Function at 0x70226c
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x4a
push 0
push 0
dec ecx
jne 0x702274
push ebx
push esi
push edi
mov edi, edx
mov ebx, eax
xor eax, eax
push ebp
push 0x703c54
push dword fs:[eax]
mov dword fs:[eax], esp
test edi, edi
je 0x703beb
mov eax, ebx
call fcn.005c5dfc
mov edx, eax
mov eax, ebx
call fcn.006e6394
fstp dword [ebx + 0x4d0]
wait
mov dword [ebp - 0x21c], 0x114
lea eax, [ebp - 0x21c]
push eax
call sub.kernel32.dll_GetVersionExW
mov dword [ebx + 0x464], edi
lea eax, [ebp - 4]
mov edx, dword [edi + 0x4c]
call fcn.0040b48c
movzx eax, byte [edi + 0xf0]
mov byte [ebp - 0x35], al
mov dl, 1
mov eax, dword [0x4ecdc4]
call fcn.004f5220
mov dword [ebp - 0x58], eax
mov eax, ebx
call fcn.005c5dfc
mov edx, dword [eax + 0x40]
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, ebx
call fcn.005c5dfc
mov eax, dword [eax + 0x40]
mov edx, 0xfffffff3
call fcn.004f57b8
mov eax, ebx
call fcn.005c5dfc
lea edx, [ebp - 0x20]
call fcn.00701d78
push 4
mov eax, dword [ebp - 0x20]
push eax
push 8
call sub.kernel32.dll_MulDiv
mov dword [ebx + 0x43c], eax
push 8
mov eax, dword [ebp - 0x1c]
push eax
push 8
call sub.kernel32.dll_MulDiv
mov dword [ebx + 0x440], eax
push 4
mov eax, dword [ebp - 0x20]
push eax
push 8
call sub.kernel32.dll_MulDiv
mov dword [ebx + 0x444], eax
push 8
mov eax, dword [ebp - 0x1c]
push eax
push 8
call sub.kernel32.dll_MulDiv
mov dword [ebx + 0x448], eax
mov eax, ebx
call fcn.005c5dfc
mov eax, dword [eax + 0x40]
push eax
fld dword [ebx + 0x4d0]
fmul dword [0x703c64]
call fcn.00407c34
mov edx, eax
pop eax
call fcn.004f57b8
xor eax, eax
mov dword [ebx + 0x4d4], eax
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [edi + 0x40], 0
je 0x7023b3
mov edx, dword [edi + 0x40]
mov eax, ebx
call fcn.005fe5b0
jmp 0x7023cb
lea eax, [ebp - 0x220]
call fcn.007021bc
mov edx, dword [ebp - 0x220]
mov eax, ebx
call fcn.005fe5b0
lea edx, [ebp - 0x224]
mov eax, ebx
call fcn.005fe560
cmp dword [ebp - 0x224], 0
je 0x702432
mov dword [ebx + 0x4d4], 0x3e8
lea eax, [ebx + 0x4d4]
push eax
lea eax, [ebp - 0x50]
push eax
lea edx, [ebp - 0x228]
mov eax, ebx
call fcn.005fe560
mov eax, dword [ebp - 0x228]
push eax
mov eax, ebx
call fcn.005c5dfc
mov edx, eax
mov eax, ebx
pop ecx
call fcn.007020e0
fld dword [0x703c68]
fmul dword [ebx + 0x4d0]
call fcn.00407c34
add dword [ebx + 0x4d4], eax
mov eax, dword [ebx + 0x43c]
mov dword [ebx + 0x4a8], eax
mov eax, dword [ebx + 0x440]
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebx + 0x4d8], eax
xor eax, eax
mov dword [ebx + 0x4dc], eax
mov edx, edi
mov eax, ebx
call fcn.00704858
mov edx, edi
mov eax, ebx
call fcn.0070517c
mov eax, ebx
call fcn.005c5dfc
mov eax, dword [eax + 0x40]
push eax
fld dword [ebx + 0x4d0]
fmul dword [0x703c6c]
call fcn.00407c34
mov edx, eax
pop eax
call fcn.004f57b8
mov eax, ebx
call fcn.005c5dfc
mov eax, dword [eax + 0x40]
movzx edx, byte [0x703c70]
call fcn.004f58b4
push 0
mov eax, dword [0x8cd5f4]
mov eax, dword [eax]
call fcn.005cc2f0
sar eax, 1
jns 0x7024b8
adc eax, 0
push eax
push 0
push 0
lea eax, [ebp - 0xe8]
push eax
call sub.user32.dll_SetRect
mov eax, ebx
call fcn.005c5dfc
call fcn.004f7324
mov dword [ebp - 0x80], eax
mov esi, dword [ebp - 4]
test esi, esi
je 0x7024e2
mov esi, dword [esi - 4]
mov eax, ebx
call fcn.00601270
or eax, 0x450
push eax
lea eax, [ebp - 0xe8]
push eax
inc esi
push esi
mov eax, dword [ebp - 4]
call fcn.0040becc
push eax
mov eax, dword [ebp - 0x80]
push eax
call sub.user32.dll_DrawTextW
mov eax, ebx
call fcn.005c5dfc
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x58]
mov ecx, dword [eax]
call dword [ecx + 8]
movzx eax, byte [ebp - 0x35]
mov esi, dword [eax*4 + 0x84d1a0]
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x24], eax
test esi, esi
je 0x70254e
fld dword [0x703c74]
fmul dword [ebx + 0x4d0]
call fcn.00407c34
add eax, dword [ebx + 0x444]
add dword [ebp - 0x24], eax
test esi, esi
jne 0x702562
mov eax, dword [edi + 0x70]
mov edx, dword [eax]
call dword [edx + 0x20]
test al, al
jne 0x70265a
mov ecx, ebx
mov dl, 1
mov eax, dword [0x5760cc]
call fcn.0057a408
mov dword [ebx + 0x47c], eax
mov eax, dword [ebx + 0x47c]
mov dword [ebp - 0x6c], eax
mov edx, 0x703c84
mov eax, dword [ebp - 0x6c]
