Function at 0x405e32
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
mov eax, ecx
mov dword [ebp - 0x50], edx
xor edx, edx
mov dword [ebp - 0x3c], eax
inc edx
push ebx
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0xc], ecx
mov ecx, dword [eax + 0x38]
mov dword [ebp - 0x24], ecx
mov ecx, dword [eax + 0x3c]
mov ebx, dword [eax + 0x34]
mov dword [ebp - 0x30], ecx
mov ecx, dword [eax + 0x40]
mov dword [ebp - 0x34], ecx
mov ecx, dword [eax + 0x44]
mov dword [ebp - 0x38], ecx
mov ecx, dword [eax + 8]
shl edx, cl
mov ecx, dword [eax + 4]
dec edx
mov dword [ebp - 0x54], edx
xor edx, edx
inc edx
mov dword [ebp - 0x10], ebx
shl edx, cl
mov ecx, dword [eax]
dec edx
mov dword [ebp - 0x48], ecx
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x5c], edx
mov edx, dword [eax + 0x30]
mov dword [ebp - 0x28], ecx
mov ecx, dword [eax + 0x28]
mov dword [ebp - 0x44], edx
xor edx, edx
push esi
mov esi, dword [eax + 0x20]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [eax + 0x24]
push edi
mov edi, dword [eax + 0x1c]
mov dword [ebp - 0x14], ecx
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x18], edx
mov edx, dword [eax + 0x18]
mov al, 8
sub al, byte [ebp - 0x48]
movzx eax, al
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], edx
mov dword [ebp - 0x58], eax
and ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0xc]
shl ebx, 4
add ebx, ecx
mov dword [ebp - 0x20], ecx
movzx ecx, word [eax + ebx*2]
cmp edi, 0x1000000
jae 0x405ee7
movzx eax, byte [edx]
shl esi, 8
shl edi, 8
or esi, eax
inc edx
mov dword [ebp - 4], edx
mov edx, edi
shr edx, 0xb
imul edx, ecx
mov dword [ebp - 0x4c], edx
cmp esi, edx
jae 0x406620
mov eax, 0x800
mov edi, edx
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
mov word [ecx + ebx*2], ax
lea ebx, [ecx + 0xe6c]
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x405f21
cmp dword [ebp - 0x44], eax
je 0x405f54
mov ecx, dword [ebp - 0x14]
test ecx, ecx
mov eax, ecx
mov ecx, dword [ebp - 0x28]
cmove eax, dword [ebp - 0x2c]
movzx edx, byte [eax + ecx - 1]
mov cl, byte [ebp - 0x58]
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x5c]
shr edx, cl
mov ecx, dword [ebp - 0x48]
shl eax, cl
add edx, eax
imul eax, edx, 0x600
mov edx, dword [ebp - 0x4c]
add ebx, eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x1c], eax
cmp ecx, 7
jae 0x4061f8
cmp ecx, 4
push 3
pop eax
cmovb eax, ecx
sub ecx, eax
mov dword [ebp - 0x10], ecx
movzx ecx, word [ebx + 2]
cmp edx, 0x1000000
jae 0x405f92
mov edi, edx
shl esi, 8
mov edx, dword [ebp - 4]
shl edi, 8
movzx eax, byte [edx]
or esi, eax
inc edx
mov dword [ebp - 4], edx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x405fb4
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [ebx + 2], ax
push 2
jmp 0x405fc5
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [ebx + 2], cx
push 3
pop edx
add edx, edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x405fe5
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406005
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x406015
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
add edx, edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x406034
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406054
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x406064
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
add edx, edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x406083
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4060a3
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x4060b3
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
add edx, edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x4060d2
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4060f2
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x406102
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
add edx, edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x406121
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406141
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x406151
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
add edx, edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x406170
