Function at 0x7314e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x9c
mov ebx, ecx
mov ebp, dword [ebx]
cmp dword [ebx + 0x6c], 0
mov dword [esp + 0x18], ebp
mov dword [esp + 4], ebx
je 0x73152f
mov eax, dword [ebx + 0x14]
mov ecx, edx
sub ecx, dword [ebx + 4]
sar ecx, 1
cmp byte [eax + ecx], 0
je 0x73152f
mov eax, dword [ebx + 0x18]
mov dword [esp + 0x64], eax
cmp dword [ebp], 0
je 0x73158f
mov dword [esp + 0x20], 1
cmp edx, dword [esp + 0xb0]
jb 0x73154c
jmp 0x73672c
mov dword [esp + 0x20], 0
mov dword [esp + 0x64], 0
cmp edx, dword [esp + 0xb0]
jae 0x73672c
mov eax, dword [esp + 0xb4]
lea ecx, [eax + 8]
mov dword [esp + 0x10], ecx
lea eax, [eax + 0xc]
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 4]
lea eax, [ecx + 0x20]
mov dword [esp + 0x38], eax
lea eax, [ecx + 0xc0]
mov dword [esp + 0x28], eax
lea eax, [ecx + 0xc8]
mov dword [esp + 0x98], eax
lea eax, [ecx + 0x3c]
mov dword [esp + 0x58], eax
jmp 0x736210
mov dword [esp], edx
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x24]
cmp edx, 0x7f8
ja 0x7316f9
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
mov edx, dword [esp]
mov dword [edi + 0x20], 0
mov dword [edi + 0x1c], 0
mov dword [edi + 0x18], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0xc], 0
mov dword [edi + 8], 0
mov dword [edi + 4], 0
mov eax, dword [esp + 0xb4]
mov ecx, eax
mov eax, dword [ecx + 8]
mov dword [edi], eax
mov dword [ecx + 8], edi
mov dword [ebx + 0x18], edi
mov dword [edi + 0x10], 0x86265c
mov eax, edx
sub eax, dword [ebx + 4]
sar eax, 1
mov dword [edi + 0x18], eax
sub esp, 4
lea eax, [esp + 0x80]
mov ecx, ebx
push eax
push 0
push dword [esp + 0xbc]
call fcn.00758380
add esp, 0x10
mov dword [edi + 0x20], eax
mov dword [esp + 0x20], 0
test eax, eax
mov ecx, 0
mov dword [esp + 0x2c], eax
cmovns ecx, eax
mov dword [esp + 0x10], ecx
mov edx, 0x20
mov ecx, ebp
push dword [ebx + 0x40]
push 0x8d
push 0
push 3
call fcn.00730440
add esp, 0x10
mov esi, dword [ebx]
cmp dword [esi], 0
jne 0x7368ce
mov eax, dword [esp + 0x10]
lea eax, [eax*4 + 0xc]
mov edx, 0x11
mov ecx, esi
push 0
push 2
push eax
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x731698
or byte [eax + 1], 0x28
mov dword [esp + 0x20], 0
cmp dword [esi], 0
jne 0x7368ce
mov edx, 1
mov ecx, esi
push 0
push 0xa
push 0
push 2
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x7316c7
mov byte [eax], 0x3b
mov dword [esp + 0x20], 0
cmp dword [esi], 0
jne 0x7368ce
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 0x10]
cmp edx, 0x7f8
ja 0x73681d
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x736848
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x736805
mov eax, dword [ebp + 0x30]
mov dword [edi], eax
mov dword [ebp + 0x30], edi
mov dword [edi + 4], 0x24
cmp dword [ebp], 0
mov edx, dword [esp]
jne 0x731519
add edi, 8
jmp 0x7315b1
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov ebp, eax
test ebp, ebp
je 0x736887
mov eax, dword [edi + 0x30]
mov dword [ebp], eax
mov dword [edi + 0x30], ebp
mov dword [ebp + 4], 0x14
cmp dword [edi], 0
mov edx, dword [esp]
jne case.0x736224.97
add ebp, 8
lea eax, [edi + 0x30]
mov dword [esp + 8], eax
mov dword [ebp + 0xc], 0
mov dword [ebp + 8], 0
mov dword [ebp + 4], 0
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx]
mov dword [ebp], eax
mov dword [ebp + 0x10], edx
mov dword [ecx], ebp
movzx eax, word [edx]
cmp eax, 0x9f
mov ebx, dword [esp + 4]
je 0x731b52
movzx eax, ax
cmp eax, 0x9d
jne 0x731b45
cmp dword [edi], 0
jne 0x735ba8
mov eax, dword [esp + 8]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x73263d
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x73266c
mov eax, dword [esp + 0x18]
cmp dword [eax], 0
jne case.0x736224.97
mov dword [esp], edx
mov ebp, dword [esp + 0x18]
mov ecx, dword [ebp + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 0x14]
cmp edx, 0x7f8
ja 0x731df1
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x731e2a
movzx eax, word [edx + 2]
movzx eax, word [edx + eax*2]
add eax, 0xffffff9e
movzx eax, ax
cmp eax, 0xb
ja 0x731d93
sub esp, 0xc
mov ecx, dword [esp + 0x10]
push dword [esp + 0xc0]
call fcn.0074b2d0
jmp 0x736710
mov eax, dword [esp + 4]
mov ebp, dword [eax]
xor edi, edi
cmp dword [ebp], 0
jne 0x736715
mov eax, dword [esp + 4]
mov esi, dword [eax + 0xc8]
mov dword [esp], edx
movzx ebx, word [edx + 2]
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x18]
cmp edx, 0x7f8
mov edi, ebp
ja 0x732548
mov dword [esp + 8], edi
lea ebp, [eax + ecx + 8]
mov dword [eax + 4], edx
mov edx, dword [esp]
mov dword [ebp + 0x14], 0
mov dword [ebp + 0x10], 0
mov dword [ebp + 0xc], 0
mov dword [ebp + 8], 0
mov dword [ebp + 4], 0
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx]
mov dword [ebp], eax
mov dword [ebp + 0x10], edx
mov dword [ecx], ebp
mov edi, dword [esp + 4]
mov eax, dword [edi + 4]
lea edx, [eax + ebx*2]
sub esp, 4
mov ecx, edi
lea eax, [esp + 0x80]
push eax
push 1
push 0
call fcn.00758380
add esp, 0x10
cmp eax, 0xfffffffe
jne 0x7328b7
mov eax, dword [edi + 4]
lea esi, [eax + ebx*2]
mov ecx, edi
mov edx, esi
call fcn.0073b1d0
mov ecx, edi
movzx edi, word [esi + 2]
movzx edx, word [esi + edi*2]
lea esi, [esi + edi*2]
cmp edx, 0x77
je 0x731903
sub esp, 8
mov edx, eax
push ebp
push esi
call fcn.007314e0
add esp, 0x10
mov dword [ebp + 0x14], 1
jmp 0x735889
mov eax, dword [esp + 4]
mov edi, dword [eax]
cmp dword [edi], 0
jne case.0x736224.97
mov dword [esp], edx
mov esi, dword [edi + 0x30]
mov ecx, dword [esi + 4]
lea edx, [ecx + 0x14]
cmp edx, 0x7f8
ja 0x731eef
lea eax, [esi + ecx + 8]
mov dword [esi + 4], edx
mov edx, dword [esp]
jmp 0x731f26
movzx eax, word [edx + 2]
cmp eax, 0x81
jb 0x731dbd
sub esp, 0xc
mov ecx, dword [esp + 0x10]
push dword [esp + 0xc0]
call fcn.00754bd0
jmp 0x736710
mov eax, dword [esp + 0x18]
cmp dword [eax], 0
jne case.0x736224.97
mov esi, edx
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x18]
cmp edx, 0x7f8
ja 0x731fd1
lea ebp, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x73200c
mov eax, dword [esp + 0x18]
cmp dword [eax], 0
jne case.0x736224.97
mov dword [esp], edx
mov ebp, dword [esp + 0x18]
mov ecx, dword [ebp + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 0x14]
cmp edx, 0x7f8
ja 0x7320f0
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x732129
mov ebx, dword [esp + 4]
cmp dword [ebx + 0xcc], 0
jne 0x731aa4
mov esi, dword [ebx]
mov eax, dword [ebx + 0x10]
mov ebp, edx
movzx edi, word [edx + 2]
mov bl, byte [eax + edi]
test bl, bl
jne 0x731a3a
mov eax, dword [esp + 4]
mov eax, dword [eax + 0x1c]
lea eax, [eax + edi*4]
mov edx, 0x20
mov ecx, esi
push eax
push 0x8d
push 0
push 1
call fcn.00730440
add esp, 0x10
mov eax, dword [esp + 0x38]
mov eax, dword [eax]
lea eax, [eax + edi*8 + 4]
mov edx, 0x20
mov ecx, esi
push 0
push 0xc
push eax
push 0x8d
call fcn.00730440
add esp, 0x10
test bl, bl
mov edx, ebp
jne 0x731aa4
shl edi, 3
mov eax, dword [esp + 0x38]
add edi, dword [eax]
mov edx, 0x20
mov ecx, esi
push 0
push 1
push edi
push 0x8d
call fcn.00730440
mov edx, ebp
add esp, 0x10
jmp 0x731aa4
add edx, 2
nop dword [eax]
mov eax, edx
movzx ecx, word [eax + 2]
movzx edx, word [eax + ecx*2]
lea eax, [eax + ecx*2]
cmp edx, 0x77
mov edx, eax
je 0x731a90
add edx, 4
jmp 0x735bab
add edx, 2
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
test eax, eax
lea eax, [eax + 4]
cmove eax, dword [esp + 0x2c]
sub esp, 4
mov edi, edx
movzx edx, si
mov ecx, dword [esp + 8]
push 1
push eax
push edi
jmp 0x736266
lea edi, [edx + 4]
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
test eax, eax
lea eax, [eax + 4]
cmove eax, dword [esp + 0x2c]
sub esp, 4
mov ecx, dword [esp + 8]
push 0
push 1
push eax
jmp 0x731b38
lea edi, [edx + 6]
mov esi, dword [esp + 0x10]
mov eax, dword [esi]
test eax, eax
lea eax, [eax + 4]
mov ebp, dword [esp + 0x2c]
cmove eax, ebp
sub esp, 0xc
mov ebx, dword [esp + 0x10]
mov ecx, ebx
mov dword [esp + 0xc], edx
push eax
call fcn.007527e0
add esp, 0x10
mov eax, dword [esi]
test eax, eax
lea eax, [eax + 4]
cmove eax, ebp
sub esp, 4
mov ecx, ebx
mov edx, dword [esp + 4]
push 0
push 1
push eax
call fcn.00751150
add esp, 0x10
jmp 0x73671d
cmp dword [ebx + 0xcc], 0
je 0x7323bd
cmp dword [ebx + 0xb8], 0
mov eax, dword [edi]
je 0x731bf9
test eax, eax
jne 0x735ba8
mov eax, dword [esp + 8]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x7324d7
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x732506
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x732434
mov edx, dword [esp + 0x14]
mov ecx, dword [edx + 0x30]
mov dword [eax], ecx
mov dword [edx + 0x30], eax
mov ebx, eax
mov dword [eax + 4], 0x20
xor edi, edi
cmp dword [edx], 0
jne 0x736715
add ebx, 8
jmp 0x73633b
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
test eax, eax
lea ebp, [eax + 4]
cmove ebp, dword [esp + 0x2c]
mov eax, dword [ecx]
mov dword [esp + 0x14], eax
mov dword [esp + 0x7c], 0
xor edi, edi
mov ebx, edx
mov dword [esp + 0x1c], ebp
mov dword [esp], edx
jmp 0x731c30
test eax, eax
jne 0x735ba8
mov eax, dword [esp + 8]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x732837
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x732866
xor ecx, ecx
jmp 0x731d70
cmp ebx, dword [esp + 0xb0]
jae 0x732593
movzx eax, word [ebx]
cmp eax, 0x1e
je 0x731c75
xor ecx, ecx
movzx eax, ax
cmp eax, 0x1d
jne 0x731d70
mov eax, dword [esp + 4]
cmp dword [eax + 0x110], 0
je 0x731cb8
movzx eax, word [ebx + 2]
and eax, 0xfc00
xor ecx, ecx
cmp eax, 0xd800
jmp 0x731d6c
lea edx, [ebx + 2]
mov eax, dword [esp + 4]
cmp dword [eax + 0x110], 0
movzx eax, word [ebx + 2]
je 0x731cc2
mov ecx, eax
and ecx, 0xfc00
mov dword [esp + 8], ecx
cmp ecx, 0xd800
jne 0x731d00
shl eax, 0xa
and eax, 0xffc00
movzx ecx, word [ebx + 4]
and ecx, 0x3ff
lea eax, [eax + ecx + 0x10000]
jmp 0x731d07
mov ecx, 1
jmp 0x731d70
mov ecx, 1
cmp eax, 0x100
jae 0x731d70
mov ecx, dword [esp + 4]
mov ecx, dword [ecx + 0x54]
movzx ebp, byte [ecx + eax]
mov ecx, 1
cmp ebp, eax
mov ebp, dword [esp + 0x1c]
je 0x731d70
mov ecx, dword [esp + 4]
call fcn.0075e470
xor ecx, ecx
test eax, eax
setne cl
jmp 0x731d70
cmp eax, 0x80
jb 0x731d42
mov ecx, eax
sar ecx, 0x1f
shr ecx, 0x19
add ecx, eax
mov ebp, ecx
and ebp, 0x7fffff80
sar ecx, 7
movzx ecx, byte [ecx + 0x8649f0]
shl ecx, 7
sub eax, ebp
add eax, ecx
movzx eax, word [eax + eax + 0x866bf0]
cmp dword [eax*8 + 0x863374], 0
mov ebp, dword [esp + 0x1c]
jne 0x731d51
jmp 0x731d62
mov ecx, dword [esp + 4]
mov ecx, dword [ecx + 0x54]
movzx ecx, byte [ecx + eax]
cmp eax, ecx
je 0x731d62
mov ecx, dword [esp + 4]
call fcn.0075e470
test eax, eax
je 0x731c25
xor ecx, ecx
cmp dword [esp + 8], 0xd800
sete cl
inc ecx
lea edi, [edi + ecx*2]
test ecx, ecx
je 0x732590
lea ebx, [ebx + ecx*2 + 2]
cmp edi, 0x81
mov edx, dword [esp]
jl 0x731c30
jmp 0x732593
add edx, 2
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
test eax, eax
lea eax, [eax + 4]
cmove eax, dword [esp + 0x2c]
sub esp, 4
mov esi, edx
mov edx, 0x70
mov ecx, dword [esp + 8]
push 1
push eax
push esi
jmp 0x736266
mov eax, dword [esp + 0x18]
cmp dword [eax], 0
jne case.0x736224.97
mov edi, edx
mov esi, dword [esp + 0x18]
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 0x24]
cmp edx, 0x7f8
ja 0x73244d
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x732481
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x736814
mov ecx, dword [ebp + 0x30]
mov dword [eax], ecx
mov dword [ebp + 0x30], eax
mov dword [eax + 4], 0x14
cmp dword [ebp], 0
jne case.0x736224.97
add eax, 8
mov ebp, dword [esp + 0x18]
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov edx, dword [esp + 0x10]
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [esp]
mov dword [eax + 0x10], ecx
mov dword [edx], eax
mov edx, 0x20
mov ecx, ebp
mov ebx, dword [esp + 4]
push dword [ebx + 0x20]
push 0x8d
push 0
push 3
call fcn.00730440
add esp, 0x10
mov esi, dword [ebx]
xor edi, edi