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov edx, ebx
mov eax, dword [ebp - 0x6c]
mov ecx, dword [eax]
call dword [ecx + 0xa0]
mov eax, dword [edi + 0x70]
mov edx, dword [eax]
call dword [edx + 0x20]
test al, al
jne 0x7025bd
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x1e0]
call fcn.004f9e30
mov edx, dword [edi + 0x70]
mov ecx, dword [eax]
call dword [ecx + 8]
jmp 0x70261f
movzx eax, byte [edi + 0xf0]
sub al, 1
jb 0x7025f3
sub al, 5
jne 0x702602
push 0x703c90
mov eax, dword [0x8d163c]
push eax
call sub.user32.dll_LoadBitmapW
push eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x1e0]
call fcn.004f9e00
pop edx
call fcn.004fe954
jmp 0x70261f
mov eax, dword [ebx + 0x47c]
xor edx, edx
call fcn.005fe464
jmp 0x70261f
push esi
push 0
call sub.user32.dll_LoadIconW
push eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x1e0]
call fcn.004f9e30
pop edx
call fcn.004ffbd8
fld dword [0x703c74]
fmul dword [ebx + 0x4d0]
call fcn.00407c34
push eax
fld dword [0x703c74]
fmul dword [ebx + 0x4d0]
call fcn.00407c34
push eax
mov ecx, dword [ebp - 0x2c]
sub ecx, 5
mov edx, dword [ebx + 0x43c]
mov eax, dword [ebp - 0x6c]
mov esi, dword [eax]
call dword [esi + 0xe0]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 4], 0
je 0x702799
mov ecx, ebx
mov dl, 1
mov eax, dword [0x52aef8]
call fcn.00538278
mov dword [ebx + 0x438], eax
mov eax, dword [ebx + 0x438]
mov dword [ebp - 0x70], eax
mov edx, 0x703cb0
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov edx, ebx
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
call dword [ecx + 0xa0]
mov dl, 1
mov eax, dword [ebp - 0x70]
call fcn.00539048
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x70]
call fcn.005fe5b0
fld dword [ebx + 0x4d0]
fmul dword [0x703c6c]
call fcn.00407c34
mov edx, eax
mov eax, dword [ebp - 0x70]
mov eax, dword [eax + 0x74]
call fcn.004f57b8
cmp dword [ebx + 0x4e0], 0x1fffffff
je 0x7026f3
mov edx, dword [ebx + 0x4e0]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax + 0x74]
call fcn.004f551c
jmp 0x702703
mov eax, dword [ebp - 0x70]
mov eax, dword [eax + 0x74]
mov edx, 0xc45300
call fcn.004f551c
lea edx, [ebp - 0xe8]
mov eax, dword [ebp - 0x70]
call fcn.005fdb1c
movzx edx, byte [ebx + 0x70]
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
call dword [ecx + 0xa8]
xor edx, edx
mov eax, dword [ebp - 0x70]
call fcn.00538fd4
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0xe0]
add eax, dword [ebx + 0x43c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x70]
mov si, 0xffc6
call fcn.00409574
test al, al
je 0x70275f
mov eax, ebx
call fcn.005fdb58
sub eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x70]
sub eax, dword [edx + 0x58]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0xe0]
push eax
mov eax, dword [ebp - 0xdc]
push eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x70]
mov esi, dword [eax]
call dword [esi + 0xe0]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax + 0x5c]
add eax, dword [ebp - 0x2c]
add eax, dword [ebx + 0x448]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x30]
mov dword [ebx + 0x4a8], eax
test byte [edi + 0x75], 2
jne 0x7027b4
cmp byte [edi + 0x9c], 0
jne 0x7027b4
test byte [edi + 0x75], 1
jne 0x7027b4
test byte [edi + 0x74], 0x80
je 0x7027f6
mov ecx, ebx
mov dl, 1
mov eax, dword [0x576e7c]
call fcn.0057b230
mov dword [ebx + 0x4a0], eax
mov eax, dword [ebx + 0x4a0]
mov edx, 0x64
call fcn.0057b3d8
push ebx
push 0x708830
mov eax, dword [ebx + 0x4a0]
call fcn.0057b3e8
mov eax, dword [ebx + 0x4a0]
mov dl, 1
call fcn.0057b3c8
test byte [edi + 0x74], 0x80
je 0x702903
mov ecx, ebx
mov dl, 1
mov eax, dword [0x554840]
call fcn.0055e02c
mov dword [ebx + 0x478], eax
mov esi, dword [ebx + 0x478]
mov edx, 0x703cc8
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov edx, ebx
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0xa0]
fld dword [0x703ce0]
fmul dword [ebx + 0x4d0]
call fcn.00407c34
add eax, dword [ebp - 0x2c]
push eax
lea eax, [ebp - 0x238]
push eax
mov ecx, dword [esi + 0x58]
sub ecx, dword [ebx + 0x43c]
mov eax, dword [ebx + 0x43c]
mov edx, dword [ebp - 0x2c]
call fcn.00415460
lea edx, [ebp - 0x238]
mov eax, esi
call fcn.005fdb1c
mov edx, dword [edi + 0x94]
mov eax, esi
