Function at 0x4ce650
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
push ebx
push esi
mov esi, ecx
mov dword [ebp - 0x54], edx
push edi
mov dword [ebp - 0x58], esi
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 8]
mov dword [ebp - 0x10], eax
mov eax, dword [esi + 0x38]
mov dword [ebp - 0x2c], eax
mov eax, dword [esi + 0x3c]
mov dword [ebp - 0x38], eax
mov eax, dword [esi + 0x40]
mov dword [ebp - 0x3c], eax
mov eax, dword [esi + 0x44]
mov dword [ebp - 0x44], eax
xor eax, eax
inc eax
mov edx, dword [esi + 0x34]
shl eax, cl
mov ecx, dword [esi + 4]
dec eax
mov dword [ebp - 0x5c], eax
xor eax, eax
mov ebx, dword [esi + 0x18]
inc eax
mov edi, dword [esi + 0x1c]
shl eax, cl
mov ecx, dword [esi + 0x2c]
dec eax
mov dword [ebp - 0x60], eax
mov eax, dword [esi]
mov dword [ebp - 0x50], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x30], eax
mov eax, dword [esi + 0x28]
mov dword [ebp - 0x34], eax
mov eax, dword [esi + 0x24]
mov dword [ebp - 0x1c], eax
mov eax, dword [esi + 0x30]
mov esi, dword [esi + 0x20]
mov dword [ebp - 0x4c], eax
xor eax, eax
mov dword [ebp - 0x18], eax
mov al, 8
sub al, byte [ebp - 0x50]
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 8], ebx
mov byte [ebp - 1], al
and ecx, dword [ebp - 0x5c]
mov eax, edx
shl eax, 4
add eax, ecx
mov dword [ebp - 0x48], ecx
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x40], eax
movzx edx, word [ecx + eax*2]
cmp edi, 0x1000000
jae 0x4ce707
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
mov dword [ebp - 0x24], ecx
cmp esi, ecx
jae 0x4ceef3
mov ebx, dword [ebp - 0x10]
mov eax, 0x800
sub eax, edx
mov edi, ecx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x40]
mov word [ebx + edx*2], ax
mov edx, ebx
mov eax, dword [ebp - 0x28]
add edx, 0xe6c
mov ebx, dword [ebp - 8]
mov dword [ebp - 0xc], edx
test eax, eax
jne 0x4ce74d
cmp dword [ebp - 0x4c], 0
je 0x4ce786
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
mov eax, ecx
mov ecx, dword [ebp - 0x30]
cmove eax, dword [ebp - 0x34]
movzx edx, byte [eax + ecx - 1]
mov cl, byte [ebp - 1]
mov eax, dword [ebp - 0x28]
and eax, dword [ebp - 0x60]
shr edx, cl
mov ecx, dword [ebp - 0x50]
shl eax, cl
mov ecx, dword [ebp - 0x24]
add edx, eax
imul eax, edx, 0x600
mov edx, dword [ebp - 0xc]
add edx, eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xc], edx
inc eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
cmp eax, 7
jae 0x4ceac5
cmp dword [ebp - 0x14], 4
movzx edx, word [edx + 2]
push 3
pop eax
cmovb eax, dword [ebp - 0x14]
sub dword [ebp - 0x14], eax
cmp ecx, 0x1000000
jae 0x4ce7c1
movzx eax, byte [ebx]
mov edi, ecx
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4ce7eb
mov edi, eax
mov dword [ebp - 0x48], 5
mov eax, 0x800
sub eax, edx
shr eax, 5
push 4
add eax, edx
pop edx
movzx eax, ax
push edx
jmp 0x4ce804
sub edi, eax
mov dword [ebp - 0x48], 7
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
push 6
movzx eax, dx
pop edx
push edx
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x40], edx
pop ecx
mov dword [ebp - 0x24], ecx
mov word [ebx + 2], ax
mov eax, ebx
mov ebx, dword [ebp - 8]
movzx ecx, word [ecx + eax]
cmp edi, 0x1000000
jae 0x4ce832
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4ce851
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4ce865
mov edx, dword [ebp - 0x48]
sub edi, eax
sub esi, eax
mov dword [ebp - 0x40], edx
mov eax, ecx
shr eax, 5
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x24]
mov ebx, dword [ebp - 0xc]
mov word [ecx + ebx], ax
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 8]
movzx ecx, word [eax + edx*2]
