Function at 0x406144
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
mov eax, ecx
mov dword [ebp - 0x50], edx
xor edx, edx
mov dword [ebp - 0x3c], eax
inc edx
push ebx
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0xc], ecx
mov ecx, dword [eax + 0x38]
mov dword [ebp - 0x24], ecx
mov ecx, dword [eax + 0x3c]
mov ebx, dword [eax + 0x34]
mov dword [ebp - 0x30], ecx
mov ecx, dword [eax + 0x40]
mov dword [ebp - 0x34], ecx
mov ecx, dword [eax + 0x44]
mov dword [ebp - 0x38], ecx
mov ecx, dword [eax + 8]
shl edx, cl
mov ecx, dword [eax + 4]
dec edx
mov dword [ebp - 0x54], edx
xor edx, edx
inc edx
mov dword [ebp - 0x10], ebx
shl edx, cl
mov ecx, dword [eax]
dec edx
mov dword [ebp - 0x48], ecx
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x5c], edx
mov edx, dword [eax + 0x30]
mov dword [ebp - 0x28], ecx
mov ecx, dword [eax + 0x28]
mov dword [ebp - 0x44], edx
xor edx, edx
push esi
mov esi, dword [eax + 0x20]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [eax + 0x24]
push edi
mov edi, dword [eax + 0x1c]
mov dword [ebp - 0x14], ecx
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x18], edx
mov edx, dword [eax + 0x18]
mov al, 8
sub al, byte [ebp - 0x48]
movzx eax, al
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], edx
mov dword [ebp - 0x58], eax
and ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0xc]
shl ebx, 4
add ebx, ecx
mov dword [ebp - 0x20], ecx
movzx ecx, word [eax + ebx*2]
cmp edi, 0x1000000
jae 0x4061f9
movzx eax, byte [edx]
shl esi, 8
shl edi, 8
or esi, eax
inc edx
mov dword [ebp - 4], edx
mov edx, edi
shr edx, 0xb
imul edx, ecx
mov dword [ebp - 0x4c], edx
cmp esi, edx
jae 0x406932
mov eax, 0x800
mov edi, edx
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
mov word [ecx + ebx*2], ax
lea ebx, [ecx + 0xe6c]
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x406233
cmp dword [ebp - 0x44], eax
je 0x406266
mov ecx, dword [ebp - 0x14]
test ecx, ecx
mov eax, ecx
mov ecx, dword [ebp - 0x28]
cmove eax, dword [ebp - 0x2c]
movzx edx, byte [eax + ecx - 1]
mov cl, byte [ebp - 0x58]
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x5c]
shr edx, cl
mov ecx, dword [ebp - 0x48]
shl eax, cl
add edx, eax
imul eax, edx, 0x600
mov edx, dword [ebp - 0x4c]
add ebx, eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x1c], eax
cmp ecx, 7
jae 0x40650a
cmp ecx, 4
push 3
pop eax
cmovb eax, ecx
sub ecx, eax
mov dword [ebp - 0x10], ecx
movzx ecx, word [ebx + 2]
cmp edx, 0x1000000
jae 0x4062a4
mov edi, edx
shl esi, 8
mov edx, dword [ebp - 4]
shl edi, 8
movzx eax, byte [edx]
or esi, eax
inc edx
mov dword [ebp - 4], edx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4062c6
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [ebx + 2], ax
push 2
jmp 0x4062d7
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [ebx + 2], cx
push 3
pop edx
add edx, edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x4062f7
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406317
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x406327
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
add edx, edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x406346
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406366
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x406376
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
add edx, edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x406395
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4063b5
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x4063c5
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
add edx, edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x4063e4
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406404
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x406414
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
add edx, edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x406433
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406453
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x406463
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
add edx, edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x406482