call fcn.0055e528
mov edx, dword [edi + 0x98]
mov eax, esi
call fcn.0055e53c
xor edx, edx
mov eax, esi
call fcn.0055e5c4
cmp dword [ebx + 0x4a0], 0
jne 0x7028e0
mov ecx, ebx
mov dl, 1
mov eax, dword [0x576e7c]
call fcn.0057b230
mov dword [ebx + 0x4a0], eax
mov eax, dword [ebx + 0x4a0]
mov edx, 0x64
call fcn.0057b3d8
push ebx
push 0x708830
mov eax, dword [ebx + 0x4a0]
call fcn.0057b3e8
mov eax, dword [ebx + 0x4a0]
mov dl, 1
call fcn.0057b3c8
test byte [edi + 0x75], 1
je 0x702903
mov eax, dword [ebx + 0x478]
mov edx, 0xa
call fcn.0055e550
mov eax, dword [ebx + 0x478]
mov dl, 1
call fcn.0055e694
mov eax, dword [edi + 0x78]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x702b84
xor eax, eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebx + 0x464]
test byte [eax + 0x75], 4
je 0x702931
mov eax, dword [ebx + 0x464]
xor edx, edx
mov dword [eax + 0x60], edx
jmp 0x702946
mov eax, dword [ebx + 0x464]
mov eax, dword [eax + 0xf8]
mov edx, dword [ebx + 0x464]
mov dword [edx + 0x60], eax
mov eax, dword [edi + 0x78]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x702b84
inc eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x3c], 0
mov eax, dword [ebx + 0x464]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov edx, eax
mov eax, dword [ebx + 0x470]
call fcn.004b580c
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x3c]
push eax
push ebx
push 0x7089c0
mov eax, dword [ebx + 0x470]
mov edx, dword [ebp - 0x40]
call fcn.004b59e4
mov ecx, eax
mov edx, ebx
mov eax, edi
mov esi, dword [eax]
call dword [esi + 0x4c]
mov eax, dword [ebx + 0x470]
mov edx, dword [ebp - 0x40]
call fcn.004b59e4
mov dword [ebp - 0x78], eax
lea edx, [ebp - 0xe8]
mov eax, dword [ebp - 0x78]
call fcn.005fdb1c
mov edx, dword [ebx + 0x4a8]
add edx, dword [ebx + 0x43c]
mov eax, dword [ebp - 0x78]
call fcn.005fd838
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x78]
call fcn.005fd86c
mov edx, dword [ebx + 0x58]
mov eax, dword [ebp - 0x78]
sub edx, dword [eax + 0x50]
sub edx, 4
mov eax, dword [ebp - 0x78]
call fcn.005fd8a4
mov dword [ebp - 0x4c], 0x7d0
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x23c]
mov eax, dword [edi + 0x78]
mov edx, dword [ebp - 0x3c]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x23c]
push eax
mov eax, ebx
call fcn.005c5dfc
mov edx, eax
mov eax, ebx
pop ecx
call fcn.007020e0
mov eax, dword [ebx + 0x4d4]
cdq
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], edx
fld dword [0x703ce4]
fmul dword [ebx + 0x4d0]
call fcn.00407c34
push edx
push eax
mov eax, dword [ebp - 0x78]
mov eax, dword [eax + 0x50]
add eax, dword [ebp - 0x4c]
add eax, dword [ebx + 0x43c]
cdq
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], edx
mov eax, dword [ebp - 0x88]
mov edx, dword [ebp - 0x84]
cmp edx, dword [ebp - 0x8c]
jne 0x702a96
cmp eax, dword [ebp - 0x90]
jbe 0x702ab2
jmp 0x702a98
jle 0x702ab2
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x94], eax
jmp 0x702aca
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x98]
mov dword [ebx + 0x4d4], eax
lea ecx, [ebp - 0x240]
mov eax, dword [edi + 0x78]
mov edx, dword [ebp - 0x3c]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x240]
push eax
mov eax, dword [ebx + 0x470]
mov edx, dword [ebp - 0x40]
call fcn.004b59e4
mov edx, eax
mov eax, edi
pop ecx
mov esi, dword [eax]
call dword [esi + 0x54]
test byte [edi + 0x75], 4
je 0x702b27
mov eax, dword [ebx + 0x470]
mov edx, dword [ebp - 0x40]
call fcn.004b59e4
mov edx, eax
xor ecx, ecx
mov eax, edi
mov esi, dword [eax]
call dword [esi + 0x50]
jmp 0x702b78
cmp dword [edi + 0xf8], 0
jle 0x702b5a
mov eax, dword [ebx + 0x470]
mov edx, dword [ebp - 0x40]
call fcn.004b59e4
mov edx, eax
mov eax, dword [ebp - 0x40]
add eax, 0xc8
cmp eax, dword [edi + 0xf8]
sete cl
mov eax, edi
mov esi, dword [eax]
call dword [esi + 0x50]
jmp 0x702b78
mov eax, dword [ebx + 0x470]
mov edx, dword [ebp - 0x40]
call fcn.004b59e4
mov edx, eax
cmp dword [ebp - 0x3c], 0
sete cl
mov eax, edi
mov esi, dword [eax]
call dword [esi + 0x50]
inc dword [ebp - 0x3c]
dec dword [ebp - 0x74]
jne 0x702962
cmp dword [edi + 0x54], 0
je 0x702e1b
xor eax, eax
mov dword [ebx + 0x490], eax
xor eax, eax
mov dword [ebx + 0x494], eax
imul eax, dword [ebx + 0x4d4], 0x1a