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406190
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x4061a0
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
lea ecx, [edx + edx]
movzx edx, word [ecx + ebx]
cmp edi, 0x1000000
jae 0x4061c0
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4061e3
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ecx + ebx], ax
jmp 0x40660e
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov word [ecx + ebx], dx
inc ecx
jmp 0x40660e
cmp ecx, 0xa
sbb eax, eax
and eax, 0xfffffffd
add eax, 6
sub ecx, eax
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x24]
sbb eax, eax
and eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x24]
add eax, ecx
mov ecx, dword [ebp - 0x28]
movzx eax, byte [eax + ecx]
add eax, eax
mov ecx, eax
mov dword [ebp - 8], eax
and ecx, 0x100
movzx eax, word [ebx + ecx*2 + 0x202]
mov dword [ebp - 0x4c], eax
cmp edx, 0x1000000
jae 0x406253
mov edi, edx
shl esi, 8
mov edx, dword [ebp - 4]
shl edi, 8
movzx eax, byte [edx]
or esi, eax
inc edx
mov dword [ebp - 4], edx
mov edx, dword [ebp - 0x4c]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x40627e
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + ecx*2 + 0x202], ax
not ecx
push 2
jmp 0x406293
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov word [ebx + ecx*2 + 0x202], dx
push 3
shl dword [ebp - 8], 1
and ecx, 0x100
mov eax, ecx
and eax, dword [ebp - 8]
pop edx
mov dword [ebp - 0x4c], eax
add eax, ecx
add eax, edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x40], eax
movzx edx, word [ebx + eax*2]
cmp edi, 0x1000000
jae 0x4062cc
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4062fc
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x40]
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x20]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x4c]
not eax
and ecx, eax
jmp 0x40631b
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov eax, dword [ebp - 0x40]
and ecx, dword [ebp - 0x4c]
mov word [ebx + eax*2], dx
mov eax, dword [ebp - 0x20]
lea edx, [eax*2 + 1]
shl dword [ebp - 8], 1
mov eax, ecx
and eax, dword [ebp - 8]
mov dword [ebp - 0x40], eax
add eax, ecx
add eax, edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x4c], eax
movzx edx, word [ebx + eax*2]
cmp edi, 0x1000000
jae 0x40634d
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x40637d
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x4c]
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x20]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x40]
not eax
and ecx, eax
jmp 0x40639c
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov eax, dword [ebp - 0x4c]
and ecx, dword [ebp - 0x40]
mov word [ebx + eax*2], dx
mov eax, dword [ebp - 0x20]
lea edx, [eax*2 + 1]
shl dword [ebp - 8], 1
mov eax, ecx
and eax, dword [ebp - 8]
mov dword [ebp - 0x40], eax
add eax, ecx
add eax, edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x4c], eax
movzx edx, word [ebx + eax*2]
cmp edi, 0x1000000
jae 0x4063ce
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4063fe
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x4c]
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x20]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x40]
not eax
and ecx, eax
jmp 0x40641d
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov eax, dword [ebp - 0x4c]
and ecx, dword [ebp - 0x40]
mov word [ebx + eax*2], dx
mov eax, dword [ebp - 0x20]
lea edx, [eax*2 + 1]
shl dword [ebp - 8], 1
mov eax, ecx
and eax, dword [ebp - 8]
mov dword [ebp - 0x40], eax
add eax, ecx
add eax, edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x4c], eax
movzx edx, word [ebx + eax*2]
cmp edi, 0x1000000
jae 0x40644f
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x40647f
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x4c]
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x20]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x40]
not eax
and ecx, eax
jmp 0x40649e
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov eax, dword [ebp - 0x4c]
and ecx, dword [ebp - 0x40]
mov word [ebx + eax*2], dx
mov eax, dword [ebp - 0x20]
lea edx, [eax*2 + 1]
