Function at 0x604b1a
Capabilities:
Allocate or change rwx memory

Disassembly:
jmp 0x604b24
lea esp, [esp - 4]
pushfd
push esi
mov esi, dword [esp + 8]
push eax
mov eax, esi
push ebx
mov ebx, 0xffffffff
or eax, ebx
not eax
not eax
pop ebx
mov esi, eax
pop eax
sub esi, 0xffffffff
add esi, ecx
push ebx
mov ebx, dword [esp + 0xc]
or ebx, 0xffffffff
add ebx, 1
add ebx, esi
mov dword [esp + 0xc], ebx
pop ebx
pop esi
popfd
push esi
pushfd
call fcn.006074b4
add esi, 0x297e
push ebx
push 0x35ff31de
pop ebx
lea esp, [esp - 4]
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, dword [esp + 4]
or edi, 0xffffffff
inc edi
push eax
mov eax, edi
push ecx
mov ecx, ebx
push eax
push ecx
not ecx
and eax, ecx
pop ecx
push eax
mov eax, dword [esp + 4]
not eax
and ecx, eax
pop eax
or eax, ecx
pop ecx
pop ecx
push ebx
mov ebx, edi
or ebx, 0xffffffff
sub ebx, 0xffffffff
add ebx, eax
mov edi, ebx
pop ebx
pop eax
mov dword [esp + 4], edi
pop edi
push 0x35ff2bde
mov ebx, dword [esp]
lea esp, [esp + 4]
push esi
mov esi, ebx
neg esi
push eax
mov eax, esi
push ebx
mov ebx, dword [esp + 0xc]
push ebx
and ebx, eax
push ebx
push ecx
mov ecx, ebx
or ecx, 0xffffffff
add ecx, 1
add ecx, dword [esp + 8]
mov ebx, ecx
pop ecx
or ebx, eax
pop eax
add eax, ebx
pop ebx
pop ebx
mov dword [esp + 8], eax
mov eax, dword [esp]
lea esp, [esp + 4]
pop esi
ror dword [esp], 8
mov ebx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, dword [esp + 4]
or edi, 0xffffffff
sub edi, 0xffffffff
or edi, ecx
mov dword [esp + 4], edi
pop edi
mov ecx, ebx
push ebx
or ebx, 0xffffffff
add ebx, 1
sub ebx, ecx
push ebx
mov ecx, dword [esp]
lea esp, [esp + 4]
pop ebx
sub esi, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
pop ebx
push eax
mov eax, 0x1cc93a8c
push eax
push eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov eax, dword [esp + 8]
push ecx
mov cl, 2
shl eax, cl
mov ecx, dword [esp]
lea esp, [esp + 4]
push eax
mov eax, dword [esp + 0xc]
push eax
mov al, cl
or al, 0xff
not al
xor al, 0x1e
mov cl, al
pop eax
shr eax, cl
add dword [esp], eax
pop eax
pop ecx
mov dword [esp + 4], eax
pop eax
lea esp, [esp - 4]
mov dword [esp], 0x7324e4ca
pop eax
push esi
mov esi, eax
neg esi
add dword [esp + 4], esi
pop esi
pop eax
lea esp, [esp - 4]
push ebx
push esi
mov esi, ebx
or esi, 0xffffffff
sub esi, 0xffffffff
or esi, dword [esp + 8]
mov ebx, esi
pop esi
or ebx, 0xffffffff
neg ebx
sub ebx, 1
add ebx, ecx
mov dword [esp + 4], ebx
pop ebx
mov ecx, eax
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, esi
push ebx
and ebx, ecx
lea esp, [esp - 4]
mov dword [esp], ebx
push ecx
push ebx
pop ecx
push esi
mov esi, ecx
push ecx
mov ecx, 0xffffffff
push esi
and esi, ecx
push esi
mov esi, dword [esp + 4]
add esi, ecx
pop ecx
sub esi, ecx
pop ecx
pop ecx
mov ecx, esi
pop esi
inc ecx
add ecx, dword [esp + 8]
mov ebx, ecx
pop ecx
push edx
push ebx
pop edx
push eax
mov eax, ecx
not edx
or edx, eax
push edx
not dword [esp]
and edx, eax
or edx, dword [esp]
add esp, 4
pop eax
mov ebx, edx
pop edx
pop ecx
push eax
mov eax, ebx
push ebx
or ebx, 0xffffffff
add ebx, 1
sub ebx, eax
mov eax, ebx
pop ebx
sub ecx, eax
pop eax
push edi
mov edi, ebx
or edi, 0xffffffff
sub edi, 0xffffffff
add edi, dword [esp + 4]
mov ebx, edi
pop edi
lea esp, [esp + 4]
pop ebx
push ecx
pop esi
pop ecx
pop eax
lea esp, [esp - 4]
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, dword [esp + 4]
or ecx, 0xffffffff
push ebx
mov ebx, 1
add ecx, ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
or ecx, eax
mov dword [esp + 4], ecx
pop ecx
mov eax, esp
push ecx
mov ecx, dword [eax + 0xc]
or ecx, 0xffffffff
push ebx
mov ebx, 0xffffffff
neg ebx
push ecx
mov ecx, ecx
push ecx
and ecx, ebx
push ecx
mov ecx, dword [esp + 4]
or ecx, ebx
pop ebx
add ebx, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov ecx, dword [esp]
lea esp, [esp + 4]
mov ecx, ebx
pop ebx
add ecx, esi
mov dword [eax + 0xc], ecx
pop ecx
push esi
mov esi, eax
or esi, 0xffffffff
not esi
add esi, dword [esp + 4]
push ebx
mov ebx, eax
or ebx, 0xffffffff
push edx
mov edx, 1
push edi
mov edi, ebx
push edi
and edi, edx
push edi
mov edi, dword [esp + 4]
or edi, edx
pop edx
add edx, edi
pop edi
pop edi
mov ebx, edx
pop edx
add ebx, esi
mov eax, ebx
pop ebx
pop esi
lea esp, [esp + 4]
call fcn.006074b4
add esi, 0x2615
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, 0x11439d73
lea esp, [esp - 4]
mov dword [esp], eax
push eax
lea esp, [esp - 4]
mov dword [esp], ecx
push ecx
mov ecx, eax
or ecx, 0xffffffff
inc ecx
xor ecx, dword [esp + 0xc]
mov eax, ecx
pop ecx
push ecx
mov cl, 0x18
shl eax, cl
pop ecx
push eax
mov eax, dword [esp + 0xc]
push ebx
mov bl, cl
or bl, 0xff
inc bl
or bl, 8
mov cl, bl
pop ebx
shr eax, cl
xor dword [esp], eax
pop eax
pop ecx
push ecx
mov ecx, dword [esp + 8]
or ecx, 0xffffffff
sub ecx, 0xffffffff
xor ecx, eax
mov dword [esp + 8], ecx
pop ecx
pop eax
push 0x7311439b
pop eax
push ecx
mov ecx, dword [esp + 4]
push ebx
mov ebx, eax
push ecx
push ebx
not ebx
push ecx
push edx
mov edx, ecx
push eax
mov eax, ebx
push edx
or edx, eax
sub edx, eax
push eax
mov eax, dword [esp + 4]
neg eax
add edx, eax
pop eax
add esp, 4
push edi
mov edi, 1
neg edi
push ecx
mov ecx, edx
push ecx
and ecx, edi
push ecx
mov ecx, dword [esp + 4]
or ecx, edi
pop edi
add edi, ecx
pop ecx
pop ecx
mov edx, edi
pop edi
not edx
pop eax
mov ecx, edx
pop edx
sub ecx, dword [esp]
sub ecx, ebx
add esp, 4
push ebx
mov ebx, 1
neg ebx
push edi
mov edi, ecx
push edi
push esi
mov esi, edi
push eax
mov eax, ebx
push esi
or esi, eax
sub esi, dword [esp]
sub esi, eax
lea esp, [esp + 4]
sub esi, 1
not esi
pop eax
mov edi, esi
pop esi
push edi
push ebx
mov ebx, edi
or ebx, 0xffffffff
not ebx
xor ebx, dword [esp + 8]
mov edi, ebx
pop ebx
or edi, ebx
pop ebx
add ebx, edi
pop edi
pop edi
mov ecx, ebx
pop ebx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, dword [esp + 8]
mov ebx, dword [esp + 4]
push eax
push 0xffffffff
pop eax
xor ecx, eax
pop eax
push ebx
and ebx, ecx
sub ebx, dword [esp]
sub ebx, ecx
lea esp, [esp + 4]
sub ebx, 1
pop ecx
or ecx, ebx
not ecx
not ecx
pop ebx
pop ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], ecx
pop ecx
pop eax
push edi
push eax
pop edi
push esi
mov esi, esi
push esi
and esi, edi
lea esp, [esp - 4]
mov dword [esp], esi
push ebx
