Function at 0x763150
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0xac
mov edi, dword [eax + 0x24]
mov ebp, dword [eax]
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
test edi, edi
je 0x7631b0
mov esi, ecx
mov eax, ebp
call fcn.006c45b0
test esi, esi
je 0x7631a1
mov edx, esi
mov eax, ebp
call fcn.006c4840
add esp, 0xac
pop ebx
pop esi
pop edi
pop ebp
ret
mov edx, dword [esp + 8]
mov ebx, eax
call fcn.0075a070
mov edi, eax
test eax, eax
je 0x7638f0
mov esi, dword [eax + 0x38]
test esi, esi
je 0x763900
cmp byte [ebx + 0xa1], 0
jne 0x763920
sub esp, 8
mov ecx, pe_nt_image_headers32
mov edx, edi
mov eax, ebx
push 0
push 0
call fcn.006e48d0
movzx ecx, byte [edi + 0x2b]
mov dword [esp + 0x28], eax
mov byte [esp + 0x20], cl
add esp, 0x10
test eax, eax
je 0x763928
mov dword [esp + 0x1c], 1
movzx eax, byte [esp + 0x10]
cmp al, 1
je 0x763221
cmp word [edi + 0x22], 0
jg 0x763288
mov edx, edi
mov eax, ebx
call fcn.007078d0
test eax, eax
je 0x763288
mov eax, dword [esp + 0x78]
xor edi, edi
test eax, eax
je 0x76324a
mov edx, dword [esp + 0x74]
mov dword [esp + 0x78], 0
mov dword [eax + 0x104], edx
mov edx, dword [esp + 8]
mov eax, ebp
call fcn.006c45b0
mov eax, dword [esp + 0xc]
test eax, eax
je 0x763266
mov edx, eax
mov eax, ebp
call fcn.006c4840
test edi, edi
je 0x7631a1
mov edx, edi
mov eax, ebp
call fcn.006c0230
add esp, 0xac
pop ebx
pop esi
pop edi
pop ebp
ret
mov ecx, dword [esp + 0x18]
mov edx, edi
mov eax, ebx
call fcn.006e9ff0
mov dword [esp + 0x24], eax
test eax, eax
jne 0x76322e
mov ecx, dword [edi + 0x3c]
mov edx, dword [ebp + 0x10]
test ecx, ecx
je 0x76400c
cmp ecx, dword [edx + 0xc]
je 0x763a20
mov dword [esp + 0x14], ebp
lea eax, [edx + 0x10]
xor esi, esi
lea esi, [esi]
add esi, 1
mov edx, eax
add eax, 0x10
mov ebp, esi
shl ebp, 4
cmp ecx, dword [eax - 4]
jne 0x7632c0
mov dword [esp + 0x34], ebp
mov ebp, dword [esp + 0x14]
sub esp, 8
push dword [edx]
mov eax, ebx
mov edx, 9
push 0
mov ecx, dword [edi]
call fcn.006e2bb0
mov dword [esp + 0x38], eax
add esp, 0x10
cmp eax, 1
je 0x76322e
mov eax, dword [ebx + 0x28]
mov edx, dword [esp + 8]
lea ecx, [eax + 1]
mov dword [esp + 0x20], eax
mov dword [ebx + 0x28], ecx
mov dword [esp + 0x30], ecx
mov ecx, eax
mov dword [edx + 0x34], eax
mov eax, dword [edi + 8]
test eax, eax
je 0x763348
mov dword [esp + 0x14], ebp
mov ebp, dword [esp + 0x24]
add ecx, 2
lea esi, [esi]
nop
mov eax, dword [eax + 0x14]
lea edx, [ecx + ebp]
add ebp, 1
test eax, eax
jne 0x763330
mov dword [ebx + 0x28], edx
mov dword [esp + 0x24], ebp
mov ebp, dword [esp + 0x14]
cmp byte [esp + 0x10], 2
jne 0x763365
mov eax, dword [edi]
mov edx, dword [ebx + 0x104]
mov dword [esp + 0x78], ebx
mov dword [esp + 0x74], edx
mov dword [ebx + 0x104], eax
mov eax, dword [ebx + 8]
mov dword [esp + 0x14], eax
test eax, eax
je 0x763960
cmp byte [ebx + 0x12], 0
je 0x763990
mov edx, dword [esp + 0x1c]
mov ecx, esi
mov eax, ebx
call fcn.0072d510
cmp byte [esp + 0x10], 2
je 0x7639a0
xor edx, edx
xor eax, eax
mov dword [esp + eax + 0x84], edx
add eax, 4
cmp eax, 0x1c
jb 0x76339a
mov eax, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], eax
lea eax, [esp + 0x7c]
call fcn.006eb680
mov dword [esp + 0x48], eax
test eax, eax
jne 0x76322e
mov dword [esp + 0x2c], 0