cmp dword [esi], 0
jne 0x732f95
mov edx, 0x11
mov ecx, esi
push 0
push 2
push 4
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x731e9a
or byte [eax + 1], 0x28
xor edi, edi
cmp dword [esi], 0
jne 0x732f95
mov edx, 1
mov ecx, esi
push 0
push 0xa
push 0
push 2
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x731ec3
mov byte [eax], 0x3b
xor edi, edi
cmp dword [esi], 0
jne 0x732f95
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x732c74
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x732ca1
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x736887
mov ecx, dword [edi + 0x30]
mov dword [eax], ecx
mov dword [edi + 0x30], eax
mov dword [eax + 4], 0x14
cmp dword [edi], 0
mov edx, dword [esp]
jne case.0x736224.97
add eax, 8
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov ecx, dword [esp + 0x10]
mov esi, dword [ecx]
mov dword [eax], esi
mov dword [eax + 0x10], edx
mov dword [esp + 8], eax
mov dword [ecx], eax
mov eax, dword [esp + 4]
mov esi, dword [eax]
xor ebx, ebx
cmp dword [esi], 0
jne 0x73304f
mov edx, 0x11
mov ecx, esi
push 0
push 2
push 0x38
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x731f7c
or byte [eax + 1], 0x28
xor ebx, ebx
cmp dword [esi], 0
jne 0x73304f
mov edx, 1
mov ecx, esi
push 0
push 0xa
push 0
push 2
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x731fa5
mov byte [eax], 0x3b
xor ebx, ebx
cmp dword [esi], 0
jne 0x73304f
mov ebx, dword [esi + 0x30]
mov ecx, dword [ebx + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x732ce3
lea eax, [ebx + ecx + 8]
mov dword [ebx + 4], edx
jmp 0x732d0e
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov ebp, eax
test ebp, ebp
je 0x736a99
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 0x30]
mov dword [ebp], eax
mov dword [ecx + 0x30], ebp
mov dword [ebp + 4], 0x18
cmp dword [ecx], 0
jne case.0x736224.97
add ebp, 8
mov dword [ebp + 0x14], 0
mov dword [ebp + 0x10], 0
mov dword [ebp + 0xc], 0
mov dword [ebp + 8], 0
mov dword [ebp + 4], 0
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx]
mov dword [ebp], eax
mov dword [ebp + 0x10], esi
mov dword [ecx], ebp
add esi, 2
mov edi, esi
mov edx, dword [esp + 4]
nop word cs:[eax + eax]
movzx ecx, word [edi + 2]
movzx eax, word [edi + ecx*2]
lea edi, [edi + ecx*2]
cmp eax, 0x77
je 0x732050
movzx eax, ax
cmp eax, 0x7a
mov ebx, edx
mov ebx, dword [ebx]
mov eax, dword [ebx]
jne 0x7321fe
xor esi, esi
test eax, eax
jne 0x733e40
mov edx, 0x11
mov ecx, ebx
push 0
push 2
push 8
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x73209b
or byte [eax + 1], 0x28
xor esi, esi
cmp dword [ebx], 0
jne 0x733e40
mov edx, 1
mov ecx, ebx
push 0
push 0xa
push 0
push 2
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x7320c4
mov byte [eax], 0x3b
xor esi, esi
cmp dword [ebx], 0
jne 0x733e40
mov eax, dword [ebx + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x733afa
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x733b27
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x736814
mov ecx, dword [ebp + 0x30]
mov dword [eax], ecx
mov dword [ebp + 0x30], eax
mov dword [eax + 4], 0x14
cmp dword [ebp], 0
jne case.0x736224.97
add eax, 8
mov ebp, dword [esp + 0x18]
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov edx, dword [esp + 0x10]
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [esp]
mov dword [eax + 0x10], ecx
mov dword [edx], eax
mov edx, 0x20
mov ecx, ebp
mov ebx, dword [esp + 4]
push dword [ebx + 0x3c]
push 0x8d
push 0
push 3
call fcn.00730440
add esp, 0x10
mov edi, dword [ebx]
xor esi, esi
cmp dword [edi], 0
jne 0x733502
cmp dword [ebx + 0x68], 0
mov eax, 0x14
mov ecx, 4
cmove eax, ecx
mov edx, 0x11
mov ecx, edi
push 0
push 2
push eax
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x7321a9
or byte [eax + 1], 0x28
xor esi, esi
cmp dword [edi], 0
jne 0x733502
mov edx, 1
mov ecx, edi
push 0
push 0xa
push 0
push 2
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x7321d2
mov byte [eax], 0x3b
xor esi, esi
cmp dword [edi], 0
jne 0x733502
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x732d54
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x732d81
xor esi, esi
test eax, eax
jne 0x733ef0
mov edx, 0x11
mov ecx, ebx
push 0
push 2
push 4
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x732227
or byte [eax + 1], 0x28
xor esi, esi
cmp dword [ebx], 0
jne 0x733ef0
mov edx, 1
mov ecx, ebx
push 0
push 0xa
push 0
push 2
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x732250
mov byte [eax], 0x3b
xor esi, esi
cmp dword [ebx], 0
jne 0x733ef0
mov eax, dword [ebx + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x733b69
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x733b96
movzx ecx, word [edx + 4]
lea eax, [ecx*4]
add eax, dword [ebx + 0x1c]
mov dword [esp + 0x44], eax
add ecx, ecx
lea eax, [edx + 6]
mov dword [esp + 0x24], eax
mov dword [esp + 8], ecx
sub esp, 4
mov ecx, ebx
push esi
push 0
push 0
call fcn.00758380
add esp, 0x10
mov ecx, eax
mov esi, dword [esp + 0x1c]
mov dword [esi + 0x18], ecx
test ecx, ecx
mov dword [esp + 0x48], ecx
js 0x73239e
movzx eax, word [esp + 0x50]
mov dword [esp + 0xc], 0
mov dword [esp + 0x30], eax
cmp eax, 0x94
mov edx, 0
mov eax, 0xffffffff
cmove edx, eax
add edx, ecx
cmp dword [esp + 8], 1
adc edx, 0
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x34], eax
cmp eax, 1
sbb edx, 0xffffffff
add edx, 2
mov dword [esp + 0x3c], edx
mov dword [esi + 0x1c], edx
mov esi, dword [ebx]
cmp dword [esi], 0
mov ebp, edi
jne 0x7338e5
mov eax, dword [esp + 0x3c]
lea eax, [eax*4]
mov edx, 0x11
mov ecx, esi
push 0
push 2
push eax
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x73233d
or byte [eax + 1], 0x28
mov dword [esp + 0xc], 0
cmp dword [esi], 0
jne 0x7338e5
mov edx, 1
mov ecx, esi
push 0
push 0xa
push 0
push 2
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x73236c
mov byte [eax], 0x3b
mov dword [esp + 0xc], 0
cmp dword [esi], 0
jne 0x7338e5
mov edi, dword [esi + 0x30]
mov ecx, dword [edi + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x732f1c
lea eax, [edi + ecx + 8]
mov dword [edi + 4], edx
jmp 0x732f47
mov ecx, dword [esp + 8]
test ecx, ecx
mov ebp, edi
je 0x7326ae
cmp dword [ebx + 0x44], 1
mov eax, 3
sbb eax, 0
jmp 0x7326b3
cmp dword [ebx + 0x60], 0
je 0x731b52
cmp dword [ebx + 0xb8], 0
mov eax, dword [edi]
je 0x73293d
test eax, eax
jne 0x735109
mov eax, dword [edi + 0x58]
mov ecx, dword [esp + 0x38]
add eax, dword [ecx]
mov edx, 1
mov ecx, edi
push eax
push 0x8d
push 0
push 0xc
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x732407
mov byte [eax], 0x3b
cmp dword [edi], 0
jne 0x735109
mov eax, dword [esp + 8]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x733d8c
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x733dbb
mov eax, dword [esp + 0x14]
mov dword [eax], 2
xor edi, edi
test edi, edi
jne 0x73671d
jmp case.0x736224.97
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7367f4
mov ecx, dword [esi + 0x30]
mov dword [eax], ecx
mov dword [esi + 0x30], eax
mov dword [eax + 4], 0x24
cmp dword [esi], 0
jne case.0x736224.97
add eax, 8
mov dword [eax + 0x20], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov esi, dword [esp + 0x10]
mov ecx, dword [esi]
mov dword [eax], ecx
mov edx, edi
mov dword [eax + 0x10], edx
mov dword [esi], eax
sub esp, 8
mov ecx, dword [esp + 0xc]
push 0
push eax
jmp 0x736705
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x735b9f
mov ecx, dword [esp + 8]
mov eax, dword [ecx]
mov dword [esi], eax
mov dword [ecx], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x30000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 5
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x732782
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x7327ad
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7338c2
mov ecx, dword [edi + 0x30]
mov dword [eax], ecx
mov dword [edi + 0x30], eax
mov ecx, eax
mov dword [eax + 4], 0x18
mov eax, edi
xor edi, edi
cmp dword [eax], 0
mov edx, dword [esp]
jne 0x736715
mov dword [esp + 8], eax
mov ebp, ecx
add ebp, 8
jmp 0x731895
mov edx, dword [esp]
mov dword [esp + 0x7c], edi
test edi, edi
jle 0x732619
mov esi, dword [esp + 0x14]
cmp dword [esi], 0
mov ebx, dword [esp + 4]
jne 0x735788
mov ebp, edx
mov edx, 0x11
mov ecx, esi
push 0
push 0xc
push edi
push 0x40
call fcn.0073bb30
mov edx, ebp
add esp, 0x10
cmp dword [esi], 0
jne 0x735788
mov edx, 1
mov ecx, esi
push 0
push 0xb
push 0
push 0xc
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x7325ed
mov byte [eax], 0x3b
cmp dword [esi], 0
mov edx, ebp
jne 0x735788
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x733bd8
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x733c09
add edx, 2
sub esp, 4
mov eax, edx
movzx edx, si
mov ebx, dword [esp + 8]
mov ecx, ebx
push 1
push ebp
push eax
call fcn.00747960
add esp, 0x10
mov edx, eax
jmp 0x7357d9
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x735b9f
mov ecx, dword [esp + 8]
mov eax, dword [ecx]
mov dword [esi], eax
mov dword [ecx], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x30000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 5
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x7327d7
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x732802
mov eax, 1
mov edi, ebx
movzx esi, word [esp + 0x50]
xor edx, edx
mov dword [esp + 0xc], esi
cmp esi, 0x94
setne dl
mov esi, dword [esp + 0x7c]
xor ebx, ebx
mov dword [esp + 0x34], esi
test esi, esi
setne bl
add edx, eax
mov dword [esp + 0x30], ebx
add edx, ebx
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0x1c]
mov dword [eax + 0x1c], edx
mov esi, dword [edi]
xor eax, eax
cmp dword [esi], 0
mov ebx, edi
jne 0x73413d
mov eax, dword [esp + 0x3c]
lea eax, [eax*4]
mov edx, 0x11
mov ecx, esi
push 0
push 2
push eax
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x732723
or byte [eax + 1], 0x28
xor eax, eax
cmp dword [esi], 0
mov ecx, dword [esp + 8]
jne 0x73413d
mov edx, 1
mov ecx, esi
push 0
push 0xa
push 0
push 2
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x732750
mov byte [eax], 0x3b
xor eax, eax
cmp dword [esi], 0
mov ecx, dword [esp + 8]
jne 0x73413d
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x733c4f
lea ecx, [eax + ecx + 8]
mov dword [eax + 4], edx
mov eax, ecx
jmp 0x733c7a
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735b9f
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov edx, dword [esp]
mov word [eax], pe_nt_image_headers32
mov eax, dword [ebx + 0xb8]
test eax, eax
je 0x735ba8
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
jmp 0x735ba8
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735b9f
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov edx, dword [esp]
mov word [eax], pe_nt_image_headers32
cmp dword [edi], 0
jne 0x735ba8
mov eax, dword [esp + 8]
mov ecx, dword [eax]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x73299b
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x7329c8
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x735b9f
mov ecx, dword [esp + 8]
mov eax, dword [ecx]
mov dword [esi], eax
mov dword [ecx], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x30000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 5
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x7328dd
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x732908
mov dword [esp + 0x24], 0
mov edx, dword [esp]
mov edi, dword [esp + 0x14]
mov ebx, ebp
jmp case.0x7363e1.1
mov dword [esp + 0x1c], ebp
test esi, esi
je 0x7329db
mov edx, dword [esp]
mov ebp, esi
cmp dword [ebp + 0xc], ebx
je 0x732aa5
mov esi, dword [ebp]
test esi, esi
jne 0x7328c6
jmp 0x7329dd
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735b9f
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov edx, dword [esp]
mov word [eax], pe_nt_image_headers32
cmp dword [edi], 0
jne 0x735ba8
mov eax, dword [esp + 8]