mov ebx, esi
or ebx, 0xffffffff
add ebx, 1
add ebx, dword [esp + 8]
mov esi, ebx
pop ebx
or esi, edi
mov edi, dword [esp]
lea esp, [esp + 4]
push ecx
mov ecx, esi
neg ecx
push ebx
mov ebx, ecx
push esi
or esi, 0xffffffff
sub esi, 0xffffffff
sub esi, ebx
mov ebx, esi
pop esi
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edi
lea esp, [esp - 4]
mov dword [esp], eax
and eax, ebx
push eax
mov eax, dword [esp + 4]
or eax, ebx
pop ebx
add ebx, eax
pop eax
pop eax
mov edi, ebx
pop ebx
pop ecx
pop esi
pop esi
mov esi, edi
push esi
mov esi, edi
or esi, 0xffffffff
inc esi
push edi
mov edi, esi
push edx
mov edx, dword [esp + 0xc]
push edi
push edx
not edx
and edi, edx
pop edx
push edi
mov edi, dword [esp + 4]
push edx
mov edx, 0xffffffff
sub edx, edi
mov edi, edx
pop edx
push ebx
mov ebx, edx
push ecx
mov ecx, edi
not ebx
not ecx
or ebx, ecx
not ebx
pop ecx
mov edx, ebx
pop ebx
pop edi
or edi, edx
pop edx
pop edx
mov esi, edi
pop edi
mov edi, esi
pop esi
lea esp, [esp + 4]
pop eax
lea esp, [esp - 4]
mov dword [esp], ebx
push 0xffffffff
pop ebx
cmp dword [esi], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
je 0x6057d2
lea esp, [esp - 4]
push ecx
mov ecx, dword [esp + 4]
or ecx, 0xffffffff
not ecx
or ecx, eax
mov dword [esp + 4], ecx
pop ecx
lea esp, [esp - 4]
mov dword [esp], ecx
lea esp, [esp - 4]
mov dword [esp], edx
lea esp, [esp - 4]
mov dword [esp], ebx
lea esp, [esp - 4]
mov dword [esp], ebp
lea esp, [esp - 4]
push edx
mov edx, dword [esp + 4]
or edx, 0xffffffff
not edx
push ecx
push esi
pop ecx
neg ecx
sub edx, ecx
pop ecx
mov dword [esp + 4], edx
pop edx
push edi
lea esp, [esp - 4]
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, dword [esp + 4]
or ecx, 0xffffffff
inc ecx
add ecx, ebx
mov dword [esp + 4], ecx
pop ecx
mov esi, esp
lea esp, [esp - 4]
mov dword [esp], esi
push 0x40
call fcn.006074b4
add esi, 0xfffff956
push ebx
push edx
mov edx, ebx
or edx, 0xffffffff
sub edx, 0xffffffff
or edx, 0x934feb5e
push edx
pop ebx
mov edx, dword [esp]
lea esp, [esp + 4]
push ebx
push ebx
push ecx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, ebx
or ecx, 0xffffffff
not ecx
xor ecx, dword [esp + 0xc]
mov ebx, ecx
pop ecx
push ecx
mov cl, 7
shl ebx, cl
pop ecx
push ebx
mov ebx, dword [esp + 0xc]
mov cl, 0x19
shr ebx, cl
or dword [esp], ebx
pop ebx
pop ecx
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, dword [esp + 8]
or edx, 0xffffffff
sub edx, 0xffffffff
add edx, ebx
mov dword [esp + 8], edx
pop edx
pop ebx
mov ebx, 0x580a50bd
push esi
push ebx
pop esi
neg esi
sub dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
pop ebx
push ecx
mov ecx, ebx
lea esp, [esp - 4]
mov dword [esp], edi
push esi
pop edi
lea esp, [esp - 4]
mov dword [esp], edi
and edi, ecx
push edi
push esi
mov esi, edi
or esi, 0xffffffff
add esi, 1
add esi, dword [esp + 8]
mov edi, esi
mov esi, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
push esi
mov esi, dword [esp + 4]
or esi, 0xffffffff
add esi, 1
xor esi, edx
mov dword [esp + 4], esi
pop esi
mov edx, edi
lea esp, [esp - 4]
mov dword [esp], ebx
push edx
mov edx, ebx
or edx, 0xffffffff
sub edx, 0xffffffff
add edx, ecx
mov ebx, edx
pop edx
push edx
and edx, ebx
lea esp, [esp - 4]
mov dword [esp], edx
push ecx
push edi
mov edi, ecx
or edi, 0xffffffff
add edi, 1
add edi, edx
mov ecx, edi
pop edi
push edi
lea edi, [ecx]
push ebx
mov ebx, 0xffffffff
push edi
and edi, ebx
push edi
mov edi, dword [esp + 4]
add edi, ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
push esi
mov esi, ebx
neg esi
add edi, esi
pop esi
pop ebx
pop ebx
mov ecx, edi
pop edi
sub ecx, 0xffffffff
or ecx, dword [esp + 8]
mov edx, ecx
pop ecx
add edx, ebx
pop ebx
sub edx, ebx
pop ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
mov edi, edx
pop edx
mov ecx, dword [esp]
lea esp, [esp + 4]
push edx
mov edx, edi
neg edx
push eax
mov eax, edx
neg eax
add ecx, eax
pop eax
pop edx
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, edi
or esi, 0xffffffff
sub esi, 0xffffffff
add esi, dword [esp + 4]
mov edi, esi
pop esi
lea esp, [esp + 4]
pop edi
push edi
push esi
pop edi
or edi, 0xffffffff
push esi
mov esi, 0xffffffff
neg esi
add edi, esi
pop esi
push ebx
mov ebx, edi
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ecx
push ebx
not ebx
push ebx
or ebx, eax
sub ebx, eax
sub ebx, dword [esp]
add esp, 4
sub ebx, 1
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, dword [esp + 4]
not eax
and eax, ebx
not eax
pop ebx
push ebx
push edx
mov edx, ebx
push ecx
mov ecx, eax
push edx
and edx, ecx
push edx
mov edx, dword [esp + 4]
add edx, ecx
pop ecx
sub edx, ecx
pop ecx
pop ecx
mov ebx, edx
pop edx
push ecx
mov ecx, eax
neg ecx
push edi
mov edi, ebx
push edi
and edi, ecx
push edi
mov edi, dword [esp + 4]
or edi, ecx
pop ecx
add ecx, edi
pop edi
pop edi
mov ebx, ecx
pop ecx
sub ebx, dword [esp]
lea esp, [esp + 4]
sub ebx, 1
mov eax, dword [esp]
lea esp, [esp + 4]
pop eax
mov edi, ebx
pop ebx
mov esi, edi
pop edi
push esi
mov esi, ecx
or esi, 0xffffffff
sub esi, 0xffffffff
or esi, dword [esp + 4]
lea ecx, [esi]
pop esi
lea esp, [esp + 4]
pop ebx
lea esp, [esp - 4]
push eax
mov eax, dword [esp + 4]
or eax, 0xffffffff
inc eax
add eax, esi
mov dword [esp + 4], eax
pop eax
call fcn.006074b4
add esi, 0x2072
push ebx
push 0xf1c4d273
pop ebx
push ebx
mov ebx, 0xe472d8d
push edx
push ebx
pop edx
neg edx
sub dword [esp + 4], edx
pop edx
ror dword [esp], 0x11
pop ebx
lea esp, [esp - 4]
push eax
mov eax, dword [esp + 4]
or eax, 0xffffffff
inc eax
add eax, ecx
mov dword [esp + 4], eax
pop eax
mov ecx, ebx
not ecx
push edx
mov edx, 1
add ecx, edx
pop edx
sub esi, ecx
push esi
mov esi, ecx
or esi, 0xffffffff
add esi, 1
xor esi, dword [esp + 4]
mov ecx, esi
pop esi
lea esp, [esp + 4]
pop ebx
pop ebx
push ecx
mov ecx, ebx
not ecx
push ebx
mov ebx, 1
neg ebx
sub ecx, ebx
pop ebx
add esi, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], edx
push ecx
mov ecx, edx
or ecx, 0xffffffff
push eax
mov eax, 1
neg eax
sub ecx, eax
pop eax
or ecx, 0x7e1e4927
mov edx, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
push esi
mov esi, dword [esp + 4]
push edi
mov edi, esi
push edx
mov edx, 0xffffffff
or edi, edx
not edi
not edi
pop edx
mov esi, edi
pop edi
not esi
add esi, edx
mov dword [esp + 4], esi
pop esi
push 0xf2fdb6d9
pop edx
push ecx
