Function at 0x52bfe7
Capabilities:
Execute anti-debugging instructions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
jmp 0x52c03a
push ecx
mov ecx, 1
mov ecx, 2
mov ecx, 4
mov ecx, 2
mov ecx, 5
mov ecx, 4
mov ecx, 2
mov ecx, 5
mov ecx, 5
pop ecx
push esi
mov esi, 1
mov esi, 2
mov esi, 4
mov esi, 2
mov esi, 5
mov esi, 4
mov esi, 2
mov esi, 5
mov esi, 5
pop esi
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 4], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 8], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0xc], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0x10], eax
fild dword [ebp - 4]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fmul qword [0x100efc15]
fstp qword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov dword [0x10136c58], eax
mov dword [0x10136c5c], edx
fild dword [ebp - 8]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fadd qword [0x100ef33c]
fstp qword [ebp - 0x30]
push 0x80000601
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push 1
mov ebx, 0x100371c0
call fcn.00543e0a
add esp, 0x10
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [0x10136c60]
test ebx, ebx
je 0x52c1c6
push ebx
call fcn.00543dfe
add esp, 4
pop eax
mov dword [0x10136c60], eax
fild dword [ebp - 0xc]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fadd qword [0x100efc1d]
fstp qword [ebp - 0x30]
push 0x80000601
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push 1
mov ebx, 0x100361b0
call fcn.00543e0a
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x10036870
call fcn.00543e0a
add esp, 0x10
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [0x10136c64]
test ebx, ebx
je 0x52c22f
push ebx
call fcn.00543dfe
add esp, 4
pop eax
mov dword [0x10136c64], eax
fild dword [ebp - 0x10]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fmul qword [0x100efc25]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
call fcn.00510d18
mov dword [0x10136c68], eax
mov dword [0x10136c6c], edx
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x100371c0
call fcn.00543e0a
add esp, 0x10
mov dword [ebp - 0x24], eax
push 0x80000301
push 0
push dword [ebp - 8]
push 1
mov ebx, 0x100371c0
call fcn.00543e0a
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0x80000301
push 0
push dword [ebp - 0xc]
push 1
mov ebx, 0x100371c0
call fcn.00543e0a
add esp, 0x10
mov dword [ebp - 0x2c], eax
push 0x80000301
push 0
push dword [ebp - 0x10]
push 1
mov ebx, 0x100371c0
call fcn.00543e0a
add esp, 0x10
mov dword [ebp - 0x30], eax
push dword [ebp - 0x30]
push 0x100efc2d
push dword [ebp - 0x2c]
push 0x100efc2d
push dword [ebp - 0x28]
push 0x100efc2d
push dword [ebp - 0x24]
push 0x100efc2f
mov ecx, 8
call fcn.0051689c
add esp, 0x20
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x52c316
push ebx
call fcn.00543dfe
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x52c326
push ebx
call fcn.00543dfe
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x52c336
push ebx
call fcn.00543dfe
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x52c346
push ebx
call fcn.00543dfe
add esp, 4
lea eax, [ebp - 0x34]
push eax
call fcn.0052cd79
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x52c362
push ebx
call fcn.00543dfe
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x52c375
mov eax, 0x100eec92
push eax
push 1
mov ebx, 0x10035f50
call fcn.00543e0a
add esp, 0x10
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], edx
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x52c39e
push ebx
call fcn.00543dfe
add esp, 4
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
fild dword [ebp - 0xc]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fild dword [ebp - 8]
fstp qword [ebp - 0x30]
fmul qword [ebp - 0x30]
fstp qword [ebp - 0x38]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
mov dword [0x10136c70], eax
