Function at 0x736d50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x5c
mov edi, edx
mov dword [esp], ecx
mov eax, dword [ecx + 0x18]
mov dword [esp + 0x2c], eax
test edi, edi
je 0x739ebe
mov eax, dword [esp]
mov ecx, dword [eax]
lea edx, [eax + 0x20]
mov dword [esp + 0x1c], edx
lea eax, [eax + 0x3c]
mov dword [esp + 0x28], eax
mov dword [esp + 0xc], ecx
lea eax, [ecx + 0xc]
mov dword [esp + 0x24], eax
jmp 0x737180
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7370d7
mov ecx, dword [ebp + 0x30]
mov dword [eax], ecx
mov dword [ebp + 0x30], eax
mov dword [eax + 4], 8
add eax, 8
mov edx, dword [esp]
mov ecx, dword [edx + 0x108]
mov dword [eax + 4], ecx
mov dword [eax], esi
mov dword [edx + 0x108], eax
jmp case.0x7371cc.1
mov eax, dword [esp + 0xc]
mov dword [eax], 2
jmp case.0x7371cc.1
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x737095
mov ecx, dword [ebx + 0x2c]
mov dword [eax], ecx
mov dword [ebx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [ebx], 0
jne 0x739c2f
mov ecx, dword [ebx + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x737058
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x73707f
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7370d7
mov ecx, dword [ebp + 0x30]
mov dword [eax], ecx
mov dword [ebp + 0x30], eax
mov dword [eax + 4], 8
add eax, 8
mov edx, dword [esp]
mov ecx, dword [edx + 0xd8]
mov dword [eax + 4], ecx
mov dword [eax], esi
mov dword [edx + 0xd8], eax
jmp case.0x7371cc.1
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x7370d7
mov eax, dword [ebp + 0x30]
mov dword [esi], eax
mov dword [ebp + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x30000
mov eax, dword [ebp + 0x1c]
test eax, eax
mov ecx, dword [esp + 8]
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 5
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x736f56
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x736f81
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x7370d7
mov eax, dword [ebp + 0x30]
mov dword [esi], eax
mov dword [ebp + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x2000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x736fb1
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x736fdc
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7370d7
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [ebp], 0
jne case.0x7371cc.1
mov ecx, dword [ebp + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x7370a0
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x7370c7
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7370d7
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [ebp], 0
jne case.0x7371cc.1
mov ecx, dword [ebp + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
jbe 0x739299
sub esp, 0xc
push 0x800
jmp 0x736d96
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x73704d
mov ecx, dword [edi + 0x30]
mov dword [eax], ecx
mov dword [edi + 0x30], eax
mov dword [eax + 4], 8
add eax, 8
mov edx, dword [esp]
mov ecx, dword [edx + 0xd4]
mov dword [eax + 4], ecx
mov dword [eax], esi
mov dword [edx + 0xd4], eax
jmp case.0x7371cc.1
mov dword [edi], 2
jmp case.0x7371cc.1
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x737095
mov ecx, dword [ebx + 0x30]
mov dword [eax], ecx
mov dword [ebx + 0x30], eax
mov dword [eax + 4], 8
add eax, 8
mov ecx, dword [edi + 0xec]
mov dword [eax + 4], ecx
mov dword [eax], esi
mov dword [edi + 0xec], eax
jmp 0x739c2f
mov dword [ebx], 2
jmp 0x739c2f
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7370d7
mov ecx, dword [ebp + 0x30]
mov dword [eax], ecx
mov dword [ebp + 0x30], eax
mov dword [eax + 4], 8
add eax, 8
mov ecx, dword [edi + 0x1c]
mov dword [eax + 4], ecx
mov dword [eax], esi
mov dword [edi + 0x1c], eax
jmp case.0x7371cc.1
mov dword [ebp], 2
jmp case.0x7371cc.1
test edi, edi
je 0x737112
test eax, eax
je 0x73710d
mov ecx, dword [edi]
test ecx, ecx
je 0x73710d
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov edi, dword [edi + 4]
jmp 0x7370f0
mov eax, dword [esp]
mov ecx, dword [eax]
cmp dword [ecx], 0
jne 0x737136
mov eax, dword [ebp + 0x1c]
shl eax, 2
mov edx, 0x11
push 0
push 2
push eax
push 0x40
call fcn.0073bb30
add esp, 0x10
mov ecx, ebx
call fcn.00731400
test esi, esi
je 0x737154
test eax, eax
je 0x737154
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
mov eax, dword [ebp + 0x18]
shl eax, 2
xor eax, 0xfffffffc
mov edx, 0x20
mov ecx, ebx
push eax
push 0x82
push dword [ebp + 0x14]
push 0x8d
call fcn.00730440
add esp, 0x10
jmp case.0x7371cc.1
mov esi, dword [edi + 4]
test esi, esi
je 0x7371b0
mov ecx, dword [esp + 0xc]
call fcn.00731400
test eax, eax
je 0x7371a9
mov ecx, dword [esi]
test ecx, ecx
je 0x7371a9
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov esi, dword [esi + 4]
test esi, esi
jne 0x737190
mov dword [esp + 4], edi
mov edx, dword [edi + 0x10]
movzx eax, word [edx]
lea ecx, [eax - 3]
movzx ecx, cx
cmp ecx, 0x9f
ja case.0x7371cc.1
jmp dword [ecx*4 + 0x739ed0]
mov ecx, dword [esp]
mov ebp, dword [ecx]
mov dword [esp + 0x30], 0
mov dword [esp + 0x14], 0
mov eax, dword [ecx + 8]
mov esi, edx
sub esi, dword [ecx + 4]
mov eax, dword [eax + esi*2]
lea edi, [eax + 4]
mov dword [esp + 8], eax
test eax, eax
mov esi, 0x8d
mov eax, 0x82
cmove esi, eax
mov eax, 4
cmove edi, eax
sub esp, 0xc
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x2a]
push eax
lea eax, [esp + 0x3e]
push eax
call fcn.0075ebb0
add esp, 0x20
mov ebx, eax
movzx eax, word [esp + 0x22]
add eax, 0xffffffdf
movzx eax, ax
cmp eax, 7
ja case.0x73724b.2
jmp dword [eax*4 + 0x73a150]
movzx eax, word [esp + 0x12]
cmp eax, 0x16
je 0x737268
movzx eax, ax
cmp eax, 0x11
jne 0x7375bb
mov eax, dword [esp + 4]
mov esi, dword [eax + 0x18]
mov ecx, ebp
call fcn.00731400
test esi, esi
mov edi, dword [esp]
je 0x7372a0
nop dword [eax]
test eax, eax
je 0x737299
mov ecx, dword [esi]
test ecx, ecx
je 0x737299
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov esi, dword [esi + 4]
test esi, esi
jne 0x737280
mov edx, 0x20
mov ecx, ebp
push 0
push 0x82
push 0
push 0xc
call fcn.00730440
add esp, 0x10
mov ecx, dword [edi]
cmp dword [ecx], 0
je 0x73777b
cmp dword [ebp], 0
jne case.0x73724b.2
jmp 0x73779a
mov edx, 0x20
mov ecx, ebp
mov edi, dword [esp + 8]
push edi
push esi
push 0
push 0xc
call fcn.00730440
