Function at 0x751e31
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, eax
push edi
push esi
push ebx
sub esp, 0x6c
mov eax, dword [eax + 0x80]
mov dword [esp + 0x2c], eax
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.00746961
mov ebx, eax
sub eax, 1
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.00746981
mov dword [esp + 8], 0
mov dword [esp + 4], 0xffffffff
mov esi, eax
mov dword [esp], eax
call fcn.0076c711
mov dword [esp + 0x24], 0
cmp eax, 1
jne 0x751e9a
mov eax, dword [esi + 0x80]
shr eax, 0xd
and eax, 1
mov dword [esp + 0x24], eax
cmp ebx, 1
jne 0x751ea5
cmp dword [ebp + 0x4c], 1
je 0x751f01
mov dword [esp + 0x10], 0xb81
mov dword [esp + 0xc], 0x9d9538
mov dword [esp + 8], 0x44
mov dword [esp + 4], 0x6a
mov dword [esp], 0xb
call fcn.006eb671
mov dword [ebp + 0x60], 1
mov eax, dword [ebp + 0x50]
mov dword [esp], 0
xor esi, esi
mov dword [esp + 4], eax
call fcn.00751d01
add esp, 0x6c
mov eax, esi
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [ebp + 8]
test eax, eax
mov dword [esp + 0x30], eax
setne al
movzx eax, al
mov edi, eax
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x751fd1
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x14]
test al, 3
jne 0x751fd1
test al, 0xc
je 0x751fd1
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x7531f9
mov dword [esp + 0x48], 0
xor edi, edi
mov dword [esp + 0x4c], 0
mov esi, dword [esp + 0x2c]
mov eax, dword [esi + 4]
mov dword [esp], eax
call fcn.00746961
test eax, eax
jle 0x752025
mov eax, dword [esi + 8]
test eax, eax
je 0x752025
mov ebx, dword [esp + 0x30]
test ebx, ebx
je 0x753471
mov dword [esp + 0x28], edi
mov esi, dword [esp + 0x30]
xor ebx, ebx
mov edi, dword [esp + 0x2c]
jmp 0x751fba
mov dword [esp + 4], ebx
mov eax, dword [edi + 8]
mov dword [esp], eax
call fcn.00746981
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.007464a1
test eax, eax
je 0x7532f1
mov eax, dword [edi + 8]
add ebx, 1
mov dword [esp], eax
call fcn.00746961
cmp ebx, eax
jl 0x751f91
mov edi, dword [esp + 0x28]
jmp 0x752025
mov eax, dword [esp + 0x30]
test eax, eax
je 0x752101
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 0xc]
test ah, 0x80
jne 0x753049
shr eax, 0x14
xor eax, 1
and eax, 1
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.00745ae1
mov dword [esp + 0x30], eax
test eax, eax
je 0x753409
mov esi, dword [esp + 0x2c]
mov dword [esp + 0x48], 1
test esi, esi
jne 0x751f53
mov eax, dword [ebp + 0x10]
mov edx, dword [eax + 0x18]
cmp edx, 0x3fffffff
jg 0x752c81
lea eax, [edx + 1]
mov dword [esp + 0x3c], eax
test edi, edi
je 0x753544
mov dword [esp + 0x34], 3
mov eax, dword [ebp + 0x50]
mov dword [esp + 0x28], 0
lea esi, [esi]
nop
mov dword [esp + 0x5c], 0
test edi, 2
jne 0x752241
test edi, 1
je 0x752061
mov dword [esp], eax
call fcn.00746961
mov ebx, eax
cmp eax, dword [ebp + 0x4c]
je 0x752111
mov dword [esp + 0x10], 0xc81
mov dword [esp + 0xc], 0x9d9538
mov dword [esp + 8], 0x44
mov dword [esp + 4], 0x6a
mov dword [esp], 0xb
call fcn.006eb671
mov eax, dword [esp + 0x30]
mov dword [ebp + 0x60], 1
mov dword [esp], eax
call fcn.00746911
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.00746961
mov edx, dword [ebp + 0x50]
mov dword [esp + 4], edx
mov dword [esp], 0
call fcn.00751d01
lea esi, [esi]
xor esi, esi
add esp, 0x6c
mov eax, esi
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 0x4c], 0
