Function at 0x9c47ca
Capabilities:
Allocate or change rwx memory

Disassembly:
jmp 0x9c47d4
lea esp, [esp - 4]
mov dword [esp], eax
push ebx
pushfd
call fcn.009c776d
add ebx, 0x2fcf
push eax
mov eax, 0xb779b345
lea esp, [esp - 4]
push esi
lea esp, [esp - 4]
mov dword [esp], edi
push edx
mov edx, edi
or edx, 0xffffffff
add edx, 1
or edx, esi
mov edi, edx
pop edx
or edi, 0xffffffff
sub edi, 0xffffffff
xor edi, dword [esp + 8]
mov esi, edi
pop edi
or esi, 0xffffffff
add esi, 1
push ecx
mov ecx, eax
push ebx
mov ebx, esi
push ebx
and ebx, ecx
push ebx
mov ebx, dword [esp + 4]
or ebx, ecx
pop ecx
add ecx, ebx
pop ebx
pop ebx
mov esi, ecx
pop ecx
mov dword [esp + 4], esi
pop esi
push 0x8779b345
pop eax
sub dword [esp], eax
ror dword [esp], 0x1b
pop eax
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, eax
neg esi
sub ebx, esi
pop esi
pop eax
push edx
push eax
mov eax, edx
or eax, 0xffffffff
add eax, 1
push ebx
mov ebx, 0x57573a1f
neg ebx
sub eax, ebx
pop ebx
mov edx, eax
push edx
mov edx, eax
or edx, 0xffffffff
not edx
or edx, dword [esp + 4]
mov eax, edx
pop edx
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], edx
lea esp, [esp - 4]
mov dword [esp], eax
push ecx
mov eax, dword [esp + 8]
lea esp, [esp - 4]
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, dword [esp + 4]
or esi, 0xffffffff
not esi
or esi, ecx
mov dword [esp + 4], esi
pop esi
mov cl, 0x1c
shl eax, cl
mov ecx, dword [esp]
lea esp, [esp + 4]
push eax
mov eax, dword [esp + 0xc]
mov cl, 4
shr eax, cl
xor dword [esp], eax
pop eax
pop ecx
mov dword [esp + 4], eax
pop eax
mov edx, 0xa8a9819
add dword [esp], edx
pop edx
lea esp, [esp - 4]
mov dword [esp], esi
push ecx
push edi
mov edi, ecx
or edi, 0xffffffff
add edi, 1
or edi, esi
mov ecx, edi
pop edi
push eax
push ecx
pop eax
push ecx
mov ecx, 0xffffffff
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, 0xffffffff
sub edx, eax
mov eax, edx
pop edx
or eax, ecx
not eax
or eax, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov ecx, eax
pop eax
inc ecx
push ebx
mov ebx, ecx
push eax
mov eax, edx
push ebx
push eax
not eax
push edx
mov edx, ebx
push ecx
mov ecx, eax
push edx
and edx, ecx
push edx
mov edx, dword [esp + 4]
add edx, ecx
pop ecx
sub edx, ecx
pop ecx
pop ecx
mov ebx, edx
pop edx
not ebx
push ebx
mov ebx, dword [esp + 8]
mov eax, dword [esp + 4]
push ecx
mov ecx, 0xffffffff
xor ebx, ecx
pop ecx
or eax, ebx
not eax
pop ebx
or ebx, eax
not ebx
not ebx
pop eax
pop eax
pop eax
mov ecx, ebx
pop ebx
mov esi, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
neg esi
sub ebx, esi
mov esi, dword [esp]
lea esp, [esp + 4]
mov edx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, esp
lea esp, [esp - 4]
mov dword [esp], ebx
pop dword [edi + 0xc]
mov edi, dword [esp]
lea esp, [esp + 4]
call fcn.009c776d
add ebx, 0x2d5d
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, 0x1b334dfc
push edx
push edi
mov edi, edx
or edi, 0xffffffff
sub edi, 0xffffffff
or edi, 0x31761967
push edi
pop edx
pop edi
push eax
mov eax, edx
neg eax
add dword [esp + 4], eax
pop eax
push 0xd1bd3495
mov edx, dword [esp]
lea esp, [esp + 4]
sub dword [esp], edx
ror dword [esp], 0x1a
mov edx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, edx
push ecx
or ecx, 0xffffffff
inc ecx
sub ecx, edi
mov edi, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
push edx
mov edx, edi
push esi
or esi, 0xffffffff
push eax
push ecx
mov ecx, eax
or ecx, 0xffffffff
add ecx, 1
or ecx, 1
mov eax, ecx
pop ecx
push edx
mov edx, esi
push edx
and edx, eax
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, dword [esp + 4]
or edx, eax
pop eax
add eax, edx
pop edx
pop edx
mov esi, eax
pop eax
sub esi, edx
mov edx, esi
pop esi
push ecx
mov ecx, ebx
push ecx
push esi
push ecx
pop esi
push eax
mov eax, edx
push esi
lea esp, [esp - 4]
mov dword [esp], eax
or esi, 0xffffffff
add esi, 1
push esi
not eax
not esi
and eax, esi
or eax, dword [esp]
pop esi
push eax
mov eax, dword [esp + 8]
not eax
or eax, esi
pop esi
not eax
or eax, esi
not eax
or eax, esi
or esi, 0xffffffff
add esi, 1
push esi
not eax
not esi
push ecx
mov ecx, eax
push ebx
mov ebx, esi
not ecx
not ebx
push ecx
and ecx, ebx
sub ecx, ebx
sub ecx, dword [esp]
lea esp, [esp + 4]
sub ecx, 1
mov ebx, dword [esp]
lea esp, [esp + 4]
mov eax, ecx
pop ecx
push ebx
mov ebx, eax
push edx
mov edx, dword [esp + 8]
not ebx
not edx
and ebx, edx
not ebx
pop edx
push esi
mov esi, eax
or esi, 0xffffffff
not esi
or esi, ebx
mov eax, esi
pop esi
pop ebx
pop esi
mov esi, eax
push edi
mov edi, eax
or edi, 0xffffffff
sub edi, 0xffffffff
or edi, dword [esp + 4]
mov eax, edi
pop edi
lea esp, [esp + 4]
lea esp, [esp + 4]
pop eax
mov ecx, esi
pop esi
push ecx
mov ecx, dword [esp + 4]
push eax
mov eax, ecx
push ecx
mov ecx, edx
not eax
not ecx
push eax
or eax, ecx
sub eax, ecx
sub eax, dword [esp]
add esp, 4
sub eax, 1
pop ecx
mov ecx, eax
pop eax
pop edx
push eax
mov eax, ecx
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, edx
push edx
push edi
mov edi, edx
push ebx
mov ebx, eax
and edi, ebx
not edi
neg edi
dec edi
pop ebx
mov edx, edi
pop edi
push edx
push ebx
mov ebx, edx
or ebx, 0xffffffff
add ebx, 1
add ebx, dword [esp + 8]
mov edx, ebx
pop ebx
or edx, eax
pop eax
add eax, edx
pop edx
pop edx
mov edx, eax
pop eax
mov ecx, dword [esp]
lea esp, [esp + 4]
pop ecx
mov ebx, edx
pop edx
pop edi
pop edx
push esi
push 0xffffffff
push eax
mov eax, esi
or eax, 0xffffffff
sub eax, 0xffffffff
xor eax, dword [esp + 4]
mov esi, eax
pop eax
lea esp, [esp + 4]
cmp dword [ebx], esi
pop esi
je 0x9c596a
lea esp, [esp - 4]
mov dword [esp], eax
lea esp, [esp - 4]
mov dword [esp], ecx
lea esp, [esp - 4]
mov dword [esp], edx
lea esp, [esp - 4]
mov dword [esp], ebx
lea esp, [esp - 4]
mov dword [esp], ebp
lea esp, [esp - 4]
mov dword [esp], esi
lea esp, [esp - 4]
mov dword [esp], edi
lea esp, [esp - 4]
mov dword [esp], ecx
mov ebx, esp
lea esp, [esp - 4]
mov dword [esp], ebx
lea esp, [esp - 4]
push ecx
push edx
mov edx, ecx
or edx, 0xffffffff
inc edx
add edx, dword [esp + 8]
mov ecx, edx
pop edx
or ecx, 0xffffffff
push edi
mov edi, 1
neg edi
sub ecx, edi
pop edi
xor ecx, 0x40
mov dword [esp + 4], ecx
pop ecx
call fcn.009c776d
add ebx, 0xfffffad7
lea esp, [esp - 4]
push edi
mov edi, dword [esp + 4]
or edi, 0xffffffff
inc edi
push eax
mov eax, edi
push ecx
mov ecx, edx
push eax
and eax, ecx
push eax
mov eax, dword [esp + 4]
xor eax, ecx
pop ecx
xor eax, ecx
pop ecx
pop ecx
mov edi, eax
pop eax
mov dword [esp + 4], edi
pop edi
mov edx, 0xa99ec769
lea esp, [esp - 4]
mov dword [esp], edx
push ecx
mov ecx, edx
or ecx, 0xffffffff
not ecx
or ecx, 0x665757c6
mov edx, ecx
pop ecx
push eax
push edi
mov edi, eax
or edi, 0xffffffff
sub edi, 0xffffffff
or edi, edx
push edi
pop eax
pop edi
push edx
or edx, 0xffffffff
inc edx
sub edx, eax
mov eax, edx
pop edx
push ecx
mov ecx, dword [esp + 8]
lea esp, [esp - 4]
mov dword [esp], ecx
push esi
mov esi, ecx
push ecx
mov ecx, eax
push esi
push ebx
mov ebx, esi
push edx
mov edx, ecx
not ebx
not edx
and ebx, edx
not ebx
pop edx
mov esi, ebx
pop ebx
sub esi, ecx
sub esi, dword [esp]
add esp, 4
sub esi, 1
not esi
pop ecx
mov ecx, esi
pop esi
push ecx
mov ecx, dword [esp + 4]
or ecx, eax
mov eax, dword [esp]
lea esp, [esp + 4]
add eax, ecx
pop ecx
pop ecx
push esi
mov esi, dword [esp + 8]
or esi, 0xffffffff
add esi, 1
or esi, eax
push ecx
mov ecx, dword [esp + 0xc]
or ecx, 0xffffffff
add ecx, 1
or ecx, esi