add esp, 0x10
movzx edx, word [esp + 0x12]
sub esp, 4
mov ecx, dword [esp + 4]
push 1
lea eax, [esp + 0x1c]
push eax
push ebx
call fcn.00747960
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
push edi
push esi
call fcn.00730440
add esp, 0x10
cmp dword [ebp], 0
je 0x7378b5
mov esi, dword [esp + 0x14]
mov ecx, ebp
call fcn.00731400
test esi, esi
je 0x737360
nop word [eax + eax]
test eax, eax
je 0x737359
mov ecx, dword [esi]
test ecx, ecx
je 0x737359
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov esi, dword [esi + 4]
test esi, esi
jne 0x737340
cmp dword [esp + 8], 0
jne case.0x73724b.2
mov eax, dword [esp]
mov ecx, dword [eax]
cmp dword [ecx], 0
jne case.0x73724b.2
mov edx, 0x11
push 0
push 2
push 4
push 0x40
jmp 0x739e64
mov edx, 0x20
mov ecx, ebp
mov edi, dword [esp + 8]
push edi
push esi
push 0
push 0xc
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 0x40
push edi
push esi
call fcn.00730440
add esp, 0x10
cmp dword [ebp], 0
jne 0x7373e8
mov edx, 0x11
mov ecx, ebp
push 0
push 0xc
push 0
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x7373de
or byte [eax + 1], 0x38
cmp dword [ebp], 0
je 0x737d63
mov eax, dword [esp + 4]
lea eax, [eax + 0x14]
mov dword [esp + 0x18], eax
xor ebx, ebx
cmp dword [ebp], 0
jne 0x737dae
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x737b3b
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x737b68
mov edx, 0x20
mov ecx, ebp
mov edi, dword [esp + 8]
push edi
push esi
push 0
push 0xc
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 0x40
push edi
push esi
call fcn.00730440
add esp, 0x10
xor esi, esi
cmp dword [ebp], 0
mov edi, dword [esp]
jne 0x7388d2
mov edx, 0x11
mov ecx, ebp
push 0
push 0xc
push 0
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x73747c
or byte [eax + 1], 0x38
xor esi, esi
cmp dword [ebp], 0
jne 0x7388d2
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x738560
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x73858d
mov edx, 0x20
mov ecx, ebp
push edi
push esi
push 0
push 1
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push dword [esp + 8]
push esi
push 0
push 0xc
call fcn.00730440
add esp, 0x10
cmp dword [ebp], 0
jne 0x737505
mov edx, 0x11
mov ecx, ebp
push 0
push 1
push 1
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x7374fb
or byte [eax + 1], 0x28
cmp dword [ebp], 0
je 0x737d84
mov edx, 0x20
mov ecx, ebp
push 0
push 1
push edi
push esi
call fcn.00730440
add esp, 0x10
movzx edx, word [esp + 0x12]
sub esp, 4
mov ecx, dword [esp + 4]
push 1
lea eax, [esp + 0x1c]
push eax
push ebx
call fcn.00747960
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
push dword [esp + 0x10]
push esi
call fcn.00730440
add esp, 0x10
cmp dword [ebp], 0
je 0x7378d6
mov esi, dword [esp + 0x14]
mov ecx, ebp
call fcn.00731400
test esi, esi
je 0x737590
nop word [eax + eax]
test eax, eax
je 0x737589
mov ecx, dword [esi]
test ecx, ecx
je 0x737589
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov esi, dword [esi + 4]
test esi, esi
jne 0x737570
cmp dword [esp + 8], 0
jne case.0x73724b.2
mov eax, dword [esp]
mov ecx, dword [eax]
cmp dword [ecx], 0
jne case.0x73724b.2
mov edx, 0x11
push 0
push 2
push 8
push 0x40
jmp 0x739e64
mov eax, dword [esp + 4]
mov ebx, dword [eax + 0x20]
mov edx, 0x20
mov ecx, ebp
push dword [esp + 8]
push esi
push 0
push 0xc
call fcn.00730440
add esp, 0x10
cmp ebx, 0
je 0x7378f7
mov edx, 0x20
mov ecx, ebp
push edi
push esi
push 0
push 3
call fcn.00730440
add esp, 0x10
xor ebx, ebx
cmp dword [ebp], 0
mov edi, dword [esp]
jne 0x739650
mov edx, 0x11
mov ecx, ebp
push 0
push 0xc
push 2
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x737626
or byte [eax + 1], 0x28
xor ebx, ebx
cmp dword [ebp], 0
jne 0x739650
mov edx, 1
mov ecx, ebp
push 0
push 3
push 0
push 0xc
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x737650
mov byte [eax], 0x3b
xor ebx, ebx
cmp dword [ebp], 0
jne 0x739650
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x739541
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x73956e
mov esi, dword [esp]
mov ebp, dword [esi]
mov ecx, eax
and ecx, 0xfffe
cmp ecx, 0x9a
jne 0x737fa3
cmp dword [esi + 0x18], 0
je 0x737f72
mov edx, 0x20
mov ecx, ebp
push dword [esi + 0x40]
push 0x8d
push 0
push 2
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 1
push 0x40
push 0
push 1
call fcn.00730440
add esp, 0x10
mov eax, dword [esi + 0x18]
mov edx, 0x20
mov ecx, ebp
push dword [eax + 0x18]
push 0x40
push 0
push 3
call fcn.00730440
add esp, 0x10
xor esi, esi
cmp dword [ebp], 0
jne 0x738d59
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x738bba
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x738be7
mov edi, dword [esp]
mov ebx, dword [edi]
mov ebp, dword [esp + 4]
cmp dword [ebp + 0x18], 0
js 0x737a07
mov edx, 0x20
mov ecx, ebx
push dword [ebp + 0x14]
push 0x8d
push 0
push 2
call fcn.00730440
add esp, 0x10
cmp dword [ebx], 0
je 0x737f51
mov edi, dword [ebp + 0xc]
test edi, edi
je 0x737154
cmp dword [ebx], 0
je 0x73853f
mov ecx, ebx
call fcn.00731400
xor esi, esi
test eax, eax
jne 0x7370f8
jmp 0x73710d
mov edx, 0x11
push 0
push 2
push 4
push 0x40
call fcn.0073bb30
add esp, 0x10
cmp dword [ebp], 0
jne case.0x73724b.2
mov edx, 0x11
mov ecx, ebp
push 0
push 0xc
push 0
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x7377b9
or byte [eax + 1], 0x38
cmp dword [ebp], 0
jne case.0x73724b.2
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x7383e9
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x738416
mov ecx, dword [esp]
mov edi, dword [ecx]
add eax, 0xffffff8f
movzx eax, ax
xor ebx, ebx
cmp eax, 1
seta bl
test byte [edx + ebx*2 + 4], 1
jne 0x737956
mov eax, dword [esp + 4]
mov esi, dword [eax + 0xc]
mov ecx, edi
call fcn.00731400
test esi, esi
je 0x737840
nop word cs:[eax + eax]
test eax, eax
je 0x737839
mov ecx, dword [esi]
test ecx, ecx
je 0x737839
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov esi, dword [esi + 4]
test esi, esi
jne 0x737820
mov edx, 0x20
mov ecx, edi
push 0
push 0x82
push 0
push 0xc
call fcn.00730440
add esp, 0x10
mov eax, dword [esp]
mov ecx, dword [eax]
cmp dword [ecx], 0
je 0x738481
cmp dword [edi], 0
jne case.0x7371cc.1
jmp 0x73849f
mov eax, dword [esp + 4]
mov esi, dword [eax + 0xc]
mov ecx, dword [esp + 0xc]
call fcn.00731400
test esi, esi
