Function at 0x75db43af
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xac
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x58], esi
mov eax, dword [esi]
cmp dword [eax + reloc.ntdll.dll_NtClose], 0
jne 0x75db088f
cmp dword [esi + 0x20], 0
jne 0x75db088f
cmp dword [esi + 0x24], 0
jne 0x75db088f
cmp dword [esi + 0x2c], 0
lea edi, [esi + 0x48]
jne 0x75db07c0
mov edx, dword [edi]
mov ecx, dword [esi + 0x6c]
movzx eax, word [edx]
test ax, ax
je 0x75db077f
mov ebx, eax
cmp bx, word [ecx]
jne 0x75db077f
lea eax, [edx + 2]
mov dword [ebp - 0xa0], eax
movzx eax, word [eax]
test ax, ax
je 0x75db0776
cmp ax, word [ecx + 2]
jne 0x75db0776
lea eax, [edx + 4]
mov dword [ebp - 0xa0], eax
movzx eax, word [eax]
test ax, ax
je 0x75db076b
cmp ax, word [ecx + 4]
jne 0x75db076b
lea eax, [edx + 6]
mov dword [ebp - 0xa0], eax
movzx eax, word [eax]
test ax, ax
je 0x75db0760
cmp ax, word [ecx + 6]
jne 0x75db0760
lea eax, [edx + 8]
mov dword [ebp - 0xa0], eax
movzx eax, word [eax]
test ax, ax
je 0x75db0755
cmp ax, word [ecx + 8]
jne 0x75db0755
lea eax, [edx + 0xa]
mov dword [ebp - 0xa0], eax
movzx eax, word [eax]
test ax, ax
je 0x75db074a
cmp ax, word [ecx + 0xa]
jne 0x75db074a
lea eax, [edx + 0xc]
mov dword [ebp - 0xa0], eax
movzx eax, word [eax]
test ax, ax
je 0x75db073f
cmp ax, word [ecx + 0xc]
jne 0x75db073f
lea eax, [edx + 0xe]
mov dword [ebp - 0xa0], eax
lea ebx, [ecx + 0xe]
movzx eax, word [eax]
test ax, ax
je 0x75db0735
cmp ax, word [ebx]
jne 0x75db0735
movzx eax, word [edx + 0x10]
add edx, 0x10
add ecx, 0x10
mov ebx, eax
test ax, ax
jne 0x75db0656
jmp 0x75db077f
mov edx, dword [ebp - 0xa0]
mov ecx, ebx
jmp 0x75db077f
mov edx, dword [ebp - 0xa0]
add ecx, 0xc
jmp 0x75db077f
mov edx, dword [ebp - 0xa0]
add ecx, 0xa
jmp 0x75db077f
mov edx, dword [ebp - 0xa0]
add ecx, 8
jmp 0x75db077f
mov edx, dword [ebp - 0xa0]
add ecx, 6
jmp 0x75db077f
mov edx, dword [ebp - 0xa0]
add ecx, 4
jmp 0x75db077f
mov edx, dword [ebp - 0xa0]
add ecx, 2
mov dword [edi], edx
mov dword [esi + 0x6c], ecx
mov ax, word [edx]
cmp ax, word [ecx]
jne 0x75db0850
cmp dword [esi + 0x24], 0
jne 0x75db07b2
mov eax, dword [esi + 0x84]
test eax, eax
jne 0x75db5133
mov eax, dword [esi + 0x88]
test eax, eax
jne 0x75db5133
mov eax, 2
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [esi + 0x40], 0
je 0x75db07d0
mov ecx, dword [edi]
mov edx, ecx
cmp word [ecx], 0
je 0x75db0817
mov ecx, dword [edi]
lea ebx, [esi + 0x3c]
mov edx, ecx
cmp ecx, dword [ebx]
jae 0x75db081a
cmp dword [esi + 0x64], 0
je 0x75db07ea
mov eax, dword [esi + 0x6c]
cmp word [eax], 0
je 0x75db081a
mov eax, dword [esi + 0x6c]
mov dword [ebp - 0x2c], eax
cmp eax, dword [esi + 0x60]
jae 0x75db081a
mov esi, dword [ebp - 0x2c]
mov eax, ecx
mov ax, word [eax]
cmp ax, word [esi]
mov esi, dword [ebp - 0x58]
jne 0x75db081a
mov eax, ecx
add eax, 2
mov dword [edi], eax
mov eax, dword [ebp - 0x2c]
add eax, 2
mov dword [esi + 0x6c], eax
jmp 0x75db07c0
lea ebx, [esi + 0x3c]
cmp dword [esi + 0x40], 0
je 0x75db082a
cmp word [edx], 0
mov ecx, edx
je 0x75db0831
jmp 0x75db082d
lea ebx, [esi + 0x3c]
cmp ecx, dword [ebx]
jb 0x75db0850
cmp dword [esi + 0x64], 0
je 0x75db0844
mov eax, dword [esi + 0x6c]
cmp word [eax], 0
je 0x75db0790
mov eax, dword [esi + 0x6c]
cmp eax, dword [esi + 0x60]
jae 0x75db0790
mov eax, dword [edi]
mov edx, dword [esi + 0x38]
cmp eax, edx
jbe 0x75db088f
movzx ecx, word [eax - 2]
lea ebx, [eax - 2]
mov eax, ecx
mov dword [ebp - 0xa0], eax
call fcn.75dc13fd
test eax, eax
je 0x75db087b
mov eax, dword [esi + 0x5c]
mov dword [edi], edx
mov dword [esi + 0x6c], eax
jmp 0x75db088f
mov eax, 0xdb40
cmp word [ebp - 0xa0], ax
jne 0x75db088f
add dword [esi + 0x6c], reloc.ntdll.dll_NtClose
mov dword [edi], ebx
mov dword [esi + 0x50], reloc.ntdll.dll_NtClose
lea eax, [esi + 0x38]
mov dword [esi + 0x74], reloc.ntdll.dll_NtClose
lea edi, [esi + 0x48]
mov dword [esi + 0x4c], 0
mov dword [esi + 0x70], 0
cmp dword [esi + 0x40], 0
mov dword [ebp - 0xa4], eax
je 0x75db08c5
mov eax, dword [edi]
cmp word [eax], 0
je 0x75db08d7
mov ecx, edi
mov eax, dword [ecx]
cmp eax, dword [esi + 0x3c]
jae 0x75db08d7
mov eax, dword [edi]
mov ax, word [eax]
mov word [esi + 0x56], ax
cmp dword [esi + 0x64], 0
lea edx, [esi + 0x5c]
mov ebx, edx
mov dword [ebp - 0x1c], edx
lea ecx, [esi + 0x6c]
je 0x75db0909
mov eax, dword [ecx]
mov dword [ebp - 0x18], ecx
cmp word [eax], 0
jne 0x75db0909
lea eax, [esi + 0x60]
mov esi, ecx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x14], eax
jmp 0x75db0950
lea eax, [esi + 0x60]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ecx]
cmp eax, dword [esi + 0x60]
lea eax, [esi + 0x60]
jb 0x75db092c
mov esi, ecx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x14], eax
jmp 0x75db0950
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x14], eax
mov eax, dword [ecx]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x28], ecx
mov ax, word [eax]
mov word [esi + 0x7a], ax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xa8], 0xef
mov dword [ebp - 0xac], 0x2200
jmp 0x75db096f
mov ecx, dword [ebp - 0xc]
mov esi, dword [ebp - 0x1c]
mov eax, ebx
mov dword [ebp - 0x1c], esi
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x94], eax
cmp dword [esi + 0x4c], 0
jne 0x75db09a9
cmp dword [esi + 0x40], 0
je 0x75db0998
mov eax, dword [edi]
cmp word [eax], 0
je 0x75db57eb
mov eax, dword [edi]
cmp eax, dword [esi + 0x3c]
jae 0x75db57eb
mov eax, dword [ebp - 0x94]
cmp dword [esi + 0x70], 0
mov ebx, eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], edi
mov dword [ebp - 0x48], edi
mov edi, dword [ebp - 0x28]
mov dword [ebp - 0x64], edx
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x8c], ecx
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x74], edx
jne 0x75db0ab4
cmp dword [esi + 0x64], 0
je 0x75db09f9
mov eax, dword [edi]
cmp word [eax], 0
je 0x75db0a09
mov eax, dword [ebp - 0x28]
mov edi, dword [ebp - 0x24]
mov eax, dword [eax]
cmp eax, dword [edi]
jb 0x75db0ab7
cmp dword [esi + 0x4c], 0
lea eax, [esi + 0x40]
mov edi, dword [ebp - 4]
jne 0x75db58f2
cmp dword [eax], 0
je 0x75db0a26
mov eax, dword [edi]
cmp word [eax], 0
je 0x75db0a31
mov eax, dword [edi]
cmp eax, dword [esi + 0x3c]
jb 0x75db58f5
cmp dword [esi + 0x70], 0
jne 0x75db0a53
cmp dword [esi + 0x64], 0
je 0x75db0a49
mov eax, dword [ecx]
cmp word [eax], 0
je 0x75db0790
mov eax, dword [ecx]
cmp eax, dword [edx]
jae 0x75db0790
lea edx, [ebx + 0x10]
cmp dword [ebx + 0x14], 0
jne 0x75db0a79
cmp dword [ebx + 8], 0
je 0x75db0a6e
mov eax, dword [edx]
cmp word [eax], 0
je 0x75db0790
mov eax, dword [edx]
cmp eax, dword [ebx + 4]
jae 0x75db0790
mov edi, dword [esi + 4]
movzx ecx, word [ebx + 0x1e]
test edi, edi
je 0x75db0a8f
mov eax, ecx
movzx ecx, cl
shr eax, 8
add ecx, dword [edi + eax*4]
mov eax, dword [0x75e50860]
mov eax, dword [eax + ecx*4]
shr eax, 8
movzx eax, al
cmp eax, 0xc
ja case.0x75db0aad.2
movzx eax, byte [eax + 0x75db5b2c]
jmp dword [eax*4 + 0x75db5b18]
mov edi, dword [ebp - 0x24]
cmp dword [esi + 0x50], reloc.ntdll.dll_NtClose
mov ebx, edi
mov dword [ebp - 0x80], ebx
jne 0x75db0ae3
mov edx, dword [esi + 4]
movzx ecx, word [esi + 0x56]
test edx, edx
je 0x75db0ad8
mov eax, ecx
movzx ecx, cl
shr eax, 8
add ecx, dword [edx + eax*4]
mov eax, dword [0x75e50860]
mov eax, dword [eax + ecx*4]
mov dword [esi + 0x50], eax
mov eax, dword [esi + 0x74]
mov dword [ebp - 0x34], eax
cmp eax, reloc.ntdll.dll_NtClose
jne 0x75db0b18
mov edx, dword [esi + 4]
movzx ecx, word [esi + 0x7a]
test edx, edx
je 0x75db0b04
mov eax, ecx
movzx ecx, cl
shr eax, 8
add ecx, dword [edx + eax*4]
mov eax, dword [0x75e50860]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x34], eax
mov dword [esi + 0x74], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov esi, dword [esi]
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x84]
mov edx, dword [ebp - 0x9c]
mov edi, dword [ebp - 0x48]
cmp dword [esi + reloc.ntdll.dll_NtClose], 0
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x94]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x18], edx
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], ecx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
je 0x75db2c09
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x10], eax
mov eax, edx
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x14], eax
mov eax, ecx
xor ecx, ecx
mov dword [ebp - 8], eax
cmp byte [esi + 0x51], 3
movzx eax, byte [esi + 0x53]
sete cl
mov dword [ebp - 0x44], 0
dec ecx
mov dword [ebp - 0x24], edx
and ecx, eax
mov dword [ebp - 0x4c], ebx
and ecx, 0xc0
mov dword [ebp - 0x70], edi
sub ecx, 0x40
je 0x75db1cc9
sub ecx, 0x40
je 0x75db16b3
sub ecx, 0x40
jne 0x75db22d7
mov ecx, dword [esi]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x28], edx
mov eax, dword [ecx + reloc.ntdll.dll_NtClose]
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x3c], eax
mov eax, dword [ecx + 0xfc]
and eax, 0x20
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0x34], eax
mov eax, dword [ecx + reloc.ntdll.dll_NtClose]
movzx ecx, word [eax + 0x14]
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x2c], ecx
cmp word [ebp - 0x2c], 0
mov ecx, dword [ebp - 0x98]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x8c]
jbe 0x75db0ecc
mov eax, dword [ebp - 0x74]
mov ecx, dword [esi + 0x48]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x14], eax
xor eax, eax
cmp dword [ebp - 0x34], eax
mov dword [ebp - 0x40], ecx
mov ecx, dword [esi + 0x3c]
setne al
mov dword [ebp - 4], ecx
mov ecx, dword [ebp - 0x8c]
lea eax, [eax*2 + 0xe]
add eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 4]
ja 0x75db0ec9
mov eax, dword [esi]
push dword [esi + 0x40]
mov edx, dword [ebp - 4]
push dword [ebp - 0x34]
mov ecx, dword [eax + reloc.ntdll.dll_NtClose]
movzx eax, word [ecx + 6]
push eax
movzx eax, word [ecx + 4]
mov ecx, dword [ebp - 0x40]
push eax
push 8
call fcn.75df24b7
mov edx, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x98]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 8
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x64]
jl 0x75db0ecc
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x98]
movzx eax, ax
dec eax
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x34], 0
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x18], eax
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
je 0x75db0e64
cmp dword [ebp - 0x44], 9
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x98]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
jl 0x75db0e64
mov edx, dword [ebp - 0x40]
mov edi, dword [esi + 4]
mov ebx, dword [0x75e50860]
movzx eax, word [edx]
mov ecx, eax
test edi, edi
je 0x75db0dea
shr ecx, 8
movzx eax, al
add eax, dword [edi + ecx*4]
mov eax, dword [ebx + eax*4]
mov dword [ebp - 4], eax
movzx eax, word [edx + 2]
mov ecx, eax
movzx eax, al
shr ecx, 8
add eax, dword [edi + ecx*4]
jmp 0x75db0df4
mov eax, dword [ebx + ecx*4]
mov dword [ebp - 4], eax
movzx eax, word [edx + 2]
mov eax, dword [ebx + eax*4]
mov edx, dword [ebp - 0x80]
mov esi, dword [ebp - 4]
mov ebx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x98]
mov edi, dword [ebp - 0x48]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x74]
xor dword [ebp - 0x30], esi
test dword [ebp - 0x30], 0xe7ffffff
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x94]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 8], edx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x18], eax
jne 0x75db0e64
mov dword [ebp - 0x50], 1
cmp dword [ebp - 0x38], 0
jl 0x75db0ecc
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x40]
lea eax, [eax + ecx*2]
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x38]
lea esp, [esp]
add eax, ecx
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 4], eax
push 8
lea ecx, [eax + eax*4]
mov eax, dword [ebp - 0x3c]
lea eax, [eax + ecx*4]
mov ecx, dword [ebp - 0x2c]
mov edx, eax
mov dword [ebp - 0x34], eax
call fcn.75df2482
test eax, eax
je 0x75db1184
mov eax, dword [ebp - 4]
jns 0x75db0eb5
dec eax
mov dword [ebp - 0x38], eax
jmp 0x75db0ebc
inc eax
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x5c]
cmp ecx, eax
jle 0x75db0e80
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x94], ebx
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x9c], ebx
mov ebx, dword [ebp - 0x28]
mov dword [ebp - 0x80], eax
lea eax, [esi + 0x38]
mov dword [ebp - 0x84], ebx
lea ebx, [eax + 0x10]
mov dword [ebp - 0x68], ebx
lea ebx, [eax + 4]
add eax, 8
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x5c], eax
mov eax, dword [esi]
mov dword [ebp - 0x74], edi
mov edi, dword [ebp - 0x14]
mov dword [ebp - 0x8c], edi
mov ebx, dword [eax + reloc.ntdll.dll_NtClose]
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0x60], ebx
mov ebx, dword [eax + 0xfc]
mov eax, dword [eax + reloc.ntdll.dll_NtClose]
and ebx, 0x20
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x98], edx
movzx ebx, word [eax + 0x12]
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x24]
mov dword [ebp - 4], ebx
cmp word [ebp - 4], 0
mov ebx, dword [ebp - 0x84]
mov dword [ebp - 0x90], edi
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x20], edi
mov edi, dword [ebp - 0x8c]
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x9c]
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x14], edi
mov edi, dword [ebp - 0x74]
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x94]
mov dword [ebp - 0x78], ecx
jbe 0x75db12a5
mov eax, dword [ebp - 0x68]
mov esi, dword [ebp - 0x64]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x1c], eax
xor eax, eax
cmp dword [ebp - 0x34], eax
setne al
lea eax, [eax*2 + 0xc]
add eax, dword [ebp - 0x40]
cmp eax, dword [esi]
mov esi, dword [ebp - 0x58]
ja 0x75db12a2
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x75db102c
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x2c]
push dword [eax]
movzx eax, word [ecx + 6]
push dword [ebp - 0x34]
push eax
movzx eax, word [ecx + 4]
mov ecx, dword [ebp - 0x40]
push eax
mov eax, dword [ebp - 0x64]
push 7
mov edx, dword [eax]
call fcn.75df24b7
mov edx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x90]
mov ebx, dword [ebp - 0x9c]
mov edi, dword [ebp - 0x74]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 7
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x94]
jl 0x75db12a5
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x90]
mov ebx, dword [ebp - 0x9c]
movzx eax, ax
dec eax
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x34], 0
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x94]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x18], eax
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
je 0x75db1240
cmp dword [ebp - 0x48], 8
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x90]
mov ebx, dword [ebp - 0x9c]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x94]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
jl 0x75db1240
mov ebx, dword [ebp - 0x40]
mov edx, dword [esi + 4]
movzx eax, word [ebx]
mov ecx, eax
test edx, edx
je 0x75db11a5
mov esi, dword [0x75e50860]
shr ecx, 8
movzx eax, al
add eax, dword [edx + ecx*4]
mov eax, dword [esi + eax*4]
mov dword [ebp - 4], eax
movzx eax, word [ebx + 2]
