne 0x6bda43
jmp 0x6bdb08
mov dword [esp + 0x10], edi
mov esi, dword [0x7b48c8]
test esi, esi
je 0x6bdd05
lea eax, [esi - 1]
lea ecx, [esp + 0x6c]
mov edi, edx
lea edx, [esp + 0x38]
push eax
push 0
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.006c3bf0
mov edx, edi
add esp, 0x10
cmp esi, 0xffffffff
mov ecx, ebp
jne 0x6bdd09
xor esi, esi
jmp 0x6bdc23
mov eax, dword [0x7b48c8]
cmp eax, 0xffffffff
je 0x6bdc1d
mov dword [esp + 0x2c], edx
mov esi, 0x7b48c8
mov ebx, dword [esp + 0x1c]
mov ecx, eax
inc ecx
cmp ecx, dword [esi + 4]
lea esi, [esi + 4]
je 0x6bdadc
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push dword [esi - 4]
push eax
push dword [esp + 0x198]
push ebx
call fcn.006c3bf0
add esp, 0x10
mov eax, dword [esi]
cmp eax, 0xffffffff
jne 0x6bdada
mov dword [esp + 0x10], edi
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x24], eax
xor esi, esi
jmp case.0x6bdf9d.25
mov edi, ebp
mov dword [esp + 0x104], 8
mov esi, 8
cmp esi, ebx
jb 0x6bdb54
jmp 0x6bd8d0
mov eax, dword [esp + 0x174]
mov dword [eax], 0x53
mov ecx, 6
jmp 0x6bdb6c
mov edi, ebp
cmp esi, ebx
jae 0x6bd8d0
mov eax, dword [esp + 0x174]
mov dword [eax], 8
mov ecx, 6
mov ebp, edi
mov esi, dword [esp + 0x2c]
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x194]
cmp ecx, 0x12
je 0x6bdb84
test ecx, ecx
jne 0x6beff1
mov dword [esp + 0x10], eax
jmp case.0x6bdf9d.25
mov ecx, dword [esp + 0x68]
test ecx, ecx
mov eax, 0xe
cmove eax, ecx
add eax, edi
mov ecx, 0x62bd8af
bt ecx, eax
jb 0x6bdc2e
lea eax, [edi - 8]
cmp eax, 2
ja 0x6bdd63
add eax, 0xb
mov edx, dword [esp + 0x68]
add edx, 3
mov ecx, dword [esp + 0x38]
mov word [ecx], dx
mov word [ecx + 2], ax
lea eax, [ecx + 6]
mov dword [esp + 0x38], eax
mov word [ecx + 4], 0
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
mov ecx, 0x12
mov dword [esp + 0xac], 1
jmp 0x6be0da
mov ecx, 6
mov eax, esi
mov dword [esp + 0x24], eax
mov ebx, dword [esp + 0x194]
xor esi, esi
mov eax, edi
cmp ecx, 0x12
jne 0x6bdb7c
jmp 0x6bdb84
xor esi, esi
mov dword [esp + 0x10], edi
mov eax, edx
mov dword [esp + 0x24], eax
jmp case.0x6bdf9d.25
mov eax, dword [eax*4 + 0x7b31c8]
add eax, 0xfffffffe
mov dword [esp + 4], eax
mov ecx, 0x12
mov eax, dword [esp + 0x98]
mov dword [esp + 0x64], eax
jmp 0x6be0da
mov al, 0xc3
mov ecx, 1
mov ebp, dword [esp + 8]
and byte [esp + ecx + 0x104], al
cmp dword [esp + 0x68], 0
je 0x6bdc82
xor eax, eax
movzx ecx, byte [esp + eax + 0x104]
not cl
or byte [esp + eax + 0x6c], cl
inc eax
cmp eax, 0x20
jne 0x6bdc6c
jmp 0x6bdc96
xor eax, eax
movzx ecx, byte [esp + eax + 0x104]
or byte [esp + eax + 0x6c], cl
inc eax
cmp eax, 0x20
jne 0x6bdc84
mov dword [esp + 4], edx
mov ecx, 0x12
mov dword [esp + 0x10], 2
mov dword [esp + 0x24], 1
jmp 0x6bd54a
xor esi, esi
mov ecx, ebp
mov dword [esp + 0x2c], edx
mov ebx, 0x7b487c
jmp 0x6bdcc8
add ebx, 4
mov esi, eax
mov eax, dword [ebx]
inc esi
cmp eax, esi
je 0x6bdcc3
mov ebp, ecx
cmp eax, 0xffffffff
mov edi, dword [esp + 0x48]
je 0x6bdcdd
dec eax
mov edi, eax
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push edi
push esi
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.006c3bf0
add esp, 0x10
mov eax, dword [ebx]
cmp eax, 0xffffffff
mov ecx, ebp
jne 0x6bdcc3
jmp 0x6bdd54
xor esi, esi
mov ecx, ebp
mov dword [esp + 0x2c], edx
mov ebx, 0x7b48cc
jmp 0x6bdd19
add ebx, 4
mov esi, eax
mov eax, dword [ebx]
inc esi
cmp eax, esi
je 0x6bdd14
mov ebp, ecx
cmp eax, 0xffffffff
mov edi, dword [esp + 0x48]
je 0x6bdd2e
dec eax
mov edi, eax
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push edi
push esi
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.006c3bf0
add esp, 0x10
mov eax, dword [ebx]
cmp eax, 0xffffffff
mov ecx, ebp
jne 0x6bdd14
xor esi, esi
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x24], eax
jmp case.0x6bdf9d.25
cmp dword [esp + 0x68], 0
je 0x6bd742
cmp dword [esp + 0xc], 0
jne 0x6bdd82
movzx eax, word [esi + 4]
cmp eax, 0x5d
je 0x6bd742
mov eax, dword [esp + 0x38]
lea ecx, [eax + 2]
mov dword [esp + 0x38], ecx
mov word [eax], 2
sub esp, 8
push ecx
push pe_nt_image_headers32
call fcn.006d3a80
add esp, 0x10
add eax, eax
add eax, dword [esp + 0x38]
mov dword [esp + 0x38], eax
sub esp, 8
push eax
push 0x10ffff
call fcn.006d3a80
add esp, 0x10
add eax, eax
add dword [esp + 0x38], eax
jmp 0x6bd742
mov dword [esp + 0x64], ecx
cmp dword [esp + 0x60], 0
je 0x6bde21
mov eax, ebx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x6bde21
mov eax, dword [esp + 4]
movzx ebx, word [eax]
mov ecx, ebx
and ecx, 0xfc00
cmp ecx, 0xd800
jne 0x6bde21
shl ebx, 0xa
and ebx, 0xffc00
movzx ecx, word [eax + 2]
add eax, 2
and ecx, 0x3ff
lea ebx, [ebx + ecx + 0x10000]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
cmp eax, edi
mov ecx, 1
cmova edx, ecx
cmp dword [esp + 0x194], 0
je 0x6bde4c
sub eax, edi
jbe 0x6bde4c
sar eax, 1
mov ecx, dword [esp + 0x194]
add dword [ecx], eax
mov dword [esp + 0x38], edi
cmp dword [esp + 0x2c], 0
mov dword [esp + 0xc], edx
je 0x6bde88
mov ebp, dword [esp + 8]
cmp ebx, 0x5c
jne case.0x6bdf9d.5
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
mov ebx, 0x5c
cmp ecx, 0x45
jne case.0x6bdf9d.5
add eax, 2
mov dword [esp + 4], eax
xor esi, esi
jmp case.0x6bdf9d.25
mov ebp, dword [esp + 8]
cmp ebx, 0x5c
je 0x6bdf5b
cmp ebx, 0x5b
jne case.0x6bdf9d.5
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
mov ebx, 0x5b
lea edx, [ecx - 0x2e]
movzx esi, dx
cmp esi, 0xf
ja case.0x6bdf9d.5
mov esi, 0x9001
bt esi, edx
jae case.0x6bdf9d.5
lea esi, [eax + 4]
mov dword [esp + 0x5c], esi
jmp 0x6bdee3
add esi, 2
movsx edx, word [esi]
mov ebx, 0x5b
movzx edi, dx
cmp edx, 0x5b
jg 0x6bdf10
cmp edi, 0x5b
jne 0x6bdf2d
cmp word [esi + 2], cx
mov ebp, dword [esp + 8]
jne 0x6bdf3a
jmp 0x6be0ea
cmp edi, 0x5c
jne 0x6bdf4d
movzx edi, word [esi + 2]
and edi, 0xfffe
cmp edi, 0x5c
mov ebp, dword [esp + 8]
jne 0x6bdf3a
add esi, 2
jmp 0x6bdee0
test dx, dx
mov ebp, dword [esp + 8]
je case.0x6bdf9d.5
cmp dx, cx
jne 0x6bdee0
movzx edx, word [esi + 2]
cmp edx, 0x5d
jne 0x6bdee0
jmp 0x6be02c
cmp edi, 0x5d
mov ebp, dword [esp + 8]
jne 0x6bdf3a
jmp case.0x6bdf9d.5
lea ecx, [esp + 4]
lea edx, [esp + 0xe0]
push 1
push dword [esp + 0x20]
mov eax, dword [esp + 0x198]
push dword [eax + 0x40]
mov eax, dword [esp + 0x180]
mov esi, eax
push esi
call fcn.006c2b40
add esp, 0x10
cmp dword [esi], 0
jne 0x6c1cc4
cmp eax, 0x1a
ja case.0x6bdf9d.1
xor esi, esi
mov ebx, 8
jmp dword [eax*4 + 0x6c26b8]
mov ebx, dword [esp + 0xe0]
jmp case.0x6bdf9d.5
mov ebx, eax
lea ecx, [eax - 6]
cmp ecx, 0x1c
mov esi, dword [esp + 0x10]
ja case.0x6bdfd4.12
mov eax, dword [esp + 0x190]
mov eax, dword [eax + 8]
mov edx, dword [esp + 0x24]
inc edx
lea edi, [esi + 2]
jmp dword [ecx*4 + 0x6c2724]
mov eax, dword [esp + 4]
mov dword [esp + 0x64], eax
mov eax, dword [ebx*4 + 0x7b326c]
add eax, 0xfffffffe
mov dword [esp + 4], eax
xor esi, esi
mov dword [esp + 0x10], edi
jmp case.0x6bdf9d.25
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
mov esi, 1
cmp ecx, 0x5c
jne case.0x6bdf9d.25
movzx ecx, word [eax + 4]
mov esi, 1
cmp ecx, 0x45
jne case.0x6bdf9d.25
add eax, 4
jmp 0x6bde7d
movzx ecx, cx
cmp ecx, 0x3a
jne 0x6bd531
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 8]
mov dword [esp + 0xa8], ecx
mov ebp, dword [esp + 0x5c]
mov dword [esp + 4], ebp
movzx ecx, word [ebp]
xor edx, edx
cmp ecx, 0x5e
jne 0x6be072
add eax, 6
mov dword [esp + 4], eax
mov edx, 1
mov ebp, eax
mov dword [esp + 0x54], 1
mov dword [esp + 0x68], edx
lea eax, [esi + 2]
mov dword [esp + 0x98], eax
mov eax, esi
sub eax, ebp
sar eax, 1
mov edx, str.alpha
xor ebx, ebx
mov dword [esp + 0x5c], eax
movzx edi, byte [ebx + 0x7b3463]
cmp eax, edi
jne 0x6be0be
sub esp, 4
push eax
push edx
push ebp
mov dword [esp + 0x3c], edx
call fcn.006d3bc0
mov edx, dword [esp + 0x3c]
add esp, 0x10
test eax, eax
mov eax, dword [esp + 0x5c]
je 0x6bd714
lea edx, [edx + edi + 1]
inc ebx
cmp ebx, 0xe
jne 0x6be091
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1e
mov ecx, 6
mov ebx, dword [esp + 0x194]
mov ebp, dword [esp + 8]
jmp 0x6bd54a
mov ebx, 0x5b
mov ecx, dword [esp + 4]
movzx eax, word [ecx + 2]
cmp eax, 0x5c
jne 0x6be142
mov edx, ecx
add edx, 4
nop word cs:[eax + eax]
mov esi, edx
movzx eax, word [esi]
cmp eax, 0x45
jne 0x6be14f
mov dword [esp + 4], esi
movzx eax, word [esi + 2]
lea edx, [esi + 4]
mov dword [esp + 0x2c], 0
cmp eax, 0x5c
mov ecx, esi
je 0x6be110
add edx, 0xfffffffc
xor edi, edi
mov ecx, esi
cmp ebx, 0xd
jne 0x6be161
jmp 0x6be166
mov edi, dword [esp + 0x2c]
mov edx, ecx
cmp ebx, 0xd
jne 0x6be161
jmp 0x6be166
add esi, 0xfffffffc
mov ax, 0x5c
mov edi, dword [esp + 0x2c]
mov edx, esi
cmp ebx, 0xd
je 0x6be166
cmp ebx, 0xa
jne 0x6be171
mov esi, dword [esp + 0xc0]
or byte [esi + 1], 8
mov esi, edi
test esi, esi
jne 0x6be1f6
movzx eax, ax
xor esi, esi
cmp eax, 0x2d
jne 0x6be1f6
lea eax, [edx + 4]
mov dword [esp + 4], eax
movzx esi, word [edx + 4]
cmp esi, 0x5c
jne 0x6be1c2
lea eax, [edx + 8]
add edx, 0xc
nop word [eax + eax]
movzx esi, word [eax - 2]
cmp esi, 0x45
jne 0x6bd4ed
mov dword [esp + 4], eax
movzx esi, word [eax]
add eax, 4
add edx, 4
cmp esi, 0x5c
je 0x6be1a0
add eax, 0xfffffffc
mov dword [esp + 0x2c], 0
test si, si
je 0x6be1ee
mov edx, dword [esp + 0x2c]
test edx, edx
setne byte [esp + 0x5c]
movzx edi, si
cmp edi, 0x5d
jne 0x6bd52b
test edx, edx
jne 0x6bd52b
mov dword [esp + 4], ecx
mov esi, dword [esp + 0x2c]
xor eax, eax
mov ecx, dword [esp + 0x10]
cmp ecx, 2
setl al
add ecx, eax
mov dword [esp + 0x10], ecx
cmp ecx, 1
jne 0x6be229
mov eax, esi
or eax, dword [esp + 0xac]
jne 0x6be229
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
cmp ecx, 0x5d
je 0x6be83a
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x38]
push ebx
push ebx
push dword [esp + 0x198]
push dword [esp + 0x28]
call fcn.006c3bf0
add esp, 0x10
add dword [esp + 0x24], eax
mov eax, dword [esp + 4]
lea ecx, [eax + 2]
mov dword [esp + 4], ecx
movzx ebx, word [eax + 2]
test ebx, ebx
je 0x6be26f
mov ecx, dword [esp + 0x64]
mov ebp, dword [esp + 0x30]
mov edi, dword [esp + 0x58]
mov edx, dword [esp + 0xc]
jmp 0x6be29c
mov ecx, dword [esp + 0x64]
test ecx, ecx
mov ebp, dword [esp + 0x30]
mov edi, dword [esp + 0x58]
mov edx, dword [esp + 0xc]
je 0x6be62b
lea eax, [ecx + 2]
mov dword [esp + 4], eax
movzx ebx, word [ecx + 2]
xor ecx, ecx
test ebx, ebx
je 0x6be62d
test esi, esi
mov dword [esp + 0x2c], esi
jne 0x6bddd0
cmp ebx, 0x5d
mov dword [esp + 0x2c], esi
jne 0x6bddd0
mov dword [esp + 0x2c], 0
jmp 0x6be639
add eax, 4
movzx ecx, word [eax + 2]
add eax, 2
test cx, cx
sete dl
cmp ecx, 0x29
setne dh
xor dh, dl
jne 0x6be2c5
test cx, cx
