Function at 0x407891
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xb0
push esi
push edi
mov eax, ecx
lea edi, [esp + 0x1c]
push 0x22
pop ecx
mov esi, eax
mov dword [esp + 0xb4], eax
rep movsd dword es:[edi], dword [esi]
cmp dword [esp + 0x74], 0xffffffff
jne 0x4078bc
xor eax, eax
inc eax
jmp 0x4085f7
mov eax, dword [esp + 0x8c]
mov edx, dword [esp + 0x60]
mov ecx, dword [esp + 0x5c]
mov esi, dword [esp + 0x64]
mov edi, dword [esp + 0x50]
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0xa8], eax
mov al, byte [esp + 0x49]
push ebx
mov ebx, dword [esp + 0x9c]
push ebp
mov ebp, dword [esp + 0x9c]
mov byte [esp + 0x23], al
mov eax, dword [esp + 0x24]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
cmp eax, 0x1c
ja case.default.0x407928
jmp dword [eax*4 + 0x408601]
mov eax, dword [esp + 0x40]
test eax, eax
je 0x4085de
dec eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x3c]
mov cl, byte [eax]
inc eax
mov dword [esp + 0x3c], eax
cmp cl, 0xe1
ja case.default.0x407928
xor edx, edx
movzx ecx, cl
mov eax, ecx
push 0x2d
pop esi
div esi
xor edx, edx
mov edi, eax
mov eax, ecx
div esi
push 9
movzx esi, dl
xor edx, edx
mov eax, esi
pop ecx
div ecx
mov ecx, edi
movzx eax, dl
xor edx, edx
mov dword [esp + 0x70], eax
xor eax, eax
inc eax
shl eax, cl
dec eax
mov dword [esp + 0xb4], eax
mov dword [esp + 0x90], eax
mov eax, esi
push 9
pop ecx
div ecx
xor edx, edx
mov esi, 0x300
inc edx
mov ecx, eax
mov eax, dword [esp + 0xa8]
shl edx, cl
mov ecx, dword [esp + 0x70]
dec edx
mov dword [esp + 0xb8], edx
mov dword [esp + 0x94], edx
lea ecx, [ecx + edi]
shl esi, cl
add esi, 0x736
lea edi, [esi + esi]
cmp edi, dword [esp + 0x34]
je 0x4079fb
test eax, eax
je 0x4079df
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push edi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [esp + 0xa8], eax
test eax, eax
je case.default.0x407928
mov dword [esp + 0x34], edi
sub esi, 1
mov ecx, 0x400
mov word [eax + esi*2], cx
jne 0x4079fb
mov edi, dword [esp + 0x40]
xor ecx, ecx
xor esi, esi
jmp 0x407a3c
mov edi, dword [esp + 0x40]
test edi, edi
je 0x408561
mov edx, dword [esp + 0x3c]
dec edi
shl ecx, 3
mov dword [esp + 0x40], edi
movzx eax, byte [edx]
shl eax, cl
mov ecx, dword [esp + 0x14]
or esi, eax
inc edx
inc ecx
mov dword [esp + 0x3c], edx
mov dword [esp + 0x64], ecx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x6c], esi
cmp ecx, 4
jl 0x407a17
mov eax, dword [esp + 0x38]
cmp esi, eax
je 0x407a87
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x38], esi
test eax, eax
je 0x407a6b
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push esi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [esp + 0xa4], eax
test eax, eax
je case.default.0x407928
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0xa4]
push 5
mov byte [ecx + eax - 1], 0
pop ecx
jmp 0x407ac1
mov edi, dword [esp + 0x40]
test edi, edi
je 0x40856b
mov edx, dword [esp + 0x3c]
dec edi
shl ebx, 8
mov dword [esp + 0x40], edi
movzx eax, byte [edx]
