Function at 0x4ceed6
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
push ebx
push esi
mov esi, ecx
mov dword [ebp - 0x54], edx
push edi
mov dword [ebp - 0x58], esi
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 8]
mov dword [ebp - 0x10], eax
mov eax, dword [esi + 0x38]
mov dword [ebp - 0x2c], eax
mov eax, dword [esi + 0x3c]
mov dword [ebp - 0x38], eax
mov eax, dword [esi + 0x40]
mov dword [ebp - 0x3c], eax
mov eax, dword [esi + 0x44]
mov dword [ebp - 0x44], eax
xor eax, eax
inc eax
mov edx, dword [esi + 0x34]
shl eax, cl
mov ecx, dword [esi + 4]
dec eax
mov dword [ebp - 0x5c], eax
xor eax, eax
mov ebx, dword [esi + 0x18]
inc eax
mov edi, dword [esi + 0x1c]
shl eax, cl
mov ecx, dword [esi + 0x2c]
dec eax
mov dword [ebp - 0x60], eax
mov eax, dword [esi]
mov dword [ebp - 0x50], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x30], eax
mov eax, dword [esi + 0x28]
mov dword [ebp - 0x34], eax
mov eax, dword [esi + 0x24]
mov dword [ebp - 0x1c], eax
mov eax, dword [esi + 0x30]
mov esi, dword [esi + 0x20]
mov dword [ebp - 0x4c], eax
xor eax, eax
mov dword [ebp - 0x18], eax
mov al, 8
sub al, byte [ebp - 0x50]
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 8], ebx
mov byte [ebp - 1], al
and ecx, dword [ebp - 0x5c]
mov eax, edx
shl eax, 4
add eax, ecx
mov dword [ebp - 0x48], ecx
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x40], eax
movzx edx, word [ecx + eax*2]
cmp edi, 0x1000000
jae 0x4cef8d
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
mov dword [ebp - 0x24], ecx
cmp esi, ecx
jae 0x4cf779
mov ebx, dword [ebp - 0x10]
mov eax, 0x800
sub eax, edx
mov edi, ecx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x40]
mov word [ebx + edx*2], ax
mov edx, ebx
mov eax, dword [ebp - 0x28]
add edx, 0xe6c
mov ebx, dword [ebp - 8]
mov dword [ebp - 0xc], edx
test eax, eax
jne 0x4cefd3
cmp dword [ebp - 0x4c], 0
je 0x4cf00c
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
mov eax, ecx
mov ecx, dword [ebp - 0x30]
cmove eax, dword [ebp - 0x34]
movzx edx, byte [eax + ecx - 1]
mov cl, byte [ebp - 1]
mov eax, dword [ebp - 0x28]
and eax, dword [ebp - 0x60]
shr edx, cl
mov ecx, dword [ebp - 0x50]
shl eax, cl
mov ecx, dword [ebp - 0x24]
add edx, eax
imul eax, edx, 0x600
mov edx, dword [ebp - 0xc]
add edx, eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xc], edx
inc eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
cmp eax, 7
jae 0x4cf34b
cmp dword [ebp - 0x14], 4
movzx edx, word [edx + 2]
push 3
pop eax
cmovb eax, dword [ebp - 0x14]
sub dword [ebp - 0x14], eax
cmp ecx, 0x1000000
jae 0x4cf047
movzx eax, byte [ebx]
mov edi, ecx
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4cf071
mov edi, eax
mov dword [ebp - 0x48], 5
mov eax, 0x800
sub eax, edx
shr eax, 5
push 4
add eax, edx
pop edx
movzx eax, ax
push edx
jmp 0x4cf08a
sub edi, eax
mov dword [ebp - 0x48], 7
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
push 6
movzx eax, dx
pop edx
push edx
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x40], edx
pop ecx
mov dword [ebp - 0x24], ecx
mov word [ebx + 2], ax
mov eax, ebx
mov ebx, dword [ebp - 8]
movzx ecx, word [ecx + eax]
cmp edi, 0x1000000
jae 0x4cf0b8
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf0d7
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cf0eb
mov edx, dword [ebp - 0x48]
sub edi, eax
sub esi, eax
mov dword [ebp - 0x40], edx
mov eax, ecx
shr eax, 5
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x24]
mov ebx, dword [ebp - 0xc]
mov word [ecx + ebx], ax
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 8]
movzx ecx, word [eax + edx*2]
