Function at 0x9c47ca
Capabilities:
Allocate or change rwx memory

Disassembly:
jmp 0x9c47d4
lea esp, [esp - 4]
mov dword [esp], edi
push ebx
pushfd
call fcn.009c6e5e
add ebx, 0x270f
push ecx
mov ecx, 0xe69f12cb
lea esp, [esp - 4]
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, dword [esp + 4]
or ebx, 0xffffffff
sub ebx, 0xffffffff
or ebx, ecx
mov dword [esp + 4], ebx
pop ebx
rol dword [esp], 0x15
lea esp, [esp - 4]
mov dword [esp], 0x597cd3dc
pop ecx
sub dword [esp], ecx
pop ecx
lea esp, [esp - 4]
mov dword [esp], edi
push esi
mov esi, edi
or esi, 0xffffffff
inc esi
push ebx
mov ebx, esi
push edx
mov edx, ecx
not ebx
not edx
and ebx, edx
not ebx
pop edx
mov esi, ebx
pop ebx
mov edi, esi
pop esi
push eax
push ebx
pop eax
lea esp, [esp - 4]
mov dword [esp], eax
push esi
mov esi, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edi
push esi
or esi, 0xffffffff
not esi
push eax
push eax
not dword [esp]
and eax, esi
or dword [esp], eax
pop eax
lea esp, [esp - 4]
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, dword [esp + 4]
or ecx, 0xffffffff
add ecx, 1
or ecx, eax
mov dword [esp + 4], ecx
pop ecx
mov eax, dword [esp + 8]
push esi
not eax
neg esi
dec esi
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, eax
push ecx
mov ecx, esi
push ebx
lea esp, [esp - 4]
mov dword [esp], ecx
or ebx, 0xffffffff
inc ebx
push ecx
not dword [esp]
push edx
mov edx, ecx
push ecx
mov ecx, ebx
not edx
not ecx
or edx, ecx
not edx
pop ecx
mov ecx, edx
pop edx
push edi
mov edi, ecx
push ebx
mov ebx, dword [esp + 8]
not edi
not ebx
and edi, ebx
not edi
pop ebx
mov ecx, edi
pop edi
lea esp, [esp + 4]
push ecx
mov ecx, dword [esp + 8]
not ecx
push eax
mov eax, ecx
push edx
mov edx, ebx
push eax
and eax, edx
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, dword [esp + 4]
add eax, edx
pop edx
sub eax, edx
pop edx
pop edx
mov ecx, eax
pop eax
pop ebx
not ecx
or ecx, ebx
push ecx
and ecx, ebx
neg dword [esp]
sub dword [esp], 1
push edi
mov edi, ecx
push edx
mov edx, dword [esp + 8]
push edi
and edi, edx
push edi
mov edi, dword [esp + 4]
push eax
mov eax, edi
push ecx
mov ecx, edx
push eax
push ecx
not ecx
and eax, ecx
pop ecx
push eax
mov eax, dword [esp + 4]
not eax
and ecx, eax
pop eax
or eax, ecx
pop ecx
pop ecx
mov edi, eax
pop eax
pop edx
push ecx
mov ecx, edi
push ebx
mov ebx, edx
push ecx
push ebx
not ebx
or ecx, ebx
not ecx
push ecx
mov ecx, dword [esp + 8]
mov ebx, dword [esp + 4]
not ecx
or ebx, ecx
not ebx
pop ecx
push ecx
and ecx, ebx
sub ecx, ebx
sub ecx, dword [esp]
add esp, 4
sub ecx, 1
not ecx
pop ebx
pop ebx
pop ebx
mov edi, ecx
pop ecx
pop edx
pop edx
mov ecx, edi
pop edi
add esp, 4
or ebx, 0xffffffff
add ebx, 1
not ecx
or ecx, ebx
mov ebx, ecx
pop ecx
lea esp, [esp + 4]
pop ecx
mov eax, ebx
pop ebx
or eax, dword [esp]
pop esi
pop esi
push esi
not eax
not esi
and eax, esi
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, eax
push ecx
mov ecx, dword [esp + 8]
neg edx
dec edx
not ecx
push ebx
mov ebx, edx
push edx
mov edx, ecx
not ebx
not edx
or ebx, edx
not ebx
pop edx
mov edx, ebx
pop ebx
not edx
pop ecx
mov eax, edx
pop edx
pop esi
lea esp, [esp - 4]
mov dword [esp], eax
and eax, esi
not dword [esp]
or eax, dword [esp]
lea esp, [esp + 4]
or esi, 0xffffffff
add esi, 1
not eax
push ecx
mov ecx, eax
push ebx
mov ebx, esi
push ecx
and ecx, ebx
push ecx
push eax
mov eax, ecx
or eax, 0xffffffff
inc eax
push esi
mov esi, eax
push ebx
mov ebx, dword [esp + 0x10]
push ebx
push ebx
mov ebx, 0xffffffff
xor esi, ebx
pop ebx
not ebx
and esi, ebx
or esi, dword [esp]
pop ebx
push esi
not dword [esp]
and esi, ebx
or dword [esp], esi
pop esi
pop ebx
mov eax, esi
pop esi
mov ecx, eax
pop eax
add ecx, ebx
pop ebx
sub ecx, ebx
pop ebx
pop ebx
mov eax, ecx
pop ecx
mov esi, eax
pop eax
add esp, 4
push esi
mov esi, eax
or esi, 0xffffffff
push edx
mov edx, 1
add esi, edx
pop edx
xor esi, dword [esp + 4]
mov eax, esi
pop esi
lea esp, [esp + 4]
mov eax, esi
pop esi
lea esp, [esp - 4]
mov dword [esp], eax
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, eax
or esi, 0xffffffff
push eax
mov eax, 1
neg eax
sub esi, eax
pop eax
add esi, dword [esp + 8]
push esi
pop eax
pop esi
or eax, edi
mov edi, dword [esp]
lea esp, [esp + 4]
add edi, eax
mov eax, dword [esp]
lea esp, [esp + 4]
pop eax
mov ebx, edi
pop edi
pop ecx
push eax
mov eax, 0xbf85ac0b
lea esp, [esp - 4]
mov dword [esp], eax
push edi
push ecx
mov edi, dword [esp + 8]
lea esp, [esp - 4]
mov dword [esp], ecx
mov cl, 5
shl edi, cl
pop ecx
push edi
mov edi, dword [esp + 0xc]
push edx
mov dl, cl
or dl, 0xff
inc dl
or dl, 0x1b
mov cl, dl
pop edx
shr edi, cl
add dword [esp], edi
pop edi
pop ecx
mov dword [esp + 4], edi
pop edi
mov eax, 0xf0b46064
sub dword [esp], eax
mov eax, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, eax
push edi
or edi, 0xffffffff
push ebx
mov ebx, 0xffffffff
neg ebx
add edi, ebx
pop ebx
push esi
mov esi, edx
neg esi
push edi
mov edi, edi
push edi
and edi, esi
push edi
mov edi, dword [esp + 4]
or edi, esi
pop esi
push ecx
mov ecx, edi
push ebx
mov ebx, esi
push ebx
and ebx, ecx
push ebx
mov ebx, dword [esp + 4]
or ebx, ecx
pop ecx
add ecx, ebx
pop ebx
pop ebx
mov esi, ecx
pop ecx
pop edi
pop edi
push edx
mov edx, edi
or edx, 0xffffffff
sub edx, 0xffffffff
xor edx, esi
mov edi, edx
pop edx
pop esi
mov edx, edi
pop edi
sub ebx, edx
push esi
mov esi, edx
or esi, 0xffffffff
push edx
mov edx, 1
add esi, edx
pop edx
or esi, dword [esp + 4]
mov edx, esi
pop esi
lea esp, [esp + 4]
pop eax
lea esp, [esp - 4]
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, dword [esp + 4]
or ebx, 0xffffffff
not ebx
or ebx, ecx
mov dword [esp + 4], ebx
pop ebx
mov ecx, esp
mov dword [ecx + 0xc], ebx
pop ecx
call fcn.009c6e5e
add ebx, 0x2271
push eax
mov eax, 0x50c254f4
push eax
mov eax, 0xf3dab0c
add dword [esp], eax
push ebx
lea esp, [esp - 4]
mov dword [esp], ecx
push ecx
