Function at 0x75b8f8
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffd5c
push ebx
push esi
push edi
mov dword [ebp - 4], ecx
mov esi, edx
mov ebx, eax
mov dword [ebp - 0x4c], 0xffffffff
xor eax, eax
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
cmp byte [eax + 0x101], 0
je 0x75ba22
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
cmp dword [eax + 0x19c], 0
je 0x75b949
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov eax, dword [eax + 0x19c]
mov dl, 1
call fcn.00874588
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
xor edx, edx
call fcn.007cf0a4
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov edi, dword [eax + 0x14]
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp + 0x2c]
push eax
mov eax, dword [ebp + 0x28]
push eax
push 1
movzx eax, byte [ebp + 0x20]
push eax
push 1
movzx eax, byte [ebp + 0x18]
push eax
movzx eax, byte [ebp + 0x14]
push eax
push 0
push 0xffffffffffffffff
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
movzx eax, byte [eax + 0x530]
push eax
mov ecx, dword [ebp - 4]
mov edx, esi
mov eax, ebx
call fcn.0075b8f8
push 0
push 0
mov eax, ebx
call fcn.00440558
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov dl, 1
call fcn.007cf0a4
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
cmp dword [eax + 0x19c], 0
je 0x75b9f1
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov eax, dword [eax + 0x19c]
call fcn.0087465c
test al, al
jne 0x75b9f1
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov edx, dword [eax + 0x19c]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
jmp 0x75c733
push 0
push 0
mov eax, ebx
call fcn.00440558
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov dword [eax + 0x14], edi
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x48]
mov dword [eax + 0x18], edx
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov dword [eax + 0x34], edi
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x48]
mov dword [eax + 0x38], edx
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 0xf8], edx
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 0xfc], edx
mov dl, 1
mov eax, ebx
call fcn.0075cd18
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0xffffffff
jne 0x75ba65
cmp dword [ebp - 0x30], 0xffffffff
jne 0x75ba65
mov eax, dword [ebp + 0x28]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
jmp 0x75c733
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
mov eax, ebx
call fcn.00440558
cmp byte [ebp + 0x10], 0
je 0x75ba84
mov edx, dword [ebp + 0x2c]
mov edx, dword [edx]
mov eax, ebx
call fcn.0075d958
mov eax, dword [ebp + 0x2c]
cmp dword [eax], 0
je 0x75baa4
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
cmp dword [eax + 0x5fc], 0
je 0x75baa4
mov eax, dword [0x8e645c]
cmp byte [eax], 0
jne 0x75baa8
xor eax, eax
jmp 0x75baaa
mov al, 1
mov byte [ebp - 0x41], al
xor edx, edx
push ebp
push 0x75c729
push dword fs:[edx]
mov dword fs:[edx], esp
xor eax, eax
mov dword [ebp - 0x14], eax
push esi
mov esi, 0x8cc330
lea edi, [ebp - 0x298]
mov ecx, 0x1e
rep movsd dword es:[edi], dword [esi]
pop esi
mov eax, dword [ebp + 0x28]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x224], eax
lea eax, [ebp - 0x298]
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x220]
mov ecx, 0x1d0
mov edx, 0x3e
call fcn.0075dc78
mov eax, dword [ebp + 0x28]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
je 0x75bb16
call fcn.004064e8
jmp 0x75c733
test esi, esi
je 0x75bb3e
cmp ebx, esi
je 0x75bb3e
mov ecx, dword [ebp + 0x28]
mov ecx, dword [ecx + 0x28]
lea eax, [ebp - 0x220]
mov edx, esi
call fcn.0075b874
lea eax, [ebp - 0x220]
xor edx, edx
call fcn.0075df40
mov ecx, dword [ebp + 0x28]
mov ecx, dword [ecx + 0x28]
lea eax, [ebp - 0x220]
mov edx, ebx
call fcn.0075b874
mov eax, dword [ebp + 0x28]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
je 0x75bb66
call fcn.004064e8
jmp 0x75c733
xor eax, eax
push ebp
push 0x75bbc1
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x220]
mov ecx, 0xffff
