Function at 0x703547
Capabilities:
Write file on windows

Disassembly:
sub esp, 0x364
mov eax, dword [0x100abd0c]
xor eax, esp
mov dword [esp + 0x360], eax
cmp dword [0x100a8244], 0
push ebx
mov ebx, dword [esp + 0x38c]
push ebp
mov ebp, dword [esp + 0x394]
push esi
push edi
mov dword [esp + 0x30], ebx
je 0x7033d3
call fcn.00728ddb
push eax
lea eax, [esp + 0x16c]
push 0x1007a6f0
push eax
call fcn.0075c6cc
mov esi, dword [0x1007941c]
add esp, 0xc
lea ecx, [esp + 0x168]
push ecx
push 0
push 0x1007a6e8
push 0x1007a6e0
call esi
lea edx, [esp + 0x168]
push edx
push 0
push 0x1007a6d8
push 0x1007a6e0
mov dword [0x100adc08], eax
call esi
mov dword [0x100adc04], eax
lea eax, [esp + 0x168]
push eax
push 0
push 0x1007a6d0
push 0x1007a6e0
call esi
lea ecx, [esp + 0x168]
push ecx
push 0
push 0x1007a6c8
push 0x1007a6e0
mov dword [0x100adc00], eax
call esi
mov dword [0x100adbfc], eax
call fcn.00728ddb
push eax
push 0x1007a6b8
lea edx, [esp + 0x274]
push 0x104
push edx
call fcn.0075c749
add esp, 0x10
push 0
lea eax, [esp + 0x270]
push eax
call dword [0x10079420]
mov ecx, dword [0x100b1ee0]
xor eax, eax
mov dword [0x100adbf8], eax
test ecx, 0x200
je 0x70338e
mov eax, 1
mov dword [0x100adbf8], eax
test ecx, 0x1000
je 0x7033a0
mov eax, 2
mov dword [0x100adbf8], eax
mov ecx, dword [0x100adbfc]
mov edx, dword [0x100adc04]
push eax
mov eax, dword [0x100adc00]
push ecx
mov ecx, dword [0x100adc08]
push edx
push eax
push ecx
push 0x1007a680
call fcn.007290db
add esp, 0x18
mov dword [0x100a8244], 0
mov eax, dword [0x100adc08]
mov edx, dword [esp + 0x390]
test eax, eax
je 0x7033e7
cmp edx, eax
jl 0x7033fb
mov eax, dword [0x100adc00]
mov ecx, dword [esp + 0x394]
test eax, eax
je 0x70340a
cmp ecx, eax
jge 0x70340a
push 0x1007a65c
call fcn.007290db
jmp 0x7040ee
mov eax, dword [0x100adc04]
test eax, eax
je 0x703417
cmp edx, eax
jg 0x703424
mov eax, dword [0x100adbfc]
test eax, eax
je 0x703433
cmp ecx, eax
jle 0x703433
push 0x1007a63c
call fcn.007290db
jmp 0x7040ee
push ebp
push ebx
sub esp, 0x20
mov ecx, 8
lea esi, [esp + 0x3a0]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00702dab
add esp, 0x28
test eax, eax
jne 0x703463
push 0x1007a620
call fcn.007290db
jmp 0x7040ee
push ebp
push ebx
sub esp, 0x20
mov ecx, 8
lea esi, [esp + 0x3a0]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00702f4b
add esp, 0x28
test eax, eax
jne 0x703493
push 0x1007a608
call fcn.007290db
jmp 0x7040ee
mov ecx, dword [0x100adbf8]
sub ecx, 0
je 0x7034b6
sub ecx, 1
je 0x7034af
sub ecx, 1
jne 0x7034bd
mov ecx, 0x1007a604
jmp 0x7034c1
mov ecx, 0x1007a600
jmp 0x7034c1
mov ecx, 0x1007a5fc
jmp 0x7034c1
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x378]
push ecx
push eax
push edx
call fcn.0070291b
mov ecx, dword [esp + 0x39c]
add esp, 4
push eax
mov eax, dword [esp + 0x3a0]
push eax
push ecx
call fcn.00728ddb
push eax
push 0x1007a5d0
lea edx, [esp + 0x288]
push 0x104
push edx