or ebx, eax
inc edx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x3c], edx
mov eax, ecx
dec ecx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x64], ecx
test eax, eax
jne 0x407a9c
mov edx, dword [esp + 0x10]
mov esi, dword [esp + 0x4c]
and esi, dword [esp + 0xb4]
mov eax, dword [esp + 0x74]
shl eax, 4
add eax, esi
mov dword [esp + 0xb0], esi
mov dword [esp + 0x60], esi
mov esi, dword [esp + 0xa8]
mov dword [esp + 0x28], 6
lea edi, [esi + eax*2]
jmp 0x40838f
test esi, esi
jne 0x407ba1
movzx edx, byte [esp + 0x50]
push 8
pop eax
mov cl, al
mov eax, dword [esp + 0x4c]
sub cl, byte [esp + 0x70]
and eax, dword [esp + 0xb8]
shr edx, cl
mov ecx, dword [esp + 0x70]
shl eax, cl
mov ecx, dword [esp + 0xa8]
add edx, eax
imul eax, edx, 0x600
add ecx, 0xe6c
add eax, ecx
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x74]
cmp eax, 4
jge 0x407b5d
and dword [esp + 0x74], esi
jmp 0x407b6e
cmp eax, 0xa
jge 0x407b67
sub eax, 3
jmp 0x407b6a
sub eax, 6
mov dword [esp + 0x74], eax
cmp dword [esp + 0x78], 0
je 0x407b99
mov eax, dword [esp + 0x98]
sub eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x38]
cmp eax, ecx
jb 0x407b8a
add eax, ecx
mov ecx, dword [esp + 0xa4]
xor edx, edx
inc edx
mov al, byte [eax + ecx]
jmp 0x407c12
xor edx, edx
inc edx
jmp 0x407dd2
mov eax, dword [esp + 0x74]
mov dword [esp + 0x78], 1
add eax, 0xc0
push 7
mov esi, dword [esp + 0xac]
lea edi, [esi + eax*2]
pop eax
mov dword [esp + 0x28], eax
jmp 0x40838f
mov eax, dword [esp + 0x40]
test eax, eax
je 0x408575
shl ebp, 8
dec eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x3c]
shl ebx, 8
mov dword [esp + 0x9c], ebp
movzx eax, byte [eax]
or ebx, eax
inc dword [esp + 0x3c]
mov dword [esp + 0xa0], ebx
cmp ecx, esi
jne 0x407cec
cmp edx, 0x100
jge 0x407d85
mov al, byte [esp + 0x23]
mov esi, dword [esp + 0x54]
movzx ecx, al
add al, al
shr ecx, 7
mov byte [esp + 0x23], al
mov byte [esp + 0x51], al
mov dword [esp + 0x14], ecx
lea eax, [ecx + 1]
mov dword [esp + 0x64], ecx
shl eax, 8
add eax, edx
lea edi, [esi + eax*2]
movzx eax, word [edi]
mov esi, eax
mov dword [esp + 0x58], edi
mov eax, ebp
mov dword [esp + 0x10], esi
shr eax, 0xb
imul eax, esi
mov dword [esp + 0x18], esi
xor esi, esi
cmp ebx, eax
jae 0x407c6e
mov ebp, eax
mov eax, 0x800
sub eax, dword [esp + 0x18]
sar eax, 5
add eax, dword [esp + 0x10]
add edx, edx
jmp 0x407c93
sub ebx, eax
lea edx, [edx*2 + 1]
sub ebp, eax
mov dword [esp + 0xa0], ebx
mov ax, word [esp + 0x10]
inc esi
shr ax, 5
sub word [esp + 0x10], ax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x68], edx
mov dword [esp + 0x10], edx
mov word [edi], ax
mov dword [esp + 0x9c], ebp
mov dword [esp + 0x6c], esi
cmp ebp, 0x1000000
jae 0x407bfa
jmp case.0x407928.13
mov eax, dword [esp + 0x40]
test eax, eax
je 0x40857f
shl ebp, 8
dec eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x3c]
shl ebx, 8
mov dword [esp + 0x9c], ebp
movzx eax, byte [eax]
or ebx, eax
inc dword [esp + 0x3c]
mov dword [esp + 0xa0], ebx
