Function at 0x4df223
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
mov eax, ecx
mov dword [ebp - 0x50], edx
xor edx, edx
mov dword [ebp - 0x3c], eax
inc edx
push ebx
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0xc], ecx
mov ecx, dword [eax + 0x38]
mov dword [ebp - 0x24], ecx
mov ecx, dword [eax + 0x3c]
mov ebx, dword [eax + 0x34]
mov dword [ebp - 0x30], ecx
mov ecx, dword [eax + 0x40]
mov dword [ebp - 0x34], ecx
mov ecx, dword [eax + 0x44]
mov dword [ebp - 0x38], ecx
mov ecx, dword [eax + 8]
shl edx, cl
mov ecx, dword [eax + 4]
dec edx
mov dword [ebp - 0x54], edx
xor edx, edx
inc edx
mov dword [ebp - 0x10], ebx
shl edx, cl
mov ecx, dword [eax]
dec edx
mov dword [ebp - 0x48], ecx
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x5c], edx
mov edx, dword [eax + 0x30]
mov dword [ebp - 0x28], ecx
mov ecx, dword [eax + 0x28]
mov dword [ebp - 0x44], edx
xor edx, edx
push esi
mov esi, dword [eax + 0x20]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [eax + 0x24]
push edi
mov edi, dword [eax + 0x1c]
mov dword [ebp - 0x14], ecx
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x18], edx
mov edx, dword [eax + 0x18]
mov al, 8
sub al, byte [ebp - 0x48]
movzx eax, al
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], edx
mov dword [ebp - 0x58], eax
and ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0xc]
shl ebx, 4
add ebx, ecx
mov dword [ebp - 0x20], ecx
movzx ecx, word [eax + ebx*2]
cmp edi, 0x1000000
jae 0x4df2d8
movzx eax, byte [edx]
shl esi, 8
shl edi, 8
or esi, eax
inc edx
mov dword [ebp - 4], edx
mov edx, edi
shr edx, 0xb
imul edx, ecx
mov dword [ebp - 0x4c], edx
cmp esi, edx
jae 0x4dfa11
mov eax, 0x800
mov edi, edx
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
mov word [ecx + ebx*2], ax
lea ebx, [ecx + 0xe6c]
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x4df312
cmp dword [ebp - 0x44], eax
je 0x4df345
mov ecx, dword [ebp - 0x14]
test ecx, ecx
mov eax, ecx
mov ecx, dword [ebp - 0x28]
cmove eax, dword [ebp - 0x2c]
movzx edx, byte [eax + ecx - 1]
mov cl, byte [ebp - 0x58]
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x5c]
shr edx, cl
mov ecx, dword [ebp - 0x48]
shl eax, cl
add edx, eax
imul eax, edx, 0x600
mov edx, dword [ebp - 0x4c]
add ebx, eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x1c], eax
cmp ecx, 7
jae 0x4df5e9
cmp ecx, 4
push 3
pop eax
cmovb eax, ecx
sub ecx, eax
mov dword [ebp - 0x10], ecx
movzx ecx, word [ebx + 2]
cmp edx, 0x1000000
jae 0x4df383
mov edi, edx
shl esi, 8
mov edx, dword [ebp - 4]
shl edi, 8
movzx eax, byte [edx]
or esi, eax
inc edx
mov dword [ebp - 4], edx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4df3a5
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [ebx + 2], ax
push 2
jmp 0x4df3b6
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [ebx + 2], cx
push 3
pop edx
add edx, edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x4df3d6
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4df3f6
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x4df406
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
add edx, edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x4df425
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4df445
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x4df455
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
add edx, edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x4df474
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4df494
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x4df4a4
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
add edx, edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x4df4c3
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4df4e3
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x4df4f3
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
add edx, edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x4df512
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4df532
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x4df542
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
add edx, edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x4df561
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4df581