mov ecx, dword [eax]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x732c2e
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x732c5b
test eax, eax
jne 0x735109
mov eax, dword [edi + 0x58]
mov ecx, dword [esp + 0x38]
add eax, dword [ecx]
mov edx, 1
mov ecx, edi
push eax
push 0x8d
push 0
push 0xc
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x73296e
mov byte [eax], 0x3b
cmp dword [edi], 0
jne 0x735109
mov eax, dword [esp + 8]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x735044
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x735073
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735b9f
mov edx, dword [esp + 8]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 8
add eax, 8
mov edx, dword [esp]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 4], ecx
mov dword [eax], esi
mov dword [ebp + 0xc], eax
jmp 0x735ba8
xor ebp, ebp
xor edi, edi
mov esi, dword [esp + 8]
cmp dword [esi], 0
jne 0x736715
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 0x10]
cmp edx, 0x7f8
mov edi, esi
ja 0x733884
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
mov edx, dword [esp]
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], ebx
test ebp, ebp
cmove ebp, dword [esp + 0x98]
mov dword [ebp], eax
mov ebp, eax
jmp 0x732aa9
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x732b98
mov ecx, dword [esi + 0x30]
mov dword [eax], ecx
mov dword [esi + 0x30], eax
mov dword [eax + 4], 0x10
add eax, 8
mov dword [eax], 0
mov dword [eax + 8], 0x4000
mov edx, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test edx, edx
cmovne ecx, edx
mov dword [ecx], eax
mov dword [esp], eax
mov dword [esi + 0x1c], eax
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x732b67
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x732b8e
mov edi, dword [esp + 8]
mov esi, dword [esp + 4]
mov ecx, dword [esi + 0x3c]
mov eax, dword [esi + 0x64]
test eax, eax
je 0x732dc3
test ecx, ecx
je 0x732dcb
mov edx, 0x20
mov dword [esp + 8], edi
mov ecx, edi
push dword [esi + 0x20]
push 0x8d
push 0
push 3
call fcn.00730440
add esp, 0x10
mov edi, dword [esi]
xor eax, eax
cmp dword [edi], 0
jne 0x735dc4
mov edx, 0x11
mov ecx, edi
push 0
push 2
push 8
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x732b0e
or byte [eax + 1], 0x28
xor eax, eax
cmp dword [edi], 0
jne 0x735dc4
mov edx, 1
mov ecx, edi
push 0
push 0xa
push 0
push 2
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x732b37
mov byte [eax], 0x3b
xor eax, eax
cmp dword [edi], 0
jne 0x735dc4
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x735c25
lea ecx, [eax + ecx + 8]
mov dword [esp + 0x14], ecx
mov dword [eax + 4], edx
jmp 0x735c56
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x732b98
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov eax, dword [esp]
jmp 0x732ba0
mov dword [esi], 2
xor eax, eax
mov esi, dword [ebx]
cmp dword [esi], 0
jne 0x732c07
mov dword [esp], eax
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0xc]
cmp edx, 0x7f8
ja 0x732bc4
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x732bed
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x732c26
mov eax, dword [esi + 0x30]
mov dword [ebx], eax
mov dword [esi + 0x30], ebx
mov dword [ebx + 4], 0xc
add ebx, 8
mov eax, dword [esp]
mov dword [ebx], eax
mov ecx, esi
call fcn.00731400
mov dword [ebx + 4], eax
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx]
mov dword [ebx + 8], eax
mov dword [ecx], ebx
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
push 0
push 0x82
call fcn.00730440
add esp, 0x10
jmp 0x73671d
mov dword [esi], 2
jmp 0x732c07
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735b9f
mov edx, dword [esp + 8]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 8
add eax, 8
mov edx, dword [esp]
mov ecx, dword [ebx + 0xe0]
mov dword [eax + 4], ecx
mov dword [eax], esi
mov dword [ebx + 0xe0], eax
jmp 0x735ba8
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x732f8d
mov eax, dword [esi + 0x30]
mov dword [edi], eax
mov dword [esi + 0x30], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0x4000
mov eax, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], edi
mov dword [esi + 0x1c], edi
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x732e79
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x732ea4
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x733047
mov ecx, dword [esi + 0x30]
mov dword [eax], ecx
mov dword [esi + 0x30], eax
mov dword [eax + 4], 0x10
add eax, 8
mov dword [eax], 0
mov dword [eax + 8], 0x4000
mov edx, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test edx, edx
cmovne ecx, edx
mov dword [ecx], eax
mov dword [esp + 0x1c], eax
mov dword [esi + 0x1c], eax
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x732eae
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x732ed9
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x7334fa
mov eax, dword [edi + 0x30]
mov dword [esi], eax
mov dword [edi + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x4000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x732ee7
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x732f12
test ecx, ecx
je 0x735e84
test eax, eax
mov eax, dword [esp + 0x38]
cmove eax, dword [esp + 0x58]
mov edx, 0x20
mov dword [esp + 8], edi
mov ecx, edi
push dword [eax]
push 0x8d
push 0
push 3
call fcn.00730440
add esp, 0x10
mov edi, dword [esi]
xor eax, eax
cmp dword [edi], 0
jne 0x735d32
mov edx, 0x11
mov ecx, edi
push 0
push 2
push 4
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x732e20
or byte [eax + 1], 0x28
xor eax, eax
cmp dword [edi], 0
jne 0x735d32
mov edx, 1
mov ecx, edi
push 0
push 0xa
push 0
push 2
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x732e49
mov byte [eax], 0x3b
xor eax, eax
cmp dword [edi], 0
jne 0x735d32
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x735bb2
lea ecx, [eax + ecx + 8]
mov dword [esp + 0x14], ecx
mov dword [eax + 4], edx
jmp 0x735be3
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x732f8d
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x732f95
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x733047
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov ebx, dword [esp + 0x1c]
jmp 0x73304f
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7334fa
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x733502
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7338d7
mov ecx, dword [esi + 0x30]
mov dword [eax], ecx
mov dword [esi + 0x30], eax
mov dword [eax + 4], 0x10
add eax, 8
mov dword [eax], 0
mov dword [eax + 8], 0x4000
mov edx, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test edx, edx
cmovne ecx, edx
mov dword [ecx], eax
mov dword [esp + 0xc], eax
mov dword [esi + 0x1c], eax
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x733856
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x73387d
mov dword [esi], 2
xor edi, edi
mov esi, dword [ebx]
cmp dword [esi], 0
jne 0x732ffc
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0xc]
cmp edx, 0x7f8
ja 0x732fb6
lea ebp, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x732fe0
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov ebp, eax
test ebp, ebp
je 0x73303f
mov eax, dword [esi + 0x30]
mov dword [ebp], eax
mov dword [esi + 0x30], ebp
mov dword [ebp + 4], 0xc
add ebp, 8
mov dword [ebp], edi
mov ecx, esi
call fcn.00731400
mov dword [ebp + 4], eax
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx]
mov dword [ebp + 8], eax
mov dword [ecx], ebp
mov ebp, dword [esp + 0x18]
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
mov eax, dword [esp + 0x40]
push dword [eax]
push 0x8d
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 3
push 0
push 0x82
call fcn.00730440
add esp, 0x10
mov edi, dword [esp]
add edi, 2
jmp 0x73671d
mov dword [esi], 2
jmp 0x732ff8
mov dword [esi], 2
xor ebx, ebx
mov ebp, dword [esp + 4]
mov esi, dword [ebp]
cmp dword [esi], 0
jne 0x7330bf
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0xc]
cmp edx, 0x7f8
ja 0x733075
lea ebp, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x7330a3
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov ebp, eax
test ebp, ebp
je 0x73342a
mov eax, dword [esi + 0x30]
mov dword [ebp], eax
mov dword [esi + 0x30], ebp
mov dword [ebp + 4], 0xc
add ebp, 8
mov dword [ebp], ebx
mov ecx, esi
call fcn.00731400
mov dword [ebp + 4], eax
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx]
mov dword [ebp + 8], eax
mov dword [ecx], ebp
mov ebp, dword [esp + 4]
mov edx, 0x20
mov ecx, edi
push dword [ebp + 0x44]
push 0x8d
push 0
push 3
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, edi
push 0
push 8
push 0
push 1
call fcn.00730440
add esp, 0x10
mov eax, dword [esp]
movzx eax, word [eax + 2]
mov edx, 0x26
mov ecx, edi
push eax
push 0x40
push 4
push 0x82
call fcn.00730440
add esp, 0x10
mov edx, 0x26
mov ecx, edi
push 0
push 3
push 0x20
push 0x82
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, edi
push dword [ebp + 0x20]
push 0x8d
push 0
push 3
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, edi
push 0
push 0xc
push 8
push 0x82
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, edi
push 0
push 3
push 0xc
push 0x82
call fcn.00730440
add esp, 0x10
cmp dword [ebp + 0x3c], 0
mov ebx, ebp
je 0x73319c
mov edx, 0x20
mov ecx, edi
push 0x14
push 0x81
push 0
push 3
call fcn.00730440
add esp, 0x10
mov esi, dword [esp]
movzx eax, word [esi + 4]
mov edx, 0x26
mov ecx, edi
push eax
push 0x40
push 0x28
push 0x82
call fcn.00730440
add esp, 0x10
movzx eax, word [esi + 6]
mov edx, 0x26
mov ecx, edi
push eax
push 0x40
push 0x2c
push 0x82
call fcn.00730440
add esp, 0x10
mov eax, dword [esp + 0x58]
cmp dword [eax], 0
mov eax, 3
mov ecx, 0x40
cmove eax, ecx
mov edx, 0x20
mov ecx, edi
push 0
push eax
push 0x30
push 0x82
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, edi
push 0
push 2
push 0
push 0x8d
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, edi
push 0
push 2
push 0
push 2
call fcn.00730440
add esp, 0x10
cmp dword [edi], 0
je 0x7332f1
sub esp, 0xc
mov edx, 0x1113
mov ecx, edi
push 0x75ef80
call fcn.0073a4f0
add esp, 0x10
mov edx, 0x20
mov ecx, edi
push 0
push 0x8d
push 0
push 2
call fcn.00730440
add esp, 0x10
mov ecx, dword [ebx]
cmp dword [ecx], 0
jne 0x73328d
mov edx, 0x11
push 0
push 2
push 0x38
push 0x40
call fcn.0073bb30
add esp, 0x10
mov ecx, dword [edi]
test ecx, ecx
jne 0x7332b8
mov edx, 0x11
mov ecx, edi
push 0
push 1
push 0
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x7332b2
or byte [eax + 1], 0x38
mov ecx, dword [edi]
test ecx, ecx
je 0x733325
cmp dword [ebx + 0xb4], 0
je 0x73371b
test ecx, ecx
mov edx, dword [esp]
jne 0x733722
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x73336d
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x73339a
mov eax, dword [edi + 0x58]
mov ecx, dword [esp + 0x38]
add eax, dword [ecx]
je 0x733346
mov edx, 1
mov ecx, edi
push eax
push 0x8d
push 0
push 3
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x733240
mov byte [eax], 0x8d
jmp 0x733240
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x733435
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x733462
mov edx, 1
mov ecx, edi
push 0
push 3
push 0
push 0xd
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x733240
mov byte [eax], 0x89
jmp 0x733240
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x733845
mov eax, dword [edi + 0x30]
mov dword [esi], eax
mov dword [edi + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x2000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x7333d5
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x733400
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x733845
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov edx, dword [esp]
mov word [eax], pe_nt_image_headers32
mov eax, dword [ebx + 0xb4]
test eax, eax
je 0x733722
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
jmp 0x733722