mov ecx, edx
push edi
mov edi, dword [esp + 8]
push edi
and edi, ecx
push edi
mov edi, dword [esp + 4]
or edi, ecx
pop ecx
add ecx, edi
mov edi, dword [esp]
lea esp, [esp + 4]
mov edi, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], ecx
pop ecx
rol dword [esp], 0x12
mov edx, dword [esp]
lea esp, [esp + 4]
push ecx
mov ecx, edx
push edi
mov edi, esi
push edi
and edi, ecx
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, dword [esp + 4]
push esi
mov esi, edi
push edx
push ecx
pop edx
push esi
and esi, edx
push esi
mov esi, dword [esp + 4]
push edi
mov edi, esi
push ebx
mov ebx, edx
push edi
push ebx
not ebx
and edi, ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
push edi
mov edi, dword [esp + 4]
not edi
and ebx, edi
pop edi
or edi, ebx
pop ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
mov esi, edi
mov edi, dword [esp]
lea esp, [esp + 4]
pop edx
xor esi, edx
pop edx
pop edx
mov edi, esi
pop esi
mov ecx, dword [esp]
lea esp, [esp + 4]
push esi
mov esi, edi
neg esi
push edi
push esi
pop edi
neg edi
add ecx, edi
pop edi
pop esi
pop edi
mov edi, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, esi
or ebx, 0xffffffff
add ebx, 1
or ebx, ecx
lea esi, [ebx]
pop ebx
pop ecx
push edi
mov edi, edx
or edi, 0xffffffff
add edi, 1
or edi, dword [esp + 4]
mov edx, edi
pop edi
lea esp, [esp + 4]
push esi
call fcn.006074b4
add esi, 0xfffff48c
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, 0x90bf609a
lea esp, [esp - 4]
mov dword [esp], ecx
push eax
push ecx
mov eax, dword [esp + 8]
push ecx
mov cl, 0xd
shr eax, cl
pop ecx
push eax
mov eax, dword [esp + 0xc]
mov cl, 0x13
shl eax, cl
or dword [esp], eax
pop eax
pop ecx
mov dword [esp + 4], eax
pop eax
mov ecx, 0x4d485fd
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, dword [esp + 4]
push ebx
mov ebx, ecx
push edx
lea esp, [esp - 4]
push eax
mov eax, dword [esp + 4]
or eax, 0xffffffff
not eax
xor eax, ebx
mov dword [esp + 4], eax
pop eax
not ebx
and edx, ebx
pop ebx
push edx
mov edx, dword [esp + 4]
not edx
and ebx, edx
pop edx
or edx, ebx
pop ebx
pop ebx
mov dword [esp + 4], edx
pop edx
mov ecx, dword [esp]
lea esp, [esp + 4]
push edx
lea edx, [ecx]
not edx
inc edx
lea esp, [esp - 4]
mov dword [esp], ebx
lea ebx, [edx]
neg ebx
add esi, ebx
pop ebx
pop edx
mov ecx, dword [esp]
lea esp, [esp + 4]
push esi
call fcn.00604b1f
mov eax, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, edi
or ecx, 0xffffffff
sub ecx, 0xffffffff
add ecx, dword [esp + 4]
mov edi, ecx
pop ecx
lea esp, [esp + 4]
mov esi, dword [esp]
lea esp, [esp + 4]
push esi
mov esi, ebp
or esi, 0xffffffff
inc esi
or esi, dword [esp + 4]
mov ebp, esi
pop esi
lea esp, [esp + 4]
mov ebx, dword [esp]
lea esp, [esp + 4]
pop edx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov eax, dword [esp]
lea esp, [esp + 4]
call fcn.006074b4
add esi, 0x1cdb
push ecx
mov ecx, 0x847c184c
lea esp, [esp - 4]
push ebx
mov ebx, dword [esp + 4]
or ebx, 0xffffffff
inc ebx
or ebx, ecx
mov dword [esp + 4], ebx
pop ebx
ror dword [esp], 0x1e
mov ecx, 0x11f06134
xor dword [esp], ecx
pop ecx
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ecx
lea esp, [esp - 4]
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, dword [esp + 4]
or ecx, 0xffffffff
add ecx, 1
or ecx, edi
mov dword [esp + 4], ecx
pop ecx
push esi
pop edi
push edi
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, edi
lea esp, [esp - 4]
mov dword [esp], ecx
push eax
pop ecx
lea esp, [esp - 4]
push edx
mov edx, dword [esp + 4]
or edx, 0xffffffff
sub edx, 0xffffffff
or edx, esi
mov dword [esp + 4], edx
pop edx
lea esp, [esp - 4]
mov dword [esp], ebx
push esi
pop ebx
push edx
mov edx, 0xffffffff
not ebx
or ebx, edx
push ebx
not dword [esp]
and ebx, edx
or ebx, dword [esp]
lea esp, [esp + 4]
pop edx
mov esi, ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
inc esi
push ecx
push ecx
and ecx, esi
neg dword [esp]
dec dword [esp]
or dword [esp], ecx
pop ecx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, dword [esp + 8]
push esi
not ecx
not esi
push edi
mov edi, ecx
push ecx
mov ecx, esi
push edi
or edi, ecx
sub edi, dword [esp]
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, ecx
neg ebx
add edi, ebx
pop ebx
lea esp, [esp + 4]
sub edi, 1
not edi
pop ecx
mov ecx, edi
pop edi
push eax
mov eax, ecx
push ecx
mov ecx, dword [esp + 8]
push eax
and eax, ecx
push eax
mov eax, dword [esp + 4]
add eax, ecx
pop ecx
sub eax, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
pop ecx
mov ecx, eax
pop eax
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, esi
or edx, 0xffffffff
sub edx, 0xffffffff
or edx, dword [esp + 4]
mov esi, edx
pop edx
lea esp, [esp + 4]
pop esi
not ecx
push eax
push edx
mov edx, eax
or edx, 0xffffffff
sub edx, 0xffffffff
add edx, ecx
mov eax, edx
pop edx
push edx
mov edx, esi
push eax
and eax, edx
push eax
mov eax, dword [esp + 4]
push edi
mov edi, eax
push ebx
mov ebx, edx
push edi
and edi, ebx
add edi, edi
push edi
mov edi, dword [esp + 4]
add edi, ebx
pop ebx
sub edi, ebx
pop ebx
pop ebx
mov eax, edi
pop edi
pop edx
push esi
push ecx
mov ecx, esi
or ecx, 0xffffffff
add ecx, 1
add ecx, eax
mov esi, ecx
pop ecx
push eax
mov eax, edx
lea esp, [esp - 4]
mov dword [esp], esi
push eax
not eax
or esi, eax
not esi
push esi
mov esi, dword [esp + 8]
mov eax, dword [esp + 4]
not esi
push ecx
mov ecx, eax
push edx
mov edx, esi
push ecx
and ecx, edx
push ecx
mov ecx, dword [esp + 4]
add ecx, edx
pop edx
sub ecx, edx
pop edx
pop edx
mov eax, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
not eax
pop esi
push esi
and esi, eax
sub esi, dword [esp]
sub esi, eax
add esp, 4
sub esi, 1
not esi
pop eax
pop eax
pop eax
push esi
pop eax
pop esi
mov edx, dword [esp]
lea esp, [esp + 4]
pop edx
mov ecx, eax
pop eax
push ecx
and ecx, esi
neg dword [esp]
dec dword [esp]
or ecx, dword [esp]
add esp, 4
or esi, 0xffffffff
add esi, 1
not ecx
push edx
push ecx
pop edx
push eax
mov eax, esi
or edx, eax
not edx
push ebx
push ecx
mov ebx, edx
or ecx, 0xffffffff
not ecx
not ebx
or ebx, ecx
pop ecx
mov edx, ebx
pop ebx
pop eax
mov ecx, edx
mov edx, dword [esp]
lea esp, [esp + 4]
mov esi, ecx
pop ecx
lea esp, [esp + 4]
mov ecx, dword [esp]
lea esp, [esp + 4]
mov edi, esi
pop esi
push edi
push eax
mov eax, edi
or eax, 0xffffffff
inc eax
add eax, dword [esp + 8]
