Function at 0x405ff7
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x64
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x50], edx
mov edx, ecx
mov dword [esp + 0x70], edx
mov eax, dword [edx + 0xc]
mov cl, byte [edx + 2]
mov dword [esp + 0x1c], eax
mov eax, dword [edx + 0x30]
movzx esi, byte [edx]
mov dword [esp + 0x2c], eax
mov eax, dword [edx + 0x34]
mov dword [esp + 0x38], eax
mov eax, dword [edx + 0x38]
mov dword [esp + 0x3c], eax
mov eax, dword [edx + 0x3c]
mov dword [esp + 0x44], eax
xor eax, eax
inc eax
mov ebp, dword [edx + 0x40]
shl eax, cl
mov cl, byte [edx + 1]
dec eax
mov dword [esp + 0x54], eax
mov eax, 0x100
mov ebx, eax
mov dword [esp + 0x5c], esi
shl ebx, cl
mov ecx, esi
mov esi, dword [edx + 0x24]
shr eax, cl
mov ecx, dword [edx + 0x28]
sub ebx, eax
mov eax, dword [edx + 0x10]
mov dword [esp + 0x30], eax
mov eax, dword [edx + 0x14]
mov dword [esp + 0x34], eax
mov eax, dword [edx + 0x18]
mov dword [esp + 0x24], eax
mov eax, dword [edx + 0x2c]
mov dword [esp + 0x4c], eax
xor eax, eax
mov dword [esp + 0x58], ebx
mov ebx, dword [edx + 0x1c]
mov edi, dword [edx + 0x20]
mov dword [esp + 0x20], ebp
mov dword [esp + 0x28], ecx
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], ebx
mov eax, ecx
mov ecx, dword [esp + 0x1c]
and eax, dword [esp + 0x54]
shl eax, 4
mov dword [esp + 0x48], eax
add eax, ebp
mov dword [esp + 0x14], eax
movzx edx, word [ecx + eax*2 - 0x200]
mov ecx, edx
cmp edi, 0x1000000
jae 0x4060cf
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
mov eax, dword [esp + 0x14]
inc ebx
mov dword [esp + 0x10], ebx
mov ebp, edi
shr ebp, 0xb
imul ebp, ecx
cmp esi, ebp
jae 0x4068cd
mov eax, 0x800
mov edi, ebp
sub eax, ecx
mov ecx, dword [esp + 0x14]
shr eax, 5
add eax, edx
mov edx, dword [esp + 0x1c]
mov word [edx + ecx*2 - 0x200], ax
add edx, 0x280
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x14], edx
test ecx, ecx
jne 0x406115
cmp dword [esp + 0x4c], ecx
je 0x40614d
mov edx, dword [esp + 0x24]
test edx, edx
mov eax, edx
mov edx, dword [esp + 0x30]
cmove eax, dword [esp + 0x34]
movzx edx, byte [eax + edx - 1]
mov eax, ecx
mov ecx, dword [esp + 0x5c]
shl eax, 8
add edx, eax
and edx, dword [esp + 0x58]
shl edx, cl
mov ecx, dword [esp + 0x28]
imul eax, edx, 6
mov edx, dword [esp + 0x14]
add edx, eax
mov dword [esp + 0x14], edx
inc ecx
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x20]
cmp ecx, 7
jae 0x40644f
movzx edx, word [edx + 2]
cmp ecx, 4
push 3
pop eax
cmovb eax, ecx
sub ecx, eax
mov dword [esp + 0x20], ecx
mov ecx, edx
cmp ebp, 0x1000000
jae 0x40618e
movzx eax, byte [ebx]
mov edi, ebp
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4061af
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, edx
movzx eax, ax
push 4
jmp 0x4061bd
sub edi, eax
shr ecx, 5
sub esi, eax
sub edx, ecx
movzx eax, dx
push 6
mov ecx, dword [esp + 0x18]
pop ebp
mov word [ecx + 2], ax
lea eax, [ecx + ebp]
movzx edx, word [eax]
mov dword [esp + 0x48], eax
mov ecx, edx
cmp edi, 0x1000000
jae 0x4061ea
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406209
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, edx
movzx eax, ax
jmp 0x406216
sub edi, eax
shr ecx, 5
sub esi, eax
inc ebp
sub edx, ecx
movzx eax, dx
mov ecx, dword [esp + 0x48]
add ebp, ebp
mov word [ecx], ax
mov eax, dword [esp + 0x14]
add eax, ebp
mov dword [esp + 0x48], eax
movzx edx, word [eax]
mov ecx, edx
cmp edi, 0x1000000
jae 0x406246
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406265