lea ecx, [ebx]
push edi
mov edi, ecx
push edx
mov edx, 0xffffffff
push edi
and edi, edx
push edi
mov edi, dword [esp + 4]
xor edi, edx
pop edx
xor edi, edx
pop edx
mov edx, dword [esp]
lea esp, [esp + 4]
mov ecx, edi
pop edi
add ecx, 1
add ecx, dword [esp + 0xc]
mov ebx, ecx
pop ecx
push ecx
mov cl, 4
shl ebx, cl
pop ecx
push ebx
mov ebx, dword [esp + 0xc]
mov cl, 0x1c
shr ebx, cl
or dword [esp], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
pop ecx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
pop eax
lea esp, [esp - 4]
mov dword [esp], edx
lea esp, [esp - 4]
push edx
mov edx, dword [esp + 4]
or edx, 0xffffffff
sub edx, 0xffffffff
or edx, eax
mov dword [esp + 4], edx
pop edx
pop edx
lea esp, [esp - 4]
mov dword [esp], edi
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, edi
or edx, 0xffffffff
sub edx, 0xffffffff
add edx, ebx
push ecx
push edi
pop ecx
or ecx, 0xffffffff
push eax
mov eax, 1
push ecx
mov ecx, ecx
push ecx
and ecx, eax
push ecx
mov ecx, dword [esp + 4]
or ecx, eax
pop eax
add eax, ecx
pop ecx
pop ecx
mov ecx, eax
pop eax
add ecx, edx
mov edi, ecx
pop ecx
pop edx
push edi
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, edi
push ebx
mov ebx, edx
and ecx, ebx
not ecx
not ecx
pop ebx
mov edi, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
push edi
mov edi, dword [esp + 4]
push ebx
mov ebx, edi
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edx
not ebx
not eax
and ebx, eax
not ebx
pop eax
lea edi, [ebx]
mov ebx, dword [esp]
lea esp, [esp + 4]
mov edx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, edi
push edx
mov edx, edx
push edx
and edx, ebx
push edx
mov edx, dword [esp + 4]
or edx, ebx
pop ebx
add ebx, edx
push eax
mov eax, edx
or eax, 0xffffffff
neg eax
sub eax, 1
add eax, dword [esp + 4]
mov edx, eax
pop eax
lea esp, [esp + 4]
pop edx
mov edx, ebx
pop ebx
mov edi, dword [esp]
lea esp, [esp + 4]
mov edi, dword [esp]
lea esp, [esp + 4]
mov ebx, edx
pop edx
pop eax
lea esp, [esp - 4]
mov dword [esp], edx
push ebx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, ebx
push eax
mov eax, ecx
push edx
mov edx, 0xffffffff
lea esp, [esp - 4]
mov dword [esp], eax
and eax, edx
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, dword [esp + 4]
add eax, edx
pop edx
sub eax, edx
pop edx
pop edx
mov ecx, eax
pop eax
sub ecx, 0xffffffff
add ecx, 0x326804eb
mov ebx, ecx
pop ecx
push ebx
rol dword [esp], 2
push edx
mov edx, ebx
or edx, 0xffffffff
add edx, 1
push esi
mov esi, 0xc9a013ad
neg esi
sub edx, esi
pop esi
mov ebx, edx
pop edx
sub dword [esp], ebx
pop ebx
push ecx
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ecx
push esi
mov esi, eax
push ecx
mov ecx, 0xffffffff
push esi
and esi, ecx
not dword [esp]
or dword [esp], esi
mov esi, dword [esp]
lea esp, [esp + 4]
not esi
or esi, ecx
pop ecx
mov eax, esi
pop esi
sub eax, 0xffffffff
or eax, edx
mov ecx, eax
mov eax, dword [esp]
lea esp, [esp + 4]
or ecx, 0xffffffff
not ecx
or ecx, ebx
mov edx, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov ebx, dword [esp]
lea esp, [esp + 4]
cmp dword [ebx], edx
mov edx, dword [esp]
lea esp, [esp + 4]
je 0x9c56e9
lea esp, [esp - 4]
mov dword [esp], eax
lea esp, [esp - 4]
mov dword [esp], ecx
lea esp, [esp - 4]
mov dword [esp], edx
push ebx
lea esp, [esp - 4]
push edi
mov edi, dword [esp + 4]
or edi, 0xffffffff
not edi
add edi, ebp
mov dword [esp + 4], edi
push edx
mov edx, edi
or edx, 0xffffffff
inc edx
or edx, dword [esp + 4]
mov edi, edx
pop edx
lea esp, [esp + 4]
push esi
lea esp, [esp - 4]
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, dword [esp + 4]
push edx
mov edx, ebx
push eax
mov eax, 0xffffffff
not edx
neg eax
sub eax, 1
push edx
or edx, eax
sub edx, eax
push esi
mov esi, dword [esp + 4]
neg esi
push ecx
mov ecx, edx
push ecx
and ecx, esi
push ecx
mov ecx, dword [esp + 4]
or ecx, esi
pop esi
add esi, ecx
pop ecx
pop ecx
mov edx, esi
pop esi
add esp, 4
sub edx, 1
pop eax
mov ebx, edx
pop edx
add ebx, 1
xor ebx, edi
mov dword [esp + 4], ebx
pop ebx
lea esp, [esp - 4]
push edi
mov edi, dword [esp + 4]
push edx
mov edx, edi
push ecx
mov ecx, 0xffffffff
push edx
and edx, ecx
push edx
mov edx, dword [esp + 4]
xor edx, ecx
pop ecx
xor edx, ecx
pop ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov edi, edx
pop edx
add edi, 1
add edi, eax
mov dword [esp + 4], edi
pop edi
mov ebx, esp
lea esp, [esp - 4]
push eax
mov eax, dword [esp + 4]
push ecx
mov ecx, eax
push eax
mov eax, 0xffffffff
push ecx
and ecx, eax
push ecx
mov ecx, dword [esp + 4]
xor ecx, eax
pop eax
xor ecx, eax
pop eax
pop eax
lea eax, [ecx]
pop ecx
add eax, 1
push edx
mov edx, ebx
push ecx
mov ecx, eax
push ecx
and ecx, edx
push ecx
mov ecx, dword [esp + 4]
or ecx, edx
pop edx
add edx, ecx
pop ecx
pop ecx
mov eax, edx
pop edx
mov dword [esp + 4], eax
pop eax
lea esp, [esp - 4]
push esi
mov esi, dword [esp + 4]
or esi, 0xffffffff
add esi, 1
xor esi, 0x40
mov dword [esp + 4], esi
pop esi
call fcn.009c6e5e
add ebx, 0xfffff74b
push eax
mov eax, 0x87959a64
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, 0xf60fdc27
add dword [esp], eax
mov eax, 0x7da5738b
sub dword [esp], eax
ror dword [esp], 7
mov eax, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
push ebx
mov ebx, dword [esp + 4]
or ebx, 0xffffffff
inc ebx
xor ebx, edx
mov dword [esp + 4], ebx
pop ebx
lea esp, [esp - 4]
mov dword [esp], eax
pop edx
push ecx
or ecx, 0xffffffff
not ecx
sub ecx, edx
push ecx
pop edx
pop ecx
push esi
mov esi, edx
neg esi
add ebx, esi
pop esi
pop edx
mov eax, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
push ecx
mov ecx, dword [esp + 4]
or ecx, 0xffffffff
not ecx
or ecx, ebx
mov dword [esp + 4], ecx
pop ecx
call fcn.009c6e5e
add ebx, 0x1dd4
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, 0xd600b98c
push eax
mov eax, 0x4567358c
push edx
mov edx, eax
neg edx
push ebx
push edi
mov edi, ebx
or edi, 0xffffffff