mov dword [0x10136c74], edx
fild dword [ebp - 4]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fild dword [ebp - 8]
fstp qword [ebp - 0x30]
fmul qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [0x10136c70]
fadd qword [ebp - 0x38]
fadd qword [0x100efc3d]
fstp qword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x40]
mov dword [0x10136c70], eax
mov dword [0x10136c74], edx
fld qword [0x10136c70]
fild dword [ebp - 0xc]
fstp qword [ebp - 0x28]
fadd qword [ebp - 0x28]
fild dword [ebp - 4]
fstp qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00510d18
mov dword [0x10136c78], eax
mov dword [0x10136c7c], edx
fild qword [0x10136c78]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fild dword [ebp - 0x10]
fstp qword [ebp - 0x30]
fmul qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
fild dword [ebp - 8]
fstp qword [ebp - 0x40]
fsub qword [ebp - 0x40]
fstp qword [ebp - 0x48]
fld qword [ebp - 0x48]
call fcn.00510d18
mov dword [0x10136c78], eax
mov dword [0x10136c7c], edx
fild dword [ebp - 0x10]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fild dword [ebp - 0xc]
fstp qword [ebp - 0x30]
fmul qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fild qword [0x10136c78]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
fadd qword [ebp - 0x38]
fstp qword [ebp - 0x48]
fld qword [ebp - 0x48]
call fcn.00510d18
mov dword [0x10136c78], eax
mov dword [0x10136c7c], edx
fild dword [ebp - 0x10]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fild dword [ebp - 4]
fstp qword [ebp - 0x30]
fmul qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fild qword [0x10136c78]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
fadd qword [ebp - 0x38]
fadd qword [0x100efc25]
fstp qword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x48]
mov dword [0x10136c80], eax
mov dword [0x10136c84], edx
fild dword [ebp - 0x10]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fild dword [ebp - 0xc]
fstp qword [ebp - 0x30]
fmul qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [0x10136c80]
fadd qword [ebp - 0x38]
fstp qword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x40]
mov dword [0x10136c80], eax
mov dword [0x10136c84], edx
fld qword [0x10136c80]
fild dword [ebp - 0x10]
fstp qword [ebp - 0x28]
fmul qword [ebp - 0x28]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fadd qword [0x100efc1d]
fstp qword [ebp - 0x38]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
mov dword [0x10136c80], eax
mov dword [0x10136c84], edx
push 0x80000301
push 0
push dword [ebp - 0x10]
fld qword [0x10136c80]
call fcn.00510d18
push 0x80000301
push 0
push eax
push 2
mov ebx, 0x10037f70
call fcn.00543e0a
add esp, 0x1c
mov dword [ebp - 0x2c], eax
fild dword [ebp - 0x2c]
fstp qword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov dword [0x10136c80], eax
mov dword [0x10136c84], edx
push 0x80000301
push 0
push 0x1e54b
fld qword [0x10136c80]
call fcn.00510d18
push 0x80000301
push 0
push eax
push 2
mov ebx, 0x100354b0
call fcn.00543e0a
add esp, 0x1c
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x100371c0
call fcn.00543e0a
add esp, 0x10
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [0x10136c88]
test ebx, ebx
je 0x52c5f7
push ebx
call fcn.00543dfe
add esp, 4
pop eax
mov dword [0x10136c88], eax
push 0x80000004
push 0
mov eax, dword [0x10136c88]
test eax, eax
jne 0x52c612
mov eax, 0x100eec92
push eax
push 1
mov ebx, 0x100361b0
call fcn.00543e0a
add esp, 0x10
mov dword [ebp - 0x24], eax
push 0x80000301
push 0
push 0x1e6c
push 0x80000301
push 0
push dword [ebp - 0x24]
push 2
mov ebx, 0x100354d0
call fcn.00543e0a
add esp, 0x1c
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x100371c0
call fcn.00543e0a
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [0x10136c88]
test ebx, ebx
je 0x52c684
push ebx
call fcn.00543dfe