call fcn.0075c749
lea eax, [esp + 0x290]
push 0x1007a5cc
push eax
call fcn.0075beeb
mov ebx, eax
add esp, 0x2c
mov dword [esp + 0x38], ebx
test ebx, ebx
je 0x7040f1
mov eax, dword [0x100adbf8]
sub eax, 0
je 0x7036bf
sub eax, 1
je 0x703672
sub eax, 1
jne 0x7040f1
push ebx
push 1
push 4
push 0x1007a5c4
call fcn.0075d43e
mov esi, dword [0x10079450]
add esp, 0x10
cmp eax, 1
je 0x703571
call esi
push eax
push 0x1007a5a0
call fcn.007290db
add esp, 8
push 0x7c
lea ecx, [esp + 0x74]
push 0
push ecx
call fcn.0075d0bb
mov edx, dword [esp + 0x3a0]
mov eax, dword [esp + 0x39c]
mov dword [esp + 0x84], edx
mov edx, dword [esp + 0x384]
add esp, 0xc
mov ecx, edx
mov dword [esp + 0x70], 0x7c
mov dword [esp + 0x74], 0x1007
mov dword [esp + 0x7c], eax
mov dword [esp + 0xb8], 0x20
call fcn.00702d3b
mov dword [esp + 0xbc], eax
test al, 0x40
je 0x7035e2
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x80], ecx
mov dword [esp + 0x74], 0x100f
test al, 4
je 0x7035ed
mov dword [esp + 0xc0], edx
lea eax, [esp + 0xb8]
mov ecx, edx
call fcn.00702e1b
push ebx
push 1
lea edx, [esp + 0x78]
push 0x7c
push edx
call fcn.0075d43e
add esp, 0x10
cmp eax, 1
je 0x703622
call esi
push eax
push 0x1007a5a0
call fcn.007290db
add esp, 8
mov eax, dword [esp + 0x30]
push ebx
push 1
push ebp
push eax
sub esp, 0x20
mov ecx, 8
lea esi, [esp + 0x3a8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00702dab
add esp, 0x28
push eax
push ebp
call fcn.0075d43e
add esp, 0x10
cmp eax, 1
je 0x7040f1
call dword [0x10079450]
push eax
push 0x1007a5a0
call fcn.007290db
add esp, 8
jmp 0x7040f1
mov ecx, dword [esp + 0x30]
push ebx
push 1
push ebp
push ecx
sub esp, 0x20
mov ecx, 8
lea esi, [esp + 0x3a8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.00702dab
add esp, 0x28
push eax
push ebp
call fcn.0075d43e
add esp, 0x10
cmp eax, 1
je 0x7036b9
call dword [0x10079450]
push eax
push 0x1007a5a0
call fcn.007290db
add esp, 8
push ebx
jmp 0x7040e9
sub esp, 0x20
mov edi, esp
lea edx, [esp + 0x80]
push edx
lea eax, [esp + 0x110]
mov ecx, 8
lea esi, [esp + 0x39c]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.007030bb
add esp, 0x28
test eax, eax
jne 0x7040f1
movzx eax, word [esp + 0xfa]
imul eax, dword [esp + 0xf0]
add eax, 0x1f
and eax, 0xffffffe0
cdq
push ebx
and edx, 7
push 1
add eax, edx
lea ecx, [esp + 0x68]
mov esi, eax
push 0xe
push ecx
sar esi, 3
call fcn.0075d43e
mov edx, dword [esp + 0x11c]
push ebx
push 1
lea eax, [edx*4 + 0x6c]
push eax
lea ecx, [esp + 0x108]
push ecx
call fcn.0075d43e
mov eax, dword [esp + 0x398]
add esp, 0x20
cmp eax, 0x31545844
jg 0x703974
je 0x703812
add eax, 0xffffffeb
cmp eax, 0x1d
ja 0x7040e4
movzx edx, byte [eax + 0x1000673c]
jmp dword [edx*4 + 0x10006730]
mov esi, dword [esp + 0x394]
imul esi, dword [esp + 0x390]
add esi, esi
push esi
mov dword [esp + 0x28], ebp
mov dword [esp + 0x1c], esi
call fcn.0075d212
xor ebx, ebx
add esp, 4