mov dword [esi], 2
jmp 0x7330bb
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x733703
mov eax, dword [edi + 0x30]
mov dword [esi], eax
mov dword [edi + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x10000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x73349d
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x7334c8
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x733703
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov ecx, dword [edi]
test ecx, ecx
jne 0x7332b8
mov ecx, dword [edi + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x7336bc
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
xor ecx, ecx
jmp 0x7336e5
mov dword [edi], 2
xor esi, esi
mov edi, dword [ebx]
cmp dword [edi], 0
jne 0x73356d
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0xc]
cmp edx, 0x7f8
ja 0x733523
lea ebp, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x733551
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov ebp, eax
test ebp, ebp
je 0x7336b1
mov eax, dword [edi + 0x30]
mov dword [ebp], eax
mov dword [edi + 0x30], ebp
mov dword [ebp + 4], 0xc
add ebp, 8
mov dword [ebp], esi
mov ecx, edi
call fcn.00731400
mov dword [ebp + 4], eax
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx]
mov dword [ebp + 8], eax
mov dword [ecx], ebp
mov ebp, dword [esp + 0x18]
mov edx, 0x20
mov ecx, ebp
push 0
push 8
push 0
push 1
call fcn.00730440
add esp, 0x10
xor eax, eax
cmp dword [ebx + 0x68], 0
setne al
shl eax, 4
mov edx, 0x20
mov ecx, ebp
push 0
push 3
push eax
push 0x82
call fcn.00730440
add esp, 0x10
mov eax, dword [esp]
lea esi, [eax + 4]
mov edx, 0x20
mov ecx, ebp
push esi
push 0x40
push 0
push 3
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 3
push dword [ebx + 0x3c]
push 0x8d
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 3
push 0x14
push 0x81
call fcn.00730440
add esp, 0x10
cmp dword [ebx + 0x68], 0
je 0x7336a1
mov edx, 0x20
mov ecx, ebp
push dword [ebx + 0x40]
push 0x8d
push 0
push 1
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 2
push dword [ebx + 0x40]
push 0x8d
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 0x40
push 4
push 0x82
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push esi
push 0x40
push 8
push 0x82
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
push 0xc
push 0x82
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 1
push 0
push 0x82
call fcn.00730440
add esp, 0x10
mov ecx, dword [esp]
movzx eax, word [ecx + 2]
lea edi, [ecx + eax*2 + 6]
jmp 0x73671d
mov dword [edi], 2
jmp 0x733569
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x733703
mov ecx, dword [edi + 0x30]
mov dword [eax], ecx
mov dword [edi + 0x30], eax
mov dword [eax + 4], 8
add eax, 8
mov ecx, dword [edi]
mov ebp, dword [esp + 8]
mov edx, dword [ebp + 0xc]
mov dword [eax + 4], edx
mov dword [eax], esi
mov dword [ebp + 0xc], eax
cmp dword [ebx + 0xb4], 0
jne 0x7332c5
jmp 0x73371b
mov dword [edi], 2
mov ecx, 2
cmp dword [ebx + 0xb4], 0
jne 0x7332c5
test ecx, ecx
mov edx, dword [esp]
je 0x73372a
add edx, 8
jmp 0x735bab
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x733744
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x733771
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x733845
mov eax, dword [edi + 0x30]
mov dword [esi], eax
mov dword [edi + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x2000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x7337ac
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x7337d7
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x733845
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov edx, dword [esp]
mov word [eax], pe_nt_image_headers32
cmp dword [edi], 0
jne 0x733722
mov ecx, dword [edi + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x733802
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x733829
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x733845
mov ecx, dword [edi + 0x30]
mov dword [eax], ecx
mov dword [edi + 0x30], eax
mov dword [eax + 4], 8
add eax, 8
mov edx, dword [esp]
mov ecx, dword [ebx + 0xdc]
mov dword [eax + 4], ecx
mov dword [eax], esi
mov dword [ebx + 0xdc], eax
add edx, 8
jmp 0x735bab
mov dword [edi], 2
mov edx, dword [esp]
add edx, 8
jmp 0x735bab
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7338d7
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x7338e5
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7338c2
mov ecx, dword [edi + 0x30]
mov dword [eax], ecx
mov dword [edi + 0x30], eax
mov dword [eax + 4], 0x10
mov ecx, edi
xor edi, edi
cmp dword [ecx], 0
mov edx, dword [esp]
jne 0x736715
add eax, 8
mov edi, ecx
jmp 0x732a0d
mov dword [edi], 2
xor edi, edi
test edi, edi
jne 0x73671d
jmp case.0x736224.97
mov dword [esi], 2
mov dword [esp + 0xc], 0
mov esi, dword [ebx]
cmp dword [esi], 0
jne 0x733952
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0xc]
cmp edx, 0x7f8
ja 0x733906
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x733933
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x733aef
mov eax, dword [esi + 0x30]
mov dword [ebx], eax
mov dword [esi + 0x30], ebx
mov dword [ebx + 4], 0xc
add ebx, 8
mov eax, dword [esp + 0xc]
mov dword [ebx], eax
mov ecx, esi
call fcn.00731400
mov dword [ebx + 4], eax
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx]
mov dword [ebx + 8], eax
mov dword [ecx], ebx
mov ebx, dword [esp + 4]
mov edx, 0x20
mov ecx, ebp
push dword [esp + 0x40]
push 0x8d
push 0
push 1
call fcn.00730440
add esp, 0x10
cmp dword [esp + 0x34], 0
je 0x733990
mov edx, 0x20
mov ecx, ebp
push dword [ebx + 0x40]
push 0x8d
push 0
push 3
call fcn.00730440
add esp, 0x10
mov edi, ebx
cmp dword [ebp], 0
je 0x733a6a
xor esi, esi
cmp dword [esp + 0x30], 0x94
je 0x7339c7
mov edx, 0x20
mov ecx, ebp
push 1
push 0x40
push 0
push 0x82
call fcn.00730440
add esp, 0x10
mov esi, 1
cmp dword [esp + 0x34], 0
je 0x7339ef
lea eax, [esi*4]
mov edx, 0x20
mov ecx, ebp
push 0
push 3
push eax
push 0x82
call fcn.00730440
add esp, 0x10
inc esi
mov ebx, edi
cmp dword [esp + 8], 0
jne 0x733a19
lea eax, [esi*4]
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
push eax
push 0x82
call fcn.00730440
add esp, 0x10
inc esi
lea eax, [esi*4]
mov edx, 0x20
mov ecx, ebp
push 0
push 1
push eax
push 0x82
call fcn.00730440
add esp, 0x10
mov eax, dword [esp + 0x3c]
dec eax
sub esp, 4
mov ecx, ebx
mov edx, dword [esp + 4]
push 0
push eax
push 0
call fcn.00758810
add esp, 0x10
mov ecx, dword [esp + 8]
cmp ecx, 1
mov eax, 1
adc eax, 0
sub esi, eax
jmp 0x734396
mov eax, dword [esp + 0x3c]
lea ebx, [eax*4]
mov esi, dword [ebp + 0x58]
add esi, dword [esp + 0x40]
mov edx, 1
mov ecx, ebp
push ebx
push 0x82
push 0
push 0xe
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x733ac1
mov byte [eax], 0x8d
mov edx, 1
mov ecx, ebp
push esi
push 0x8d
push 0
push 0xe
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x733ac1
mov byte [eax], 0x89
jmp 0x73399c
cmp dword [ebp], 4
jne 0x73399c
sub esp, 8
mov edx, 0x5030100
mov ecx, ebp
push ebx
push 0x40
push 0
push 2
push esi
push 0x8d
call fcn.0073c5f0
add esp, 0x20
jmp 0x73399c
mov dword [esi], 2
jmp 0x73394e
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x733e38
mov eax, dword [ebx + 0x30]
mov dword [esi], eax
mov dword [ebx + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x4000
mov eax, dword [ebx + 0x1c]
lea ecx, [ebx + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebx + 0x1c], esi
add dword [ebx + 0x48], 6
mov ecx, dword [ebx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x733cbe
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x733ce9
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x733ee8
mov eax, dword [ebx + 0x30]
mov dword [esi], eax
mov dword [ebx + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x4000
mov eax, dword [ebx + 0x1c]
lea ecx, [ebx + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebx + 0x1c], esi
add dword [ebx + 0x48], 6
mov ecx, dword [ebx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x733cf3
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x733d1e
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x73577c
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x30]
mov dword [esi], eax
mov dword [ecx + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x8000
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 0x1c]
lea ecx, [edx + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edx + 0x1c], esi
add dword [edx + 0x48], 6
mov ecx, dword [edx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x733d28
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x733d57
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x734131
mov ecx, dword [esi + 0x30]
mov dword [eax], ecx
mov dword [esi + 0x30], eax
mov dword [eax + 4], 0x10
add eax, 8
mov dword [eax], 0
mov dword [eax + 8], 0x4000
mov edx, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test edx, edx
cmovne ecx, edx
mov dword [ecx], eax
mov edi, eax
mov dword [esi + 0x1c], eax
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x733dfd
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x733e28
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x733e38
mov ecx, dword [ebx + 0x2c]
mov dword [eax], ecx
mov dword [ebx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x733e40
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x733ee8
mov ecx, dword [ebx + 0x2c]
mov dword [eax], ecx
mov dword [ebx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x733ef0
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x73577c
mov edx, dword [esp + 0x14]
mov ecx, dword [edx + 0x2c]
mov dword [eax], ecx
mov dword [edx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov edx, ebp
mov word [eax], pe_nt_image_headers32
mov eax, dword [esp + 0x14]
cmp dword [eax], 0
jne 0x735788
mov ecx, dword [eax + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x735742
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x73576d
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x735103
mov ecx, dword [esp + 8]
mov eax, dword [ecx]
mov dword [esi], eax
mov dword [ecx], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x2000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x7340df
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x73410a
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x734131
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov ecx, dword [esp + 8]
mov eax, edi
jmp 0x73413d
mov dword [ebx], 2
xor esi, esi
mov eax, dword [esp + 4]
mov ebx, dword [eax]
cmp dword [ebx], 0
jne 0x733eab
mov dword [esp], esi
mov eax, dword [ebx + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0xc]
cmp edx, 0x7f8
ja 0x733e68
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x733e91
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x733ee0
mov eax, dword [ebx + 0x30]
mov dword [esi], eax
mov dword [ebx + 0x30], esi
mov dword [esi + 4], 0xc
add esi, 8
mov eax, dword [esp]
mov dword [esi], eax
mov ecx, ebx
call fcn.00731400
mov dword [esi + 4], eax
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx]
mov dword [esi + 8], eax
mov dword [ecx], esi
mov edx, 0x20
mov esi, dword [esp + 0x18]
mov ecx, esi
push 0
push 0x40
push 0
push 0x82
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, esi
push 0
push 0xc
push 4
push 0x82
jmp 0x733f75
mov dword [ebx], 2
jmp 0x733eab
mov dword [ebx], 2
xor esi, esi
mov eax, dword [esp + 4]
mov ebx, dword [eax]
cmp dword [ebx], 0
jne 0x733f5f
mov dword [esp], esi
mov eax, dword [ebx + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0xc]
cmp edx, 0x7f8
ja 0x733f18
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x733f45
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x7340d4
mov eax, dword [ebx + 0x30]
mov dword [esi], eax
mov dword [ebx + 0x30], esi
mov dword [esi + 4], 0xc
add esi, 8
mov eax, dword [esp]
mov dword [esi], eax
mov ecx, ebx
call fcn.00731400