push eax
pop edi
pop eax
or edi, eax
pop eax
push ecx
mov ecx, edi
push eax
or eax, 0xffffffff
add eax, 1
sub eax, ecx
mov ecx, eax
pop eax
push edx
mov edx, ecx
neg edx
push ebx
mov ebx, eax
push ebx
and ebx, edx
push ebx
mov ebx, dword [esp + 4]
or ebx, edx
pop edx
add edx, ebx
pop ebx
pop ebx
push edx
mov eax, dword [esp]
lea esp, [esp + 4]
pop edx
mov ecx, dword [esp]
lea esp, [esp + 4]
pop edi
mov edi, dword [esp]
lea esp, [esp + 4]
mov esi, eax
pop eax
mov ecx, dword [esp]
lea esp, [esp + 4]
cmp dword [esi], 0xffffffff
je 0x6074a8
call fcn.006074b4
add esi, 0x19ad
push eax
mov eax, 0x870bba6a
lea esp, [esp - 4]
push ebx
mov ebx, dword [esp + 4]
or ebx, 0xffffffff
sub ebx, 0xffffffff
push ecx
mov ecx, ebx
push ebx
mov ebx, eax
push ecx
and ecx, ebx
push ebx
mov ebx, dword [esp + 4]
neg ebx
add ecx, ebx
pop ebx
sub ecx, ebx
add esp, 4
sub ecx, 1
not ecx
pop ebx
mov ebx, ecx
pop ecx
mov dword [esp + 4], ebx
pop ebx
push edi
push ecx
mov edi, dword [esp + 8]
lea esp, [esp - 4]
mov dword [esp], ecx
push edx
mov dl, cl
or dl, 0xff
push ebx
or bl, 0xff
inc bl
mov bl, 1
push ecx
mov cl, dl
and ecx, 0xff
push ecx
and cl, bl
push ecx
mov cl, byte [esp + 4]
or cl, bl
pop ebx
add bl, cl
pop ecx
pop ecx
mov dl, bl
pop ebx
or dl, 0x16
mov cl, dl
mov edx, dword [esp]
lea esp, [esp + 4]
shl edi, cl
pop ecx
push edi
mov edi, dword [esp + 0xc]
push edx
mov dl, cl
push ebx
push eax
mov al, bl
or al, 0xff
sub al, 0xff
add al, dl
mov bl, al
pop eax
push ecx
mov cl, 0xff
not bl
not cl
and bl, cl
not bl
pop ecx
lea esp, [esp - 4]
mov dword [esp], eax
mov al, dl
or al, 0xff
not al
xor al, bl
mov dl, al
pop eax
pop ebx
add dl, 1
or dl, 0xa
mov cl, dl
pop edx
shr edi, cl
or dword [esp], edi
pop edi
pop ecx
mov dword [esp + 4], edi
pop edi
push 0x9aa1c2e8
pop eax
push esi
mov esi, dword [esp + 4]
push edx
mov edx, eax
push esi
and esi, edx
add esi, esi
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, dword [esp + 4]
add esi, edx
pop edx
push ecx
lea ecx, [edx]
neg ecx
add esi, ecx
pop ecx
mov edx, dword [esp]
lea esp, [esp + 4]
pop edx
mov dword [esp + 4], esi
pop esi
pop eax
push edx
mov edx, eax
not edx
inc edx
sub esi, edx
pop edx
mov eax, dword [esp]
lea esp, [esp + 4]
push ebx
push edx
push ebx
mov ebx, edx
or ebx, 0xffffffff
add ebx, 1
add ebx, 0x5409cc07
push ebx
pop edx
pop ebx
push edx
mov edx, 0x3457ccc
add dword [esp], edx
push edx
push ecx
mov edx, dword [esp + 8]
lea esp, [esp - 4]
push eax
mov eax, dword [esp + 4]
or eax, 0xffffffff
add eax, 1
xor eax, ecx
mov dword [esp + 4], eax
pop eax
mov cl, 0xd
shr edx, cl
pop ecx
push edx
mov edx, dword [esp + 0xc]
push ebx
mov bl, cl
or bl, 0xff
sub bl, 0xff
or bl, 0x13
mov cl, bl
pop ebx
shl edx, cl
add dword [esp], edx
mov edx, dword [esp]
lea esp, [esp + 4]
pop ecx
mov dword [esp + 4], edx
push eax
mov eax, edx
or eax, 0xffffffff
add eax, 1
or eax, dword [esp + 4]
mov edx, eax
pop eax
lea esp, [esp + 4]
mov edx, 0x469aba7b
push ecx
lea ecx, [edx]
neg ecx
add dword [esp + 4], ecx
pop ecx
mov edx, dword [esp]
lea esp, [esp + 4]
push eax
push ecx
mov ecx, eax
push edx
mov edx, ecx
push ecx
push edi
mov edi, ecx
or edi, 0xffffffff
push edx
mov edx, 0xffffffff
neg edx
add edi, edx
pop edx
add edi, 0xffffffff
mov ecx, edi
pop edi
lea esp, [esp - 4]
mov dword [esp], edx
and edx, ecx
push edx
mov edx, dword [esp + 4]
add edx, ecx
pop ecx
sub edx, ecx
pop ecx
pop ecx
mov ecx, edx
pop edx
push eax
push 1
mov eax, dword [esp]
lea esp, [esp + 4]
add ecx, eax
mov eax, dword [esp]
lea esp, [esp + 4]
or ecx, ebx
mov eax, ecx
pop ecx
push ebx
mov ebx, edx
push esi
mov esi, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ebx
not esi
not eax
push ecx
mov ecx, esi
push edx
mov edx, eax
not ecx
neg edx
sub edx, 1
push ecx
and ecx, edx
sub ecx, edx
sub ecx, dword [esp]
add esp, 4
sub ecx, 1
pop edx
mov esi, ecx
pop ecx
not esi
mov eax, dword [esp]
lea esp, [esp + 4]
mov eax, esi
pop esi
not eax
neg eax
dec eax
mov ebx, dword [esp]
lea esp, [esp + 4]
push eax
pop ebx
pop eax
mov edx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, 1
add ebx, edi
pop edi
cmp ebx, dword [esi]
jne 0x605dfc
push edx
push 0x7e069a0c
mov edx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], edx
push eax
push ecx
mov eax, dword [esp + 8]
push ecx
push eax
mov al, cl
or al, 0xff
not al
xor al, 8
mov cl, al
mov eax, dword [esp]
lea esp, [esp + 4]
shr eax, cl
pop ecx
push eax
mov eax, dword [esp + 0xc]
push edx
mov dl, cl
or dl, 0xff
add dl, 1
or dl, 0x18
mov cl, dl
pop edx
shl eax, cl
xor dword [esp], eax
pop eax
mov ecx, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], eax
pop eax
mov edx, 0xf381f965
push ecx
mov ecx, edx
neg ecx
push ebx
mov ebx, ecx
not ebx
inc ebx
push edx
mov edx, dword [esp + 0xc]
push edx
and edx, ebx
push edx
mov edx, dword [esp + 4]
or edx, ebx
pop ebx
add ebx, edx
pop edx
pop edx
mov dword [esp + 8], ebx
pop ebx
pop ecx
pop edx
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ebx
push edi
mov edi, eax
push ecx
push edi
mov edi, ecx
or edi, 0xffffffff
not edi
xor edi, 0xffffffff
mov ecx, edi
pop edi
push edi
and edi, ecx
push edi
mov edi, dword [esp + 4]
lea esp, [esp - 4]
mov dword [esp], ebx
push edx
mov edx, ebx
or edx, 0xffffffff
not edx
add edx, edi
mov ebx, edx
pop edx
push edx
mov edx, ecx
lea esp, [esp - 4]
mov dword [esp], ebx
and ebx, edx
add ebx, ebx
push ebx
mov ebx, dword [esp + 4]
add ebx, edx
pop edx
sub ebx, edx
pop edx
mov edx, dword [esp]
lea esp, [esp + 4]
mov edi, ebx
pop ebx
pop ecx
xor edi, ecx
pop ecx
pop ecx
push edi
pop eax
pop edi
not eax
add eax, edx
push eax
pop ebx
mov eax, dword [esp]
lea esp, [esp + 4]
mov edx, dword [esp]
lea esp, [esp + 4]
xchg dword [esi], ebx
test ebx, ebx
jne 0x605c5f
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ebx
push ecx
mov ecx, eax
push eax
mov eax, 0xffffffff
not ecx
not eax
push ecx
or ecx, eax
sub ecx, dword [esp]
sub ecx, eax
add esp, 4
sub ecx, 1
pop eax
mov eax, ecx
pop ecx
inc eax
or eax, dword [esp + 4]
mov ebx, eax
pop eax
lea esp, [esp + 4]
call fcn.006074b4
add esi, 0x152b
lea esp, [esp - 4]
push edi
push ecx
mov ecx, edi
or ecx, 0xffffffff
add ecx, 1
push edx
mov edx, ecx
push eax
mov eax, dword [esp + 0x10]
push edx
and edx, eax
add edx, edx
push edx
mov edx, dword [esp + 4]
add edx, eax
pop eax