cmp edx, 0x100
jge 0x407d85
mov edi, dword [esp + 0x54]
lea eax, [edx + edx]
add edi, eax
mov dword [esp + 0xac], eax
mov dword [esp + 0x58], edi
movzx eax, word [edi]
mov dword [esp + 0x18], eax
movzx eax, ax
mov dword [esp + 0x10], eax
mov eax, ebp
shr eax, 0xb
imul eax, dword [esp + 0x10]
cmp ebx, eax
jae 0x407d41
mov ebp, eax
mov eax, 0x800
sub eax, dword [esp + 0x10]
sar eax, 5
add eax, dword [esp + 0x18]
add edx, edx
mov word [edi], ax
jmp 0x407d65
mov edx, dword [esp + 0x18]
sub ebx, eax
sub ebp, eax
mov dword [esp + 0xa0], ebx
mov ax, dx
shr ax, 5
sub dx, ax
mov word [edi], dx
mov edx, dword [esp + 0xac]
inc edx
mov dword [esp + 0x68], edx
mov dword [esp + 0x10], edx
mov dword [esp + 0x9c], ebp
cmp ebp, 0x1000000
jae 0x407cec
jmp case.0x407928.14
mov al, byte [esp + 0x68]
and dword [esp + 0x78], 0
mov byte [esp + 0x50], al
jmp 0x407e58
mov eax, dword [esp + 0x40]
test eax, eax
je 0x408589
mov ecx, dword [esp + 0x3c]
shl ebp, 8
dec eax
mov dword [esp + 0x40], eax
shl ebx, 8
movzx eax, byte [ecx]
or ebx, eax
mov dword [esp + 0x9c], ebp
inc ecx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x3c], ecx
cmp edx, 0x100
jge 0x407e4a
mov edi, dword [esp + 0x54]
lea eax, [edx + edx]
add edi, eax
mov dword [esp + 0xac], eax
mov eax, ebp
mov dword [esp + 0x58], edi
shr eax, 0xb
movzx ecx, word [edi]
imul eax, ecx
mov dword [esp + 0x18], ecx
cmp ebx, eax
jae 0x407e0e
mov ebp, eax
mov eax, 0x800
sub eax, ecx
sar eax, 5
add eax, ecx
add edx, edx
mov word [edi], ax
jmp 0x407e2e
mov edx, dword [esp + 0xac]
sub ebx, eax
sub ebp, eax
mov dword [esp + 0xa0], ebx
mov ax, cx
shr ax, 5
sub cx, ax
inc edx
mov word [edi], cx
mov dword [esp + 0x68], edx
mov dword [esp + 0x10], edx
mov dword [esp + 0x9c], ebp
cmp ebp, 0x1000000
jae 0x407dca
jmp case.0x407928.15
mov al, byte [esp + 0x68]
mov byte [esp + 0x50], al
jmp 0x407e58
mov al, byte [esp + 0x50]
mov edx, dword [esp + 0x48]
test edx, edx
je 0x408593
mov ecx, dword [esp + 0x44]
inc dword [esp + 0x4c]
mov byte [ecx], al
inc ecx
dec edx
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x98]
mov dword [esp + 0x48], edx
mov edx, dword [esp + 0xa4]
mov byte [ecx + edx], al
mov eax, ecx
inc eax
mov ecx, dword [esp + 0x14]
xor edx, edx
div dword [esp + 0x38]
mov dword [esp + 0x98], edx
jmp 0x408339
cmp esi, 1
jne 0x407eb7
mov eax, dword [esp + 0x74]
add eax, 0xcc
push 8
jmp 0x407bb4
mov eax, dword [esp + 0x88]
mov esi, dword [esp + 0x84]
mov dword [esp + 0x8c], eax
push 0xa
pop eax
mov dword [esp + 0x88], esi
mov esi, dword [esp + 0x1c]
push 7
mov dword [esp + 0x88], esi
pop esi
cmp dword [esp + 0x74], esi
mov dword [esp + 0x2c], 0x16
cmovl eax, esi
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0xa8]
add eax, 0x664
mov dword [esp + 0x54], eax
jmp 0x40834d
test esi, esi
mov esi, dword [esp + 0xa8]
jne 0x407f2f
mov eax, dword [esp + 0x74]
add eax, 0xf
shl eax, 4
add eax, dword [esp + 0xb0]
push 9
jmp 0x407bbb
mov edi, dword [esp + 0x74]
add edi, 0xd8
