Function at 0x64b289e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x198]
cmp eax, dword [ecx + 8]
jbe 0x64b2a9f8
sub esp, 0x218
lea edi, [esp]
lea esi, [esp + 0x21c]
call fcn.64b16d3e
call fcn.64b2abc0
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 0xa4], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x7c], edx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x1fc], ebx
mov ebp, dword [esp + 0x20]
mov dword [esp + 0xa0], ebp
mov esi, dword [esp + 0x240]
mov edi, dword [esp + 0x23c]
mov esi, 0xffffffff
mov dword [esp + 0x44], esi
mov edi, 0xffffffff
mov dword [esp + 0x8c], edi
xor edi, edi
mov dword [esp + 0x84], edi
xor esi, esi
mov dword [esp + 0x90], esi
xor esi, esi
mov dword [esp + 0x48], esi
xor esi, esi
mov dword [esp + 0x88], esi
xor esi, esi
mov dword [esp + 0x70], esi
mov esi, dword [esp + 0x238]
mov dword [esp + 0xe8], esi
mov edi, dword [esp + 0x234]
mov dword [esp + 0xe4], edi
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0x230]
mov dword [esp + 0x200], eax
mov esi, dword [esp + 0x240]
mov edi, dword [esp + 0x23c]
mov eax, dword [esp + 0xfc]
jmp 0x64b28b15
mov eax, ecx
mov ecx, dword [esp + 0xa4]
mov ebx, dword [esp + 0x1fc]
mov ebp, dword [esp + 0xa0]
mov dword [esp + 0xe8], edi
mov dword [esp + 0xe4], edx
mov dword [esp + 0x200], esi
mov edx, dword [esp + 0x7c]
mov esi, dword [esp + 0x68]
mov edi, dword [esp + 0x1f4]
test esi, esi
je 0x64b29e5d
mov dword [esp], edi
mov dword [esp + 4], esi
call fcn.64b27610
mov eax, dword [esp + 0x14]
mov dword [esp + 0x1f4], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x68], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x6c], edx
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 8]
test ebx, ebx
jne 0x64b28b6a
mov ebx, dword [esp + 0xe4]
mov ebp, dword [esp + 0xe8]
mov esi, dword [esp + 0x200]
jmp 0x64b28c1e
mov esi, dword [esp + 0xe4]
lea edi, [ebx + esi]
mov dword [esp + 0xe0], edi
mov eax, dword [esp + 0xe8]
cmp eax, edi
jae 0x64b28bd9
mov dword [esp + 0x74], ebx
mov dword [esp + 0x1f8], ebp
lea ecx, [0x64b5a480]
mov dword [esp], ecx
mov edx, dword [esp + 0x200]
mov dword [esp + 4], edx
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edi
call fcn.64b021c0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x1f8]
mov esi, dword [esp + 0xe4]
mov dword [esp + 0x200], eax
mov eax, ecx
mov dword [esp + 0xe8], eax
mov ecx, dword [esp + 0x200]
lea edx, [ecx + esi]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
call fcn.64b16f60
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0xe0]
mov ebp, dword [esp + 0xe8]
mov esi, dword [esp + 0x200]
test edx, edx
je 0x64b29e72
mov dword [esp + 0x94], ebx
mov dword [esp + 0x1e4], esi
mov dword [esp + 0x98], ebp
mov edi, ebp
mov ebp, dword [esp + 0x44]
test ebp, ebp
jge 0x64b28cb5
test edx, 0x100
je 0x64b28cb5
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
mov byte [esp + 8], 1
call fcn.64b2aea0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
inc ebx
mov esi, dword [esp + 0x1e4]
mov edi, dword [esp + 0x98]
mov ebp, eax
mov dword [esp + 0x84], ecx
mov dword [esp + 0x90], edx
mov dword [esp + 0x48], ebx
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0x94]
mov dword [esp + 0x44], ebp
mov ebp, dword [esp + 0x8c]
test ebp, ebp
jge 0x64b28d6f
test edx, 0x200
je 0x64b28d6f
nop
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0xa0]
mov dword [esp], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x15180
call fcn.64b11cf0
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0x91a2b3c5
imul ecx
lea eax, [edx + ecx]
sar eax, 0xb
mov edx, ecx
sar ecx, 0x1f
sub eax, ecx
imul ecx, eax, 0xe10
sub edx, ecx
mov ecx, eax
mov eax, 0x88888889
mov ebx, edx
imul edx
lea eax, [ebx + edx]
sar eax, 5
mov edx, ebx
sar ebx, 0x1f
sub eax, ebx
imul ebx, eax, 0x3c
sub edx, ebx
mov ebx, dword [esp + 0x94]
mov esi, dword [esp + 0x1e4]
mov edi, dword [esp + 0x98]
mov dword [esp + 0x88], eax
mov dword [esp + 0x70], edx
mov ebp, ecx
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x6c]
mov dword [esp + 0x8c], ebp
and edx, 0xffff
cmp edx, 0x109
jg 0x64b29800
cmp edx, 0x103
jg 0x64b294be
cmp edx, 0x23
jg 0x64b29359
cmp edx, 0x17
je 0x64b29136
lea ecx, [edx - 0x18]
cmp ecx, 9
ja 0x64b290d5
mov ecx, dword [esp + 0x78]
test ecx, ecx
jne 0x64b28e2f
mov edx, dword [esp + 0x6c]
cmp edx, 0x18
je 0x64b28dd7
cmp edx, 0x1b