je case.0x7371cc.1
nop
test eax, eax
je 0x7378a9
mov ecx, dword [esi]
test ecx, ecx
je 0x7378a9
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov esi, dword [esi + 4]
test esi, esi
jne 0x737890
jmp case.0x7371cc.1
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x737baa
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x737bd7
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x737c19
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x737c46
xor ebx, ebx
cmp dword [ebp], 0
jne 0x739d2d
sub esp, 8
mov edx, 0x1462
mov ecx, ebp
push edi
push esi
push 0
push 0xc
push 0
push 0
call fcn.00730ab0
add esp, 0x20
xor ebx, ebx
test eax, eax
jne 0x739d2d
xor ebx, ebx
cmp dword [ebp], 0
jne 0x739d2d
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x739ab0
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x739add
mov edx, 0x20
mov ecx, edi
push 0
push 0x82
push 0
push 0xc
call fcn.00730440
add esp, 0x10
cmp dword [edi], 0
mov ebp, dword [esp + 4]
jne 0x7379a1
mov edx, 0x11
mov ecx, edi
push 0
push 0xc
push 0
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x737998
or byte [eax + 1], 0x38
cmp dword [edi], 0
je 0x738c8c
mov esi, dword [ebp + 0xc]
mov ecx, edi
call fcn.00731400
test esi, esi
mov edi, dword [esp]
je 0x7379e0
nop word cs:[eax + eax]
test eax, eax
je 0x7379d9
mov ecx, dword [esi]
test ecx, ecx
je 0x7379d9
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov esi, dword [esi + 4]
test esi, esi
jne 0x7379c0
mov ecx, dword [edi]
cmp dword [ecx], 0
jne case.0x7371cc.1
or ebx, 2
shl ebx, 2
mov edx, 0x11
push 0
push 2
push ebx
push 0x40
call fcn.0073bb30
jmp 0x737177
movzx eax, ax
cmp eax, 0x8b
je 0x737a1c
cmp eax, 0x86
jne 0x737ad4
movzx esi, word [edx + 4]
shl esi, 3
mov edx, 0x20
mov ecx, ebx
push 0
push 0x82
push 0
push 1
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebx
push 4
push 0x82
push 0
push 3
call fcn.00730440
add esp, 0x10
mov eax, dword [edi + 0x20]
add eax, esi
mov edx, 0x20
mov ecx, ebx
push 0
push 1
push eax
push 0x8d
call fcn.00730440
add esp, 0x10
cmp dword [edi + 0x44], 0
je 0x737a95
mov edx, 0x20
mov ecx, ebx
push 8
push 0x82
push 0
push 1
call fcn.00730440
add esp, 0x10
or esi, 4
add esi, dword [edi + 0x20]
mov edx, 0x20
mov ecx, ebx
push 0
push 3
push esi
push 0x8d
call fcn.00730440
add esp, 0x10
mov eax, dword [edi + 0x44]
test eax, eax
je 0x737ad4
mov edx, 0x20
mov ecx, ebx
push 0
push 1
push eax
push 0x8d
call fcn.00730440
add esp, 0x10
mov esi, dword [ebp + 0xc]
mov ecx, ebx
call fcn.00731400
test esi, esi
je 0x737b10
nop word cs:[eax + eax]
test eax, eax
je 0x737b09
mov ecx, dword [esi]
test ecx, ecx
je 0x737b09
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov esi, dword [esi + 4]
test esi, esi
jne 0x737af0
mov ecx, dword [edi]
cmp dword [ecx], 0
jne case.0x7371cc.1
mov eax, dword [esp + 4]
mov eax, dword [eax + 0x1c]
shl eax, 2
mov edx, 0x11
push 0
push 2
push eax
push 0x40
call fcn.0073bb30
jmp 0x737177
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x737da5
mov eax, dword [ebp + 0x30]
mov dword [ebx], eax
mov dword [ebp + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0x30000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [ebp + 0x1c], ebx
add dword [ebp + 0x48], 5
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x737c88
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x737cb3
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x737f2d
mov eax, dword [ebp + 0x30]
mov dword [esi], eax
mov dword [ebp + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x30000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 5
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x737cbd
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x737ce8
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x737f39
mov eax, dword [ebp + 0x30]
mov dword [esi], eax
mov dword [ebp + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x30000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 5
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x737d10
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x737d3b
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x737da5
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x737dae
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x737f2d
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov eax, dword [esp + 4]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x737328
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
jmp 0x737328
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x737f39
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov eax, dword [esp + 4]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x737558
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
jmp 0x737558
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x7385cf
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x7385fc
mov ecx, dword [ebp + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 0x10]
cmp edx, 0x7f8
ja 0x73863e
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x738669
mov dword [ebp], 2
xor ebx, ebx
mov eax, dword [esp + 4]
mov edi, dword [eax + 0x18]
mov ecx, ebp
call fcn.00731400
test edi, edi
je 0x737de0
test eax, eax
je 0x737dd9
mov ecx, dword [edi]
test ecx, ecx
je 0x737dd9
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov edi, dword [edi + 4]
test edi, edi
jne 0x737dc0
mov edx, 0x20
mov ecx, ebp
mov edi, dword [esp + 8]
push edi
push esi
push 0
push 0xc
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 0x40
push edi
push esi
call fcn.00730440
add esp, 0x10
cmp dword [ebp], 0
je 0x737e5d
mov ecx, ebp
call fcn.00731400
test ebx, ebx
je 0x737e32
test eax, eax
je 0x737e32
mov ecx, dword [ebx + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], eax
cmp dword [esp + 8], 0
jne case.0x73724b.2
mov eax, dword [esp]
mov ecx, dword [eax]
cmp dword [ecx], 0
jne case.0x73724b.2
mov edx, 0x11
push 0
push 2
push 4
push 0x40
jmp 0x739e64
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x737e77
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x737ea4
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x737f45
mov eax, dword [ebp + 0x30]
mov dword [esi], eax
mov dword [ebp + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x30000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 5