sub edx, eax
pop eax
pop eax
mov ecx, edx
pop edx
mov edi, ecx
pop ecx
push ebx
mov ebx, edi
push ecx
mov ecx, 0xffffffff
push ebx
and ebx, ecx
sub ebx, dword [esp]
sub ebx, ecx
add esp, 4
sub ebx, 1
not ebx
pop ecx
mov edi, ebx
pop ebx
add edi, 1
add edi, ebx
mov dword [esp + 4], edi
pop edi
lea esp, [esp - 4]
mov dword [esp], 0xac97308c
pop ebx
push ebx
mov ebx, 0xac9730ec
push edi
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, edi
push esi
mov esi, ebx
push ebx
mov ebx, 0xffffffff
lea esp, [esp - 4]
mov dword [esp], esi
and esi, ebx
push esi
mov esi, dword [esp + 4]
xor esi, ebx
pop ebx
xor esi, ebx
pop ebx
pop ebx
mov ebx, esi
pop esi
push esi
mov esi, 0xffffffff
neg esi
add ebx, esi
mov esi, dword [esp]
lea esp, [esp + 4]
or ebx, dword [esp + 8]
mov edi, ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, ebx
push edi
push edx
not edx
and edi, edx
mov edx, dword [esp]
lea esp, [esp + 4]
push edi
mov edi, dword [esp + 4]
not edi
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, edx
push ecx
mov ecx, edi
push esi
push ecx
or esi, 0xffffffff
not esi
not ecx
or ecx, esi
push ecx
mov ecx, dword [esp + 8]
push ecx
and ecx, esi
push ebx
mov ebx, dword [esp + 4]
lea esp, [esp - 4]
push ebx
mov ebx, dword [esp + 4]
or ebx, 0xffffffff
inc ebx
add ebx, ecx
mov dword [esp + 4], ebx
pop ebx
or ecx, 0xffffffff
not ecx
push ecx
not ebx
not ecx
and ebx, ecx
or ebx, dword [esp]
pop ecx
pop ecx
mov dword [esp + 4], ebx
pop ebx
or dword [esp], ecx
pop ecx
mov esi, dword [esp]
lea esp, [esp + 4]
push esi
not ecx
not esi
and ecx, esi
or ecx, dword [esp]
pop esi
not ecx
or ecx, esi
or esi, 0xffffffff
inc esi
push esi
not ecx
not esi
and ecx, esi
or ecx, dword [esp]
pop esi
mov esi, ecx
pop ecx
add esp, 4
pop ecx
mov edx, esi
pop esi
pop edi
or edi, edx
mov edx, dword [esp]
lea esp, [esp + 4]
pop edx
mov dword [esp + 4], edi
pop edi
rol dword [esp], 0x1c
mov ebx, dword [esp]
lea esp, [esp + 4]
push ecx
lea ecx, [ebx]
lea esp, [esp - 4]
mov dword [esp], edx
or edx, 0xffffffff
inc edx
sub edx, ecx
mov ecx, edx
pop edx
sub esi, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
pop ebx
cmp dword [esi], 0xffffffff
je 0x606e5a
call fcn.006074b4
add esi, 0x1365
lea esp, [esp - 4]
push ecx
mov ecx, dword [esp + 4]
or ecx, 0xffffffff
inc ecx
push ebx
mov ebx, edx
push eax
mov eax, ecx
push eax
and eax, ebx
push eax
mov eax, dword [esp + 4]
or eax, ebx
pop ebx
add ebx, eax
pop eax
pop eax
mov ecx, ebx
pop ebx
mov dword [esp + 4], ecx
pop ecx
push 0x3d58a4db
pop edx
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, 0xa011281c
add dword [esp], edx
push 0xdd69b4f7
pop edx
sub dword [esp], edx
ror dword [esp], 0xa
pop edx
lea esp, [esp - 4]
mov dword [esp], ecx
lea ecx, [edx]
push ebx
mov ebx, esi
push ebx
and ebx, ecx
lea esp, [esp - 4]
mov dword [esp], ebx
push edi
mov edi, ebx
or edi, 0xffffffff
sub edi, 0xffffffff
add edi, dword [esp + 8]
mov ebx, edi
pop edi
or ebx, ecx
pop ecx
add ecx, ebx
push edx
push ebx
mov edx, dword [esp]
lea esp, [esp + 4]
or edx, 0xffffffff
inc edx
or edx, dword [esp + 4]
mov ebx, edx
pop edx
lea esp, [esp + 4]
mov ebx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, dword [esp + 4]
or edx, 0xffffffff
inc edx
xor edx, ecx
mov dword [esp + 4], edx
pop edx
pop esi
pop ecx
pop edx
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, esi
add ebx, 0x1c070
lea esp, [esp - 4]
push esi
mov esi, dword [esp + 4]
or esi, 0xffffffff
inc esi
or esi, eax
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, dword [esi]
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
push edi
mov edi, eax
or edi, 0xffffffff
sub edi, 0xffffffff
push eax
mov eax, edi
push ebx
mov ebx, dword [esp + 0xc]
push ebx
push eax
not dword [esp + 4]
or eax, dword [esp + 4]
push eax
mov eax, dword [esp + 4]
push ebx
not eax
or eax, dword [esp]
and eax, dword [esp + 4]
lea esp, [esp + 0x10]
not eax
pop ebx
mov edi, eax
pop eax
push esi
mov esi, eax
or esi, 0xffffffff
add esi, 1
or esi, edi
mov eax, esi
pop esi
pop edi
lea esp, [esp + 4]
push edx
mov edx, 0x1b4865b4
lea esp, [esp - 4]
mov dword [esp], edx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, edx
push edi
push ecx
pop edi
push ebx
mov ebx, 0xffffffff
push ebx
or ebx, 0xffffffff
add ebx, 1
sub ebx, edi
mov edi, ebx
pop ebx
sub edi, 1
or edi, ebx
push ebx
not edi
not ebx
and edi, ebx
or edi, dword [esp]
pop ebx
pop ebx
mov ecx, edi
pop edi
sub ecx, 0xffffffff
add ecx, 0xe52ccdbe
mov edx, ecx
pop ecx
push edi
push esi
mov esi, edi
or esi, 0xffffffff
inc esi
xor esi, dword [esp + 8]
mov edi, esi
pop esi
push ebx
mov ebx, edx
push edi
not edi
or edi, ebx
push edi
and edi, ebx
not dword [esp]
or edi, dword [esp]
add esp, 4
push edi
mov edi, dword [esp + 4]
and edi, ebx
push eax
mov eax, edi
push edx
or edx, 0xffffffff
add edx, 1
not eax
or eax, edx
mov edi, eax
pop edx
pop eax
and edi, dword [esp]
add esp, 8
pop ebx
push eax
mov eax, dword [esp + 8]
or eax, 0xffffffff
inc eax
xor eax, edi
mov dword [esp + 8], eax
mov eax, dword [esp]
lea esp, [esp + 4]
pop edi
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, edx
push edx
lea edx, [esi]
push ecx
mov ecx, 0xffffffff
push ecx
mov ecx, 0xffffffff
sub ecx, edx
mov edx, ecx
pop ecx
push ebx
mov ebx, 0xffffffff
sub ebx, ecx
mov ecx, ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], edx
or edx, ecx
sub edx, ecx
sub edx, dword [esp]
lea esp, [esp + 4]
sub edx, 1
pop ecx
mov esi, edx
pop edx
sub esi, 0xffffffff
push eax
mov eax, esi
push edx
mov edx, 0xd093c947
not eax
not edx
and eax, edx
push edx
mov edx, 0xffffffff
sub edx, eax
mov eax, edx
pop edx
pop edx
mov esi, eax
pop eax
mov edx, esi
pop esi
sub dword [esp], edx
push edx
push ecx
mov edx, dword [esp + 8]
push ecx
mov cl, 0x18
shl edx, cl
pop ecx
push edx
mov edx, dword [esp + 0xc]
mov cl, 8
shr edx, cl
xor dword [esp], edx
pop edx
pop ecx
mov dword [esp + 4], edx
pop edx
pop edx
push edi
push eax
mov eax, edi
or eax, 0xffffffff
inc eax
add eax, edx
mov edi, eax
pop eax
not edi
add edi, 1
push eax
mov eax, eax
push eax
push ecx
mov ecx, eax
lea esp, [esp - 4]
mov dword [esp], eax
push esi
mov esi, eax
or esi, 0xffffffff
inc esi
xor esi, edi
mov eax, esi
pop esi
push ecx
push eax
push edx
lea edx, [ecx]
push ecx
mov ecx, 0xffffffff
push edx
and edx, ecx
push edx
mov edx, dword [esp + 4]
