Function at 0x4a9175
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
push ebx
push esi
mov esi, ecx
mov dword [ebp - 0x54], edx
push edi
mov dword [ebp - 0x58], esi
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 8]
mov dword [ebp - 0x10], eax
mov eax, dword [esi + 0x38]
mov dword [ebp - 0x2c], eax
mov eax, dword [esi + 0x3c]
mov dword [ebp - 0x38], eax
mov eax, dword [esi + 0x40]
mov dword [ebp - 0x3c], eax
mov eax, dword [esi + 0x44]
mov dword [ebp - 0x44], eax
xor eax, eax
inc eax
mov edx, dword [esi + 0x34]
shl eax, cl
mov ecx, dword [esi + 4]
dec eax
mov dword [ebp - 0x5c], eax
xor eax, eax
mov ebx, dword [esi + 0x18]
inc eax
mov edi, dword [esi + 0x1c]
shl eax, cl
mov ecx, dword [esi + 0x2c]
dec eax
mov dword [ebp - 0x60], eax
mov eax, dword [esi]
mov dword [ebp - 0x50], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x30], eax
mov eax, dword [esi + 0x28]
mov dword [ebp - 0x34], eax
mov eax, dword [esi + 0x24]
mov dword [ebp - 0x1c], eax
mov eax, dword [esi + 0x30]
mov esi, dword [esi + 0x20]
mov dword [ebp - 0x4c], eax
xor eax, eax
mov dword [ebp - 0x18], eax
mov al, 8
sub al, byte [ebp - 0x50]
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 8], ebx
mov byte [ebp - 1], al
and ecx, dword [ebp - 0x5c]
mov eax, edx
shl eax, 4
add eax, ecx
mov dword [ebp - 0x48], ecx
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x40], eax
movzx edx, word [ecx + eax*2]
cmp edi, 0x1000000
jae 0x4a922c
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
mov dword [ebp - 0x24], ecx
cmp esi, ecx
jae 0x4a9a18
mov ebx, dword [ebp - 0x10]
mov eax, 0x800
sub eax, edx
mov edi, ecx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x40]
mov word [ebx + edx*2], ax
mov edx, ebx
mov eax, dword [ebp - 0x28]
add edx, 0xe6c
mov ebx, dword [ebp - 8]
mov dword [ebp - 0xc], edx
test eax, eax
jne 0x4a9272
cmp dword [ebp - 0x4c], 0
je 0x4a92ab
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
mov eax, ecx
mov ecx, dword [ebp - 0x30]
cmove eax, dword [ebp - 0x34]
movzx edx, byte [eax + ecx - 1]
mov cl, byte [ebp - 1]
mov eax, dword [ebp - 0x28]
and eax, dword [ebp - 0x60]
shr edx, cl
mov ecx, dword [ebp - 0x50]
shl eax, cl
mov ecx, dword [ebp - 0x24]
add edx, eax
imul eax, edx, 0x600
mov edx, dword [ebp - 0xc]
add edx, eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xc], edx
inc eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
cmp eax, 7
jae 0x4a95ea
cmp dword [ebp - 0x14], 4
movzx edx, word [edx + 2]
push 3
pop eax
cmovb eax, dword [ebp - 0x14]
sub dword [ebp - 0x14], eax
cmp ecx, 0x1000000
jae 0x4a92e6
movzx eax, byte [ebx]
mov edi, ecx
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4a9310
mov edi, eax
mov dword [ebp - 0x48], 5
mov eax, 0x800
sub eax, edx
shr eax, 5
push 4
add eax, edx
pop edx
movzx eax, ax
push edx
jmp 0x4a9329
sub edi, eax
mov dword [ebp - 0x48], 7
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
push 6
movzx eax, dx
pop edx
push edx
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x40], edx
pop ecx
mov dword [ebp - 0x24], ecx
mov word [ebx + 2], ax
mov eax, ebx
mov ebx, dword [ebp - 8]
movzx ecx, word [ecx + eax]
cmp edi, 0x1000000
jae 0x4a9357
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4a9376
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4a938a
mov edx, dword [ebp - 0x48]
sub edi, eax
sub esi, eax
mov dword [ebp - 0x40], edx
mov eax, ecx
shr eax, 5
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x24]
mov ebx, dword [ebp - 0xc]
mov word [ecx + ebx], ax
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 8]
movzx ecx, word [eax + edx*2]