mov dword [esp + 0x28], 0xa
lea edi, [esi + edi*2]
jmp 0x40838f
test esi, esi
jne 0x408056
cmp dword [esp + 0x4c], esi
je case.default.0x407928
push 0xb
pop eax
push 7
pop edx
cmp dword [esp + 0x74], edx
push 9
pop edx
cmovl eax, edx
mov dword [esp + 0x74], eax
cmp dword [esp + 0x48], 0
je 0x40859d
mov eax, dword [esp + 0x98]
sub eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x38]
cmp eax, edx
jb 0x407f8f
add eax, edx
mov edx, dword [esp + 0xa4]
mov ecx, dword [esp + 0x98]
push 2
mov al, byte [eax + edx]
mov byte [ecx + edx], al
xor edx, edx
mov byte [esp + 0x54], al
mov eax, ecx
inc eax
mov ecx, dword [esp + 0x48]
div dword [esp + 0x3c]
mov al, byte [esp + 0x54]
inc dword [esp + 0x50]
mov byte [ecx], al
inc ecx
dec dword [esp + 0x4c]
mov dword [esp + 0x9c], edx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x48], ecx
pop eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x24], eax
jmp 0x40791f
test esi, esi
jne 0x407fef
mov eax, dword [esp + 0x84]
jmp 0x408040
mov edi, dword [esp + 0x74]
mov esi, dword [esp + 0xa8]
add edi, 0xe4
mov dword [esp + 0x28], 0xb
lea edi, [esi + edi*2]
jmp 0x40838f
test esi, esi
jne 0x40801d
mov eax, dword [esp + 0x88]
jmp 0x408032
mov eax, dword [esp + 0x8c]
mov esi, dword [esp + 0x88]
mov dword [esp + 0x8c], esi
mov esi, dword [esp + 0x84]
mov dword [esp + 0x88], esi
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x84], esi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0xa8]
add eax, 0xa68
mov dword [esp + 0x2c], 0x15
mov dword [esp + 0x54], eax
jmp 0x40834d
push 0xb
pop eax
push 7
pop edx
cmp dword [esp + 0x74], edx
push 8
pop edx
cmovl eax, edx
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x1c]
jmp 0x4082a6
cmp dword [esp + 0x7c], 4
mov ecx, dword [esp + 0xa8]
push 3
pop eax
cmovl eax, dword [esp + 0x7c]
add ecx, 0x360
shl eax, 7
add eax, ecx
mov dword [esp + 0x30], 0x19
push 6
mov dword [esp + 0x58], eax
pop esi
jmp 0x408469
mov eax, edx
cmp edx, 4
jl 0x40829a
mov esi, edx
and eax, 1
sar esi, 1
or eax, 2
dec esi
mov ecx, esi
shl eax, cl
mov dword [esp + 0x1c], eax
mov dword [esp + 0x80], eax
cmp edx, 0xe
jge 0x408104
mov ecx, dword [esp + 0xa8]
sub eax, edx
add ecx, 0x55e
lea eax, [ecx + eax*2]
jmp 0x408197
xor edx, edx
lea ecx, [esi - 4]
jmp 0x40813f
mov eax, dword [esp + 0x40]
test eax, eax
je 0x4085a7
mov esi, dword [esp + 0x3c]
shl ebp, 8
dec eax
mov dword [esp + 0x40], eax
shl ebx, 8
movzx eax, byte [esi]
or ebx, eax
mov dword [esp + 0x9c], ebp
inc esi
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x3c], esi
dec ecx
mov dword [esp + 0x64], ecx
test ecx, ecx
jle 0x408174
shr ebp, 1
add edx, edx
mov dword [esp + 0x9c], ebp
mov dword [esp + 0x68], edx
cmp ebx, ebp
jb 0x40816a
sub ebx, ebp
or edx, 1
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x68], edx
cmp ebp, 0x1000000
jae 0x40813e
jmp case.0x407928.12
mov eax, dword [esp + 0x1c]
shl edx, 4
add eax, edx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0xa8]
push 4
add eax, 0x644