xor edx, ecx
pop ecx
push edi
mov edi, edx
push eax
mov eax, ecx
push edi
or edi, eax
push edi
push ecx
mov edi, dword [esp + 8]
mov ecx, eax
not edi
not ecx
or edi, ecx
pop ecx
and edi, dword [esp]
lea esp, [esp + 8]
pop eax
push edi
pop edx
pop edi
pop ecx
pop ecx
lea ecx, [edx]
mov edx, dword [esp]
lea esp, [esp + 4]
sub ecx, 0xffffffff
not eax
push ebx
mov ebx, eax
push eax
push ecx
pop eax
push ebx
and ebx, eax
push ebx
push eax
push ebx
pop eax
or eax, 0xffffffff
sub eax, 0xffffffff
xor eax, dword [esp + 8]
mov ebx, eax
pop eax
xor ebx, eax
pop eax
xor ebx, eax
mov eax, dword [esp]
lea esp, [esp + 4]
pop eax
mov eax, ebx
pop ebx
push eax
mov eax, dword [esp + 8]
push edx
push edi
mov edi, edx
push ebx
mov ebx, edi
push edx
mov edx, 0xffffffff
push ebx
and ebx, edx
push ebx
mov ebx, dword [esp + 4]
add ebx, edx
pop edx
sub ebx, edx
pop edx
pop edx
mov edi, ebx
pop ebx
inc edi
add edi, 0xffffffff
mov edx, edi
pop edi
sub edx, eax
mov eax, edx
pop edx
or eax, ecx
pop ecx
not eax
push edi
mov edi, eax
push ebx
mov ebx, ecx
neg edi
dec edi
or edi, ebx
push ebx
not edi
neg ebx
dec ebx
and edi, ebx
or edi, dword [esp]
mov ebx, dword [esp]
lea esp, [esp + 4]
pop ebx
mov eax, edi
pop edi
not eax
or eax, ecx
or ecx, 0xffffffff
sub ecx, 0xffffffff
not eax
push edx
mov edx, eax
push ebx
mov ebx, ecx
push edx
and edx, ebx
push edx
mov edx, dword [esp + 4]
add edx, ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
sub edx, ebx
pop ebx
pop ebx
mov eax, edx
pop edx
push eax
pop ecx
mov eax, dword [esp]
lea esp, [esp + 4]
lea esp, [esp + 4]
pop eax
mov eax, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, dword [esp + 4]
lea esp, [esp - 4]
mov dword [esp], edx
push eax
pop edx
push ebx
mov ebx, edi
not edx
or edx, ebx
lea esp, [esp - 4]
mov dword [esp], edx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, edx
push eax
mov eax, ebx
and ecx, eax
not ecx
not ecx
pop eax
mov edx, ecx
pop ecx
not dword [esp]
or edx, dword [esp]
add esp, 4
pop ebx
push edx
pop eax
pop edx
mov edi, dword [esp]
lea esp, [esp + 4]
push ecx
mov ecx, eax
neg ecx
sub edi, ecx
pop ecx
mov eax, dword [esp]
lea esp, [esp + 4]
mov eax, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], edi
mov eax, dword [esp]
lea esp, [esp + 4]
mov edi, dword [esp]
lea esp, [esp + 4]
pop edx
push edx
lea esp, [esp - 4]
mov dword [esp], ecx
push eax
pop edx
lea esp, [esp - 4]
mov dword [esp], ecx
lea esp, [esp - 4]
push edx
mov edx, dword [esp + 4]
or edx, 0xffffffff
inc edx
or edx, ebx
mov dword [esp + 4], edx
pop edx
mov ebx, 0x62f82202
lea esp, [esp - 4]
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, dword [esp + 4]
or eax, 0xffffffff
add eax, 1
xor eax, ebx
mov dword [esp + 4], eax
pop eax
push 0x5d07ddff
mov ebx, dword [esp]
lea esp, [esp + 4]
push ecx
mov ecx, ebx
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, dword [esp + 8]
push esi
and esi, ecx
push esi
mov esi, dword [esp + 4]
or esi, ecx
pop ecx
add ecx, esi
push edi
mov edi, esi
or edi, 0xffffffff
not edi
xor edi, dword [esp + 4]
mov esi, edi
pop edi
lea esp, [esp + 4]
pop esi
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
rol dword [esp], 4
push edi
mov edi, ebx
or edi, 0xffffffff
sub edi, 0xffffffff
xor edi, dword [esp + 4]
mov ebx, edi
mov edi, dword [esp]
lea esp, [esp + 4]
lea esp, [esp + 4]
lea esp, [esp - 4]
push eax
mov eax, dword [esp + 4]
or eax, 0xffffffff
sub eax, 0xffffffff
add eax, ebx
mov dword [esp + 4], eax
pop eax
pop ecx
push esi
mov esi, ebx
or esi, 0xffffffff
add esi, 1
or esi, dword [esp + 4]
mov ebx, esi
pop esi
lea esp, [esp + 4]
shl edx, cl
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, eax
push ebx
lea esp, [esp - 4]
push eax
mov eax, dword [esp + 4]
or eax, 0xffffffff
not eax
add eax, 0xc4307bfc
mov dword [esp + 4], eax
pop eax
pop ebx
push ebx
rol dword [esp], 0x1e
lea esp, [esp - 4]
mov dword [esp], 0xcef3e105
pop ebx
push eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
push esi
mov esi, ecx
push edx
mov edx, 0xffffffff
or esi, edx
not esi
not esi
pop edx
mov ecx, esi
mov esi, dword [esp]
lea esp, [esp + 4]
not ecx
push edx
mov edx, ebx
push edi
mov edi, ecx
push edi
and edi, edx
push edi
mov edi, dword [esp + 4]
or edi, edx
pop edx
add edx, edi
pop edi
pop edi
mov ecx, edx
pop edx
mov eax, ecx
pop ecx
neg eax
sub dword [esp + 4], eax
pop eax
pop ebx
push ebx
push ebx
mov ebx, ecx
or ebx, 0xffffffff
inc ebx
xor ebx, dword [esp + 4]
mov ecx, ebx
pop ebx
lea esp, [esp + 4]
pop ebx
shr edx, cl
push ebx
mov ebx, dword [esp + 4]
push ecx
mov ecx, edx
push ebx
push ecx
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ebx
push ebx
mov ebx, ecx
push eax
or eax, 0xffffffff
sub eax, 0xffffffff
push ebx
push ebx
not dword [esp]
push esi
mov esi, ebx
push ecx
push ebx
mov ebx, ecx
or ebx, 0xffffffff
push edi
mov edi, 0xffffffff
neg edi
add ebx, edi
pop edi
add ebx, eax
mov ecx, ebx
pop ebx
push esi
or esi, ecx
sub esi, dword [esp]
sub esi, ecx
add esp, 4
sub esi, 1
not esi
mov ecx, dword [esp]
lea esp, [esp + 4]
mov ebx, esi
pop esi
or ebx, dword [esp]
lea esp, [esp + 4]
push ebx
mov ebx, dword [esp + 8]
not ebx
or ebx, eax
pop eax
push eax
not ebx
not eax
and ebx, eax
or ebx, dword [esp]
pop eax
lea esp, [esp - 4]
mov dword [esp], ebx
not dword [esp]
and ebx, eax
push edi
mov edi, dword [esp + 4]
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ebx
not edi
or edi, eax
not edi
or edi, eax
pop eax
mov dword [esp + 4], edi
pop edi
pop ebx
or eax, 0xffffffff
add eax, 1
lea esp, [esp - 4]
mov dword [esp], eax
not ebx
not eax
and ebx, eax
or ebx, dword [esp]
pop eax
mov eax, ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
add esp, 4
pop ebx
mov ebx, eax
mov eax, dword [esp]
lea esp, [esp + 4]
push ebx
mov ebx, dword [esp + 8]
not ebx
not dword [esp + 4]
and ebx, dword [esp + 4]
or ebx, dword [esp]
lea esp, [esp + 0xc]
not ebx
pop ecx
mov dword [esp + 4], ebx
pop ebx
pop edx
mov ecx, dword [esp]
lea esp, [esp + 4]
push ecx
push eax
pop ecx
or ecx, 0xffffffff
inc ecx
add ecx, edx
mov eax, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
pop edx
push eax
pop dword [esi]
push edx
mov edx, 0x1db35445
push edx
mov edx, 0xe24cac3b
lea esp, [esp - 4]
push ebx
mov ebx, dword [esp + 4]
or ebx, 0xffffffff
sub ebx, 0xffffffff
add ebx, edi
