Function at 0xbb2f1a
Capabilities:
Check for vm using instruction vpcext
Reference the vmware io port

Disassembly:
xor esi, 0x750e09c0
sub esi, 0x7e126464
xor ebp, esi
jmp 0xbb558f
pop dword fs:[0]
add esp, 4
cmp dword [ebp + 0x10da2857], 0
jne 0xbb223c
cmp dword [ebp + 0x10da0bc5], 1
jne 0xbb223c
push 0x6f2b
mov dword [esp], edx
mov dword [esp], ecx
push eax
mov dword [esp], esp
add dword [esp], 4
pop ecx
push ecx
mov dword [esp], eax
push esi
jmp 0xbb5069
mov dword [esp], ebp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov dword [esp], esi
mov esi, 0x8c32456
add dword [esp + 4], 0x4107754
sub dword [esp + 4], esi
push edx
jmp 0xbb460c
push ebp
push 0x7cef
jmp 0xbb5c4e
add ecx, eax
add ecx, 0x74627ce6
add ecx, 0x3b415271
jmp 0xbb4dd6
push 0x333a6503
jmp 0xbb44f8
pop esp
neg edx
jmp 0xbb55ed
sub dword [esp + 4], 0x266e4fe2
pop ebx
pop ebp
add ebp, 4
jmp 0xbb51af
lea eax, [ebp + 0x10dea295]
push 0x4125
mov dword [esp], ecx
push esp
mov ecx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
push edx
mov dword [esp], eax
mov eax, 4
push edi
mov edi, 0x3cb74571
add ecx, edi
mov edi, dword [esp]
jmp 0xbb4f8a
add dword [esp + 4], 0x5ae1204b
sub dword [esp + 4], 0x5e7d4ea1
mov ebp, dword [esp + esi*8]
invalid
add dword [esp], 0x6d40ca8
mov ebx, dword [esp]
add esp, 4
jmp 0xbb2ef8
push dword [esp]
push dword [esp]
jmp 0xbb3e3b
xchg dword [esp], ebp
pop esp
xor dword [esp + 4], ecx
pop ecx
mov eax, dword [esp]
add esp, 4
push edx
sub esp, 4
mov dword [esp], edi
mov edi, 0x52e152c5
or edi, 0x256841ca
dec edi
and edi, 0x6bac18b3
add edi, 0x6e6c23fc
sub edi, 0xcd1cc6d7
jmp 0xbb3025
pop ebp
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
push 0xf003f
push 0
push 0
call dword [ebp + 0x10da2578]
test eax, eax
mov dword [ebp + 0x10dea262], eax
push 0xf01ff
cmp dword [ebp + 0x10da2867], 0
je 0xbb1530
mov eax, dword [ebp + 0x10da1b5e]
lea eax, [ebp + 0x10dea2bf]
jmp 0xbb1536
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
mov ebx, dword [esp]
push edx
push esp
pop edx
jmp 0xbb5bab
pop eax
push ebx
mov dword [esp], eax
push esp
pop eax
push ecx
mov ecx, 4
add eax, ecx
pop ecx
push ebp
mov ebp, 0x37f24d2c
xor ebp, 0x533b7ac3
jmp 0xbb5b74
add ebx, 0x7617da9
jmp 0xbb278f
pop edx
jmp 0xbb1d24
mov ecx, 0x58475200
inc ecx
push eax
push ebp
push 0x3dc44ef1
pop ebp
inc ebp
shl ebp, 6
and ebp, 0x2a47468b
add ebp, 0xedfb17bc
mov eax, ebp
pop ebp
dec eax
sub eax, 0x64ea556d
sub ecx, eax
pop eax
add ebp, ecx
jmp 0xbb34f1
pop ebx
add esi, 0x2c177fa3
jmp 0xbb43dd
add eax, 0x65c14fea
or eax, 0x7aca2043
xor eax, 0xc23b45e4
mov edx, eax
pop eax
mov esi, 0xa66784cb
sub esi, edx
jmp 0xbb3258
pop eax
push ecx
mov ecx, 0x6d025723
xchg ecx, esi
not esi
xchg ecx, esi
shr ecx, 7
shl ecx, 5
sub ecx, 0x1ce3708c
jmp 0xbb31f6
pop ecx
push dword [esp]
pop edx
push ecx
mov ecx, esp
jmp 0xbb2713
sub ebp, 0x47fc0885
push ebx
mov ebx, 0x6c185b86
add ebp, ebx
pop ebx
not ebp
sub ebp, 0x753d3cd9
dec ebp
add ebp, 0x6a147441
jmp 0xbb3b5d
not dword [esp]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
push ebx
jmp 0xbb4c39
add dword [esp], 0x20853078
push dword [esp]
push dword [esp]
pop eax
jmp 0xbb36da
push dword [ebp + 0x10deadab]
call dword [ebp + 0x10da2448]
mov eax, dword [ebp + 0x10da1a12]
jmp 0xbb230d
push ecx
mov dword [esp], ebx
mov dword [esp], esi
mov esi, esp
jmp 0xbb5097
push ebp
jmp 0xbb316f
push edx
jmp 0xbb15b6
xchg dword [esp], edi
jmp 0xbb3bf3
sub ebp, 0xe3df6f6a
add eax, ebp
jmp 0xbb4fae
push eax
mov dword [esp], edi
push dword [esp + 4]
push dword [esp]