je 0x64b28dd7
cmp edx, 0x19
je 0x64b28dd7
cmp edx, 0x1a
je 0x64b28dd7
cmp edx, 0x1c
jne 0x64b28e33
lea edx, [ebx + 1]
cmp edi, edx
jae 0x64b28e26
lea eax, [0x64b5a480]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.64b021c0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x94]
mov edi, ebp
mov ebp, dword [esp + 0x8c]
mov byte [esi + ebx], 0x5a
jmp 0x64b28ada
mov edx, dword [esp + 0x6c]
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov dword [esp + 0xe8], edx
mov eax, ecx
sar ecx, 0x1f
sub edx, ecx
test edx, edx
jge 0x64b28eb8
lea edx, [ebx + 1]
cmp edi, edx
jae 0x64b28ea7
mov dword [esp + 0xe4], ecx
lea eax, [0x64b5a480]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.64b021c0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0xe4]
mov ebx, dword [esp + 0x94]
mov edi, ebp
mov ebp, dword [esp + 0x8c]
mov byte [esi + ebx], 0x2d
mov ebx, dword [esp + 0xe8]
sub ecx, ebx
neg eax
jmp 0x64b28f12
lea ecx, [ebx + 1]
cmp edi, ecx
jae 0x64b28f08
mov dword [esp + 0x40], edx
lea eax, [0x64b5a480]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ecx
call fcn.64b021c0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x78]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x94]
mov edi, ebp
mov ebp, dword [esp + 0x8c]
mov byte [esi + ebx], 0x2b
mov ebx, edx
mov edx, ecx
mov ecx, ebx
mov dword [esp + 0xe8], ecx
mov dword [esp + 0x9c], eax
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], edi
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
sar ecx, 0x1f
sub edx, ecx
mov dword [esp + 0xe4], edx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.64b283c0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x6c]
cmp ebp, 0x1b
je 0x64b28f78
cmp ebp, 0x20
je 0x64b28f78
cmp ebp, 0x1c
je 0x64b28f78
cmp ebp, 0x21
jne 0x64b28fc4
lea esi, [ecx + 1]
cmp edx, esi
jae 0x64b28fbe
mov dword [esp + 0xdc], ecx
lea eax, [0x64b5a480]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], esi
call fcn.64b021c0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea esi, [eax + 1]
mov ecx, dword [esp + 0xdc]
mov ebp, dword [esp + 0x6c]
mov byte [ebx + ecx], 0x3a
jmp 0x64b28fc6
mov esi, ecx
cmp ebp, 0x1f
je 0x64b2900f
cmp ebp, 0x1a
je 0x64b2900f
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov eax, dword [esp + 0xe4]
imul eax, eax, 0x3c
mov ecx, dword [esp + 0xe8]
sub ecx, eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 2
call fcn.64b283c0
mov ebx, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x6c]
cmp ebp, 0x19
je 0x64b2906f
cmp ebp, 0x1e
je 0x64b2906f
cmp ebp, 0x21
je 0x64b29027
cmp ebp, 0x1c
jne 0x64b290b8
lea ecx, [esi + 1]
cmp edx, ecx
jae 0x64b29069
mov dword [esp + 0xd8], esi
lea eax, [0x64b5a480]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.64b021c0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov esi, dword [esp + 0xd8]
mov byte [ebx + esi], 0x3a
jmp 0x64b29071
mov ecx, esi
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov eax, 0x88888889
mov ecx, dword [esp + 0x9c]
imul ecx
add edx, ecx
sar edx, 5
mov ebx, ecx
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x3c
sub ebx, ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.64b283c0
mov ebx, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x78]
mov ebp, dword [esp + 0x8c]
mov edi, edx
mov edx, esi
mov esi, ebx
jmp 0x64b28ada
cmp edx, 0x22
jl 0x64b2912d
mov dword [esp + 0xe8], edx
lea edi, [esp + 0x204]
lea esi, [esp + 0x21c]
call fcn.64b16d3e
nop
mov ecx, dword [esp + 0x204]
mov dword [esp + 0x107], 0
mov dword [esp + 0x108], 0
mov dword [esp + 0x10c], 0
and ecx, 0x3fffffff
mov esi, 9
jmp 0x64b2a83a
mov ecx, dword [esp + 0x68]
jmp 0x64b29cb1
mov edx, dword [esp + 0x7c]
test edx, edx
je 0x64b291d7
lea eax, [edx + ebx]
mov dword [esp + 0xe8], eax
cmp edi, eax
jae 0x64b29183
lea ecx, [0x64b5a480]
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], eax
call fcn.64b021c0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov edx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x94]
mov edi, ebp
mov dword [esp + 0x200], esi
mov dword [esp + 0xe4], edi
lea eax, [esi + ebx]
mov dword [esp], eax
mov eax, dword [esp + 0x1fc]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.64b16f60
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x78]
mov ebp, dword [esp + 0x8c]
mov edi, dword [esp + 0xe4]
mov edx, dword [esp + 0xe8]
mov esi, dword [esp + 0x200]