cmp dword [esp + 0x394], ebx
mov edi, eax
mov dword [esp + 0x2c], edi
jle 0x7040cd
mov edi, dword [esp + 0x390]
mov ebp, dword [esp + 0x30]
lea esp, [esp]
mov dword [esp + 0x14], 0
test edi, edi
jle 0x703957
mov eax, dword [esp + 0x18]
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0x30], eax
lea ecx, [ecx]
mov eax, dword [esp + 0x24]
movzx esi, word [eax]
movzx edx, word [eax + 2]
add eax, 2
add eax, 2
mov dword [esp + 0x24], eax
mov ecx, esi
mov eax, edx
mov dword [esp + 0x1c], esi
mov dword [esp + 0x28], edx
call fcn.007027eb
mov ecx, dword [esp + 0x28]
movzx eax, ax
mov dword [esp + 0x10], eax
mov eax, esi
call fcn.007027eb
movzx ecx, ax
mov dword [esp + 0x3c], ecx
xor esi, esi
mov eax, dword [esp + 0x24]
movzx edx, word [eax]
add eax, 2
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], eax
xor ecx, ecx
mov eax, dword [esp + 0x20]
and eax, 3
cmp eax, 3
ja 0x7038fd
jmp dword [eax*4 + 0x1000675c]
shr word [esp + 0x20], 2
xor edx, edx
cmp ecx, 4
setge dl
mov eax, ecx
and eax, 3
add edx, esi
add edx, ebx
imul edx, edi
add edx, dword [esp + 0x14]
add eax, edx
cmp eax, dword [esp + 0x30]
jge 0x703932
mov edx, dword [esp + 0x2c]
mov word [edx + eax*2], bp
mov edi, dword [esp + 0x390]
inc ecx
cmp ecx, 8
jl 0x7038d0
add esi, 2
cmp esi, 4
jl 0x7038bc
mov eax, dword [esp + 0x14]
add eax, 4
cmp eax, edi
mov dword [esp + 0x14], eax
jl 0x70387b
add ebx, 4
cmp ebx, dword [esp + 0x394]
jl 0x70385b
mov edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x18]
jmp 0x7040cd
cmp eax, 0x34545844
jg 0x703cc4
je 0x703ccf
cmp eax, 0x32545844
je 0x703997
cmp eax, 0x33545844
jne 0x7040e4
mov ebx, dword [esp + 0x394]
imul ebx, dword [esp + 0x390]
add ebx, ebx
add ebx, ebx
push ebx
mov esi, ebp
mov dword [esp + 0x34], ebx
call fcn.0075d212
push ebx
mov ebp, eax
push 0
push ebp
mov dword [esp + 0x30], ebp
call fcn.0075d0bb
add esp, 0x10
cmp dword [esp + 0x394], 0
mov dword [esp + 0x28], 0
jle 0x703cb0
mov edi, dword [esp + 0x390]
lea ebx, [ebx]
mov dword [esp + 0x14], 0
test edi, edi
jle 0x703c98
mov eax, ebx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [esp + 0x24], eax
nop
xor eax, eax
movzx ecx, word [esi]
mov dword [esp + 0x10], ecx
shr word [esp + 0x10], 4
mov dl, cl
movzx ecx, byte [esp + 0x10]
shr word [esp + 0x10], 4
and dl, 0xf
mov byte [esp + eax*4 + 0x158], dl
and cl, 0xf
mov byte [esp + eax*4 + 0x159], cl
mov cl, byte [esp + 0x10]
mov dl, cl
shr cl, 4
and dl, 0xf
and cl, 0xf
mov byte [esp + eax*4 + 0x15a], dl
mov byte [esp + eax*4 + 0x15b], cl
inc eax
add esi, 2
cmp eax, 4
jl 0x703a0d
movzx ebx, word [esi]
movzx ebp, word [esi + 2]
add esi, 2
mov ecx, ebx
add esi, 2
call fcn.007028eb
mov ecx, ebp
mov dword [esp + 0x40], eax
call fcn.007028eb
mov dword [esp + 0x44], eax
mov ecx, ebx
mov eax, ebp
call fcn.0070286b
mov dword [esp + 0x48], eax
mov ecx, ebp
mov eax, ebx
call fcn.0070286b
xor ebp, ebp
mov dword [esp + 0x4c], eax