mov dword [esp + 0xc], ecx
pop ecx
mov esi, dword [esp]
lea esp, [esp + 4]
pop eax
push eax
push ecx
mov ecx, eax
push esi
mov esi, ecx
push edx
mov edx, 0xffffffff
push esi
and esi, edx
not dword [esp]
or dword [esp], esi
pop esi
lea esp, [esp - 4]
mov dword [esp], esi
and esi, edx
push eax
mov eax, dword [esp + 4]
push edi
or edi, 0xffffffff
not edi
push edi
not eax
not edi
and eax, edi
or eax, dword [esp]
pop edi
mov dword [esp + 8], eax
pop edi
pop eax
push ebx
mov ebx, esi
push edx
mov edx, dword [esp + 8]
not ebx
not edx
and ebx, edx
not ebx
pop edx
mov esi, ebx
pop ebx
add esp, 4
pop edx
mov ecx, esi
pop esi
inc ecx
add ecx, edx
mov eax, ecx
pop ecx
or eax, 0xffffffff
push edx
mov edx, 0xffffffff
neg edx
push ecx
mov ecx, edx
push edi
mov edi, eax
push edi
and edi, ecx
push edi
mov edi, dword [esp + 4]
or edi, ecx
pop ecx
add ecx, edi
pop edi
pop edi
push ecx
pop eax
pop ecx
pop edx
push ebx
mov ebx, 0xe3476fa3
neg ebx
sub eax, ebx
pop ebx
mov edx, eax
pop eax
push edi
mov edi, edx
neg edi
push esi
mov esi, dword [esp + 8]
lea esp, [esp - 4]
push ebx
mov ebx, dword [esp + 4]
or ebx, 0xffffffff
inc ebx
xor ebx, esi
mov dword [esp + 4], ebx
pop ebx
push eax
mov eax, esi
push ebx
mov ebx, edi
not eax
not ebx
or eax, ebx
not eax
pop ebx
mov esi, eax
pop eax
push esi
mov esi, dword [esp + 4]
or esi, edi
pop edi
add edi, esi
pop esi
pop esi
mov dword [esp + 4], edi
pop edi
push edi
push ecx
mov edi, dword [esp + 8]
push ecx
push eax
mov al, cl
or al, 0xff
sub al, 0xff
add al, 4
mov cl, al
pop eax
shl edi, cl
pop ecx
push edi
mov edi, dword [esp + 0xc]
push ebx
mov bl, cl
or bl, 0xff
add bl, 1
xor bl, 0x1c
mov cl, bl
pop ebx
shr edi, cl
push edx
mov edx, edi
push ebx
mov ebx, dword [esp + 8]
push ebx
and ebx, edx
push ebx
mov ebx, dword [esp + 4]
or ebx, edx
pop edx
add edx, ebx
pop ebx
pop ebx
mov dword [esp + 4], edx
pop edx
pop edi
pop ecx
mov dword [esp + 4], edi
pop edi
push esi
mov esi, edx
or esi, 0xffffffff
sub esi, 0xffffffff
xor esi, dword [esp + 4]
mov edx, esi
pop esi
lea esp, [esp + 4]
lea esp, [esp - 4]
push edi
mov edi, dword [esp + 4]
or edi, 0xffffffff
sub edi, 0xffffffff
add edi, eax
mov dword [esp + 4], edi
pop edi
push ecx
mov ecx, eax
or ecx, 0xffffffff
not ecx
or ecx, edx
mov eax, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, ebx
lea esp, [esp - 4]
mov dword [esp], ebx
and ebx, eax
push ebx
mov ebx, dword [esp + 4]
or ebx, eax
mov eax, dword [esp]
lea esp, [esp + 4]
add eax, ebx
pop ebx
pop ebx
mov ebx, eax
mov eax, dword [esp]
lea esp, [esp + 4]
pop edx
lea esp, [esp - 4]
push edi
mov edi, dword [esp + 4]
push ebx
mov ebx, edi
push ecx
mov ecx, 0xffffffff
push eax
mov eax, 0xffffffff
sub eax, ebx
mov ebx, eax
pop eax
not ecx
push ebx
or ebx, ecx
sub ebx, ecx
push edi
mov edi, dword [esp + 4]
neg edi
add ebx, edi
pop edi
add esp, 4
sub ebx, 1
pop ecx
mov edi, ebx
pop ebx
sub edi, 0xffffffff
add edi, ebx
mov dword [esp + 4], edi
pop edi
call fcn.009c776d
add ebx, 0x2760
push ecx
mov ecx, 0xd1ca42b0
push ecx
mov ecx, 0x2e35bd56
push eax
mov eax, ecx
neg eax
sub dword [esp + 4], eax
pop eax
push eax
push ecx
mov eax, dword [esp + 8]
lea esp, [esp - 4]
mov dword [esp], ecx
mov cl, 0
shl eax, cl
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, dword [esp + 0xc]
push edx
mov dl, cl
or dl, 0xff
inc dl
push ecx
mov cl, dl
push eax
mov al, 0x20
push ecx
push eax
not al
or cl, al
not cl
push ecx
mov cl, byte [esp + 8]
mov al, byte [esp + 4]
not cl
or al, cl
not al
mov ecx, dword [esp]
lea esp, [esp + 4]
push ecx
and cl, al
sub cl, byte [esp]
sub cl, al
add esp, 4
sub cl, 1
not cl
pop eax
pop eax
pop eax
mov dl, cl
pop ecx
mov cl, dl
pop edx
xor eax, eax
xor dword [esp], eax
mov eax, dword [esp]
lea esp, [esp + 4]
pop ecx
push ecx
mov ecx, dword [esp + 8]
or ecx, 0xffffffff
inc ecx
or ecx, eax
mov dword [esp + 8], ecx
pop ecx
pop eax
push edi
mov edi, ecx
or edi, 0xffffffff
inc edi
or edi, dword [esp + 4]
mov ecx, edi
mov edi, dword [esp]
lea esp, [esp + 4]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, ecx
lea esp, [esp - 4]
mov dword [esp], ecx
push ebx
mov ebx, ecx
push eax
mov eax, 0xffffffff
not ebx
not eax
push ebx
or ebx, eax
sub ebx, eax
sub ebx, dword [esp]
lea esp, [esp + 4]
sub ebx, 1
pop eax
lea ecx, [ebx]
pop ebx
sub ecx, 0xffffffff
sub ecx, edx
mov edx, ecx
pop ecx
sub ebx, edx
pop edx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov ecx, dword [esp]
lea esp, [esp + 4]
sub ebx, ecx
lea esp, [esp - 4]
mov dword [esp], eax
push 0xd1ae1f84
pop eax
lea esp, [esp - 4]
push edi
push eax
push edi
pop eax
or eax, 0xffffffff
sub eax, 0xffffffff
xor eax, dword [esp + 8]
mov edi, eax
pop eax
or edi, 0xffffffff
sub edi, 0xffffffff
or edi, eax
mov dword [esp + 4], edi
pop edi
rol dword [esp], 0
lea esp, [esp - 4]
mov dword [esp], edx
push eax
pop edx
push ecx
mov ecx, edx
push eax
mov eax, 0xffffffff
push ecx
push edx
mov edx, ecx
push ecx
mov ecx, eax
push edx
or edx, 0xffffffff
inc edx
push ecx
push ecx
push esi
mov esi, ecx
push eax
mov eax, edx
push esi
push eax
or esi, 0xffffffff
inc esi
push esi
not eax
not esi
and eax, esi
or eax, dword [esp]
pop esi
push eax
mov eax, dword [esp + 8]
not eax
or eax, esi
pop esi
not eax
or eax, esi
push esi
not eax
not esi
and eax, esi
or eax, dword [esp]
pop esi
or esi, 0xffffffff
sub esi, 0xffffffff
push ecx
mov ecx, 0xffffffff
xor eax, ecx
pop ecx
or eax, esi
mov esi, eax
pop eax
lea esp, [esp + 4]
pop eax
mov ecx, esi
pop esi
not dword [esp]
or ecx, dword [esp]
add esp, 4
push ecx
mov ecx, dword [esp + 8]
not ecx
or ecx, edx
pop edx
not ecx
push ebx
mov ebx, ecx
push ecx
mov ecx, edx
not ebx
not ecx
push ebx
or ebx, ecx
sub ebx, dword [esp]
sub ebx, ecx
add esp, 4
sub ebx, 1
pop ecx
mov ecx, ebx
pop ebx
push ecx
push eax
mov eax, 0xffffffff
xor dword [esp + 4], eax
pop eax
and ecx, edx
or dword [esp], ecx
pop ecx
or edx, 0xffffffff
add edx, 1
not ecx
or ecx, edx
push esi
mov esi, edx
or esi, 0xffffffff
not esi
push eax
mov eax, esi
push edx
mov edx, ecx
push eax
push edx
not dword [esp]
or eax, dword [esp]
push eax
mov eax, dword [esp + 8]
push edx
not eax
or eax, dword [esp]
and eax, dword [esp + 4]
lea esp, [esp + 0x10]
not eax
pop edx
mov esi, eax
pop eax
mov edx, esi
pop esi
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp + 4]
mov ecx, dword [esp]
lea esp, [esp + 4]
mov ecx, edx
pop edx
push eax
mov eax, dword [esp + 4]
push edx
or edx, 0xffffffff
add edx, 1
push eax
push ebx
mov ebx, eax
push eax
mov eax, edx
push ebx
push eax
or ebx, 0xffffffff
add ebx, 1
push ebx
not eax
not ebx
and eax, ebx
or eax, dword [esp]
pop ebx
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, dword [esp + 8]
not eax
or eax, ebx
pop ebx
push ebx
not eax
not ebx
and eax, ebx
or eax, dword [esp]
pop ebx
push eax
and eax, ebx
not dword [esp]
or dword [esp], eax
pop eax
or ebx, 0xffffffff
sub ebx, 0xffffffff
not eax
or eax, ebx
mov ebx, eax
pop eax
add esp, 4
pop eax
mov eax, ebx
pop ebx
not dword [esp]
or eax, dword [esp]
lea esp, [esp + 4]
pop edx
mov dword [esp + 4], eax
pop eax
or ecx, dword [esp]
add esp, 4
push edi
mov edi, 0xffffffff
sub edi, ecx
mov ecx, edi
pop edi
or ecx, eax
pop eax
mov edx, ecx
pop ecx
push esi
mov esi, 0xffffffff
neg esi
add edx, esi
pop esi
push eax
mov eax, 0xb2ea2e6f
lea esp, [esp - 4]
push edx
mov edx, dword [esp + 4]
or edx, 0xffffffff
inc edx
add edx, ecx
mov dword [esp + 4], edx
pop edx
mov ecx, edx
push ecx
and ecx, eax
push ecx