or edi, 2
jmp 0x752011
lea eax, [eax - 1]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.00746981
test byte [esp + 0x24], 1
jne 0x752831
cmp ebx, dword [esp + 0x3c]
jg 0x752831
mov edx, dword [esp + 0x30]
mov ecx, eax
mov eax, ebp
call fcn.00750901
mov dword [esp + 0x5c], eax
test eax, eax
je 0x752831
mov dword [esp + 4], eax
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.007461d1
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.0074ec91
test eax, eax
je 0x752c59
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.007464a1
mov dword [esp + 0x24], eax
test eax, eax
je 0x752be1
mov ebx, dword [esp + 0x5c]
add dword [ebp + 0x4c], 1
mov dword [esp + 8], 0
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call fcn.0076c711
mov dword [esp + 0x24], 0
cmp eax, 1
jne 0x7521d1
mov eax, dword [ebx + 0x80]
shr eax, 0xd
and eax, 1
mov dword [esp + 0x24], eax
mov esi, dword [ebp + 0x4c]
mov edx, dword [ebp + 0x80]
mov eax, dword [ebp + 0x50]
lea ebx, [esi - 1]
test edx, edx
je 0x752c69
test byte [edx + 0x14], 5
je 0x752c69
test ebx, ebx
je 0x752c69
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00746981
mov ecx, eax
test eax, eax
je 0x75222b
mov edx, dword [ebp + 0x80]
mov eax, dword [ebp + 0x4c]
mov dword [esp], ebx
call fcn.0074f931
test eax, eax
js 0x752c20
jne 0x7530f9
mov dword [esp + 0x34], 3
mov eax, dword [ebp + 0x50]
jmp 0x752061
mov dword [esp], eax
call fcn.00746961
mov ebx, dword [esp + 0x28]
mov esi, eax
mov eax, edi
and eax, 4
cmove ebx, esi
mov dword [esp + 0x40], eax
lea eax, [ebx - 1]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.00746981
mov dword [esp + 0x38], eax
cmp esi, dword [esp + 0x3c]
jg 0x752791
mov edx, dword [ebp + 0x50]
mov dword [ebp + 0x50], 0
mov dword [esp + 8], eax
lea eax, [esp + 0x5c]
mov dword [esp + 0x44], edx
mov dword [esp + 4], ebp
mov dword [esp], eax
call dword [ebp + 0x20]
mov edx, dword [esp + 0x44]
mov dword [ebp + 0x50], edx
test eax, eax
js 0x752a41
je 0x752791
mov ecx, dword [esp + 0x40]
test ecx, ecx
je 0x752931
cmp esi, ebx
jle 0x7522d0
test ebx, ebx
jle 0x7522d0
mov eax, dword [esp + 0x24]
test eax, eax
je 0x752aa9
mov dword [esp + 0x10], 0xc0e
mov dword [esp + 0xc], 0x9d9538
mov dword [esp + 8], 0x44
mov dword [esp + 4], 0x6a
mov dword [esp], 0xb
call fcn.006eb671
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.0075bb21
mov dword [ebp + 0x60], 1
mov dword [esp + 0x34], 2
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.00746911
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.00746961
cmp dword [esp + 0x34], 1
mov edx, dword [ebp + 0x50]
jne 0x75334a
mov dword [esp], edx
call fcn.00746961
mov dword [esp + 0x38], 0
mov dword [esp + 0x28], eax
mov eax, dword [ebp + 0x78]
mov dword [esp + 0x2c], 6
test eax, eax
je 0x752ff1
mov eax, dword [esp + 0x28]
test eax, eax
jle 0x75257a
mov dword [esp + 0x30], 0
mov esi, 0xffffffff
xor ebx, ebx
mov dword [esp + 0x24], 0
jmp 0x752449
test eax, eax
je 0x7523ab
lea ecx, [ebx + 1]
cmp dword [esp + 0x28], ecx
jle 0x752a29
cmp eax, 1
je 0x752781
mov dword [ebp + 0x60], 0x18
mov dword [ebp + 0x5c], ebx
mov eax, edi
test edi, edi
je 0x7524b6
mov dword [ebp + 0x64], eax
mov dword [esp + 4], ebp
mov dword [esp], 0
call dword [ebp + 0x1c]
test eax, eax
je 0x7520da
mov ecx, dword [esp + 0x2c]
test ecx, ecx
jg 0x752701
cmp ebx, 1