mov dword [esp + 0x18], ebp
lea esp, [esp]
movzx eax, word [esi]
mov ecx, dword [esp + 0x28]
add esi, 2
add ebp, ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x2c], esi
mov ecx, 1
jmp 0x703acf
mov eax, dword [esp + 0x10]
and eax, 3
mov edx, dword [esp + eax*4 + 0x40]
xor eax, eax
lea esi, [ecx - 1]
and edx, 0xffffff
cmp esi, 4
setge al
shr word [esp + 0x10], 2
and esi, 3
mov dword [esp + 0x1c], eax
add eax, ebp
imul eax, edi
add eax, esi
add eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x24]
jge 0x703b2d
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
add edi, ebx
lea esi, [esi + edi*4]
movzx esi, byte [esp + esi + 0x158]
shl esi, 0x1c
or esi, edx
mov edx, dword [esp + 0x20]
mov dword [edx + eax*4], esi
mov edi, dword [esp + 0x390]
mov eax, dword [esp + 0x10]
and eax, 3
mov edx, dword [esp + eax*4 + 0x40]
xor eax, eax
and edx, 0xffffff
cmp ecx, 4
setge al
shr word [esp + 0x10], 2
mov esi, ecx
and esi, 3
mov dword [esp + 0x1c], eax
add eax, ebp
imul eax, edi
add eax, esi
add eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x24]
jge 0x703b8e
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
add edi, ebx
lea esi, [esi + edi*4]
movzx esi, byte [esp + esi + 0x158]
shl esi, 0x1c
or esi, edx
mov edx, dword [esp + 0x20]
mov dword [edx + eax*4], esi
mov edi, dword [esp + 0x390]
mov eax, dword [esp + 0x10]
and eax, 3
mov edx, dword [esp + eax*4 + 0x40]
xor ebx, ebx
lea eax, [ecx + 1]
and edx, 0xffffff
cmp eax, 4
setge bl
shr word [esp + 0x10], 2
lea esi, [ecx + 1]
and esi, 3
mov eax, ebx
mov dword [esp + 0x1c], eax
add eax, ebp
imul eax, edi
add eax, esi
add eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x24]
jge 0x703bf1
mov edi, dword [esp + 0x18]
add edi, ebx
lea esi, [esi + edi*4]
movzx esi, byte [esp + esi + 0x158]
shl esi, 0x1c
or esi, edx
mov edx, dword [esp + 0x20]
mov dword [edx + eax*4], esi
mov edi, dword [esp + 0x390]
mov eax, dword [esp + 0x10]
and eax, 3
mov edx, dword [esp + eax*4 + 0x40]
xor ebx, ebx
lea eax, [ecx + 2]
and edx, 0xffffff
cmp eax, 4
setge bl
shr word [esp + 0x10], 2
lea esi, [ecx - 2]
and esi, 3
mov eax, ebx
mov dword [esp + 0x1c], eax
add eax, ebp
imul eax, edi
add eax, esi
add eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x24]
jge 0x703c56
mov edi, ebx
mov ebx, dword [esp + 0x18]
add ebx, edi
lea esi, [esi + ebx*4]
movzx esi, byte [esp + esi + 0x158]
shl esi, 0x1c
or esi, edx
mov edx, dword [esp + 0x20]
mov dword [edx + eax*4], esi
mov edi, dword [esp + 0x390]
add ecx, 4
lea eax, [ecx - 1]
cmp eax, 8
jl 0x703acb
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x2c]
add ebp, 2
cmp ebp, 4
mov dword [esp + 0x18], ebp
jl 0x703aab
mov eax, dword [esp + 0x14]
add eax, 4
cmp eax, edi
mov dword [esp + 0x14], eax
jl 0x703a0b
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
add eax, 4
cmp eax, dword [esp + 0x394]
mov dword [esp + 0x28], eax
jl 0x7039eb
