Function at 0x750570
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xc0
mov esi, ecx
mov eax, dword [0xa47d50]
xor eax, esp
mov dword [esp + 0xbc], eax
call fcn.007522c0
movzx edi, byte [0xa56fc2]
mov edx, dword [0xa216f8]
mov ecx, dword [0xa2164c]
xor ecx, edi
mov ebx, edi
mov dword [esp], edi
lea edi, [eax - 0x5a44]
mov dword [esp + 8], edi
mov edi, 0x5a44
sub edi, eax
mov dword [esp + 4], edi
mov ebp, eax
mov dword [esp + 0x10], eax
sub ecx, edi
add ecx, edx
call dword [0xa0535c]
call ecx
mov edi, eax
mov eax, dword [0xa216d4]
mov ecx, dword [0xa2165c]
sub ecx, ebx
add ecx, eax
add ecx, ebp
add ecx, 0xffffa5bc
call dword [0xa0535c]
lea ebp, [esp + 0xb8]
lea edx, [esp + 0xb4]
lea eax, [esp + 0xb0]
lea ebx, [esp + 0xac]
push 0xaddabef9
push ebp
push edx
push eax
push ebx
push esi
push edi
mov ebx, edi
mov dword [esp + 0x38], edi
push dword [esp + 0xf0]
call ecx
add esp, 0x20
mov eax, dword [esp + 0xac]
mov dword [esp + 0x58], eax
mov ebp, dword [esp + 0xb0]
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x18], eax
mov edi, dword [esp + 0xb8]
mov ecx, dword [0xa216c0]
add ecx, dword [esp + 8]
add ecx, dword [esp]
add ecx, dword [0xa21610]
call dword [0xa0535c]
push 0xc9401da7
lea eax, [esp + 0xb4]
push eax
lea eax, [esp + 0xb4]
push eax
mov dword [esp + 0x18], ebp
push ebp
push ebx
push esi
mov ebx, esi
mov dword [esp + 0x6c], edi
push edi
push dword [esp + 0x34]
call ecx
add esp, 0x20
mov esi, dword [esp + 0xac]
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x30], eax
mov eax, dword [0xa216e8]
mov ecx, dword [0xa21618]
mov ebp, dword [esp]
sub ecx, ebp
add ecx, eax
mov eax, dword [esp + 0x10]
add ecx, eax
add ecx, 0xffffa5bc
call dword [0xa0535c]
push 0x4e0c8f7b
lea eax, [esp + 0xb4]
push eax
lea eax, [esp + 0xb4]
push eax
mov dword [esp + 0x44], esi
push esi
mov dword [esp + 0x4c], ebx
push ebx
call ecx
add esp, 0x14
mov ebx, dword [esp + 0xac]
mov esi, dword [esp + 0xb0]
mov eax, dword [0xa21704]
mov ecx, dword [0xa21678]
xor ecx, ebp
sub ecx, dword [esp + 4]
add ecx, eax
call dword [0xa0535c]
push 0x69fe2b2b
lea eax, [esp + 0xb8]
push eax
lea edi, [esp + 0xb8]
push edi
push esi
mov esi, dword [esp + 0x2c]
push esi
push ebx
call ecx
add esp, 0x18
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x18], eax
mov ebx, dword [esp + 0xb4]
mov ecx, dword [0xa216bc]
mov eax, dword [esp + 8]
add ecx, eax
add ecx, ebp
add ecx, dword [0xa2163c]
call dword [0xa0535c]
lea eax, [esp + 0xab]
push 0x303dadce
push edi
push eax
push dword [esp + 0x3c]
push esi
push ebx
push dword [esp + 0x30]
call ecx
add esp, 0x1c
movzx edi, byte [esp + 0xb0]
movzx esi, byte [esp + 0xab]
mov dword [esp + 0x14], esi
mov eax, dword [0xa21750]
mov ecx, dword [0xa2169c]
mov ebx, ebp
xor ecx, ebp