cmp edi, 0x1000000
jae 0x4a93b5
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
shl edx, 2
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4a93da
mov edi, eax
mov dword [ebp - 0x24], edx
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4a93f0
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
movzx eax, cx
lea ecx, [edx + 2]
mov dword [ebp - 0x24], ecx
mov edx, ecx
mov ebx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0xc]
mov word [ecx + ebx*2], ax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 8]
movzx ecx, word [ecx + eax]
cmp edi, 0x1000000
jae 0x4a941e
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4a943d
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4a944c
sub edi, eax
sub esi, eax
mov eax, ecx
inc edx
shr eax, 5
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x24]
mov ebx, dword [ebp - 0xc]
mov word [ecx + ebx], ax
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 8]
movzx ecx, word [eax + edx*2]
cmp edi, 0x1000000
jae 0x4a9477
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
mov ebx, edx
shr eax, 0xb
imul eax, ecx
shl ebx, 2
mov dword [ebp - 0x24], ebx
cmp esi, eax
jae 0x4a94a3
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx ecx, ax
mov eax, ebx
mov dword [ebp - 0x40], eax
jmp 0x4a94bf
mov ebx, dword [ebp - 0x24]
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
add ebx, 2
movzx ecx, cx
mov eax, ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0xc]
mov word [ebx + edx*2], cx
mov ecx, ebx
mov ebx, dword [ebp - 8]
movzx ecx, word [eax + ecx]
cmp edi, 0x1000000
jae 0x4a94e6
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov edx, dword [ebp - 0x24]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4a9508
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4a951a
sub edi, eax
sub esi, eax
mov eax, ecx
inc edx
shr eax, 5
sub ecx, eax
mov dword [ebp - 0x24], edx
movzx eax, cx
mov ecx, dword [ebp - 0x40]
mov ebx, dword [ebp - 0xc]
mov word [ecx + ebx], ax
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 8]
movzx ecx, word [eax + edx*2]
cmp edi, 0x1000000
jae 0x4a9545
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
shl edx, 2
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4a956a
mov edi, eax
mov dword [ebp - 0x40], edx
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx ecx, ax
jmp 0x4a9580
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
lea eax, [edx + 2]
movzx ecx, cx
mov edx, eax
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
mov word [ebx + eax*2], cx
mov ecx, ebx
mov eax, dword [ebp - 0x40]
mov ebx, dword [ebp - 8]
movzx ecx, word [eax + ecx]
cmp edi, 0x1000000
jae 0x4a95ad
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4a95cc
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4a95db
sub edi, eax
sub esi, eax
mov eax, ecx
inc edx
shr eax, 5
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x40]
mov ebx, dword [ebp - 0xc]
mov word [ecx + ebx], ax
jmp 0x4a9a06
cmp eax, 0xa
mov ebx, dword [ebp - 0x30]
sbb eax, eax
and eax, 0xfffffffd
add eax, 6
sub dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x1c], eax
sbb eax, eax
and eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x1c]
movzx eax, byte [eax + ebx]
mov ebx, dword [ebp - 8]
add eax, eax
mov dword [ebp - 0x24], eax
and eax, 0x100
mov dword [ebp - 0x48], eax
add eax, 0x101
lea eax, [edx + eax*2]
movzx edx, word [eax]
mov dword [ebp - 0x20], eax
cmp ecx, 0x1000000
jae 0x4a9647
movzx eax, byte [ebx]
mov edi, ecx
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ecx, dword [ebp - 0x48]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4a9678