mov ecx, dword [esp + 0x38]
push ecx
push 1
push ebx
push ebp
call fcn.0075d43e
push ebp
jmp 0x7040dc
cmp eax, 0x35545844
jne 0x7040e4
mov esi, dword [esp + 0x394]
imul esi, dword [esp + 0x390]
add esi, esi
add esi, esi
push esi
mov ebx, ebp
mov dword [esp + 0x30], esi
call fcn.0075d212
push esi
mov edi, eax
push 0
push edi
mov dword [esp + 0x34], edi
call fcn.0075d0bb
add esp, 0x10
cmp dword [esp + 0x394], 0
mov dword [esp + 0x1c], 0
jle 0x7040cd
jmp 0x703d1b
cmp dword [esp + 0x390], 0
mov dword [esp + 0x18], 0
jle 0x7040b5
mov eax, esi
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [esp + 0x3c], eax
movzx eax, word [ebx]
movzx esi, al
mov ecx, eax
shr ecx, 8
add ebx, 2
mov dword [esp + 0x44], ecx
mov dword [esp + 0x40], esi
cmp esi, ecx
jbe 0x703dfc
lea edx, [esi + esi*2]
lea edi, [ecx + edx*2]
mov eax, 0x24924925
mul edi
sub edi, edx
shr edi, 1
add edi, edx
shr edi, 2
mov dword [esp + 0x48], edi
lea eax, [esi + esi*4]
lea edi, [eax + ecx*2]
mov eax, 0x24924925
mul edi
sub edi, edx
shr edi, 1
add edi, edx
shr edi, 2
mov dword [esp + 0x4c], edi
lea edx, [ecx + ecx*2]
lea edi, [edx + esi*4]
mov eax, 0x24924925
mul edi
sub edi, edx
shr edi, 1
add edi, edx
shr edi, 2
mov dword [esp + 0x50], edi
lea eax, [esi + esi*2]
lea edi, [eax + ecx*4]
mov eax, 0x24924925
mul edi
sub edi, edx
shr edi, 1
add edi, edx
shr edi, 2
mov dword [esp + 0x54], edi
lea edx, [ecx + ecx*4]
lea edi, [edx + esi*2]
mov eax, 0x24924925
mul edi
sub edi, edx
lea eax, [ecx + ecx*2]
lea esi, [esi + eax*2]
shr edi, 1
add edi, edx
mov eax, 0x24924925
mul esi
sub esi, edx
shr esi, 1
shr edi, 2
add esi, edx
shr esi, 2
mov dword [esp + 0x58], edi
mov dword [esp + 0x5c], esi
jmp 0x703e56
lea edx, [ecx + esi*4]
mov eax, 0xcccccccd
mul edx
shr edx, 2
mov dword [esp + 0x48], edx
lea eax, [esi + esi*2]
lea edx, [eax + ecx*2]
mov eax, 0xcccccccd
mul edx
shr edx, 2
mov dword [esp + 0x4c], edx
lea eax, [ecx + ecx*2]
lea edx, [eax + esi*2]
mov eax, 0xcccccccd
mul edx
shr edx, 2
mov dword [esp + 0x50], edx
lea ecx, [esi + ecx*4]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
mov dword [esp + 0x54], edx
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0xff
movzx edi, word [ebx + 6]
mov esi, ebx
add ebx, 6
movzx ebp, word [ebx + 2]
add ebx, 2
mov ecx, edi
add ebx, 2
call fcn.007028eb
mov ecx, ebp
mov dword [esp + 0x158], eax
call fcn.007028eb
mov dword [esp + 0x15c], eax
mov ecx, edi
mov eax, ebp
call fcn.0070286b
mov dword [esp + 0x160], eax
mov ecx, ebp
mov eax, edi
call fcn.0070286b
mov dword [esp + 0x164], eax
mov dword [esp + 0x14], 0
jmp 0x703eb3
mov esi, dword [esp + 0x30]
movzx eax, byte [esi + 2]
movzx edx, byte [esi + 1]
movzx ecx, byte [esi]
shl eax, 8
or eax, edx
movzx edx, word [ebx]
shl eax, 8
or eax, ecx
add esi, 3
add ebx, 2
mov dword [esp + 0x30], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0x28], ebx
mov ecx, 1
jmp 0x703eef
mov edx, dword [esp + 0x10]