jle 0x752551
mov eax, dword [edi + 0x78]
cmp eax, 0xffffffff
je 0x752403
add eax, dword [esp + 0x24]
cmp eax, dword [esp + 0x30]
jl 0x752801
mov eax, dword [edi + 0x80]
mov ecx, eax
and ecx, 0x20
cmp ecx, 1
adc dword [esp + 0x30], 0
test ah, 4
je 0x752568
mov eax, dword [edi + 0x7c]
cmp eax, 0xffffffff
je 0x752435
cmp eax, dword [esp + 0x24]
jl 0x752989
mov dword [esp + 0x24], eax
add dword [esp + 0x24], 1
xor esi, esi
add ebx, 1
cmp dword [esp + 0x28], ebx
je 0x75257a
mov dword [esp + 4], ebx
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.00746981
mov edi, eax
mov eax, dword [ebp + 0x10]
test byte [eax + 0xc], 0x10
jne 0x752470
test byte [edi + 0x81], 2
jne 0x7527a9
mov eax, dword [esp + 0x38]
test eax, eax
jne 0x752485
test byte [edi + 0x81], 4
jne 0x7527d1
mov dword [esp], edi
call fcn.0076c7c1
cmp esi, 0xffffffff
je 0x7524d1
test esi, esi
jne 0x752391
test eax, eax
je 0x752781
mov dword [ebp + 0x60], 0x25
mov eax, edi
mov dword [ebp + 0x5c], ebx
test edi, edi
jne 0x7523bf
mov dword [esp + 4], ebx
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.00746981
jmp 0x7523bf
mov ecx, dword [ebp + 0x10]
mov ecx, dword [ecx + 0xc]
and ecx, 0x20
je 0x75251b
cmp eax, 1
ja 0x7523ab
test ecx, ecx
je 0x75251b
cmp dword [esp + 0x28], 1
je 0x75251b
mov dword [esp], edi
call fcn.0074c0b1
test eax, eax
je 0x752c49
mov dword [esp], eax
mov dword [esp + 0x34], eax
call fcn.007019b1
mov ecx, dword [esp + 0x34]
cmp eax, 0x198
je 0x752c31
test byte [edi + 0x80], 0x10
jne 0x7523d8
cmp dword [edi + 0x78], 0xffffffff
je 0x7523d8
mov eax, dword [ebp + 0x10]
test byte [eax + 0xc], 0x20
je 0x7523d8
mov dword [ebp + 0x60], 0x29
mov eax, edi
mov dword [ebp + 0x5c], ebx
jmp 0x7523bf
mov eax, dword [edi + 0x80]
test ebx, ebx
jne 0x752409
test ah, 4
jne 0x75241f
mov esi, 1
add ebx, 1
cmp dword [esp + 0x28], ebx
jne 0x752449
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.00746961
mov esi, eax
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x1c]
test ecx, ecx
jle 0x752c99
test esi, esi
jle 0x752c99
mov dword [esp + 4], 0
mov eax, dword [ebp + 0x50]
xor edi, edi
mov dword [esp], eax
call fcn.00746981
mov ebx, eax
lea eax, [esi - 1]
mov dword [esp + 0x24], eax
lea esi, [esi]
cmp edi, dword [esp + 0x24]
jl 0x752661
add edi, 1
cmp esi, edi
je 0x752c99
mov dword [esp + 4], edi
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.00746981
mov dword [esp], eax
mov ebx, eax
call fcn.0074c0b1
mov edx, dword [ebp + 0x10]
mov edx, dword [edx + 0x1c]
test edx, edx
jle 0x7525c1
test eax, eax
je 0x752621
mov dword [esp], eax
mov dword [esp + 0x28], edx
call fcn.00700511
mov edx, dword [esp + 0x28]
mov ecx, 5
cmp edx, 5
cmovg edx, ecx
cmp eax, dword [edx*4 + 0x9d9554]
jge 0x7525c1
mov dword [ebp + 0x5c], edi
test ebx, ebx
je 0x753261
mov eax, ebx
mov dword [ebp + 0x64], eax
mov dword [ebp + 0x60], 0x43
mov dword [esp + 4], ebp
mov dword [esp], 0
call dword [ebp + 0x1c]
test eax, eax
je 0x7520da
cmp edi, dword [esp + 0x24]
jge 0x7525cb
lea esi, [esi]
nop
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x5c], 0xffffffff
mov edx, dword [eax + 0x1c]
test edx, edx
mov dword [esp + 0x28], edx
jle 0x7525cb
lea eax, [esp + 0x5c]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], ebx
call fcn.0074edf1
test eax, eax
je 0x7526c7
mov edx, dword [esp + 0x28]
mov eax, 5
cmp edx, 5
cmovg edx, eax