mov ecx, eax
movzx eax, al
shr ecx, 8
add eax, dword [edx + ecx*4]
mov eax, dword [esi + eax*4]
jmp 0x75db11b8
cmp dword [ebp - 0x50], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x10]
mov dword [esi + 0x50], eax
jne 0x75db22d7
mov eax, dword [ebp - 0x40]
add eax, 0xe
mov dword [esi + 0x48], eax
jmp 0x75db22d7
mov edx, dword [0x75e50860]
mov eax, dword [edx + ecx*4]
mov dword [ebp - 4], eax
movzx eax, word [ebx + 2]
mov eax, dword [edx + eax*4]
mov edx, dword [ebp - 0x50]
mov esi, dword [ebp - 4]
mov ebx, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x90]
mov edi, dword [ebp - 0x74]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x68]
xor dword [ebp - 0x30], esi
test dword [ebp - 0x30], 0xe7ffffff
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x94]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 8], edx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x18], eax
jne 0x75db1240
mov dword [ebp - 0x2c], 1
cmp dword [ebp - 0x44], 0
jl 0x75db12a5
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
lea esp, [esp]
mov esi, dword [ebp - 0x2c]
add eax, ecx
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 4], eax
push 7
lea ecx, [eax + eax*4]
mov eax, dword [ebp - 0x60]
lea eax, [eax + ecx*4]
mov ecx, dword [ebp - 0x40]
mov edx, eax
mov dword [ebp - 0x34], eax
lea ecx, [ecx + esi*2]
call fcn.75df2482
mov esi, dword [ebp - 0x58]
test eax, eax
je 0x75db1410
mov eax, dword [ebp - 4]
jns 0x75db128e
dec eax
mov dword [ebp - 0x44], eax
jmp 0x75db1295
inc eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
cmp ecx, eax
jle 0x75db1250
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x80], eax
mov eax, dword [esi]
mov dword [ebp - 0x30], edi
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x84], edi
mov esi, dword [eax + reloc.ntdll.dll_NtClose]
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x74], esi
mov esi, dword [eax + 0xfc]
mov eax, dword [eax + reloc.ntdll.dll_NtClose]
and esi, 0x20
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x90], edi
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0x2c], esi
movzx esi, word [eax + 0x10]
mov eax, dword [ebp - 0x48]
test si, si
mov dword [ebp - 0x8c], ebx
mov ebx, dword [ebp - 0x14]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x9c], ebx
mov ebx, dword [ebp - 0x28]
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x20], edi
mov edi, dword [ebp - 0x84]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x94], edx
mov dword [ebp - 8], edx
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x1c], edi
mov edi, edx
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x8c]
mov dword [ebp - 4], esi
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
je 0x75db16b3
mov ebx, dword [ebp - 0x5c]
mov edi, dword [ebp - 0x80]
mov esi, dword [ebp - 0x64]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x94]
mov ebx, dword [ebx]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x1c], eax
xor eax, eax
cmp dword [ebp - 0x2c], eax
mov dword [ebp - 0x10], edi
mov edi, dword [ebp - 0x54]
setne al
mov dword [ebp - 0x18], edi
mov edi, dword [ebp - 0x50]
mov dword [ebp - 0x5c], ebx
mov ebx, dword [ebp - 0x48]
lea eax, [eax*2 + 0xa]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x98]
mov dword [ebp - 0x20], edi
mov edi, dword [ebp - 0x78]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x5c]
add eax, ecx
cmp eax, dword [esi]
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0xc], edi
mov edi, edx
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x8c]
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
ja 0x75db16b3
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x75db1431
mov eax, dword [ebp - 0x38]
mov edi, dword [ebp - 0x60]
push dword [eax]
movzx eax, word [edi + 6]
push dword [ebp - 0x2c]
push eax
movzx eax, word [edi + 4]
push eax
mov eax, dword [ebp - 0x64]
push 6
mov edx, dword [eax]
call fcn.75df24b7
mov edx, dword [ebp - 0x30]
mov ecx, eax
mov dword [ebp - 0x44], ecx
jmp 0x75db1436
cmp dword [ebp - 0x2c], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0x10]
mov dword [esi + 0x50], eax
jne 0x75db22d7
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x5c]
add eax, 0xc
jmp 0x75db22d5
mov ecx, eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x80]
mov edi, edx
mov ebx, dword [ebp - 0x8c]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
cmp ecx, 6
jl 0x75db16b3
mov edi, dword [ebp - 0x80]
xor eax, eax
mov ebx, dword [ebp - 0x90]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x10], edi
mov edi, dword [ebp - 0x54]
mov dword [ebp - 0x18], edi
mov edi, dword [ebp - 0x50]
mov dword [ebp - 0x20], edi
mov edi, dword [ebp - 0x78]
mov dword [ebp - 0xc], edi
mov edi, dword [ebp - 0x98]
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x9c]
mov dword [ebp - 0x28], edi
mov edi, dword [ebp - 0x94]
mov dword [ebp - 0x14], ebx
mov ebx, dword [ebp - 0x84]
movzx ecx, cx
dec ecx
mov dword [ebp - 8], edi
mov edi, edx
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x8c]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
cmp dword [ebp - 0x2c], eax
je 0x75db165f
cmp dword [ebp - 0x44], 7
mov ebx, dword [ebp - 0x80]
mov dword [ebp - 0x10], ebx
mov ebx, dword [ebp - 0x54]
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x50]
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x78]
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0x90]
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x98]
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x9c]
mov dword [ebp - 0x14], ebx
mov ebx, dword [ebp - 0x94]
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0x84]
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x8c]
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
jl 0x75db165f
mov ebx, dword [ebp - 0x5c]
mov edi, dword [esi + 4]
movzx eax, word [ebx]
mov edx, eax
test edi, edi
je 0x75db15e2
mov ecx, dword [0x75e50860]
shr edx, 8
movzx eax, al
add eax, dword [edi + edx*4]
mov edx, dword [ecx + eax*4]
movzx eax, word [ebx + 2]
mov ecx, eax
movzx eax, al
shr ecx, 8
add eax, dword [edi + ecx*4]
mov ecx, dword [0x75e50860]
mov eax, dword [ecx + eax*4]
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x98]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x3c]
jmp 0x75db163d
mov edi, dword [0x75e50860]
mov eax, dword [edi + edx*4]
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x18], edx
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x20], edx
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0xc], edx
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0x60], eax
movzx eax, word [ebx + 2]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x94]
mov dword [ebp - 8], edx
mov edx, dword [ebp - 0x84]
mov eax, dword [edi + eax*4]
mov dword [ebp - 0x1c], edx
mov edx, dword [ebp - 0x60]
mov edi, dword [ebp - 0x30]
xor eax, edx
mov ebx, dword [ebp - 0x8c]
test eax, 0xe7ffffff
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x4c], ebx
jne 0x75db165f
mov dword [ebp - 0x34], 1
test ecx, ecx
js 0x75db16b3
mov esi, dword [ebp - 0x34]
add eax, ecx
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x74]
shl ecx, 4
add eax, ecx
mov ecx, dword [ebp - 0x5c]
push 6
mov edx, eax
mov dword [ebp - 0x60], eax
lea ecx, [ecx + esi*2]
call fcn.75df2482
mov esi, dword [ebp - 0x58]
test eax, eax
je 0x75db17e3
jns 0x75db16a5
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x40]
dec ecx
mov dword [ebp - 0x3c], ecx
jmp 0x75db16af
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x40], eax
cmp eax, ecx
jle 0x75db1663
mov eax, dword [esi]
mov ecx, dword [eax + reloc.ntdll.dll_NtClose]
mov edx, dword [eax + 0xfc]
mov eax, dword [eax + reloc.ntdll.dll_NtClose]
and edx, 0x20
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x2c], edx
movzx eax, word [eax + 0xe]
mov dword [ebp - 0x34], eax
test ax, ax
je 0x75db18c7
mov eax, dword [esi + 0x48]
mov dword [ebp - 0x38], eax
mov eax, dword [esi + 0x3c]
mov dword [ebp - 4], eax
xor eax, eax
test edx, edx
setne al
lea eax, [eax*2 + 8]
add eax, dword [ebp - 0x38]
cmp eax, dword [esi + 0x3c]
ja 0x75db18c7
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x75db1734
push dword [esi + 0x40]
mov ecx, dword [ebp - 0x60]
push edx
mov edx, dword [ebp - 4]
movzx eax, word [ecx + 6]
push eax
movzx eax, word [ecx + 4]
mov ecx, dword [ebp - 0x38]
push eax
push 5
call fcn.75df24b7
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x44], eax
cmp eax, 5
jl 0x75db18c7
mov ecx, dword [ebp - 0x34]
xor eax, eax
movzx ecx, cx
dec ecx
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], ecx
test edx, edx
je 0x75db186d
cmp dword [ebp - 0x44], 6
jl 0x75db186d
cmp dword [esi + 4], 0
mov eax, dword [ebp - 0x38]
movzx edx, word [eax]
mov dword [ebp - 0x60], edx
movzx edx, dx
je 0x75db1804
mov ecx, dword [esi + 4]
mov eax, dword [ebp - 0x60]
shr edx, 8
movzx eax, al
add eax, dword [ecx + edx*4]
mov ecx, dword [0x75e50860]
mov edx, dword [esi + 4]
mov eax, dword [ecx + eax*4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + 2]
mov ecx, eax
movzx eax, al
shr ecx, 8
add eax, dword [edx + ecx*4]
mov ecx, dword [0x75e50860]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 0x24]
mov eax, dword [ecx + eax*4]
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0xc], eax
jmp 0x75db1840
cmp dword [ebp - 0x34], 0
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0xc]
mov dword [esi + 0x50], eax
jne 0x75db22d7
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x68]
add eax, 0xa
jmp 0x75db22d5
mov esi, dword [0x75e50860]
movzx eax, word [eax + 2]
mov edx, dword [esi + edx*4]
mov dword [ebp - 4], edx
mov edx, esi
mov esi, dword [ebp - 0x58]
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
xor edx, dword [ebp - 4]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x4c], ebx
test edx, 0xe7ffffff
jne 0x75db186d
mov dword [ebp - 0x3c], 1
test ecx, ecx
js 0x75db18c7
mov esi, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
lea edx, [edx + esi*2]
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x60], edx
add eax, ecx
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x40]
shl ecx, 4
add eax, ecx
mov ecx, dword [ebp - 0x60]
push 5
mov edx, eax
mov dword [ebp - 0x34], eax
call fcn.75df2482
test eax, eax
je 0x75db1a3d
jns 0x75db18b9
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x30]
dec ecx
mov dword [ebp - 0x2c], ecx
jmp 0x75db18c3
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x30], eax
cmp eax, ecx
jle 0x75db1880
mov eax, dword [ebp - 8]
mov edx, edi
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2c], eax
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x64], ecx
lea ecx, [esi + 0x38]
lea eax, [ecx + 0x10]
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x78], eax
mov eax, dword [esi]
mov dword [ebp - 0x1c], edi
mov edi, edx
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x50], ebx
mov esi, dword [eax + reloc.ntdll.dll_NtClose]
mov dword [ebp - 0x9c], esi
mov esi, dword [eax + 0xfc]
mov eax, dword [eax + reloc.ntdll.dll_NtClose]
and esi, 0x20
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x4c], ebx
movzx esi, word [eax + 0xc]
mov eax, dword [ebp - 0x2c]
test si, si
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x98], esi
mov esi, dword [ebp - 0x58]
mov dword [ebp - 8], eax
mov dword [ebp - 0x70], edi
je 0x75db1cc9
mov edi, dword [ebp - 0x68]
mov ebx, dword [ebp - 0x78]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x10], edi
mov edi, dword [ebp - 0x80]
mov ebx, dword [ebx]
mov dword [ebp - 0x1c], eax
xor eax, eax
cmp dword [ebp - 0x3c], eax
mov dword [ebp - 0x18], edi
mov edi, dword [ebp - 0x48]
setne al
mov dword [ebp - 0x20], edi
mov edi, dword [ebp - 0x64]
mov dword [ebp - 0xc], edi
mov edi, dword [ebp - 0x54]
lea eax, [eax*2 + 6]
mov dword [ebp - 0x40], ebx
mov ebx, dword [ecx + 4]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x24], edi
mov edi, dword [ebp - 0x84]
mov dword [ebp - 0x28], edi
mov edi, dword [ebp - 0x8c]
mov dword [ebp - 4], ebx
mov ebx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], edi
mov edi, edx
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x50]
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
cmp eax, dword [ecx + 4]
ja 0x75db1cc9
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x75db1a5e
push dword [ecx + 8]
mov ecx, dword [ebp - 0x60]
push dword [ebp - 0x3c]
mov edx, dword [ebp - 4]
movzx eax, word [ecx + 6]
push eax
movzx eax, word [ecx + 4]
mov ecx, dword [ebp - 0x40]
push eax
push 4
call fcn.75df24b7
mov ecx, eax
mov edx, edi
mov dword [ebp - 0x44], ecx
jmp 0x75db1a63
cmp dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 0xc]
mov dword [esi + 0x50], eax
jne 0x75db22d7
mov eax, dword [ebp - 0x38]
add eax, 8
mov dword [esi + 0x48], eax
jmp 0x75db22d7
mov ecx, eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x68]
mov edi, edx
mov ebx, dword [ebp - 0x50]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
cmp ecx, 4
jl 0x75db1cc9
mov edi, dword [ebp - 0x68]
xor eax, eax
mov ecx, dword [ebp - 0x98]
mov ebx, dword [ebp - 0x5c]
mov dword [ebp - 0x10], edi
mov edi, dword [ebp - 0x80]
mov dword [ebp - 0x18], edi
mov edi, dword [ebp - 0x48]
mov dword [ebp - 0x20], edi
mov edi, dword [ebp - 0x64]
mov dword [ebp - 0xc], edi
mov edi, dword [ebp - 0x54]
mov dword [ebp - 0x24], edi
mov edi, dword [ebp - 0x84]
mov dword [ebp - 0x28], edi
mov edi, dword [ebp - 0x8c]
mov dword [ebp - 0x14], edi
mov edi, dword [ebp - 0x38]
movzx ecx, cx
dec ecx
mov dword [ebp - 8], edi
mov edi, edx
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x50]
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
cmp dword [ebp - 0x3c], eax
je 0x75db1c68
cmp dword [ebp - 0x44], 5
mov ebx, dword [ebp - 0x68]
mov dword [ebp - 0x10], ebx
mov ebx, dword [ebp - 0x80]
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x48]
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x64]
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0x54]
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x84]
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x8c]
mov dword [ebp - 0x14], ebx
mov ebx, dword [ebp - 0x38]
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x50]
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
jl 0x75db1c68
mov ebx, dword [ebp - 0x40]
mov edi, dword [esi + 4]
movzx eax, word [ebx]
mov edx, eax
test edi, edi
je 0x75db1bee
mov ecx, dword [0x75e50860]
shr edx, 8
movzx eax, al
add eax, dword [edi + edx*4]
mov edx, dword [ecx + eax*4]
movzx eax, word [ebx + 2]
mov ecx, eax
movzx eax, al
shr ecx, 8
add eax, dword [edi + ecx*4]
mov ecx, dword [0x75e50860]
mov eax, dword [ecx + eax*4]
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0x78], ecx
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x2c]
jmp 0x75db1c46
mov edi, dword [0x75e50860]
mov eax, dword [edi + edx*4]
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x78], edx
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x18], edx
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x20], edx
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0xc], edx
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x60], eax
