Function at 0x48a290
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x13c
push esi
push edi
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x58], edx
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x68], eax
mov ecx, dword [ebp - 0x1c]
shl ecx, 2
push ecx
call fcn.005142b0
add esp, 4
mov dword [ebp - 0xdc], eax
mov edx, dword [ebp - 0xdc]
mov dword [ebp - 0x64], edx
mov eax, dword [ebp - 0x50]
lea ecx, [eax*4 + 4]
push ecx
call fcn.005142b0
add esp, 4
mov dword [ebp - 0xe0], eax
mov edx, dword [ebp - 0xe0]
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x58]
lea ecx, [eax*4 + 4]
push ecx
call fcn.005142b0
add esp, 4
mov dword [ebp - 0xe4], eax
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x3c], 0
jmp 0x48a32e
mov eax, dword [ebp - 0x3c]
add eax, 1
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
cmp ecx, dword [ebp - 0x1c]
jge 0x48a469
mov edx, dword [ebp - 0x3c]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x5c]
add ecx, dword [eax + edx + 0x1c]
mov dword [ebp - 0x5c], ecx
mov edx, dword [ebp - 0x3c]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x68]
cmp dword [eax + edx + 0x1c], 0
jge 0x48a3af
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0xe8], ecx
mov edx, dword [ebp - 0xe8]
push edx
call fcn.005142d9
add esp, 4
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xec], eax
mov ecx, dword [ebp - 0xec]
push ecx
call fcn.005142d9
add esp, 4
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0xf0], edx
mov eax, dword [ebp - 0xf0]
push eax
call fcn.005142d9
add esp, 4
mov eax, 2
jmp 0x48c80b
mov dword [ebp - 0xc], 2
mov ecx, dword [ebp - 0x3c]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x68]
lea ecx, [edx + ecx + 0x20]
call fcn.00409600
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x78], 0
jmp 0x48a3dd
mov eax, dword [ebp - 0x78]
add eax, 1
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x3c]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x78]
cmp eax, dword [edx + ecx + 0x1c]
jge 0x48a446
push 0xa
mov ecx, dword [ebp - 0x74]
push ecx
call fcn.004fcd00
add esp, 8
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x48a411
mov edx, dword [ebp - 0x7c]
sub edx, dword [ebp - 0x74]
mov dword [ebp - 0x80], edx
jmp 0x48a420
mov eax, dword [ebp - 0x74]
push eax
call fcn.004fa680
add esp, 4
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x7c]
add ecx, 1
mov dword [ebp - 0x74], ecx
cmp dword [ebp - 0x80], 2
jge 0x48a436
mov dword [ebp - 0x80], 2
mov edx, dword [ebp - 0xc]
cmp edx, dword [ebp - 0x80]
jge 0x48a444
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xc], eax
jmp 0x48a3d4
mov ecx, dword [ebp - 0xc]
and ecx, 0x80000001
jns 0x48a456
dec ecx
or ecx, 0xfffffffe
inc ecx
mov edx, dword [ebp - 0xc]
add edx, ecx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x64]
mov dword [ecx + eax*4], edx
jmp 0x48a325
mov dword [ebp - 0x3c], 0
jmp 0x48a47b
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x50]
add eax, 1
cmp dword [ebp - 0x3c], eax
jge 0x48a497
mov ecx, dword [ebp - 0x3c]
shl ecx, 2
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x48]
mov dword [eax + edx*4], ecx
jmp 0x48a472
mov dword [ebp - 0x3c], 0
jmp 0x48a4a9
mov ecx, dword [ebp - 0x3c]
add ecx, 1
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x58]
add edx, 1
cmp dword [ebp - 0x3c], edx
jge 0x48a4c4
mov eax, dword [ebp - 0x3c]
shl eax, 1
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x60]
mov dword [edx + ecx*4], eax
jmp 0x48a4a0
mov dword [ebp - 0x3c], 0
jmp 0x48a4d6
mov eax, dword [ebp - 0x3c]
add eax, 1
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
cmp ecx, dword [ebp - 0x50]
jge 0x48a5bb
cmp dword [ebp - 0x3c], 0
jle 0x48a516
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax + edx*4 - 4]
add ecx, 4
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x48]
cmp dword [eax + edx*4], ecx
jge 0x48a516
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x48]
mov eax, dword [edx + ecx*4 - 4]
add eax, 4
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x48]
mov dword [edx + ecx*4], eax
mov dword [ebp - 0x84], 0
jmp 0x48a531
mov eax, dword [ebp - 0x84]
add eax, 1
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x84]
cmp ecx, dword [ebp - 0x1c]
jge 0x48a5b6
mov edx, dword [ebp - 0x84]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + edx + 0xc]
cmp ecx, dword [ebp - 0x3c]
jne 0x48a5b1
mov edx, dword [ebp - 0x84]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + edx + 0x14]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x48]
mov edx, dword [eax + edx*4]
mov eax, dword [ebp - 0x84]
mov esi, dword [ebp - 0x64]
mov eax, dword [esi + eax*4]
lea edx, [edx + eax + 2]
mov eax, dword [ebp - 0x48]
cmp dword [eax + ecx*4], edx
jge 0x48a5b1
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x48]
mov eax, dword [edx + ecx*4]
mov ecx, dword [ebp - 0x84]
mov edx, dword [ebp - 0x64]
mov ecx, dword [edx + ecx*4]
lea edx, [eax + ecx + 2]
mov eax, dword [ebp - 0x84]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + eax + 0x14]
mov ecx, dword [ebp - 0x48]
mov dword [ecx + eax*4], edx
jmp 0x48a522
jmp 0x48a4cd
mov edx, dword [ebp + 0x18]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x5c]
shl eax, 2
push eax
call fcn.005142b0
add esp, 4
mov dword [ebp - 0xf4], eax
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x6c], ecx
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x5c]
lea ecx, [eax + edx + 1]
imul ecx, ecx, 3
shl ecx, 2
push ecx
call fcn.005142b0
add esp, 4
mov dword [ebp - 0xf8], eax
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x3c], 0
jmp 0x48a619
mov eax, dword [ebp - 0x3c]
add eax, 1
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
cmp ecx, dword [ebp - 0x5c]
jge 0x48a630
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x6c]
mov dword [eax + edx*4], 0xffffffff
jmp 0x48a610
mov dword [ebp - 0x18], 0
mov ecx, dword [ebp - 0x58]
lea edx, [ecx*4 + 4]
push edx
call fcn.005142b0
add esp, 4
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x58]
lea edx, [ecx*4 + 4]
push edx
push 0xffffffffffffffff
mov eax, dword [ebp - 8]
push eax
call fcn.004fa910
add esp, 0xc
mov dword [ebp - 0x3c], 0
jmp 0x48a684
mov ecx, dword [ebp - 0x3c]
add ecx, 1
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x3c]
cmp edx, dword [ebp - 0x50]
jge 0x48b543
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x1c]
jge 0x48b53e
mov ecx, dword [ebp - 0x88]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + ecx + 0xc]
cmp eax, dword [ebp - 0x3c]
jne 0x48b50e
mov ecx, dword [ebp - 0x88]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x68]
cmp dword [edx + ecx + 0x1c], 0
jne 0x48a6f0
mov eax, dword [ebp - 0x88]
add eax, 1
mov dword [ebp - 0x88], eax
jmp 0x48a6a4
cmp dword [ebp - 0x18], 0
jne 0x48a870
mov dword [ebp - 0x98], 0
jmp 0x48a715
mov ecx, dword [ebp - 0x98]
add ecx, 1
mov dword [ebp - 0x98], ecx
mov edx, dword [ebp - 0x88]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x98]
cmp ecx, dword [eax + edx + 0x1c]
jge 0x48a7f6
mov edx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x98]