mov eax, dword [esp + 0x5c]
cmp dword [edx*4 + 0x9d9554], eax
jle 0x7525cb
mov dword [ebp + 0x5c], edi
test ebx, ebx
je 0x753279
mov dword [ebp + 0x64], ebx
mov dword [ebp + 0x60], 0x44
mov dword [esp + 4], ebp
mov dword [esp], 0
call dword [ebp + 0x1c]
test eax, eax
jne 0x7525cb
jmp 0x7520da
cmp dword [ebp + 0x4c], ebx
jg 0x752712
mov eax, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x10]
je 0x752a59
xor eax, eax
test esi, esi
mov dword [esp], edi
setg al
mov dword [esp + 8], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
call fcn.0076c711
test eax, eax
je 0x752747
cmp eax, 1
je 0x7523e4
mov eax, dword [ebp + 0x10]
test byte [eax + 0xc], 0x20
je 0x7523e4
mov dword [ebp + 0x5c], ebx
mov eax, edi
test edi, edi
je 0x752a91
mov dword [ebp + 0x64], eax
mov dword [ebp + 0x60], 0x1a
mov dword [esp + 4], ebp
mov dword [esp], 0
call dword [ebp + 0x1c]
test eax, eax
jne 0x7523e4
jmp 0x7520da
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0xc]
and ecx, 0x20
jmp 0x7524e5
mov eax, edi
and eax, 1
test eax, eax
je 0x752851
mov eax, dword [ebp + 0x50]
jmp 0x75207d
mov dword [ebp + 0x5c], ebx
mov dword [ebp + 0x64], edi
mov dword [ebp + 0x60], 0x22
mov dword [esp + 4], ebp
mov dword [esp], 0
call dword [ebp + 0x1c]
test eax, eax
jne 0x752470
jmp 0x7520da
mov dword [ebp + 0x5c], ebx
mov dword [ebp + 0x64], edi
mov dword [ebp + 0x60], 0x28
mov dword [esp + 4], ebp
mov dword [esp], 0
call dword [ebp + 0x1c]
test eax, eax
jne 0x752485
jmp 0x7520da
mov dword [ebp + 0x5c], ebx
mov dword [ebp + 0x64], edi
mov dword [ebp + 0x60], 0x19
mov dword [esp + 4], ebp
mov dword [esp], 0
call dword [ebp + 0x1c]
test eax, eax
jne 0x752403
jmp 0x7520da
mov eax, dword [esp + 0x48]
and edi, 0xfffffffe
test eax, eax
je 0x752979
or edi, 2
mov eax, dword [ebp + 0x50]
jmp 0x752061
test edi, 4
je 0x7529f1
sub dword [esp + 0x28], 1
mov eax, dword [esp + 0x28]
test eax, eax
jg 0x752843
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.00746911
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.00746961
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x28], eax
cmp eax, edx
jg 0x7528b7
cmp dword [esp + 0x34], 3
jne 0x7528b7
mov edx, dword [esp + 0x2c]
test edx, edx
je 0x753534
mov eax, dword [ebp + 0x4c]
test byte [edx + 0x14], 4
jne 0x753111
cmp dword [esp + 0x28], eax
je 0x75348a
mov edx, dword [ebp + 0x50]
mov dword [esp], edx
call fcn.00746961
mov ebx, eax
cmp eax, dword [esp + 0x3c]
jg 0x7533d1
mov esi, dword [esp + 0x2c]
test esi, esi
jne 0x753291
mov edx, dword [esp + 0x24]
mov eax, dword [ebp + 0x50]
lea esi, [ebx - 1]
test edx, edx
jne 0x753389
cmp ebx, dword [ebp + 0x4c]
jg 0x753441
mov dword [ebp + 0x5c], esi
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.00746981
mov dword [ebp + 0x60], 0x14
mov dword [ebp + 0x64], eax
mov dword [esp + 4], ebp
mov dword [esp], 0
call dword [ebp + 0x1c]
mov edx, dword [ebp + 0x50]
test eax, eax
je 0x7520dd
jmp 0x75233c
mov eax, dword [esp + 0x24]
test eax, eax
je 0x752b49
mov eax, dword [ebp + 0x4c]
cmp esi, eax
je 0x7529b9
cmp eax, esi
jg 0x752ba1
mov edx, esi
mov eax, ebp
call fcn.0074ffe1
mov dword [esp + 0x34], eax
sub eax, 1
cmp eax, 1
jbe 0x752317
mov eax, dword [esp + 0x24]
and edi, 0xfffffffe
test eax, eax
jne 0x752851
lea esi, [esi]
nop
test edi, edi
jne 0x752843
jmp 0x75286a
mov dword [ebp + 0x5c], ebx
