Function at 0x8c8ac4
Capabilities:
Check for vm using instruction vpcext
Reference the vmware io port

Disassembly:
lea eax, [ebp + 0xbaa863a]
push 0x7f74
mov dword [esp], eax
lea eax, [ebp + 0xbaa8689]
push 0x5050
mov dword [esp], edi
mov dword [esp], eax
call dword [ebp + 0xb971c0b]
sub esp, 4
mov dword [esp], edi
mov edi, esp
push esi
push ecx
mov ecx, 0x6857c2e
neg ecx
jmp 0x8c877d
inc ebx
jmp 0x8c8681
mov dword fs:[0], esp
mov ecx, 0xa
mov eax, 0x4855d704
add eax, 0xdf78164
mov ebx, 0x8685d465
mov edx, 0x34b640
sub edx, 0x345fe8
in eax, dx
cmp ebx, 0x564d5868
jne 0x8c85b5
pop dword fs:[0]
add esp, 4
cmp dword [ebp + 0xb9723e9], 0
jne 0x8c8c96
cmp dword [ebp + 0xb9705a9], 1
jne 0x8c8c96
push eax
mov eax, esp
add eax, 4
sub eax, 2
xchg dword [esp], eax
jmp 0x8c8d6f
mov esp, dword [esp]
mov dword [esp], ebp
mov dword [esp], eax
push 0
jmp 0x8c94b0
push eax
add dword [esp], 0x30d739d9
pop eax
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x39737520
jmp 0x8c8838
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
jmp 0x8c99fd
pop esp
cmp dword [ebp + 0xb972209], 0
jne 0x8c8657
cmp dword [ebp + 0xb972309], 0
je 0x8c866c
push eax
mov eax, eax
mov eax, 0x7d8
mov dword [ebp + 0xb971ce5], eax
call dword [ebp + 0xb97262d]
pop eax
push edi
push eax
xor dword [esp], 0x2e856a6
push dword [esp]
pop edi
add esp, 4
jmp 0x8c8e96
jnp 0x8c86d0
sub ebx, 0x4f9208b0
jnp 0x8c950b
add al, 0xb4
mov eax, ebx
pop ebx
cmp dword [ebp + 0xb972209], 0
jne 0x8c86ab
cmp dword [ebp + 0xb972309], 0
je 0x8c86c0
push eax
mov eax, eax
mov eax, 0x7d1
mov dword [ebp + 0xb971ce5], eax
call dword [ebp + 0xb97262d]
pop eax
push eax
push edx
mov edx, 0x107b32e4
add dword [esp + 4], edx
jmp 0x8c96b3
sub ebx, 0x4f9208b0
jnp 0x8ca165
xor ebx, 0xef0e72b5
jmp 0x8c9f4f
mov dword [esp], esi
call eax
lea eax, [ebp + 0xbaa9448]
mov dword [ebp + 0xb971fe7], eax
cmp dword [eax + 4], 5
jne 0x8c8727
cmp dword [eax + 8], 2
jne 0x8c8727
cmp byte [eax + 0x14], 0
jne 0x8c8727
mov byte [ebp + 0xbaa901e], 0
mov dword [ebp + 0xb970381], 0
cmp dword [eax + 4], 6
jne 0x8c873b
mov dword [ebp + 0xb97220d], 1
cmp dword [ebp + 0xb971495], 0
jne 0x8c876c
cmp dword [ebp + 0xb97220d], 0
jne 0x8c876c
cmp dword [ebp + 0xb9703b1], 0
je 0x8c876c
mov dword [ebp + 0xb970db9], 0
mov bx, ds
test bl, 4
je 0x8c99a4
jmp 0x8c9835
jl 0x8c9372
push eax
mov eax, esp
jmp 0x8c8bcc
push dword [ebp + 0xbaa8f99]
call dword [ebp + 0xbaa380f]
push 0
push 0
push 0
push 0
push 0
push 0
jmp 0x8c9346
dec ecx
sub ecx, 0x89c3b46
sub eax, 0x5c384a1d
jmp 0x8c8ba6
sub ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x8ca0f6
add eax, 0x5c384a1d
pop ecx
cmp dword [ebp + 0xb972209], 0
jne 0x8c88da
cmp dword [ebp + 0xb972309], 0
je 0x8c88ef
push eax
mov eax, eax
