Function at 0xa9ee65
Capabilities:
Execute anti-debugging instructions
Parse pe header

Disassembly:
inc ebp
fiadd dword [edi + 0x748b56f3]
and al, 4
xchg ebx, esi
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x49]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg esi, ecx
mov ecx, dword [ebp + 0xc]
push esi
xchg esi, ecx
pop ecx
xchg ecx, ebx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, ebx
mov ebx, dword [esp]
xchg ebx, esi
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x21]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg ebx, esi
xchg dword [esp], ebx
xchg ebx, esi
lea esp, [esp + 4]
xchg ecx, eax
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x76]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
mov eax, dword [ebx + 0x3c]
push ecx
xchg ecx, eax
pop eax
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg ecx, eax
push ebp
mov ebp, esp
leave
xchg ecx, eax
xchg dword [esp], eax
xchg ecx, eax
lea esp, [esp + 4]
mov eax, dword [eax + ebx + 0x80]
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 7]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg ecx, ebp
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, ebp
mov ebp, dword [esp]
xchg ebp, eax
mov eax, esp
push ebp
xchg ebp, eax
pop eax
leave
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x4b]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
test eax, eax
pushfd
add ebp, 0x43
popfd
lea ebp, [ebp - 0x43]
pushfd
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 7]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
add ebp, 0x5f
lea eax, [eax]
popfd
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x59]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
lea ebp, [ebp - 0x5f]
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0xc]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
call fcn.00aa35dc
mov ebp, 0x180c8df6
pushfd
add ebp, 0x76
popfd
lea ebp, [ebp - 0x76]
xchg ecx, edi
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, edi
mov edi, dword [esp]
xchg edi, ecx
mov ecx, dword [esp + 4]
push edi
xchg edi, ecx
pop ecx
lea edi, [edi + 0x3f]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x72]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], edi
pushfd
add ebp, 0x28
popfd
lea ebp, [ebp - 0x28]
mov dword [esp + 4], edi
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x36]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg edi, edx
mov edx, dword [esp]
push edi
xchg edi, edx
pop edx
lea esp, [esp + 4]
push ebp
mov ebp, esp
leave
xchg edx, eax
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x4d]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg edx, eax
mov eax, dword [ecx]
push edx
xchg edx, eax
pop eax
xchg esi, eax
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, eax
mov eax, dword [esp]
xchg edx, eax
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x3f]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg edx, eax
xchg dword [esp], eax
xchg edx, eax
lea esp, [esp + 4]
xchg dword [ebp - 4], edi
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x26]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg edi, eax
mov eax, ecx
push edi
xchg edi, eax
pop eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, dword [ebp - 4]
xchg dword [esp], eax
xchg dword [ebp - 4], edi
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x54]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg edx, edi
xchg dword [esp], edx
xchg edx, edi
lea esp, [esp + 4]
xchg esi, eax
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x70]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
call fcn.00aa3770
and dword [eax], 0x8b509600
inc esp
and al, 4
lea eax, [eax + 0x61]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg ebx, eax
mov ebx, dword [ecx + 0xc]
push eax
xchg ebx, eax
pop ebx
xchg esi, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, esi
mov esi, dword [esp]
xchg esi, eax
pushfd
add ebp, 0x57
popfd
lea ebp, [ebp - 0x57]
xchg ebx, eax
xchg dword [esp], ebx
xchg ebx, eax
lea esp, [esp + 4]
add eax, ebx
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x2e]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
pushfd
lea ebx, [ebx]
add ebp, 0x36
push edi
mov edi, eax
pop edi
popfd
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x47]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
lea ebp, [ebp - 0x36]
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x44]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg edx, eax
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x34]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg edx, eax
mov edx, dword [ecx + 0x10]
push eax
xchg edx, eax
pop edx
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edx
mov edx, dword [esp]
xchg edx, eax
pushfd
add ebp, 0x3a
popfd
lea ebp, [ebp - 0x3a]
xchg ecx, eax
xchg dword [esp], ecx
xchg ecx, eax
lea esp, [esp + 4]
add esi, ebx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x33]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
pushfd
lea edx, [edx]
add ebp, 0x4a
push ebx
mov ebx, eax
pop ebx
popfd
push eax
mov eax, dword [esp + 0xa]
pop eax
call fcn.00aa3928
mov al, byte [0x8700007c]
fist word [esi - 0x75]
je 0xa9f17e
add al, 0x8d
jbe 0xa9f1a3
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg ebx, ecx
mov ecx, eax
push ebx
xchg ebx, ecx
pop ecx
xchg edx, edi
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, edi
mov edi, dword [esp]
xchg edi, ebx
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x1d]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg ebx, eax
xchg dword [esp], eax
xchg ebx, eax
lea esp, [esp + 4]