test byte [ebp + 0x24], 1
je 0x7633f8
cmp byte [ebx + 0x12], 0
jne 0x7633f8
mov eax, dword [ebx + 0x84]
test eax, eax
je 0x763e7b
lea esi, [esi]
nop
mov eax, dword [esp + 0x28]
or eax, dword [esp + 0xc]
jne 0x7634f0
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x763a48
cmp byte [edi + 0x2b], 1
je 0x7634f0
cmp esi, 1
je 0x76344a
mov eax, dword [ebx]
mov ecx, dword [esp + 0x34]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + ecx + 4]
cmp byte [eax + 9], 0
je 0x76344a
sub esp, 8
mov ecx, dword [edi + 0x14]
push dword [edi]
mov edx, esi
push 1
mov eax, ebx
call fcn.006df6d0
add esp, 0x10
test byte [edi + 0x1c], 0x80
jne 0x763479
mov ecx, dword [esp + 0x2c]
mov eax, 0xffffffff
mov edx, dword [edi]
test ecx, ecx
cmovne eax, ecx
mov ecx, dword [edi + 0x14]
push 0xffffffffffffffff
push edx
mov edx, 0x91
push eax
push esi
mov eax, dword [esp + 0x24]
call fcn.006dd160
add esp, 0x10
mov eax, dword [edi + 8]
mov edx, eax
test eax, eax
je 0x763d9e
mov ecx, dword [esp + 0x2c]
mov eax, 0xffffffff
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], ebx
mov ebp, dword [esp + 0x14]
mov ebx, edx
test ecx, ecx
cmovne eax, ecx
mov dword [esp + 0x10], eax
jmp 0x7634d8
test byte [edi + 0x1c], 0x80
je 0x7634e6
sub esp, 8
push dword [esp + 0x18]
push esi
mov edx, 0x91
mov eax, ebp
call fcn.006dc9d0
mov ebx, dword [ebx + 0x14]
add esp, 0x10
test ebx, ebx
je 0x763d96
movzx eax, byte [ebx + 0x38]
mov ecx, dword [ebx + 0x2c]
and eax, 3
cmp al, 2
je 0x7634b0
sub esp, 8
push 0
jmp 0x7634bd
mov eax, dword [esp + 0x94]
and eax, 0x40
or eax, dword [esp + 0x1c]
cmp eax, 1
sbb eax, eax
and eax, 8
add eax, 0x14
mov word [esp + 0x1c], ax
test byte [edi + 0x1c], 0x80
je 0x7639d0
mov esi, dword [edi + 8]
test esi, esi
jne 0x763533
jmp 0x764024
mov esi, dword [esi + 0x14]
test esi, esi
je 0x798fb1
movzx eax, byte [esi + 0x38]
and eax, 3
cmp al, 2
jne 0x763528
movsx ecx, word [esi + 0x32]
mov eax, dword [ebx + 0x2c]
lea edx, [eax + 1]
add eax, ecx
mov word [esp + 0x42], cx
mov dword [ebx + 0x2c], eax
mov eax, dword [ebx + 0x28]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x38], eax
add eax, 1
mov dword [ebx + 0x28], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x34], edx
mov ecx, dword [eax + 0x6c]
mov dword [esp + 0x44], ecx
cmp ecx, dword [eax + 0x70]
jge 0x763dbc
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [edx + 0x6c], eax
lea eax, [ecx + ecx*4]
mov ecx, dword [edx + 0x68]
lea eax, [ecx + eax*4]
mov ecx, dword [esp + 0x38]
mov dword [eax + 0xc], 0
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x28]
mov dword [eax + 0x10], 0
mov dword [eax + 8], ecx
mov dword [eax], 0x76
mov edx, esi
mov eax, ebx
call fcn.006e6a00
mov dword [esp + 0x58], 0
sub esp, 0xc
push dword [esp + 0x3c]
movsx eax, word [esp + 0x2c]
push eax
mov eax, ebx
push 0
push 0
push 0
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
call fcn.007306e0
mov dword [esp + 0x48], eax
add esp, 0x20
test eax, eax
je 0x76322e
mov eax, dword [esp + 0x28]
mov ecx, dword [eax + 0x14]
mov dword [esp + 0x5c], ecx
mov ecx, dword [eax + 0x18]
movzx eax, byte [eax + 0x2e]
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x30], eax
cmp eax, 1
je 0x763624
mov eax, dword [ebx + 0x80]
test eax, eax