mov ecx, dword [esp + 4]
or ecx, eax
pop eax
add eax, ecx
pop ecx
pop ecx
mov edx, eax
pop eax
mov eax, edx
pop edx
push ecx
mov ecx, eax
push ebx
mov ebx, dword [esp + 8]
lea esp, [esp - 4]
mov dword [esp], ebx
and ebx, ecx
push ebx
push esi
mov esi, ebx
or esi, 0xffffffff
inc esi
xor esi, dword [esp + 8]
mov ebx, esi
pop esi
push edx
mov edx, ebx
push eax
mov eax, ecx
or edx, eax
not edx
not edx
pop eax
mov ebx, edx
push edi
mov edi, edx
or edi, 0xffffffff
sub edi, 0xffffffff
xor edi, dword [esp + 4]
mov edx, edi
pop edi
lea esp, [esp + 4]
pop ecx
add ecx, ebx
pop ebx
pop ebx
push edx
mov edx, dword [esp + 8]
or edx, 0xffffffff
sub edx, 0xffffffff
add edx, ecx
mov dword [esp + 8], edx
pop edx
pop ecx
push 0x7b697f4d
pop eax
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, eax
push edx
or edx, 0xffffffff
sub edx, 0xffffffff
sub edx, edi
mov edi, edx
pop edx
push ecx
mov ecx, edi
push eax
or eax, 0xffffffff
sub eax, 0xffffffff
sub eax, ecx
mov ecx, eax
pop eax
push esi
mov esi, dword [esp + 0xc]
lea esp, [esp - 4]
push ecx
mov ecx, dword [esp + 4]
or ecx, 0xffffffff
inc ecx
add ecx, esi
mov dword [esp + 4], ecx
pop ecx
push eax
mov eax, esi
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, ecx
push eax
or eax, 0xffffffff
not eax
push ebx
lea esp, [esp - 4]
mov dword [esp], eax
not ebx
not eax
and ebx, eax
or ebx, dword [esp]
pop eax
push ebx
mov ebx, dword [esp + 8]
push eax
push eax
mov eax, 0xffffffff
sub eax, ebx
mov ebx, eax
pop eax
not eax
and ebx, eax
or ebx, dword [esp]
pop eax
pop eax
push ebx
not dword [esp]
and ebx, eax
or ebx, dword [esp]
add esp, 4
push ebx
neg dword [esp]
dec dword [esp]
and ebx, eax
or dword [esp], ebx
pop ebx
or eax, 0xffffffff
not eax
push eax
not ebx
not eax
and ebx, eax
or ebx, dword [esp]
pop eax
mov eax, ebx
pop ebx
lea esp, [esp + 4]
pop ebx
mov esi, eax
pop eax
push esi
mov esi, dword [esp + 4]
or esi, ecx
pop ecx
add ecx, esi
pop esi
pop esi
mov dword [esp + 8], ecx
pop ecx
pop edi
mov eax, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, eax
neg edx
sub ebx, edx
pop edx
pop eax
lea esp, [esp - 4]
mov dword [esp], ebx
call fcn.009c776d
add ebx, 0xfffff1f7
push eax
lea esp, [esp - 4]
push edx
mov edx, dword [esp + 4]
or edx, 0xffffffff
inc edx
add edx, edi
mov dword [esp + 4], edx
pop edx
mov edi, eax
push ecx
mov ecx, edi
push ebx
mov ebx, 0xffffffff
push ecx
and ecx, ebx
push ecx
mov ecx, dword [esp + 4]
xor ecx, ebx
pop ebx
xor ecx, ebx
pop ebx
pop ebx
mov edi, ecx
pop ecx
not edi
push esi
push 0xf0c3cf32
pop esi
neg esi
sub edi, esi
pop esi
lea esp, [esp - 4]
mov dword [esp], edi
pop eax
pop edi
lea esp, [esp - 4]
push edx
mov edx, dword [esp + 4]
or edx, 0xffffffff
not edx
or edx, eax
mov dword [esp + 4], edx
pop edx
push ecx
mov ecx, eax
push ebx
mov ebx, ecx
push edx
mov edx, 0xffffffff
push ebx
and ebx, edx
push ebx
mov ebx, dword [esp + 4]
add ebx, edx
pop edx
sub ebx, edx
pop edx
pop edx
mov ecx, ebx
pop ebx
inc ecx
xor ecx, 0x87b4764b
mov eax, ecx
pop ecx
xor dword [esp], eax
mov eax, 0x775fb979
push ebx
mov ebx, eax
not ebx
inc ebx
lea esp, [esp - 4]
mov dword [esp], ecx
push eax
mov eax, ecx
or eax, 0xffffffff
inc eax
xor eax, dword [esp + 0xc]
push eax
pop ecx
pop eax
push ecx
and ecx, ebx
push ecx
mov ecx, dword [esp + 4]
or ecx, ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
push eax
mov eax, ecx
neg eax
sub ebx, eax
pop eax
mov ecx, dword [esp]
lea esp, [esp + 4]
pop ecx
mov dword [esp + 4], ebx
pop ebx
push edx
push ecx
push ebx
mov ebx, edx
or ebx, 0xffffffff
not ebx
add ebx, dword [esp + 0xc]
mov edx, ebx
pop ebx
push ecx
mov cl, 0xe
shl edx, cl
mov ecx, dword [esp]
lea esp, [esp + 4]
push edx
push edi
mov edi, edx
or edi, 0xffffffff
push ebx
mov ebx, 1
add edi, ebx
pop ebx
add edi, dword [esp + 0x10]
mov edx, edi
pop edi
mov cl, 0x12
shr edx, cl
or dword [esp], edx
pop edx
pop ecx
mov dword [esp + 4], edx
pop edx
pop eax
push esi
mov esi, eax
push edx
push ebx
push ebx
mov ebx, edx
or ebx, 0xffffffff
sub ebx, 0xffffffff
or ebx, dword [esp + 4]
mov edx, ebx
pop ebx
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], edx
push ebx
mov ebx, edx
push eax
push esi
pop eax
lea esp, [esp - 4]
mov dword [esp], ebx
or ebx, eax
sub ebx, eax
sub ebx, dword [esp]
lea esp, [esp + 4]
push eax
mov eax, 1
neg eax
add ebx, eax
pop eax
not ebx
push edx
mov edx, eax
or edx, 0xffffffff
inc edx
add edx, dword [esp + 4]
mov eax, edx
pop edx
lea esp, [esp + 4]
mov edx, ebx
pop ebx
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, dword [esp + 4]
or edx, esi
pop esi
add esi, edx
pop edx
pop edx
mov ebx, esi
mov esi, dword [esp]
lea esp, [esp + 4]
mov eax, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
push ecx
mov ecx, dword [esp + 4]
or ecx, 0xffffffff
inc ecx
add ecx, ebx
mov dword [esp + 4], ecx
pop ecx
call fcn.009c47cf
push ecx
mov ecx, esi
or ecx, 0xffffffff
push eax
mov eax, 0xffffffff
not eax
add eax, 1
add ecx, eax
pop eax
or ecx, dword [esp + 4]
mov esi, ecx
pop ecx
lea esp, [esp + 4]
pop edi
push edi
mov edi, esi
or edi, 0xffffffff
not edi
push ebx
mov ebx, dword [esp + 8]
push edi
mov edi, edi
push edi
and edi, ebx
push edi
mov edi, dword [esp + 4]
or edi, ebx
pop ebx
add ebx, edi
pop edi
pop edi
mov edi, ebx
pop ebx
push edx
mov edx, esi
or edx, 0xffffffff
sub edx, 0xffffffff
or edx, edi
mov esi, edx
pop edx
pop edi
lea esp, [esp + 4]
push eax
mov eax, ebp
push ecx
push ebx
mov ebx, ecx
or ebx, 0xffffffff
inc ebx
xor ebx, eax
mov ecx, ebx
pop ebx
push edx
mov edx, 0xffffffff
lea esp, [esp - 4]
mov dword [esp], ecx
and ecx, edx
push ecx
mov ecx, dword [esp + 4]
add ecx, edx
pop edx
push edi
mov edi, edx
neg edi
push eax
mov eax, ecx
push eax
and eax, edi
push eax
mov eax, dword [esp + 4]
or eax, edi
pop edi
add edi, eax
pop eax
pop eax
mov ecx, edi
pop edi
pop edx
mov edx, dword [esp]
lea esp, [esp + 4]
mov eax, ecx
pop ecx
not eax
add eax, dword [esp + 4]
mov ebp, eax
pop eax
lea esp, [esp + 4]
mov ebx, dword [esp]
lea esp, [esp + 4]
push ebx
mov ebx, edx
or ebx, 0xffffffff
inc ebx
or ebx, dword [esp + 4]
mov edx, ebx
pop ebx
lea esp, [esp + 4]
push esi
mov esi, ecx
push edi
mov edi, esi
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, 0xffffffff
push edi
and edi, ebx
push edi
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, edi
or ebx, 0xffffffff
add ebx, 1
or ebx, dword [esp + 8]
mov edi, ebx
pop ebx
add edi, ebx
pop ebx
sub edi, ebx
pop ebx
pop ebx
mov esi, edi
pop edi
push edi
mov edi, 0xffffffff
push esi
or esi, 0xffffffff
inc esi
sub esi, edi
mov edi, esi
pop esi
add esi, edi
pop edi
xor esi, dword [esp + 4]
mov ecx, esi
mov esi, dword [esp]
lea esp, [esp + 4]
lea esp, [esp + 4]
pop eax
call fcn.009c776d
add ebx, 0x1dfc
push edx
mov edx, 0x7fb1234c
push edx
mov edx, 0x230a8a61
xor dword [esp], edx
ror dword [esp], 3
lea esp, [esp - 4]
push edi
mov edi, dword [esp + 4]
or edi, 0xffffffff
not edi
xor edi, ecx
mov dword [esp + 4], edi
pop edi
lea ecx, [edx]
or ecx, 0xffffffff
sub ecx, 0xffffffff
xor ecx, 0xab977523
mov edx, ecx
pop ecx
push edi
push esi
mov esi, edi
or esi, 0xffffffff
push edx
push eax
mov eax, edx
or eax, 0xffffffff
inc eax
or eax, 1
mov edx, eax
pop eax
add esi, edx
pop edx
xor esi, dword [esp + 8]
mov edi, esi
pop esi
push ecx
mov ecx, edx
lea esp, [esp - 4]
mov dword [esp], edi
push edx
mov edx, 0xffffffff
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, edi
neg esi
add edx, esi
mov esi, dword [esp]
lea esp, [esp + 4]