mov edx, 0xfe
call fcn.00769cc4
mov esi, 0xe0
lea eax, [ebp - 0x220]
mov ecx, 0xffff
mov edx, esi
call fcn.00769cc4
inc esi
cmp esi, 0xf0
jne 0x75bb8e
lea eax, [ebp - 0x220]
or edx, 0xffffffff
call fcn.0075df40
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x75bbe3
mov eax, dword [ebp + 0x28]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
je 0x75bbf8
call fcn.004064e8
jmp 0x75c733
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov edx, 1
call fcn.007cf074
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov dword [eax + 8], 8
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x1f8]
cmp eax, 5
ja case.0x75bc2e.0
jmp dword [eax*4 + 0x75bc35]
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov byte [eax + 0xdc], 0
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov dword [eax + 0x10], 3
jmp case.0x75bc2e.0
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov byte [eax + 0xdc], 1
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov dword [eax + 0x10], 1
jmp case.0x75bc2e.0
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov byte [eax + 0xdc], 2
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov dword [eax + 0x10], 3
mov dword [ebp - 0x1f4], 2
jmp case.0x75bc2e.0
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov byte [eax + 0xdc], 3
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov dword [eax + 0x10], 4
jmp case.0x75bc2e.0
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov byte [eax + 0xdc], 4
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov dword [eax + 0x10], 4
mov dword [ebp - 0x1f4], 4
cmp byte [ebp + 0x20], 0
je 0x75bcf1
mov dword [ebp - 0x1f4], 3
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
movzx eax, byte [eax + 0xe4]
sub al, 1
jb 0x75bd09
je 0x75bd13
dec al
je 0x75bd1f
jmp 0x75bd29
xor eax, eax
mov dword [ebp - 0x1d8], eax
jmp 0x75bd29
mov dword [ebp - 0x1d8], 1
jmp 0x75bd29
mov dword [ebp - 0x1d8], 2
movzx eax, byte [ebp - 0x102]
sub al, 2
jb 0x75bd38
je 0x75bd5c
jmp 0x75bdb4
movzx edx, word [ebp - 0x100]
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
call fcn.007cef54
movzx edx, word [ebp - 0xfe]
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
call fcn.007cefcc
jmp 0x75bdb4
movzx eax, word [ebp - 0x100]
mov dword [ebp - 0x29c], eax
fild dword [ebp - 0x29c]
fld xword [0x75c740]
fdivp st(1)
call fcn.00404894
mov edx, eax
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
call fcn.007cef54
movzx eax, word [ebp - 0xfe]
mov dword [ebp - 0x29c], eax
fild dword [ebp - 0x29c]
fld xword [0x75c740]
fdivp st(1)
call fcn.00404894
mov edx, eax
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
call fcn.007cefcc
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
call fcn.007ccd5c
cmp dword [ebp - 0x144], 1
sbb eax, eax
inc eax
mov edx, dword [ebp + 0x2c]
mov edx, dword [edx]
mov byte [edx + 0xec], al
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x204]
mov dword [eax + 0x34], edx
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x200]
mov dword [eax + 0x38], edx
mov dword [ebp - 0x1f0], 1
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
movzx eax, byte [eax + 0xed]
cmp eax, 4
ja case.default.0x75be0e
jmp dword [eax*4 + 0x75be15]
mov dword [ebp - 0x1ec], 1
jmp case.default.0x75be0e
mov dword [ebp - 0x1ec], 2
jmp case.default.0x75be0e
mov dword [ebp - 0x1ec], 4
jmp case.default.0x75be0e
mov dword [ebp - 0x1ec], 8
jmp case.default.0x75be0e
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
cmp dword [eax + 0x14], 0
jle 0x75bed3
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
cmp dword [eax + 0x18], 0
jle 0x75bed3
xor eax, eax
mov dword [ebp - 0x20], eax
mov esi, 3
mov ecx, esi
mov eax, 1
shl eax, cl
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x204]
cdq
idiv dword [ebp - 0x24]
mov edx, dword [ebp + 0x2c]
mov edx, dword [edx]
cmp eax, dword [edx + 0x14]
jl 0x75bebb
mov eax, dword [ebp - 0x200]
cdq
idiv dword [ebp - 0x24]
mov edx, dword [ebp + 0x2c]
mov edx, dword [edx]
cmp eax, dword [edx + 0x18]
