Function at 0x759eb8
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x6b
push 0
push 0
dec ecx
jne 0x759ec0
push ecx
push ebx
push esi
push edi
mov dword [ebp - 0x10], edx
mov ebx, eax
xor eax, eax
push ebp
push 0x75a869
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x759b6c]
call fcn.0040999c
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x759efa
sub edx, 0xfffffff8
call fcn.00410d98
mov eax, dword [ebp - 0x18]
mov dword [eax + 0xc], ebx
xor ebx, ebx
xor eax, eax
push ebp
push 0x759f87
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x18]
add eax, 0x18
call fcn.0040b8d8
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x2c]
mov edx, dword [eax]
call dword [edx + 0xc]
mov edx, eax
mov eax, dword [ebp - 0x18]
add eax, 0x18
xor ecx, ecx
call fcn.0040c438
push 0
push 0
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x2c]
call fcn.004ba080
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x2c]
mov edx, dword [eax]
call dword [edx + 0xc]
push eax
mov eax, dword [ebp - 0x18]
add eax, 0x18
call fcn.0040be88
mov edx, eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x2c]
mov eax, dword [eax + 4]
pop ecx
call fcn.00407720
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x759fc6
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 0x18]
mov eax, edx
test eax, eax
je 0x759fd5
mov eax, dword [eax - 4]
mov dword [ebp - 0x14], eax
test bl, bl
jne 0x75a1ba
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
cmp byte [eax + 0x3c], 1
jne 0x75a034
cmp dword [eax + 0x38], 1
jne 0x75a013
mov eax, dword [0x8dc9cc]
cmp byte [eax], 1
je 0x75a841
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x75a00a
sub edx, 0xffffffcc
xor eax, eax
call fcn.004c776c
jmp 0x75a07b
mov eax, dword [0x8dc9cc]
cmp byte [eax], 1
je 0x75a841
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x75a02b
sub edx, 0xffffffd0
xor eax, eax
call fcn.004c776c
jmp 0x75a07b
cmp dword [eax + 0x38], 9
jne 0x75a05c
mov eax, edx
test eax, eax
je 0x75a043
mov eax, dword [eax - 4]
mov edx, dword [ebp - 0x18]
mov dword [edx + 0x10], eax
mov eax, dword [ebp - 0x18]
add eax, 0x14
mov edx, dword [ebp - 0x18]
mov edx, dword [edx + 0x18]
call fcn.0040bd48
jmp 0x75a07b
mov eax, dword [0x8dc9cc]
cmp byte [eax], 1
je 0x75a841
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x75a074
sub edx, 0xffffffd4
xor eax, eax
call fcn.004c776c
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0x10], 0x2710
jge 0x75a0b6
mov bl, 1
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
movzx eax, byte [eax + 0x3c]
dec al
jne 0x75a0b6
mov eax, dword [0x8dc9cc]
cmp byte [eax], 1
je 0x75a841
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x75a0af
sub edx, 0xffffffd8
xor eax, eax
call fcn.004c776c
test bl, bl
jne 0x75a0fd
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x75a0c7
mov eax, dword [eax - 4]
cmp eax, 0x2710
jge 0x75a0fd
mov bl, 1
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
movzx eax, byte [eax + 0x3c]
dec al
jne 0x75a0fd
mov eax, dword [0x8dc9cc]
cmp byte [eax], 1
je 0x75a841
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x75a0f6
sub edx, 0xffffffdc
xor eax, eax
call fcn.004c776c
test bl, bl
jne 0x75a1ba
xor edx, edx
push ebp
push 0x75a17b
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x2c]
call fcn.004baef4
push 0
push 0
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x2c]
call fcn.004ba080
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x14]
mov esi, eax
test esi, esi
je 0x75a142
mov esi, dword [esi - 4]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x14]
call fcn.0040c30c
