Function at 0x407850
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xb0
push esi
push edi
mov eax, ecx
lea edi, [esp + 0x1c]
push 0x22
pop ecx
mov esi, eax
mov dword [esp + 0xb4], eax
rep movsd dword es:[edi], dword [esi]
cmp dword [esp + 0x74], 0xffffffff
jne 0x40787b
xor eax, eax
inc eax
jmp 0x4085b6
mov eax, dword [esp + 0x8c]
mov edx, dword [esp + 0x60]
mov ecx, dword [esp + 0x5c]
mov esi, dword [esp + 0x64]
mov edi, dword [esp + 0x50]
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0xa8], eax
mov al, byte [esp + 0x49]
push ebx
mov ebx, dword [esp + 0x9c]
push ebp
mov ebp, dword [esp + 0x9c]
mov byte [esp + 0x23], al
mov eax, dword [esp + 0x24]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
cmp eax, 0x1c
ja case.default.0x4078e7
jmp dword [eax*4 + 0x4085c0]
mov eax, dword [esp + 0x40]
test eax, eax
je 0x40859d
dec eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x3c]
mov cl, byte [eax]
inc eax
mov dword [esp + 0x3c], eax
cmp cl, 0xe1
ja case.default.0x4078e7
xor edx, edx
movzx ecx, cl
mov eax, ecx
push 0x2d
pop esi
div esi
xor edx, edx
mov edi, eax
mov eax, ecx
div esi
push 9
movzx esi, dl
xor edx, edx
mov eax, esi
pop ecx
div ecx
mov ecx, edi
movzx eax, dl
xor edx, edx
mov dword [esp + 0x70], eax
xor eax, eax
inc eax
shl eax, cl
dec eax
mov dword [esp + 0xb4], eax
mov dword [esp + 0x90], eax
mov eax, esi
push 9
pop ecx
div ecx
xor edx, edx
mov esi, 0x300
inc edx
mov ecx, eax
mov eax, dword [esp + 0xa8]
shl edx, cl
mov ecx, dword [esp + 0x70]
dec edx
mov dword [esp + 0xb8], edx
mov dword [esp + 0x94], edx
lea ecx, [ecx + edi]
shl esi, cl
add esi, 0x736
lea edi, [esi + esi]
cmp edi, dword [esp + 0x34]
je 0x4079ba
test eax, eax
je 0x40799e
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push edi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [esp + 0xa8], eax
test eax, eax
je case.default.0x4078e7
mov dword [esp + 0x34], edi
sub esi, 1
mov ecx, 0x400
mov word [eax + esi*2], cx
jne 0x4079ba
mov edi, dword [esp + 0x40]
xor ecx, ecx
xor esi, esi
jmp 0x4079fb
mov edi, dword [esp + 0x40]
test edi, edi
je 0x408520
mov edx, dword [esp + 0x3c]
dec edi
shl ecx, 3
mov dword [esp + 0x40], edi
movzx eax, byte [edx]
shl eax, cl
mov ecx, dword [esp + 0x14]
or esi, eax
inc edx
inc ecx
mov dword [esp + 0x3c], edx
mov dword [esp + 0x64], ecx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x6c], esi
cmp ecx, 4
jl 0x4079d6
mov eax, dword [esp + 0x38]
cmp esi, eax
je 0x407a46
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x38], esi
test eax, eax
je 0x407a2a
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push esi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [esp + 0xa4], eax
test eax, eax
je case.default.0x4078e7
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0xa4]
push 5
mov byte [ecx + eax - 1], 0
pop ecx
jmp 0x407a80
mov edi, dword [esp + 0x40]
test edi, edi
je 0x40852a
mov edx, dword [esp + 0x3c]
dec edi
shl ebx, 8
mov dword [esp + 0x40], edi
movzx eax, byte [edx]