mov dword [esp + 4], eax
jne 0x6c09fd
jmp 0x6c1d67
mov eax, dword [esp + 0x1c]
shr eax, 1
and eax, 1
add eax, 0x19
mov word [ebp], ax
jmp 0x6be995
mov ecx, dword [esp + 4]
lea eax, [ecx + 2]
mov dword [esp + 4], eax
movzx eax, word [ecx + 2]
cmp eax, 0x2a
jne 0x6be8cc
mov dword [esp + 8], ebp
movzx eax, word [ecx + 4]
cmp eax, 0x3a
mov ebp, dword [esp + 0x190]
je 0x6bea19
movzx edx, ax
cmp edx, 0xff
ja 0x6be34b
mov edx, dword [ebp + 0xc]
test byte [edx + eax], 2
jne 0x6bea19
mov eax, dword [ebp + 0x20]
sub eax, dword [ebp + 0x10]
sar eax, 1
mov dword [esp + 0x3c], eax
mov ebx, dword [esp + 0x1c]
test bh, 0x10
je 0x6bec60
jmp 0x6bec85
mov dword [esp + 8], ebp
mov esi, 0xffffffff
jmp 0x6be3d4
mov dword [esp + 8], ebp
mov esi, 0xffffffff
mov edi, 1
jmp 0x6be3d6
mov ecx, dword [esp + 0x14]
cmp ecx, 0xfffffffe
mov eax, 0xffffffff
cmove ecx, eax
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0x20]
sub edx, dword [eax + 0x10]
sar edx, 1
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0x1c]
shr eax, 2
and eax, 1
or eax, 0xc
mov word [ebp], ax
mov dword [esp + 0xc], ebp
lea ebp, [ebp + 2]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x28], ecx
jmp 0x6bec13
mov dword [esp + 8], ebp
mov esi, 1
xor edi, edi
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x6c1d43
test edi, edi
mov eax, dword [esp + 0x18]
cmove eax, dword [esp + 0x44]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x14]
cmove eax, dword [esp + 0x28]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x20]
cmove eax, dword [esp + 0x40]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x34]
cmove eax, dword [esp + 0x4c]
mov dword [esp + 0x34], eax
cmp esi, edi
setne byte [esp + 0xac]
test bl, 8
mov dword [esp + 0xa0], ecx
mov ebp, dword [esp + 4]
mov dword [esp + 0x10], edi
je 0x6be458
movzx eax, word [ebp + 2]
add ebp, 2
cmp eax, 0xff
mov ebx, dword [esp + 0x194]
jbe 0x6bf29e
jmp 0x6bf39b
mov ebx, dword [esp + 0x194]
jmp 0x6bf3aa
mov dword [esp + 8], ebp
lea ecx, [esp + 4]
lea edx, [esp + 0xe0]
push 0
push dword [esp + 0x20]
mov eax, dword [esp + 0x198]
push dword [eax + 0x40]
mov eax, dword [esp + 0x180]
mov esi, eax
push esi
call fcn.006c2b40
add esp, 0x10
cmp dword [esi], 0
jne 0x6c1cc4
test eax, eax
je 0x6be9a5
lea ebp, [eax - 6]
cmp ebp, 0x11
mov edi, eax
mov edx, dword [esp + 0x14]
mov esi, edx
mov ecx, 0xffffffff
cmovb esi, ecx
cmp edx, 0xfffffffe
cmovne esi, edx
mov edx, edi
mov dword [esp + 0x28], esi
cmp edx, 0x1c
mov ebx, dword [esp + 0x194]
je 0x6bee23
mov eax, ebp
cmp edx, 0x1b
mov ebp, dword [esp + 8]
jne 0x6bee76
mov eax, dword [esp + 0x190]
mov ecx, dword [eax + 0x20]
sub ecx, dword [eax + 0x10]
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 4]
lea eax, [ecx + 2]
mov dword [esp + 4], eax
movzx edx, word [ecx + 2]
cmp edx, 0x3c
mov esi, 0x27
mov edx, 0x3e
cmove esi, edx
mov dword [esp + 0x30], esi
movzx edx, word [ecx + 4]
cmp edx, 0x2b
je 0x6be53b
movzx esi, dx
cmp esi, 0x2d
je 0x6be53b
add edx, 0xffffffd0
movzx edx, dx
cmp edx, 9
ja 0x6c035e
lea edx, [ecx + 4]
add ecx, 6
movzx esi, word [ecx]
lea edi, [esi - 0x30]
movzx edi, di
add ecx, 2
cmp edi, 0xa
jb 0x6be541
cmp dword [esp + 0x30], esi
jne 0x6bf17e
mov dword [esp + 4], edx
mov ecx, 0xa3
mov eax, edx
jmp 0x6bf190
mov cx, 0x5d
mov eax, dword [esp + 0x190]
test byte [eax + 0x63], 2
je 0x6be5f3
jmp 0x6c1da4
test byte [esp + 0x1c], 2
jne 0x6be971
mov word [ebp], 0x1b
jmp 0x6be995
mov cx, 0x7b
test al, al
je 0x6be5f3
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
mov edx, ecx
add edx, 0xffffffd0
movzx edx, dx
cmp edx, 9
ja 0x6bec30
add eax, 4
xor edi, edi
mov ebx, dword [esp + 0x1c]
movzx ecx, cx
lea edx, [edi + edi*4]
lea edi, [ecx + edx*2 - 0x30]
cmp edi, 0xffff
jg 0x6c1d2f
movzx ecx, word [eax]
mov edx, ecx
add edx, 0xffffffd0
movzx edx, dx
add eax, 2
cmp edx, 9
jbe 0x6be5c2
add eax, 0xfffffffe
jmp 0x6bec39
mov word [esp + 0x124], cx
mov eax, 1
jmp 0x6bceda
mov dword [esp + 0x24], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0x54], 0
xor edx, edx
test ebx, ebx
jne 0x6be639
jmp 0x6c1d55
xor ecx, ecx
mov dword [esp + 0x2c], esi
test ebx, ebx
je 0x6c1d55
mov dword [esp + 0x64], ecx
mov eax, dword [esp + 0x38]
mov ebx, edx
mov edx, dword [esp + 0x14]
cmp edx, 0xfffffffe
mov ecx, 0xffffffff
cmove edx, ecx
mov dword [esp + 0x14], edx
test ebx, ebx
jne 0x6be65e
cmp eax, edi
jbe 0x6be682
mov ecx, dword [esp + 0x1c]
and ecx, 0x20000000
cmp dword [esp + 0x54], 0
je 0x6be7c8
mov edx, dword [esp + 0xac]
or edx, ecx
jne 0x6be7c8
mov ebx, dword [esp + 0x194]
test ebx, ebx
je 0x6be6b6
sub eax, edi
sar eax, 1
add dword [ebx], eax
xor eax, eax
cmp ebp, dword [esp + 0x54]
sete al
mov ecx, 0x6f
sub ecx, eax
mov eax, dword [esp + 8]
mov word [eax], cx
mov dword [esp + 0xc], eax
lea ebp, [eax + 0x22]
jmp 0x6bec0b
xor eax, eax
cmp ebp, dword [esp + 0x54]
sete al
mov ecx, 0x6f
sub ecx, eax
mov esi, dword [esp + 8]
lea eax, [esi + 2]
mov word [esi], cx
test ebp, ebp
je 0x6be77c
not byte [esp + 0x6c]
not byte [esp + 0x6d]
not byte [esp + 0x6e]
not byte [esp + 0x6f]
not byte [esp + 0x70]
not byte [esp + 0x71]
not byte [esp + 0x72]
not byte [esp + 0x73]
not byte [esp + 0x74]
not byte [esp + 0x75]
not byte [esp + 0x76]
not byte [esp + 0x77]
not byte [esp + 0x78]
not byte [esp + 0x79]
not byte [esp + 0x7a]
not byte [esp + 0x7b]
not byte [esp + 0x7c]
not byte [esp + 0x7d]
not byte [esp + 0x7e]
not byte [esp + 0x7f]
not byte [esp + 0x80]
not byte [esp + 0x81]
not byte [esp + 0x82]
not byte [esp + 0x83]
not byte [esp + 0x84]
not byte [esp + 0x85]
not byte [esp + 0x86]
not byte [esp + 0x87]
not byte [esp + 0x88]
not byte [esp + 0x89]
not byte [esp + 0x8a]
not byte [esp + 0x8b]
mov ecx, dword [esp + 0x88]
mov dword [eax + 0x1c], ecx
mov ecx, dword [esp + 0x84]
mov dword [eax + 0x18], ecx
mov ecx, dword [esp + 0x80]
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x7c]
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x78]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x74]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x70]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [esp + 0xc], esi
lea ebp, [esi + 0x22]
jmp 0x6bec0b
test ecx, ecx
mov edx, dword [esp + 0x60]
jne 0x6bea7d
test ebp, ebp
mov esi, dword [esp + 8]
jne 0x6bea98
cmp dword [esp + 0x54], 0
je 0x6bea98
lea ecx, [eax + 2]
test edx, edx
mov dword [esp + 0x38], ecx
mov word [eax], 2
je 0x6bea83
sub esp, 8
push ecx
push pe_nt_image_headers32
call fcn.006d3a80
add esp, 0x10
add eax, eax
add eax, dword [esp + 0x38]
mov dword [esp + 0x38], eax
sub esp, 8
push eax
push 0x10ffff
call fcn.006d3a80
add esp, 0x10
add eax, eax
add eax, dword [esp + 0x38]
mov dword [esp + 0x38], eax
jmp 0x6bea98
add eax, 2
mov dword [esp + 4], eax
cmp dword [esp + 0x30], 0
je 0x6bea49
mov edi, esi
mov ecx, dword [esp + 0x14]
cmp ecx, 0xfffffffe
mov eax, 0xffffffff
cmove ecx, eax
mov dword [esp + 0x14], ecx
mov esi, dword [esp + 0x8c]
test esi, esi
sete al
or al, byte [esp + 0x53]
jne 0x6be9df
mov eax, ebx
sar eax, 0x1f
shr eax, 0x19
add eax, ebx
mov ecx, eax
and ecx, 0x7fffff80
sar eax, 7
movzx eax, byte [eax + 0x7b6a54]
shl eax, 7
mov edx, ebx
sub edx, ecx
add edx, eax
movzx eax, word [edx + edx + 0x7b8c54]
movzx eax, byte [eax*8 + 0x7b53d7]
test ax, ax
je 0x6be9df
mov dword [ebp], 0x9000f
mov word [ebp + 4], ax
mov dword [esp + 0xc], ebp
lea ebp, [ebp + 6]
jmp 0x6bef6a
mov edx, dword [esp + 0x190]
mov esi, dword [edx + 0x20]
sub esi, dword [edx + 0x10]
sar esi, 1
mov dword [esp + 0x3c], esi
movzx eax, ax
cmp eax, 0x3f
mov ebx, dword [esp + 0x1c]
jne 0x6bec50
lea eax, [ecx + 4]
mov dword [esp + 4], eax
movzx esi, word [ecx + 4]
lea edx, [esi - 0x21]
movzx edx, dx
cmp edx, 0x5b
ja case.0x6be923.1
mov dword [esp + 0x10], 1
mov dword [esp + 0x30], 0x29
mov dword [esp + 0x58], 0x27
xor edi, edi
jmp dword [edx*4 + 0x6c21fc]
mov ebx, ebp
lea eax, [ecx + 6]
mov dword [esp + 4], eax
movzx eax, word [ecx + 6]
cmp eax, 0x29
jne 0x6be95d
movzx eax, word [ecx + 8]
lea edx, [eax - 0x2a]
movzx edx, dx
cmp edx, 0x15
ja 0x6c1684
mov esi, 0x200003
bt esi, edx
jae 0x6c1684
mov ebp, dword [esp + 0x190]
inc dword [ebp + 0x5c]
mov edi, 0x7e
jmp 0x6c146e
mov ecx, dword [esp + 0x14]
cmp ecx, 0xfffffffe
mov eax, 0xffffffff
mov edx, dword [esp + 0x28]
cmove edx, eax
mov dword [esp + 0x28], edx
cmove ecx, eax
mov dword [esp + 0x14], ecx
mov word [ebp], 0x1c
add ebp, 2
mov dword [esp + 0xc], 0
jmp 0x6c09fd
cmp dword [esp + 0x60], 0
mov eax, dword [esp + 0xe0]
je 0x6bef49
cmp eax, 0xffff
jbe 0x6bef49
sub esp, 8
lea ecx, [esp + 0x12c]
push ecx
push eax
call fcn.006d3a80
add esp, 0x10
mov ebp, dword [esp + 8]
jmp 0x6bceda
add esi, 0x1f
cmp dword [esp + 0x60], 0
mov word [ebp], si
je 0x6bef5f
cmp ebx, 0x10000
jb 0x6bef5f
lea esi, [ebp + 2]
sub esp, 8
push esi
push ebx
call fcn.006d3a80
add esp, 0x10
mov dword [esp + 0xc], ebp
lea ebp, [esi + eax*2]
jmp 0x6bef6a
lea esi, [ecx + 4]
mov dword [esp + 4], esi
mov edx, dword [ebp + 0xc]
add ecx, 6
movzx edi, ax
test byte [edx + edi], 2
je 0x6bef73
mov dword [esp + 4], ecx
movzx eax, word [ecx]
add ecx, 2
cmp eax, 0x100
jb 0x6bea26
jmp case.0x6befc8.2
cmp dword [esp + 0x60], 0
mov dword [esp + 0x2c], esi
je 0x6bf006
cmp ebx, 0x10000
jb 0x6bf006
sub esp, 8
lea eax, [esp + 0x12c]
push eax
push ebx
call fcn.006d3a80
add esp, 0x10
jmp 0x6bf013
mov esi, dword [esp + 8]
jmp 0x6bea98
mov word [eax + 2], pe_nt_image_headers32
lea ecx, [eax + 6]
mov dword [esp + 0x38], ecx
mov word [eax + 4], 0xffff
mov eax, ecx
xor ebx, ebx
test ebp, ebp
setne bl
lea ecx, [eax + 2]
mov dword [esp + 0x38], ecx
mov word [eax], 0
mov word [esi], 0x70
mov edx, ebx
or edx, 4
cmp dword [esp + 0xac], 0
cmove dx, bx
mov word [esi + 4], dx
cmp dword [esp + 0x24], 0
jle 0x6bebf4
lea eax, [esi + 6]
or edx, 2
mov word [esi + 4], dx
sub ecx, eax
mov ebx, dword [esp + 0x194]
je 0x6beaf1
movzx edx, byte [esi + ecx + 5]
mov byte [esi + ecx + 0x25], dl
dec ecx
jne 0x6beae5
test ebp, ebp
je 0x6bebab
cmp dword [esp + 0xac], 0
jne 0x6bebab
not byte [esp + 0x6c]
not byte [esp + 0x6d]
not byte [esp + 0x6e]
not byte [esp + 0x6f]
not byte [esp + 0x70]
not byte [esp + 0x71]
not byte [esp + 0x72]
not byte [esp + 0x73]
not byte [esp + 0x74]
not byte [esp + 0x75]
not byte [esp + 0x76]
not byte [esp + 0x77]
not byte [esp + 0x78]
not byte [esp + 0x79]
not byte [esp + 0x7a]
not byte [esp + 0x7b]
not byte [esp + 0x7c]
not byte [esp + 0x7d]
not byte [esp + 0x7e]
not byte [esp + 0x7f]
not byte [esp + 0x80]
not byte [esp + 0x81]
not byte [esp + 0x82]
not byte [esp + 0x83]
not byte [esp + 0x84]
not byte [esp + 0x85]
not byte [esp + 0x86]
not byte [esp + 0x87]