mov dword [eax + edx*4], ecx
mov edx, dword [ebp - 0x98]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x24]
mov ecx, dword [esi + ecx*8]
mov dword [eax + edx*4], ecx
mov edx, dword [ebp - 0x98]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x24]
mov ecx, dword [esi + ecx*8 + 4]
mov dword [eax + edx*4 + 4], ecx
mov edx, dword [ebp - 0x98]
add edx, 1
mov eax, dword [ebp - 0x88]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x68]
cmp edx, dword [ecx + eax + 0x1c]
jge 0x48a7ce
mov edx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x24]
mov edx, dword [eax + edx*8 + 8]
sub edx, dword [esi + ecx*8]
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x24]
sub edx, dword [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x98]
imul eax, eax, 3
mov ecx, dword [ebp - 0x38]
mov dword [ecx + eax*4 + 8], edx
jmp 0x48a7e2
mov edx, dword [ebp - 0x98]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
mov dword [eax + edx*4 + 8], 0x3e6
mov ecx, dword [ebp - 0x8c]
add ecx, 1
mov dword [ebp - 0x8c], ecx
jmp 0x48a706
mov edx, dword [ebp - 0x88]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + edx + 0x18]
mov edx, dword [ebp + 0x1c]
mov eax, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x24]
mov ecx, dword [edx + ecx*4]
sub ecx, dword [esi + eax*8 - 8]
mov edx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x24]
mov edx, dword [eax + edx*8 - 4]
imul edx, edx, 3
cmp ecx, edx
jg 0x48a849
mov eax, dword [ebp - 0x88]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x68]
mov edx, dword [ecx + eax + 0x18]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x98]
mov dword [eax + edx*4], ecx
mov edx, dword [ebp - 0x88]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + edx + 0x1c]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x88]
add edx, 1
mov dword [ebp - 0x88], edx
jmp 0x48a6a4
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0
jmp 0x48a895
mov eax, dword [ebp - 0x90]
add eax, 1
mov dword [ebp - 0x90], eax
mov ecx, dword [ebp - 0x88]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x90]
cmp eax, dword [edx + ecx + 0x1c]
jge 0x48b50c
mov ecx, dword [ebp - 0x94]
cmp ecx, dword [ebp - 0x18]
jge 0x48a8fa
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x94]
imul eax, eax, 3
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + edx*4]
mov ecx, dword [ebp - 0x38]
add edx, dword [ecx + eax*4 + 4]
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x24]
cmp dword [ecx + eax*8], edx
jle 0x48a8fa
mov edx, dword [ebp - 0x94]
add edx, 1
mov dword [ebp - 0x94], edx
jmp 0x48a8b1
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x18]
jge 0x48abc7
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + ecx*8 + 4]
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + edx*4 + 4]
cdq
sub eax, edx
sar eax, 1
cmp ecx, eax
jle 0x48a950
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + ecx*8 + 4]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x128], eax
jmp 0x48a96b
mov eax, dword [ebp - 0x94]
imul eax, eax, 3
mov ecx, dword [ebp - 0x38]
mov eax, dword [ecx + eax*4 + 4]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x128], eax
mov edx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + edx*8 + 4]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x24]
mov ecx, dword [edx + ecx*8]
add ecx, eax
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
sub ecx, dword [eax + edx*4]
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + edx*4 + 4]
cdq
sub eax, edx
sar eax, 1
sub ecx, eax
push ecx
call fcn.004fbe67
add esp, 4
cmp eax, dword [ebp - 0x128]
jge 0x48abc7
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x24]
mov eax, dword [esi + eax*8]
mov dword [edx + ecx*4], eax
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x24]
mov eax, dword [esi + eax*8 + 4]
mov dword [edx + ecx*4 + 4], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 1
cmp dword [ebp - 0x94], ecx
jge 0x48aa47
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x24]
mov edx, dword [eax + edx*4 + 0xc]
sub edx, dword [esi + ecx*8]
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x24]
sub edx, dword [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x94]
imul eax, eax, 3
mov ecx, dword [ebp - 0x38]
mov dword [ecx + eax*4 + 8], edx
jmp 0x48aa5b
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
mov dword [eax + edx*4 + 8], 0x3e6
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x38]
cmp dword [edx + ecx*4 + 8], 0
jge 0x48aa82
mov eax, dword [ebp - 0x94]
imul eax, eax, 3
mov ecx, dword [ebp - 0x38]
mov dword [ecx + eax*4 + 8], 0
cmp dword [ebp - 0x94], 0
jle 0x48aaf1
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x94]
imul eax, eax, 3
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x38]
mov edx, dword [ecx + edx*4]
sub edx, dword [esi + eax*4 - 0xc]
mov eax, dword [ebp - 0x94]
imul eax, eax, 3
mov ecx, dword [ebp - 0x38]
sub edx, dword [ecx + eax*4 - 8]
mov eax, dword [ebp - 0x94]
imul eax, eax, 3
mov ecx, dword [ebp - 0x38]
mov dword [ecx + eax*4 - 4], edx
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
cmp dword [eax + edx*4 - 4], 0
jge 0x48aaf1
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x38]
mov dword [edx + ecx*4 - 4], 0
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x94]
mov dword [ecx + eax*4], edx
mov eax, dword [ebp - 0x88]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x68]
mov edx, dword [ecx + eax + 0x1c]
sub edx, 1
cmp dword [ebp - 0x90], edx
jne 0x48abc2
mov eax, dword [ebp - 0x88]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x68]
mov edx, dword [ecx + eax + 0x18]
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x24]
mov edx, dword [eax + edx*4]
sub edx, dword [esi + ecx*8]
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ecx + eax*8 + 4]
imul eax, eax, 3
cmp edx, eax
jg 0x48abc2
mov ecx, dword [ebp - 0x94]
add ecx, 1
mov edx, dword [ebp - 0x88]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x68]
mov edx, dword [eax + edx + 0x18]
mov eax, dword [ebp - 8]
cmp ecx, dword [eax + edx*4]
jle 0x48ab8a
mov ecx, dword [ebp - 0x94]
add ecx, 1
mov dword [ebp - 0x12c], ecx
jmp 0x48aba6
mov edx, dword [ebp - 0x88]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + edx + 0x18]
mov edx, dword [ebp - 8]
mov eax, dword [edx + ecx*4]
mov dword [ebp - 0x12c], eax
mov ecx, dword [ebp - 0x88]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + ecx + 0x18]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x12c]
mov dword [ecx + eax*4], edx
jmp 0x48b4f8
mov eax, dword [ebp - 0x94]
add eax, 1
cmp eax, dword [ebp - 0x18]
jge 0x48b0c4
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x24]
mov edx, dword [eax + edx*8 + 4]
sub edx, 3
mov eax, dword [ebp - 0x38]
cmp dword [eax + ecx*4 + 8], edx
jge 0x48b0c4
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + ecx*8]
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x24]
add eax, dword [edx + ecx*8 + 4]
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x38]
cmp eax, dword [edx + ecx*4]
jle 0x48b0c4
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ecx + eax*8 + 4]
