Function at 0x7293b8
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x81
push 0
push 0
dec ecx
jne 0x7293c1
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov esi, ecx
lea edi, [ebp - 0x31c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ebx, edx
mov dword [ebp - 0x1c], eax
xor eax, eax
push ebp
push 0x72f740
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp + 8]
call fcn.00408748
lea eax, [ebp - 0x18]
call fcn.00408748
xor eax, eax
mov dword [ebp - 0x74], eax
mov eax, dword [ebp + 0x3c]
mov eax, dword [eax]
sub dword [ebp - 0x310], eax
mov eax, dword [ebp + 0x44]
xor edx, edx
mov dword [eax], edx
xor eax, eax
mov dword [ebp - 0x28], eax
mov byte [ebp - 0x1d], 0
mov byte [ebp - 0x1e], 0
mov byte [ebp - 0x1f], 0
mov eax, dword [ebp + 0x20]
mov byte [eax], 0
mov eax, dword [ebp + 0x1c]
mov byte [eax], 0
mov eax, dword [ebp + 0x4c]
add eax, 0xffffffb8
call fcn.00408748
mov eax, dword [ebp + 0x40]
mov eax, dword [eax]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp + 0x40]
xor edx, edx
mov dword [eax], edx
lea esi, [ebp - 0x31c]
lea edi, [ebp - 0x32c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 8]
call fcn.00408748
cmp byte [ebp + 0x48], 0
jne 0x729476
mov eax, dword [ebp + 0x18]
add dword [ebp - 0x32c], eax
mov eax, dword [ebp + 0x4c]
cmp byte [eax - 0x49], 0
je 0x72f611
cmp byte [ebp + 0x48], 0
jne 0x72f611
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x44]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0x50], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax + 0x10]
mov edx, dword [eax + 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x44]
call fcn.004e9790
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x58]
push eax
mov eax, dword [ebp - 0x318]
add eax, dword [ebp - 0x8c]
push eax
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax - 0x60]
mov ecx, dword [ebp - 0x318]
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax]
call dword [esi + 0x7c]
jmp 0x72f611
mov edx, dword [ebx]
mov ecx, 1
mov eax, 0x72f75c
call fcn.00409d34
mov dword [ebp - 0x44], eax
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x5c], 0
je 0x72952e
mov edx, dword [ebx]
mov ecx, 1
mov eax, 0x72f76c
call fcn.00409d34
mov dword [ebp - 0x48], eax
jmp 0x729533
xor eax, eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x44], 0
jle 0x72955d
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x44]
jg 0x729547
cmp dword [ebp - 0x48], 0
jne 0x72955d
lea eax, [ebp - 4]
push eax
mov ecx, dword [ebp - 0x44]
dec ecx
mov eax, dword [ebx]
mov edx, 1
call fcn.00409b24
jmp 0x729582
cmp dword [ebp - 0x48], 0
jle 0x729578
lea eax, [ebp - 4]
push eax
mov eax, dword [ebx]
mov ecx, dword [ebp - 0x48]
mov edx, 1
call fcn.00409b24
jmp 0x729582
lea eax, [ebp - 4]
mov edx, dword [ebx]
call fcn.00408b70
mov esi, dword [ebp - 4]
test esi, esi
je 0x72958e
sub esi, 4
mov esi, dword [esi]
mov dword [ebp - 0x6c], esi
jmp 0x7295a5
lea ecx, [ebp - 4]
mov edx, 0x72f77c
mov eax, 0x72f78c
call fcn.0072927c
mov ecx, 1
mov edx, dword [ebp - 4]
mov eax, 0x72f7a8
call fcn.00409d34
test eax, eax
jg 0x729593
jmp 0x7295cf
lea ecx, [ebp - 4]
mov edx, 0x72f7c4
mov eax, 0x72f7d4
call fcn.0072927c
mov ecx, 1
mov edx, dword [ebp - 4]
mov eax, 0x72f7ec
call fcn.00409d34
test eax, eax
jg 0x7295bd
jmp 0x7295f9
lea ecx, [ebp - 4]
mov edx, 0x72f804
mov eax, 0x72f814
call fcn.0072927c
mov ecx, 1
mov edx, dword [ebp - 4]
mov eax, 0x72f82c
call fcn.00409d34
test eax, eax
jg 0x7295e7
mov eax, dword [ebp - 4]
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
je 0x729632
mov eax, dword [ebp - 0xa8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x6c], 0
jle 0x729cca
mov eax, dword [ebp + 0x40]
cmp dword [eax], 0
jne 0x729658
mov eax, dword [ebp + 0x40]
mov edx, dword [ebp - 0x8c]
mov dword [eax], edx
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x1c]
call fcn.004e9e50
mov dword [ebp - 0x24], eax
mov eax, dword [ebp + 0x4c]
cmp byte [eax - 0x61], 0
je 0x729689
mov eax, dword [ebp + 0x3c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x24]
shr edx, 2
cmp eax, edx
jge 0x729689
mov eax, dword [ebp - 0x24]
shr eax, 2
mov edx, dword [ebp + 0x3c]
mov dword [edx], eax
mov eax, dword [ebp + 0x4c]
cmp byte [eax - 0x62], 0
je 0x7296ac
mov eax, dword [ebp + 0x38]
mov eax, dword [eax]
mov edx, dword [ebp - 0x24]
shr edx, 2
cmp eax, edx
jge 0x7296ac
mov eax, dword [ebp - 0x24]
shr eax, 2
mov edx, dword [ebp + 0x38]
mov dword [edx], eax
mov eax, dword [ebp + 0x40]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x24]
jge 0x7296be
mov eax, dword [ebp + 0x40]
mov edx, dword [ebp - 0x24]
mov dword [eax], edx
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x3c]
mov edx, dword [ebp - 4]
call fcn.004098fc
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x3c]
mov eax, dword [ebp + 0x4c]
cmp byte [eax - 0x63], 0
je 0x7296ea
mov eax, ebx
mov ecx, dword [ebp - 0x6c]
mov edx, 1
call fcn.00409b6c
mov eax, dword [ebp + 0x4c]
cmp byte [eax - 0x63], 0
jne 0x729cca
cmp byte [ebp + 0x48], 0
jne 0x7299eb
mov eax, dword [ebp + 0x4c]
cmp byte [eax - 0x62], 0
je 0x729715
mov eax, dword [ebp + 0x38]
mov eax, dword [eax]
sub dword [ebp - 0x320], eax
mov eax, dword [ebp + 0x4c]
cmp byte [eax - 0x61], 0
je 0x729729
mov eax, dword [ebp + 0x3c]
mov eax, dword [eax]
add dword [ebp - 0x320], eax
mov eax, dword [ebp + 0x34]
mov eax, dword [eax]
sub dword [ebp - 0x320], eax
mov eax, dword [ebp + 0x4c]
cmp byte [eax - 0x64], 0
je 0x7297ce
mov eax, dword [ebp + 0x4c]
mov ecx, dword [eax + 0x78]
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax + 0x78]
lea eax, [ebp - 0x32c]
call fcn.0040e484
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax + 0x44]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e8fb8
push 0
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x68]
and eax, 0xfffffdff
push eax
lea eax, [ebp - 0x32c]
push eax
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 4]
call fcn.004096e8
push eax
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.user32.dll_DrawTextExW
mov eax, dword [ebp + 0x4c]
mov ecx, dword [eax + 0x78]
neg ecx
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax + 0x78]
neg edx
lea eax, [ebp - 0x32c]
call fcn.0040e484
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x5c]
call fcn.004e8fb8
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp + 0x4c]
lea edi, [eax - 0x10]
lea esi, [ebp - 0x32c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x21]
mov byte [ebp - 0xad], al
test byte [ebp - 0xad], 2
je 0x72981e
mov eax, dword [ebp - 0x324]
add eax, 2
mov edx, dword [ebp + 0x4c]
mov dword [edx - 8], eax
push 0
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x68]
or eax, 0x400
push eax
lea eax, [ebp - 0x32c]
push eax
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 4]
call fcn.004096e8
push eax
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.user32.dll_DrawTextExW
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x5c], 0
jne 0x72987d
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x5c], 0
jne 0x7298ad
mov edx, 0x72f844
mov eax, dword [ebp - 0x1c]
call fcn.004e9e70
mov edx, dword [ebp - 0x314]
sub edx, eax
cmp edx, dword [ebp - 0x32c]
jle 0x7298ad
push 0
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x68]
and eax, 0xfffffdff
push eax
mov eax, dword [ebp + 0x4c]
add eax, 0xfffffff0
push eax
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 4]
call fcn.004096e8
push eax
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.user32.dll_DrawTextExW
mov eax, dword [ebp + 0x4c]
cmp byte [eax - 0x69], 0
je 0x7298db
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x2c]
mov eax, dword [eax]
dec eax
mov edx, dword [ebp + 0x4c]
cmp eax, dword [edx + 0x80]
jne 0x7298db
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x38]
mov edx, dword [ebp + 0x4c]
mov edx, dword [edx - 0x70]
call fcn.00408b28
mov eax, dword [ebp + 0x4c]
cmp byte [eax - 0x71], 0
je 0x72998d
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x44]
mov edx, 0xff
call fcn.004e9790
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x44]
mov edx, 1
call fcn.004e98e4
mov eax, dword [ebp - 0x32c]
sar eax, 1
jns 0x729915
adc eax, 0
add eax, eax
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
and eax, 0x80000003
jns 0x729929
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x729936
mov dword [ebp - 0x4c], 2
jmp 0x72993b
xor eax, eax
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x310]
add ecx, dword [ebp - 0x4c]
dec ecx
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax]
call dword [esi + 0x64]
jmp 0x729982
cmp dword [ebp - 0x4c], 2
jne 0x72995f
xor eax, eax
mov dword [ebp - 0x4c], eax
jmp 0x729966
mov dword [ebp - 0x4c], 2
mov ecx, dword [ebp - 0x310]
add ecx, dword [ebp - 0x4c]
dec ecx
mov edx, dword [ebp - 0x50]
add edx, 2
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax]
call dword [esi + 0x60]
add dword [ebp - 0x50], 2
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x324]
jl 0x729952
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x68]
and eax, 0x20000
cmp eax, 0x20000
je 0x7299b9
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x324], eax
jmp 0x7299ce
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x32c]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x320], eax
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x328], eax
jmp 0x729bb7
lea esi, [ebp - 0x31c]
lea edi, [ebp - 0x32c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x68]
or eax, 0x400
push eax
lea eax, [ebp - 0x32c]
push eax
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 4]
call fcn.004096e8
push eax
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.user32.dll_DrawTextExW
mov eax, dword [ebp - 0x328]
cmp eax, dword [ebp + 0x24]
jge 0x729b03
mov eax, dword [ebp + 0x24]
cmp eax, dword [ebp - 0x320]
jge 0x729b03
mov eax, dword [ebp + 0x44]
mov eax, dword [eax]
cmp eax, dword [ebp + 0x28]
jge 0x729b03
mov eax, dword [ebp - 0x320]
push eax
lea eax, [ebp - 0x34c]
push eax
mov eax, dword [ebp + 0x44]
mov eax, dword [eax]
mov ecx, dword [ebp + 0x28]
mov edx, dword [ebp - 0x328]
call fcn.0040e324
mov eax, dword [ebp + 0x4c]
lea esi, [ebp - 0x34c]
lea edi, [eax - 0x84]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 0x4c]
add eax, 0xffffffdc
xor ecx, ecx
mov edx, 0x14
call fcn.00405c80
mov eax, dword [ebp + 0x4c]
mov dword [eax - 0x24], 0x14
mov eax, dword [ebp + 0x4c]
add eax, 0xffffffd0
push eax
push 0
mov eax, dword [ebp + 0x4c]
add eax, 0xffffffd8
push eax
mov eax, dword [ebp + 0x44]
mov edx, dword [ebp + 0x28]
sub edx, dword [eax]
push edx
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 4]
call fcn.004096e8
push eax
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetTextExtentExPointW
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x28]
cmp eax, dword [ebp - 0x6c]
jne 0x729af4
mov eax, dword [ebp + 0x4c]
mov edx, dword [ebp - 0x6c]
add dword [eax - 0x88], edx
jmp 0x729b03
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x28]
mov edx, dword [ebp + 0x4c]
add dword [edx - 0x88], eax
mov eax, dword [ebp - 0x324]
sub eax, dword [ebp - 0x32c]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp + 0x44]
mov edx, dword [ebp - 0x74]
add dword [eax], edx
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x68]
and eax, 0x20000
cmp eax, 0x20000
jne 0x729b40
mov eax, dword [ebp - 0x314]
sub eax, dword [ebp + 0x28]
sub eax, dword [ebp - 0x32c]
mov dword [ebp - 0x30], eax
jmp 0x729b4c
mov eax, dword [ebp + 0x28]
sub eax, dword [ebp - 0x32c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp + 0x28]
sub eax, dword [ebp - 0x32c]
mov edx, dword [ebp + 0x44]
mov edx, dword [edx]
sub edx, dword [ebp - 0x74]
cmp eax, edx
jl 0x729bb7
mov eax, dword [ebp + 0x28]
sub eax, dword [ebp - 0x32c]
mov edx, dword [ebp + 0x44]
cmp eax, dword [edx]
jg 0x729bb7
mov eax, dword [ebp + 0x4c]
cmp byte [eax - 0x69], 0
je 0x729bb7
mov eax, dword [ebp + 0x20]
mov byte [eax], 1
mov eax, dword [ebp + 0x24]
cmp eax, dword [ebp - 0x328]
jle 0x729bb7
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp + 0x4c]
mov edx, dword [edx - 0x70]
call fcn.00408b28
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x38]
mov edx, dword [ebp + 0x4c]
mov edx, dword [edx - 0x48]
call fcn.00408b28
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0x89], 1
mov eax, dword [ebp - 0x314]
sub eax, dword [ebp - 0x31c]
mov edx, dword [ebp + 0x4c]
sub eax, dword [edx - 0x90]
mov edx, dword [ebp + 0x44]
cmp eax, dword [edx]
jg 0x729bf1
mov eax, dword [ebp - 0x314]
sub eax, dword [ebp - 0x31c]
mov edx, dword [ebp + 0x4c]
sub eax, dword [edx - 0x90]
cmp eax, dword [ebp - 0x74]
jle 0x729bf1
xor eax, eax
jmp 0x729bf3
mov al, 1
mov byte [ebp - 0x77], al
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 4]
call fcn.004098fc
cmp byte [ebp - 0x77], 0
jne 0x729c14
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x5c], 0
jne 0x729cbe
lea eax, [ebp - 0x350]
push eax
mov eax, dword [ebx]
mov ecx, dword [ebp - 0x6c]
mov edx, 1
call fcn.00409b24
mov edx, dword [ebp - 0x350]
lea eax, [ebp - 8]
call fcn.004098fc
mov eax, ebx
mov ecx, dword [ebp - 0x6c]
mov edx, 1
call fcn.00409b6c
mov eax, dword [ebp - 4]
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
je 0x729c6a
mov eax, dword [ebp - 0xb4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x6c]
jl 0x729cb7
lea eax, [ebp - 0x354]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 4]
call fcn.00409b24
mov eax, dword [ebp - 0x354]
mov edx, 0x72f854
call fcn.00409aec
jne 0x729cb0
mov edx, 0x72f864
mov eax, dword [ebp - 0x1c]
call fcn.004e9e70
mov dword [ebp - 0x28], eax
jmp 0x729cca
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x729cca
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x729cca
mov byte [ebp - 0x1d], 1
mov eax, dword [ebp + 0x44]
mov edx, dword [ebp - 0x74]
sub dword [eax], edx
mov edx, dword [ebx]
mov ecx, 1
mov eax, 0x72f874
call fcn.00409d34
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jne 0x729d16
mov eax, dword [ebx]
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
je 0x729d06
mov eax, dword [ebp - 0xb8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 2
jg 0x729d16
mov eax, ebx
call fcn.00408748
cmp byte [ebp - 0x1d], 0
jne 0x72f611
cmp dword [ebp - 0x44], 1
jne 0x72f611
mov eax, dword [ebx]
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
je 0x729d4c
mov eax, dword [ebp - 0xbc]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jle 0x72f611
mov eax, dword [ebx]
cmp word [eax + 2], 0x2f
jne 0x729d94
mov eax, dword [ebx]
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
je 0x729d84
mov eax, dword [ebp - 0xc0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 3
setg byte [ebp - 0xc1]
jmp 0x729d9b
mov byte [ebp - 0xc1], 0
cmp byte [ebp - 0xc1], 0
je 0x72a5bc
mov eax, dword [ebx]
movzx eax, word [eax + 4]
mov word [ebp - 0xc4], ax
movzx eax, word [ebp - 0xc4]
mov word [ebp - 0xc6], ax
movzx eax, word [ebp - 0xc4]
add eax, 0xffffff9f
sub ax, 0x1a
jae 0x729de5
movzx eax, word [ebp - 0xc4]
and ax, 0xffdf
mov word [ebp - 0xc6], ax
movzx eax, word [ebp - 0xc6]
add eax, 0xffffffbf
cmp eax, 0x19
ja case.0x72a60c.67
jmp dword [eax*4 + 0x729dff]
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0x91], 0
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x60], 0
je 0x729e8e
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp + 0x4c]
mov edx, dword [edx + 0x2c]
cmp eax, dword [edx]
jne 0x729f2a
cmp byte [ebp + 0x48], 0
jne 0x729f2a
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x21]
mov byte [ebp - 0xcd], al
movzx edx, byte [0x72f878]
not edx
and dl, byte [ebp - 0xcd]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9390