mov dword [esp + 4], ebx
pop ebx
mov edi, edx
neg edi
sub dword [esp + 4], edi
pop edi
push ebx
push ecx
mov ebx, dword [esp + 8]
push ecx
push edx
mov dl, cl
or dl, 0xff
push ecx
mov ecx, 1
add dl, cl
pop ecx
or dl, 5
mov cl, dl
pop edx
shr ebx, cl
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], ebx
push edx
push ebx
pop edx
or edx, 0xffffffff
inc edx
add edx, dword [esp + 0x10]
mov ebx, edx
pop edx
push eax
mov al, cl
push ecx
mov cl, al
push edx
mov dl, 0xff
push edx
not cl
not dl
and cl, dl
or cl, byte [esp]
pop edx
push edx
not cl
not dl
and cl, dl
or cl, byte [esp]
pop edx
pop edx
mov al, cl
pop ecx
sub al, 0xff
push ebx
or bl, 0xff
not bl
mov bl, 0x1b
neg bl
sub al, bl
pop ebx
mov cl, al
pop eax
shl ebx, cl
or dword [esp], ebx
pop ebx
pop ecx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, dword [esp + 8]
or ecx, 0xffffffff
inc ecx
or ecx, ebx
mov dword [esp + 8], ecx
pop ecx
pop ebx
pop edx
lea esp, [esp - 4]
push eax
mov eax, dword [esp + 4]
or eax, 0xffffffff
add eax, 1
add eax, ecx
mov dword [esp + 4], eax
pop eax
mov ecx, edx
neg ecx
sub esi, ecx
pop ecx
push eax
mov eax, edx
or eax, 0xffffffff
sub eax, 0xffffffff
add eax, dword [esp + 4]
mov edx, eax
pop eax
lea esp, [esp + 4]
cmp esi, ebx
jb 0x6062c4
mov eax, dword [esp]
lea esp, [esp + 4]
call fcn.006074b4
add esi, 0x926
push eax
push edx
mov edx, eax
or edx, 0xffffffff
push eax
mov eax, 0xffffffff
neg eax
add edx, eax
pop eax
push edi
mov edi, edx
push ebx
mov ebx, 0xa54bedf5
push edi
push ebx
not dword [esp]
or edi, dword [esp]
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, dword [esp + 8]
push ebx
not edi
push ebx
mov ebx, edi
push eax
mov eax, dword [esp + 8]
push ebx
and ebx, eax
sub ebx, dword [esp]
sub ebx, eax
lea esp, [esp + 4]
sub ebx, 1
not ebx
pop eax
mov edi, ebx
pop ebx
and edi, dword [esp + 4]
lea esp, [esp + 0x10]
not edi
pop ebx
mov edx, edi
pop edi
mov eax, edx
pop edx
push eax
rol dword [esp], 4
push edx
mov edx, eax
or edx, 0xffffffff
inc edx
push edi
mov edi, 0x13beb8d
neg edi
push eax
mov eax, edi
neg eax
push edx
mov edx, edx
push edx
and edx, eax
push edx
mov edx, dword [esp + 4]
or edx, eax
pop eax
add eax, edx
pop edx
pop edx
mov edx, eax
pop eax
pop edi
lea esp, [esp - 4]
mov dword [esp], edx
pop eax
pop edx
add dword [esp], eax
mov eax, 0x55facae1
push ecx
mov ecx, eax
neg ecx
push esi
mov esi, dword [esp + 8]
push esi
and esi, ecx
push esi
push ecx
mov ecx, esi
or ecx, 0xffffffff
inc ecx
or ecx, dword [esp + 8]
mov esi, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
or esi, ecx
pop ecx
add ecx, esi
pop esi
pop esi
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
pop eax
lea esp, [esp - 4]
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, dword [esp + 4]
or esi, 0xffffffff
sub esi, 0xffffffff
or esi, ebx
mov dword [esp + 4], esi
pop esi
mov ebx, eax
neg ebx
sub esi, ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
pop eax
lea esp, [esp - 4]
mov dword [esp], ecx
push esi
mov esi, ecx
push eax
mov eax, esi
push ebx
mov ebx, 0xffffffff
push eax
and eax, ebx
push eax
mov eax, dword [esp + 4]
xor eax, ebx
pop ebx
xor eax, ebx
pop ebx
pop ebx
mov esi, eax
pop eax
not esi
or esi, 0x95e7e73d
mov ecx, esi
pop esi
push ecx
push eax
push ecx
push edx
mov edx, eax
or edx, 0xffffffff
inc edx
or edx, dword [esp + 0xc]
mov eax, edx
pop edx
push ecx
mov cl, 0x1b
shr eax, cl
mov ecx, dword [esp]
lea esp, [esp + 4]
push eax
mov eax, dword [esp + 0xc]
mov cl, 5
shl eax, cl
add dword [esp], eax
pop eax
pop ecx
push edi
mov edi, dword [esp + 8]
or edi, 0xffffffff
sub edi, 0xffffffff
or edi, eax
mov dword [esp + 8], edi
pop edi
pop eax
push 0x6a7819f5
pop ecx
sub dword [esp], ecx
mov ecx, 0x5284cdbe
push eax
mov eax, ecx
not eax
add eax, 1
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, dword [esp + 8]
push ebx
and ebx, eax
push ebx
mov ebx, dword [esp + 4]
or ebx, eax
mov eax, dword [esp]
lea esp, [esp + 4]
add eax, ebx
push edx
mov edx, ebx
or edx, 0xffffffff
not edx
xor edx, dword [esp + 4]
mov ebx, edx
pop edx
lea esp, [esp + 4]
push edi
mov edi, ebx
or edi, 0xffffffff
sub edi, 0xffffffff
add edi, dword [esp + 4]
mov ebx, edi
pop edi
lea esp, [esp + 4]
mov dword [esp + 4], eax
pop eax
pop ecx
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, ebx
or edi, 0xffffffff
sub edi, 0xffffffff
push edx
mov edx, edi
push eax
mov eax, ecx
not edx
xor edx, eax
push eax
mov eax, 0xffffffff
sub eax, edx
mov edx, eax
pop eax
push edi
mov edi, eax
or edi, 0xffffffff
sub edi, 0xffffffff
or edi, dword [esp + 4]
mov eax, edi
pop edi
lea esp, [esp + 4]
mov edi, edx
mov edx, dword [esp]
lea esp, [esp + 4]
mov ebx, edi
pop edi
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esi], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
call fcn.006074b4
add esi, 0x657
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, 0x104549b8
lea esp, [esp - 4]
mov dword [esp], edx
push ecx
mov ecx, edx
or ecx, 0xffffffff
push eax
mov eax, 0xffffffff
xor ecx, eax
pop eax
or ecx, 0xf7cac36c
mov edx, ecx
pop ecx
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, edx
neg ebx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, dword [esp + 8]
push ecx
push eax
mov eax, ecx
push edx
mov edx, ebx
and eax, edx
not eax
not eax
pop edx
mov ecx, eax
pop eax
lea esp, [esp - 4]
push edi
mov edi, dword [esp + 4]
or edi, 0xffffffff
not edi
or edi, ecx
mov dword [esp + 4], edi
pop edi
mov ecx, dword [esp + 4]
or ecx, ebx
pop ebx
add ebx, ecx
pop ecx
pop ecx
mov dword [esp + 4], ebx
pop ebx
push ebx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ebx, dword [esp + 8]
lea esp, [esp - 4]
mov dword [esp], ecx
mov cl, 0x11
shr ebx, cl
pop ecx
lea esp, [esp - 4]
mov dword [esp], ebx
push edx
mov edx, ebx
push edi
mov edi, edx
push ebx
mov ebx, 0xffffffff
not edi
not ebx
push edi
or edi, ebx
sub edi, dword [esp]
push esi
mov esi, ebx
neg esi
add edi, esi
pop esi
add esp, 4
sub edi, 1
pop ebx
mov edx, edi
pop edi
add edx, 1
xor edx, dword [esp + 0x10]
mov ebx, edx
pop edx
push eax
mov al, cl
or al, 0xff
add al, 1
push ecx
mov cl, al
push ebx
mov bl, 0xf
not cl
xor cl, bl
not cl
pop ebx
mov al, cl
pop ecx
mov cl, al
pop eax
shl ebx, cl
push edi
mov edi, dword [esp + 4]
push edx
mov edx, ebx
push edi
not edi
push edi
or edi, edx
sub edi, dword [esp]