sub edi, 0xffffffff
xor edi, dword [esp + 0xc]
mov ebx, edi
pop edi
push ebx
and ebx, edx
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, dword [esp + 4]
or ebx, edx
mov edx, dword [esp]
lea esp, [esp + 4]
add edx, ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
mov ebx, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], edx
pop edx
mov eax, 0x88998400
push esi
push edx
mov edx, esi
or edx, 0xffffffff
not edx
xor edx, dword [esp + 8]
mov esi, edx
pop edx
push edx
mov edx, eax
lea esp, [esp - 4]
mov dword [esp], esi
not esi
and esi, edx
push ebx
or ebx, 0xffffffff
add ebx, 1
sub ebx, esi
mov esi, ebx
pop ebx
sub esi, 1
push esi
mov esi, dword [esp + 4]
not edx
and edx, esi
neg edx
sub edx, 1
pop esi
push esi
or esi, edx
sub esi, dword [esp]
sub esi, edx
add esp, 4
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, 1
neg edi
push eax
mov eax, esi
lea esp, [esp - 4]
mov dword [esp], eax
and eax, edi
push eax
mov eax, dword [esp + 4]
or eax, edi
pop edi
add edi, eax
pop eax
pop eax
mov esi, edi
pop edi
pop edx
pop edx
push edx
mov edx, dword [esp + 8]
or edx, 0xffffffff
sub edx, 0xffffffff
or edx, esi
mov dword [esp + 8], edx
pop edx
pop esi
rol dword [esp], 6
pop eax
push edx
mov edx, eax
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, ebx
lea esp, [esp - 4]
mov dword [esp], ebx
and ebx, edx
lea esp, [esp - 4]
mov dword [esp], ebx
push edi
mov edi, ebx
or edi, 0xffffffff
add edi, 1
push esi
mov esi, dword [esp + 0xc]
push edx
or edx, 0xffffffff
sub edx, 0xffffffff
sub edx, esi
push edx
pop esi
pop edx
sub edi, esi
pop esi
mov ebx, edi
pop edi
push eax
mov eax, ebx
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, edx
push eax
and eax, ebx
push eax
mov eax, dword [esp + 4]
xor eax, ebx
pop ebx
push esi
mov esi, eax
push eax
mov eax, ebx
push eax
push esi
not dword [esp + 4]
or esi, dword [esp + 4]
push esi
push ecx
mov ecx, esi
or ecx, 0xffffffff
not ecx
or ecx, dword [esp + 8]
mov esi, ecx
pop ecx
push eax
not esi
or esi, dword [esp]
and esi, dword [esp + 4]
lea esp, [esp + 0x10]
not esi
pop eax
mov eax, esi
pop esi
pop ebx
pop ebx
mov ebx, eax
pop eax
pop edx
add edx, ebx
pop ebx
pop ebx
mov ebx, edx
mov edx, dword [esp]
lea esp, [esp + 4]
mov eax, dword [esp]
lea esp, [esp + 4]
mov esi, dword [esp]
lea esp, [esp + 4]
sub ebx, esi
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, 0x97c20f21
lea esp, [esp - 4]
mov dword [esp], ecx
push 0x86219083
pop ecx
sub dword [esp], ecx
push edi
lea esp, [esp - 4]
mov dword [esp], ecx
mov edi, dword [esp + 8]
push ecx
push eax
mov al, cl
or al, 0xff
push edx
mov edx, 1
add al, dl
pop edx
xor al, 2
mov cl, al
pop eax
shl edi, cl
mov ecx, dword [esp]
lea esp, [esp + 4]
push edi
mov edi, dword [esp + 0xc]
mov cl, 0x1e
shr edi, cl
add dword [esp], edi
pop edi
pop ecx
mov dword [esp + 4], edi
pop edi
mov ecx, 0x46803ed8
push edx
push edi
mov edi, edx
or edi, 0xffffffff
inc edi
xor edi, dword [esp + 8]
mov edx, edi
pop edi
lea esp, [esp - 4]
lea esp, [esp - 4]
push edx
mov edx, dword [esp + 4]
or edx, 0xffffffff
not edx
or edx, ecx
mov dword [esp + 4], edx
pop edx
mov ecx, dword [esp + 4]
or ecx, 0xffffffff
sub ecx, 0xffffffff
or ecx, ebx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov ebx, ecx
push edx
push ebx
push eax
mov eax, 0xffffffff
sub eax, ebx
lea ebx, [eax]
pop eax
and edx, ebx
pop ebx
lea esp, [esp - 4]
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, dword [esp + 4]
or eax, 0xffffffff
sub eax, 0xffffffff
or eax, edx
push edx
mov edx, dword [esp + 8]
or edx, 0xffffffff
add edx, 1
xor edx, eax
mov dword [esp + 8], edx
pop edx
pop eax
push ebx
mov ebx, edx
push edx
mov edx, ebx
push ebx
mov ebx, 0xffffffff
not edx
or edx, ebx
push edx
push edi
mov edi, edx
push edx
mov edx, ebx
and edi, edx
not edi
not edi
pop edx
mov edx, edi
pop edi
not dword [esp]
or dword [esp], edx
pop edx
pop ebx
mov ebx, edx
pop edx
sub ebx, 0xffffffff
add ebx, dword [esp + 8]
mov edx, ebx
pop ebx
not edx
and ebx, edx
pop edx
or edx, ebx
pop ebx
pop ebx
mov dword [esp + 4], edx
pop edx
pop ecx
lea esp, [esp - 4]
push edi
mov edi, dword [esp + 4]
push edx
mov edx, edi
push eax
mov eax, 0xffffffff
or edx, eax
push ecx
mov ecx, 0xffffffff
xor edx, ecx
pop ecx
not edx
pop eax
mov edi, edx
pop edx
sub edi, 0xffffffff
add edi, eax
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
push esi
lea esi, [eax]
or esi, 0xffffffff
not esi
or esi, ecx
push edx
mov edx, eax
or edx, 0xffffffff
not edx
or edx, esi
mov eax, edx
mov edx, dword [esp]
lea esp, [esp + 4]
push edi
mov edi, esi
or edi, 0xffffffff
add edi, 1
add edi, dword [esp + 4]
mov esi, edi
pop edi
lea esp, [esp + 4]
push esi
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, esi
push edx
mov edx, 0xffffffff
not eax
not edx
push eax
or eax, edx
sub eax, dword [esp]
sub eax, edx
add esp, 4
sub eax, 1
pop edx
mov esi, eax
pop eax
inc esi
sub esi, eax
mov eax, esi
push ebx
mov ebx, esi
or ebx, 0xffffffff
add ebx, 1
add ebx, dword [esp + 4]
mov esi, ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp + 4]
sub ebx, eax
pop eax
pop ecx
lea esp, [esp - 4]
mov dword [esp], ebx
call fcn.009c6e5e
add ebx, 0xfffff21f
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, 0x84bc2549
lea esp, [esp - 4]
mov dword [esp], edx
push eax
push edx
pop eax
push ecx
lea ecx, [eax]
push ebx
mov ebx, 0xffffffff
push ecx
and ecx, ebx
sub ecx, ebx
sub ecx, dword [esp]
lea esp, [esp + 4]
sub ecx, 1
not ecx
pop ebx
push ecx
pop eax
pop ecx
push esi
mov esi, 0xffffffff
neg esi
add eax, esi
pop esi
add eax, 0x130f4681
push edi
mov edi, edx
or edi, 0xffffffff
add edi, 1
or edi, eax
mov edx, edi
pop edi
pop eax
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, edx
neg edi
sub dword [esp + 4], edi
pop edi
push 0x97cb5bca
pop edx
xor dword [esp], edx
ror dword [esp], 0xb
push edi
mov edi, edx
or edi, 0xffffffff
inc edi