pop esi
mov dword [esp + 0x54], eax
xor edx, edx
xor eax, eax
mov dword [esp + 0x6c], esi
inc eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x5c], eax
xor ecx, ecx
mov dword [esp + 0x68], edx
jmp 0x4081eb
mov eax, dword [esp + 0x40]
test eax, eax
je 0x4085b8
shl ebp, 8
dec eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x3c]
shl ebx, 8
mov dword [esp + 0x9c], ebp
movzx eax, byte [eax]
or ebx, eax
inc dword [esp + 0x3c]
mov dword [esp + 0xa0], ebx
mov eax, dword [esp + 0x5c]
inc ecx
mov dword [esp + 0x64], ecx
mov dword [esp + 0x14], ecx
cmp ecx, esi
jge 0x408294
mov edi, dword [esp + 0x54]
add eax, eax
add edi, eax
mov dword [esp + 0xac], eax
mov dword [esp + 0x58], edi
movzx eax, word [edi]
mov dword [esp + 0x14], eax
movzx eax, ax
mov dword [esp + 0x18], eax
mov eax, ebp
shr eax, 0xb
imul eax, dword [esp + 0x18]
cmp ebx, eax
jae 0x408245
mov ebp, eax
mov eax, 0x800
sub eax, dword [esp + 0x18]
sar eax, 5
add eax, dword [esp + 0x14]
shl dword [esp + 0x5c], 1
mov word [edi], ax
jmp 0x40827c
sub ebx, eax
bts edx, ecx
sub ebp, eax
mov dword [esp + 0x10], edx
mov ax, word [esp + 0x14]
shr ax, 5
sub word [esp + 0x14], ax
mov eax, dword [esp + 0x14]
mov word [edi], ax
mov eax, dword [esp + 0xac]
inc eax
mov dword [esp + 0x68], edx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x9c], ebp
cmp ebp, 0x1000000
jae 0x4081e6
jmp case.0x407928.16
mov eax, dword [esp + 0x1c]
add eax, edx
inc eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x80], eax
test eax, eax
je 0x4085b1
mov edx, dword [esp + 0x4c]
cmp eax, edx
ja case.default.0x407928
mov eax, dword [esp + 0x7c]
add eax, 2
add edx, eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x4c], edx
mov edx, dword [esp + 0x98]
cmp dword [esp + 0x48], 0
je 0x4085c2
mov eax, edx
mov edx, dword [esp + 0x38]
sub eax, dword [esp + 0x1c]
cmp eax, edx
jb 0x4082ed
add eax, edx
mov edx, dword [esp + 0xa4]
mov ecx, dword [esp + 0x98]
mov al, byte [eax + edx]
mov byte [ecx + edx], al
xor edx, edx
mov byte [esp + 0x50], al
mov eax, ecx
inc eax
mov ecx, dword [esp + 0x44]
div dword [esp + 0x38]
mov al, byte [esp + 0x50]
mov byte [ecx], al
inc ecx
mov eax, dword [esp + 0x7c]
dec dword [esp + 0x48]
dec eax
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x98], edx
mov dword [esp + 0x7c], eax
test eax, eax
jg 0x4082d2
mov edx, dword [esp + 0x10]
push 2
pop eax
mov dword [esp + 0x24], eax
jmp 0x40791f
mov eax, dword [esp + 0x54]
mov edi, eax
mov dword [esp + 0x28], 0x12
jmp 0x40838f
test esi, esi
jne 0x408380
mov eax, dword [esp + 0xb0]
mov edx, dword [esp + 0x54]
and dword [esp + 0x7c], esi
shl eax, 4
add edx, 4
add edx, eax
push 3
mov dword [esp + 0x58], edx
pop esi
jmp 0x408461
mov edi, dword [esp + 0x54]
add edi, 2
mov dword [esp + 0x28], 0x13
mov dword [esp + 0x58], edi
movzx eax, word [edi]
mov esi, eax
mov dword [esp + 0x18], eax
mov eax, ebp
shr eax, 0xb
imul eax, esi
cmp ebx, eax
jae 0x4083bd
mov ebp, eax
mov eax, 0x800
sub eax, esi
sar eax, 5