cmove eax, ebx
mov byte [eax + 0x14], 1
mov eax, dword [esp + 0x28]
test byte [eax + 0x30], 1
jne 0x763c48
mov eax, dword [esp + 0x2c]
test eax, eax
jne 0x763c20
test esi, esi
je 0x763d35
movsx eax, word [esp + 0x42]
mov dword [esp + 0x3c], eax
test eax, eax
jle 0x7636a2
add eax, eax
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x50], ebp
mov dword [esp + 0x1c], eax
xor eax, eax
mov dword [esp + 0x54], ebx
mov ebp, ecx
mov ebx, eax
lea esi, [esi]
nop
mov eax, dword [esi + 4]
sub esp, 8
mov edx, edi
push ebp
add ebp, 1
movsx eax, word [eax + ebx]
add ebx, 2
push eax
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x24]
call fcn.0073d4b0
add esp, 0x10
cmp dword [esp + 0x1c], ebx
jne 0x763670
mov ebp, dword [esp + 0x50]
mov ebx, dword [esp + 0x54]
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x763a60
mov eax, dword [ebx + 0x2c]
add eax, 1
mov dword [esp + 0x1c], eax
mov dword [ebx + 0x2c], eax
mov eax, dword [esi + 0x10]
test eax, eax
je 0x763f68
mov ecx, dword [esp + 0x3c]
mov edx, 0x61
push ecx
push eax
push dword [esp + 0x24]
mov dword [esp + 0x48], ecx
push ecx
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x24]
call fcn.006dd160
add esp, 0xc
mov edx, 0x8a
push dword [esp + 0x40]
push dword [esp + 0x3c]
push dword [esp + 0x28]
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x24]
call fcn.006dd2e0
add esp, 0x10
xor eax, eax
mov word [esp + 0x42], ax
mov eax, dword [esp + 0x28]
call fcn.007354d0
cmp byte [esp + 0x10], 2
je 0x763748
sub esp, 0xc
mov ecx, 0x71
mov edx, edi
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x7c]
push eax
mov eax, ebx
push 0
push dword [esp + 0x38]
push 8
call fcn.006e6cc0
add esp, 0x20
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x6c]
mov eax, dword [eax + 0x70]
mov dword [esp + 0x10], ecx
test esi, esi
je 0x763e00
cmp ecx, eax
jge 0x763f35
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [edx + 0x6c], eax
mov edx, dword [edx + 0x68]
lea eax, [ecx + ecx*4]
mov ecx, dword [esp + 0x38]
lea eax, [edx + eax*4]
mov dword [eax + 4], ecx
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax], 0x24
cmp byte [edi + 0x2b], 1
je 0x763e50
sub esp, 8
mov edx, 0x86
push 0
push dword [esp + 0x28]
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x24]
call fcn.006dc9d0
add esp, 0x10
mov dword [esp + 0x3c], 0
cmp byte [edi + 0x2b], 1
jne 0x763cfc
mov eax, dword [edi + 0x34]
mov dword [esp + 0x18], eax
test eax, eax
je 0x7637ff
mov eax, dword [esp + 0x18]
jmp 0x7637f7
mov eax, dword [eax + 0x18]
test eax, eax
je 0x7637fb
cmp ebp, dword [eax]
jne 0x7637f0
mov dword [esp + 0x18], eax
mov eax, ebx
mov edx, edi
call fcn.006d3940
mov eax, dword [ebx + 0x80]
test eax, eax
cmove eax, ebx
cmp dword [esp + 0x30], 1
mov byte [eax + 0x15], 1
je 0x763c69
push 0xfffffffffffffff5
xor ecx, ecx
mov edx, 7
push dword [esp + 0x1c]
push dword [esp + 0x24]
push 1
mov edi, dword [esp + 0x24]
mov eax, edi
call fcn.006dd160
mov eax, dword [edi + 0x6c]
add esp, 0x10
mov edi, dword [esp + 0x3c]
test eax, eax
jle 0x763868
mov edi, dword [esp + 0x14]
lea eax, [eax + eax*4]
mov edx, 2
shl eax, 2
add eax, dword [edi + 0x68]
mov edi, dword [esp + 0x3c]
mov word [eax - 0x12], dx
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x763cc8