or ebx, eax
inc edx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x3c], edx
mov eax, ecx
dec ecx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x64], ecx
test eax, eax
jne 0x407a5b
mov edx, dword [esp + 0x10]
mov esi, dword [esp + 0x4c]
and esi, dword [esp + 0xb4]
mov eax, dword [esp + 0x74]
shl eax, 4
add eax, esi
mov dword [esp + 0xb0], esi
mov dword [esp + 0x60], esi
mov esi, dword [esp + 0xa8]
mov dword [esp + 0x28], 6
lea edi, [esi + eax*2]
jmp 0x40834e
test esi, esi
jne 0x407b60
movzx edx, byte [esp + 0x50]
push 8
pop eax
mov cl, al
mov eax, dword [esp + 0x4c]
sub cl, byte [esp + 0x70]
and eax, dword [esp + 0xb8]
shr edx, cl
mov ecx, dword [esp + 0x70]
shl eax, cl
mov ecx, dword [esp + 0xa8]
add edx, eax
imul eax, edx, 0x600
add ecx, 0xe6c
add eax, ecx
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x74]
cmp eax, 4
jge 0x407b1c
and dword [esp + 0x74], esi
jmp 0x407b2d
cmp eax, 0xa
jge 0x407b26
sub eax, 3
jmp 0x407b29
sub eax, 6
mov dword [esp + 0x74], eax
cmp dword [esp + 0x78], 0
je 0x407b58
mov eax, dword [esp + 0x98]
sub eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x38]
cmp eax, ecx
jb 0x407b49
add eax, ecx
mov ecx, dword [esp + 0xa4]
xor edx, edx
inc edx
mov al, byte [eax + ecx]
jmp 0x407bd1
xor edx, edx
inc edx
jmp 0x407d91
mov eax, dword [esp + 0x74]
mov dword [esp + 0x78], 1
add eax, 0xc0
push 7
mov esi, dword [esp + 0xac]
lea edi, [esi + eax*2]
pop eax
mov dword [esp + 0x28], eax
jmp 0x40834e
mov eax, dword [esp + 0x40]
test eax, eax
je 0x408534
shl ebp, 8
dec eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x3c]
shl ebx, 8
mov dword [esp + 0x9c], ebp
movzx eax, byte [eax]
or ebx, eax
inc dword [esp + 0x3c]
mov dword [esp + 0xa0], ebx
cmp ecx, esi
jne 0x407cab
cmp edx, 0x100
jge 0x407d44
mov al, byte [esp + 0x23]
mov esi, dword [esp + 0x54]
movzx ecx, al
add al, al
shr ecx, 7
mov byte [esp + 0x23], al
mov byte [esp + 0x51], al
mov dword [esp + 0x14], ecx
lea eax, [ecx + 1]
mov dword [esp + 0x64], ecx
shl eax, 8
add eax, edx
lea edi, [esi + eax*2]
movzx eax, word [edi]
mov esi, eax
mov dword [esp + 0x58], edi
mov eax, ebp
mov dword [esp + 0x10], esi
shr eax, 0xb
imul eax, esi
mov dword [esp + 0x18], esi
xor esi, esi
cmp ebx, eax
jae 0x407c2d
mov ebp, eax
mov eax, 0x800
sub eax, dword [esp + 0x18]
sar eax, 5
add eax, dword [esp + 0x10]
add edx, edx
jmp 0x407c52
sub ebx, eax
lea edx, [edx*2 + 1]
sub ebp, eax
mov dword [esp + 0xa0], ebx
mov ax, word [esp + 0x10]
inc esi
shr ax, 5
sub word [esp + 0x10], ax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x68], edx
mov dword [esp + 0x10], edx
mov word [edi], ax
mov dword [esp + 0x9c], ebp
mov dword [esp + 0x6c], esi
cmp ebp, 0x1000000
jae 0x407bb9
jmp case.0x4078e7.13
mov eax, dword [esp + 0x40]
test eax, eax
je 0x40853e
shl ebp, 8
dec eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x3c]
shl ebx, 8
mov dword [esp + 0x9c], ebp
movzx eax, byte [eax]
or ebx, eax
inc dword [esp + 0x3c]
mov dword [esp + 0xa0], ebx