add edi, dword [esp + 4]
mov edx, edi
pop edi
lea esp, [esp + 4]
push esi
mov esi, edx
push ebx
push eax
mov eax, ebx
push edx
mov edx, 0xffffffff
not eax
not edx
push eax
or eax, edx
sub eax, edx
push edi
mov edi, dword [esp + 4]
neg edi
add eax, edi
pop edi
add esp, 4
push edx
mov edx, 1
neg edx
add eax, edx
pop edx
pop edx
mov ebx, eax
pop eax
not ebx
sub ebx, esi
lea esp, [esp - 4]
mov dword [esp], ebx
pop esi
pop ebx
sub ebx, esi
mov esi, dword [esp]
lea esp, [esp + 4]
pop edx
lea esp, [esp - 4]
mov dword [esp], ebx
call fcn.009c47cf
mov eax, dword [esp]
lea esp, [esp + 4]
pop edi
pop esi
mov ebp, dword [esp]
lea esp, [esp + 4]
mov ebx, dword [esp]
lea esp, [esp + 4]
mov edx, dword [esp]
lea esp, [esp + 4]
mov ecx, dword [esp]
lea esp, [esp + 4]
pop eax
call fcn.009c6e5e
add ebx, 0x17c5
lea esp, [esp - 4]
mov dword [esp], ecx
push 0x85e92602
pop ecx
push ecx
mov ecx, 0x7a16da16
add dword [esp], ecx
ror dword [esp], 2
mov ecx, dword [esp]
lea esp, [esp + 4]
push edx
mov edx, ecx
push edi
push eax
mov eax, edi
push ecx
mov ecx, 0xffffffff
push eax
and eax, ecx
lea esp, [esp - 4]
push ecx
mov ecx, dword [esp + 4]
or ecx, 0xffffffff
not ecx
add ecx, eax
mov dword [esp + 4], ecx
pop ecx
mov eax, dword [esp + 4]
xor eax, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xor eax, ecx
pop ecx
pop ecx
mov edi, eax
pop eax
not edi
sub edi, edx
mov edx, edi
pop edi
sub ebx, edx
pop edx
mov ecx, dword [esp]
lea esp, [esp + 4]
cmp dword [ebx], 0xffffffff
je 0x9c6e52
call fcn.009c6e5e
add ebx, 0x172f
push edx
mov edx, 0x709d51e
push edx
ror dword [esp], 0x15
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, edx
or esi, 0xffffffff
inc esi
or esi, 0x4ea8f03e
lea edx, [esi]
pop esi
xor dword [esp], edx
pop edx
push ecx
mov ecx, edx
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, ebx
lea esp, [esp - 4]
mov dword [esp], edi
and edi, ecx
lea esp, [esp - 4]
mov dword [esp], edi
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, edi
or ebx, 0xffffffff
push ecx
push 1
pop ecx
neg ecx
sub ebx, ecx
pop ecx
or ebx, dword [esp + 8]
lea edi, [ebx]
mov ebx, dword [esp]
lea esp, [esp + 4]
or edi, ecx
pop ecx
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edi
push ecx
mov ecx, ecx
push ecx
and ecx, eax
push ecx
mov ecx, dword [esp + 4]
or ecx, eax
pop eax
add eax, ecx
pop ecx
pop ecx
mov ecx, eax
pop eax
push edx
mov edx, edi
or edx, 0xffffffff
sub edx, 0xffffffff
xor edx, dword [esp + 4]
mov edi, edx
pop edx
lea esp, [esp + 4]
pop edi
push ecx
pop ebx
pop ecx
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, edx
or ebx, 0xffffffff
sub ebx, 0xffffffff
add ebx, dword [esp + 4]
push ebx
pop edx
pop ebx
lea esp, [esp + 4]
push esi
push edx
mov edx, 0x247e902f
push edx
lea esp, [esp - 4]
push edx
mov edx, dword [esp + 4]
or edx, 0xffffffff
add edx, 1
xor edx, eax
push eax
mov eax, dword [esp + 8]
or eax, 0xffffffff
not eax
or eax, edx
mov dword [esp + 8], eax
pop eax
pop edx
mov eax, edx
or eax, 0xffffffff
inc eax
push edi
mov edi, 0x247e9030
neg edi
sub eax, edi
pop edi
lea edx, [eax]
pop eax
push eax
push edx
pop eax
neg eax
push ebx
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, ebx
or esi, 0xffffffff
add esi, 1
add esi, dword [esp + 0xc]
mov ebx, esi
pop esi
push ebx
and ebx, eax
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, dword [esp + 4]
or ebx, eax
pop eax
push esi
mov esi, ebx
neg esi
sub eax, esi
pop esi
pop ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], eax
pop eax
lea esp, [esp - 4]
mov dword [esp], eax
push ecx
mov eax, dword [esp + 8]
push ecx
push edx
mov dl, cl
push ebx
mov bl, dl
push eax
mov al, 0xff
or bl, al
not bl
push eax
push edx
mov al, bl
or dl, 0xff
sub dl, 0xff
push edx
not eax
not edx
and eax, edx
or eax, dword [esp]
pop edx
pop edx
mov bl, al
pop eax
pop eax
mov dl, bl
pop ebx
sub dl, 0xff
or dl, 0x12
mov cl, dl
pop edx
shr eax, cl
pop ecx
push eax
mov eax, dword [esp + 0xc]
mov cl, 0xe
shl eax, cl
or dword [esp], eax
mov eax, dword [esp]
lea esp, [esp + 4]
pop ecx
push edx
mov edx, dword [esp + 8]
or edx, 0xffffffff
sub edx, 0xffffffff
or edx, eax
mov dword [esp + 8], edx
pop edx
pop eax
mov edx, dword [esp]
lea esp, [esp + 4]
push ebx
push esi
pop ebx
lea esp, [esp - 4]
push esi
mov esi, dword [esp + 4]
or esi, 0xffffffff
not esi
xor esi, eax
mov dword [esp + 4], esi
pop esi
mov eax, edx
push ebx
push esi
mov esi, ebx
push ecx
mov ecx, eax
and esi, ecx
push eax
mov eax, esi
push edi
or edi, 0xffffffff
not edi
push eax
and eax, edi
not dword [esp]
or eax, dword [esp]
lea esp, [esp + 4]
pop edi
mov esi, eax
pop eax
not esi
push ebx
mov ebx, ecx
or ebx, 0xffffffff
inc ebx
or ebx, dword [esp + 4]
mov ecx, ebx
pop ebx
lea esp, [esp + 4]
mov ebx, esi
mov esi, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, dword [esp + 4]
add ebx, eax
pop eax
sub ebx, eax
pop eax
pop eax
mov esi, ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
mov edx, dword [esp]
lea esp, [esp + 4]
push ebx
mov ebx, 0xec257866
push ebx
mov ebx, 0xec257a66
xor dword [esp], ebx
rol dword [esp], 0x17
mov ebx, dword [esp]
lea esp, [esp + 4]
push ecx
push ebx
mov ecx, dword [esp]
lea esp, [esp + 4]
push edi
push esi
pop edi
push edi
and edi, ecx
push edi
push ecx
mov ecx, edi
or ecx, 0xffffffff
add ecx, 1
push edx
push ecx
pop edx
push eax
mov eax, dword [esp + 0x10]
push edx
push eax
not eax
and edx, eax
push ecx
mov ecx, eax
or ecx, 0xffffffff
add ecx, 1
add ecx, dword [esp + 4]
mov eax, ecx
pop ecx
lea esp, [esp + 4]
push edx
mov edx, dword [esp + 4]
not edx
and eax, edx
pop edx
push esi
mov esi, edx
push ebx
mov ebx, eax
push esi
not dword [esp]
and esi, ebx
or esi, dword [esp]
lea esp, [esp + 4]
push esi
not dword [esp]
and esi, ebx
or dword [esp], esi
pop esi
pop ebx
mov edx, esi
pop esi
pop eax
pop eax
mov ecx, edx
pop edx
push edx
mov edx, edi
or edx, 0xffffffff
not edx
or edx, ecx
mov edi, edx
pop edx
pop ecx