mov eax, dword [ebp + 0x4c]
cmp dword [eax + 0x4c], 0x1fffffff
je 0x729f0d
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax - 0x98]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
call fcn.004e9b64
mov eax, dword [ebp + 0x4c]
cmp dword [eax - 0x98], 0x1fffffff
jne 0x729f0d
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dl, 1
call fcn.004e9ce4
mov eax, dword [ebp + 0x4c]
cmp dword [eax + 0x48], 0x1fffffff
je 0x729f2a
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax + 0x48]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e8fb8
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x68], 0
jne 0x729f4a
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x9c]
mov edx, dword [eax + 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e8fb8
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0x69], 0
mov eax, dword [ebp + 0x4c]
cmp byte [eax - 0x89], 0
je 0x729fe2
mov eax, dword [ebp + 0x4c]
mov edx, dword [ebp - 0x310]
mov dword [eax - 0xa0], edx
mov eax, dword [ebp + 0x44]
mov eax, dword [eax]
add eax, dword [ebp - 0x31c]
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xa4], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xa8]
cmp eax, dword [ebp - 0x318]
je 0x729fb3
mov eax, dword [ebp + 0x4c]
mov edx, dword [ebp - 0x31c]
mov dword [eax - 0xac], edx
mov eax, dword [ebp + 0x4c]
mov edx, dword [ebp - 0x318]
mov dword [eax - 0xa8], edx
mov eax, dword [ebp + 0x4c]
mov edx, dword [ebp + 0x4c]
mov edx, dword [edx + 0x24]
lea esi, [eax - 0xac]
mov edi, edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x2c]
mov eax, dword [eax]
mov edx, dword [ebp + 0x4c]
mov edx, dword [edx + 0x28]
mov dword [edx], eax
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0x89], 0
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x80]
mov edx, dword [ebp + 0x4c]
mov edx, dword [edx + 0x2c]
mov edx, dword [edx]
dec edx
cmp eax, edx
jne case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
mov edx, dword [ebp - 0x32c]
mov dword [eax - 0x38], edx
mov eax, dword [ebp + 0x34]
mov edx, dword [ebp - 0x320]
sub edx, dword [eax]
mov eax, dword [ebp + 0x4c]
mov dword [eax - 0x34], edx
mov edx, 0x72f888
mov eax, dword [ebp - 0x1c]
call fcn.004e9e50
mov edx, dword [ebp + 0x4c]
mov edx, dword [edx - 0x34]
sub edx, eax
mov eax, dword [ebp + 0x4c]
mov dword [eax - 0x3c], edx
mov eax, dword [ebp + 0x4c]
add eax, 0xffffffc0
xor ecx, ecx
mov edx, 1
call fcn.0040e460
cmp byte [ebp + 0x48], 0
jne case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
lea edx, [eax - 0x40]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
jmp case.0x72a60c.67
cmp byte [ebp + 0x48], 0
jne case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0x71], 0
jmp case.0x72a60c.67
mov eax, dword [ebx]
cmp word [eax + 6], 0x3e
je 0x72a09e
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x9c]
mov edx, dword [eax + 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e8fb8
jmp case.0x72a60c.67
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x21]
mov byte [ebp - 0xd5], al
movzx edx, byte [0x72f890]
not edx
and dl, byte [ebp - 0xd5]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9390
jmp case.0x72a60c.67
mov eax, dword [ebx]
movzx eax, word [eax + 6]
mov word [ebp - 0xd8], ax
movzx eax, word [ebp - 0xd8]
mov word [ebp - 0xda], ax
movzx eax, word [ebp - 0xd8]
add eax, 0xffffff9f
sub ax, 0x1a
jae 0x72a119
movzx eax, word [ebp - 0xd8]
and ax, 0xffdf
mov word [ebp - 0xda], ax
movzx eax, word [ebp - 0xda]
mov word [ebp - 0x76], ax
cmp word [ebp - 0x76], 0x54
jne 0x72a234
mov eax, dword [ebx]
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
je 0x72a151
mov eax, dword [ebp - 0xe0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 5
jle 0x72a1a8
mov eax, dword [ebx]
movzx eax, word [eax + 0xa]
mov word [ebp - 0xe2], ax
movzx eax, word [ebp - 0xe2]
mov word [ebp - 0xe4], ax
movzx eax, word [ebp - 0xe2]
add eax, 0xffffff9f
sub ax, 0x1a
jae 0x72a197
movzx eax, word [ebp - 0xe2]
and ax, 0xffdf
mov word [ebp - 0xe4], ax
cmp word [ebp - 0xe4], 0x4f
sete byte [ebp - 0xe5]
jmp 0x72a1af
mov byte [ebp - 0xe5], 0
cmp byte [ebp - 0xe5], 0
je 0x72a1f6
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xec]
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x21]
mov byte [ebp - 0xed], al
movzx edx, byte [0x72f890]
not edx
and dl, byte [ebp - 0xed]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9390
jmp case.0x72a60c.67
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x21]
mov byte [ebp - 0xf5], al
movzx edx, byte [0x72f894]
not edx
and dl, byte [ebp - 0xf5]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9390
jmp case.0x72a60c.67
cmp word [ebp - 0x76], 0x55
jne 0x72a24e
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0x62], 0
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0x61], 0
jmp case.0x72a60c.67
cmp word [ebp - 0x76], 0x50
jne 0x72a27b
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax - 0xb0]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
call fcn.004e9b64
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dl, 1
call fcn.004e9ce4
jmp case.0x72a60c.67
cmp word [ebp - 0x76], 0x48
jne 0x72a28e
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0x64], 0
jmp case.0x72a60c.67
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x21]
mov byte [ebp - 0xfd], al
movzx edx, byte [0x72f894]
not edx
and dl, byte [ebp - 0xfd]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9390
jmp case.0x72a60c.67
lea edx, [ebp - 0x358]
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x9c]
call fcn.004e9290
mov edx, dword [ebp - 0x358]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e92ec
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x9c]
call fcn.004e9348
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9364
cmp byte [ebp + 0x48], 0
jne case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x68], 0
jne case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x9c]
mov edx, dword [eax + 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e8fb8
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax - 0xb0]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
call fcn.004e9b64
mov eax, dword [ebp + 0x4c]
cmp dword [eax - 0xb0], 0x1fffffff
jne case.0x72a60c.67
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dl, 1
call fcn.004e9ce4
jmp case.0x72a60c.67
mov eax, dword [ebx]
movzx eax, word [eax + 6]
mov word [ebp - 0x100], ax
movzx eax, word [ebp - 0x100]
mov word [ebp - 0x102], ax
movzx eax, word [ebp - 0x100]
add eax, 0xffffff9f
sub ax, 0x1a
jae 0x72a3b0
movzx eax, word [ebp - 0x100]
and ax, 0xffdf
mov word [ebp - 0x102], ax
cmp word [ebp - 0x102], 0x49
jne case.0x72a60c.67
cmp byte [ebp + 0x48], 0
jne case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax - 0xb4]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e8fb8
mov eax, dword [ebp + 0x4c]
movzx edx, byte [eax - 0xb5]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9390
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax - 0xbc]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
call fcn.004e9b64
mov eax, dword [ebp + 0x4c]
cmp dword [eax - 0xbc], 0x1fffffff
jne case.0x72a60c.67
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dl, 1
call fcn.004e9ce4
jmp case.0x72a60c.67
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x21]
mov byte [ebp - 0x109], al
movzx edx, byte [0x72f898]
not edx
and dl, byte [ebp - 0x109]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9390
jmp case.0x72a60c.67
mov byte [ebp - 0x1d], 1
jmp case.0x72a60c.67
mov eax, dword [ebx]
cmp word [eax + 6], 0x3e
je 0x72a4a8
mov eax, dword [ebp + 0x4c]
cmp dword [eax - 0xc0], 0
jle 0x72a4a8
mov eax, dword [ebp + 0x4c]
dec dword [eax - 0xc0]
cmp byte [ebp + 0x48], 0
jne case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0xc1], 0
jmp case.0x72a60c.67
mov eax, dword [ebp + 0x14]
xor edx, edx
mov dword [eax], edx
jmp case.0x72a60c.67
mov byte [ebp - 0x1d], 1
movzx eax, byte [ebp + 0x48]
xor al, 1
test al, al
je 0x72a4cf
mov eax, dword [ebp + 0x4c]
mov dword [eax - 0xc8], 0x3f800000
movzx eax, byte [ebp + 0x48]
xor al, 1
test al, al
je 0x72a4e0
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0x49], 0
cmp byte [ebp + 0x48], 0
jne case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x74], 0
jne case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x68], 0
jne case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax - 0xcc]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
call fcn.004e9b64
mov eax, dword [ebp + 0x4c]
cmp dword [eax - 0xcc], 0x1fffffff
jne case.0x72a60c.67
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dl, 1
call fcn.004e9ce4
jmp case.0x72a60c.67
mov eax, dword [ebx]
cmp word [eax + 6], 0x3e
je 0x72a560
mov eax, dword [ebp + 0x4c]
cmp dword [eax - 0xc0], 0
jle 0x72a560
mov eax, dword [ebp + 0x4c]
dec dword [eax - 0xc0]
jmp case.0x72a60c.67
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x21]
mov byte [ebp - 0x111], al
movzx edx, byte [0x72f878]
not edx
and dl, byte [ebp - 0x111]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9390
jmp case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
push eax
mov eax, dword [ebp - 0x1c]
call fcn.00729394
pop ecx
jmp case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0x63], 0
jmp case.0x72a60c.67
mov eax, dword [ebx]
movzx eax, word [eax + 2]
mov word [ebp - 0x114], ax
movzx eax, word [ebp - 0x114]
mov word [ebp - 0x116], ax
movzx eax, word [ebp - 0x114]
add eax, 0xffffff9f
sub ax, 0x1a
jae 0x72a5f9
movzx eax, word [ebp - 0x114]
and ax, 0xffdf
mov word [ebp - 0x116], ax
movzx eax, word [ebp - 0x116]
add eax, 0xffffffbf
cmp eax, 0x19
ja case.0x72a60c.67
jmp dword [eax*4 + 0x72a613]
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0x91], 1
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov edx, dword [eax + 0x18]
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x9c]
call fcn.004e8fb8
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x80]
mov edx, dword [ebp + 0x4c]
mov edx, dword [edx + 0x2c]
cmp eax, dword [edx]
jne 0x72a6cd
cmp byte [ebp + 0x48], 0
jne 0x72a6cd
mov eax, dword [ebp + 0x4c]
mov edx, dword [ebp - 0x32c]
mov dword [eax - 0x40], edx
mov eax, dword [ebp + 0x4c]
mov edx, dword [ebp - 0x328]
mov dword [eax - 0x3c], edx
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x2c]
inc dword [eax]
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x60], 0
je 0x72a6f2
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp + 0x4c]
mov edx, dword [edx + 0x2c]
cmp eax, dword [edx]
jne 0x72a7d0
cmp byte [ebp + 0x48], 0
jne 0x72a7d0
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x21]
mov byte [ebp - 0x11d], al
movzx edx, byte [0x72f878]
or dl, byte [ebp - 0x11d]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9390
mov eax, dword [ebp + 0x4c]
cmp dword [eax + 0x4c], 0x1fffffff
je 0x72a7a1
cmp byte [ebp + 0x48], 0
jne 0x72a7a1
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0x98], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x20]
cmp al, 1
jne 0x72a790
mov eax, dword [ebp + 0x4c]
mov dword [eax - 0x98], 0x1fffffff
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax + 0x4c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
call fcn.004e9b64
mov eax, dword [ebp + 0x4c]
cmp dword [eax + 0x48], 0x1fffffff
je 0x72a7d0
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xd0], eax
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax + 0x48]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e8fb8
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x68], 0
jne 0x72a80f
mov eax, dword [ebp + 0x4c]
cmp dword [eax + 0x48], 0x1fffffff
je 0x72a7fe
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp + 0x4c]
mov edx, dword [edx + 0x2c]
cmp eax, dword [edx]
jne 0x72a7fe
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x60], 0
jne 0x72a80f
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax + 0x50]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e8fb8
lea eax, [ebp - 0x35c]
push eax
mov edx, dword [ebx]
mov ecx, 1
mov eax, 0x72f8a8
call fcn.00409d34
mov ecx, eax
dec ecx
mov eax, dword [ebx]
mov edx, 3
call fcn.00409b24
mov eax, dword [ebp - 0x35c]
lea edx, [ebp - 0xc]
call fcn.00420f18
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov eax, 0x72f8b8
call fcn.00729210
test eax, eax
jle 0x72a940
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebx]
mov ecx, 1
mov eax, 0x72f8d0
call fcn.00409d34
mov ecx, eax
dec ecx
mov eax, dword [ebx]
mov edx, 3
call fcn.00409b24
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
je 0x72a8a3
mov eax, dword [ebp - 0x12c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x44]
add edx, 4
mov ecx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
je 0x72a8de
mov eax, dword [ebp - 0x130]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x130], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72f8e0
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72f8f0
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
mov eax, dword [ebp + 0x4c]
add eax, 0xffffff90
mov edx, dword [ebp - 0x10]
call fcn.00408b70
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0x69], 1
lea eax, [ebp - 0x360]
push eax
mov edx, dword [ebx]
mov ecx, 1
mov eax, 0x72f900
call fcn.00409d34
mov ecx, eax
dec ecx
mov eax, dword [ebx]
mov edx, 3
call fcn.00409b24
mov eax, dword [ebp - 0x360]
lea edx, [ebp - 0xc]
call fcn.00420f18
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov eax, 0x72f910
call fcn.00729210
test eax, eax
jle 0x72aa6c
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebx]
mov ecx, 1
mov eax, 0x72f928
call fcn.00409d34
mov ecx, eax
dec ecx
mov eax, dword [ebx]
mov edx, 3
call fcn.00409b24
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
je 0x72a9d4
mov eax, dword [ebp - 0x134]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x134], eax
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x44]
add edx, 5
mov ecx, dword [ebp - 0x134]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
je 0x72aa0f
mov eax, dword [ebp - 0x138]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x138], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72f938
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72f948
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
mov eax, dword [ebp + 0x4c]
add eax, 0xffffffb8
mov edx, dword [ebp - 0x10]
call fcn.00408b70
jmp 0x72aa77
mov eax, dword [ebp + 0x4c]
add eax, 0xffffffb8
call fcn.00408748
mov eax, dword [ebp + 0x44]
mov eax, dword [eax]
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xac], eax
mov eax, dword [ebp + 0x4c]
mov edx, dword [ebp - 0x318]
mov dword [eax - 0xa8], edx
jmp case.0x72a60c.67
mov eax, dword [ebx]
movzx eax, word [eax + 4]
mov word [ebp - 0x13a], ax
movzx eax, word [ebp - 0x13a]
mov word [ebp - 0x13c], ax
movzx eax, word [ebp - 0x13a]
add eax, 0xffffff9f
sub ax, 0x1a
jae 0x72aad6
movzx eax, word [ebp - 0x13a]
and ax, 0xffdf
mov word [ebp - 0x13c], ax
movzx eax, word [ebp - 0x13c]
mov word [ebp - 0x76], ax
movzx eax, word [ebp - 0x76]
sub ax, 0x3e
je 0x72ab0a
sub ax, 0xe
je 0x72ab78
sub ax, 3
je 0x72ab9e
sub ax, 3
je 0x72ab46
jmp case.0x72a60c.67
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x140]
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x21]
mov byte [ebp - 0x141], al
movzx edx, byte [0x72f890]
or dl, byte [ebp - 0x141]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9390
jmp case.0x72a60c.67
mov byte [ebp - 0x1d], 1
mov eax, dword [ebp + 0x40]
cmp dword [eax], 0
jne 0x72ab5d
mov eax, dword [ebp + 0x40]
mov edx, dword [ebp - 0x8c]
mov dword [eax], edx
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x3c]
mov edx, 0x72f958