cmp edx, 0x100
jge 0x407d44
mov edi, dword [esp + 0x54]
lea eax, [edx + edx]
add edi, eax
mov dword [esp + 0xac], eax
mov dword [esp + 0x58], edi
movzx eax, word [edi]
mov dword [esp + 0x18], eax
movzx eax, ax
mov dword [esp + 0x10], eax
mov eax, ebp
shr eax, 0xb
imul eax, dword [esp + 0x10]
cmp ebx, eax
jae 0x407d00
mov ebp, eax
mov eax, 0x800
sub eax, dword [esp + 0x10]
sar eax, 5
add eax, dword [esp + 0x18]
add edx, edx
mov word [edi], ax
jmp 0x407d24
mov edx, dword [esp + 0x18]
sub ebx, eax
sub ebp, eax
mov dword [esp + 0xa0], ebx
mov ax, dx
shr ax, 5
sub dx, ax
mov word [edi], dx
mov edx, dword [esp + 0xac]
inc edx
mov dword [esp + 0x68], edx
mov dword [esp + 0x10], edx
mov dword [esp + 0x9c], ebp
cmp ebp, 0x1000000
jae 0x407cab
jmp case.0x4078e7.14
mov al, byte [esp + 0x68]
and dword [esp + 0x78], 0
mov byte [esp + 0x50], al
jmp 0x407e17
mov eax, dword [esp + 0x40]
test eax, eax
je 0x408548
mov ecx, dword [esp + 0x3c]
shl ebp, 8
dec eax
mov dword [esp + 0x40], eax
shl ebx, 8
movzx eax, byte [ecx]
or ebx, eax
mov dword [esp + 0x9c], ebp
inc ecx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x3c], ecx
cmp edx, 0x100
jge 0x407e09
mov edi, dword [esp + 0x54]
lea eax, [edx + edx]
add edi, eax
mov dword [esp + 0xac], eax
mov eax, ebp
mov dword [esp + 0x58], edi
shr eax, 0xb
movzx ecx, word [edi]
imul eax, ecx
mov dword [esp + 0x18], ecx
cmp ebx, eax
jae 0x407dcd
mov ebp, eax
mov eax, 0x800
sub eax, ecx
sar eax, 5
add eax, ecx
add edx, edx
mov word [edi], ax
jmp 0x407ded
mov edx, dword [esp + 0xac]
sub ebx, eax
sub ebp, eax
mov dword [esp + 0xa0], ebx
mov ax, cx
shr ax, 5
sub cx, ax
inc edx
mov word [edi], cx
mov dword [esp + 0x68], edx
mov dword [esp + 0x10], edx
mov dword [esp + 0x9c], ebp
cmp ebp, 0x1000000
jae 0x407d89
jmp case.0x4078e7.15
mov al, byte [esp + 0x68]
mov byte [esp + 0x50], al
jmp 0x407e17
mov al, byte [esp + 0x50]
mov edx, dword [esp + 0x48]
test edx, edx
je 0x408552
mov ecx, dword [esp + 0x44]
inc dword [esp + 0x4c]
mov byte [ecx], al
inc ecx
dec edx
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 0x48], edx
mov edx, dword [esp + 0xa4]
mov byte [ecx + edx], al
mov eax, ecx
inc eax
mov ecx, dword [esp + 0x14]
xor edx, edx
div dword [esp + 0x38]
mov dword [esp + 0x98], edx
jmp 0x4082f8
cmp esi, 1
jne 0x407e76
mov eax, dword [esp + 0x74]
add eax, 0xcc
push 8
jmp 0x407b73
mov eax, dword [esp + 0x88]
mov esi, dword [esp + 0x84]
mov dword [esp + 0x8c], eax
push 0xa
pop eax
mov dword [esp + 0x88], esi
mov esi, dword [esp + 0x1c]
push 7
mov dword [esp + 0x88], esi
pop esi
cmp dword [esp + 0x74], esi
mov dword [esp + 0x2c], 0x16
cmovl eax, esi
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0xa8]
add eax, 0x664
mov dword [esp + 0x54], eax
jmp 0x40830c
test esi, esi
mov esi, dword [esp + 0xa8]
jne 0x407eee
mov eax, dword [esp + 0x74]
add eax, 0xf
shl eax, 4
add eax, dword [esp + 0xb0]
push 9
jmp 0x407b7a
mov edi, dword [esp + 0x74]
add edi, 0xd8
mov dword [esp + 0x28], 0xa