cdq
sub eax, edx
sar eax, 1
mov edx, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ecx + edx*8]
add ecx, eax
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
sub ecx, dword [eax + edx*4 + 0xc]
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + edx*4 + 0x10]
cdq
sub eax, edx
sar eax, 1
sub ecx, eax
push ecx
call fcn.004fbe67
add esp, 4
mov esi, eax
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + ecx*8 + 4]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x24]
mov ecx, dword [edx + ecx*8]
add ecx, eax
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
sub ecx, dword [eax + edx*4]
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + edx*4 + 4]
cdq
sub eax, edx
sar eax, 1
sub ecx, eax
push ecx
call fcn.004fbe67
add esp, 4
cmp esi, eax
jge 0x48aec3
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x24]
mov eax, dword [esi + eax*8]
mov dword [edx + ecx*4 + 0xc], eax
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x24]
mov eax, dword [esi + eax*8 + 4]
mov dword [edx + ecx*4 + 0x10], eax
mov ecx, dword [ebp - 0x94]
add ecx, 2
cmp ecx, dword [ebp - 0x18]
jge 0x48ad5d
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x94]
imul eax, eax, 3
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x38]
mov edx, dword [ecx + edx*4 + 0x18]
sub edx, dword [esi + eax*4 + 0xc]
mov eax, dword [ebp - 0x94]
imul eax, eax, 3
mov ecx, dword [ebp - 0x38]
sub edx, dword [ecx + eax*4 + 0x10]
mov eax, dword [ebp - 0x94]
imul eax, eax, 3
mov ecx, dword [ebp - 0x38]
mov dword [ecx + eax*4 + 0x14], edx
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
cmp dword [eax + edx*4 + 0x14], 0
jge 0x48ad84
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x38]
mov dword [edx + ecx*4 + 0x14], 0
mov eax, dword [ebp - 0x94]
add eax, 1
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x6c]
mov dword [edx + ecx*4], eax
mov eax, dword [ebp - 0x94]
imul eax, eax, 3
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x38]
mov eax, dword [edx + eax*4 + 0xc]
sub eax, dword [esi + ecx*4]
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x38]
sub eax, dword [edx + ecx*4 + 4]
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x38]
mov dword [edx + ecx*4 + 8], eax
mov eax, dword [ebp - 0x94]
imul eax, eax, 3
mov ecx, dword [ebp - 0x38]
cmp dword [ecx + eax*4 + 8], 0
jge 0x48adff
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
mov dword [eax + edx*4 + 8], 0
mov ecx, dword [ebp - 0x88]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + ecx + 0x1c]
sub eax, 1
cmp dword [ebp - 0x90], eax
jne 0x48aebe
mov ecx, dword [ebp - 0x88]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + ecx + 0x18]
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x24]
mov eax, dword [ecx + eax*4]
sub eax, dword [esi + edx*8]
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x24]
mov ecx, dword [edx + ecx*8 + 4]
imul ecx, ecx, 3
cmp eax, ecx
jg 0x48aebe
mov edx, dword [ebp - 0x94]
add edx, 2
mov eax, dword [ebp - 0x88]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + eax + 0x18]
mov ecx, dword [ebp - 8]
cmp edx, dword [ecx + eax*4]
jle 0x48ae86
mov edx, dword [ebp - 0x94]
add edx, 2
mov dword [ebp - 0x130], edx
jmp 0x48aea2
mov eax, dword [ebp - 0x88]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x68]
mov edx, dword [ecx + eax + 0x18]
mov eax, dword [ebp - 8]
mov ecx, dword [eax + edx*4]
mov dword [ebp - 0x130], ecx
mov edx, dword [ebp - 0x88]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + edx + 0x18]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x130]
mov dword [edx + ecx*4], eax
jmp 0x48b0bf
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x24]
mov eax, dword [esi + eax*8]
mov dword [edx + ecx*4], eax
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x24]
mov eax, dword [esi + eax*8 + 4]
mov dword [edx + ecx*4 + 4], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 1
cmp dword [ebp - 0x94], ecx
jge 0x48af44
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x24]
mov edx, dword [eax + edx*4 + 0xc]
sub edx, dword [esi + ecx*8]
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x24]
sub edx, dword [ecx + eax*8 + 4]
mov eax, dword [ebp - 0x94]
imul eax, eax, 3
mov ecx, dword [ebp - 0x38]
mov dword [ecx + eax*4 + 8], edx
jmp 0x48af58
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
mov dword [eax + edx*4 + 8], 0x3e6
cmp dword [ebp - 0x94], 0
jle 0x48afc7
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
mov esi, dword [ebp - 0x38]
mov ecx, dword [eax + ecx*4]
sub ecx, dword [esi + edx*4 - 0xc]
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
sub ecx, dword [eax + edx*4 - 8]
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
mov dword [eax + edx*4 - 4], ecx
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x38]
cmp dword [edx + ecx*4 - 4], 0
jge 0x48afc7
mov eax, dword [ebp - 0x94]
imul eax, eax, 3
mov ecx, dword [ebp - 0x38]
mov dword [ecx + eax*4 - 4], 0
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
cmp dword [eax + edx*4 + 8], 0
jge 0x48afee
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x38]
mov dword [edx + ecx*4 + 8], 0
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x94]
mov dword [ecx + eax*4], edx
mov eax, dword [ebp - 0x88]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x68]
mov edx, dword [ecx + eax + 0x1c]
sub edx, 1
cmp dword [ebp - 0x90], edx
jne 0x48b0bf
mov eax, dword [ebp - 0x88]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x68]
mov edx, dword [ecx + eax + 0x18]
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x24]
mov edx, dword [eax + edx*4]
sub edx, dword [esi + ecx*8]
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ecx + eax*8 + 4]
imul eax, eax, 3
cmp edx, eax
jg 0x48b0bf
mov ecx, dword [ebp - 0x94]
add ecx, 1
mov edx, dword [ebp - 0x88]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x68]
mov edx, dword [eax + edx + 0x18]
mov eax, dword [ebp - 8]
cmp ecx, dword [eax + edx*4]
jle 0x48b087
mov ecx, dword [ebp - 0x94]
add ecx, 1
mov dword [ebp - 0x134], ecx
jmp 0x48b0a3
mov edx, dword [ebp - 0x88]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + edx + 0x18]
mov edx, dword [ebp - 8]
mov eax, dword [edx + ecx*4]
mov dword [ebp - 0x134], eax
mov ecx, dword [ebp - 0x88]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + ecx + 0x18]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x134]
mov dword [ecx + eax*4], edx
jmp 0x48b4f8
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x18]
jge 0x48b121
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + edx*4 + 4]
cdq
sub eax, edx
sar eax, 1
mov edx, dword [ebp - 0x38]
mov ecx, dword [edx + ecx*4]
add ecx, eax
mov edx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x24]
mov edx, dword [eax + edx*8]
mov eax, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x24]
add edx, dword [esi + eax*8 + 4]
cmp ecx, edx
jge 0x48b121
mov ecx, dword [ebp - 0x94]
add ecx, 1
mov dword [ebp - 0x94], ecx
mov edx, dword [ebp - 0x18]
sub edx, 1
imul edx, edx, 3
add edx, 2
mov dword [ebp - 0xa4], edx
jmp 0x48b144