cmp edi, 0x1000000
jae 0x4cf116
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
shl edx, 2
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf13b
mov edi, eax
mov dword [ebp - 0x24], edx
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cf151
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
movzx eax, cx
lea ecx, [edx + 2]
mov dword [ebp - 0x24], ecx
mov edx, ecx
mov ebx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0xc]
mov word [ecx + ebx*2], ax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 8]
movzx ecx, word [ecx + eax]
cmp edi, 0x1000000
jae 0x4cf17f
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf19e
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cf1ad
sub edi, eax
sub esi, eax
mov eax, ecx
inc edx
shr eax, 5
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x24]
mov ebx, dword [ebp - 0xc]
mov word [ecx + ebx], ax
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 8]
movzx ecx, word [eax + edx*2]
cmp edi, 0x1000000
jae 0x4cf1d8
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
mov ebx, edx
shr eax, 0xb
imul eax, ecx
shl ebx, 2
mov dword [ebp - 0x24], ebx
cmp esi, eax
jae 0x4cf204
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx ecx, ax
mov eax, ebx
mov dword [ebp - 0x40], eax
jmp 0x4cf220
mov ebx, dword [ebp - 0x24]
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
add ebx, 2
movzx ecx, cx
mov eax, ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0xc]
mov word [ebx + edx*2], cx
mov ecx, ebx
mov ebx, dword [ebp - 8]
movzx ecx, word [eax + ecx]
cmp edi, 0x1000000
jae 0x4cf247
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov edx, dword [ebp - 0x24]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf269
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cf27b
sub edi, eax
sub esi, eax
mov eax, ecx
inc edx
shr eax, 5
sub ecx, eax
mov dword [ebp - 0x24], edx
movzx eax, cx
mov ecx, dword [ebp - 0x40]
mov ebx, dword [ebp - 0xc]
mov word [ecx + ebx], ax
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 8]
movzx ecx, word [eax + edx*2]
cmp edi, 0x1000000
jae 0x4cf2a6
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
shl edx, 2
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf2cb
mov edi, eax
mov dword [ebp - 0x40], edx
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx ecx, ax
jmp 0x4cf2e1
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
lea eax, [edx + 2]
movzx ecx, cx
mov edx, eax
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
mov word [ebx + eax*2], cx
mov ecx, ebx
mov eax, dword [ebp - 0x40]
mov ebx, dword [ebp - 8]
movzx ecx, word [eax + ecx]
cmp edi, 0x1000000
jae 0x4cf30e
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf32d
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cf33c
sub edi, eax
sub esi, eax
mov eax, ecx
inc edx
shr eax, 5
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x40]
mov ebx, dword [ebp - 0xc]
mov word [ecx + ebx], ax
jmp 0x4cf767
cmp eax, 0xa
mov ebx, dword [ebp - 0x30]
sbb eax, eax
and eax, 0xfffffffd
add eax, 6
sub dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x1c], eax
sbb eax, eax
and eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x1c]
movzx eax, byte [eax + ebx]
mov ebx, dword [ebp - 8]
add eax, eax
mov dword [ebp - 0x24], eax
and eax, 0x100
mov dword [ebp - 0x48], eax
add eax, 0x101
lea eax, [edx + eax*2]
movzx edx, word [eax]
mov dword [ebp - 0x20], eax
cmp ecx, 0x1000000
jae 0x4cf3a8
movzx eax, byte [ebx]
mov edi, ecx
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ecx, dword [ebp - 0x48]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4cf3d9