test esi, esi
je 0x763d0d
sub esp, 8
mov edx, 0x27
push 0
mov eax, dword [esp + 0x1c]
add eax, 1
push eax
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x48]
mov eax, esi
call fcn.006dc9d0
mov ecx, dword [esi]
add esp, 0x10
mov edx, dword [esi + 0x6c]
mov eax, 0xaa748c
cmp byte [ecx + 0x57], 0
jne 0x7638bd
mov eax, dword [esp + 0x10]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x68]
lea eax, [eax + ecx*4]
mov dword [eax + 8], edx
cmp byte [ebx + 0x12], 0
jne 0x7638d4
mov esi, dword [ebx + 0x84]
test esi, esi
je 0x763da5
mov edx, dword [esp + 0x2c]
test edx, edx
je 0x7638f0
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x14]
mov ecx, 0xa351df
call fcn.006dd6e0
nop
mov eax, dword [esp + 0x78]
jmp 0x763234
mov eax, dword [ebx]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x1c]
test eax, eax
je 0x763920
mov ecx, dword [eax + 0x30]
test ecx, ecx
jne 0x7631d0
lea esi, [esi]
nop
movzx eax, byte [edi + 0x2b]
mov byte [esp + 0x10], al
sub esp, 0xc
xor ecx, ecx
mov edx, edi
mov eax, ebx
push 0
call fcn.006c6530
add esp, 0x10
test eax, eax
mov dword [esp + 0x18], 0
setne al
movzx eax, al
mov dword [esp + 0x1c], eax
movzx eax, byte [edi + 0x2b]
jmp 0x763216
mov edx, dword [ebx + 0x80]
test edx, edx
je 0x763a30
mov eax, ebx
call fcn.006dca30
mov dword [esp + 0x14], eax
test eax, eax
jne 0x763374
jmp 0x76322e
mov eax, dword [esp + 0x14]
or byte [eax + 0x98], 0x10
jmp 0x76337e
sub esp, 4
mov eax, ebx
mov edx, edi
push dword [esp + 0x24]
push 0
push 0
mov ecx, dword [esp + 0x1c]
call fcn.007490d0
mov eax, dword [esp + 0x30]
mov dword [esp + 0x80], eax
mov dword [esp + 0x7c], eax
add esp, 0x10
jmp 0x763396
mov eax, dword [ebx + 0x2c]
sub esp, 8
xor ecx, ecx
mov edx, 0x4b
xor esi, esi
add eax, 1
mov dword [esp + 0x60], eax
mov dword [ebx + 0x2c], eax
push 0
push eax
mov eax, dword [esp + 0x24]
call fcn.006dc9d0
mov eax, 1
add esp, 0x10
mov dword [esp + 0x44], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x34], 0
mov word [esp + 0x42], ax
jmp 0x7635c5
mov dword [esp + 0x34], 0
xor esi, esi
jmp 0x7632da
mov eax, dword [ebx]
test byte [eax + 0x50], 8
jne 0x76396e
mov byte [ebx + 0x17], 1
jmp 0x76396e
mov eax, 0x14
mov word [esp + 0x1c], ax
jmp 0x76350e
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x34], eax
nop
mov eax, dword [esp + 0x24]
add eax, 2
cdq
mov ecx, edx
mov edx, eax
mov eax, ebp
call fcn.006cec40
mov dword [esp + 0x3c], eax
test eax, eax
je 0x763f5a
sub esp, 4
mov eax, dword [esp + 0x28]
add eax, 1
push eax
push 1
push dword [esp + 0x48]
call fcn.00798618
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x34]
add esp, 0x10
mov byte [ecx + eax + 1], 0
mov eax, dword [esp + 0x5c]
test eax, eax
js 0x763ab5
sub eax, dword [esp + 0x20]
mov byte [ecx + eax], 0
mov eax, dword [esp + 0x4c]
test eax, eax
js 0x763ac9
mov ecx, dword [esp + 0x3c]
sub eax, dword [esp + 0x20]
mov byte [ecx + eax], 0
mov edx, dword [esp + 0x44]
test edx, edx
jne 0x763ee2
mov eax, dword [ebx + 0x38]
sub eax, 1
cmp byte [esp + 0x10], 2
mov dword [esp + 0x24], eax
mov dword [ebx + 0x38], eax
je 0x763ba6
cmp dword [esp + 0x30], 2
jne 0x763f76
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x6c]
mov dword [esp + 0x10], ecx
cmp ecx, dword [eax + 0x70]