mov dword [esi + 4], eax
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx]
mov dword [esi + 8], eax
mov dword [ecx], esi
mov edx, 0x20
mov esi, dword [esp + 0x18]
mov ecx, esi
push 0
push 0xc
push 0
push 0x82
call fcn.00730440
add esp, 0x10
add edi, 4
mov ecx, esi
call fcn.00731400
mov dword [ebp + 0x14], eax
mov ebx, dword [esp + 4]
mov esi, dword [ebx]
sub esp, 8
mov edx, 0x262
mov ecx, esi
push 1
push 0x40
push 0
push 9
push 0
push 9
call fcn.00730ab0
add esp, 0x20
cmp dword [esi], 0
jne 0x73671d
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x733fd1
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x733ffe
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x7340c9
mov eax, dword [esi + 0x30]
mov dword [ebx], eax
mov dword [esi + 0x30], ebx
mov dword [ebx + 4], 0x10
add ebx, 8
mov dword [ebx], 0
mov dword [ebx + 8], 0
mov eax, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], ebx
mov dword [esi + 0x1c], ebx
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x734039
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x734060
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7340c9
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [esi], 0
jne 0x73671d
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x734088
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x7340af
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7340c9
mov ecx, dword [esi + 0x30]
mov dword [eax], ecx
mov dword [esi + 0x30], eax
mov dword [eax + 4], 8
add eax, 8
mov edx, dword [esp + 4]
mov ecx, dword [edx + 0xe4]
mov dword [eax + 4], ecx
mov dword [eax], ebx
mov dword [edx + 0xe4], eax
jmp 0x73671d
mov dword [esi], 2
jmp 0x73671d
mov dword [ebx], 2
jmp 0x733f5f
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735103
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov eax, dword [ebx + 0xb8]
test eax, eax
je 0x735109
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
jmp 0x735109
mov dword [esi], 2
xor eax, eax
mov ecx, dword [esp + 8]
mov esi, dword [ebx]
cmp dword [esi], 0
je 0x734240
cmp dword [esp + 0x48], 0xffffffff
je 0x7342bd
test ecx, ecx
je 0x7342e5
mov eax, dword [ebx + 0x20]
lea esi, [ecx*4]
lea eax, [eax + ecx*4]
mov edx, 0x20
mov ecx, ebp
push eax
push 0x8d
push 0
push 1
call fcn.00730440
add esp, 0x10
or esi, 4
add esi, dword [ebx + 0x20]
mov edx, 0x20
mov ecx, ebp
push esi
push 0x8d
push 0
push 3
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 1
push 0
push 0x82
call fcn.00730440
add esp, 0x10
mov eax, dword [ebx + 0x44]
test eax, eax
je 0x7341da
mov edx, 0x20
mov ecx, ebp
push eax
push 0x8d
push 0
push 1
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 3
push 4
push 0x82
call fcn.00730440
add esp, 0x10
cmp dword [esp + 0x34], 0
je 0x734216
mov edx, 0x20
mov ecx, ebp
push dword [ebx + 0x40]
push 0x8d
push 0
push 3
call fcn.00730440
add esp, 0x10
cmp dword [ebx + 0x44], 0
je 0x73425c
mov edx, 0x20
mov ecx, ebp
push 0
push 1
push 8
push 0x82
call fcn.00730440
add esp, 0x10
mov esi, 3
jmp 0x734326
mov edi, eax
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0xc]
cmp edx, 0x7f8
ja 0x734266
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x734293
mov esi, 2
jmp 0x734326
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov ebx, eax
test ebx, ebx
je 0x734ea8
mov eax, dword [esi + 0x30]
mov dword [ebx], eax
mov dword [esi + 0x30], ebx
mov dword [ebx + 4], 0xc
add ebx, 8
mov dword [ebx], edi
mov ecx, esi
call fcn.00731400
mov dword [ebx + 4], eax
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx]
mov dword [ebx + 8], eax
mov dword [ecx], ebx
mov ebx, dword [esp + 4]
mov ecx, dword [esp + 8]
cmp dword [esp + 0x48], 0xffffffff
jne 0x734153
mov edx, 0x20
mov ecx, ebp
push 0
push 2
push dword [esp + 0x48]
push 0x8d
call fcn.00730440
mov ecx, dword [esp + 0x18]
add esp, 0x10
test ecx, ecx
jne 0x73415b
cmp dword [esp + 0x34], 0
je 0x734307
mov edx, 0x20
mov ecx, ebp
push dword [ebx + 0x40]
push 0x8d
push 0
push 3
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
push 0
push 0x82
call fcn.00730440
add esp, 0x10
mov esi, 1
mov ecx, dword [esp + 0x30]
add ecx, esi
cmp dword [esp + 0xc], 0x94
je 0x73435e
lea eax, [ecx*4]
mov edx, 0x20
mov edi, ebx
mov ebx, ecx
mov ecx, ebp
push 1
push 0x40
push eax
push 0x82
call fcn.00730440
mov ecx, ebx
mov ebx, edi
add esp, 0x10
cmp dword [esp + 0x34], 0
je 0x73438a
lea eax, [ecx*4 - 4]
dec ecx
mov edx, 0x20
mov esi, ecx
mov ecx, ebp
push 0
push 3
push eax
push 0x82
call fcn.00730440
add esp, 0x10
jmp 0x734392
mov dword [esp + 0x34], 0
mov ecx, dword [esp + 8]
mov dword [esp + 0x30], esi
test ecx, ecx
je 0x7343ba
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
push dword [esp + 0x4c]
push 0x8d
call fcn.00730440
add esp, 0x10
lea eax, [ebp + 0x30]
mov dword [esp + 0xc], eax
mov ecx, ebp
call fcn.00731400
mov dword [esp + 0x78], eax
mov esi, dword [esp]
movzx eax, word [esi]
cmp eax, 0x7b
jne 0x73446f
mov eax, dword [esp + 0x1c]
add eax, 0xc
mov ecx, eax
xor edi, edi
mov dword [esp + 0x24], ecx
mov ebx, dword [esp + 0x48]
movzx eax, word [esp + 0x50]
cmp eax, 0x94
mov dword [ecx], 0
je 0x735827
test ebx, ebx
mov eax, dword [ebp]
js 0x734e2a
test eax, eax
jne 0x735827
mov eax, dword [esp + 0x3c]
neg eax
shl eax, 2
mov edx, 0x11
mov ecx, ebp
push eax
push 0x83
push 0
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x734441
or byte [eax + 1], 0x38
cmp dword [ebp], 0
jne 0x735827
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x734eb3
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x734ee2
mov edi, dword [esp + 0x1c]
mov dword [edi + 8], 0
mov dword [edi + 0xc], 0
movzx eax, word [esi + 2]
lea esi, [esi + eax*2]
sub esp, 8
mov ecx, ebx
mov edx, dword [esp + 0x2c]
push edi
mov dword [esp + 0xc], esi
push esi
call fcn.007314e0
add esp, 0x10
xor edi, edi
cmp dword [ebp], 0
jne 0x736715
mov eax, dword [esp + 0x1c]
lea eax, [eax + 0xc]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 8]
lea ecx, [eax*4]
mov dword [esp + 0x74], ecx
or ecx, 4
mov dword [esp + 0x70], ecx
shr eax, 1
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x3c]
lea ecx, [eax*4]
shl dword [esp + 0x30], 2
mov edx, 0xfffffffe
sub edx, dword [esp + 0x48]
shl edx, 2
mov dword [esp + 0x60], edx
mov dword [esp + 0x6c], ecx
neg ecx
mov dword [esp + 0x90], ecx
lea eax, [eax*4 - 4]
mov dword [esp + 0x94], eax
lea eax, [ebp + 0xc]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x4c], 0
jmp 0x734845
mov dword [ebp], 2
jmp 0x734b39
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x7345cb
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x7345fa
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x734692
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x7346c1
cmp dword [ebp], 4
jne 0x7347aa
mov edx, 1
mov ecx, ebp
push 0
push 2
push 0
push 3
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x7347a0
mov byte [eax], 0x89
mov edx, 0x11
mov ecx, ebp
push 0
push 2
push dword [esp + 0x74]
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x7347aa
or byte [eax + 1], 0x28
jmp 0x7347aa
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x734794
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx]
mov dword [esi], eax
mov dword [ecx], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0
mov eax, dword [ebp + 0x1c]
test eax, eax
cmove eax, dword [esp + 0x5c]
mov dword [eax], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x734634
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x73465f
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x734794
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [ebp], 0
jne 0x73499b
mov eax, dword [esp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x734759
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x734782
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x734839
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx]
mov dword [esi], eax
mov dword [ecx], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0
mov eax, dword [ebp + 0x1c]
test eax, eax
cmove eax, dword [esp + 0x5c]
mov dword [eax], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x7346fb
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x734726
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x734839
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [ebp], 0
jne 0x734b04
mov eax, dword [esp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x7347fe
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x734827
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x734794
mov edx, dword [esp + 0xc]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 8
add eax, 8
mov ecx, dword [esp + 0x4c]
mov dword [eax + 4], ecx
mov dword [eax], esi
mov dword [esp + 0x4c], eax
jmp 0x73499b
mov dword [ebp], 2
jmp 0x73499b
cmp dword [ebp], 0
je 0x7345a1
movzx eax, word [esp + 0x54]
cmp eax, 0x89
jne 0x7347d2
mov edx, 0x20
mov ecx, ebp
push dword [esp + 0x60]
push 0x83
push 0
push 1
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
push dword [esp + 0x68]
push 0x83
call fcn.00730440
add esp, 0x10
cmp dword [esp + 0x34], 0
jne 0x73493b
jmp 0x73495c
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x734839
mov edx, dword [esp + 0xc]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 8
add eax, 8
mov ecx, dword [esp + 0x4c]
mov dword [eax + 4], ecx
mov dword [eax], esi
mov dword [esp + 0x4c], eax
jmp 0x734b04
mov dword [ebp], 2
jmp 0x734b04
mov ebx, dword [esp + 0x48]
test ebx, ebx
mov eax, dword [esp + 8]
js 0x7349c2
test eax, eax
mov edi, dword [esp]
mov ebp, dword [esp + 0x14]
je 0x734c24
mov eax, dword [ebp + 0x58]
add eax, dword [esp + 0x40]
sub esp, 8
mov edx, 0x2d2b2928
mov ecx, ebp
push dword [esp + 0x74]
push 0x40
push eax
push 0x8d
push 0
push 2
call fcn.0073b7b0
add esp, 0x20
mov edx, 0x20
mov ecx, ebp
mov ebx, dword [esp + 0x44]
push ebx
push 0x8d
push 0
push 1
call fcn.00730440
add esp, 0x10
mov esi, dword [esp + 4]
mov eax, dword [esi + 0x20]
add eax, dword [esp + 0x70]
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
push eax
push 0x8d
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
push ebx
push 0x8d
call fcn.00730440
add esp, 0x10
mov eax, dword [esi + 0x44]
test eax, eax
je 0x734909
mov edx, 0x20
mov ecx, ebp
push dword [esp + 0x68]
push 0x40
push eax
push 0x8d
call fcn.00730440
add esp, 0x10
mov eax, dword [esp + 0x38]
mov eax, dword [eax]
add eax, dword [esp + 0x74]
mov edx, 0x20
mov ecx, ebp
push 0
push 1
push eax
push 0x8d
call fcn.00730440
add esp, 0x10
mov ebx, dword [esp + 0x48]
mov esi, dword [esp + 0x30]
cmp dword [esp + 0x34], 0
je 0x73495c
mov edx, 0x20
mov ecx, ebp
push esi
push 0x82
mov eax, dword [esp + 0xc]
push dword [eax + 0x40]
push 0x8d
call fcn.00730440
add esp, 0x10
mov eax, dword [esp + 0x54]
or eax, 2
movzx eax, ax
cmp eax, 0x8b
jne 0x73499b
cmp dword [ebp], 0
jne 0x73499b
mov edx, 1
mov ecx, ebp
push 0
push 0xc
push 0
push 1
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x734991
mov byte [eax], 0x3b
cmp dword [ebp], 0
je 0x73452d
movzx eax, word [esp + 0x50]
cmp eax, 0x94
je 0x734b2f
mov edx, 0x20
mov ecx, ebp
push 0
push 0x40
push 0
push 0x82
jmp 0x734b27
cmp ebx, 0xffffffff
mov edi, dword [esp]
mov ebp, dword [esp + 0x14]
jne 0x7349ee
mov edx, 0x20
mov ecx, ebp
push dword [esp + 0x40]
push 0x8d
push 0
push 2
call fcn.00730440
mov eax, dword [esp + 0x18]
add esp, 0x10
test eax, eax
je 0x734d6e
mov edx, 0x20
mov ecx, ebp
mov ebx, dword [esp + 0x44]
push ebx
push 0x8d
push 0
push 1
call fcn.00730440
add esp, 0x10
mov esi, dword [esp + 4]
mov eax, dword [esi + 0x20]
add eax, dword [esp + 0x70]
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
push eax
push 0x8d
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
push ebx
push 0x8d
call fcn.00730440
add esp, 0x10
mov eax, dword [esi + 0x44]
test eax, eax
je 0x734a72
mov edx, 0x20
mov ecx, ebp
push dword [esp + 0x68]
push 0x40