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, edx
movzx eax, ax
jmp 0x406272
sub edi, eax
shr ecx, 5
sub esi, eax
inc ebp
sub edx, ecx
movzx eax, dx
mov ecx, dword [esp + 0x48]
add ebp, ebp
mov word [ecx], ax
mov eax, dword [esp + 0x14]
add eax, ebp
mov dword [esp + 0x48], eax
movzx edx, word [eax]
mov ecx, edx
cmp edi, 0x1000000
jae 0x4062a2
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4062c1
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, edx
movzx eax, ax
jmp 0x4062ce
sub edi, eax
shr ecx, 5
sub esi, eax
inc ebp
sub edx, ecx
movzx eax, dx
mov ecx, dword [esp + 0x48]
add ebp, ebp
mov word [ecx], ax
mov eax, dword [esp + 0x14]
add eax, ebp
mov dword [esp + 0x48], eax
movzx edx, word [eax]
mov ecx, edx
cmp edi, 0x1000000
jae 0x4062fe
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x40631d
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, edx
movzx eax, ax
jmp 0x40632a
sub edi, eax
shr ecx, 5
sub esi, eax
inc ebp
sub edx, ecx
movzx eax, dx
mov ecx, dword [esp + 0x48]
add ebp, ebp
mov word [ecx], ax
mov eax, dword [esp + 0x14]
add eax, ebp
mov dword [esp + 0x48], eax
movzx edx, word [eax]
mov ecx, edx
cmp edi, 0x1000000
jae 0x40635a
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406379
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, edx
movzx eax, ax
jmp 0x406386
sub edi, eax
shr ecx, 5
sub esi, eax
inc ebp
sub edx, ecx
movzx eax, dx
mov ecx, dword [esp + 0x48]
add ebp, ebp
mov word [ecx], ax
mov eax, dword [esp + 0x14]
add eax, ebp
mov dword [esp + 0x48], eax
movzx edx, word [eax]
mov ecx, edx
cmp edi, 0x1000000
jae 0x4063b6
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4063d5
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, edx
movzx eax, ax
jmp 0x4063e2
sub edi, eax
shr ecx, 5
sub esi, eax
inc ebp
sub edx, ecx
movzx eax, dx
mov ecx, dword [esp + 0x48]
mov word [ecx], ax
lea ecx, [ebp*2]
mov eax, dword [esp + 0x14]
add eax, ecx
mov dword [esp + 0x48], eax
movzx ebp, word [eax]
mov edx, ebp
cmp edi, 0x1000000
jae 0x406417
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406436
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, ebp
movzx eax, ax
jmp 0x406443
sub edi, eax
shr edx, 5
sub esi, eax
inc ecx
sub ebp, edx
movzx eax, bp
mov edx, dword [esp + 0x48]
mov word [edx], ax
jmp 0x4068b8
cmp ecx, 0xa
sbb eax, eax
and eax, 0xfffffffd
add eax, 6
sub ecx, eax
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x24]
cmp ecx, dword [esp + 0x2c]
sbb eax, eax
and eax, dword [esp + 0x34]
sub eax, dword [esp + 0x2c]
add eax, ecx
mov ecx, dword [esp + 0x30]
movzx eax, byte [eax + ecx]
add eax, eax
mov ecx, eax
mov dword [esp + 0x64], eax
and ecx, 0x100
lea eax, [ecx + 0x101]
lea eax, [edx + eax*2]
mov dword [esp + 0x60], eax
movzx eax, word [eax]
mov dword [esp + 0x40], eax
movzx edx, ax
cmp ebp, 0x1000000
jae 0x4064bb
movzx eax, byte [ebx]
mov edi, ebp
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4064e1
mov edi, eax
xor ecx, 0x100
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, dword [esp + 0x40]
push 2
jmp 0x4064f0
sub edi, eax
shr edx, 5
sub esi, eax
mov eax, dword [esp + 0x40]
push 3
sub eax, edx
mov edx, dword [esp + 0x64]
movzx eax, ax
pop ebp
mov dword [esp + 0x48], ebp
mov word [edx], ax
mov eax, dword [esp + 0x64]
lea edx, [eax + eax]
mov eax, ecx
and ecx, edx
mov dword [esp + 0x60], eax
add eax, ecx
mov dword [esp + 0x6c], edx
mov edx, dword [esp + 0x14]
add eax, ebp
