Function at 0x756f68
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x6b
push 0
push 0
dec ecx
jne 0x756f70
push ecx
push ebx
push esi
push edi
mov dword [ebp - 0x10], edx
mov ebx, eax
xor eax, eax
push ebp
push 0x757919
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x756c7c]
call fcn.0040999c
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x756faa
sub edx, 0xfffffff8
call fcn.00410d98
mov eax, dword [ebp - 0x18]
mov dword [eax + 0xc], ebx
xor ebx, ebx
xor eax, eax
push ebp
push 0x757037
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x18]
add eax, 0x18
call fcn.0040b8d8
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x2c]
mov edx, dword [eax]
call dword [edx + 0xc]
mov edx, eax
mov eax, dword [ebp - 0x18]
add eax, 0x18
xor ecx, ecx
call fcn.0040c438
push 0
push 0
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x2c]
call fcn.004b998c
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x2c]
mov edx, dword [eax]
call dword [edx + 0xc]
push eax
mov eax, dword [ebp - 0x18]
add eax, 0x18
call fcn.0040be88
mov edx, eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x2c]
mov eax, dword [eax + 4]
pop ecx
call fcn.00407720
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x757076
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 0x18]
mov eax, edx
test eax, eax
je 0x757085
mov eax, dword [eax - 4]
mov dword [ebp - 0x14], eax
test bl, bl
jne 0x75726a
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
cmp byte [eax + 0x3c], 1
jne 0x7570e4
cmp dword [eax + 0x38], 1
jne 0x7570c3
mov eax, dword [0x8d1a20]
cmp byte [eax], 1
je 0x7578f1
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x7570ba
sub edx, 0xffffffcc
xor eax, eax
call fcn.004c703c
jmp 0x75712b
mov eax, dword [0x8d1a20]
cmp byte [eax], 1
je 0x7578f1
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x7570db
sub edx, 0xffffffd0
xor eax, eax
call fcn.004c703c
jmp 0x75712b
cmp dword [eax + 0x38], 9
jne 0x75710c
mov eax, edx
test eax, eax
je 0x7570f3
mov eax, dword [eax - 4]
mov edx, dword [ebp - 0x18]
mov dword [edx + 0x10], eax
mov eax, dword [ebp - 0x18]
add eax, 0x14
mov edx, dword [ebp - 0x18]
mov edx, dword [edx + 0x18]
call fcn.0040bd48
jmp 0x75712b
mov eax, dword [0x8d1a20]
cmp byte [eax], 1
je 0x7578f1
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x757124
sub edx, 0xffffffd4
xor eax, eax
call fcn.004c703c
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0x10], 0x2710
jge 0x757166
mov bl, 1
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
movzx eax, byte [eax + 0x3c]
dec al
jne 0x757166
mov eax, dword [0x8d1a20]
cmp byte [eax], 1
je 0x7578f1
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x75715f
sub edx, 0xffffffd8
xor eax, eax
call fcn.004c703c
test bl, bl
jne 0x7571ad
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x757177
mov eax, dword [eax - 4]
cmp eax, 0x2710
jge 0x7571ad
mov bl, 1
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
movzx eax, byte [eax + 0x3c]
dec al
jne 0x7571ad
mov eax, dword [0x8d1a20]
cmp byte [eax], 1
je 0x7578f1
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x7571a6
sub edx, 0xffffffdc
xor eax, eax
call fcn.004c703c
test bl, bl
jne 0x75726a
xor edx, edx
push ebp
push 0x75722b
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x2c]
call fcn.004ba800
push 0
push 0
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x2c]
call fcn.004b998c
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x14]
mov esi, eax
test esi, esi
je 0x7571f2
mov esi, dword [esi - 4]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x14]
call fcn.0040c30c
