Function at 0x406eab
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xb0
push esi
push edi
mov eax, ecx
lea edi, [esp + 0x1c]
push 0x22
pop ecx
mov esi, eax
mov dword [esp + 0xb4], eax
rep movsd dword es:[edi], dword [esi]
cmp dword [esp + 0x74], 0xffffffff
jne 0x406ed6
xor eax, eax
inc eax
jmp 0x407c11
mov eax, dword [esp + 0x8c]
mov edx, dword [esp + 0x60]
mov ecx, dword [esp + 0x5c]
mov esi, dword [esp + 0x64]
mov edi, dword [esp + 0x50]
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0xa8], eax
mov al, byte [esp + 0x49]
push ebx
mov ebx, dword [esp + 0x9c]
push ebp
mov ebp, dword [esp + 0x9c]
mov byte [esp + 0x23], al
mov eax, dword [esp + 0x24]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
cmp eax, 0x1c
ja case.default.0x406f42
jmp dword [eax*4 + 0x407c1b]
mov eax, dword [esp + 0x40]
test eax, eax
je 0x407bf8
dec eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x3c]
mov cl, byte [eax]
inc eax
mov dword [esp + 0x3c], eax
cmp cl, 0xe1
ja case.default.0x406f42
xor edx, edx
movzx ecx, cl
mov eax, ecx
push 0x2d
pop esi
div esi
xor edx, edx
mov edi, eax
mov eax, ecx
div esi
push 9
movzx esi, dl
xor edx, edx
mov eax, esi
pop ecx
div ecx
mov ecx, edi
movzx eax, dl
xor edx, edx
mov dword [esp + 0x70], eax
xor eax, eax
inc eax
shl eax, cl
dec eax
mov dword [esp + 0xb4], eax
mov dword [esp + 0x90], eax
mov eax, esi
push 9
pop ecx
div ecx
xor edx, edx
mov esi, 0x300
inc edx
mov ecx, eax
mov eax, dword [esp + 0xa8]
shl edx, cl
mov ecx, dword [esp + 0x70]
dec edx
mov dword [esp + 0xb8], edx
mov dword [esp + 0x94], edx
lea ecx, [ecx + edi]
shl esi, cl
add esi, 0x736
lea edi, [esi + esi]
cmp edi, dword [esp + 0x34]
je 0x407015
test eax, eax
je 0x406ff9
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push edi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [esp + 0xa8], eax
test eax, eax
je case.default.0x406f42
mov dword [esp + 0x34], edi
sub esi, 1
mov ecx, 0x400
mov word [eax + esi*2], cx
jne 0x407015
mov edi, dword [esp + 0x40]
xor ecx, ecx
xor esi, esi
jmp 0x407056
mov edi, dword [esp + 0x40]
test edi, edi
je 0x407b7b
mov edx, dword [esp + 0x3c]
dec edi
shl ecx, 3
mov dword [esp + 0x40], edi
movzx eax, byte [edx]
shl eax, cl
mov ecx, dword [esp + 0x14]
or esi, eax
inc edx
inc ecx
mov dword [esp + 0x3c], edx
mov dword [esp + 0x64], ecx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x6c], esi
cmp ecx, 4
jl 0x407031
mov eax, dword [esp + 0x38]
cmp esi, eax
je 0x4070a1
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x38], esi
test eax, eax
je 0x407085
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push esi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [esp + 0xa4], eax
test eax, eax
je case.default.0x406f42
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0xa4]
push 5
mov byte [ecx + eax - 1], 0
pop ecx
jmp 0x4070db
mov edi, dword [esp + 0x40]
test edi, edi
je 0x407b85
mov edx, dword [esp + 0x3c]
dec edi
shl ebx, 8
mov dword [esp + 0x40], edi
movzx eax, byte [edx]