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4064a2
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x4064b2
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
lea ecx, [edx + edx]
movzx edx, word [ecx + ebx]
cmp edi, 0x1000000
jae 0x4064d2
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4064f5
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ecx + ebx], ax
jmp 0x406920
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov word [ecx + ebx], dx
inc ecx
jmp 0x406920
cmp ecx, 0xa
sbb eax, eax
and eax, 0xfffffffd
add eax, 6
sub ecx, eax
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x24]
sbb eax, eax
and eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x24]
add eax, ecx
mov ecx, dword [ebp - 0x28]
movzx eax, byte [eax + ecx]
add eax, eax
mov ecx, eax
mov dword [ebp - 8], eax
and ecx, 0x100
movzx eax, word [ebx + ecx*2 + 0x202]
mov dword [ebp - 0x4c], eax
cmp edx, 0x1000000
jae 0x406565
mov edi, edx
shl esi, 8
mov edx, dword [ebp - 4]
shl edi, 8
movzx eax, byte [edx]
or esi, eax
inc edx
mov dword [ebp - 4], edx
mov edx, dword [ebp - 0x4c]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406590
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + ecx*2 + 0x202], ax
not ecx
push 2
jmp 0x4065a5
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov word [ebx + ecx*2 + 0x202], dx
push 3
shl dword [ebp - 8], 1
and ecx, 0x100
mov eax, ecx
and eax, dword [ebp - 8]
pop edx
mov dword [ebp - 0x4c], eax
add eax, ecx
add eax, edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x40], eax
movzx edx, word [ebx + eax*2]
cmp edi, 0x1000000
jae 0x4065de
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x40660e
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x40]
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x20]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x4c]
not eax
and ecx, eax
jmp 0x40662d
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov eax, dword [ebp - 0x40]
and ecx, dword [ebp - 0x4c]
mov word [ebx + eax*2], dx
mov eax, dword [ebp - 0x20]
lea edx, [eax*2 + 1]
shl dword [ebp - 8], 1
mov eax, ecx
and eax, dword [ebp - 8]
mov dword [ebp - 0x40], eax
add eax, ecx
add eax, edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x4c], eax
movzx edx, word [ebx + eax*2]
cmp edi, 0x1000000
jae 0x40665f
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x40668f
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x4c]
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x20]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x40]
not eax
and ecx, eax
jmp 0x4066ae
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov eax, dword [ebp - 0x4c]
and ecx, dword [ebp - 0x40]
mov word [ebx + eax*2], dx
mov eax, dword [ebp - 0x20]
lea edx, [eax*2 + 1]
shl dword [ebp - 8], 1
mov eax, ecx
and eax, dword [ebp - 8]
mov dword [ebp - 0x40], eax
add eax, ecx
add eax, edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x4c], eax
movzx edx, word [ebx + eax*2]
cmp edi, 0x1000000
jae 0x4066e0
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406710
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x4c]
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x20]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x40]
not eax
and ecx, eax
jmp 0x40672f
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov eax, dword [ebp - 0x4c]
and ecx, dword [ebp - 0x40]
mov word [ebx + eax*2], dx
mov eax, dword [ebp - 0x20]
lea edx, [eax*2 + 1]
shl dword [ebp - 8], 1
mov eax, ecx
and eax, dword [ebp - 8]
mov dword [ebp - 0x40], eax
add eax, ecx
add eax, edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x4c], eax
movzx edx, word [ebx + eax*2]
cmp edi, 0x1000000
jae 0x406761
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406791
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x4c]
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x20]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x40]
not eax
and ecx, eax
jmp 0x4067b0
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov eax, dword [ebp - 0x4c]
and ecx, dword [ebp - 0x40]
mov word [ebx + eax*2], dx
mov eax, dword [ebp - 0x20]
lea edx, [eax*2 + 1]