jl 0x75bebb
mov dword [ebp - 0x20], esi
jmp 0x75bec1
dec esi
cmp esi, 0xffffffff
jne 0x75be82
mov ecx, dword [ebp - 0x20]
mov eax, 1
shl eax, cl
mov dword [ebp - 0x1ec], eax
jmp case.default.0x75be0e
mov dword [ebp - 0x1ec], 1
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1ec]
mov dword [eax + 0xf4], edx
cmp byte [ebp + 0x24], 0
je 0x75bf1a
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x204]
mov dword [eax + 0x14], edx
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x200]
mov dword [eax + 0x18], edx
call fcn.004064e8
jmp 0x75c733
xor eax, eax
push ebp
push 0x75bf3d
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x220]
call fcn.0075f3dc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x75bf5f
mov eax, dword [ebp + 0x28]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
je 0x75bf74
call fcn.004064e8
jmp 0x75c733
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1b0]
mov dword [eax + 0x14], edx
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x1ac]
mov dword [eax + 0x18], edx
mov eax, dword [ebp - 0x1b0]
add eax, eax
add eax, eax
call fcn.00404360
mov dword [ebp - 0x14], eax
cmp byte [ebp + 8], 0
je 0x75c052
mov eax, dword [ebp - 0x1f4]
cmp eax, 5
ja case.0x75bfbb.0
jmp dword [eax*4 + 0x75bfc2]
push 3
mov ecx, dword [ebp - 0x1ac]
mov edx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x28]
jmp case.0x75bfbb.0
push 5
mov ecx, dword [ebp - 0x1ac]
mov edx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x28]
jmp case.0x75bfbb.0
push 5
mov ecx, dword [ebp - 0x1ac]
mov edx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x28]
jmp case.0x75bfbb.0
push 7
mov ecx, dword [ebp - 0x1ac]
mov edx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x28]
jmp case.0x75bfbb.0
push 5
mov ecx, dword [ebp - 0x1ac]
mov edx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x28]
jmp case.0x75bfbb.0
push 5
mov ecx, dword [ebp - 0x1ac]
mov edx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x28]
cmp dword [ebp + 0xc], 0
jge 0x75c079
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 8]
mov dword [ebp + 0xc], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x2a4], eax
xor eax, eax
mov dword [ebp - 0x2a0], eax
fild qword [ebp - 0x2a4]
fdivr dword [0x75c74c]
mov eax, dword [ebp + 0x28]
fstp qword [eax + 0x18]
wait
mov eax, dword [ebp + 0x28]
xor edx, edx
mov dword [eax + 0xc], edx
xor eax, eax
push ebp
push 0x75c3aa
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x10], 1
jmp 0x75c386
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x1f4]
dec eax
je 0x75c0f7
dec eax
je 0x75c27d
dec eax
je 0x75c188
dec eax
je 0x75c1cc
jmp 0x75c319
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x10]
cmp al, 3
jne 0x75c11e
lea edx, [ebp - 0xc]
lea eax, [ebp - 0x220]
mov ecx, 1
call fcn.0075f578
mov dword [ebp - 0x10], eax
jmp 0x75c319
lea edx, [ebp - 0x14]
lea eax, [ebp - 0x220]
mov ecx, 1
call fcn.0075f578
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x1b0]
dec ebx
test ebx, ebx
jl 0x75c319
inc ebx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x18]
movzx eax, byte [eax]
mov edx, dword [ebp - 0x50]
mov byte [edx + 2], al
mov eax, dword [ebp - 0x18]
movzx eax, byte [eax]
mov edx, dword [ebp - 0x50]
mov byte [edx + 1], al
mov eax, dword [ebp - 0x18]
movzx eax, byte [eax]
mov edx, dword [ebp - 0x50]
mov byte [edx], al
inc dword [ebp - 0x18]
add dword [ebp - 0x1c], 3
dec ebx
jne 0x75c150
jmp 0x75c319
cmp byte [ebp + 0x20], 0
je 0x75c319
lea edx, [ebp - 0xc]
lea eax, [ebp - 0x220]
mov ecx, 1
call fcn.0075f578
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x1f8], 2
jne 0x75c319
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0xc]
mov edx, eax
mov eax, dword [ebp - 0xc]
call fcn.00816ab4
jmp 0x75c319
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x10]
cmp al, 5
jne 0x75c253
lea edx, [ebp - 0x14]
lea eax, [ebp - 0x220]
mov ecx, 1
call fcn.0075f578
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x28]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