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x4df591
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
lea ecx, [edx + edx]
movzx edx, word [ecx + ebx]
cmp edi, 0x1000000
jae 0x4df5b1
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4df5d4
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ecx + ebx], ax
jmp 0x4df9ff
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov word [ecx + ebx], dx
inc ecx
jmp 0x4df9ff
cmp ecx, 0xa
sbb eax, eax
and eax, 0xfffffffd
add eax, 6
sub ecx, eax
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x24]
sbb eax, eax
and eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x24]
add eax, ecx
mov ecx, dword [ebp - 0x28]
movzx eax, byte [eax + ecx]
add eax, eax
mov ecx, eax
mov dword [ebp - 8], eax
and ecx, 0x100
movzx eax, word [ebx + ecx*2 + 0x202]
mov dword [ebp - 0x4c], eax
cmp edx, 0x1000000
jae 0x4df644
mov edi, edx
shl esi, 8
mov edx, dword [ebp - 4]
shl edi, 8
movzx eax, byte [edx]
or esi, eax
inc edx
mov dword [ebp - 4], edx
mov edx, dword [ebp - 0x4c]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4df66f
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + ecx*2 + 0x202], ax
not ecx
push 2
jmp 0x4df684
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov word [ebx + ecx*2 + 0x202], dx
push 3
shl dword [ebp - 8], 1
and ecx, 0x100
mov eax, ecx
and eax, dword [ebp - 8]
pop edx
mov dword [ebp - 0x4c], eax
add eax, ecx
add eax, edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x40], eax
movzx edx, word [ebx + eax*2]
cmp edi, 0x1000000
jae 0x4df6bd
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4df6ed
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x40]
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x20]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x4c]
not eax
and ecx, eax
jmp 0x4df70c
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov eax, dword [ebp - 0x40]
and ecx, dword [ebp - 0x4c]
mov word [ebx + eax*2], dx
mov eax, dword [ebp - 0x20]
lea edx, [eax*2 + 1]
shl dword [ebp - 8], 1
mov eax, ecx
and eax, dword [ebp - 8]
mov dword [ebp - 0x40], eax
add eax, ecx
add eax, edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x4c], eax
movzx edx, word [ebx + eax*2]
cmp edi, 0x1000000
jae 0x4df73e
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4df76e
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x4c]
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x20]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x40]
not eax
and ecx, eax
jmp 0x4df78d
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov eax, dword [ebp - 0x4c]
and ecx, dword [ebp - 0x40]
mov word [ebx + eax*2], dx
mov eax, dword [ebp - 0x20]
lea edx, [eax*2 + 1]
shl dword [ebp - 8], 1
mov eax, ecx
and eax, dword [ebp - 8]
mov dword [ebp - 0x40], eax
add eax, ecx
add eax, edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x4c], eax
movzx edx, word [ebx + eax*2]
cmp edi, 0x1000000
jae 0x4df7bf
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4df7ef
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x4c]
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x20]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x40]
not eax
and ecx, eax
jmp 0x4df80e
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov eax, dword [ebp - 0x4c]
and ecx, dword [ebp - 0x40]
mov word [ebx + eax*2], dx
mov eax, dword [ebp - 0x20]
lea edx, [eax*2 + 1]
shl dword [ebp - 8], 1
mov eax, ecx
and eax, dword [ebp - 8]
mov dword [ebp - 0x40], eax
add eax, ecx
add eax, edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x4c], eax
movzx edx, word [ebx + eax*2]
cmp edi, 0x1000000
jae 0x4df840
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4df870
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x4c]
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x20]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x40]
not eax
and ecx, eax
jmp 0x4df88f
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov eax, dword [ebp - 0x4c]
and ecx, dword [ebp - 0x40]
mov word [ebx + eax*2], dx
mov eax, dword [ebp - 0x20]
lea edx, [eax*2 + 1]
shl dword [ebp - 8], 1
mov eax, ecx
and eax, dword [ebp - 8]
mov dword [ebp - 0x40], eax
add eax, ecx
add eax, edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x4c], eax