not byte [esp + 0x88]
not byte [esp + 0x89]
not byte [esp + 0x8a]
not byte [esp + 0x8b]
mov ecx, dword [esp + 0x88]
mov dword [eax + 0x1c], ecx
mov ecx, dword [esp + 0x84]
mov dword [eax + 0x18], ecx
mov ecx, dword [esp + 0x80]
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x7c]
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x78]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x74]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x70]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov ecx, dword [esp + 0x38]
add ecx, 0x20
jmp 0x6bebfb
mov ebx, dword [esp + 0x194]
mov eax, ecx
sub eax, esi
shr eax, 1
mov word [esi + 2], ax
mov dword [esp + 0xc], esi
mov ebp, ecx
mov eax, dword [esp + 0x14]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
jmp 0x6c09fd
add eax, 2
xor edi, edi
mov ebx, dword [esp + 0x1c]
mov dword [esp + 8], ebp
movzx ecx, cx
cmp ecx, 0x7d
jne 0x6bef2d
mov esi, edi
jmp 0x6bf165
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x190]
test bh, 0x10
jne 0x6bec85
mov eax, dword [ebp + 0x40]
inc eax
mov dword [ebp + 0x40], eax
mov ecx, dword [esp + 8]
mov word [ecx + 4], ax
mov edi, 0x85
mov dword [esp + 0x10], 0
mov esi, 1
mov ecx, ebx
jmp 0x6bec96
mov edi, 0x83
xor esi, esi
mov ecx, ebx
mov dword [esp + 0x10], 0
mov eax, dword [ebp + 0x58]
lea edx, [eax + 1]
mov dword [ebp + 0x58], edx
cmp eax, 0xfa
jge 0x6c1dc8
mov edx, edi
cmp edi, 0x80
mov dword [esp + 0x30], esi
ja 0x6becdd
cmp dword [ebp + 0x80], 0
je 0x6becdd
mov eax, ebp
mov dword [eax + 0x80], 0
mov ebx, eax
mov dword [esp + 0xc], 0
mov eax, dword [esp + 8]
jmp 0x6becf5
mov edi, ebp
mov eax, dword [edi + 0x20]
sub eax, dword [edi + 0x10]
sar eax, 1
mov dword [esp + 0x3c], eax
mov ebx, edi
mov eax, dword [esp + 8]
mov dword [esp + 0xc], eax
mov edi, edx
mov word [eax], di
mov dword [esp + 0xa0], eax
mov esi, dword [ebx + 0x40]
mov eax, dword [ebx + 0x68]
mov dword [esp + 0x58], eax
mov dword [esp + 0xbc], 0
lea eax, [edi - 0x7f]
xor edx, edx
cmp eax, 2
setb dl
mov ebp, edx
xor eax, eax
cmp edi, 0x87
sete al
add eax, dword [esp + 0x18c]
sub esp, 0xc
lea edx, [esp + 0xac]
push dword [esp + 0x144]
push ebx
push dword [esp + 0x19c]
lea ebx, [esp + 0xe8]
push ebx
lea ebx, [esp + 0x104]
push ebx
lea ebx, [esp + 0x104]
push ebx
lea ebx, [esp + 0x124]
push ebx
push eax
push dword [esp + 0x5c]
push dword [esp + 0x40]
push ebp
push dword [esp + 0x1ac]
lea eax, [esp + 0x40]
push eax
call fcn.006bb080
add esp, 0x40
test eax, eax
je 0x6c1cc4
mov eax, dword [esp + 0x190]
dec dword [eax + 0x58]
cmp edi, 0x81
mov ebp, dword [esp + 8]
jne 0x6bedbc
mov eax, dword [esp + 0x190]
cmp dword [eax + 0x40], esi
ja 0x6bedbc
mov word [ebp], 0x82
cmp edi, 0x80
mov ebx, dword [esp + 0x194]
ja 0x6bedd5
mov eax, dword [esp + 0x190]
dec dword [eax + 0x5c]
test ebx, ebx
jne 0x6bf055
cmp edi, 0x87
jne 0x6bf055
mov eax, 0xffffffff
mov ecx, ebp
movzx edx, word [ecx + 2]
movzx esi, word [ecx + edx*2]
lea ecx, [ecx + edx*2]
inc eax
cmp esi, 0x78
jne 0x6bedf0
movzx ecx, word [ebp + 4]
cmp ecx, 0x91
jne 0x6bf028
mov edi, 0x91
test eax, eax
jle 0x6bf055
jmp 0x6c1e8e
mov eax, dword [esp + 4]
movzx ecx, word [eax + 2]
cmp ecx, 0x27
mov ebp, dword [esp + 8]
je 0x6bee45
movzx edx, cx
cmp edx, 0x3c
je 0x6bee45
cmp edx, 0x7b
jne 0x6c1e22
add eax, 2
mov dword [esp + 4], eax
movzx ecx, cx
cmp ecx, 0x27
mov edx, 0x7d
cmove edx, ecx
cmp ecx, 0x3c
mov ecx, 0x3e
cmove edx, ecx
mov dword [esp + 0x30], edx
mov dword [esp + 0x10], 0
jmp 0x6c0382
test edx, edx
js 0x6c0044
lea ecx, [edx - 0xf]
cmp ecx, 1
ja 0x6c00ac
mov dword [esp + 0xcc], 0
mov dword [esp + 0xc8], 0
sub esp, 4
lea ecx, [esp + 8]
lea edx, [esp + 0x108]
push dword [esp + 0x178]
lea eax, [esp + 0xd0]
push eax
lea eax, [esp + 0xd8]
push eax
call fcn.006c3650
add esp, 0x10
test eax, eax
je 0x6c06f3
xor eax, eax
cmp edi, 0x10
sete al
mov ecx, dword [esp + 0x190]
mov edx, dword [ecx + 0x20]
sub edx, dword [ecx + 0x10]
sar edx, 1
mov dword [esp + 0x3c], edx
xor ecx, ecx
cmp dword [esp + 0x104], eax
sete cl
mov eax, 0x10
sub eax, ecx
mov word [ebp], ax
movzx eax, word [esp + 0xcc]
mov word [ebp + 2], ax
movzx eax, word [esp + 0xc8]
mov word [ebp + 4], ax
mov dword [esp + 0xc], ebp
lea ebp, [ebp + 6]
xor ecx, ecx
jmp 0x6c06f8
lea edx, [eax + 2]
movzx ecx, word [eax + 2]
mov esi, 0xffffffff
cmp ecx, 0x7d
jne 0x6bf10d
mov eax, edx
jmp 0x6bf165
mov word [esp + 0x124], ax
mov eax, 1
mov ebp, dword [esp + 8]
jmp 0x6bceda
mov word [ebp + 2], bx
mov dword [esp + 0xc], ebp
lea ebp, [ebp + 4]
mov dword [esp + 0x2c], edi
jmp 0x6bd161
xor ebx, ebx
cmp edi, 0x3a
mov edi, 0
jne 0x6befac
mov ebx, ecx
jmp 0x6bef86
add ebx, 2
mov ax, word [ebx]
test ax, ax
je 0x6bef96
movzx edx, ax
cmp edx, 0x29
jne 0x6bef83
mov dword [esp + 4], ebx
sub ebx, ecx
sar ebx, 1
cmp ebx, 0x10000
mov edi, ecx
jae 0x6c1f0c
movzx eax, ax
cmp eax, 0x29
jne case.0x6befc8.2
add ecx, 0xfffffffe
sub ecx, esi
sar ecx, 1
cmp ecx, 6
ja case.0x6befc8.2
jmp dword [ecx*4 + 0x6c254c]
sub esp, 4
push 0
push 0x7b336f
push esi
call fcn.006d3bc0
add esp, 0x10
xor ecx, ecx
test eax, eax
je 0x6c1341
jmp case.0x6befc8.2
mov dword [esp + 0xc], ebp
mov dword [esp + 0x2c], esi
test ecx, ecx
jne 0x6c0724
jmp 0x6c09fd
mov word [esp + 0x124], bx
mov eax, 1
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x40], ecx
jmp 0x6bceda
cmp eax, 2
jge 0x6c1ea0
mov edi, 0x87
test eax, eax
jne 0x6bf055
mov dword [esp + 0xd0], 0xffffffff
mov dword [esp + 0xe4], 0xffffffff
mov edi, 0x87
mov eax, dword [esp + 4]
movzx eax, word [eax]
cmp eax, 0x29
jne 0x6c1dda
test ebx, ebx
je 0x6bf09d
mov eax, dword [ebx]
mov edx, 0x7fffffeb
sub edx, eax
mov ecx, dword [esp + 0xbc]
add ecx, 0xfffffffc
cmp edx, ecx
jl 0x6c1cb7
add ecx, eax
mov dword [ebx], ecx
mov dword [ebp + 2], 0x780002
mov word [ebp + 6], 2
add ebp, 8
jmp 0x6c09fd
mov ebp, dword [esp + 0xa0]
cmp edi, 0x91
je 0x6c09fd
cmp edi, 0x81
jl 0x6c0265
cmp dword [esp + 0x14], 0xfffffffe
mov ecx, dword [esp + 0xe4]
jne 0x6c07a7
mov eax, ecx
shr eax, 0x1f
xor eax, 1
mov dword [esp + 0xb0], eax
cmp ecx, 0xfffffffe
mov dword [esp + 0x14], 0xffffffff
mov eax, 0xffffffff
cmovg eax, ecx
mov dword [esp + 8], eax
test ecx, ecx
mov ecx, dword [esp + 0x100]
mov eax, dword [esp + 0x34]
cmovs ecx, eax
mov dword [esp + 0x10], ecx
jmp 0x6c07f5
mov dword [esp + 0x10], edi
lea esi, [ecx - 0x30]
movzx esi, si
xor edi, edi
cmp esi, 9
ja 0x6bf153
add eax, 4
xor esi, esi
lea edx, [esi + esi*4]
movzx ecx, cx
lea esi, [ecx + edx*2 - 0x30]
cmp esi, 0xffff
jg 0x6c1d2f
movzx ecx, word [eax]
mov edx, ecx
add edx, 0xffffffd0
movzx edx, dx
add eax, 2
cmp edx, 9
jbe 0x6bf123
add eax, 0xfffffffe
mov edx, eax
mov edi, esi
cmp edi, dword [esp + 0x10]
mov esi, edi
jl 0x6c1f1e
mov eax, edx
mov edi, dword [esp + 0x10]
mov ecx, dword [esp + 0x174]
cmp dword [ecx], 0
mov dword [esp + 4], eax
je 0x6be3da
jmp 0x6c1cc4
mov ecx, dword [esp + 0x174]
mov dword [ecx], 0x39
mov ecx, 6
mov ebx, dword [esp + 0x194]
mov ebp, dword [esp + 8]
cmp cl, 0x86
je 0x6c0377
sar dword [esp + 0x3c], 1
cmp cl, 0xa3
jne 0x6c009b
mov si, word [eax]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x14], ecx
movzx ecx, si
cmp ecx, 0x2b
jne 0x6bf1fb
lea edx, [eax + 2]
mov dword [esp + 4], edx
movzx esi, word [eax + 2]
mov eax, esi
add eax, 0xffffffd0
movzx eax, ax
cmp eax, 0xa
mov eax, edx
jb 0x6bf21a
jmp 0x6c1ec4
cmp ecx, 0x2d
jne 0x6bf21a
movzx esi, word [eax + 2]
lea edx, [esi - 0x30]
movzx edx, dx
cmp edx, 9
ja case.0x6be923.1
add eax, 2
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
lea edx, [esi - 0x30]
movzx edx, dx
cmp edx, 9
ja 0x6c0001
add eax, 2
xor edx, edx
mov ebp, dword [esp + 0x190]
mov ebx, dword [esp + 0x194]
cmp edx, 0xccccccc
jge 0x6c1d79
lea edx, [edx + edx*4]
mov dword [esp + 4], eax
movzx esi, si
lea edi, [esi + edx*2 - 0x30]
movzx esi, word [eax]
mov edx, esi
add edx, 0xffffffd0
movzx edx, dx
add eax, 2
cmp edx, 0xa
mov edx, edi
jb 0x6bf240
jmp 0x6c0011
mov eax, dword [esp + 0xb8]
mov eax, dword [eax]
jmp 0x6bf288
xor eax, eax
jmp 0x6bf29e
mov eax, 1
lea ecx, [ebp + eax*2]
movzx eax, word [ebp + eax*2]
cmp eax, 0x100
mov ebp, ecx
jae 0x6bf39d
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 0xc]
add ebp, 2
movzx eax, ax
test byte [ecx + eax], 1
je 0x6bf2c7
movzx eax, word [ebp]
add ebp, 2
cmp eax, 0x100
jb 0x6bf2ab
jmp 0x6bf398
cmp eax, 0x23
jne 0x6bf398
movzx ecx, word [ebp]
xor eax, eax
test cx, cx
je 0x6bf29e
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0x1c]
mov eax, dword [eax + 0x84]
test eax, eax
je 0x6bf318
cmp ebp, edx
jae 0x6bf363
sub esp, 0xc
push dword [esp + 0xa8]
push dword [esp + 0xc8]
push edx
push eax
push ebp
call fcn.006d3900
add esp, 0x20
test eax, eax
je 0x6bf363
jmp 0x6bf274
mov eax, dword [esp + 0xb8]
mov eax, dword [eax]
mov edi, ebp
mov ebp, esi
lea esi, [eax + eax]
sub edx, esi
mov esi, ebp
mov ebp, edi
cmp ebp, edx
ja 0x6bf363
mov edx, dword [esp + 0x190]
cmp cx, word [edx + 0x8c]
jne 0x6bf363
cmp eax, 1
je 0x6bf283
movzx ecx, word [ebp + 2]
mov edx, dword [esp + 0x190]
cmp cx, word [edx + 0x8e]
je 0x6bf288
lea eax, [ebp + 2]
cmp dword [esp + 0x60], 0
je 0x6bf37f
movzx ecx, word [ebp + 2]
and ecx, 0xfc00
cmp ecx, 0xdc00
je 0x6bf383
mov ebp, eax
jmp 0x6bf386
add ebp, 4
movzx ecx, word [ebp]
test cx, cx
jne 0x6bf2db
jmp 0x6bf27f
add ebp, 0xfffffffe
mov ecx, ebp
add ecx, 0xfffffffe
mov dword [esp + 4], ecx
mov ebp, ecx
mov ecx, dword [esp + 0xc]
movzx eax, word [ebp + 2]
cmp eax, 0x28
jne 0x6bf406
movzx eax, word [ebp + 4]
xor edx, edx
cmp eax, 0x3f
mov edi, dword [esp + 0xd4]
jne 0x6bf439
movzx eax, word [ebp + 6]
xor edx, edx
cmp eax, 0x23
mov edi, dword [esp + 0xd4]
jne 0x6bf439
add ebp, 6
movzx eax, word [ebp + 2]
add ebp, 2
test ax, ax
sete cl
cmp eax, 0x29
setne dl
xor dl, cl
jne 0x6bf3da
test ax, ax
mov dword [esp + 4], ebp
je 0x6c1d67
mov ax, word [ebp + 2]
mov ecx, dword [esp + 0xc]
add ebp, 2
movzx eax, ax
cmp eax, 0x3f
je 0x6bf42c
xor edx, edx
cmp eax, 0x2b
mov edi, dword [esp + 0xd4]
jne 0x6bf439
mov dword [esp + 4], ebp
xor edi, edi
mov edx, 1
jmp 0x6bf439
mov dword [esp + 4], ebp
xor edx, edx
mov edi, dword [esp + 0xf4]
movzx eax, word [ecx]
cmp eax, 0x75
mov dword [esp + 0x24], edx
jne 0x6bf4c1
add dword [esp + 8], 8
test ebx, ebx
mov eax, dword [ecx]
mov dword [ecx + 4], eax
mov dword [ecx], 0x40081
mov dword [ecx + 8], 0x40078
mov dword [esp + 0xbc], 6
mov ebp, ecx
jne 0x6bf53b
mov eax, dword [esp + 0x190]
mov ecx, dword [eax + 0x10]
mov eax, dword [eax + 0x20]
add ecx, 2
cmp eax, ecx
jb 0x6bf53b
lea edx, [ebp + 2]
movzx ecx, word [eax - 2]
mov dword [esp + 0x98], esi
mov esi, dword [esp + 0x190]
sub edx, dword [esi + 0x14]