mov edi, eax
mov dword [ebp - 0x40], 2
mov eax, 0x800
not ecx
sub eax, edx
and ecx, 0x100
shr eax, 5
add eax, edx
movzx eax, ax
jmp 0x4a968d
sub edi, eax
mov dword [ebp - 0x40], 3
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
movzx eax, dx
mov edx, dword [ebp - 0x20]
mov word [edx], ax
mov eax, ecx
mov edx, dword [ebp - 0x24]
add edx, edx
and eax, edx
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
add eax, ecx
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x48], eax
movzx edx, word [edx + eax*2]
cmp edi, 0x1000000
jae 0x4a96c8
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0x40]
mov eax, edi
shr eax, 0xb
add ebx, ebx
imul eax, edx
mov dword [ebp - 0x40], ebx
cmp esi, eax
jae 0x4a96f4
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x20]
movzx eax, ax
not edx
jmp 0x4a9708
sub edi, eax
sub esi, eax
inc dword [ebp - 0x40]
mov eax, edx
shr eax, 5
sub edx, eax
movzx eax, dx
mov edx, dword [ebp - 0x20]
mov ebx, dword [ebp - 0xc]
and edx, ecx
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x20], edx
mov word [ebx + ecx*2], ax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xc]
add eax, eax
mov ebx, dword [ebp - 8]
and edx, eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x20]
add eax, edx
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x48], eax
movzx ecx, word [ecx + eax*2]
cmp edi, 0x1000000
jae 0x4a974d
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0x40]
mov eax, edi
shr eax, 0xb
add ebx, ebx
imul eax, ecx
mov dword [ebp - 0x40], ebx
mov ebx, dword [ebp - 8]
cmp esi, eax
jae 0x4a9779
mov edi, eax
not edx
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4a978a
sub edi, eax
sub esi, eax
inc dword [ebp - 0x40]
mov eax, ecx
shr eax, 5
sub ecx, eax
movzx eax, cx
and dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0xc]
mov word [edx + ecx*2], ax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
add ecx, ecx
mov edx, eax
mov dword [ebp - 0x24], ecx
and edx, ecx
mov ecx, dword [ebp - 0xc]
add eax, edx
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x48], eax
movzx ecx, word [ecx + eax*2]
cmp edi, 0x1000000
jae 0x4a97cc
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0x40]
mov eax, edi
shr eax, 0xb
add ebx, ebx
imul eax, ecx
mov dword [ebp - 0x40], ebx
mov ebx, dword [ebp - 8]
cmp esi, eax
jae 0x4a97f8
mov edi, eax
not edx
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4a9809
sub edi, eax
sub esi, eax
inc dword [ebp - 0x40]
mov eax, ecx
shr eax, 5
sub ecx, eax
movzx eax, cx
and dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0xc]
mov word [edx + ecx*2], ax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
add ecx, ecx
mov edx, eax
mov dword [ebp - 0x24], ecx
and edx, ecx
mov ecx, dword [ebp - 0xc]
add eax, edx
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x64], eax
movzx ecx, word [ecx + eax*2]
cmp edi, 0x1000000
jae 0x4a984b
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0x40]
mov eax, edi
shr eax, 0xb
add ebx, ebx
imul eax, ecx
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 8]
cmp esi, eax
jae 0x4a9877
mov edi, eax
not edx
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4a9888
sub edi, eax
sub esi, eax
inc dword [ebp - 0x48]
mov eax, ecx
shr eax, 5
sub ecx, eax
movzx eax, cx
and dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0xc]
mov word [edx + ecx*2], ax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
add ecx, ecx
mov edx, eax
mov dword [ebp - 0x24], ecx
and edx, ecx
mov ecx, dword [ebp - 0xc]
add eax, edx
mov dword [ebp - 0x40], edx
mov edx, dword [ebp - 0x48]
add eax, edx