movzx edx, word [ebx + eax*2]
cmp edi, 0x1000000
jae 0x4df8c1
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4df8f1
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x4c]
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x20]
lea edx, [eax + eax]
mov eax, dword [ebp - 0x40]
not eax
and ecx, eax
jmp 0x4df910
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov eax, dword [ebp - 0x4c]
and ecx, dword [ebp - 0x40]
mov word [ebx + eax*2], dx
mov eax, dword [ebp - 0x20]
lea edx, [eax*2 + 1]
shl dword [ebp - 8], 1
mov eax, ecx
and eax, dword [ebp - 8]
mov dword [ebp - 0x40], eax
add eax, ecx
add eax, edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x4c], eax
movzx edx, word [ebx + eax*2]
cmp edi, 0x1000000
jae 0x4df942
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4df974
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x4c]
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x20]
add eax, eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x40]
not eax
and ecx, eax
jmp 0x4df996
sub edi, eax
sub esi, eax
mov eax, edx
shr eax, 5
sub edx, eax
mov eax, dword [ebp - 0x4c]
and ecx, dword [ebp - 0x40]
mov word [ebx + eax*2], dx
mov eax, dword [ebp - 0x20]
lea eax, [eax*2 + 1]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 8]
lea edx, [eax + eax]
and edx, ecx
add edx, ecx
add edx, dword [ebp - 0x20]
movzx ecx, word [ebx + edx*2]
cmp edi, 0x1000000
jae 0x4df9c0
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4df9e6
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x20]
lea ecx, [eax + eax]
jmp 0x4df9ff
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0x20]
mov word [ebx + edx*2], cx
lea ecx, [eax*2 + 1]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov byte [edx + eax], cl
inc edx
mov dword [ebp - 0x14], edx
jmp 0x4e059b
mov eax, ecx
sub esi, edx
shr eax, 5
sub edi, edx
mov edx, dword [ebp - 0x10]
sub ecx, eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 8], esi
mov word [eax + ebx*2], cx
movzx ecx, word [eax + edx*2 + 0x180]
mov ebx, dword [ebp - 4]
cmp edi, 0x1000000
jae 0x4dfa4e
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4dfa81
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
mov word [ecx + edx*2 + 0x180], ax
lea ebx, [ecx + 0x664]
add edx, 0xc
jmp 0x4dfca6
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
cmp dword [ebp - 0x44], 0
mov eax, dword [ebp - 0xc]
mov word [eax + edx*2 + 0x180], cx
jne 0x4dfaa7
cmp dword [ebp - 0x1c], 0
je 0x4e0620
movzx edx, word [eax + edx*2 + 0x198]
cmp edi, 0x1000000
jae 0x4dfac6
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 4], ebx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
cmp esi, ecx
jae 0x4dfb8f
mov ebx, dword [ebp - 0xc]
mov eax, 0x800
sub eax, edx
mov edi, ecx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x10]
mov word [ebx + edx*2 + 0x198], ax
lea ebx, [edx + 0xf]
mov eax, dword [ebp - 0xc]
shl ebx, 4
add ebx, dword [ebp - 0x20]
movzx edx, word [eax + ebx*2]
cmp ecx, 0x1000000
jae 0x4dfb1c
mov ecx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [ecx]
or esi, eax
inc ecx
mov dword [ebp - 4], ecx
mov ecx, dword [ebp - 0xc]
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4dfb75
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x14]
cmp edx, dword [ebp - 0x24]
mov word [ecx + ebx*2], ax
mov ecx, dword [ebp - 0x28]
sbb eax, eax
and eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x24]
add eax, edx
mov al, byte [eax + ecx]
mov byte [edx + ecx], al
inc edx
mov ecx, dword [ebp - 0x1c]
inc ecx
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x10], 7
mov dword [ebp - 0x1c], ecx
sbb ebx, ebx
and ebx, 0xfffffffe
add ebx, 0xb
mov dword [ebp - 0x10], ebx
jmp 0x4e05a1
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ecx + ebx*2], dx
mov edx, dword [ebp - 0x10]
jmp 0x4dfc95
mov eax, edx
sub esi, ecx
shr eax, 5
sub edi, ecx
mov ecx, dword [ebp - 0xc]
sub edx, eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 8], esi
mov word [ecx + eax*2 + 0x198], dx
mov edx, eax
movzx ecx, word [ecx + edx*2 + 0x1b0]
cmp edi, 0x1000000
jae 0x4dfbcf
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4dfbfc
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