or edi, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, edi
not esi
inc esi
sub ecx, esi
pop esi
pop edi
pop edi
mov esi, ecx
pop ecx
mov ebx, dword [esp]
lea esp, [esp + 4]
cmp esi, dword [ebx]
jne 0x9c5b44
push ecx
push 0xcb4c63fd
pop ecx
push ecx
mov ecx, 0x34b39c02
add dword [esp], ecx
rol dword [esp], 0xe
pop ecx
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, esi
or edx, 0xffffffff
push edi
mov edi, 0xffffffff
neg edi
add edx, edi
pop edi
add edx, ecx
mov esi, edx
pop edx
pop ecx
xchg dword [ebx], esi
test esi, esi
jne 0x9c5882
pop esi
call fcn.009c6e5e
add ebx, 0x131f
push eax
push 0x4192c0b7
pop eax
lea esp, [esp - 4]
mov dword [esp], eax
push ecx
lea ecx, [eax]
or ecx, 0xffffffff
push ebx
push ecx
pop ebx
push edx
or edx, 0xffffffff
sub edx, 0xffffffff
push ebx
not dword [esp]
and ebx, edx
or dword [esp], ebx
pop ebx
pop edx
mov ecx, ebx
pop ebx
add ecx, 0x5992c0b7
mov eax, ecx
pop ecx
push esi
mov esi, dword [esp + 4]
push ebx
push edi
mov edi, ebx
or edi, 0xffffffff
inc edi
push esi
mov esi, edi
push edx
mov edx, eax
push esi
and esi, edx
add esi, esi
push esi
mov esi, dword [esp + 4]
add esi, edx
pop edx
sub esi, edx
pop edx
pop edx
mov edi, esi
pop esi
push edi
pop ebx
pop edi
push esi
not esi
or esi, ebx
push esi
not dword [esp]
inc dword [esp]
push eax
mov eax, 1
sub dword [esp + 4], eax
pop eax
and esi, ebx
or esi, dword [esp]
add esp, 4
push esi
mov esi, dword [esp + 4]
and esi, ebx
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, 0xffffffff
sub ebx, esi
mov esi, ebx
pop ebx
push ecx
mov ecx, esi
push ebx
mov ebx, dword [esp + 8]
not ecx
not ebx
push ecx
push edi
mov edi, ecx
push eax
mov eax, ebx
push edi
or edi, 0xffffffff
sub edi, 0xffffffff
lea esp, [esp - 4]
mov dword [esp], eax
push eax
and eax, edi
not dword [esp]
or dword [esp], eax
pop eax
push eax
mov eax, dword [esp + 8]
not eax
or eax, edi
pop edi
push eax
and eax, edi
not dword [esp]
or eax, dword [esp]
lea esp, [esp + 4]
not eax
or eax, edi
or edi, 0xffffffff
inc edi
push eax
not dword [esp]
and eax, edi
or dword [esp], eax
pop eax
mov edi, eax
pop eax
lea esp, [esp + 4]
pop eax
mov ecx, edi
pop edi
sub ecx, ebx
sub ecx, dword [esp]
add esp, 4
sub ecx, 1
pop ebx
push ecx
pop esi
pop ecx
lea esp, [esp + 8]
pop ebx
mov dword [esp + 4], esi
pop esi
rol dword [esp], 6
pop eax
lea esp, [esp - 4]
push edi
mov edi, dword [esp + 4]
or edi, 0xffffffff
push ecx
mov ecx, 0xffffffff
neg ecx
add edi, ecx
pop ecx
add edi, ecx
mov dword [esp + 4], edi
pop edi
mov ecx, eax
push edx
mov edx, 0xffffffff
sub edx, ecx
mov ecx, edx
pop edx
push esi
mov esi, 1
neg esi
sub ecx, esi
pop esi
sub ebx, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov eax, dword [esp]
lea esp, [esp + 4]
cmp dword [ebx], 0xffffffff
je 0x9c6a52
call fcn.009c6e5e
add ebx, 0x119a
lea esp, [esp - 4]
push edi
push eax
mov eax, edi
or eax, 0xffffffff
not eax
xor eax, dword [esp + 8]
mov edi, eax
pop eax
or edi, 0xffffffff
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, 1
add edi, edx
pop edx
add edi, ecx
mov dword [esp + 4], edi
pop edi
mov ecx, 0x6abe13b7
push ecx
mov ecx, 0x8d89f305
xor dword [esp], ecx
push ebx
push ecx
push ecx
mov ecx, ebx
or ecx, 0xffffffff
sub ecx, 0xffffffff
xor ecx, dword [esp + 4]
mov ebx, ecx
pop ecx
lea esp, [esp + 4]
or ebx, 0xffffffff
not ebx
add ebx, 0xe73780b2
mov ecx, ebx
pop ebx
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, ecx
neg esi
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, dword [esp + 8]
push edx
push edi
mov edi, edx
push edx
mov edx, esi
not edi
not edx
or edi, edx
not edi
push eax
mov eax, edx
or eax, 0xffffffff
inc eax
add eax, dword [esp + 4]
mov edx, eax
pop eax
lea esp, [esp + 4]
push edi
pop edx
pop edi
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, dword [esp + 4]
or edx, esi
pop esi
push eax
mov eax, edx
push edi
mov edi, esi
push edi
and edi, eax
push edi
mov edi, dword [esp + 4]
or edi, eax
pop eax
add eax, edi
pop edi
pop edi
mov esi, eax
pop eax
pop edx
pop edx
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
push edx
push ecx
mov edx, dword [esp + 8]
lea esp, [esp - 4]
mov dword [esp], ecx
mov cl, 0xc
shr edx, cl
push edx
mov edx, ecx
or edx, 0xffffffff
add edx, 1
push ecx
push esi
mov esi, ecx
or esi, 0xffffffff
sub esi, 0xffffffff
xor esi, dword [esp + 0xc]
mov ecx, esi
pop esi
push edx
mov edx, edx
push edx
and edx, ecx
push edx
mov edx, dword [esp + 4]
or edx, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
add ecx, edx
pop edx
pop edx
mov edx, ecx
pop ecx
mov ecx, edx
pop edx
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], edx
push edi
push esi
mov esi, edi
or esi, 0xffffffff
inc esi
or esi, edx
mov edi, esi
pop esi
or edi, 0xffffffff
not edi
add edi, dword [esp + 0x10]
mov edx, edi
pop edi
mov cl, 0x14
shl edx, cl
xor dword [esp], edx
pop edx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
mov ecx, dword [esp]
lea esp, [esp + 4]
push eax
mov eax, ecx
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, ebx
push ebx
and ebx, eax
push ebx
push eax
mov eax, ebx
push esi
push edi
mov edi, esi
or edi, 0xffffffff
sub edi, 0xffffffff
xor edi, eax
mov esi, edi
pop edi
push ebx
push 0xffffffff
pop ebx
push esi
and esi, ebx
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, dword [esp + 4]
xor esi, ebx
pop ebx
xor esi, ebx
pop ebx
pop ebx
mov eax, esi
pop esi
inc eax
xor eax, dword [esp + 8]
lea ebx, [eax]
pop eax
push esi
mov esi, ebx
push ebx
mov ebx, eax
push esi
and esi, ebx
sub esi, ebx
sub esi, dword [esp]
add esp, 4
sub esi, 1
push edx
push 0xffffffff
pop edx
xor esi, edx
pop edx
mov ebx, dword [esp]
lea esp, [esp + 4]
push ecx
mov ecx, ebx
or ecx, 0xffffffff
not ecx
xor ecx, esi
mov ebx, ecx
pop ecx
pop esi
mov eax, dword [esp]
lea esp, [esp + 4]
add eax, ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ebx
or eax, 0xffffffff
inc eax