jmp 0x64b28ada
mov eax, 0x88888889
mov edx, dword [esp + 0x78]
imul edx
mov eax, ecx
mov ecx, dword [esp + 0x78]
add edx, ecx
sar edx, 5
mov dword [esp + 0xe8], edx
sar ecx, 0x1f
sub edx, ecx
test edx, edx
jge 0x64b29262
lea edx, [ebx + 1]
cmp edi, edx
jae 0x64b29253
mov dword [esp + 0xe4], ecx
lea eax, [0x64b5a480]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.64b021c0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0xe4]
mov ebx, dword [esp + 0x94]
mov edi, ebp
mov ebp, dword [esp + 0x8c]
mov byte [esi + ebx], 0x2d
mov ebx, dword [esp + 0xe8]
sub ecx, ebx
jmp 0x64b292bc
lea ecx, [ebx + 1]
cmp edi, ecx
jae 0x64b292b2
mov dword [esp + 0x3c], edx
lea eax, [0x64b5a480]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ecx
call fcn.64b021c0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ecx, [eax + 1]
mov eax, dword [esp + 0x68]
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x94]
mov edi, ebp
mov ebp, dword [esp + 0x8c]
mov byte [esi + ebx], 0x2b
mov ebx, edx
mov edx, ecx
mov ecx, ebx
mov dword [esp + 0xe8], ecx
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], edi
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
sar ecx, 0x1f
sub edx, ecx
mov dword [esp + 0xe4], edx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.64b283c0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov ecx, dword [esp + 0xe4]
imul ecx, ecx, 0x3c
mov edx, dword [esp + 0xe8]
sub edx, ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 2
call fcn.64b283c0
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x78]
mov edi, ebp
mov edx, ebx
mov ebp, dword [esp + 0x8c]
jmp 0x64b28ada
cmp edx, 0x101
jne 0x64b293dc
mov edx, dword [esp + 0x84]
lea ebp, [edx - 1]
cmp ebp, 0xb
jbe 0x64b293b9
mov ebp, edi
lea edi, [esp + 0x14c]
xor eax, eax
call fcn.64b1685b
test edx, edx
sete cl
mov eax, edx
sar edx, 0x1f
test edx, edx
mov edi, esi
xchg esi, ebx
sete bl
xchg esi, ebx
and ecx, esi
test cl, cl
jne 0x64b293a7
mov ecx, eax
mov esi, 0x14
jmp 0x64b2a702
mov byte [esp + 0x15f], 0x30
mov ecx, 0x13
jmp 0x64b2a65a
mov esi, dword [0x64b4efc4]
mov edi, dword [0x64b4efc0]
cmp esi, ebp
jbe 0x64b2a651
lea ebp, [edi + edx*8 - 8]
mov esi, dword [ebp]
mov ebp, dword [ebp + 4]
jmp 0x64b2a57d
cmp edx, 0x102
jne 0x64b29468
mov edx, ebp
mov ebp, dword [esp + 0x84]
lea esi, [ebp - 1]
cmp esi, 0xb
ja 0x64b2941b
mov edi, dword [0x64b4efc4]
mov ebx, dword [0x64b4efc0]
cmp edi, esi
jbe 0x64b2a574
lea ebx, [ebx + ebp*8 - 8]
mov esi, dword [ebx]
mov ebx, dword [ebx + 4]
jmp 0x64b2a343
mov esi, edi
lea edi, [esp + 0x110]
xor eax, eax
call fcn.64b1685b
mov ecx, ebp
sar ebp, 0x1f
test ebp, ebp
mov eax, edx
sete dl
test ecx, ecx
mov edi, esi
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, edx
xchg esi, eax
test al, al
xchg esi, eax
jne 0x64b29456
mov edx, ecx
mov esi, 0x14
jmp 0x64b2a479
mov byte [esp + 0x123], 0x30
mov edx, 0x13
jmp 0x64b2a2c9
cmp edx, 0x103
jne 0x64b29cb1
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov eax, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.64b283c0
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x78]
mov edi, ebp
mov edx, ebx
mov ebp, dword [esp + 0x8c]
jmp 0x64b28ada
cmp edx, 0x106
jg 0x64b296b2
cmp edx, 0x104
je 0x64b29668
cmp edx, 0x105
jne 0x64b295a5
mov eax, dword [esp + 0xa0]
add eax, 0x15180
mov edx, dword [esp + 0xa4]
adc edx, 0
mov dword [esp + 4], edx
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x93a80
call fcn.64b11cf0
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0xc22e4507
imul ecx
lea eax, [edx + ecx]
sar eax, 0x10
sar ecx, 0x1f
sub eax, ecx
cmp eax, 6
jbe 0x64b29584
mov dword [esp + 0xe8], eax
lea edi, [esp + 0x124]
xor eax, eax
call fcn.64b1685b
mov ecx, dword [esp + 0xe8]
mov edx, ecx
sar ecx, 0x1f
test ecx, ecx
sete bl
test edx, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x64b29572
mov eax, 0x14
jmp 0x64b2a1db
mov byte [esp + 0x137], 0x30
mov eax, 0x13
jmp 0x64b2a15f
mov ecx, dword [0x64b4efb4]
mov edx, dword [0x64b4efb0]
cmp ecx, eax
jbe 0x64b2a15a
lea eax, [edx + eax*8]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
jmp 0x64b2a09f
mov eax, dword [esp + 0xa0]
add eax, 0x15180
mov edx, dword [esp + 0xa4]
adc edx, 0
mov dword [esp + 4], edx
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x93a80
call fcn.64b11cf0
mov eax, dword [esp + 0x10]
mov ecx, eax