movzx eax, word [ebx + 2]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x38]
mov dword [ebp - 8], edx
mov edx, dword [ebp - 0x5c]
mov eax, dword [edi + eax*4]
mov dword [ebp - 0x1c], edx
mov edx, dword [ebp - 0x60]
mov edi, dword [ebp - 0x34]
xor eax, edx
mov ebx, dword [ebp - 0x50]
test eax, 0xe7ffffff
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x4c], ebx
jne 0x75db1c68
mov dword [ebp - 0x90], 1
test ecx, ecx
js 0x75db1cc9
mov esi, dword [ebp - 0x90]
mov edx, dword [ebp - 0x40]
lea edx, [edx + esi*2]
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x60], edx
mov edi, edi
add eax, ecx
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 4], eax
push 4
lea ecx, [eax + eax*2]
mov eax, dword [ebp - 0x9c]
lea eax, [eax + ecx*4]
mov ecx, dword [ebp - 0x60]
mov edx, eax
mov dword [ebp - 0x3c], eax
call fcn.75df2482
test eax, eax
je 0x75db1df9
jns 0x75db1cbb
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x30]
dec ecx
mov dword [ebp - 0x2c], ecx
jmp 0x75db1cc5
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x30], eax
cmp eax, ecx
jle 0x75db1c80
mov eax, dword [esi]
mov ecx, dword [eax + reloc.ntdll.dll_NtClose]
mov edx, dword [eax + 0xfc]
mov eax, dword [eax + reloc.ntdll.dll_NtClose]
and edx, 0x20
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x2c], edx
movzx eax, word [eax + 0xa]
mov dword [ebp - 0x34], eax
test ax, ax
je 0x75db1ee6
mov eax, dword [esi + 0x48]
mov dword [ebp - 0x38], eax
mov eax, dword [esi + 0x3c]
mov dword [ebp - 4], eax
xor eax, eax
test edx, edx
setne al
lea eax, [eax*2 + 4]
add eax, dword [ebp - 0x38]
cmp eax, dword [esi + 0x3c]
ja 0x75db1ee6
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x75db1d4a
push dword [esi + 0x40]
mov ecx, dword [ebp - 0x60]
push edx
mov edx, dword [ebp - 4]
movzx eax, word [ecx + 6]
push eax
movzx eax, word [ecx + 4]
mov ecx, dword [ebp - 0x38]
push eax
push 3
call fcn.75df24b7
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x44], eax
cmp eax, 3
jl 0x75db1ee6
mov ecx, dword [ebp - 0x34]
xor eax, eax
movzx ecx, cx
dec ecx
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], ecx
test edx, edx
je 0x75db1e86
cmp dword [ebp - 0x44], 4
jl 0x75db1e86
cmp dword [esi + 4], 0
mov eax, dword [ebp - 0x38]
movzx edx, word [eax]
mov dword [ebp - 0x60], edx
movzx edx, dx
je 0x75db1e1d
mov ecx, dword [esi + 4]
mov eax, dword [ebp - 0x60]
shr edx, 8
movzx eax, al
add eax, dword [ecx + edx*4]
mov ecx, dword [0x75e50860]
mov edx, dword [esi + 4]
mov eax, dword [ecx + eax*4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + 2]
mov ecx, eax
movzx eax, al
shr ecx, 8
add eax, dword [edx + ecx*4]
mov ecx, dword [0x75e50860]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 0x24]
mov eax, dword [ecx + eax*4]
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0xc], eax
jmp 0x75db1e59
cmp dword [ebp - 0x90], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 8]
mov dword [esi + 0x50], eax
jne 0x75db22d7
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x78]
add eax, 6
jmp 0x75db22d5
mov esi, dword [0x75e50860]
movzx eax, word [eax + 2]
mov edx, dword [esi + edx*4]
mov dword [ebp - 4], edx
mov edx, esi
mov esi, dword [ebp - 0x58]
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
xor edx, dword [ebp - 4]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x4c], ebx
test edx, 0xe7ffffff
jne 0x75db1e86
mov dword [ebp - 0x3c], 1
test ecx, ecx
js 0x75db1ee6
mov esi, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
lea edx, [edx + esi*2]
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x60], edx
lea esp, [esp]
add eax, ecx
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 4], eax
push 3
lea ecx, [eax + eax*2]
mov eax, dword [ebp - 0x40]
lea eax, [eax + ecx*4]
mov ecx, dword [ebp - 0x60]
mov edx, eax
mov dword [ebp - 0x34], eax
call fcn.75df2482
test eax, eax
je 0x75db21bb
jns 0x75db1ed8
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x30]
dec ecx
mov dword [ebp - 0x2c], ecx
jmp 0x75db1ee2
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x30], eax
cmp eax, ecx
jle 0x75db1ea0
mov eax, dword [ebp - 0x1c]
lea edx, [esi + 0x38]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x68], eax
lea eax, [edx + 0x10]
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x90], eax
mov eax, dword [esi]
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 0x5c]
mov esi, dword [eax + reloc.ntdll.dll_NtClose]
mov dword [ebp - 0x98], esi
mov esi, dword [eax + 0xfc]
mov eax, dword [eax + reloc.ntdll.dll_NtClose]
and esi, 0x20
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], edi
movzx esi, word [eax + 8]
mov eax, dword [ebp - 0x68]
test si, si
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], esi
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x78], ebx
mov dword [ebp - 8], ecx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
je 0x75db22d7
mov edi, dword [ebp - 0x68]
mov ebx, dword [ebp - 0x90]
mov dword [ebp - 0x10], edi
mov edi, dword [ebp - 0x80]
mov dword [ebp - 0x1c], eax
xor eax, eax
cmp dword [ebp - 0x2c], eax
mov ebx, dword [ebx]
mov dword [ebp - 0x18], edi
setne al
mov edi, dword [ebp - 0x48]
mov dword [ebp - 0x20], edi
mov edi, dword [ebp - 0x38]
mov dword [ebp - 0xc], edi
lea eax, [eax*2 + 2]
mov edi, dword [ebp - 0x64]
mov dword [ebp - 0x24], edi
mov edi, dword [ebp - 0x54]
mov dword [ebp - 0x40], ebx
add eax, dword [ebp - 0x40]
mov ebx, dword [ebp - 0x78]
mov dword [ebp - 0x28], edi
mov edi, dword [ebp - 0x84]
mov dword [ebp - 0x14], edi
mov edi, dword [ebp - 0x30]
mov dword [ebp - 8], ecx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
cmp eax, dword [edx + 4]
ja 0x75db22d7
cmp dword [ebp - 0x44], 0
jne 0x75db2034
push dword [edx + 8]
mov ecx, dword [ebp - 0x60]
push dword [ebp - 0x2c]
mov edx, dword [edx + 4]
movzx eax, word [ecx + 6]
push eax
movzx eax, word [ecx + 4]
mov ecx, dword [ebp - 0x40]
push eax
push 2
call fcn.75df24b7
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
mov eax, dword [ebp - 0x68]
mov edx, dword [ebp - 0x50]
mov ebx, dword [ebp - 0x78]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x1c], edx
mov edx, dword [ebp - 0x30]
mov edi, edx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x14], eax
mov dword [ebp - 8], ecx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
jl 0x75db22d7
mov edi, dword [ebp - 0x68]
xor eax, eax
mov ecx, dword [ebp - 4]
mov ebx, dword [ebp - 0x50]
mov dword [ebp - 0x10], edi
mov edi, dword [ebp - 0x80]
mov dword [ebp - 0x18], edi
mov edi, dword [ebp - 0x48]
mov dword [ebp - 0x20], edi
mov edi, dword [ebp - 0x38]
mov dword [ebp - 0xc], edi
mov edi, dword [ebp - 0x64]
mov dword [ebp - 0x24], edi
mov edi, dword [ebp - 0x54]
mov dword [ebp - 0x28], edi
mov edi, dword [ebp - 0x84]
mov dword [ebp - 0x14], edi
mov edi, dword [ebp - 0x5c]
movzx ecx, cx
dec ecx
mov dword [ebp - 8], edi
mov edi, edx
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x78]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
cmp dword [ebp - 0x2c], eax
je 0x75db2259
cmp dword [ebp - 0x44], 3
mov ebx, dword [ebp - 0x68]
mov dword [ebp - 0x10], ebx
mov ebx, dword [ebp - 0x80]
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x48]
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x38]
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0x64]
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x54]
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x84]
mov dword [ebp - 0x14], ebx
mov ebx, dword [ebp - 0x5c]
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0x50]
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x78]
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
jl 0x75db2259
mov ebx, dword [ebp - 0x40]
mov edi, dword [esi + 4]
movzx eax, word [ebx]
mov edx, eax
test edi, edi
je 0x75db21dc
mov ecx, dword [0x75e50860]
shr edx, 8
movzx eax, al
add eax, dword [edi + edx*4]
mov edx, dword [ecx + eax*4]
movzx eax, word [ebx + 2]
mov ecx, eax
movzx eax, al
shr ecx, 8
add eax, dword [edi + ecx*4]
mov ecx, dword [0x75e50860]
mov eax, dword [ecx + eax*4]
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x90], ecx
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x3c]
jmp 0x75db2237
cmp dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 8]
mov dword [esi + 0x50], eax
jne 0x75db22d7
mov eax, dword [ebp - 0x38]
add eax, 4
mov dword [esi + 0x48], eax
jmp 0x75db22d7
mov edi, dword [0x75e50860]
mov eax, dword [edi + edx*4]
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x90], edx
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x18], edx
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x20], edx
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0xc], edx
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x60], eax
movzx eax, word [ebx + 2]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 8], edx
mov edx, dword [ebp - 0x50]
mov eax, dword [edi + eax*4]
mov dword [ebp - 0x1c], edx
mov edx, dword [ebp - 0x60]
mov edi, dword [ebp - 0x30]
xor eax, edx
mov ebx, dword [ebp - 0x78]
test eax, 0xe7ffffff
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x4c], ebx
jne 0x75db2259
mov dword [ebp - 0x34], 1
test ecx, ecx
js 0x75db22d7
mov esi, dword [ebp - 0x34]
mov edx, dword [ebp - 0x40]
lea edx, [edx + esi*2]
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x60], edx
lea esp, [esp]
add eax, ecx
mov ecx, dword [ebp - 0x98]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 4], eax
push 2
lea eax, [ecx + eax*8]
mov ecx, dword [ebp - 0x60]
mov edx, eax
mov dword [ebp - 0x2c], eax
call fcn.75df2482
test eax, eax
je 0x75db22ba
jns 0x75db22a7
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x8c]
dec ecx
mov dword [ebp - 0x3c], ecx
jmp 0x75db22b4
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x8c], eax
cmp eax, ecx
jle 0x75db2270
jmp 0x75db22d7
cmp dword [ebp - 0x34], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 4]
mov dword [esi + 0x50], eax
jne 0x75db22d7
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x90]
add eax, 2
mov dword [ecx], eax
mov edx, dword [ebp - 0x1c]
xor ecx, ecx
and dword [esi + 0x50], 0x3fffffff
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x74], 0
cmp byte [edx + 0x19], 3
movzx eax, byte [edx + 0x1b]
sete cl
dec ecx
and ecx, eax
and ecx, 0xc0
sub ecx, 0x40
je 0x75db341c
sub ecx, 0x40
je 0x75db2de5
sub ecx, 0x40
jne 0x75db2bf3
mov eax, dword [esi]
mov ecx, dword [eax + reloc.ntdll.dll_NtClose]
mov dword [ebp - 0x30], ecx
mov ecx, dword [eax + 0xfc]
mov eax, dword [eax + reloc.ntdll.dll_NtClose]
and ecx, 0x20
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x34], ecx
movzx eax, word [eax + 0x14]
mov dword [ebp - 4], eax
test ax, ax
je 0x75db2506
xor eax, eax
mov esi, edx
test ecx, ecx
setne al
lea eax, [eax*2 + 0xe]
add eax, dword [edx + 0x10]
mov edx, dword [esi + 4]
mov esi, dword [ebp - 0x58]
cmp eax, edx
ja 0x75db2506
mov eax, dword [ebp - 0x44]
push dword [eax + 8]
push ecx
mov ecx, dword [ebp - 0x60]
movzx eax, word [ecx + 6]
push eax
movzx eax, word [ecx + 4]
mov ecx, dword [ebp - 0x44]
push eax
push 8
mov ecx, dword [ecx + 0x10]
call fcn.75df24b7
mov edx, eax
mov dword [ebp - 0x74], edx
cmp edx, 8
jl 0x75db2506
mov ecx, dword [ebp - 4]
xor eax, eax
movzx ecx, cx
dec ecx
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x34], eax
je 0x75db24a7
cmp edx, 9
jl 0x75db24a7
cmp dword [esi + 4], 0
mov edx, dword [ebp - 0x44]
mov eax, dword [edx + 0x10]
movzx edx, word [eax]
mov dword [ebp - 0x60], edx
movzx edx, dx
je 0x75db2444
mov ecx, dword [esi + 4]
mov eax, dword [ebp - 0x60]
shr edx, 8
movzx eax, al
add eax, dword [ecx + edx*4]
mov ecx, dword [0x75e50860]
mov edx, dword [esi + 4]
mov eax, dword [ecx + eax*4]
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 4], eax
mov eax, dword [ecx + 0x10]
movzx eax, word [eax + 2]
mov ecx, eax
movzx eax, al
shr ecx, 8
add eax, dword [edx + ecx*4]
mov ecx, dword [0x75e50860]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 0x24]
mov eax, dword [ecx + eax*4]
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0xc], eax
jmp 0x75db247d
mov esi, dword [0x75e50860]
movzx eax, word [eax + 2]
mov edx, dword [esi + edx*4]
mov dword [ebp - 4], edx
mov edx, esi
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
xor edx, dword [ebp - 4]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x1c], eax
test edx, 0xe7ffffff
jne 0x75db24a7
mov dword [ebp - 0x3c], 1
test ecx, ecx
js 0x75db2506
mov eax, dword [ebp - 0x44]
mov esi, dword [ebp - 0x3c]
mov edx, dword [eax + 0x10]
mov eax, dword [ebp - 0x40]
lea edx, [edx + esi*2]
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x60], edx
add eax, ecx
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 4], eax
push 8
lea ecx, [eax + eax*4]
mov eax, dword [ebp - 0x30]
lea eax, [eax + ecx*4]
mov ecx, dword [ebp - 0x60]
mov edx, eax
mov dword [ebp - 0x34], eax
call fcn.75df2482
test eax, eax
je 0x75db27b4
jns 0x75db24f8
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x40]
dec ecx
mov dword [ebp - 0x2c], ecx
jmp 0x75db2502
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x40], eax
cmp eax, ecx
jle 0x75db24c0
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x68], eax
lea eax, [esi + 0x10]
add esi, 4
mov edx, dword [ebp - 8]
mov dword [ebp - 0x64], esi
mov esi, dword [ebp - 0x44]
add esi, 8
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x90], esi
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x78], edi
mov eax, dword [esi]
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x5c], edx
mov dword [ebp - 0x38], ecx
mov esi, dword [eax + reloc.ntdll.dll_NtClose]
mov dword [ebp - 0x88], esi
mov esi, dword [eax + 0xfc]
mov eax, dword [eax + reloc.ntdll.dll_NtClose]
and esi, 0x20
mov dword [ebp - 0x2c], esi
mov esi, dword [ebp - 0x54]
mov dword [ebp - 0x60], eax
movzx eax, word [eax + 0x12]
mov dword [ebp - 0x20], esi
mov esi, dword [ebp - 0x84]
mov dword [ebp - 0x34], eax
cmp word [ebp - 0x34], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x24], esi
mov esi, dword [ebp - 0x8c]
mov dword [ebp - 0x28], esi
mov esi, dword [ebp - 0x98]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x14], esi
mov esi, dword [ebp - 0x9c]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x1c], esi
jbe 0x75db28d8
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x14], eax
mov eax, esi
mov esi, dword [ebp - 0x64]
mov dword [ebp - 0x1c], eax
xor eax, eax
cmp dword [ebp - 0x2c], eax
setne al
lea eax, [eax*2 + 0xc]
add eax, dword [ebp - 0x30]
cmp eax, dword [esi]
mov esi, dword [ebp - 0x58]
ja 0x75db28d5
mov eax, dword [ebp - 0x74]
test eax, eax
jne 0x75db266e
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x60]
push dword [eax]
movzx eax, word [ecx + 6]
push dword [ebp - 0x2c]
push eax
movzx eax, word [ecx + 4]
mov ecx, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x64]
push 7
mov edx, dword [eax]
call fcn.75df24b7
mov edx, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x54]
mov ebx, dword [ebp - 0x9c]
mov edi, dword [ebp - 0x78]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 7
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x50]
jl 0x75db28d8