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x737edf
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x737f06
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x737f45
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov eax, dword [esp + 0x18]
mov eax, dword [eax]
test eax, eax
je 0x737e14
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
jmp 0x737e14
mov dword [ebp], 2
jmp 0x737328
mov dword [ebp], 2
jmp 0x737558
mov dword [ebp], 2
jmp 0x737e14
mov eax, dword [ebx + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x7386bb
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x7386e8
cmp dword [esi + 0x78], 0
je 0x737fa3
cmp dword [ebp], 0
jne case.0x7371cc.1
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x7390f9
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x739126
cmp dword [esi + 0x74], 0
je 0x737fe2
cmp dword [esi + 0xb0], 0
mov eax, dword [ebp]
je 0x738458
test eax, eax
jne case.0x7371cc.1
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x738cad
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x738cda
movzx eax, ax
mov edx, 0x20
mov ecx, ebp
cmp eax, 0x98
je 0x738a62
cmp eax, 0x99
jne 0x738a6f
push dword [esi + 0x40]
push 0x8d
push 0
push 1
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 2
push 0
push 0x8d
call fcn.00730440
add esp, 0x10
mov eax, dword [esp + 4]
mov eax, dword [eax + 0x10]
add eax, 4
mov edx, 0x20
mov ecx, ebp
push eax
push 0x40
push 0
push 2
call fcn.00730440
add esp, 4
mov edx, 0x111
mov ecx, ebp
push 0x762d80
call fcn.0073a4f0
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 0x8d
push 0
push 2
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 1
push 0
push 0xc
call fcn.00730440
add esp, 0x10
cmp dword [ebp], 0
jne case.0x7371cc.1
mov edx, 0x11
mov ecx, ebp
push 0
push 0xc
push 0
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x7380be
or byte [eax + 1], 0x38
cmp dword [ebp], 0
jne case.0x7371cc.1
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x736eeb
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x736f18
mov edx, 0x20
mov esi, dword [esp + 0xc]
mov ecx, esi
push 0
push 0x82
push 0
push 1
call fcn.00730440
add esp, 0x10
mov eax, dword [esp]
mov ecx, dword [eax]
cmp dword [ecx], 0
jne 0x738126
mov edx, 0x11
push 0
push 2
push 4
push 0x40
call fcn.0073bb30
add esp, 0x10
mov edx, 0x20
mov ecx, esi
push 0
push 1
mov eax, dword [esp + 0x24]
push dword [eax]
push 0x8d
jmp 0x737172
mov ecx, dword [esp]
mov esi, dword [ecx]
mov ebx, dword [esp + 4]
cmp dword [ebx + 0x14], 0
je 0x738158
mov edx, dword [ebx + 8]
call fcn.00736d50
mov edi, dword [ebx + 0xc]
mov ecx, esi
call fcn.00731400
test edi, edi
je 0x738190
nop word cs:[eax + eax]
test eax, eax
je 0x738189
mov ecx, dword [edi]
test ecx, ecx
je 0x738189
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov edi, dword [edi + 4]
test edi, edi
jne 0x738170
cmp dword [ebx + 0x14], 0
jne case.0x7371cc.1
mov eax, dword [esp]
cmp dword [eax + 0x64], 0
mov eax, dword [eax + 0x3c]
je 0x738fb2
test eax, eax
je 0x738fba
mov edx, 0x20
mov ecx, esi
push 0
push 0x82
push 0
push 3
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, esi
push 4
push 0x82
push 0
push 1
call fcn.00730440
add esp, 0x10
mov eax, dword [esp]
mov ecx, dword [eax]
cmp dword [ecx], 0
jne 0x738205
mov edx, 0x11
push 0
push 2
push 8
push 0x40
call fcn.0073bb30
add esp, 0x10
mov edx, 0x20
mov ecx, esi
push 0
push 3
mov eax, dword [esp + 0x24]
push dword [eax]
push 0x8d
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, esi
push 0
push 1
mov eax, dword [esp + 0x30]
push dword [eax]
push 0x8d
jmp 0x737172
movzx eax, word [edx + 2]
cmp eax, 0x81
jb case.0x7371cc.122
mov ecx, dword [esp]
mov edx, dword [esp + 4]
call fcn.0075fb80
jmp case.0x7371cc.1
mov ecx, dword [esp]
mov edx, dword [esp + 4]
call fcn.0075f3b0
jmp case.0x7371cc.1
mov edi, dword [esp + 4]
mov dword [edi + 8], 0
mov dword [edi + 0xc], 0
mov dword [edi + 4], 0
movzx eax, word [edx + 2]
cmp eax, 0x81
jb 0x738814
sub esp, 0xc
mov esi, dword [esp + 0xc]
mov ecx, esi
push edi
call fcn.00754bd0
add esp, 0x10
mov edx, dword [edi + 8]
mov ecx, esi
call fcn.0075fb80
jmp case.0x7371cc.1
xor eax, eax
mov esi, dword [esp]
cmp dword [esi + 0x68], 0
setne al
shl eax, 4
mov edx, 0x20
mov edi, dword [esp + 0xc]
mov ecx, edi
push eax
push 0x82
push 0
push 1
call fcn.00730440
add esp, 0x10
cmp dword [esi + 0x68], 0
je 0x738300
mov edx, 0x20
mov ecx, edi
push 0
push 0x82
push 0
push 3
call fcn.00730440
add esp, 0x10
mov ecx, dword [esi]
cmp dword [ecx], 0
jne 0x73832c
cmp dword [esi + 0x68], 0
mov eax, 0x14
mov edx, 4
cmove eax, edx
mov edx, 0x11
push 0
push 2
push eax
push 0x40
call fcn.0073bb30
add esp, 0x10
mov edx, 0x20
mov ecx, edi
push 0
push 1
push dword [esi + 0x3c]
push 0x8d
call fcn.00730440
add esp, 0x10
cmp dword [esi + 0x68], 0
je case.0x7371cc.1
mov edx, 0x20
mov ecx, dword [esp + 0xc]
push 0
push 3
mov eax, dword [esp + 8]
push dword [eax + 0x40]
push 0x8d
jmp 0x737172
mov esi, dword [esp]
cmp dword [esi + 0x74], 0
mov edi, dword [esp + 0xc]
jne 0x738393
mov edx, 0x20
mov ecx, edi
push 0xffffffffffffffff
push 0x40
push 0
push 1
call fcn.00730440
add esp, 0x10
cmp dword [esi + 0xb0], 0
mov eax, dword [edi]
je 0x738aaa
test eax, eax
jne case.0x7371cc.1
mov edi, dword [esp + 0xc]
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x73931a
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x739347
mov ecx, dword [esp + 4]
mov eax, dword [ecx + 0x14]
test eax, eax
je 0x738ad7
mov ecx, dword [esp]
mov dword [ecx + 0x18], eax
jmp case.0x7371cc.1
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x7386af
mov eax, dword [ebp + 0x30]
mov dword [esi], eax
mov dword [ebp + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x2000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x7384ec
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x738517
test eax, eax
jne case.0x7371cc.1
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x738efb
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x738f28
mov edx, 0x11
push 0
push 2
push 4
push 0x40
call fcn.0073bb30
add esp, 0x10
cmp dword [edi], 0
jne case.0x7371cc.1
mov edx, 0x11
mov ecx, edi
push 0
push 0xc
push 0
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x7384be