mov edx, eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x2c]
mov ecx, esi
mov esi, dword [eax]
call dword [esi + 0x1c]
push 0
push 0
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x2c]
call fcn.004b998c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x75726a
test bl, bl
jne case.0x757285.0
mov eax, dword [ebp - 0x18]
mov esi, dword [eax + 0xc]
movzx eax, byte [esi + 0x3c]
cmp eax, 0xc
ja case.0x757285.0
jmp dword [eax*4 + 0x75728c]
xor eax, eax
push ebp
push 0x7572fc
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x300]
mov ecx, 0x757934
call fcn.0040ca8c
mov edx, dword [ebp - 0x300]
mov eax, dword [esi + 0x2c]
call fcn.004ba77c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x757285.0
xor eax, eax
push ebp
push 0x75736e
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x304]
mov ecx, 0x757964
call fcn.0040ca8c
mov edx, dword [ebp - 0x304]
mov eax, dword [esi + 0x2c]
call fcn.004ba77c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x757285.0
xor eax, eax
push ebp
push 0x7573bb
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x308]
mov ecx, 0x757994
call fcn.0040ca8c
mov edx, dword [ebp - 0x308]
mov eax, dword [esi + 0x2c]
call fcn.004ba77c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x757285.0
xor eax, eax
push ebp
push 0x757408
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x30c]
mov ecx, 0x7579bc
call fcn.0040ca8c
mov edx, dword [ebp - 0x30c]
mov eax, dword [esi + 0x2c]
call fcn.004ba77c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x757285.0
xor eax, eax
push ebp
push 0x757455
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x310]
mov ecx, 0x7579f0
call fcn.0040ca8c
mov edx, dword [ebp - 0x310]
mov eax, dword [esi + 0x2c]
call fcn.004ba77c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x757285.0
xor eax, eax
push ebp
push 0x7574b4
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
mov eax, dword [esi + 0x2c]
call fcn.004b998c
mov eax, dword [ebp - 0x18]
mov esi, dword [eax + 0xc]
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x314]
mov ecx, 0x757a20
call fcn.0040ca8c
mov edx, dword [ebp - 0x314]
mov eax, dword [esi + 0x2c]
call fcn.004ba77c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x757285.0
xor eax, eax
push ebp
push 0x757513
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
mov eax, dword [esi + 0x2c]
call fcn.004b998c
mov eax, dword [ebp - 0x18]
mov esi, dword [eax + 0xc]
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x318]
mov ecx, 0x757a58
call fcn.0040ca8c
mov edx, dword [ebp - 0x318]
mov eax, dword [esi + 0x2c]
call fcn.004ba77c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x757285.0
xor eax, eax
push ebp
push 0x757572
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
mov eax, dword [esi + 0x2c]
call fcn.004b998c
mov eax, dword [ebp - 0x18]
mov esi, dword [eax + 0xc]
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x31c]
mov ecx, 0x757a78
call fcn.0040ca8c
mov edx, dword [ebp - 0x31c]
mov eax, dword [esi + 0x2c]
call fcn.004ba77c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x757285.0
xor eax, eax
push ebp
push 0x7575d1
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
mov eax, dword [esi + 0x2c]
call fcn.004b998c
mov eax, dword [ebp - 0x18]
mov esi, dword [eax + 0xc]
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x320]
mov ecx, 0x757a98
call fcn.0040ca8c
mov edx, dword [ebp - 0x320]
mov eax, dword [esi + 0x2c]
call fcn.004ba77c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x757285.0
xor eax, eax
push ebp
push 0x757630
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
mov eax, dword [esi + 0x2c]