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x54]
mov ebx, dword [ebp - 0x9c]
movzx eax, ax
dec eax
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x2c], 0
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x50]
mov dword [ebp - 4], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x18], eax
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
je 0x75db2874
cmp dword [ebp - 0x48], 8
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x54]
mov ebx, dword [ebp - 0x9c]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x50]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
jl 0x75db2874
mov ebx, dword [ebp - 0x30]
mov edx, dword [esi + 4]
movzx eax, word [ebx]
mov ecx, eax
test edx, edx
je 0x75db27d6
mov esi, dword [0x75e50860]
shr ecx, 8
movzx eax, al
add eax, dword [edx + ecx*4]
mov eax, dword [esi + eax*4]
mov dword [ebp - 0x2c], eax
movzx eax, word [ebx + 2]
mov ecx, eax
movzx eax, al
shr ecx, 8
add eax, dword [edx + ecx*4]
mov eax, dword [esi + eax*4]
jmp 0x75db27e9
cmp dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x44]
mov eax, dword [eax + 0x10]
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0xc]
jne 0x75db2bf6
add dword [ecx + 0x10], 0xe
jmp 0x75db2bf6
mov edx, dword [0x75e50860]
mov eax, dword [edx + ecx*4]
mov dword [ebp - 0x2c], eax
movzx eax, word [ebx + 2]
mov eax, dword [edx + eax*4]
mov edx, dword [ebp - 0x84]
mov ebx, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x54]
mov esi, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x78]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x40]
xor dword [ebp - 0x74], esi
test dword [ebp - 0x74], 0xe7ffffff
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x50]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 8], edx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x18], eax
jne 0x75db2874
mov dword [ebp - 4], 1
cmp dword [ebp - 0x34], 0
jl 0x75db28d8
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x3c]
mov esi, dword [ebp - 4]
add eax, ecx
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x2c], eax
push 7
lea ecx, [eax + eax*4]
mov eax, dword [ebp - 0x88]
lea eax, [eax + ecx*4]
mov ecx, dword [ebp - 0x30]
mov edx, eax
mov dword [ebp - 0x60], eax
lea ecx, [ecx + esi*2]
call fcn.75df2482
mov esi, dword [ebp - 0x58]
test eax, eax
je 0x75db2bd3
mov eax, dword [ebp - 0x2c]
jns 0x75db28c1
dec eax
mov dword [ebp - 0x34], eax
jmp 0x75db28c8
inc eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x3c]
cmp ecx, eax
jle 0x75db2880
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x14]
mov dword [ebp - 0x50], esi
mov esi, dword [ebp - 0x28]
mov dword [ebp - 0x5c], esi
mov esi, dword [ebp - 0x24]
mov dword [ebp - 0x84], esi
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x54], esi
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x68], eax
mov eax, dword [esi]
mov dword [ebp - 0x34], edi
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x78], edx
mov esi, dword [eax + reloc.ntdll.dll_NtClose]
mov dword [ebp - 0x9c], esi
mov esi, dword [eax + 0xfc]
mov eax, dword [eax + reloc.ntdll.dll_NtClose]
and esi, 0x20
mov dword [ebp - 0x88], eax
mov dword [ebp - 4], esi
mov dword [ebp - 8], edx
movzx esi, word [eax + 0x10]
mov eax, dword [ebp - 0x48]
test si, si
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x8c], edi
mov dword [ebp - 0x1c], edi
mov edi, edx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x60], esi
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
je 0x75db2de5
mov edi, dword [ebp - 0x68]
mov esi, dword [ebp - 0x94]
mov ebx, dword [ebp - 0x48]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x1c], eax
xor eax, eax
cmp dword [ebp - 4], eax
mov dword [ebp - 0x10], edi
mov edi, dword [ebp - 0x80]
setne al
mov dword [ebp - 0x18], edi
mov edi, dword [ebp - 0x54]
mov dword [ebp - 0x20], edi
mov edi, dword [ebp - 0x38]
lea eax, [eax*2 + 0xa]
add eax, dword [esi]
mov esi, dword [ebp - 0x64]
mov dword [ebp - 0xc], edi
mov edi, dword [ebp - 0x84]
mov dword [ebp - 0x24], edi
mov edi, edx
cmp eax, dword [esi]
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x98]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
ja 0x75db2de5
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x74], eax
test eax, eax
jne 0x75db2a41
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x88]
push dword [eax]
movzx eax, word [ecx + 6]
push dword [ebp - 4]
push eax
movzx eax, word [ecx + 4]
mov ecx, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x64]
push 6
mov ecx, dword [ecx]
mov edx, dword [eax]
call fcn.75df24b7
mov ecx, dword [ebp - 0x5c]
mov edx, edi
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 6
mov edi, edx
mov eax, dword [ebp - 0x68]
mov ebx, dword [ebp - 0x98]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
jl 0x75db2de5
mov edi, dword [ebp - 0x68]
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov ebx, dword [ebp - 0x50]
mov dword [ebp - 0x10], edi
mov edi, dword [ebp - 0x80]
mov dword [ebp - 0x18], edi
mov edi, dword [ebp - 0x54]
mov dword [ebp - 0x20], edi
mov edi, dword [ebp - 0x38]
mov dword [ebp - 0xc], edi
mov edi, dword [ebp - 0x84]
mov dword [ebp - 0x24], edi
mov edi, dword [ebp - 0x5c]
mov dword [ebp - 0x28], edi
mov edi, dword [ebp - 0x78]
mov dword [ebp - 0x14], ebx
mov ebx, dword [ebp - 0x8c]
movzx ecx, cx
dec ecx
mov dword [ebp - 8], edi
mov edi, edx
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x98]
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
cmp dword [ebp - 4], eax
je 0x75db2d7a
cmp dword [ebp - 0x74], 7
mov ebx, dword [ebp - 0x68]
mov dword [ebp - 0x10], ebx
mov ebx, dword [ebp - 0x80]
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x54]
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x38]
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0x84]
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x5c]
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x50]
mov dword [ebp - 0x14], ebx
mov ebx, dword [ebp - 0x78]
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0x8c]
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x98]
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
jl 0x75db2d7a
mov eax, dword [ebp - 0x94]
mov edi, dword [esi + 4]
mov ebx, dword [eax]
movzx eax, word [ebx]
mov edx, eax
test edi, edi
je 0x75db2d03
mov ecx, dword [0x75e50860]
shr edx, 8
movzx eax, al
add eax, dword [edi + edx*4]
mov edx, dword [ecx + eax*4]
movzx eax, word [ebx + 2]
mov ecx, eax
movzx eax, al
shr ecx, 8
add eax, dword [edi + ecx*4]
mov ecx, dword [0x75e50860]
mov eax, dword [ecx + eax*4]
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x2c]
jmp 0x75db2d5b
cmp dword [ebp - 4], 0
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x44]
mov eax, dword [eax + 0x10]
mov dword [ecx + 0x18], eax
jne 0x75db2bf3
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x94]
add eax, 0xc
mov dword [ecx], eax
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
and dword [esi + 0x74], reloc.ntdll.dll_NtClose
mov edx, dword [esi + 0x74]
mov dword [ebp - 0x34], edx
mov edx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x50], esi
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 4], ecx
mov ecx, dword [esi + 0x50]
shr ecx, 8
mov dword [ebp - 0x94], ecx
cmp cl, 5
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x78], edx
je 0x75db3a60
mov al, byte [ebp - 0x94]
add al, 0x57
cmp al, 6
jbe 0x75db3a45
cmp dword [esi + 0x30], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x18], edx
mov edx, ebx
mov dword [ebp - 8], ecx
mov ecx, edi
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
je 0x75db3a57
mov al, byte [ebp - 0x94]
add al, 0x40
cmp al, 0x2f
mov eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xc], eax
ja 0x75db3a1b
mov edi, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x38]
mov dword [ebp - 0x24], edi
mov edi, dword [ebp - 0x40]
mov dword [ebp - 0x28], edi
mov edi, dword [ebp - 0x5c]
mov dword [ebp - 0x14], ebx
mov ebx, dword [ebp - 0x50]
mov dword [ebp - 8], edi
mov edi, ecx
mov dword [ebp - 0x1c], ebx
mov ebx, edx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
jmp 0x75db3a48
mov edi, dword [0x75e50860]
mov eax, dword [edi + edx*4]
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x18], edx
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x20], edx
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0xc], edx
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x88], eax
movzx eax, word [ebx + 2]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x78]
mov dword [ebp - 8], edx
mov edx, dword [ebp - 0x8c]
mov eax, dword [edi + eax*4]
mov dword [ebp - 0x1c], edx
mov edx, dword [ebp - 0x88]
mov edi, dword [ebp - 0x34]
xor eax, edx
mov ebx, dword [ebp - 0x98]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x4c], ebx
test eax, 0xe7ffffff
jne 0x75db2d7a
mov dword [ebp - 0x3c], 1
test ecx, ecx
js 0x75db2de5
mov eax, dword [ebp - 0x94]
mov esi, dword [ebp - 0x3c]
mov edx, dword [eax]
mov eax, dword [ebp - 0x30]
lea edx, [edx + esi*2]
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x88], edx
add eax, ecx
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x9c]
shl ecx, 4
add eax, ecx
mov ecx, dword [ebp - 0x88]
push 6
mov edx, eax
mov dword [ebp - 0x60], eax
call fcn.75df2482
test eax, eax
je 0x75db2f2f
jns 0x75db2dd7
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x30]
dec ecx
mov dword [ebp - 0x2c], ecx
jmp 0x75db2de1
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x30], eax
cmp eax, ecx
jle 0x75db2d98
mov eax, dword [esi]
mov ecx, dword [eax + reloc.ntdll.dll_NtClose]
mov edx, dword [eax + 0xfc]
mov eax, dword [eax + reloc.ntdll.dll_NtClose]
and edx, 0x20
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x60], edx
movzx eax, word [eax + 0xe]
mov dword [ebp - 4], eax
test ax, ax
je 0x75db302a
mov eax, dword [ebp - 0x44]
mov esi, dword [ebp - 0x44]
mov ecx, dword [eax + 0x10]
xor eax, eax
test edx, edx
setne al
lea eax, [eax*2 + 8]
add eax, ecx
cmp eax, dword [esi + 4]
mov esi, dword [ebp - 0x58]
ja 0x75db302a
mov eax, dword [ebp - 0x74]
test eax, eax
jne 0x75db2e6e
mov eax, dword [ebp - 0x44]
push dword [eax + 8]
push edx
mov edx, dword [ebp - 0x88]
movzx eax, word [edx + 6]
push eax
movzx eax, word [edx + 4]
push eax
mov eax, dword [ebp - 0x44]
push 5
mov edx, dword [eax + 4]
call fcn.75df24b7
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x74], eax
cmp eax, 5
jl 0x75db302a
mov ecx, dword [ebp - 4]
xor eax, eax
movzx ecx, cx
dec ecx
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], eax
mov dword [ebp - 4], ecx
test edx, edx
je 0x75db2fbe
cmp dword [ebp - 0x74], 6
jl 0x75db2fbe
cmp dword [esi + 4], 0
mov edx, dword [ebp - 0x44]
mov eax, dword [edx + 0x10]
movzx edx, word [eax]
mov dword [ebp - 0x88], edx
movzx edx, dx
je 0x75db2f58
mov ecx, dword [esi + 4]
mov eax, dword [ebp - 0x88]
shr edx, 8
movzx eax, al
add eax, dword [ecx + edx*4]
mov ecx, dword [0x75e50860]
mov edx, dword [esi + 4]
mov eax, dword [ecx + eax*4]
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x3c], eax
mov eax, dword [ecx + 0x10]
movzx eax, word [eax + 2]
mov ecx, eax
movzx eax, al
shr ecx, 8
add eax, dword [edx + ecx*4]
mov ecx, dword [0x75e50860]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 0x24]
mov eax, dword [ecx + eax*4]
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x88]
mov dword [ebp - 0xc], eax
jmp 0x75db2f94
cmp dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x44]
mov eax, dword [eax + 0xc]
mov dword [ecx + 0x18], eax
jne 0x75db2bf3
mov ecx, dword [ebp - 0x94]
mov eax, dword [ecx]
mov ecx, dword [ebp - 0x40]
add eax, 0xa
jmp 0x75db2bf1
mov esi, dword [0x75e50860]
movzx eax, word [eax + 2]
mov edx, dword [esi + edx*4]
mov dword [ebp - 0x3c], edx
mov edx, esi
mov esi, dword [ebp - 0x58]
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
xor edx, dword [ebp - 0x3c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x1c], eax
test edx, 0xe7ffffff
jne 0x75db2fbe
mov dword [ebp - 0x2c], 1
test ecx, ecx
js 0x75db302a
mov eax, dword [ebp - 0x44]
mov esi, dword [ebp - 0x2c]
mov edx, dword [eax + 0x10]
mov eax, dword [ebp - 0x30]
lea edx, [edx + esi*2]
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x88], edx
lea ebx, [ebx]
add eax, ecx
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x34]
shl ecx, 4
add eax, ecx
mov ecx, dword [ebp - 0x88]
push 5
mov edx, eax
mov dword [ebp - 0x60], eax
call fcn.75df2482
test eax, eax
je 0x75db3311
jns 0x75db301c
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x30]
dec ecx
mov dword [ebp - 4], ecx
jmp 0x75db3026
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 4]
inc eax
mov dword [ebp - 0x30], eax
cmp eax, ecx
jle 0x75db2fe0
mov eax, dword [ebp - 8]
mov edx, edi
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x44]
add eax, 0x10
mov edi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x90], eax
mov eax, dword [esi]
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x1c], edi
mov edi, edx
mov dword [ebp - 0x40], ecx
mov esi, dword [eax + reloc.ntdll.dll_NtClose]
mov dword [ebp - 0x8c], esi
mov esi, dword [eax + 0xfc]
mov eax, dword [eax + reloc.ntdll.dll_NtClose]
and esi, 0x20
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0xc], ecx
movzx esi, word [eax + 0xc]
mov eax, dword [ebp - 4]
test si, si
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x60], esi
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 8], eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
je 0x75db341c
mov edi, dword [ebp - 0x68]
mov ebx, dword [ebp - 0x90]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x50]
mov ebx, dword [ebx]
mov dword [ebp - 0x1c], eax
xor eax, eax
cmp dword [ebp - 0x2c], eax
mov dword [ebp - 0x10], edi
mov edi, dword [ebp - 0x80]
setne al
mov dword [ebp - 0x18], edi
mov edi, dword [ebp - 0x48]
mov dword [ebp - 0x20], edi
mov edi, dword [ebp - 0x40]
lea eax, [eax*2 + 6]
mov dword [ebp - 0xc], edi
mov edi, dword [ebp - 0x64]
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 4]
add eax, dword [ebp - 0x30]
cmp eax, dword [esi + 4]
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x24], edi
mov edi, dword [ebp - 0x54]
mov dword [ebp - 0x28], edi
mov edi, edx
mov dword [ebp - 0x74], ebx
mov ebx, dword [ebp - 0x78]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
ja 0x75db341c
mov eax, dword [ebp - 4]
mov dword [ebp - 0x74], eax
test eax, eax
jne 0x75db3196
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x88]
push dword [edx + 8]
movzx eax, word [ecx + 6]
push dword [ebp - 0x2c]
mov edx, dword [edx + 4]
push eax
movzx eax, word [ecx + 4]
mov ecx, dword [ebp - 0x30]
push eax
push 4
call fcn.75df24b7
mov ecx, dword [ebp - 0x38]
mov edx, edi
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 4
mov edi, edx
mov eax, dword [ebp - 0x68]
mov ebx, dword [ebp - 0x78]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
jl 0x75db341c
mov edi, dword [ebp - 0x68]
xor eax, eax
mov ecx, dword [ebp - 0x60]
mov ebx, dword [ebp - 0x50]
mov dword [ebp - 0x10], edi
mov edi, dword [ebp - 0x80]
mov dword [ebp - 0x18], edi
mov edi, dword [ebp - 0x48]
mov dword [ebp - 0x20], edi
mov edi, dword [ebp - 0x40]