and al, 4
test edi, edi
mov ecx, ecx
xchg ecx, edx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, edx
mov edx, dword [esp]
xchg edx, esi
mov esi, dword [esp + 4]
push edx
xchg edx, esi
pop esi
lea edx, [edx + 0x32]
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x3c]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], edx
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x21]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], edx
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x20]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
sbb al, 0x24
sbb al, 0x24
lea esp, [esp + 4]
xchg edx, edi
mov edi, dword [esp]
push edx
xchg edx, edi
pop edi
lea esp, [esp + 4]
pushfd
add ebp, 0x53
popfd
lea ebp, [ebp - 0x53]
jne 0xaa17d0
xchg edi, eax
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x4b]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
pushfd
add ebp, 0x41
popfd
lea ebp, [ebp - 0x41]
mov dword [esp], edi
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x7c]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg edi, ecx
mov ecx, eax
push edi
xchg edi, ecx
pop ecx
xchg ecx, eax
mov ecx, dword [esp]
push eax
xchg ecx, eax
pop ecx
call fcn.00aa3a2c
or byte ss:[edi - 0x3a7c6309], al
adc ebx, dword [ebp - 0x78129273]
dec byte [ebx - 0x178a908]
pop edi
xchg edi, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edi
mov edi, dword [esp]
xchg edi, esi
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x34]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg esi, eax
xchg dword [esp], eax
xchg esi, eax
lea esp, [esp + 4]
test edi, edi
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x48]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg ebx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ebx
mov ebx, dword [esp]
xchg ebx, ecx
mov ecx, dword [esp + 4]
push ebx
xchg ebx, ecx
pop ecx
lea ebx, [ebx + 0x5d]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0xd]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], ebx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0xd]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], ebx
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x69]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg ebx, ecx
mov ecx, dword [esp]
push ebx
xchg ebx, ecx
pop ecx
lea esp, [esp + 4]
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x7e]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
je 0xaa1d34
jmp 0xa9f374
add byte [eax], al
xchg ebx, eax
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x14]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg ebx, edx
mov edx, dword [ebp - 8]
push ebx
xchg ebx, edx
pop edx
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg ebx, eax
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x33]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg edx, ebx
xchg dword [esp], edx
xchg edx, ebx
lea esp, [esp + 4]
xor esi, esi
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x5d]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg edx, ebx
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, ebx
mov ebx, dword [esp]
xchg ebx, eax
mov eax, dword [esp + 4]
push ebx
xchg ebx, eax
pop eax
lea ebx, [ebx + 0x1e]
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x77]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], ebx
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x43]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], ebx
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 1]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg ebx, eax
mov eax, dword [esp]
push ebx
xchg ebx, eax
pop eax
lea esp, [esp + 4]
push eax
mov eax, ecx
pop eax
cmp dword [eax], esi
pushfd
add ebp, 0x7b
popfd
lea ebp, [ebp - 0x7b]
xchg edi, edx
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, edx
mov edx, dword [esp]
xchg edx, esi
mov esi, dword [esp + 4]
push edx
xchg edx, esi
pop esi
lea edx, [edx + 0xe]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x24]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], edx
pushfd
add ebp, 0x2d
popfd
lea ebp, [ebp - 0x2d]
mov dword [esp + 4], edx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x70]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
call fcn.00aa3b54
jg 0xa9f503
add byte [eax], al
add byte [ebx + 0x7c8b5700], cl
and al, 4
lea edi, [edi + 0x47]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ecx
mov ecx, dword [esp]
xchg ecx, esi
mov esi, eax
push ecx
xchg ecx, esi
pop esi
xchg ecx, eax
xchg dword [esp], eax
xchg ecx, eax
lea esp, [esp + 4]
test eax, eax
mov ecx, ecx
xchg ebx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ebx
mov ebx, dword [esp]
xchg ebx, edx
mov edx, dword [esp + 4]
push ebx
xchg ebx, edx
pop edx
lea ebx, [ebx + 0x2f]
push ebp
mov ebp, esp
leave
xchg dword [esp + 4], ebx
pushfd
add ebp, 0x67
popfd
lea ebp, [ebp - 0x67]
mov dword [esp + 4], ebx
lea edi, [edi]
xchg ebx, edi
mov edi, dword [esp]
push ebx
xchg ebx, edi
pop edi
lea esp, [esp + 4]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x3d]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
jns 0xaa2ae4
movzx eax, ax
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x49]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, eax
mov eax, dword [esp]
xchg edx, eax
mov edx, dword [esp + 4]
push eax
xchg edx, eax
pop edx
lea eax, [eax + 0x75]
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x6c]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], eax
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x34]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], eax
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x30]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