mov edi, eax
mov dword [ebp - 0x40], 2
mov eax, 0x800
not ecx
sub eax, edx
and ecx, 0x100
shr eax, 5
add eax, edx
movzx eax, ax
jmp 0x4cf3ee
sub edi, eax
mov dword [ebp - 0x40], 3
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
movzx eax, dx
mov edx, dword [ebp - 0x20]
mov word [edx], ax
mov eax, ecx
mov edx, dword [ebp - 0x24]
add edx, edx
and eax, edx
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
add eax, ecx
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x48], eax
movzx edx, word [edx + eax*2]
cmp edi, 0x1000000
jae 0x4cf429
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0x40]
mov eax, edi
shr eax, 0xb
add ebx, ebx
imul eax, edx
mov dword [ebp - 0x40], ebx
cmp esi, eax
jae 0x4cf455
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x20]
movzx eax, ax
not edx
jmp 0x4cf469
sub edi, eax
sub esi, eax
inc dword [ebp - 0x40]
mov eax, edx
shr eax, 5
sub edx, eax
movzx eax, dx
mov edx, dword [ebp - 0x20]
mov ebx, dword [ebp - 0xc]
and edx, ecx
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x20], edx
mov word [ebx + ecx*2], ax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xc]
add eax, eax
mov ebx, dword [ebp - 8]
and edx, eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x20]
add eax, edx
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x48], eax
movzx ecx, word [ecx + eax*2]
cmp edi, 0x1000000
jae 0x4cf4ae
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0x40]
mov eax, edi
shr eax, 0xb
add ebx, ebx
imul eax, ecx
mov dword [ebp - 0x40], ebx
mov ebx, dword [ebp - 8]
cmp esi, eax
jae 0x4cf4da
mov edi, eax
not edx
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cf4eb
sub edi, eax
sub esi, eax
inc dword [ebp - 0x40]
mov eax, ecx
shr eax, 5
sub ecx, eax
movzx eax, cx
and dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0xc]
mov word [edx + ecx*2], ax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
add ecx, ecx
mov edx, eax
mov dword [ebp - 0x24], ecx
and edx, ecx
mov ecx, dword [ebp - 0xc]
add eax, edx
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x48], eax
movzx ecx, word [ecx + eax*2]
cmp edi, 0x1000000
jae 0x4cf52d
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0x40]
mov eax, edi
shr eax, 0xb
add ebx, ebx
imul eax, ecx
mov dword [ebp - 0x40], ebx
mov ebx, dword [ebp - 8]
cmp esi, eax
jae 0x4cf559
mov edi, eax
not edx
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cf56a
sub edi, eax
sub esi, eax
inc dword [ebp - 0x40]
mov eax, ecx
shr eax, 5
sub ecx, eax
movzx eax, cx
and dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0xc]
mov word [edx + ecx*2], ax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
add ecx, ecx
mov edx, eax
mov dword [ebp - 0x24], ecx
and edx, ecx
mov ecx, dword [ebp - 0xc]
add eax, edx
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x64], eax
movzx ecx, word [ecx + eax*2]
cmp edi, 0x1000000
jae 0x4cf5ac
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0x40]
mov eax, edi
shr eax, 0xb
add ebx, ebx
imul eax, ecx
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 8]
cmp esi, eax
jae 0x4cf5d8
mov edi, eax
not edx
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cf5e9
sub edi, eax
sub esi, eax
inc dword [ebp - 0x48]
mov eax, ecx
shr eax, 5
sub ecx, eax
movzx eax, cx
and dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0xc]
mov word [edx + ecx*2], ax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
add ecx, ecx
mov edx, eax
mov dword [ebp - 0x24], ecx
and edx, ecx
mov ecx, dword [ebp - 0xc]
add eax, edx
mov dword [ebp - 0x40], edx
mov edx, dword [ebp - 0x48]
add eax, edx
mov dword [ebp - 0x64], eax