mov edx, eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x2c]
mov ecx, esi
mov esi, dword [eax]
call dword [esi + 0x1c]
push 0
push 0
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x2c]
call fcn.004ba080
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x75a1ba
test bl, bl
jne case.0x75a1d5.0
mov eax, dword [ebp - 0x18]
mov esi, dword [eax + 0xc]
movzx eax, byte [esi + 0x3c]
cmp eax, 0xc
ja case.0x75a1d5.0
jmp dword [eax*4 + 0x75a1dc]
xor eax, eax
push ebp
push 0x75a24c
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x300]
mov ecx, 0x75a884
call fcn.0040ca8c
mov edx, dword [ebp - 0x300]
mov eax, dword [esi + 0x2c]
call fcn.004bae70
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x75a1d5.0
xor eax, eax
push ebp
push 0x75a2be
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x304]
mov ecx, 0x75a8b4
call fcn.0040ca8c
mov edx, dword [ebp - 0x304]
mov eax, dword [esi + 0x2c]
call fcn.004bae70
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x75a1d5.0
xor eax, eax
push ebp
push 0x75a30b
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x308]
mov ecx, 0x75a8e4
call fcn.0040ca8c
mov edx, dword [ebp - 0x308]
mov eax, dword [esi + 0x2c]
call fcn.004bae70
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x75a1d5.0
xor eax, eax
push ebp
push 0x75a358
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x30c]
mov ecx, 0x75a90c
call fcn.0040ca8c
mov edx, dword [ebp - 0x30c]
mov eax, dword [esi + 0x2c]
call fcn.004bae70
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x75a1d5.0
xor eax, eax
push ebp
push 0x75a3a5
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x310]
mov ecx, 0x75a940
call fcn.0040ca8c
mov edx, dword [ebp - 0x310]
mov eax, dword [esi + 0x2c]
call fcn.004bae70
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x75a1d5.0
xor eax, eax
push ebp
push 0x75a404
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
mov eax, dword [esi + 0x2c]
call fcn.004ba080
mov eax, dword [ebp - 0x18]
mov esi, dword [eax + 0xc]
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x314]
mov ecx, 0x75a970
call fcn.0040ca8c
mov edx, dword [ebp - 0x314]
mov eax, dword [esi + 0x2c]
call fcn.004bae70
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x75a1d5.0
xor eax, eax
push ebp
push 0x75a463
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
mov eax, dword [esi + 0x2c]
call fcn.004ba080
mov eax, dword [ebp - 0x18]
mov esi, dword [eax + 0xc]
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x318]
mov ecx, 0x75a9a8
call fcn.0040ca8c
mov edx, dword [ebp - 0x318]
mov eax, dword [esi + 0x2c]
call fcn.004bae70
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x75a1d5.0
xor eax, eax
push ebp
push 0x75a4c2
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
mov eax, dword [esi + 0x2c]
call fcn.004ba080
mov eax, dword [ebp - 0x18]
mov esi, dword [eax + 0xc]
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x31c]
mov ecx, 0x75a9c8
call fcn.0040ca8c
mov edx, dword [ebp - 0x31c]
mov eax, dword [esi + 0x2c]
call fcn.004bae70
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x75a1d5.0
xor eax, eax
push ebp
push 0x75a521
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
mov eax, dword [esi + 0x2c]
call fcn.004ba080
mov eax, dword [ebp - 0x18]
mov esi, dword [eax + 0xc]
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x320]
mov ecx, 0x75a9e8
call fcn.0040ca8c
mov edx, dword [ebp - 0x320]
mov eax, dword [esi + 0x2c]
call fcn.004bae70
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x75a1d5.0
xor eax, eax
push ebp
push 0x75a580
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
mov eax, dword [esi + 0x2c]