call fcn.00aa3c10
ret
mov ecx, 0x55d98700
xchg ecx, ebx
push ebp
mov ebp, esp
leave
xchg ebx, ecx
mov ecx, dword [ebp + 0xc]
push ebx
xchg ebx, ecx
pop ecx
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ecx
mov ecx, dword [esp]
xchg ecx, ebx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x75]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg ecx, ebx
xchg dword [esp], ecx
xchg ecx, ebx
lea esp, [esp + 4]
add ecx, 2
pushfd
add ebp, 0
popfd
lea ebp, [ebp]
xchg ebx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ebx
mov ebx, dword [esp]
xchg ebx, ecx
mov ecx, dword [esp + 4]
push ebx
xchg ebx, ecx
pop ecx
lea ebx, [ebx + 0x76]
push esi
mov esi, dword [esp + 0xe]
pop esi
xchg dword [esp + 4], ebx
mov ebx, ebx
mov dword [esp + 4], ebx
push eax
mov eax, dword [esp + 0xe]
pop eax
xchg ebx, eax
mov eax, dword [esp]
push ebx
xchg ebx, eax
pop eax
lea esp, [esp + 4]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x24]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
add eax, ecx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x52]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg ecx, edx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, edx
mov edx, dword [esp]
xchg edx, eax
mov eax, dword [esp + 4]
push edx
xchg edx, eax
pop eax
lea edx, [edx + 1]
lea ecx, [ecx]
xchg dword [esp + 4], edx
push ebp
mov ebp, esp
leave
mov dword [esp + 4], edx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x6c]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
call fcn.00aa3c9c
mov eax, 0x539200d3
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x3d]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
pushfd
add ebp, 0x15
popfd
lea ebp, [ebp - 0x15]
mov dword [esp], edx
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x1a]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg edx, ecx
mov ecx, eax
push edx
xchg edx, ecx
pop ecx
xchg ebx, eax
mov ebx, dword [esp]
push eax
xchg ebx, eax
pop ebx
xchg ecx, edi
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x24]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x35]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
mov dword [esp], ecx
pushfd
add ebp, 0x4e
popfd
lea ebp, [ebp - 0x4e]
xchg ecx, eax
mov eax, edi
push ecx
xchg ecx, eax
pop eax
xchg edi, esi
mov esi, dword [esp]
push edi
xchg edi, esi
pop esi
push 0xaa573d
jmp dword [0xfab014]
xchg ecx, edi
lea ecx, [ecx]
xchg edi, eax
mov eax, dword [ebp - 4]
push edi
xchg edi, eax
pop eax
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ecx
mov ecx, dword [esp]
xchg ecx, edi
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x47]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg edi, eax
xchg dword [esp], eax
xchg edi, eax
lea esp, [esp + 4]
add ecx, 0x14
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x70]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
pushfd
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x40]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
add ebp, 0x47
mov edx, edx
popfd
lea esi, [esi]
lea ebp, [ebp - 0x47]
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x11]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg dword [ebp - 4], esi
push esi
mov esi, eax
pop esi
xchg esi, eax
mov eax, ecx
push esi
xchg esi, eax
pop eax
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, dword [ebp - 4]
xchg dword [esp], ebx
xchg dword [ebp - 4], esi
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x27]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg edx, esi
xchg dword [esp], edx
xchg edx, esi
lea esp, [esp + 4]
xchg edx, eax
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x3f]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg edx, eax
mov eax, dword [ecx]
push edx
xchg edx, eax
pop eax
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, eax
mov eax, dword [esp]
xchg edx, eax
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x1e]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
call fcn.00aa3f00
neg dword [edx]
cmp dword [edx], 8
push eax
mov eax, edx
pop eax
xchg esi, ebp
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, ebp
mov ebp, dword [esp]
xchg ebp, eax
mov eax, esp
push ebp
xchg ebp, eax
pop eax
leave
lea edx, [edx]
jle 0xaa3210
lea esp, [esp - 4]
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x50]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
mov dword [esp], eax
push ecx
mov ecx, dword [esp + 0xc]
pop ecx
xchg esi, eax
mov esi, dword [edx + 0x3a]
push eax
xchg esi, eax
pop esi
xchg dword [esp], eax
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x4c]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
push eax
mov eax, dword [esp]
pop eax
xchg ecx, eax
mov eax, dword [edx + 0x36]
push ecx
xchg ecx, eax
pop eax
xchg edi, eax
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, eax
mov eax, dword [esp]
xchg ecx, eax
push ebp
mov ebp, esp
leave
xchg ecx, eax
xchg dword [esp], eax
xchg ecx, eax
lea esp, [esp + 4]
add eax, ebx
lea edi, [edi]
xchg edi, eax
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, eax
mov eax, dword [esp]
xchg ebx, eax
mov ebx, dword [esp + 4]
push eax
xchg ebx, eax
pop ebx
lea eax, [eax + 0x56]
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0xd]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], eax
push ecx
mov ecx, eax
pop ecx
call fcn.00aa407c
rcr bl, cl
xchg edi, eax
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x28]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], eax
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x41]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg edi, eax