mov edi, edx
pop edx
push edi
or edi, ecx
push esi
mov esi, ecx
neg esi
add edi, esi
mov esi, dword [esp]
lea esp, [esp + 4]
sub edi, dword [esp]
lea esp, [esp + 4]
sub edi, 1
lea esp, [esp - 4]
push ebx
mov ebx, dword [esp + 4]
push edx
mov edx, ebx
push eax
mov eax, 0xffffffff
push edx
and edx, eax
push edx
mov edx, dword [esp + 4]
add edx, eax
pop eax
sub edx, eax
pop eax
pop eax
mov ebx, edx
pop edx
inc ebx
or ebx, edi
push edx
mov edx, dword [esp + 8]
or edx, 0xffffffff
not edx
add edx, ebx
mov dword [esp + 8], edx
pop edx
pop ebx
push edx
mov edx, edi
or edx, 0xffffffff
inc edx
xor edx, dword [esp + 8]
push edx
pop edi
pop edx
not ecx
lea esp, [esp - 4]
mov dword [esp], ecx
or ecx, edi
push eax
mov eax, dword [esp + 4]
neg eax
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, ecx
push ebx
and ebx, eax
push ebx
mov ebx, dword [esp + 4]
or ebx, eax
pop eax
add eax, ebx
pop ebx
pop ebx
mov ecx, eax
pop eax
push esi
mov esi, edi
neg esi
add ecx, esi
pop esi
lea esp, [esp + 4]
push ebx
mov ebx, 1
neg ebx
add ecx, ebx
pop ebx
pop edi
push edi
or edi, ecx
push ebx
mov ebx, ecx
neg ebx
push eax
mov eax, ebx
neg eax
sub edi, eax
pop eax
pop ebx
sub edi, dword [esp]
lea esp, [esp + 4]
sub edi, 1
pop ecx
pop ecx
mov dword [esp + 4], edi
push ecx
mov ecx, edi
or ecx, 0xffffffff
not ecx
xor ecx, dword [esp + 4]
mov edi, ecx
pop ecx
lea esp, [esp + 4]
pop edx
push ecx
lea esp, [esp - 4]
mov dword [esp], edx
pop ecx
push ebx
mov ebx, ebx
push ebx
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, ebx
lea esp, [esp - 4]
mov dword [esp], eax
push ecx
pop eax
push edx
or edx, eax
push esi
mov esi, dword [esp + 4]
neg esi
add edx, esi
pop esi
push ebx
mov ebx, eax
neg ebx
push edi
mov edi, edx
push edi
and edi, ebx
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, dword [esp + 4]
or edi, ebx
pop ebx
add ebx, edi
pop edi
pop edi
mov edx, ebx
pop ebx
lea esp, [esp + 4]
sub edx, 1
not edx
pop eax
mov ebx, edx
pop edx
push ebx
mov ebx, dword [esp + 4]
push esi
mov esi, ebx
push ebx
mov ebx, ecx
push esi
and esi, ebx
push esi
push ecx
mov ecx, esi
or ecx, 0xffffffff
sub ecx, 0xffffffff
or ecx, dword [esp + 8]
mov esi, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
push edx
mov edx, ebx
push edi
mov edi, esi
push edi
and edi, edx
push edi
mov edi, dword [esp + 4]
push esi
mov esi, edi
push ecx
mov ecx, edx
not esi
not ecx
push esi
or esi, ecx
sub esi, dword [esp]
sub esi, ecx
lea esp, [esp + 4]
sub esi, 1
pop ecx
mov edi, esi
pop esi
pop edx
add edx, edi
pop edi
pop edi
mov esi, edx
pop edx
pop ebx
push ecx
mov ecx, ebx
neg ecx
add esi, ecx
pop ecx
pop ebx
pop ebx
lea ebx, [esi]
mov esi, dword [esp]
lea esp, [esp + 4]
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], edx
push ebx
pop edx
neg edx
sub ecx, edx
mov edx, dword [esp]
lea esp, [esp + 4]
pop ebx
pop ebx
mov ebx, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
pop edx
cmp dword [ebx], 0xffffffff
je 0x9c7761
call fcn.009c776d
add ebx, 0x1b06
push ecx
mov ecx, 0xc1d9324b
push ecx
push eax
push ecx
mov eax, dword [esp + 8]
lea esp, [esp - 4]
mov dword [esp], ecx
mov cl, 0x12
shl eax, cl
mov ecx, dword [esp]
lea esp, [esp + 4]
push eax
mov eax, dword [esp + 0xc]
mov cl, 0xe
shr eax, cl
xor dword [esp], eax
pop eax
pop ecx
mov dword [esp + 4], eax
pop eax
push 0xc92f0762
pop ecx
xor dword [esp], ecx
pop ecx
push esi
push ecx
pop esi
neg esi
push edx
mov edx, esi
neg edx
push eax
mov eax, ebx
push eax
and eax, edx
push eax
mov eax, dword [esp + 4]
or eax, edx
pop edx
add edx, eax
pop eax
pop eax
mov ebx, edx
pop edx
mov esi, dword [esp]
lea esp, [esp + 4]
pop ecx
lea esp, [esp - 4]
push edx
mov edx, dword [esp + 4]
or edx, 0xffffffff
add edx, 1
add edx, esi
mov dword [esp + 4], edx
pop edx
push ebx
mov ebx, 0xf3dc9361
push ebx
lea esp, [esp - 4]
mov dword [esp], edx
push ecx
mov edx, dword [esp + 8]
push ecx
push ebx
mov bl, cl
or bl, 0xff
not bl
xor bl, 0xe
mov cl, bl
pop ebx
shl edx, cl
pop ecx
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, dword [esp + 0xc]
mov cl, 0x12
shr edx, cl
push ebx
mov ebx, dword [esp + 4]
push ecx
lea ecx, [edx]
push ebx
and ebx, ecx
add ebx, ebx
push ebx
mov ebx, dword [esp + 4]
add ebx, ecx
pop ecx
sub ebx, ecx
pop ecx
push edx
mov edx, ecx
or edx, 0xffffffff
not edx
xor edx, dword [esp + 4]
mov ecx, edx
pop edx
lea esp, [esp + 4]
mov dword [esp + 4], ebx
pop ebx
pop edx
mov ecx, dword [esp]
lea esp, [esp + 4]
push edi
mov edi, dword [esp + 8]
or edi, 0xffffffff
add edi, 1
xor edi, edx
mov dword [esp + 8], edi
pop edi
pop edx
push eax
lea esp, [esp - 4]
mov dword [esp], ebx
pop eax
or eax, 0xffffffff
inc eax
push ebx
mov ebx, 0xdb278308
push edi
mov edi, eax
push edi
and edi, ebx
push edi
mov edi, dword [esp + 4]
push edx
mov edx, edi
push ecx
mov ecx, ebx
push edx
and edx, ecx
sub edx, dword [esp]
push esi
mov esi, ecx
neg esi
push eax
mov eax, esi
neg eax
sub edx, eax
pop eax
pop esi
lea esp, [esp + 4]
sub edx, 1
not edx
pop ecx
mov edi, edx
pop edx
pop ebx
push ecx
mov ecx, edi
neg ecx
sub ebx, ecx
pop ecx
pop edi
pop edi
mov eax, ebx
pop ebx
mov ebx, eax
pop eax
xor dword [esp], ebx
pop ebx
push edx
mov edx, esi
push ecx
mov ecx, ebx
push edx
and edx, ecx
push ebx
mov ebx, ecx
lea esp, [esp - 4]
mov dword [esp], eax
push edx
mov edx, eax
push ebx
mov ebx, 0xffffffff
push edx
and edx, ebx
sub edx, dword [esp]
sub edx, ebx
lea esp, [esp + 4]
sub edx, 1
not edx
pop ebx
mov eax, edx
pop edx
push edi
mov edi, 0xffffffff
neg edi
push eax
mov eax, eax
push eax
and eax, edi
push eax
mov eax, dword [esp + 4]
or eax, edi
pop edi
add edi, eax
pop eax
pop eax
mov eax, edi
pop edi
sub eax, ebx
lea ebx, [eax]
pop eax
push edx
mov edx, edx
lea esp, [esp - 4]
mov dword [esp], edx
and edx, ebx
push edx
mov edx, dword [esp + 4]
or edx, ebx
pop ebx
lea esp, [esp - 4]
mov dword [esp], ecx
lea ecx, [edx]
neg ecx
sub ebx, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
pop edx
pop edx
push ecx
mov ecx, edx
or ecx, 0xffffffff
sub ecx, 0xffffffff
add ecx, ebx
mov edx, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov ebx, dword [esp]
lea esp, [esp + 4]
push esi
mov esi, dword [esp + 4]
neg esi
push ecx
push edx
pop ecx
push ecx
and ecx, esi
push ecx
push eax
mov eax, ecx
or eax, 0xffffffff
add eax, 1
or eax, dword [esp + 8]
mov ecx, eax
pop eax
or ecx, esi
pop esi
push eax
mov eax, ecx
push edi
mov edi, esi
push edi
and edi, eax
push edi
mov edi, dword [esp + 4]
push edx
mov edx, edi
push ecx
mov ecx, eax
push edx
and edx, ecx
push edx
mov edx, dword [esp + 4]
xor edx, ecx
pop ecx
xor edx, ecx
pop ecx
pop ecx
mov edi, edx
pop edx
pop eax
add eax, edi
mov edi, dword [esp]
lea esp, [esp + 4]
pop edi
mov esi, eax
pop eax
pop ecx
pop ecx
mov edx, esi
pop esi
add esp, 4
push eax
mov eax, 1
lea esp, [esp - 4]
mov dword [esp], ecx
or ecx, 0xffffffff
add ecx, 1
sub ecx, eax
mov eax, ecx
pop ecx
add edx, eax
pop eax
push esi
push edi
mov esi, edx
push ecx
mov ecx, edi
push edx
mov edx, 0xffffffff
push ecx
and ecx, edx
push ecx
mov ecx, dword [esp + 4]
xor ecx, edx
pop edx
xor ecx, edx
pop edx
pop edx
mov edi, ecx
pop ecx
not edi
push edi
not esi
not edi
and esi, edi
or esi, dword [esp]
mov edi, dword [esp]
lea esp, [esp + 4]
mov edx, esi
pop edi
pop esi
mov ecx, dword [esp]
lea esp, [esp + 4]
push edx
push eax
mov eax, esi
or eax, 0xffffffff
sub eax, 0xffffffff
add eax, dword [esp + 4]
mov esi, eax
pop eax
lea esp, [esp + 4]
mov edx, dword [esp]