mov eax, 0xc22e4507
imul ecx
lea eax, [edx + ecx]
sar eax, 0x10
sar ecx, 0x1f
sub eax, ecx
cmp eax, 6
ja 0x64b29615
mov ecx, dword [0x64b4efb4]
mov ebx, dword [0x64b4efb0]
cmp ecx, eax
jbe 0x64b2a09a
lea eax, [ebx + eax*8]
mov ebx, dword [eax]
mov eax, dword [eax + 4]
jmp 0x64b29eef
mov dword [esp + 0xe8], eax
lea edi, [esp + 0x138]
xor eax, eax
call fcn.64b1685b
mov ecx, dword [esp + 0xe8]
mov edx, ecx
sar ecx, 0x1f
test ecx, ecx
sete bl
test edx, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x64b29656
mov eax, 0x14
jmp 0x64b29fbe
mov byte [esp + 0x14b], 0x30
mov eax, 0x13
jmp 0x64b29e8e
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov eax, dword [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.64b283c0
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x78]
mov edi, ebp
mov edx, ebx
mov ebp, dword [esp + 0x8c]
jmp 0x64b28ada
cmp edx, 0x107
je 0x64b297b6
cmp edx, 0x108
jne 0x64b2976c
mov edx, dword [esp + 0x90]
cmp edx, 0xa
jge 0x64b29729
lea eax, [ebx + 1]
cmp edi, eax
jae 0x64b29723
lea ecx, [0x64b5a480]
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], eax
call fcn.64b021c0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
inc eax
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x94]
mov edi, ebp
mov ebp, dword [esp + 0x8c]
mov byte [esi + ebx], 0x20
mov ebx, eax
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 0
call fcn.64b283c0
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x78]
mov edi, ebp
mov edx, ebx
mov ebp, dword [esp + 0x8c]
jmp 0x64b28ada
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov eax, dword [esp + 0x90]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.64b283c0
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x78]
mov edi, ebp
mov edx, ebx
mov ebp, dword [esp + 0x8c]
jmp 0x64b28ada
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov eax, dword [esp + 0x90]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.64b283c0
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x78]
mov edi, ebp
mov edx, ebx
mov ebp, dword [esp + 0x8c]
jmp 0x64b28ada
cmp edx, 0x20d
jg 0x64b29af1
cmp edx, 0x113
jg 0x64b299c2
cmp edx, 0x10a
je 0x64b298c6
cmp edx, 0x10b
je 0x64b2987f
cmp edx, 0x113
jne 0x64b29cb1
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov eax, dword [esp + 0x44]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 4
call fcn.64b283c0
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x78]
mov edi, ebp
mov edx, ebx
mov ebp, dword [esp + 0x8c]
jmp 0x64b28ada
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov eax, dword [esp + 0x48]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 3
call fcn.64b283c0
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x78]
mov edi, ebp
mov edx, ebx
mov ebp, dword [esp + 0x8c]
jmp 0x64b28ada
mov edx, dword [esp + 0x48]
cmp edx, 0x64
jge 0x64b2997f
lea eax, [ebx + 1]
cmp edi, eax
jae 0x64b2991d
lea ecx, [0x64b5a480]
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], eax
call fcn.64b021c0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
inc eax
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0x94]
mov edi, ebp
mov ebp, dword [esp + 0x8c]
mov byte [esi + ebx], 0x20
cmp edx, 0xa
jge 0x64b2997d
lea ebx, [eax + 1]
cmp edi, ebx
jae 0x64b29977
mov dword [esp + 0xd4], eax
lea ecx, [0x64b5a480]
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebx
call fcn.64b021c0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
lea ebx, [eax + 1]
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x48]
mov ebp, dword [esp + 0x8c]
mov byte [esi + eax], 0x20
jmp 0x64b2997f
mov ebx, eax
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 0
call fcn.64b283c0
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x78]
mov edi, ebp
mov edx, ebx
mov ebp, dword [esp + 0x8c]
jmp 0x64b28ada
cmp edx, 0x114
je 0x64b29a8c
cmp edx, 0x20c
je 0x64b29a49
cmp edx, 0x20d
jne 0x64b29cb1
mov eax, 0xaaaaaaab
imul ebp
add edx, ebp
sar edx, 3
mov eax, ebp
sar ebp, 0x1f
sub edx, ebp
lea edx, [edx + edx*2]
shl edx, 2
sub eax, edx
test eax, eax
jne 0x64b29a06
mov eax, 0xc
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.64b283c0
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x78]
mov edi, ebp
mov edx, ebx
mov ebp, dword [esp + 0x8c]
jmp 0x64b28ada
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], 2
call fcn.64b283c0