mov eax, 0x7d4
mov dword [ebp + 0xb971ce5], eax
call dword [ebp + 0xb97262d]
pop eax
sub esp, 4
mov dword [esp], eax
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push 0xf003f
push 0
push 0
jmp 0x8c8d79
push 0
push 0
lea eax, [ebp + 0xbaa8689]
push 0x683f
mov dword [esp], esi
mov dword [esp], ebx
mov dword [esp], eax
jmp 0x8c8b87
lea eax, [ebp + 0xbaa8fb6]
push 0x3a93
mov dword [esp], ebx
mov dword [esp], ebp
mov dword [esp], eax
jmp 0x8c8e35
push dword fs:[0]
jmp 0x8c857c
pop esi
mov ecx, dword [esp]
jmp 0x8c9874
lea eax, [ebp + 0xbaa8b9d]
push ebp
jmp 0x8c8b92
pop edi
mov ebx, dword [esp]
add esp, 4
add ebx, 0x30cd1386
push ebx
lea ebx, [ebp + 0xb970521]
mov eax, dword [ebx]
mov dword [ebx], eax
mov eax, dword [ebx + 0x50]
mov dword [ebx + 0x50], eax
lea ebx, [ebp + 0xbaa8f91]
mov eax, dword [ebx]
mov dword [ebx], eax
pop ebx
push 0
lea eax, [ebp + 0xbaa8f91]
push ebx
push esp
pop ebx
add ebx, 4
jmp 0x8c9b33
add dword [esp], 0x5d2a053e
pop edi
sub edi, 0x5d2a053e
pop edx
add edi, 0xc9fe4af7
sub eax, edi
pop edi
jmp 0x8c9165
pop esp
mov dword [esp], eax
push dword [ebp + 0xbaa8497]
call dword [ebp + 0xb972435]
mov dword [ebp + 0xbaa84ab], eax
lea eax, [ebp + 0xbaa8467]
push ebp
mov ebp, esp
jmp 0x8c914a
lea eax, [ebp + 0xbaa84e2]
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
jmp 0x8c918f
not ecx
jmp 0x8c8b38
xor ecx, 0x7b5d8d76
push ecx
pop dword [eax]
mov ecx, dword [esp]
add esp, 4
push dword [esp]
pop eax
push eax
jmp 0x8c93a0
mov eax, dword [ebp + 0xbaa94dc]
mov dword [ebp + 0xb9723e9], eax
mov dword [ebp + 0xb9705a9], 0
cmp dword [ebp + 0xbaa94dc], 0
je 0x8c8d98
jmp 0x8ca0e2
push 1
push 1
push 1
jmp 0x8c8dd8
mov dword [esp], ebx
jmp 0x8c8bde
sub eax, ecx
jmp 0x8c88c2
add eax, 4
add eax, 4
xchg dword [esp], eax
jmp 0x8c8644
mov ebx, 0x3ea07b63
jmp 0x8c8576
pop esp
cmp eax, 0
jbe 0x8ca136
cmp dword [ebp + 0xb9705a9], 1
jne 0x8ca136
mov dword [ebp + 0xb9723e9], 1
jmp 0x8c85bf
mov eax, 0x564d5868
mov ecx, 0x14
mov dx, 0x5658
in eax, dx
pop dword fs:[0]
push edi
mov edi, esp
push ebp
mov ebp, 4
add edi, 0x20195b4b
add edi, ebp
sub edi, 0x20195b4b
pop ebp
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
jmp 0x8c8be8
cmp dword [ebp + 0xb9705a9], 0
jne 0x8c8cc2
push eax
sgdt [esp - 2]
pop eax
shr eax, 0x18
cmp eax, 0xff
jne 0x8c8cc2
mov dword [ebp + 0xb9723e9], 1
push eax
mov eax, dword [esp]
push ecx
mov ecx, esp
push esi
mov esi, 4
add ecx, esi
pop esi
add ecx, 4
xchg dword [esp], ecx
pop esp
cmp dword [ebp + 0xb972209], 0
jne 0x8c8cee
cmp dword [ebp + 0xb972309], 0
je 0x8c8d03
push eax
mov eax, eax
mov eax, 0x43d
mov dword [ebp + 0xb971dd7], eax
call dword [ebp + 0xb97257f]
pop eax
push eax
push edi
mov dword [esp], ebp
jmp 0x8c92f3
cmp dword [ebp + 0xb9722e9], 0