mov eax, dword [ebp - 0xa4]
sub eax, 1
mov dword [ebp - 0xa4], eax
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
cmp dword [ebp - 0xa4], ecx
jl 0x48b170
mov edx, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0xa4]
mov esi, dword [ebp - 0x38]
mov ecx, dword [esi + ecx*4]
mov dword [eax + edx*4 + 0xc], ecx
jmp 0x48b135
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x24]
mov ecx, dword [esi + ecx*8]
mov dword [eax + edx*4], ecx
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x24]
mov ecx, dword [esi + ecx*8 + 4]
mov dword [eax + edx*4 + 4], ecx
mov edx, dword [ebp - 0x94]
cmp edx, dword [ebp - 0x18]
jge 0x48b1f4
mov eax, dword [ebp - 0x94]
imul eax, eax, 3
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x38]
mov eax, dword [edx + eax*4 + 0xc]
sub eax, dword [esi + ecx*4]
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x38]
sub eax, dword [edx + ecx*4 + 4]
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x38]
mov dword [edx + ecx*4 + 8], eax
jmp 0x48b208
mov eax, dword [ebp - 0x94]
imul eax, eax, 3
mov ecx, dword [ebp - 0x38]
mov dword [ecx + eax*4 + 8], 0x3e6
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
cmp dword [eax + edx*4 + 8], 0
jge 0x48b22f
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x38]
mov dword [edx + ecx*4 + 8], 0
cmp dword [ebp - 0x94], 0
jle 0x48b29e
mov eax, dword [ebp - 0x94]
imul eax, eax, 3
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x38]
mov eax, dword [edx + eax*4]
sub eax, dword [esi + ecx*4 - 0xc]
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x38]
sub eax, dword [edx + ecx*4 - 8]
mov ecx, dword [ebp - 0x94]
imul ecx, ecx, 3
mov edx, dword [ebp - 0x38]
mov dword [edx + ecx*4 - 4], eax
mov eax, dword [ebp - 0x94]
imul eax, eax, 3
mov ecx, dword [ebp - 0x38]
cmp dword [ecx + eax*4 - 4], 0
jge 0x48b29e
mov edx, dword [ebp - 0x94]
imul edx, edx, 3
mov eax, dword [ebp - 0x38]
mov dword [eax + edx*4 - 4], 0
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x94]
mov dword [edx + ecx*4], eax
mov ecx, dword [ebp - 0x18]
add ecx, 1
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0xa4], 0
jmp 0x48b2d4
mov edx, dword [ebp - 0xa4]
add edx, 1
mov dword [ebp - 0xa4], edx
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x8c]
jge 0x48b313
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x6c]
mov eax, dword [edx + ecx*4]
cmp eax, dword [ebp - 0x94]
jl 0x48b311
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x6c]
mov eax, dword [edx + ecx*4]
add eax, 1
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x6c]
mov dword [edx + ecx*4], eax
jmp 0x48b2c5
mov eax, dword [ebp - 0x8c]
add eax, 1
mov dword [ebp - 0xa4], eax
jmp 0x48b333
mov ecx, dword [ebp - 0xa4]
add ecx, 1
mov dword [ebp - 0xa4], ecx
mov edx, dword [ebp - 0xa4]
cmp edx, dword [ebp - 0x5c]
jge 0x48b36f
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ecx + eax*4]
cmp edx, dword [ebp - 0x94]
jl 0x48b36d
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ecx + eax*4]
add edx, 1
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x6c]
mov dword [ecx + eax*4], edx
jmp 0x48b324
mov edx, dword [ebp - 0x58]
add edx, 1
mov dword [ebp - 0x9c], edx
mov dword [ebp - 0xa0], 0
jmp 0x48b396
mov eax, dword [ebp - 0xa0]
add eax, 1
mov dword [ebp - 0xa0], eax
mov ecx, dword [ebp - 0x58]
add ecx, 1
cmp dword [ebp - 0xa0], ecx
jge 0x48b3e2
mov edx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + edx*8 + 4]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x24]
mov ecx, dword [edx + ecx*8]
add ecx, eax
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp + 0x1c]
cmp dword [eax + edx*4], ecx
jle 0x48b3e0
mov ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x9c], ecx
jmp 0x48b3e2
jmp 0x48b387
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0xa0], edx
jmp 0x48b3ff
mov eax, dword [ebp - 0xa0]
add eax, 1
mov dword [ebp - 0xa0], eax
mov ecx, dword [ebp - 0x58]
add ecx, 1
cmp dword [ebp - 0xa0], ecx
jge 0x48b439
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp - 8]
cmp dword [eax + edx*4], 0xffffffff
je 0x48b437
mov ecx, dword [ebp - 0xa0]
mov edx, dword [ebp - 8]
mov eax, dword [edx + ecx*4]
add eax, 1
mov ecx, dword [ebp - 0xa0]
mov edx, dword [ebp - 8]
mov dword [edx + ecx*4], eax
jmp 0x48b3f0
mov eax, dword [ebp - 0x88]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x68]
mov edx, dword [ecx + eax + 0x1c]
sub edx, 1
cmp dword [ebp - 0x90], edx
jne 0x48b4f8
mov eax, dword [ebp - 0x88]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x68]
mov edx, dword [ecx + eax + 0x18]
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x24]
mov edx, dword [eax + edx*4]
sub edx, dword [esi + ecx*8]
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ecx + eax*8 + 4]
imul eax, eax, 3
cmp edx, eax
jg 0x48b4f8
mov ecx, dword [ebp - 0x94]
add ecx, 1
mov edx, dword [ebp - 0x88]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x68]
mov edx, dword [eax + edx + 0x18]
mov eax, dword [ebp - 8]
cmp ecx, dword [eax + edx*4]
jle 0x48b4c0
mov ecx, dword [ebp - 0x94]
add ecx, 1
mov dword [ebp - 0x138], ecx
jmp 0x48b4dc
mov edx, dword [ebp - 0x88]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + edx + 0x18]
mov edx, dword [ebp - 8]
mov eax, dword [edx + ecx*4]
mov dword [ebp - 0x138], eax
mov ecx, dword [ebp - 0x88]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + ecx + 0x18]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x138]
mov dword [ecx + eax*4], edx
mov eax, dword [ebp - 0x8c]
add eax, 1
mov dword [ebp - 0x8c], eax
jmp 0x48a886
jmp 0x48b52a
mov ecx, dword [ebp - 0x88]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + ecx + 0x1c]
mov dword [ebp - 0x8c], eax
mov ecx, dword [ebp - 0x88]
add ecx, 1
mov dword [ebp - 0x88], ecx
jmp 0x48a6a4
jmp 0x48a67b
mov edx, dword [ebp + 0x1c]
mov dword [ebp - 0xa8], edx
mov dword [ebp - 0xac], 0
mov dword [ebp - 0x3c], 0
jmp 0x48b568
mov eax, dword [ebp - 0x3c]
add eax, 1
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x58]
add ecx, 1
cmp dword [ebp - 0x3c], ecx
jge 0x48b720
mov edx, dword [ebp - 0xac]
cmp edx, dword [ebp - 0x18]
jge 0x48b5b0
mov eax, dword [ebp - 0xac]
imul eax, eax, 3
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x3c]
mov esi, dword [ebp - 0xa8]
mov eax, dword [ecx + eax*4]
cmp eax, dword [esi + edx*4]
jge 0x48b5b0
mov ecx, dword [ebp - 0xac]
add ecx, 1
mov dword [ebp - 0xac], ecx
jmp 0x48b577
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 8]
cmp dword [eax + edx*4], 0xffffffff
jne 0x48b5cd
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0xac]
mov dword [edx + ecx*4], eax
jmp 0x48b5ee
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x3c]
mov esi, dword [ebp - 8]
mov eax, dword [esi + eax*4]
mov dword [edx + ecx*4], eax
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x60]
mov eax, dword [edx + ecx*4]
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xb0], 0
jmp 0x48b609
mov ecx, dword [ebp - 0xb0]
add ecx, 1
mov dword [ebp - 0xb0], ecx
mov edx, dword [ebp - 0x58]
add edx, 1
cmp dword [ebp - 0xb0], edx
jge 0x48b657