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x78]
mov edi, ebp
mov edx, ebx
mov ebp, dword [esp + 0x8c]
jmp 0x64b28ada
mov edx, dword [esp + 0x44]
test edx, edx
jge 0x64b29a96
neg edx
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov eax, 0x51eb851f
mov ecx, edx
imul edx
sar edx, 5
mov ebx, ecx
sar ecx, 0x1f
sub edx, ecx
imul ecx, edx, 0x64
sub ebx, ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 2
call fcn.64b283c0
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x78]
mov edi, ebp
mov edx, ebx
mov ebp, dword [esp + 0x8c]
jmp 0x64b28ada
cmp edx, 0x210
jle 0x64b29d52
cmp edx, 0x212
jle 0x64b29cbc
cmp edx, 0x215
jne 0x64b29bdd
cmp ebp, 0xc
jl 0x64b29b78
lea edx, [ebx + 2]
cmp edi, edx
jae 0x64b29b70
mov dword [esp + 0xd0], edx
lea eax, [0x64b5a480]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.64b021c0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0xd0]
mov ebx, dword [esp + 0x94]
mov edi, ebp
mov ebp, dword [esp + 0x8c]
mov word [esi + ebx], 0x4d50
jmp 0x64b29bd4
lea edx, [ebx + 2]
cmp edi, edx
jae 0x64b29bce
mov dword [esp + 0xcc], edx
lea eax, [0x64b5a480]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.64b021c0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0xcc]
mov ebx, dword [esp + 0x94]
mov edi, ebp
mov ebp, dword [esp + 0x8c]
mov word [esi + ebx], 0x4d41
mov ecx, dword [esp + 0x78]
jmp 0x64b28ada
cmp edx, 0x216
jne 0x64b29cb1
cmp ebp, 0xc
jl 0x64b29c4c
lea edx, [ebx + 2]
cmp edi, edx
jae 0x64b29c44
mov dword [esp + 0xc8], edx
lea eax, [0x64b5a480]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.64b021c0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0xc8]
mov ebx, dword [esp + 0x94]
mov edi, ebp
mov ebp, dword [esp + 0x8c]
mov word [esi + ebx], 0x6d70
jmp 0x64b29ca8
lea edx, [ebx + 2]
cmp edi, edx
jae 0x64b29ca2
mov dword [esp + 0xc4], edx
lea eax, [0x64b5a480]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.64b021c0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0xc4]
mov ebx, dword [esp + 0x94]
mov edi, ebp
mov ebp, dword [esp + 0x8c]
mov word [esi + ebx], 0x6d61
mov ecx, dword [esp + 0x78]
jmp 0x64b28ada
mov ecx, dword [esp + 0x78]
mov edx, ebx
jmp 0x64b28ada
cmp edx, 0x211
jne 0x64b29d0b
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov eax, dword [esp + 0x70]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.64b283c0
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x78]
mov edi, ebp
mov edx, ebx
mov ebp, dword [esp + 0x8c]
jmp 0x64b28ada
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov eax, dword [esp + 0x70]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.64b283c0
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x78]
mov edi, ebp
mov edx, ebx
mov ebp, dword [esp + 0x8c]
jmp 0x64b28ada
cmp edx, 0x20e
jne 0x64b29dc1
mov eax, 0xaaaaaaab
imul ebp
add edx, ebp
sar edx, 3
mov eax, ebp
sar ebp, 0x1f
sub edx, ebp
lea edx, [edx + edx*2]
shl edx, 2
sub eax, edx
test eax, eax
jne 0x64b29d7e
mov eax, 0xc
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.64b283c0
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x78]
mov edi, ebp
mov edx, ebx
mov ebp, dword [esp + 0x8c]
jmp 0x64b28ada
cmp edx, 0x20f
jne 0x64b29e13
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov eax, dword [esp + 0x88]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.64b283c0
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x78]
mov edi, ebp
mov edx, ebx
mov ebp, dword [esp + 0x8c]
jmp 0x64b28ada
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov eax, dword [esp + 0x88]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 2
call fcn.64b283c0
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x78]
mov edi, ebp
mov edx, ebx
mov ebp, dword [esp + 0x8c]
jmp 0x64b28ada
mov ebx, dword [esp + 0xe4]
mov ebp, dword [esp + 0xe8]
mov esi, dword [esp + 0x200]
mov dword [esp + 0x244], esi
mov dword [esp + 0x248], ebx
mov dword [esp + 0x24c], ebp
add esp, 0x218
ret
cmp eax, 0x14
ja 0x64b29fa2
lea ecx, [esp + 0x180]
mov dword [esp], ecx
lea ecx, [0x64b631b3]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xa
lea edx, [eax - 0x14]
neg edx
mov ebx, edx
neg edx
sar edx, 0x1f
and eax, edx
lea eax, [esp + eax + 0x138]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
lea eax, [0x64b62455]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
call fcn.64b05510
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