lea edi, [esi + edi*2]
jmp 0x40834e
test esi, esi
jne 0x408015
cmp dword [esp + 0x4c], esi
je case.default.0x4078e7
push 0xb
pop eax
push 7
pop edx
cmp dword [esp + 0x74], edx
push 9
pop edx
cmovl eax, edx
mov dword [esp + 0x74], eax
cmp dword [esp + 0x48], 0
je 0x40855c
mov eax, dword [esp + 0x98]
sub eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x38]
cmp eax, edx
jb 0x407f4e
add eax, edx
mov edx, dword [esp + 0xa4]
mov ecx, dword [esp + 0x98]
push 2
mov al, byte [eax + edx]
mov byte [ecx + edx], al
xor edx, edx
mov byte [esp + 0x54], al
mov eax, ecx
inc eax
mov ecx, dword [esp + 0x48]
div dword [esp + 0x3c]
mov al, byte [esp + 0x54]
inc dword [esp + 0x50]
mov byte [ecx], al
inc ecx
dec dword [esp + 0x4c]
mov dword [esp + 0x9c], edx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x48], ecx
pop eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x24], eax
jmp 0x4078de
test esi, esi
jne 0x407fae
mov eax, dword [esp + 0x84]
jmp 0x407fff
mov edi, dword [esp + 0x74]
mov esi, dword [esp + 0xa8]
add edi, 0xe4
mov dword [esp + 0x28], 0xb
lea edi, [esi + edi*2]
jmp 0x40834e
test esi, esi
jne 0x407fdc
mov eax, dword [esp + 0x88]
jmp 0x407ff1
mov eax, dword [esp + 0x8c]
mov esi, dword [esp + 0x88]
mov dword [esp + 0x8c], esi
mov esi, dword [esp + 0x84]
mov dword [esp + 0x88], esi
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x84], esi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0xa8]
add eax, 0xa68
mov dword [esp + 0x2c], 0x15
mov dword [esp + 0x54], eax
jmp 0x40830c
push 0xb
pop eax
push 7
pop edx
cmp dword [esp + 0x74], edx
push 8
pop edx
cmovl eax, edx
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x1c]
jmp 0x408265
cmp dword [esp + 0x7c], 4
mov ecx, dword [esp + 0xa8]
push 3
pop eax
cmovl eax, dword [esp + 0x7c]
add ecx, 0x360
shl eax, 7
add eax, ecx
mov dword [esp + 0x30], 0x19
push 6
mov dword [esp + 0x58], eax
pop esi
jmp 0x408428
mov eax, edx
cmp edx, 4
jl 0x408259
mov esi, edx
and eax, 1
sar esi, 1
or eax, 2
dec esi
mov ecx, esi
shl eax, cl
mov dword [esp + 0x1c], eax
mov dword [esp + 0x80], eax
cmp edx, 0xe
jge 0x4080c3
mov ecx, dword [esp + 0xa8]
sub eax, edx
add ecx, 0x55e
lea eax, [ecx + eax*2]
jmp 0x408156
xor edx, edx
lea ecx, [esi - 4]
jmp 0x4080fe
mov eax, dword [esp + 0x40]
test eax, eax
je 0x408566
mov esi, dword [esp + 0x3c]
shl ebp, 8
dec eax
mov dword [esp + 0x40], eax
shl ebx, 8
movzx eax, byte [esi]
or ebx, eax
mov dword [esp + 0x9c], ebp
inc esi
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x3c], esi
dec ecx
mov dword [esp + 0x64], ecx
test ecx, ecx
jle 0x408133
shr ebp, 1
add edx, edx
mov dword [esp + 0x9c], ebp
mov dword [esp + 0x68], edx
cmp ebx, ebp
jb 0x408129
sub ebx, ebp
or edx, 1
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x68], edx
cmp ebp, 0x1000000
jae 0x4080fd
jmp case.0x4078e7.12
mov eax, dword [esp + 0x1c]
shl edx, 4
add eax, edx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0xa8]
push 4
add eax, 0x644
pop esi