mov esi, dword [esp + 0x98]
sar edx, 1
cmp edx, ecx
mov edx, dword [esp + 0x24]
jne 0x6bf53b
add ecx, 2
mov word [eax - 2], cx
mov ax, word [ebp]
mov ebp, dword [esp + 0x60]
lea ecx, [eax - 0x1d]
movzx ecx, cx
cmp ecx, 3
ja 0x6bf5d6
lea ecx, [eax - 0x1e]
movzx edx, cx
mov dword [esp + 0x54], 0
cmp edx, 2
ja 0x6bf4f2
lea ecx, [edx + edx*2]
lea ecx, [edx + ecx*4 + 0xd]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 8]
movzx ecx, word [edx - 2]
test ebp, ebp
je 0x6bf77d
mov edx, ecx
and edx, 0xfc00
movzx edx, dx
cmp edx, 0xdc00
jne 0x6bf77d
mov eax, dword [esp + 8]
mov eax, dword [eax - 4]
mov dword [esp + 0x150], eax
mov eax, dword [esp + 0xc]
mov ax, word [eax]
mov dword [esp + 0x48], 0x10000002
jmp 0x6bf7ad
mov eax, dword [esp + 8]
sub eax, ebp
mov dword [esp + 0x54], eax
sar eax, 1
mov dword [esp + 0x48], eax
mov ecx, ebp
mov eax, dword [esp + 0x10]
test eax, eax
je 0x6bf642
cmp eax, 2
jl 0x6bf6d1
test ebx, ebx
je 0x6bfd06
mov eax, dword [esp + 0x10]
lea ecx, [eax - 1]
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x14c], ecx
fild dword [esp + 0x14c]
mov dword [esp + 0x148], eax
fimul dword [esp + 0x148]
fld qword [0x7b3100]
fxch st(1)
fucompi st(1)
fstp st(0)
ja 0x6c1cb7
imul eax, ecx
mov ecx, dword [ebx]
mov edx, 0x7fffffeb
sub edx, ecx
cmp edx, eax
jl 0x6c1cb7
add ecx, eax
mov dword [ebx], ecx
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x24]
jmp 0x6bf6dc
movzx ecx, ax
mov dword [esp + 0x54], 0x34
mov dword [esp + 0x48], ecx
cmp ecx, 0x16
jbe 0x6bf7b1
lea ecx, [eax - 0x6e]
movzx ecx, cx
cmp ecx, 6
ja 0x6bfc9a
test esi, esi
mov eax, dword [esp + 0xc]
je 0x6bf81b
cmp dword [esp + 0x10], 0
jne 0x6c0072
cmp esi, 0xffffffff
jne 0x6c0072
add edi, 0x62
mov eax, dword [esp + 8]
mov word [eax], di
add eax, 2
mov dword [esp + 8], eax
mov ebp, dword [esp + 0x190]
test edx, edx
jne 0x6c08ce
jmp 0x6c09d1
cmp esi, 1
mov eax, dword [esp + 8]
mov word [eax], 0
jg 0x6bfaf1
sub esp, 4
mov edx, 1
mov ecx, dword [esp + 0x10]
push dword [esp + 0x40]
push dword [esp + 0x198]
push dword [esp + 0xa8]
call fcn.006c27a0
mov ecx, dword [esp + 0x1c]
add esp, 0x10
cmp dword [esp + 0x54], 0
je 0x6bf6a1
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0xc]
movzx ecx, byte [ecx + eax - 1]
mov edx, dword [esp + 0xc]
mov byte [edx + eax + 1], cl
mov ecx, dword [esp + 0xc]
dec eax
jne 0x6bf689
add dword [esp + 8], 2
test esi, esi
je 0x6bff7b
lea eax, [edi + 0x92]
mov word [ecx], ax
mov dword [esp + 0xa8], ecx
lea ebp, [ecx + 2]
mov dword [esp + 0x5c], 0
dec esi
mov ecx, ebp
jmp 0x6bfb69
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x5c], 0
test esi, esi
mov eax, 0
cmovg eax, dword [esp + 0x10]
sub esi, eax
mov dword [esp + 0xa8], 0
mov eax, dword [esp + 0x18]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x58], eax
test esi, esi
js 0x6bfb80
test ebx, ebx
je 0x6bf82b
test esi, esi
je 0x6bf82b
mov eax, dword [esp + 0xbc]
add eax, 5
mov dword [esp + 0x140], esi
fild dword [esp + 0x140]
mov dword [esp + 0x144], eax
fimul dword [esp + 0x144]
fld qword [0x7b3100]
fxch st(1)
fucompi st(1)
fstp st(0)
ja 0x6c1cb7
imul eax, esi
add eax, 0xfffffffc
mov ecx, dword [ebx]
mov edx, 0x7fffffeb
sub edx, ecx
cmp edx, eax
jl 0x6c1cb7
add ecx, eax
mov dword [ebx], ecx
jmp 0x6bfa9b
mov dword [esp + 0x48], ecx
cmp dword [esp + 0x10], 2
jl 0x6bf7ad
movzx edx, ax
cmp edx, 0x1e
ja 0x6bf7ad
mov edx, dword [esp + 0x190]
mov edx, dword [edx + 0x68]
or edx, dword [esp + 0xb4]
mov dword [esp + 0x30], edx
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x58], ecx
mov edx, dword [esp + 0x24]
add eax, 0xfffffff1
movzx eax, ax
mov ecx, 0xffffffff
cmp eax, 1
mov eax, 0xffffffff
ja 0x6bf7d2
mov eax, dword [esp + 0xc]
movzx ecx, word [eax + 2]
movzx eax, word [eax + 4]
test esi, esi
je 0x6bf817
mov dword [esp + 0x20], eax
add edi, dword [esp + 0x54]
mov eax, dword [esp + 0x10]
cmp eax, 1
mov dword [esp + 0x18], ecx
je 0x6bfbc6
test eax, eax
mov ebp, eax
jne 0x6bfbe0
cmp esi, 1
je 0x6bffc7
cmp esi, 0xffffffff
mov eax, dword [esp + 0xc]
jne 0x6bffdb
add edi, 0x21
jmp 0x6bffce
mov eax, dword [esp + 0xc]
mov dword [esp + 8], eax
mov ebp, dword [esp + 0x190]
jmp 0x6c09d1
test esi, esi
jle 0x6bfa9b
add edi, 0x92
mov dword [esp + 0x68], edi
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x20]
mov dword [esp + 0x10], eax
mov edi, esi
mov eax, esi
mov dword [esp + 0xc], ecx
mov ebx, dword [esp + 8]
mov esi, dword [esp + 0x10]
sub esi, edx
sar esi, 1
mov dword [esp + 0xa8], esi
dec eax
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0x68]
mov word [ebx], ax
mov dword [esp + 0x98], edi
je 0x6bf8b0
lea eax, [ebx + 4]
mov word [ebx + 2], 0x83
mov ecx, eax
mov edx, dword [esp + 0x5c]
sub ecx, edx
shr ecx, 1
test edx, edx
mov edx, 0
cmovne dx, cx
mov ecx, dword [esp + 0xc]
mov word [ebx + 4], dx
add ebx, 6
mov dword [esp + 0x5c], eax
jmp 0x6bf8b3
add ebx, 2
sub esp, 4
push dword [esp + 0x58]
push ecx
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0x10
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0x10]
mov edi, dword [eax + 0x20]
mov ecx, dword [eax + 0x3c]
mov dword [esp + 0x18], edx
lea eax, [edx + ecx*2]
mov ebp, dword [esp + 0x8c]
mov edx, ebp
mov esi, dword [esp + 0xa8]
sub edx, esi
mov dword [esp + 0x20], edx
lea eax, [eax + edx*2 - 0xc8]
mov dword [esp + 0x10], edi
cmp edi, eax
jbe 0x6bf9e4
mov ebp, dword [esp + 0x60]
mov dword [esp + 8], ebx
lea esi, [ecx + ecx]
cmp esi, 0x32001
jl 0x6bf91c
mov esi, 0x32000
cmp ecx, 0x31fff
mov eax, 0x48
jg 0x6c1d15
mov edx, esi
sub edx, ecx
cmp edx, 0x64
jl 0x6c1d15
lea eax, [esi + esi]
sub esp, 0xc
push eax
call dword [0x7b30ec]
add esp, 0x10
test eax, eax
je 0x6c1d10
mov edi, dword [esp + 0x190]
mov ecx, dword [edi + 0x3c]
add ecx, ecx
sub esp, 4
push ecx
push dword [edi + 0x10]
push eax
mov dword [esp + 0x28], eax
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x28]
add esp, 0x10
mov eax, dword [edi + 0x10]
mov ebx, dword [edi + 0x20]
sub ebx, eax
add ebx, edx
mov dword [edi + 0x20], ebx
cmp dword [edi + 0x3c], 0x801
jl 0x6bf9a0
sub esp, 0xc
push eax
call dword [0x7b30f0]
mov edx, dword [esp + 0x28]
add esp, 0x10
mov ebx, dword [edi + 0x20]
mov dword [edi + 0x10], edx
mov dword [edi + 0x3c], esi
mov eax, dword [esp + 0x174]
mov dword [eax], 0
mov ecx, dword [edi + 0x3c]
lea eax, [edx + ecx*2]
mov edx, dword [esp + 0x20]
lea eax, [eax + edx*2 - 0xc8]
cmp ebx, eax
mov eax, ebx
mov ebx, dword [esp + 8]
ja 0x6bf90c
mov dword [esp + 0x10], eax
mov ebp, dword [esp + 0x8c]
mov esi, dword [esp + 0xa8]
cmp ebp, esi
mov edx, ebp
mov ecx, esi
jge 0x6bfa6a
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0x98]
mov esi, edx
mov eax, dword [esp + 0x18]
lea ecx, [eax + ecx*2]
xor edx, edx
cmp dword [esp + 0xec], 0
setne dl
mov edi, edx
lea edx, [eax + esi*2]
lea ebx, [eax + esi*2 + 2]
cmp ebx, ecx
cmovbe ebx, ecx
neg eax
add esi, esi
sub eax, esi
mov esi, dword [esp + 0x48]
lea esi, [esi + edi*2 + 1]
lea edi, [ebx + eax - 1]
shr edi, 1
mov eax, dword [esp + 0x10]
movzx ebx, word [edx]
add ebx, esi
mov word [eax], bx
add eax, 2
add edx, 2
cmp edx, ecx
jb 0x6bfa33
mov ecx, dword [esp + 0x10]
lea ecx, [ecx + edi*2 + 2]
mov eax, dword [esp + 0x190]
mov dword [esp + 0x10], ecx
mov dword [eax + 0x20], ecx
mov edx, ebp
mov ebx, dword [esp + 8]
mov ecx, dword [esp + 0xa8]
jmp 0x6bfa71
mov edx, dword [esp + 0x98]
mov eax, dword [esp + 0x48]
lea ebx, [ebx + eax*2]
cmp edx, 1
mov eax, dword [esp + 0xec]
mov edi, eax
mov dword [esp + 0x8c], ecx
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x18]
jg 0x6bf85a
jmp 0x6bfa9f
mov ebx, dword [esp + 8]
mov ecx, dword [esp + 0x5c]
test ecx, ecx
je 0x6bfce3
mov eax, ecx
mov edi, ebx
mov ebp, dword [esp + 0x190]
mov ebx, ecx
mov ecx, edi
sub ecx, ebx
shr ecx, 1
inc ecx
movzx edx, word [ebx]
lea esi, [edx + edx]
sub eax, esi
test edx, edx
mov word [edi], 0x78
mov word [edi + 2], cx
lea edi, [edi + 4]
mov word [ebx], cx
cmove eax, edx
test eax, eax
mov ebx, eax
jne 0x6bfab8
mov dword [esp + 8], edi
mov ebx, dword [esp + 0x194]
jmp 0x6bfcf5
sub esp, 4
mov edx, 3
mov ecx, dword [esp + 0x10]
push dword [esp + 0x40]
push dword [esp + 0x198]
push dword [esp + 0xa8]
call fcn.006c27a0
mov ecx, dword [esp + 0x1c]
add esp, 0x10
cmp dword [esp + 0x54], 0
je 0x6bfb3e
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0xc]
movzx ecx, byte [ecx + eax - 1]
mov edx, dword [esp + 0xc]
mov byte [edx + eax + 5], cl
mov ecx, dword [esp + 0xc]
dec eax
jne 0x6bfb26
lea eax, [edi + 0x92]
mov word [ecx], ax
lea eax, [ecx + 4]
mov dword [esp + 0x5c], eax
mov dword [ecx + 2], 0x83
lea ecx, [ecx + 6]
add dword [esp + 8], 6
mov dword [esp + 0xa8], 0
dec esi
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x8c], eax
mov edx, dword [esp + 0x24]
test esi, esi
jns 0x6bf715
mov dword [esp + 0x68], edi
mov ecx, dword [esp + 8]
lea edi, [ecx - 4]
movzx eax, word [ecx - 2]
add eax, eax
mov dword [esp + 0xc], edi
sub edi, eax
mov dword [esp + 0x18], eax
neg eax
movzx esi, word [ecx + eax - 4]
cmp esi, 0x81
jne 0x6bfc2e
test edx, edx
mov ebp, dword [esp + 0x190]
mov ecx, dword [esp + 0x10]
jne 0x6bfc4f
jmp 0x6bff46
cmp esi, 1
je 0x6c0233
cmp esi, 0xffffffff
jne 0x6bffe3
add edi, 0x23
jmp 0x6bffca
mov ecx, dword [esp + 0x54]
add ecx, 0x29
mov eax, dword [esp + 0xc]
mov word [eax], cx
mov ecx, eax
mov word [ecx + 2], bp
mov eax, ebp
lea ebp, [ecx + 4]
test esi, esi
js 0x6bff8c
sub esi, eax
je 0x6c085a
test dword [esp + 0x48], 0x10000000
sete al
or al, byte [esp + 0x53]
je 0x6c02ce
mov eax, dword [esp + 0x48]
mov word [ecx + 4], ax
add ecx, 6
jmp 0x6c0301
test edx, edx
mov ebp, dword [esp + 0x190]
mov ecx, dword [esp + 0x10]
je 0x6bff34
movzx eax, si
cmp eax, 0x82
jne 0x6bff34
mov word [edi], 0x83
mov si, 0x83
test ebx, ebx
jne 0x6c00f5
mov ebx, edi
sub esp, 4
mov ecx, ebx
mov edx, dword [esp + 0x10]
push 0
push ebp
push dword [esp + 0xa8]
call fcn.006bc290
add esp, 0x10
test eax, eax
jne 0x6c00e0
movzx eax, word [ebx + 2]
movzx ecx, word [ebx + eax*2]
lea ebx, [ebx + eax*2]
cmp ecx, 0x77
je 0x6bfc62
jmp 0x6c00e6
lea ecx, [eax - 0x7d]
movzx ecx, cx
cmp ecx, 0xa
ja 0x6bff61
mov edx, dword [esp + 8]
mov ecx, dword [esp + 0xc]
sub edx, ecx
mov dword [esp + 0x54], edx
sar edx, 1
mov dword [esp + 0x48], edx
movzx eax, ax
cmp eax, 0x87
jne 0x6c021d
movzx eax, word [ecx + 4]
cmp eax, 0x91
mov edx, dword [esp + 0x24]
jne 0x6bf54d
jmp 0x6c0233
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x194]
mov ebp, dword [esp + 0x190]
mov edx, dword [esp + 0x24]
test edx, edx
jne 0x6c08ce
jmp 0x6c09d1
mov dword [esp + 0x68], edi
cmp dword [esp + 0xb0], 0
setne al
mov edx, dword [esp + 0x30]