shl dword [ebp - 8], 1
mov eax, ecx
and eax, dword [ebp - 8]
mov dword [ebp - 0x40], eax
add eax, ecx
add eax, edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x4c], eax
movzx edx, word [ebx + eax*2]
cmp edi, 0x1000000
jae 0x4064d0
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406500
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x4c]
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x20]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x40]
not eax
and ecx, eax
jmp 0x40651f
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov eax, dword [ebp - 0x4c]
and ecx, dword [ebp - 0x40]
mov word [ebx + eax*2], dx
mov eax, dword [ebp - 0x20]
lea edx, [eax*2 + 1]
shl dword [ebp - 8], 1
mov eax, ecx
and eax, dword [ebp - 8]
mov dword [ebp - 0x40], eax
add eax, ecx
add eax, edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x4c], eax
movzx edx, word [ebx + eax*2]
cmp edi, 0x1000000
jae 0x406551
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406583
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x4c]
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x20]
add eax, eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x40]
not eax
and ecx, eax
jmp 0x4065a5
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov eax, dword [ebp - 0x4c]
and ecx, dword [ebp - 0x40]
mov word [ebx + eax*2], dx
mov eax, dword [ebp - 0x20]
lea eax, [eax*2 + 1]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 8]
lea edx, [eax + eax]
and edx, ecx
add edx, ecx
add edx, dword [ebp - 0x20]
movzx ecx, word [ebx + edx*2]
cmp edi, 0x1000000
jae 0x4065cf
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4065f5
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x20]
lea ecx, [eax + eax]
jmp 0x40660e
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0x20]
mov word [ebx + edx*2], cx
lea ecx, [eax*2 + 1]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov byte [edx + eax], cl
inc edx
mov dword [ebp - 0x14], edx
jmp 0x4071aa
mov eax, ecx
sub esi, edx
shr eax, 5
sub edi, edx
mov edx, dword [ebp - 0x10]
sub ecx, eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 8], esi
mov word [eax + ebx*2], cx
movzx ecx, word [eax + edx*2 + 0x180]
mov ebx, dword [ebp - 4]
cmp edi, 0x1000000
jae 0x40665d
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406690
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
mov word [ecx + edx*2 + 0x180], ax
lea ebx, [ecx + 0x664]
add edx, 0xc
jmp 0x4068b5
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
cmp dword [ebp - 0x44], 0
mov eax, dword [ebp - 0xc]
mov word [eax + edx*2 + 0x180], cx
jne 0x4066b6
cmp dword [ebp - 0x1c], 0
je 0x40722f
movzx edx, word [eax + edx*2 + 0x198]
cmp edi, 0x1000000
jae 0x4066d5
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 4], ebx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
cmp esi, ecx
jae 0x40679e
mov ebx, dword [ebp - 0xc]
mov eax, 0x800
sub eax, edx
mov edi, ecx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x10]
mov word [ebx + edx*2 + 0x198], ax
lea ebx, [edx + 0xf]
mov eax, dword [ebp - 0xc]
shl ebx, 4
add ebx, dword [ebp - 0x20]
movzx edx, word [eax + ebx*2]
cmp ecx, 0x1000000
jae 0x40672b
mov ecx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [ecx]
or esi, eax
inc ecx
mov dword [ebp - 4], ecx
mov ecx, dword [ebp - 0xc]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406784
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x14]
cmp edx, dword [ebp - 0x24]
mov word [ecx + ebx*2], ax
mov ecx, dword [ebp - 0x28]
sbb eax, eax
and eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x24]
add eax, edx
mov al, byte [eax + ecx]
mov byte [edx + ecx], al
inc edx
mov ecx, dword [ebp - 0x1c]
inc ecx
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x10], 7
mov dword [ebp - 0x1c], ecx
sbb ebx, ebx
and ebx, 0xfffffffe
add ebx, 0xb
mov dword [ebp - 0x10], ebx
jmp 0x4071b0
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ecx + ebx*2], dx
mov edx, dword [ebp - 0x10]
jmp 0x4068a4
mov eax, edx
sub esi, ecx
shr eax, 5
sub edi, ecx
mov ecx, dword [ebp - 0xc]
sub edx, eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 8], esi