jge 0x763fea
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
lea eax, [ecx + 1]
mov dword [edx + 0x6c], eax
mov edx, dword [edx + 0x68]
lea eax, [ecx + ecx*4]
lea eax, [edx + eax*4]
mov dword [eax], 0xf
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
sub esp, 0xc
mov edx, edi
mov ecx, 0x71
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x7c]
push eax
mov eax, ebx
push dword [esp + 0x50]
push dword [esp + 0x38]
push 8
call fcn.006e6cc0
mov eax, dword [esp + 0x34]
add esp, 0x20
mov eax, dword [eax + 0x6c]
lea edx, [eax - 1]
cmp edx, dword [esp + 0x10]
je 0x763fa3
mov ecx, dword [esp + 0x14]
mov edx, 0xaa748c
mov ecx, dword [ecx]
cmp byte [ecx + 0x57], 0
jne 0x763ba3
mov edx, dword [esp + 0x10]
lea ecx, [edx + edx*4]
mov edx, dword [esp + 0x14]
mov edx, dword [edx + 0x68]
lea edx, [edx + ecx*4]
mov dword [edx + 8], eax
cmp byte [edi + 0x2b], 1
je 0x763de3
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x10], 0
mov dword [esp + 0x48], edx
mov edx, dword [esp + 0x3c]
mov eax, ecx
sub eax, dword [esp + 0x20]
cmp byte [edx + eax], 0
jne 0x763eb3
push dword [esp + 0x4c]
xor eax, eax
mov edx, edi
push dword [esp + 0x34]
push 0xb
cmp byte [ebx + 0x12], 0
sete al
push eax
movsx eax, word [esp + 0x52]
push eax
mov eax, ebx
push dword [esp + 0x48]
push dword [esp + 0x88]
push ecx
mov ecx, dword [esp + 0x38]
call fcn.0075e630
add esp, 0x20
mov edi, dword [esp + 0x3c]
jmp 0x763868
sub esp, 8
mov edx, 0x56
push 0
push 1
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x24]
call fcn.006dc9d0
add esp, 0x10
jmp 0x76363e
sub esp, 8
mov edx, 0x8f
push 0
push 0
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x24]
call fcn.006dc9d0
add esp, 0x10
jmp 0x763632
sub esp, 8
mov edx, 0x7a
push 0
push 0
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x24]
call fcn.006dc9d0
mov ecx, dword [ebx + 0x80]
add esp, 0x10
test ecx, ecx
je 0x763fb3
push 0xfffffffffffffff5
xor ecx, ecx
mov edx, 7
push dword [esp + 0x1c]
push dword [esp + 0x24]
push 1
mov edi, dword [esp + 0x24]
mov eax, edi
call fcn.006dd160
mov eax, dword [edi + 0x6c]
add esp, 0x10
mov edi, dword [esp + 0x3c]
test eax, eax
jg 0x76384e
lea esi, [esi]
nop
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x48]
mov eax, dword [eax + 0xc]
not ecx
mov edx, dword [eax + 0x38]
add edx, dword [eax + 0x3c]
js 0x763f27
mov esi, dword [esp + 0x14]
mov eax, dword [eax + 0x40]
mov edx, dword [esi + 0x6c]
mov dword [eax + ecx*4], edx
mov eax, dword [esp + 0x28]
call fcn.007354d0
jmp 0x7638c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x34], eax
jmp 0x763bd8
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov eax, esi
call fcn.006dd090
mov ecx, dword [esi]
mov edx, dword [esi + 0x6c]
mov eax, 0xaa748c
cmp byte [ecx + 0x57], 0
jne 0x7638bd
jmp 0x7638b0
mov eax, dword [ebx + 0x2c]
sub esp, 8
mov edx, 0x87
add eax, 1
mov dword [esp + 0x24], eax
mov dword [ebx + 0x2c], eax
push 0
push eax
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x24]
call fcn.006dc9d0
mov ecx, dword [esp + 0x40]
add esp, 0x10
test ecx, ecx
jne 0x763a57
sub esp, 8
mov edx, 0x9c
push 0
push dword [esp + 0x28]
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x24]
call fcn.006dc9d0
add esp, 0x10
mov eax, 1