test edx, edx
sets cl
and cl, al
cmovne edx, dword [esp + 0x14]
mov dword [esp + 0x30], edx
test cl, cl
mov eax, dword [esp + 0x58]
cmovne eax, dword [esp + 0x34]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x190]
mov ecx, dword [eax + 0x10]
mov dword [esp + 0x18], ecx
mov eax, dword [eax + 0x20]
mov dword [esp + 0x5c], 1
mov dword [esp + 0x98], esi
mov esi, dword [esp + 0x3c]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
sub eax, dword [esp + 0x18]
mov ebp, eax
sar ebp, 1
sub esp, 4
push dword [esp + 0x58]
push ecx
mov dword [esp + 0x14], edx
push edx
call sub.msvcrt.dll_memcpy
add esp, 0x10
mov eax, dword [esp + 0x190]
mov ecx, eax
mov edx, dword [ecx + 0x10]
mov eax, dword [ecx + 0x20]
mov ecx, dword [ecx + 0x3c]
mov dword [esp + 0x18], edx
lea edx, [edx + ecx*2]
mov edi, esi
sub edi, ebp
mov dword [esp + 0x20], edi
lea edx, [edx + edi*2 - 0xc8]
cmp eax, edx
jbe 0x6bfe7f
mov dword [esp + 0x8c], esi
lea edi, [ecx + ecx]
cmp edi, 0x32001
jl 0x6bfdc8
mov edi, 0x32000
cmp ecx, 0x31fff
mov eax, 0x48
jg 0x6c1d15
mov edx, edi
sub edx, ecx
cmp edx, 0x64
jl 0x6c1d15
lea eax, [edi + edi]
sub esp, 0xc
push eax
call dword [0x7b30ec]
add esp, 0x10
test eax, eax
je 0x6c1d10
mov esi, dword [esp + 0x190]
mov ecx, dword [esi + 0x3c]
add ecx, ecx
sub esp, 4
push ecx
push dword [esi + 0x10]
push eax
mov dword [esp + 0x28], eax
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x28]
add esp, 0x10
mov ecx, dword [esi + 0x10]
mov eax, dword [esi + 0x20]
sub eax, ecx
add eax, edx
mov dword [esi + 0x20], eax
cmp dword [esi + 0x3c], 0x801
jl 0x6bfe4c
sub esp, 0xc
push ecx
call dword [0x7b30f0]
mov edx, dword [esp + 0x28]
add esp, 0x10
mov eax, dword [esi + 0x20]
mov dword [esi + 0x10], edx
mov dword [esi + 0x3c], edi
mov ecx, dword [esp + 0x174]
mov dword [ecx], 0
mov ecx, dword [esi + 0x3c]
lea edx, [edx + ecx*2]
mov esi, dword [esp + 0x20]
lea edx, [edx + esi*2 - 0xc8]
cmp eax, edx
ja 0x6bfdb8
mov esi, dword [esp + 0x8c]
cmp esi, ebp
mov ecx, ebp
jge 0x6bfedf
mov ebp, ecx
mov edi, dword [esp + 0x18]
lea ecx, [edi + ecx*2]
mov ebx, esi
lea edx, [edi + ebx*2]
lea esi, [edi + ebx*2 + 2]
cmp esi, ecx
cmovbe esi, ecx
neg edi
add ebx, ebx
sub edi, ebx
lea esi, [esi + edi - 1]
shr esi, 1
mov dword [esp + 0x20], esi
mov edi, eax
mov esi, dword [esp + 0x48]
movzx ebx, word [edx]
add ebx, esi
mov word [edi], bx
add edi, 2
add edx, 2
cmp edx, ecx
jb 0x6bfeb2
mov ecx, dword [esp + 0x20]
lea eax, [eax + ecx*2 + 2]
mov ecx, dword [esp + 0x190]
mov dword [ecx + 0x20], eax
mov ebx, dword [esp + 0x194]
jmp 0x6bfee1
mov ebp, ecx
mov edx, dword [esp + 8]
mov edi, dword [esp + 0x5c]
mov ecx, dword [esp + 0x48]
lea edx, [edx + ecx*2]
inc edi
mov dword [esp + 0x5c], edi
cmp edi, dword [esp + 0x10]
mov esi, ebp
mov ecx, dword [esp + 0xc]
jl 0x6bfd64
mov dword [esp + 0x8c], ebp
mov dword [esp + 8], edx
mov eax, dword [esp + 0x30]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x20], eax
mov edx, dword [esp + 0x24]
mov edi, dword [esp + 0x68]
mov esi, dword [esp + 0x98]
jmp 0x6bf6dc
lea eax, [esi - 0x81]
movzx eax, ax
cmp eax, 1
ja 0x6bfc58
mov eax, dword [esp + 0x68]
add eax, 0x79
mov ecx, dword [esp + 0xc]
mov word [ecx], ax
test edx, edx
jne 0x6c08ce
jmp 0x6c09d1
movzx eax, ax
cmp eax, 0x9d
mov ebp, dword [esp + 0x190]
je 0x6c09d1
jmp 0x6c1eb2
mov word [ecx], 0xa1
mov ebp, dword [esp + 0x190]
jmp 0x6c09d1
mov esi, dword [esp + 0x48]
test esi, 0x10000000
sete al
or al, byte [esp + 0x53]
je 0x6c023f
mov word [ecx + 4], si
mov eax, dword [esp + 0x18]
test eax, eax
js 0x6c084b
mov word [ecx + 6], ax
mov eax, dword [esp + 0x20]
mov word [ecx + 8], ax
add ecx, 0xa
jmp 0x6c084e
add edi, 0x25
mov eax, dword [esp + 0xc]
mov word [eax], di
add eax, 2
mov ecx, eax
jmp 0x6c085c
add edi, 0x27
mov word [eax], di
jmp 0x6bfff3
add edi, 0x27
mov eax, dword [esp + 8]
mov word [eax], di
add esi, 0xffff
mov word [eax + 2], si
add eax, 4
mov ecx, eax
jmp 0x6c085c
mov ebp, dword [esp + 0x190]
mov ebx, dword [esp + 0x194]
xor edx, edx
movzx eax, si
cmp dword [esp + 0x30], eax
jne 0x6c1e7c
cmp ecx, 0x2d
jne 0x6c0204
test edx, edx
je 0x6c1ee8
mov eax, dword [ebp + 0x40]
sub eax, edx
inc eax
test eax, eax
mov edx, eax
jg 0x6c0a43
jmp 0x6c1e34
neg edx
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov esi, edx
mov edx, dword [esp + 0x28]
mov eax, edx
mov ebp, dword [esp + 0x190]
jmp 0x6c0b85
mov eax, edi
mov edi, dword [esp + 8]
cmp dword [esp + 0x10], 1
mov ebp, dword [esp + 0x190]
jne 0x6c033c
cmp esi, 0xffffffff
jne 0x6c033c
add eax, 0x64
jmp 0x6c0353
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x34]
jmp 0x6c0708
cmp edx, 5
ja 0x6c0edd
mov ecx, 0x32
bt ecx, edx
jae 0x6c0edd
mov ecx, dword [esp + 0x190]
cmp dword [ecx + 0x48], 0
jne 0x6c0f07
mov dword [ecx + 0x48], 1
jmp 0x6c0f07
add esi, 5
mov word [edi], si
mov ebx, dword [esp + 0x194]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
movzx eax, si
cmp eax, 0x87
jne 0x6c0119
movzx eax, word [edi + 2]
movzx eax, word [edi + eax*2]
mov si, 0x87
cmp eax, 0x77
je 0x6c0119
mov word [edi], 0x8c
mov si, 0x8c
test edx, edx
je 0x6c01c6
movzx eax, si
cmp eax, 0x8c
je 0x6c0136
cmp eax, 0x87
jne 0x6c01d9
mov dword [esp + 0xc], edi
mov edi, dword [esp + 8]
mov esi, edi
sub esi, dword [esp + 0xc]
shr esi, 1
mov word [edi], 0
sub esp, 4
mov edx, 2
mov ecx, dword [esp + 0x10]
push dword [esp + 0x40]
push ebp
push dword [esp + 0xa8]
call fcn.006c27a0
add esp, 0x10
mov eax, edi
mov edi, dword [esp + 0xc]
sub eax, edi
je 0x6c0189
mov ecx, dword [esp + 8]
sub ecx, dword [esp + 0x18]
dec ecx
movzx edx, byte [ecx + eax - 4]
mov byte [ecx + eax], dl
dec eax
jne 0x6c017e
add esi, 2
movzx eax, word [edi]
cmp eax, 0x87
mov ax, 0x89
mov cx, 0x84
cmove ax, cx
mov word [edi], ax
mov eax, dword [esp + 8]
mov word [eax + 4], 0x7b
mov word [eax + 6], si
add eax, 8
mov dword [esp + 8], eax
mov word [edi + 2], si
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
jmp 0x6c01e6
mov eax, dword [esp + 0x68]
add eax, 0x79
mov ecx, dword [esp + 0xc]
mov word [ecx], ax
jmp 0x6c09d1
inc esi
mov word [edi], si
mov eax, dword [esp + 0xc]
mov word [eax], 0x7b
mov eax, dword [esp + 0xa8]
test eax, eax
je 0x6c01f6
mov word [eax], 0x94
cmp ecx, 2
jge 0x6c08c6
jmp 0x6c09d1
cmp ecx, 0x2b
jne 0x6c0a43
test edx, edx
je 0x6c1ee8
add edx, dword [ebp + 0x40]
jmp 0x6c0a43
cmp eax, 0x80
ja 0x6c101e
cmp dword [esp + 0x10], 0
jle 0x6c1015
mov ebp, dword [esp + 0x190]
jmp 0x6c09d1
lea esi, [esi + esi]
and esi, 0xe
sub esp, 4
push esi
lea eax, [esp + 0x158]
push eax
push ebp
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x34]
add esp, 0x10
add ebp, esi
jmp 0x6c0850
cmp edi, 0x7d
sete al
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xe4]
or edx, ecx
setns dl
and dl, al
mov esi, dword [esp + 0x18]
cmove ecx, esi
test dl, dl
mov eax, dword [esp + 0xe8]
mov ebx, dword [esp + 0x20]
cmove eax, ebx
mov dword [esp + 0xb0], 0
mov edx, dword [esp + 0x14]
mov dword [esp + 0x28], edx
mov dword [esp + 0x44], esi
mov edx, dword [esp + 0x34]
mov dword [esp + 0x4c], edx
mov dword [esp + 0x40], ebx
mov ebx, dword [esp + 0x194]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x20], eax
jmp 0x6c09fd
mov dword [esp + 0x68], edi
mov edi, esi
mov eax, dword [esp + 0x48]
lea esi, [eax + eax]
and esi, 0xe
sub esp, 4
push esi
lea eax, [esp + 0x158]
push eax
push ebp
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x34]
mov ecx, esi
mov esi, edi
mov edi, dword [esp + 0x78]
add esp, 0x10
add ecx, ebp
mov eax, dword [esp + 0x18]
test eax, eax
js 0x6c0317
mov word [ecx], ax
mov eax, dword [esp + 0x20]
mov word [ecx + 2], ax
add ecx, 4
cmp esi, 1
jne 0x6c032a
add edi, 0x25
mov word [ecx], di
add ecx, 2
jmp 0x6c085c
add edi, 0x27
mov word [ecx], di
mov word [ecx + 2], si
add ecx, 4
jmp 0x6c085c
cmp dword [esp + 0x10], 0
jne 0x6c0eab
cmp esi, 1
jne 0x6c0eab
add eax, 0x66
mov word [edi], ax
add edi, 2
jmp 0x6c0ecc
mov dword [esp + 0xa4], 1
mov ecx, 0x86
cmp cl, 0x86
jne 0x6bf1a4
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x14], ecx
mov dword [esp + 8], ebp
lea edi, [eax + 2]
mov dword [esp + 4], edi
movzx ecx, word [eax + 2]
lea edx, [ecx - 0x30]
movzx edx, dx
cmp edx, 9
jbe 0x6c1e02
movzx edx, cx
cmp edx, 0xff
mov ebp, dword [esp + 0x190]
mov ebx, dword [esp + 0x194]
mov edx, ebx
ja 0x6c0405
mov ebx, edx
mov edx, dword [ebp + 0xc]
add eax, 4
movzx esi, cx
test byte [edx + esi], 0x10
je 0x6c03fe
mov dword [esp + 4], eax
movzx ecx, word [eax]
add eax, 2
cmp ecx, 0x100
jb 0x6c03e3
add eax, 0xfffffffe
mov edx, ebx
jmp 0x6c0407
mov eax, edi
sub eax, edi
mov ebx, eax
sar ebx, 1
test edx, edx
mov edx, dword [esp + 0x10]
mov esi, ebx
mov dword [esp + 0xc], esi
je 0x6c04db
test ebx, ebx
je 0x6c1e58
cmp cx, word [esp + 0x30]
jne 0x6c1e46
cmp eax, 0x41
jge 0x6c1e6a
test edx, edx
jne 0x6c0442
inc dword [ebp + 0x54]
mov edx, dword [esp + 0x194]
mov eax, dword [edx]
lea ecx, [eax + 9]
mov dword [edx], ecx
cmp dword [ebp + 0x7c], 0
je 0x6c045b
add eax, 0x11
mov dword [edx], eax
mov eax, dword [ebp + 0x30]
test eax, eax
mov ecx, dword [esp + 0xc]
jle 0x6c0526
mov esi, dword [ebp + 0x28]
xor ebx, ebx
xor edx, edx
cmp ecx, dword [esi + 4]
jne 0x6c04cb
sub esp, 4
push ecx
push dword [esi]
push edi
mov ebp, edi
mov edi, edx
call fcn.006d3b70
mov ecx, dword [esp + 0x1c]
mov edx, edi
mov edi, ebp
mov ebp, dword [esp + 0x1a0]
add esp, 0x10
test eax, eax
jne 0x6c04cb
cmp dword [esp + 0x10], 0
mov edx, dword [esi + 8]
jne 0x6c0f62
mov eax, dword [ebp + 0x24]
test eax, eax
je 0x6c04cb
movzx ecx, word [eax + 4]
cmp edx, ecx
je 0x6c04c1
mov eax, dword [eax]
test eax, eax
jne 0x6c04b1
jmp 0x6c04c7
mov word [eax + 6], 1
mov ecx, dword [esp + 0xc]
inc ebx
add esi, 0xc
mov eax, dword [ebp + 0x30]
cmp ebx, eax
jl 0x6c0471
jmp 0x6c0a29
mov esi, dword [ebp + 0x2c]
mov eax, dword [ebp + 0x30]
xor ebx, ebx
test eax, eax
jle 0x6c0a10
lea eax, [esi + 2]
sub esp, 4
push dword [esp + 0x10]
push eax
push edi
call fcn.006d3b70
add esp, 0x10
test eax, eax
jne 0x6c0513
mov eax, dword [esp + 0xc]
cmp word [esi + eax*2 + 2], 0
je 0x6c0a0d
mov eax, dword [ebp + 0x30]
mov ecx, dword [ebp + 0x34]
lea esi, [esi + ecx*2]
inc ebx
cmp ebx, eax
jl 0x6c04eb
jmp 0x6c0a10
xor edx, edx
xor ebx, ebx
jmp 0x6c0a29
mov dword [esp + 8], ebp
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
lea ecx, [esp + 0xfc]
jmp 0x6c0562
or dword [edi], esi
jmp 0x6c0562
add edx, 2
mov eax, edx
lea ecx, [esp + 0xf8]
mov edx, eax
movzx esi, word [edx]
cmp esi, 0x29
je 0x6c073f
movzx eax, si
cmp eax, 0x3a
je 0x6c073f
lea eax, [edx + 2]
mov dword [esp + 4], eax
lea esi, [esi - 0x2d]
movzx ebx, si
cmp ebx, 0x4b