mov dword [esp + 0x68], eax
movzx ebp, word [edx + eax*2]
mov edx, ebp
cmp edi, 0x1000000
jae 0x40653c
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x48]
add eax, eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x64]
cmp esi, eax
jae 0x406571
xor ecx, dword [esp + 0x60]
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, ebp
movzx edx, ax
jmp 0x406581
sub edi, eax
shr edx, 5
sub esi, eax
inc dword [esp + 0x40]
sub ebp, edx
movzx edx, bp
mov ebp, dword [esp + 0x68]
mov eax, dword [esp + 0x14]
mov word [eax + ebp*2], dx
mov edx, dword [esp + 0x6c]
lea ebp, [edx + edx]
mov edx, ecx
and ecx, ebp
mov dword [esp + 0x68], edx
add edx, ecx
mov dword [esp + 0x60], ebp
add edx, dword [esp + 0x40]
mov dword [esp + 0x64], edx
movzx ebp, word [eax + edx*2]
mov edx, ebp
cmp edi, 0x1000000
jae 0x4065c8
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x40]
add eax, eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x6c]
cmp esi, eax
jae 0x4065fd
xor ecx, dword [esp + 0x68]
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, ebp
movzx edx, ax
jmp 0x40660d
sub edi, eax
shr edx, 5
sub esi, eax
inc dword [esp + 0x40]
sub ebp, edx
movzx edx, bp
mov ebp, dword [esp + 0x64]
mov eax, dword [esp + 0x14]
mov word [eax + ebp*2], dx
mov edx, dword [esp + 0x60]
lea ebp, [edx + edx]
mov edx, ecx
and ecx, ebp
mov dword [esp + 0x68], edx
add edx, ecx
mov dword [esp + 0x60], ebp
add edx, dword [esp + 0x40]
mov dword [esp + 0x64], edx
movzx ebp, word [eax + edx*2]
mov edx, ebp
cmp edi, 0x1000000
jae 0x406654
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x40]
add eax, eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x6c]
cmp esi, eax
jae 0x406689
xor ecx, dword [esp + 0x68]
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, ebp
movzx edx, ax
jmp 0x406699
sub edi, eax
shr edx, 5
sub esi, eax
inc dword [esp + 0x40]
sub ebp, edx
movzx edx, bp
mov ebp, dword [esp + 0x64]
mov eax, dword [esp + 0x14]
mov word [eax + ebp*2], dx
mov edx, dword [esp + 0x60]
lea ebp, [edx + edx]
mov edx, ecx
and ecx, ebp
mov dword [esp + 0x68], edx
add edx, ecx
mov dword [esp + 0x60], ebp
add edx, dword [esp + 0x40]
mov dword [esp + 0x64], edx
movzx ebp, word [eax + edx*2]
mov edx, ebp
cmp edi, 0x1000000
jae 0x4066e0
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x40]
add eax, eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x6c]
cmp esi, eax
jae 0x406715
xor ecx, dword [esp + 0x68]
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, ebp
movzx edx, ax
jmp 0x406725
sub edi, eax
shr edx, 5
sub esi, eax
inc dword [esp + 0x40]
sub ebp, edx
movzx edx, bp
mov ebp, dword [esp + 0x64]
mov eax, dword [esp + 0x14]
mov word [eax + ebp*2], dx
mov edx, dword [esp + 0x60]
lea ebp, [edx + edx]
mov edx, ecx
and ecx, ebp
mov dword [esp + 0x68], edx
add edx, ecx
mov dword [esp + 0x48], ebp
add edx, dword [esp + 0x40]
mov dword [esp + 0x64], edx
movzx ebp, word [eax + edx*2]
mov edx, ebp
cmp edi, 0x1000000
jae 0x40676c
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x40]
add eax, eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x6c]
cmp esi, eax
jae 0x4067a1
xor ecx, dword [esp + 0x68]
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, ebp
movzx edx, ax
jmp 0x4067b1
sub edi, eax
shr edx, 5
sub esi, eax
inc dword [esp + 0x40]
sub ebp, edx
movzx edx, bp
mov ebp, dword [esp + 0x64]
mov eax, dword [esp + 0x14]
mov word [eax + ebp*2], dx
mov edx, dword [esp + 0x48]
lea ebp, [edx + edx]