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 8]
cmp dword [ecx + eax*4], 0xffffffff
je 0x48b655
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebp - 8]
mov ecx, dword [eax + edx*4]
cmp ecx, dword [ebp - 0xac]
jl 0x48b655
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebp - 8]
mov ecx, dword [eax + edx*4]
add ecx, 1
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebp - 8]
mov dword [eax + edx*4], ecx
jmp 0x48b5fa
mov dword [ebp - 0xb4], 0
jmp 0x48b672
mov ecx, dword [ebp - 0xb4]
add ecx, 1
mov dword [ebp - 0xb4], ecx
mov edx, dword [ebp - 0xb4]
cmp edx, dword [ebp - 0x5c]
jge 0x48b6ae
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ecx + eax*4]
cmp edx, dword [ebp - 0xac]
jl 0x48b6ac
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ecx + eax*4]
add edx, 1
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x6c]
mov dword [ecx + eax*4], edx
jmp 0x48b663
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0xb4], edx
jmp 0x48b6c8
mov eax, dword [ebp - 0xb4]
sub eax, 1
mov dword [ebp - 0xb4], eax
mov ecx, dword [ebp - 0xb4]
cmp ecx, dword [ebp - 0xac]
jle 0x48b6f7
mov edx, dword [ebp - 0xb4]
imul edx, edx, 3
mov eax, dword [ebp - 0xb4]
imul eax, eax, 3
mov ecx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x38]
mov edx, dword [esi + edx*4 - 0xc]
mov dword [ecx + eax*4], edx
jmp 0x48b6b9
mov eax, dword [ebp - 0xac]
imul eax, eax, 3
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x3c]
mov esi, dword [ebp - 0xa8]
mov edx, dword [esi + edx*4]
mov dword [ecx + eax*4], edx
mov eax, dword [ebp - 0x18]
add eax, 1
mov dword [ebp - 0x18], eax
jmp 0x48b55f
mov dword [ebp - 0x3c], 1
jmp 0x48b732
mov ecx, dword [ebp - 0x3c]
add ecx, 1
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x58]
add edx, 1
cmp dword [ebp - 0x3c], edx
jge 0x48b86d
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x60]
mov eax, dword [ecx + eax*4]
sub eax, dword [esi + edx*4 - 4]
cmp eax, 2
jge 0x48b868
mov dword [ebp - 0xb8], 0
jmp 0x48b778
mov ecx, dword [ebp - 0xb8]
add ecx, 1
mov dword [ebp - 0xb8], ecx
mov edx, dword [ebp - 0xb8]
cmp edx, dword [ebp - 0x5c]
jge 0x48b7b7
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x60]
mov eax, dword [ecx + eax*4]
cmp eax, dword [esi + edx*4]
jl 0x48b7b5
mov ecx, dword [ebp - 0xb8]
mov edx, dword [ebp - 0x6c]
mov eax, dword [edx + ecx*4]
add eax, 1
mov ecx, dword [ebp - 0xb8]
mov edx, dword [ebp - 0x6c]
mov dword [edx + ecx*4], eax
jmp 0x48b769
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xb8], eax
jmp 0x48b7d1
mov ecx, dword [ebp - 0xb8]
add ecx, 1
mov dword [ebp - 0xb8], ecx
mov edx, dword [ebp - 0x58]
add edx, 1
cmp dword [ebp - 0xb8], edx
jge 0x48b7fc
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx + eax*4]
add edx, 1
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x60]
mov dword [ecx + eax*4], edx
jmp 0x48b7c2
mov dword [ebp - 0xbc], 0
jmp 0x48b817
mov edx, dword [ebp - 0xbc]
add edx, 1
mov dword [ebp - 0xbc], edx
mov eax, dword [ebp - 0x58]
add eax, 1
cmp dword [ebp - 0xbc], eax
jge 0x48b868
mov ecx, dword [ebp - 0xbc]
mov edx, dword [ebp - 8]
cmp dword [edx + ecx*4], 0xffffffff
je 0x48b866
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x60]
mov eax, dword [ecx + eax*4]
cmp eax, dword [esi + edx*4]
jl 0x48b866
mov ecx, dword [ebp - 0xbc]
mov edx, dword [ebp - 8]
mov eax, dword [edx + ecx*4]
add eax, 1
mov ecx, dword [ebp - 0xbc]
mov edx, dword [ebp - 8]
mov dword [edx + ecx*4], eax
jmp 0x48b808
jmp 0x48b729
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx + eax*4]
add edx, 2
imul edx, edx, 6
add edx, 2
push edx
call fcn.005142b0
add esp, 4
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x3c], 0
jmp 0x48b8a9
mov ecx, dword [ebp - 0x3c]
add ecx, 1
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax + edx*4]
add ecx, 2
imul ecx, ecx, 6
cmp dword [ebp - 0x3c], ecx
jge 0x48b8c8
mov edx, dword [ebp - 0x54]
add edx, dword [ebp - 0x3c]
mov byte [edx], 0x20
jmp 0x48b8a0
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x3c]
mov byte [eax], 0xa
mov ecx, dword [ebp - 0x54]
add ecx, dword [ebp - 0x3c]
mov byte [ecx + 1], 0
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax + edx*4]
add ecx, 2
imul ecx, ecx, 6
add ecx, 1
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax + edx*4]
add ecx, 1
mov edx, dword [ebp - 4]
imul edx, ecx
add edx, 1
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx + eax*4]
add edx, 1
mov eax, dword [ebp - 4]
imul eax, edx
add eax, 1
push eax
call fcn.005142b0
add esp, 4
mov dword [ebp - 0x104], eax
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x40], 0
jmp 0x48b947
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x40]
cmp edx, dword [ecx + eax*4]
jg 0x48b970
mov eax, dword [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0x40]
imul ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x70]
add edx, ecx
push edx
call fcn.004fa590
add esp, 8
jmp 0x48b93e
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x108], eax
mov ecx, dword [ebp - 0x108]
push ecx
call fcn.005142d9
add esp, 4
mov edx, dword [ebp - 0x50]
add edx, 1
mov eax, dword [ebp - 0x58]
add eax, 1
imul edx, eax
push edx
push 0x40
call dword [sym.imp.kernel32.dll_GlobalAlloc]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jne 0x48b9b5
call fcn.00428561
xor eax, eax
jmp 0x48c80b
mov ecx, dword [ebp - 0x30]
push ecx
call dword [sym.imp.kernel32.dll_GlobalLock]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x3c], 0
jmp 0x48b9d4
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x1c]
jge 0x48bcac
mov ecx, dword [ebp - 0x3c]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + ecx + 0xc]
add eax, 1
mov dword [ebp - 0x40], eax
jmp 0x48b9fe
mov ecx, dword [ebp - 0x40]
add ecx, 1
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x3c]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x40]
cmp ecx, dword [eax + edx + 0x14]
jge 0x48ba9a
mov edx, dword [ebp - 0x3c]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x50]
add eax, 1
mov ecx, dword [ebp - 0x68]
mov edx, dword [ecx + edx + 0x10]
imul edx, eax
add edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x2c]
mov cl, byte [eax + edx]
or cl, 3
mov edx, dword [ebp - 0x3c]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x50]
add eax, 1
mov esi, dword [ebp - 0x68]
mov edx, dword [esi + edx + 0x10]
imul edx, eax
add edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x2c]
mov byte [eax + edx], cl
mov ecx, dword [ebp - 0x3c]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x50]
add edx, 1
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + ecx + 0x18]
imul ecx, edx
add ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x2c]
mov al, byte [edx + ecx]
or al, 3
mov ecx, dword [ebp - 0x3c]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x50]
add edx, 1
mov esi, dword [ebp - 0x68]
mov ecx, dword [esi + ecx + 0x18]
imul ecx, edx
add ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x2c]
mov byte [edx + ecx], al
jmp 0x48b9f5
mov eax, dword [ebp - 0x3c]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x68]