call fcn.004098fc
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x3c]
jmp case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x64], 0
jne case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax - 0xd4]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e8fb8
jmp case.0x72a60c.67
lea eax, [ebp - 0x364]
push eax
mov edx, dword [ebx]
mov ecx, 1
mov eax, 0x72f968
call fcn.00409d34
mov ecx, eax
mov eax, dword [ebx]
mov edx, 1
call fcn.00409b24
mov edx, dword [ebp - 0x364]
lea eax, [ebp - 8]
call fcn.004098fc
cmp byte [ebp + 0x48], 0
jne case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x68], 0
jne case.0x72a60c.67
lea eax, [ebp - 0x368]
push eax
mov edx, dword [ebx]
mov ecx, 1
mov eax, 0x72f978
call fcn.00409d34
mov ecx, eax
dec ecx
mov eax, dword [ebx]
mov edx, 6
call fcn.00409b24
mov eax, dword [ebp - 0x368]
lea edx, [ebp - 0xc]
call fcn.00420f18
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, 0x72f988
call fcn.00409d34
test eax, eax
jle 0x72b21d
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0
je 0x72ac5b
mov eax, dword [ebp - 0x148]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, 0x72f9ac
call fcn.00409d34
mov edx, eax
add edx, 0xa
mov ecx, dword [ebp - 0x148]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0
je 0x72aca7
mov eax, dword [ebp - 0x14c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x14c], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72f9d0
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72f9e0
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea edx, [ebp - 0x36c]
mov eax, dword [ebp - 0x10]
call fcn.00420f18
mov edx, dword [ebp - 0x36c]
mov ecx, 1
mov eax, 0x72f9f0
call fcn.00409d34
test eax, eax
jle 0x72aea5
lea eax, [ebp - 0x10]
mov ecx, 4
mov edx, 1
call fcn.00409b6c
mov eax, dword [ebp + 0x4c]
cmp dword [eax + 0x8c], 0
je 0x72aea5
mov eax, dword [ebp - 0x10]
call fcn.00728f68
mov esi, eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
call fcn.005c81a8
cmp esi, eax
jge 0x72aea5
push 0x60
push 0x58
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
mov eax, dword [eax + 0x44]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xdc], eax
push 0x60
push 0x5a
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
mov eax, dword [eax + 0x40]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xd8], eax
cmp byte [ebp + 0x48], 0
jne 0x72adf5
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x6c], 0
jne 0x72adf5
mov eax, dword [ebp - 0x328]
push eax
mov eax, dword [ebp - 0x10]
call fcn.00728f68
push eax
push 1
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
mov ecx, dword [ebp - 0x32c]
mov edx, dword [ebp - 0x1c]
call fcn.005c8b58
cmp byte [ebp + 0x48], 0
jne 0x72aea5
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x6c], 0
je 0x72aea5
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
fild dword [eax + 0x44]
mov eax, dword [ebp + 0x4c]
fmul qword [eax + 0x54]
call fcn.00405668
add eax, dword [ebp - 0x32c]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
fild dword [eax + 0x40]
mov eax, dword [ebp + 0x4c]
fmul qword [eax + 0x54]
call fcn.00405668
add eax, dword [ebp - 0x328]
mov dword [ebp - 0x320], eax
mov dl, 1
mov eax, dword [0x4e6d30]
call fcn.004efc38
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x10]
call fcn.00728f68
mov edx, eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
mov ecx, dword [ebp - 0x58]
call fcn.005c80c8
mov ecx, dword [ebp - 0x58]
lea edx, [ebp - 0x32c]
mov eax, dword [ebp - 0x1c]
call fcn.00727e88
mov eax, dword [ebp - 0x58]
call fcn.004069e4
lea esi, [ebp - 0x31c]
lea edi, [ebp - 0x32c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea edx, [ebp - 0x370]
mov eax, dword [ebp - 0x10]
call fcn.00420f18
mov edx, dword [ebp - 0x370]
mov ecx, 1
mov eax, 0x72fa08
call fcn.00409d34
test eax, eax
jle 0x72af8c
lea eax, [ebp - 0x10]
mov ecx, 5
mov edx, 1
call fcn.00409b6c
mov eax, dword [ebp - 0x10]
push eax
push 0
movzx eax, byte [ebp + 0x48]
xor al, 1
push eax
mov eax, dword [ebp + 0x4c]
movzx eax, byte [eax + 0x6c]
push eax
mov eax, dword [ebp + 0x4c]
push dword [eax + 0x58]
push dword [eax + 0x54]
lea eax, [ebp - 0x378]
push eax
mov ecx, dword [ebp - 0x328]
mov edx, dword [ebp - 0x32c]
mov eax, dword [ebp - 0x1c]
call fcn.00727f88
mov eax, dword [ebp + 0x4c]
mov edx, dword [ebp - 0x378]
mov dword [eax - 0xdc], edx
mov edx, dword [ebp - 0x374]
mov dword [eax - 0xd8], edx
push 0x60
push 0x58
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xdc]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xdc], eax
push 0x60
push 0x5a
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xd8]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xd8], eax
lea edx, [ebp - 0x37c]
mov eax, dword [ebp - 0x10]
call fcn.00420f18
mov edx, dword [ebp - 0x37c]
mov ecx, 1
mov eax, 0x72fa20
call fcn.00409d34
test eax, eax
jle 0x72b073
lea eax, [ebp - 0x10]
mov ecx, 5
mov edx, 1
call fcn.00409b6c
mov eax, dword [ebp - 0x10]
push eax
push 1
movzx eax, byte [ebp + 0x48]
xor al, 1
push eax
mov eax, dword [ebp + 0x4c]
movzx eax, byte [eax + 0x6c]
push eax
mov eax, dword [ebp + 0x4c]
push dword [eax + 0x58]
push dword [eax + 0x54]
lea eax, [ebp - 0x378]
push eax
mov ecx, dword [ebp - 0x328]
mov edx, dword [ebp - 0x32c]
mov eax, dword [ebp - 0x1c]
call fcn.00727f88
mov eax, dword [ebp + 0x4c]
mov edx, dword [ebp - 0x378]
mov dword [eax - 0xdc], edx
mov edx, dword [ebp - 0x374]
mov dword [eax - 0xd8], edx
push 0x60
push 0x58
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xdc]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xdc], eax
push 0x60
push 0x5a
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xd8]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xd8], eax
xor eax, eax
mov dword [ebp - 0x54], eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72fa38
call fcn.00409d34
test eax, eax
jne 0x72b0a8
mov eax, dword [ebp + 0x4c]
cmp dword [eax + 0x1c], 0
je 0x72b0a8
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x1c]
mov edx, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
mov dword [ebp - 0x54], eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72fa48
call fcn.00409d34
test eax, eax
jle 0x72b11e
mov eax, dword [ebp + 0x4c]
cmp dword [eax + 0x20], 0
je 0x72b11e
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 0x10]
call fcn.007278e8
test eax, eax
jne 0x72b102
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x20]
call fcn.00727898
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
mov byte [eax + 0x4d], 0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x90]
call fcn.00727490
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 0x10]
call fcn.007278e8
mov edx, dword [0x72556c]
call fcn.00406c44
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
je 0x72b21d
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x20]
test al, al
jne 0x72b21d
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x30]
test eax, eax
jle 0x72b21d
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x24]
test eax, eax
jle 0x72b21d
xor eax, eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x54]
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x58]
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x5c]
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x60]
push eax
call sub.gdi32.dll_CreateRectRgn
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xe0], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xe0]
push eax
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_SelectClipRgn
jmp 0x72b1ed
xor eax, eax
mov dword [ebp - 0x34], eax
jmp 0x72b1d1
mov eax, dword [ebp - 0x54]
push eax
mov eax, dword [ebp + 0x4c]
mov ecx, dword [eax - 0x5c]
add ecx, dword [ebp - 0x38]
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax - 0x60]
add edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax]
call dword [esi + 0x44]
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x30]
add dword [ebp - 0x34], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x58]
mov edx, dword [ebp + 0x4c]
sub eax, dword [edx - 0x60]
cmp eax, dword [ebp - 0x34]
jg 0x72b1a8
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x24]
add dword [ebp - 0x38], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x54]
mov edx, dword [ebp + 0x4c]
sub eax, dword [edx - 0x5c]
cmp eax, dword [ebp - 0x38]
jg 0x72b1a1
push 0
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_SelectClipRgn
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xe0]
push eax
call sub.gdi32.dll_DeleteObject
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, 0x72fa5c
call fcn.00409d34
test eax, eax
jle 0x72b81c
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
je 0x72b25a
mov eax, dword [ebp - 0x150]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, 0x72fa7c
call fcn.00409d34
mov edx, eax
add edx, 0xa
mov ecx, dword [ebp - 0x150]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
je 0x72b2a6
mov eax, dword [ebp - 0x154]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x154], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72fa9c
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x154]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72faac
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea edx, [ebp - 0x380]
mov eax, dword [ebp - 0x10]
call fcn.00420f18
mov edx, dword [ebp - 0x380]
mov ecx, 1
mov eax, 0x72fabc
call fcn.00409d34
test eax, eax
jle 0x72b4a4
lea eax, [ebp - 0x10]
mov ecx, 4
mov edx, 1
call fcn.00409b6c
mov eax, dword [ebp + 0x4c]
cmp dword [eax + 0x8c], 0
je 0x72b4a4
mov eax, dword [ebp - 0x10]
call fcn.00728f68
mov esi, eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
call fcn.005c81a8
cmp esi, eax
jge 0x72b4a4
push 0x60
push 0x58
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
mov eax, dword [eax + 0x44]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xdc], eax
push 0x60
push 0x5a
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
mov eax, dword [eax + 0x40]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xd8], eax
cmp byte [ebp + 0x48], 0
jne 0x72b3f4
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x6c], 0
jne 0x72b3f4
mov eax, dword [ebp - 0x328]
push eax
mov eax, dword [ebp - 0x10]
call fcn.00728f68
push eax
push 1
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
mov ecx, dword [ebp - 0x32c]
mov edx, dword [ebp - 0x1c]
call fcn.005c8b58
cmp byte [ebp + 0x48], 0
jne 0x72b4a4
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x6c], 0
je 0x72b4a4
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
fild dword [eax + 0x44]
mov eax, dword [ebp + 0x4c]
fmul qword [eax + 0x54]
call fcn.00405668
add eax, dword [ebp - 0x32c]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
fild dword [eax + 0x40]
mov eax, dword [ebp + 0x4c]
fmul qword [eax + 0x54]
call fcn.00405668
add eax, dword [ebp - 0x328]
mov dword [ebp - 0x320], eax
mov dl, 1
mov eax, dword [0x4e6d30]
call fcn.004efc38
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x10]
call fcn.00728f68
mov edx, eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
mov ecx, dword [ebp - 0x58]
call fcn.005c80c8
mov ecx, dword [ebp - 0x58]
lea edx, [ebp - 0x32c]
mov eax, dword [ebp - 0x1c]
call fcn.00727e88
mov eax, dword [ebp - 0x58]
call fcn.004069e4
lea esi, [ebp - 0x31c]
lea edi, [ebp - 0x32c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea edx, [ebp - 0x384]
mov eax, dword [ebp - 0x10]
call fcn.00420f18
mov edx, dword [ebp - 0x384]
mov ecx, 1
mov eax, 0x72fad4
call fcn.00409d34
test eax, eax
jle 0x72b58b
lea eax, [ebp - 0x10]
mov ecx, 5
mov edx, 1
call fcn.00409b6c
mov eax, dword [ebp - 0x10]
push eax
push 0
movzx eax, byte [ebp + 0x48]
xor al, 1
push eax
mov eax, dword [ebp + 0x4c]
movzx eax, byte [eax + 0x6c]
push eax
mov eax, dword [ebp + 0x4c]
push dword [eax + 0x58]
push dword [eax + 0x54]
lea eax, [ebp - 0x378]
push eax
mov ecx, dword [ebp - 0x328]
mov edx, dword [ebp - 0x32c]
mov eax, dword [ebp - 0x1c]
call fcn.00727f88
mov eax, dword [ebp + 0x4c]
mov edx, dword [ebp - 0x378]
mov dword [eax - 0xdc], edx
mov edx, dword [ebp - 0x374]
mov dword [eax - 0xd8], edx
push 0x60
push 0x58
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xdc]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xdc], eax
push 0x60
push 0x5a
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xd8]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xd8], eax
lea edx, [ebp - 0x388]
mov eax, dword [ebp - 0x10]
call fcn.00420f18
mov edx, dword [ebp - 0x388]
mov ecx, 1
mov eax, 0x72faec
call fcn.00409d34
test eax, eax
jle 0x72b672
lea eax, [ebp - 0x10]
mov ecx, 5
mov edx, 1
call fcn.00409b6c
mov eax, dword [ebp - 0x10]
push eax
push 1
movzx eax, byte [ebp + 0x48]
xor al, 1
push eax
mov eax, dword [ebp + 0x4c]
movzx eax, byte [eax + 0x6c]
push eax
mov eax, dword [ebp + 0x4c]
push dword [eax + 0x58]
push dword [eax + 0x54]
lea eax, [ebp - 0x378]
push eax
mov ecx, dword [ebp - 0x328]
mov edx, dword [ebp - 0x32c]
mov eax, dword [ebp - 0x1c]
call fcn.00727f88
mov eax, dword [ebp + 0x4c]
mov edx, dword [ebp - 0x378]
mov dword [eax - 0xdc], edx
mov edx, dword [ebp - 0x374]
mov dword [eax - 0xd8], edx
push 0x60
push 0x58
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xdc]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xdc], eax
push 0x60
push 0x5a
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xd8]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xd8], eax
xor eax, eax
mov dword [ebp - 0x54], eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72fb04
call fcn.00409d34
test eax, eax
jne 0x72b6a7
mov eax, dword [ebp + 0x4c]
cmp dword [eax + 0x1c], 0
je 0x72b6a7
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x1c]
mov edx, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
mov dword [ebp - 0x54], eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72fb14
call fcn.00409d34
test eax, eax
jle 0x72b71d
mov eax, dword [ebp + 0x4c]
cmp dword [eax + 0x20], 0
je 0x72b71d
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 0x10]
call fcn.007278e8
test eax, eax
jne 0x72b701
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x20]
call fcn.00727898
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
mov byte [eax + 0x4d], 0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x94]
call fcn.00727490
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 0x10]
call fcn.007278e8
mov edx, dword [0x72556c]
call fcn.00406c44
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
je 0x72b81c
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x20]
test al, al
jne 0x72b81c
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x30]
test eax, eax
jle 0x72b81c
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x24]
test eax, eax
jle 0x72b81c
xor eax, eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x54]
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x58]
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x5c]
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x60]
push eax
call sub.gdi32.dll_CreateRectRgn
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xe0], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xe0]
push eax
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_SelectClipRgn
jmp 0x72b7ec
xor eax, eax
mov dword [ebp - 0x34], eax
jmp 0x72b7d0
mov eax, dword [ebp - 0x54]
push eax
mov eax, dword [ebp + 0x4c]
mov ecx, dword [eax - 0x5c]
add ecx, dword [ebp - 0x38]
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax - 0x60]
add edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax]
call dword [esi + 0x44]
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x30]
add dword [ebp - 0x34], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x58]