jne 0x8c9928
lea eax, [ebp + 0xbaa8fce]
push esi
mov esi, esp
push eax
mov eax, 0xab0d60
and eax, 0x50da16d3
dec eax
xor eax, 0x3d836a83
and eax, 0x39ee05e8
sub eax, 0x390804a4
add esi, eax
pop eax
push ecx
mov ecx, 4
sub esi, ecx
pop ecx
xchg dword [esp], esi
pop esp
mov dword [esp], eax
push 1
jmp 0x8c990a
pop esp
mov word [esp], bp
jmp 0x8c91a0
call dword [ebp + 0xb971d95]
test eax, eax
jne 0x8c8d87
mov dword [ebp + 0xbaa84af], eax
push 0
push 0
push 0
jmp 0x8c8936
mov byte [ebp + 0xb971c7f], 0x47
push 0xe3e45b86
push dword [ebp + 0xb9709b1]
call dword [ebp + 0xb972680]
push 0x104
lea ebx, [ebp + 0xb970a5d]
push 0x2397
mov dword [esp], ebx
call eax
lea eax, [ebp + 0xb970a5d]
push 0x54a2
mov dword [esp], eax
jmp 0x8c8953
push 0xf01ff
cmp dword [ebp + 0xb9722e9], 0
je 0x8c8acc
lea eax, [ebp + 0xbaa850c]
jmp 0x8c8ad2
cmp dword [ebp + 0xb9722e9], 0
jne 0x8c8e25
cmp dword [ebp + 0xb97220d], 0
je 0x8c93f9
lea eax, [ebp + 0xbaa84cc]
jmp 0x8ca0e2
lea eax, [ebp + 0xbaa8689]
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], eax
call dword [ebp + 0xb971c0b]
push eax
push eax
mov dword [esp], esp
add dword [esp], 4
pop eax
add eax, 4
jmp 0x8c90da
lea eax, [ebp + 0xbaa84e2]
push 0x8c0
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x8c91dd
xor edi, 0x2e856a6
mov eax, edi
jmp 0x8c92dc
mov eax, ecx
pop ecx
jmp 0x8c97f8
add eax, 0xc
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
push 0
push 0x80
push 3
push 0
push 0
push 0x80000000
lea eax, [ebp + 0xbaa8689]
push eax
call dword [ebp + 0xb9720f9]
mov dword [ebp + 0xbaa8f99], eax
mov byte [ebp + 0xb971c7f], 0x47
push 0xc7b15e87
push dword [ebp + 0xb9709b1]
call dword [ebp + 0xb972680]
push 0
push dword [ebp + 0xbaa8f99]
call eax
cmp eax, 0x37d0
jae 0x8c8796
push dword [ebp + 0xbaa8f99]
call dword [ebp + 0xbaa380f]
jmp 0x8c97d6
push 0x76df
mov dword [esp], eax
mov eax, 4
add ebp, eax
pop eax
sub ebp, 4
jmp 0x8c941e
push 0x166c
mov dword [esp], eax
push eax
push eax
mov dword [esp], edi
mov edi, 0x30cd1386
jmp 0x8c98dd
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], edi
push esp
pop edi
jmp 0x8c92a4
mov word [esp], cx
mov word [esp], ax
sldt word [esp]
mov ax, word [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 2
xchg dword [esp], ecx
mov esp, dword [esp]
or ax, ax
je 0x8c8cc2
mov dword [ebp + 0xb9723e9], 1
jmp 0x8c8cc2
mov dword [esp], edx
mov dword [esp], eax
push dword [ebp + 0xbaa84af]
call dword [ebp + 0xbaa84a7]
test eax, eax
jne 0x8c91f7
mov dword [ebp + 0xbaa84b3], eax
push 0
push 0
push dword [ebp + 0xbaa84b3]
call dword [ebp + 0xbaa849f]
test eax, eax
jne 0x8c9215
push dword [ebp + 0xbaa84b3]
call dword [ebp + 0xb97254e]
test eax, eax
jne 0x8c9229
push 0
push 0x80
push 3
push 0
push 0