or ebx, eax
inc edx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x3c], edx
mov eax, ecx
dec ecx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x64], ecx
test eax, eax
jne 0x4070b6
mov edx, dword [esp + 0x10]
mov esi, dword [esp + 0x4c]
and esi, dword [esp + 0xb4]
mov eax, dword [esp + 0x74]
shl eax, 4
add eax, esi
mov dword [esp + 0xb0], esi
mov dword [esp + 0x60], esi
mov esi, dword [esp + 0xa8]
mov dword [esp + 0x28], 6
lea edi, [esi + eax*2]
jmp 0x4079a9
test esi, esi
jne 0x4071bb
movzx edx, byte [esp + 0x50]
push 8
pop eax
mov cl, al
mov eax, dword [esp + 0x4c]
sub cl, byte [esp + 0x70]
and eax, dword [esp + 0xb8]
shr edx, cl
mov ecx, dword [esp + 0x70]
shl eax, cl
mov ecx, dword [esp + 0xa8]
add edx, eax
imul eax, edx, 0x600
add ecx, 0xe6c
add eax, ecx
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x74]
cmp eax, 4
jge 0x407177
and dword [esp + 0x74], esi
jmp 0x407188
cmp eax, 0xa
jge 0x407181
sub eax, 3
jmp 0x407184
sub eax, 6
mov dword [esp + 0x74], eax
cmp dword [esp + 0x78], 0
je 0x4071b3
mov eax, dword [esp + 0x98]
sub eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x38]
cmp eax, ecx
jb 0x4071a4
add eax, ecx
mov ecx, dword [esp + 0xa4]
xor edx, edx
inc edx
mov al, byte [eax + ecx]
jmp 0x40722c
xor edx, edx
inc edx
jmp 0x4073ec
mov eax, dword [esp + 0x74]
mov dword [esp + 0x78], 1
add eax, 0xc0
push 7
mov esi, dword [esp + 0xac]
lea edi, [esi + eax*2]
pop eax
mov dword [esp + 0x28], eax
jmp 0x4079a9
mov eax, dword [esp + 0x40]
test eax, eax
je 0x407b8f
shl ebp, 8
dec eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x3c]
shl ebx, 8
mov dword [esp + 0x9c], ebp
movzx eax, byte [eax]
or ebx, eax
inc dword [esp + 0x3c]
mov dword [esp + 0xa0], ebx
cmp ecx, esi
jne 0x407306
cmp edx, 0x100
jge 0x40739f
mov al, byte [esp + 0x23]
mov esi, dword [esp + 0x54]
movzx ecx, al
add al, al
shr ecx, 7
mov byte [esp + 0x23], al
mov byte [esp + 0x51], al
mov dword [esp + 0x14], ecx
lea eax, [ecx + 1]
mov dword [esp + 0x64], ecx
shl eax, 8
add eax, edx
lea edi, [esi + eax*2]
movzx eax, word [edi]
mov esi, eax
mov dword [esp + 0x58], edi
mov eax, ebp
mov dword [esp + 0x10], esi
shr eax, 0xb
imul eax, esi
mov dword [esp + 0x18], esi
xor esi, esi
cmp ebx, eax
jae 0x407288
mov ebp, eax
mov eax, 0x800
sub eax, dword [esp + 0x18]
sar eax, 5
add eax, dword [esp + 0x10]
add edx, edx
jmp 0x4072ad
sub ebx, eax
lea edx, [edx*2 + 1]
sub ebp, eax
mov dword [esp + 0xa0], ebx
mov ax, word [esp + 0x10]
inc esi
shr ax, 5
sub word [esp + 0x10], ax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x68], edx
mov dword [esp + 0x10], edx
mov word [edi], ax
mov dword [esp + 0x9c], ebp
mov dword [esp + 0x6c], esi
cmp ebp, 0x1000000
jae 0x407214
jmp case.0x406f42.13
mov eax, dword [esp + 0x40]
test eax, eax
je 0x407b99
shl ebp, 8
dec eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x3c]
shl ebx, 8
mov dword [esp + 0x9c], ebp
movzx eax, byte [eax]
or ebx, eax
inc dword [esp + 0x3c]
mov dword [esp + 0xa0], ebx