add eax, dword [esp + 4]
mov ebx, eax
pop eax
lea esp, [esp + 4]
mov ebx, eax
push esi
mov esi, eax
or esi, 0xffffffff
not esi
xor esi, dword [esp + 4]
mov eax, esi
pop esi
lea esp, [esp + 4]
pop ecx
lea esp, [esp - 4]
push ecx
push edx
mov edx, ecx
or edx, 0xffffffff
add edx, 1
xor edx, dword [esp + 8]
mov ecx, edx
pop edx
or ecx, 0xffffffff
add ecx, 1
or ecx, edi
mov dword [esp + 4], ecx
pop ecx
lea edi, [ebx + 0x1c0a0]
lea esp, [esp - 4]
mov dword [esp], ecx
lea esp, [esp - 4]
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, dword [ebx]
push edi
mov edi, dword [esp + 8]
or edi, 0xffffffff
not edi
or edi, eax
mov dword [esp + 8], edi
pop edi
pop eax
mov ecx, dword [esp]
lea esp, [esp + 4]
push edx
lea esp, [esp - 4]
mov dword [esp], ecx
mov edx, ecx
lea esp, [esp - 4]
mov dword [esp], ecx
push ebx
push eax
lea esp, [esp - 4]
mov dword [esp], ebx
pop eax
lea esp, [esp - 4]
mov dword [esp], ecx
push ebx
mov ebx, ecx
or ebx, 0xffffffff
not ebx
xor ebx, eax
mov ecx, ebx
pop ebx
push eax
mov eax, 0xffffffff
not ecx
push ebx
mov ebx, eax
lea esp, [esp - 4]
mov dword [esp], esi
or esi, 0xffffffff
not esi
not ebx
or ebx, esi
mov eax, ebx
pop esi
pop ebx
push ecx
or ecx, eax
sub ecx, eax
sub ecx, dword [esp]
lea esp, [esp + 4]
sub ecx, 1
pop eax
mov eax, ecx
pop ecx
not eax
add eax, 1
dec eax
push edx
mov edx, eax
push ebx
mov ebx, 0xe0459560
not edx
not ebx
lea esp, [esp - 4]
mov dword [esp], edx
or edx, ebx
sub edx, dword [esp]
sub edx, ebx
add esp, 4
sub edx, 1
pop ebx
mov eax, edx
pop edx
mov ebx, eax
pop eax
push ebx
ror dword [esp], 0
push edi
mov edi, ebx
or edi, 0xffffffff
push ecx
mov ecx, 1
push edi
mov edi, edi
push edi
and edi, ecx
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, dword [esp + 4]
push ebx
mov ebx, edi
push eax
mov eax, ecx
push ebx
and ebx, eax
push ebx
mov ebx, dword [esp + 4]
add ebx, eax
pop eax
sub ebx, eax
pop eax
pop eax
mov edi, ebx
pop ebx
pop ecx
add ecx, edi
pop edi
pop edi
mov edi, ecx
pop ecx
push esi
mov esi, 0xe045954d
push edx
mov edx, edi
push edx
and edx, esi
push edx
mov edx, dword [esp + 4]
or edx, esi
pop esi
add esi, edx
pop edx
pop edx
mov edi, esi
pop esi
mov ebx, edi
mov edi, dword [esp]
lea esp, [esp + 4]
sub dword [esp], ebx
pop ebx
lea ecx, [ebx]
mov ebx, dword [esp]
lea esp, [esp + 4]
shl edx, cl
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, ecx
push ebx
mov ebx, 0xc2917ea4
push ebx
rol dword [esp], 6
mov ebx, 0xa45fa93d
xor dword [esp], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
mov ecx, ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
shr edx, cl
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, dword [esp + 4]
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, edx
not ecx
not ebx
and ecx, ebx
not ecx
pop ebx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov edx, dword [esp]
lea esp, [esp + 4]
mov ecx, dword [esp]
lea esp, [esp + 4]
push ebx
mov ebx, ecx
or ebx, 0xffffffff
sub ebx, 0xffffffff
push eax
mov eax, ebx
push ebx
mov ebx, edx
not eax
not ebx
push edi
mov edi, eax
push edx
mov edx, ebx
push edi
or edi, edx
sub edi, dword [esp]
sub edi, edx
add esp, 4
sub edi, 1
not edi
pop edx
mov eax, edi
pop edi
neg eax
dec eax
pop ebx
mov ebx, eax
mov eax, dword [esp]
lea esp, [esp + 4]
mov ecx, ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
pop edx
push edx
mov edx, 0x2cec5c2c
push edx
mov edx, 0x51f1fed0
xor dword [esp], edx
push ebx
push ecx
mov ebx, dword [esp + 8]
push ecx
mov cl, 0x1a
shl ebx, cl
pop ecx
push ebx
mov ebx, dword [esp + 0xc]
push ebx
mov bl, cl
or bl, 0xff
add bl, 1
xor bl, 6
mov cl, bl
pop ebx
shr ebx, cl
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, dword [esp + 4]
push ecx
mov ecx, ebx
lea esp, [esp - 4]
mov dword [esp], edx
and edx, ecx
push edx
mov edx, dword [esp + 4]
add edx, ecx
pop ecx
sub edx, ecx
pop ecx
pop ecx
mov dword [esp + 4], edx
pop edx
pop ebx
push eax
mov eax, ecx
or eax, 0xffffffff
add eax, 1
add eax, dword [esp + 4]
mov ecx, eax
pop eax
lea esp, [esp + 4]
mov dword [esp + 4], ebx
pop ebx
pop edx
push esi
push eax
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, eax
or edi, 0xffffffff
not edi
add edi, esi
mov eax, edi
pop edi
or eax, 0xffffffff
not eax
add eax, ecx
mov esi, eax
mov eax, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
push eax
mov eax, dword [esp + 4]
or eax, 0xffffffff
not eax
or eax, ebx
push edi
mov edi, dword [esp + 8]
or edi, 0xffffffff
inc edi
add edi, eax
mov dword [esp + 8], edi
pop edi
pop eax
lea ebx, [edx]
not esi
lea esp, [esp - 4]
mov dword [esp], esi
push ebx
neg dword [esp]
dec dword [esp]
push edx
mov edx, esi
push ecx
mov ecx, dword [esp + 8]
lea esp, [esp - 4]
mov dword [esp], edx
and edx, ecx
push edx
mov edx, dword [esp + 4]
add edx, ecx
pop ecx
sub edx, ecx
pop ecx
pop ecx
mov esi, edx
pop edx
push esi
mov esi, dword [esp + 8]
push ebx
push edx
mov edx, 0xffffffff
xor esi, edx
pop edx
or esi, dword [esp]
and esi, dword [esp + 4]
add esp, 0x10
pop ebx
mov ecx, esi
pop esi
mov edx, dword [esp]
lea esp, [esp + 4]
push eax
mov eax, dword [ebx]
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, eax
push ebx
mov ebx, 0xffffffff
lea esp, [esp - 4]
mov dword [esp], esi
and esi, ebx
push esi
push eax
mov eax, esi
or eax, 0xffffffff
add eax, 1
or eax, dword [esp + 8]
mov esi, eax
pop eax
add esi, ebx
pop ebx
sub esi, ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
mov ebx, dword [esp]
lea esp, [esp + 4]
mov eax, esi
pop esi
sub eax, 0xffffffff
add eax, ecx
mov dword [ebx], eax
pop eax
push eax
mov eax, 0x23d6a360
push eax
mov eax, 0xfc295ca0
add dword [esp], eax
rol dword [esp], 5
mov eax, dword [esp]
lea esp, [esp + 4]
push edx
mov edx, eax
not edx
add edx, 1
sub ebx, edx
pop edx
pop eax
cmp ebx, edi
jb 0x9c6066
pop ecx
call fcn.009c6e5e
add ebx, 0x9f8
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, 0xfe1ef7e8
push ecx