cmp edi, 0x1000000
jae 0x4ce890
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
shl edx, 2
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4ce8b5
mov edi, eax
mov dword [ebp - 0x24], edx
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4ce8cb
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
movzx eax, cx
lea ecx, [edx + 2]
mov dword [ebp - 0x24], ecx
mov edx, ecx
mov ebx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0xc]
mov word [ecx + ebx*2], ax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 8]
movzx ecx, word [ecx + eax]
cmp edi, 0x1000000
jae 0x4ce8f9
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4ce918
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4ce927
sub edi, eax
sub esi, eax
mov eax, ecx
inc edx
shr eax, 5
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x24]
mov ebx, dword [ebp - 0xc]
mov word [ecx + ebx], ax
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 8]
movzx ecx, word [eax + edx*2]
cmp edi, 0x1000000
jae 0x4ce952
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
mov ebx, edx
shr eax, 0xb
imul eax, ecx
shl ebx, 2
mov dword [ebp - 0x24], ebx
cmp esi, eax
jae 0x4ce97e
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx ecx, ax
mov eax, ebx
mov dword [ebp - 0x40], eax
jmp 0x4ce99a
mov ebx, dword [ebp - 0x24]
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
add ebx, 2
movzx ecx, cx
mov eax, ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0xc]
mov word [ebx + edx*2], cx
mov ecx, ebx
mov ebx, dword [ebp - 8]
movzx ecx, word [eax + ecx]
cmp edi, 0x1000000
jae 0x4ce9c1
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov edx, dword [ebp - 0x24]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4ce9e3
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4ce9f5
sub edi, eax
sub esi, eax
mov eax, ecx
inc edx
shr eax, 5
sub ecx, eax
mov dword [ebp - 0x24], edx
movzx eax, cx
mov ecx, dword [ebp - 0x40]
mov ebx, dword [ebp - 0xc]
mov word [ecx + ebx], ax
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 8]
movzx ecx, word [eax + edx*2]
cmp edi, 0x1000000
jae 0x4cea20
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
shl edx, 2
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cea45
mov edi, eax
mov dword [ebp - 0x40], edx
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx ecx, ax
jmp 0x4cea5b
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
lea eax, [edx + 2]
movzx ecx, cx
mov edx, eax
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
mov word [ebx + eax*2], cx
mov ecx, ebx
mov eax, dword [ebp - 0x40]
mov ebx, dword [ebp - 8]
movzx ecx, word [eax + ecx]
cmp edi, 0x1000000
jae 0x4cea88
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4ceaa7
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4ceab6
sub edi, eax
sub esi, eax
mov eax, ecx
inc edx
shr eax, 5
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x40]
mov ebx, dword [ebp - 0xc]
mov word [ecx + ebx], ax
jmp 0x4ceee1
cmp eax, 0xa
mov ebx, dword [ebp - 0x30]
sbb eax, eax
and eax, 0xfffffffd
add eax, 6
sub dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x1c], eax
sbb eax, eax
and eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x1c]
movzx eax, byte [eax + ebx]
mov ebx, dword [ebp - 8]
add eax, eax
mov dword [ebp - 0x24], eax
and eax, 0x100
mov dword [ebp - 0x48], eax
add eax, 0x101
lea eax, [edx + eax*2]
movzx edx, word [eax]
mov dword [ebp - 0x20], eax
cmp ecx, 0x1000000
jae 0x4ceb22
movzx eax, byte [ebx]
mov edi, ecx
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ecx, dword [ebp - 0x48]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4ceb53