mov edx, dword [ecx + eax + 0x10]
add edx, 1
mov dword [ebp - 0x40], edx
jmp 0x48bab8
mov eax, dword [ebp - 0x40]
add eax, 1
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x3c]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x40]
cmp eax, dword [edx + ecx + 0x18]
jge 0x48bb54
mov ecx, dword [ebp - 0x3c]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x50]
add edx, 1
imul edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + ecx + 0xc]
add ecx, edx
mov edx, dword [ebp - 0x2c]
mov al, byte [edx + ecx]
or al, 0xc
mov ecx, dword [ebp - 0x3c]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x50]
add edx, 1
imul edx, dword [ebp - 0x40]
mov esi, dword [ebp - 0x68]
mov ecx, dword [esi + ecx + 0xc]
add ecx, edx
mov edx, dword [ebp - 0x2c]
mov byte [edx + ecx], al
mov eax, dword [ebp - 0x3c]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x50]
add ecx, 1
imul ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + eax + 0x14]
add eax, ecx
mov ecx, dword [ebp - 0x2c]
mov dl, byte [ecx + eax]
or dl, 0xc
mov eax, dword [ebp - 0x3c]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x50]
add ecx, 1
imul ecx, dword [ebp - 0x40]
mov esi, dword [ebp - 0x68]
mov eax, dword [esi + eax + 0x14]
add eax, ecx
mov ecx, dword [ebp - 0x2c]
mov byte [ecx + eax], dl
jmp 0x48baaf
mov edx, dword [ebp - 0x3c]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x50]
add eax, 1
mov ecx, dword [ebp - 0x3c]
imul ecx, ecx, 0x24
mov esi, dword [ebp - 0x68]
imul eax, dword [esi + ecx + 0x10]
mov ecx, dword [ebp - 0x68]
mov edx, dword [ecx + edx + 0xc]
add edx, eax
mov eax, dword [ebp - 0x2c]
mov cl, byte [eax + edx]
or cl, 0xa
mov edx, dword [ebp - 0x3c]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x3c]
imul eax, eax, 0x24
mov esi, dword [ebp - 0x50]
add esi, 1
mov edi, dword [ebp - 0x68]
imul esi, dword [edi + eax + 0x10]
mov eax, dword [ebp - 0x68]
mov edx, dword [eax + edx + 0xc]
add edx, esi
mov eax, dword [ebp - 0x2c]
mov byte [eax + edx], cl
mov ecx, dword [ebp - 0x3c]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x50]
add edx, 1
mov eax, dword [ebp - 0x3c]
imul eax, eax, 0x24
mov esi, dword [ebp - 0x68]
imul edx, dword [esi + eax + 0x10]
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + ecx + 0x14]
add ecx, edx
mov edx, dword [ebp - 0x2c]
mov al, byte [edx + ecx]
or al, 9
mov ecx, dword [ebp - 0x3c]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x3c]
imul edx, edx, 0x24
mov esi, dword [ebp - 0x50]
add esi, 1
mov edi, dword [ebp - 0x68]
imul esi, dword [edi + edx + 0x10]
mov edx, dword [ebp - 0x68]
mov ecx, dword [edx + ecx + 0x14]
add ecx, esi
mov edx, dword [ebp - 0x2c]
mov byte [edx + ecx], al
mov eax, dword [ebp - 0x3c]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x50]
add ecx, 1
mov edx, dword [ebp - 0x3c]
imul edx, edx, 0x24
mov esi, dword [ebp - 0x68]
imul ecx, dword [esi + edx + 0x18]
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + eax + 0xc]
add eax, ecx
mov ecx, dword [ebp - 0x2c]
mov dl, byte [ecx + eax]
or dl, 6
mov eax, dword [ebp - 0x3c]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x3c]
imul ecx, ecx, 0x24
mov esi, dword [ebp - 0x50]
add esi, 1
mov edi, dword [ebp - 0x68]
imul esi, dword [edi + ecx + 0x18]
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + eax + 0xc]
add eax, esi
mov ecx, dword [ebp - 0x2c]
mov byte [ecx + eax], dl
mov edx, dword [ebp - 0x3c]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x50]
add eax, 1
mov ecx, dword [ebp - 0x3c]
imul ecx, ecx, 0x24
mov esi, dword [ebp - 0x68]
imul eax, dword [esi + ecx + 0x18]
mov ecx, dword [ebp - 0x68]
mov edx, dword [ecx + edx + 0x14]
add edx, eax
mov eax, dword [ebp - 0x2c]
mov cl, byte [eax + edx]
or cl, 5
mov edx, dword [ebp - 0x3c]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x3c]
imul eax, eax, 0x24
mov esi, dword [ebp - 0x50]
add esi, 1
mov edi, dword [ebp - 0x68]
imul esi, dword [edi + eax + 0x18]
mov eax, dword [ebp - 0x68]
mov edx, dword [eax + edx + 0x14]
add edx, esi
mov eax, dword [ebp - 0x2c]
mov byte [eax + edx], cl
jmp 0x48b9cb
call fcn.004090a0
mov ecx, eax
call fcn.004411a0
test eax, eax
jne 0x48bcc5
mov dword [ebp - 0x4c], 0x5625a4
jmp 0x48bcdd
call fcn.004090a0
mov ecx, eax
call fcn.004411a0
cmp eax, 1
jne 0x48bcdd
mov dword [ebp - 0x4c], 0x5625cc
mov dword [ebp - 0x3c], 0
jmp 0x48bcef
mov ecx, dword [ebp - 0x3c]
add ecx, 1
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x3c]
cmp edx, dword [ebp - 0x50]
jg 0x48becd
mov dword [ebp - 0x40], 0
jmp 0x48bd0d
mov eax, dword [ebp - 0x40]
add eax, 1
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
cmp ecx, dword [ebp - 0x58]
jg 0x48bec8
mov edx, dword [ebp - 0x50]
add edx, 1
imul edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3c]
add eax, edx
mov ecx, dword [ebp - 0x2c]
xor edx, edx
mov dl, byte [ecx + eax]
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x13c]
sub eax, 3
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0xc
ja case.0x48bd58.1
mov ecx, dword [ebp - 0x13c]
jmp dword [ecx*4 + 0x48c811]
mov edx, dword [ebp - 0x4c]
add edx, dword [0x562624]
mov dword [ebp - 0x20], edx
jmp 0x48be06
mov eax, dword [ebp - 0x4c]
add eax, dword [0x562628]
mov dword [ebp - 0x20], eax
jmp 0x48be06
mov ecx, dword [ebp - 0x4c]
add ecx, dword [0x56261c]
mov dword [ebp - 0x20], ecx
jmp 0x48be06
mov edx, dword [ebp - 0x4c]
add edx, dword [0x5718b4]
mov dword [ebp - 0x20], edx
jmp 0x48be06
mov eax, dword [ebp - 0x4c]
add eax, dword [0x562638]
mov dword [ebp - 0x20], eax
jmp 0x48be06
mov ecx, dword [ebp - 0x4c]
add ecx, dword [0x562634]
mov dword [ebp - 0x20], ecx
jmp 0x48be06
mov edx, dword [ebp - 0x4c]
add edx, dword [0x562620]
mov dword [ebp - 0x20], edx
jmp 0x48be06
mov eax, dword [ebp - 0x4c]
add eax, dword [0x56263c]
mov dword [ebp - 0x20], eax
jmp 0x48be06
mov ecx, dword [ebp - 0x4c]
add ecx, dword [0x56262c]
mov dword [ebp - 0x20], ecx
jmp 0x48be06
mov edx, dword [ebp - 0x4c]
add edx, dword [0x562630]
mov dword [ebp - 0x20], edx
jmp 0x48be06
mov eax, dword [ebp - 0x4c]
add eax, dword [0x562640]
mov dword [ebp - 0x20], eax
jmp 0x48be06
mov dword [ebp - 0x20], 0
cmp dword [ebp - 0x20], 0
je 0x48bec3
mov dword [ebp - 0xc0], 0
jmp 0x48be2b
mov ecx, dword [ebp - 0xc0]
add ecx, 1
mov dword [ebp - 0xc0], ecx
cmp dword [ebp - 0xc0], 6
jge 0x48be69
mov edx, dword [ebp - 0x20]
mov al, byte [edx]
push eax
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x48]
mov eax, dword [edx + ecx*4]
imul eax, eax, 6
add eax, dword [ebp - 0xc0]
push eax
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x60]
mov eax, dword [edx + ecx*4]
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0x70]
push edx
call fcn.0048c845
add esp, 0x14
jmp 0x48be1c
mov dword [ebp - 0xc0], 6
jmp 0x48be84
mov eax, dword [ebp - 0xc0]
add eax, 1
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0xc
jge 0x48bec3
mov ecx, dword [ebp - 0x20]
mov dl, byte [ecx + 1]
push edx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx + eax*4]
imul edx, edx, 6
add edx, dword [ebp - 0xc0]
push edx