mov edx, ecx
and ecx, ebp
mov dword [esp + 0x68], edx
add edx, ecx
add edx, dword [esp + 0x40]
mov dword [esp + 0x64], edx
movzx ebp, word [eax + edx*2]
mov edx, ebp
cmp edi, 0x1000000
jae 0x4067f4
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x40]
add eax, eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x6c]
cmp esi, eax
jae 0x406829
xor ecx, dword [esp + 0x68]
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, ebp
movzx edx, ax
jmp 0x406839
sub edi, eax
shr edx, 5
sub esi, eax
inc dword [esp + 0x40]
sub ebp, edx
movzx edx, bp
mov ebp, dword [esp + 0x64]
mov eax, dword [esp + 0x14]
mov word [eax + ebp*2], dx
mov ebp, dword [esp + 0x48]
lea edx, [ebp*2]
add edx, edx
and edx, ecx
add edx, ecx
add edx, dword [esp + 0x40]
movzx eax, word [eax + edx*2]
mov dword [esp + 0x48], eax
movzx ebp, ax
cmp edi, 0x1000000
jae 0x40687d
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x40]
mov eax, edi
shr eax, 0xb
add ecx, ecx
imul eax, ebp
cmp esi, eax
jae 0x4068a1
mov edi, eax
mov eax, 0x800
sub eax, ebp
shr eax, 5
add eax, dword [esp + 0x48]
jmp 0x4068af
sub edi, eax
shr ebp, 5
sub esi, eax
mov eax, dword [esp + 0x48]
sub eax, ebp
inc ecx
mov ebp, dword [esp + 0x14]
mov word [ebp + edx*2], ax
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x30]
mov byte [edx + eax], cl
inc edx
mov dword [esp + 0x24], edx
jmp 0x4074af
shr ecx, 5
sub edi, ebp
sub edx, ecx
sub esi, ebp
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x20]
mov word [ecx + eax*2 - 0x200], dx
movzx edx, word [ecx + ebp*2 + 0x20]
mov ecx, edx
cmp edi, 0x1000000
jae 0x406905
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406939
mov edi, eax
mov eax, 0x800
sub eax, ecx
mov ecx, dword [esp + 0x1c]
shr eax, 5
add eax, edx
mov word [ecx + ebp*2 + 0x20], ax
add ebp, 0xc
mov dword [esp + 0x20], ebp
mov eax, 0xfffffa00
jmp 0x406b4b
sub edi, eax
shr ecx, 5
sub esi, eax
sub edx, ecx
mov eax, dword [esp + 0x1c]
mov word [eax + ebp*2 + 0x20], dx
movzx ebp, word [eax + ebp*2 + 0x38]
mov edx, ebp
cmp edi, 0x1000000
jae 0x40696e
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
mov eax, dword [esp + 0x1c]
inc ebx
mov dword [esp + 0x10], ebx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
cmp esi, ecx
jae 0x406a49
mov eax, 0x800
mov edi, ecx
sub eax, edx
mov edx, dword [esp + 0x20]
shr eax, 5
add eax, ebp
mov ebp, dword [esp + 0x1c]
mov word [ebp + edx*2 + 0x38], ax
mov eax, dword [esp + 0x14]
movzx ebp, word [ebp + eax*2 - 0xc00]
mov edx, ebp
cmp ecx, 0x1000000
jae 0x4069bf
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406a2b
mov ecx, dword [esp + 0x14]
mov edi, eax
mov eax, 0x800
sub eax, edx
mov edx, dword [esp + 0x1c]
shr eax, 5
add eax, ebp
mov word [edx + ecx*2 - 0xc00], ax
mov edx, dword [esp + 0x24]
cmp edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
sbb eax, eax
and eax, dword [esp + 0x34]
sub eax, dword [esp + 0x2c]
add eax, edx
mov al, byte [eax + ecx]
mov byte [edx + ecx], al
inc edx
mov ecx, dword [esp + 0x28]
inc ecx
mov dword [esp + 0x24], edx
cmp dword [esp + 0x20], 7
mov dword [esp + 0x28], ecx
sbb ebp, ebp
and ebp, 0xfffffffe
add ebp, 0xb
mov dword [esp + 0x20], ebp
jmp 0x4074b7
mov ecx, dword [esp + 0x1c]
sub edi, eax
sub esi, eax
shr edx, 5
mov eax, dword [esp + 0x14]
sub ebp, edx
mov word [ecx + eax*2 - 0xc00], bp
jmp 0x406b35
shr edx, 5
sub edi, ecx
sub ebp, edx
sub esi, ecx
mov edx, dword [esp + 0x20]
mov word [eax + edx*2 + 0x38], bp
mov ebp, edx