pop edi
jmp 0xbb49ba
pop ebx
jmp 0xbb5bf0
xor ebp, 0x62d16840
xor ebx, ebp
pop ebp
jmp 0xbb36e3
pop eax
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], ebx
mov dword [esp], eax
push dword [ebp + 0x10dea262]
call dword [ebp + 0x10dea25a]
mov dword [ebp + 0x10dea266], eax
mov dword [ebp + 0x10da292f], 0
cmp dword [ebp + 0x10dea266], 0
je 0xbb5d18
lea eax, [ebp + 0x10dea540]
push 0x261e
mov dword [esp], eax
push 1
push dword [ebp + 0x10dea266]
call dword [ebp + 0x10dea25e]
push dword [ebp + 0x10dea266]
call dword [ebp + 0x10da1b58]
push 0xf01ff
jmp 0xbb58df
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
add eax, 0x30d5acb
mov dword [ebp + 0x10da19f1], 0
cmp dword [ebp + 0x10da2867], 0
je 0xbb257e
cmp eax, 0x8c
jae 0xbb2a79
jmp 0xbb2589
pop dword [esp]
pop esp
jmp 0xbb1484
push ebx
jmp 0xbb4347
mov edx, 0x7a7339b3
add edx, 0x1a3a4009
sub edx, 0x59e836fa
jmp 0xbb4b58
mov edi, dword [esp]
jmp 0xbb2b8b
pop esp
add esp, 4
push ebp
jmp 0xbb5941
push ecx
mov ecx, 4
add edi, ecx
pop ecx
jmp 0xbb1d6a
pop edi
push 0x629f
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
jmp 0xbb1642
mov ebp, dword [esp]
jmp 0xbb2086
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
jmp 0xbb5a54
mov ecx, dword [esp]
add esp, 4
pop eax
jmp 0xbb4326
sub ecx, eax
sub ecx, 0x54d54a6a
add ecx, 0x1f24520e
sub esp, 4
mov dword [esp], eax
mov eax, 0x3cb74571
sub ecx, eax
pop eax
jmp 0xbb1dda
cmp dword [ebp + 0x10da0bc5], 0
jne 0xbb2268
push eax
sgdt [esp - 2]
pop eax
shr eax, 0x18
cmp eax, 0xff
jne 0xbb2268
mov dword [ebp + 0x10da2857], 1
push 0x1c
mov dword [esp], ecx
sub esp, 4
mov dword [esp], esi
jmp 0xbb3d88
pop esp
mov dword [esp], eax
push 0x60
jmp 0xbb5507
lea eax, [ebp + 0x10dea950]
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
push ebx
push 0x4a3e1471
push dword [esp]
mov ebx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
jmp 0xbb4ac7
sub edi, ebx
jmp 0xbb57d4
pop ebx
sub edi, 1
sub edi, 0x212051fc
push ebx
mov ebx, 0x770d092a
or ebx, 0x38843a76
jmp 0xbb1853
cmp eax, 0x98
jae 0xbb2a79
lea eax, [ebp + 0x10058613]
call eax
lea eax, [ebp + 0x100580f9]
call eax
push edx
push eax
jmp 0xbb1f4f
push dword [esp]
jmp 0xbb2033
push esp
pop dword [esp]
jmp 0xbb284e
mov eax, dword [esp]
push 0x65e4
mov dword [esp], ebp
push esp
pop ebp
push ecx
mov ecx, 0x202447e9
xor ecx, 0x3bf2626e
add ecx, 0xe0b59f9
add ecx, 0xd61e8084
jmp 0xbb2fad
mov ebx, 0x1ae67f1d
jmp 0xbb24a2
call dword [ebp + 0x10da246e]
sub esp, 4
mov dword [esp], edx
mov dword [esp], ecx
mov dword [esp], eax
push ebp
jmp 0xbb4945
add ecx, 4
push ebp
mov ebp, 4
add ecx, ebp
pop ebp
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
cmp dword [ebp + 0x10da29e7], 0
jne 0xbb2740
cmp dword [ebp + 0x10da27fb], 0
je 0xbb2755
push eax
mov eax, eax
mov eax, 0xbc6
mov dword [ebp + 0x10da1a85], eax
call dword [ebp + 0x10da1afa]
pop eax
push 0x27b7
mov dword [esp], eax
push dword [esp]
mov eax, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], eax
jmp 0xbb456d
mov ecx, eax
pop eax
jmp 0xbb4363
xor edi, esi
mov esi, dword [esp]
add esp, 4
add esi, 0x17f63f3f
jmp 0xbb3e87
or ebx, 0x632b77c6
shr ebx, 2
xor ebx, 0x89be694
sub eax, ebx
jmp 0xbb1dc6
mov dword [ebp + 0x10dea266], eax
push dword [ebp + 0x10dea266]
call dword [ebp + 0x10da1b58]
test eax, eax
jne 0xbb27e0
push 0x10
cmp dword [ebp + 0x10da2867], 0
je 0xbb5567
lea eax, [ebp + 0x10dea2bf]
jmp 0xbb556d
push 0x7277
jmp 0xbb3499
push ecx
mov ecx, 4
add dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
jmp 0xbb5337
mov edx, 4
add ebp, 0x22c85d63