sub edi, edx
lea esp, [esp + 4]
sub edi, 1
push edi
mov edi, dword [esp + 4]
not edx
push edx
or edx, edi
sub edx, edi
sub edx, dword [esp]
lea esp, [esp + 4]
push ebx
mov ebx, 1
neg ebx
add edx, ebx
pop ebx
pop edi
push edi
or edi, edx
push edx
mov edx, dword [esp + 4]
neg edx
add edi, edx
pop edx
push ebx
mov ebx, edx
neg ebx
push eax
mov eax, edi
push eax
and eax, ebx
push eax
mov eax, dword [esp + 4]
or eax, ebx
pop ebx
add ebx, eax
pop eax
pop eax
mov edi, ebx
pop ebx
add esp, 4
sub edi, 1
pop edx
pop edx
mov dword [esp + 4], edi
pop edi
pop ebx
pop ecx
mov dword [esp + 4], ebx
pop ebx
mov edx, 0xbcd9f3c9
lea esp, [esp - 4]
mov dword [esp], ebx
push eax
mov eax, ebx
or eax, 0xffffffff
add eax, 1
or eax, edx
mov ebx, eax
pop eax
not ebx
inc ebx
sub dword [esp + 4], ebx
pop ebx
mov edx, dword [esp]
lea esp, [esp + 4]
push eax
mov eax, edx
not eax
inc eax
sub esi, eax
pop eax
pop edx
push edx
push ecx
push eax
mov eax, ecx
push ebx
mov ebx, eax
push ecx
mov ecx, 0xffffffff
push ecx
push esi
mov esi, ecx
or esi, 0xffffffff
add esi, 1
or esi, 0xffffffff
mov ecx, esi
pop esi
xor ebx, ecx
pop ecx
not ecx
and ebx, ecx
not ebx
pop ecx
mov eax, ebx
pop ebx
inc eax
push edi
mov edi, 0x28f0ed68
push ebx
push eax
pop ebx
push ebx
and ebx, edi
push ebx
mov ebx, dword [esp + 4]
or ebx, edi
pop edi
push edx
push ebx
mov edx, dword [esp]
lea esp, [esp + 4]
push edi
mov edi, edi
push edi
and edi, edx
push edi
push ecx
mov ecx, edi
or ecx, 0xffffffff
add ecx, 1
xor ecx, dword [esp + 8]
mov edi, ecx
pop ecx
or edi, edx
pop edx
add edx, edi
pop edi
pop edi
mov edi, edx
pop edx
pop ebx
pop ebx
mov eax, edi
pop edi
mov ecx, eax
pop eax
lea esp, [esp - 4]
push esi
mov esi, dword [esp + 4]
push eax
mov eax, esi
push ecx
push 0xffffffff
pop ecx
push eax
and eax, ecx
sub eax, ecx
sub eax, dword [esp]
add esp, 4
push edx
mov edx, 1
neg edx
push edi
mov edi, eax
push edi
and edi, edx
push edi
mov edi, dword [esp + 4]
or edi, edx
pop edx
add edx, edi
pop edi
pop edi
mov eax, edx
pop edx
not eax
mov ecx, dword [esp]
lea esp, [esp + 4]
mov esi, eax
pop eax
push edi
mov edi, 0xffffffff
xor esi, edi
pop edi
push ebx
mov ebx, esi
push edx
mov edx, ecx
push ebx
push edx
and ebx, edx
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, dword [esp + 8]
not ebx
not dword [esp + 4]
and ebx, dword [esp + 4]
or ebx, dword [esp]
lea esp, [esp + 0xc]
not ebx
pop edx
mov esi, ebx
pop ebx
mov dword [esp + 4], esi
pop esi
push edi
lea esp, [esp - 4]
mov dword [esp], ecx
mov edi, dword [esp + 8]
push ecx
mov cl, 0x12
shl edi, cl
mov ecx, dword [esp]
lea esp, [esp + 4]
push edi
mov edi, dword [esp + 0xc]
mov cl, 0xe
shr edi, cl
xor dword [esp], edi
pop edi
pop ecx
push esi
mov esi, dword [esp + 8]
push eax
mov eax, esi
push edx
mov edx, 0xffffffff
push eax
and eax, edx
not dword [esp]
or dword [esp], eax
pop eax
not eax
or eax, edx
pop edx
mov esi, eax
pop eax
inc esi
xor esi, edi
mov dword [esp + 8], esi
pop esi
mov edi, dword [esp]
lea esp, [esp + 4]
mov ecx, 0x2606f000
sub dword [esp], ecx
push edx
mov edx, ecx
or edx, 0xffffffff
inc edx
xor edx, 0x70664c3c
mov ecx, edx
mov edx, dword [esp]
lea esp, [esp + 4]
push esi
mov esi, dword [esp + 4]
push eax
lea eax, [ecx]
lea esp, [esp - 4]
push eax
mov eax, dword [esp + 4]
or eax, 0xffffffff
add eax, 1
or eax, esi
mov dword [esp + 4], eax
pop eax
and esi, eax
add esi, esi
push esi
push edx
push esi
pop edx
or edx, 0xffffffff
add edx, 1
xor edx, dword [esp + 8]
mov esi, edx
pop edx
add esi, eax
mov eax, dword [esp]
lea esp, [esp + 4]
sub esi, eax
pop eax
pop eax
push eax
mov eax, dword [esp + 8]
or eax, 0xffffffff
sub eax, 0xffffffff
add eax, esi
mov dword [esp + 8], eax
pop eax
mov esi, dword [esp]
lea esp, [esp + 4]
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], esi
push edx
mov esi, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], edx
push ecx
pop edx
lea esp, [esp - 4]
mov dword [esp], esi
and esi, edx
lea esp, [esp - 4]
mov dword [esp], edi
push ebx
mov ebx, edi
push edx
mov edx, ebx
push ecx
mov ecx, 0xffffffff
not edx
not ecx
push eax
mov eax, edx
push ebx
mov ebx, ecx
not eax
not ebx
push eax
and eax, ebx
sub eax, ebx
push edi
mov edi, dword [esp + 4]
neg edi
add eax, edi
pop edi
lea esp, [esp + 4]
sub eax, 1
mov ebx, dword [esp]
lea esp, [esp + 4]
mov edx, eax
pop eax
not edx
pop ecx
mov ebx, edx
pop edx
sub ebx, 0xffffffff
xor ebx, dword [esp + 8]
mov edi, ebx
pop ebx
neg edi
add esi, edi
mov edi, dword [esp]
lea esp, [esp + 4]
push edi
mov edi, edx
push ebx
or ebx, 0xffffffff
not ebx
sub ebx, edi
mov edi, ebx
pop ebx
add esi, edi
mov edi, dword [esp]
lea esp, [esp + 4]
lea esp, [esp + 4]
push ecx
mov ecx, 1
neg ecx
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, esi
push edx
push eax
mov eax, edx
push ebx
mov ebx, ecx
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, eax
push ecx
mov ecx, ebx
push edi
or edi, ecx
sub edi, dword [esp]
sub edi, ecx
add esp, 4
sub edi, 1
not edi
pop ecx
mov eax, edi
pop edi
not eax
not eax
pop ebx
mov edx, eax
pop eax
push edx
push eax
mov eax, edx
or eax, 0xffffffff
add eax, 1
or eax, dword [esp + 8]
mov edx, eax
pop eax
or edx, ecx
pop ecx
add ecx, edx
pop edx
mov edx, dword [esp]
lea esp, [esp + 4]
mov esi, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
push ecx
push edx
mov ecx, esi
or edx, 0xffffffff
not edx
not ecx
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, ecx
push ecx
mov ecx, edx
push ebx
and ebx, ecx
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, dword [esp + 4]
xor ebx, ecx
pop ecx
xor ebx, ecx
pop ecx
pop ecx
mov ecx, ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
mov esi, ecx
pop edx
pop ecx
pop edx
lea esp, [esp - 4]
mov dword [esp], esi
pop edx
pop esi
mov ecx, dword [esp]
lea esp, [esp + 4]
push ecx
push 1
mov ecx, dword [esp]
lea esp, [esp + 4]
add edx, ecx
pop ecx
xchg dword [esi], edx
push esi
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, esi
or edi, 0xffffffff
sub edi, 0xffffffff
add edi, edx
push edi
pop esi
pop edi
or esi, 0xffffffff
push edi
mov edi, 0xffffffff
sub edi, esi
mov esi, edi
pop edi
push ecx
push esi
pop ecx
push ebx
mov ebx, dword [esp + 0xc]
or ecx, ebx
not ecx
not ecx
pop ebx
mov esi, ecx
pop ecx
mov edx, esi
pop esi
lea esp, [esp + 4]
popfd
mov esi, dword [esp]
lea esp, [esp + 4]
ret