cmp eax, 3
jb 0x64b29f96
mov eax, dword [esp + 0x94]
lea ecx, [eax + 3]
mov edx, dword [esp + 0x98]
cmp edx, ecx
jb 0x64b29f16
mov esi, dword [esp + 0x1e4]
jmp 0x64b29f68
mov dword [esp + 0xc0], ecx
mov dword [esp + 0x1ec], ebx
lea ebx, [0x64b5a480]
mov dword [esp], ebx
mov ebp, dword [esp + 0x1e4]
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.64b021c0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0xc0]
mov ebx, dword [esp + 0x1ec]
mov edx, ebp
mov ebp, ebx
movzx ebx, word [ebx]
mov edi, ebx
movzx ebx, byte [ebp + 2]
mov word [esi + eax], di
mov byte [esi + eax + 2], bl
mov eax, dword [esp + 0x1f4]
mov ebp, dword [esp + 0x8c]
mov edi, edx
mov edx, ecx
mov ecx, dword [esp + 0x78]
jmp 0x64b28ada
mov ecx, 3
mov edx, eax
call fcn.64b16740
mov ecx, 0x14
call fcn.64b16780
lea esi, [eax + 0x30]
xchg esi, eax
mov byte [esp + edx + 0x137], al
xchg esi, eax
mov edx, ecx
mov ecx, ebp
mov eax, ebx
test edx, edx
seta bl
test ecx, ecx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg esi, ebx
seta bl
xchg esi, ebx
and ebp, ebx
or ebp, esi
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x64b29e8e
mov dword [esp + 0x5c], edx
mov dword [esp + 0x50], eax
mov eax, 0xcccccccd
mov ebp, edx
mul edx
shr edx, 3
mov esi, edx
add edx, 0
mov eax, 0xcccccccd
mov edi, edx
mul ecx
shr edx, 3
mov dword [esp + 0xbc], edx
lea ebx, [edx + edx*4]
shl ebx, 1
sub ecx, ebx
mov eax, 0x19999999
mul ecx
mov dword [esp + 0xb8], eax
add eax, edi
lea ebx, [esi + esi*4]
shl ebx, 1
sub ebp, ebx
lea ebx, [ecx + ecx*2]
lea ebx, [ebp + ebx*2]
mov ecx, eax
mov eax, 0xcccccccd
mov ebp, edx
mul ebx
shr edx, 3
mov dword [esp + 0xb4], edx
mov ebx, ecx
add ecx, edx
mov eax, 0xa
mul ecx
mov edx, dword [esp + 0x5c]
sub edx, eax
add esi, 0
mov esi, dword [esp + 0xbc]
adc esi, 0
mov eax, edx
mov edx, dword [esp + 0xb8]
add edx, edi
adc ebp, esi
mov edx, dword [esp + 0xb4]
add ebx, edx
adc ebp, 0
mov edx, dword [esp + 0x50]
lea ebx, [edx - 1]
cmp ebx, 0x14
jb 0x64b29fac
mov eax, ebx
mov ecx, 0x14
call fcn.64b16720
call fcn.64b16720
mov edx, dword [esp + 0x94]
lea ebx, [eax + edx]
mov dword [esp + 0xe8], ebx
mov ebp, dword [esp + 0x98]
cmp ebp, ebx
jb 0x64b2a0c4
mov esi, dword [esp + 0x1e4]
jmp 0x64b2a10e
mov dword [esp + 0x1e0], ecx
mov dword [esp + 0x34], eax
lea eax, [0x64b5a480]
mov dword [esp], eax
mov ecx, dword [esp + 0x1e4]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.64b021c0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x1e0]
mov edx, dword [esp + 0x94]
mov dword [esp + 0xe4], ebp
mov dword [esp + 0x200], esi
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.64b16f60
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x78]
mov ebp, dword [esp + 0x8c]
mov edi, dword [esp + 0xe4]
mov edx, dword [esp + 0xe8]
mov esi, dword [esp + 0x200]
jmp 0x64b28ada
call fcn.64b16720
cmp eax, 0x14
ja 0x64b2a1c1
lea ecx, [esp + 0x160]
mov dword [esp], ecx
lea ecx, [0x64b631b3]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xa
lea edx, [eax - 0x14]
neg edx
mov ebx, edx
neg edx
sar edx, 0x1f
and eax, edx
lea eax, [esp + eax + 0x124]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
lea eax, [0x64b62455]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
call fcn.64b05510
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
jmp 0x64b2a09f
mov ecx, 0x14
call fcn.64b16780
lea edi, [ecx + 0x30]
xchg edi, eax
mov byte [esp + edx + 0x123], al
xchg edi, eax
mov edx, ebx
mov ecx, esi
test ecx, ecx
sete bl
test edx, edx
xchg ebp, ebx
seta bl
xchg ebp, ebx
test ecx, ecx
xchg esi, ebx
seta bl
xchg esi, ebx
and ebx, ebp
or ebx, esi
test bl, bl
je 0x64b2a15f
mov dword [esp + 0x54], eax
mov eax, 0xcccccccd
mov ebp, edx
mul edx
shr edx, 3
mov esi, edx
add edx, 0
mov eax, 0xcccccccd
mov edi, edx
mul ecx
shr edx, 3
mov dword [esp + 0xbc], edx
lea ebx, [edx + edx*4]
shl ebx, 1
sub ecx, ebx
mov eax, 0x19999999
mul ecx
mov dword [esp + 0xb8], edx
mov dword [esp + 0xb4], eax
add eax, edi
mov dword [esp + 0xb0], eax
lea ebx, [esi + esi*4]
lea edx, [ecx + ecx*2]
shl ebx, 1
mov ecx, ebp
sub ebp, ebx
lea edx, [ebp + edx*2]
mov ebx, eax
mov eax, edx
mov ebp, 0xcccccccd
mul ebp
shr edx, 3
mov dword [esp + 0xac], edx
add ebx, edx
mov eax, ebx
mov ebp, 0xa
mul ebp
sub ecx, eax
add esi, 0
mov edx, dword [esp + 0xbc]
adc edx, 0
mov esi, dword [esp + 0xb4]
add esi, edi