jne 0x75c3a0
cmp byte [ebp + 0x18], 0
je 0x75c22d
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x1b0]
dec eax
mov ebx, eax
add ebx, ebx
add ebx, ebx
test ebx, ebx
jl 0x75c22d
inc ebx
mov eax, dword [ebp - 0x18]
mov dl, 0xff
sub dl, byte [eax]
mov eax, dword [ebp - 0x18]
mov byte [eax], dl
inc dword [ebp - 0x18]
dec ebx
jne 0x75c21b
push 1
mov eax, dword [ebp - 0x1b0]
push eax
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
push eax
mov ebx, dword [0x8e6a04]
mov ebx, dword [ebx]
mov ecx, dword [ebp - 0xc]
mov dl, 2
mov eax, dword [ebp - 0x14]
call ebx
jmp 0x75c319
lea edx, [ebp - 0xc]
lea eax, [ebp - 0x220]
mov ecx, 1
call fcn.0075f578
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x28]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
jne 0x75c3a0
jmp 0x75c319
cmp byte [ebp - 0x41], 0
je 0x75c2e8
lea edx, [ebp - 0x14]
lea eax, [ebp - 0x220]
mov ecx, 1
call fcn.0075f578
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x1f8], 2
jne 0x75c2c5
push 1
mov eax, dword [ebp - 0x1b0]
push eax
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
push eax
mov ebx, dword [0x8e6a04]
mov ebx, dword [ebx]
mov ecx, dword [ebp - 0xc]
xor edx, edx
mov eax, dword [ebp - 0x14]
call ebx
jmp 0x75c319
push 1
mov eax, dword [ebp - 0x1b0]
push eax
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
push eax
mov ebx, dword [0x8e6a04]
mov ebx, dword [ebx]
mov ecx, dword [ebp - 0xc]
mov dl, 1
mov eax, dword [ebp - 0x14]
call ebx
jmp 0x75c319
lea edx, [ebp - 0xc]
lea eax, [ebp - 0x220]
mov ecx, 1
call fcn.0075f578
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x1f8], 2
jne 0x75c319
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0xc]
mov edx, eax
mov eax, dword [ebp - 0xc]
call fcn.00816ab4
mov eax, dword [ebp - 0x10]
add dword [ebp - 8], eax
mov eax, dword [ebp + 0x28]
mov edx, dword [ebp - 0x10]
add dword [eax + 0xc], edx
mov eax, dword [ebp + 0x28]
cmp word [eax + 2], 0
je 0x75c37b
mov eax, dword [ebp + 0x28]
fild dword [eax + 0xc]
mov eax, dword [ebp + 0x28]
fmul qword [eax + 0x18]
call fcn.00404894
push edx
push eax
mov eax, dword [ebp - 0x4c]
cdq
cmp edx, dword [esp + 4]
jne 0x75c352
cmp eax, dword [esp]
pop edx
pop eax
je 0x75c37b
mov eax, dword [ebp + 0x28]
fild dword [eax + 0xc]
mov eax, dword [ebp + 0x28]
fmul qword [eax + 0x18]
call fcn.00404894
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp + 0x28]
mov edx, dword [ebp + 0x28]
mov edx, dword [edx + 8]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebx + 4]
call dword [ebx]
mov eax, dword [ebp + 0x28]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
jne 0x75c3a0
mov eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x1ac]
jae 0x75c3a0
mov eax, dword [ebp - 8]
cmp eax, dword [ebp + 0xc]
jl 0x75c0c7
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x75c3cc
mov eax, dword [ebp - 8]
cmp eax, dword [ebp + 0xc]
jge 0x75c3e7
mov eax, dword [ebp + 0x28]
mov eax, dword [eax + 0x28]
mov byte [eax], 1
call fcn.004064e8
jmp 0x75c733
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x75c733
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov eax, dword [eax + 0xf0]
call fcn.0086aa90
mov esi, dword [ebp - 0xf0]
xor ebx, ebx
test esi, esi
je 0x75c445
cmp byte [esi + 4], 0xe0
setne al
or al, bl
je 0x75c437
movzx eax, word [esi + 0xc]
push eax
mov ecx, dword [esi + 0x10]
movzx edx, byte [esi + 4]
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov eax, dword [eax + 0xf0]
call fcn.0086a984
cmp byte [esi + 4], 0xe0
jne 0x75c43f
mov bl, 1
mov esi, dword [esi]
test esi, esi
jne 0x75c410
movzx eax, byte [ebp + 0x14]
and al, byte [ebp - 0x41]
je 0x75c49d
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
call fcn.007cf130
call fcn.0088b8c4
test al, al
je 0x75c49d
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
call fcn.007cf130
call fcn.0088b8dc
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov eax, dword [eax + 0xf0]
mov dl, 0xe2
call fcn.0086a950
mov edi, eax
cmp edi, 0xffffffff