ja case.0x6c0599.1
mov esi, 1
mov edi, ecx
jmp dword [ebx*4 + 0x6c241c]
or byte [ecx + 2], 8
mov esi, 0x400
mov edi, dword [esp + 0xc0]
jmp case.0x6c0599.60
mov esi, 0x200
mov edi, ecx
or dword [edi], esi
jmp 0x6c0562
mov esi, 0x40
mov edi, ecx
or dword [edi], esi
jmp 0x6c0562
mov esi, 2
mov edi, ecx
or dword [edi], esi
jmp 0x6c0562
mov esi, 4
mov edi, ecx
or dword [edi], esi
jmp 0x6c0562
mov esi, 8
mov edi, ecx
or dword [edi], esi
jmp 0x6c0562
sub esp, 4
push 1
push 0x7b3383
push esi
call fcn.006d3bc0
add esp, 0x10
mov ecx, 4
test eax, eax
je 0x6c1341
jmp case.0x6befc8.2
sub esp, 4
push 4
push str.MARK
push esi
call fcn.006d3bc0
add esp, 0x10
test eax, eax
je 0x6c0f95
sub esp, 4
push 4
push str.FAIL
push esi
call fcn.006d3bc0
add esp, 0x10
test eax, eax
je 0x6c1254
sub esp, 4
push 4
push str.SKIP
push esi
call fcn.006d3bc0
add esp, 0x10
test eax, eax
je 0x6c1335
sub esp, 4
push 4
push str.THEN
push esi
call fcn.006d3bc0
add esp, 0x10
mov ecx, 8
test eax, eax
mov ebp, dword [esp + 0x190]
je 0x6c1341
jmp case.0x6befc8.2
sub esp, 4
push 5
push str.PRUNE
push esi
call fcn.006d3bc0
add esp, 0x10
mov ecx, 6
test eax, eax
je 0x6c1341
jmp case.0x6befc8.2
sub esp, 4
push 6
push str.ACCEPT
push esi
call fcn.006d3bc0
add esp, 0x10
test eax, eax
je 0x6c0f9f
sub esp, 4
push 6
push str.COMMIT
push esi
call fcn.006d3bc0
add esp, 0x10
mov ecx, 3
test eax, eax
je 0x6c1341
jmp case.0x6befc8.2
mov ecx, 6
test ecx, ecx
mov eax, dword [esp + 0x34]
je 0x6c0732
mov edx, dword [esp + 0x18]
mov dword [esp + 0x44], edx
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x14], eax
test ecx, ecx
je 0x6c09fd
cmp ecx, 4
je 0x6c09fd
jmp 0x6c1e14
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
jmp 0x6c0f49
mov eax, dword [esp + 0xfc]
or eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xf8]
not ecx
and ecx, eax
movzx eax, si
cmp eax, 0x29
jne 0x6c0f82
mov eax, ecx
shr eax, 9
and eax, 1
mov dword [esp + 0xd4], eax
xor eax, 1
mov dword [esp + 0xf4], eax
mov eax, ecx
and eax, 1
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x134]
mov dword [eax], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x1c], ecx
mov ebx, dword [esp + 0x194]
jmp 0x6c09f9
mov dword [esp + 0xb0], 0
test ecx, ecx
js 0x6c07e5
mov eax, dword [esp + 0xd0]
test eax, eax
jns 0x6c07e5
mov eax, dword [esp + 0x100]
mov dword [esp + 0xe8], eax
or ecx, dword [esp + 0x58]
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xb0], 0
mov eax, dword [esp + 0x14]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0xd0]
test edx, edx
mov ebx, dword [esp + 0x18]
cmovs edx, ebx
mov esi, dword [esp + 0xe8]
mov ecx, dword [esp + 0x20]
cmovs esi, ecx
mov edi, dword [esp + 0x14]
mov dword [esp + 0x28], edi
mov dword [esp + 0x44], ebx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x40], ecx
mov dword [esp + 0x18], edx
mov eax, dword [esp + 8]
mov dword [esp + 0x14], eax
mov dword [esp + 0x20], esi
mov eax, dword [esp + 0x10]
mov dword [esp + 0x34], eax
mov ebx, dword [esp + 0x194]
jmp 0x6c09fd
add ecx, 6
mov ebp, ecx
add edi, 0x21
mov word [ebp], di
add ebp, 2
mov ecx, ebp
mov ebp, dword [esp + 0x190]
mov edi, dword [esp + 0x48]
test edi, 0x10000000
sete al
or al, byte [esp + 0x53]
je 0x6c0882
mov word [ecx], di
add ecx, 2
mov dword [esp + 8], ecx
jmp 0x6c08a8
add edi, edi
and edi, 0xe
sub esp, 4
push edi
lea eax, [esp + 0x158]
push eax
mov esi, ecx
push esi
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x34]
add esp, 0x10
add esi, edi
mov dword [esp + 8], esi
mov ecx, dword [esp + 0x18]
test ecx, ecx
js 0x6c08c6
mov eax, dword [esp + 8]
mov word [eax], cx
mov ecx, dword [esp + 0x20]
mov word [eax + 2], cx
add eax, 4
mov dword [esp + 8], eax
test edx, edx
je 0x6c09d1
mov ebx, dword [esp + 0xa0]
movzx eax, word [ebx]
lea ecx, [eax - 0x1d]
movzx ecx, cx
cmp ecx, 0x53
ja case.0x6c08e3.4
jmp dword [ecx*4 + 0x6c2568]
cmp dword [esp + 0x60], 0
movzx eax, byte [eax + 0x7b47d4]
lea ebx, [ebx + eax*2]
mov dword [esp + 0xa0], ebx
je case.0x6c08e3.4
movzx eax, word [ebx - 2]
and eax, 0xfc00
cmp eax, 0xd800
jne case.0x6c08e3.4
add ebx, 2
jmp 0x6c0941
add ebx, 0x22
jmp 0x6c0941
movzx eax, byte [0x7b4831]
movzx ecx, word [ebx + 4]
add ecx, 0xfffffff1
movzx ecx, cx
xor edx, edx
cmp ecx, 2
setb dl
lea eax, [eax + edx*2]
jmp 0x6c093e
movzx eax, word [ebx + 2]
lea ebx, [ebx + eax*2]
mov dword [esp + 0xa0], ebx
mov esi, dword [esp + 8]
sub esi, ebx
test esi, esi
jle 0x6c09ca
movzx eax, word [ebx]
cmp eax, 0x75
ja 0x6c096b
movzx eax, byte [eax + 0x7b32f8]
test ax, ax
je 0x6c096b
mov word [ebx], ax
jmp 0x6c09ca
mov edi, esi
shr edi, 1
mov eax, dword [esp + 8]
mov word [eax], 0
sub esp, 4
mov edx, 2
mov ecx, ebx
push dword [esp + 0x40]
push ebp
push dword [esp + 0xa8]
call fcn.006c27a0
add esp, 0x10
movzx eax, byte [ebx + esi - 1]
mov byte [ebx + esi + 3], al
dec esi
jne 0x6c0996
add edi, 2
mov eax, dword [esp + 0xa0]
mov word [eax], 0x81
mov ecx, dword [esp + 8]
mov word [ecx + 4], 0x78
mov word [ecx + 6], di
add ecx, 8
mov dword [esp + 8], ecx
mov word [eax + 2], di
mov ebx, dword [esp + 0x194]
xor eax, eax
mov cl, byte [esp + 0xac]
mov al, cl
add eax, eax
or dword [ebp + 0x68], eax
mov dword [esp + 0xc], 0
mov eax, dword [esp + 0x30]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x20], eax
mov ebp, dword [esp + 8]
mov eax, dword [esp + 4]
add eax, 2
mov dword [esp + 4], eax
jmp 0x6bc9c0
mov eax, dword [ebp + 0x30]
mov dword [esp + 0x94], esi
cmp ebx, eax
jge 0x6c1e34
mov ecx, dword [esp + 0x94]
movzx edx, word [ecx]
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x6c0b55
mov dword [esp + 0xa4], ecx
mov ebx, dword [esp + 0x194]
mov eax, dword [ebp + 0x20]
mov dword [esp + 0x3c], eax
mov edi, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
mov esi, ebx
test ebx, ebx
je 0x6c0aad
mov ebx, ecx
mov edx, dword [esp + 8]
sub ebx, ecx
mov eax, dword [esp + 0x3c]
sub eax, edi
sar eax, 1
mov dword [esp + 0x3c], eax
mov word [edx], 0x75
shr ebx, 1
mov word [edx + 2], bx
mov dword [esp + 0xc], edx
lea ebp, [edx + 4]
mov edx, dword [esp + 0x14]
cmp edx, 0xfffffffe
mov ecx, 0xffffffff
cmove edx, ecx
mov dword [esp + 0xb0], 0
mov dword [esp + 0x14], edx
mov dword [esp + 0x28], edx
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov ebx, esi
jmp 0x6c09fd
mov eax, dword [esp + 8]
mov word [eax], 0
test edx, edx
mov ebx, ecx
mov dword [esp + 0xc], edi
je 0x6c0ae2
sub esp, 4
push edx
push dword [esp + 0xa4]
push ecx
mov edi, edx
mov ebx, ecx
call fcn.006b97f0
mov ecx, ebx
mov edx, edi
mov edi, dword [esp + 0x1c]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x6c0c27
cmp dword [esp + 0x18c], 0
jg 0x6c0a58
movzx eax, word [ebx + 2]
test ax, ax
jne 0x6c0a58
mov dword [esp + 0x28], ecx
cmp dword [esp + 0x188], 0
je 0x6c1db6
mov esi, dword [esp + 0x188]
mov ecx, dword [esi + 4]
cmp ecx, ebx
jb 0x6c1db6
sub esp, 4
mov edx, dword [esp + 0xc]
push 0
push ebp
push dword [esp + 0xa8]
call fcn.006bc290
add esp, 0x10
test eax, eax
je 0x6c0fef
mov esi, dword [esi]
test esi, esi
jne 0x6c0b1e
jmp 0x6c1db6
mov dword [esp + 0x10], edx
mov dword [esp + 0xa4], 0
cmp dword [esp + 0x194], 0
je 0x6c0c55
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0x194]
mov esi, dword [esp + 0x10]
cmp eax, 0xfffffffe
mov ecx, eax
mov eax, 0xffffffff
cmove edx, eax
mov dword [esp + 0x28], edx
cmove ecx, eax
mov dword [esp + 0x14], ecx
mov eax, dword [ebp + 0x20]
sub eax, dword [ebp + 0x10]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x1c]
and eax, 1
add eax, 0x71
mov ecx, dword [esp + 8]
mov word [ecx], ax
mov edx, esi
mov word [ecx + 2], dx
mov eax, 1
mov ecx, edx
shl eax, cl
cmp edx, 0x20
mov ecx, 1
cmovge eax, ecx
or dword [ebp + 0x50], eax
cmp edx, dword [ebp + 0x4c]
jle 0x6c0bdd
mov dword [ebp + 0x4c], edx
sar dword [esp + 0x3c], 1
mov eax, dword [esp + 8]
lea eax, [eax + 4]
mov ecx, dword [ebp + 0x24]
test ecx, ecx
je 0x6c0c07
mov edi, dword [esp + 8]
mov esi, edx
movzx edx, word [ecx + 4]
cmp esi, edx
mov edx, esi
je 0x6c0c16
mov ecx, dword [ecx]
test ecx, ecx
jne 0x6c0bf3
jmp 0x6c0c1c
mov ecx, dword [esp + 8]
mov dword [esp + 0xc], ecx
mov ebp, eax
jmp 0x6c09fd
mov word [ecx + 6], 1
mov dword [esp + 0xc], edi
mov ebp, eax
jmp 0x6c09fd
mov dword [esp + 0x28], ecx
cmp edx, dword [ebp + 0x44]
jg 0x6c1e34
mov ecx, dword [ebp + 0x3c]
lea eax, [edi + ecx*2 - 0xc8]
cmp eax, dword [esp + 0x3c]
jbe 0x6c0dd3
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x3c]
jmp 0x6c0e85
cmp dword [ebp + 0x78], 0
je 0x6c0f72
lea ecx, [ebx + 1]
mov dword [esp + 0xa4], 0
cmp ecx, eax
jge 0x6c1009
mov ecx, dword [esp + 0x94]
lea eax, [ecx + 2]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x34]
lea edi, [ecx + eax*2]
mov esi, 1
lea eax, [edi + 2]
sub esp, 8
push eax
push dword [esp + 0x18]
call fcn.006d3ad0
add esp, 0x10
test eax, eax
jne 0x6c0cb5
mov eax, dword [ebp + 0x34]
lea edi, [edi + eax*2]
lea eax, [ebx + esi + 1]
inc esi
cmp eax, dword [ebp + 0x30]
jl 0x6c0c8e
mov dword [esp + 0xc], edi
mov dword [esp + 0xa4], 0
cmp esi, 2
jl 0x6c1303
mov ecx, dword [esp + 0x14]
cmp ecx, 0xfffffffe
mov eax, 0xffffffff
cmove ecx, eax
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x190]
mov edx, dword [eax + 0x20]
sub edx, dword [eax + 0x10]
mov eax, dword [esp + 0x1c]
and eax, 1
add eax, 0x73
mov ecx, dword [esp + 8]
mov word [ecx], ax
sar edx, 1
mov dword [esp + 0x3c], edx
mov word [ecx + 2], bx
mov word [ecx + 4], si
lea eax, [ecx + 6]
mov dword [esp + 0x30], eax
mov dword [esp + 0xa4], 0
mov eax, dword [esp + 0xc]
cmp dword [esp + 0x94], eax
jae 0x6c0dbb
mov ebp, dword [esp + 0x190]
mov edx, dword [ebp + 0x24]
mov eax, dword [ebp + 0x34]
mov dword [esp + 0x10], eax
mov esi, dword [ebp + 0x50]
mov eax, dword [ebp + 0x4c]
mov ecx, dword [esp + 0x94]
mov ebp, ecx
movzx ecx, word [ecx]
mov ebx, 1
shl ebx, cl
cmp ecx, 0x20
mov edi, 1
cmovae ebx, edi
cmp eax, ecx
jge 0x6c0d74
mov eax, dword [esp + 0x190]
mov dword [eax + 0x4c], ecx
mov eax, ecx
test edx, edx
je 0x6c0d8e
mov edi, edx
cmp word [edi + 4], cx
je 0x6c0d88
mov edi, dword [edi]
test edi, edi
jne 0x6c0d7a
jmp 0x6c0d8e
mov word [edi + 6], 1
or esi, ebx
mov ecx, ebp
mov edi, dword [esp + 0x10]
lea ecx, [ecx + edi*2]
cmp ecx, dword [esp + 0xc]
jb 0x6c0d4d
mov dword [esp + 0x94], ecx
mov eax, dword [esp + 0x190]
mov dword [eax + 0x50], esi
mov dword [esp + 0xa4], 0
mov eax, dword [esp + 8]
mov dword [esp + 0xc], eax
mov ebp, dword [esp + 0x30]
mov ebx, dword [esp + 0x194]
jmp 0x6c09fd
mov dword [esp + 0x10], edx
lea esi, [ecx + ecx]
cmp esi, 0x32001
mov eax, 0x32000
cmovge esi, eax
cmp ecx, 0x31fff
mov eax, 0x48
jg 0x6c1d15
mov edx, esi
sub edx, ecx