mov ebp, dword [esp + 4]
sub ecx, ebp
add ecx, eax
call dword [0xa0535c]
push 0x26907ae2
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0xbb]
push eax
push esi
push edi
call ecx
add esp, 0x1c
movzx eax, byte [esp + 0xb4]
mov dword [esp + 0x28], eax
movzx eax, byte [esp + 0xb8]
mov dword [esp + 0x24], eax
movzx esi, byte [esp + 0xb0]
movzx eax, byte [esp + 0xab]
mov dword [esp + 0x18], eax
mov eax, dword [0xa21738]
mov ecx, dword [0xa21654]
xor ecx, ebx
sub ecx, ebp
add ecx, eax
call dword [0xa0535c]
push 0xc67a8654
lea eax, [esp + 0xb4]
push eax
lea eax, [esp + 0xb3]
push eax
push edi
push esi
push dword [esp + 0x38]
push dword [esp + 0x2c]
push dword [esp + 0x44]
call ecx
add esp, 0x20
movzx esi, byte [esp + 0xab]
movzx edi, byte [esp + 0xb0]
mov eax, dword [0xa216f0]
mov ecx, dword [0xa21660]
sub ecx, ebx
add ecx, eax
mov eax, dword [esp + 0x10]
add ecx, eax
add ecx, 0xffffa5bc
call dword [0xa0535c]
push 0x9ec4d88b
push dword [esp + 0x1c]
push edi
push esi
mov esi, dword [esp + 0x2c]
call ecx
add esp, 0x10
test al, 1
je 0x7508e0
mov eax, dword [0xa21734]
mov ecx, dword [0xa21644]
or ecx, ebx
sub ecx, ebp
add ecx, eax
call dword [0xa0535c]
push 0x4e1283f3
mov eax, dword [esp + 0x10]
push eax
push esi
call ecx
add esp, 0xc
test al, 1
jne 0x751343
mov edi, dword [0xa2171c]
add edi, dword [esp + 8]
add edi, ebx
add edi, dword [0xa2161c]
mov ecx, edi
call dword [0xa0535c]
mov ecx, dword [esp + 0x38]
push dword [esp + 0x30]
call edi
mov eax, dword [0xa216f4]
mov ecx, dword [0xa21690]
sub ecx, ebx
add ecx, eax
mov eax, dword [esp + 0x10]
add ecx, eax
add ecx, 0xffffa5bc
call dword [0xa0535c]
push 0xdea581fe
push dword [esp + 0x10]
push esi
call ecx
add esp, 0xc
mov cl, 1
mov dword [esp + 0x2c], ecx
test al, 1
jne 0x75131f
mov eax, dword [0xa21708]
mov ecx, dword [0xa21628]
sub ecx, ebx
add ecx, eax
mov eax, dword [esp + 0x10]
add ecx, eax
add ecx, 0xffffa5bc
call dword [0xa0535c]
lea edx, [esp + 0x7c]
push 0x17779727
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0xb4]
push eax
push edx
mov edi, dword [esp + 0x2c]
push edi
mov esi, dword [esp + 0x50]
push esi
call ecx
add esp, 0x18
mov eax, dword [esp + 0xac]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x4c], eax
xor edi, 0xd85d51db
mov dword [esp + 0x40], edi
lea eax, [esi + 0x10]
mov dword [esp + 0x48], eax
lea eax, [esi + 0x14]
mov dword [esp + 0x44], eax
lea esi, [esp + 0xb0]
mov dword [esp + 0x2c], 0
xor edi, edi
nop word [eax + eax]
mov eax, dword [0xa216d8]
mov ecx, dword [0xa21600]
xor ecx, ebx
sub ecx, ebp
add ecx, eax
call dword [0xa0535c]
push 0xbb0b4404
push esi
lea eax, [esp + 0xbc]
push eax
mov ebx, eax
lea eax, [esp + 0xb8]
push eax
push dword [esp + 0x60]
push dword [esp + 0x50]
push dword [esp + 0x6c]
mov dword [esp + 0x34], edi