shl dword [ebp - 8], 1
mov eax, ecx
and eax, dword [ebp - 8]
mov dword [ebp - 0x40], eax
add eax, ecx
add eax, edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x4c], eax
movzx edx, word [ebx + eax*2]
cmp edi, 0x1000000
jae 0x4067e2
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406812
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x4c]
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x20]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x40]
not eax
and ecx, eax
jmp 0x406831
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov eax, dword [ebp - 0x4c]
and ecx, dword [ebp - 0x40]
mov word [ebx + eax*2], dx
mov eax, dword [ebp - 0x20]
lea edx, [eax*2 + 1]
shl dword [ebp - 8], 1
mov eax, ecx
and eax, dword [ebp - 8]
mov dword [ebp - 0x40], eax
add eax, ecx
add eax, edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x4c], eax
movzx edx, word [ebx + eax*2]
cmp edi, 0x1000000
jae 0x406863
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406895
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x4c]
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x20]
add eax, eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x40]
not eax
and ecx, eax
jmp 0x4068b7
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov eax, dword [ebp - 0x4c]
and ecx, dword [ebp - 0x40]
mov word [ebx + eax*2], dx
mov eax, dword [ebp - 0x20]
lea eax, [eax*2 + 1]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 8]
lea edx, [eax + eax]
and edx, ecx
add edx, ecx
add edx, dword [ebp - 0x20]
movzx ecx, word [ebx + edx*2]
cmp edi, 0x1000000
jae 0x4068e1
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406907
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x20]
lea ecx, [eax + eax]
jmp 0x406920
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0x20]
mov word [ebx + edx*2], cx
lea ecx, [eax*2 + 1]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov byte [edx + eax], cl
inc edx
mov dword [ebp - 0x14], edx
jmp 0x4074bc
mov eax, ecx
sub esi, edx
shr eax, 5
sub edi, edx
mov edx, dword [ebp - 0x10]
sub ecx, eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 8], esi
mov word [eax + ebx*2], cx
movzx ecx, word [eax + edx*2 + 0x180]
mov ebx, dword [ebp - 4]
cmp edi, 0x1000000
jae 0x40696f
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4069a2
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
mov word [ecx + edx*2 + 0x180], ax
lea ebx, [ecx + 0x664]
add edx, 0xc
jmp 0x406bc7
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
cmp dword [ebp - 0x44], 0
mov eax, dword [ebp - 0xc]
mov word [eax + edx*2 + 0x180], cx
jne 0x4069c8
cmp dword [ebp - 0x1c], 0
je 0x407541
movzx edx, word [eax + edx*2 + 0x198]
cmp edi, 0x1000000
jae 0x4069e7
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 4], ebx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
cmp esi, ecx
jae 0x406ab0
mov ebx, dword [ebp - 0xc]
mov eax, 0x800
sub eax, edx
mov edi, ecx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x10]
mov word [ebx + edx*2 + 0x198], ax
lea ebx, [edx + 0xf]
mov eax, dword [ebp - 0xc]
shl ebx, 4
add ebx, dword [ebp - 0x20]
movzx edx, word [eax + ebx*2]
cmp ecx, 0x1000000
jae 0x406a3d
mov ecx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [ecx]
or esi, eax
inc ecx
mov dword [ebp - 4], ecx
mov ecx, dword [ebp - 0xc]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406a96
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x14]
cmp edx, dword [ebp - 0x24]
mov word [ecx + ebx*2], ax
mov ecx, dword [ebp - 0x28]
sbb eax, eax
and eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x24]
add eax, edx
mov al, byte [eax + ecx]
mov byte [edx + ecx], al
inc edx
mov ecx, dword [ebp - 0x1c]
inc ecx
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x10], 7
mov dword [ebp - 0x1c], ecx
sbb ebx, ebx
and ebx, 0xfffffffe
add ebx, 0xb
mov dword [ebp - 0x10], ebx
jmp 0x4074c2
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ecx + ebx*2], dx
mov edx, dword [ebp - 0x10]
jmp 0x406bb6
mov eax, edx
sub esi, ecx
shr eax, 5
sub edi, ecx
mov ecx, dword [ebp - 0xc]
sub edx, eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 8], esi
mov word [ecx + eax*2 + 0x198], dx