mov word [ecx + edx*2 + 0x1b0], ax
mov eax, dword [ebp - 0x30]
jmp 0x4dfc8c
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0xc]
mov word [eax + edx*2 + 0x1b0], cx
movzx ecx, word [eax + edx*2 + 0x1c8]
cmp edi, 0x1000000
jae 0x4dfc37
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4dfc61
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
mov word [ecx + edx*2 + 0x1c8], ax
mov eax, dword [ebp - 0x34]
jmp 0x4dfc86
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0xc]
mov word [eax + edx*2 + 0x1c8], cx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x30]
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x24]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x24], eax
cmp edx, 7
lea ebx, [ecx + 0xa68]
sbb edx, edx
and edx, 0xfffffffd
add edx, 0xb
mov dword [ebp - 0x10], edx
movzx edx, word [ebx]
cmp edi, 0x1000000
jae 0x4dfcc9
mov ecx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [ecx]
or esi, eax
inc ecx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ecx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
cmp esi, ecx
jae 0x4dfe09
mov eax, 0x800
mov edi, ecx
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx], ax
mov eax, dword [ebp - 0x20]
shl eax, 4
add ebx, eax
movzx edx, word [ebx + 6]
cmp ecx, 0x1000000
jae 0x4dfd13
mov ecx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [ecx]
or esi, eax
inc ecx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ecx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4dfd35
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + 6], ax
push 2
jmp 0x4dfd49
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ebx + 6], dx
push 3
pop edx
add edx, edx
movzx ecx, word [edx + ebx + 4]
cmp edi, 0x1000000
jae 0x4dfd6d
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4dfd8e
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx + 4], ax
jmp 0x4dfda2
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov word [edx + ebx + 4], cx
inc edx
add edx, edx
mov dword [ebp - 0x18], edx
movzx ecx, word [edx + ebx + 4]
cmp edi, 0x1000000
jae 0x4dfdcc
mov edx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [edx]
or esi, eax
inc edx
mov dword [ebp - 4], edx
mov edx, dword [ebp - 0x18]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4dfded
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx + 4], ax
jmp 0x4dfe01
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov word [edx + ebx + 4], cx
inc edx
sub edx, 8
jmp 0x4dfffd
mov eax, edx
sub edi, ecx
shr eax, 5
sub esi, ecx
sub edx, eax
mov dword [ebp - 8], esi
mov word [ebx], dx
movzx edx, word [ebx + 2]
cmp edi, 0x1000000
jae 0x4dfe3b
mov ecx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [ecx]
or esi, eax
inc ecx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ecx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
cmp esi, ecx
jae 0x4dff78
mov eax, 0x800
mov edi, ecx
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + 2], ax
mov eax, dword [ebp - 0x20]
shl eax, 4
add eax, 0x104
add ebx, eax
movzx edx, word [ebx + 2]
cmp ecx, 0x1000000
jae 0x4dfe8b
mov ecx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [ecx]
or esi, eax
inc ecx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ecx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4dfead
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + 2], ax
push 2
jmp 0x4dfec1
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ebx + 2], dx
push 3
pop edx
add edx, edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x4dfee4
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4dff04
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x4dff17
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
add edx, edx
mov dword [ebp - 0x18], edx
movzx ecx, word [edx + ebx]
cmp edi, 0x1000000
jae 0x4dff40
mov edx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [edx]
or esi, eax
inc edx
mov dword [ebp - 4], edx
mov edx, dword [ebp - 0x18]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4dff63
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx], ax
jmp 0x4e0000
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx], cx
inc edx
jmp 0x4dfffa
mov eax, edx
sub edi, ecx
shr eax, 5
sub esi, ecx
sub edx, eax
mov word [ebx + 2], dx
xor edx, edx
inc edx