push edi
push dword [esp + 0x78]
call ecx
add esp, 0x24
mov edi, esi
mov esi, dword [esp + 0xac]
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x20], eax
mov eax, dword [0xa216ec]
mov ecx, dword [0xa21640]
or ecx, dword [esp]
sub ecx, ebp
add ecx, eax
call dword [0xa0535c]
push 0x5158ba6d
push ebx
lea eax, [esp + 0xb4]
push eax
push edi
push dword [esp + 0x2c]
push esi
call ecx
add esp, 0x18
mov ebx, dword [esp + 0xb0]
mov esi, dword [esp + 0xac]
mov dword [esp + 0x78], esi
mov ebp, dword [esp + 0xb4]
mov ecx, dword [0xa21748]
add ecx, dword [esp + 8]
add ecx, dword [esp]
add ecx, dword [0xa21630]
call dword [0xa0535c]
push 0x8a7b4ae1
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0xb4]
push eax
push edi
lea eax, [esp + 0xbb]
push eax
push esi
push ebx
mov edi, dword [esp + 0x28]
push edi
push ebp
call ecx
add esp, 0x24
movzx eax, byte [esp + 0xab]
mov byte [esp + 0x24], al
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x74], eax
mov esi, dword [esp + 0xac]
mov ebp, dword [esp + 0xb4]
mov dword [esp + 0x14], ebp
mov eax, dword [0xa2170c]
mov ecx, dword [0xa21674]
xor ecx, dword [esp]
mov ebx, dword [esp + 4]
sub ecx, ebx
add ecx, eax
call dword [0xa0535c]
push 0x8db71579
lea eax, [esp + 0xaf]
push eax
lea eax, [esp + 0xb4]
push eax
push edi
push ebp
push esi
mov ebp, dword [esp + 0x34]
push ebp
call ecx
add esp, 0x1c
mov edi, dword [esp + 0xac]
mov dword [esp + 0x70], edi
movzx esi, byte [esp + 0xab]
mov eax, dword [0xa2173c]
mov ecx, dword [0xa21694]
or ecx, dword [esp]
sub ecx, ebx
add ecx, eax
call dword [0xa0535c]
push 0x628c4d7e
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0xb8]
push eax
lea ebx, [esp + 0xc0]
push ebx
push ebp
push edi
push dword [esp + 0x30]
mov dword [esp + 0x54], esi
push esi
call ecx
add esp, 0x24
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x6c], eax
mov esi, dword [esp + 0xac]
mov ebp, dword [esp + 0xb4]
mov edi, dword [esp + 0xb8]
mov eax, dword [0xa216b4]
mov ecx, dword [0xa216a8]
or ecx, dword [esp]
sub ecx, dword [esp + 4]
add ecx, eax
call dword [0xa0535c]
push 0x3f0e3c9
push ebx
lea eax, [esp + 0xb3]
push eax
lea eax, [esp + 0xb8]
push eax
mov ebx, dword [esp + 0x1c]
push ebx
push ebp
push edi
push esi
call ecx
add esp, 0x20
mov esi, dword [esp + 0xac]
mov dword [esp + 0x68], esi
movzx eax, byte [esp + 0xab]
mov byte [esp + 0x14], al
mov edi, dword [esp + 0xb0]
mov dword [esp + 0x64], edi
mov ecx, dword [0xa2172c]
mov ebp, dword [esp + 8]
add ecx, ebp
add ecx, dword [esp]
add ecx, dword [0xa216a0]
call dword [0xa0535c]
push 0x5e1ba917
lea eax, [esp + 0xaf]
push eax
lea eax, [esp + 0xb4]
push eax
lea eax, [esp + 0xbc]
push eax
push ebx
push dword [esp + 0x30]
push edi
push esi
call ecx
add esp, 0x20