cmp edx, 0x100
jge 0x40739f
mov edi, dword [esp + 0x54]
lea eax, [edx + edx]
add edi, eax
mov dword [esp + 0xac], eax
mov dword [esp + 0x58], edi
movzx eax, word [edi]
mov dword [esp + 0x18], eax
movzx eax, ax
mov dword [esp + 0x10], eax
mov eax, ebp
shr eax, 0xb
imul eax, dword [esp + 0x10]
cmp ebx, eax
jae 0x40735b
mov ebp, eax
mov eax, 0x800
sub eax, dword [esp + 0x10]
sar eax, 5
add eax, dword [esp + 0x18]
add edx, edx
mov word [edi], ax
jmp 0x40737f
mov edx, dword [esp + 0x18]
sub ebx, eax
sub ebp, eax
mov dword [esp + 0xa0], ebx
mov ax, dx
shr ax, 5
sub dx, ax
mov word [edi], dx
mov edx, dword [esp + 0xac]
inc edx
mov dword [esp + 0x68], edx
mov dword [esp + 0x10], edx
mov dword [esp + 0x9c], ebp
cmp ebp, 0x1000000
jae 0x407306
jmp case.0x406f42.14
mov al, byte [esp + 0x68]
and dword [esp + 0x78], 0
mov byte [esp + 0x50], al
jmp 0x407472
mov eax, dword [esp + 0x40]
test eax, eax
je 0x407ba3
mov ecx, dword [esp + 0x3c]
shl ebp, 8
dec eax
mov dword [esp + 0x40], eax
shl ebx, 8
movzx eax, byte [ecx]
or ebx, eax
mov dword [esp + 0x9c], ebp
inc ecx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x3c], ecx
cmp edx, 0x100
jge 0x407464
mov edi, dword [esp + 0x54]
lea eax, [edx + edx]
add edi, eax
mov dword [esp + 0xac], eax
mov eax, ebp
mov dword [esp + 0x58], edi
shr eax, 0xb
movzx ecx, word [edi]
imul eax, ecx
mov dword [esp + 0x18], ecx
cmp ebx, eax
jae 0x407428
mov ebp, eax
mov eax, 0x800
sub eax, ecx
sar eax, 5
add eax, ecx
add edx, edx
mov word [edi], ax
jmp 0x407448
mov edx, dword [esp + 0xac]
sub ebx, eax
sub ebp, eax
mov dword [esp + 0xa0], ebx
mov ax, cx
shr ax, 5
sub cx, ax
inc edx
mov word [edi], cx
mov dword [esp + 0x68], edx
mov dword [esp + 0x10], edx
mov dword [esp + 0x9c], ebp
cmp ebp, 0x1000000
jae 0x4073e4
jmp case.0x406f42.15
mov al, byte [esp + 0x68]
mov byte [esp + 0x50], al
jmp 0x407472
mov al, byte [esp + 0x50]
mov edx, dword [esp + 0x48]
test edx, edx
je 0x407bad
mov ecx, dword [esp + 0x44]
inc dword [esp + 0x4c]
mov byte [ecx], al
inc ecx
dec edx
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 0x48], edx
mov edx, dword [esp + 0xa4]
mov byte [ecx + edx], al
mov eax, ecx
inc eax
mov ecx, dword [esp + 0x14]
xor edx, edx
div dword [esp + 0x38]
mov dword [esp + 0x98], edx
jmp 0x407953
cmp esi, 1
jne 0x4074d1
mov eax, dword [esp + 0x74]
add eax, 0xcc
push 8
jmp 0x4071ce
mov eax, dword [esp + 0x88]
mov esi, dword [esp + 0x84]
mov dword [esp + 0x8c], eax
push 0xa
pop eax
mov dword [esp + 0x88], esi
mov esi, dword [esp + 0x1c]
push 7
mov dword [esp + 0x88], esi
pop esi
cmp dword [esp + 0x74], esi
mov dword [esp + 0x2c], 0x16
cmovl eax, esi
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0xa8]
add eax, 0x664
mov dword [esp + 0x54], eax
jmp 0x407967
test esi, esi
mov esi, dword [esp + 0xa8]
jne 0x407549
mov eax, dword [esp + 0x74]
add eax, 0xf
shl eax, 4
add eax, dword [esp + 0xb0]
push 9
jmp 0x4071d5
mov edi, dword [esp + 0x74]
add edi, 0xd8
mov dword [esp + 0x28], 0xa