jmp 0xbb4dbd
pop ecx
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
cmp eax, 0xffffffff
jne 0xbb4ce6
mov dword [ebp + 0x10da1ae1], 0
jmp 0xbb2c1b
pop ebx
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
push esp
pop ebx
push eax
push edx
mov edx, 0x291662ea
jmp 0xbb594c
lea eax, [ebp + 0x10deb313]
push 0x47de
mov dword [esp], edi
mov dword [esp], eax
push dword fs:[0]
jmp 0xbb319a
push eax
push dword [esp]
jmp 0xbb580f
mov dword [esp], edi
mov dword [esp], eax
push ecx
jmp 0xbb4b42
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push 0x7dd0
mov dword [esp], ebp
push eax
push 0x224d6312
mov eax, dword [esp]
jmp 0xbb4bd9
add edi, 4
jmp 0xbb1fdd
push ecx
dec dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebx
mov dword [esp], esi
mov esi, 0x6fb5d2b2
jmp 0xbb3747
lea eax, [ebp + 0x10deab48]
mov dword [ebp + 0x10dead40], eax
jmp 0xbb375d
mov eax, 0x564d5868
mov ecx, 0x14
mov dx, 0x5658
in eax, dx
pop dword fs:[0]
push edx
push eax
mov eax, esp
jmp 0xbb564c
xor dword [esp + 4], ebx
pop ebx
pop edx
xor edx, 0x186c35ff
sub esp, 4
mov dword [esp], ecx
mov ecx, edx
push ecx
push dword [esp]
pop eax
push eax
mov dword [esp], edi
push esp
push dword [esp]
pop edi
add esp, 4
add edi, 4
push ebx
mov ebx, 4
add edi, ebx
pop ebx
xchg dword [esp], edi
pop esp
jmp 0xbb1bfc
push 0x37f3
mov dword [esp], ebx
mov ebx, 4
sub edi, ebx
mov ebx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xbb1db5
mov eax, ecx
mov ecx, dword [esp]
add esp, 4
sub eax, ecx
pop ecx
xor dword [esp + 4], eax
pop eax
mov eax, dword [esp]
jmp 0xbb4c43
dec eax
push ebp
mov ebp, 0x3f025abf
push esi
mov esi, 0xe220f3a
inc esi
xor esi, 0x4c487674
jmp 0xbb5b22
mov dword [ebp + 0x10da28f3], eax
cmp dword [ebp + 0x10da2867], 0
jne 0xbb2eb9
cmp dword [ebp + 0x10da29c3], 0
je 0xbb3038
jmp 0xbb38e7
pop ecx
jmp 0xbb3b43
push ebp
jmp 0xbb3c66
sub ebx, 0x6d40ca8
pop edx
add esi, ebx
jmp 0xbb1a58
mov ecx, esp
add ecx, 4
jmp 0xbb455e
push edx
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
mov ebx, 0x131c5f8f
mov edx, ebx
pop ebx
sub dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov eax, dword [esp]
push ebx
mov ebx, esp
jmp 0xbb4a7c
mov ebp, dword [esp]
jmp 0xbb40e4
add ecx, 0x7ec04c6f
jmp 0xbb54df
add ebp, ecx
jmp 0xbb2ebe
mov ebx, esp
push esi
mov esi, 4
add ebx, esi
pop esi
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push ecx
mov dword [esp], ebx
mov ebx, 0x680a6b11
xchg ebx, eax
inc eax
xchg ebx, eax
dec ebx
xor ebx, 0x488f5b69
sub eax, ebx
mov ebx, dword [esp]
add esp, 4
jmp 0xbb583f
mov edx, edi
pop edi
xor eax, edx
mov edx, dword [esp]
add esp, 4
jmp 0xbb1d16
jmp 0xbb52e8
pop esp
push ecx
mov ecx, 0x66970cc0
not ecx
inc ecx
neg ecx
or ecx, 0x271d5e51
jmp 0xbb35ff
pop ecx
sub edi, ebx
mov ebx, dword [esp]
add esp, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], edx
mov dword [esp], edi
mov dword [esp], eax
push dword fs:[0]
mov dword fs:[0], esp
jmp 0xbb3143
lea eax, [ebp + 0x10dea295]
push 0x6e34
mov dword [esp], eax
push 0x3129
mov dword [esp], eax
push dword [ebp + 0x10dea262]
call dword [ebp + 0x10dea24e]
test eax, eax
jne 0xbb27c6
jmp 0xbb27e0
xor esi, 0x670e5c99
shr esi, 1
sub esi, 0x970ef1a3
and ecx, esi
pop esi
xor ecx, 0x5134114
add eax, ecx
pop ecx
push edx
push 4
pop edx
add eax, edx
pop edx
jmp 0xbb35b9
pop esp
add esp, 4
and ebx, 0x1c631696
sub ebx, 0x2f771581
xor ebx, ebp
xor ebp, ebx
xor ebx, ebp
not ebp
push ebx
push ebp
jmp 0xbb367e
add eax, ebp
pop ebp
jmp 0xbb33eb
cmp dword [ebp + 0x10da0a71], 0
je 0xbb2c2c