mov dword [esp + 0x54], eax
xor edx, edx
xor eax, eax
mov dword [esp + 0x6c], esi
inc eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x5c], eax
xor ecx, ecx
mov dword [esp + 0x68], edx
jmp 0x4081aa
mov eax, dword [esp + 0x40]
test eax, eax
je 0x408577
shl ebp, 8
dec eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x3c]
shl ebx, 8
mov dword [esp + 0x9c], ebp
movzx eax, byte [eax]
or ebx, eax
inc dword [esp + 0x3c]
mov dword [esp + 0xa0], ebx
mov eax, dword [esp + 0x5c]
inc ecx
mov dword [esp + 0x64], ecx
mov dword [esp + 0x14], ecx
cmp ecx, esi
jge 0x408253
mov edi, dword [esp + 0x54]
add eax, eax
add edi, eax
mov dword [esp + 0xac], eax
mov dword [esp + 0x58], edi
movzx eax, word [edi]
mov dword [esp + 0x14], eax
movzx eax, ax
mov dword [esp + 0x18], eax
mov eax, ebp
shr eax, 0xb
imul eax, dword [esp + 0x18]
cmp ebx, eax
jae 0x408204
mov ebp, eax
mov eax, 0x800
sub eax, dword [esp + 0x18]
sar eax, 5
add eax, dword [esp + 0x14]
shl dword [esp + 0x5c], 1
mov word [edi], ax
jmp 0x40823b
sub ebx, eax
bts edx, ecx
sub ebp, eax
mov dword [esp + 0x10], edx
mov ax, word [esp + 0x14]
shr ax, 5
sub word [esp + 0x14], ax
mov eax, dword [esp + 0x14]
mov word [edi], ax
mov eax, dword [esp + 0xac]
inc eax
mov dword [esp + 0x68], edx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x9c], ebp
cmp ebp, 0x1000000
jae 0x4081a5
jmp case.0x4078e7.16
mov eax, dword [esp + 0x1c]
add eax, edx
inc eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x80], eax
test eax, eax
je 0x408570
mov edx, dword [esp + 0x4c]
cmp eax, edx
ja case.default.0x4078e7
mov eax, dword [esp + 0x7c]
add eax, 2
add edx, eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x4c], edx
mov edx, dword [esp + 0x98]
cmp dword [esp + 0x48], 0
je 0x408581
mov eax, edx
mov edx, dword [esp + 0x38]
sub eax, dword [esp + 0x1c]
cmp eax, edx
jb 0x4082ac
add eax, edx
mov edx, dword [esp + 0xa4]
mov ecx, dword [esp + 0x98]
mov al, byte [eax + edx]
mov byte [ecx + edx], al
xor edx, edx
mov byte [esp + 0x50], al
mov eax, ecx
inc eax
mov ecx, dword [esp + 0x44]
div dword [esp + 0x38]
mov al, byte [esp + 0x50]
mov byte [ecx], al
inc ecx
mov eax, dword [esp + 0x7c]
dec dword [esp + 0x48]
dec eax
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x98], edx
mov dword [esp + 0x7c], eax
test eax, eax
jg 0x408291
mov edx, dword [esp + 0x10]
push 2
pop eax
mov dword [esp + 0x24], eax
jmp 0x4078de
mov eax, dword [esp + 0x54]
mov edi, eax
mov dword [esp + 0x28], 0x12
jmp 0x40834e
test esi, esi
jne 0x40833f
mov eax, dword [esp + 0xb0]
mov edx, dword [esp + 0x54]
and dword [esp + 0x7c], esi
shl eax, 4
add edx, 4
add edx, eax
push 3
mov dword [esp + 0x58], edx
pop esi
jmp 0x408420
mov edi, dword [esp + 0x54]
add edi, 2
mov dword [esp + 0x28], 0x13
mov dword [esp + 0x58], edi
movzx eax, word [edi]
mov esi, eax
mov dword [esp + 0x18], eax
mov eax, ebp
shr eax, 0xb
imul eax, esi
cmp ebx, eax
jae 0x40837c
mov ebp, eax
mov eax, 0x800
sub eax, esi
sar eax, 5
add eax, esi