mov edx, dword [ebp + 0x4c]
sub eax, dword [edx - 0x60]
cmp eax, dword [ebp - 0x34]
jg 0x72b7a7
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x24]
add dword [ebp - 0x38], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x54]
mov edx, dword [ebp + 0x4c]
sub eax, dword [edx - 0x5c]
cmp eax, dword [ebp - 0x38]
jg 0x72b7a0
push 0
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_SelectClipRgn
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xe0]
push eax
call sub.gdi32.dll_DeleteObject
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, 0x72fb28
call fcn.00409d34
test eax, eax
jle 0x72be46
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0
je 0x72b859
mov eax, dword [ebp - 0x158]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x158], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, 0x72fb4c
call fcn.00409d34
mov edx, eax
add edx, 0xa
mov ecx, dword [ebp - 0x158]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0
je 0x72b8a5
mov eax, dword [ebp - 0x15c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x15c], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72fb70
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72fb80
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea edx, [ebp - 0x38c]
mov eax, dword [ebp - 0x10]
call fcn.00420f18
mov edx, dword [ebp - 0x38c]
mov ecx, 1
mov eax, 0x72fb90
call fcn.00409d34
test eax, eax
jle 0x72baaf
lea eax, [ebp - 0x10]
mov ecx, 4
mov edx, 1
call fcn.00409b6c
mov eax, dword [ebp + 0x4c]
cmp dword [eax + 0x8c], 0
je 0x72baaf
mov eax, dword [ebp - 0x10]
call fcn.00728f68
mov esi, eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
call fcn.005c81a8
cmp esi, eax
jge 0x72baaf
push 0x60
push 0x58
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
mov eax, dword [eax + 0x44]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xdc], eax
push 0x60
push 0x5a
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
mov eax, dword [eax + 0x40]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xd8], eax
cmp byte [ebp + 0x48], 0
jne 0x72b9ff
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x6c], 0
jne 0x72b9ff
mov eax, dword [ebp - 0x328]
push eax
mov eax, dword [ebp - 0x10]
call fcn.00728f68
push eax
push 1
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
mov ecx, dword [ebp - 0x324]
sub ecx, dword [eax + 0x44]
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
mov edx, dword [ebp - 0x1c]
call fcn.005c8b58
cmp byte [ebp + 0x48], 0
jne 0x72baaf
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x6c], 0
je 0x72baaf
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
fild dword [eax + 0x44]
mov eax, dword [ebp + 0x4c]
fmul qword [eax + 0x54]
call fcn.00405668
add eax, dword [ebp - 0x32c]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
fild dword [eax + 0x40]
mov eax, dword [ebp + 0x4c]
fmul qword [eax + 0x54]
call fcn.00405668
add eax, dword [ebp - 0x328]
mov dword [ebp - 0x320], eax
mov dl, 1
mov eax, dword [0x4e6d30]
call fcn.004efc38
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x10]
call fcn.00728f68
mov edx, eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
mov ecx, dword [ebp - 0x58]
call fcn.005c80c8
mov ecx, dword [ebp - 0x58]
lea edx, [ebp - 0x32c]
mov eax, dword [ebp - 0x1c]
call fcn.00727e88
mov eax, dword [ebp - 0x58]
call fcn.004069e4
lea esi, [ebp - 0x31c]
lea edi, [ebp - 0x32c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea edx, [ebp - 0x390]
mov eax, dword [ebp - 0x10]
call fcn.00420f18
mov edx, dword [ebp - 0x390]
mov ecx, 1
mov eax, 0x72fba8
call fcn.00409d34
test eax, eax
jle 0x72bba2
lea eax, [ebp - 0x10]
mov ecx, 5
mov edx, 1
call fcn.00409b6c
mov eax, dword [ebp - 0x10]
push eax
push 0
movzx eax, byte [ebp + 0x48]
xor al, 1
push eax
mov eax, dword [ebp + 0x4c]
movzx eax, byte [eax + 0x6c]
push eax
mov eax, dword [ebp + 0x4c]
push dword [eax + 0x58]
push dword [eax + 0x54]
lea eax, [ebp - 0x378]
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
mov edx, dword [ebp - 0x324]
sub edx, dword [eax + 0x44]
mov ecx, dword [ebp - 0x328]
mov eax, dword [ebp - 0x1c]
call fcn.00727f88
mov eax, dword [ebp + 0x4c]
mov edx, dword [ebp - 0x378]
mov dword [eax - 0xdc], edx
mov edx, dword [ebp - 0x374]
mov dword [eax - 0xd8], edx
push 0x60
push 0x58
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xdc]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xdc], eax
push 0x60
push 0x5a
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xd8]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xd8], eax
lea edx, [ebp - 0x394]
mov eax, dword [ebp - 0x10]
call fcn.00420f18
mov edx, dword [ebp - 0x394]
mov ecx, 1
mov eax, 0x72fbc0
call fcn.00409d34
test eax, eax
jle 0x72bc95
lea eax, [ebp - 0x10]
mov ecx, 5
mov edx, 1
call fcn.00409b6c
mov eax, dword [ebp - 0x10]
push eax
push 1
movzx eax, byte [ebp + 0x48]
xor al, 1
push eax
mov eax, dword [ebp + 0x4c]
movzx eax, byte [eax + 0x6c]
push eax
mov eax, dword [ebp + 0x4c]
push dword [eax + 0x58]
push dword [eax + 0x54]
lea eax, [ebp - 0x378]
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
mov edx, dword [ebp - 0x324]
sub edx, dword [eax + 0x44]
mov ecx, dword [ebp - 0x328]
mov eax, dword [ebp - 0x1c]
call fcn.00727f88
mov eax, dword [ebp + 0x4c]
mov edx, dword [ebp - 0x378]
mov dword [eax - 0xdc], edx
mov edx, dword [ebp - 0x374]
mov dword [eax - 0xd8], edx
push 0x60
push 0x58
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xdc]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xdc], eax
push 0x60
push 0x5a
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xd8]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xd8], eax
xor eax, eax
mov dword [ebp - 0x54], eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72fbd8
call fcn.00409d34
test eax, eax
jne 0x72bcca
mov eax, dword [ebp + 0x4c]
cmp dword [eax + 0x1c], 0
je 0x72bcca
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x1c]
mov edx, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
mov dword [ebp - 0x54], eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72fbe8
call fcn.00409d34
test eax, eax
jle 0x72bd40
mov eax, dword [ebp + 0x4c]
cmp dword [eax + 0x20], 0
je 0x72bd40
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 0x10]
call fcn.007278e8
test eax, eax
jne 0x72bd24
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x20]
call fcn.00727898
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
mov byte [eax + 0x4d], 0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x98]
call fcn.00727490
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 0x10]
call fcn.007278e8
mov edx, dword [0x72556c]
call fcn.00406c44
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
je 0x72be46
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x20]
test al, al
jne 0x72be46
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x30]
test eax, eax
jle 0x72be46
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x24]
test eax, eax
jle 0x72be46
xor eax, eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x54]
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x58]
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x5c]
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x60]
push eax
call sub.gdi32.dll_CreateRectRgn
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xe0], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xe0]
push eax
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_SelectClipRgn
jmp 0x72be16
xor eax, eax
mov dword [ebp - 0x34], eax
jmp 0x72bdfa
mov eax, dword [ebp - 0x54]
push eax
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x30]
mov edx, dword [ebp + 0x4c]
mov edx, dword [edx - 0x58]
sub edx, eax
mov eax, dword [ebp + 0x4c]
mov ecx, dword [eax - 0x5c]
add ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax]
call dword [esi + 0x44]
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x30]
add dword [ebp - 0x34], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x58]
mov edx, dword [ebp + 0x4c]
sub eax, dword [edx - 0x60]
cmp eax, dword [ebp - 0x34]
jg 0x72bdca
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x24]
add dword [ebp - 0x38], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x54]
mov edx, dword [ebp + 0x4c]
sub eax, dword [edx - 0x5c]
cmp eax, dword [ebp - 0x38]
jg 0x72bdc3
push 0
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_SelectClipRgn
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xe0]
push eax
call sub.gdi32.dll_DeleteObject
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov eax, 0x72fbfc
call fcn.00729210
test eax, eax
jle case.0x72a60c.67
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0
je 0x72be81
mov eax, dword [ebp - 0x160]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x160], eax
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x44]
add edx, 5
mov ecx, dword [ebp - 0x160]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0
je 0x72bebc
mov eax, dword [ebp - 0x164]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x164], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72fc18
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x164]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72fc28
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
mov dword [ebp - 0x5c], 0x1fffffff
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
je 0x72bf33
mov eax, dword [ebp - 0x168]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
jle 0x72bf6e
mov eax, dword [ebp - 0x10]
cmp word [eax], 0x23
jne 0x72bf52
mov eax, dword [ebp - 0x10]
call fcn.00728e28
mov dword [ebp - 0x5c], eax
jmp 0x72bf6e
lea edx, [ebp - 0x398]
mov eax, dword [ebp - 0x10]
call fcn.004211b0
mov eax, dword [ebp - 0x398]
call fcn.0072840c
mov dword [ebp - 0x5c], eax
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov eax, 0x72fc38
call fcn.00729210
test eax, eax
jle 0x72c1d8
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0
je 0x72bfa9
mov eax, dword [ebp - 0x16c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x16c], eax
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x44]
add edx, 5
mov ecx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0
je 0x72bfe4
mov eax, dword [ebp - 0x170]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x170], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72fc58
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72fc68
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
mov dword [ebp - 0x60], 0x1fffffff
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0
je 0x72c05b
mov eax, dword [ebp - 0x174]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0
jle 0x72c096
mov eax, dword [ebp - 0x10]
cmp word [eax], 0x23
jne 0x72c07a
mov eax, dword [ebp - 0x10]
call fcn.00728e28
mov dword [ebp - 0x60], eax
jmp 0x72c096
lea edx, [ebp - 0x39c]
mov eax, dword [ebp - 0x10]
call fcn.004211b0
mov eax, dword [ebp - 0x39c]
call fcn.0072840c
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x10]
mov edx, 0x72fc78
call fcn.00408b70
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov eax, 0x72fc88
call fcn.00729210
test eax, eax
jle 0x72c166
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0
je 0x72c0de
mov eax, dword [ebp - 0x178]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x178], eax
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x44]
add edx, 3
mov ecx, dword [ebp - 0x178]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0
je 0x72c119
mov eax, dword [ebp - 0x17c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x17c], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72fc9c
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x17c]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72fcac
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x44]
mov edx, dword [ebp - 0x5c]
call fcn.004e9790
push 0x1fffffff
push 0x40
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x54]
push eax
lea eax, [ebp - 0x34c]
push eax
mov eax, dword [ebp + 0x4c]
mov ecx, dword [eax - 0x58]
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax - 0x5c]
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x60]
call fcn.0040e324
lea eax, [ebp - 0x34c]
push eax
mov eax, dword [ebp - 0x10]
mov edx, 0x72fcbc
call fcn.00409aec
sete al
push eax
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x1c]
call fcn.007281c0
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dl, 1
call fcn.004e9ce4
jmp case.0x72a60c.67
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xb0], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 0x5c]
call fcn.004e9b64
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x44]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x184]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0x50], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x44]
mov edx, dword [ebp - 0x5c]
call fcn.004e9790
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x58]
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x54]
push eax
mov eax, dword [ebp + 0x4c]
mov ecx, dword [eax - 0x5c]
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax - 0x60]
sub edx, 2
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax]
call dword [esi + 0x7c]
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax - 0x50]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x44]
call fcn.004e9790
jmp case.0x72a60c.67
cmp byte [ebp + 0x48], 0
jne case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0x71], 1
jmp case.0x72a60c.67
mov eax, dword [ebx]
movzx eax, word [eax + 4]
mov word [ebp - 0x186], ax
movzx eax, word [ebp - 0x186]
mov word [ebp - 0x188], ax
movzx eax, word [ebp - 0x186]
add eax, 0xffffff9f
sub ax, 0x1a
jae 0x72c2c1
movzx eax, word [ebp - 0x186]
and ax, 0xffdf
mov word [ebp - 0x188], ax
movzx eax, word [ebp - 0x188]
sub ax, 0x49
je 0x72c4b1
sub ax, 9
jne case.0x72a60c.67
mov byte [ebp - 0x1d], 1
cmp byte [ebp + 0x48], 0
jne case.0x72a60c.67
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebx]
mov ecx, 1
mov eax, 0x72fccc
call fcn.00409d34
mov ecx, eax
dec ecx
mov eax, dword [ebx]
mov edx, 4
call fcn.00409b24
xor eax, eax
mov dword [ebp - 0x5c], eax
lea edx, [ebp - 0x3a0]
mov eax, dword [ebp - 0xc]
call fcn.00420f18
mov edx, dword [ebp - 0x3a0]
lea ecx, [ebp - 0x44]
mov eax, 0x72fcdc
call fcn.00729210
test eax, eax
jle 0x72c445
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0
je 0x72c35f
mov eax, dword [ebp - 0x18c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x18c], eax
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x44]
add edx, 5
mov ecx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0
je 0x72c39a
mov eax, dword [ebp - 0x190]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x190], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72fcf4
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x190]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72fd04
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0
je 0x72c40a
mov eax, dword [ebp - 0x194]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0
jle 0x72c445
mov eax, dword [ebp - 0x10]
cmp word [eax], 0x23
jne 0x72c429
mov eax, dword [ebp - 0x10]
call fcn.00728e28
mov dword [ebp - 0x5c], eax
jmp 0x72c445
lea edx, [ebp - 0x3a4]
mov eax, dword [ebp - 0x10]
call fcn.004211b0
mov eax, dword [ebp - 0x3a4]
call fcn.0072840c
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x44]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0x50], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x44]
mov edx, dword [ebp - 0x5c]
call fcn.004e9790
mov ecx, dword [ebp - 0x320]
inc ecx
mov edx, dword [ebp - 0x31c]
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax]
call dword [esi + 0x64]