mov edx, eax
movzx ecx, word [ecx + edx*2 + 0x1b0]
cmp edi, 0x1000000
jae 0x406af0
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406b1d
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
mov word [ecx + edx*2 + 0x1b0], ax
mov eax, dword [ebp - 0x30]
jmp 0x406bad
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0xc]
mov word [eax + edx*2 + 0x1b0], cx
movzx ecx, word [eax + edx*2 + 0x1c8]
cmp edi, 0x1000000
jae 0x406b58
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406b82
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
mov word [ecx + edx*2 + 0x1c8], ax
mov eax, dword [ebp - 0x34]
jmp 0x406ba7
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0xc]
mov word [eax + edx*2 + 0x1c8], cx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x30]
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x24]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x24], eax
cmp edx, 7
lea ebx, [ecx + 0xa68]
sbb edx, edx
and edx, 0xfffffffd
add edx, 0xb
mov dword [ebp - 0x10], edx
movzx edx, word [ebx]
cmp edi, 0x1000000
jae 0x406bea
mov ecx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [ecx]
or esi, eax
inc ecx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ecx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
cmp esi, ecx
jae 0x406d2a
mov eax, 0x800
mov edi, ecx
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx], ax
mov eax, dword [ebp - 0x20]
shl eax, 4
add ebx, eax
movzx edx, word [ebx + 6]
cmp ecx, 0x1000000
jae 0x406c34
mov ecx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [ecx]
or esi, eax
inc ecx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ecx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406c56
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + 6], ax
push 2
jmp 0x406c6a
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ebx + 6], dx
push 3
pop edx
add edx, edx
movzx ecx, word [edx + ebx + 4]
cmp edi, 0x1000000
jae 0x406c8e
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406caf
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx + 4], ax
jmp 0x406cc3
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov word [edx + ebx + 4], cx
inc edx
add edx, edx
mov dword [ebp - 0x18], edx
movzx ecx, word [edx + ebx + 4]
cmp edi, 0x1000000
jae 0x406ced
mov edx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [edx]
or esi, eax
inc edx
mov dword [ebp - 4], edx
mov edx, dword [ebp - 0x18]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406d0e
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx + 4], ax
jmp 0x406d22
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov word [edx + ebx + 4], cx
inc edx
sub edx, 8
jmp 0x406f1e
mov eax, edx
sub edi, ecx
shr eax, 5
sub esi, ecx
sub edx, eax
mov dword [ebp - 8], esi
mov word [ebx], dx
movzx edx, word [ebx + 2]
cmp edi, 0x1000000
jae 0x406d5c
mov ecx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [ecx]
or esi, eax
inc ecx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ecx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
cmp esi, ecx
jae 0x406e99
mov eax, 0x800
mov edi, ecx
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + 2], ax
mov eax, dword [ebp - 0x20]
shl eax, 4
add eax, 0x104
add ebx, eax
movzx edx, word [ebx + 2]
cmp ecx, 0x1000000
jae 0x406dac
mov ecx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [ecx]
or esi, eax
inc ecx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ecx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406dce
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + 2], ax
push 2
jmp 0x406de2
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ebx + 2], dx
push 3
pop edx
add edx, edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x406e05
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406e25
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x406e38
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
add edx, edx
mov dword [ebp - 0x18], edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x406e61
mov edx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [edx]
or esi, eax
inc edx
mov dword [ebp - 4], edx
mov edx, dword [ebp - 0x18]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406e84