or byte [eax + 1], 0x38
cmp dword [edi], 0
jne case.0x7371cc.1
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x739017
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
mov ebx, dword [esp + 4]
jmp 0x739048
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7386af
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov eax, dword [esp + 4]
mov eax, dword [eax + 0x14]
test eax, eax
je case.0x73724b.2
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
jmp case.0x73724b.2
mov eax, dword [ebx + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x738b4f
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x738b7c
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x7388c9
mov eax, dword [ebp + 0x30]
mov dword [esi], eax
mov dword [ebp + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x73872a
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x738755
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x738a56
mov eax, dword [ebp + 0x30]
mov dword [ebx], eax
mov dword [ebp + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0x2000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [ebp + 0x1c], ebx
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x73875f
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x73878a
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x738e80
mov ecx, dword [ebp + 0x30]
mov dword [eax], ecx
mov dword [ebp + 0x30], eax
mov dword [eax + 4], 0x10
add eax, 8
mov dword [eax], 0
mov dword [eax + 8], 0
mov edx, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test edx, edx
cmovne ecx, edx
mov dword [ecx], eax
mov dword [esp + 0x18], eax
mov dword [ebp + 0x1c], eax
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x7387b9
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x7387e4
mov dword [ebp], 2
jmp case.0x73724b.2
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x738fa7
mov eax, dword [ebx + 0x30]
mov dword [esi], eax
mov dword [ebx + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x32000
mov eax, dword [ebx + 0x1c]
lea ecx, [ebx + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebx + 0x1c], esi
add dword [ebx + 0x48], 5
mov ecx, dword [ebx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x73886f
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x73889a
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7388c9
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x7388d2
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x738a56
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov eax, dword [esp + 4]
lea ecx, [eax + 0x14]
mov dword [esp + 0x18], ecx
mov eax, dword [eax + 0x14]
test eax, eax
je 0x7373f3
mov ecx, dword [ebx + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], eax
jmp 0x7373f3
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x738e80
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [ebp], 0
jne 0x737505
mov ecx, dword [ebp + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x738e43
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x738e6a
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x40], edx
mov eax, dword [edi + 0x14]
mov dword [esp + 0x50], eax
sub esp, 8
mov ecx, dword [esp + 8]
push 0
lea eax, [esp + 0x3c]
push eax
call fcn.00752bf0
jmp 0x737177
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x738fa7
mov ecx, dword [ebx + 0x2c]
mov dword [eax], ecx
mov dword [ebx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [ebx], 0
jne 0x737751
mov ecx, dword [ebx + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x738f6a
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x738f91
mov dword [ebp], 2
xor esi, esi
movzx edx, word [esp + 0x12]
sub esp, 4
mov ecx, edi
push 1
lea eax, [esp + 0x1c]
push eax
push ebx
call fcn.00747960
add esp, 0x10
cmp dword [ebp], 0
je 0x738979
mov edi, dword [esp + 0x14]
mov ecx, ebp
call fcn.00731400
test edi, edi
je 0x738930
nop word cs:[eax + eax]
test eax, eax
je 0x738929
mov ecx, dword [edi]
test ecx, ecx
je 0x738929
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov edi, dword [edi + 4]
test edi, edi
jne 0x738910
mov ecx, ebp
call fcn.00731400
test esi, esi
je 0x73894e
test eax, eax
je 0x73894e
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
cmp dword [esp + 8], 0
jne case.0x73724b.2
mov eax, dword [esp]
mov ecx, dword [eax]
cmp dword [ecx], 0
jne case.0x73724b.2
mov edx, 0x11
push 0
push 2
push 4
push 0x40
jmp 0x739e64
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x738993
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x7389c0
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x738a4a
mov eax, dword [ebp + 0x30]
mov dword [ebx], eax
mov dword [ebp + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0x30000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [ebp + 0x1c], ebx
add dword [ebp + 0x48], 5
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x7389fb
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x738a22
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x738a4a
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov eax, dword [esp + 4]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x7388f6
mov ecx, dword [ebx + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], eax
jmp 0x7388f6
mov dword [ebp], 2
jmp 0x7388f6
mov dword [ebp], 2
jmp 0x7373e8
push 0
push 0x82
push 0
push 0xc
jmp 0x738a77
push 0
push 0x40
push 0
push 0xc
call fcn.00730440
add esp, 0x10
cmp dword [ebp], 0
jne case.0x7371cc.1
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x738e8c
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x738eb9
test eax, eax
jne case.0x7371cc.1
mov edi, dword [esp + 0xc]
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x7399c0
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x7399ed
mov edi, dword [esp]
mov ebx, dword [edi]
mov esi, dword [ecx + 0x20]
test esi, esi
mov eax, 0
cmovs esi, eax
shl esi, 2
mov edx, 0x20
mov ecx, ebx
push esi
push 0x82
push 0
push 1
call fcn.00730440
add esp, 0x10
mov ecx, dword [edi]
cmp dword [ecx], 0
jne 0x738b23
add esi, 0xc
mov edx, 0x11
push 0
push 2
push esi
push 0x40
call fcn.0073bb30
add esp, 0x10
xor ebp, ebp
cmp dword [ebx], 0
jne 0x739be8
mov eax, dword [ebx + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x739a2e