mov dword [ebp + 0x64], edi
mov dword [ebp + 0x60], 0x26
mov dword [esp + 4], ebp
mov dword [esp], 0
call dword [ebp + 0x1c]
test eax, eax
je 0x7520da
mov eax, dword [edi + 0x7c]
jmp 0x752431
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.0074bcd1
test eax, eax
je 0x753011
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.0075bb21
test edi, 1
jne 0x75279e
lea esi, [esi]
mov edx, dword [esp + 0x4c]
test edx, edx
je 0x75286a
mov eax, dword [ebp + 0x4c]
cmp eax, 1
jle 0x75286a
sub eax, 1
mov dword [esp + 0x24], 0
or edi, 4
mov dword [esp + 0x28], eax
mov eax, dword [ebp + 0x50]
jmp 0x752075
mov ecx, dword [ebp + 0x10]
test byte [ecx + 0xc], 0x20
je 0x75251b
jmp 0x7523a2
mov dword [ebp + 0x60], 0x46
mov dword [esp + 0x34], 2
jmp 0x752317
mov dword [esp + 8], 4
mov eax, dword [eax + 0x14]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.00813621
cmp eax, 1
je 0x7523e4
cmp eax, 2
jne 0x752712
mov dword [ebp + 0x5c], ebx
mov eax, edi
test edi, edi
jne 0x752754
nop
mov dword [esp + 4], ebx
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.00746981
jmp 0x752754
mov dword [esp + 0x24], esi
and edi, 0xfffffffb
jmp 0x752abc
mov edx, dword [ebp + 0x50]
mov dword [esp], edx
sub esi, 1
call fcn.00746811
mov dword [esp], eax
call fcn.0075bb21
cmp ebx, esi
jl 0x752ab9
mov esi, dword [esp + 0x24]
mov eax, ebx
mov ecx, 0
lea edx, [esi - 1]
sub eax, edx
cmp esi, ebx
cmovle eax, ecx
lea esi, [eax + edx]
mov eax, dword [esp + 0x2c]
mov dword [ebp + 0x4c], esi
test eax, eax
je 0x752c79
mov ebx, dword [esp + 0x2c]
mov eax, dword [ebx + 4]
mov dword [esp], eax
call fcn.00746961
test eax, eax
jle 0x752b19
mov eax, dword [ebp + 0x4c]
cmp dword [ebx + 0x18], eax
jge 0x753361
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 4]
mov dword [esp], eax
call fcn.00746961
test eax, eax
jle 0x752c79
mov eax, dword [esp + 0x2c]
mov edx, dword [ebp + 0x50]
mov ecx, dword [ebp + 0x4c]
cmp dword [eax + 0x1c], ecx
jl 0x752b49
mov dword [eax + 0x1c], 0xffffffff
lea esi, [esi]
mov ebx, dword [esp + 0x5c]
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.007464a1
mov dword [esp + 0x24], eax
test eax, eax
je 0x752fd1
mov dword [esp + 8], 0
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call fcn.0076c711
cmp eax, 1
jne 0x752fb9
mov eax, dword [ebx + 0x80]
shr eax, 0xd
and eax, 1
mov dword [esp + 0x24], eax
mov eax, dword [ebp + 0x4c]
cmp eax, esi
jle 0x75294c
mov dword [esp + 0x10], 0xc54
mov dword [esp + 0xc], 0x9d9538
mov dword [esp + 8], 0x44
mov dword [esp + 4], 0x6a
mov dword [esp], 0xb
call fcn.006eb671
mov dword [ebp + 0x60], 1
mov dword [esp + 0x34], 2
jmp 0x752317
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.0075bb21
mov dword [esp + 0x10], 0xca2
mov dword [esp + 0xc], 0x9d9538
mov dword [esp + 8], 0x41
mov dword [esp + 4], 0x6a
mov dword [esp], 0xb
call fcn.006eb671
mov dword [ebp + 0x60], 0x11
mov dword [esp + 0x34], 2
jmp 0x752317
mov dword [esp], ecx
call fcn.007016c1
mov dword [esp], eax
call fcn.006d4601
test eax, eax
jns 0x753061
mov dword [ebp + 0x60], 1
jmp 0x7523b2
mov dword [esp + 0x10], 0xc99
jmp 0x752098
mov dword [esp + 0x34], 3
jmp 0x752061
mov edx, dword [ebp + 0x50]
jmp 0x752b49
mov dword [eax + 0x18], 0x3fffffff
mov dword [esp + 0x3c], 0x40000000
jmp 0x75203e
mov eax, ebp
call fcn.007502e1
mov ebx, eax
mov eax, dword [ebp + 0x50]
mov dword [esp], 0