cmp dword [ebp + 0x10da0bc5], 1
jne 0xbb2c2c
cmp byte [ebp + 0x10deb1fa], 0
jne 0xbb2c2c
jmp 0xbb13b4
mov ebp, 0x54887dc8
push ebx
mov ebx, 0x70b1167a
sub ebp, ebx
jmp 0xbb3ac4
mov dword fs:[0], esp
xor ebx, ebx
xor eax, eax
inc eax
invalid
push esi
mov esi, 0x5c4d18c3
xor esi, 0x33c72a66
jmp 0xbb30ee
add edx, ebp
pop ebp
mov eax, edx
mov edx, dword [esp]
add esp, 4
add eax, 0xc3e99a18
add ebx, eax
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add ebx, 4
push ebx
push dword [esp + 4]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
jmp 0xbb3e8e
pop edx
jmp 0xbb2779
pop edx
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0xbb4d32
neg esi
sub esi, 0x3ada99bd
push esi
jmp 0xbb207e
sub ecx, 0x6a6947ff
dec ecx
jmp 0xbb5456
push dword [esp]
jmp 0xbb3543
add edx, 4
push ecx
mov ecx, 0x3f5706
neg ecx
jmp 0xbb2f9c
cmp dword [ebp + 0x10da29e7], 0
jne 0xbb3354
cmp dword [ebp + 0x10da27fb], 0
je 0xbb3369
push eax
mov eax, eax
mov eax, 0x7d4
mov dword [ebp + 0x10da1a85], eax
call dword [ebp + 0x10da1afa]
pop eax
sub esp, 4
mov dword [esp], edx
push esp
pop edx
push eax
push 4
pop eax
add edx, eax
pop eax
push esi
jmp 0xbb4930
mov eax, 4
add ecx, eax
pop eax
push eax
push edx
mov edx, 0x7c320f62
mov eax, 0x83cdf0a0
add eax, edx
pop edx
add ecx, eax
push dword [esp]
pop eax
add esp, 4
push ecx
push dword [esp + 4]
mov ecx, dword [esp]
jmp 0xbb3dcb
lea eax, [ebp + 0x10dea295]
push ebx
mov dword [esp], edi
mov edi, esp
add edi, 4
push edx
mov edx, 4
sub edi, edx
jmp 0xbb325e
sub esi, 0x7941f134
push eax
mov eax, esi
jmp 0xbb2771
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
lea eax, [ebp + 0x10deb2b2]
sub esp, 4
mov dword [esp], eax
push 0x2157
jmp 0xbb25b2
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push edx
sub esp, 4
mov dword [esp], ecx
push edx
mov edx, 0x33c352ef
mov ecx, edx
jmp 0xbb572c
lea eax, [ebp + 0x10dea29e]
jmp 0xbb2e99
mov dword [esp], eax
add dword [esp], 0x20aa7b0e
jmp 0xbb4c11
mov dword [esp], ebx
mov ebx, 4
add dword [esp + 4], 0x266e4fe2
add dword [esp + 4], ebx
jmp 0xbb14f1
mov ecx, dword [esp]
add esp, 4
add eax, 0x33715f10
add eax, ebp
sub eax, 0x33715f10
jmp 0xbb169d
add esp, 4
add ebx, 0xb3f90283
and edi, ebx
jmp 0xbb24a9
pop edi
add esp, 4
add esp, 4
sub esi, 4
jmp 0xbb56b2
push edi
mov edi, 0x1ae67f21
push ebx
jmp 0xbb2657
pop edx
mov eax, esi
pop esi
jmp 0xbb2d1d
inc ebp
jmp 0xbb1dcc
xchg dword [esp], eax
mov esp, dword [esp]
pop dword [esp]
pop esp
or ax, ax
je 0xbb2268
mov dword [ebp + 0x10da2857], 1
jmp 0xbb2268
mov ecx, edi
pop edi
pop edx
and ecx, 0x2da87a8e
sub ecx, 0xcc055025
xor eax, ecx
pop ecx
jmp 0xbb3342
sub ecx, 0x2be8483f
add edi, ecx
pop ecx
or edi, 0x52282e59
jmp 0xbb3948
inc ebp
xor ebp, 0x58490372
jmp 0xbb3b49
pop ebx
pop ebp
jmp 0xbb4cc7
add esp, 4
push ebx
jmp 0xbb2fb4
add ebp, ebx
pop ebx
add ebp, 4
xchg dword [esp], ebp
pop esp
push esi
push eax
mov eax, 4
jmp 0xbb415f
add ecx, esi
pop esi
add eax, 0x33ec5f5c
add eax, ecx
sub eax, 0x33ec5f5c
pop ecx
mov dword [ebp + 0x10dead40], eax
push 0x34
lea eax, [ebp + 0x10da11ad]
push eax
push dword [ebp + 0x10dead40]
push 0
call dword [ebp + 0x10da2469]
cmp eax, 7
je 0xbb38df
mov bx, ds
test bl, 4
jne 0xbb3881
mov byte [ebp + 0x10da16e4], 0x56
push 0x9ca8b852
push dword [ebp + 0x10da0b19]
call dword [ebp + 0x10da212a]
push 4
push 0x1000
push 0x64
push 0
call eax
mov dword [ebp + 0x10deadb3], eax
mov byte [ebp + 0x10da16e4], 0x47
push 0xec18ac9b
push dword [ebp + 0x10da0b19]
call dword [ebp + 0x10da212a]
call eax
mov esi, eax
mov byte [ebp + 0x10da16e4], 0x4f