lea ebp, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x739a5c
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x738d39
mov eax, dword [ebx + 0x30]
mov dword [esi], eax
mov dword [ebx + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x30000
mov eax, dword [ebx + 0x1c]
lea ecx, [ebx + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebx + 0x1c], esi
add dword [ebx + 0x48], 5
mov ecx, dword [ebx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x738c22
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x738c4d
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x738d50
mov eax, dword [ebp + 0x30]
mov dword [esi], eax
mov dword [ebp + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x30000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 5
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x738c57
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x738c82
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x738d39
mov ecx, dword [ebx + 0x2c]
mov dword [eax], ecx
mov dword [ebx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x738d41
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x738d50
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x738d59
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x73908a
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x7390b7
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x7370d7
mov eax, dword [ebp + 0x30]
mov dword [esi], eax
mov dword [ebp + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x30000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 5
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
mov edi, dword [esp]
jbe 0x73937f
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7370d7
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
jmp 0x7395dc
mov dword [ebx], 2
xor esi, esi
mov edi, dword [ebp + 0xc]
mov ecx, ebx
call fcn.00731400
jmp 0x7370f0
mov dword [ebp], 2
xor esi, esi
mov ecx, ebp
call fcn.00731400
mov edi, eax
mov edx, 0x20
mov ecx, ebp
push 0
push 0x82
push 0
push 2
call fcn.00730440
add esp, 0x10
mov ecx, ebp
call fcn.00731400
test esi, esi
je 0x738d9a
test eax, eax
je 0x738d9a
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
cmp dword [ebp], 0
jne 0x738dc7
mov edx, 1
mov ecx, ebp
push 4
push 0x82
push 0
push 1
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x738dc1
mov byte [eax], 0x39
cmp dword [ebp], 0
je 0x738e22
test edi, edi
setne bl
cmp dword [ebp], 0
jne case.0x7371cc.1
mov edx, 1
mov ecx, ebp
push 8
push 0x82
push 0
push 3
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x738df7
mov byte [eax], 0x39
cmp dword [ebp], 0
jne case.0x7371cc.1
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x739168
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x739195
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x7391db
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x739208
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x738e80
mov ecx, dword [ebp + 0x30]
mov dword [eax], ecx
mov dword [ebp + 0x30], eax
mov dword [eax + 4], 8
add eax, 8
mov ecx, dword [esp + 0x14]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x18]
mov dword [eax], ecx
mov dword [esp + 0x14], eax
jmp 0x737505
mov dword [ebp], 2
jmp 0x737505
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x7370d7
mov eax, dword [ebp + 0x30]
mov dword [esi], eax
mov dword [ebp + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x30000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 5
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x73924a
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x739275
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x7370d7
mov eax, dword [ebp + 0x30]
mov dword [esi], eax
mov dword [ebp + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x30000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 5
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x7392a5
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x7392d0
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x738fa7
mov ecx, dword [ebx + 0x30]
mov dword [eax], ecx
mov dword [ebx + 0x30], eax
mov dword [eax + 4], 8
add eax, 8
mov ecx, dword [edi + 0xec]
mov dword [eax + 4], ecx
mov dword [eax], esi
mov dword [edi + 0xec], eax
jmp 0x737751
mov dword [ebx], 2
jmp 0x737751
test eax, eax
je case.0x7371cc.1
mov edx, 0x20
mov ecx, esi
push 0
push 0x82
push 0
push 3
call fcn.00730440
add esp, 0x10
mov edi, dword [esp]
mov ecx, dword [edi]
cmp dword [ecx], 0
jne 0x738ff3
mov edx, 0x11
push 0
push 2
push 4
push 0x40
call fcn.0073bb30
add esp, 0x10
cmp dword [edi + 0x64], 0
mov eax, dword [esp + 0x1c]
cmove eax, dword [esp + 0x28]
mov edx, 0x20
mov ecx, esi
push 0
push 3
push dword [eax]
push 0x8d
jmp 0x737172
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
mov ebx, dword [esp + 4]
je 0x73704d
mov eax, dword [edi + 0x30]
mov dword [esi], eax
mov dword [edi + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x2000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x73938b
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x7393b6
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x7395ac
mov eax, dword [edi + 0x30]
mov dword [esi], eax
mov dword [edi + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x2000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x7393cb
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x7393f6
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x7370d7
mov eax, dword [ebp + 0x30]
mov dword [esi], eax
mov dword [ebp + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x30000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 5
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x73941a
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x739445
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x7370d7
mov eax, dword [ebp + 0x30]
mov dword [esi], eax
mov dword [ebp + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x2000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
mov dword [esp + 8], ecx
cmove eax, ecx
mov dword [eax], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x739475
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x7394a0
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x73960d
mov eax, dword [ebp + 0x30]
mov dword [esi], eax