mov dword [ebp - 0x64], eax
movzx ecx, word [ecx + eax*2]
cmp edi, 0x1000000
jae 0x4a98cf
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
add edx, edx
shr eax, 0xb
imul eax, ecx
mov dword [ebp - 0x48], edx
cmp esi, eax
jae 0x4a98f8
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx ecx, ax
mov eax, dword [ebp - 0x40]
not eax
jmp 0x4a990d
sub edi, eax
sub esi, eax
mov eax, ecx
inc edx
shr eax, 5
sub ecx, eax
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x40]
movzx ecx, cx
mov ebx, dword [ebp - 0x64]
mov edx, dword [ebp - 0xc]
and eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
mov word [edx + ebx*2], cx
mov ecx, eax
mov ebx, dword [ebp - 0x24]
mov edx, dword [ebp - 0xc]
add ebx, ebx
and ecx, ebx
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 8]
add eax, ecx
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x64], eax
movzx edx, word [edx + eax*2]
cmp edi, 0x1000000
jae 0x4a9952
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0x48]
mov eax, edi
shr eax, 0xb
add ebx, ebx
imul eax, edx
mov dword [ebp - 0x48], ebx
cmp esi, eax
jae 0x4a997b
mov edi, eax
not ecx
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
movzx eax, ax
jmp 0x4a998c
sub edi, eax
sub esi, eax
inc dword [ebp - 0x48]
mov eax, edx
shr eax, 5
sub edx, eax
movzx eax, dx
mov edx, dword [ebp - 0x64]
mov ebx, dword [ebp - 0xc]
and ecx, dword [ebp - 0x40]
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x48]
add eax, eax
mov ebx, dword [ebp - 8]
and eax, ecx
add eax, ecx
mov ecx, dword [ebp - 0xc]
add eax, edx
mov dword [ebp - 0x48], eax
movzx ecx, word [ecx + eax*2]
cmp edi, 0x1000000
jae 0x4a99cb
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0xc]
mov eax, edi
shr eax, 0xb
add edx, edx
imul eax, ecx
cmp esi, eax
jae 0x4a99f3
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0x48]
mov word [ebx + ecx*2], ax
jmp 0x4a9a06
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0x48]
inc edx
mov word [ebx + eax*2], cx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov byte [ecx + eax], dl
inc ecx
mov dword [ebp - 0x1c], ecx
jmp 0x4aa656
mov eax, edx
sub esi, ecx
shr eax, 5
sub edi, ecx
mov ecx, dword [ebp - 0x10]
sub edx, eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xc], esi
mov word [ecx + eax*2], dx
mov edx, dword [ebp - 0x14]
movzx ecx, word [ecx + edx*2 + 0x180]
cmp edi, 0x1000000
jae 0x4a9a55
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4a9a8a
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0x10]
mov word [ecx + edx*2 + 0x180], ax
add edx, 0xc
mov dword [ebp - 0x14], edx
mov eax, 0x664
jmp 0x4a9cb4
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
cmp dword [ebp - 0x4c], 0
mov eax, dword [ebp - 0x10]
mov word [eax + edx*2 + 0x180], cx
jne 0x4a9ab0
cmp dword [ebp - 0x28], 0
je 0x4aa6d9
movzx edx, word [eax + edx*2 + 0x198]
cmp edi, 0x1000000
jae 0x4a9acf
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
cmp esi, ecx
jae 0x4a9b99
mov ebx, dword [ebp - 0x10]
mov eax, 0x800
sub eax, edx
mov edi, ecx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x14]
mov word [ebx + edx*2 + 0x198], ax
lea eax, [edx + 0xf]
shl eax, 4
mov edx, ebx
add eax, dword [ebp - 0x48]
mov ebx, dword [ebp - 8]
mov dword [ebp - 0x40], eax
movzx edx, word [edx + eax*2]
cmp ecx, 0x1000000
jae 0x4a9b27
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ecx, dword [ebp - 0x40]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4a9b7f
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x10]
mov word [edx + ecx*2], ax
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
sbb eax, eax
and eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x2c]
add eax, ecx
mov al, byte [eax + edx]
mov byte [ecx + edx], al
inc ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x14], 7
mov dword [ebp - 0x1c], ecx
sbb edx, edx
and edx, 0xfffffffe
add edx, 0xb
mov dword [ebp - 0x14], edx
jmp 0x4aa65c
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 0xc], esi
shr eax, 5
sub edx, eax
mov eax, dword [ebp - 0x10]
mov word [eax + ecx*2], dx
jmp 0x4a9c9d
mov eax, edx
sub esi, ecx
shr eax, 5
sub edi, ecx
mov ecx, dword [ebp - 0x10]
sub edx, eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xc], esi
mov word [ecx + eax*2 + 0x198], dx
mov edx, eax
movzx ecx, word [ecx + edx*2 + 0x1b0]
cmp edi, 0x1000000
jae 0x4a9bd9
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4a9c06
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0x10]
mov word [ecx + edx*2 + 0x1b0], ax
mov edx, dword [ebp - 0x38]
jmp 0x4a9c94
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0x10]
mov word [eax + edx*2 + 0x1b0], cx
movzx ecx, word [eax + edx*2 + 0x1c8]
cmp edi, 0x1000000
jae 0x4a9c41
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4a9c63
mov edx, dword [ebp - 0x3c]
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4a9c7d
mov edx, dword [ebp - 0x44]
sub esi, eax
mov ebx, dword [ebp - 0x3c]
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
sub ecx, eax
mov dword [ebp - 0x44], ebx
movzx eax, cx
mov ecx, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x10]
mov word [ebx + ecx*2 + 0x1c8], ax
mov ecx, dword [ebp - 0x38]
mov ebx, dword [ebp - 8]
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x14], 7
mov eax, 0xa68
sbb ecx, ecx
and ecx, 0xfffffffd
add ecx, 0xb
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x10]
add eax, ecx
mov dword [ebp - 0x24], eax
movzx edx, word [eax]
cmp edi, 0x1000000
jae 0x4a9cd6
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
cmp esi, ecx
jae 0x4a9e34
mov eax, 0x800
mov edi, ecx
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x24]
mov word [edx], ax
mov eax, dword [ebp - 0x48]
shl eax, 4
add eax, edx
mov dword [ebp - 0x48], eax
movzx edx, word [eax + 6]
cmp ecx, 0x1000000
jae 0x4a9d23
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4a9d47
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
push 4
add eax, edx
pop edx
movzx eax, ax
push 8
jmp 0x4a9d5d
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 0xc], esi
shr eax, 5
sub edx, eax
push 6
movzx eax, dx
pop edx
push 0xa
pop ebx
mov dword [ebp - 0x40], ebx
mov ecx, ebx
mov ebx, dword [ebp - 0x48]
mov word [ebx + 6], ax
mov eax, ebx
mov ebx, dword [ebp - 8]
movzx ecx, word [ecx + eax]
cmp edi, 0x1000000
jae 0x4a9d8d
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4a9dac
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4a9dbe
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
inc edx
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x40]
mov word [ecx + ebx], ax
lea eax, [edx + edx]
mov ebx, dword [ebp - 8]
lea edx, [eax + ecx]
movzx ecx, word [edx + 4]
mov dword [ebp - 0x18], eax
cmp edi, 0x1000000
jae 0x4a9df2
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4a9e11
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4a9e25
sub esi, eax
sub edi, eax
inc dword [ebp - 0x18]
mov eax, ecx
shr eax, 5
sub ecx, eax
mov dword [ebp - 0xc], esi
movzx eax, cx
mov ecx, dword [ebp - 0x18]
mov word [edx + 4], ax
sub ecx, 8
jmp 0x4aa05b
mov eax, edx
sub edi, ecx
shr eax, 5
sub esi, ecx
sub edx, eax
mov dword [ebp - 0xc], esi
mov eax, dword [ebp - 0x24]
mov word [eax], dx
movzx edx, word [eax + 2]
cmp edi, 0x1000000
jae 0x4a9e66