movzx ecx, word [ecx + eax*2]
cmp edi, 0x1000000
jae 0x4cf630
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
add edx, edx
shr eax, 0xb
imul eax, ecx
mov dword [ebp - 0x48], edx
cmp esi, eax
jae 0x4cf659
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx ecx, ax
mov eax, dword [ebp - 0x40]
not eax
jmp 0x4cf66e
sub edi, eax
sub esi, eax
mov eax, ecx
inc edx
shr eax, 5
sub ecx, eax
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x40]
movzx ecx, cx
mov ebx, dword [ebp - 0x64]
mov edx, dword [ebp - 0xc]
and eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
mov word [edx + ebx*2], cx
mov ecx, eax
mov ebx, dword [ebp - 0x24]
mov edx, dword [ebp - 0xc]
add ebx, ebx
and ecx, ebx
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 8]
add eax, ecx
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x64], eax
movzx edx, word [edx + eax*2]
cmp edi, 0x1000000
jae 0x4cf6b3
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0x48]
mov eax, edi
shr eax, 0xb
add ebx, ebx
imul eax, edx
mov dword [ebp - 0x48], ebx
cmp esi, eax
jae 0x4cf6dc
mov edi, eax
not ecx
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
movzx eax, ax
jmp 0x4cf6ed
sub edi, eax
sub esi, eax
inc dword [ebp - 0x48]
mov eax, edx
shr eax, 5
sub edx, eax
movzx eax, dx
mov edx, dword [ebp - 0x64]
mov ebx, dword [ebp - 0xc]
and ecx, dword [ebp - 0x40]
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x48]
add eax, eax
mov ebx, dword [ebp - 8]
and eax, ecx
add eax, ecx
mov ecx, dword [ebp - 0xc]
add eax, edx
mov dword [ebp - 0x48], eax
movzx ecx, word [ecx + eax*2]
cmp edi, 0x1000000
jae 0x4cf72c
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0xc]
mov eax, edi
shr eax, 0xb
add edx, edx
imul eax, ecx
cmp esi, eax
jae 0x4cf754
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0x48]
mov word [ebx + ecx*2], ax
jmp 0x4cf767
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0x48]
inc edx
mov word [ebx + eax*2], cx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov byte [ecx + eax], dl
inc ecx
mov dword [ebp - 0x1c], ecx
jmp 0x4d03b7
mov eax, edx
sub esi, ecx
shr eax, 5
sub edi, ecx
mov ecx, dword [ebp - 0x10]
sub edx, eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xc], esi
mov word [ecx + eax*2], dx
mov edx, dword [ebp - 0x14]
movzx ecx, word [ecx + edx*2 + 0x180]
cmp edi, 0x1000000
jae 0x4cf7b6
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf7eb
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0x10]
mov word [ecx + edx*2 + 0x180], ax
add edx, 0xc
mov dword [ebp - 0x14], edx
mov eax, 0x664
jmp 0x4cfa15
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
cmp dword [ebp - 0x4c], 0
mov eax, dword [ebp - 0x10]
mov word [eax + edx*2 + 0x180], cx
jne 0x4cf811
cmp dword [ebp - 0x28], 0
je 0x4d043a
movzx edx, word [eax + edx*2 + 0x198]
cmp edi, 0x1000000
jae 0x4cf830
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
cmp esi, ecx
jae 0x4cf8fa
mov ebx, dword [ebp - 0x10]
mov eax, 0x800
sub eax, edx
mov edi, ecx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x14]
mov word [ebx + edx*2 + 0x198], ax
lea eax, [edx + 0xf]
shl eax, 4
mov edx, ebx
add eax, dword [ebp - 0x48]
mov ebx, dword [ebp - 8]
mov dword [ebp - 0x40], eax
movzx edx, word [edx + eax*2]
cmp ecx, 0x1000000
jae 0x4cf888
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov ecx, dword [ebp - 0x40]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4cf8e0
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x10]
mov word [edx + ecx*2], ax
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
sbb eax, eax
and eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x2c]