mov dword [ebp + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x2000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x7394e9
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x739514
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7370d7
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [ebp], 0
jne case.0x7371cc.1
mov ecx, dword [ebp + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x736d8e
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x736db9
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7370d7
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [ebp], 0
jne case.0x7371cc.1
mov ecx, dword [ebp + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
jbe 0x739b71
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7370d7
mov ecx, dword [ebp + 0x30]
mov dword [eax], ecx
mov dword [ebp + 0x30], eax
jmp 0x73702a
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x73704d
mov eax, dword [edi + 0x30]
mov dword [esi], eax
mov dword [edi + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x30000
mov eax, dword [edi + 0x1c]
test eax, eax
cmove eax, dword [esp + 0x24]
mov dword [eax], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 5
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
mov edi, dword [esp]
ja 0x7395b7
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x7395e6
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x73704d
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov eax, dword [ebx + 0x14]
test eax, eax
jne 0x7395f9
jmp case.0x7371cc.1
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7395ac
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x7379a1
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
jmp 0x7379a1
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7370d7
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [ebp], 0
jne case.0x7371cc.1
mov ecx, dword [ebp + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x736e3b
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x736e66
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7370d7
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
test bl, bl
je 0x7394b8
mov eax, dword [esi + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [esi + 8], eax
mov dword [esi + 0xc], edi
cmp dword [ebp], 0
jne case.0x7371cc.1
mov eax, dword [esp]
mov edi, dword [eax + 0x18]
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x736e7f
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x736eac
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x73960d
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
test edi, edi
je 0x739a9f
mov eax, dword [esi + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [esi + 8], eax
mov dword [esi + 0xc], edi
mov bl, 1
cmp dword [ebp], 0
jne case.0x7371cc.1
jmp 0x738dd6
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x739647
mov eax, dword [ebp + 0x30]
mov dword [ebx], eax
mov dword [ebp + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0xa000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [ebp + 0x1c], ebx
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x739619
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x739640
mov dword [edi], 2
jmp 0x7379a1
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x736dd2
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x2c]
mov dword [eax], ecx
mov dword [edx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov eax, dword [edi + 0xb0]
test eax, eax
je case.0x7371cc.1
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
jmp case.0x7371cc.1
mov dword [ebp], 2
jmp 0x738dc7
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x739647
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x739650
mov dword [ebp], 2
xor ebx, ebx
mov ecx, ebp
call fcn.00731400
mov dword [esp + 0x18], eax
mov edx, 0x23
mov ecx, ebp
push 0xfffffffffffffffe
push 0x8c
push 0
push 1
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
push dword [esp + 0x10]
push esi
call fcn.00730440
add esp, 0x10
mov eax, dword [esp + 4]
mov esi, dword [eax + 0x18]
test esi, esi
je 0x7396ed
cmp dword [ebp], 0
jne 0x7398b5
mov eax, esi
sub eax, 0xffffff80
cmp eax, 0x100
jb 0x7396cf
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 6]
cmp edx, 0xff8
ja 0x739759
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x739784
mov edx, 0x11
mov ecx, ebp
push 0
push 1
push esi
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x7396ed
or byte [eax + 1], 8
cmp dword [ebp], 0
jne 0x7398b5
mov eax, dword [esp + 4]
movzx esi, word [eax + 0x1c]
mov eax, esi
sub eax, 0xffffff80
cmp eax, 0x100
jb 0x73972c
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 6]
cmp edx, 0xff8
ja 0x7397a1
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x7397cc
mov edx, 0x11
mov ecx, ebp
push 0
push 1
push esi
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x73974a
or byte [eax + 1], 0x38
cmp dword [ebp], 0
jne 0x7398b5
jmp 0x7397e4
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7398ae
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 6
add eax, 8
mov byte [eax], 5
add dword [ebp + 0x48], 5
mov byte [eax + 1], 0xd
mov dword [eax + 2], esi
cmp dword [ebp], 0
jne 0x7398b5
jmp 0x7396f7
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7398ae
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 6
add eax, 8
mov byte [eax], 5
add dword [ebp + 0x48], 5
mov byte [eax + 1], 0x3d
mov dword [eax + 2], esi
cmp dword [ebp], 0
jne 0x7398b5
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x7397fe
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x73982b
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x7398ae
mov eax, dword [ebp + 0x30]
mov dword [esi], eax
mov dword [ebp + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x739866
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x73988d
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7398ae
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov eax, dword [esp + 4]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x7398b5
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
jmp 0x7398b5
mov dword [ebp], 2
mov ecx, edi
call fcn.00740e80
cmp dword [ebp], 0
jne 0x739e28
mov edx, 1
mov ecx, ebp
push 0
push 3
push 0
push 0xc
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x7398e4