mov word [ecx + eax*2 + 0x198], dx
mov edx, eax
movzx ecx, word [ecx + edx*2 + 0x1b0]
cmp edi, 0x1000000
jae 0x4067de
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x40680b
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
mov word [ecx + edx*2 + 0x1b0], ax
mov eax, dword [ebp - 0x30]
jmp 0x40689b
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0xc]
mov word [eax + edx*2 + 0x1b0], cx
movzx ecx, word [eax + edx*2 + 0x1c8]
cmp edi, 0x1000000
jae 0x406846
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406870
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
mov word [ecx + edx*2 + 0x1c8], ax
mov eax, dword [ebp - 0x34]
jmp 0x406895
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0xc]
mov word [eax + edx*2 + 0x1c8], cx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x30]
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x24]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x24], eax
cmp edx, 7
lea ebx, [ecx + 0xa68]
sbb edx, edx
and edx, 0xfffffffd
add edx, 0xb
mov dword [ebp - 0x10], edx
movzx edx, word [ebx]
cmp edi, 0x1000000
jae 0x4068d8
mov ecx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [ecx]
or esi, eax
inc ecx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ecx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
cmp esi, ecx
jae 0x406a18
mov eax, 0x800
mov edi, ecx
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx], ax
mov eax, dword [ebp - 0x20]
shl eax, 4
add ebx, eax
movzx edx, word [ebx + 6]
cmp ecx, 0x1000000
jae 0x406922
mov ecx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [ecx]
or esi, eax
inc ecx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ecx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406944
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + 6], ax
push 2
jmp 0x406958
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ebx + 6], dx
push 3
pop edx
add edx, edx
movzx ecx, word [edx + ebx + 4]
cmp edi, 0x1000000
jae 0x40697c
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x40699d
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx + 4], ax
jmp 0x4069b1
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov word [edx + ebx + 4], cx
inc edx
add edx, edx
mov dword [ebp - 0x18], edx
movzx ecx, word [edx + ebx + 4]
cmp edi, 0x1000000
jae 0x4069db
mov edx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [edx]
or esi, eax
inc edx
mov dword [ebp - 4], edx
mov edx, dword [ebp - 0x18]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4069fc
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx + 4], ax
jmp 0x406a10
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov word [edx + ebx + 4], cx
inc edx
sub edx, 8
jmp 0x406c0c
mov eax, edx
sub edi, ecx
shr eax, 5
sub esi, ecx
sub edx, eax
mov dword [ebp - 8], esi
mov word [ebx], dx
movzx edx, word [ebx + 2]
cmp edi, 0x1000000
jae 0x406a4a
mov ecx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [ecx]
or esi, eax
inc ecx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ecx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
cmp esi, ecx
jae 0x406b87
mov eax, 0x800
mov edi, ecx
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + 2], ax
mov eax, dword [ebp - 0x20]
shl eax, 4
add eax, 0x104
add ebx, eax
movzx edx, word [ebx + 2]
cmp ecx, 0x1000000
jae 0x406a9a
mov ecx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [ecx]
or esi, eax
inc ecx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ecx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406abc
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + 2], ax
push 2
jmp 0x406ad0
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ebx + 2], dx
push 3
pop edx
add edx, edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x406af3
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406b13
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x406b26
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
add edx, edx
mov dword [ebp - 0x18], edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x406b4f
mov edx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [edx]
or esi, eax
inc edx
mov dword [ebp - 4], edx