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
cmp esi, ecx
jae 0x4a9fd2
mov eax, 0x800
mov edi, ecx
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x24]
mov word [edx + 2], ax
mov eax, dword [ebp - 0x48]
shl eax, 4
add eax, edx
mov dword [ebp - 0x48], eax
movzx edx, word [eax + 0x106]
cmp ecx, 0x1000000
jae 0x4a9eb7
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4a9edd
mov edi, eax
mov ebx, 0x108
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
movzx eax, ax
push 4
jmp 0x4a9ef5
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 0xc], esi
shr eax, 5
mov ebx, 0x10a
sub edx, eax
movzx eax, dx
push 6
mov dword [ebp - 0x40], ebx
mov ecx, ebx
mov ebx, dword [ebp - 0x48]
pop edx
mov word [ebx + 0x106], ax
mov eax, ebx
mov ebx, dword [ebp - 8]
movzx ecx, word [ecx + eax]
cmp edi, 0x1000000
jae 0x4a9f28
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4a9f47
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4a9f59
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
inc edx
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x40]
mov word [ebx + ecx], ax
lea eax, [edx + edx]
mov ebx, dword [ebp - 8]
lea edx, [eax + ecx]
movzx ecx, word [edx + 0x104]
mov dword [ebp - 0x18], eax
cmp edi, 0x1000000
jae 0x4a9f90
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4a9faf
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4a9fc3
sub esi, eax
sub edi, eax
inc dword [ebp - 0x18]
mov eax, ecx
shr eax, 5
sub ecx, eax
mov dword [ebp - 0xc], esi
movzx eax, cx
mov ecx, dword [ebp - 0x18]
mov word [edx + 0x104], ax
jmp 0x4aa05e
mov eax, edx
sub edi, ecx
shr eax, 5
sub esi, ecx
sub edx, eax
xor ecx, ecx
mov eax, dword [ebp - 0x24]
inc ecx
mov word [eax + 2], dx
add ecx, ecx
mov dword [ebp - 0x18], ecx
lea edx, [ecx + eax]
movzx ecx, word [edx + 0x204]
cmp edi, 0x1000000
jae 0x4aa00a
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4aa029
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4aa03a
sub edi, eax
sub esi, eax
inc dword [ebp - 0x18]
mov eax, ecx
shr eax, 5
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x18]
mov word [edx + 0x204], ax
mov eax, dword [ebp - 0x24]
cmp ecx, 0x100
jb 0x4a9fe7
mov dword [ebp - 8], ebx
sub ecx, 0xf0
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x14], 0xc
jb 0x4aa5d5
cmp ecx, 4
push 3
pop eax
cmovb eax, ecx
shl eax, 7
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x24], eax
movzx ecx, word [eax + 0x362]
cmp edi, 0x1000000
jae 0x4aa09b
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4aa0c1
mov edi, eax
mov ebx, 0x364
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
push 4
jmp 0x4aa0d9
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
mov ebx, 0x366
sub ecx, eax
movzx eax, cx
push 6
mov dword [ebp - 0x48], ebx
mov ecx, ebx
mov ebx, dword [ebp - 0x24]
pop edx
mov word [ebx + 0x362], ax
mov eax, ebx
mov ebx, dword [ebp - 8]
movzx ecx, word [ecx + eax]
cmp edi, 0x1000000
jae 0x4aa10c
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4aa12b
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4aa13d
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
inc edx
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x48]
add edx, edx
mov ebx, dword [ebp - 0x24]
mov word [ecx + ebx], ax
mov eax, dword [ebp - 0x24]
mov ebx, dword [ebp - 8]
add eax, 0x360
add eax, edx
mov dword [ebp - 0x64], eax
movzx ecx, word [eax]
cmp edi, 0x1000000
jae 0x4aa176
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4aa195
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4aa1a7
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
inc edx