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx + eax*4]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.0048c845
add esp, 0x14
jmp 0x48be75
jmp 0x48bd04
jmp 0x48bce6
mov dword [ebp - 0x3c], 0
jmp 0x48bedf
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x50]
jg 0x48c145
mov dword [ebp - 0x40], 0
jmp 0x48befd
mov ecx, dword [ebp - 0x40]
add ecx, 1
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x40]
cmp edx, dword [ebp - 0x58]
jg 0x48c140
mov eax, dword [ebp - 0x50]
add eax, 1
imul eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
add ecx, eax
mov edx, dword [ebp - 0x2c]
xor eax, eax
mov al, byte [edx + ecx]
and eax, 2
test eax, eax
je 0x48c022
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x48]
mov eax, dword [edx + ecx*4]
add eax, 2
mov dword [ebp - 0xc4], eax
jmp 0x48bf4e
mov ecx, dword [ebp - 0xc4]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0xc4]
cmp ecx, dword [eax + edx*4 + 4]
jge 0x48c022
mov dword [ebp - 0xc8], 0
jmp 0x48bf7f
mov edx, dword [ebp - 0xc8]
add edx, 1
mov dword [ebp - 0xc8], edx
cmp dword [ebp - 0xc8], 6
jge 0x48bfc0
mov eax, dword [ebp - 0x4c]
add eax, dword [0x562624]
mov cl, byte [eax]
push ecx
mov edx, dword [ebp - 0xc4]
imul edx, edx, 6
add edx, dword [ebp - 0xc8]
push edx
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx + eax*4]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.0048c845
add esp, 0x14
jmp 0x48bf70
mov dword [ebp - 0xc8], 6
jmp 0x48bfdb
mov edx, dword [ebp - 0xc8]
add edx, 1
mov dword [ebp - 0xc8], edx
cmp dword [ebp - 0xc8], 0xc
jge 0x48c01d
mov eax, dword [ebp - 0x4c]
add eax, dword [0x562624]
mov cl, byte [eax + 1]
push ecx
mov edx, dword [ebp - 0xc4]
imul edx, edx, 6
add edx, dword [ebp - 0xc8]
push edx
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx + eax*4]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.0048c845
add esp, 0x14
jmp 0x48bfcc
jmp 0x48bf3f
mov edx, dword [ebp - 0x50]
add edx, 1
imul edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3c]
add eax, edx
mov ecx, dword [ebp - 0x2c]
xor edx, edx
mov dl, byte [ecx + eax]
and edx, 8
test edx, edx
je 0x48c13b
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx + eax*4]
add edx, 1
mov dword [ebp - 0xcc], edx
jmp 0x48c067
mov eax, dword [ebp - 0xcc]
add eax, 1
mov dword [ebp - 0xcc], eax
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0xcc]
cmp eax, dword [edx + ecx*4 + 4]
jge 0x48c13b
mov dword [ebp - 0xd0], 0
jmp 0x48c098
mov ecx, dword [ebp - 0xd0]
add ecx, 1
mov dword [ebp - 0xd0], ecx
cmp dword [ebp - 0xd0], 6
jge 0x48c0d9
mov edx, dword [ebp - 0x4c]
add edx, dword [0x562628]
mov al, byte [edx]
push eax
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x48]
mov eax, dword [edx + ecx*4]
imul eax, eax, 6
add eax, dword [ebp - 0xd0]
push eax
mov ecx, dword [ebp - 0xcc]
push ecx
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x70]
push eax
call fcn.0048c845
add esp, 0x14
jmp 0x48c089
mov dword [ebp - 0xd0], 6
jmp 0x48c0f4
mov ecx, dword [ebp - 0xd0]
add ecx, 1
mov dword [ebp - 0xd0], ecx
cmp dword [ebp - 0xd0], 0xc
jge 0x48c136
mov edx, dword [ebp - 0x4c]
add edx, dword [0x562628]
mov al, byte [edx + 1]
push eax
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x48]
mov eax, dword [edx + ecx*4]
imul eax, eax, 6
add eax, dword [ebp - 0xd0]
push eax
mov ecx, dword [ebp - 0xcc]
push ecx
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x70]
push eax
call fcn.0048c845
add esp, 0x14
jmp 0x48c0e5
jmp 0x48c058
jmp 0x48bef4
jmp 0x48bed6
mov dword [ebp - 0x14], 0
mov word [ebp - 0x28], 0
mov dword [ebp - 0x3c], 0
mov ecx, dword [ebp - 0x3c]
cmp ecx, dword [ebp - 0x1c]
jge 0x48c5b2
mov dword [ebp - 0xd8], 0
mov edx, dword [ebp - 0x3c]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x68]
lea ecx, [eax + edx + 0x20]
call fcn.00409600
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0x40], 0
jmp 0x48c199
mov ecx, dword [ebp - 0x40]
add ecx, 1
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x3c]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x40]
cmp ecx, dword [eax + edx + 0x1c]
jge 0x48c5a4
mov edx, dword [ebp - 0xd4]
add edx, dword [ebp - 0xd8]
mov dword [ebp - 0xd4], edx
mov dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0xd4]
add eax, dword [ebp - 0xd8]
movsx ecx, byte [eax]
test ecx, ecx
je 0x48c587
mov edx, dword [ebp - 0xd4]
add edx, dword [ebp - 0xd8]
movsx eax, byte [edx]
cmp eax, 0xd
je 0x48c587
mov ecx, dword [ebp - 0xd4]
add ecx, dword [ebp - 0xd8]
movsx edx, byte [ecx]
cmp edx, 0x20
jne 0x48c21f
mov eax, dword [ebp - 0xd8]
add eax, 1
mov dword [ebp - 0xd8], eax
jmp 0x48c1cb
push 0xffffffffffffff80
mov ecx, dword [ebp - 0x3c]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + ecx + 0xc]
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx + eax*4]
mov eax, dword [ebp - 0xd8]
lea ecx, [edx + eax + 2]
imul ecx, ecx, 6
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [eax + edx*4]
push ecx
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x70]
push eax
call fcn.0048c845
add esp, 0x14
mov ecx, dword [ebp - 0xd4]
add ecx, dword [ebp - 0xd8]
movsx edx, byte [ecx]
and edx, 0x80
test edx, edx
je 0x48c407
mov eax, dword [ebp - 0xd4]
add eax, dword [ebp - 0xd8]
mov cl, byte [eax]
push ecx
mov edx, dword [ebp - 0x3c]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + edx + 0xc]
mov edx, dword [ebp - 0x48]
mov eax, dword [edx + ecx*4]
mov ecx, dword [ebp - 0xd8]
lea edx, [eax + ecx + 2]
imul edx, edx, 6
add edx, 1
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ecx + eax*4]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.0048c845
add esp, 0x14
mov edx, dword [ebp - 0xd4]
add edx, dword [ebp - 0xd8]
mov al, byte [edx + 1]
push eax
mov ecx, dword [ebp - 0x3c]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + ecx + 0xc]
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx + eax*4]
mov eax, dword [ebp - 0xd8]
lea ecx, [edx + eax + 2]
imul ecx, ecx, 6
add ecx, 2
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [eax + edx*4]
push ecx
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x70]
push eax
call fcn.0048c845
add esp, 0x14
mov cl, byte [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x3c]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + edx + 0xc]
mov edx, dword [ebp - 0x48]
mov eax, dword [edx + ecx*4]
mov ecx, dword [ebp - 0xd8]
lea edx, [eax + ecx + 2]
imul edx, edx, 6
add edx, 3
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ecx + eax*4]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.0048c845
add esp, 0x14
mov edx, dword [ebp - 0x28]
and edx, 0xffff
sar edx, 8
and edx, 0xff
push edx
mov eax, dword [ebp - 0x3c]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x68]
mov edx, dword [ecx + eax + 0xc]
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax + edx*4]
mov edx, dword [ebp - 0xd8]
lea eax, [ecx + edx + 2]
imul eax, eax, 6
add eax, 4
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x6c]
mov eax, dword [edx + ecx*4]
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0x70]
push edx
call fcn.0048c845
add esp, 0x14
mov ax, word [ebp - 0x28]
add ax, 1
mov word [ebp - 0x28], ax