mov dword [esp + 4], eax
call fcn.00751d01
test ebx, ebx
je 0x7520f1
mov dword [esp], ebp
call dword [ebp + 0x28]
test eax, eax
je 0x7520f1
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 0xc]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x50]
mov dword [esp + 4], 0
mov dword [esp + 8], eax
lea eax, [ebp + 0x5c]
mov dword [esp], eax
call fcn.0074c1f1
mov ebx, eax
test eax, eax
jne 0x752f81
mov eax, dword [ebp + 0x18]
test eax, eax
je 0x753251
mov dword [esp], ebp
call eax
test eax, eax
je 0x7520f1
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.00746961
sub eax, 1
js 0x752f1e
mov dword [esp + 0x24], eax
mov esi, dword [esp + 0x24]
mov dword [esp + 4], esi
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.00746981
mov dword [esp + 0x28], eax
mov eax, dword [eax + 0x80]
test esi, esi
je 0x752d52
test al, 0x20
jne 0x752f0c
test ah, 4
je 0x752e5c
mov edi, dword [esp + 0x28]
mov dword [esp], edi
call fcn.0074bb91
mov dword [esp], edi
mov esi, eax
call fcn.0074ba71
mov dword [esp], esi
mov dword [esp + 0x2c], eax
call fcn.007568d1
lea edx, [eax - 1]
mov edi, eax
mov dword [esp + 0x30], edx
test edx, edx
jle 0x752e31
mov dword [esp], esi
call fcn.007568d1
mov ebx, eax
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call fcn.007568d1
add eax, 1
cmp ebx, eax
jne 0x752e31
mov edx, dword [esp + 0x30]
mov dword [esp], esi
sub edi, 2
mov dword [esp + 4], edx
call fcn.00756a11
mov dword [esp], eax
call fcn.007574f1
mov dword [esp + 4], edi
mov dword [esp], esi
mov ebx, eax
call fcn.00756a11
mov dword [esp], eax
call fcn.007574f1
cmp ebx, eax
je 0x752e31
mov dword [esp], esi
call fcn.0075a371
mov ebx, eax
test eax, eax
je 0x7534fa
mov eax, dword [esp + 0x30]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00756a61
mov dword [esp], eax
mov esi, eax
call fcn.007574b1
mov dword [esp], eax
call fcn.00718f31
cmp eax, 0xd
je 0x75349e
mov dword [esp], esi
call fcn.00759641
mov dword [esp], ebx
call fcn.0075a351
mov eax, dword [esp + 0x24]
mov dword [ebp + 0x60], 0x48
mov dword [ebp + 0x5c], eax
mov eax, dword [esp + 0x28]
mov dword [ebp + 0x64], eax
mov dword [esp + 4], ebp
mov dword [esp], 0
call dword [ebp + 0x1c]
test eax, eax
je 0x7520f1
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.00746961
lea ebx, [eax - 1]
cmp ebx, dword [esp + 0x24]
jle 0x752f0c
mov dword [esp + 4], ebx
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.00746981
mov esi, dword [eax + 0xa4]
test esi, esi
je 0x752eff
mov eax, dword [esp + 0x28]
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.007690c1
mov edi, dword [esp + 0x24]
or edi, eax
jne 0x752ecb
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 0x28]
test al, 0x20
jne 0x752f6d
test al, 1
je 0x753079
mov eax, dword [esp + 0x28]
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.00769281
test eax, eax
je 0x752eff
cmp eax, 0x11
je 0x7520f1
mov edx, dword [esp + 0x24]
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x5c], edx
mov edx, dword [esp + 0x28]
mov dword [ebp + 0x64], edx
mov dword [esp + 4], ebp
mov dword [esp], 0
call dword [ebp + 0x1c]
test eax, eax
je 0x7520f1
sub ebx, 1
cmp dword [esp + 0x24], ebx
jl 0x752e74
sub dword [esp + 0x24], 1
mov eax, dword [esp + 0x24]
cmp eax, 0xffffffff
jne 0x752d29
mov dword [esp], ebp
call fcn.00763741
test eax, eax
je 0x7520f1
mov dword [esp], ebp