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x64]
add edx, edx
mov word [ecx], ax
mov eax, dword [ebp - 0x24]
add eax, 0x360
add eax, edx
mov dword [ebp - 0x64], eax
movzx ecx, word [eax]
cmp edi, 0x1000000
jae 0x4aa1d9
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4aa1f8
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4aa20a
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
inc edx
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x64]
add edx, edx
mov word [ecx], ax
mov eax, dword [ebp - 0x24]
add eax, 0x360
add eax, edx
mov dword [ebp - 0x64], eax
movzx ecx, word [eax]
cmp edi, 0x1000000
jae 0x4aa23c
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4aa25b
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4aa26d
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
inc edx
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x64]
add edx, edx
mov word [ecx], ax
mov eax, dword [ebp - 0x24]
add eax, 0x360
add eax, edx
mov dword [ebp - 0x64], eax
movzx ecx, word [eax]
cmp edi, 0x1000000
jae 0x4aa29f
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4aa2be
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4aa2d0
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
inc edx
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x64]
sub edx, 0x40
mov word [ecx], ax
cmp edx, 4
jb 0x4aa59a
mov eax, edx
mov ecx, edx
shr ecx, 1
and edx, 1
dec ecx
mov dword [ebp - 0x64], eax
or edx, 2
cmp eax, 0xe
jae 0x4aa393
mov ebx, dword [ebp - 0x10]
shl edx, cl
add ebx, 0x55e
mov eax, edx
sub eax, dword [ebp - 0x64]
lea eax, [ebx + eax*2]
mov dword [ebp - 0x64], eax
xor eax, eax
inc eax
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 8]
add eax, eax
mov dword [ebp - 0x44], eax
add eax, dword [ebp - 0x64]
mov dword [ebp - 0x40], eax
movzx eax, word [eax]
mov dword [ebp - 0x24], eax
cmp edi, 0x1000000
jae 0x4aa342
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, dword [ebp - 0x24]
cmp esi, eax
jae 0x4aa361
mov edi, eax
mov eax, 0x800
sub eax, dword [ebp - 0x24]
shr eax, 5
add eax, dword [ebp - 0x24]
jmp 0x4aa377
or edx, dword [ebp - 0x48]
sub edi, eax
sub esi, eax
mov eax, dword [ebp - 0x24]
inc dword [ebp - 0x44]
shr eax, 5
sub dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov ebx, dword [ebp - 0x40]
shl dword [ebp - 0x48], 1
movzx eax, ax
mov word [ebx], ax
mov eax, dword [ebp - 0x44]
sub ecx, 1
jne 0x4aa317
mov dword [ebp - 0xc], esi
jmp 0x4aa59a
sub ecx, 4
cmp edi, 0x1000000
jae 0x4aa3aa
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
shr edi, 1
lea edx, [edx*2 + 1]
sub esi, edi
mov eax, esi
shr eax, 0x1f
neg eax
add edx, eax
and eax, edi
add esi, eax
sub ecx, 1
jne 0x4aa396
mov eax, dword [ebp - 0x10]
shl edx, 4
mov dword [ebp - 8], ebx
mov dword [ebp - 0xc], esi
movzx ecx, word [eax + 0x646]
cmp edi, 0x1000000
jae 0x4aa3f4
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4aa421
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
push 4
pop ecx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x40], ecx
mov ecx, 0x648
movzx eax, ax
jmp 0x4aa443
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
or edx, 1
sub ecx, eax
movzx eax, cx
push 6
pop ecx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x40], ecx
mov ecx, 0x64a
mov ebx, dword [ebp - 0x10]
mov word [ebx + 0x646], ax
mov eax, ebx
mov ebx, dword [ebp - 8]
movzx ecx, word [ecx + eax]
cmp edi, 0x1000000
jae 0x4aa470
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4aa48f
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4aa4a6
sub esi, eax
sub edi, eax
inc dword [ebp - 0x40]
mov eax, ecx
shr eax, 5