mov edi, eax
mov dword [ebp - 0x40], 2
mov eax, 0x800
not ecx
sub eax, edx
and ecx, 0x100
shr eax, 5
add eax, edx
movzx eax, ax
jmp 0x4ceb68
sub edi, eax
mov dword [ebp - 0x40], 3
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
movzx eax, dx
mov edx, dword [ebp - 0x20]
mov word [edx], ax
mov eax, ecx
mov edx, dword [ebp - 0x24]
add edx, edx
and eax, edx
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
add eax, ecx
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x48], eax
movzx edx, word [edx + eax*2]
cmp edi, 0x1000000
jae 0x4ceba3
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0x40]
mov eax, edi
shr eax, 0xb
add ebx, ebx
imul eax, edx
mov dword [ebp - 0x40], ebx
cmp esi, eax
jae 0x4cebcf
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x20]
movzx eax, ax
not edx
jmp 0x4cebe3
sub edi, eax
sub esi, eax
inc dword [ebp - 0x40]
mov eax, edx
shr eax, 5
sub edx, eax
movzx eax, dx
mov edx, dword [ebp - 0x20]
mov ebx, dword [ebp - 0xc]
and edx, ecx
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x20], edx
mov word [ebx + ecx*2], ax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xc]
add eax, eax
mov ebx, dword [ebp - 8]
and edx, eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x20]
add eax, edx
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x48], eax
movzx ecx, word [ecx + eax*2]
cmp edi, 0x1000000
jae 0x4cec28
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0x40]
mov eax, edi
shr eax, 0xb
add ebx, ebx
imul eax, ecx
mov dword [ebp - 0x40], ebx
mov ebx, dword [ebp - 8]
cmp esi, eax
jae 0x4cec54
mov edi, eax
not edx
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cec65
sub edi, eax
sub esi, eax
inc dword [ebp - 0x40]
mov eax, ecx
shr eax, 5
sub ecx, eax
movzx eax, cx
and dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0xc]
mov word [edx + ecx*2], ax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
add ecx, ecx
mov edx, eax
mov dword [ebp - 0x24], ecx
and edx, ecx
mov ecx, dword [ebp - 0xc]
add eax, edx
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x48], eax
movzx ecx, word [ecx + eax*2]
cmp edi, 0x1000000
jae 0x4ceca7
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0x40]
mov eax, edi
shr eax, 0xb
add ebx, ebx
imul eax, ecx
mov dword [ebp - 0x40], ebx
mov ebx, dword [ebp - 8]
cmp esi, eax
jae 0x4cecd3
mov edi, eax
not edx
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cece4
sub edi, eax
sub esi, eax
inc dword [ebp - 0x40]
mov eax, ecx
shr eax, 5
sub ecx, eax
movzx eax, cx
and dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0xc]
mov word [edx + ecx*2], ax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
add ecx, ecx
mov edx, eax
mov dword [ebp - 0x24], ecx
and edx, ecx
mov ecx, dword [ebp - 0xc]
add eax, edx
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x64], eax
movzx ecx, word [ecx + eax*2]
cmp edi, 0x1000000
jae 0x4ced26
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0x40]
mov eax, edi
shr eax, 0xb
add ebx, ebx
imul eax, ecx
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 8]
cmp esi, eax
jae 0x4ced52
mov edi, eax
not edx
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4ced63
sub edi, eax
sub esi, eax
inc dword [ebp - 0x48]
mov eax, ecx
shr eax, 5
sub ecx, eax
movzx eax, cx
and dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0xc]
mov word [edx + ecx*2], ax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
add ecx, ecx
mov edx, eax
mov dword [ebp - 0x24], ecx
and edx, ecx
mov ecx, dword [ebp - 0xc]
add eax, edx
mov dword [ebp - 0x40], edx
mov edx, dword [ebp - 0x48]