mov esi, dword [esp + 0xb0]
mov ebx, dword [esp + 0xac]
mov dword [esp + 0x60], ebx
movzx edi, byte [esp + 0xab]
mov ecx, dword [0xa2174c]
add ecx, ebp
add ecx, dword [esp]
add ecx, dword [0xa21668]
call dword [0xa0535c]
push 0x270187af
lea eax, [esp + 0xb0]
push eax
lea eax, [esp + 0xc0]
push eax
lea ebp, [esp + 0xbc]
push ebp
push ebx
push esi
mov dword [esp + 0x40], edi
push edi
call ecx
add esp, 0x1c
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x5c], eax
mov edi, dword [esp + 0xac]
movzx esi, word [esp + 0xb8]
mov ecx, dword [0xa21714]
add ecx, dword [esp + 8]
add ecx, dword [esp]
add ecx, dword [0xa21614]
call dword [0xa0535c]
push 0x88f746e7
push ebp
lea eax, [esp + 0xb3]
push eax
push dword [esp + 0x18]
push edi
push esi
call ecx
add esp, 0x18
movzx eax, byte [esp + 0xab]
mov byte [esp + 0xc], al
mov ebx, dword [esp + 0xb0]
mov eax, dword [0xa216dc]
mov ecx, dword [0xa216a4]
xor ecx, dword [esp]
sub ecx, dword [esp + 4]
add ecx, eax
call dword [0xa0535c]
push 0x7a65d837
lea eax, [esp + 0x8c]
push eax
push dword [esp + 0x74]
lea eax, [esp + 0x90]
push eax
push dword [esp + 0x80]
push dword [esp + 0x60]
push dword [esp + 0x8c]
lea eax, [esp + 0x98]
push eax
push dword [esp + 0x98]
call ecx
add esp, 0x24
mov eax, dword [0xa216e4]
mov ecx, dword [0xa2162c]
sub ecx, dword [esp]
add ecx, eax
mov eax, dword [esp + 0x10]
add ecx, eax
add ecx, 0xffffa5bc
call dword [0xa0535c]
push 0xd523b5a
lea eax, [esp + 0xa4]
push eax
push ebx
mov ebx, dword [esp + 0xc]
lea eax, [esp + 0xa8]
push eax
push edi
lea eax, [esp + 0xac]
push eax
push dword [esp + 0x74]
lea eax, [esp + 0xb0]
push eax
push dword [esp + 0x80]
mov ebp, dword [esp + 0x28]
lea eax, [esp + 0xb4]
push eax
push dword [esp + 0x8c]
lea eax, [esp + 0xb8]
push eax
push dword [esp + 0x98]
call ecx
add esp, 0x34
mov eax, dword [0xa21720]
mov ecx, dword [0xa21650]
or ecx, ebx
sub ecx, ebp
add ecx, eax
call dword [0xa0535c]
push 0x94056372
lea eax, [esp + 0xb0]
push eax
push dword [esp + 0x4c]
mov edi, dword [esp + 0x54]
push edi
lea eax, [esp + 0xb4]
push eax
push dword [esp + 0x34]
call ecx
add esp, 0x18
mov esi, dword [esp + 0xac]
test al, 1
je 0x750e40
mov eax, dword [0xa216b0]
mov edi, dword [0xa21680]
or edi, ebx
sub edi, ebp
add edi, eax
mov ecx, edi
call dword [0xa0535c]
mov ecx, dword [esp + 0x38]
lea eax, [esp + 0x7c]
push eax
push esi
call edi
mov esi, dword [esp + 8]
jmp 0x750e8e
mov eax, dword [0xa21728]
mov ecx, dword [0xa21638]
xor ecx, ebx
sub ecx, ebp
add ecx, eax
call dword [0xa0535c]
push dword [esp + 0x40]
lea eax, [esp + 0x80]
push eax
push esi
call ecx
add esp, 0xc
mov ecx, dword [0xa216d0]
mov esi, dword [esp + 8]
add ecx, esi
add ecx, ebx
add ecx, dword [0xa21698]
call dword [0xa0535c]
push 0x75e4a576
push edi
call ecx