lea edi, [esi + edi*2]
jmp 0x4079a9
test esi, esi
jne 0x407670
cmp dword [esp + 0x4c], esi
je case.default.0x406f42
push 0xb
pop eax
push 7
pop edx
cmp dword [esp + 0x74], edx
push 9
pop edx
cmovl eax, edx
mov dword [esp + 0x74], eax
cmp dword [esp + 0x48], 0
je 0x407bb7
mov eax, dword [esp + 0x98]
sub eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x38]
cmp eax, edx
jb 0x4075a9
add eax, edx
mov edx, dword [esp + 0xa4]
mov ecx, dword [esp + 0x98]
push 2
mov al, byte [eax + edx]
mov byte [ecx + edx], al
xor edx, edx
mov byte [esp + 0x54], al
mov eax, ecx
inc eax
mov ecx, dword [esp + 0x48]
div dword [esp + 0x3c]
mov al, byte [esp + 0x54]
inc dword [esp + 0x50]
mov byte [ecx], al
inc ecx
dec dword [esp + 0x4c]
mov dword [esp + 0x9c], edx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x48], ecx
pop eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x24], eax
jmp 0x406f39
test esi, esi
jne 0x407609
mov eax, dword [esp + 0x84]
jmp 0x40765a
mov edi, dword [esp + 0x74]
mov esi, dword [esp + 0xa8]
add edi, 0xe4
mov dword [esp + 0x28], 0xb
lea edi, [esi + edi*2]
jmp 0x4079a9
test esi, esi
jne 0x407637
mov eax, dword [esp + 0x88]
jmp 0x40764c
mov eax, dword [esp + 0x8c]
mov esi, dword [esp + 0x88]
mov dword [esp + 0x8c], esi
mov esi, dword [esp + 0x84]
mov dword [esp + 0x88], esi
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x84], esi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0xa8]
add eax, 0xa68
mov dword [esp + 0x2c], 0x15
mov dword [esp + 0x54], eax
jmp 0x407967
push 0xb
pop eax
push 7
pop edx
cmp dword [esp + 0x74], edx
push 8
pop edx
cmovl eax, edx
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x1c]
jmp 0x4078c0
cmp dword [esp + 0x7c], 4
mov ecx, dword [esp + 0xa8]
push 3
pop eax
cmovl eax, dword [esp + 0x7c]
add ecx, 0x360
shl eax, 7
add eax, ecx
mov dword [esp + 0x30], 0x19
push 6
mov dword [esp + 0x58], eax
pop esi
jmp 0x407a83
mov eax, edx
cmp edx, 4
jl 0x4078b4
mov esi, edx
and eax, 1
sar esi, 1
or eax, 2
dec esi
mov ecx, esi
shl eax, cl
mov dword [esp + 0x1c], eax
mov dword [esp + 0x80], eax
cmp edx, 0xe
jge 0x40771e
mov ecx, dword [esp + 0xa8]
sub eax, edx
add ecx, 0x55e
lea eax, [ecx + eax*2]
jmp 0x4077b1
xor edx, edx
lea ecx, [esi - 4]
jmp 0x407759
mov eax, dword [esp + 0x40]
test eax, eax
je 0x407bc1
mov esi, dword [esp + 0x3c]
shl ebp, 8
dec eax
mov dword [esp + 0x40], eax
shl ebx, 8
movzx eax, byte [esi]
or ebx, eax
mov dword [esp + 0x9c], ebp
inc esi
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x3c], esi
dec ecx
mov dword [esp + 0x64], ecx
test ecx, ecx
jle 0x40778e
shr ebp, 1
add edx, edx
mov dword [esp + 0x9c], ebp
mov dword [esp + 0x68], edx
cmp ebx, ebp
jb 0x407784
sub ebx, ebp
or edx, 1
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x68], edx
cmp ebp, 0x1000000
jae 0x407758
jmp case.0x406f42.12
mov eax, dword [esp + 0x1c]
shl edx, 4
add eax, edx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0xa8]
push 4
add eax, 0x644
pop esi