mov dword [ebp - 0x244], eax
fild dword [ebp - 0x244]
call fcn.00407c34
add eax, dword [ebp - 0x2c]
push eax
lea eax, [ebp - 0xf8]
push eax
mov eax, dword [ebx + 0x43c]
mov ecx, 0x12c
mov edx, dword [ebp - 0x2c]
call fcn.00415460
mov eax, dword [ebx + 0x464]
test byte [eax + 0x74], 1
je 0x702cd1
movzx eax, byte [0x703c70]
push eax
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebx + 0x464]
mov eax, dword [eax + 0x54]
mov ecx, 0x703cf4
mov edx, 0x703d0c
call fcn.0043b2b4
movzx eax, byte [0x703c70]
push eax
lea eax, [ebp - 0x248]
push eax
mov ecx, 0x703cf4
mov edx, 0x703d20
mov eax, dword [ebp - 0x14]
call fcn.0043b2b4
mov edx, dword [ebp - 0x248]
lea eax, [ebp - 0x14]
call fcn.0040b48c
push 0
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x2c]
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push 1
push 1
push 0
push 1
push 1
push 0x3ff00000
push 0
push 0xff0000
push 0x1fffffff
push 0x1fffffff
push 0x808080
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebx + 0x490]
push eax
lea eax, [ebx + 0x494]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x108]
push eax
push 0
push 0
push 0
push 0
push 0xff00000d
push 0xff00000e
movzx eax, byte [0x703d24]
push eax
push 0xbf800000
mov eax, ebx
call fcn.005c5dfc
lea ecx, [ebp - 0xf8]
mov edx, dword [ebp - 0x14]
call fcn.006fa65c
jmp 0x702d28
movzx eax, byte [0x703c70]
push eax
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebx + 0x464]
mov eax, dword [eax + 0x54]
mov ecx, 0x703d34
mov edx, 0x703d0c
call fcn.0043b2b4
mov eax, dword [ebp - 0xf0]
sub eax, dword [ebp - 0xf8]
mov dword [ebx + 0x490], eax
lea eax, [ebx + 0x490]
push eax
lea eax, [ebx + 0x494]
push eax
mov eax, ebx
call fcn.005c5dfc
mov edx, eax
mov ecx, dword [ebp - 0x14]
mov eax, ebx
call fcn.007020e0
mov ecx, ebx
mov dl, 1
mov eax, dword [0x6fe034]
call fcn.007014b8
mov dword [ebx + 0x44c], eax
mov esi, dword [ebx + 0x44c]
mov edx, 0x703d44
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov edx, ebx
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0xa0]
xor edx, edx
mov eax, esi
call fcn.005fe5b0
xor eax, eax
mov dword [esi + 0x300], eax
mov edx, 0x13
mov eax, esi
call fcn.005fd8a4
mov edx, 0x13
mov eax, esi
call fcn.005fd8d8
mov dword [esi + 0x124], ebx
mov dword [esi + 0x120], fcn.0070701c
mov eax, dword [esi + 0x2e0]
mov ecx, 0x703d6c
mov edx, dword [0x8d163c]
call fcn.004fe09c
mov eax, dword [esi + 0x2e0]
mov edx, 0xff00ff
call fcn.004fee50
mov eax, dword [esi + 0x2ec]
mov ecx, 0x703d88
mov edx, dword [0x8d163c]
call fcn.004fe09c
mov eax, dword [esi + 0x2ec]
mov edx, 0xff00ff
call fcn.004fee50
mov eax, dword [esi + 0x2e8]
mov ecx, 0x703dac
mov edx, dword [0x8d163c]
call fcn.004fe09c
mov eax, dword [esi + 0x2e8]
mov edx, 0xff00ff
call fcn.004fee50
movzx eax, byte [0x703d24]
cmp al, byte [edi + 0x51]
je 0x702e1b
mov dword [esi + 0x30c], 0xf0f0f0
xor eax, eax
mov dword [ebp - 0x5c], eax
cmp dword [edi + 0x68], 0
je 0x702f99
xor eax, eax
mov dword [ebp - 0x4c], eax
mov ecx, ebx
mov dl, 1
mov eax, dword [0x532b18]
call fcn.0054026c
mov dword [ebx + 0x474], eax
mov esi, dword [ebx + 0x474]
mov edx, 0x703dd0
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov edx, ebx
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0xa0]
xor edx, edx
mov eax, esi
call fcn.0053eaf8
lea edx, [ebp - 0xe8]
mov eax, esi
call fcn.005fdb1c
movzx edx, byte [ebx + 0x70]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov edx, dword [edi + 0x68]
mov eax, esi
call fcn.005fe5b0
mov edx, dword [ebx + 0x43c]
mov eax, esi
call fcn.005fd838
mov edx, dword [ebp - 0x2c]
mov eax, esi
call fcn.005fd86c
test byte [edi + 0x74], 2
je 0x702eba
mov edx, 0xff000005
mov eax, esi
call fcn.005fe73c
jmp 0x702ec7
mov edx, dword [edi + 0x124]
mov eax, esi
call fcn.005fe73c
mov dword [esi + 0x124], ebx
mov dword [esi + 0x120], 0x708954
test byte [edi + 0x74], 0x40
setne dl
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x170]
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x16c]
mov byte [edi + 0x64], al
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x50]
push eax
lea edx, [ebp - 0x24c]
mov eax, esi
call fcn.005fe560
mov eax, dword [ebp - 0x24c]
push eax
mov eax, ebx
call fcn.005c5dfc
mov edx, eax