add eax, ecx
mov al, byte [eax + edx]
mov byte [ecx + edx], al
inc ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x14], 7
mov dword [ebp - 0x1c], ecx
sbb edx, edx
and edx, 0xfffffffe
add edx, 0xb
mov dword [ebp - 0x14], edx
jmp 0x4d03bd
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 0xc], esi
shr eax, 5
sub edx, eax
mov eax, dword [ebp - 0x10]
mov word [eax + ecx*2], dx
jmp 0x4cf9fe
mov eax, edx
sub esi, ecx
shr eax, 5
sub edi, ecx
mov ecx, dword [ebp - 0x10]
sub edx, eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xc], esi
mov word [ecx + eax*2 + 0x198], dx
mov edx, eax
movzx ecx, word [ecx + edx*2 + 0x1b0]
cmp edi, 0x1000000
jae 0x4cf93a
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf967
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0x10]
mov word [ecx + edx*2 + 0x1b0], ax
mov edx, dword [ebp - 0x38]
jmp 0x4cf9f5
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0x10]
mov word [eax + edx*2 + 0x1b0], cx
movzx ecx, word [eax + edx*2 + 0x1c8]
cmp edi, 0x1000000
jae 0x4cf9a2
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cf9c4
mov edx, dword [ebp - 0x3c]
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cf9de
mov edx, dword [ebp - 0x44]
sub esi, eax
mov ebx, dword [ebp - 0x3c]
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
sub ecx, eax
mov dword [ebp - 0x44], ebx
movzx eax, cx
mov ecx, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x10]
mov word [ebx + ecx*2 + 0x1c8], ax
mov ecx, dword [ebp - 0x38]
mov ebx, dword [ebp - 8]
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x14], 7
mov eax, 0xa68
sbb ecx, ecx
and ecx, 0xfffffffd
add ecx, 0xb
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x10]
add eax, ecx
mov dword [ebp - 0x24], eax
movzx edx, word [eax]
cmp edi, 0x1000000
jae 0x4cfa37
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
cmp esi, ecx
jae 0x4cfb95
mov eax, 0x800
mov edi, ecx
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x24]
mov word [edx], ax
mov eax, dword [ebp - 0x48]
shl eax, 4
add eax, edx
mov dword [ebp - 0x48], eax
movzx edx, word [eax + 6]
cmp ecx, 0x1000000
jae 0x4cfa84
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4cfaa8
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
push 4
add eax, edx
pop edx
movzx eax, ax
push 8
jmp 0x4cfabe
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 0xc], esi
shr eax, 5
sub edx, eax
push 6
movzx eax, dx
pop edx
push 0xa
pop ebx
mov dword [ebp - 0x40], ebx
mov ecx, ebx
mov ebx, dword [ebp - 0x48]
mov word [ebx + 6], ax
mov eax, ebx
mov ebx, dword [ebp - 8]
movzx ecx, word [ecx + eax]
cmp edi, 0x1000000
jae 0x4cfaee
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cfb0d
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cfb1f
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
inc edx
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x40]
mov word [ecx + ebx], ax
lea eax, [edx + edx]
mov ebx, dword [ebp - 8]
lea edx, [eax + ecx]
movzx ecx, word [edx + 4]
mov dword [ebp - 0x18], eax
cmp edi, 0x1000000
jae 0x4cfb53
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cfb72
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cfb86
sub esi, eax
sub edi, eax
inc dword [ebp - 0x18]
mov eax, ecx
shr eax, 5
sub ecx, eax
mov dword [ebp - 0xc], esi
movzx eax, cx
mov ecx, dword [ebp - 0x18]
mov word [edx + 4], ax
sub ecx, 8
jmp 0x4cfdbc
mov eax, edx
sub edi, ecx
shr eax, 5
sub esi, ecx
sub edx, eax
mov dword [ebp - 0xc], esi
mov eax, dword [ebp - 0x24]
mov word [eax], dx
movzx edx, word [eax + 2]
cmp edi, 0x1000000
jae 0x4cfbc7