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x60]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
lea esp, [esp + 4]
pushfd
add ebp, 0x54
popfd
lea ebp, [ebp - 0x54]
xchg ecx, esi
pushfd
add ebp, 0x35
popfd
lea ebp, [ebp - 0x35]
xchg dword [esp], ecx
lea ecx, [ecx]
xchg ecx, esi
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x3d]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp + 4]
push eax
mov eax, dword [esp + 0xb]
pop eax
xor eax, eax
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x6c]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
mov ebx, ebx
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 4]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg ecx, ebx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x4b]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], ecx
pushfd
add ebp, 0x15
popfd
lea ebp, [ebp - 0x15]
xchg ecx, ebx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x7b]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp + 4]
push ebp
mov ebp, esp
leave
mov esp, ebp
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x63]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
mov ecx, ecx
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x3b]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg ebx, ebp
lea eax, [eax]
xchg dword [esp], ebx
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x3f]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg ebx, ebp
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 4]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
call fcn.00aa4158
cmp byte [ebx + 0x51fa8700], bl
wait
add byte [edi + 0x4c8b51fa], al
and al, 4
xchg edx, edi
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x25]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], edx
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x11]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg edx, edi
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x1c]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
lea esp, [esp + 4]
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x73]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg esi, eax
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x6f]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], eax
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x2e]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg esi, eax
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0xc]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp + 4]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x3b]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
or eax, 0xffffffff
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x41]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg ebx, esi
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, esi
mov esi, dword [esp]
xchg esi, edi
mov edi, dword [esp + 4]
push esi
xchg esi, edi
pop edi
lea esi, [esi + 0x1c]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x31]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], esi
push edx
mov edx, eax
pop edx
mov dword [esp + 4], esi
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x62]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg esi, ecx
mov ecx, dword [esp]
push esi
xchg esi, ecx
pop ecx
lea esp, [esp + 4]
pushfd
add ebp, 0x10
popfd
lea ebp, [ebp - 0x10]
xchg ecx, ebx
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x12]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], ecx
lea ebx, [ebx]
xchg ecx, ebx
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x2f]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
call fcn.00aa42ec
aaa
push esp
popfd
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x75]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg edx, eax
mov edx, dword [esp + 4]
push eax
xchg edx, eax
pop edx
lea eax, [eax + 2]
pushfd
add ebp, 0x18
popfd
lea ebp, [ebp - 0x18]
xchg dword [esp + 4], eax
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x60]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], eax
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x45]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
mov ecx, dword [esp]
push eax
xchg ecx, eax
pop ecx
lea esp, [esp + 4]
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x72]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
je 0xa9ede4
jne 0xa9ede4
jmp 0xa9ede2
add byte [eax], al
popfd
mov ebx, ebx
xchg ebx, ecx
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, ecx
mov ecx, dword [esp]
xchg ecx, esi
mov esi, dword [esp + 4]
push ecx
xchg ecx, esi
pop esi
lea ecx, [ecx + 0x37]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x4e]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], ecx
pushfd
add ebp, 0x40
popfd
lea ebp, [ebp - 0x40]
mov dword [esp + 4], ecx
push ebp
mov ebp, esp
leave
xchg ecx, eax
mov eax, dword [esp]
push ecx
xchg ecx, eax
pop eax
lea esp, [esp + 4]
pushfd
add ebp, 0x53
popfd
lea ebp, [ebp - 0x53]
je 0xa9f374
jne 0xa9f374
jmp 0xa9f372
popfd
push ecx
mov ecx, dword [esp + 9]
pop ecx
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ecx
mov ecx, dword [esp]
xchg ecx, edx
mov edx, dword [esp + 4]
push ecx
xchg ecx, edx
pop edx
lea ecx, [ecx + 0x65]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x54]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], ecx
push edx
mov edx, ebx
pop edx
mov dword [esp + 4], ecx
mov eax, eax
xchg ecx, esi
mov esi, dword [esp]
push ecx
xchg ecx, esi
pop esi
lea esp, [esp + 4]
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x4b]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