movzx edx, word [eax + ebp*2 + 0x50]
mov ecx, edx
cmp edi, 0x1000000
jae 0x406a7c
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406aa8
mov edi, eax
mov eax, 0x800
sub eax, ecx
mov ecx, dword [esp + 0x1c]
shr eax, 5
add eax, edx
mov word [ecx + ebp*2 + 0x50], ax
mov ebp, dword [esp + 0x38]
jmp 0x406b29
sub edi, eax
shr ecx, 5
sub esi, eax
sub edx, ecx
mov eax, dword [esp + 0x1c]
mov word [eax + ebp*2 + 0x50], dx
movzx edx, word [eax + ebp*2 + 0x68]
mov ecx, edx
cmp edi, 0x1000000
jae 0x406ad9
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406afc
mov ebp, dword [esp + 0x3c]
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, edx
movzx eax, ax
jmp 0x406b14
mov ebp, dword [esp + 0x44]
sub edi, eax
sub esi, eax
shr ecx, 5
mov eax, dword [esp + 0x3c]
sub edx, ecx
mov dword [esp + 0x44], eax
movzx eax, dx
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov word [ecx + edx*2 + 0x68], ax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x38], eax
mov dword [esp + 0x2c], ebp
cmp dword [esp + 0x20], 7
sbb eax, eax
and eax, 0xfffffffd
add eax, 0xb
mov dword [esp + 0x20], eax
mov eax, 0xfffff600
add eax, ecx
mov dword [esp + 0x14], eax
movzx ebp, word [eax]
mov edx, ebp
cmp edi, 0x1000000
jae 0x406b72
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
mov eax, dword [esp + 0x14]
inc ebx
mov dword [esp + 0x10], ebx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
cmp esi, ecx
jae 0x406cbd
mov eax, 0x800
mov edi, ecx
sub eax, edx
mov edx, dword [esp + 0x14]
shr eax, 5
add eax, ebp
mov word [edx], ax
mov eax, dword [esp + 0x48]
lea eax, [edx + eax*2]
movzx ebp, word [eax + 2]
mov dword [esp + 0x48], eax
mov edx, ebp
cmp ecx, 0x1000000
jae 0x406bc0
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406be1
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, ebp
movzx eax, ax
push 4
jmp 0x406bef
sub edi, eax
shr edx, 5
sub esi, eax
sub ebp, edx
movzx eax, bp
push 6
mov ecx, dword [esp + 0x4c]
pop ebp
mov word [ecx + 2], ax
lea eax, [ecx + ebp]
movzx edx, word [eax]
mov dword [esp + 0x6c], eax
mov ecx, edx
cmp edi, 0x1000000
jae 0x406c1c
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406c3b
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, edx
movzx eax, ax
jmp 0x406c48
sub edi, eax
shr ecx, 5
sub esi, eax
inc ebp
sub edx, ecx
movzx eax, dx
mov ecx, dword [esp + 0x6c]
mov word [ecx], ax
lea ecx, [ebp*2]
mov ebp, dword [esp + 0x48]
add ebp, ecx
mov dword [esp + 0x18], ecx
movzx edx, word [ebp]
mov ecx, edx
cmp edi, 0x1000000
jae 0x406c7e
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406c9d
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, edx
movzx eax, ax
jmp 0x406cad
sub edi, eax
shr ecx, 5
sub esi, eax
inc dword [esp + 0x18]
sub edx, ecx
movzx eax, dx
mov edx, dword [esp + 0x18]
mov word [ebp], ax
sub edx, 8
jmp 0x406ebd
shr edx, 5
sub edi, ecx
sub ebp, edx
sub esi, ecx
mov word [eax], bp
movzx ebp, word [eax + 0x10]
mov edx, ebp
cmp edi, 0x1000000
jae 0x406ceb
movzx eax, byte [ebx]
shl esi, 8
or esi, eax
shl edi, 8
mov eax, dword [esp + 0x14]
inc ebx
mov dword [esp + 0x10], ebx
mov ecx, edi
shr ecx, 0xb
imul ecx, edx
cmp esi, ecx
jae 0x406e37
mov eax, 0x800
mov edi, ecx
sub eax, edx
mov edx, dword [esp + 0x14]
shr eax, 5
add eax, ebp
mov word [edx + 0x10], ax
add edx, 0x10
mov eax, dword [esp + 0x48]
lea eax, [edx + eax*2]
movzx ebp, word [eax + 2]
mov dword [esp + 0x48], eax
mov edx, ebp
cmp ecx, 0x1000000
jae 0x406d3d