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
cmp esi, ecx
jae 0x4cfd33
mov eax, 0x800
mov edi, ecx
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x24]
mov word [edx + 2], ax
mov eax, dword [ebp - 0x48]
shl eax, 4
add eax, edx
mov dword [ebp - 0x48], eax
movzx edx, word [eax + 0x106]
cmp ecx, 0x1000000
jae 0x4cfc18
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4cfc3e
mov edi, eax
mov ebx, 0x108
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
movzx eax, ax
push 4
jmp 0x4cfc56
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 0xc], esi
shr eax, 5
mov ebx, 0x10a
sub edx, eax
movzx eax, dx
push 6
mov dword [ebp - 0x40], ebx
mov ecx, ebx
mov ebx, dword [ebp - 0x48]
pop edx
mov word [ebx + 0x106], ax
mov eax, ebx
mov ebx, dword [ebp - 8]
movzx ecx, word [ecx + eax]
cmp edi, 0x1000000
jae 0x4cfc89
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cfca8
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cfcba
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
inc edx
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x40]
mov word [ebx + ecx], ax
lea eax, [edx + edx]
mov ebx, dword [ebp - 8]
lea edx, [eax + ecx]
movzx ecx, word [edx + 0x104]
mov dword [ebp - 0x18], eax
cmp edi, 0x1000000
jae 0x4cfcf1
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cfd10
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cfd24
sub esi, eax
sub edi, eax
inc dword [ebp - 0x18]
mov eax, ecx
shr eax, 5
sub ecx, eax
mov dword [ebp - 0xc], esi
movzx eax, cx
mov ecx, dword [ebp - 0x18]
mov word [edx + 0x104], ax
jmp 0x4cfdbf
mov eax, edx
sub edi, ecx
shr eax, 5
sub esi, ecx
sub edx, eax
xor ecx, ecx
mov eax, dword [ebp - 0x24]
inc ecx
mov word [eax + 2], dx
add ecx, ecx
mov dword [ebp - 0x18], ecx
lea edx, [ecx + eax]
movzx ecx, word [edx + 0x204]
cmp edi, 0x1000000
jae 0x4cfd6b
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cfd8a
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cfd9b
sub edi, eax
sub esi, eax
inc dword [ebp - 0x18]
mov eax, ecx
shr eax, 5
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x18]
mov word [edx + 0x204], ax
mov eax, dword [ebp - 0x24]
cmp ecx, 0x100
jb 0x4cfd48
mov dword [ebp - 8], ebx
sub ecx, 0xf0
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x14], 0xc
jb 0x4d0336
cmp ecx, 4
push 3
pop eax
cmovb eax, ecx
shl eax, 7
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x24], eax
movzx ecx, word [eax + 0x362]
cmp edi, 0x1000000
jae 0x4cfdfc
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cfe22
mov edi, eax
mov ebx, 0x364
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
push 4
jmp 0x4cfe3a
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
mov ebx, 0x366
sub ecx, eax
movzx eax, cx
push 6
mov dword [ebp - 0x48], ebx
mov ecx, ebx
mov ebx, dword [ebp - 0x24]
pop edx
mov word [ebx + 0x362], ax
mov eax, ebx
mov ebx, dword [ebp - 8]
movzx ecx, word [ecx + eax]
cmp edi, 0x1000000
jae 0x4cfe6d
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cfe8c
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cfe9e
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
inc edx
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x48]
add edx, edx
mov ebx, dword [ebp - 0x24]
mov word [ecx + ebx], ax
mov eax, dword [ebp - 0x24]
mov ebx, dword [ebp - 8]
add eax, 0x360
add eax, edx
mov dword [ebp - 0x64], eax
movzx ecx, word [eax]
cmp edi, 0x1000000
jae 0x4cfed7
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cfef6
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cff08
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
inc edx
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x64]