mov eax, ebx
pop ecx
call fcn.007020e0
mov eax, dword [ebx + 0x448]
add eax, eax
add eax, dword [ebp - 0x4c]
add eax, 0x10
mov dword [ebp - 0x5c], eax
mov eax, dword [ebx + 0x4d4]
mov dword [ebp - 0x9c], eax
mov eax, dword [esi + 0x50]
add eax, dword [ebp - 0x4c]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x9c]
cmp eax, dword [ebp - 0xa0]
jle 0x702f67
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xa4], eax
jmp 0x702f73
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebx + 0x4d4], eax
fld dword [0x703dec]
fmul dword [ebx + 0x4d0]
call fcn.00407c34
mov edx, eax
mov eax, esi
call fcn.005fd8d8
xor eax, eax
mov dword [ebx + 0x480], eax
xor eax, eax
mov dword [ebx + 0x484], eax
cmp dword [edi + 0x48], 0
je 0x70315e
fld dword [0x703df0]
fmul dword [ebx + 0x4d0]
call fcn.00407c34
add eax, dword [ebp - 0x2c]
push eax
lea eax, [ebp - 0xf8]
push eax
mov eax, dword [ebx + 0x43c]
mov ecx, 0x12c
mov edx, dword [ebp - 0x2c]
call fcn.00415460
movzx eax, byte [0x703c70]
push eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebx + 0x464]
mov eax, dword [eax + 0x48]
mov ecx, 0x703cf4
mov edx, 0x703d0c
call fcn.0043b2b4
movzx eax, byte [0x703c70]
push eax
lea eax, [ebp - 0x250]
push eax
mov ecx, 0x703cf4
mov edx, 0x703d20
mov eax, dword [ebp - 0x18]
call fcn.0043b2b4
mov edx, dword [ebp - 0x250]
lea eax, [ebp - 0x18]
call fcn.0040b48c
push 0
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x2c]
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push 1
push 1
push 0
push 1
push 1
push 0x3ff00000
push 0
push 0xff0000
push 0x1fffffff
push 0x1fffffff
push 0x808080
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebx + 0x480]
push eax
lea eax, [ebx + 0x484]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x108]
push eax
push 0
push 0
push 0
push 0
push 0xff00000d
push 0xff00000e
movzx eax, byte [0x703d24]
push eax
push 0xbf800000
mov eax, ebx
call fcn.005c5dfc
lea ecx, [ebp - 0xf8]
mov edx, dword [ebp - 0x18]
call fcn.006fa65c
movzx eax, byte [edi + 0xf1]
mov esi, dword [eax*4 + 0x84d1bc]
test esi, esi
je 0x70315e
mov ecx, ebx
mov dl, 1
mov eax, dword [0x5760cc]
call fcn.0057a408
mov dword [ebx + 0x468], eax
mov dword [ebx + 0x46c], esi
mov eax, dword [ebx + 0x468]
mov dword [ebp - 0x7c], eax
mov edx, 0x703e00
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov edx, ebx
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax]
call dword [ecx + 0xa0]
xor edx, edx
mov eax, dword [ebp - 0x7c]
call fcn.005fe464
fld dword [ebx + 0x4d0]
fmul dword [0x703dec]
call fcn.00407c34
push eax
fld dword [ebx + 0x4d0]
fmul dword [0x703dec]
call fcn.00407c34
push eax
mov edx, dword [ebx + 0x43c]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x7c]
mov esi, dword [eax]
call dword [esi + 0xe0]
mov eax, dword [ebx + 0x4d8]
add eax, dword [ebx + 0x4dc]
add eax, dword [ebp - 0x5c]
mov dword [ebp - 0x34], eax
cmp dword [edi + 0x54], 0
je 0x703216
cmp dword [ebx + 0x44c], 0
je 0x703216
xor eax, eax
mov dword [ebp - 0x4c], eax
xor eax, eax
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x50]
push eax
mov eax, ebx
call fcn.005c5dfc
mov edx, eax
mov eax, dword [ebx + 0x464]
mov ecx, dword [eax + 0x58]
mov eax, ebx
call fcn.007020e0
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x50]
push eax
mov eax, ebx
call fcn.005c5dfc
mov edx, eax
mov eax, dword [ebx + 0x464]
mov ecx, dword [eax + 0x5c]
mov eax, ebx
call fcn.007020e0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x54]
jle 0x7031e6
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xa8], eax
jmp 0x7031ef
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebx + 0x44c]
mov eax, dword [eax + 0x58]
add eax, dword [ebp - 0x34]
add eax, dword [ebx + 0x444]
add eax, dword [ebp - 0x4c]
add eax, dword [ebx + 0x444]
mov dword [ebp - 0x34], eax
cmp dword [edi + 0x44], 0
jne 0x703230
fld dword [0x703ce4]
fmul dword [ebx + 0x4d0]
call fcn.00407c34
sub dword [ebp - 0x2c], eax
movzx eax, byte [edi + 0x10d]
cmp eax, 8
ja case.0x703240.6
jmp dword [eax*4 + 0x703247]
mov ecx, ebx
mov dl, 1
mov eax, dword [0x52c214]
call fcn.005392f8
mov dword [ebx + 0x4b0], eax
mov eax, dword [ebx + 0x4b0]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0xa0]
mov eax, dword [ebx + 0x4b0]