push 0xc0000000
push dword [ebp + 0xb972391]
call dword [ebp + 0xb9720f9]
cmp eax, 0xffffffff
jne 0x8c936c
inc dword [ebp + 0xbaa8f95]
cmp dword [ebp + 0xbaa8f95], 2
je 0x8c97a6
lea eax, [ebp + 0x10066656]
call eax
lea eax, [ebp + 0x1006613c]
call eax
push eax
push dword [esp]
pop eax
jmp 0x8c878e
add edi, 4
sub edi, 4
xchg dword [esp], edi
jmp 0x8c9383
lea eax, [ebp + 0xbaa94f3]
push esi
mov esi, esp
add esi, 4
push edi
mov edi, 4
sub esi, edi
pop edi
xchg dword [esp], esi
pop esp
mov dword [esp], esi
jmp 0x8c9892
pop edi
push 0xf003f
push 0
push 0
call dword [ebp + 0xb971d95]
test eax, eax
jmp 0x8c94b7
push edx
mov edx, 0x62436077
mov ebp, 0x77faba1f
sub ebp, edx
pop edx
sub dword [esp + 4], ebp
pop ebp
pop eax
add eax, 0x15b759a8
lea eax, [ebp + 0xbaa94ff]
push 0x5a18
mov dword [esp], eax
call dword [ebp + 0xb971c6f]
push ecx
mov ecx, eax
push esi
mov esi, ecx
mov ebx, esi
jmp 0x8c89b0
lea eax, [ebp + 0xbaa8f9d]
push ebx
mov dword [esp], eax
mov eax, esp
push ecx
jmp 0x8c9752
push ecx
jmp 0x8c9726
pop esp
mov dword [esp], eax
push dword [ebp + 0xbaa84af]
call dword [ebp + 0xbaa849b]
test eax, eax
jne 0x8c9517
jmp 0x8c9531
mov dword [esp], edi
jmp 0x8c973f
push 1
push dword [ebp + 0xbaa8f99]
call dword [ebp + 0xb971daa]
jmp 0x8ca0e2
lea eax, [ebp + 0xbaa84b7]
push esi
push ebp
mov dword [esp], esp
add dword [esp], 4
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
jmp 0x8c988a
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
push dword [ebp + 0xbaa8497]
call dword [ebp + 0xb972435]
mov dword [ebp + 0xbaa84a3], eax
lea eax, [ebp + 0xbaa845a]
push 0x75da
mov dword [esp], edx
mov dword [esp], eax
push dword [ebp + 0xbaa8497]
call dword [ebp + 0xb972435]
mov dword [ebp + 0xbaa84a7], eax
lea eax, [ebp + 0xbaa8475]
push ebx
mov ebx, esp
push 0x707e
mov dword [esp], edi
mov edi, 4
add ebx, edi
pop edi
sub ebx, 4
jmp 0x8c9d8a
push 0
jmp 0x8c93df
mov dword [ebp + 0xbaa84af], eax
push 0xf01ff
cmp dword [ebp + 0xb9722e9], 0
je 0x8c9580
pop eax
sub esi, 4
xchg dword [esp], esi
jmp 0x8c99ec
mov dword [ebp + 0xbaa84b3], eax
push dword [ebp + 0xbaa84b3]
call dword [ebp + 0xb97254e]
test eax, eax
jne 0x8c9531
push 0x10
cmp dword [ebp + 0xb9722e9], 0
je 0x8c8e71
lea eax, [ebp + 0xbaa850c]
jmp 0x8c8e77
mov dword [esp], edx
mov dword [esp], eax
push dword [ebp + 0xbaa84af]
call dword [ebp + 0xbaa84a7]
mov dword [ebp + 0xbaa84b3], eax
push dword [ebp + 0xbaa84b3]
call dword [ebp + 0xbaa84a3]
push dword [ebp + 0xbaa84b3]
call dword [ebp + 0xb97254e]
jmp 0x8c8604
lea eax, [ebp + 0xbaa84e2]
push 4
mov dword [esp], eax
push dword [ebp + 0xbaa84af]
call dword [ebp + 0xbaa84a7]
mov dword [ebp + 0xbaa84b3], eax
mov dword [ebp + 0xb97238d], 0
cmp dword [ebp + 0xbaa84b3], 0
je 0x8c957b