cmp edx, 0x64
jl 0x6c1d15
lea eax, [esi + esi]
sub esp, 0xc
push eax
call dword [0x7b30ec]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x6c1d10
mov ebp, dword [esp + 0x190]
mov eax, dword [ebp + 0x3c]
add eax, eax
sub esp, 4
push eax
push dword [ebp + 0x10]
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0x10
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 0x20]
sub eax, ecx
add eax, ebx
mov dword [ebp + 0x20], eax
cmp dword [ebp + 0x3c], 0x801
jl 0x6c0e62
sub esp, 0xc
push ecx
call dword [0x7b30f0]
add esp, 0x10
mov eax, dword [ebp + 0x20]
mov dword [ebp + 0x10], ebx
mov dword [ebp + 0x3c], esi
mov ecx, dword [esp + 0x174]
mov dword [ecx], 0
mov ecx, dword [ebp + 0x14]
mov edi, dword [esp + 0x194]
mov esi, edi
mov edx, dword [esp + 0x10]
mov edi, dword [esp + 0x28]
lea ebx, [edi + edx*2]
mov edi, dword [esp + 8]
lea edx, [edi + 2]
sub edx, ecx
shr edx, 1
mov word [eax], dx
add eax, 2
mov dword [ebp + 0x20], eax
mov edx, edi
mov edi, dword [esp + 0xc]
jmp 0x6c0a5c
add eax, 0x68
cmp esi, 0xffffffff
mov word [edi], ax
mov eax, dword [esp + 0x10]
mov word [edi + 2], ax
mov eax, 0
cmovne ax, si
mov word [edi + 4], ax
add edi, 6
mov dword [esp + 8], edi
test edx, edx
jne 0x6c08ce
jmp 0x6c09d1
lea ecx, [edx - 0x1d]
cmp ecx, 5
mov ecx, dword [esp + 0x190]
ja 0x6c0f07
mov eax, dword [esp + 4]
add eax, 2
mov dword [esp + 0x64], eax
mov eax, dword [edx*4 + 0x7b326c]
add eax, 0xfffffffe
mov dword [esp + 4], eax
jmp 0x6c0f3d
cmp eax, 0x11
mov eax, 0
cmovb eax, ebp
mov dword [esp + 0xc], eax
mov eax, dword [ecx + 0x20]
sub eax, dword [ecx + 0x10]
sar eax, 1
mov dword [esp + 0x3c], eax
mov eax, edx
xor eax, 0xe
or eax, dword [esp + 0x9c]
mov ax, 0xd
cmove dx, ax
mov word [ebp], dx
add ebp, 2
mov eax, dword [esp + 0x18]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x14], eax
jmp 0x6c09fd
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa4], eax
jmp 0x6c0a3c
mov dword [esp + 0xa4], 0
jmp 0x6c0b72
add edx, 2
mov dword [esp + 4], edx
mov edi, 0x83
xor esi, esi
jmp 0x6c112c
mov ecx, 1
jmp 0x6c1341
test ebx, ebx
jne 0x6c1ed6
mov eax, dword [esp + 0x190]
mov dword [eax + 0x6c], 1
mov eax, dword [eax + 0x24]
mov ebx, dword [esp + 0x194]
test eax, eax
je 0x6c140f
mov esi, dword [esp + 8]
test ebx, ebx
je 0x6c0fd4
add dword [ebx], 3
jmp 0x6c0fe4
mov word [esi], 0xa0
movzx ecx, word [eax + 4]
mov word [esi + 2], cx
add esi, 4
mov eax, dword [eax]
test eax, eax
jne 0x6c0fcb
jmp 0x6c1413
mov edi, dword [esp + 0x194]
mov esi, edi
mov edx, dword [esp + 8]
mov edi, dword [esp + 0xc]
mov ecx, dword [esp + 0x28]
jmp 0x6c0a5c
mov ebx, dword [esp + 0x194]
jmp 0x6c1311
xor eax, eax
test esi, esi
setne al
mov esi, eax
mov edx, dword [esp + 0x24]
jmp 0x6bf54d
mov dword [esp + 8], ebp
movzx edx, word [ecx + 6]
cmp edx, 0x3f
jne 0x6c1066
movzx edx, word [ecx + 8]
cmp edx, 0x43
jne 0x6c1066
lea edx, [ecx + 0xa]
movzx esi, word [edx]
lea edi, [esi - 0x30]
movzx edi, di
add edx, 2
cmp edi, 0xa
jb 0x6c1040
movzx esi, si
cmp esi, 0x29
cmove eax, edx
movzx edx, word [eax]
cmp edx, 0x28
jne 0x6c1fa2
movzx edx, word [eax + 2]
cmp edx, 0x3f
jne 0x6c125e
movzx edx, word [eax + 4]
cmp edx, 0x21
je 0x6c10a2
movzx edx, dx
cmp edx, 0x3d
je 0x6c10a2
cmp edx, 0x3c
jne 0x6c125e
movzx eax, word [eax + 6]
cmp eax, 0x3d
je 0x6c10a2
movzx eax, ax
cmp eax, 0x21
jne 0x6c125e
mov ebp, dword [esp + 0x190]
mov dword [ebp + 0x80], 1
mov edi, 0x87
xor esi, esi
mov ecx, dword [esp + 0x1c]
jmp 0x6bec8e
mov ebx, ebp
movzx edx, word [ecx + 6]
cmp edx, 0x21
je 0x6c1458
movzx esi, dx
cmp esi, 0x3d
jne 0x6c1485
mov ebp, dword [esp + 0x190]
inc dword [ebp + 0x5c]
add ecx, 8
mov dword [esp + 4], ecx
mov edi, 0x7f
jmp 0x6c146e
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x190]
inc dword [ebp + 0x5c]
add ecx, 6
mov dword [esp + 4], ecx
mov edi, 0x7d
jmp 0x6bec8a
mov dword [esp + 8], ebp
add ecx, 6
mov dword [esp + 4], ecx
mov edi, 0x81
xor esi, esi
mov ecx, ebx
mov dword [esp + 0x10], 0
mov ebp, dword [esp + 0x190]
jmp 0x6bec96
mov ebx, ebp
mov word [ebp], 0x76
lea eax, [ecx + 6]
mov dword [esp + 4], eax
movzx edx, word [ecx + 6]
mov ecx, edx
add ecx, 0xffffffd0
movzx esi, cx
xor ecx, ecx
cmp esi, 9
ja 0x6c1186
xor ecx, ecx
lea ecx, [ecx + ecx*4]
movzx edx, dx
lea ecx, [edx + ecx*2 - 0x30]
movzx edx, word [eax + 2]
add eax, 2
mov esi, edx
add esi, 0xffffffd0
movzx esi, si
cmp esi, 0xa
jb 0x6c1164
mov dword [esp + 4], eax
lea ebp, [ebx + 2]
movzx edx, dx
cmp edx, 0x29
jne 0x6c131e
cmp ecx, 0x100
jl 0x6c1625
mov eax, dword [esp + 0x174]
mov dword [eax], 0x26
mov eax, 6
jmp 0x6c1647
lea eax, [ecx + 6]
mov dword [esp + 4], eax
movzx ecx, word [ecx + 6]
mov edx, ecx
add edx, 0xffffffc3
movzx edx, dx
cmp edx, 2
jae 0x6c1443
movzx ecx, cx
xor edx, edx
cmp ecx, 0x3e
sete dl
mov dword [esp + 0x10], edx
mov dword [esp + 0x30], 0x29
jmp case.0x6be923.5
mov dword [esp + 8], ebp
lea eax, [ecx + 6]
mov dword [esp + 4], eax
movzx eax, word [ecx + 6]
xor edx, edx
cmp eax, 0x29
mov ebp, dword [esp + 0x190]
mov ebx, dword [esp + 0x194]
je 0x6c0a43
jmp 0x6c1e7c
mov eax, dword [esp + 0x190]
mov dword [eax + 0x7c], 1
mov edi, 1
mov dword [esp + 0x10], edi
mov dword [esp + 8], ebp
add ecx, 6
mov dword [esp + 4], ecx
mov edi, 0x83
xor esi, esi
mov ecx, ebx
mov ebp, dword [esp + 0x190]
jmp 0x6bec96
mov ecx, 5
jmp 0x6c133a
lea ebx, [ecx + 6]
mov eax, dword [esp + 8]
mov word [eax + 4], 0x8d
mov dword [esp + 4], ebx
movzx eax, word [ebx]
mov edx, eax
add edx, 0xffffffd9
movzx edx, dx
cmp edx, 0x2b
ja case.0x6c1283.1
jmp dword [edx*4 + 0x6c236c]
movzx eax, ax
mov dword [esp + 0x58], eax
lea ebx, [ecx + 8]
mov dword [esp + 4], ebx
mov ax, word [ecx + 8]
lea ecx, [eax - 0x30]
movzx ecx, cx
cmp ecx, 9
ja 0x6c17bc
add ebx, 2
xor ecx, ecx
cmp ecx, 0xccccccc
jge 0x6c1f4e
movzx eax, ax
lea ecx, [ecx + ecx*4]
lea ecx, [eax + ecx*2 - 0x30]
mov dword [esp + 4], ebx
movzx eax, word [ebx]
mov edx, eax
add edx, 0xffffffd0
movzx edx, dx
add ebx, 2
cmp edx, 0xa
jb 0x6c12b0
add ebx, 0xfffffffe
mov dl, 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x30], 2
mov dword [esp + 0xc], 0xffffffff
mov esi, ebx
xor ebx, ebx
jmp 0x6c1904
mov ebx, dword [esp + 0x194]
mov ebp, dword [esp + 0x190]
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x28]
jmp 0x6c0b81
mov eax, dword [esp + 0x174]
mov dword [eax], 0x27
mov eax, 6
jmp 0x6c1647
mov ecx, 7
mov ebp, dword [esp + 0x190]
lea eax, [ecx + ecx*2]
test ebx, ebx
je 0x6c137c
mov edx, edi
add ecx, 0xfffffffe
cmp ecx, 3
jbe 0x6c1ed6
mov edi, dword [esp + 0x194]
test edi, edi
mov eax, dword [eax*4 + 0x7b33a4]
mov esi, dword [esp + 8]
mov word [esi], ax
je 0x6c13a0
add dword [edi], ebx
mov word [esi + 2], 0
add esi, 4
jmp 0x6c13c4
cmp ecx, 1
jbe 0x6c1f3c
movzx eax, word [eax*4 + 0x7b33a0]
mov esi, dword [esp + 8]
mov word [esi], ax
add esi, 2
mov ebx, dword [esp + 0x194]
jmp 0x6c13d1
mov dword [esp + 0xc], eax
lea eax, [esi + 4]
mov word [esi + 2], bx
lea ecx, [ebx + ebx]
sub esp, 4
push ecx
push edx
push eax
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0x1c]
add esp, 0x10
lea esi, [esi + ebx*2 + 4]
mov ebx, edi
movzx eax, ax
mov word [esi], 0
add esi, 2
lea ecx, [eax - 0x96]
movzx ecx, cx
cmp ecx, 4
jae 0x6c13e8
mov dword [ebp + 0x70], 1
jmp 0x6c1400
add eax, 0xffffff66
movzx eax, ax
cmp eax, 1
ja 0x6c1400
mov eax, dword [esp + 0xc0]
or byte [eax + 1], 0x10
mov dword [esp + 0xc], 0
mov ebp, esi
jmp 0x6c09fd
mov esi, dword [esp + 8]
xor eax, eax
mov ebp, dword [esp + 0x190]
cmp dword [ebp + 0x5c], 0
setg al
or eax, 0x9e
mov word [esi], ax
add esi, 2
mov edx, dword [esp + 0x14]
cmp edx, 0xfffffffe
mov ecx, 0xffffffff
cmove edx, ecx
mov dword [esp + 0x14], edx
jmp 0x6c13d1
mov dword [esp + 0x58], 0x3e
movzx ecx, cx
cmp ecx, 0x3c
je case.0x6be923.6
jmp 0x6c1f7e
mov ebp, dword [esp + 0x190]
inc dword [ebp + 0x5c]
add ecx, 8
mov dword [esp + 4], ecx
mov edi, 0x80
xor esi, esi
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x10], 0
mov dword [esp + 8], ebx
jmp 0x6bec96
cmp edx, 0xff
mov ebp, ebx
ja 0x6c1fca
mov esi, dword [esp + 0x190]
mov esi, dword [esi + 0xc]
mov dword [esp + 0x58], 0x3e
test byte [esi + edx], 0x10
je 0x6c1fca
mov edi, dword [esp + 0x58]
mov dword [esp + 8], ebp
lea ecx, [eax + 2]
mov dword [esp + 0x10], ecx
mov dword [esp + 4], ecx
movzx ecx, word [eax + 2]
lea edx, [ecx - 0x30]
movzx edx, dx
cmp edx, 9
jbe 0x6c1e02
movzx edx, cx
cmp edx, 0xff
ja 0x6c151a
mov edx, dword [esp + 0x190]
mov edx, dword [edx + 0xc]
add eax, 4
movzx esi, cx
test byte [edx + esi], 0x10
je 0x6c1508
mov dword [esp + 4], eax
movzx ecx, word [eax]
add eax, 2
cmp ecx, 0x100
jb 0x6c14ed
add eax, 0xfffffffe
cmp dword [esp + 0x194], 0
jne 0x6c152c
jmp 0x6c17a7
mov eax, dword [esp + 0x10]
cmp dword [esp + 0x194], 0
je 0x6c17a7
movzx ecx, cx
cmp edi, ecx
jne 0x6c1e46
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 0x30]
cmp ecx, 0x2710
jge 0x6c1f90
sub eax, dword [esp + 0x10]
mov edi, eax
sar edi, 1
mov edx, dword [esp + 0x190]
mov esi, edx
mov edx, dword [esi + 0x40]
mov dword [esp + 0xc], edx
mov ebp, edi
lea edx, [edi + 2]
cmp edx, dword [esi + 0x34]
jle 0x6c1582
mov esi, dword [esp + 0x190]
mov dword [esi + 0x34], edx
cmp eax, 0x41
jge 0x6c1e6a
inc dword [esp + 0xc]
test ecx, ecx
jle 0x6c15fa
mov edi, dword [esp + 0x190]
mov esi, dword [edi + 0x28]
add esi, 8
xor ebx, ebx
jmp 0x6c15c5
mov eax, dword [esp + 0xc]
cmp dword [esi], eax
je 0x6c1a05
test dword [esp + 0x1c], 0x80000
je 0x6c1f6c
mov edi, dword [esp + 0x190]
mov dword [edi + 0x78], 1
jmp 0x6c15ed
cmp ebp, dword [esi - 4]
jne 0x6c15e1
sub esp, 4
push ebp
push dword [esi - 8]
push dword [esp + 0x1c]
call fcn.006d3b70
add esp, 0x10
test eax, eax
je 0x6c159b
mov eax, dword [esp + 0xc]
cmp dword [esi], eax
je 0x6c1f2a
inc ebx
mov ecx, dword [edi + 0x30]
add esi, 0xc
cmp ebx, ecx
jl 0x6c15c5
jmp 0x6c15fc
xor ebx, ebx
cmp ebx, ecx
jl 0x6c17a7
mov eax, dword [esp + 0x190]
mov esi, dword [eax + 0x38]
cmp ecx, esi
jge 0x6c1715
mov eax, dword [esp + 0x190]
mov ebx, dword [eax + 0x28]
jmp 0x6c1786
mov edx, ebx
mov word [edx + 2], cx
mov ecx, dword [esp + 0x190]
sub eax, dword [ecx + 0x18]
shr eax, 1
inc eax
mov word [edx + 4], ax
mov word [edx + 6], 0
lea ebp, [edx + 8]
xor eax, eax
test eax, eax
mov ecx, eax
mov edx, 4
cmove ecx, edx
mov edx, dword [esp + 0xc]
cmove edx, eax
mov dword [esp + 0xc], edx
mov dword [esp + 0xdc], 1
mov dword [esp + 0x90], ebx
mov ebx, dword [esp + 0x194]
test ecx, ecx
jne 0x6c0724
jmp 0x6c09fd
movzx eax, ax
cmp eax, 0x7b
jne 0x6c16f6
movzx eax, word [ecx + 0xa]
add eax, 0xffffffd0
movzx eax, ax
cmp eax, 9
ja 0x6c16f6
add ecx, 0xe
movzx eax, word [ecx - 2]