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406d5e
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, ebp
movzx eax, ax
push 4
jmp 0x406d6c
sub edi, eax
shr edx, 5
sub esi, eax
sub ebp, edx
movzx eax, bp
push 6
mov ecx, dword [esp + 0x4c]
pop ebp
mov word [ecx + 2], ax
lea eax, [ecx + ebp]
movzx edx, word [eax]
mov dword [esp + 0x6c], eax
mov ecx, edx
cmp edi, 0x1000000
jae 0x406d99
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406db8
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, edx
movzx eax, ax
jmp 0x406dc5
sub edi, eax
shr ecx, 5
sub esi, eax
inc ebp
sub edx, ecx
movzx eax, dx
mov ecx, dword [esp + 0x6c]
mov word [ecx], ax
lea ecx, [ebp*2]
mov ebp, dword [esp + 0x48]
add ebp, ecx
mov dword [esp + 0x18], ecx
movzx edx, word [ebp]
mov ecx, edx
cmp edi, 0x1000000
jae 0x406dfb
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406e1a
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, edx
movzx eax, ax
jmp 0x406e2a
sub edi, eax
shr ecx, 5
sub esi, eax
inc dword [esp + 0x18]
sub edx, ecx
movzx eax, dx
mov edx, dword [esp + 0x18]
mov word [ebp], ax
jmp 0x406ec1
shr edx, 5
sub edi, ecx
sub ebp, edx
sub esi, ecx
xor edx, edx
mov word [eax + 0x10], bp
inc edx
add edx, edx
mov dword [esp + 0x18], edx
lea ebp, [eax + edx]
movzx edx, word [ebp + 0x200]
mov ecx, edx
cmp edi, 0x1000000
jae 0x406e6d
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x406e8c
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, edx
movzx eax, ax
jmp 0x406e9c
sub edi, eax
shr ecx, 5
sub esi, eax
inc dword [esp + 0x18]
sub edx, ecx
movzx eax, dx
mov edx, dword [esp + 0x18]
mov word [ebp + 0x200], ax
mov eax, dword [esp + 0x14]
cmp edx, 0x100
jb 0x406e47
mov dword [esp + 0x10], ebx
sub edx, 0xf0
mov dword [esp + 0x18], edx
mov ebp, dword [esp + 0x20]
cmp ebp, 0xc
jb 0x407419
cmp edx, 4
push 3
pop ecx
cmovb ecx, edx
inc ecx
shl ecx, 7
add ecx, dword [esp + 0x1c]
movzx ebp, word [ecx + 2]
mov edx, ebp
cmp edi, 0x1000000
jae 0x406efd
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406f1e
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, ebp
movzx edx, ax
push 4
jmp 0x406f2c
shr edx, 5
sub edi, eax
sub esi, eax
sub ebp, edx
movzx edx, bp
push 6
pop eax
mov dword [esp + 0x40], eax
add eax, ecx
mov word [ecx + 2], dx
mov dword [esp + 0x6c], eax
movzx ebp, word [eax]
mov edx, ebp
cmp edi, 0x1000000
jae 0x406f58
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406f7b
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, ebp
movzx edx, ax
mov eax, dword [esp + 0x40]
jmp 0x406f8c
sub edi, eax
shr edx, 5
sub esi, eax
mov eax, dword [esp + 0x40]
inc eax
sub ebp, edx
movzx edx, bp
mov ebp, dword [esp + 0x6c]
add eax, eax
mov dword [esp + 0x48], eax
add eax, ecx
mov dword [esp + 0x6c], eax
mov word [ebp], dx
movzx ebp, word [eax]
mov edx, ebp
cmp edi, 0x1000000
jae 0x406fbd
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x406fe0
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, ebp
movzx edx, ax
mov eax, dword [esp + 0x48]
jmp 0x406ff1
sub edi, eax
shr edx, 5
sub esi, eax
mov eax, dword [esp + 0x48]
inc eax
sub ebp, edx
movzx edx, bp
mov ebp, dword [esp + 0x6c]
add eax, eax
mov dword [esp + 0x48], eax
add eax, ecx
mov dword [esp + 0x6c], eax
mov word [ebp], dx
movzx ebp, word [eax]
mov edx, ebp
cmp edi, 0x1000000
jae 0x407022
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x407045
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, ebp
movzx edx, ax