add esp, 8
mov eax, dword [0xa216cc]
mov ecx, dword [0xa21604]
or ecx, ebx
sub ecx, ebp
add ecx, eax
call dword [0xa0535c]
movzx ebp, byte [esp + 0x24]
push 0x30cedcc8
lea eax, [esp + 0xb4]
push eax
lea eax, [esp + 0xb3]
push eax
push ebp
call ecx
add esp, 0x10
movzx edi, byte [esp + 0xab]
movzx ebx, byte [esp + 0xb0]
mov ecx, dword [0xa21730]
add ecx, esi
add ecx, dword [esp]
add ecx, dword [0xa21658]
call dword [0xa0535c]
movzx esi, byte [esp + 0x34]
push 0xa2c2e5a3
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0xbb]
push eax
push esi
push ebx
push edi
push ebp
call ecx
add esp, 0x24
movzx edi, byte [esp + 0xb4]
movzx ebx, byte [esp + 0xb8]
movzx eax, byte [esp + 0xab]
mov dword [esp + 0x24], eax
movzx eax, byte [esp + 0xb0]
mov dword [esp + 0x34], eax
mov eax, dword [0xa21740]
mov ecx, dword [0xa21684]
or ecx, dword [esp]
sub ecx, dword [esp + 4]
add ecx, eax
call dword [0xa0535c]
push 0xae9fc4bb
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0xb7]
push eax
push esi
push ebx
push edi
push ebp
call ecx
add esp, 0x20
movzx eax, byte [esp + 0xab]
mov dword [esp + 0x20], eax
movzx edi, byte [esp + 0xb0]
movzx ebx, byte [esp + 0xb4]
mov eax, dword [0xa21710]
mov ecx, dword [0xa21620]
sub ecx, dword [esp]
add ecx, eax
mov eax, dword [esp + 0x10]
add ecx, eax
add ecx, 0xffffa5bc
call dword [0xa0535c]
push 0x7b5e7572
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0xb7]
push eax
mov esi, dword [esp + 0x44]
push esi
mov ebp, dword [esp + 0x38]
push ebp
push ebx
push edi
push dword [esp + 0x40]
call ecx
add esp, 0x24
movzx ebx, byte [esp + 0xb4]
movzx edi, byte [esp + 0xb0]
movzx eax, byte [esp + 0xab]
mov dword [esp + 0x20], eax
mov eax, dword [0xa21700]
mov ecx, dword [0xa21664]
or ecx, dword [esp]
sub ecx, dword [esp + 4]
add ecx, eax
call dword [0xa0535c]
push 0x2ccc8627
lea eax, [esp + 0xb4]
push eax
lea eax, [esp + 0xb3]
push eax
push edi
push ebp
push esi
push ebx
call ecx
add esp, 0x1c
movzx esi, byte [esp + 0xab]
movzx edi, byte [esp + 0xb0]
mov eax, dword [0xa216b8]
mov ecx, dword [0xa21688]
xor ecx, dword [esp]
sub ecx, dword [esp + 4]
add ecx, eax
call dword [0xa0535c]
push 0x27d4d9e5
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0xb8]
push eax
lea ebp, [esp + 0xb7]
push ebp
push dword [esp + 0x30]
push edi
push esi
call ecx
add esp, 0x1c
movzx esi, byte [esp + 0xb0]
movzx edi, byte [esp + 0xab]
movzx ebx, byte [esp + 0xb4]
mov eax, dword [0xa21744]
mov ecx, dword [0xa21670]
xor ecx, dword [esp]
sub ecx, dword [esp + 4]
add ecx, eax
call dword [0xa0535c]
push 0xc198987c
push ebp
push ebx
push edi
push esi
call ecx
add esp, 0x14
movzx esi, byte [esp + 0xab]
mov eax, dword [0xa21718]
mov ecx, dword [0xa21608]
sub ecx, dword [esp]
add ecx, eax
mov eax, dword [esp + 0x10]