or edx, 2
sub ecx, eax
mov dword [ebp - 0xc], esi
movzx eax, cx
mov ebx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x48]
mov word [ecx + ebx + 0x644], ax
mov ecx, ebx
mov eax, dword [ebp - 0x40]
add ecx, 0x644
mov ebx, dword [ebp - 8]
add eax, eax
mov dword [ebp - 0x40], eax
add eax, ecx
mov dword [ebp - 0x64], eax
movzx ecx, word [eax]
cmp edi, 0x1000000
jae 0x4aa4e9
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4aa508
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4aa51f
sub esi, eax
sub edi, eax
inc dword [ebp - 0x40]
mov eax, ecx
shr eax, 5
or edx, 4
sub ecx, eax
mov dword [ebp - 0xc], esi
movzx eax, cx
mov ecx, dword [ebp - 0x64]
mov word [ecx], ax
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x10]
movzx ecx, word [ecx + eax*2 + 0x644]
cmp edi, 0x1000000
jae 0x4aa54d
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4aa56c
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4aa580
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
or edx, 8
sub ecx, eax
movzx eax, cx
mov ebx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x40]
mov word [ebx + ecx*2 + 0x644], ax
mov ebx, dword [ebp - 8]
cmp edx, 0xffffffff
je 0x4aa66e
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
lea eax, [edx + 1]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x3c], ecx
test eax, eax
jne 0x4aa5be
cmp edx, dword [ebp - 0x28]
jmp 0x4aa5c0
cmp edx, eax
jae 0x4aa6d0
cmp dword [ebp - 0x14], 0x13
sbb eax, eax
and eax, 0xfffffffd
add eax, 0xa
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x54]
add ecx, 2
mov dword [ebp - 0x18], ecx
sub eax, dword [ebp - 0x1c]
je 0x4aa6d0
cmp eax, ecx
mov edx, ecx
cmovb edx, eax
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x2c]
sbb ecx, ecx
add dword [ebp - 0x28], edx
and ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x2c]
sub dword [ebp - 0x18], edx
add ecx, eax
mov eax, dword [ebp - 0x34]
sub eax, ecx
cmp edx, eax
ja 0x4aa630
mov ebx, dword [ebp - 0x30]
add ebx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x1c]
add dword [ebp - 0x1c], edx
lea eax, [ebx + edx]
mov dword [ebp - 0x64], eax
mov edx, eax
mov al, byte [ecx + ebx]
mov byte [ebx], al
inc ebx
cmp ebx, edx
jne 0x4aa624
jmp 0x4aa653
mov ebx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x30]
mov al, byte [ecx + esi]
mov byte [ebx + esi], al
lea eax, [ecx + 1]
xor ecx, ecx
inc ebx
cmp eax, dword [ebp - 0x34]
cmovne ecx, eax
sub edx, 1
jne 0x4aa636
mov esi, dword [ebp - 0xc]
mov dword [ebp - 0x1c], ebx
mov ecx, dword [ebp - 0x1c]
mov ebx, dword [ebp - 8]
mov edx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x54]
jae 0x4aa67f
cmp ebx, dword [ebp + 8]
jae 0x4aa67f
mov ecx, dword [ebp - 0x28]
jmp 0x4a91fe
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
add ecx, 0x112
sub edx, 0xc
jmp 0x4aa682
mov ecx, dword [ebp - 0x18]
cmp edi, 0x1000000
jae 0x4aa696
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov eax, dword [ebp - 0x58]
mov dword [eax + 0x48], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [eax + 0x24], ecx
mov ecx, dword [ebp - 0x28]
mov dword [eax + 0x18], ebx
mov ebx, dword [ebp - 0x3c]
mov dword [eax + 0x2c], ecx
mov ecx, dword [ebp - 0x2c]
mov dword [eax + 0x38], ecx
mov ecx, dword [ebp - 0x38]
mov dword [eax + 0x40], ebx
mov ebx, dword [ebp - 0x44]
mov dword [eax + 0x1c], edi
mov dword [eax + 0x20], esi
mov dword [eax + 0x3c], ecx
mov dword [eax + 0x44], ebx
mov dword [eax + 0x34], edx
xor eax, eax
jmp 0x4aa6dc
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x1c]
mov dword [eax + 0x24], ecx
xor eax, eax
inc eax
pop edi
pop esi
pop ebx
leave
ret 4