add eax, edx
mov dword [ebp - 0x64], eax
movzx ecx, word [ecx + eax*2]
cmp edi, 0x1000000
jae 0x4cedaa
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
add edx, edx
shr eax, 0xb
imul eax, ecx
mov dword [ebp - 0x48], edx
cmp esi, eax
jae 0x4cedd3
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx ecx, ax
mov eax, dword [ebp - 0x40]
not eax
jmp 0x4cede8
sub edi, eax
sub esi, eax
mov eax, ecx
inc edx
shr eax, 5
sub ecx, eax
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x40]
movzx ecx, cx
mov ebx, dword [ebp - 0x64]
mov edx, dword [ebp - 0xc]
and eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
mov word [edx + ebx*2], cx
mov ecx, eax
mov ebx, dword [ebp - 0x24]
mov edx, dword [ebp - 0xc]
add ebx, ebx
and ecx, ebx
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 8]
add eax, ecx
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x64], eax
movzx edx, word [edx + eax*2]
cmp edi, 0x1000000
jae 0x4cee2d
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0x48]
mov eax, edi
shr eax, 0xb
add ebx, ebx
imul eax, edx
mov dword [ebp - 0x48], ebx
cmp esi, eax
jae 0x4cee56
mov edi, eax
not ecx
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
movzx eax, ax
jmp 0x4cee67
sub edi, eax
sub esi, eax
inc dword [ebp - 0x48]
mov eax, edx
shr eax, 5
sub edx, eax
movzx eax, dx
mov edx, dword [ebp - 0x64]
mov ebx, dword [ebp - 0xc]
and ecx, dword [ebp - 0x40]
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x48]
add eax, eax
mov ebx, dword [ebp - 8]
and eax, ecx
add eax, ecx
mov ecx, dword [ebp - 0xc]
add eax, edx
mov dword [ebp - 0x48], eax
movzx ecx, word [ecx + eax*2]
cmp edi, 0x1000000
jae 0x4ceea6
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0xc]
mov eax, edi
shr eax, 0xb
add edx, edx
imul eax, ecx
cmp esi, eax
jae 0x4ceece
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0x48]
mov word [ebx + ecx*2], ax
jmp 0x4ceee1
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0x48]
inc edx
mov word [ebx + eax*2], cx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov byte [ecx + eax], dl
inc ecx
mov dword [ebp - 0x1c], ecx
jmp 0x4cfb31
mov eax, edx
sub esi, ecx
shr eax, 5
sub edi, ecx
mov ecx, dword [ebp - 0x10]
sub edx, eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xc], esi
mov word [ecx + eax*2], dx
mov edx, dword [ebp - 0x14]
movzx ecx, word [ecx + edx*2 + 0x180]
cmp edi, 0x1000000
jae 0x4cef30
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cef65
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0x10]
mov word [ecx + edx*2 + 0x180], ax
add edx, 0xc
mov dword [ebp - 0x14], edx
mov eax, 0x664
jmp 0x4cf18f
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
cmp dword [ebp - 0x4c], 0
mov eax, dword [ebp - 0x10]
mov word [eax + edx*2 + 0x180], cx
jne 0x4cef8b
cmp dword [ebp - 0x28], 0
je 0x4cfbb4
movzx edx, word [eax + edx*2 + 0x198]
cmp edi, 0x1000000
jae 0x4cefaa
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
cmp esi, ecx
jae 0x4cf074
mov ebx, dword [ebp - 0x10]
mov eax, 0x800
sub eax, edx
mov edi, ecx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x14]
mov word [ebx + edx*2 + 0x198], ax
lea eax, [edx + 0xf]
shl eax, 4
mov edx, ebx
add eax, dword [ebp - 0x48]
mov ebx, dword [ebp - 8]
mov dword [ebp - 0x40], eax
movzx edx, word [edx + eax*2]
cmp ecx, 0x1000000
jae 0x4cf002
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ecx, dword [ebp - 0x40]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4cf05a
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x10]
mov word [edx + ecx*2], ax
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
sbb eax, eax
and eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x2c]
add eax, ecx
mov al, byte [eax + edx]
mov byte [ecx + edx], al
inc ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x14], 7
mov dword [ebp - 0x1c], ecx
sbb edx, edx
and edx, 0xfffffffe
add edx, 0xb
mov dword [ebp - 0x14], edx
jmp 0x4cfb37
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 0xc], esi
shr eax, 5
sub edx, eax
mov eax, dword [ebp - 0x10]
mov word [eax + ecx*2], dx
jmp 0x4cf178
mov eax, edx
sub esi, ecx
shr eax, 5
sub edi, ecx
mov ecx, dword [ebp - 0x10]
sub edx, eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xc], esi
mov word [ecx + eax*2 + 0x198], dx
mov edx, eax
movzx ecx, word [ecx + edx*2 + 0x1b0]
cmp edi, 0x1000000
jae 0x4cf0b4
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf0e1
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0x10]
mov word [ecx + edx*2 + 0x1b0], ax
mov edx, dword [ebp - 0x38]
jmp 0x4cf16f
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0x10]
mov word [eax + edx*2 + 0x1b0], cx
movzx ecx, word [eax + edx*2 + 0x1c8]
cmp edi, 0x1000000
jae 0x4cf11c
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf13e
mov edx, dword [ebp - 0x3c]
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cf158
mov edx, dword [ebp - 0x44]
sub esi, eax
mov ebx, dword [ebp - 0x3c]
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
sub ecx, eax
mov dword [ebp - 0x44], ebx
movzx eax, cx
mov ecx, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x10]
mov word [ebx + ecx*2 + 0x1c8], ax
mov ecx, dword [ebp - 0x38]
mov ebx, dword [ebp - 8]
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x14], 7
mov eax, 0xa68
sbb ecx, ecx
and ecx, 0xfffffffd
add ecx, 0xb
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x10]
add eax, ecx
mov dword [ebp - 0x24], eax
movzx edx, word [eax]
cmp edi, 0x1000000
jae 0x4cf1b1
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
cmp esi, ecx
jae 0x4cf30f
mov eax, 0x800
mov edi, ecx
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x24]
mov word [edx], ax
mov eax, dword [ebp - 0x48]
shl eax, 4
add eax, edx
mov dword [ebp - 0x48], eax
movzx edx, word [eax + 6]
cmp ecx, 0x1000000
jae 0x4cf1fe
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4cf222
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
push 4
add eax, edx
pop edx
movzx eax, ax
push 8
jmp 0x4cf238
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 0xc], esi
shr eax, 5
sub edx, eax
push 6
movzx eax, dx
pop edx
push 0xa
pop ebx
mov dword [ebp - 0x40], ebx
mov ecx, ebx
mov ebx, dword [ebp - 0x48]
mov word [ebx + 6], ax
mov eax, ebx
mov ebx, dword [ebp - 8]
movzx ecx, word [ecx + eax]
cmp edi, 0x1000000
jae 0x4cf268
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf287
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cf299
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
inc edx
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x40]
mov word [ecx + ebx], ax
lea eax, [edx + edx]
mov ebx, dword [ebp - 8]
lea edx, [eax + ecx]
movzx ecx, word [edx + 4]
mov dword [ebp - 0x18], eax
cmp edi, 0x1000000
jae 0x4cf2cd
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf2ec
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cf300
sub esi, eax
sub edi, eax
inc dword [ebp - 0x18]
mov eax, ecx
shr eax, 5
sub ecx, eax
mov dword [ebp - 0xc], esi
movzx eax, cx
mov ecx, dword [ebp - 0x18]
mov word [edx + 4], ax
sub ecx, 8
jmp 0x4cf536
mov eax, edx
sub edi, ecx
shr eax, 5
sub esi, ecx
sub edx, eax
mov dword [ebp - 0xc], esi
mov eax, dword [ebp - 0x24]
mov word [eax], dx
movzx edx, word [eax + 2]
cmp edi, 0x1000000