mov esi, dword [esp + 0xb8]
adc esi, edx
mov edx, dword [esp + 0xb0]
mov edi, dword [esp + 0xac]
add edx, edi
adc esi, 0
mov edx, dword [esp + 0x54]
lea eax, [edx - 1]
cmp eax, 0x14
jb 0x64b2a1cb
mov ecx, 0x14
call fcn.64b16720
cmp edx, 0x14
ja 0x64b2a443
lea eax, [esp + 0x1c0]
mov dword [esp], eax
lea eax, [0x64b62c97]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
lea ecx, [edx - 0x14]
neg ecx
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and edx, ecx
lea ecx, [esp + edx + 0x110]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
lea ecx, [0x64b62455]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 1
call fcn.64b05510
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x84]
cmp ebx, 3
jb 0x64b2a437
mov ebx, dword [esp + 0x94]
lea edi, [ebx + 3]
mov eax, dword [esp + 0x98]
cmp eax, edi
jb 0x64b2a37f
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0x1e4]
mov dword [esp + 0x200], eax
mov eax, dword [esp + 0xf4]
jmp 0x64b2a3ea
mov dword [esp + 0xa8], edi
mov dword [esp + 0x1f0], esi
lea ecx, [0x64b5a480]
mov dword [esp], ecx
mov edx, dword [esp + 0x1e4]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edi
call fcn.64b021c0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x94]
mov edi, dword [esp + 0xa8]
mov dword [esp + 0x200], esi
mov eax, ebp
mov ebp, dword [esp + 0x84]
mov esi, dword [esp + 0x1f0]
movzx ebx, word [esi]
mov word [esp + 0x2a], bx
movzx ebx, byte [esi + 2]
mov esi, ebx
mov ebx, dword [esp + 0x94]
movzx ecx, word [esp + 0x2a]
mov edx, dword [esp + 0x200]
mov word [edx + ebx], cx
xchg esi, eax
mov byte [edx + ebx + 2], al
xchg esi, eax
mov ecx, dword [esp + 0x78]
mov ebp, dword [esp + 0x8c]
mov edx, edi
mov esi, dword [esp + 0x200]
mov edi, eax
mov eax, dword [esp + 0x1f4]
jmp 0x64b28ada
mov ecx, 3
mov edx, ebx
call fcn.64b16740
mov eax, edx
mov ecx, 0x14
call fcn.64b16780
lea ecx, [edx + 0x30]
mov byte [esp + ebp + 0x10f], cl
mov edx, dword [esp + 0x84]
mov edi, dword [esp + 0x98]
mov ecx, eax
mov ebp, ebx
mov eax, dword [esp + 0x8c]
mov ebx, dword [esp + 0x94]
test ebp, ebp
seta dl
xchg edi, ebx
sete bl
xchg edi, ebx
test ecx, ecx
seta bl
and edi, ebx
or edi, edx
xchg edi, eax
test al, al
xchg edi, eax
je 0x64b2a54c
mov dword [esp + 0x64], ecx
mov dword [esp + 0x58], esi
mov eax, 0xcccccccd
mul ebp
shr edx, 3
lea edi, [edx + edx*4]
shl edi, 1
sub ebp, edi
mov eax, 0x19999999
mov edi, edx
mul ebp
mov dword [esp + 0xbc], edx
mov dword [esp + 0xb8], eax
mov eax, 0xcccccccd
mul ecx
shr edx, 3
mov eax, edx
add edx, 0
mov ebx, dword [esp + 0xb8]
add ebx, edx
lea esi, [eax + eax*4]
lea ebp, [ebp + ebp*2]
shl esi, 1
sub ecx, esi
lea ebp, [ecx + ebp*2]
mov ecx, eax
mov eax, 0xcccccccd
mov esi, edx
mul ebp
shr edx, 3
mov dword [esp + 0xb4], edx
mov ebp, ebx
add ebx, edx
mov eax, 0xa
mul ebx
mov edx, dword [esp + 0x64]
sub edx, eax
add ecx, 0
adc edi, 0
mov eax, ebx
mov ebx, dword [esp + 0xb8]
add ebx, esi
mov ebx, dword [esp + 0xbc]
adc ebx, edi
mov esi, dword [esp + 0xb4]
add ebp, esi
adc ebx, 0
mov ebp, dword [esp + 0x58]
lea esi, [ebp - 1]
cmp esi, 0x14
jb 0x64b2a44f
jmp 0x64b2a568
mov ecx, dword [esp + 0x84]
mov ebx, dword [esp + 0x94]
mov edi, dword [esp + 0x98]
mov edx, esi
jmp 0x64b2a2c9
mov eax, esi
mov ecx, 0x14
call fcn.64b16720
mov eax, esi
mov ecx, edi
call fcn.64b16720
lea edi, [ebp + ebx]
mov dword [esp + 0xe8], edi
mov eax, dword [esp + 0x98]
cmp eax, edi
jb 0x64b2a5b1
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0x1e4]
mov dword [esp + 0x200], eax
mov eax, dword [esp + 0xec]
jmp 0x64b2a604
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x1e8], esi
lea ecx, [0x64b5a480]
mov dword [esp], ecx
mov edx, dword [esp + 0x1e4]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edi
call fcn.64b021c0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov ebx, dword [esp + 0x94]
mov dword [esp + 0x200], esi
mov eax, ebp
mov ebp, dword [esp + 0x2c]
mov esi, dword [esp + 0x1e8]
mov dword [esp + 0xe4], eax
mov ecx, dword [esp + 0x200]
lea edx, [ecx + ebx]
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
call fcn.64b16f60
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x78]
mov ebp, dword [esp + 0x8c]
mov edi, dword [esp + 0xe4]
mov edx, dword [esp + 0xe8]
mov esi, dword [esp + 0x200]
jmp 0x64b28ada
mov eax, ebp
mov ecx, esi
call fcn.64b16720
cmp ecx, 0x14
ja 0x64b2a6d5
lea eax, [esp + 0x1a0]