mov eax, dword [esp + 0x48]
jmp 0x407056
sub edi, eax
shr edx, 5
sub esi, eax
mov eax, dword [esp + 0x48]
inc eax
sub ebp, edx
movzx edx, bp
mov ebp, dword [esp + 0x6c]
add eax, eax
mov dword [esp + 0x48], eax
add eax, ecx
mov dword [esp + 0x6c], eax
mov word [ebp], dx
movzx ebp, word [eax]
mov edx, ebp
cmp edi, 0x1000000
jae 0x407087
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, edx
cmp esi, eax
jae 0x4070aa
mov edi, eax
mov eax, 0x800
sub eax, edx
shr eax, 5
add eax, ebp
movzx edx, ax
mov eax, dword [esp + 0x48]
jmp 0x4070bb
sub edi, eax
shr edx, 5
sub esi, eax
mov eax, dword [esp + 0x48]
inc eax
sub ebp, edx
movzx edx, bp
mov ebp, dword [esp + 0x6c]
mov word [ebp], dx
lea edx, [eax + eax]
lea eax, [edx + ecx]
movzx ebp, word [eax]
mov dword [esp + 0x6c], eax
mov ecx, ebp
cmp edi, 0x1000000
jae 0x4070ea
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x407109
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ebp
movzx eax, ax
jmp 0x407116
sub edi, eax
shr ecx, 5
sub esi, eax
inc edx
sub ebp, ecx
movzx eax, bp
mov ecx, dword [esp + 0x6c]
sub edx, 0x40
mov word [ecx], ax
cmp edx, 4
jb 0x4073d4
xor ebp, ebp
mov ecx, edx
mov eax, edx
shr ecx, 1
inc ebp
dec ecx
and edx, ebp
or edx, 2
cmp eax, 0xe
jae 0x4071ec
shl edx, cl
mov dword [esp + 0x40], ebp
inc edx
mov eax, dword [esp + 0x1c]
lea eax, [eax + edx*2]
add eax, 0xfffff300
mov dword [esp + 0x68], eax
movzx eax, word [eax]
mov dword [esp + 0x48], eax
movzx ebp, ax
cmp edi, 0x1000000
jae 0x407176
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov eax, edi
shr eax, 0xb
imul eax, ebp
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x40]
add eax, eax
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x6c]
cmp esi, eax
jae 0x4071a9
mov edi, eax
mov eax, 0x800
sub eax, ebp
shr eax, 5
add eax, dword [esp + 0x48]
movzx ebp, ax
jmp 0x4071c5
sub edi, eax
shr ebp, 5
sub esi, eax
mov eax, dword [esp + 0x48]
sub eax, ebp
movzx ebp, ax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x68]
add edx, dword [esp + 0x40]
mov word [eax], bp
mov eax, dword [esp + 0x44]
mov dword [esp + 0x40], eax
sub ecx, 1
jne 0x407148
mov dword [esp + 0x10], ebx
sub edx, eax
jmp 0x4073d4
sub ecx, 4
cmp edi, 0x1000000
jae 0x407203
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
shr edi, 1
lea edx, [edx*2 + 1]
sub esi, edi
mov eax, esi
shr eax, 0x1f
neg eax
add edx, eax
and eax, edi
add esi, eax
sub ecx, 1
jne 0x4071ef
mov eax, dword [esp + 0x1c]
shl edx, 4
mov dword [esp + 0x10], ebx
movzx ebp, word [eax + 2]
mov ecx, ebp
cmp edi, 0x1000000
jae 0x407249
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x407277
mov edi, eax
mov dword [esp + 0x48], 6
mov eax, 0x800
sub eax, ecx
shr eax, 5
push 4
add eax, ebp
pop ecx
movzx eax, ax
mov dword [esp + 0x40], ecx
jmp 0x407296
shr ecx, 5
sub edi, eax
sub esi, eax
mov dword [esp + 0x48], 7
sub ebp, ecx
mov dword [esp + 0x40], 5
push 6
movzx eax, bp
pop ecx
mov ebp, dword [esp + 0x1c]
mov dword [esp + 0x14], ecx
mov word [ebp + 2], ax
movzx ebp, word [ecx + ebp]
mov ecx, ebp
cmp edi, 0x1000000
jae 0x4072c0
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4072df
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ebp
movzx eax, ax
jmp 0x4072f3
shr ecx, 5
sub edi, eax
sub esi, eax
sub ebp, ecx
mov ecx, dword [esp + 0x48]
movzx eax, bp
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov word [ecx + ebp], ax
mov eax, dword [esp + 0x40]
movzx ebp, word [ebp + eax*2]
mov ecx, ebp