je 0xaa1680
jne 0xaa1680
jmp 0xaa167e
add byte [eax], al
xchg esi, eax
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x29]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg esi, ebx
mov ebx, dword [ebp - 8]
push esi
xchg esi, ebx
pop ebx
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg esi, eax
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x5e]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg ecx, esi
xchg dword [esp], ecx
xchg ecx, esi
lea esp, [esp + 4]
xor esi, esi
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x59]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ecx
mov ecx, dword [esp]
xchg ecx, edi
mov edi, dword [esp + 4]
push ecx
xchg ecx, edi
pop edi
lea ecx, [ecx + 9]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 8]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], ecx
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x2b]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], ecx
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x16]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
mov eax, dword [esp]
push ecx
xchg ecx, eax
pop eax
lea esp, [esp + 4]
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x49]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
cmp dword [eax], esi
push ecx
mov ecx, eax
pop ecx
mov esi, esi
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x6e]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
je 0xa9f88c
xor ebx, ebx
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x52]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg esi, ecx
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, ecx
mov ecx, dword [esp]
xchg ecx, eax
mov eax, dword [esp + 4]
push ecx
xchg ecx, eax
pop eax
call fcn.00aa49fc
add ecx, esi
add byte [eax], al
pushfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x1d]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg esi, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, esi
mov esi, dword [esp]
xchg esi, eax
mov eax, dword [esp + 4]
push esi
xchg esi, eax
pop eax
lea esi, [esi + 0x79]
pushfd
add ebp, 0x2e
popfd
lea ebp, [ebp - 0x2e]
xchg dword [esp + 4], esi
push eax
mov eax, dword [esp + 9]
pop eax
mov dword [esp + 4], esi
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x2c]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg esi, eax
mov eax, dword [esp]
push esi
xchg esi, eax
pop eax
lea esp, [esp + 4]
pushfd
add ebp, 9
popfd
lea ebp, [ebp - 9]
xchg edi, eax
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x79]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x55]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov dword [esp], edi
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x34]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg edi, ecx
mov ecx, eax
push edi
xchg edi, ecx
pop ecx
xchg ecx, eax
mov ecx, dword [esp]
push eax
xchg ecx, eax
pop ecx
xchg ecx, edx
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x40]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0xb]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
mov dword [esp], ecx
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x6d]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
mov eax, edx
push ecx
xchg ecx, eax
pop eax
xchg edx, ebx
mov ebx, dword [esp]
push edx
xchg edx, ebx
pop ebx
rdtsc
push edx
mov edx, edi
pop edx
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ecx
mov ecx, dword [esp]
xchg ecx, eax
mov eax, dword [esp + 4]
push ecx
xchg ecx, eax
pop eax
lea ecx, [ecx + 0x2b]
push esi
mov esi, edi
pop esi
xchg dword [esp + 4], ecx
mov edi, edi
mov dword [esp + 4], ecx
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x55]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg ecx, esi
mov esi, dword [esp]
push ecx
xchg ecx, esi
pop esi
lea esp, [esp + 4]
push ecx
mov ecx, eax
pop ecx
and eax, 1
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 6]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ecx
mov ecx, dword [esp]
xchg ecx, ebx
mov ebx, dword [esp + 4]
push ecx
xchg ecx, ebx
pop ebx
lea ecx, [ecx + 0x22]
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x2a]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], ecx
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x53]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], ecx
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x1e]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
mov eax, dword [esp]
push ecx
xchg ecx, eax
pop eax
lea esp, [esp + 4]
push ebp
mov ebp, esp
leave
xchg ecx, edx
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x1a]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], ecx
mov ebx, ebx
xchg ecx, edx
pushfd
add ebp, 0x45
popfd
lea ebp, [ebp - 0x45]
lea esp, [esp + 4]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x59]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x44]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], ecx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x16]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x2e]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp + 4]
pushfd
add ebp, 0xa
popfd
lea ebp, [ebp - 0xa]
je 0xaa1590
jne 0xaa1600
jmp 0xaa158e
sub eax, esp
popfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x52]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg ebx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ebx
mov ebx, dword [esp]
xchg ebx, edx
mov edx, dword [esp + 4]
push ebx
xchg ebx, edx
pop edx
lea ebx, [ebx + 0x66]
push ebp
mov ebp, esp
leave
xchg dword [esp + 4], ebx
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 9]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], ebx