mov edx, 0x703e24
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov eax, dword [ebx + 0x4b0]
mov dl, 1
call fcn.006084ec
mov edx, dword [edi + 0x110]
mov eax, dword [ebx + 0x4b0]
call fcn.005fe5b0
mov edx, dword [edi + 0x130]
mov eax, dword [ebx + 0x4b0]
call fcn.00539510
cmp byte [edi + 0x10d], 8
jne 0x7032e8
mov eax, dword [ebx + 0x4b0]
mov dx, 0x2a
call fcn.00539684
jmp 0x7032f5
mov eax, dword [ebx + 0x4b0]
xor edx, edx
call fcn.00539684
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0xe0]
add eax, dword [ebx + 0x43c]
mov dword [ebp - 0x30], eax
mov eax, ebx
mov si, 0xffc6
call fcn.00409574
test al, al
je 0x703326
mov eax, ebx
call fcn.005fdb58
sub eax, dword [ebp - 0x30]
sub eax, dword [ebx + 0x58]
mov dword [ebp - 0x30], eax
mov eax, ebx
call fcn.005fdb58
sub eax, dword [ebp - 0x30]
push eax
fld dword [0x703ce4]
fmul dword [ebx + 0x4d0]
call fcn.00407c34
push eax
fld dword [0x703ce4]
fmul dword [ebx + 0x4d0]
call fcn.00407c34
mov ecx, eax
add ecx, dword [ebp - 0x2c]
mov eax, dword [ebx + 0x4b0]
mov edx, dword [ebp - 0x30]
mov esi, dword [eax]
call dword [esi + 0xe0]
jmp case.0x703240.6
mov ecx, ebx
mov dl, 1
mov eax, dword [0x52f710]
call fcn.0053cf60
mov dword [ebx + 0x4b4], eax
mov eax, dword [ebx + 0x4b4]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0xa0]
mov eax, dword [ebx + 0x4b4]
mov edx, 0x703e48
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov eax, dword [ebx + 0x4b4]
mov dl, 1
call fcn.006084ec
mov edx, dword [edi + 0x110]
mov eax, dword [ebx + 0x4b4]
call fcn.005fe5b0
mov edx, dword [edi + 0x120]
mov eax, dword [ebx + 0x4b4]
mov ecx, dword [eax]
call dword [ecx + 0x1b0]
mov edx, dword [edi + 0x114]
mov eax, dword [ebx + 0x4b4]
mov eax, dword [eax + 0x304]
mov ecx, dword [eax]
call dword [ecx + 8]
mov edx, dword [edi + 0x130]
mov eax, dword [ebx + 0x4b4]
call fcn.0053bab0
cmp byte [edi + 0x10d], 3
jne 0x70345c
mov eax, dword [ebx + 0x4b4]
mov dl, 2
mov ecx, dword [eax]
call dword [ecx + 0x1c8]
cmp dword [edi + 0x134], 0xffffffff
jge 0x703448
mov edx, dword [edi + 0x110]
mov eax, dword [ebx + 0x4b4]
mov eax, dword [eax + 0x304]
mov ecx, dword [eax]
call dword [ecx + 0x58]
mov edx, eax
mov eax, dword [ebx + 0x4b4]
mov ecx, dword [eax]
call dword [ecx + 0x170]
jmp 0x70345c
mov edx, dword [edi + 0x134]
mov eax, dword [ebx + 0x4b4]
mov ecx, dword [eax]
call dword [ecx + 0x170]
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0xe0]
add eax, dword [ebx + 0x43c]
mov dword [ebp - 0x30], eax
mov eax, ebx
mov si, 0xffc6
call fcn.00409574
test al, al
je 0x70348d
mov eax, ebx
call fcn.005fdb58
sub eax, dword [ebp - 0x30]
sub eax, dword [ebx + 0x58]
mov dword [ebp - 0x30], eax
mov eax, ebx
call fcn.005fdb58
sub eax, dword [ebp - 0x30]
push eax
fld dword [0x703e64]
fmul dword [ebx + 0x4d0]
call fcn.00407c34
push eax
fld dword [0x703ce4]
fmul dword [ebx + 0x4d0]
call fcn.00407c34
mov ecx, eax
add ecx, dword [ebp - 0x2c]
mov eax, dword [ebx + 0x4b4]
mov edx, dword [ebp - 0x30]
mov esi, dword [eax]
call dword [esi + 0xe0]
jmp case.0x703240.6
mov ecx, ebx
mov dl, 1
mov eax, dword [0x5597f4]
call fcn.005640e0
mov dword [ebx + 0x4b8], eax
mov eax, dword [ebx + 0x4b8]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0xa0]
mov eax, dword [ebx + 0x4b8]
mov edx, 0x703e74
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov eax, dword [ebx + 0x4b8]
mov dl, 1
call fcn.006084ec
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0xe0]
add eax, dword [ebx + 0x43c]
mov dword [ebp - 0x30], eax
mov eax, ebx
mov si, 0xffc6
call fcn.00409574
test al, al
je 0x703548
mov eax, ebx
call fcn.005fdb58
sub eax, dword [ebp - 0x30]
sub eax, dword [ebx + 0x58]
mov dword [ebp - 0x30], eax
cmp byte [edi + 0x10d], 4
jne 0x703560
mov eax, dword [ebx + 0x4b8]
xor edx, edx
call fcn.00564e44
jmp 0x70356d
mov eax, dword [ebx + 0x4b8]
mov dl, 1
call fcn.00564e44
fldz
fld qword [edi + 0x138]
fucompp
wait
fnstsw ax
test ah, 0x44
jnp 0x703598
push dword [edi + 0x13c]
push dword [edi + 0x138]
mov eax, dword [ebx + 0x4b8]
call fcn.00563998
jmp 0x7035d8
mov eax, dword [edi + 0x110]
mov dword [ebp - 0xac], eax
mov ecx, dword [0x8cd33c]
lea edx, [ebp - 0x68]
mov eax, dword [ebp - 0xac]
call fcn.00437218
mov byte [ebp - 0xad], al