push 0xc62f2661
push dword [ebp + 0x10da16f3]
call dword [ebp + 0x10da212a]
lea ebx, [ebp + 0x10deadaf]
push ebx
push 0x28
push esi
call eax
test eax, eax
jne 0xbb37f8
mov byte [ebp + 0x10da16e4], 0x41
push 0xdb876498
push dword [ebp + 0x10da16f3]
call dword [ebp + 0x10da212a]
mov dword [ebp + 0x10deade6], eax
mov byte [ebp + 0x10da16e4], 0x4c
push 0x80a4e7a4
push dword [ebp + 0x10da16f3]
call dword [ebp + 0x10da212a]
mov ebx, dword [ebp + 0x10deadb3]
lea ebx, [ebx + 4]
push ebx
lea ebx, [ebp + 0x10deadd2]
push ebx
push 0
call eax
mov ebx, dword [ebp + 0x10deadb3]
mov dword [ebx], 1
mov dword [ebx + 0xc], 2
mov ebx, dword [ebp + 0x10da2b76]
mov dword [ebp + 0x10da270f], 0
push 0
push 0
push 0
mov ebx, dword [ebp + 0x10deadb3]
push ebx
push 0
push dword [ebp + 0x10deadaf]
call dword [ebp + 0x10deade6]
mov byte [ebp + 0x10da16e4], 0x45
push 0x92a5f797
push dword [ebp + 0x10da2443]
call dword [ebp + 0x10da212a]
push 0
push 2
call eax
mov bx, ds
test bl, 4
jne 0xbb38df
mov ebx, dword [ebp + 0x10deadb3]
mov dword [ebx + 0xc], 0
mov ebx, dword [ebp + 0x10da1a03]
push 0
push 0
mov ebx, dword [ebp + 0x10deadb3]
push ebx
push 0
push dword [ebp + 0x10deadaf]
call dword [ebp + 0x10deade6]
push dword [ebp + 0x10deadaf]
call dword [ebp + 0x10de5f93]
push 0
call dword [ebp + 0x10da2ac0]
lea eax, [ebp + 0x10deb2fb]
push edi
mov edi, esp
add edi, 4
push ebx
mov ebx, 0x67e2148e
push ebx
jmp 0xbb1c4d
sub edx, esi
pop esi
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], eax
jmp 0xbb1ca8
push edx
push 0x6cb366e6
pop edx
push edi
mov edi, edx
jmp 0xbb35e7
add edi, 0x720e0c7f
sub edi, 0xc3a040ee
sub eax, 0x5ee14429
sub eax, edi
add eax, 0x5ee14429
pop edi
cmp dword [ebp + 0x10da29e7], 0
jne 0xbb3973
cmp dword [ebp + 0x10da27fb], 0
je 0xbb3988
push eax
mov eax, eax
mov eax, 0x7d9
mov dword [ebp + 0x10da1a85], eax
call dword [ebp + 0x10da1afa]
pop eax
push 0x5125
jmp 0xbb2aa1
push 0
push 0
push 0x1800
push 0x45c6
mov dword [esp], ebx
jmp 0xbb43f7
pop ebx
jmp 0xbb40d0
add esp, 4
add esp, 4
cmp dword [ebp + 0x10da29e7], 0
jne 0xbb3ae5
cmp dword [ebp + 0x10da27fb], 0
je 0xbb3afa
push eax
mov eax, eax
mov eax, 0x43d
mov dword [ebp + 0x10da1af5], eax
call dword [ebp + 0x10da2460]
pop eax
push 0x10af
mov dword [esp], eax
push dword [esp]
jmp 0xbb25fc
push edx
jmp 0xbb2863
add edi, ebp
pop ebp
push ebp
mov ebp, 4
sub edi, ebp
pop ebp
xchg dword [esp], edi
jmp 0xbb22a3
push eax
mov dword [esp], ecx
jmp 0xbb1943
add ebp, ebx
pop ebx
jmp 0xbb3555
mov esp, dword [esp]
push edx
jmp 0xbb3deb
mov ebp, esp
push ebx
mov ebx, 0x58d96ea2
jmp 0xbb491d
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
jmp 0xbb4a97
mov ebp, 0x2b6a456f
jmp 0xbb3219
push 0x7325
mov dword [esp], ebx
mov dword [esp], eax
jmp 0xbb2f19
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
jmp 0xbb269d
push dword [esp]
mov eax, dword [esp]
push eax
jmp 0xbb4577
push edi
push eax
xor dword [esp], 0x1f2e3e3a
mov edi, dword [esp]
add esp, 4
xor edi, 0x1f2e3e3a
mov esi, edi
mov edi, dword [esp]
add esp, 4
jmp 0xbb5040
push eax
push esp
jmp 0xbb1af2
mov ecx, 0x631f4a2a
push ecx
mov ecx, 0xc3ba5c8b
jmp 0xbb2cb8
mov dword [esp], ecx
mov eax, dword [esp]
add esp, 4
jmp 0xbb1615
sub eax, 0x6fe7689b
sub ecx, 0x150f6e53
sub ecx, 0x3b415271
sub ecx, 0x74627ce6
jmp 0xbb14a1
pop edi
add esp, 4
push 0x4d66262f
pop ecx
xor ecx, edi
jmp 0xbb25aa
pop ecx
jmp 0xbb3aca
add esi, edi
jmp 0xbb5184
add esp, 4
pop dword [esp]
mov esp, dword [esp]
cmp eax, 0
jbe 0xbb29c6
cmp dword [ebp + 0x10da0bc5], 1
jne 0xbb29c6