push eax
push 0x8d
call fcn.00730440
add esp, 0x10
mov eax, dword [esp + 0x38]
mov eax, dword [eax]
add eax, dword [esp + 0x74]
mov edx, 0x20
mov ecx, ebp
push 0
push 1
push eax
push 0x8d
call fcn.00730440
add esp, 0x10
mov ebx, dword [esp + 0x48]
mov esi, dword [esp + 0x30]
cmp dword [esp + 0x34], 0
je 0x734ac5
mov edx, 0x20
mov ecx, ebp
push esi
push 0x82
mov eax, dword [esp + 0xc]
push dword [eax + 0x40]
push 0x8d
call fcn.00730440
add esp, 0x10
mov eax, dword [esp + 0x54]
or eax, 2
movzx eax, ax
cmp eax, 0x8b
jne 0x734b04
cmp dword [ebp], 0
jne 0x734b04
mov edx, 1
mov ecx, ebp
push 0
push 0xc
push 0
push 1
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x734afa
mov byte [eax], 0x3b
cmp dword [ebp], 0
je 0x734551
movzx eax, word [esp + 0x50]
cmp eax, 0x94
je 0x734b2f
mov edx, 0x20
mov ecx, ebp
push 0
push 0x40
push dword [esp + 0x9c]
push 0x82
call fcn.00730440
add esp, 0x10
cmp dword [ebp], 0
je 0x734bdc
mov esi, dword [esp + 4]
mov ecx, esi
call fcn.0073a260
mov eax, dword [esp + 0x1c]
mov edx, dword [eax + 8]
mov ecx, esi
call fcn.00736d50
cmp dword [ebp], 0
jne 0x734e8c
mov eax, dword [esp + 0x24]
mov esi, dword [eax]
mov ecx, ebp
call fcn.00731400
test esi, esi
je 0x734b90
nop dword [eax]
test eax, eax
je 0x734b89
mov ecx, dword [esi]
test ecx, ecx
je 0x734b89
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov esi, dword [esi + 4]
test esi, esi
jne 0x734b70
test ebx, ebx
js 0x734c00
cmp dword [esp + 8], 0
je 0x734c7d
movzx eax, word [edi]
cmp eax, 0x7b
jne 0x734bc3
mov edx, 0x20
mov ecx, ebp
push dword [esp + 0x40]
push 0x8d
push 0
push 3
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push dword [esp + 0x44]
push 0x8d
push 0
push 0xc
jmp 0x734dd4
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x734cb2
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x734ce1
cmp dword [esp + 8], 0
je 0x734dc2
mov edx, 0x20
mov ecx, ebp
push dword [esp + 0x44]
push 0x8d
push 0
push 0xc
jmp 0x734dd4
mov edx, 0x20
mov ecx, ebp
push dword [esp + 0x40]
push 0x8d
push 0
push 3
call fcn.00730440
add esp, 0x10
cmp dword [ebp], 0
mov esi, dword [esp + 0x30]
jne 0x7347aa
mov edx, 1
mov ecx, ebp
push dword [esp + 0x90]
push 0x83
push 0
push 2
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x734575
mov byte [eax], 0x8d
jmp 0x7347aa
mov edx, 0x20
mov ecx, ebp
push dword [esp + 0x40]
push 0x8d
push 0
push 3
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push dword [esp + 0x60]
push 0x83
push 0
push 0xc
jmp 0x734dd4
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x734521
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx]
mov dword [esi], eax
mov dword [ecx], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x30000
mov eax, dword [ebp + 0x1c]
test eax, eax
cmove eax, dword [esp + 0x5c]
mov dword [eax], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 5
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x734d1b
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x734d46
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x734521
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
cmp dword [esp + 0x78], 0
mov word [eax], pe_nt_image_headers32
je 0x734b39
mov eax, dword [esi + 8]
and eax, 0xfffffffc
or eax, 1
mov dword [esi + 8], eax
mov eax, dword [esp + 0x78]
mov dword [esi + 0xc], eax
jmp 0x734b39
movzx eax, word [esp + 0x54]
cmp eax, 0x89
mov esi, dword [esp + 0x30]
jne 0x734d98
mov edx, 0x20
mov ecx, ebp
push 0
push 0x82
push 0
push 1
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 0xc
push 0
push 0x82
call fcn.00730440
add esp, 0x10
cmp dword [esp + 0x34], 0
jne 0x734aa4
jmp 0x734ac5
mov edx, 0x20
mov ecx, ebp
push 0
push 0x82
push 0
push 0xc
call fcn.00730440
add esp, 0x10
movzx eax, word [edi]
cmp eax, 0x7b
je 0x734e9b
mov ebx, ebp
mov ebp, dword [esp + 0x1c]
mov dword [ebp + 8], 0
mov dword [ebp + 0xc], 0
movzx eax, word [edi + 2]
lea esi, [edi + eax*2]
lea edx, [edi + 4]
sub esp, 8
mov ecx, dword [esp + 0xc]
push ebp
push esi
call fcn.007314e0
add esp, 0x10
xor edi, edi
cmp dword [ebx], 0
mov dword [esp], esi
je 0x734845
jmp 0x736715
test eax, eax
jne 0x735827
mov eax, dword [esp + 0x3c]
lea eax, [eax*4 - 4]
mov edx, 0x11
mov ecx, ebp
push eax
push 0x82
push 0
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x734e5e
or byte [eax + 1], 0x38
cmp dword [ebp], 0
jne 0x735827
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x734f7c
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x734fab
xor edi, edi
test edi, edi
jne 0x73671d
jmp case.0x736224.97
mov ecx, dword [esp + 0x24]
mov edi, dword [esp + 0x4c]
jmp 0x7343ee
mov dword [esi], 2
jmp 0x7342aa
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x735820
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx]
mov dword [esi], eax
mov dword [ecx], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x2000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x734f1d
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x734f48
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735820
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [ebp], 0
jne 0x735827
mov eax, dword [esp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
jbe 0x735038
sub esp, 0xc
push 0x800
jmp 0x7357f0
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x735820
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx]
mov dword [esi], eax
mov dword [ecx], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x2000
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [ebp + 0x1c], esi
add dword [ebp + 0x48], 6
mov ecx, dword [ebp + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x734fe6
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x735011
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735820
mov ecx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov dword [ebp + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [ebp], 0
jne 0x735827
mov eax, dword [esp + 0xc]
mov ecx, dword [eax]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x7357e8
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x735811
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x735103
mov ecx, dword [esp + 8]
mov eax, dword [ecx]
mov dword [esi], eax
mov dword [ecx], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x2000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x7350ae
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x7350d5
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735103
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [edi], 0
jne 0x735109
mov eax, dword [esp + 8]
mov ecx, dword [eax]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x7359b5
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x7359e2
mov dword [edi], 2
mov edx, 0x20
mov ecx, edi
push 0
push 8
push 0
push 1
call fcn.00730440
add esp, 0x10
mov edx, 0x21
mov ecx, edi
push 0x2a
push 0x81
push 0
push 3
call fcn.00730440
add esp, 0x10
cmp dword [edi], 0
jne 0x735167
mov edx, 0x11
mov ecx, edi
push 0
push 3
push 0
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x73515e
or byte [eax + 1], 0x38
cmp dword [edi], 0
je 0x735234
mov edx, 0x21
mov ecx, edi
push 0x2b
push 0x81
push 0
push 3
call fcn.00730440
add esp, 0x10
cmp dword [ebx + 0xb8], 0
mov eax, dword [edi]
je 0x7351e0
test eax, eax
jne 0x735499
mov edx, 0x11
mov ecx, edi
push 0
push 3
push 0
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x7351b3
or byte [eax + 1], 0x38
cmp dword [edi], 0
jne 0x735499
mov eax, dword [esp + 8]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x735318
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x735347
test eax, eax
jne 0x735499
mov edx, 0x11
mov ecx, edi
push 0
push 3
push 0
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x735207
or byte [eax + 1], 0x38
cmp dword [edi], 0
jne 0x735499
mov eax, dword [esp + 8]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x7353d4
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x735403
mov eax, dword [esp + 8]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x735251
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x735280
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x735737
mov ecx, dword [esp + 8]
mov eax, dword [ecx]
mov dword [esi], eax
mov dword [ecx], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x2000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x7352bb
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x7352e6
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735737
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [edi], 0
jne 0x735167
mov eax, dword [esp + 8]
mov ecx, dword [eax]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x7356fe
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x735727
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x735493
mov ecx, dword [esp + 8]
mov eax, dword [ecx]
mov dword [esi], eax
mov dword [ecx], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x735382
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x7353ad
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735493
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov eax, dword [ebx + 0xb8]
test eax, eax
je 0x735499
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
jmp 0x735499
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x735493
mov ecx, dword [esp + 8]
mov eax, dword [ecx]
mov dword [esi], eax
mov dword [ecx], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x73543e
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x735465
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735493
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [edi], 0
jne 0x735499
mov eax, dword [esp + 8]
mov ecx, dword [eax]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x7359fc
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x735a29
mov dword [edi], 2
mov edx, 0x20
mov ecx, edi
push 4
push 0x81
push 0
push 3
call fcn.00730440
add esp, 0x10
cmp dword [ebx + 0xb8], 0
mov eax, dword [edi]
je 0x735513
test eax, eax
mov edx, dword [esp]
jne 0x735ba8
mov edx, 1
mov ecx, edi
push 0
push 0xc
push 0
push 3
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x7354e7
mov byte [eax], 0x3b
cmp dword [edi], 0
mov edx, dword [esp]
jne 0x735ba8
mov eax, dword [esp + 8]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x73556c
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x73559b
test eax, eax
mov edx, dword [esp]
jne 0x735ba8
mov edx, 1
mov ecx, edi
push 0
push 0xc
push 0
push 3
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x73553c
mov byte [eax], 0x3b
cmp dword [edi], 0
mov edx, dword [esp]
jne 0x735ba8
mov eax, dword [esp + 8]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x735634
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x735663
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x735b9f
mov ecx, dword [esp + 8]
mov eax, dword [ecx]
mov dword [esi], eax
mov dword [ecx], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x2000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x7355d6
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x735601
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735b9f
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov edx, dword [esp]
mov word [eax], pe_nt_image_headers32
mov eax, dword [ebx + 0xb8]
test eax, eax
je 0x735a88
mov ecx, dword [esi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
cmp dword [edi], 0
jne 0x735ba8
jmp 0x735a91
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x735b9f
mov ecx, dword [esp + 8]
mov eax, dword [ecx]
mov dword [esi], eax
mov dword [ecx], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x2000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x73569e
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x7356c9
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735b9f
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [edi], 0
mov edx, dword [esp]