cmp byte [ebp - 0xad], 0
je 0x7035d8
push dword [ebp - 0x64]
push dword [ebp - 0x68]
mov eax, dword [ebx + 0x4b8]
call fcn.005638d4
cmp dword [edi + 0x140], 0
je 0x7035f2
mov edx, dword [edi + 0x140]
mov eax, dword [ebx + 0x4b8]
call fcn.00564f5c
fld dword [0x703ce4]
fmul dword [ebx + 0x4d0]
call fcn.00407c34
mov edx, eax
add edx, dword [ebp - 0x2c]
mov eax, dword [ebx + 0x4b8]
call fcn.005fd86c
mov eax, dword [ebx + 0x4b8]
mov edx, dword [ebp - 0x30]
call fcn.005fd838
jmp case.0x703240.6
mov ecx, ebx
mov dl, 1
mov eax, dword [0x52d5dc]
call fcn.0053ae24
mov dword [ebx + 0x4bc], eax
mov eax, dword [ebx + 0x4bc]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0xa0]
mov eax, dword [ebx + 0x4bc]
mov edx, 0x703e98
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov eax, dword [ebx + 0x4bc]
mov dl, 1
call fcn.006084ec
mov eax, dword [edi + 0x154]
movzx eax, byte [eax + 4]
mov edx, dword [ebx + 0x4bc]
mov byte [edx + 0x30e], al
mov edx, dword [edi + 0x130]
mov eax, dword [ebx + 0x4bc]
call fcn.00539510
mov eax, dword [edi + 0x154]
mov edx, dword [eax + 8]
mov eax, dword [ebx + 0x4bc]
call fcn.005fd8d8
mov edx, dword [edi + 0x110]
mov eax, dword [ebx + 0x4bc]
mov eax, dword [eax + 0x308]
mov ecx, dword [eax]
call dword [ecx + 0x30]
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0xe0]
add eax, dword [ebx + 0x43c]
mov dword [ebp - 0x30], eax
mov eax, ebx
mov si, 0xffc6
call fcn.00409574
test al, al
je 0x7036ea
mov eax, ebx
call fcn.005fdb58
sub eax, dword [ebp - 0x30]
sub eax, dword [ebx + 0x58]
mov dword [ebp - 0x30], eax
mov eax, ebx
call fcn.005fdb58
sub eax, dword [ebp - 0x30]
push eax
mov eax, dword [edi + 0x154]
mov eax, dword [eax + 8]
push eax
fld dword [0x703ce4]
fmul dword [ebx + 0x4d0]
call fcn.00407c34
mov ecx, eax
add ecx, dword [ebp - 0x2c]
mov eax, dword [ebx + 0x4bc]
mov edx, dword [ebp - 0x30]
mov esi, dword [eax]
call dword [esi + 0xe0]
jmp case.0x703240.6
cmp dword [edi + 0x118], 0
je case.0x703240.6
mov eax, dword [edi + 0x118]
mov eax, dword [eax + 0x40]
mov dword [ebx + 0x4c0], eax
mov eax, dword [edi + 0x118]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0xa0]
mov eax, dword [edi + 0x118]
mov dl, 1
call fcn.005fe464
cmp word [edi + 0xea], 0
je 0x703784
mov ecx, dword [edi + 0x110]
mov edx, edi
mov eax, dword [edi + 0xec]
call dword [edi + 0xe8]
jmp 0x7037d4
mov eax, dword [edi + 0x118]
mov edx, dword [0x54d238]
call fcn.00409488
test al, al
jne 0x7037b8
mov eax, dword [edi + 0x110]
call fcn.0040becc
push eax
mov eax, dword [edi + 0x118]
call fcn.00608158
push eax
call sub.user32.dll_SetWindowTextW
jmp 0x7037d4
mov eax, dword [edi + 0x118]
mov edx, dword [0x54d238]
call fcn.004094ac
mov edx, dword [edi + 0x110]
call fcn.0054e430
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0xe0]
add eax, dword [ebx + 0x43c]
mov dword [ebp - 0x30], eax
mov eax, ebx
mov si, 0xffc6
call fcn.00409574
test al, al
je 0x703805
mov eax, ebx
call fcn.005fdb58
sub eax, dword [ebp - 0x30]
sub eax, dword [ebx + 0x58]
mov dword [ebp - 0x30], eax
mov eax, dword [edi + 0x118]
mov edx, dword [ebp - 0x30]
call fcn.005fd838
fld dword [0x703ce4]
fmul dword [ebx + 0x4d0]
call fcn.00407c34
mov edx, eax
add edx, dword [ebp - 0x2c]
mov eax, dword [edi + 0x118]
call fcn.005fd86c
mov eax, dword [ebx + 0x4d4]
mov dword [ebp - 0xb4], eax
mov eax, dword [edi + 0x118]
mov eax, dword [eax + 0x58]
add eax, dword [ebp - 0x30]
add eax, dword [ebx + 0x43c]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0xb8]
jle 0x703874
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xbc], eax
jmp 0x703880
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebx + 0x4d4], eax
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x34]
jle 0x703899
mov eax, dword [ebp - 0x24]
jmp 0x70389c
mov eax, dword [ebp - 0x34]
mov edx, dword [ebx + 0x480]
cmp eax, edx
jge 0x7038a8
mov eax, edx
mov edx, dword [ebx + 0x43c]
add edx, edx
add eax, edx
mov dword [ebp - 0x4c], eax
mov eax, dword [ebx + 0x490]
mov edx, dword [ebx + 0x43c]
add edx, edx
add eax, edx
cmp eax, dword [ebp - 0x4c]
jg 0x7038cd
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebx + 0x4d4]
cmp eax, dword [ebp - 0x4c]
jle 0x7038e3
mov dword [ebp - 0xc0], eax