mov dword [ebp + 0x10da2857], 1
jmp 0xbb13be
mov dword [esp], eax
push esp
pop eax
push ecx
mov ecx, 4
add eax, ecx
pop ecx
push ebp
mov ebp, 0x19301b4
and ebp, 0x32db1dbd
neg ebp
push esi
mov esi, 0x8716b6c
jmp 0xbb12fc
push 0x73c6
jmp 0xbb1410
mov edi, esp
push esi
mov esi, 4
add edi, esi
pop esi
push esi
jmp 0xbb59b4
mov dword [esp], edi
mov dword [esp], eax
push dword [esp]
jmp 0xbb1711
jmp 0xbb4d99
sub eax, 0x261054ee
not eax
xor eax, 0x4848d7b2
add ebx, eax
pop eax
jmp 0xbb340d
push edi
mov dword [esp], ebp
mov dword [esp], ecx
mov ecx, 0x61c80e6c
or ebp, ecx
pop ecx
jmp 0xbb1da8
add esp, 4
add eax, edx
jmp 0xbb18b0
mov esi, eax
jmp 0xbb4166
pop eax
add edi, esi
mov esi, dword [esp]
add esp, 4
jmp 0xbb2c8e
lea eax, [ebp + 0x10dead44]
sub esp, 4
mov dword [esp], edi
jmp 0xbb4ef9
mov dword [esp], ebp
mov ebp, 4
add eax, 0x671f7fae
add eax, ebp
sub eax, 0x671f7fae
pop ebp
jmp 0xbb50ad
push ecx
push esi
mov esi, 0x75700bfc
push esi
jmp 0xbb14d4
mov ebx, 0x186c35ff
jmp 0xbb2c4b
pop esi
sub ecx, esi
mov esi, dword [esp]
add esp, 4
sub ecx, 0xffffffff
xor ecx, 0x448867d0
add eax, ecx
jmp 0xbb28b7
pop esi
jmp 0xbb5d44
neg esi
neg esi
push edx
mov edx, 0x3ca516a1
sub esi, edx
jmp 0xbb3561
pop edi
jmp 0xbb1ea5
xor edi, esi
push dword [esp]
pop esi
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
jmp 0xbb303d
call dword [ebp + 0x10da1e19]
call dword [ebp + 0x10de5f93]
push dword [ebp + 0x10deadab]
call dword [ebp + 0x10da2448]
lea eax, [ebp + 0x10da053d]
push dword [eax + 0x18]
sub dword [esp], 0x30d5acb
jmp 0xbb3d7c
mov edx, esp
jmp 0xbb32cf
mov edx, dword [esp]
add esp, 4
add edi, esi
jmp 0xbb43a7
pop esi
jmp 0xbb33dd
pop esp
mov dword [esp], eax
push eax
push ecx
jmp 0xbb3dd2
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xbb3d6e
push 0x3e92
jmp 0xbb5ce5
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push eax
mov eax, esp
push edi
push ecx
mov ecx, 0x6f955ab4
mov edi, 0xe779ad12
sub edi, ecx
pop ecx
dec edi
push ebx
push edi
mov edi, 0x12e15ff9
xor edi, 0x4b5266f6
shl edi, 5
shr edi, 8
xor edi, 0x7ae91beb
add edi, 0xfa4fdbb6
push edi
xor dword [esp], 0x38132a4e
pop ebx
xor ebx, 0x38132a4e
mov edi, dword [esp]
jmp 0xbb3530
mov edx, 0x4107754
sub dword [esp + 8], edx
mov edx, dword [esp]
add esp, 4
push dword [esp]
pop esi
push edx
jmp 0xbb16ec
push ebp
mov ebp, 0x254207cd
neg ebp
add ebp, 0x5f4a0eb2
jmp 0xbb3587
mov esi, 4
jmp 0xbb3910
push edx
mov edx, 0x4b677e5b
mov ebp, 0xb803b1e5
sub ebp, edx
pop edx
add dword [esp + 4], 0x5e7d4ea1
push edi
mov edi, 0x5ae1204b
sub dword [esp + 8], edi
pop edi
sub dword [esp + 4], ebp
jmp 0xbb159e
add esp, 4
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push 1
push 1
push 1
push 0xf01ff
cmp dword [ebp + 0x10da2867], 0
je 0xbb30bf
lea eax, [ebp + 0x10dea2bf]
jmp 0xbb30c5
push edi
mov edi, 0x34cb1957
sub edi, 0x76fe3612
push esi
push edi
push ecx
push 0x7d8b1d45
pop ecx
sub ecx, 0x258677b9
dec ecx
shl ecx, 1
add ecx, 0x7de32cc0
mov edi, ecx
pop ecx
mov esi, edi
pop edi
sub esi, 0x5fa1e46
and esi, 0x1f717d94
add esi, 0x11377c08
push ebx
push edx
mov edx, 0x148a146c
jmp 0xbb1d2a
push eax
mov eax, 0x283d00a4
shr eax, 3
sub eax, 0x274022dd
jmp 0xbb4034
pop esp
push edi
mov edi, esp
add edi, 4
sub edi, 4
jmp 0xbb4df6
xchg dword [esp], edi
jmp 0xbb3117
xor ecx, dword [esp]
mov esp, dword [esp]
mov word [esp], ax
sldt word [esp]
mov ax, word [esp]
sub esp, 4
mov dword [esp], ecx
push esp
pop ecx
jmp 0xbb4f4e
sub esp, 4
mov dword [esp], edi
push 0x49914b88
push dword [esp]
jmp 0xbb3e27
sub ebp, edx