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0xa]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg ebx, eax
mov eax, dword [esp]
push ebx
xchg ebx, eax
pop eax
lea esp, [esp + 4]
mov edx, edx
je 0xa9fbe8
jne 0xa9fbe8
jmp 0xa9fbe6
popfd
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x73]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg esi, eax
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, eax
mov eax, dword [esp]
xchg ecx, eax
mov ecx, dword [esp + 4]
push eax
xchg ecx, eax
pop ecx
lea eax, [eax + 0x29]
pushfd
add ebp, 0x1e
popfd
lea ebp, [ebp - 0x1e]
xchg dword [esp + 4], eax
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x48]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], eax
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x28]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
mov ecx, dword [esp]
push eax
xchg ecx, eax
pop ecx
lea esp, [esp + 4]
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x1b]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
je 0xaa1bc0
jne 0xaa1bc0
jmp 0xaa1bbe
sub al, 0
xchg edi, eax
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x60]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], eax
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x59]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg edi, eax
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x34]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp + 4]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x3a]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg esi, eax
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x5c]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], eax
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x75]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg esi, eax
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x15]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
lea esp, [esp + 4]
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x41]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
or eax, 0xffffffff
push edi
mov edi, dword [esp + 2]
pop edi
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ecx
mov ecx, dword [esp]
xchg ecx, eax
mov eax, dword [esp + 4]
push ecx
xchg ecx, eax
pop eax
lea ecx, [ecx + 0x65]
mov edi, edi
xchg dword [esp + 4], ecx
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x24]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], ecx
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x7c]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg ecx, esi
mov esi, dword [esp]
push ecx
xchg ecx, esi
pop esi
lea esp, [esp + 4]
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x76]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg edi, ebx
push ebp
mov ebp, esp
leave
xchg dword [esp], edi
lea ebx, [ebx]
xchg edi, ebx
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 4]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
call fcn.00aa4bd8
dec eax
dec ebx
pushfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x38]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edx
mov edx, dword [esp]
xchg edx, eax
mov eax, dword [esp + 4]
push edx
xchg edx, eax
pop eax
lea edx, [edx + 0x3c]
push edx
mov edx, eax
pop edx
xchg dword [esp + 4], edx
pushfd
add ebp, 0x4c
popfd
lea ebp, [ebp - 0x4c]
mov dword [esp + 4], edx
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x4b]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg edx, eax
mov eax, dword [esp]
push edx
xchg edx, eax
pop eax
lea esp, [esp + 4]
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x40]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
mov edx, edx
lea esp, [esp - 4]
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x1a]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
mov dword [esp], ecx
push ebp
mov ebp, esp
leave
xchg ecx, esi
mov esi, eax
push ecx
xchg ecx, esi
pop esi
xchg esi, eax
mov esi, dword [esp]
push eax
xchg esi, eax
pop esi
xchg edx, eax
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x60]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x3d]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
mov dword [esp], eax
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0xc]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg edi, eax
mov edi, edx
push eax
xchg edi, eax
pop edi
xchg edx, eax
mov eax, dword [esp]
push edx
xchg edx, eax
pop eax
rdtsc
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x7d]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
mov eax, eax
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x7b]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
and eax, 1
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x64]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg ecx, eax
mov ecx, dword [esp + 4]
push eax
xchg ecx, eax
pop ecx
lea eax, [eax + 0x65]
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x1d]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], eax
pushfd
add ebp, 0x73
popfd
lea ebp, [ebp - 0x73]
mov dword [esp + 4], eax
pushfd
add ebp, 0x51
popfd
lea ebp, [ebp - 0x51]
xchg esi, eax
mov esi, dword [esp]
push eax
xchg esi, eax
pop esi
lea esp, [esp + 4]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x65]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg ecx, edx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x5f]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], ecx
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x1e]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg ecx, edx
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x13]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