jne 0x735ba8
mov eax, dword [esp + 8]
mov ecx, dword [eax]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x735a43
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x735a70
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735737
mov edx, dword [esp + 8]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 8
add eax, 8
mov ecx, dword [ebp + 0xc]
mov dword [eax + 4], ecx
mov dword [eax], esi
mov dword [ebp + 0xc], eax
jmp 0x735167
mov dword [edi], 2
jmp 0x735167
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x73577c
mov edx, dword [esp + 0x14]
mov ecx, dword [edx + 0x30]
mov dword [eax], ecx
mov dword [edx + 0x30], eax
mov dword [eax + 4], 8
add eax, 8
mov edx, dword [esp + 0x1c]
mov ecx, dword [edx]
mov dword [eax + 4], ecx
mov dword [eax], esi
mov dword [edx], eax
jmp 0x735786
mov eax, dword [esp + 0x14]
mov dword [eax], 2
mov edx, ebp
mov dword [esp + 0x80], 0xffffffff
mov dword [esp + 0x84], 0
lea esi, [esp + 0x7c]
mov ebp, dword [esp + 0x1c]
nop word cs:[eax + eax]
movzx eax, word [edx]
mov edi, edx
xor edx, edx
cmp eax, 0x1e
sete dl
add edi, 2
sub esp, 4
mov ecx, ebx
push ebp
push esi
push edi
call fcn.0075e560
add esp, 0x10
mov edx, eax
cmp dword [esp + 0x7c], 0
jg 0x7357b0
mov edi, edx
test edi, edi
jne 0x73671d
jmp case.0x736224.97
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735820
mov edx, dword [esp + 0xc]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 8
add eax, 8
mov edx, dword [esp + 0x24]
mov ecx, dword [edx]
mov dword [eax + 4], ecx
mov dword [eax], esi
mov dword [edx], eax
jmp 0x735827
mov dword [ebp], 2
mov ecx, ebp
call fcn.00731400
test edi, edi
je 0x735860
nop word cs:[eax + eax]
test eax, eax
je 0x735859
mov ecx, dword [edi]
test ecx, ecx
je 0x735859
mov edx, dword [ecx + 8]
and edx, 0xfffffffc
or edx, 1
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov edi, dword [edi + 4]
test edi, edi
jne 0x735840
mov ebx, dword [esp + 4]
mov esi, dword [ebx]
sub esp, 8
mov edx, 0x262
mov ecx, esi
push 1
push 0x40
push 0
push 9
push 0
push 9
call fcn.00730ab0
add esp, 0x20
cmp dword [esi], 0
je 0x73589c
mov edi, dword [esp]
add edi, 4
test edi, edi
jne 0x73671d
jmp case.0x736224.97
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x7358b6
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x7358e3
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x7359aa
mov eax, dword [esi + 0x30]
mov dword [edi], eax
mov dword [esi + 0x30], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0
mov eax, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], edi
mov dword [esi + 0x1c], edi
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x73591e
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x735945
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7359aa
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [esi], 0
jne 0x735889
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x73596d
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x735994
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7359aa
mov ecx, dword [esi + 0x30]
mov dword [eax], ecx
mov dword [esi + 0x30], eax
mov dword [eax + 4], 8
add eax, 8
mov ecx, dword [ebx + 0xe4]
mov dword [eax + 4], ecx
mov dword [eax], edi
mov dword [ebx + 0xe4], eax
jmp 0x735889
mov dword [esi], 2
jmp 0x735889
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735ccb
mov edx, dword [esp + 8]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 8
add eax, 8
mov ebx, dword [esp + 4]
mov ecx, dword [ebx + 0xe0]
mov dword [eax + 4], ecx
mov dword [eax], esi
mov dword [ebx + 0xe0], eax
jmp 0x735109
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735cda
mov edx, dword [esp + 8]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 8
add eax, 8
mov ebx, dword [esp + 4]
mov ecx, dword [ebx + 0xe0]
mov dword [eax + 4], ecx
mov dword [eax], esi
mov dword [ebx + 0xe0], eax
jmp 0x735499
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735b9f
mov edx, dword [esp + 8]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 8
add eax, 8
mov ebx, dword [esp + 4]
mov ecx, dword [ebx + 0xe0]
mov dword [eax + 4], ecx
mov dword [eax], esi
mov dword [ebx + 0xe0], eax
mov edx, dword [esp]
cmp dword [edi], 0
jne 0x735ba8
mov eax, dword [esp + 8]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x735aae
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x735add
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x735b9f
mov ecx, dword [esp + 8]
mov eax, dword [ecx]
mov dword [esi], eax
mov dword [ecx], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0x30000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edi + 0x1c], esi
add dword [edi + 0x48], 5
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x735b18
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x735b3f
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735b9f
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
cmp dword [edi], 0
mov edx, dword [esp]
jne 0x735ba8
mov eax, dword [esp + 8]
mov ecx, dword [eax]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x735b69
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x735b92
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735b9f
mov edx, dword [esp + 8]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [edx], eax
mov dword [eax + 4], 8
add eax, 8
mov ecx, dword [ebp + 0xc]
mov dword [eax + 4], ecx
mov dword [eax], esi
mov dword [ebp + 0xc], eax
jmp 0x735ba5
mov dword [edi], 2
mov edx, dword [esp]
add edx, 2
mov edi, edx
jmp 0x73671d
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov ecx, eax
test eax, eax
je 0x735d26
mov eax, dword [edi + 0x30]
mov dword [ecx], eax
mov dword [edi + 0x30], ecx
mov dword [ecx + 4], 0x10
add ecx, 8
mov dword [esp + 0x14], ecx
mov edx, dword [esp + 0x14]
mov dword [edx], 0
mov dword [edx + 8], 0x4000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], edx
mov dword [edi + 0x1c], edx
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x735c95
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x735cbc
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov ecx, eax
test eax, eax
je 0x735db8
mov eax, dword [edi + 0x30]
mov dword [ecx], eax
mov dword [edi + 0x30], ecx
mov dword [ecx + 4], 0x10
add ecx, 8
mov dword [esp + 0x14], ecx
mov edx, dword [esp + 0x14]
mov dword [edx], 0
mov dword [edx + 8], 0x4000
mov eax, dword [edi + 0x1c]
lea ecx, [edi + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], edx
mov dword [edi + 0x1c], edx
add dword [edi + 0x48], 6
mov ecx, dword [edi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x735ce9
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x735d14
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735d26
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov esi, dword [esp + 4]
mov eax, dword [esp + 0x14]
jmp 0x735d32
mov dword [edi], 2
mov ebx, dword [esp + 4]
jmp 0x735109
mov dword [edi], 2
mov ebx, dword [esp + 4]
jmp 0x735499
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735db8
mov ecx, dword [edi + 0x2c]
mov dword [eax], ecx
mov dword [edi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov esi, dword [esp + 4]
mov eax, dword [esp + 0x14]
jmp 0x735dc4
mov dword [edi], 2
xor eax, eax
mov esi, dword [esp + 4]
mov edi, dword [esi]
cmp dword [edi], 0
jne 0x735d95
mov esi, eax
mov ebx, dword [edi + 0x30]
mov ecx, dword [ebx + 4]
lea edx, [ecx + 0xc]
cmp edx, 0x7f8
ja 0x735d55
lea eax, [ebx + ecx + 8]
mov dword [ebx + 4], edx
jmp 0x735d7c
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x735db0
mov ecx, dword [edi + 0x30]
mov dword [eax], ecx
mov dword [edi + 0x30], eax
mov dword [eax + 4], 0xc
add eax, 8
mov dword [eax], esi
mov esi, eax
mov ecx, edi
call fcn.00731400
mov dword [esi + 4], eax
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx]
mov dword [esi + 8], eax
mov dword [ecx], esi
mov edx, 0x20
mov edi, dword [esp + 8]
mov ecx, edi
push 0
push 3
push 0
push 0x82
jmp 0x735e79
mov dword [edi], 2
jmp 0x735d95
mov dword [edi], 2
xor eax, eax
mov esi, dword [esp + 4]
mov edi, dword [esi]
cmp dword [edi], 0
jne 0x735e2b
mov esi, eax
mov ebx, dword [edi + 0x30]
mov ecx, dword [ebx + 4]
lea edx, [ecx + 0xc]
cmp edx, 0x7f8
ja 0x735de7
lea eax, [ebx + ecx + 8]
mov dword [ebx + 4], edx
jmp 0x735e12
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x73606a
mov ecx, dword [edi + 0x30]
mov dword [eax], ecx
mov dword [edi + 0x30], eax
mov dword [eax + 4], 0xc
add eax, 8
mov dword [eax], esi
mov esi, eax
mov ecx, edi
call fcn.00731400
mov dword [esi + 4], eax
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx]
mov dword [esi + 8], eax
mov dword [ecx], esi
mov edx, 0x20
mov edi, dword [esp + 8]
mov ecx, edi
mov eax, dword [esp + 0x58]
push dword [eax]
push 0x8d
push 0
push 1
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, edi
push 0
push 3
push 0
push 0x82
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, edi
push 0
push 1
push 4
push 0x82
call fcn.00730440
add esp, 0x10
mov edx, dword [esp]
cmp dword [ebp + 4], 0
je 0x735eaf
cmp dword [edi], 0
jne 0x7360fd
mov esi, edi
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x735edb
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x735f0a
cmp dword [edi], 0
jne 0x7360fd
mov esi, edi
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x735fa4
lea edi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x735fd3
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x7360f4
mov ecx, esi
mov eax, dword [ecx + 0x30]
mov dword [edi], eax
mov dword [ecx + 0x30], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0x32000
mov edx, esi
mov eax, dword [edx + 0x1c]
lea ecx, [edx + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], edi
mov dword [edx + 0x1c], edi
add dword [edx + 0x48], 5
mov ecx, dword [edx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x735f47
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x735f74
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7360f4
mov edx, esi
mov ecx, dword [edx + 0x2c]
mov dword [eax], ecx
mov dword [edx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov eax, dword [ebp + 4]
test eax, eax
mov edx, dword [esp]
je 0x7360ac
mov ecx, dword [edi + 8]
and ecx, 0xfffffffc
or ecx, 1
mov dword [edi + 8], ecx
mov dword [edi + 0xc], eax
cmp dword [esi], 0
jne 0x7360fd
jmp 0x7360b1
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov edi, eax
test edi, edi
je 0x7360f4
mov ecx, esi
mov eax, dword [ecx + 0x30]
mov dword [edi], eax
mov dword [ecx + 0x30], edi
mov dword [edi + 4], 0x10
add edi, 8
mov dword [edi], 0
mov dword [edi + 8], 0x32000
mov edx, esi
mov eax, dword [edx + 0x1c]
lea ecx, [edx + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], edi
mov dword [edx + 0x1c], edi
add dword [edx + 0x48], 5
mov ecx, dword [edx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x736010
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x73603d
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7360f4
mov edx, esi
mov ecx, dword [edx + 0x2c]
mov dword [eax], ecx
mov dword [edx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov eax, esi
cmp dword [eax], 0
mov edx, dword [esp]
jne 0x7360fd
mov ecx, dword [eax + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x736075
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x73609e
mov dword [edi], 2
jmp 0x735e2b
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7360f4
mov edx, esi
mov ecx, dword [edx + 0x30]
mov dword [eax], ecx
mov dword [edx + 0x30], eax
mov dword [eax + 4], 8
add eax, 8
mov ecx, dword [ebp + 8]
mov dword [eax + 4], ecx
mov dword [eax], edi
mov dword [ebp + 8], eax
mov edx, dword [esp]
cmp dword [esi], 0
jne 0x7360fd
mov edx, 0x11
mov ecx, esi
push 0
push 1
push 0
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x7360d0
or byte [eax + 1], 0x38
cmp dword [esi], 0
mov edx, dword [esp]
jne 0x7360fd
mov edi, esi