je 0x75c49d
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov eax, dword [eax + 0xf0]
mov edx, edi
call fcn.0086ac38
jmp 0x75c470
mov eax, dword [ebp + 0x28]
mov eax, dword [eax + 0x28]
cmp byte [eax], 0
jne 0x75c4e3
cmp byte [ebp + 0x24], 0
jne 0x75c4e3
xor eax, eax
mov dword [ebp - 0x224], eax
xor eax, eax
push ebp
push 0x75c4d9
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x220]
call fcn.0075e0c0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x75c4e3
lea eax, [ebp - 0x220]
call fcn.0075dd48
cmp dword [ebp - 0x14], 0
je 0x75c4fc
mov eax, dword [ebp - 0x14]
call fcn.0040437c
mov eax, dword [ebp - 0x220]
cmp dword [eax + 0x70], 0
je 0x75c530
mov eax, dword [ebp - 0x220]
mov eax, dword [eax + 0x70]
mov edx, dword [ebp + 0x2c]
mov edx, dword [edx]
mov dword [edx + 0xf8], eax
mov eax, dword [ebp - 0x220]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp + 0x2c]
mov edx, dword [edx]
mov dword [edx + 0xfc], eax
lea eax, [ebp - 0x220]
call fcn.0075b8dc
cmp byte [ebp + 0x1c], 0
je 0x75c728
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov esi, dword [eax + 0xf0]
mov eax, esi
call fcn.0086a904
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x75c59f
inc ebx
xor edi, edi
mov edx, edi
mov eax, esi
call fcn.0086a924
cmp al, 0xed
jne 0x75c59b
mov edx, edi
mov eax, esi
call fcn.0086a938
movzx eax, ax
push eax
mov edx, edi
mov eax, esi
call fcn.0086a90c
mov edx, eax
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov eax, dword [eax + 0x184]
pop ecx
call fcn.0086b714
test al, al
jne 0x75c59f
inc edi
dec ebx
jne 0x75c561
mov eax, esi
call fcn.0086a904
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x75c6c3
inc ebx
xor edi, edi
mov edx, edi
mov eax, esi
call fcn.0086a924
cmp al, 0xe1
jne 0x75c6bb
mov edx, edi
mov eax, esi
call fcn.0086a938
movzx eax, ax
push eax
mov edx, edi
mov eax, esi
call fcn.0086a90c
mov ecx, dword [ebp + 0x2c]
mov ecx, dword [ecx]
pop edx
call fcn.00871f90
test al, al
je 0x75c6bb
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov eax, dword [eax + 0x1c]
mov edx, dword [ebp + 0x2c]
mov edx, dword [edx]
mov ebx, dword [edx + 0x20]
cmp eax, 1
jne 0x75c672
cmp ebx, 1
jne 0x75c672
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
cmp dword [eax + 0x1c0], 3
jne 0x75c626
mov dword [ebp - 0x40], 0x851eb852
mov dword [ebp - 0x3c], 0x400451eb
jmp 0x75c632
xor eax, eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], 0x3ff00000
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
fld qword [eax + 0x1b0]
fmul qword [ebp - 0x40]
call fcn.00404894
mov edx, eax
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
call fcn.007cef54
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
fld qword [eax + 0x1b8]
fmul qword [ebp - 0x40]
call fcn.00404894
mov edx, eax
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
call fcn.007cefcc
jmp 0x75c689
mov edx, dword [ebp + 0x2c]
mov edx, dword [edx]
xchg edx, eax
call fcn.007cef54
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov edx, ebx
call fcn.007cefcc
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
cmp byte [eax + 0x100], 0
je 0x75c6c3
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov edx, dword [eax + 0x198]
mov eax, dword [ebp - 4]
call fcn.0088c858
mov eax, dword [ebp + 0x2c]
mov eax, dword [eax]
mov edx, 1
call fcn.007cf0c4
jmp 0x75c6c3
inc edi
dec ebx
jne 0x75c5b4
mov eax, esi
call fcn.0086a904
mov ebx, eax
dec ebx
test ebx, ebx
jl 0x75c728
inc ebx
xor edi, edi
mov edx, edi
mov eax, esi
call fcn.0086a924
cmp al, 0xe1
jne 0x75c724
mov edx, edi
mov eax, esi
call fcn.0086a938
movzx eax, ax
push eax
mov edx, edi
mov eax, esi
call fcn.0086a90c
pop edx
call fcn.0088dd04
test eax, eax
je 0x75c724
mov edx, edi
mov eax, esi
call fcn.0086a938
movzx eax, ax
push eax
mov edx, edi
mov eax, esi
call fcn.0086a90c
mov ecx, dword [ebp + 0x2c]
mov ecx, dword [ecx]
pop edx
call fcn.0088dd40
jmp 0x75c728
inc edi
dec ebx
jne 0x75c6d4
ret
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x28