mov dword [esp], eax
lea eax, [0x64b62c97]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
lea edx, [ecx - 0x14]
neg edx
mov ebx, edx
neg edx
sar edx, 0x1f
and ecx, edx
lea ecx, [esp + ecx + 0x14c]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
lea ecx, [0x64b62455]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 1
call fcn.64b05510
mov esi, dword [esp + 0x1c]
mov ebp, dword [esp + 0x20]
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x94]
jmp 0x64b2a57d
mov eax, ecx
mov ecx, 0x14
call fcn.64b16780
add edx, 0x30
mov byte [esp + ebp + 0x14b], dl
mov ebp, dword [esp + 0x98]
mov edi, dword [esp + 0x1e4]
mov edx, ebx
mov ebx, dword [esp + 0x94]
test edx, edx
xchg edi, ebx
seta bl
xchg edi, ebx
test eax, eax
xchg ebp, ebx
seta bl
xchg ebp, ebx
test edx, edx
sete bl
and ebx, ebp
or ebx, edi
test bl, bl
je 0x64b2a7e9
mov dword [esp + 0x60], eax
mov dword [esp + 0x4c], esi
mov ebx, eax
mov eax, 0xcccccccd
mov ebp, edx
mul edx
shr edx, 3
lea edi, [edx + edx*4]
shl edi, 1
sub ebp, edi
mov eax, 0x19999999
mov edi, edx
mul ebp
mov dword [esp + 0xbc], edx
mov dword [esp + 0xb8], eax
mov eax, 0xcccccccd
mul ebx
shr edx, 3
mov eax, edx
add edx, 0
mov dword [esp + 0xb4], edx
mov esi, dword [esp + 0xb8]
add esi, edx
lea ebp, [ebp + ebp*2]
lea edx, [eax + eax*4]
shl edx, 1
sub ebx, edx
lea edx, [ebx + ebp*2]
mov ebx, eax
mov eax, 0xcccccccd
mul edx
shr edx, 3
mov dword [esp + 0xb0], edx
mov ebp, esi
add esi, edx
mov eax, 0xa
mul esi
mov edx, dword [esp + 0x60]
sub edx, eax
add ebx, 0
adc edi, 0
mov ebx, dword [esp + 0xb8]
mov eax, esi
mov esi, dword [esp + 0xb4]
add ebx, esi
mov ebx, dword [esp + 0xbc]
adc ebx, edi
mov esi, dword [esp + 0xb0]
add ebp, esi
adc ebx, 0
mov ebp, dword [esp + 0x4c]
lea esi, [ebp - 1]
cmp esi, 0x14
jb 0x64b2a6e1
jmp 0x64b2a807
mov eax, ecx
mov ebx, dword [esp + 0x94]
mov ebp, dword [esp + 0x98]
mov edi, dword [esp + 0x1e4]
mov ecx, esi
jmp 0x64b2a65a
mov eax, esi
mov ecx, 0x14
call fcn.64b16720
mov ebp, edi
lea edi, [ecx + 0x30]
xchg edi, eax
mov byte [esp + esi + 0x106], al
xchg edi, eax
mov eax, dword [esp + 0x1f4]
mov esi, ebp
mov ecx, edx
mov edx, dword [esp + 0xe8]
mov ebp, dword [esp + 0x8c]
test esi, esi
jle 0x64b2a85c
lea edi, [esi - 1]
mov eax, 0xcccccccd
mul ecx
shr edx, 3
lea ebp, [edx + edx*4]
shl ebp, 1
sub ecx, ebp
cmp edi, 9
jb 0x64b2a813
jmp 0x64b2a9eb
mov esi, dword [esp + 0x6c]
sar esi, 0x10
cmp esi, 9
jle 0x64b2a872
cmp edx, 0x23
mov esi, 9
jmp 0x64b2a875
cmp edx, 0x23
je 0x64b2a9a3
mov dword [esp + 0x80], esi
lea edi, [ebx + 1]
mov ecx, eax
mov eax, dword [esp + 0x98]
cmp eax, edi
jb 0x64b2a89b
mov edx, dword [esp + 0x1e4]
jmp 0x64b2a8ef
lea ecx, [0x64b5a480]
mov dword [esp], ecx
mov edx, dword [esp + 0x1e4]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edi
call fcn.64b021c0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea edi, [eax + 1]
mov ecx, dword [esp + 0x1f4]
mov ebx, dword [esp + 0x94]
mov eax, ebp
mov edx, esi
mov ebp, dword [esp + 0x8c]
mov esi, dword [esp + 0x80]
mov byte [edx + ebx], 0x2e
cmp esi, 9
ja 0x64b2a993
lea ebx, [esi + edi]
mov dword [esp + 0x30], ebx
cmp eax, ebx
jae 0x64b2a942
mov dword [esp + 0xe8], edi
lea ecx, [0x64b5a480]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], edi
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebx
call fcn.64b021c0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov esi, dword [esp + 0x80]
mov edi, dword [esp + 0xe8]
mov dword [esp + 0x38], eax
mov dword [esp + 0x200], edx
lea ecx, [edx + edi]
mov dword [esp], ecx
lea ecx, [esp + 0x107]
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
call fcn.64b16f60
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x200]
mov ebp, dword [esp + 0x8c]
mov edi, ecx
mov esi, edx
mov ecx, dword [esp + 0x78]
mov edx, eax
mov eax, dword [esp + 0x1f4]
jmp 0x64b28ada
mov ecx, esi
mov edx, 9
call fcn.64b16740
mov ebp, ecx
mov esi, edi
test esi, esi
jle 0x64b2a9c2
lea edi, [esi - 1]
cmp edi, 9
jae 0x64b2a9df
mov ecx, ebp
lea ebp, [esp + esi + 0x106]
cmp byte [ebp], 0x30
je 0x64b2a99f
test esi, esi
jmp 0x64b2a9c4
mov ecx, ebp
jne 0x64b2a9d8
mov eax, ebx
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0x1e4]
jmp 0x64b2a976
mov ebp, ecx
jmp 0x64b2a87b
mov eax, edi
mov ecx, 9
call fcn.64b16720
mov eax, edi
mov ecx, 9
call fcn.64b16720
nop
call fcn.64b15250
jmp fcn.64b289e0