ror dword [esp], 0x1e
mov ecx, 0xafbeeb1e
push eax
mov eax, ecx
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, dword [esp + 8]
push edi
and edi, eax
push edi
mov edi, dword [esp + 4]
or edi, eax
pop eax
add eax, edi
pop edi
mov edi, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], eax
pop eax
push edi
mov edi, ecx
or edi, 0xffffffff
sub edi, 0xffffffff
xor edi, 0x57c53545
mov ecx, edi
pop edi
push esi
mov esi, ecx
push edx
mov edx, dword [esp + 8]
push edx
and edx, esi
push edx
mov edx, dword [esp + 4]
push ecx
mov ecx, edx
push ebx
mov ebx, esi
not ecx
not ebx
and ecx, ebx
not ecx
pop ebx
mov edx, ecx
pop ecx
pop esi
add esi, edx
pop edx
mov edx, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
mov ecx, dword [esp]
lea esp, [esp + 4]
push eax
mov eax, ecx
lea esp, [esp - 4]
push esi
mov esi, dword [esp + 4]
or esi, 0xffffffff
add esi, 1
add esi, ebx
mov dword [esp + 4], esi
pop esi
mov ebx, ebx
lea esp, [esp - 4]
push esi
mov esi, dword [esp + 4]
push ecx
mov ecx, esi
push eax
mov eax, 0xffffffff
not ecx
not eax
push ecx
push ebx
mov ebx, ecx
push ecx
mov ecx, eax
push ebx
push esi
mov esi, ebx
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ecx
not esi
not eax
or esi, eax
not esi
pop eax
mov ebx, esi
pop esi
push ebx
mov ebx, dword [esp + 4]
push eax
mov eax, ecx
push edi
mov edi, ebx
push edi
push ecx
mov ecx, edi
push ebx
mov ebx, eax
push ecx
or ecx, 0xffffffff
sub ecx, 0xffffffff
push ebx
push ebx
and ebx, ecx
not dword [esp]
or ebx, dword [esp]
add esp, 4
push ebx
mov ebx, dword [esp + 8]
push ebx
and ebx, ecx
not dword [esp]
or dword [esp], ebx
pop ebx
pop ecx
push ebx
not dword [esp]
and ebx, ecx
or ebx, dword [esp]
add esp, 4
push ebx
not dword [esp]
and ebx, ecx
or dword [esp], ebx
pop ebx
or ecx, 0xffffffff
not ecx
push ebx
not dword [esp]
and ebx, ecx
or ebx, dword [esp]
lea esp, [esp + 4]
mov ecx, ebx
pop ebx
lea esp, [esp + 4]
pop ebx
mov edi, ecx
pop ecx
push edi
mov edi, dword [esp + 4]
or edi, eax
pop eax
add eax, edi
pop edi
pop edi
mov ebx, eax
pop eax
pop ecx
sub ebx, ecx
pop ecx
pop ecx
mov ecx, ebx
pop ebx
sub ecx, dword [esp]
sub ecx, eax
lea esp, [esp + 4]
sub ecx, 1
mov eax, dword [esp]
lea esp, [esp + 4]
mov esi, ecx
pop ecx
inc esi
add esi, ebx
push ecx
mov ecx, dword [esp + 8]
or ecx, 0xffffffff
push edx
mov edx, ecx
push edi
or edi, 0xffffffff
add edi, 1
push edx
and edx, edi
not dword [esp]
or dword [esp], edx
pop edx
pop edi
mov ecx, edx
pop edx
add ecx, esi
mov dword [esp + 8], ecx
pop ecx
mov esi, dword [esp]
lea esp, [esp + 4]
push ecx
mov ecx, ebx
push edx
mov edx, eax
and ecx, edx
not ecx
not ecx
pop edx
mov ebx, ecx
pop ecx
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, dword [esp + 4]
lea esp, [esp - 4]
mov dword [esp], edi
push edx
mov edx, edi
or edx, 0xffffffff
not edx
xor edx, ebx
mov edi, edx
mov edx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
lea esp, [esp - 4]
mov dword [esp], edi
and edi, ecx
lea esp, [esp - 4]
mov dword [esp], edi
push edx
mov edx, edi
or edx, 0xffffffff
inc edx
push ebx
mov ebx, edx
push edx
mov edx, dword [esp + 0x10]
push ebx
or ebx, edx
push ebx
mov ebx, dword [esp + 4]
and ebx, edx
not ebx
and ebx, dword [esp]
add esp, 8
pop edx
mov edx, ebx
pop ebx
push edx
pop edi
pop edx
add edi, ecx
pop ecx
push ebx
mov ebx, ecx
neg ebx
add edi, ebx
pop ebx
pop ecx
pop ecx
push eax
mov eax, ebx
or eax, 0xffffffff
add eax, 1
or eax, edi
mov ebx, eax
pop eax
pop edi
pop eax
add eax, ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
mov ebx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], eax
pop ebx
pop eax
mov ecx, dword [esp]
lea esp, [esp + 4]
push eax
push esi
mov esi, eax
or esi, 0xffffffff
sub esi, 0xffffffff
or esi, 0xd2d84d3e
mov eax, esi
pop esi
push eax
mov eax, 0x2d27b2c1
push edi
push esi
mov esi, edi
or esi, 0xffffffff
not esi
or esi, eax
push esi
pop edi
pop esi
push ebx
mov ebx, dword [esp + 8]
lea esp, [esp - 4]
mov dword [esp], ebx
push esi
mov esi, ebx
push eax
mov eax, edi
and esi, eax
not esi
not esi
pop eax
mov ebx, esi
pop esi
push ebx
mov ebx, dword [esp + 4]
or ebx, edi
mov edi, dword [esp]
lea esp, [esp + 4]
add edi, ebx
pop ebx
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, ebx
or edx, 0xffffffff
sub edx, 0xffffffff
add edx, dword [esp + 4]
mov ebx, edx
pop edx
lea esp, [esp + 4]
push eax
mov eax, dword [esp + 8]
or eax, 0xffffffff
not eax
or eax, edi
push esi
mov esi, dword [esp + 0xc]
or esi, 0xffffffff
add esi, 1
push ecx
mov ecx, eax
push esi
mov esi, esi
push esi
and esi, ecx
push esi
mov esi, dword [esp + 4]
or esi, ecx
pop ecx
add ecx, esi
pop esi
pop esi
mov esi, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 0xc], esi
pop esi
pop eax
pop edi
push eax
lea esp, [esp - 4]
mov dword [esp], ecx
push ecx
mov ecx, eax
or ecx, 0xffffffff
not ecx
or ecx, dword [esp + 0xc]
mov eax, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
push ecx
push eax
mov al, cl
or al, 0xff
not al
or al, 0x15
mov cl, al
pop eax
shl eax, cl
pop ecx
push eax
mov eax, dword [esp + 0xc]
mov cl, 0xb
shr eax, cl
add dword [esp], eax
mov eax, dword [esp]
lea esp, [esp + 4]
push ebx
mov ebx, ecx
or ebx, 0xffffffff
sub ebx, 0xffffffff
add ebx, dword [esp + 4]
mov ecx, ebx
pop ebx
lea esp, [esp + 4]
mov dword [esp + 4], eax
pop eax
pop eax
lea esp, [esp - 4]
push ecx
mov ecx, dword [esp + 4]
or ecx, 0xffffffff
inc ecx
push ebx
mov ebx, esi
neg ebx
sub ecx, ebx
pop ebx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esi, [edi]
push edi
mov edi, esi
push ecx
mov ecx, 0xffffffff
push ebx
mov ebx, 0xffffffff
sub ebx, edi
mov edi, ebx
pop ebx
not ecx
push edi
or edi, ecx
sub edi, ecx
sub edi, dword [esp]
lea esp, [esp + 4]
sub edi, 1
mov ecx, dword [esp]
lea esp, [esp + 4]
mov esi, edi
pop edi
push ebx
push 1
pop ebx
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, esi
lea esp, [esp - 4]
mov dword [esp], edx
and edx, ebx