mov dword [ebp - 0xc], edi
mov edi, dword [ebp - 0x64]
mov dword [ebp - 0x24], edi
mov edi, dword [ebp - 0x54]
mov dword [ebp - 0x28], edi
mov edi, dword [ebp - 0x38]
mov dword [ebp - 0x14], edi
mov edi, dword [ebp - 0x5c]
movzx ecx, cx
dec ecx
mov dword [ebp - 8], edi
mov edi, edx
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x78]
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], ecx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
cmp dword [ebp - 0x2c], eax
je 0x75db33b3
cmp dword [ebp - 0x74], 5
mov ebx, dword [ebp - 0x68]
mov dword [ebp - 0x10], ebx
mov ebx, dword [ebp - 0x80]
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x48]
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x40]
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 0x64]
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x54]
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x38]
mov dword [ebp - 0x14], ebx
mov ebx, dword [ebp - 0x5c]
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0x50]
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x78]
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
jl 0x75db33b3
mov ebx, dword [ebp - 0x30]
mov edi, dword [esi + 4]
movzx eax, word [ebx]
mov edx, eax
test edi, edi
je 0x75db3333
mov ecx, dword [0x75e50860]
shr edx, 8
movzx eax, al
add eax, dword [edi + edx*4]
mov edx, dword [ecx + eax*4]
movzx eax, word [ebx + 2]
mov ecx, eax
movzx eax, al
shr ecx, 8
add eax, dword [edi + ecx*4]
mov ecx, dword [0x75e50860]
mov eax, dword [ecx + eax*4]
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x90], ecx
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 4]
jmp 0x75db3391
cmp dword [ebp - 0x2c], 0
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x44]
mov eax, dword [eax + 0xc]
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0xc]
jne 0x75db2bf6
add dword [ecx + 0x10], 8
jmp 0x75db2bf6
mov edi, dword [0x75e50860]
mov eax, dword [edi + edx*4]
mov edx, dword [ebp - 0x90]
mov dword [ebp - 0x90], edx
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x18], edx
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x20], edx
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0xc], edx
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x88], eax
movzx eax, word [ebx + 2]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 8], edx
mov edx, dword [ebp - 0x50]
mov eax, dword [edi + eax*4]
mov dword [ebp - 0x1c], edx
mov edx, dword [ebp - 0x88]
mov edi, dword [ebp - 0x3c]
xor eax, edx
mov ebx, dword [ebp - 0x78]
test eax, 0xe7ffffff
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x4c], ebx
jne 0x75db33b3
mov dword [ebp - 0x84], 1
test ecx, ecx
js 0x75db341c
mov esi, dword [ebp - 0x84]
mov edx, dword [ebp - 0x30]
lea edx, [edx + esi*2]
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x88], edx
lea esp, [esp]
add eax, ecx
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x2c], eax
push 4
lea ecx, [eax + eax*2]
mov eax, dword [ebp - 0x8c]
lea eax, [eax + ecx*4]
mov ecx, dword [ebp - 0x88]
mov edx, eax
mov dword [ebp - 0x60], eax
call fcn.75df2482
test eax, eax
je 0x75db3566
jns 0x75db340e
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
dec ecx
mov dword [ebp - 4], ecx
jmp 0x75db3418
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 4]
inc eax
mov dword [ebp - 0x34], eax
cmp eax, ecx
jle 0x75db33d0
mov eax, dword [esi]
mov ecx, dword [eax + reloc.ntdll.dll_NtClose]
mov edx, dword [eax + 0xfc]
mov eax, dword [eax + reloc.ntdll.dll_NtClose]
and edx, 0x20
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x60], edx
movzx eax, word [eax + 0xa]
mov dword [ebp - 4], eax
test ax, ax
je 0x75db365b
mov eax, dword [ebp - 0x44]
mov esi, dword [ebp - 0x44]
mov ecx, dword [eax + 0x10]
xor eax, eax
test edx, edx
setne al
lea eax, [eax*2 + 4]
add eax, ecx
cmp eax, dword [esi + 4]
mov esi, dword [ebp - 0x58]
ja 0x75db365b
mov eax, dword [ebp - 0x74]
test eax, eax
jne 0x75db34a5
mov eax, dword [ebp - 0x44]
push dword [eax + 8]
push edx
mov edx, dword [ebp - 0x88]
movzx eax, word [edx + 6]
push eax
movzx eax, word [edx + 4]
push eax
mov eax, dword [ebp - 0x44]
push 3
mov edx, dword [eax + 4]
call fcn.75df24b7
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x74], eax
cmp eax, 3
jl 0x75db365b
mov ecx, dword [ebp - 4]
xor eax, eax
movzx ecx, cx
dec ecx
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], eax
mov dword [ebp - 4], ecx
test edx, edx
je 0x75db35f6
cmp dword [ebp - 0x74], 4
jl 0x75db35f6
cmp dword [esi + 4], 0
mov edx, dword [ebp - 0x44]
mov eax, dword [edx + 0x10]
movzx edx, word [eax]
mov dword [ebp - 0x88], edx
movzx edx, dx
je 0x75db3590
mov ecx, dword [esi + 4]
mov eax, dword [ebp - 0x88]
shr edx, 8
movzx eax, al
add eax, dword [ecx + edx*4]
mov ecx, dword [0x75e50860]
mov edx, dword [esi + 4]
mov eax, dword [ecx + eax*4]
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x3c], eax
mov eax, dword [ecx + 0x10]
movzx eax, word [eax + 2]
mov ecx, eax
movzx eax, al
shr ecx, 8
add eax, dword [edx + ecx*4]
mov ecx, dword [0x75e50860]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 0x24]
mov eax, dword [ecx + eax*4]
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x88]
mov dword [ebp - 0xc], eax
jmp 0x75db35cc
cmp dword [ebp - 0x84], 0
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x44]
mov eax, dword [eax + 8]
mov dword [ecx + 0x18], eax
jne 0x75db2bf3
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x90]
add eax, 6
jmp 0x75db2bf1
mov esi, dword [0x75e50860]
movzx eax, word [eax + 2]
mov edx, dword [esi + edx*4]
mov dword [ebp - 0x3c], edx
mov edx, esi
mov esi, dword [ebp - 0x58]
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
xor edx, dword [ebp - 0x3c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x1c], eax
test edx, 0xe7ffffff
jne 0x75db35f6
mov dword [ebp - 0x2c], 1
test ecx, ecx
js 0x75db365b
mov eax, dword [ebp - 0x44]
mov esi, dword [ebp - 0x2c]
mov edx, dword [eax + 0x10]
mov eax, dword [ebp - 0x30]
lea edx, [edx + esi*2]
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x88], edx
add eax, ecx
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x3c], eax
push 3
lea ecx, [eax + eax*2]
mov eax, dword [ebp - 0x34]
lea eax, [eax + ecx*4]
mov ecx, dword [ebp - 0x88]
mov edx, eax
mov dword [ebp - 0x60], eax
call fcn.75df2482
test eax, eax
je 0x75db38e7
jns 0x75db364d
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x30]
dec ecx
mov dword [ebp - 4], ecx
jmp 0x75db3657
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 4]
inc eax
mov dword [ebp - 0x30], eax
cmp eax, ecx
jle 0x75db3612
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x44]
add eax, 0x10
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x78], eax
mov eax, dword [esi]
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x5c], ebx
mov esi, dword [eax + reloc.ntdll.dll_NtClose]
mov dword [ebp - 0x60], esi
mov esi, dword [eax + 0xfc]
mov eax, dword [eax + reloc.ntdll.dll_NtClose]
and esi, 0x20
mov dword [ebp - 4], esi
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x40], edx
movzx esi, word [eax + 8]
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x20], eax
mov eax, ecx
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x34], esi
cmp word [ebp - 0x34], 0
mov esi, dword [ebp - 0x8c]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x1c], esi
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x18], edx
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], ecx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
jbe 0x75db2bf9
mov eax, dword [ebp - 0x78]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0x18], edx
mov dword [ebp - 8], ecx
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x1c], eax
xor eax, eax
cmp dword [ebp - 4], eax
mov dword [ebp - 0x4c], ebx
setne al
mov dword [ebp - 0x70], edi
lea eax, [eax*2 + 2]
add eax, dword [ebp - 0x30]
cmp eax, dword [esi + 4]
mov esi, dword [ebp - 0x58]
ja 0x75db3a13
cmp dword [ebp - 0x74], 0
jne 0x75db37ad
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x88]
push dword [edx + 8]
movzx eax, word [ecx + 6]
push dword [ebp - 4]
mov edx, dword [edx + 4]
push eax
movzx eax, word [ecx + 4]
mov ecx, dword [ebp - 0x30]
push eax
push 2
call fcn.75df24b7
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x68]
mov ebx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x40]
mov edi, dword [ebp - 0x50]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x5c]
mov dword [ebp - 0x18], edx
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], ecx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
jl 0x75db2bf9
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x8c]
movzx eax, ax
dec eax
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 4], 0
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x5c]
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x18], edx
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], ecx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
je 0x75db3980
cmp dword [ebp - 0x74], 3
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x68]
mov ebx, dword [ebp - 0x8c]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x5c]
mov dword [ebp - 0x18], edx
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], ecx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
jl 0x75db3980
mov edx, dword [ebp - 0x30]
mov edi, dword [esi + 4]
mov ebx, dword [0x75e50860]
movzx eax, word [edx]
mov ecx, eax
test edi, edi
je 0x75db3909
shr ecx, 8
movzx eax, al
add eax, dword [edi + ecx*4]
mov eax, dword [ebx + eax*4]
mov dword [ebp - 4], eax
movzx eax, word [edx + 2]
mov ecx, eax
movzx eax, al
shr ecx, 8
add eax, dword [edi + ecx*4]
jmp 0x75db3913
cmp dword [ebp - 0x2c], 0
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x44]
mov eax, dword [eax + 8]
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0xc]
jne 0x75db2bf6
add dword [ecx + 0x10], 4
jmp 0x75db2bf6
mov eax, dword [ebx + ecx*4]
mov dword [ebp - 4], eax
movzx eax, word [edx + 2]
mov eax, dword [ebx + eax*4]
mov ecx, dword [ebp - 0x48]
mov esi, dword [ebp - 4]
mov ebx, dword [ebp - 0x8c]
mov edi, dword [ebp - 0x50]
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x78]
xor dword [ebp - 0x34], esi
test dword [ebp - 0x34], 0xe7ffffff
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x5c]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x18], edx
jne 0x75db3980
mov dword [ebp - 0x3c], 1
cmp dword [ebp - 0x90], 0
jl 0x75db2bf9
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x30]
lea eax, [eax + ecx*2]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x90]
add eax, ecx
mov ecx, dword [ebp - 0x60]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 4], eax
push 2
lea eax, [ecx + eax*8]
mov ecx, dword [ebp - 0x88]
mov edx, eax
mov dword [ebp - 0x34], eax
call fcn.75df2482
test eax, eax
je 0x75db39ef
mov eax, dword [ebp - 4]
jns 0x75db39d9
dec eax
mov dword [ebp - 0x90], eax
jmp 0x75db39e3
inc eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x2c]
cmp ecx, eax
jle 0x75db39a5
jmp 0x75db2bf3
cmp dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x44]
mov eax, dword [eax + 4]
mov dword [ecx + 0x18], eax
jne 0x75db2bf3
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x78]
add eax, 2
jmp 0x75db2bf1
mov eax, dword [ebp - 0xc]
jmp 0x75db2bf9
mov eax, dword [ebp - 0x30]
mov ebx, edx
mov edi, dword [ebp - 0x5c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 8], edi
mov edi, ecx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
jmp 0x75db3a57
mov eax, dword [ebp - 0xc]
cmp byte [ebp - 0x94], 1
jne 0x75db3a60
cmp dword [esi + 0x1c], 0
je 0x75db3a60
mov eax, dword [esi + 0x34]
and dword [esi + 0x50], eax
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x1c]
mov edx, edi
mov dword [ebp - 0x78], ecx
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x50], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 4], eax
mov eax, ecx
shr eax, 8
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x44], eax
cmp al, 5
je 0x75db3b51
add al, 0x57
cmp al, 6
jbe 0x75db3b3f
cmp dword [esi + 0x30], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x70], edi
je 0x75db3b4b
mov al, byte [ebp - 0x44]
add al, 0x40
mov dword [ebp - 0x4c], ebx
cmp al, 0x2f
mov dword [ebp - 0x70], edi
mov eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x1c], eax
ja 0x75db3b4b
cmp byte [ebp - 0x44], 1
jne 0x75db3b51
cmp dword [esi + 0x1c], 0
je 0x75db3b51
and ecx, dword [esi + 0x34]
mov dword [esi + 0x74], ecx
cmp byte [ebp - 0x94], 0xd
jne 0x75db414b
cmp dword [esi + 0x20], 0
je 0x75db414b
mov eax, dword [esi + 0x38]
mov ecx, 0x37
mov edx, dword [edi]
mov esi, 0x3ff
mov dword [ebp - 0x88], eax
mov eax, 0x75e25388
mov dword [ebp - 4], eax
mov dword [ebp - 0x38], 0
movzx eax, word [edx]
mov dword [ebp - 0x3c], eax
add eax, 0x2400
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x60], 0
cmp ax, si
ja 0x75db3bca
cmp edx, dword [ebp - 0x88]
jbe 0x75db3bca
mov eax, 0xd835
cmp word [edx - 2], ax
jne 0x75db3c15
mov eax, 0x75e253f8
mov ecx, 9
mov dword [ebp - 4], eax
movzx eax, word [edx]
mov esi, dword [ebp - 0x60]
mov edi, dword [ebp - 4]
mov dword [ebp - 0x2c], eax
lea eax, [ecx + esi]
sar eax, 1
movzx edx, word [edi + eax*2]
cmp word [ebp - 0x2c], dx
je 0x75db3bf3
jae 0x75db3bec
lea ecx, [eax - 1]
jmp 0x75db3bef
lea esi, [eax + 1]
cmp esi, ecx
jle 0x75db3bd6
mov edx, dword [ebp - 0x3c]
and eax, 0xfffffffe
movzx ecx, word [edi + eax*2]
lea eax, [edi + eax*2]
mov edi, dword [ebp - 0x70]
cmp cx, dx
ja 0x75db3c15
cmp word [eax + 2], dx
jb 0x75db3c15
mov eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x75db3c1c
mov dword [ebp - 0x68], 0
mov eax, dword [ebp - 8]
mov esi, 0x3ff
mov ecx, dword [ebp - 0xc]
mov edx, 0x37
mov dword [ebp - 4], 0x75e25388
mov dword [ebp - 0x60], 0
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
mov eax, dword [ecx]
movzx eax, word [eax]
mov dword [ebp - 0x2c], eax
add eax, 0x2400
cmp ax, si
mov esi, dword [ebp - 0x58]
ja 0x75db3c78
mov eax, dword [ecx]
cmp eax, dword [ebp - 0x88]
jbe 0x75db3c78
mov edx, 0xd835
cmp word [eax - 2], dx
jne 0x75db3ccc
mov dword [ebp - 4], 0x75e253f8
mov edx, 9
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x60]
mov edi, dword [ebp - 4]
movzx eax, ax
mov dword [ebp - 0x3c], eax
lea eax, [edx + ecx]
sar eax, 1
movzx esi, word [edi + eax*2]
cmp word [ebp - 0x3c], si
je 0x75db3ca4
jae 0x75db3c9d
lea edx, [eax - 1]
jmp 0x75db3ca0
lea ecx, [eax + 1]
cmp ecx, edx
jle 0x75db3c87
mov ecx, dword [ebp - 4]
and eax, 0xfffffffe
movzx edx, word [ecx + eax*2]
lea eax, [ecx + eax*2]
mov esi, dword [ebp - 0x58]
mov edi, dword [ebp - 0x70]
mov ecx, dword [ebp - 0xc]
cmp dx, word [ebp - 0x2c]
ja 0x75db3ccc
mov esi, dword [ebp - 0x2c]
cmp word [eax + 2], si
mov esi, dword [ebp - 0x58]
jae 0x75db3cce
xor edx, edx
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x48], edx
test ax, ax
je 0x75db414b
test dx, dx
je 0x75db414b
add eax, 0x2400
mov esi, 0x3ff
movzx eax, ax
cmp si, ax
mov dword [ebp - 0x34], eax
sbb eax, eax
and eax, 0xffff27cb
add eax, 0xd835
movzx eax, ax
mov dword [ebp - 4], eax
lea eax, reloc.ntdll.dll_NtClose
movzx eax, ax
mov edx, esi