mov dword [esp + 0x54], eax
xor edx, edx
xor eax, eax
mov dword [esp + 0x6c], esi
inc eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x5c], eax
xor ecx, ecx
mov dword [esp + 0x68], edx
jmp 0x407805
mov eax, dword [esp + 0x40]
test eax, eax
je 0x407bd2
shl ebp, 8
dec eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x3c]
shl ebx, 8
mov dword [esp + 0x9c], ebp
movzx eax, byte [eax]
or ebx, eax
inc dword [esp + 0x3c]
mov dword [esp + 0xa0], ebx
mov eax, dword [esp + 0x5c]
inc ecx
mov dword [esp + 0x64], ecx
mov dword [esp + 0x14], ecx
cmp ecx, esi
jge 0x4078ae
mov edi, dword [esp + 0x54]
add eax, eax
add edi, eax
mov dword [esp + 0xac], eax
mov dword [esp + 0x58], edi
movzx eax, word [edi]
mov dword [esp + 0x14], eax
movzx eax, ax
mov dword [esp + 0x18], eax
mov eax, ebp
shr eax, 0xb
imul eax, dword [esp + 0x18]
cmp ebx, eax
jae 0x40785f
mov ebp, eax
mov eax, 0x800
sub eax, dword [esp + 0x18]
sar eax, 5
add eax, dword [esp + 0x14]
shl dword [esp + 0x5c], 1
mov word [edi], ax
jmp 0x407896
sub ebx, eax
bts edx, ecx
sub ebp, eax
mov dword [esp + 0x10], edx
mov ax, word [esp + 0x14]
shr ax, 5
sub word [esp + 0x14], ax
mov eax, dword [esp + 0x14]
mov word [edi], ax
mov eax, dword [esp + 0xac]
inc eax
mov dword [esp + 0x68], edx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x9c], ebp
cmp ebp, 0x1000000
jae 0x407800
jmp case.0x406f42.16
mov eax, dword [esp + 0x1c]
add eax, edx
inc eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x80], eax
test eax, eax
je 0x407bcb
mov edx, dword [esp + 0x4c]
cmp eax, edx
ja case.default.0x406f42
mov eax, dword [esp + 0x7c]
add eax, 2
add edx, eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x4c], edx
mov edx, dword [esp + 0x98]
cmp dword [esp + 0x48], 0
je 0x407bdc
mov eax, edx
mov edx, dword [esp + 0x38]
sub eax, dword [esp + 0x1c]
cmp eax, edx
jb 0x407907
add eax, edx
mov edx, dword [esp + 0xa4]
mov ecx, dword [esp + 0x98]
mov al, byte [eax + edx]
mov byte [ecx + edx], al
xor edx, edx
mov byte [esp + 0x50], al
mov eax, ecx
inc eax
mov ecx, dword [esp + 0x44]
div dword [esp + 0x38]
mov al, byte [esp + 0x50]
mov byte [ecx], al
inc ecx
mov eax, dword [esp + 0x7c]
dec dword [esp + 0x48]
dec eax
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x98], edx
mov dword [esp + 0x7c], eax
test eax, eax
jg 0x4078ec
mov edx, dword [esp + 0x10]
push 2
pop eax
mov dword [esp + 0x24], eax
jmp 0x406f39
mov eax, dword [esp + 0x54]
mov edi, eax
mov dword [esp + 0x28], 0x12
jmp 0x4079a9
test esi, esi
jne 0x40799a
mov eax, dword [esp + 0xb0]
mov edx, dword [esp + 0x54]
and dword [esp + 0x7c], esi
shl eax, 4
add edx, 4
add edx, eax
push 3
mov dword [esp + 0x58], edx
pop esi
jmp 0x407a7b
mov edi, dword [esp + 0x54]
add edi, 2
mov dword [esp + 0x28], 0x13
mov dword [esp + 0x58], edi
movzx eax, word [edi]
mov esi, eax
mov dword [esp + 0x18], eax
mov eax, ebp
shr eax, 0xb
imul eax, esi
cmp ebx, eax
jae 0x4079d7
mov ebp, eax
mov eax, 0x800
sub eax, esi
sar eax, 5
add eax, esi