add edx, edx
mov word [ecx], ax
mov eax, dword [ebp - 0x24]
add eax, 0x360
add eax, edx
mov dword [ebp - 0x64], eax
movzx ecx, word [eax]
cmp edi, 0x1000000
jae 0x4cff3a
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cff59
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cff6b
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
inc edx
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x64]
add edx, edx
mov word [ecx], ax
mov eax, dword [ebp - 0x24]
add eax, 0x360
add eax, edx
mov dword [ebp - 0x64], eax
movzx ecx, word [eax]
cmp edi, 0x1000000
jae 0x4cff9d
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4cffbc
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4cffce
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
inc edx
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x64]
add edx, edx
mov word [ecx], ax
mov eax, dword [ebp - 0x24]
add eax, 0x360
add eax, edx
mov dword [ebp - 0x64], eax
movzx ecx, word [eax]
cmp edi, 0x1000000
jae 0x4d0000
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4d001f
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4d0031
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
inc edx
sub ecx, eax
movzx eax, cx
mov ecx, dword [ebp - 0x64]
sub edx, 0x40
mov word [ecx], ax
cmp edx, 4
jb 0x4d02fb
mov eax, edx
mov ecx, edx
shr ecx, 1
and edx, 1
dec ecx
mov dword [ebp - 0x64], eax
or edx, 2
cmp eax, 0xe
jae 0x4d00f4
mov ebx, dword [ebp - 0x10]
shl edx, cl
add ebx, 0x55e
mov eax, edx
sub eax, dword [ebp - 0x64]
lea eax, [ebx + eax*2]
mov dword [ebp - 0x64], eax
xor eax, eax
inc eax
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 8]
add eax, eax
mov dword [ebp - 0x44], eax
add eax, dword [ebp - 0x64]
mov dword [ebp - 0x40], eax
movzx eax, word [eax]
mov dword [ebp - 0x24], eax
cmp edi, 0x1000000
jae 0x4d00a3
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, dword [ebp - 0x24]
cmp esi, eax
jae 0x4d00c2
mov edi, eax
mov eax, 0x800
sub eax, dword [ebp - 0x24]
shr eax, 5
add eax, dword [ebp - 0x24]
jmp 0x4d00d8
or edx, dword [ebp - 0x48]
sub edi, eax
sub esi, eax
mov eax, dword [ebp - 0x24]
inc dword [ebp - 0x44]
shr eax, 5
sub dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov ebx, dword [ebp - 0x40]
shl dword [ebp - 0x48], 1
movzx eax, ax
mov word [ebx], ax
mov eax, dword [ebp - 0x44]
sub ecx, 1
jne 0x4d0078
mov dword [ebp - 0xc], esi
jmp 0x4d02fb
sub ecx, 4
cmp edi, 0x1000000
jae 0x4d010b
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
shr edi, 1
lea edx, [edx*2 + 1]
sub esi, edi
mov eax, esi
shr eax, 0x1f
neg eax
add edx, eax
and eax, edi
add esi, eax
sub ecx, 1
jne 0x4d00f7
mov eax, dword [ebp - 0x10]
shl edx, 4
mov dword [ebp - 8], ebx
mov dword [ebp - 0xc], esi
movzx ecx, word [eax + 0x646]
cmp edi, 0x1000000
jae 0x4d0155
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4d0182
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
push 4
pop ecx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x40], ecx
mov ecx, 0x648
movzx eax, ax
jmp 0x4d01a4
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
or edx, 1
sub ecx, eax
movzx eax, cx
push 6
pop ecx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x40], ecx
mov ecx, 0x64a
mov ebx, dword [ebp - 0x10]
mov word [ebx + 0x646], ax
mov eax, ebx
mov ebx, dword [ebp - 8]
movzx ecx, word [ecx + eax]
cmp edi, 0x1000000
jae 0x4d01d1
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4d01f0
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4d0207
sub esi, eax
sub edi, eax
inc dword [ebp - 0x40]
mov eax, ecx
shr eax, 5
or edx, 2
sub ecx, eax
mov dword [ebp - 0xc], esi