mov esi, dword [ebp - 0x58]
cmp dx, ax
mov dword [ebp - 0x5c], eax
sbb eax, eax
and eax, 0xffff27cb
add eax, 0xd835
movzx eax, ax
mov dword [ebp - 0x3c], eax
mov eax, dword [edi]
mov edx, dword [ebp - 0x68]
cmp word [eax], dx
mov edx, dword [ebp - 0x48]
jne 0x75db3d80
inc dword [ebp - 0x38]
mov esi, 0x3ff
add eax, 2
cmp word [ebp - 0x34], si
mov esi, dword [ebp - 0x58]
mov dword [edi], eax
ja 0x75db3d69
cmp eax, dword [esi + 0x3c]
jae 0x75db3d76
mov edx, dword [ebp - 4]
cmp word [eax], dx
mov edx, dword [ebp - 0x48]
jne 0x75db3d76
add eax, 2
mov dword [edi], eax
cmp eax, dword [esi + 0x3c]
jae 0x75db3d80
cmp dword [ebp - 0x38], 0x13
jl 0x75db3d31
jmp 0x75db3d80
add eax, 2
mov dword [edi], eax
jmp 0x75db3d80
mov eax, dword [ecx]
cmp word [eax], dx
jne 0x75db3dd4
inc dword [ebp - 0x40]
mov esi, 0x3ff
add eax, 2
cmp word [ebp - 0x5c], si
mov esi, dword [ebp - 0x58]
mov dword [ecx], eax
ja 0x75db3dba
mov edx, dword [ebp - 0xa0]
cmp eax, dword [edx]
mov edx, dword [ebp - 0x48]
jae 0x75db3dcf
mov esi, dword [ebp - 0x3c]
cmp word [eax], si
mov esi, dword [ebp - 0x58]
jne 0x75db3dcf
add eax, 2
mov dword [ecx], eax
mov esi, dword [ebp - 0xa0]
cmp eax, dword [esi]
mov esi, dword [ebp - 0x58]
jae 0x75db3dd4
cmp dword [ebp - 0x40], 0x13
jl 0x75db3d80
jmp 0x75db3dd4
add eax, 2
mov dword [ecx], eax
mov eax, dword [esi + 0x3c]
mov edx, dword [edi]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x88], eax
cmp edx, eax
jae 0x75db3e4c
mov eax, dword [ebp - 0x38]
cmp eax, 0x13
jge 0x75db3e4c
mov esi, dword [ebp - 0x68]
mov edi, dword [ebp - 0x88]
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x2c], eax
movzx eax, word [edx]
cmp ax, si
jb 0x75db3e40
lea ecx, [eax - 9]
movzx eax, si
cmp ecx, eax
jg 0x75db3e40
mov ecx, dword [ebp - 0x2c]
mov eax, 0x3ff
inc dword [ebp - 0x30]
inc ecx
add edx, 2
mov dword [ebp - 0x2c], ecx
cmp word [ebp - 0x34], ax
ja 0x75db3e37
cmp edx, edi
jae 0x75db3e40
cmp word [edx], bx
jne 0x75db3e40
add edx, 2
cmp edx, edi
jae 0x75db3e40
cmp ecx, 0x13
jl 0x75db3e01
mov esi, dword [ebp - 0x58]
mov edi, dword [ebp - 0x70]
mov ebx, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x14]
mov edx, dword [ecx]
mov dword [ebp - 0x50], 0
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x14]
cmp edx, dword [eax]
jae 0x75db3ecc
mov eax, dword [ebp - 0x40]
cmp eax, 0x13
jge 0x75db3ecc
mov esi, dword [ebp - 0x50]
mov edi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x5c]
mov dword [ebp - 4], eax
movzx eax, word [edx]
cmp ax, di
jb 0x75db3ebd
lea ecx, [eax - 9]
movzx eax, di
cmp ecx, eax
jg 0x75db3ebd
mov ecx, dword [ebp - 4]
mov eax, 0x3ff
inc ecx
inc esi
add edx, 2
mov dword [ebp - 4], ecx
cmp bx, ax
mov eax, dword [ebp - 0x2c]
ja 0x75db3eb4
cmp edx, eax
jae 0x75db3ebd
mov edi, dword [ebp - 0x3c]
cmp word [edx], di
mov edi, dword [ebp - 0x48]
jne 0x75db3ebd
add edx, 2
cmp edx, eax
jae 0x75db3ebd
cmp ecx, 0x13
jl 0x75db3e78
mov edi, dword [ebp - 0x70]
mov ebx, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x50], esi
mov esi, dword [ebp - 0x58]
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x50]
jne 0x75db5ae7
test eax, eax
jle 0x75db3f4b
mov eax, dword [ebp - 0x48]
movzx eax, ax
mov dword [ebp - 0x88], eax
mov eax, dword [ecx]
mov edx, dword [edi]
mov esi, dword [ebp - 0x68]
mov dword [ebp - 4], eax
movzx eax, word [eax]
movzx edx, word [edx]
sub edx, eax
movzx eax, si
mov esi, dword [ebp - 0x58]
sub edx, eax
add edx, dword [ebp - 0x88]
jne 0x75db5abd
mov edx, dword [edi]
lea eax, [edx + 2]
mov dword [edi], eax
mov eax, dword [ebp - 4]
add eax, 2
mov dword [ecx], eax
mov eax, 0x3ff
cmp word [ebp - 0x34], ax
ja 0x75db3f32
lea eax, [edx + 4]
mov dword [edi], eax
mov eax, 0x3ff
cmp word [ebp - 0x5c], ax
ja 0x75db3f40
mov eax, dword [ebp - 4]
add eax, 4
mov dword [ecx], eax
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
test eax, eax
jg 0x75db3ee8
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x40]
jne 0x75db5acf
mov eax, dword [ebp - 0x68]
cmp ax, word [ebp - 0x48]
je 0x75db3fd3
cmp dword [esi + 0x10], 0
jne 0x75db3f95
mov edx, dword [esi + 0x80]
test dl, 3
je 0x75db3f95
mov al, byte [esi + 0x52]
mov ah, byte [esi + 0x76]
cmp al, ah
je 0x75db3f95
sbb eax, eax
and eax, 0xfffffffe
add eax, 3
and edx, 0xffffff0a
mov dword [esi + 0x84], eax
mov dword [esi + 0x80], edx
mov eax, dword [esi + 0x80]
mov dword [ebp - 0x88], eax
test al, 4
je 0x75db3fd3
mov al, byte [esi + 0x53]
mov dl, byte [esi + 0x77]
and al, 0x3f
and dl, 0x3f
cmp al, dl
je 0x75db3fd3
sbb eax, eax
and eax, 0xfffffffe
add eax, 3
mov dword [esi + 0x84], eax
mov eax, dword [ebp - 0x88]
and eax, 0xffffff0b
mov dword [esi + 0x80], eax
mov eax, 0x3ff
mov dword [esi + 0x74], reloc.ntdll.dll_NtClose
mov dword [esi + 0x50], reloc.ntdll.dll_NtClose
cmp word [ebp - 0x34], ax
ja 0x75db3fef
add dword [edi], reloc.ntdll.dll_NtClose
cmp word [ebp - 0x5c], ax
ja 0x75db3ff8
add dword [ecx], reloc.ntdll.dll_NtClose
mov eax, dword [edi]
add dword [ecx], reloc.ntdll.dll_NtClose
add eax, 0xfffffffe
mov dword [edi], eax
mov edx, dword [esi + 0x4c]
test edx, edx
jne 0x75db4023
mov dword [ebp - 4], eax
cmp dword [esi + 0x40], edx
je 0x75db4019
mov dword [ebp - 4], eax
cmp word [eax], dx
je 0x75db4062
mov eax, dword [esi + 0x3c]
cmp dword [ebp - 4], eax
jae 0x75db4062
test edx, edx
jle 0x75db40b8
lea eax, [edx - 1]
mov dword [esi + 0x4c], eax
mov ax, word [esi + eax*2 + 0x44]
mov word [esi + 0x56], ax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 8]
cmp dword [esi + 0x70], 0
jne 0x75db408d
cmp dword [esi + 0x64], 0
je 0x75db407d
mov eax, dword [ecx]
cmp word [eax], 0
je 0x75db096f
mov esi, dword [ebp - 0x20]
mov eax, dword [ecx]
cmp eax, dword [esi]
mov esi, dword [ebp - 0x58]
jae 0x75db096f
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [esi + 0x70]
test eax, eax
jle 0x75db4103
dec eax
mov dword [edx + 0x14], eax
mov ax, word [edx + eax*2 + 0xc]
mov word [edx + 0x1e], ax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
jmp 0x75db412e
mov eax, dword [esi + 0x48]
mov edx, dword [ebp - 8]
add eax, 2
mov dword [esi + 0x48], eax
cmp eax, dword [esi + 0x3c]
jae 0x75db40ff
mov ax, word [eax]
mov word [esi + 0x56], ax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x75db4065
xor eax, eax
jmp 0x75db40cc
mov eax, dword [edx + 0x10]
add eax, 2
mov dword [edx + 0x10], eax
cmp eax, dword [edx + 4]
jae 0x75db4116
mov ax, word [eax]
jmp 0x75db4118
xor eax, eax
mov word [edx + 0x1e], ax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x75db096f
mov edx, dword [esi + 0x50]
mov ecx, dword [esi + 0x74]
movzx eax, dx
mov dword [ebp - 0x88], eax
movzx eax, cx
mov dword [ebp - 0x60], eax
mov eax, edx
mov edx, ecx
shr eax, 0x10
shr edx, 0x10
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x4c], edx
cmp dword [esi + 0x50], ecx
jne 0x75db4292
mov ecx, dword [ebp - 0x94]
cmp cl, 2
jb 0x75db418d
cmp cl, 6
jbe 0x75db4292
cmp dword [esi + 0x28], 0
je 0x75db41ad
movzx ecx, word [esi + 0x56]
test cx, cx
je 0x75db41a3
cmp word [esi + 0x7a], 0
jne 0x75db41ad
cmp cx, word [esi + 0x7a]
jne 0x75db5aff
mov ecx, dword [esi + 0x48]
lea edx, [esi + 0x38]
mov eax, 0xdb40
cmp word [ecx], ax
jne 0x75db421a
mov eax, dword [edx + 0x14]
add ecx, 2
test eax, eax
jle 0x75db41ce
movzx eax, word [esi + eax*2 + 0x42]
jmp 0x75db41d6
cmp ecx, dword [edx + 4]
jae 0x75db421a
movzx eax, word [ecx]
add eax, 0x2300
cmp ax, word [ebp - 0xa8]
ja 0x75db421a
mov esi, dword [ebp - 0xa4]
mov eax, dword [esi + 0x14]
mov esi, dword [ebp - 0x58]
test eax, eax
jle 0x75db4203
dec eax
mov dword [esi + 0x4c], eax
mov ax, word [esi + eax*2 + 0x44]
mov word [esi + 0x56], ax
jmp 0x75db421a
mov dword [esi + 0x48], ecx
cmp ecx, dword [edx + 4]
jae 0x75db4214
mov ax, word [ecx]
mov word [esi + 0x56], ax
jmp 0x75db421a
xor ecx, ecx
mov word [esi + 0x56], cx
mov ecx, dword [ebx + 0x10]
mov edx, 0xdb40
cmp word [ecx], dx
jne 0x75db577f
mov eax, dword [ebx + 0x14]
add ecx, 2
test eax, eax
jle 0x75db423c
movzx eax, word [ebx + eax*2 + 0xa]
jmp 0x75db4248
cmp ecx, dword [ebx + 4]
jae 0x75db577f
movzx eax, word [ecx]
add eax, 0x2300
cmp ax, word [ebp - 0xa8]
ja 0x75db577f
mov eax, dword [ebx + 0x14]
test eax, eax
jle 0x75db4273
dec eax
mov dword [ebx + 0x14], eax
mov ax, word [ebx + eax*2 + 0xc]
mov word [ebx + 0x1e], ax
jmp 0x75db577f
mov dword [ebx + 0x10], ecx
cmp ecx, dword [ebx + 4]
jae 0x75db4287
mov ax, word [ecx]
mov word [ebx + 0x1e], ax
jmp 0x75db577f
xor eax, eax
mov word [ebx + 0x1e], ax
jmp 0x75db577f
mov ecx, dword [ebp - 0x88]
mov edx, dword [ebp - 0x60]
cmp cx, dx
mov word [esi + 0x54], cx
mov ecx, dword [ebp - 0x94]
mov word [esi + 0x78], dx
jne 0x75db42c9
cmp cl, 0xc
ja 0x75db513a
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x4c], eax
cmp cl, 2
jb 0x75db513a
cmp cl, 0xc
ja case.0x75db42e5.3
movzx eax, cl
cmp eax, 0xc
ja case.0x75db42e5.3
movzx eax, byte [eax + 0x75db5b58]
jmp dword [eax*4 + 0x75db5b3c]
cmp word [esi + 0x56], 0
lea ecx, [esi + 0x38]
jne 0x75db4300
cmp dword [esi + 0x28], 0
jne case.0x75db42e5.3
mov edx, dword [ecx + 0x10]
mov eax, 0xdb40
cmp word [edx], ax
jne 0x75db438a
mov eax, dword [ecx + 0x14]
add edx, 2
test eax, eax
jle 0x75db4322
movzx eax, word [ecx + eax*2 + 0xa]
jmp 0x75db432a
cmp edx, dword [ecx + 4]
jae 0x75db438a
movzx eax, word [edx]
add eax, 0x2300
cmp ax, word [ebp - 0xa8]
ja 0x75db438a
mov eax, dword [ecx + 0x14]
test eax, eax
jle 0x75db434e
dec eax
mov dword [ecx + 0x14], eax
mov ax, word [ecx + eax*2 + 0xc]
mov word [ecx + 0x1e], ax
jmp 0x75db438a
mov dword [ecx + 0x10], edx
cmp edx, dword [ecx + 4]
jae 0x75db435f
mov ax, word [edx]
mov word [ecx + 0x1e], ax
jmp 0x75db438a
xor eax, eax
mov word [ecx + 0x1e], ax
jmp 0x75db438a
mov ecx, dword [esi + 4]
lea edx, [esi + 0x38]
call fcn.75ded619
jmp case.0x75db42e5.3
cmp dword [esi + 0x10], 0
jne 0x75db4387
cmp dword [esi + 0x1c], 0
je case.0x75db42e5.3
lea ecx, [esi + 0x38]
mov dword [esi + 0x50], reloc.ntdll.dll_NtClose
mov eax, dword [ecx + 0x14]
test eax, eax
jle 0x75db441a
dec eax
mov dword [ecx + 0x14], eax
mov ax, word [ecx + eax*2 + 0xc]
jmp 0x75db442f
mov eax, dword [esi + 0xc]
jmp 0x75db43b2
mov eax, dword [esi + 0x14]
test eax, eax
je case.0x75db42e5.3
jmp 0x75db4387
cmp dword [esi + 4], 0
je 0x75db43de
movzx eax, word [esi + 0x56]
mov ecx, eax
movzx edx, al
mov eax, dword [esi + 4]
shr ecx, 8
add edx, dword [eax + ecx*4]
mov eax, dword [0x75e50860]
mov edx, dword [eax + edx*4]
jmp 0x75db43ea
movzx ecx, word [esi + 0x56]
mov eax, dword [0x75e50860]
mov edx, dword [eax + ecx*4]
lea ecx, [esi + 0x38]
mov dword [ecx + 0x18], edx
mov eax, dword [0x75e50868]
shr edx, 0x10
movzx eax, word [eax + edx*4]
mov word [ecx + 0xe], ax
mov eax, dword [0x75e50868]
movzx eax, word [eax + edx*4 + 2]
mov word [ecx + 0xc], ax
mov dword [ecx + 0x14], 2
jmp 0x75db438a
mov eax, dword [ecx + 0x10]
add eax, 2
mov dword [ecx + 0x10], eax
cmp eax, dword [ecx + 4]
jae 0x75db442d
mov ax, word [eax]
jmp 0x75db442f
xor eax, eax
mov word [ecx + 0x1e], ax
mov eax, dword [ebp - 0x44]
cmp al, 0xc
ja case.0x75db4451.3
movzx eax, al
cmp eax, 0xc
ja case.0x75db4451.3
movzx eax, byte [eax + 0x75db5b84]
jmp dword [eax*4 + 0x75db5b68]
cmp word [ebx + 0x1e], 0
jne 0x75db4469
cmp dword [esi + 0x28], 0
jne case.0x75db4451.3
mov ecx, dword [ebx + 0x10]
mov eax, 0xdb40
cmp word [ecx], ax
jne 0x75db45ac
mov edx, dword [ebx + 0x14]
add ecx, 2
test edx, edx
jle 0x75db448b
movzx eax, word [ebx + edx*2 + 0xa]
jmp 0x75db4497
cmp ecx, dword [ebx + 4]
jae 0x75db45ac
movzx eax, word [ecx]
add eax, 0x2300
cmp ax, word [ebp - 0xa8]
ja 0x75db45ac
test edx, edx
jle 0x75db44c1
lea eax, [edx - 1]
mov dword [ebx + 0x14], eax
mov ax, word [ebx + eax*2 + 0xc]
mov word [ebx + 0x1e], ax
jmp 0x75db45ac
mov dword [ebx + 0x10], ecx
cmp ecx, dword [ebx + 4]
jae 0x75db44d5
mov ax, word [ecx]
mov word [ebx + 0x1e], ax
jmp 0x75db45ac
xor eax, eax
mov word [ebx + 0x1e], ax
jmp 0x75db45ac
mov ecx, dword [esi + 4]
mov edx, ebx
call fcn.75ded619
mov edx, dword [ebp - 8]
mov eax, dword [esi + 0x50]
mov ecx, eax
shr ecx, 0x10
mov dword [ebp - 0x88], ecx
cmp eax, reloc.ntdll.dll_NtClose
je 0x75db096c
mov ecx, dword [esi + 0x74]
mov dword [ebp - 4], ecx
shr dword [ebp - 4], 0x10
cmp ecx, reloc.ntdll.dll_NtClose
je 0x75db096c
mov edx, dword [ebp - 0x94]
movzx edx, dl
cmp edx, 6
ja case.0x75db4533.2
dec edx
cmp edx, 5
ja case.0x75db4533.2
jmp dword [edx*4 + 0x75db5b94]
cmp dword [esi + 0x10], 0
jne 0x75db45ac
cmp dword [esi + 0x1c], 0
jne 0x75db45ac
jmp case.0x75db4451.3
mov eax, dword [esi + 0xc]
jmp 0x75db4550
mov eax, dword [esi + 0x14]
test eax, eax
je case.0x75db4451.3
jmp 0x75db45ac
cmp dword [esi + 4], 0
je 0x75db4578
movzx eax, word [ebx + 0x1e]
mov ecx, eax
movzx edx, al
mov eax, dword [esi + 4]
shr ecx, 8
add edx, dword [eax + ecx*4]
mov eax, dword [0x75e50860]
mov ecx, dword [eax + edx*4]
jmp 0x75db4584
movzx ecx, word [ebx + 0x1e]
mov eax, dword [0x75e50860]
mov ecx, dword [eax + ecx*4]
mov dword [ebx + 0x18], ecx
mov eax, dword [0x75e50868]
shr ecx, 0x10
movzx eax, word [eax + ecx*4]
mov word [ebx + 0xe], ax
mov eax, dword [0x75e50868]
movzx eax, word [eax + ecx*4 + 2]
mov word [ebx + 0xc], ax
mov dword [ebx + 0x14], 2
mov edx, dword [ebp - 8]
mov dword [esi + 0x74], reloc.ntdll.dll_NtClose
mov eax, dword [edx + 0x14]
test eax, eax
jle 0x75db45cf
dec eax
mov dword [edx + 0x14], eax
mov ax, word [edx + eax*2 + 0xc]
mov word [edx + 0x1e], ax
jmp 0x75db44ed
mov eax, dword [edx + 0x10]
add eax, 2
mov dword [edx + 0x10], eax
cmp eax, dword [edx + 4]
jae 0x75db45e9
mov ax, word [eax]
mov word [edx + 0x1e], ax
jmp 0x75db44ed
xor eax, eax
mov word [edx + 0x1e], ax
jmp 0x75db44ed
mov eax, dword [esi + 0x80]
test al, 3
je 0x75db461d
cmp dword [esi + 0x24], 0
jne case.0x75db59bb.2
and eax, 0xffffff0a
mov dword [esi + 0x84], 3
mov dword [esi + 0x80], eax
mov eax, dword [esi + 0x4c]
lea edx, [esi + 0x38]
test eax, eax
jle 0x75db4640
dec eax
mov dword [edx + 0x14], eax
movzx eax, word [edx + eax*2 + 0xc]
mov word [edx + 0x1e], ax
mov dword [esi + 0x50], reloc.ntdll.dll_NtClose
jmp 0x75db4a6e
mov eax, dword [edx + 0x10]
add eax, 2
mov dword [edx + 0x10], eax
cmp eax, dword [edx + 4]
jae 0x75db4661
movzx eax, word [eax]
mov word [edx + 0x1e], ax
mov dword [esi + 0x50], reloc.ntdll.dll_NtClose
jmp 0x75db4a6e
xor eax, eax
mov word [edx + 0x1e], ax
mov dword [esi + 0x50], reloc.ntdll.dll_NtClose
jmp 0x75db4a6e
cmp dword [esi + 8], 0
jne case.0x75db4533.2
cmp byte [ebp - 0x44], 6
je case.0x75db4533.2
cmp dword [esi + 0x24], 0
jne case.0x75db59bb.2
mov dword [esi + 0x88], 3
mov dword [esi + 0xc], 1
jmp 0x75db461d
mov ah, byte [esi + 0x50]
lea edx, [esi + 0x38]
mov al, byte [edx + 0x1b]
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x69], ah
mov byte [ebp - 0x79], al
mov dword [edx + 0x20], 0
cmp ah, 1
ja 0x75db4918
mov ecx, dword [edx + 0x10]
mov edx, dword [edx]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], edx
lea eax, [ecx - 4]
cmp eax, edx
jb 0x75db470b
mov eax, 0xdb40
cmp word [ecx - 4], ax
jne 0x75db470b
mov eax, 0x2300
add ax, word [ecx - 2]
mov ecx, 0xef
cmp ax, cx
ja 0x75db470b
mov ecx, 4
mov dword [ebp - 0x2c], 8
jmp 0x75db4717
mov ecx, 2
mov dword [ebp - 0x2c], 6