lea esp, [esp + 4]
pop ebx
push edx
mov edx, 0x4490171f
push edx
push 0x4d782fc
pop edx
sub dword [esp], edx
lea esp, [esp - 4]
mov dword [esp], 0xc0476bdc
mov edx, dword [esp]
lea esp, [esp + 4]
xor dword [esp], edx
ror dword [esp], 5
pop edx
lea esp, [esp - 4]
push edi
mov edi, dword [esp + 4]
or edi, 0xffffffff
push esi
mov esi, 0xffffffff
sub esi, edi
mov edi, esi
pop esi
or edi, eax
mov dword [esp + 4], edi
pop edi
mov eax, edx
lea esp, [esp - 4]
mov dword [esp], edx
or edx, 0xffffffff
sub edx, 0xffffffff
sub edx, eax
mov eax, edx
mov edx, dword [esp]
lea esp, [esp + 4]
push edi
mov edi, eax
neg edi
push edx
mov edx, edi
neg edx
add esi, edx
mov edx, dword [esp]
lea esp, [esp + 4]
pop edi
pop eax
pop edx
cmp esi, dword [ebx]
jne 0x9c606d
push 0xffffffff
pop esi
xchg dword [ebx], esi
test esi, esi
jne 0x9c5d0b
push edx
mov edx, esi
or edx, 0xffffffff
push esi
mov esi, 0xffffffff
neg esi
add edx, esi
pop esi
or edx, dword [esp + 4]
push edx
mov esi, dword [esp]
lea esp, [esp + 4]
pop edx
lea esp, [esp + 4]
call fcn.009c776d
add ebx, 0x16b3
lea esp, [esp - 4]
mov dword [esp], edx
push edi
mov edi, edx
or edi, 0xffffffff
inc edi
xor edi, 0x6c96712e
mov edx, edi
mov edi, dword [esp]
lea esp, [esp + 4]
push edx
ror dword [esp], 3
mov edx, 0x326d31e1
add dword [esp], edx
push eax
push esi
mov esi, eax
or esi, 0xffffffff
add esi, 1
or esi, edx
mov eax, esi
pop esi
or eax, 0xffffffff
not eax
xor eax, dword [esp + 4]
mov edx, eax
pop eax
lea esp, [esp + 4]
push eax
push ecx
mov ecx, eax
push edx
mov edx, ecx
push eax
mov eax, 0xffffffff
not edx
not eax
and edx, eax
not edx
pop eax
mov ecx, edx
pop edx
sub ecx, 0xffffffff
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, ecx
push ecx
push edx
pop ecx
not ebx
push ebx
mov ebx, 0xffffffff
xor ecx, ebx
pop ebx
push ebx
or ebx, ecx
sub ebx, dword [esp]
push eax
mov eax, ecx
neg eax
add ebx, eax
mov eax, dword [esp]
lea esp, [esp + 4]
lea esp, [esp + 4]
sub ebx, 1
pop ecx
mov ecx, ebx
pop ebx
push ecx
pop eax
pop ecx
lea esp, [esp - 4]
mov dword [esp], esi
push ebx
pop esi
push esi
and esi, eax
lea esp, [esp - 4]
mov dword [esp], esi
push edx
mov edx, esi
push ebx
mov ebx, edx
push edx
mov edx, 0xffffffff
push ebx
and ebx, edx
push ebx
mov ebx, dword [esp + 4]
push esi
mov esi, ebx
push ecx
mov ecx, edx
push esi
not esi
and esi, ecx
not esi
push esi
mov esi, dword [esp + 4]
not ecx
push ecx
or ecx, esi
sub ecx, dword [esp]
sub ecx, esi
lea esp, [esp + 4]
sub ecx, 1
pop esi
and esi, ecx
not esi
pop ecx
pop ecx
mov ebx, esi
pop esi
pop edx
xor ebx, edx
pop edx
pop edx
mov edx, ebx
pop ebx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, 1
neg ecx
push ebx
mov ebx, ecx
neg ebx
push esi
mov esi, edx
push esi
push edi
mov edi, esi
push ecx
mov ecx, ebx
push edi
or edi, ecx
sub edi, ecx
sub edi, dword [esp]
add esp, 4
sub edi, 1
not edi
pop ecx
mov esi, edi
pop edi
push esi
mov esi, dword [esp + 4]
or esi, ebx
pop ebx
add ebx, esi
pop esi
pop esi
mov edx, ebx
pop ebx
pop ecx
push ecx
mov ecx, edx
push eax
mov eax, dword [esp + 0x10]
or ecx, eax
not ecx
not ecx
pop eax
mov edx, ecx
pop ecx
mov esi, edx
pop edx
lea esp, [esp - 4]
mov dword [esp], ebx
push edx
mov edx, ebx
or edx, 0xffffffff
not edx
add edx, esi
mov ebx, edx
pop edx
push edx
mov edx, eax
push ebx
and ebx, edx
push ebx
mov ebx, dword [esp + 4]
xor ebx, edx
mov edx, dword [esp]
lea esp, [esp + 4]
xor ebx, edx
pop edx
pop edx
push ebx
pop esi
pop ebx
pop eax
add eax, esi
pop esi
pop esi
mov ebx, eax
mov eax, dword [esp]
lea esp, [esp + 4]
pop edx
cmp dword [ebx], 0xffffffff
je 0x9c71db
call fcn.009c776d
add ebx, 0x150b
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, 0x20c7438e
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, 0x8bcbb51
sub dword [esp], eax
push 0x174a883d
pop eax
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, eax
neg esi
add dword [esp + 4], esi
push edi
mov edi, esi
or edi, 0xffffffff
sub edi, 0xffffffff
xor edi, dword [esp + 4]
mov esi, edi
pop edi
lea esp, [esp + 4]
ror dword [esp], 0x15
push esi
mov esi, eax
or esi, 0xffffffff
add esi, 1
add esi, dword [esp + 4]
mov eax, esi
pop esi
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, eax
push ecx
lea esp, [esp - 4]
mov dword [esp], edx
push ecx
pop edx
push ebx
mov ebx, edx
push ecx
mov ecx, 0xffffffff
not ebx
not ecx
push ebx
or ebx, ecx
sub ebx, dword [esp]
sub ebx, ecx
lea esp, [esp + 4]
sub ebx, 1
pop ecx
push eax
mov eax, edx
or eax, 0xffffffff
add eax, 1
xor eax, ebx
mov edx, eax
pop eax
pop ebx
push ecx
mov ecx, 1
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edx
push eax
and eax, ecx
push eax
mov eax, dword [esp + 4]
push ebx
mov ebx, eax
push eax
mov eax, ecx
or ebx, eax
push edx
mov edx, 0xffffffff
sub edx, ebx
mov ebx, edx
pop edx
not ebx
mov eax, dword [esp]
lea esp, [esp + 4]
mov eax, ebx
pop ebx
pop ecx
add ecx, eax
pop eax
pop eax
mov edx, ecx
pop ecx
push edi
lea edi, [edx]
push edx
mov edx, ebx
push edi
and edi, edx
push edi
mov edi, dword [esp + 4]
push esi
mov esi, edi
push ebx
mov ebx, edx
push esi
push ebx
not ebx
or esi, ebx
not esi
push esi
mov esi, dword [esp + 8]
mov ebx, dword [esp + 4]
not esi
push ebx
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, ebx
push ebx
mov ebx, esi
push edx
or edx, ebx
sub edx, dword [esp]
sub edx, ebx
add esp, 4
sub edx, 1
not edx
mov ebx, dword [esp]
lea esp, [esp + 4]
mov ebx, edx
pop edx
sub ebx, esi
push edx
mov edx, dword [esp + 4]
neg edx
push ecx
push ebx
pop ecx
push ecx
and ecx, edx
push ecx
mov ecx, dword [esp + 4]
or ecx, edx
pop edx
add edx, ecx
pop ecx
pop ecx
mov ebx, edx
pop edx
lea esp, [esp + 4]
sub ebx, 1
pop esi
push esi
and esi, ebx
sub esi, dword [esp]
sub esi, ebx
lea esp, [esp + 4]
push eax
mov eax, 1
neg eax
push ecx
mov ecx, esi
push ecx
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, ecx
push ebx
mov ebx, eax
not edi
not ebx
or edi, ebx
not edi
pop ebx
mov ecx, edi
pop edi
push ecx
mov ecx, dword [esp + 4]
or ecx, eax
pop eax
add eax, ecx
pop ecx
pop ecx
mov esi, eax
mov eax, dword [esp]
lea esp, [esp + 4]
not esi
pop ebx
pop ebx
pop ebx
mov edi, esi
pop esi
pop edx
xor edi, edx
pop edx
pop edx
mov edx, edi
pop edi
mov ecx, edx
pop edx
lea esp, [esp - 4]
mov dword [esp], ecx
and ecx, edi
push ecx
mov ecx, dword [esp + 4]
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, ecx
push eax
mov eax, edi
push ebx
and ebx, eax
push ebx
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, ebx
or edi, 0xffffffff
sub edi, 0xffffffff
xor edi, dword [esp + 8]
mov ebx, edi
pop edi
push esi
mov esi, ebx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
lea esp, [esp - 4]
mov dword [esp], esi
not esi
and esi, ecx
not esi
push esi
mov esi, dword [esp + 4]
not ecx
and ecx, esi
not ecx
pop esi
push esi
or esi, ecx
sub esi, dword [esp]
sub esi, ecx
add esp, 4
sub esi, 1
pop ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov ebx, esi
pop esi
mov eax, dword [esp]
lea esp, [esp + 4]
push edi
mov edi, ebx
push edx
mov edx, eax
push edi
and edi, edx
add edi, edi
push edi
mov edi, dword [esp + 4]
add edi, edx
pop edx
sub edi, edx
pop edx
pop edx
mov ebx, edi
pop edi
pop eax
pop eax
lea esp, [esp - 4]
mov dword [esp], ebx
pop ecx
mov ebx, dword [esp]
lea esp, [esp + 4]
push eax
mov eax, edi
or eax, 0xffffffff
add eax, 1
add eax, dword [esp + 4]
mov edi, eax
pop eax
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ecx
lea esp, [esp - 4]