lea eax, [ebp + 0xbaa878d]
push 0x6f3d
mov dword [esp], edi
mov dword [esp], eax
push 1
push dword [ebp + 0xbaa84b3]
call dword [ebp + 0xbaa84ab]
push dword [ebp + 0xbaa84b3]
call dword [ebp + 0xb97254e]
push 0xf01ff
cmp dword [ebp + 0xb9722e9], 0
je 0x8c968e
lea eax, [ebp + 0xbaa850c]
jmp fcn.008c9694
lea eax, [ebp + 0xbaa84e2]
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edi
jmp 0x8c954b
mov edx, dword [esp]
add esp, 4
mov eax, dword [esp]
add esp, 4
sub eax, 0x107b32e4
mov byte [ebp + 0xb971c7f], 0x47
push 0x93c8f7c1
push dword [ebp + 0xb9709b1]
call dword [ebp + 0xb972680]
push ecx
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], eax
lea eax, [ebp + 0xbaa9448]
push 0x6f3d
mov dword [esp], ecx
push 0x2e2c297c
pop ecx
add ecx, 0x567648a1
jae 0x8c8af8
not ecx
jmp 0x8c94b7
push eax
sub dword [esp], 0x1e23a92
mov ecx, dword [esp]
add esp, 4
push ebx
mov ebx, 0x162a4ef5
jmp 0x8c9847
mov edi, esp
add edi, 4
add edi, 4
jmp 0x8c9780
mov ecx, 0xb422226
sub ecx, 0x76357224
xor ecx, 0x222420e9
shr ecx, 7
xor ecx, 0x7b833e99
and ecx, 0x24846126
xor ecx, 0x20846124
add eax, ecx
pop ecx
jmp 0x8c97bd
xchg dword [esp], edi
pop esp
lea esi, [ebp + 0xbaa9448]
push 0x73eb
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x8c86e7
push dword [ebp + 0xbaa8ff8]
call dword [ebp + 0xb9720e1]
mov eax, dword [ebp + 0xb971bfb]
jmp 0x8c89b9
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], eax
call dword [ebp + 0xb9720f9]
cmp eax, 0xffffffff
jne 0x8c996c
lea eax, [ebp + 0xbaa3fba]
call eax
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp + 0xbaa8f9d]
push ebp
mov ebp, esp
jmp 0x8c98e6
cmp dword [ebp + 0xb972209], 0
jne 0x8c980a
cmp dword [ebp + 0xb972309], 0
je 0x8c981f
push eax
mov eax, eax
mov eax, 0x7d9
mov dword [ebp + 0xb971ce5], eax
call dword [ebp + 0xb97262d]
pop eax
push eax
add dword [esp], 0x3a23544a
pop eax
push edi
push edx
mov edx, 0x70250953
push edx
jmp 0x8c8a5a
mov bx, ds
cmp bx, 0x1f
jne 0x8c8b5f
jmp 0x8c99a4
add ebx, 0xebb7eb9d
add ecx, ebx
jmp 0x8c9854
pop ebx
jmp 0x8c90d2
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x8c92b8
mov dword [esp], eax
jmp 0x8c9e55
mov dword [esp], eax
push eax
push esp
pop eax
add eax, 4
push ebp
mov ebp, 4
jmp 0x8c98a8
sub eax, ebp
pop ebp
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
call dword [ebp + 0xb972435]
mov dword [ebp + 0xb97251d], eax
lea eax, [ebp + 0xbaaabd8]
mov dword [ebp + 0xb971ddd], eax
call dword [ebp + 0xb97251d]
push eax
sub dword [esp], 0x15016b9
jmp 0x8ca1c3
sub dword [esp + 4], edi
jmp 0x8c89c5
add ebp, 4
sub ebp, 4
jmp 0x8c9939
lea eax, [ebp + 0xbaa8d95]
mov dword [ebp + 0xbaa8f8d], eax
jmp 0x8c9f58
push 0
push 0
call dword [ebp + 0xb9727cd]
mov dword [ebp + 0xbaa8ff8], eax