pop edx
sub ebx, 0x4d034859
add ebx, ebp
add ebx, 0x4d034859
pop ebp
push ebx
lea ebx, [ebp + 0x10da053d]
mov eax, dword [ebx]
mov dword [ebx], eax
mov eax, dword [ebx + 0x50]
mov dword [ebx + 0x50], eax
lea ebx, [ebp + 0x10dead44]
mov eax, dword [ebx]
mov dword [ebx], eax
pop ebx
push 0
jmp 0xbb424c
add esp, 4
sub eax, 0xca045f9d
push eax
xor dword [esp], 0x346d5dfc
mov ebp, dword [esp]
jmp 0xbb5704
push dword [esp]
pop eax
jmp 0xbb5734
mov ebx, 0x27cc0230
jmp 0xbb565e
add esp, 4
push ebx
push 0x487a
mov dword [esp], esp
add dword [esp], 4
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
jmp 0xbb3921
sub ebx, 0xdd2dc2c3
mov ecx, ebx
mov ebx, dword [esp]
add esp, 4
push edi
mov edi, 0x1c44274b
jmp 0xbb50e5
cmp eax, 1
jne 0xbb402f
jmp 0xbb230d
pop esp
jmp 0xbb42e3
pop esi
mov edx, 0x59ce6cc5
xor edx, ebp
jmp 0xbb2f4d
mov dword [esp], esi
push 0x4614
push esp
pop dword [esp]
add dword [esp], 4
pop esi
sub esp, 4
mov dword [esp], eax
push 4
pop eax
add esi, eax
pop eax
jmp 0xbb58ac
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
xchg dword [esp], esi
pop esp
jmp 0xbb5a6f
push ebx
mov ebx, esp
push edx
mov edx, 0x27825e38
sub edx, 0x27825e34
add ebx, edx
pop edx
push edx
push 4
pop edx
sub ebx, edx
pop edx
xchg dword [esp], ebx
jmp 0xbb4533
add ebp, edx
sub ebp, 0x22c85d63
pop edx
xchg dword [esp], ebp
mov esp, dword [esp]
push 0x3705
jmp 0xbb3ef0
add ecx, 0x150f6e53
pop eax
jmp 0xbb5c77
xchg dword [esp], edi
jmp 0xbb4cfd
and ecx, 0x49557805
and ecx, 0x28da0318
sub ecx, 0xfffffffc
add edx, ecx
pop ecx
xchg dword [esp], edx
pop esp
jmp 0xbb3664
push ebx
mov dword [esp], esp
add dword [esp], 4
jmp 0xbb1f6b
push edi
mov dword [esp], eax
jmp 0xbb3389
add esp, 4
sub ecx, 0x1f24520e
add ecx, 0x54d54a6a
jmp 0xbb2215
pop ebp
xchg dword [esp], eax
mov esp, dword [esp]
cmp dword [ebp + 0x10da29e7], 0
jne 0xbb4fc7
cmp dword [ebp + 0x10da27fb], 0
je 0xbb4fdc
push eax
mov eax, eax
mov eax, 0x7dd
mov dword [ebp + 0x10da1a85], eax
call dword [ebp + 0x10da1afa]
pop eax
push 0x25c4
mov dword [esp], eax
jmp 0xbb5636
mov esi, dword [esp]
push edi
mov edi, esp
jmp 0xbb2bea
push ebp
mov ebp, esi
mov ecx, ebp
pop ebp
jmp 0xbb4ffd
push 0x6c687f2e
pop esi
jmp 0xbb43c6
sub esp, 4
mov dword [esp], esi
jmp 0xbb546c
push ebp
push eax
mov eax, 4
mov ebp, eax
pop eax
sub eax, ebp
pop ebp
push eax
push dword [esp + 4]
mov eax, dword [esp]
push ecx
jmp 0xbb2f0c
or edi, 0x4b8669a7
sub edi, 0x401a217a
inc edi
sub edi, 0xb33f36c1
and ecx, edi
mov edi, dword [esp]
add esp, 4
shr ecx, 2
inc ecx
shl ecx, 3
jmp 0xbb2bf5
push ebp
mov ebp, 0x17f63f3f
sub esi, ebp
mov ebp, dword [esp]
add esp, 4
push dword [esp]
jmp 0xbb32c7
add ebp, 4
push edi
mov dword [esp], ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0xbb38e7
xor ebx, 0x19177ff5
push ecx
mov ecx, 0x810a948a
add ebx, ecx
jmp 0xbb3091
mov dword [esp], eax
push dword [ebp + 0x10dea262]
call dword [ebp + 0x10dea25a]
test eax, eax
jne 0xbb52b6
mov dword [ebp + 0x10dea266], eax
push 0
push 0
push dword [ebp + 0x10dea266]
call dword [ebp + 0x10dea252]
test eax, eax
jne 0xbb52d4
push dword [ebp + 0x10dea266]
call dword [ebp + 0x10da1b58]
test eax, eax
jne 0xbb52e8
push 0
push 0x80
push 3
push 0
push 0
push 0xc0000000
push dword [ebp + 0x10da28f3]
call dword [ebp + 0x10da2a5b]
cmp eax, 0xffffffff
jne 0xbb2833
inc dword [ebp + 0x10dead48]
cmp dword [ebp + 0x10dead48], 2
je 0xbb1cff
lea eax, [ebp + 0x10058613]
call eax
lea eax, [ebp + 0x100580f9]
call eax
jmp 0xbb3d2d
mov eax, dword [esp]
jmp 0xbb2ef2
pop esp
push esp
pop dword [esp]