mov dword [esp], ebx
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, ebx
or edx, 0xffffffff
add edx, 1
xor edx, edi
mov ebx, edx
pop edx
push ebx
push edx
mov edx, ebx
push ecx
mov ecx, eax
push edx
or edx, ecx
sub edx, dword [esp]
sub edx, ecx
lea esp, [esp + 4]
sub edx, 1
not edx
pop ecx
mov ebx, edx
pop edx
push ebx
push esi
mov esi, ebx
or esi, 0xffffffff
inc esi
or esi, dword [esp + 8]
mov ebx, esi
pop esi
or ebx, eax
pop eax
add eax, ebx
pop ebx
pop ebx
mov edi, eax
pop eax
mov ecx, dword [esp]
lea esp, [esp + 4]
pop ecx
mov ebx, edi
mov edi, dword [esp]
lea esp, [esp + 4]
mov eax, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, ebx
lea esp, [esp - 4]
push ecx
mov ecx, dword [esp + 4]
or ecx, 0xffffffff
add ecx, 1
or ecx, edx
mov dword [esp + 4], ecx
pop ecx
mov edx, 0x1c940
push edi
or edi, 0xffffffff
not edi
sub edi, edx
mov edx, edi
pop edi
sub esi, edx
mov edx, dword [esp]
lea esp, [esp + 4]
push edi
push esi
push eax
mov eax, esi
or eax, 0xffffffff
not eax
or eax, edi
mov esi, eax
pop eax
or esi, 0xffffffff
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, 0xffffffff
sub edx, esi
mov esi, edx
pop edx
xor esi, dword [ebx]
lea edi, [esi]
mov esi, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], edx
push ecx
push ecx
mov ecx, edx
or ecx, 0xffffffff
inc ecx
or ecx, edi
mov edx, ecx
pop ecx
lea esp, [esp - 4]
mov dword [esp], ecx
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, 0x17fe92a
push ebx
ror dword [esp], 0xe
push esi
lea esi, [ebx]
or esi, 0xffffffff
inc esi
add esi, 0x2cc04947
push edx
mov edx, ebx
or edx, 0xffffffff
sub edx, 0xffffffff
push edi
mov edi, esi
push edx
mov edx, edx
push edx
and edx, edi
push edx
mov edx, dword [esp + 4]
or edx, edi
pop edi
add edi, edx
pop edx
pop edx
mov edx, edi
pop edi
mov ebx, edx
pop edx
pop esi
push edx
push edi
mov edi, edx
or edi, 0xffffffff
inc edi
or edi, ebx
push ecx
mov ecx, edx
or ecx, 0xffffffff
add ecx, 1
add ecx, edi
mov edx, ecx
pop ecx
pop edi
neg edx
push edi
mov edi, dword [esp + 8]
lea esp, [esp - 4]
mov dword [esp], edi
push eax
mov eax, edi
push ebx
mov ebx, edx
push eax
push ebx
or eax, 0xffffffff
add eax, 1
not ebx
or ebx, eax
push ebx
mov ebx, dword [esp + 8]
push eax
not ebx
push ecx
mov ecx, eax
push edx
or edx, 0xffffffff
inc edx
push edx
not ecx
not edx
and ecx, edx
push ebx
mov ebx, ecx
push eax
mov eax, dword [esp + 8]
push ebx
and ebx, eax
push ebx
mov ebx, dword [esp + 4]
add ebx, eax
pop eax
sub ebx, eax
pop eax
pop eax
mov ecx, ebx
pop ebx
pop edx
mov eax, ecx
pop edx
pop ecx
and ebx, eax
or ebx, dword [esp]
pop eax
pop eax
lea esp, [esp - 4]
mov dword [esp], eax
not ebx
not eax
and ebx, eax
or ebx, dword [esp]
mov eax, dword [esp]
lea esp, [esp + 4]
not ebx
or ebx, eax
push ecx
mov ecx, eax
push ebx
mov ebx, 0xffffffff
push ecx
and ecx, ebx
push ecx
mov ecx, dword [esp + 4]
add ecx, ebx
pop ebx
sub ecx, ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
pop ebx
mov eax, ecx
pop ecx
inc eax
not ebx
push esi
mov esi, ebx
push ebx
mov ebx, eax
push edi
mov edi, 0xffffffff
xor esi, edi
pop edi
not ebx
push esi
push edi
mov edi, esi
push ecx
mov ecx, ebx
push esi
mov esi, edi
push edx
mov edx, ecx
push esi
and esi, edx
push esi
mov esi, dword [esp + 4]
xor esi, edx
pop edx
xor esi, edx
pop edx
pop edx
mov edi, esi
pop esi
not edi
not edi
pop ecx
mov esi, edi
pop edi
sub esi, dword [esp]
sub esi, ebx
lea esp, [esp + 4]
sub esi, 1
pop ebx
mov ebx, esi
pop esi
mov eax, ebx
pop ebx
add esp, 4
pop ebx
lea edi, [eax]
pop eax
lea esp, [esp - 4]
mov dword [esp], edi
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, edi
push edx
mov edx, ebx
push ecx
mov ecx, 0xffffffff
push edx
and edx, ecx
push edx
mov edx, dword [esp + 4]
add edx, ecx
pop ecx
sub edx, ecx
pop ecx
pop ecx
mov ebx, edx
pop edx
add ebx, 1
add ebx, dword [esp + 8]
mov edi, ebx
pop ebx
or edi, edx
pop edx
add edx, edi
push ecx
push edi
pop ecx
or ecx, 0xffffffff
sub ecx, 0xffffffff
xor ecx, dword [esp + 4]
mov edi, ecx
pop ecx
lea esp, [esp + 4]
pop edi
push ebx
mov ebx, dword [esp + 8]
or ebx, 0xffffffff
sub ebx, 0xffffffff
xor ebx, edx
mov dword [esp + 8], ebx
pop ebx
pop edx
mov ebx, 0x77e7bcb8
sub dword [esp], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
push ebx
pop ecx
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, ebx
or edx, 0xffffffff
add edx, 1
add edx, dword [esp + 4]
mov ebx, edx
mov edx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp + 4]
shr edx, cl
mov ecx, dword [esp]
lea esp, [esp + 4]
push edx
mov edx, edi
push ebx
mov ebx, 0x99712a22
push ebx
ror dword [esp], 0
lea esp, [esp - 4]
mov dword [esp], 0x99712a02
pop ebx
xor dword [esp], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
mov ecx, ebx
pop ebx
xor edx, edx
or dword [esp], edx
pop edx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov edi, edx
mov edx, dword [esp]
lea esp, [esp + 4]
push eax
push ebx
mov ebx, eax
push edx
mov edx, ebx
push ebx
mov ebx, 0xffffffff
push edx
and edx, ebx
push edx
mov edx, dword [esp + 4]
add edx, ebx
pop ebx
push eax
mov eax, ebx
neg eax
push edi
mov edi, edx
push edi
and edi, eax
push edi
mov edi, dword [esp + 4]
or edi, eax
pop eax
add eax, edi
pop edi
pop edi
mov edx, eax
pop eax
pop ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
mov ebx, edx
pop edx
push ecx
mov ecx, 1
push edi
push ebx
pop edi
push edi
and edi, ecx
push edi
mov edi, dword [esp + 4]
or edi, ecx
pop ecx
add ecx, edi
pop edi
pop edi
mov ebx, ecx
pop ecx
xor ebx, 0xbe4ea735
mov eax, ebx
pop ebx
push eax
push edx
lea esp, [esp - 4]
mov dword [esp], ecx
mov edx, dword [esp + 8]
lea esp, [esp - 4]
mov dword [esp], ecx
mov cl, 7
shl edx, cl
pop ecx
push edx
mov edx, dword [esp + 0xc]
mov cl, 0x19
shr edx, cl
or dword [esp], edx
pop edx
pop ecx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
mov eax, 0xe0b272a5
push edi
mov edi, dword [esp + 4]
push ebx
lea ebx, [eax]
push edi
and edi, ebx
add edi, edi
lea esp, [esp - 4]
mov dword [esp], edi
push ebx
mov ebx, edi
or ebx, 0xffffffff
add ebx, 1
xor ebx, dword [esp + 8]
mov edi, ebx
pop ebx
push edx
mov edx, ebx
neg edx
sub edi, edx
pop edx
mov ebx, dword [esp]
lea esp, [esp + 4]
sub edi, ebx
pop ebx
pop ebx
mov dword [esp + 4], edi
pop edi
pop eax
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, eax
push ebx
mov ebx, edi
push ebx
and ebx, edx
push ebx
mov ebx, dword [esp + 4]
or ebx, edx
pop edx
add edx, ebx
pop ebx
pop ebx
mov edi, edx
mov edx, dword [esp]
lea esp, [esp + 4]
mov eax, dword [esp]
lea esp, [esp + 4]
push eax
mov eax, dword [ebx]
push esi
push eax
pop esi
push eax
mov eax, 0xffffffff
push esi
and esi, eax
push esi
push edx
mov edx, esi
or edx, 0xffffffff
push esi
mov esi, 1
add edx, esi
pop esi
or edx, dword [esp + 8]
mov esi, edx
pop edx
add esi, eax
pop eax
sub esi, eax
mov eax, dword [esp]
lea esp, [esp + 4]
pop eax
mov eax, esi
pop esi
add eax, 1
push edx
mov edx, eax
push ecx
push edi
pop ecx
push edx
or edx, ecx
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, dword [esp + 4]
and edx, ecx
not edx
and edx, dword [esp]
add esp, 8
push edx
mov edx, ecx
or edx, 0xffffffff
sub edx, 0xffffffff
or edx, dword [esp + 4]
mov ecx, edx
pop edx
lea esp, [esp + 4]
mov eax, edx
pop edx
mov dword [ebx], eax
mov eax, dword [esp]
lea esp, [esp + 4]
push ecx
mov ecx, 0x86a16aca
push ecx
ror dword [esp], 0x11
mov ecx, 0x8ba5453b
sub dword [esp], ecx
mov ecx, 0x29bffe11