add eax, esi
xor esi, esi
mov word [edi], ax
jmp 0x4083d8
sub ebx, eax
sub ebp, eax
mov ax, si
mov dword [esp + 0xa0], ebx
shr ax, 5
sub si, ax
mov word [edi], si
xor esi, esi
inc esi
mov dword [esp + 0x6c], esi
mov dword [esp + 0x9c], ebp
cmp ebp, 0x1000000
jae 0x40841d
mov eax, dword [esp + 0x40]
test eax, eax
je 0x4085cc
shl ebp, 8
dec eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x3c]
shl ebx, 8
mov dword [esp + 0x9c], ebp
movzx eax, byte [eax]
or ebx, eax
inc dword [esp + 0x3c]
mov dword [esp + 0xa0], ebx
mov eax, dword [esp + 0x28]
jmp 0x408558
test esi, esi
jne 0x40844a
mov edx, dword [esp + 0x54]
push 8
pop eax
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0xb0]
shl eax, 4
add edx, 0x104
jmp 0x408372
add dword [esp + 0x54], 0x204
push 0x10
pop eax
push 8
mov dword [esp + 0x80], eax
pop eax
mov esi, eax
mov dword [esp + 0x30], 0x14
mov dword [esp + 0x6c], esi
xor edx, edx
mov ecx, esi
inc edx
mov dword [esp + 0x5c], edx
jmp 0x4084b0
mov eax, dword [esp + 0x40]
test eax, eax
je 0x4085d6
mov edx, dword [esp + 0x3c]
shl ebp, 8
dec eax
mov dword [esp + 0x40], eax
shl ebx, 8
movzx eax, byte [edx]
or ebx, eax
mov dword [esp + 0x9c], ebp
inc edx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x3c], edx
mov edx, dword [esp + 0x5c]
dec ecx
mov dword [esp + 0x64], ecx
mov dword [esp + 0x14], ecx
test ecx, ecx
jle 0x408536
mov edi, dword [esp + 0x54]
lea eax, [edx + edx]
add edi, eax
mov dword [esp + 0xac], eax
mov eax, ebp
mov dword [esp + 0x58], edi
shr eax, 0xb
movzx edx, word [edi]
imul eax, edx
mov dword [esp + 0x18], edx
cmp ebx, eax
jae 0x4084fa
mov ebp, eax
mov eax, 0x800
sub eax, edx
sar eax, 5
add eax, edx
shl dword [esp + 0x5c], 1
mov word [edi], ax
jmp 0x40851e
sub ebx, eax
sub ebp, eax
mov ax, dx
mov dword [esp + 0xa0], ebx
shr ax, 5
sub dx, ax
mov eax, dword [esp + 0xac]
inc eax
mov word [edi], dx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x9c], ebp
cmp ebp, 0x1000000
jae 0x4084ab
jmp case.0x407928.24
xor eax, eax
mov ecx, esi
inc eax
shl eax, cl
sub edx, eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x10], edx
mov dword [esp + 0x68], edx
jmp 0x407fd5
add dword [esp + 0x7c], edx
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x24], eax
jmp 0x40791f
mov dword [esp + 0x24], 1
jmp 0x4085de
mov dword [esp + 0x24], 3
jmp 0x4085de
mov dword [esp + 0x24], 0xd
jmp 0x4085de
mov dword [esp + 0x24], 0xe
jmp 0x4085de
mov dword [esp + 0x24], 0xf
jmp 0x4085de
mov dword [esp + 0x24], 0x1a
jmp 0x4085de
mov dword [esp + 0x24], 0x1b
jmp 0x4085de
mov dword [esp + 0x24], 0xc
jmp 0x4085de
or dword [esp + 0x7c], 0xffffffff
jmp 0x4085de
mov dword [esp + 0x24], 0x10
jmp 0x4085de
mov dword [esp + 0x24], 0x1c
jmp 0x4085de
mov dword [esp + 0x24], 5
jmp 0x4085de
mov dword [esp + 0x24], 0x18
mov edi, dword [esp + 0xbc]
lea esi, [esp + 0x24]
push 0x22
pop ecx
rep movsd dword es:[edi], dword [esi]
xor eax, eax
jmp 0x4085f5
or eax, 0xffffffff
pop ebp
pop ebx
pop edi
pop esi
add esp, 0xb0
ret