add edx, edx
mov dword [ebp - 0x18], edx
movzx ecx, word [edx + ebx + 0x204]
cmp edi, 0x1000000
jae 0x4dffb4
mov edx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [edx]
or esi, eax
inc edx
mov dword [ebp - 4], edx
mov edx, dword [ebp - 0x18]
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4dffd8
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov word [edx + ebx + 0x204], ax
jmp 0x4dffec
sub edi, eax
sub esi, eax
mov eax, ecx
shr eax, 5
sub ecx, eax
mov word [edx + ebx + 0x204], cx
inc edx
cmp edx, 0x100
jb 0x4dff8a
sub edx, 0xf0
mov dword [ebp - 8], esi
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x10], 0xc
mov dword [ebp - 0x20], edi
jb 0x4e051a
mov ecx, dword [ebp - 0xc]
cmp edx, 4
push 3
pop eax
cmovb eax, edx
add ecx, 0x360
shl eax, 7
add ecx, eax
movzx edx, word [ecx + 2]
cmp edi, 0x1000000
jae 0x4e0045
mov ebx, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [ebx]
or esi, eax
inc ebx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4e0067
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ecx + 2], ax
push 2
jmp 0x4e007b
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ecx + 2], dx
push 3
pop ebx
add ebx, ebx
movzx edx, word [ebx + ecx]
cmp edi, 0x1000000
jae 0x4e009e
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4e00be
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + ecx], ax
jmp 0x4e00d1
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ebx + ecx], dx
inc ebx
add ebx, ebx
movzx edx, word [ebx + ecx]
cmp edi, 0x1000000
jae 0x4e00f3
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4e0113
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + ecx], ax
jmp 0x4e0126
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ebx + ecx], dx
inc ebx
add ebx, ebx
movzx edx, word [ebx + ecx]
cmp edi, 0x1000000
jae 0x4e0148
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4e0168
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + ecx], ax
jmp 0x4e017b
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ebx + ecx], dx
inc ebx
add ebx, ebx
movzx edx, word [ebx + ecx]
cmp edi, 0x1000000
jae 0x4e019d
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4e01bd
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, edx
mov word [ebx + ecx], ax
jmp 0x4e01d0
sub esi, eax
sub edi, eax
mov eax, edx
mov dword [ebp - 8], esi
shr eax, 5
sub edx, eax
mov word [ebx + ecx], dx
inc ebx
lea edx, [ebx + ebx]
movzx ebx, word [edx + ecx]
cmp edi, 0x1000000
jae 0x4e01f3
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ebx
cmp esi, eax
jae 0x4e0213
mov edi, eax
mov eax, 0x800
sub eax, ebx
shr eax, 5
add eax, ebx
mov word [edx + ecx], ax
jmp 0x4e0226
sub esi, eax
sub edi, eax
mov eax, ebx
mov dword [ebp - 8], esi
shr eax, 5
sub ebx, eax
mov word [edx + ecx], bx
inc edx
sub edx, 0x40
mov dword [ebp - 0x20], edi
cmp edx, 4
jb 0x4e04df
mov ecx, edx
mov ebx, edx
shr ecx, 1
and edx, 1
dec ecx
or edx, 2
mov dword [ebp - 8], ecx
cmp ebx, 0xe
jae 0x4e02ea
shl edx, cl
mov eax, edx
sub eax, ebx
mov ebx, dword [ebp - 0xc]
lea ebx, [ebx + eax*2]
xor eax, eax
add ebx, 0x55e
inc eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x20], eax
add eax, eax
mov dword [ebp - 0x38], eax
movzx ebx, word [eax + ebx]
cmp edi, 0x1000000
jae 0x4e028b
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov ecx, dword [ebp - 0x40]
mov eax, edi
shr eax, 0xb
imul eax, ebx
cmp esi, eax
jae 0x4e02b6
mov edi, eax
mov eax, 0x800
sub eax, ebx
shr eax, 5
add eax, ebx
mov ebx, dword [ebp - 0x38]
mov word [ebx + ecx], ax
mov eax, ebx
mov ebx, dword [ebp - 0x20]
jmp 0x4e02ce
sub edi, eax
sub esi, eax
mov eax, ebx
shr eax, 5
sub ebx, eax
mov eax, dword [ebp - 0x38]
mov word [eax + ecx], bx
inc eax
mov ebx, dword [ebp - 0x20]
or edx, ebx
mov ecx, dword [ebp - 8]
add ebx, ebx
dec ecx
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x40]
mov dword [ebp - 8], ecx
jne 0x4e0269
mov dword [ebp - 0x20], edi
mov dword [ebp - 8], esi
jmp 0x4e04df
sub ecx, 4
mov ebx, dword [ebp - 4]
cmp edi, 0x1000000
jae 0x4e0307
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [ebp - 4], ebx
shr edi, 1
lea edx, [edx*2 + 1]
sub esi, edi
mov eax, esi
shr eax, 0x1f
neg eax
add edx, eax
and eax, edi
add esi, eax
dec ecx
jne 0x4e02ed
mov eax, dword [ebp - 0xc]