call fcn.004ba080
mov eax, dword [ebp - 0x18]
mov esi, dword [eax + 0xc]
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x324]
mov ecx, 0x75aa18
call fcn.0040ca8c
mov edx, dword [ebp - 0x324]
mov eax, dword [esi + 0x2c]
call fcn.004bae70
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x75a1d5.0
xor eax, eax
push ebp
push 0x75a5dc
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
mov eax, dword [esi + 0x2c]
call fcn.004ba080
mov eax, dword [ebp - 0x18]
mov esi, dword [eax + 0xc]
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x328]
mov ecx, 0x75aa4c
call fcn.0040ca8c
mov edx, dword [ebp - 0x328]
mov eax, dword [esi + 0x2c]
call fcn.004bae70
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x75a1d5.0
xor eax, eax
push ebp
push 0x75a635
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
mov eax, dword [esi + 0x2c]
call fcn.004ba080
mov eax, dword [ebp - 0x18]
mov esi, dword [eax + 0xc]
mov edx, dword [esi + 0x30]
lea eax, [ebp - 0x32c]
mov ecx, 0x75aa90
call fcn.0040ca8c
mov edx, dword [ebp - 0x32c]
mov eax, dword [esi + 0x2c]
call fcn.004bae70
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp case.0x75a1d5.0
test bl, bl
jne 0x75a64d
mov eax, dword [ebp - 0x10]
mov byte [eax], 1
jmp 0x75a653
mov eax, dword [ebp - 0x10]
mov byte [eax], 0
xor eax, eax
push ebp
push 0x75a837
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x18]
mov ebx, dword [eax + 0xc]
push dword [ebx + 0x30]
push 0x75aab8
lea edx, [ebp - 0x334]
movzx eax, byte [ebx + 0x3c]
call fcn.00430488
push dword [ebp - 0x334]
push 0x75aae4
lea eax, [ebp - 0x330]
mov edx, 4
call fcn.0040cb14
mov edx, dword [ebp - 0x330]
xor ecx, ecx
lea eax, [ebp - 0x2fc]
call fcn.004080e0
call fcn.00407348
lea eax, [ebp - 0x2fc]
call fcn.00407da0
call fcn.00407348
call fcn.00433ebc
fstp qword [ebp - 0x20]
wait
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
lea edx, [ebp - 0x33c]
mov eax, dword [0x8dd7e8]
call fcn.00434e7c
mov ecx, dword [ebp - 0x33c]
lea eax, [ebp - 0x338]
mov edx, 0x75aafc
call fcn.0040ca8c
mov edx, dword [ebp - 0x338]
lea eax, [ebp - 0x2fc]
call fcn.00409340
call fcn.00409444
call fcn.00407348
lea edx, [ebp - 0x344]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
movzx eax, byte [eax + 0x3c]
call fcn.00430488
mov ecx, dword [ebp - 0x344]
lea eax, [ebp - 0x340]
mov edx, 0x75ab14
call fcn.0040ca8c
mov edx, dword [ebp - 0x340]
lea eax, [ebp - 0x2fc]
call fcn.00409340
call fcn.00409444
call fcn.00407348
lea edx, [ebp - 0x34c]
mov eax, dword [ebp - 0x14]
call fcn.00430488
mov ecx, dword [ebp - 0x34c]
lea eax, [ebp - 0x348]
mov edx, 0x75ab30
call fcn.0040ca8c
mov edx, dword [ebp - 0x348]
lea eax, [ebp - 0x2fc]
call fcn.00409340
call fcn.00409444
call fcn.00407348
lea edx, [ebp - 0x354]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x38]
call fcn.00430488
mov ecx, dword [ebp - 0x354]
lea eax, [ebp - 0x350]
mov edx, 0x75ab60
call fcn.0040ca8c
mov edx, dword [ebp - 0x350]
lea eax, [ebp - 0x2fc]
call fcn.00409340
call fcn.00409444
call fcn.00407348
lea edx, [ebp - 0x35c]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x10]
call fcn.00430488
mov ecx, dword [ebp - 0x35c]
lea eax, [ebp - 0x358]
mov edx, 0x75ab90
call fcn.0040ca8c
mov edx, dword [ebp - 0x358]
lea eax, [ebp - 0x2fc]
call fcn.00409340
call fcn.00409444
call fcn.00407348
lea eax, [ebp - 0x2fc]
call fcn.004081e8
call fcn.00407348
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x75a841
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x75a870
lea eax, [ebp - 0x35c]
mov edx, 0x18
call fcn.0040b914
lea eax, [ebp - 0xc]
call fcn.00410d80
pop eax
jmp eax