call fcn.007619e1
mov esi, eax
test eax, eax
je 0x7520f1
mov eax, dword [ebp + 0x10]
test byte [eax + 0xc], 0x80
je 0x751eed
mov dword [esp], ebp
call dword [ebp + 0x38]
mov esi, eax
jmp 0x751eed
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call fcn.00767281
sub ebx, 1
test ebx, ebx
jg 0x752e74
jmp 0x752f1e
mov eax, dword [ebp + 0x5c]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.00746981
mov dword [ebp + 0x60], ebx
mov dword [ebp + 0x64], eax
mov dword [esp + 4], ebp
mov dword [esp], 0
call dword [ebp + 0x1c]
test eax, eax
jne 0x752cf9
xor esi, esi
jmp 0x7520f3
mov dword [esp + 0x24], 0
mov eax, dword [ebp + 0x4c]
jmp 0x752944
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.0075bb21
mov dword [esp + 0x10], 0xc2c
jmp 0x752bf5
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 0xc]
shr eax, 6
and eax, 1
mov dword [esp + 0x38], eax
mov eax, dword [edx + 0x10]
mov dword [esp + 0x2c], eax
jmp 0x752363
mov eax, dword [esp + 0x38]
sub esi, 1
mov dword [esp], eax
call fcn.0075bb21
mov eax, dword [esp + 0x5c]
mov dword [ebp + 0x4c], esi
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.007469b1
mov eax, dword [ebp + 0x4c]
jmp 0x752944
mov dword [esp + 0x4c], 0
or edi, 2
jmp 0x751ff9
je 0x75251b
mov dword [ebp + 0x60], 0x4f
jmp 0x7523b2
mov eax, dword [esp + 0x28]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x55
mov dword [esp], eax
call fcn.0074c951
mov dword [esp + 0x2c], eax
test eax, eax
je 0x752ebb
mov dword [esp + 0x30], esi
mov esi, dword [esp + 0x2c]
jmp 0x7530d1
mov dword [esp + 4], edi
mov dword [esp], esi
call fcn.00746981
cmp dword [eax], 2
je 0x752f61
add edi, 1
mov dword [esp], esi
call fcn.00746961
cmp edi, eax
jl 0x7530b9
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + 0x30]
mov dword [esp], eax
call fcn.00767281
jmp 0x752ebb
sub esi, 2
mov dword [esp + 0x34], 1
mov dword [ebp + 0x4c], esi
jmp 0x752317
sub eax, 1
mov ebx, dword [ebp + 0x80]
xor esi, esi
mov dword [esp + 0x38], eax
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.00746981
mov dword [esp + 0x30], eax
mov eax, dword [ebx + 4]
mov dword [esp], eax
call fcn.00746961
test eax, eax
jle 0x753240
mov dword [esp + 0x34], ebp
mov edi, eax
mov ebp, esi
lea esi, [esi]
mov dword [esp + 4], ebp
mov eax, dword [ebx + 4]
mov dword [esp], eax
call fcn.00746981
cmp word [eax], 0x102
mov esi, eax
jne 0x753231
cmp byte [eax + 2], 0
jne 0x753231
mov eax, dword [eax + 0xc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.00757501
test eax, eax
jle 0x753231
mov eax, dword [ebx + 0x10]
mov ebp, dword [esp + 0x34]
mov dword [esp], eax
call fcn.0075bb21
mov eax, dword [esp + 0x38]
mov dword [ebx + 0x10], 0
mov dword [ebp + 0x84], 1
mov dword [ebx + 0x18], eax
mov eax, dword [ebp + 0x50]
mov dword [ebx + 0xc], esi
mov dword [esp], eax
call fcn.00746961
mov ebx, eax
cmp eax, dword [ebp + 0x4c]
jle 0x7531ec
lea esi, [esi]
mov eax, dword [ebp + 0x50]
sub ebx, 1
mov dword [esp], eax
call fcn.00746811
mov dword [esp], eax
call fcn.0075bb21
cmp ebx, dword [ebp + 0x4c]
jg 0x7531d1
mov edx, dword [ebp + 0x50]
jmp 0x75233c
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.00745ae1
mov dword [esp + 0x30], eax
test eax, eax
je 0x753409
mov dword [esp + 0x48], 0
mov edi, 1
mov dword [esp + 0x4c], 0
jmp 0x751f53
add ebp, 1
cmp edi, ebp
jne 0x753151
mov ebp, dword [esp + 0x34]