shr word [esp + 0x10], 2
and edx, 3
mov edi, dword [esp + edx*4 + 0x158]
mov esi, eax
and esi, 7
mov ebp, dword [esp + esi*4 + 0x40]
xor edx, edx
lea esi, [ecx - 1]
shl ebp, 0x18
shr eax, 3
and edi, 0xffffff
cmp esi, 4
setge dl
and esi, 3
add edx, dword [esp + 0x1c]
add edx, dword [esp + 0x14]
imul edx, dword [esp + 0x390]
add edx, dword [esp + 0x18]
add esi, edx
mov edx, dword [esp + 0x3c]
cmp esi, edx
jge 0x703f49
mov ebx, dword [esp + 0x24]
or edi, ebp
mov dword [ebx + esi*4], edi
mov esi, eax
and esi, 7
mov esi, dword [esp + esi*4 + 0x40]
shl esi, 0x18
mov dword [esp + 0x20], esi
mov esi, dword [esp + 0x10]
shr word [esp + 0x10], 2
and esi, 3
mov edi, dword [esp + esi*4 + 0x158]
xor ebx, ebx
shr eax, 3
and edi, 0xffffff
cmp ecx, 4
setge bl
mov esi, ecx
and esi, 3
add ebx, dword [esp + 0x1c]
add ebx, dword [esp + 0x14]
imul ebx, dword [esp + 0x390]
add ebx, dword [esp + 0x18]
add esi, ebx
cmp esi, edx
jge 0x703fa8
or edi, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
mov dword [ebx + esi*4], edi
mov esi, eax
and esi, 7
mov esi, dword [esp + esi*4 + 0x40]
shl esi, 0x18
mov dword [esp + 0x20], esi
mov esi, dword [esp + 0x10]
shr word [esp + 0x10], 2
and esi, 3
mov edi, dword [esp + esi*4 + 0x158]
xor ebx, ebx
lea esi, [ecx + 1]
shr eax, 3
and edi, 0xffffff
cmp esi, 4
setge bl
lea esi, [ecx + 1]
and esi, 3
add ebx, dword [esp + 0x1c]
add ebx, dword [esp + 0x14]
imul ebx, dword [esp + 0x390]
add ebx, dword [esp + 0x18]
add esi, ebx
cmp esi, edx
jge 0x70400b
or edi, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
mov dword [ebx + esi*4], edi
mov esi, eax
and esi, 7
mov esi, dword [esp + esi*4 + 0x40]
shl esi, 0x18
mov dword [esp + 0x20], esi
mov esi, dword [esp + 0x10]
shr word [esp + 0x10], 2
and esi, 3
mov edi, dword [esp + esi*4 + 0x158]
xor ebx, ebx
lea esi, [ecx + 2]
shr eax, 3
and edi, 0xffffff
cmp esi, 4
setge bl
lea esi, [ecx - 2]
and esi, 3
add ebx, dword [esp + 0x1c]
add ebx, dword [esp + 0x14]
imul ebx, dword [esp + 0x390]
add ebx, dword [esp + 0x18]
add esi, ebx
cmp esi, edx
jge 0x70406e
or edi, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov dword [edx + esi*4], edi
add ecx, 4
lea edx, [ecx - 1]
cmp edx, 8
jl 0x703eeb
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x28]
add eax, 2
cmp eax, 4
mov dword [esp + 0x14], eax
jl 0x703eaf
mov eax, dword [esp + 0x18]
add eax, 4
cmp eax, dword [esp + 0x390]
mov dword [esp + 0x18], eax
jl 0x703d40
mov esi, dword [esp + 0x2c]
mov edi, dword [esp + 0x24]
mov eax, dword [esp + 0x1c]
add eax, 4
cmp eax, dword [esp + 0x394]
mov dword [esp + 0x1c], eax
jl 0x703d1b
mov eax, dword [esp + 0x38]
push eax
push 1
push esi
push edi
call fcn.0075d43e
push edi
call fcn.0075d135
add esp, 0x14
mov ecx, dword [esp + 0x38]
push ecx
call fcn.0075c7de
add esp, 4
mov ecx, dword [esp + 0x370]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0075be18
add esp, 0x364
ret