push edx
mov edx, dword [esp + 4]
or edx, ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
push edi
push esi
mov esi, edi
or esi, 0xffffffff
add esi, 1
or esi, edx
mov edi, esi
pop esi
push ecx
mov ecx, ebx
push ecx
and ecx, edi
push ecx
mov ecx, dword [esp + 4]
or ecx, edi
pop edi
add edi, ecx
pop ecx
pop ecx
mov ebx, edi
pop edi
pop edx
pop edx
push edi
mov edi, esi
or edi, 0xffffffff
inc edi
add edi, ebx
mov esi, edi
pop edi
mov ebx, dword [esp]
lea esp, [esp + 4]
add esi, eax
mov edi, esi
mov esi, dword [esp]
lea esp, [esp + 4]
pop eax
xchg dword [ebx], edi
push eax
mov eax, edi
or eax, 0xffffffff
push edx
push ecx
mov edx, eax
or ecx, 0xffffffff
not ecx
push ecx
not edx
not ecx
and edx, ecx
or edx, dword [esp]
mov ecx, dword [esp]
lea esp, [esp + 4]
mov eax, edx
pop ecx
pop edx
push ecx
mov ecx, dword [esp + 8]
neg ecx
sub eax, ecx
pop ecx
mov edi, eax
pop eax
lea esp, [esp + 4]
call fcn.009c6e5e
add ebx, 0x460
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, 0x983dcc97
push eax
mov eax, 0xcf277c75
push ecx
mov ecx, eax
push esi
mov esi, dword [esp + 8]
push esi
and esi, ecx
push esi
mov esi, dword [esp + 4]
or esi, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
add ecx, esi
pop esi
mov esi, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], ecx
pop ecx
lea esp, [esp - 4]
mov dword [esp], 0x589ab6f4
mov eax, dword [esp]
lea esp, [esp + 4]
add dword [esp], eax
push ebx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ebx, dword [esp + 8]
push ecx
mov cl, 0x1d
shr ebx, cl
pop ecx
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, dword [esp + 0xc]
mov cl, 3
shl ebx, cl
xor dword [esp], ebx
pop ebx
pop ecx
mov dword [esp + 4], ebx
pop ebx
mov eax, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
push ecx
mov ecx, dword [esp + 4]
or ecx, 0xffffffff
inc ecx
or ecx, edx
mov dword [esp + 4], ecx
pop ecx
push eax
mov edx, dword [esp]
lea esp, [esp + 4]
push esi
or esi, 0xffffffff
not esi
sub esi, edx
mov edx, esi
pop esi
sub ebx, edx
push ebx
mov ebx, edx
push eax
mov eax, ebx
push ebx
mov ebx, 0xffffffff
not eax
not ebx
push eax
or eax, ebx
sub eax, ebx
sub eax, dword [esp]
add esp, 4
sub eax, 1
pop ebx
mov ebx, eax
pop eax
sub ebx, 0xffffffff
add ebx, dword [esp + 4]
mov edx, ebx
pop ebx
lea esp, [esp + 4]
pop eax
lea esp, [esp - 4]
push edi
mov edi, dword [esp + 4]
or edi, 0xffffffff
inc edi
push ecx
mov ecx, edi
push edx
mov edx, eax
push ecx
and ecx, edx
add ecx, ecx
push ecx
push edi
mov edi, ecx
or edi, 0xffffffff
add edi, 1
or edi, dword [esp + 8]
mov ecx, edi
pop edi
add ecx, edx
pop edx
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, edx
neg esi
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, ecx
push ecx
and ecx, esi
push ecx
mov ecx, dword [esp + 4]
or ecx, esi
pop esi
add esi, ecx
pop ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov ecx, esi
pop esi
pop edx
pop edx
push ebx
mov ebx, edi
or ebx, 0xffffffff
add ebx, 1
xor ebx, ecx
mov edi, ebx
pop ebx
pop ecx
mov dword [esp + 4], edi
pop edi
push ebx
mov ebx, 0xd6d0f2ca
push ebx
push eax
mov eax, ebx
or eax, 0xffffffff
inc eax
xor eax, 0x292f0d35
mov ebx, eax
pop eax
add dword [esp], ebx
lea esp, [esp - 4]
mov dword [esp], edi
push ecx
mov edi, dword [esp + 8]
push ecx
push eax
mov al, cl
or al, 0xff
inc al
xor al, 0x1c
mov cl, al
pop eax
shl edi, cl
mov ecx, dword [esp]
lea esp, [esp + 4]
push edi
mov edi, dword [esp + 0xc]
mov cl, 4
shr edi, cl
xor dword [esp], edi
pop edi
pop ecx
push ecx
mov ecx, dword [esp + 8]
push edx
mov edx, ecx
push ebx
mov ebx, 0xffffffff
push ebx
not edx
not ebx
and edx, ebx
or edx, dword [esp]
pop ebx
push ebx
not edx
not ebx
and edx, ebx
or edx, dword [esp]
pop ebx
pop ebx
mov ecx, edx
pop edx
push edi
mov edi, 1
push ecx
mov ecx, ecx
push ecx
and ecx, edi
push ecx
mov ecx, dword [esp + 4]
or ecx, edi
pop edi
add edi, ecx
pop ecx
pop ecx
mov ecx, edi
pop edi
push ebx
mov ebx, ecx
push ecx
mov ecx, edi
push ebx
push ecx
not ecx
and ebx, ecx
pop ecx
push ebx
mov ebx, dword [esp + 4]
not ebx
and ecx, ebx
pop ebx
or ebx, ecx
pop ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov ecx, ebx
pop ebx
mov dword [esp + 8], ecx
pop ecx
mov edi, dword [esp]
lea esp, [esp + 4]
push esi
mov esi, ebx
or esi, 0xffffffff
add esi, 1
or esi, dword [esp + 4]
mov ebx, esi
pop esi
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
lea esp, [esp - 4]
mov dword [esp], eax
lea eax, [ebx]
push esi
push edx
mov edx, esi
or edx, 0xffffffff
not edx
or edx, 0xffffffff
mov esi, edx
pop edx
xor ecx, esi
mov esi, dword [esp]
lea esp, [esp + 4]
push ebx
push 0xffffffff
pop ebx
sub ebx, eax
mov eax, ebx
pop ebx
push esi
mov esi, ecx
push edx
mov edx, eax
and esi, edx
not esi
push ecx
push eax
mov ecx, esi
or eax, 0xffffffff
not eax
not ecx
or ecx, eax
lea esi, [ecx]
pop eax
pop ecx
pop edx
mov ecx, esi
pop esi
not ecx
pop eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov eax, dword [esp]
lea esp, [esp + 4]
mov ecx, dword [esp]
lea esp, [esp + 4]
pop ebx
lea esp, [esp - 4]
push ebx
mov ebx, dword [esp + 4]
or ebx, 0xffffffff
inc ebx
or ebx, edx
push ecx
mov ecx, dword [esp + 8]
or ecx, 0xffffffff
add ecx, 1
xor ecx, ebx
mov dword [esp + 8], ecx
pop ecx
pop ebx
mov edx, eax
push edi
or edi, 0xffffffff
push esi
mov esi, 0xffffffff
xor edi, esi
mov esi, dword [esp]
lea esp, [esp + 4]
push edx
not dword [esp]
and edx, edi
or edx, dword [esp]
lea esp, [esp + 4]
push edx
pop eax
mov edi, dword [esp]
lea esp, [esp + 4]
mov edx, dword [esp]
lea esp, [esp + 4]
xchg dword [ebx], eax
push ecx
mov ecx, eax
or ecx, 0xffffffff
not ecx
push edi
mov edi, ecx
push edx
mov edx, dword [esp + 0xc]
push edx
not edi
not edx
and edi, edx
or edi, dword [esp]
pop edx
not edi
or edi, edx
pop edx
mov ecx, edi
pop edi
mov eax, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp + 4]
popfd
mov ebx, dword [esp]
lea esp, [esp + 4]
ret