mov edx, dword [ebp - 0x18]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406b72
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x406c0f
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
jmp 0x406c09
mov eax, edx
sub edi, ecx
shr eax, 5
sub esi, ecx
sub edx, eax
mov word [ebx + 2], dx
xor edx, edx
inc edx
add edx, edx
mov dword [ebp - 0x18], edx
movzx ecx, word [edx + ebx + 0x204]
cmp edi, 0x1000000
jae 0x406bc3
mov edx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [edx]
or esi, eax
inc edx
mov dword [ebp - 4], edx
mov edx, dword [ebp - 0x18]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406be7
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx + 0x204], ax
jmp 0x406bfb
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx + 0x204], cx
inc edx
cmp edx, 0x100
jb 0x406b99
sub edx, 0xf0
mov dword [ebp - 8], esi
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x10], 0xc
mov dword [ebp - 0x20], edi
jb 0x407129
mov ecx, dword [ebp - 0xc]
cmp edx, 4
push 3
pop eax
cmovb eax, edx
add ecx, 0x360
shl eax, 7
add ecx, eax
movzx edx, word [ecx + 2]
cmp edi, 0x1000000
jae 0x406c54
mov ebx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [ebx]
or esi, eax
inc ebx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406c76
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ecx + 2], ax
push 2
jmp 0x406c8a
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ecx + 2], dx
push 3
pop ebx
add ebx, ebx
movzx edx, word [ebx + ecx]
cmp edi, 0x1000000
jae 0x406cad
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406ccd
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + ecx], ax
jmp 0x406ce0
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ebx + ecx], dx
inc ebx
add ebx, ebx
movzx edx, word [ebx + ecx]
cmp edi, 0x1000000
jae 0x406d02
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406d22
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + ecx], ax
jmp 0x406d35
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ebx + ecx], dx
inc ebx
add ebx, ebx
movzx edx, word [ebx + ecx]
cmp edi, 0x1000000
jae 0x406d57
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406d77
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + ecx], ax
jmp 0x406d8a
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ebx + ecx], dx
inc ebx
add ebx, ebx
movzx edx, word [ebx + ecx]
cmp edi, 0x1000000
jae 0x406dac
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406dcc
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + ecx], ax
jmp 0x406ddf
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ebx + ecx], dx
inc ebx
lea edx, [ebx + ebx]
movzx ebx, word [edx + ecx]
cmp edi, 0x1000000
jae 0x406e02
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ebx
cmp esi, eax
jae 0x406e22
mov edi, eax
mov eax, 0x800
sub eax, ebx
shr eax, 5
add eax, ebx
mov word [edx + ecx], ax
jmp 0x406e35
sub esi, eax
sub edi, eax
mov eax, ebx
mov dword [ebp - 8], esi
shr eax, 5
sub ebx, eax
mov word [edx + ecx], bx
inc edx
sub edx, 0x40
mov dword [ebp - 0x20], edi
cmp edx, 4
jb 0x4070ee
mov ecx, edx
mov ebx, edx
shr ecx, 1
and edx, 1
dec ecx
or edx, 2
mov dword [ebp - 8], ecx
cmp ebx, 0xe
jae 0x406ef9
shl edx, cl
mov eax, edx
sub eax, ebx
mov ebx, dword [ebp - 0xc]
lea ebx, [ebx + eax*2]
xor eax, eax
add ebx, 0x55e
inc eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x20], eax
add eax, eax
mov dword [ebp - 0x38], eax
movzx ebx, word [eax + ebx]
cmp edi, 0x1000000
jae 0x406e9a
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov ecx, dword [ebp - 0x40]
mov eax, edi
shr eax, 0xb
imul eax, ebx
cmp esi, eax
jae 0x406ec5
mov edi, eax
mov eax, 0x800
sub eax, ebx
shr eax, 5
add eax, ebx
mov ebx, dword [ebp - 0x38]
mov word [ebx + ecx], ax
mov eax, ebx
mov ebx, dword [ebp - 0x20]
jmp 0x406edd
sub edi, eax
sub esi, eax
mov eax, ebx
shr eax, 5
sub ebx, eax
mov eax, dword [ebp - 0x38]
mov word [eax + ecx], bx
inc eax
mov ebx, dword [ebp - 0x20]
or edx, ebx
mov ecx, dword [ebp - 8]
add ebx, ebx
dec ecx
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x40]
mov dword [ebp - 8], ecx
jne 0x406e78
mov dword [ebp - 0x20], edi
mov dword [ebp - 8], esi
jmp 0x4070ee
sub ecx, 4
mov ebx, dword [ebp - 4]