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x406f21
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
jmp 0x406f1b
mov eax, edx
sub edi, ecx
shr eax, 5
sub esi, ecx
sub edx, eax
mov word [ebx + 2], dx
xor edx, edx
inc edx
add edx, edx
mov dword [ebp - 0x18], edx
movzx ecx, word [edx + ebx + 0x204]
cmp edi, 0x1000000
jae 0x406ed5
mov edx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [edx]
or esi, eax
inc edx
mov dword [ebp - 4], edx
mov edx, dword [ebp - 0x18]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406ef9
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx + 0x204], ax
jmp 0x406f0d
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx + 0x204], cx
inc edx
cmp edx, 0x100
jb 0x406eab
sub edx, 0xf0
mov dword [ebp - 8], esi
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x10], 0xc
mov dword [ebp - 0x20], edi
jb 0x40743b
mov ecx, dword [ebp - 0xc]
cmp edx, 4
push 3
pop eax
cmovb eax, edx
add ecx, 0x360
shl eax, 7
add ecx, eax
movzx edx, word [ecx + 2]
cmp edi, 0x1000000
jae 0x406f66
mov ebx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [ebx]
or esi, eax
inc ebx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406f88
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ecx + 2], ax
push 2
jmp 0x406f9c
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ecx + 2], dx
push 3
pop ebx
add ebx, ebx
movzx edx, word [ebx + ecx]
cmp edi, 0x1000000
jae 0x406fbf
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406fdf
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + ecx], ax
jmp 0x406ff2
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ebx + ecx], dx
inc ebx
add ebx, ebx
movzx edx, word [ebx + ecx]
cmp edi, 0x1000000
jae 0x407014
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x407034
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + ecx], ax
jmp 0x407047
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ebx + ecx], dx
inc ebx
add ebx, ebx
movzx edx, word [ebx + ecx]
cmp edi, 0x1000000
jae 0x407069
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x407089
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + ecx], ax
jmp 0x40709c
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ebx + ecx], dx
inc ebx
add ebx, ebx
movzx edx, word [ebx + ecx]
cmp edi, 0x1000000
jae 0x4070be
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4070de
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + ecx], ax
jmp 0x4070f1
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ebx + ecx], dx
inc ebx
lea edx, [ebx + ebx]
movzx ebx, word [edx + ecx]
cmp edi, 0x1000000
jae 0x407114
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ebx
cmp esi, eax
jae 0x407134
mov edi, eax
mov eax, 0x800
sub eax, ebx
shr eax, 5
add eax, ebx
mov word [edx + ecx], ax
jmp 0x407147
sub esi, eax
sub edi, eax
mov eax, ebx
mov dword [ebp - 8], esi
shr eax, 5
sub ebx, eax
mov word [edx + ecx], bx
inc edx
sub edx, 0x40
mov dword [ebp - 0x20], edi
cmp edx, 4
jb 0x407400
mov ecx, edx
mov ebx, edx
shr ecx, 1
and edx, 1
dec ecx
or edx, 2
mov dword [ebp - 8], ecx
cmp ebx, 0xe
jae 0x40720b
shl edx, cl
mov eax, edx
sub eax, ebx
mov ebx, dword [ebp - 0xc]
lea ebx, [ebx + eax*2]
xor eax, eax
add ebx, 0x55e
inc eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x20], eax
add eax, eax
mov dword [ebp - 0x38], eax
movzx ebx, word [eax + ebx]
cmp edi, 0x1000000
jae 0x4071ac
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov ecx, dword [ebp - 0x40]
mov eax, edi
shr eax, 0xb
imul eax, ebx
cmp esi, eax
jae 0x4071d7
mov edi, eax
mov eax, 0x800
sub eax, ebx
shr eax, 5
add eax, ebx
mov ebx, dword [ebp - 0x38]
mov word [ebx + ecx], ax
mov eax, ebx
mov ebx, dword [ebp - 0x20]
jmp 0x4071ef
sub edi, eax
sub esi, eax
mov eax, ebx
shr eax, 5
sub ebx, eax
mov eax, dword [ebp - 0x38]
mov word [eax + ecx], bx
inc eax
mov ebx, dword [ebp - 0x20]
or edx, ebx
mov ecx, dword [ebp - 8]
add ebx, ebx
dec ecx
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x40]
mov dword [ebp - 8], ecx
jne 0x40718a
mov dword [ebp - 0x20], edi
mov dword [ebp - 8], esi
jmp 0x407400
sub ecx, 4
mov ebx, dword [ebp - 4]
cmp edi, 0x1000000