add ecx, eax
add ecx, 0xffffa5bc
call dword [0xa0535c]
movzx edi, byte [esp + 0x28]
movzx eax, byte [esp + 0x14]
push 0x25567af5
lea edx, [esp + 0xb8]
push edx
lea edx, [esp + 0xb8]
push edx
push ebp
push edi
push esi
push eax
call ecx
add esp, 0x1c
movzx esi, byte [esp + 0xb0]
movzx ebx, byte [esp + 0xb4]
movzx ebp, byte [esp + 0xab]
mov eax, dword [0xa21754]
mov ecx, dword [0xa21624]
or ecx, dword [esp]
sub ecx, dword [esp + 4]
add ecx, eax
call dword [0xa0535c]
push 0x2479ed80
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0xbb]
push eax
push ebp
push ebx
push esi
push edi
call ecx
add esp, 0x24
movzx eax, byte [esp + 0xb4]
mov dword [esp + 0x28], eax
movzx ebx, byte [esp + 0xb0]
movzx esi, byte [esp + 0xab]
mov dword [esp + 0x14], esi
movzx ebp, byte [esp + 0xb8]
mov eax, dword [0xa216c4]
mov ecx, dword [0xa2160c]
sub ecx, dword [esp]
add ecx, eax
mov edi, dword [esp + 0x10]
add ecx, edi
add ecx, 0xffffa5bc
call dword [0xa0535c]
push 0x5d80a613
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0xb8]
push eax
lea eax, [esp + 0xb7]
push eax
push ebp
push esi
push ebx
push dword [esp + 0x44]
call ecx
add esp, 0x20
movzx esi, byte [esp + 0xab]
movzx ebx, byte [esp + 0xb0]
movzx ebp, byte [esp + 0xb4]
mov eax, dword [0xa216e0]
mov ecx, dword [0xa2166c]
sub ecx, dword [esp]
add ecx, eax
add ecx, edi
add ecx, 0xffffa5bc
call dword [0xa0535c]
push 0x20dc070a
lea edi, [esp + 0xaf]
push edi
push ebp
mov ebp, dword [esp + 0x10]
push ebx
mov ebx, dword [esp + 0x10]
push dword [esp + 0x24]
push esi
call ecx
add esp, 0x18
movzx esi, byte [esp + 0xab]
mov ecx, dword [0xa21758]
add ecx, dword [esp + 8]
add ecx, ebx
add ecx, dword [0xa2167c]
call dword [0xa0535c]
movzx eax, byte [esp + 0xc]
push 0xf483f544
lea edx, [esp + 0xb4]
push edx
push edi
push eax
push esi
call ecx
add esp, 0x14
movzx esi, byte [esp + 0xab]
movzx edi, byte [esp + 0xb0]
mov eax, dword [0xa21724]
mov ecx, dword [0xa21648]
or ecx, ebx
sub ecx, ebp
add ecx, eax
call dword [0xa0535c]
push 0x298051f6
push edi
push esi
lea esi, [esp + 0xbc]
call ecx
add esp, 0xc
test al, 1
mov edi, dword [esp + 0x18]
je 0x75131f
mov eax, dword [0xa216c8]
mov ecx, dword [0xa21634]
xor ecx, ebx
sub ecx, ebp
add ecx, eax
call dword [0xa0535c]
push 0xbfa2ee4f
lea eax, [esp + 0xaf]
push eax
push esi
push dword [esp + 0x3c]
push edi
call ecx
add esp, 0x14
mov edi, dword [esp + 0xb0]
movzx ecx, byte [esp + 0xab]
mov dword [esp + 0x2c], ecx
test al, 1
je 0x7509b0
mov ebx, dword [esp + 0x2c]
and bl, 1
mov ecx, dword [esp + 0xbc]
xor ecx, esp
call fcn.008ea1d3
mov eax, ebx
add esp, 0xc0
pop esi
pop edi
pop ebx
pop ebp
ret 4
mov eax, dword [0xa216fc]
xor ebx, dword [0xa2168c]
sub ebx, ebp
add ebx, eax
mov ecx, ebx
call dword [0xa0535c]
call ebx
int3