push 0xffffffffffffffff
push dword [ebp + 0xbaa8ff8]
call dword [ebp + 0xbaa7eba]
lea eax, [ebp + 0xbaa840d]
push esi
mov dword [esp], eax
mov eax, esp
jmp 0x8c9c84
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], ecx
mov dword [esp], eax
call dword [ebp + 0xb9720f9]
cmp eax, 0xffffffff
jne 0x8c996c
lea esi, [ebp + 0xbaa89a5]
call dword [ebp + 0xb971d1b]
push 0
call dword [ebp + 0xb972685]
mov dword [ebp + 0xbaa8f99], eax
push 0
lea eax, [ebp + 0xbaa8f91]
push 0x62e6
mov dword [esp], eax
mov dword [esp], edi
mov dword [esp], eax
push 4
lea eax, [ebp + 0xb972579]
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
jmp 0x8c85f4
push eax
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
cmp dword [ebp + 0xb972209], 0
jne 0x8c99c6
cmp dword [ebp + 0xb972309], 0
je 0x8c99db
push eax
mov eax, eax
mov eax, 0x7d2
mov dword [ebp + 0xb971ce5], eax
call dword [ebp + 0xb97262d]
pop eax
push 0x5fed
mov dword [esp], eax
mov eax, dword [esp]
push ebx
jmp 0x8c9b42
pop esp
mov dword [esp], eax
jmp 0x8c896c
xor edx, dword [esp]
pop esp
mov dword [esp], ebx
mov dword [esp], eax
push dword [ebp + 0xbaa8497]
call dword [ebp + 0xb972435]
mov dword [ebp + 0xbaa849b], eax
lea eax, [ebp + 0xbaa8438]
push 0x37e5
mov dword [esp], eax
push dword [ebp + 0xbaa8497]
call dword [ebp + 0xb972435]
mov dword [ebp + 0xbaa849f], eax
push 0x104
lea eax, [ebp + 0xbaa852b]
push 0x475b
mov dword [esp], eax
lea eax, [ebp + 0xbaa862f]
push 0x719b
mov dword [esp], eax
call dword [ebp + 0xb972562]
test eax, eax
jne 0x8c9a68
cmp byte [ebp + 0xbaa901e], 0
jne 0x8c8e0b
jmp 0x8ca0e2
sub ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x8c9c5d
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [ebp + 0xb9705a9], 1
push 0x98781034
push dword [ebp + 0xb971cee]
call dword [ebp + 0xb972680]
mov dword [ebp + 0xb971f95], eax
cmp byte [ebp + 0xbaa94e0], 0
jne 0x8c9ba2
lea eax, [ebp + 0xbaa9223]
push eax
lea eax, [ebp + 0xbaa94e1]
push eax
push 0x80000001
call dword [ebp + 0xb972791]
or eax, eax
jne 0x8c9ba2
mov dword [ebp + 0xb9721ed], 1
lea eax, [ebp + 0xbaa9223]
push eax
lea eax, [ebp + 0xbaa9004]
push eax
push 0x80000002
call dword [ebp + 0xb972791]
or eax, eax
jne 0x8c9bd5
mov dword [ebp + 0xb9723e9], 1
push dword [ebp + 0xbaa9223]
call dword [ebp + 0xb971f95]
push 0xc005dbd4
push dword [ebp + 0xb971cee]
call dword [ebp + 0xb972680]
mov dword [ebp + 0xb971c6a], eax
lea eax, [ebp + 0xbaa8446]
push eax
push dword [ebp + 0xb9709b1]
call dword [ebp + 0xb972435]
or eax, eax
je 0x8c9c0e
mov ebx, eax
lea eax, [ebp + 0xbaa9423]
push eax
call ebx
lea eax, [ebp + 0xbaa9423]
cmp word [eax], 9
jne 0x8c9c24
mov dword [ebp + 0xb9722e9], 1
call dword [ebp + 0xb971de2]
and eax, 0xff
cmp eax, 5
jae 0x8c9c3e
mov dword [ebp + 0xb972355], 1