cmp edi, 0x1000000
jae 0x406f16
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 4], ebx
shr edi, 1
lea edx, [edx*2 + 1]
sub esi, edi
mov eax, esi
shr eax, 0x1f
neg eax
add edx, eax
and eax, edi
add esi, eax
dec ecx
jne 0x406efc
mov eax, dword [ebp - 0xc]
shl edx, 4
mov dword [ebp - 8], esi
movzx ecx, word [eax + 0x646]
cmp edi, 0x1000000
jae 0x406f5b
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406f85
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
push 2
mov word [ecx + 0x646], ax
mov eax, ecx
jmp 0x406fa2
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0xc]
push 3
or edx, 1
mov word [eax + 0x646], cx
pop ebx
add ebx, ebx
movzx ecx, word [ebx + eax + 0x644]
cmp edi, 0x1000000
jae 0x406fc9
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406ff2
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
mov word [ebx + ecx + 0x644], ax
mov eax, ecx
jmp 0x40700f
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0xc]
mov word [ebx + eax + 0x644], cx
inc ebx
or edx, 2
add ebx, ebx
movzx ecx, word [ebx + eax + 0x644]
cmp edi, 0x1000000
jae 0x407035
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x40705e
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
mov word [ebx + ecx + 0x644], ax
mov eax, ecx
jmp 0x40707b
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0xc]
mov word [ebx + eax + 0x644], cx
inc ebx
or edx, 4
movzx ecx, word [eax + ebx*2 + 0x644]
cmp edi, 0x1000000
jae 0x40709f
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4070c6
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
mov word [ecx + ebx*2 + 0x644], ax
jmp 0x4070e2
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0xc]
or edx, 8
mov word [eax + ebx*2 + 0x644], cx
mov dword [ebp - 0x20], edi
cmp edx, 0xffffffff
je 0x407215
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
lea eax, [edx + 1]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x407112
cmp edx, dword [ebp - 0x1c]
jmp 0x407114
cmp edx, eax
jae 0x407226
cmp dword [ebp - 0x10], 0x13
sbb eax, eax
and eax, 0xfffffffd
add eax, 0xa
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x50]
add ebx, 2
mov ecx, dword [ebp - 0x14]
sub eax, ecx
je 0x407229
cmp eax, ebx
mov edx, ebx
cmovb edx, eax
cmp ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
sbb ecx, ecx
add dword [ebp - 0x1c], edx
and ecx, dword [ebp - 0x2c]
sub ebx, edx
sub ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x14]
sub eax, ecx
mov dword [ebp - 0x18], ebx
cmp edx, eax
ja 0x407183
mov ebx, dword [ebp - 0x28]
add ebx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x14]
add dword [ebp - 0x14], edx
lea eax, [ebx + edx]
mov dword [ebp - 0x4c], eax
mov edx, eax
mov al, byte [ecx + ebx]
mov byte [ebx], al
inc ebx
cmp ebx, edx
jne 0x407177
jmp 0x4071a7
mov ebx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x28]
mov edi, dword [ebp - 0x2c]
mov al, byte [ecx + esi]
mov byte [ebx + esi], al
inc ebx
inc ecx
xor eax, eax
cmp ecx, edi
cmove ecx, eax
dec edx
jne 0x40718c
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0x14], ebx
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x10]
cmp edx, dword [ebp - 0x50]
jae 0x4071c1
mov edx, dword [ebp - 4]
cmp edx, dword [ebp + 8]
jb 0x405ebe
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 4]
cmp edi, 0x1000000
jae 0x4071db
movzx eax, byte [ecx]
shl esi, 8
shl edi, 8
or esi, eax
inc ecx
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x18], ecx
mov ecx, dword [ebp - 0x14]
mov dword [eax + 0x24], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [eax + 0x2c], ecx
mov ecx, dword [ebp - 0x24]
mov dword [eax + 0x1c], edi
mov dword [eax + 0x20], esi
mov dword [eax + 0x48], edx
mov dword [eax + 0x38], ecx
mov ecx, dword [ebp - 0x30]
mov dword [eax + 0x3c], ecx
mov ecx, dword [ebp - 0x34]
mov dword [eax + 0x40], ecx
mov ecx, dword [ebp - 0x38]
mov dword [eax + 0x44], ecx
mov dword [eax + 0x34], ebx
xor eax, eax
jmp 0x407232
mov edx, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x10]
add edx, 0x112
sub ebx, 0xc
jmp 0x4071c4
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x24], ecx
xor eax, eax
inc eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4