lea esp, [esp + 4]
push eax
mov eax, dword [esp + 5]
pop eax
xchg ebx, eax
pushfd
add ebp, 0x3b
popfd
lea ebp, [ebp - 0x3b]
xchg dword [esp], ebx
pushfd
add ebp, 0x2e
popfd
lea ebp, [ebp - 0x2e]
xchg ebx, eax
lea ecx, [ecx]
lea esp, [esp + 4]
pushfd
add ebp, 0x1f
popfd
lea ebp, [ebp - 0x1f]
je 0xaa1a90
jne 0xaa1b1c
jmp 0xaa1a8e
add byte [eax], al
popfd
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x6d]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg ecx, edx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, edx
mov edx, dword [esp]
xchg edx, eax
mov eax, dword [esp + 4]
push edx
xchg edx, eax
pop eax
lea edx, [edx + 0x1d]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x5b]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], edx
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x32]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], edx
push edx
mov edx, dword [esp]
pop edx
xchg edx, ebx
mov ebx, dword [esp]
push edx
xchg edx, ebx
pop ebx
lea esp, [esp + 4]
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x23]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
je 0xa9f5dc
jne 0xa9f5dc
jmp 0xa9f5da
popfd
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x4a]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
pushfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x16]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
add ebp, 0x3e
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x4d]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x14]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
lea ebp, [ebp - 0x3e]
pushfd
add ebp, 0x7c
popfd
lea ebp, [ebp - 0x7c]
je 0xaa29c4
jne 0xaa29c4
jmp 0xaa29c2
sahf
adc dword [ecx + 0x24748b56], 4
xchg ecx, eax
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x33]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
mov ecx, dword [ebp + 0xc]
push eax
xchg ecx, eax
pop ecx
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ecx
mov ecx, dword [esp]
xchg ecx, eax
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x4f]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg esi, eax
xchg dword [esp], esi
xchg esi, eax
lea esp, [esp + 4]
add ecx, 2
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x5e]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg edx, edi
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, edi
mov edi, dword [esp]
xchg edi, eax
mov eax, dword [esp + 4]
push edi
xchg edi, eax
pop eax
lea edi, [edi + 0x66]
push eax
mov eax, ebx
pop eax
xchg dword [esp + 4], edi
lea esi, [esi]
mov dword [esp + 4], edi
push ecx
mov ecx, dword [esp]
pop ecx
xchg edi, edx
mov edx, dword [esp]
push edi
xchg edi, edx
pop edx
lea esp, [esp + 4]
push edi
mov edi, dword [esp + 4]
pop edi
add eax, ecx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x41]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg ebx, eax
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, eax
mov eax, dword [esp]
xchg edx, eax
mov edx, dword [esp + 4]
push eax
xchg edx, eax
pop edx
lea eax, [eax + 0x20]
pushfd
add ebp, 0x68
popfd
lea ebp, [ebp - 0x68]
xchg dword [esp + 4], eax
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x4a]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], eax
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x64]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
call fcn.00aa4e18
loopne 0xaa2b60
add byte [eax], al
add byte [ebp + ecx*4 - 0x720878f7], bl
and al, 0xfc
pushfd
lea ecx, [ecx]
xchg edi, esi
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, esi
mov esi, dword [esp]
xchg esi, eax
mov eax, dword [esp + 4]
push esi
xchg esi, eax
pop eax
lea esi, [esi + 0x52]
pushfd
add ebp, 0x77
popfd
lea ebp, [ebp - 0x77]
xchg dword [esp + 4], esi
pushfd
add ebp, 0x79
popfd
lea ebp, [ebp - 0x79]
mov dword [esp + 4], esi
push ebp
mov ebp, esp
leave
xchg esi, edx
mov edx, dword [esp]
push esi
xchg esi, edx
pop edx
lea esp, [esp + 4]
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x7d]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
pushfd
add ebp, 0x1d
popfd
lea ebp, [ebp - 0x1d]
lea esp, [esp - 4]
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x40]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
mov dword [esp], ecx
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x79]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg ecx, edx
mov edx, eax
push ecx
xchg ecx, edx
pop edx
xchg ecx, eax
mov ecx, dword [esp]
push eax
xchg ecx, eax
pop ecx
xchg ecx, edx
push eax
mov eax, dword [esp + 5]
pop eax
lea esp, [esp - 4]
push ebp
mov ebp, esp
leave
mov dword [esp], ecx
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x79]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg ecx, edi
mov edi, edx
push ecx
xchg ecx, edi
pop edi
xchg edx, eax
mov eax, dword [esp]
push edx
xchg edx, eax
pop eax
rdtsc
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x7a]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
lea ecx, [ecx]
pushfd
add ebp, 0x30
popfd
lea ebp, [ebp - 0x30]
and eax, 1
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x33]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
lea edi, [edi]
lea ebx, [ebx]
xchg ecx, edx
push ebp
mov ebp, esp
leave
xchg dword [esp], ecx
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x3a]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg ecx, edx
lea ecx, [ecx]
lea esp, [esp + 4]
pushfd
add ebp, 0x58
popfd
lea ebp, [ebp - 0x58]
xchg ecx, eax
lea eax, [eax]
xchg dword [esp], ecx
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x65]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