xor dword [esp], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
push esi
mov esi, dword [esp + 4]
or esi, 0xffffffff
inc esi
xor esi, eax
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
mov eax, ecx
neg eax
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, eax
neg edx
add ebx, edx
pop edx
pop eax
pop ecx
cmp ebx, esi
jb 0x9c6683
push eax
mov eax, edi
or eax, 0xffffffff
inc eax
or eax, dword [esp + 4]
mov edi, eax
pop eax
lea esp, [esp + 4]
call fcn.009c776d
add ebx, 0xb80
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, 0xcd6daed7
push edx
push 0x32925159
pop edx
push eax
push edi
mov edi, eax
or edi, 0xffffffff
sub edi, 0xffffffff
or edi, edx
mov eax, edi
pop edi
push ecx
mov ecx, dword [esp + 8]
push ecx
and ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, dword [esp + 4]
or ecx, eax
pop eax
add eax, ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
pop ecx
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
ror dword [esp], 3
pop edx
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, edx
neg edi
push esi
mov esi, edi
neg esi
add ebx, esi
mov esi, dword [esp]
lea esp, [esp + 4]
push eax
mov eax, edi
or eax, 0xffffffff
add eax, 1
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, dword [esp + 8]
neg ecx
sub eax, ecx
pop ecx
mov edi, eax
mov eax, dword [esp]
lea esp, [esp + 4]
lea esp, [esp + 4]
push ebx
lea ebx, [edx]
or ebx, 0xffffffff
not ebx
push eax
mov eax, dword [esp + 8]
neg eax
sub ebx, eax
pop eax
mov edx, ebx
pop ebx
lea esp, [esp + 4]
lea esp, [esp - 4]
push edx
mov edx, dword [esp + 4]
or edx, 0xffffffff
add edx, 1
or edx, ebx
push edi
mov edi, dword [esp + 8]
or edi, 0xffffffff
inc edi
xor edi, edx
mov dword [esp + 8], edi
pop edi
pop edx
push edx
mov edx, ebx
push ecx
mov ecx, edx
push ebx
mov ebx, 0xffffffff
or ecx, ebx
push edx
mov edx, 0xffffffff
xor ecx, edx
pop edx
not ecx
pop ebx
mov edx, ecx
pop ecx
push esi
mov esi, 0xffffffff
neg esi
push edi
mov edi, edx
push edi
and edi, esi
push edi
mov edi, dword [esp + 4]
or edi, esi
pop esi
add esi, edi
mov edi, dword [esp]
lea esp, [esp + 4]
pop edi
mov edx, esi
pop esi
or edx, 0x408f4d98
mov ebx, edx
pop edx
push ebx
push 0xc0dbb065
pop ebx
push eax
mov eax, dword [esp + 4]
push ecx
mov ecx, ebx
push eax
push ebx
mov ebx, eax
push eax
mov eax, ecx
lea esp, [esp - 4]
mov dword [esp], ebx
not dword [esp]
and ebx, eax
or dword [esp], ebx
pop ebx
push eax
not ebx
neg eax
sub eax, 1
and ebx, eax
or ebx, dword [esp]
pop eax
pop eax
mov eax, ebx
pop ebx
push eax
mov eax, dword [esp + 4]
and eax, ecx
not eax
and eax, dword [esp]
lea esp, [esp + 8]
pop ecx
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ebx
or eax, 0xffffffff
inc eax
push esi
mov esi, 0x8054fdfe
push ecx
mov ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
and ecx, esi
push ecx
mov ecx, dword [esp + 4]
or ecx, esi
pop esi
add esi, ecx
pop ecx
pop ecx
lea eax, [esi]
pop esi
push eax
pop ebx
pop eax
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, ebx
neg edx
push esi
mov esi, dword [esp + 8]
push esi
push ecx
mov ecx, esi
push ebx
mov ebx, edx
push ecx
or ecx, 0xffffffff
push esi
mov esi, ecx
push eax
or eax, 0xffffffff
not eax
not esi
push ecx
mov ecx, esi
push ebx
mov ebx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
and ecx, ebx
push ecx
mov ecx, dword [esp + 4]
add ecx, ebx
pop ebx
sub ecx, ebx
pop ebx
pop ebx
mov esi, ecx
pop ecx
pop eax
mov ecx, esi
pop esi
push ebx
push ebx
not dword [esp]
and ebx, ecx
push eax
mov eax, dword [esp + 4]
push edx
mov edx, ebx
lea esp, [esp - 4]
mov dword [esp], eax
not dword [esp]
and eax, edx
or eax, dword [esp]
add esp, 4
push eax
and eax, edx
not dword [esp]
or dword [esp], eax
pop eax
pop edx
mov dword [esp + 4], eax
pop eax
pop ebx
push ebx
mov ebx, dword [esp + 8]
not ebx
or ebx, ecx
pop ecx
push ecx
not ebx
not ecx
and ebx, ecx
or ebx, dword [esp]
mov ecx, dword [esp]
lea esp, [esp + 4]
push ecx
neg ebx
sub ebx, 1
not ecx
and ebx, ecx
or ebx, dword [esp]
pop ecx
or ecx, 0xffffffff
not ecx
lea esp, [esp - 4]
mov dword [esp], ecx
not ebx
not ecx
and ebx, ecx
or ebx, dword [esp]
pop ecx
mov ecx, ebx
pop ebx
lea esp, [esp + 4]
pop ebx
mov esi, ecx
pop ecx
push esi
push edi
mov edi, esi
or edi, 0xffffffff
sub edi, 0xffffffff
add edi, dword [esp + 8]
mov esi, edi
pop edi
or esi, edx
mov edx, dword [esp]
lea esp, [esp + 4]
add edx, esi
pop esi
pop esi
push eax
mov eax, dword [esp + 8]
or eax, 0xffffffff
add eax, 1
xor eax, edx
mov dword [esp + 8], eax
pop eax
pop edx
push eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov eax, dword [esp + 8]
push ecx
push ebx
mov bl, cl
or bl, 0xff
not bl
xor bl, 0x1e
mov cl, bl
pop ebx
shl eax, cl
pop ecx
push eax
push edx
mov edx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, edx
push eax
mov eax, 0xffffffff
not ecx
or ecx, eax
not ecx
or ecx, eax
pop eax
push ecx
pop edx
pop ecx
add edx, 1
add edx, dword [esp + 0x10]
mov eax, edx
pop edx
mov cl, 2
shr eax, cl
xor dword [esp], eax
pop eax
mov ecx, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], eax
pop eax
push edi
mov edi, ebx
push edx
push edi
pop edx
push ecx
mov ecx, 0xffffffff
push edx
and edx, ecx
sub edx, ecx
sub edx, dword [esp]
lea esp, [esp + 4]
sub edx, 1
not edx
pop ecx
lea edi, [edx]
pop edx
not edi
or edi, dword [esp + 4]
mov ebx, edi
pop edi
lea esp, [esp + 4]
push edx
mov edx, esi
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, edx
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, 0xffffffff
lea esp, [esp - 4]
mov dword [esp], ebx
and ebx, eax
lea esp, [esp - 4]
push esi
mov esi, dword [esp + 4]
or esi, 0xffffffff
sub esi, 0xffffffff
xor esi, ebx
mov dword [esp + 4], esi
pop esi
mov ebx, dword [esp + 4]
add ebx, eax
mov eax, dword [esp]
lea esp, [esp + 4]
push ecx
push eax
pop ecx
neg ecx
push esi
lea esi, [ebx]
push esi
push eax
mov eax, esi
push ebx
mov ebx, ecx
and eax, ebx
not eax
not eax
pop ebx
mov esi, eax
pop eax
push esi
mov esi, dword [esp + 4]
or esi, ecx
pop ecx
add ecx, esi
pop esi
pop esi
mov ebx, ecx
pop ecx
pop eax
push edx
mov edx, eax
or edx, 0xffffffff
add edx, 1
or edx, dword [esp + 4]
mov eax, edx
pop edx
lea esp, [esp + 4]
mov edx, ebx
pop ebx
inc edx
push esi
mov esi, edx
push ecx
mov ecx, ebx
push esi
push edx
mov edx, esi
push ebx
mov ebx, ecx
and edx, ebx
not edx
not edx
mov ebx, dword [esp]
lea esp, [esp + 4]
mov esi, edx
pop edx
not dword [esp]
or esi, dword [esp]
lea esp, [esp + 4]
not esi
or esi, ecx
pop ecx
mov edx, esi
pop esi
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, esi
or ecx, 0xffffffff
inc ecx
push ebx
mov ebx, ecx
push ecx
push edx
pop ecx
push ebx
push ecx
not ecx
push ebx
and ebx, ecx
sub ebx, ecx
sub ebx, dword [esp]
lea esp, [esp + 4]
sub ebx, 1
push ebx
mov ebx, dword [esp + 8]
mov ecx, dword [esp + 4]
not ebx
or ecx, ebx
not ecx
mov ebx, dword [esp]
lea esp, [esp + 4]
push esi
mov esi, ebx
push ebx
mov ebx, ecx
push esi
push eax
mov eax, esi
push edx
mov edx, ebx
push eax
push edx
or eax, 0xffffffff
sub eax, 0xffffffff
push eax
not edx
not eax
and edx, eax
or edx, dword [esp]
pop eax
push edx
mov edx, dword [esp + 8]
push edx
not dword [esp]
and edx, eax
or dword [esp], edx
pop edx
pop eax
not edx
or edx, eax
push eax
not edx
not eax
and edx, eax
or edx, dword [esp]
pop eax
or eax, 0xffffffff
sub eax, 0xffffffff
push eax
not edx
not eax
and edx, eax
or edx, dword [esp]
pop eax
mov eax, edx
pop edx
lea esp, [esp + 4]
pop edx
mov esi, eax
pop eax
sub esi, ebx