mov word [esp + 0x42], ax
jmp 0x763712
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
xor edi, edi
jmp 0x7638c0
mov ecx, dword [ebx + 0x7c]
test ecx, ecx
je 0x7638d4
mov eax, ebx
call fcn.006e6bb0
jmp 0x7638d4
sub esp, 8
mov edx, 0x76
push 0
push dword [esp + 0x34]
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x24]
call fcn.006dc960
mov dword [esp + 0x54], eax
add esp, 0x10
jmp 0x7635b4
mov eax, dword [esp + 0x34]
mov dword [esp + 0x10], 0
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x48], eax
jmp 0x7637d9
cmp dword [esp + 0x10], eax
jge 0x763fbc
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x3c], 0
lea eax, [ecx + 1]
mov dword [edx + 0x6c], eax
mov edx, dword [edx + 0x68]
lea eax, [ecx + ecx*4]
mov ecx, dword [esp + 0x58]
lea eax, [edx + eax*4]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x1c]
mov dword [eax + 8], 0
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], 0
mov dword [eax], 0x2e
jmp 0x7637cf
sub esp, 8
mov edx, 0x5e
push dword [esp + 0x24]
push 0
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x24]
call fcn.006dc9d0
add esp, 0x10
mov dword [esp + 0x3c], 0
jmp 0x7637cf
cmp byte [ebx + 0x9f], 0
jne 0x7633f8
mov eax, dword [ebx + 0x2c]
sub esp, 8
xor ecx, ecx
mov edx, 0x47
add eax, 1
mov dword [esp + 0x34], eax
mov dword [ebx + 0x2c], eax
push 0
push eax
mov eax, dword [esp + 0x24]
call fcn.006dc9d0
add esp, 0x10
jmp 0x7633f8
sub esp, 4
mov edx, 0x1c
movsx eax, word [esp + 0x46]
push eax
push dword [esp + 0x3c]
push dword [esp + 0x54]
mov eax, dword [esp + 0x24]
call fcn.006dd2e0
mov eax, dword [esp + 0x44]
add esp, 0x10
mov dword [esp + 0x1c], eax
jmp 0x7637cf
mov edx, dword [esp + 0x14]
mov eax, dword [edx]
cmp byte [eax + 0x57], 0
jne 0x763ad5
mov ecx, dword [esp + 0x44]
mov edx, dword [edx + 0x68]
lea ecx, [ecx + ecx*4]
lea edx, [edx + ecx*4]
mov dword [esp + 0x1c], edx
mov ecx, dword [edx + 0x10]
movsx edx, byte [edx + 1]
call fcn.006cb630
mov edx, dword [esp + 0x1c]
mov eax, 0xbb
mov dword [edx + 0x10], 0
mov word [edx], ax
jmp 0x763ad5
mov edx, dword [esp + 0x14]
call fcn.006df100
jmp 0x763cee
sub esp, 8
mov edx, 0x24
push 0
push 0
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x24]
call fcn.006dc960
mov dword [esp + 0x20], eax
add esp, 0x10
jmp 0x76379f
mov eax, dword [esp + 0x28]
call fcn.007354d0
jmp 0x76322e
mov eax, dword [ebx]
mov edx, esi
call fcn.006d3b40
jmp 0x7636c6
sub esp, 0xc
mov ecx, 0x71
mov edx, edi
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x7c]
push eax
mov eax, ebx
push dword [esp + 0x50]
push dword [esp + 0x38]
push 8
call fcn.006e6cc0
add esp, 0x20
jmp 0x763ba6
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [eax + 0x6c], ecx
jmp 0x763ba6
mov byte [ebx + 0x14], 0
jmp 0x763c93
push eax
mov edx, 0x2e
push eax
push dword [esp + 0x24]
push 0
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x24]
call fcn.006dc960
mov dword [esp + 0x20], eax
add esp, 0x10
mov dword [esp + 0x3c], 0
jmp 0x7637cf
push eax
xor ecx, ecx
mov edx, 0xf
push eax
push 0
push 0
mov eax, dword [esp + 0x24]
call fcn.006dc960
mov dword [esp + 0x20], eax
add esp, 0x10
jmp 0x763b45
mov dword [esp + 0x34], 0xfff80000
sub edx, 0x80000
mov esi, 0xffff8000
jmp 0x7632da
jmp 0x798fb1
movzx eax, word [0x32]
ud2