add dword [esp], 4
pop edx
add edx, 4
push ebx
mov ebx, 4
sub edx, ebx
jmp 0xbb28df
add ecx, 0x415e2603
dec ecx
sub ecx, 0xff5fec62
add dword [esp + 4], ecx
jmp 0xbb21c7
mov dword [esp], edi
mov edi, 0x489c6572
neg edi
shl edi, 6
shr edi, 1
sub esp, 4
mov dword [esp], esi
push edx
push eax
mov eax, 0x23ce06b8
jmp 0xbb1aa3
add ecx, 0x660e493a
jmp 0xbb4e9c
mov ecx, 0x286b0e64
jmp 0xbb3290
lea eax, [ebp + 0x10da053d]
push 0x1a1c
mov dword [esp], edi
mov dword [esp], eax
jmp 0xbb399f
lea eax, [ebp + 0x10dea295]
push 0x1fcf
mov dword [esp], ebx
jmp 0xbb529f
pop esi
jmp 0xbb313b
xor edx, 0xdf20f29e
add eax, edx
pop edx
cmp dword [ebp + 0x10da29e7], 0
jne 0xbb5608
cmp dword [ebp + 0x10da27fb], 0
je 0xbb561d
push eax
mov eax, eax
mov eax, 0x7d8
mov dword [ebp + 0x10da1a85], eax
call dword [ebp + 0x10da1afa]
pop eax
push 0x2ab8
jmp 0xbb3fc6
push dword [esp]
mov eax, dword [esp]
push esi
mov dword [esp], edi
jmp 0xbb3f8b
add eax, 4
sub eax, 4
xchg dword [esp], eax
jmp 0xbb533f
and ebx, 0x368639d6
not ebx
shr ebx, 1
xor ebx, 0x61932e7
xor ebx, 0x6aa4cd14
jmp 0xbb3ba0
xor ebp, 0x42533764
or eax, ebp
push dword [esp]
mov ebp, dword [esp]
add esp, 4
add esp, 4
jmp 0xbb3df9
mov dword [esp], eax
jmp 0xbb3f81
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0xbb5695
add esp, 4
xor ebp, 0x346d5dfc
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
jmp 0xbb4444
mov edx, dword [esp]
jmp 0xbb5b48
add esp, 4
jmp 0xbb49e9
pop ebx
sub ebp, 0x3da25d30
add ebp, edi
add ebp, 0x3da25d30
mov edi, dword [esp]
add esp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
not ebx
inc ebx
jmp 0xbb51c7
mov eax, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], eax
mov eax, esp
sub esp, 4
mov dword [esp], edx
push ebp
push esi
mov esi, 0x368f7b4d
shl esi, 1
add esi, 0x278a0fe4
neg esi
jmp 0xbb326f
push 0xf003f
push 0
push 0
call dword [ebp + 0x10da2578]
test eax, eax
jne 0xbb5856
mov dword [ebp + 0x10dea262], eax
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp + 0x10dea43c]
sub esp, 4
mov dword [esp], edi
push esp
mov edi, dword [esp]
push ebp
jmp 0xbb3bfc
push 0xa53
mov dword [esp], edx
mov edx, 4
add esi, 0x6a807a57
sub esi, edx
sub esi, 0x6a807a57
mov edx, dword [esp]
push 0x399d
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
jmp 0xbb4d87
cmp dword [ebp + 0x10da2867], 0
je 0xbb33b6
lea eax, [ebp + 0x10dea2bf]
jmp 0xbb33bc
mov ebp, 0x43886718
push edx
jmp 0xbb1f55
inc edx
sub edx, 0x186a426e
push ebp
jmp 0xbb3d23
push edx
mov edx, 4
mov esi, edx
jmp 0xbb44d8
pop esp
jmp 0xbb4d03
mov dword [esp], eax
jmp 0xbb5cee
and esi, 0x4742672c
add esi, 0x2ca136e9
xor esi, 0x7e81b30d
xor ebp, esi
pop esi
or ebp, 0x263209a5
or ebp, 0x258730ff
jmp 0xbb5679
add esp, 4
push ecx
add dword [esp], 0x3c835402
pop edx
sub edx, 0x3c835402
mov ecx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
jmp 0xbb14e9
xor ebp, 0x5e23797f
or ebp, 0x5f0c2304
jmp 0xbb1c1f
add edx, 4
add edx, 4
xchg dword [esp], edx
jmp 0xbb1f99
add eax, edi
add eax, 0x3160196d
mov edi, dword [esp]
add esp, 4
push ebp
mov ebp, 4
add eax, ebp
pop ebp
xor eax, dword [esp]
jmp 0xbb1e4b
mov dword [esp], esp
push 0x5feb
jmp 0xbb34a8
sub ecx, 2
xor ecx, dword [esp]
xor dword [esp], ecx
jmp 0xbb4ae9
mov dword [esp], esp
push ecx
jmp 0xbb54f0
push dword [ebp + 0x10dea262]
call dword [ebp + 0x10dea25a]
mov dword [ebp + 0x10dea266], eax
push dword [ebp + 0x10dea266]
call dword [ebp + 0x10dea256]
push dword [ebp + 0x10dea266]
call dword [ebp + 0x10da1b58]
jmp 0xbb4d99
push edi
push dword [esp + 4]
jmp 0xbb43d7