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x10]
cmp edx, 0x7f8
ja 0x736105
lea esi, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x736134
mov dword [esi], 2
mov edx, dword [esp]
add edx, 4
jmp 0x7357d9
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov esi, eax
test esi, esi
je 0x736202
mov ecx, edi
mov eax, dword [ecx + 0x30]
mov dword [esi], eax
mov dword [ecx + 0x30], esi
mov dword [esi + 4], 0x10
add esi, 8
mov dword [esi], 0
mov dword [esi + 8], 0
mov edx, edi
mov eax, dword [edx + 0x1c]
lea ecx, [edx + 0xc]
test eax, eax
cmovne ecx, eax
mov dword [ecx], esi
mov dword [edx + 0x1c], esi
add dword [edx + 0x48], 6
mov ecx, dword [edx + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x736171
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x73619a
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x736202
mov edx, edi
mov ecx, dword [edx + 0x2c]
mov dword [eax], ecx
mov dword [edx + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
mov eax, edi
cmp dword [eax], 0
mov edx, dword [esp]
jne 0x7360fd
mov ecx, dword [eax + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 8]
cmp edx, 0x7f8
ja 0x7361c7
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x7361ee
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x736202
mov ecx, dword [edi + 0x30]
mov dword [eax], ecx
mov dword [edi + 0x30], eax
mov dword [eax + 4], 8
add eax, 8
mov edx, dword [esp + 0x1c]
mov ecx, dword [edx + 0xc]
mov dword [eax + 4], ecx
mov dword [eax], esi
mov dword [edx + 0xc], eax
jmp 0x7360fa
mov dword [edi], 2
jmp 0x7360fa
movzx esi, word [edx]
lea eax, [esi - 1]
movzx eax, ax
cmp eax, 0xa0
ja case.0x736224.97
jmp dword [eax*4 + 0x736aa8]
sub esp, 0xc
mov ecx, dword [esp + 0x10]
push dword [esp + 0xc0]
call fcn.0074b2d0
jmp 0x736710
add edx, 2
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
test eax, eax
lea eax, [eax + 4]
cmove eax, dword [esp + 0x2c]
sub esp, 4
mov edi, edx
movzx edx, si
mov ecx, dword [esp + 8]
push 1
push eax
push edi
call fcn.00747960
jmp 0x736710
add edx, 2
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
test eax, eax
lea eax, [eax + 4]
cmove eax, dword [esp + 0x2c]
sub esp, 8
mov edi, edx
movzx edx, si
mov ecx, dword [esp + 0xc]
push eax
push edi
call fcn.00743310
jmp 0x736710
sub esp, 0xc
mov ecx, dword [esp + 0x10]
push dword [esp + 0xc0]
call fcn.00754bd0
jmp 0x736710
mov eax, dword [esp + 4]
mov ebp, dword [eax]
lea edi, [edx + 2]
lea eax, [esi - 0x97]
movzx ecx, ax
cmp ecx, 4
ja 0x7362db
mov ecx, 0x15
bt ecx, eax
jae 0x7362db
movzx eax, word [edi]
lea edi, [edi + eax*2 + 4]
cmp dword [ebp], 0
jne case.0x736224.97
mov ebx, edx
mov ecx, dword [ebp + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 0x14]
cmp edx, 0x7f8
ja 0x736432
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x736467
mov eax, dword [esp + 4]
mov eax, dword [eax]
xor edi, edi
cmp dword [eax], 0
jne 0x736715
mov ebp, edx
mov dword [esp + 0x14], eax
mov eax, dword [eax + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x20]
cmp edx, 0x7f8
ja 0x731b8d
lea ebx, [eax + ecx + 8]
mov dword [eax + 4], edx
mov edi, dword [esp + 4]
lea esi, [esp + 0x7c]
mov dword [esp + 0x1c], ebx
mov dword [ebx + 0x1c], 0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x14], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0xc], 0
mov dword [ebx + 8], 0
mov dword [ebx + 4], 0
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx]
mov dword [ebx], eax
mov dword [ebx + 0x10], ebp
mov dword [ecx], ebx
movzx eax, word [ebp]
lea ecx, [ebp + 2]
mov dword [esp + 0x50], eax
cmp eax, 0x94
cmovne ecx, ebp
movzx edx, word [ecx]
mov eax, dword [edi + 8]
mov dword [esp], ecx
mov ebp, edi
sub ecx, dword [edi + 4]
mov eax, dword [eax + ecx*2]
mov dword [esp + 0x40], eax
mov dword [ebx + 0x14], eax
mov dword [esp + 0x44], 0
mov dword [esp + 0x54], edx
lea eax, [edx - 0x84]
movzx eax, ax
xor ecx, ecx
cmp eax, 7
ja case.default.0x7363e1
mov dword [esp + 0x24], 0
mov edx, dword [esp]
mov edi, dword [esp + 0x14]
mov ebx, ebp
jmp dword [eax*4 + 0x736d2c]
lea eax, [edx + 4]
mov dword [esp + 0x24], eax
mov dword [esp + 0x44], 0
xor ecx, ecx
jmp case.0x7363e1.1
mov eax, dword [esp + 0x18]
cmp dword [eax], 0
jne case.0x736224.97
mov edi, edx
mov esi, dword [esp + 0x18]
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 0x24]
cmp edx, 0x7f8
ja 0x736680
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x7366b4
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x736814
mov ecx, dword [ebp + 0x30]
mov dword [eax], ecx
mov dword [ebp + 0x30], eax
mov dword [eax + 4], 0x14
cmp dword [ebp], 0
jne case.0x736224.97
add eax, 8
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov edx, dword [esp + 0x10]
mov ecx, dword [edx]
mov dword [eax], ecx
mov dword [eax + 0x10], ebx
mov dword [edx], eax
movzx eax, si
cmp eax, 0x97
je 0x736532
cmp eax, 0x9b
je 0x736532
cmp eax, 0x98
jne 0x73671d
mov ebx, dword [esp + 4]
mov esi, dword [ebx]
xor eax, eax
cmp dword [esi], 0
jne 0x732ba0
mov edx, 0x11
mov ecx, esi
push 0
push 2
push 4
push 0x40
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x7364dd
or byte [eax + 1], 0x28
xor eax, eax
cmp dword [esi], 0
jne 0x732ba0
mov edx, 1
mov ecx, esi
push 0
push 0xa
push 0
push 2
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x736506
mov byte [eax], 0x3b
xor eax, eax
cmp dword [esi], 0
jne 0x732ba0
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 0x10]
cmp edx, 0x7f8
ja 0x732a35
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x732a60
mov edx, 0x20
mov ecx, ebp
push 0
push 8
push 0
push 1
call fcn.00730440
add esp, 0x10
add ebx, 4
mov edx, 0x20
mov ecx, ebp
push ebx
push 0x40
push 0
push 3
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 3
mov eax, dword [esp + 0x60]
push dword [eax]
push 0x8d
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 3
push 0x14
push 0x81
jmp 0x732c19
mov eax, dword [esp + 4]
mov edi, dword [eax]
cmp dword [edi], 0
jne case.0x736224.97
mov dword [esp], edx
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0x14]
cmp edx, 0x7f8
ja 0x731738
lea ebp, [eax + ecx + 8]
mov dword [eax + 4], edx
mov edx, dword [esp]
jmp 0x731772
mov ecx, dword [esp + 4]
cmp dword [ecx + 0x5c], 0
je 0x731bce
add edx, 2
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
test eax, eax
lea eax, [eax + 4]
cmove eax, dword [esp + 0x2c]
sub esp, 4
mov edi, edx
movzx edx, si
push 1
push eax
push edi
jmp 0x736266
movzx eax, word [edx + 0x22]
add eax, 0xffffff9e
movzx eax, ax
cmp eax, 0xb
ja 0x731aac
sub esp, 0xc
mov ecx, dword [esp + 0x10]
push dword [esp + 0xc0]
call fcn.0074b2d0
jmp 0x736710
movzx eax, word [edx + 4]
add eax, 0xffffff9e
movzx eax, ax
cmp eax, 0xb
ja 0x731ad4
sub esp, 0xc
mov ecx, dword [esp + 0x10]
push dword [esp + 0xc0]
call fcn.0074eb20
jmp 0x736710
movzx eax, word [edx + 6]
add eax, 0xffffff9e
movzx eax, ax
cmp eax, 0xb
ja 0x731af5
sub esp, 0xc
mov ecx, dword [esp + 0x10]
push dword [esp + 0xc0]
call fcn.0074eb20
jmp 0x736710
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7367f4
mov ecx, dword [esi + 0x30]
mov dword [eax], ecx
mov dword [esi + 0x30], eax
mov dword [eax + 4], 0x24
cmp dword [esi], 0
jne case.0x736224.97
add eax, 8
mov dword [eax + 0x20], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov esi, dword [esp + 0x10]
mov ecx, dword [esi]
mov dword [eax], ecx
mov edx, edi
mov dword [eax + 0x10], edx
mov dword [esi], eax
sub esp, 8
mov ecx, dword [esp + 0xc]
push 0
push eax
call fcn.00752bf0
nop word [eax + eax]
add esp, 0x10
mov edi, eax
test edi, edi
je case.0x736224.97
cmp edi, dword [esp + 0xb0]
mov edx, edi
jb 0x736210
cmp dword [esp + 0x20], 0
je case.0x736224.97
mov eax, dword [esp + 0x18]
cmp dword [eax], 0
jne case.0x736224.97
mov esi, dword [esp + 0x18]
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx + 4]
lea edx, [eax + 0x24]
cmp edx, 0x7f8
ja 0x7367c3
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
mov dword [eax + 0x20], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov ecx, dword [esp + 0xb4]
mov edx, ecx
mov ecx, dword [edx + 8]
mov dword [eax], ecx
mov dword [edx + 8], eax
mov dword [eax + 0x10], 0x86265c
mov edx, dword [esp + 4]
mov ecx, dword [edx + 0x18]
mov dword [eax + 0x14], ecx
mov eax, dword [esp + 0x64]
mov dword [edx + 0x18], eax
jmp case.0x736224.97
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7367f4
mov ecx, dword [esi + 0x30]
mov dword [eax], ecx
mov dword [esi + 0x30], eax
mov dword [eax + 4], 0x24
cmp dword [esi], 0
jne case.0x736224.97
add eax, 8
jmp 0x736760
mov dword [esi], 2
add esp, 0x9c
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp], 2
mov edx, dword [esp]
jmp 0x731519
mov dword [ebp], 2
jmp case.0x736224.97
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7368c0
mov ecx, dword [esi + 0x30]
mov dword [eax], ecx
mov dword [esi + 0x30], eax
mov dword [eax + 4], 0x10
add eax, 8
mov dword [eax], 0
mov dword [eax + 8], 0x4000
mov edx, dword [esi + 0x1c]
lea ecx, [esi + 0xc]
test edx, edx
cmovne ecx, edx
mov dword [ecx], eax
mov dword [esp + 0x20], eax
mov dword [esi + 0x1c], eax
add dword [esi + 0x48], 6
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 4]
lea edx, [eax + 2]
cmp edx, 0xff8
ja 0x736892
lea eax, [ecx + eax + 8]
mov dword [ecx + 4], edx
jmp 0x7368b9
mov dword [edi], 2
jmp case.0x736224.97
sub esp, 0xc
push 0x1000
call dword [0x860e74]
add esp, 0x10
test eax, eax
je 0x7368c0
mov ecx, dword [esi + 0x2c]
mov dword [eax], ecx
mov dword [esi + 0x2c], eax
mov dword [eax + 4], 2
add eax, 8
mov word [eax], pe_nt_image_headers32
jmp 0x7368ce
mov dword [esi], 2
mov dword [esp + 0x20], 0
mov esi, dword [ebx]
cmp dword [esi], 0
jne 0x736941
mov eax, dword [esi + 0x30]
mov ecx, dword [eax + 4]
lea edx, [ecx + 0xc]
cmp edx, 0x7f8
ja 0x7368ef
lea ebp, [eax + ecx + 8]
mov dword [eax + 4], edx
jmp 0x73691d
sub esp, 0xc
push 0x800
call dword [0x860e74]
add esp, 0x10
mov ebp, eax
test ebp, ebp
je 0x736a8e
mov eax, dword [esi + 0x30]
mov dword [ebp], eax
mov dword [esi + 0x30], ebp
mov dword [ebp + 4], 0xc
add ebp, 8
mov eax, dword [esp + 0x20]
mov dword [ebp], eax
mov ecx, esi
call fcn.00731400
mov dword [ebp + 4], eax
mov eax, dword [ebx + 0xc0]
mov dword [ebp + 8], eax
mov dword [ebx + 0xc0], ebp
mov ebp, dword [esp + 0x18]
cmp dword [esp + 0x2c], 0
mov esi, dword [ebx + 0x40]
jle 0x7369ad
mov eax, dword [esp + 0x10]
shl eax, 2
cmp dword [ebp], 0
jne 0x7369cd
add esi, dword [ebp + 0x58]
mov edx, 1
mov ecx, ebp
mov dword [esp + 0x10], eax
push eax
push 0x82
push 0
push 0xe
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x736a54
mov byte [eax], 0x8d
mov edx, 1
mov ecx, ebp
push esi
push 0x8d
push 0
push 0xe
call fcn.0073bb30
add esp, 0x10
test eax, eax
je 0x736a54
mov byte [eax], 0x89
mov eax, dword [esp + 0x10]
jmp 0x7369cd
mov edx, 0x20
mov ecx, ebp
push 0
push 2
push esi
push 0x8d
call fcn.00730440
add esp, 0x10
mov eax, dword [esp + 0x10]
shl eax, 2
mov esi, eax
lea eax, [esi + 8]
mov edx, 0x20
mov ecx, ebp
push dword [edi + 0x18]
push 0x40
push eax
push 0x82
call fcn.00730440
add esp, 0x10
lea eax, [esi + 4]
mov edx, 0x20
mov ecx, ebp
push 1
push 0x40
push eax
push 0x82
call fcn.00730440
add esp, 0x10
mov edx, 0x20
mov ecx, ebp
push 0
push 3
push esi
push 0x82
call fcn.00730440
add esp, 0x10
mov eax, dword [edi + 0x20]
test eax, eax
mov edx, dword [esp]
js 0x731519
dec eax
sub esp, 4
mov ecx, ebx
mov edx, dword [esp + 4]
push 0
push eax
push dword [esp + 0xbc]
call fcn.00758810
mov edx, dword [esp + 0x10]
add esp, 0x10
jmp 0x731519
cmp dword [ebp], 4
jne 0x736a85
sub esp, 8
mov edx, 0x5030100
mov ecx, ebp
push dword [esp + 0x18]
push 0x40
push 0
push 2
push esi
push 0x8d
call fcn.0073c5f0
mov eax, dword [esp + 0x30]
add esp, 0x20
jmp 0x7369cd
mov eax, dword [esp + 0x10]
jmp 0x7369cd
mov dword [esi], 2
jmp 0x73693d
mov eax, dword [esp + 0x18]
mov dword [eax], 2
jmp case.0x736224.97