cmp byte [ebp + 0xbaa901e], 0
je 0x8c9c58
cmp dword [ebp + 0xb97220d], 0
je 0x8c8d18
jmp 0x8ca0e2
add eax, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], eax
call dword [ebp + 0xb971c6f]
mov dword [ebp + 0xbaa8497], eax
lea eax, [ebp + 0xbaa841a]
push 0x519
mov dword [esp], eax
push dword [ebp + 0xbaa8497]
call dword [ebp + 0xb972435]
mov dword [ebp + 0xb971d95], eax
lea eax, [ebp + 0xbaa8488]
push ebp
mov ebp, esp
add ebp, 4
sub esp, 4
mov dword [esp], ecx
mov ecx, 4
sub ebp, ecx
pop ecx
xchg dword [esp], ebp
jmp 0x8c8aa8
xchg dword [esp], ebx
pop esp
jmp 0x8c9d93
mov dword [esp], eax
push dword [ebp + 0xbaa8497]
call dword [ebp + 0xb972435]
mov dword [ebp + 0xb97254e], eax
lea eax, [ebp + 0xbaa8429]
push edx
mov edx, esp
jmp 0x8c862d
lea eax, [ebp + 0xbaa852b]
push 0x58df
mov dword [esp], eax
jmp 0x8c9e7a
cmp dword [ebp + 0xb9722e9], 0
je 0x8c853b
lea eax, [ebp + 0xbaa8651]
jmp 0x8c8541
xchg edx, eax
not edx
xchg edx, eax
shr eax, 5
add eax, 0x7dce0b88
sub eax, 0x8091620b
add ebx, eax
pop eax
xor esi, esi
cmp esi, 0xa
je 0x8ca263
add eax, ebx
pop ebx
mov dword [ebp + 0xbaa8f8d], eax
push 0x34
lea eax, [ebp + 0xb970715]
push eax
push dword [ebp + 0xbaa8f8d]
push 0
call dword [ebp + 0xb971c94]
cmp eax, 7
je 0x8ca0da
mov bx, ds
test bl, 4
jne 0x8ca07c
mov byte [ebp + 0xb971c7f], 0x56
push 0x9ca8b852
push dword [ebp + 0xb9709b1]
call dword [ebp + 0xb972680]
push 4
push 0x1000
push 0x64
push 0
call eax
mov dword [ebp + 0xbaa9000], eax
mov byte [ebp + 0xb971c7f], 0x47
push 0xec18ac9b
push dword [ebp + 0xb9709b1]
call dword [ebp + 0xb972680]
call eax
mov esi, eax
mov byte [ebp + 0xb971c7f], 0x4f
push 0xc62f2661
push dword [ebp + 0xb971cee]
call dword [ebp + 0xb972680]
lea ebx, [ebp + 0xbaa8ffc]
push ebx
push 0x28
push esi
call eax
test eax, eax
jne 0x8c9ff3
mov byte [ebp + 0xb971c7f], 0x45
push 0x92a5f797
push dword [ebp + 0xb971c7a]
call dword [ebp + 0xb972680]
push 0
push 2
call eax
mov bx, ds
test bl, 4
jne 0x8ca0da
push 0
call dword [ebp + 0xb972685]
lea eax, [ebp + 0xbaa9835]
push ebx
push esp
pop ebx
add ebx, 4
jmp 0x8c88b6
mov dword [esp], edi
mov dword [esp], eax
push dword fs:[0]
mov dword fs:[0], esp
cmp dword [ebp + 0xb970a41], 0
je 0x8c8c1c
cmp dword [ebp + 0xb9705a9], 1
jne 0x8c8c1c
cmp byte [ebp + 0xbaa9447], 0
jne 0x8c8c1c
jmp 0x8c85b5
lea eax, [ebp + 0xbaa984d]
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 0x4fdd31d4
xor ecx, 0x4fdd31d0
sub eax, ecx
jmp 0x8ca15f
pop ecx
jmp 0x8ca183
xor ebx, 0xef0e72b5
jmp 0x8ca27b
xchg dword [esp], eax
pop esp
mov dword [esp], eax
push dword fs:[0]
mov dword fs:[0], esp
xor ebx, ebx
xor eax, eax
inc eax
invalid
mov ebx, dword [esp]
add esp, 4
push eax
mov eax, 0x7d925878
jmp 0x8c9ef6
add eax, ebx
jmp 0x8c98f9