xor esi, esi
mov word [edi], ax
jmp 0x4079f2
sub ebx, eax
sub ebp, eax
mov ax, si
mov dword [esp + 0xa0], ebx
shr ax, 5
sub si, ax
mov word [edi], si
xor esi, esi
inc esi
mov dword [esp + 0x6c], esi
mov dword [esp + 0x9c], ebp
cmp ebp, 0x1000000
jae 0x407a37
mov eax, dword [esp + 0x40]
test eax, eax
je 0x407be6
shl ebp, 8
dec eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x3c]
shl ebx, 8
mov dword [esp + 0x9c], ebp
movzx eax, byte [eax]
or ebx, eax
inc dword [esp + 0x3c]
mov dword [esp + 0xa0], ebx
mov eax, dword [esp + 0x28]
jmp 0x407b72
test esi, esi
jne 0x407a64
mov edx, dword [esp + 0x54]
push 8
pop eax
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0xb0]
shl eax, 4
add edx, 0x104
jmp 0x40798c
add dword [esp + 0x54], 0x204
push 0x10
pop eax
push 8
mov dword [esp + 0x80], eax
pop eax
mov esi, eax
mov dword [esp + 0x30], 0x14
mov dword [esp + 0x6c], esi
xor edx, edx
mov ecx, esi
inc edx
mov dword [esp + 0x5c], edx
jmp 0x407aca
mov eax, dword [esp + 0x40]
test eax, eax
je 0x407bf0
mov edx, dword [esp + 0x3c]
shl ebp, 8
dec eax
mov dword [esp + 0x40], eax
shl ebx, 8
movzx eax, byte [edx]
or ebx, eax
mov dword [esp + 0x9c], ebp
inc edx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x3c], edx
mov edx, dword [esp + 0x5c]
dec ecx
mov dword [esp + 0x64], ecx
mov dword [esp + 0x14], ecx
test ecx, ecx
jle 0x407b50
mov edi, dword [esp + 0x54]
lea eax, [edx + edx]
add edi, eax
mov dword [esp + 0xac], eax
mov eax, ebp
mov dword [esp + 0x58], edi
shr eax, 0xb
movzx edx, word [edi]
imul eax, edx
mov dword [esp + 0x18], edx
cmp ebx, eax
jae 0x407b14
mov ebp, eax
mov eax, 0x800
sub eax, edx
sar eax, 5
add eax, edx
shl dword [esp + 0x5c], 1
mov word [edi], ax
jmp 0x407b38
sub ebx, eax
sub ebp, eax
mov ax, dx
mov dword [esp + 0xa0], ebx
shr ax, 5
sub dx, ax
mov eax, dword [esp + 0xac]
inc eax
mov word [edi], dx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x9c], ebp
cmp ebp, 0x1000000
jae 0x407ac5
jmp case.0x406f42.24
xor eax, eax
mov ecx, esi
inc eax
shl eax, cl
sub edx, eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x10], edx
mov dword [esp + 0x68], edx
jmp 0x4075ef
add dword [esp + 0x7c], edx
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x24], eax
jmp 0x406f39
mov dword [esp + 0x24], 1
jmp 0x407bf8
mov dword [esp + 0x24], 3
jmp 0x407bf8
mov dword [esp + 0x24], 0xd
jmp 0x407bf8
mov dword [esp + 0x24], 0xe
jmp 0x407bf8
mov dword [esp + 0x24], 0xf
jmp 0x407bf8
mov dword [esp + 0x24], 0x1a
jmp 0x407bf8
mov dword [esp + 0x24], 0x1b
jmp 0x407bf8
mov dword [esp + 0x24], 0xc
jmp 0x407bf8
or dword [esp + 0x7c], 0xffffffff
jmp 0x407bf8
mov dword [esp + 0x24], 0x10
jmp 0x407bf8
mov dword [esp + 0x24], 0x1c
jmp 0x407bf8
mov dword [esp + 0x24], 5
jmp 0x407bf8
mov dword [esp + 0x24], 0x18
mov edi, dword [esp + 0xbc]
lea esi, [esp + 0x24]
push 0x22
pop ecx
rep movsd dword es:[edi], dword [esi]
xor eax, eax
jmp 0x407c0f
or eax, 0xffffffff
pop ebp
pop ebx
pop edi
pop esi
add esp, 0xb0
ret