pushfd
add ebp, 0x21
popfd
lea ebp, [ebp - 0x21]
lea esp, [esp + 4]
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x5d]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
je 0xaa28a0
jne 0xaa2944
jmp 0xaa289e
add byte [eax], al
popfd
pushfd
add ebp, 0xe
popfd
lea ebp, [ebp - 0xe]
lea esi, [esi]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x18]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
je 0xa9fa78
jne 0xa9fa78
jmp 0xa9fa76
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x6a]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg esi, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, esi
mov esi, dword [esp]
xchg esi, edi
mov edi, edx
push esi
xchg esi, edi
pop edi
xchg esi, eax
xchg dword [esp], eax
xchg esi, eax
lea esp, [esp + 4]
je 0xaa30b8
jne 0xaa30b8
jmp 0xaa30b6
add byte [eax], al
xchg edi, eax
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x45]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], eax
push ebp
mov ebp, esp
leave
xchg edi, eax
pushfd
add ebp, 1
popfd
lea ebp, [ebp - 1]
lea esp, [esp + 4]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x49]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg esi, eax
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x42]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], eax
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x22]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg esi, eax
pushfd
add ebp, 0x2e
popfd
lea ebp, [ebp - 0x2e]
lea esp, [esp + 4]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x77]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xor eax, eax
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x41]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg edi, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edi
mov edi, dword [esp]
xchg edi, eax
mov eax, dword [esp + 4]
push edi
xchg edi, eax
pop eax
lea edi, [edi + 0x46]
push ecx
mov ecx, eax
pop ecx
xchg dword [esp + 4], edi
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x52]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], edi
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x74]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg edi, ecx
mov ecx, dword [esp]
push edi
xchg edi, ecx
pop ecx
lea esp, [esp + 4]
push esi
mov esi, dword [esp + 3]
pop esi
xchg edi, ebx
lea esi, [esi]
xchg dword [esp], edi
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 1]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg edi, ebx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x5c]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
call fcn.00aa4f8c
popfd
inc byte [eax]
add byte [eax], al
pushfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x30]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ecx
mov ecx, dword [esp]
xchg ecx, eax
mov eax, dword [esp + 4]
push ecx
xchg ecx, eax
pop eax
lea ecx, [ecx + 0x74]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x25]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], ecx
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x5e]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], ecx
mov ecx, ecx
xchg ecx, eax
mov eax, dword [esp]
push ecx
xchg ecx, eax
pop eax
lea esp, [esp + 4]
push esi
mov esi, eax
pop esi
xchg ecx, eax
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 3]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x65]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov dword [esp], ecx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x6a]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg ecx, esi
mov esi, eax
push ecx
xchg ecx, esi
pop esi
xchg ecx, eax
mov ecx, dword [esp]
push eax
xchg ecx, eax
pop ecx
xchg ebx, edx
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0xf]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
lea edx, [edx]
mov dword [esp], ebx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x67]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg ebx, eax
mov eax, edx
push ebx
xchg ebx, eax
pop eax
xchg edx, eax
mov eax, dword [esp]
push edx
xchg edx, eax
pop eax
rdtsc
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x79]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg ecx, esi
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, esi
mov esi, dword [esp]
xchg esi, eax
mov eax, dword [esp + 4]
push esi
xchg esi, eax
pop eax
lea esi, [esi + 2]
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x41]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], esi
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x53]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], esi
mov ecx, ecx
xchg esi, eax
mov eax, dword [esp]
push esi
xchg esi, eax
pop eax
lea esp, [esp + 4]
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 9]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
and eax, 1
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x40]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg ebp, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ebp
mov ebp, dword [esp]
xchg ebp, ebx
mov ebx, esp
push ebp
xchg ebp, ebx
pop ebx
leave
push edi
mov edi, ebx
pop edi
xchg edx, eax
mov ecx, ecx
xchg dword [esp], eax
lea ecx, [ecx]
xchg edx, eax
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x5a]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp + 4]
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x38]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg edi, eax
mov ecx, ecx
xchg dword [esp], edi
push edi
mov edi, ecx
pop edi
xchg edi, eax
lea ecx, [ecx]
lea esp, [esp + 4]
push ecx
mov ecx, dword [esp + 4]
pop ecx
je 0xaa3034
jne 0xaa306c
jmp 0xaa3032