jae 0x407228
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 4], ebx
shr edi, 1
lea edx, [edx*2 + 1]
sub esi, edi
mov eax, esi
shr eax, 0x1f
neg eax
add edx, eax
and eax, edi
add esi, eax
dec ecx
jne 0x40720e
mov eax, dword [ebp - 0xc]
shl edx, 4
mov dword [ebp - 8], esi
movzx ecx, word [eax + 0x646]
cmp edi, 0x1000000
jae 0x40726d
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x407297
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
push 2
mov word [ecx + 0x646], ax
mov eax, ecx
jmp 0x4072b4
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0xc]
push 3
or edx, 1
mov word [eax + 0x646], cx
pop ebx
add ebx, ebx
movzx ecx, word [ebx + eax + 0x644]
cmp edi, 0x1000000
jae 0x4072db
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x407304
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
mov word [ebx + ecx + 0x644], ax
mov eax, ecx
jmp 0x407321
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0xc]
mov word [ebx + eax + 0x644], cx
inc ebx
or edx, 2
add ebx, ebx
movzx ecx, word [ebx + eax + 0x644]
cmp edi, 0x1000000
jae 0x407347
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x407370
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
mov word [ebx + ecx + 0x644], ax
mov eax, ecx
jmp 0x40738d
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0xc]
mov word [ebx + eax + 0x644], cx
inc ebx
or edx, 4
movzx ecx, word [eax + ebx*2 + 0x644]
cmp edi, 0x1000000
jae 0x4073b1
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4073d8
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
mov word [ecx + ebx*2 + 0x644], ax
jmp 0x4073f4
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0xc]
or edx, 8
mov word [eax + ebx*2 + 0x644], cx
mov dword [ebp - 0x20], edi
cmp edx, 0xffffffff
je 0x407527
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
lea eax, [edx + 1]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x407424
cmp edx, dword [ebp - 0x1c]
jmp 0x407426
cmp edx, eax
jae 0x407538
cmp dword [ebp - 0x10], 0x13
sbb eax, eax
and eax, 0xfffffffd
add eax, 0xa
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x50]
add ebx, 2
mov ecx, dword [ebp - 0x14]
sub eax, ecx
je 0x40753b
cmp eax, ebx
mov edx, ebx
cmovb edx, eax
cmp ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
sbb ecx, ecx
add dword [ebp - 0x1c], edx
and ecx, dword [ebp - 0x2c]
sub ebx, edx
sub ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x14]
sub eax, ecx
mov dword [ebp - 0x18], ebx
cmp edx, eax
ja 0x407495
mov ebx, dword [ebp - 0x28]
add ebx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x14]
add dword [ebp - 0x14], edx
lea eax, [ebx + edx]
mov dword [ebp - 0x4c], eax
mov edx, eax
mov al, byte [ecx + ebx]
mov byte [ebx], al
inc ebx
cmp ebx, edx
jne 0x407489
jmp 0x4074b9
mov ebx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x28]
mov edi, dword [ebp - 0x2c]
mov al, byte [ecx + esi]
mov byte [ebx + esi], al
inc ebx
inc ecx
xor eax, eax
cmp ecx, edi
cmove ecx, eax
dec edx
jne 0x40749e
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0x14], ebx
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x10]
cmp edx, dword [ebp - 0x50]
jae 0x4074d3
mov edx, dword [ebp - 4]
cmp edx, dword [ebp + 8]
jb 0x4061d0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 4]
cmp edi, 0x1000000
jae 0x4074ed
movzx eax, byte [ecx]
shl esi, 8
shl edi, 8
or esi, eax
inc ecx
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x18], ecx
mov ecx, dword [ebp - 0x14]
mov dword [eax + 0x24], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [eax + 0x2c], ecx
mov ecx, dword [ebp - 0x24]
mov dword [eax + 0x1c], edi
mov dword [eax + 0x20], esi
mov dword [eax + 0x48], edx
mov dword [eax + 0x38], ecx
mov ecx, dword [ebp - 0x30]
mov dword [eax + 0x3c], ecx
mov ecx, dword [ebp - 0x34]
mov dword [eax + 0x40], ecx
mov ecx, dword [ebp - 0x38]
mov dword [eax + 0x44], ecx
mov dword [eax + 0x34], ebx
xor eax, eax
jmp 0x407544
mov edx, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x10]
add edx, 0x112
sub ebx, 0xc
jmp 0x4074d6
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x24], ecx
xor eax, eax
inc eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4