cmp edi, 0x1000000
jae 0x407322
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x407343
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ebp
movzx ecx, ax
push 4
jmp 0x407351
shr ecx, 5
sub edi, eax
sub esi, eax
sub ebp, ecx
movzx ecx, bp
push 8
mov ebp, dword [esp + 0x44]
pop eax
add eax, ebp
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x1c]
mov word [eax + ebp*2], cx
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x40]
lea eax, [ecx + eax*2]
movzx ebp, word [eax]
mov dword [esp + 0x6c], eax
mov ecx, ebp
cmp edi, 0x1000000
jae 0x407390
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov dword [esp + 0x10], ebx
mov eax, edi
shr eax, 0xb
imul eax, ecx
cmp esi, eax
jae 0x4073b4
add dword [esp + 0x40], 0xfffffff8
mov edi, eax
mov eax, 0x800
sub eax, ecx
shr eax, 5
add eax, ebp
movzx eax, ax
jmp 0x4073c0
sub edi, eax
shr ecx, 5
sub esi, eax
sub ebp, ecx
movzx eax, bp
mov ecx, dword [esp + 0x6c]
or edx, dword [esp + 0x40]
mov word [ecx], ax
cmp edx, 0xffffffff
je 0x40752f
cmp dword [esp + 0x20], 0x13
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x4c]
sbb ebp, ebp
mov dword [esp + 0x44], eax
and ebp, 0xfffffffd
mov eax, dword [esp + 0x38]
add ebp, 0xa
mov dword [esp + 0x3c], eax
test ecx, ecx
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x38], eax
lea eax, [edx + 1]
mov dword [esp + 0x2c], eax
mov eax, ecx
cmove eax, dword [esp + 0x28]
mov dword [esp + 0x20], ebp
cmp edx, eax
jae 0x40753d
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x50]
add edx, 2
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x18], edx
sub eax, ecx
je 0x4074cf
cmp eax, edx
mov ecx, edx
cmovb ecx, eax
mov eax, dword [esp + 0x24]
cmp eax, dword [esp + 0x2c]
sbb ebp, ebp
add dword [esp + 0x28], ecx
and ebp, dword [esp + 0x34]
sub ebp, dword [esp + 0x2c]
sub dword [esp + 0x18], ecx
lea edx, [eax + ebp]
mov eax, dword [esp + 0x34]
sub eax, edx
cmp ecx, eax
ja 0x407483
mov edx, dword [esp + 0x24]
add edx, dword [esp + 0x30]
add dword [esp + 0x24], ecx
lea eax, [edx + ecx]
mov dword [esp + 0x6c], eax
mov ecx, eax
mov al, byte [edx + ebp]
mov byte [edx], al
inc edx
cmp edx, ecx
jne 0x407477
jmp 0x4074ab
mov ebp, dword [esp + 0x24]
mov ebx, dword [esp + 0x30]
mov al, byte [edx + ebx]
mov byte [ebx + ebp], al
lea eax, [edx + 1]
xor edx, edx
inc ebp
cmp eax, dword [esp + 0x34]
cmovne edx, eax
sub ecx, 1
jne 0x40748b
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x24], ebp
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov ebp, dword [esp + 0x20]
cmp edx, dword [esp + 0x50]
jae 0x4074c7
cmp ebx, dword [esp + 0x78]
jb 0x406092
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x24]
cmp edi, 0x1000000
jae 0x4074e3
movzx eax, byte [ebx]
shl esi, 8
shl edi, 8
or esi, eax
inc ebx
mov eax, dword [esp + 0x70]
cmp edx, 0x200
mov dword [eax + 0x18], ecx
mov ecx, dword [esp + 0x28]
mov dword [eax + 0x28], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 0x30], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 0x34], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0x20], edi
pop edi
mov dword [eax + 0x24], esi
mov dword [eax + 0x38], ecx
mov ecx, dword [esp + 0x40]
mov dword [eax + 0x1c], ebx
mov dword [eax + 0x40], ebp
pop esi
mov dword [eax + 0x44], edx
mov dword [eax + 0x3c], ecx
sbb eax, eax
pop ebp
inc eax
pop ebx
add esp, 0x64
ret 4
mov ebp, dword [esp + 0x20]
mov edx, 0x112
sub ebp, 0xc
jmp 0x4074cb
mov edx, dword [esp + 0x18]
add edx, 0x202
jmp 0x4074cb