sub esi, dword [esp]
add esp, 4
sub esi, 1
not esi
pop ebx
mov ebx, esi
pop esi
not ebx
not ebx
pop ecx
pop ecx
pop ecx
push esi
mov esi, ecx
or esi, 0xffffffff
sub esi, 0xffffffff
add esi, ebx
mov ecx, esi
pop esi
pop ebx
lea esi, [ecx]
mov ecx, dword [esp]
lea esp, [esp + 4]
pop edx
pop ebx
xchg dword [ebx], esi
push eax
mov eax, esi
or eax, 0xffffffff
not eax
xor eax, dword [esp + 4]
mov esi, eax
pop eax
lea esp, [esp + 4]
call fcn.009c776d
add ebx, 0x58f
lea esp, [esp - 4]
mov dword [esp], eax
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, eax
or edx, 0xffffffff
sub edx, 0xffffffff
add edx, 0x8197dff2
mov eax, edx
pop edx
lea esp, [esp - 4]
mov dword [esp], eax
push edi
mov edi, eax
or edi, 0xffffffff
sub edi, 0xffffffff
add edi, 0x8197dcf2
mov eax, edi
pop edi
sub dword [esp], eax
ror dword [esp], 7
pop eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
push edx
push ebx
pop edx
push edx
and edx, ecx
push edx
mov edx, dword [esp + 4]
push esi
lea esi, [edx]
lea esp, [esp - 4]
push eax
mov eax, dword [esp + 4]
or eax, 0xffffffff
sub eax, 0xffffffff
xor eax, edx
mov dword [esp + 4], eax
pop eax
mov edx, ecx
push esi
push eax
mov eax, esi
push ebx
mov ebx, edx
push eax
or eax, 0xffffffff
not eax
push ebx
push esi
push edx
mov esi, ebx
or edx, 0xffffffff
add edx, 1
push edx
not esi
not edx
and esi, edx
or esi, dword [esp]
pop edx
pop edx
mov ebx, esi
mov esi, dword [esp]
lea esp, [esp + 4]
or ebx, eax
push ebx
push edx
mov edx, ebx
or edx, 0xffffffff
inc edx
or edx, dword [esp + 0xc]
mov ebx, edx
pop edx
not ebx
or ebx, eax
pop eax
not ebx
or ebx, eax
push esi
mov esi, 0xffffffff
sub esi, ebx
mov ebx, esi
pop esi
or ebx, eax
or eax, 0xffffffff
add eax, 1
push ebx
and ebx, eax
not dword [esp]
or ebx, dword [esp]
add esp, 4
mov eax, ebx
pop ebx
add esp, 4
pop ebx
mov esi, eax
pop eax
push esi
push ebx
mov ebx, esi
or ebx, 0xffffffff
sub ebx, 0xffffffff
push edi
mov edi, ebx
push edx
mov edx, dword [esp + 0x10]
push edi
push edx
not edx
and edi, edx
push esi
push eax
mov eax, esi
or eax, 0xffffffff
sub eax, 0xffffffff
xor eax, edx
mov esi, eax
pop eax
or esi, 0xffffffff
not esi
or esi, dword [esp + 4]
mov edx, esi
pop esi
lea esp, [esp + 4]
push edi
mov edi, dword [esp + 4]
not edi
and edx, edi
mov edi, dword [esp]
lea esp, [esp + 4]
or edi, edx
pop edx
pop edx
mov ebx, edi
pop edi
mov esi, ebx
pop ebx
xor esi, edx
pop edx
xor esi, edx
pop edx
pop edx
mov edx, esi
pop esi
pop ecx
add ecx, edx
mov edx, dword [esp]
lea esp, [esp + 4]
pop edx
mov ebx, ecx
pop ecx
pop eax
lea esp, [esp - 4]
mov dword [esp], edi
push ebx
mov ebx, 0x30474550
lea esp, [esp - 4]
push esi
mov esi, dword [esp + 4]
push ebx
mov ebx, esi
push edx
mov edx, 0xffffffff
not ebx
not edx
push ebx
or ebx, edx
sub ebx, dword [esp]
sub ebx, edx
add esp, 4
sub ebx, 1
pop edx
mov esi, ebx
pop ebx
add esi, 1
push eax
mov eax, ebx
neg eax
sub esi, eax
pop eax
mov dword [esp + 4], esi
pop esi
mov ebx, 0xcfb8baaf
push esi
mov esi, ebx
push eax
mov eax, dword [esp + 8]
push eax
and eax, esi
push eax
mov eax, dword [esp + 4]
push edi
mov edi, eax
push ecx
mov ecx, esi
push ecx
not edi
not ecx
and edi, ecx
or edi, dword [esp]
pop ecx
push ecx
not edi
not ecx
and edi, ecx
or edi, dword [esp]
mov ecx, dword [esp]
lea esp, [esp + 4]
pop ecx
lea eax, [edi]
pop edi
pop esi
add esi, eax
pop eax
pop eax
mov dword [esp + 4], esi
pop esi
rol dword [esp], 0xf
mov ebx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, edi
push eax
mov eax, ebx
lea esp, [esp - 4]
mov dword [esp], eax
lea esp, [esp - 4]
mov dword [esp], esi
lea esi, [ecx]
push edi
or edi, 0xffffffff
push eax
mov eax, 1
add edi, eax
pop eax
lea esp, [esp - 4]
mov dword [esp], esi
not dword [esp]
and esi, edi
or dword [esp], esi
pop esi
mov ecx, esi
pop edi
pop esi
not eax
inc eax
dec eax
and ecx, eax
or ecx, dword [esp]
mov eax, dword [esp]
lea esp, [esp + 4]
not ecx
or ecx, eax
mov eax, dword [esp]
lea esp, [esp + 4]
push esi
lea esp, [esp - 4]
mov dword [esp], edi
pop esi
or esi, 0xffffffff
sub esi, 0xffffffff
xor esi, ecx
mov edi, esi
pop esi
pop ecx
mov ebx, dword [esp]
lea esp, [esp + 4]
push eax
push 0x2d5241c6
pop eax
push eax
mov eax, 0x54d596c4
lea esp, [esp - 4]
mov dword [esp], ecx
lea ecx, [eax]
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, dword [esp + 8]
push edi
and edi, ecx
push edi
mov edi, dword [esp + 4]
or edi, ecx
push eax
mov eax, ecx
or eax, 0xffffffff
not eax
or eax, dword [esp + 4]
mov ecx, eax
pop eax
lea esp, [esp + 4]
push ebx
mov ebx, edi
push edx
mov edx, ecx
push edx
and edx, ebx
push edx
mov edx, dword [esp + 4]
or edx, ebx
pop ebx
add ebx, edx
pop edx
pop edx
mov ecx, ebx
pop ebx
pop edi
mov edi, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov eax, 0x8227d88b
sub dword [esp], eax
push edi
push ecx
mov edi, dword [esp + 8]
push ecx
mov cl, 3
shr edi, cl
pop ecx
lea esp, [esp - 4]
push ecx
mov ecx, dword [esp + 4]
or ecx, 0xffffffff
not ecx
xor ecx, edi
mov dword [esp + 4], ecx
pop ecx
mov edi, dword [esp + 0xc]
mov cl, 0x1d
shl edi, cl
push ebx
push edx
mov edx, ebx
or edx, 0xffffffff
sub edx, 0xffffffff
xor edx, dword [esp + 8]
mov ebx, edx
pop edx
push eax
mov eax, edi
push ebx
and ebx, eax
not dword [esp]
or dword [esp], ebx
pop ebx
push ebx
and ebx, eax
not dword [esp]
or ebx, dword [esp]
lea esp, [esp + 4]
mov eax, dword [esp]
lea esp, [esp + 4]
mov dword [esp + 4], ebx
pop ebx
pop edi
pop ecx
mov dword [esp + 4], edi
pop edi
pop eax
push ebx
push eax
pop ebx
not ebx
inc ebx
push ecx
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ecx
or eax, 0xffffffff
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, 1
push edi
mov edi, eax
push edi
and edi, ebx
push edi
mov edi, dword [esp + 4]
or edi, ebx
pop ebx
add ebx, edi
pop edi
pop edi
mov eax, ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
add eax, edi
lea ecx, [eax]
pop eax
lea esp, [esp - 4]
mov dword [esp], ecx
and ecx, ebx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, dword [esp + 4]
push esi
mov esi, ecx
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ebx
push eax
not esi
not eax
and esi, eax
or esi, dword [esp]
mov eax, dword [esp]
lea esp, [esp + 4]
push eax
not esi
not eax
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, esi
push ecx
push eax
pop ecx
and edx, ecx
not edx
not edx
pop ecx
mov esi, edx
pop edx
push edx
push esi
pop edx
push ecx
mov ecx, dword [esp + 8]
push edx
and edx, ecx
push edx
mov edx, dword [esp + 4]
add edx, ecx
pop ecx
sub edx, ecx
pop ecx
pop ecx
mov esi, edx
pop edx
pop eax
pop eax
lea ecx, [esi]
pop esi
push edi
push ebx
pop edi
or edi, 0xffffffff
inc edi
push eax
mov eax, dword [esp + 8]
push ebx
mov ebx, edi
push ebx
and ebx, eax
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, dword [esp + 4]
or ebx, eax
pop eax
add eax, ebx
pop ebx
pop ebx
mov edi, eax
pop eax
mov ebx, edi
pop edi
lea esp, [esp + 4]
add ebx, ecx
pop ecx
pop ecx
mov edi, ebx
pop ebx
push edx
mov edx, eax
or edx, 0xffffffff
add edx, 1
push esi
push edi
mov edi, esi
or edi, 0xffffffff
not edi
xor edi, dword [esp + 0xc]
mov esi, edi
pop edi
push ebx
mov ebx, edx
push ebx
and ebx, esi
push ebx
mov ebx, dword [esp + 4]
or ebx, esi
pop esi
add esi, ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
pop ebx
mov edx, esi
pop esi
mov eax, edx
pop edx
lea esp, [esp + 4]
xchg dword [ebx], edi
mov edi, dword [esp]
lea esp, [esp + 4]
popfd
mov ebx, dword [esp]
lea esp, [esp + 4]
ret