lea edx, [eax - 0x30]
movzx edx, dx
add ecx, 2
cmp edx, 0xa
jb 0x6c169e
movzx eax, ax
cmp eax, 0x7d
je 0x6be95d
cmp eax, 0x2c
jne 0x6c16f6
movzx eax, word [ecx - 2]
cmp eax, 0x7d
je 0x6be95d
add eax, 0xffffffd0
movzx eax, ax
cmp eax, 9
ja 0x6c16f6
movzx eax, word [ecx]
lea edx, [eax - 0x30]
movzx edx, dx
add ecx, 2
cmp edx, 0xa
jb 0x6c16d9
movzx eax, ax
cmp eax, 0x7d
je 0x6be95d
mov ebp, ebx
mov word [ebp], 0x9d
add ebp, 2
mov dword [esp + 0xc], 0
mov ebx, dword [esp + 0x194]
jmp 0x6c09fd
lea eax, [esi*8]
lea eax, [eax + eax*2]
sub esp, 0xc
push eax
call dword [0x7b30ec]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x6c1fe3
add esi, esi
mov eax, dword [esp + 0x190]
mov edi, eax
mov eax, dword [edi + 0x38]
shl eax, 2
lea eax, [eax + eax*2]
sub esp, 4
push eax
push dword [edi + 0x28]
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0x10
cmp dword [edi + 0x38], 0x15
jl 0x6c1776
sub esp, 0xc
mov eax, dword [esp + 0x19c]
push dword [eax + 0x28]
call dword [0x7b30f0]
add esp, 0x10
mov eax, dword [esp + 0x190]
mov dword [eax + 0x28], ebx
mov dword [eax + 0x38], esi
mov ecx, dword [eax + 0x30]
lea eax, [ecx + ecx*2]
mov edx, dword [esp + 0x10]
mov dword [ebx + eax*4], edx
mov dword [ebx + eax*4 + 4], ebp
mov edx, dword [esp + 0xc]
mov dword [ebx + eax*4 + 8], edx
inc ecx
mov eax, dword [esp + 0x190]
mov dword [eax + 0x30], ecx
add dword [esp + 4], 2
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x190]
jmp 0x6bec60
mov dl, 1
xor ecx, ecx
mov dword [esp + 0x30], 2
mov dword [esp + 0xc], 0xffffffff
mov esi, ebx
mov ebx, 0
mov dword [esp + 0x10], 0
jmp 0x6c1904
add ecx, 8
mov dword [esp + 4], ecx
mov dword [esp + 0x10], 0x27
jmp 0x6c184d
lea ecx, [eax - 0x30]
movzx ecx, cx
mov dword [esp + 0x58], 0
cmp ecx, 9
mov dword [esp + 0x10], 0
jbe 0x6c129c
jmp 0x6c1852
add ecx, 8
mov dword [esp + 4], ecx
mov dword [esp + 0x10], 0x3e
jmp 0x6c184d
movzx eax, word [ecx + 8]
cmp eax, 0x26
jne 0x6c19f4
add ecx, 0xa
mov dword [esp + 4], ecx
mov eax, dword [esp + 8]
mov word [eax + 4], 0x8f
mov dword [esp + 0x10], 0xffffffff
mov ebx, ecx
mov ax, word [ebx]
lea ecx, [eax - 0x30]
movzx ecx, cx
cmp ecx, 9
jbe 0x6c1e02
movzx ecx, ax
cmp ecx, 0xff
ja 0x6c1fa2
movzx eax, ax
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 0xc]
test byte [ecx + eax], 0x10
je 0x6c1fa2
lea esi, [ebx + 2]
mov dword [esp + 4], esi
movzx eax, word [ebx + 2]
cmp eax, 0xff
ja 0x6c18b9
lea esi, [ebx + 4]
movzx edx, ax
test byte [ecx + edx], 0x10
je 0x6c18b6
mov dword [esp + 4], esi
movzx eax, word [esi]
add esi, 2
cmp eax, 0xff
jbe 0x6c189c
add esi, 0xfffffffe
mov ecx, esi
sub ecx, ebx
sar ecx, 1
mov dword [esp + 0xc], ecx
cmp dword [esp + 0x10], 0
jle 0x6c18ed
lea edx, [esi + 2]
mov dword [esp + 4], edx
cmp ax, word [esp + 0x10]
jne 0x6c1fb4
mov ax, word [edx]
mov dword [esp + 0x58], 0xffffffff
xor ecx, ecx
mov esi, edx
jmp 0x6c18f7
mov dword [esp + 0x58], 0xffffffff
xor ecx, ecx
mov edx, dword [esp + 0xf0]
mov dword [esp + 0x30], edx
xor edx, edx
lea edi, [esi + 2]
mov dword [esp + 4], edi
movzx eax, ax
cmp eax, 0x29
jne 0x6c1fb4
cmp dword [esp + 0x194], 0
je 0x6c1942
mov edi, 0x87
mov dword [esp + 0x10], 0
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x190]
mov esi, dword [esp + 0x30]
jmp 0x6bec96
test dl, dl
je 0x6c1984
test ecx, ecx
jle 0x6c1ff5
cmp dword [esp + 0x58], 0
je 0x6c1a2e
cmp dword [esp + 0x58], 0x2d
jne 0x6c1a1c
mov eax, 1
sub eax, ecx
mov ecx, dword [esp + 0x190]
add eax, dword [ecx + 0x40]
mov ecx, eax
test ecx, ecx
jg 0x6c1a2e
jmp 0x6c1e34
mov eax, dword [esp + 0x190]
mov ecx, dword [eax + 0x2c]
mov dword [esp + 0x94], ecx
mov eax, dword [eax + 0x30]
xor esi, esi
test eax, eax
jle 0x6c1a84
mov edi, dword [esp + 0x94]
lea eax, [edi + 2]
sub esp, 4
push dword [esp + 0x10]
push eax
push ebx
call fcn.006d3b70
add esp, 0x10
test eax, eax
jne 0x6c19d1
mov eax, dword [esp + 0xc]
cmp word [edi + eax*2 + 2], 0
je 0x6c1a7a
mov eax, dword [esp + 0x190]
mov ecx, eax
mov eax, dword [ecx + 0x30]
mov ecx, dword [ecx + 0x34]
lea edi, [edi + ecx*2]
mov dword [esp + 0x94], edi
inc esi
cmp esi, eax
jl 0x6c19a2
jmp 0x6c1a84
mov dword [esp + 0x10], 0
mov ax, 0x52
jmp 0x6c1870
mov eax, dword [esp + 0x190]
mov ecx, dword [eax + 0x30]
cmp ebx, ecx
jge 0x6c1604
jmp 0x6c17a7
mov eax, dword [esp + 0x190]
add ecx, dword [eax + 0x40]
test ecx, ecx
jle 0x6c1e34
mov eax, dword [esp + 0x190]
cmp ecx, dword [eax + 0x44]
jg 0x6c1e34
mov eax, dword [esp + 8]
mov word [eax + 6], cx
mov eax, dword [esp + 0x190]
cmp ecx, dword [eax + 0x4c]
jle 0x6c1921
mov ebp, dword [esp + 0x190]
mov dword [ebp + 0x4c], ecx
mov edi, 0x87
mov dword [esp + 0x10], 0
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x30]
jmp 0x6bec96
mov eax, dword [esp + 0x190]
mov eax, dword [eax + 0x30]
cmp esi, eax
jge 0x6c1b44
mov ecx, dword [esp + 0x94]
movzx ecx, word [ecx]
mov word [esp + 0x10], cx
movzx ecx, cx
mov edx, dword [esp + 0x190]
cmp dword [edx + 0x4c], ecx
jge 0x6c1ab4
mov edx, dword [esp + 0x190]
mov dword [edx + 0x4c], ecx
lea ecx, [esi + 1]
cmp ecx, eax
jge 0x6c1ba5
mov ebp, 1
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x190]
mov ecx, dword [ecx + 0x34]
lea edi, [eax + ecx*2 + 2]
lea eax, [eax + ecx*2]
mov dword [esp + 0x94], eax
sub esp, 4
push dword [esp + 0x10]
push edi
push ebx
call fcn.006d3b70
add esp, 0x10
test eax, eax
jne 0x6c1b14
mov eax, dword [esp + 0xc]
cmp word [edi + eax*2], 0
jne 0x6c1b14
lea eax, [esi + ebp + 1]
inc ebp
mov ecx, dword [esp + 0x190]
cmp eax, dword [ecx + 0x30]
jl 0x6c1ac4
cmp ebp, 2
jl 0x6c1ba5
mov eax, dword [esp + 8]
mov word [eax + 6], si
mov word [eax + 8], bp
mov esi, dword [esp + 0x30]
inc esi
inc word [eax + 4]
mov edi, 0x87
mov dword [esp + 0x10], 0
jmp 0x6c1bf9
cmp dword [esp + 0x10], 0
jne 0x6c1e34
movzx eax, word [ebx]
cmp eax, 0x52
jne 0x6c1bb7
cmp dword [esp + 0xc], 2
jl 0x6c1c09
xor eax, eax
mov ecx, 1
movzx edx, word [ebx + ecx*2]
lea esi, [edx - 0x30]
movzx esi, si
cmp esi, 0xa
jae 0x6c1e34
cmp eax, 0xccccccc
jge 0x6c1d92
lea eax, [eax + eax*4]
lea eax, [edx + eax*2 - 0x30]
inc ecx
cmp ecx, dword [esp + 0xc]
jl 0x6c1b69
test eax, eax
mov ecx, dword [esp + 8]
mov word [ecx + 4], 0x8f
jne 0x6c1c17
jmp 0x6c1c13
mov eax, dword [esp + 8]
movzx ecx, word [esp + 0x10]
mov word [eax + 6], cx
jmp 0x6c1921
cmp dword [esp + 0xc], 6
jne 0x6c1e34
sub esp, 4
push 6
push str.DEFINE
push ebx
call fcn.006d3bc0
add esp, 0x10
test eax, eax
jne 0x6c1e34
mov eax, dword [esp + 8]
mov word [eax + 4], 0x91
mov edi, 0x87
mov dword [esp + 0x10], 0
mov esi, 1
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x190]
jmp 0x6bec96
mov eax, dword [esp + 8]
mov word [eax + 4], 0x8f
mov ax, 0xffff
mov ecx, dword [esp + 8]
mov word [ecx + 6], ax
jmp 0x6c1921
lea eax, [ecx + edx*2]
cmp ebp, eax
mov eax, 0x57
mov ecx, 0x34
cmovb ecx, eax
mov eax, dword [esp + 0x174]
mov dword [eax], ecx
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x34
jmp 0x6c1cc4
mov eax, dword [esp + 0x178]
mov ecx, dword [esp + 0x34]
mov dword [eax], ecx
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0x14]
mov dword [eax], ecx
mov eax, dword [esp + 0x180]
mov ecx, dword [esp + 0x20]
mov dword [eax], ecx
mov eax, dword [esp + 0x184]
mov ecx, dword [esp + 0x18]
mov dword [eax], ecx
mov eax, dword [esp + 0x13c]
mov dword [eax], ebp
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x170]
mov dword [ecx], eax
test ebx, ebx
je 0x6c1cfa
mov eax, dword [ebx]
mov ecx, 0x7fffffeb
sub ecx, eax
sub ebp, dword [esp + 0xc4]
sar ebp, 1
cmp ecx, ebp
jge 0x6c1cf6
mov eax, dword [esp + 0x174]
mov dword [eax], 0x14
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x170]
mov dword [ecx], eax
xor eax, eax
add esp, 0x15c
pop esi
pop edi
pop ebx
pop ebp
ret
movzx eax, ax
cmp eax, 0x3a
mov eax, 0xd
mov ecx, 0x1f
cmove ecx, eax
jmp 0x6c1c36
add eax, ebp
mov dword [ebx], eax
mov eax, 1
jmp 0x6c1cd3
mov eax, dword [esp + 0x174]
mov dword [eax], 0x47
jmp 0x6c1cc4
mov eax, 0x15
mov ecx, dword [esp + 0x174]
mov dword [ecx], eax
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3c
jmp 0x6c1cc4
mov ecx, 5
mov edx, dword [esp + 0x174]
mov dword [edx], ecx
mov dword [esp + 4], eax
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 9
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 6
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x12
jmp 0x6c1cc4
add eax, 0xfffffffe
movzx ecx, word [eax + 2]
add eax, 2
add ecx, 0xffffffd0
movzx ecx, cx
cmp ecx, 0xa
jb 0x6c1d7c
mov dword [esp + 4], eax
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3d
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x40
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x28
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x52
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0xe
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0xc
mov dword [esp + 4], edx
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x54
jmp 0x6c1cc4
cmp ecx, 6
je 0x6c1cc4
jmp 0x6c1cd3
mov eax, dword [esp + 0x174]
mov dword [eax], 0x45
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0xf
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x2a
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3e
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x30
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1d
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x36
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1b
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0xb
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3f
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3b
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x3a
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 7
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x4b
jmp 0x6c1cc4
mov ecx, 4
mov eax, edx
jmp 0x6c1d34
mov eax, dword [esp + 0x174]
mov dword [eax], 0x41
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x42
jmp 0x6c1cc4
add ebx, 0xfffffffe
movzx eax, word [ebx + 2]
add ebx, 2
add eax, 0xffffffd0
movzx eax, ax
cmp eax, 0xa
jb 0x6c1f51
mov dword [esp + 4], ebx
jmp 0x6c1d92
mov eax, dword [esp + 0x174]
mov dword [eax], 0x2b
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x29
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x31
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1c
jmp 0x6c1cc4
mov dword [esp + 4], esi
mov eax, dword [esp + 0x174]
mov dword [eax], 0x1a
jmp 0x6c1cc4
add ecx, 6
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x174]
mov dword [eax], 0x18
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x15
jmp 0x6c1cc4
mov eax, dword [esp + 0x174]
mov dword [eax], 0x23
jmp 0x6c1cc4