mov ecx, dword [ebp - 0x320]
inc ecx
mov edx, dword [ebp - 0x314]
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax]
call dword [esi + 0x60]
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax - 0x50]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x44]
call fcn.004e9790
jmp case.0x72a60c.67
cmp byte [ebp + 0x48], 0
jne case.0x72a60c.67
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xb4], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xbc], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x1a0]
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x21]
mov byte [ebp - 0x1a1], al
mov eax, dword [ebp + 0x4c]
movzx edx, byte [ebp - 0x1a1]
mov byte [eax - 0xb5], dl
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x20]
cmp al, 1
jne 0x72c547
mov eax, dword [ebp + 0x4c]
mov dword [eax - 0xbc], 0x1fffffff
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax + 0x10]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
call fcn.004e9b64
mov eax, dword [ebp + 0x4c]
cmp dword [eax + 0x10], 0x1fffffff
jne 0x72c571
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dl, 1
call fcn.004e9ce4
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax + 0xc]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e8fb8
mov eax, dword [ebp + 0x4c]
movzx edx, byte [eax + 8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9390
jmp case.0x72a60c.67
mov eax, dword [ebx]
movzx eax, word [eax + 4]
mov word [ebp - 0x1aa], ax
movzx eax, word [ebp - 0x1aa]
mov word [ebp - 0x1ac], ax
movzx eax, word [ebp - 0x1aa]
add eax, 0xffffff9f
sub ax, 0x1a
jae 0x72c5d6
movzx eax, word [ebp - 0x1aa]
and ax, 0xffdf
mov word [ebp - 0x1ac], ax
movzx eax, word [ebp - 0x1ac]
mov word [ebp - 0x76], ax
cmp word [ebp - 0x76], 0x3e
jne 0x72c624
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1b0]
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x21]
mov byte [ebp - 0x1b1], al
movzx edx, byte [0x72f898]
or dl, byte [ebp - 0x1b1]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9390
jmp case.0x72a60c.67
cmp word [ebp - 0x76], 0x4e
jne 0x72c74c
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebx]
mov ecx, 1
mov eax, 0x72fd14
call fcn.00409d34
mov ecx, eax
dec ecx
mov eax, dword [ebx]
mov edx, 3
call fcn.00409b24
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0
je 0x72c676
mov eax, dword [ebp - 0x1b8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1b8], eax
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x72fd24
call fcn.00728ee0
mov edx, eax
add edx, 2
mov ecx, dword [ebp - 0x1b8]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0
je 0x72c6bd
mov eax, dword [ebp - 0x1bc]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1bc], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72fd34
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x1bc]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72fd44
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x10]
call fcn.00405e84
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x30], 0
jne case.0x72a60c.67
mov eax, dword [ebp + 0x44]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x2c]
jge case.0x72a60c.67
mov eax, dword [ebp + 0x44]
mov edx, dword [ebp - 0x2c]
mov dword [eax], edx
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x60]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x32c], eax
jmp case.0x72a60c.67
cmp word [ebp - 0x76], 0x4d
jne case.0x72a60c.67
xor eax, eax
mov dword [ebp - 0x7c], eax
xor eax, eax
mov dword [ebp - 0x80], eax
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0xe1], 0
mov edx, 0x72fd54
mov eax, dword [ebp - 0x1c]
call fcn.004e9e50
mov dword [ebp - 0x84], eax
mov eax, dword [ebp + 0x4c]
inc dword [eax - 0xe8]
lea esi, [ebp - 0x32c]
lea edi, [ebp - 0x33c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebx]
mov ecx, 1
mov eax, 0x72fd68
call fcn.00409d34
mov ecx, eax
dec ecx
mov eax, dword [ebx]
mov edx, 3
call fcn.00409b24
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0
je 0x72c7de
mov eax, dword [ebp - 0x1c0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1c0], eax
lea eax, [ebp - 0x10]
push eax
lea edx, [ebp - 0x3a8]
mov eax, dword [ebp - 0xc]
call fcn.00420f18
mov edx, dword [ebp - 0x3a8]
mov ecx, 1
mov eax, 0x72fd78
call fcn.00409d34
mov edx, eax
add edx, 4
mov ecx, dword [ebp - 0x1c0]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0
je 0x72c83b
mov eax, dword [ebp - 0x1c4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1c4], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72fd8c
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x1c4]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72fd9c
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea edx, [ebp - 0x3ac]
mov eax, dword [ebp - 0xc]
call fcn.00420f18
mov edx, dword [ebp - 0x3ac]
lea eax, [ebp - 0xc]
call fcn.00408b70
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, 0x72fdac
call fcn.00409d34
test eax, eax
jle 0x72c992
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xec]
mov edx, dword [ebp + 0x4c]
cmp eax, dword [edx - 0xe8]
jne 0x72c992
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0
je 0x72c8f9
mov eax, dword [ebp - 0x1c8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1c8], eax
lea eax, [ebp - 0x14]
push eax
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, 0x72fdc0
call fcn.00409d34
mov edx, eax
add edx, 4
mov ecx, dword [ebp - 0x1c8]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0
je 0x72c945
mov eax, dword [ebp - 0x1cc]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1cc], eax
lea eax, [ebp - 0x14]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x14]
mov eax, 0x72fdd4
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x1cc]
mov eax, dword [ebp - 0x14]
call fcn.00409b24
lea eax, [ebp - 0x14]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x14]
mov eax, 0x72fde4
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x14]
call fcn.00409b24
xor eax, eax
mov dword [ebp - 0x64], eax
xor eax, eax
mov dword [ebp - 0x68], eax
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, 0x72fdf4
call fcn.00409d34
test eax, eax
jle 0x72ca80
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0
je 0x72c9d9
mov eax, dword [ebp - 0x1d0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1d0], eax
lea eax, [ebp - 0x14]
push eax
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, 0x72fe0c
call fcn.00409d34
mov edx, eax
add edx, 6
mov ecx, dword [ebp - 0x1d0]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0
je 0x72ca25
mov eax, dword [ebp - 0x1d4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1d4], eax
lea eax, [ebp - 0x14]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x14]
mov eax, 0x72fe24
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x1d4]
mov eax, dword [ebp - 0x14]
call fcn.00409b24
lea eax, [ebp - 0x14]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x14]
mov eax, 0x72fe34
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x14]
call fcn.00409b24
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x14]
call fcn.00405e84
mov dword [ebp - 0x64], eax
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, 0x72fe44
call fcn.00409d34
test eax, eax
jle 0x72cb5f
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
je 0x72cabd
mov eax, dword [ebp - 0x1d8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1d8], eax
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x72fe60
call fcn.00728ee0
mov edx, eax
add edx, 7
mov ecx, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0
je 0x72cb04
mov eax, dword [ebp - 0x1dc]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1dc], eax
lea eax, [ebp - 0x14]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x14]
mov eax, 0x72fe7c
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [ebp - 0x14]
call fcn.00409b24
lea eax, [ebp - 0x14]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x14]
mov eax, 0x72fe8c
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x14]
call fcn.00409b24
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x14]
call fcn.00405e84
mov dword [ebp - 0x68], eax
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, 0x72fe9c
call fcn.00409d34
ret
ror ebp, 1
inc dword [ebp - 0x1c71f040]
add byte [eax], al
invalid
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0
je 0x72cb9c
mov eax, dword [ebp - 0x1e0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1e0], eax
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x72feb4
call fcn.00728ee0
mov edx, eax
add edx, 6
mov ecx, dword [ebp - 0x1e0]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0
je 0x72cbe3
mov eax, dword [ebp - 0x1e4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1e4], eax
lea eax, [ebp - 0x14]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x14]
mov eax, 0x72fecc
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x1e4]
mov eax, dword [ebp - 0x14]
call fcn.00409b24
lea eax, [ebp - 0x14]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x14]
mov eax, 0x72fedc
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x14]
call fcn.00409b24
mov eax, dword [ebp - 0x14]
mov edx, 0x72feec
call fcn.00409aec
jne 0x72cc46
mov dword [ebp - 0x7c], 1
mov eax, dword [ebp - 0x14]
mov edx, 0x72ff08
call fcn.00409aec
jne 0x72cc5c
mov dword [ebp - 0x7c], 2
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, 0x72ff1c
call fcn.00409d34
test eax, eax
jle 0x72cd6b
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0
je 0x72cc99
mov eax, dword [ebp - 0x1e8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1e8], eax
lea eax, [ebp - 0x14]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x72ff34
call fcn.00728ee0
mov edx, eax
add edx, 6
mov ecx, dword [ebp - 0x1e8]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0
je 0x72cce0
mov eax, dword [ebp - 0x1ec]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1ec], eax
lea eax, [ebp - 0x14]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x14]
mov eax, 0x72ff4c
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x1ec]
mov eax, dword [ebp - 0x14]
call fcn.00409b24
lea eax, [ebp - 0x14]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x14]
mov eax, 0x72ff5c
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x14]
call fcn.00409b24
mov eax, dword [ebp - 0x14]
mov edx, 0x72ff6c
call fcn.00409aec
jne 0x72cd52
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0xe1], 1
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x60]
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0x14]
mov edx, 0x72ff84
call fcn.00409aec
jne 0x72cd6b
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0xe1], 2
mov eax, dword [ebp + 0x4c]
xor edx, edx
mov dword [eax - 0xdc], edx
mov eax, dword [ebp + 0x4c]
xor edx, edx
mov dword [eax - 0xd8], edx
lea edx, [ebp - 0x3b0]
mov eax, dword [ebp - 0x10]
call fcn.00420f18
mov edx, dword [ebp - 0x3b0]
mov ecx, 1
mov eax, 0x72ff9c
call fcn.00409d34
test eax, eax
jle 0x72cf76
lea eax, [ebp - 0x10]
mov ecx, 4
mov edx, 1
call fcn.00409b6c
mov eax, dword [ebp + 0x4c]
cmp dword [eax + 0x8c], 0
je 0x72cf76
mov eax, dword [ebp - 0x10]
call fcn.00728f68
mov esi, eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
call fcn.005c81a8
cmp esi, eax
jge 0x72cf76
push 0x60
push 0x58
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
mov eax, dword [eax + 0x44]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xdc], eax
push 0x60
push 0x5a
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
mov eax, dword [eax + 0x40]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xd8], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
mov eax, dword [eax + 0x40]
cmp eax, dword [ebp - 0x84]
jge 0x72ce9b
cmp dword [ebp - 0x7c], 0
jne 0x72ce79
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
mov edx, dword [ebp - 0x84]
sub edx, dword [eax + 0x40]
mov dword [ebp - 0x80], edx
cmp dword [ebp - 0x7c], 1
jne 0x72ce9b
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
mov edx, dword [ebp - 0x84]
sub edx, dword [eax + 0x40]
sar edx, 1
jns 0x72ce98
adc edx, 0
mov dword [ebp - 0x80], edx
cmp byte [ebp + 0x48], 0
jne 0x72ced6
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x6c], 0
jne 0x72ced6
mov eax, dword [ebp - 0x338]
add eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x10]
call fcn.00728f68
push eax
push 1
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
mov ecx, dword [ebp - 0x33c]
mov edx, dword [ebp - 0x1c]
call fcn.005c8b58
cmp byte [ebp + 0x48], 0
jne 0x72cf76
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x6c], 0
je 0x72cf76
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
fild dword [eax + 0x44]
mov eax, dword [ebp + 0x4c]
fmul qword [eax + 0x54]
call fcn.00405668
add eax, dword [ebp - 0x33c]
mov dword [ebp - 0x334], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
fild dword [eax + 0x40]
mov eax, dword [ebp + 0x4c]
fmul qword [eax + 0x54]
call fcn.00405668
add eax, dword [ebp - 0x338]
mov dword [ebp - 0x330], eax
mov dl, 1
mov eax, dword [0x4e6d30]
call fcn.004efc38
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x10]
call fcn.00728f68
mov edx, eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x8c]
mov ecx, dword [ebp - 0x58]
call fcn.005c80c8
mov ecx, dword [ebp - 0x58]
lea edx, [ebp - 0x33c]
mov eax, dword [ebp - 0x1c]
call fcn.00727e88
mov eax, dword [ebp - 0x58]
call fcn.004069e4
lea edx, [ebp - 0x3b4]
mov eax, dword [ebp - 0x10]
call fcn.00420f18
mov edx, dword [ebp - 0x3b4]
mov ecx, 1
mov eax, 0x72ffb4
call fcn.00409d34
test eax, eax
jle 0x72d05d
lea eax, [ebp - 0x10]
mov ecx, 5
mov edx, 1
call fcn.00409b6c
mov eax, dword [ebp - 0x10]
push eax
push 0
movzx eax, byte [ebp + 0x48]
xor al, 1
push eax
mov eax, dword [ebp + 0x4c]
movzx eax, byte [eax + 0x6c]
push eax
mov eax, dword [ebp + 0x4c]
push dword [eax + 0x58]
push dword [eax + 0x54]
lea eax, [ebp - 0x378]
push eax
mov ecx, dword [ebp - 0x338]
mov edx, dword [ebp - 0x33c]
mov eax, dword [ebp - 0x1c]
call fcn.00727f88
mov eax, dword [ebp + 0x4c]
mov edx, dword [ebp - 0x378]
mov dword [eax - 0xdc], edx
mov edx, dword [ebp - 0x374]
mov dword [eax - 0xd8], edx
push 0x60
push 0x58
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xdc]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xdc], eax
push 0x60
push 0x5a
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xd8]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xd8], eax
lea edx, [ebp - 0x3b8]
mov eax, dword [ebp - 0x10]
call fcn.00420f18
mov edx, dword [ebp - 0x3b8]
mov ecx, 1
mov eax, 0x72ffcc
call fcn.00409d34
test eax, eax
jle 0x72d144
lea eax, [ebp - 0x10]
mov ecx, 5
mov edx, 1
call fcn.00409b6c
mov eax, dword [ebp - 0x10]
push eax
push 1
movzx eax, byte [ebp + 0x48]
xor al, 1
push eax
mov eax, dword [ebp + 0x4c]
movzx eax, byte [eax + 0x6c]
push eax
mov eax, dword [ebp + 0x4c]
push dword [eax + 0x58]
push dword [eax + 0x54]
lea eax, [ebp - 0x378]
push eax
mov ecx, dword [ebp - 0x338]
mov edx, dword [ebp - 0x33c]
mov eax, dword [ebp - 0x1c]
call fcn.00727f88
mov eax, dword [ebp + 0x4c]
mov edx, dword [ebp - 0x378]
mov dword [eax - 0xdc], edx
mov edx, dword [ebp - 0x374]
mov dword [eax - 0xd8], edx
push 0x60
push 0x58
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xdc]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xdc], eax
push 0x60
push 0x5a
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xd8]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xd8], eax
xor eax, eax
mov dword [ebp - 0x54], eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72ffe4
call fcn.00409d34
test eax, eax
jne 0x72d179
mov eax, dword [ebp + 0x4c]
cmp dword [eax + 0x1c], 0
je 0x72d179
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x1c]