push 0xffffffffffffff80
mov ecx, dword [ebp - 0x3c]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + ecx + 0xc]
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx + eax*4]
mov eax, dword [ebp - 0xd8]
lea ecx, [edx + eax + 2]
imul ecx, ecx, 6
add ecx, 5
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [eax + edx*4]
push ecx
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x70]
push eax
call fcn.0048c845
add esp, 0x14
mov ecx, dword [ebp - 0xd8]
add ecx, 2
mov dword [ebp - 0xd8], ecx
jmp 0x48c582
push 0
mov edx, dword [ebp - 0x3c]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + edx + 0xc]
mov edx, dword [ebp - 0x48]
mov eax, dword [edx + ecx*4]
mov ecx, dword [ebp - 0xd8]
lea edx, [eax + ecx + 2]
imul edx, edx, 6
add edx, 1
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ecx + eax*4]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.0048c845
add esp, 0x14
mov edx, dword [ebp - 0xd4]
add edx, dword [ebp - 0xd8]
mov al, byte [edx]
push eax
mov ecx, dword [ebp - 0x3c]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + ecx + 0xc]
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx + eax*4]
mov eax, dword [ebp - 0xd8]
lea ecx, [edx + eax + 2]
imul ecx, ecx, 6
add ecx, 2
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [eax + edx*4]
push ecx
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x70]
push eax
call fcn.0048c845
add esp, 0x14
mov cl, byte [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x3c]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax + edx + 0xc]
mov edx, dword [ebp - 0x48]
mov eax, dword [edx + ecx*4]
mov ecx, dword [ebp - 0xd8]
lea edx, [eax + ecx + 2]
imul edx, edx, 6
add edx, 3
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ecx + eax*4]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.0048c845
add esp, 0x14
mov edx, dword [ebp - 0x28]
and edx, 0xffff
sar edx, 8
and edx, 0xff
push edx
mov eax, dword [ebp - 0x3c]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x68]
mov edx, dword [ecx + eax + 0xc]
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax + edx*4]
mov edx, dword [ebp - 0xd8]
lea eax, [ecx + edx + 2]
imul eax, eax, 6
add eax, 4
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x6c]
mov eax, dword [edx + ecx*4]
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0x70]
push edx
call fcn.0048c845
add esp, 0x14
mov ax, word [ebp - 0x28]
add ax, 1
mov word [ebp - 0x28], ax
push 0xffffffffffffff80
mov ecx, dword [ebp - 0x3c]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + ecx + 0xc]
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx + eax*4]
mov eax, dword [ebp - 0xd8]
lea ecx, [edx + eax + 2]
imul ecx, ecx, 6
add ecx, 5
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [eax + edx*4]
push ecx
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x70]
push eax
call fcn.0048c845
add esp, 0x14
mov ecx, dword [ebp - 0xd8]
add ecx, 1
mov dword [ebp - 0xd8], ecx
jmp 0x48c1cb
mov edx, dword [ebp - 0xd8]
add edx, 2
mov dword [ebp - 0xd8], edx
mov eax, dword [ebp - 0x14]
add eax, 1
mov dword [ebp - 0x14], eax
jmp 0x48c190
mov ecx, dword [ebp - 0x3c]
add ecx, 1
mov dword [ebp - 0x3c], ecx
jmp 0x48c159
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x3c], 0
jmp 0x48c5cb
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx + eax*4]
add edx, 1
cmp dword [ebp - 0x3c], edx
jge 0x48c72e
mov dword [ebp - 0x40], 0
jmp 0x48c5f2
mov eax, dword [ebp - 0x40]
add eax, 6
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 4]
sub ecx, 1
cmp dword [ebp - 0x40], ecx
jge 0x48c705
mov edx, dword [ebp - 4]
imul edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x70]
add eax, edx
mov ecx, dword [ebp - 0x40]
xor edx, edx
mov dl, byte [eax + ecx]
cmp edx, 0x80
jne 0x48c66e
push 6
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x70]
add ecx, eax
add ecx, dword [ebp - 0x40]
push ecx
mov edx, dword [ebp + 0x24]
add edx, dword [ebp - 0x34]
push edx
call fcn.004fa250
add esp, 0xc
mov eax, dword [ebp - 0x34]
add eax, 6
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 4]
imul ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x70]
add edx, ecx
mov eax, dword [ebp - 0x40]
xor ecx, ecx
mov cl, byte [edx + eax + 1]
test ecx, ecx
je 0x48c669
mov edx, dword [ebp - 0x40]
add edx, 6
mov dword [ebp - 0x40], edx
jmp 0x48c700
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x70]
add ecx, eax
mov edx, dword [ebp - 0x40]
xor eax, eax
mov al, byte [ecx + edx]
and eax, 0x80
test eax, eax
je 0x48c6dd
mov ecx, dword [ebp - 4]
imul ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x70]
add edx, ecx
mov eax, dword [ebp + 0x24]
add eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x40]
mov dl, byte [edx + ecx]
mov byte [eax], dl
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 4]
imul ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x70]
add edx, ecx
mov eax, dword [ebp + 0x24]
add eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x40]
mov dl, byte [edx + ecx + 6]
mov byte [eax], dl
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x40]
add ecx, 6
mov dword [ebp - 0x40], ecx
jmp 0x48c700
mov edx, dword [ebp - 4]
imul edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x70]
add eax, edx
mov ecx, dword [ebp + 0x24]
add ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x40]
mov al, byte [eax + edx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x34]
add ecx, 1
mov dword [ebp - 0x34], ecx
jmp 0x48c5e9
mov edx, dword [ebp + 0x24]
add edx, dword [ebp - 0x34]
mov byte [edx], 0xd
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp + 0x24]
add ecx, dword [ebp - 0x34]
mov byte [ecx], 0xa
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
jmp 0x48c5c2
mov eax, dword [ebp + 0x24]
add eax, dword [ebp - 0x34]
mov byte [eax], 0
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x60]
mov eax, dword [edx + ecx*4]
add eax, 1
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x10c], ecx
mov edx, dword [ebp - 0x10c]
push edx
call fcn.005142d9
add esp, 4
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x110], eax
mov ecx, dword [ebp - 0x110]
push ecx
call fcn.005142d9
add esp, 4
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x114], edx
mov eax, dword [ebp - 0x114]
push eax
call fcn.005142d9
add esp, 4
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x118], ecx
mov edx, dword [ebp - 0x118]
push edx
call fcn.005142d9
add esp, 4
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x11c], eax
mov ecx, dword [ebp - 0x11c]
push ecx
call fcn.005142d9
add esp, 4
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x120], edx
mov eax, dword [ebp - 0x120]
push eax
call fcn.005142d9
add esp, 4
mov ecx, dword [ebp - 0x30]
push ecx
call dword [sym.imp.kernel32.dll_GlobalLock]
mov edx, dword [ebp - 0x30]
push edx
call dword [sym.imp.kernel32.dll_GlobalFree]
cmp dword [ebp - 8], 0
je 0x48c808
mov eax, dword [ebp - 8]
mov dword [ebp - 0x124], eax
mov ecx, dword [ebp - 0x124]
push ecx
call fcn.005142d9
add esp, 4
mov eax, dword [ebp - 0x10]
pop edi
pop esi
mov esp, ebp
pop ebp
ret