jae 0x4cf341
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
cmp esi, ecx
jae 0x4cf4ad
mov eax, 0x800
mov edi, ecx
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x24]
mov word [edx + 2], ax
mov eax, dword [ebp - 0x48]
shl eax, 4
add eax, edx
mov dword [ebp - 0x48], eax
movzx edx, word [eax + 0x106]
cmp ecx, 0x1000000
jae 0x4cf392
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4cf3b8
mov edi, eax
mov ebx, 0x108
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
movzx eax, ax
push 4
jmp 0x4cf3d0
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 0xc], esi
shr eax, 5
mov ebx, 0x10a
sub edx, eax
movzx eax, dx
push 6
mov dword [ebp - 0x40], ebx
mov ecx, ebx
mov ebx, dword [ebp - 0x48]
pop edx
mov word [ebx + 0x106], ax
mov eax, ebx
mov ebx, dword [ebp - 8]
movzx ecx, word [ecx + eax]
cmp edi, 0x1000000
jae 0x4cf403
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf422
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cf434
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
inc edx
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x40]
mov word [ebx + ecx], ax
lea eax, [edx + edx]
mov ebx, dword [ebp - 8]
lea edx, [eax + ecx]
movzx ecx, word [edx + 0x104]
mov dword [ebp - 0x18], eax
cmp edi, 0x1000000
jae 0x4cf46b
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf48a
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cf49e
sub esi, eax
sub edi, eax
inc dword [ebp - 0x18]
mov eax, ecx
shr eax, 5
sub ecx, eax
mov dword [ebp - 0xc], esi
movzx eax, cx
mov ecx, dword [ebp - 0x18]
mov word [edx + 0x104], ax
jmp 0x4cf539
mov eax, edx
sub edi, ecx
shr eax, 5
sub esi, ecx
sub edx, eax
xor ecx, ecx
mov eax, dword [ebp - 0x24]
inc ecx
mov word [eax + 2], dx
add ecx, ecx
mov dword [ebp - 0x18], ecx
lea edx, [ecx + eax]
movzx ecx, word [edx + 0x204]
cmp edi, 0x1000000
jae 0x4cf4e5
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf504
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cf515
sub edi, eax
sub esi, eax
inc dword [ebp - 0x18]
mov eax, ecx
shr eax, 5
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x18]
mov word [edx + 0x204], ax
mov eax, dword [ebp - 0x24]
cmp ecx, 0x100
jb 0x4cf4c2
mov dword [ebp - 8], ebx
sub ecx, 0xf0
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x14], 0xc
jb 0x4cfab0
cmp ecx, 4
push 3
pop eax
cmovb eax, ecx
shl eax, 7
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x24], eax
movzx ecx, word [eax + 0x362]
cmp edi, 0x1000000
jae 0x4cf576
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf59c
mov edi, eax
mov ebx, 0x364
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
push 4
jmp 0x4cf5b4
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
mov ebx, 0x366
sub ecx, eax
movzx eax, cx
push 6
mov dword [ebp - 0x48], ebx
mov ecx, ebx
mov ebx, dword [ebp - 0x24]
pop edx
mov word [ebx + 0x362], ax
mov eax, ebx
mov ebx, dword [ebp - 8]
movzx ecx, word [ecx + eax]
cmp edi, 0x1000000
jae 0x4cf5e7
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf606
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cf618
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
inc edx
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x48]
add edx, edx
mov ebx, dword [ebp - 0x24]
mov word [ecx + ebx], ax
mov eax, dword [ebp - 0x24]
mov ebx, dword [ebp - 8]
add eax, 0x360
add eax, edx
mov dword [ebp - 0x64], eax
movzx ecx, word [eax]
cmp edi, 0x1000000
jae 0x4cf651
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf670
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cf682
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
inc edx