call fcn.004b998c
mov eax, dword [ebp - 0x18]
mov esi, dword [eax + 0xc]
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x324]
mov ecx, 0x757ac8
call fcn.0040ca8c
mov edx, dword [ebp - 0x324]
mov eax, dword [esi + 0x2c]
call fcn.004ba77c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x757285.0
xor eax, eax
push ebp
push 0x75768c
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
mov eax, dword [esi + 0x2c]
call fcn.004b998c
mov eax, dword [ebp - 0x18]
mov esi, dword [eax + 0xc]
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x328]
mov ecx, 0x757afc
call fcn.0040ca8c
mov edx, dword [ebp - 0x328]
mov eax, dword [esi + 0x2c]
call fcn.004ba77c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x757285.0
xor eax, eax
push ebp
push 0x7576e5
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
mov eax, dword [esi + 0x2c]
call fcn.004b998c
mov eax, dword [ebp - 0x18]
mov esi, dword [eax + 0xc]
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x32c]
mov ecx, 0x757b40
call fcn.0040ca8c
mov edx, dword [ebp - 0x32c]
mov eax, dword [esi + 0x2c]
call fcn.004ba77c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x757285.0
test bl, bl
jne 0x7576fd
mov eax, dword [ebp - 0x10]
mov byte [eax], 1
jmp 0x757703
mov eax, dword [ebp - 0x10]
mov byte [eax], 0
xor eax, eax
push ebp
push 0x7578e7
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x18]
mov ebx, dword [eax + 0xc]
push dword [ebx + 0x30]
push 0x757b68
lea edx, [ebp - 0x334]
movzx eax, byte [ebx + 0x3c]
call fcn.0042fd94
push dword [ebp - 0x334]
push 0x757b94
lea eax, [ebp - 0x330]
mov edx, 4
call fcn.0040cb14
mov edx, dword [ebp - 0x330]
xor ecx, ecx
lea eax, [ebp - 0x2fc]
call fcn.004080e0
call fcn.00407348
lea eax, [ebp - 0x2fc]
call fcn.00407da0
call fcn.00407348
call fcn.004337c8
fstp qword [ebp - 0x20]
wait
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
lea edx, [ebp - 0x33c]
mov eax, dword [0x8d284c]
call fcn.00434788
mov ecx, dword [ebp - 0x33c]
lea eax, [ebp - 0x338]
mov edx, 0x757bac
call fcn.0040ca8c
mov edx, dword [ebp - 0x338]
lea eax, [ebp - 0x2fc]
call fcn.00409340
call fcn.00409444
call fcn.00407348
lea edx, [ebp - 0x344]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
movzx eax, byte [eax + 0x3c]
call fcn.0042fd94
mov ecx, dword [ebp - 0x344]
lea eax, [ebp - 0x340]
mov edx, 0x757bc4
call fcn.0040ca8c
mov edx, dword [ebp - 0x340]
lea eax, [ebp - 0x2fc]
call fcn.00409340
call fcn.00409444
call fcn.00407348
lea edx, [ebp - 0x34c]
mov eax, dword [ebp - 0x14]
call fcn.0042fd94
mov ecx, dword [ebp - 0x34c]
lea eax, [ebp - 0x348]
mov edx, 0x757be0
call fcn.0040ca8c
mov edx, dword [ebp - 0x348]
lea eax, [ebp - 0x2fc]
call fcn.00409340
call fcn.00409444
call fcn.00407348
lea edx, [ebp - 0x354]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x38]
call fcn.0042fd94
mov ecx, dword [ebp - 0x354]
lea eax, [ebp - 0x350]
mov edx, 0x757c10
call fcn.0040ca8c
mov edx, dword [ebp - 0x350]
lea eax, [ebp - 0x2fc]
call fcn.00409340
call fcn.00409444
call fcn.00407348
lea edx, [ebp - 0x35c]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x10]
call fcn.0042fd94
mov ecx, dword [ebp - 0x35c]
lea eax, [ebp - 0x358]
mov edx, 0x757c40
call fcn.0040ca8c
mov edx, dword [ebp - 0x358]
lea eax, [ebp - 0x2fc]
call fcn.00409340
call fcn.00409444
call fcn.00407348
lea eax, [ebp - 0x2fc]
call fcn.004081e8
call fcn.00407348
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x7578f1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x757920
lea eax, [ebp - 0x35c]
mov edx, 0x18
call fcn.0040b914
lea eax, [ebp - 0xc]
call fcn.00410d80
pop eax
jmp eax