mov eax, dword [ebp - 0x34]
mov edx, 0xffff
sub eax, ecx
mov dword [ebp - 0x64], eax
cmp eax, dword [ebp - 4]
jb 0x75db4871
mov eax, dword [esi + 4]
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x88], eax
mov eax, edx
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x48], eax
sub edx, ecx
cmp dword [esi + 4], 0
movzx edx, word [edx]
je 0x75db476f
mov eax, dword [ebp - 0x64]
mov esi, dword [ebp - 0x88]
shr edx, 8
movzx eax, word [eax]
movzx eax, al
add eax, dword [esi + edx*4]
mov edx, dword [0x75e50860]
mov esi, dword [ebp - 0x58]
mov edx, dword [edx + eax*4]
jmp 0x75db4777
mov eax, dword [0x75e50860]
mov edx, dword [eax + edx*4]
and edx, dword [esi + 0x34]
mov eax, edx
mov dword [ebp - 0x30], edx
shr eax, 8
cmp al, 3
jae 0x75db47d2
cmp al, 2
je 0x75db4803
mov eax, dword [ebp - 0x34]
sub eax, ecx
sub eax, 4
cmp eax, dword [ebp - 4]
mov eax, dword [ebp - 0x48]
jb 0x75db47ca
mov edx, 0xdb40
cmp word [eax], dx
jne 0x75db47ca
mov edx, dword [ebp - 0x64]
mov eax, 0x2300
add ax, word [edx - 2]
mov edx, 0xef
cmp ax, dx
ja 0x75db47c7
sub dword [ebp - 0x48], 4
add ecx, 4
sub dword [ebp - 0x64], 4
jmp 0x75db47e8
mov eax, dword [ebp - 0x48]
sub eax, 2
mov dword [ebp - 0x48], eax
jmp 0x75db47e1
jne 0x75db4869
cmp dl, 1
ja 0x75db480a
sub dword [ebp - 0x48], 2
add ecx, 2
sub dword [ebp - 0x64], 2
mov eax, dword [esi + 0x48]
mov edx, 0xffff
sub eax, ecx
cmp eax, dword [ebp - 4]
jb 0x75db4871
mov edx, dword [ebp - 0x34]
jmp 0x75db4741
mov edx, 0xffff
jmp 0x75db4871
movzx eax, dl
mov ecx, 0x2200
mov dl, byte [ebp - 0x2d]
or ax, cx
mov dword [ebp - 4], eax
and dl, 0x3f
mov word [ebp - 0x30], ax
mov al, dl
and al, 0xc6
mov byte [esi + 0x58], al
mov al, dl
and al, 0xe4
cmp byte [ebp - 0x69], 0
mov byte [esi + 0x5a], al
mov eax, dword [ebp - 4]
jne 0x75db484d
mov word [esi + 0x54], ax
and dl, 0xc5
mov al, 4
mov byte [esi + 0x59], al
mov byte [esi + 0x5b], dl
mov edx, dword [ebp - 0x30]
jmp 0x75db4871
mov dl, byte [ebp - 0x79]
and eax, 0xff87
mov word [esi + 0x54], ax
and dl, 5
mov al, 5
mov byte [esi + 0x59], al
mov byte [esi + 0x5b], dl
mov edx, dword [ebp - 0x30]
jmp 0x75db4871
mov ax, word [ebp - 0x30]
mov word [esi + 0x54], ax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x3c], edi
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0x20], edi
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0x2c], edi
mov edi, dword [ebp - 0x10]
mov dword [ebp - 4], edi
lea edi, [esi + 0x54]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x34], edi
mov edi, dword [ebp - 4]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x10], edi
mov edi, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x18], edi
mov edi, dword [ebp - 0x3c]
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], ecx
cmp edx, 0xffff
jne 0x75db4949
mov edx, dword [ebp - 0x34]
mov edi, 0xffff
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x1c]
mov dword [esi + 0x50], edi
mov word [edx], di
mov edx, dword [ebp - 4]
mov edi, dword [ebp - 0x3c]
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], edx
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x20], edx
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x14], edx
lea edx, [esi + 0x38]
mov dword [esi + 0x58], 0
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x1c], eax
jmp 0x75db495a
mov ecx, dword [ebp - 0xc]
movzx eax, ah
or ax, word [ebp - 0xac]
mov word [edx + 0x1c], ax
mov ah, byte [ebp - 0x79]
mov al, ah
mov byte [edx + 0x21], 3
and al, 6
mov byte [edx + 0x20], al
mov al, ah
and al, 0x24
and ah, 5
mov byte [edx + 0x22], al
mov byte [edx + 0x23], ah
lea eax, [edx + 0x1c]
jmp 0x75db494f
mov eax, dword [ebp - 0x34]
lea edx, [esi + 0x38]
mov ax, word [eax]
mov word [edx + 0x18], ax
mov byte [edx + 0x1b], 2
mov eax, dword [ebp - 0x44]
cmp al, 6
jne 0x75db4979
cmp dword [esi + 8], 0
jne 0x75db4981
cmp dword [esi + 0xc], 0
jne 0x75db4981
mov dword [esi + 0x50], reloc.ntdll.dll_NtClose
jmp 0x75db4a74
cmp al, 3
je 0x75db4a74
cmp dword [esi + 0x58], 0
je 0x75db4a74
cmp dword [esi + 0x24], 0
jne case.0x75db59bb.2
mov eax, dword [esi + 0x80]
test al, 0xf0
je 0x75db4a71
and eax, 0xffffff0f
mov dword [esi + 0x84], 3
mov dword [esi + 0x80], eax
jmp 0x75db4a71
lea edx, [esi + 0x38]
cmp eax, ecx
jne 0x75db4a2a
mov eax, dword [edx + 0x14]
test eax, eax
jle 0x75db49d6
dec eax
mov dword [edx + 0x14], eax
movzx eax, word [edx + eax*2 + 0xc]
jmp 0x75db49eb
mov eax, dword [edx + 0x10]
add eax, 2
mov dword [edx + 0x10], eax
cmp eax, dword [edx + 4]
jae 0x75db49e9
movzx eax, word [eax]
jmp 0x75db49eb
xor eax, eax
mov word [edx + 0x1e], ax
mov eax, dword [ebx + 0x14]
test eax, eax
jle 0x75db4a01
dec eax
mov dword [ebx + 0x14], eax
movzx eax, word [ebx + eax*2 + 0xc]
jmp 0x75db4a16
mov eax, dword [ebx + 0x10]
add eax, 2
mov dword [ebx + 0x10], eax
cmp eax, dword [ebx + 4]
jae 0x75db4a14
movzx eax, word [eax]
jmp 0x75db4a16
xor eax, eax
mov word [ebx + 0x1e], ax
mov dword [esi + 0x50], reloc.ntdll.dll_NtClose
mov dword [esi + 0x74], reloc.ntdll.dll_NtClose
jmp 0x75db4a6e
cmp byte [ebp - 0x44], 5
jne 0x75db4a60
movzx ecx, al
mov eax, dword [ebp - 0x88]
shl cx, 8
movzx eax, al
or cx, ax
mov eax, dword [esi + 0x74]
mov word [esi + 0x54], cx
movzx ecx, al
mov eax, dword [ebp - 4]
shl cx, 8
movzx eax, al
or cx, ax
mov word [esi + 0x78], cx
jmp 0x75db4a6e
mov eax, 0xfdff
mov word [esi + 0x54], ax
jmp 0x75db4a6e
lea edx, [esi + 0x38]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x44]
movzx eax, al
cmp eax, 6
ja case.0x75db4a8a.2
dec eax
cmp eax, 5
ja case.0x75db4a8a.2
jmp dword [eax*4 + 0x75db5bac]
mov eax, dword [esi + 0x80]
test al, 3
je 0x75db4aba
cmp dword [esi + 0x24], 0
jne case.0x75db59bb.2
and eax, 0xffffff0a
mov dword [esi + 0x84], 1
mov dword [esi + 0x80], eax
mov eax, dword [ebx + 0x14]
test eax, eax
jle 0x75db4ada
dec eax
mov dword [ebx + 0x14], eax
movzx eax, word [ebx + eax*2 + 0xc]
mov word [ebx + 0x1e], ax
mov dword [esi + 0x74], reloc.ntdll.dll_NtClose
jmp case.0x75db4a8a.2
mov eax, dword [ebx + 0x10]
add eax, 2
mov dword [ebx + 0x10], eax
cmp eax, dword [ebx + 4]
jae 0x75db4afb
movzx eax, word [eax]
mov word [ebx + 0x1e], ax
mov dword [esi + 0x74], reloc.ntdll.dll_NtClose
jmp case.0x75db4a8a.2
xor eax, eax
mov word [ebx + 0x1e], ax
mov dword [esi + 0x74], reloc.ntdll.dll_NtClose
jmp case.0x75db4a8a.2
cmp dword [esi + 8], 0
jne case.0x75db4a8a.2
cmp byte [ebp - 0x94], 6
je 0x75db4b40
cmp dword [esi + 0x24], 0
jne case.0x75db59bb.2
mov dword [esi + 0x88], 1
mov dword [esi + 0xc], 1
jmp 0x75db4c3a
mov al, byte [esi + 0x50]
mov cl, byte [esi + 0x74]
cmp al, cl
jne 0x75db4be7
cmp dword [esi + 0x1c], 0
lea eax, [esi + 0x51]
je 0x75db4b67
mov cl, byte [eax]
cmp cl, 0x14
jbe 0x75db4b63
cmp cl, 0x29
jne 0x75db4b67
mov cl, 2
jmp 0x75db4b6a
mov cl, byte [esi + 0x52]
cmp dword [esi + 0x18], 0
je 0x75db4b7e
mov al, byte [eax]
cmp al, 0x14
jbe 0x75db4b7a
cmp al, 0x29
jne 0x75db4b7e
mov al, 2
jmp 0x75db4b83
mov al, byte [esi + 0x53]
and al, 0x3f
shl cl, 3
add cl, al
cmp dword [esi + 0x1c], 0
lea eax, [esi + 0x75]
mov dword [ebp - 0x34], eax
je 0x75db4ba2
mov al, byte [eax]
cmp al, 0x14
jbe 0x75db4b9e
cmp al, 0x29
jne 0x75db4ba2
mov al, 2
jmp 0x75db4bae
mov edx, dword [ebp - 0x34]
mov al, byte [esi + 0x76]
mov dword [ebp - 0x34], edx
lea edx, [esi + 0x38]
cmp dword [esi + 0x18], 0
je 0x75db4bca
mov edx, dword [ebp - 0x34]
mov ah, byte [edx]
lea edx, [esi + 0x38]
cmp ah, 0x14
jbe 0x75db4bc6
cmp ah, 0x29
jne 0x75db4bca
mov ah, 2
jmp 0x75db4bd0
mov ah, byte [esi + 0x77]
and ah, 0x3f
shl al, 3
add al, ah
cmp cl, al
je 0x75db4c08
cmp dword [esi + 0x24], 0
jne case.0x75db59bb.2
cmp cl, al
jmp 0x75db4bf3
cmp dword [esi + 0x24], 0
jne case.0x75db59bb.2
cmp al, cl
sbb eax, eax
mov dword [esi + 0xc], 1
and eax, 0xfffffffe
add eax, 3
mov dword [esi + 0x88], eax
mov eax, dword [edx + 0x14]
test eax, eax
jle 0x75db4c1a
dec eax
mov dword [edx + 0x14], eax
movzx eax, word [edx + eax*2 + 0xc]
jmp 0x75db4c2f
mov eax, dword [edx + 0x10]
add eax, 2
mov dword [edx + 0x10], eax
cmp eax, dword [edx + 4]
jae 0x75db4c2d
movzx eax, word [eax]
jmp 0x75db4c2f
xor eax, eax
mov word [edx + 0x1e], ax
mov dword [esi + 0x50], reloc.ntdll.dll_NtClose
mov eax, dword [ebx + 0x14]
test eax, eax
jle 0x75db4ada
dec eax
mov dword [ebx + 0x14], eax
movzx eax, word [ebx + eax*2 + 0xc]
mov word [ebx + 0x1e], ax
mov dword [esi + 0x74], reloc.ntdll.dll_NtClose
jmp case.0x75db4a8a.2
mov edx, dword [ebp - 8]
mov dword [edx + 0x20], 0
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x30], 0
lea eax, [edx + 0x18]
mov dword [ebp - 0x40], eax
mov al, byte [eax]
mov byte [ebp - 0x79], al
lea eax, [edx + 0x1b]
mov dword [ebp - 0x38], eax
mov al, byte [eax]
mov byte [ebp - 0x69], al
lea eax, [edx + 0x20]
mov dword [ebp - 0x2c], eax
mov al, byte [ebp - 0x79]
cmp al, 1
ja 0x75db4f1c
mov esi, dword [edx + 0x10]
mov edx, dword [edx]
mov dword [ebp - 0x34], esi
mov dword [ebp - 4], edx
lea eax, [esi - 4]
cmp eax, edx
jb 0x75db4cd7
mov eax, 0xdb40
cmp word [esi - 4], ax
jne 0x75db4cd7
mov eax, 0x2300
mov edx, 0xef
add ax, word [esi - 2]
cmp ax, dx
ja 0x75db4cd7
mov eax, 4
mov dword [ebp - 0x3c], 8
jmp 0x75db4ce3
mov eax, 2
mov dword [ebp - 0x3c], 6
sub esi, eax
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 4]
mov edx, 0xffff
mov dword [ebp - 0x48], esi
cmp esi, eax
mov esi, dword [ebp - 0x58]
jb 0x75db4e74
mov eax, dword [esi + 4]
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x88], eax
mov eax, edx
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x64], eax
sub edx, dword [ebp - 0x54]
cmp dword [esi + 4], 0
movzx edx, word [edx]
je 0x75db4d41
mov eax, dword [ebp - 0x48]
mov esi, dword [ebp - 0x88]
shr edx, 8
movzx eax, word [eax]
movzx eax, al
add eax, dword [esi + edx*4]
mov edx, dword [0x75e50860]
mov esi, dword [ebp - 0x58]
mov edx, dword [edx + eax*4]
jmp 0x75db4d49
mov eax, dword [0x75e50860]
mov edx, dword [eax + edx*4]
and edx, dword [esi + 0x34]
mov eax, edx
mov dword [ebp - 0x30], edx
shr eax, 8
cmp al, 3
jae 0x75db4dbe
cmp al, 2
je 0x75db4df1
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x54]
sub eax, edx
sub eax, 4
cmp eax, dword [ebp - 4]
mov eax, dword [ebp - 0x64]
jb 0x75db4dac
mov esi, 0xdb40
cmp word [eax], si
mov esi, dword [ebp - 0x58]
jne 0x75db4dac
mov esi, dword [ebp - 0x48]
mov eax, 0x2300
add ax, word [esi - 2]
mov esi, 0xef
cmp ax, si
mov esi, dword [ebp - 0x58]
ja 0x75db4da9
sub dword [ebp - 0x64], 4
add edx, 4
sub dword [ebp - 0x48], 4
mov dword [ebp - 0x54], edx
jmp 0x75db4dd5
mov eax, dword [ebp - 0x64]
add edx, 2
sub eax, 2
sub dword [ebp - 0x48], 2
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x54], edx
jmp 0x75db4dd5
jne 0x75db4e66
cmp dl, 1
ja 0x75db4dfb
add dword [ebp - 0x54], 2
sub dword [ebp - 0x64], 2
sub dword [ebp - 0x48], 2
mov eax, dword [ebp - 0x34]
mov edx, 0xffff
sub eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 4]
jb 0x75db4e74
mov edx, dword [ebp - 0x34]
jmp 0x75db4d12
mov edx, 0xffff
jmp 0x75db4e74
movzx eax, dl
mov edx, 0x2200
or ax, dx
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 4], eax
mov word [ebp - 0x30], ax
mov ah, byte [ebp - 0x2d]
and ah, 0x3f
mov al, ah
and al, 0xc6
mov byte [edx], al
mov al, ah
mov edx, dword [ebp - 8]
and al, 0xe4
mov byte [edx + 0x22], al
mov al, byte [ebp - 0x79]
test al, al
jne 0x75db4e47
mov esi, dword [ebp - 4]
mov al, 4
mov word [edx + 0x1c], si
and ah, 0xc5
mov esi, dword [ebp - 0x58]
mov byte [edx + 0x21], al
mov byte [edx + 0x23], ah
mov edx, dword [ebp - 0x30]
jmp 0x75db4e74
mov eax, dword [ebp - 4]
and eax, 0xff87
mov word [edx + 0x1c], ax
mov al, 5
mov ah, byte [ebp - 0x69]
and ah, 5
mov byte [edx + 0x21], al
mov byte [edx + 0x23], ah
mov edx, dword [ebp - 0x30]
jmp 0x75db4e74
mov esi, dword [ebp - 8]
mov ax, word [ebp - 0x30]
mov word [esi + 0x1c], ax
mov esi, dword [ebp - 0x58]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x34], edi
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0x20], edi
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0x3c], edi
mov edi, dword [ebp - 0x10]
mov dword [ebp - 4], edi
mov edi, dword [ebp - 0x60]
mov dword [ebp - 0x1c], eax
add edi, 0x1c
mov eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x30], edi
mov edi, dword [ebp - 4]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], edi
mov edi, dword [ebp - 0x3c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], edi
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0xc], ecx
cmp edx, 0xffff
jne 0x75db4f50
mov edx, dword [ebp - 0x30]
mov edi, 0xffff
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
mov word [edx], di
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xc], ecx
mov dword [edx], edi
mov edx, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x1c], eax
mov dword [edx], 0
mov edx, dword [ebp - 4]
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x18], edx
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x20], edx
mov edx, dword [ebp - 8]
mov dword [ebp - 8], edx
jmp 0x75db4f65
movzx eax, al
mov esi, 0x2200
or ax, si
mov byte [edx + 0x21], 3
mov esi, dword [ebp - 0x2c]
mov word [edx + 0x1c], ax
mov ah, byte [ebp - 0x69]
mov al, ah
and al, 6
mov byte [esi], al
mov al, ah
mov esi, dword [ebp - 0x58]
and al, 0x24
and ah, 5
mov byte [edx + 0x22], al
mov byte [edx + 0x23], ah
lea eax, [edx + 0x1c]
jmp 0x75db4f56
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x40]
mov ax, word [eax]
mov word [ecx], ax
mov eax, dword [ebp - 0x38]
mov byte [eax], 2
mov eax, dword [ebp - 0x94]
cmp al, 6
jne 0x75db4f87
cmp dword [esi + 8], 0
jne 0x75db4f87
cmp dword [esi + 0x50], reloc.ntdll.dll_NtClose
jne 0x75db4f87
mov dword [esi + 0x74], reloc.ntdll.dll_NtClose
jmp 0x75db50c2
mov ecx, dword [esi + 0x7c]
cmp al, 3
je 0x75db4fc8
test ecx, ecx
je 0x75db50c2
cmp dword [esi + 0x24], 0
jne case.0x75db59bb.2
mov eax, dword [esi + 0x80]
test al, 0xf0
je 0x75db50c2
and eax, 0xffffff0f
mov dword [esi + 0x84], 1
mov dword [esi + 0x80], eax
jmp 0x75db50c2
mov eax, dword [esi + 0x58]
mov dword [ebp - 0x3c], eax
shr dword [ebp - 0x3c], 0x18
mov dword [ebp - 0x2c], eax
shr dword [ebp - 0x2c], 0x10
mov dword [ebp - 4], eax
shr dword [ebp - 4], 8
cmp eax, ecx
je 0x75db50c2
cmp dword [esi + 0x24], 0
jne case.0x75db59bb.2
mov ecx, dword [esi + 0x80]
test cl, 0x10
je 0x75db5021
cmp al, byte [esi + 0x7c]
je 0x75db5021
sbb eax, eax
and eax, 0xfffffffe
add eax, 3
and ecx, 0xffffff0f
mov dword [esi + 0x84], eax
mov dword [esi + 0x80], ecx
jmp 0x75db50c2
test cl, 0x20
je 0x75db5050
mov al, byte [esi + 0x7d]
mov byte [ebp - 0x69], al
mov eax, dword [ebp - 4]
cmp al, byte [ebp - 0x69]
je 0x75db5050
sbb eax, eax
and eax, 0xfffffffe
add eax, 3
and ecx, 0xffffff1f
mov dword [esi + 0x84], eax
mov dword [esi + 0x80], ecx
jmp 0x75db50c2
test cl, 0x40
je 0x75db507f
mov al, byte [esi + 0x7e]
mov byte [ebp - 0x69], al
mov eax, dword [ebp - 0x2c]
cmp al, byte [ebp - 0x69]
je 0x75db507f
sbb eax, eax
and eax, 0xfffffffe
add eax, 3
and ecx, 0xffffff3f
mov dword [esi + 0x84], eax
mov dword [esi + 0x80], ecx
jmp 0x75db50c2
test cl, cl
jns 0x75db50c2
mov al, byte [esi + 0x7f]
mov byte [ebp - 0x69], al
mov eax, dword [ebp - 0x3c]