jmp 0x7038ec
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebx + 0x4d4], eax
mov eax, dword [ebx + 0x4d4]
cdq
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], edx
fild dword [ebx + 0x4ac]
fmul dword [ebx + 0x4d0]
call fcn.00407c34
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], edx
mov eax, dword [ebp - 0xc8]
mov edx, dword [ebp - 0xc4]
cmp edx, dword [ebp - 0xcc]
jne 0x703946
cmp eax, dword [ebp - 0xd0]
jbe 0x703962
jmp 0x703948
jle 0x703962
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xd4], eax
jmp 0x70397a
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebx + 0x4d4], eax
mov edx, 0x2e
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0xe8]
add eax, eax
push eax
mov eax, dword [0x8cd5f4]
mov eax, dword [eax]
call fcn.005cc2f0
pop edx
sub eax, edx
cmp eax, dword [ebx + 0x4d4]
jge 0x7039d6
mov edx, 0x2e
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0xe8]
add eax, eax
push eax
mov eax, dword [0x8cd5f4]
mov eax, dword [eax]
call fcn.005cc2f0
pop edx
sub eax, edx
mov dword [ebx + 0x4d4], eax
mov edx, dword [ebx + 0x4d4]
mov eax, ebx
call fcn.005c4484
cmp byte [edi + 0x10d], 5
jne 0x703a21
cmp dword [edi + 0x118], 0
je 0x703a21
mov eax, ebx
call fcn.005fdb58
sub eax, dword [ebp - 0x30]
mov edx, dword [edi + 0x118]
cmp eax, dword [edx + 0x58]
jge 0x703a21
mov eax, ebx
call fcn.005fdb58
mov edx, eax
sub edx, dword [ebp - 0x30]
mov eax, dword [edi + 0x118]
call fcn.005fd8a4
movzx eax, byte [edi + 0x10d]
test al, al
je 0x703a30
sub al, 8
jne 0x703a8c
cmp dword [ebx + 0x4b0], 0
je 0x703a8c
mov eax, ebx
call fcn.005fdb58
mov edx, dword [ebx + 0x4b0]
sub eax, dword [edx + 0x50]
sub eax, 0xf
push eax
fld dword [0x703ce4]
fmul dword [ebx + 0x4d0]
call fcn.00407c34
push eax
fld dword [0x703ce4]
fmul dword [ebx + 0x4d0]
call fcn.00407c34
mov ecx, eax
add ecx, dword [ebp - 0x2c]
mov eax, dword [ebx + 0x4b0]
mov edx, dword [eax + 0x50]
mov eax, dword [ebx + 0x4b0]
mov esi, dword [eax]
call dword [esi + 0xe0]
movzx eax, byte [edi + 0x10d]
add al, 0xfe
sub al, 2
jae 0x703af5
cmp dword [ebx + 0x4b4], 0
je 0x703af5
mov eax, ebx
call fcn.005fdb58
mov edx, dword [ebx + 0x4b4]
sub eax, dword [edx + 0x50]
sub eax, 0xf
push eax
fld dword [0x703ce4]
fmul dword [ebx + 0x4d0]
call fcn.00407c34
push eax
fld dword [0x703ce4]
fmul dword [ebx + 0x4d0]
call fcn.00407c34
mov ecx, eax
add ecx, dword [ebp - 0x2c]
mov eax, dword [ebx + 0x4b4]
mov edx, dword [eax + 0x50]
mov eax, dword [ebx + 0x4b4]
mov esi, dword [eax]
call dword [esi + 0xe0]
movzx eax, byte [edi + 0x10d]
sub al, 1
jne 0x703b54
cmp dword [ebx + 0x4bc], 0
je 0x703b54
mov eax, ebx
call fcn.005fdb58
mov edx, dword [ebx + 0x4bc]
sub eax, dword [edx + 0x50]
sub eax, 0xf
push eax
mov eax, dword [edi + 0x154]
mov eax, dword [eax + 8]
push eax
fld dword [0x703ce4]
fmul dword [ebx + 0x4d0]
call fcn.00407c34
mov ecx, eax
add ecx, dword [ebp - 0x2c]
mov eax, dword [ebx + 0x4bc]
mov edx, dword [eax + 0x50]
mov eax, dword [ebx + 0x4bc]
mov esi, dword [eax]
call dword [esi + 0xe0]
test byte [edi + 0x74], 0x80
je 0x703b78
mov eax, ebx
call fcn.005fdb58
mov edx, eax
mov eax, dword [ebx + 0x43c]
add eax, eax
sub edx, eax
mov eax, dword [ebx + 0x478]
call fcn.005fd8a4
mov eax, ebx
call fcn.00705ab4
cmp dword [edi + 0x54], 0
je 0x703b93
test byte [edi + 0x74], 8
setne dl
mov eax, ebx
call fcn.00707038
mov eax, dword [0x8cd5f4]
mov eax, dword [eax]
call fcn.005cc2f0
mov edx, eax
sar edx, 1
jns 0x703ba8
adc edx, 0
mov eax, dword [ebx + 0x58]
sar eax, 1
jns 0x703bb2
adc eax, 0
sub edx, eax
mov eax, ebx
call fcn.005cb5ec
mov eax, dword [0x8cd5f4]
mov eax, dword [eax]
call fcn.005cc2e8
mov edx, eax
sar edx, 1
jns 0x703bd0
adc edx, 0
mov eax, dword [ebx + 0x5c]
sar eax, 1
jns 0x703bda
adc eax, 0
sub edx, eax
mov eax, ebx
call fcn.005cb628
mov eax, dword [ebp - 0x58]
call fcn.00409258
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x703c5b
lea eax, [ebp - 0x250]
call fcn.0040b054
lea eax, [ebp - 0x24c]
call fcn.0040b054
lea eax, [ebp - 0x248]
call fcn.0040b054
lea eax, [ebp - 0x240]
mov edx, 2
call fcn.0040b0b4
lea eax, [ebp - 0x228]
mov edx, 2
call fcn.0040b0b4
lea eax, [ebp - 0x220]
call fcn.0040b054
lea eax, [ebp - 0x18]
mov edx, 6
call fcn.0040b0b4
pop eax
jmp eax