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x64]
add edx, edx
mov word [ecx], ax
mov eax, dword [ebp - 0x24]
add eax, 0x360
add eax, edx
mov dword [ebp - 0x64], eax
movzx ecx, word [eax]
cmp edi, 0x1000000
jae 0x4cf6b4
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf6d3
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cf6e5
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
inc edx
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x64]
add edx, edx
mov word [ecx], ax
mov eax, dword [ebp - 0x24]
add eax, 0x360
add eax, edx
mov dword [ebp - 0x64], eax
movzx ecx, word [eax]
cmp edi, 0x1000000
jae 0x4cf717
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf736
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cf748
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
inc edx
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x64]
add edx, edx
mov word [ecx], ax
mov eax, dword [ebp - 0x24]
add eax, 0x360
add eax, edx
mov dword [ebp - 0x64], eax
movzx ecx, word [eax]
cmp edi, 0x1000000
jae 0x4cf77a
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf799
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cf7ab
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
inc edx
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x64]
sub edx, 0x40
mov word [ecx], ax
cmp edx, 4
jb 0x4cfa75
mov eax, edx
mov ecx, edx
shr ecx, 1
and edx, 1
dec ecx
mov dword [ebp - 0x64], eax
or edx, 2
cmp eax, 0xe
jae 0x4cf86e
mov ebx, dword [ebp - 0x10]
shl edx, cl
add ebx, 0x55e
mov eax, edx
sub eax, dword [ebp - 0x64]
lea eax, [ebx + eax*2]
mov dword [ebp - 0x64], eax
xor eax, eax
inc eax
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 8]
add eax, eax
mov dword [ebp - 0x44], eax
add eax, dword [ebp - 0x64]
mov dword [ebp - 0x40], eax
movzx eax, word [eax]
mov dword [ebp - 0x24], eax
cmp edi, 0x1000000
jae 0x4cf81d
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, dword [ebp - 0x24]
cmp esi, eax
jae 0x4cf83c
mov edi, eax
mov eax, 0x800
sub eax, dword [ebp - 0x24]
shr eax, 5
add eax, dword [ebp - 0x24]
jmp 0x4cf852
or edx, dword [ebp - 0x48]
sub edi, eax
sub esi, eax
mov eax, dword [ebp - 0x24]
inc dword [ebp - 0x44]
shr eax, 5
sub dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov ebx, dword [ebp - 0x40]
shl dword [ebp - 0x48], 1
movzx eax, ax
mov word [ebx], ax
mov eax, dword [ebp - 0x44]
sub ecx, 1
jne 0x4cf7f2
mov dword [ebp - 0xc], esi
jmp 0x4cfa75
sub ecx, 4
cmp edi, 0x1000000
jae 0x4cf885
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
shr edi, 1
lea edx, [edx*2 + 1]
sub esi, edi
mov eax, esi
shr eax, 0x1f
neg eax
add edx, eax
and eax, edi
add esi, eax
sub ecx, 1
jne 0x4cf871
mov eax, dword [ebp - 0x10]
shl edx, 4
mov dword [ebp - 8], ebx
mov dword [ebp - 0xc], esi
movzx ecx, word [eax + 0x646]
cmp edi, 0x1000000
jae 0x4cf8cf
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf8fc
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
push 4
pop ecx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x40], ecx
mov ecx, 0x648
movzx eax, ax
jmp 0x4cf91e
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
or edx, 1
sub ecx, eax
movzx eax, cx
push 6
pop ecx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x40], ecx
mov ecx, 0x64a
mov ebx, dword [ebp - 0x10]
mov word [ebx + 0x646], ax
mov eax, ebx
mov ebx, dword [ebp - 8]
movzx ecx, word [ecx + eax]
cmp edi, 0x1000000
jae 0x4cf94b
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf96a
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cf981
sub esi, eax
sub edi, eax
inc dword [ebp - 0x40]
mov eax, ecx
shr eax, 5