mov edx, dword [ebp - 0x10]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
mov dword [ebp - 0x54], eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x72fff4
call fcn.00409d34
test eax, eax
jle 0x72d1ef
mov eax, dword [ebp + 0x4c]
cmp dword [eax + 0x20], 0
je 0x72d1ef
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 0x10]
call fcn.007278e8
test eax, eax
jne 0x72d1d3
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x20]
call fcn.00727898
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
mov byte [eax + 0x4d], 0
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x9c]
call fcn.00727490
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 0x10]
call fcn.007278e8
mov edx, dword [0x72556c]
call fcn.00406c44
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
je 0x72d675
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x20]
test al, al
jne 0x72d675
cmp dword [ebp - 0x64], 0
jle 0x72d221
cmp dword [ebp - 0x68], 0
jle 0x72d221
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x64], 0
jle 0x72d277
cmp dword [ebp - 0x68], 0
jne 0x72d277
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x30]
mov dword [ebp - 0x3bc], eax
fild dword [ebp - 0x3bc]
fild dword [ebp - 0x64]
fdivrp st(1)
fstp xword [ebp - 0x3c8]
wait
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x24]
mov dword [ebp - 0x3bc], eax
fild dword [ebp - 0x3bc]
fld xword [ebp - 0x3c8]
fmulp st(1)
call fcn.00405668
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x64], 0
jne 0x72d2cd
cmp dword [ebp - 0x68], 0
jle 0x72d2cd
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x24]
mov dword [ebp - 0x3bc], eax
fild dword [ebp - 0x3bc]
fild dword [ebp - 0x68]
fdivrp st(1)
fstp xword [ebp - 0x3c8]
wait
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x30]
mov dword [ebp - 0x3bc], eax
fild dword [ebp - 0x3bc]
fld xword [ebp - 0x3c8]
fmulp st(1)
call fcn.00405668
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x64], 0
jne 0x72d2ef
cmp dword [ebp - 0x68], 0
jne 0x72d2ef
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x30]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x24]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp + 0x4c]
cmp byte [eax - 0xe1], 2
jne 0x72d30a
mov eax, dword [ebp - 0x314]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x33c], eax
cmp byte [ebp + 0x48], 0
jne 0x72d5af
cmp dword [ebp - 0x64], 0
jg 0x72d320
cmp dword [ebp - 0x68], 0
jle 0x72d38b
mov eax, dword [ebp - 0x54]
mov edx, dword [0x72556c]
call fcn.00406c20
test al, al
je 0x72d347
mov eax, dword [ebp - 0x54]
mov edx, dword [0x72556c]
call fcn.00406c44
mov dl, 1
call fcn.0072781c
mov eax, dword [ebp - 0x338]
add eax, dword [ebp - 0x40]
push eax
lea eax, [ebp - 0x34c]
push eax
mov ecx, dword [ebp - 0x33c]
add ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x338]
mov eax, dword [ebp - 0x33c]
call fcn.0040e324
lea edx, [ebp - 0x34c]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax]
call dword [esi + 0x88]
jmp 0x72d5af
cmp dword [ebp - 0x64], 0
jle 0x72d402
cmp dword [ebp - 0x68], 0
jne 0x72d402
mov eax, dword [ebp - 0x54]
mov edx, dword [0x72556c]
call fcn.00406c20
test al, al
je 0x72d3be
mov eax, dword [ebp - 0x54]
mov edx, dword [0x72556c]
call fcn.00406c44
mov dl, 1
call fcn.0072781c
mov eax, dword [ebp - 0x338]
add eax, dword [ebp - 0x68]
push eax
lea eax, [ebp - 0x34c]
push eax
mov ecx, dword [ebp - 0x33c]
add ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0x338]
mov eax, dword [ebp - 0x33c]
call fcn.0040e324
lea edx, [ebp - 0x34c]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax]
call dword [esi + 0x88]
jmp 0x72d5af
mov eax, dword [ebp - 0x54]
mov edx, dword [0x72556c]
call fcn.00406c20
test al, al
je 0x72d54b
mov eax, dword [ebp - 0x54]
mov edx, dword [0x72556c]
call fcn.00406c44
call fcn.00727608
dec eax
jle 0x72d49e
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax - 0xd4]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x44]
call fcn.004e9790
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax - 0xd4]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
call fcn.004e9b64
mov eax, dword [ebp - 0x54]
mov edx, dword [0x72556c]
call fcn.00406c44
call fcn.007277dc
add eax, dword [ebp - 0x33c]
push eax
mov eax, dword [ebp - 0x54]
mov edx, dword [0x72556c]
call fcn.00406c44
call fcn.007277d8
add eax, dword [ebp - 0x338]
push eax
mov ecx, dword [ebp - 0x338]
mov edx, dword [ebp - 0x33c]
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax]
call dword [esi + 0x7c]
mov eax, dword [ebp - 0x54]
mov edx, dword [0x72556c]
call fcn.00406c44
mov edx, dword [eax]
call dword [edx + 0x24]
cmp eax, dword [ebp - 0x84]
jge 0x72d508
cmp dword [ebp - 0x7c], 0
jne 0x72d4dd
mov eax, dword [ebp - 0x54]
mov edx, dword [0x72556c]
call fcn.00406c44
mov edx, dword [eax]
call dword [edx + 0x24]
mov edx, dword [ebp - 0x84]
sub edx, eax
mov dword [ebp - 0x80], edx
cmp dword [ebp - 0x7c], 1
jne 0x72d508
mov eax, dword [ebp - 0x54]
mov edx, dword [0x72556c]
call fcn.00406c44
mov edx, dword [eax]
call dword [edx + 0x24]
mov edx, dword [ebp - 0x84]
sub edx, eax
sar edx, 1
jns 0x72d505
adc edx, 0
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x54]
push eax
mov eax, dword [ebp - 0x54]
mov edx, dword [0x72556c]
call fcn.00406c44
movzx eax, word [eax + 0x62]
add eax, dword [ebp - 0x338]
add eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x54]
mov edx, dword [0x72556c]
call fcn.00406c44
movzx edx, word [eax + 0x60]
add edx, dword [ebp - 0x33c]
mov eax, dword [ebp - 0x1c]
pop ecx
mov esi, dword [eax]
call dword [esi + 0x44]
jmp 0x72d5af
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x24]
cmp eax, dword [ebp - 0x84]
jge 0x72d594
cmp dword [ebp - 0x7c], 0
jne 0x72d574
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x24]
mov edx, dword [ebp - 0x84]
sub edx, eax
mov dword [ebp - 0x80], edx
cmp dword [ebp - 0x7c], 1
jne 0x72d594
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x24]
mov edx, dword [ebp - 0x84]
sub edx, eax
sar edx, 1
jns 0x72d591
adc edx, 0
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0x338]
add ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x33c]
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax]
call dword [esi + 0x44]
cmp dword [ebp - 0x64], 0
jg 0x72d5bb
cmp dword [ebp - 0x68], 0
jle 0x72d607
push 0x60
push 0x58
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp - 0x3c]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xdc], eax
push 0x60
push 0x5a
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
mov eax, dword [ebp - 0x40]
push eax
call sub.kernel32.dll_MulDiv
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xd8], eax
jmp 0x72d675
mov eax, dword [ebp - 0x54]
mov edx, dword [0x72556c]
call fcn.00406c20
test al, al
je 0x72d653
mov eax, dword [ebp - 0x54]
mov edx, dword [0x72556c]
call fcn.00406c44
call fcn.007277dc
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xdc], eax
mov eax, dword [ebp - 0x54]
mov edx, dword [0x72556c]
call fcn.00406c44
call fcn.007277d8
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xd8], eax
jmp 0x72d675
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x30]
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xdc], eax
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
call dword [edx + 0x24]
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xd8], eax
mov eax, dword [ebp + 0x28]
sub eax, dword [ebp - 0x31c]
mov edx, dword [ebp + 0x44]
cmp eax, dword [edx]
jle 0x72d70f
mov eax, dword [ebp + 0x44]
mov eax, dword [eax]
mov edx, dword [ebp + 0x4c]
add eax, dword [edx - 0xdc]
mov edx, dword [ebp + 0x28]
sub edx, dword [ebp - 0x31c]
cmp eax, edx
jle 0x72d70f
mov eax, dword [ebp + 0x24]
cmp eax, dword [ebp - 0x328]
jle 0x72d70f
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xd8]
add eax, dword [ebp - 0x328]
cmp eax, dword [ebp + 0x24]
jle 0x72d70f
mov eax, dword [ebp + 0x4c]
cmp byte [eax - 0x69], 0
je 0x72d70f
mov eax, dword [ebp + 0x1c]
mov byte [eax], 1
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp + 0x4c]
mov edx, dword [edx - 0x70]
call fcn.00408b28
mov eax, dword [ebp + 0x4c]
cmp dword [eax - 0x48], 0
je 0x72d6fd
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x38]
mov edx, dword [ebp + 0x4c]
mov edx, dword [edx - 0x48]
call fcn.00408b28
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xe8]
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xec], eax
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x6c], 0
mov eax, dword [ebp + 0x44]
mov eax, dword [eax]
mov edx, dword [ebp + 0x4c]
add eax, dword [edx - 0xdc]
mov edx, dword [ebp - 0x314]
sub edx, dword [ebp - 0x31c]
cmp eax, edx
jle 0x72d751
mov eax, dword [ebp - 0x314]
sub eax, dword [ebp - 0x31c]
mov edx, dword [ebp + 0x4c]
cmp eax, dword [edx - 0xdc]
jle 0x72d751
mov byte [ebp - 0x1e], 1
jmp 0x72d79d
mov eax, dword [ebp + 0x44]
mov eax, dword [eax]
mov edx, dword [ebp + 0x4c]
add eax, dword [edx - 0xdc]
add eax, 2
mov edx, dword [ebp + 0x44]
mov dword [edx], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xdc]
add eax, dword [ebp - 0x32c]
add eax, 2
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xd8]
mov edx, dword [ebp + 0x40]
cmp eax, dword [edx]
jle 0x72d79d
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xd8]
mov edx, dword [ebp + 0x40]
mov dword [edx], eax
mov edx, 0x730008
mov eax, dword [ebp - 0x1c]
call fcn.004e9e50
mov dword [ebp - 0x88], eax
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, 0x73001c
call fcn.00409d34
test eax, eax
jle 0x72d842
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, 0x730034
call fcn.00409d34
test eax, eax
jle 0x72d804
mov eax, dword [ebp + 0x40]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x88]
jle 0x72d7fb
mov eax, dword [ebp + 0x40]
mov eax, dword [eax]
sub eax, dword [ebp - 0x88]
mov edx, dword [ebp + 0x34]
mov dword [edx], eax
jmp 0x72d842
mov eax, dword [ebp + 0x34]
xor edx, edx
mov dword [eax], edx
jmp 0x72d842
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, 0x73004c
call fcn.00409d34
test eax, eax
jle 0x72d842
mov eax, dword [ebp + 0x40]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x88]
jle 0x72d83b
mov eax, dword [ebp + 0x40]
mov eax, dword [eax]
sub eax, dword [ebp - 0x88]
shr eax, 1
mov edx, dword [ebp + 0x34]
mov dword [edx], eax
jmp 0x72d842
mov eax, dword [ebp + 0x34]
xor edx, edx
mov dword [eax], edx
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, 0x730068
call fcn.00409d34
test eax, eax
jle 0x72d86a
mov eax, dword [ebp + 0x40]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
mov eax, dword [ebp + 0x34]
xor edx, edx
mov dword [eax], edx
mov eax, dword [ebp + 0x4c]
cmp byte [eax - 0xe1], 1
jne 0x72d8b0
mov eax, dword [ebp + 0x40]
mov eax, dword [eax]
sub eax, dword [ebp - 0x88]
mov edx, dword [ebp + 0x34]
mov dword [edx], eax
xor eax, eax
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x3c]
add eax, 2
mov edx, dword [ebp + 0x10]
mov dword [edx], eax
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp - 0x40]
mov dword [eax + 0xc], edx
cmp byte [ebp + 0x48], 0
jne 0x72d8b0
mov eax, dword [ebp + 0x40]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
mov eax, dword [ebp + 0x4c]
cmp byte [eax - 0xe1], 2
jne case.0x72a60c.67
mov eax, dword [ebp + 0x40]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x88]
jle 0x72d8df
mov eax, dword [ebp + 0x40]
mov eax, dword [eax]
sub eax, dword [ebp - 0x88]
mov edx, dword [ebp + 0x34]
mov dword [edx], eax
jmp 0x72d8e6
mov eax, dword [ebp + 0x34]
xor edx, edx
mov dword [eax], edx
xor eax, eax
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x3c]
add eax, 2
mov edx, dword [ebp + 0x10]
mov dword [edx + 8], eax
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp - 0x40]
mov dword [eax + 0xc], edx
cmp byte [ebp + 0x48], 0
jne 0x72d911
mov eax, dword [ebp + 0x40]
mov edx, dword [ebp - 0x88]
mov dword [eax], edx
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x58]
mov edx, dword [ebp + 0x44]
mov dword [edx], eax
jmp case.0x72a60c.67
mov dword [ebp - 0x5c], 0x1fffffff
mov eax, dword [ebp + 0x4c]
add eax, 0xffffff10
call fcn.00408748
lea ecx, [ebp - 0x44]
mov edx, dword [ebx]
mov eax, 0x730080
call fcn.00729210
test eax, eax
jle 0x72db65
lea eax, [ebp - 0x3cc]
push eax
mov ecx, dword [ebp - 0x44]
dec ecx
mov eax, dword [ebx]
mov edx, 3
call fcn.00409b24
mov eax, dword [ebp - 0x3cc]
lea edx, [ebp - 0xc]
call fcn.00420f18
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov eax, 0x730090
call fcn.00729210
test eax, eax
jle 0x72da44
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0
je 0x72d9ac
mov eax, dword [ebp - 0x1f0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1f0], eax
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x44]
add edx, 4
mov ecx, dword [ebp - 0x1f0]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0
je 0x72d9e7
mov eax, dword [ebp - 0x1f4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1f4], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x7300a8
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x1f4]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x7300b8
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
mov eax, dword [ebp + 0x4c]
add eax, 0xffffff10
mov edx, dword [ebp - 0x10]
call fcn.00408b70
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov eax, 0x7300c8
call fcn.00729210
test eax, eax
jle 0x72db65
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0
je 0x72da7f
mov eax, dword [ebp - 0x1f8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1f8], eax
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x44]
add edx, 5
mov ecx, dword [ebp - 0x1f8]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0
je 0x72daba
mov eax, dword [ebp - 0x1fc]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x1fc], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x7300e0
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x1fc]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x7300f0
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0
je 0x72db2a
mov eax, dword [ebp - 0x200]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0
jle 0x72db65
mov eax, dword [ebp - 0x10]
cmp word [eax], 0x23
jne 0x72db49
mov eax, dword [ebp - 0x10]
call fcn.00728e28
mov dword [ebp - 0x5c], eax
jmp 0x72db65
lea edx, [ebp - 0x3d0]
mov eax, dword [ebp - 0x10]
call fcn.004211b0
mov eax, dword [ebp - 0x3d0]
call fcn.0072840c
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xc0]
add eax, eax
add eax, eax
lea eax, [eax + eax*2]
mov edx, dword [ebp + 0x44]
add dword [edx], eax
cmp byte [ebp - 0x1f], 0
je 0x72db86
mov byte [ebp - 0x1e], 1
jmp 0x72db8a
mov byte [ebp - 0x1f], 1
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xc0]
dec eax
add eax, eax
add eax, eax
lea eax, [eax + eax*2]
add dword [ebp - 0x32c], eax
cmp byte [ebp + 0x48], 0
jne 0x72df2e
mov eax, dword [ebp + 0x4c]
cmp byte [eax - 0x63], 0
jne 0x72df2e
mov eax, dword [ebp + 0x4c]
cmp dword [eax - 0xf0], 0
jne 0x72dd98
cmp dword [ebp - 0x5c], 0x1fffffff
je 0x72dbf1
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xf4], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x5c]
call fcn.004e8fb8
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9290
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov edx, 0x730100
call fcn.004e92ec
mov eax, dword [ebp + 0x4c]
cmp byte [eax - 0xc1], 0
jne 0x72dca1
mov eax, dword [ebp + 0x4c]
test byte [eax - 0xc0], 1
je 0x72dc66
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
mov dword [ebp - 0x204], eax
push 0
lea eax, [ebp - 0x32c]
push eax
push 1
mov eax, 0x73011c
call fcn.004096e8
push eax
mov eax, dword [ebp - 0x204]
push eax
call sub.user32.dll_DrawTextW