cmp al, byte [ebp - 0x69]
je 0x75db50c2
sbb eax, eax
and eax, 0xfffffffe
add eax, 3
and ecx, 0xffffff7f
mov dword [esi + 0x84], eax
mov dword [esi + 0x80], ecx
jmp 0x75db50c2
cmp byte [ebp - 0x94], 5
je case.0x75db4a8a.2
mov eax, 0xfdff
mov word [esi + 0x78], ax
mov edx, dword [ebp - 8]
mov ecx, dword [esi + 0x50]
shr ecx, 0x10
cmp dword [esi + 0x50], 0xffffffff
mov dword [ebp - 4], ecx
je 0x75db096c
mov ecx, dword [esi + 0x74]
shr ecx, 0x10
cmp dword [esi + 0x74], 0xffffffff
mov dword [ebp - 0x88], ecx
je 0x75db096c
movzx eax, word [esi + 0x54]
movzx ecx, word [esi + 0x78]
cmp ax, cx
jne 0x75db512b
cmp byte [ebp - 0x94], 4
mov ecx, dword [ebp - 4]
mov edx, ecx
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x74], ecx
mov byte [ebp - 0x4c], al
jne 0x75db513d
cmp byte [ebp - 0x44], 4
mov cl, dl
mov byte [ebp - 0x4c], al
jne 0x75db514d
mov byte [ebp - 0x4c], al
mov eax, dword [esi + 0x58]
mov dword [ebp - 0x74], ecx
cmp eax, dword [esi + 0x7c]
je 0x75db513d
sbb eax, eax
and eax, 0xfffffffe
add eax, 3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x74]
mov al, byte [ebp - 0x94]
add al, 0x57
cmp al, 6
jbe 0x75db51fc
cmp dword [esi + 0x30], 0
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 0x79], al
mov al, cl
mov cl, byte [ebp - 0x79]
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0xc], edx
mov byte [ebp - 0x69], al
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x18], ecx
je 0x75db520d
mov cl, byte [ebp - 0x79]
mov eax, dword [ebp - 0x94]
mov edi, dword [ebp - 4]
add al, 0x40
mov dword [ebp - 0x4c], ecx
cmp al, 0x2f
mov ecx, dword [ebp - 0x2c]
mov al, byte [ebp - 0x69]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 8]
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x10], edi
mov edi, dword [ebp - 0x3c]
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x74], eax
jbe 0x75db5202
jmp 0x75db520d
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x4c]
cmp al, cl
jne 0x75db512b
test byte [esi + 0x80], 3
je 0x75db5718
mov ecx, dword [esi + 0x1c]
test ecx, ecx
je 0x75db5250
mov cl, byte [esi + 0x51]
cmp cl, 0x14
jbe 0x75db522e
cmp cl, 0x29
jne 0x75db5235
mov al, 2
mov dword [ebp - 0x74], eax
jmp 0x75db523c
mov ecx, dword [esi + 0x1c]
test ecx, ecx
je 0x75db5250
mov cl, byte [esi + 0x75]
cmp cl, 0x14
jbe 0x75db5249
cmp cl, 0x29
jne 0x75db5250
mov cl, 2
mov dword [ebp - 0x4c], ecx
jmp 0x75db5253
mov ecx, dword [ebp - 0x4c]
cmp al, cl
je 0x75db5718
xor cl, cl
mov byte [ebp - 0x79], cl
mov ecx, dword [ebp - 0xa4]
add ecx, 0x10
lea esp, [esp]
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x90], esi
mov esi, dword [ebp - 8]
mov dword [ebp - 0x30], edx
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x78], esi
mov esi, dword [ebp - 0x14]
mov dword [ebp - 0x34], edx
mov edx, dword [ebp - 0xa4]
mov dword [ebp - 0x50], esi
mov esi, dword [ebp - 0x28]
mov dword [ebp - 0x5c], esi
mov esi, dword [ebp - 0x24]
mov edx, dword [edx + 0x14]
mov dword [ebp - 0x38], esi
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x40], ecx
test edx, edx
jne 0x75db52cd
cmp dword [esi + 0x40], 0
je 0x75db52c2
mov eax, dword [ecx]
cmp word [eax], 0
je 0x75db54be
mov eax, dword [ecx]
cmp eax, dword [esi + 0x3c]
jae 0x75db54be
mov eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x78]
mov ebx, dword [ebp - 0x68]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 8], edx
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x20], eax
mov eax, dword [esi + 4]
test eax, eax
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0xc], edx
je 0x75db53d8
cmp dword [esi + 0x4c], 0
jle 0x75db5347
mov esi, dword [ebp - 0xa4]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov ecx, dword [esi + 0x14]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
movzx esi, word [esi + ecx*2 + 0xa]
mov dword [ebp - 4], esi
mov esi, dword [ebp - 0xa4]
movzx ecx, word [esi + ecx*2 + 0xa]
mov dword [ebp - 0x2c], ecx
jmp 0x75db53b2
mov eax, dword [ecx]
mov edx, dword [ebp - 0x30]
add eax, 2
mov ebx, dword [ebp - 0x68]
mov dword [ebp - 0xc], edx
cmp eax, dword [esi + 0x3c]
jae 0x75db536b
movzx eax, word [eax]
mov dword [ebp - 4], eax
mov eax, dword [ecx]
movzx eax, word [eax + 2]
mov dword [ebp - 0x2c], eax
jmp 0x75db5379
mov dword [ebp - 4], 0
mov dword [ebp - 0x2c], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 0x88]
movzx ecx, ax
mov eax, dword [ebp - 0x2c]
shr ecx, 8
movzx eax, al
add eax, dword [esi + ecx*4]
mov ecx, dword [0x75e50860]
mov esi, dword [ebp - 0x58]
mov eax, dword [ecx + eax*4]
jmp 0x75db5445
mov eax, dword [esi + 0x4c]
test eax, eax
jle 0x75db53e6
movzx eax, word [esi + eax*2 + 0x42]
jmp 0x75db53f7
mov eax, dword [ecx]
add eax, 2
cmp eax, dword [esi + 0x3c]
jae 0x75db53f5
movzx eax, word [eax]
jmp 0x75db53f7
xor eax, eax
mov ecx, dword [0x75e50860]
mov edx, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x68]
movzx eax, ax
mov dword [ebp - 0xc], edx
mov eax, dword [ecx + eax*4]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x74], ecx
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x1c], ecx
mov ecx, eax
shr ecx, 8
cmp cl, 1
jne 0x75db54be
mov esi, dword [ebp - 0xa4]
mov ecx, dword [esi + 0x14]
mov esi, dword [ebp - 0x58]
test ecx, ecx
jle 0x75db5470
dec ecx
mov dword [esi + 0x4c], ecx
movzx ecx, word [esi + ecx*2 + 0x44]
mov dword [ebp - 4], ecx
lea ecx, [esi + 0x48]
jmp 0x75db54a0
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ecx]
add ecx, 2
mov dword [ebp - 4], ecx
mov ecx, dword [ebp - 0x40]
mov esi, dword [ebp - 4]
mov dword [ecx], esi
mov ecx, dword [ebp - 0xa4]
cmp esi, dword [ecx + 4]
mov ecx, dword [ebp - 0x40]
jae 0x75db5499
movzx esi, word [esi]
mov dword [ebp - 4], esi
jmp 0x75db54a3
mov dword [ebp - 4], 0
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebp - 0xa4]
mov esi, dword [ebp - 4]
shr eax, 0x10
add byte [ebp - 0x79], al
mov word [ecx + 0x1e], si
mov ecx, dword [ebp - 0x40]
jmp 0x75db5270
mov cl, byte [ebp - 0x79]
mov edx, ebx
add byte [ebp - 0x74], cl
xor al, al
mov byte [ebp - 0x79], al
lea ecx, [edx + 0x10]
mov dword [ebp - 0x68], ecx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x34], eax
mov eax, dword [edx + 0x14]
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x68], ecx
test eax, eax
jne 0x75db552d
cmp dword [edx + 8], eax
je 0x75db551f
mov eax, dword [ecx]
cmp word [eax], 0
je 0x75db56e7
mov eax, dword [ecx]
cmp eax, dword [edx + 4]
jae 0x75db56e7
mov eax, dword [edx + 0x14]
mov esi, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x78]
mov ebx, dword [ebp - 0x90]
mov dword [ebp - 8], esi
mov esi, dword [ebp - 0x40]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x24], esi
mov esi, dword [ebp - 0x30]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0xc], esi
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x20], ecx
cmp dword [esi + 4], 0
mov ecx, dword [ebp - 0x68]
je 0x75db5615
test eax, eax
jle 0x75db558c
movzx ecx, word [edx + eax*2 + 0xa]
movzx eax, word [edx + eax*2 + 0xa]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
jmp 0x75db55f5
mov eax, dword [ecx]
mov ebx, dword [ebp - 0x90]
add eax, 2
cmp eax, dword [edx + 4]
jae 0x75db55b6
movzx eax, word [eax]
mov dword [ebp - 0x88], eax
mov eax, dword [ecx]
mov ecx, dword [ebp - 0x88]
movzx eax, word [eax + 2]
mov dword [ebp - 4], eax
jmp 0x75db55bf
mov dword [ebp - 4], 0
xor ecx, ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x1c], eax
mov esi, dword [esi + 4]
mov eax, dword [ebp - 4]
movzx ecx, cx
shr ecx, 8
movzx eax, al
add eax, dword [esi + ecx*4]
mov ecx, dword [0x75e50860]
mov esi, dword [ebp - 0x58]
mov eax, dword [ecx + eax*4]
jmp 0x75db5679
test eax, eax
jle 0x75db5620
movzx eax, word [edx + eax*2 + 0xa]
jmp 0x75db5631
mov eax, dword [ecx]
add eax, 2
cmp eax, dword [edx + 4]
jae 0x75db562f
movzx eax, word [eax]
jmp 0x75db5631
xor eax, eax
mov ecx, dword [0x75e50860]
mov ebx, dword [ebp - 0x90]
movzx eax, ax
mov eax, dword [ecx + eax*4]
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0x1c], ecx
mov ecx, eax
shr ecx, 8
cmp cl, 1
jne 0x75db56e7
mov ecx, dword [edx + 0x14]
test ecx, ecx
jle 0x75db569b
dec ecx
mov dword [edx + 0x14], ecx
movzx ecx, word [edx + ecx*2 + 0xc]
mov dword [ebp - 4], ecx
lea ecx, [edx + 0x10]
jmp 0x75db56d2
mov ecx, dword [ebp - 0x68]
mov ecx, dword [ecx]
add ecx, 2
mov dword [ebp - 4], ecx
mov ecx, dword [ebp - 0x68]
mov esi, dword [ebp - 4]
cmp esi, dword [edx + 4]
mov dword [ecx], esi
mov esi, dword [ebp - 0x58]
jae 0x75db56cb
mov ecx, dword [ebp - 4]
shr eax, 0x10
add byte [ebp - 0x79], al
movzx ecx, word [ecx]
mov word [edx + 0x1e], cx
jmp 0x75db54d1
mov dword [ebp - 4], 0
mov dword [ebp - 0x68], ecx
mov ecx, dword [ebp - 4]
shr eax, 0x10
add byte [ebp - 0x79], al
mov word [edx + 0x1e], cx
jmp 0x75db54d1
mov ecx, dword [ebp - 0x4c]
add cl, byte [ebp - 0x79]
mov eax, dword [ebp - 0x74]
cmp al, cl
je 0x75db5718
cmp dword [esi + 0x24], 0
jne case.0x75db59bb.2
cmp al, cl
sbb eax, eax
and eax, 0xfffffffe
add eax, 3
mov dword [esi + 0x84], eax
and dword [esi + 0x80], 0xffffff0a
test byte [esi + 0x80], 4
je 0x75db577f
mov ecx, dword [esi + 0x18]
test ecx, ecx
je 0x75db5737
mov al, byte [esi + 0x51]
cmp al, 0x14
jbe 0x75db5733
cmp al, 0x29
jne 0x75db5737
mov al, 2
jmp 0x75db5740
mov al, byte [esi + 0x53]
and al, 0x3f
test ecx, ecx
je 0x75db5751
mov cl, byte [esi + 0x75]
cmp cl, 0x14
jbe 0x75db574d
cmp cl, 0x29
jne 0x75db5751
mov cl, 2
jmp 0x75db5757
mov cl, byte [esi + 0x77]
and cl, 0x3f
cmp al, cl
je 0x75db577f
cmp dword [esi + 0x24], 0
jne case.0x75db59bb.2
cmp al, cl
sbb eax, eax
and eax, 0xfffffffe
add eax, 3
mov dword [esi + 0x84], eax
and dword [esi + 0x80], 0xffffff0b
mov eax, dword [esi + 0x4c]
test eax, eax
jle 0x75db5791
dec eax
mov dword [esi + 0x4c], eax
movzx eax, word [esi + eax*2 + 0x44]
jmp 0x75db57a6
mov eax, dword [esi + 0x48]
add eax, 2
mov dword [esi + 0x48], eax
cmp eax, dword [esi + 0x3c]
jae 0x75db57a4
movzx eax, word [eax]
jmp 0x75db57a6
xor eax, eax
mov word [esi + 0x56], ax
mov eax, dword [ebx + 0x14]
test eax, eax
jle 0x75db57bc
dec eax
mov dword [ebx + 0x14], eax
movzx eax, word [ebx + eax*2 + 0xc]
jmp 0x75db57d1
mov eax, dword [ebx + 0x10]
add eax, 2
mov dword [ebx + 0x10], eax
cmp eax, dword [ebx + 4]
jae 0x75db57cf
movzx eax, word [eax]
jmp 0x75db57d1
xor eax, eax
mov edx, dword [ebp - 8]
mov word [ebx + 0x1e], ax
mov dword [esi + 0x50], reloc.ntdll.dll_NtClose
mov dword [esi + 0x74], reloc.ntdll.dll_NtClose
jmp 0x75db096c
mov ecx, dword [ebp - 0x18]
lea eax, [esi + 0x40]
mov edx, dword [ebp - 0x10]
jmp 0x75db0a19
cmp dword [esi + 0x28], 0
je 0x75db580c
movzx eax, word [ebx + 0x1e]
test ax, ax
je case.0x75db0aad.2
mov edi, dword [edx]
mov eax, 0xdb40
cmp word [edi], ax
jne 0x75db58b3
mov ecx, dword [ebx + 0x14]
add edi, 2
test ecx, ecx
jle 0x75db582d
movzx eax, word [ebx + ecx*2 + 0xa]
jmp 0x75db5839
cmp edi, dword [ebx + 4]
jae 0x75db58b3
movzx eax, word [edi]
add eax, 0x2300
cmp ax, word [ebp - 0xa8]
ja 0x75db58b3
test ecx, ecx
jle 0x75db585c
lea eax, [ecx - 1]
mov dword [ebx + 0x14], eax
mov ax, word [ebx + eax*2 + 0xc]
mov word [ebx + 0x1e], ax
jmp 0x75db58b3
mov dword [edx], edi
cmp edi, dword [ebx + 4]
jae 0x75db586c
mov ax, word [edi]
mov word [ebx + 0x1e], ax
jmp 0x75db58b3
xor eax, eax
mov word [ebx + 0x1e], ax
jmp 0x75db58b3
cmp dword [esi + 0x10], 0
jne 0x75db58b3
cmp dword [esi + 0x1c], 0
jne 0x75db58b3
test byte [esi + 0x80], 3
je 0x75db58b3
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [esi + 0xc], 0
jne 0x75db58b3
cmp dword [esi + 0x84], 0
jne 0x75db58b3
cmp dword [esi + 0x88], 0
jmp 0x75db58b1
cmp dword [esi + 0x14], 0
je case.0x75db0aad.2
mov eax, dword [ebx + 0x14]
test eax, eax
jle 0x75db58cf
dec eax
lea edx, [ebx + 0x10]
mov dword [ebx + 0x14], eax
movzx eax, word [ebx + eax*2 + 0xc]
mov word [ebx + 0x1e], ax
jmp 0x75db0a56
mov eax, dword [edx]
add eax, 2
mov dword [edx], eax
cmp eax, dword [ebx + 4]
jae 0x75db58e7
movzx eax, word [eax]
mov word [ebx + 0x1e], ax
jmp 0x75db0a56
xor eax, eax
mov word [ebx + 0x1e], ax
jmp 0x75db0a56
mov edi, dword [ebp - 4]
cmp dword [esi + 0x24], 0
je 0x75db595a
mov eax, dword [edi]
movzx ecx, word [esi + 0x56]
mov ebx, ecx
cmp cx, word [eax]
jne case.0x75db59bb.2
cmp dword [esi + 0x10], 0
jne 0x75db0790
cmp dword [esi + 0x1c], 0
jne 0x75db0790
test byte [esi + 0x80], 3
je 0x75db0790
mov edx, dword [esi + 4]
test edx, edx
je 0x75db593b
mov eax, ecx
movzx ecx, cl
shr eax, 8
add ecx, dword [edx + eax*4]
mov eax, dword [0x75e50860]
mov eax, dword [eax + ecx*4]
shr eax, 8
cmp al, 1
jne 0x75db0790
mov eax, 3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [esi + 0x38]
lea edx, [ecx + 0x10]
mov ebx, dword [ecx + 0x14]
test ebx, ebx
jne 0x75db5982
cmp dword [ecx + 8], ebx
je 0x75db5977
mov eax, dword [edx]
cmp word [eax], bx
je 0x75db0790
mov eax, dword [edx]
cmp eax, dword [ecx + 4]
jae 0x75db0790
movzx eax, word [ecx + 0x1e]
mov edi, dword [esi + 4]
mov dword [ebp - 0xac], eax
movzx ecx, ax
test edi, edi
je 0x75db59a1
mov eax, ecx
movzx ecx, cl
shr eax, 8
add ecx, dword [edi + eax*4]
mov eax, dword [0x75e50860]
mov eax, dword [eax + ecx*4]
shr eax, 8
movzx eax, al
cmp eax, 0xc
ja case.0x75db59bb.2
movzx eax, byte [eax + 0x75db5bd8]
jmp dword [eax*4 + 0x75db5bc4]
cmp dword [esi + 0x28], 0
je 0x75db59d6
cmp word [ebp - 0xac], 0
je case.0x75db59bb.2
mov edi, dword [edx]
mov eax, 0xdb40
cmp word [edi], ax
jne 0x75db5a7b
add edi, 2
lea ecx, [esi + 0x38]
test ebx, ebx
jle 0x75db59f7
movzx eax, word [ecx + ebx*2 + 0xa]
jmp 0x75db5a03
cmp edi, dword [ecx + 4]
jae 0x75db5a7b
movzx eax, word [edi]
add eax, 0x2300
cmp ax, word [ebp - 0xa8]
ja 0x75db5a7b
test ebx, ebx
jle 0x75db5a26
lea eax, [ebx - 1]
mov dword [ecx + 0x14], eax
mov ax, word [ecx + eax*2 + 0xc]
mov word [ecx + 0x1e], ax
jmp 0x75db5a7b
mov dword [edx], edi
cmp edi, dword [ecx + 4]
jae 0x75db5a36
mov ax, word [edi]
mov word [ecx + 0x1e], ax
jmp 0x75db5a7b
xor eax, eax
mov word [ecx + 0x1e], ax
jmp 0x75db5a7b
cmp dword [esi + 0x10], 0
jne 0x75db5a7b
cmp dword [esi + 0x1c], 0
jne 0x75db5a7b
test byte [esi + 0x80], 3
jne case.0x75db59bb.2
jmp 0x75db5a7b
cmp dword [esi + 0xc], 0
jne 0x75db5a7b
cmp dword [esi + 0x84], 0
jne 0x75db5a7b
cmp dword [esi + 0x88], 0
jmp 0x75db5a75
cmp dword [esi + 0x14], 0
je case.0x75db59bb.2
mov eax, dword [esi + 0x4c]
lea ecx, [esi + 0x38]
test eax, eax
jle 0x75db5a9a
dec eax
lea edx, [ecx + 0x10]
mov dword [ecx + 0x14], eax
movzx eax, word [ecx + eax*2 + 0xc]
mov word [ecx + 0x1e], ax
jmp 0x75db5960
mov eax, dword [edx]
add eax, 2
mov dword [edx], eax
cmp eax, dword [ecx + 4]
jae 0x75db5ab2
movzx eax, word [eax]
mov word [ecx + 0x1e], ax
jmp 0x75db5960
xor eax, eax
mov word [ecx + 0x1e], ax
jmp 0x75db5960
sar edx, 0x1f
and edx, 0xfffffffe
add edx, 3
mov eax, edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor edx, edx
cmp eax, dword [ebp - 0x40]
setl dl
lea edx, [edx*2 + 1]
mov eax, edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor edx, edx
cmp eax, dword [ebp - 0x50]
setge dl
lea edx, [edx*2 + 1]
mov eax, edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor eax, eax
test cx, cx
pop edi
setne al
pop esi
pop ebx
lea eax, [eax*2 + 1]
mov esp, ebp
pop ebp
ret