or edx, 2
sub ecx, eax
mov dword [ebp - 0xc], esi
movzx eax, cx
mov ebx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x48]
mov word [ecx + ebx + 0x644], ax
mov ecx, ebx
mov eax, dword [ebp - 0x40]
add ecx, 0x644
mov ebx, dword [ebp - 8]
add eax, eax
mov dword [ebp - 0x40], eax
add eax, ecx
mov dword [ebp - 0x64], eax
movzx ecx, word [eax]
cmp edi, 0x1000000
jae 0x4cf9c4
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf9e3
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cf9fa
sub esi, eax
sub edi, eax
inc dword [ebp - 0x40]
mov eax, ecx
shr eax, 5
or edx, 4
sub ecx, eax
mov dword [ebp - 0xc], esi
movzx eax, cx
mov ecx, dword [ebp - 0x64]
mov word [ecx], ax
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x10]
movzx ecx, word [ecx + eax*2 + 0x644]
cmp edi, 0x1000000
jae 0x4cfa28
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cfa47
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cfa5b
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
or edx, 8
sub ecx, eax
movzx eax, cx
mov ebx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x40]
mov word [ebx + ecx*2 + 0x644], ax
mov ebx, dword [ebp - 8]
cmp edx, 0xffffffff
je 0x4cfb49
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
lea eax, [edx + 1]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x3c], ecx
test eax, eax
jne 0x4cfa99
cmp edx, dword [ebp - 0x28]
jmp 0x4cfa9b
cmp edx, eax
jae 0x4cfbab
cmp dword [ebp - 0x14], 0x13
sbb eax, eax
and eax, 0xfffffffd
add eax, 0xa
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x54]
add ecx, 2
mov dword [ebp - 0x18], ecx
sub eax, dword [ebp - 0x1c]
je 0x4cfbab
cmp eax, ecx
mov edx, ecx
cmovb edx, eax
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x2c]
sbb ecx, ecx
add dword [ebp - 0x28], edx
and ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x2c]
sub dword [ebp - 0x18], edx
add ecx, eax
mov eax, dword [ebp - 0x34]
sub eax, ecx
cmp edx, eax
ja 0x4cfb0b
mov ebx, dword [ebp - 0x30]
add ebx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x1c]
add dword [ebp - 0x1c], edx
lea eax, [ebx + edx]
mov dword [ebp - 0x64], eax
mov edx, eax
mov al, byte [ecx + ebx]
mov byte [ebx], al
inc ebx
cmp ebx, edx
jne 0x4cfaff
jmp 0x4cfb2e
mov ebx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x30]
mov al, byte [ecx + esi]
mov byte [ebx + esi], al
lea eax, [ecx + 1]
xor ecx, ecx
inc ebx
cmp eax, dword [ebp - 0x34]
cmovne ecx, eax
sub edx, 1
jne 0x4cfb11
mov esi, dword [ebp - 0xc]
mov dword [ebp - 0x1c], ebx
mov ecx, dword [ebp - 0x1c]
mov ebx, dword [ebp - 8]
mov edx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x54]
jae 0x4cfb5a
cmp ebx, dword [ebp + 8]
jae 0x4cfb5a
mov ecx, dword [ebp - 0x28]
jmp 0x4ce6d9
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
add ecx, 0x112
sub edx, 0xc
jmp 0x4cfb5d
mov ecx, dword [ebp - 0x18]
cmp edi, 0x1000000
jae 0x4cfb71
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov eax, dword [ebp - 0x58]
mov dword [eax + 0x48], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [eax + 0x24], ecx
mov ecx, dword [ebp - 0x28]
mov dword [eax + 0x18], ebx
mov ebx, dword [ebp - 0x3c]
mov dword [eax + 0x2c], ecx
mov ecx, dword [ebp - 0x2c]
mov dword [eax + 0x38], ecx
mov ecx, dword [ebp - 0x38]
mov dword [eax + 0x40], ebx
mov ebx, dword [ebp - 0x44]
mov dword [eax + 0x1c], edi
mov dword [eax + 0x20], esi
mov dword [eax + 0x3c], ecx
mov dword [eax + 0x44], ebx
mov dword [eax + 0x34], edx
xor eax, eax
jmp 0x4cfbb7
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x1c]
mov dword [eax + 0x24], ecx
xor eax, eax
inc eax
pop edi
pop esi
pop ebx
leave
ret 4