mov dword [ebp - 0x208], eax
jmp 0x72dd64
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
mov dword [ebp - 0x20c], eax
push 0
lea eax, [ebp - 0x32c]
push eax
push 1
mov eax, 0x73012c
call fcn.004096e8
push eax
mov eax, dword [ebp - 0x20c]
push eax
call sub.user32.dll_DrawTextW
mov dword [ebp - 0x210], eax
jmp 0x72dd64
lea edx, [ebp - 0x3d4]
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xf8]
call fcn.00421d30
mov edx, dword [ebp - 0x3d4]
mov eax, dword [ebp + 0x4c]
add eax, 0xffffff04
mov ecx, 0x73013c
call fcn.00409954
mov eax, dword [ebp + 0x4c]
inc dword [eax - 0xf8]
mov eax, dword [ebp - 0x1c]
call fcn.004eadd0
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xfc]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0
je 0x72dd19
mov eax, dword [ebp - 0x218]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x218], eax
push 0
lea eax, [ebp - 0x32c]
push eax
mov eax, dword [ebp - 0x218]
push eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xfc]
call fcn.004096e8
push eax
mov eax, dword [ebp - 0x21c]
push eax
call sub.user32.dll_DrawTextW
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax - 0xfc]
mov eax, dword [ebp - 0x1c]
call fcn.004e9e70
add eax, dword [ebp - 0x32c]
sub eax, 0xc
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x10]
call fcn.004e92ec
cmp dword [ebp - 0x5c], 0x1fffffff
je 0x72df2e
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax - 0xf4]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e8fb8
jmp 0x72df2e
mov eax, dword [ebp + 0x4c]
mov dword [eax - 0x100], 0x1fffffff
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xf0]
mov edx, 0x730150
call fcn.00409aec
jne 0x72de63
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x220]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0x100], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x44]
mov edx, dword [ebp - 0x5c]
call fcn.004e9790
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 0x5c]
call fcn.004e9b64
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
xor edx, edx
call fcn.004e9ce4
mov eax, dword [ebp - 0x32c]
add eax, 8
push eax
mov eax, dword [ebp - 0x328]
add eax, 0xa
push eax
mov ecx, dword [ebp - 0x328]
add ecx, 2
mov edx, dword [ebp - 0x32c]
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax]
call dword [esi + 0x7c]
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax - 0x100]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
call fcn.004e9b64
mov eax, dword [ebp + 0x4c]
cmp dword [eax - 0x100], 0x1fffffff
jne 0x72de63
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dl, 1
call fcn.004e9ce4
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0xf0]
mov edx, 0x73016c
call fcn.00409aec
jne 0x72df21
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x224]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0x100], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x44]
mov edx, dword [ebp - 0x5c]
call fcn.004e9790
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 0x5c]
call fcn.004e9b64
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
xor edx, edx
call fcn.004e9ce4
mov eax, dword [ebp - 0x32c]
add eax, 8
push eax
mov eax, dword [ebp - 0x328]
add eax, 0xa
push eax
mov ecx, dword [ebp - 0x328]
add ecx, 2
mov edx, dword [ebp - 0x32c]
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax]
call dword [esi + 0x50]
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax - 0x100]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
call fcn.004e9b64
mov eax, dword [ebp + 0x4c]
cmp dword [eax - 0x100], 0x1fffffff
jne 0x72df21
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dl, 1
call fcn.004e9ce4
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dl, 1
call fcn.004e9ce4
add dword [ebp - 0x32c], 0xc
jmp case.0x72a60c.67
mov eax, dword [ebx]
cmp word [eax + 4], 0x3e
je 0x72df67
mov eax, dword [ebp + 0x4c]
inc dword [eax - 0xc0]
mov eax, dword [ebp + 0x44]
cmp dword [eax], 0
jle 0x72df58
mov byte [ebp - 0x1d], 1
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0xc1], 0
jmp case.0x72a60c.67
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x228]
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x21]
mov byte [ebp - 0x229], al
movzx edx, byte [0x72f878]
or dl, byte [ebp - 0x229]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9390
jmp case.0x72a60c.67
mov eax, dword [ebx]
movzx eax, word [eax + 4]
mov word [ebp - 0x22c], ax
movzx eax, word [ebp - 0x22c]
mov word [ebp - 0x22e], ax
movzx eax, word [ebp - 0x22c]
add eax, 0xffffff9f
sub ax, 0x1a
jae 0x72dfe0
movzx eax, word [ebp - 0x22c]
and ax, 0xffdf
mov word [ebp - 0x22e], ax
movzx eax, word [ebp - 0x22e]
mov word [ebp - 0x76], ax
cmp word [ebp - 0x76], 0x4c
jne 0x72e01e
mov eax, dword [ebp + 0x4c]
inc dword [eax - 0xc0]
mov eax, dword [ebp + 0x44]
cmp dword [eax], 0
jle 0x72e007
mov byte [ebp - 0x1d], 1
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0xc1], 1
mov eax, dword [ebp + 0x4c]
mov dword [eax - 0xf8], 1
cmp word [ebp - 0x76], 0x46
jne case.0x72a60c.67
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebx]
mov ecx, 1
mov eax, 0x730188
call fcn.00409d34
mov ecx, eax
dec ecx
mov eax, dword [ebx]
mov edx, 3
call fcn.00409b24
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0
je 0x72e070
mov eax, dword [ebp - 0x234]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x234], eax
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x730198
call fcn.00728ee0
mov edx, eax
add edx, 2
mov ecx, dword [ebp - 0x234]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
je 0x72e0b7
mov eax, dword [ebp - 0x238]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x7301a8
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x238]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x7301b8
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x10]
call fcn.00405e84
mov edx, dword [ebp + 0x14]
mov dword [edx], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x60]
mov edx, dword [ebp + 0x14]
add eax, dword [edx]
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov edx, dword [ebp + 0x44]
mov dword [edx], eax
jmp case.0x72a60c.67
lea ecx, [ebp - 0x44]
mov edx, dword [ebx]
mov eax, 0x7301c8
call fcn.00729210
test eax, eax
jle case.0x72a60c.67
lea eax, [ebp - 0x3d8]
push eax
mov ecx, dword [ebp - 0x44]
dec ecx
mov eax, dword [ebx]
mov edx, 3
call fcn.00409b24
mov eax, dword [ebp - 0x3d8]
lea edx, [ebp - 0xc]
call fcn.00420f18
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov eax, 0x7301d8
call fcn.00729210
test eax, eax
jle 0x72e287
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
je 0x72e1ab
mov eax, dword [ebp - 0x23c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x23c], eax
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x44]
add edx, 5
mov ecx, dword [ebp - 0x23c]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0
je 0x72e1e6
mov eax, dword [ebp - 0x240]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x240], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x7301f0
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x730200
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x730210
call fcn.00409d34
test eax, eax
jle 0x72e24f
mov eax, dword [ebp + 0x30]
mov byte [eax], 1
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x730228
call fcn.00409d34
test eax, eax
jle 0x72e26b
mov eax, dword [ebp + 0x30]
mov byte [eax], 0
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x730240
call fcn.00409d34
test eax, eax
jle 0x72e287
mov eax, dword [ebp + 0x30]
mov byte [eax], 2
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov eax, 0x73025c
call fcn.00729210
test eax, eax
jle 0x72e357
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0
je 0x72e2c2
mov eax, dword [ebp - 0x244]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x244], eax
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x44]
add edx, 6
mov ecx, dword [ebp - 0x244]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0
je 0x72e2fd
mov eax, dword [ebp - 0x248]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x248], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x730278
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x248]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x730288
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
call fcn.00728f68
mov edx, dword [ebp + 0x2c]
mov dword [edx], eax
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov eax, 0x730298
call fcn.00729210
test eax, eax
jle 0x72e44a
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
je 0x72e392
mov eax, dword [ebp - 0x24c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x24c], eax
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x44]
add edx, 6
mov ecx, dword [ebp - 0x24c]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
je 0x72e3cd
mov eax, dword [ebp - 0x250]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x7302bc
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x250]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x7302cc
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
call fcn.00728fbc
mov eax, dword [ebp + 0x4c]
fstp dword [eax - 0xc8]
wait
mov eax, dword [ebp + 0x4c]
fldz
fcomp dword [eax - 0xc8]
wait
fnstsw ax
sahf
jne 0x72e44a
mov eax, dword [ebp + 0x4c]
mov dword [eax - 0xc8], 0x3f800000
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov eax, 0x7302dc
call fcn.00729210
test eax, eax
jle 0x72e576
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
je 0x72e485
mov eax, dword [ebp - 0x254]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x254], eax
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x44]
add edx, 5
mov ecx, dword [ebp - 0x254]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
je 0x72e4c0
mov eax, dword [ebp - 0x258]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x258], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x7302f4
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x258]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x730304
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov edx, 0x730314
call fcn.00409aec
jne 0x72e522
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
mov eax, dword [ebp - 0x10]
mov edx, 0x73032c
call fcn.00409aec
jne 0x72e537
mov eax, dword [ebp + 0xc]
mov byte [eax], 2
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp + 0x4c]
mov edx, dword [ebp - 0x264]
mov dword [eax - 0x108], edx
mov edx, dword [ebp - 0x260]
mov dword [eax - 0x104], edx
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov eax, 0x730344
call fcn.00729210
test eax, eax
jle case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x68], 0
jne case.0x72a60c.67
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0
je 0x72e5be
mov eax, dword [ebp - 0x268]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x44]
add edx, 5
mov ecx, dword [ebp - 0x268]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0
je 0x72e5f9
mov eax, dword [ebp - 0x26c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x26c], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x730360
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x26c]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x730370
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
mov dword [ebp - 0x5c], 0x1fffffff
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0
je 0x72e670
mov eax, dword [ebp - 0x270]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0
jle 0x72e6ab
mov eax, dword [ebp - 0x10]
cmp word [eax], 0x23
jne 0x72e68f
mov eax, dword [ebp - 0x10]
call fcn.00728e28
mov dword [ebp - 0x5c], eax
jmp 0x72e6ab
lea edx, [ebp - 0x3dc]
mov eax, dword [ebp - 0x10]
call fcn.004211b0
mov eax, dword [ebp - 0x3dc]
call fcn.0072840c
mov dword [ebp - 0x5c], eax
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov eax, 0x730380
call fcn.00729210
test eax, eax
jle 0x72e857
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x68], 0
jne 0x72e857
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0
je 0x72e6f3
mov eax, dword [ebp - 0x274]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x274], eax
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x44]
add edx, 5
mov ecx, dword [ebp - 0x274]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0
je 0x72e72e
mov eax, dword [ebp - 0x278]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x278], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x7303a0
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x278]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x7303b0
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
mov dword [ebp - 0x60], 0x1fffffff
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0
je 0x72e7a5
mov eax, dword [ebp - 0x27c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0
jle 0x72e7e0
mov eax, dword [ebp - 0x10]
cmp word [eax], 0x23
jne 0x72e7c4
mov eax, dword [ebp - 0x10]
call fcn.00728e28
mov dword [ebp - 0x60], eax
jmp 0x72e7e0
lea edx, [ebp - 0x3e0]
mov eax, dword [ebp - 0x10]
call fcn.004211b0
mov eax, dword [ebp - 0x3e0]
call fcn.0072840c
mov dword [ebp - 0x60], eax
cmp byte [ebp + 0x48], 0
jne case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0x49], 1
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x44]
mov edx, dword [ebp - 0x5c]
call fcn.004e9790
push 0x1fffffff
push 0x40
mov eax, dword [ebp - 0x310]
add eax, 2
push eax
lea eax, [ebp - 0x34c]
push eax
mov eax, dword [ebp + 0x4c]
mov ecx, dword [eax - 0x58]
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x60]
mov edx, dword [ebp - 0x318]
call fcn.0040e324
lea eax, [ebp - 0x34c]
push eax
push 1
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x1c]
call fcn.007281c0
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dl, 1
call fcn.004e9ce4
jmp case.0x72a60c.67
cmp byte [ebp + 0x48], 0
jne case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0x49], 1
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0x280]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xcc], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x284]
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x20]
cmp al, 1
jne 0x72e8b3
mov eax, dword [ebp + 0x4c]
mov dword [eax - 0xcc], 0x1fffffff
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 0x5c]
call fcn.004e9b64
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x44]
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x288]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0x50], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x44]
mov edx, dword [ebp - 0x5c]
call fcn.004e9790
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x58]
push eax
mov eax, dword [ebp - 0x310]
push eax
mov eax, dword [ebp + 0x4c]
mov edx, dword [eax - 0x60]
mov ecx, dword [ebp - 0x318]
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax]
call dword [esi + 0x7c]
jmp case.0x72a60c.67
lea ecx, [ebp - 0x44]
mov edx, dword [ebx]
mov eax, 0x7303c0
call fcn.00729210
test eax, eax
jle case.0x72a60c.67
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x28c]
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x20]
cmp al, 1
jne 0x72e957
mov eax, dword [ebp + 0x4c]
mov dword [eax - 0xb0], 0x1fffffff
jmp 0x72e978
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x290]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xb0], eax
lea eax, [ebp - 0x3e4]
push eax
mov ecx, dword [ebp - 0x44]
sub ecx, 6
mov eax, dword [ebx]
mov edx, 6
call fcn.00409b24
mov eax, dword [ebp - 0x3e4]
lea edx, [ebp - 0xc]
call fcn.00420f18
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov eax, 0x7303d0
call fcn.00729210
test eax, eax
jle 0x72ea70
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0
je 0x72e9da