mov byte [eax], 0x3b
cmp dword [ebp], 0
jne 0x739e28
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x739908
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x739935
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x739e21
mov eax, dword [ebp + 0x30]
mov dword [esi], eax
mov dword [ebp + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x8000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x739970
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x73999b
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x739e21
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x739e28
mov eax, dword [esi + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [esi + 8], eax
mov dword [esi + 0xc], ecx
jmp 0x739e28
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x73704d
mov eax, dword [edi + 0x30]
mov dword [esi], eax
mov dword [edi + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x30000
mov eax, dword [edi + 0x1c]
test eax, eax
cmove eax, dword [esp + 0x24]
mov dword [eax], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 5
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x739b1f
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x739b4a
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov ebp, eax
test ebp, ebp
je 0x739be0
mov eax, dword [ebx + 0x30]
mov dword [ebp], eax
mov dword [ebx + 0x30], ebp
mov dword [ebp + 4], 0x10
add ebp, 8
mov dword [ebp], 0
mov dword [ebp + 8], 0x30000
mov eax, dword [ebx + 0x1c]
lea ecx, [ebx + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebp
mov dword [ebx + 0x1c], ebp
add dword [ebx + 0x48], 5
mov ecx, dword [ebx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x739b7d
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x739ba4
xor ebx, ebx
cmp dword [ebp], 0
jne case.0x7371cc.1
jmp 0x738dd6
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x739d24
mov eax, dword [ebp + 0x30]
mov dword [ebx], eax
mov dword [ebp + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0xa000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [ebp + 0x1c], ebx
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x739bab
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x739bd6
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x73704d
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [edi], 0
jne case.0x7371cc.1
mov edi, dword [esp + 0xc]
mov ecx, dword [edi + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x73700d
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x737034
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x739be0
mov ecx, dword [ebx + 0x2c]
mov dword [eax], ecx
mov dword [ebx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x739be8
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x739d24
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x739d2d
mov dword [ebx], 2
xor ebp, ebp
mov eax, dword [esp + 4]
mov esi, dword [eax + 0x1c]
mov ecx, ebx
call fcn.00731400
test esi, esi
je 0x739c20
nop word [eax + eax]
test eax, eax
je 0x739c19
mov ecx, dword [esi]
test ecx, ecx
je 0x739c19
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov esi, dword [esi + 4]
test esi, esi
jne 0x739c00
mov eax, dword [esp + 4]
cmp dword [eax + 0x20], 0
js 0x739c2f
cmp dword [ebx], 0
je 0x739c9b
mov edx, 0x20
mov ecx, ebx
push 0
push 0x82
push 0
push 1
call fcn.00730440
add esp, 0x10
mov ecx, dword [edi]
cmp dword [ecx], 0
jne 0x739c65
mov edx, 0x11
push 0
push 2
push 0xc
push 0x40
call fcn.0073bb30
add esp, 0x10
mov ecx, ebx
call fcn.00731400
test ebp, ebp
je 0x739c83
test eax, eax
je 0x739c83
mov ecx, dword [ebp + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], eax
mov edx, 0x20
mov ecx, ebx
push 0
push 1
push dword [edi + 0x40]
push 0x8d
jmp 0x737172
mov eax, dword [ebx + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x739cb5
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x739ce2
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x737095
mov eax, dword [ebx + 0x30]
mov dword [esi], eax
mov dword [ebx + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x32000
mov eax, dword [ebx + 0x1c]
lea ecx, [ebx + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebx + 0x1c], esi
add dword [ebx + 0x48], 5
mov ecx, dword [ebx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x736de1
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x736e0c
mov dword [ebp], 2
xor ebx, ebx
mov ecx, dword [esp]
call fcn.00740e80
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
push dword [esp + 0x10]
push esi
call fcn.00730440
add esp, 0x10
cmp dword [ebp], 0
jne 0x739e28
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x739d71
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x739d9e
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x739e21
mov eax, dword [ebp + 0x30]
mov dword [esi], eax
mov dword [ebp + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x30000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 5
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x739dd9
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x739e00
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x739e21
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov eax, dword [esp + 4]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x739e28
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
jmp 0x739e28
mov dword [ebp], 2
mov ecx, ebp
call fcn.00731400
test ebx, ebx
je 0x739e46
test eax, eax
je 0x739e46
mov ecx, dword [ebx + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], eax
cmp dword [esp + 8], 0
jne case.0x73724b.2
mov eax, dword [esp]
mov ecx, dword [eax]
cmp dword [ecx], 0
jne case.0x73724b.2
mov edx, 0x11
push 0
push 2
push 8
push 0x40
call fcn.0073bb30
add esp, 0x10
nop dword [eax]
mov eax, dword [esp + 4]
mov esi, dword [eax + 0xc]
mov ecx, ebp
call fcn.00731400
test esi, esi
je case.0x7371cc.1
nop word cs:[eax + eax]
test eax, eax
je 0x739ea9
mov ecx, dword [esi]
test ecx, ecx
je 0x739ea9
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov esi, dword [esi + 4]
test esi, esi
jne 0x739e90
mov edi, dword [esp + 4]
mov edi, dword [edi]
test edi, edi
jne 0x737180
mov eax, dword [esp]
mov ecx, dword [esp + 0x2c]
mov dword [eax + 0x18], ecx
add esp, 0x5c
pop esi
pop edi
pop ebx
pop ebp
ret