xor esi, esi
mov word [edi], ax
jmp 0x408397
sub ebx, eax
sub ebp, eax
mov ax, si
mov dword [esp + 0xa0], ebx
shr ax, 5
sub si, ax
mov word [edi], si
xor esi, esi
inc esi
mov dword [esp + 0x6c], esi
mov dword [esp + 0x9c], ebp
cmp ebp, 0x1000000
jae 0x4083dc
mov eax, dword [esp + 0x40]
test eax, eax
je 0x40858b
shl ebp, 8
dec eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x3c]
shl ebx, 8
mov dword [esp + 0x9c], ebp
movzx eax, byte [eax]
or ebx, eax
inc dword [esp + 0x3c]
mov dword [esp + 0xa0], ebx
mov eax, dword [esp + 0x28]
jmp 0x408517
test esi, esi
jne 0x408409
mov edx, dword [esp + 0x54]
push 8
pop eax
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0xb0]
shl eax, 4
add edx, 0x104
jmp 0x408331
add dword [esp + 0x54], 0x204
push 0x10
pop eax
push 8
mov dword [esp + 0x80], eax
pop eax
mov esi, eax
mov dword [esp + 0x30], 0x14
mov dword [esp + 0x6c], esi
xor edx, edx
mov ecx, esi
inc edx
mov dword [esp + 0x5c], edx
jmp 0x40846f
mov eax, dword [esp + 0x40]
test eax, eax
je 0x408595
mov edx, dword [esp + 0x3c]
shl ebp, 8
dec eax
mov dword [esp + 0x40], eax
shl ebx, 8
movzx eax, byte [edx]
or ebx, eax
mov dword [esp + 0x9c], ebp
inc edx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x3c], edx
mov edx, dword [esp + 0x5c]
dec ecx
mov dword [esp + 0x64], ecx
mov dword [esp + 0x14], ecx
test ecx, ecx
jle 0x4084f5
mov edi, dword [esp + 0x54]
lea eax, [edx + edx]
add edi, eax
mov dword [esp + 0xac], eax
mov eax, ebp
mov dword [esp + 0x58], edi
shr eax, 0xb
movzx edx, word [edi]
imul eax, edx
mov dword [esp + 0x18], edx
cmp ebx, eax
jae 0x4084b9
mov ebp, eax
mov eax, 0x800
sub eax, edx
sar eax, 5
add eax, edx
shl dword [esp + 0x5c], 1
mov word [edi], ax
jmp 0x4084dd
sub ebx, eax
sub ebp, eax
mov ax, dx
mov dword [esp + 0xa0], ebx
shr ax, 5
sub dx, ax
mov eax, dword [esp + 0xac]
inc eax
mov word [edi], dx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x9c], ebp
cmp ebp, 0x1000000
jae 0x40846a
jmp case.0x4078e7.24
xor eax, eax
mov ecx, esi
inc eax
shl eax, cl
sub edx, eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x10], edx
mov dword [esp + 0x68], edx
jmp 0x407f94
add dword [esp + 0x7c], edx
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x24], eax
jmp 0x4078de
mov dword [esp + 0x24], 1
jmp 0x40859d
mov dword [esp + 0x24], 3
jmp 0x40859d
mov dword [esp + 0x24], 0xd
jmp 0x40859d
mov dword [esp + 0x24], 0xe
jmp 0x40859d
mov dword [esp + 0x24], 0xf
jmp 0x40859d
mov dword [esp + 0x24], 0x1a
jmp 0x40859d
mov dword [esp + 0x24], 0x1b
jmp 0x40859d
mov dword [esp + 0x24], 0xc
jmp 0x40859d
or dword [esp + 0x7c], 0xffffffff
jmp 0x40859d
mov dword [esp + 0x24], 0x10
jmp 0x40859d
mov dword [esp + 0x24], 0x1c
jmp 0x40859d
mov dword [esp + 0x24], 5
jmp 0x40859d
mov dword [esp + 0x24], 0x18
mov edi, dword [esp + 0xbc]
lea esi, [esp + 0x24]
push 0x22
pop ecx
rep movsd dword es:[edi], dword [esi]
xor eax, eax
jmp 0x4085b4
or eax, 0xffffffff
pop ebp
pop ebx
pop edi
pop esi
add esp, 0xb0
ret