mov eax, dword [ebp - 0x294]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x294], eax
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x44]
add edx, 4
mov ecx, dword [ebp - 0x294]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0
je 0x72ea15
mov eax, dword [ebp - 0x298]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x298], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x7303e8
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x298]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x7303f8
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x10]
call fcn.004e92ec
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov eax, 0x730408
call fcn.00729210
test eax, eax
jle 0x72ebdf
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x68], 0
jne 0x72ebdf
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0
je 0x72eab8
mov eax, dword [ebp - 0x29c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x29c], eax
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x44]
add edx, 6
mov ecx, dword [ebp - 0x29c]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0
je 0x72eaf3
mov eax, dword [ebp - 0x2a0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2a0], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x730424
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x2a0]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x730434
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
cmp byte [ebp + 0x48], 0
jne 0x72ebdf
mov eax, dword [ebp + 0x4c]
cmp byte [eax - 0x91], 0
jne 0x72eb6d
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov edx, dword [eax + 0x18]
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x9c]
call fcn.004e8fb8
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0
je 0x72eb90
mov eax, dword [ebp - 0x2a4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0
jle 0x72ebdf
mov eax, dword [ebp - 0x10]
cmp word [eax], 0x23
jne 0x72ebb9
mov eax, dword [ebp - 0x10]
call fcn.00728e28
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e8fb8
jmp 0x72ebdf
lea edx, [ebp - 0x3e8]
mov eax, dword [ebp - 0x10]
call fcn.004211b0
mov eax, dword [ebp - 0x3e8]
call fcn.0072840c
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e8fb8
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov eax, 0x730444
call fcn.00729210
test eax, eax
jle 0x72ed31
cmp byte [ebp + 0x48], 0
jne 0x72ed31
mov eax, dword [ebp + 0x4c]
cmp byte [eax + 0x68], 0
jne 0x72ed31
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0
je 0x72ec31
mov eax, dword [ebp - 0x2a8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2a8], eax
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x44]
add edx, 7
mov ecx, dword [ebp - 0x2a8]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0
je 0x72ec6c
mov eax, dword [ebp - 0x2ac]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2ac], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x730460
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x2ac]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x730470
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0
je 0x72ecdc
mov eax, dword [ebp - 0x2b0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0
jle 0x72ed31
cmp byte [ebp + 0x48], 0
jne 0x72ed31
mov eax, dword [ebp - 0x10]
cmp word [eax], 0x23
jne 0x72ed0b
mov eax, dword [ebp - 0x10]
call fcn.00728e28
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
call fcn.004e9b64
jmp 0x72ed31
lea edx, [ebp - 0x3ec]
mov eax, dword [ebp - 0x10]
call fcn.004211b0
mov eax, dword [ebp - 0x3ec]
call fcn.0072840c
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
call fcn.004e9b64
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov eax, 0x730480
call fcn.00729210
test eax, eax
jle 0x72eef3
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
je 0x72ed6c
mov eax, dword [ebp - 0x2b4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2b4], eax
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x44]
add edx, 5
mov ecx, dword [ebp - 0x2b4]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0
je 0x72eda7
mov eax, dword [ebp - 0x2b8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2b8], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x730498
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x2b8]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0
je 0x72edf1
mov eax, dword [ebp - 0x2bc]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2bc], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x7304a8
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x2bc]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea edx, [ebp - 0x3f0]
mov eax, dword [ebp - 0x10]
call fcn.00420f18
mov edx, dword [ebp - 0x3f0]
mov ecx, 1
mov eax, 0x7304b8
call fcn.00409d34
test eax, eax
jle case.0x72a60c.67
lea eax, [ebp - 0x10]
mov ecx, 0xa
mov edx, 1
call fcn.00409b6c
lea edx, [ebp - 0x3f4]
mov eax, dword [ebp - 0x10]
call fcn.00420f18
mov edx, dword [ebp - 0x3f4]
mov ecx, 1
mov eax, 0x7304dc
call fcn.00409d34
test eax, eax
jle case.0x72a60c.67
lea eax, [ebp - 0x3fc]
push eax
lea edx, [ebp - 0x400]
mov eax, dword [ebp - 0x10]
call fcn.00420f18
mov edx, dword [ebp - 0x400]
mov ecx, 1
mov eax, 0x7304f0
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
mov eax, dword [ebp - 0x3fc]
lea edx, [ebp - 0x3f8]
call fcn.00421384
mov edx, dword [ebp - 0x3f8]
lea eax, [ebp - 0x10]
call fcn.00408b70
mov eax, dword [ebp - 0x10]
call fcn.00728f68
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9364
jmp case.0x72a60c.67
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov eax, 0x730504
call fcn.00729210
test eax, eax
jle case.0x72a60c.67
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0
je 0x72ef2e
mov eax, dword [ebp - 0x2c0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2c0], eax
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x44]
add edx, 4
mov ecx, dword [ebp - 0x2c0]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0
je 0x72ef69
mov eax, dword [ebp - 0x2c4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2c4], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x73051c
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x2c4]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0
je 0x72efb3
mov eax, dword [ebp - 0x2c8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2c8], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x73052c
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x2c8]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
call fcn.00728f68
cmp eax, 5
ja case.0x72efeb.0
jmp dword [eax*4 + 0x72eff2]
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x9c]
call fcn.004e9348
mov edx, eax
inc edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9364
jmp case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x9c]
call fcn.004e9348
mov edx, eax
add edx, 2
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9364
jmp case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x9c]
call fcn.004e9348
mov edx, eax
add edx, 4
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9364
jmp case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x9c]
call fcn.004e9348
mov edx, eax
add edx, 6
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9364
jmp case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x9c]
call fcn.004e9348
mov edx, eax
add edx, 8
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9364
jmp case.0x72a60c.67
mov eax, dword [ebp - 0x10]
call fcn.00728f68
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9364
jmp case.0x72a60c.67
mov eax, dword [ebx]
movzx eax, word [eax + 4]
mov word [ebp - 0x2ca], ax
movzx eax, word [ebp - 0x2ca]
mov word [ebp - 0x2cc], ax
movzx eax, word [ebp - 0x2ca]
add eax, 0xffffff9f
sub ax, 0x1a
jae 0x72f10e
movzx eax, word [ebp - 0x2ca]
and ax, 0xffdf
mov word [ebp - 0x2cc], ax
movzx eax, word [ebp - 0x2cc]
mov word [ebp - 0x76], ax
cmp word [ebp - 0x76], 0x3e
jne 0x72f15c
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x2d0]
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x21]
mov byte [ebp - 0x2d1], al
movzx edx, byte [0x72f894]
or dl, byte [ebp - 0x2d1]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9390
jmp case.0x72a60c.67
cmp word [ebp - 0x76], 0x54
jne 0x72f268
mov eax, dword [ebx]
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0
je 0x72f189
mov eax, dword [ebp - 0x2d8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 4
jle 0x72f1e0
mov eax, dword [ebx]
movzx eax, word [eax + 8]
mov word [ebp - 0x2da], ax
movzx eax, word [ebp - 0x2da]
mov word [ebp - 0x2dc], ax
movzx eax, word [ebp - 0x2da]
add eax, 0xffffff9f
sub ax, 0x1a
jae 0x72f1cf
movzx eax, word [ebp - 0x2da]
and ax, 0xffdf
mov word [ebp - 0x2dc], ax
cmp word [ebp - 0x2dc], 0x4f
sete byte [ebp - 0x2dd]
jmp 0x72f1e7
mov byte [ebp - 0x2dd], 0
cmp byte [ebp - 0x2dd], 0
je 0x72f22c
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2e4]
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x21]
mov byte [ebp - 0x2e5], al
movzx edx, byte [0x72f890]
or dl, byte [ebp - 0x2e5]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9390
jmp case.0x72a60c.67
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0x2ec], eax
mov eax, dword [ebp - 0x2ec]
mov eax, dword [eax + 0x10]
movzx eax, byte [eax + 0x21]
mov byte [ebp - 0x2ed], al
movzx edx, byte [0x72f894]
or dl, byte [ebp - 0x2ed]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x40]
call fcn.004e9390
jmp case.0x72a60c.67
cmp word [ebp - 0x76], 0x48
jne 0x72f27b
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0x64], 1
jmp case.0x72a60c.67
cmp word [ebp - 0x76], 0x50
jne 0x72f44d
lea ecx, [ebp - 0x44]
mov edx, dword [ebx]
mov eax, 0x73053c
call fcn.00729210
test eax, eax
jle case.0x72a60c.67
lea eax, [ebp - 0x404]
push eax
mov ecx, dword [ebp - 0x44]
sub ecx, 6
mov eax, dword [ebx]
mov edx, 6
call fcn.00409b24
mov eax, dword [ebp - 0x404]
lea edx, [ebp - 0xc]
call fcn.00420f18
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov eax, 0x73054c
call fcn.00729210
test eax, eax
jle case.0x72a60c.67
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0
je 0x72f2ff
mov eax, dword [ebp - 0x2f4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2f4], eax
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x44]
add edx, 5
mov ecx, dword [ebp - 0x2f4]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0
je 0x72f33a
mov eax, dword [ebp - 0x2f8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2f8], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x730564
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x2f8]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0
je 0x72f384
mov eax, dword [ebp - 0x2fc]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2fc], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x730574
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x2fc]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea edx, [ebp - 0x408]
mov eax, dword [ebp - 0x10]
call fcn.00420f18
mov edx, dword [ebp - 0x408]
mov ecx, 1
mov eax, 0x730584
call fcn.00409d34
test eax, eax
jle case.0x72a60c.67
lea eax, [ebp - 0x10]
mov ecx, 0x11
mov edx, 1
call fcn.00409b6c
lea edx, [ebp - 0x40c]
mov eax, dword [ebp - 0x10]
call fcn.00420f18
mov edx, dword [ebp - 0x40c]
mov ecx, 1
mov eax, 0x7305b4
call fcn.00409d34
dec eax
jne case.0x72a60c.67
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x300], eax
mov eax, dword [ebp - 0x300]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0xb0], eax
mov eax, dword [ebp - 0x10]
call fcn.00728e28
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x48]
call fcn.004e9b64
jmp case.0x72a60c.67
mov edx, dword [ebx]
mov eax, 0x7305c4
call fcn.00728ee0
dec eax
jne 0x72f468
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0x61], 1
jmp case.0x72a60c.67
mov edx, dword [ebx]
mov eax, 0x7305dc
call fcn.00728ee0
dec eax
jne case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0x62], 1
jmp case.0x72a60c.67
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebx]
mov ecx, 1
mov eax, 0x7305f4
call fcn.00409d34
mov ecx, eax
dec ecx
mov eax, dword [ebx]
mov edx, 3
call fcn.00409b24
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0
je 0x72f4ce
mov eax, dword [ebp - 0x304]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x304], eax
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x730604
call fcn.00728ee0
mov edx, eax
add edx, 2
mov ecx, dword [ebp - 0x304]
mov eax, dword [ebp - 0xc]
call fcn.00409b24
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0
je 0x72f515
mov eax, dword [ebp - 0x308]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x308], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x730614
call fcn.00409d34
mov edx, eax
inc edx
mov ecx, dword [ebp - 0x308]
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x730624
call fcn.00409d34
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.00409b24
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x10]
call fcn.00405e84
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0x4c]
push eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
call fcn.00729344
pop ecx
jmp case.0x72a60c.67
mov eax, dword [ebp + 0x4c]
mov byte [eax - 0x63], 1
lea ecx, [ebp - 0x44]
mov edx, dword [ebx]
mov eax, 0x730634
call fcn.00729210
test eax, eax
jle 0x72f5d7
cmp byte [ebp - 0x1e], 0
jne 0x72f5d7
lea eax, [ebp - 0x410]
push eax
mov eax, dword [ebx]
mov ecx, dword [ebp - 0x44]
mov edx, 1
call fcn.00409b24
mov edx, dword [ebp - 0x410]
lea eax, [ebp - 8]
call fcn.004098fc
mov eax, ebx
mov ecx, dword [ebp - 0x44]
mov edx, 1
call fcn.00409b6c
jmp 0x72f611
cmp byte [ebp - 0x1e], 0
jne 0x72f611
mov eax, dword [ebx]
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0
je 0x72f5ff
mov eax, dword [ebp - 0x30c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x30c], eax
mov eax, ebx
mov ecx, dword [ebp - 0x30c]
mov edx, 1
call fcn.00409b6c
mov eax, dword [ebx]
call fcn.00408c40
test eax, eax
jle 0x72f62c
cmp byte [ebp - 0x1d], 0
jne 0x72f62c
cmp byte [ebp - 0x1e], 0
je 0x7294fb
mov eax, dword [ebp + 0x44]
mov edx, dword [ebp - 0x28]
sub dword [eax], edx
mov eax, dword [ebp + 0x44]
mov eax, dword [eax]
mov edx, dword [ebp + 0x4c]
mov edx, dword [edx + 0x34]
cmp eax, dword [edx]
jle 0x72f653
mov eax, dword [ebp + 0x44]
mov eax, dword [eax]
add eax, 2
mov edx, dword [ebp + 0x4c]
mov edx, dword [edx + 0x34]
mov dword [edx], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax + 0x80]
mov edx, dword [ebp + 0x4c]
mov edx, dword [edx + 0x2c]
mov edx, dword [edx]
dec edx
cmp eax, edx
jne 0x72f6cf
mov eax, dword [ebp + 0x4c]
cmp byte [eax - 0x69], 0
je 0x72f6cf
cmp byte [ebp + 0x48], 0
jne 0x72f6cf
mov eax, dword [ebp + 0x4c]
mov edx, dword [ebp - 0x32c]
mov dword [eax - 0x38], edx
mov eax, dword [ebp + 0x4c]
mov edx, dword [ebp - 0x320]
mov dword [eax - 0x34], edx
mov eax, dword [ebp + 0x4c]
add eax, 0xffffffc0
xor ecx, ecx
mov edx, 1
call fcn.0040e460
cmp byte [ebp + 0x48], 0
jne 0x72f6b6
mov eax, dword [ebp + 0x4c]
lea edx, [eax - 0x40]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
mov eax, dword [ebp - 0x31c]
inc eax
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0x40], eax
mov eax, dword [ebp + 0x4c]
mov eax, dword [eax - 0x34]
mov edx, dword [ebp + 0x4c]
mov dword [edx - 0x3c], eax
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 8]
call fcn.00408b28
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x72f747
lea eax, [ebp - 0x410]
mov edx, 0x12
call fcn.004087a8
lea eax, [ebp - 0x3b8]
mov edx, 0x10
call fcn.004087a8
lea eax, [ebp - 0x370]
mov edx, 6
call fcn.004087a8
lea eax, [ebp - 0x358]
call fcn.00408748
lea eax, [ebp - 0x354]
mov edx, 2
call fcn.004087a8
lea eax, [ebp - 0x18]
mov edx, 6
call fcn.004087a8
ret