movzx eax, cx
mov ebx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x48]
mov word [ecx + ebx + 0x644], ax
mov ecx, ebx
mov eax, dword [ebp - 0x40]
add ecx, 0x644
mov ebx, dword [ebp - 8]
add eax, eax
mov dword [ebp - 0x40], eax
add eax, ecx
mov dword [ebp - 0x64], eax
movzx ecx, word [eax]
cmp edi, 0x1000000
jae 0x4d024a
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4d0269
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4d0280
sub esi, eax
sub edi, eax
inc dword [ebp - 0x40]
mov eax, ecx
shr eax, 5
or edx, 4
sub ecx, eax
mov dword [ebp - 0xc], esi
movzx eax, cx
mov ecx, dword [ebp - 0x64]
mov word [ecx], ax
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x10]
movzx ecx, word [ecx + eax*2 + 0x644]
cmp edi, 0x1000000
jae 0x4d02ae
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4d02cd
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
movzx eax, ax
jmp 0x4d02e1
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 0xc], esi
shr eax, 5
or edx, 8
sub ecx, eax
movzx eax, cx
mov ebx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x40]
mov word [ebx + ecx*2 + 0x644], ax
mov ebx, dword [ebp - 8]
cmp edx, 0xffffffff
je 0x4d03cf
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
lea eax, [edx + 1]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x3c], ecx
test eax, eax
jne 0x4d031f
cmp edx, dword [ebp - 0x28]
jmp 0x4d0321
cmp edx, eax
jae 0x4d0431
cmp dword [ebp - 0x14], 0x13
sbb eax, eax
and eax, 0xfffffffd
add eax, 0xa
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x54]
add ecx, 2
mov dword [ebp - 0x18], ecx
sub eax, dword [ebp - 0x1c]
je 0x4d0431
cmp eax, ecx
mov edx, ecx
cmovb edx, eax
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x2c]
sbb ecx, ecx
add dword [ebp - 0x28], edx
and ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x2c]
sub dword [ebp - 0x18], edx
add ecx, eax
mov eax, dword [ebp - 0x34]
sub eax, ecx
cmp edx, eax
ja 0x4d0391
mov ebx, dword [ebp - 0x30]
add ebx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x1c]
add dword [ebp - 0x1c], edx
lea eax, [ebx + edx]
mov dword [ebp - 0x64], eax
mov edx, eax
mov al, byte [ecx + ebx]
mov byte [ebx], al
inc ebx
cmp ebx, edx
jne 0x4d0385
jmp 0x4d03b4
mov ebx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x30]
mov al, byte [ecx + esi]
mov byte [ebx + esi], al
lea eax, [ecx + 1]
xor ecx, ecx
inc ebx
cmp eax, dword [ebp - 0x34]
cmovne ecx, eax
sub edx, 1
jne 0x4d0397
mov esi, dword [ebp - 0xc]
mov dword [ebp - 0x1c], ebx
mov ecx, dword [ebp - 0x1c]
mov ebx, dword [ebp - 8]
mov edx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x54]
jae 0x4d03e0
cmp ebx, dword [ebp + 8]
jae 0x4d03e0
mov ecx, dword [ebp - 0x28]
jmp 0x4cef5f
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
add ecx, 0x112
sub edx, 0xc
jmp 0x4d03e3
mov ecx, dword [ebp - 0x18]
cmp edi, 0x1000000
jae 0x4d03f7
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov eax, dword [ebp - 0x58]
mov dword [eax + 0x48], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [eax + 0x24], ecx
mov ecx, dword [ebp - 0x28]
mov dword [eax + 0x18], ebx
mov ebx, dword [ebp - 0x3c]
mov dword [eax + 0x2c], ecx
mov ecx, dword [ebp - 0x2c]
mov dword [eax + 0x38], ecx
mov ecx, dword [ebp - 0x38]
mov dword [eax + 0x40], ebx
mov ebx, dword [ebp - 0x44]
mov dword [eax + 0x1c], edi
mov dword [eax + 0x20], esi
mov dword [eax + 0x3c], ecx
mov dword [eax + 0x44], ebx
mov dword [eax + 0x34], edx
xor eax, eax
jmp 0x4d043d
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x1c]
mov dword [eax + 0x24], ecx
xor eax, eax
inc eax
pop edi
pop esi
pop ebx
leave
ret 4