shl edx, 4
mov dword [ebp - 8], esi
movzx ecx, word [eax + 0x646]
cmp edi, 0x1000000
jae 0x4e034c
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
inc ebx
mov dword [ebp - 8], esi
mov dword [ebp - 4], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4e0376
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
push 2
mov word [ecx + 0x646], ax
mov eax, ecx
jmp 0x4e0393
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0xc]
push 3
or edx, 1
mov word [eax + 0x646], cx
pop ebx
add ebx, ebx
movzx ecx, word [ebx + eax + 0x644]
cmp edi, 0x1000000
jae 0x4e03ba
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4e03e3
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
mov word [ebx + ecx + 0x644], ax
mov eax, ecx
jmp 0x4e0400
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0xc]
mov word [ebx + eax + 0x644], cx
inc ebx
or edx, 2
add ebx, ebx
movzx ecx, word [ebx + eax + 0x644]
cmp edi, 0x1000000
jae 0x4e0426
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4e044f
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
mov word [ebx + ecx + 0x644], ax
mov eax, ecx
jmp 0x4e046c
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0xc]
mov word [ebx + eax + 0x644], cx
inc ebx
or edx, 4
movzx ecx, word [eax + ebx*2 + 0x644]
cmp edi, 0x1000000
jae 0x4e0490
mov eax, dword [ebp - 4]
shl esi, 8
shl edi, 8
movzx eax, byte [eax]
or esi, eax
inc dword [ebp - 4]
mov dword [ebp - 8], esi
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4e04b7
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ecx
mov ecx, dword [ebp - 0xc]
mov word [ecx + ebx*2 + 0x644], ax
jmp 0x4e04d3
sub esi, eax
sub edi, eax
mov eax, ecx
mov dword [ebp - 8], esi
shr eax, 5
sub ecx, eax
mov eax, dword [ebp - 0xc]
or edx, 8
mov word [eax + ebx*2 + 0x644], cx
mov dword [ebp - 0x20], edi
cmp edx, 0xffffffff
je 0x4e0606
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
lea eax, [edx + 1]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x4e0503
cmp edx, dword [ebp - 0x1c]
jmp 0x4e0505
cmp edx, eax
jae 0x4e0617
cmp dword [ebp - 0x10], 0x13
sbb eax, eax
and eax, 0xfffffffd
add eax, 0xa
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x50]
add ebx, 2
mov ecx, dword [ebp - 0x14]
sub eax, ecx
je 0x4e061a
cmp eax, ebx
mov edx, ebx
cmovb edx, eax
cmp ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
sbb ecx, ecx
add dword [ebp - 0x1c], edx
and ecx, dword [ebp - 0x2c]
sub ebx, edx
sub ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x14]
sub eax, ecx
mov dword [ebp - 0x18], ebx
cmp edx, eax
ja 0x4e0574
mov ebx, dword [ebp - 0x28]
add ebx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x14]
add dword [ebp - 0x14], edx
lea eax, [ebx + edx]
mov dword [ebp - 0x4c], eax
mov edx, eax
mov al, byte [ecx + ebx]
mov byte [ebx], al
inc ebx
cmp ebx, edx
jne 0x4e0568
jmp 0x4e0598
mov ebx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x28]
mov edi, dword [ebp - 0x2c]
mov al, byte [ecx + esi]
mov byte [ebx + esi], al
inc ebx
inc ecx
xor eax, eax
cmp ecx, edi
cmove ecx, eax
dec edx
jne 0x4e057d
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0x14], ebx
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x10]
cmp edx, dword [ebp - 0x50]
jae 0x4e05b2
mov edx, dword [ebp - 4]
cmp edx, dword [ebp + 8]
jb 0x4df2af
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 4]
cmp edi, 0x1000000
jae 0x4e05cc
movzx eax, byte [ecx]
shl esi, 8
shl edi, 8
or esi, eax
inc ecx
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x18], ecx
mov ecx, dword [ebp - 0x14]
mov dword [eax + 0x24], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [eax + 0x2c], ecx
mov ecx, dword [ebp - 0x24]
mov dword [eax + 0x1c], edi
mov dword [eax + 0x20], esi
mov dword [eax + 0x48], edx
mov dword [eax + 0x38], ecx
mov ecx, dword [ebp - 0x30]
mov dword [eax + 0x3c], ecx
mov ecx, dword [ebp - 0x34]
mov dword [eax + 0x40], ecx
mov ecx, dword [ebp - 0x38]
mov dword [eax + 0x44], ecx
mov dword [eax + 0x34], ebx
xor eax, eax
jmp 0x4e0623
mov edx, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x10]
add edx, 0x112
sub ebx, 0xc
jmp 0x4e05b5
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x24], ecx
xor eax, eax
inc eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4