mov eax, dword [ebp + 0x4c]
jmp 0x7528ad
mov dword [esp], ebp
call fcn.00750a71
jmp 0x752d09
mov dword [esp + 4], edi
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.00746981
jmp 0x75262e
mov dword [esp + 4], edi
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.00746981
mov ebx, eax
jmp 0x7526d2
mov esi, dword [esp + 0x2c]
mov eax, dword [esi + 4]
mov dword [esp], eax
call fcn.00746961
test eax, eax
jle 0x7528da
test byte [esi + 0x14], 3
je 0x7532b9
mov ecx, dword [esi + 0x1c]
test ecx, ecx
js 0x7528da
sub ebx, 1
mov dword [ebp + 0x5c], ebx
mov dword [esp + 4], ebx
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.00746981
mov dword [ebp + 0x60], 0x41
mov dword [ebp + 0x64], eax
mov dword [esp + 4], ebp
mov dword [esp], 0
call dword [ebp + 0x1c]
jmp 0x75291c
mov esi, eax
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.00746911
mov dword [esp + 0x10], 0xbb7
mov dword [esp + 0xc], 0x9d9538
mov dword [esp + 8], 0x41
mov dword [esp + 4], 0x6a
mov dword [esp], 0xb
call fcn.006eb671
mov eax, dword [ebp + 0x50]
mov dword [ebp + 0x60], 0x11
mov dword [esp], 0
mov dword [esp + 4], eax
call fcn.00751d01
jmp 0x751eed
cmp dword [esp + 0x34], 2
jne 0x7528ba
jmp 0x7520dd
mov ebx, dword [esp + 0x2c]
mov eax, dword [ebx + 0x10]
mov dword [ebx + 0x18], 0xffffffff
mov dword [esp], eax
call fcn.0075bb21
mov dword [ebx + 0x10], 0
jmp 0x752b19
mov dword [esp], eax
call fcn.00746961
mov dword [ebp + 0x5c], esi
cmp eax, 1
mov dword [esp + 4], esi
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
je 0x7534cb
call fcn.00746981
mov dword [ebp + 0x60], 0x13
mov dword [ebp + 0x64], eax
mov dword [esp + 4], ebp
mov dword [esp], 0
call dword [ebp + 0x1c]
jmp 0x75291c
sub ebx, 1
mov dword [ebp + 0x5c], ebx
mov dword [esp + 4], ebx
mov eax, dword [ebp + 0x50]
mov dword [esp], eax
call fcn.00746981
mov dword [ebp + 0x60], 0x16
mov dword [ebp + 0x64], eax
mov dword [esp + 4], ebp
mov dword [esp], 0
call dword [ebp + 0x1c]
jmp 0x75291c
mov dword [esp + 0x10], 0xb9f
mov dword [esp + 0xc], 0x9d9538
mov dword [esp + 8], 0x41
mov dword [esp + 4], 0x6a
mov dword [esp], 0xb
call fcn.006eb671
mov dword [ebp + 0x60], 0x11
jmp 0x751ed8
mov dword [ebp + 0x5c], esi
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.00746981
mov dword [ebp + 0x60], 2
mov dword [ebp + 0x64], eax
mov dword [esp + 4], ebp
mov dword [esp], 0
call dword [ebp + 0x1c]
jmp 0x75291c
call fcn.00745db1
mov dword [esp + 0x30], eax
test eax, eax
je 0x7534ed
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 8]
jmp 0x751f81
mov edx, dword [esp + 0x28]
mov eax, ebp
call fcn.0074ffe1
mov dword [esp + 0x34], eax
jmp 0x75232e
mov eax, dword [esp + 0x2c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0074bda1
mov dword [esp], esi
test eax, eax
jne 0x752e24
call fcn.00759641
mov dword [esp], ebx
call fcn.0075a351
jmp 0x752e5c
call fcn.00746981
mov dword [ebp + 0x60], 0x12
mov dword [ebp + 0x64], eax
mov dword [esp + 4], ebp
mov dword [esp], 0
call dword [ebp + 0x1c]
jmp 0x75291c
mov dword [esp + 0x10], 0xbb0
jmp 0x753411
mov dword [esp + 0x10], 0x2a2
xor esi, esi
mov dword [esp + 0xc], 0x9d9538
mov dword [esp + 8], 0x41
mov dword [esp + 4], 0x95
mov dword [esp], 0xb
call fcn.006eb671
mov dword [ebp + 0x60], 0x11
jmp 0x751eed
cmp dword [esp + 0x34], 3
jne 0x7528b7
jmp 0x753240
mov dword [esp + 0x34], 3
jmp 0x75286a