add esp, 4
pop eax
mov dword [0x10136c88], eax
push 0x80000004
push 0
mov eax, dword [0x10136c88]
test eax, eax
jne 0x52c69f
mov eax, 0x100eec92
push eax
push 1
mov ebx, 0x100361b0
call fcn.00543e0a
add esp, 0x10
mov dword [ebp - 0x2c], eax
fild dword [ebp - 0x2c]
fstp qword [ebp - 0x2c]
fld qword [ebp - 0x2c]
fsub qword [0x100efc45]
fstp qword [ebp - 0x34]
push 0x80000601
push dword [ebp - 0x30]
push dword [ebp - 0x34]
push 1
mov ebx, 0x100371c0
call fcn.00543e0a
add esp, 0x10
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [0x10136c88]
test ebx, ebx
je 0x52c6fe
push ebx
call fcn.00543dfe
add esp, 4
pop eax
mov dword [0x10136c88], eax
push 0x80000004
push 0
mov eax, dword [0x10136c88]
test eax, eax
jne 0x52c719
mov eax, 0x100eec92
push eax
push 1
mov ebx, 0x100361b0
call fcn.00543e0a
add esp, 0x10
mov dword [ebp - 0x24], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 0x80000301
push 0
push dword [ebp - 0x24]
push 2
mov ebx, 0x100354d0
call fcn.00543e0a
add esp, 0x1c
mov dword [ebp - 0x30], eax
fild dword [ebp - 0x30]
fstp qword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov dword [0x10136c8c], eax
mov dword [0x10136c90], edx
fld qword [0x10136c8c]
fdiv qword [0x100efc4d]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fsub qword [ebp - 0x18]
ftst
fnstsw ax
test ah, 1
je 0x52c78f
fchs
fcomp qword [0x100ef824]
fnstsw ax
test ah, 0x41
jne 0x52c830
mov eax, 1
cmp eax, 2
jne 0x52c7a0
cmp dword [ebp - 0x1c], 0
jne 0x52c7c8
push 0
mov ebx, 0x10037b30
call fcn.00543e0a
add esp, 4
jmp 0x52c7aa
call fcn.00510125
push 0
call fcn.00543e1c
add esp, 4
call fcn.00512d95
cmp dword [ebp - 0x1c], 0
jne 0x52c7fa
push 0
mov ebx, 0x10037b30
call fcn.00543e0a
add esp, 4
jmp 0x52c7dc
cmp dword [ebp - 0xc], 0x22b8
je 0x52c81b
push 0
mov ebx, 0x10037b30
call fcn.00543e0a
add esp, 4
jmp 0x52c7fa
xor eax, eax
xor ecx, ecx
xor edx, edx
xor ebx, ebx
xor esp, esp
xor ebp, ebp
xor esi, esi
xor edi, edi
jmp 0x52cd75
mov dword [0x10136c8c], 0
mov dword [0x10136c90], 0
mov eax, 0x100eec92
push eax
mov ebx, dword [0x10136c88]
test ebx, ebx
je 0x52c85d
push ebx
call fcn.00543dfe
add esp, 4
pop eax
mov dword [0x10136c88], eax
mov dword [0x10136c80], 0
mov dword [0x10136c84], 0
mov dword [0x10136c78], 0
mov dword [0x10136c7c], 0
mov dword [0x10136c70], 0
mov dword [0x10136c74], 0
fld qword [0x10136c58]
fdiv qword [0x100efc15]
fstp qword [ebp - 0x28]
fild dword [ebp - 4]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x28]
fsub qword [ebp - 0x30]
ftst
fnstsw ax
test ah, 1
je 0x52c8c5
fchs
fcomp qword [0x100ef824]
fnstsw ax
test ah, 0x41
jne 0x52c951
mov eax, 1
cmp eax, 2
jne 0x52c8d6
cmp dword [ebp - 0x1c], 0
jne 0x52c8fe
push 0
mov ebx, 0x10037b30
call fcn.00543e0a
add esp, 4
jmp 0x52c8e0
call fcn.00510125
push 0
call fcn.00543e1c
add esp, 4
call fcn.00512d95
cmp dword [ebp - 0x1c], 0
jne 0x52c930
push 0
mov ebx, 0x10037b30
call fcn.00543e0a
add esp, 4
jmp 0x52c912
cmp dword [ebp - 0xc], 0x22b8
je 0x52c951
push 0
mov ebx, 0x10037b30
call fcn.00543e0a
add esp, 4
jmp 0x52c930
push 0x80000004
push 0
mov eax, dword [0x10136c60]
test eax, eax
jne 0x52c966
mov eax, 0x100eec92
push eax
push 1
mov ebx, 0x100361b0
call fcn.00543e0a
add esp, 0x10
mov dword [ebp - 0x2c], eax
fild dword [ebp - 0x2c]
fstp qword [ebp - 0x2c]
fld qword [ebp - 0x2c]
fsub qword [0x100ef33c]
fstp qword [ebp - 0x34]
fild dword [ebp - 8]
fstp qword [ebp - 0x3c]
fld qword [ebp - 0x34]
fsub qword [ebp - 0x3c]
ftst
fnstsw ax
test ah, 1
je 0x52c9a5
fchs
fcomp qword [0x100ef824]
fnstsw ax
test ah, 0x41
jne 0x52ca31
mov eax, 1
cmp eax, 2
jne 0x52c9b6
cmp dword [ebp - 0x1c], 0
jne 0x52c9de
push 0
mov ebx, 0x10037b30
call fcn.00543e0a
add esp, 4
jmp 0x52c9c0
call fcn.00510125
push 0
call fcn.00543e1c
add esp, 4
call fcn.00512d95
cmp dword [ebp - 0x1c], 0
jne 0x52ca10
push 0
mov ebx, 0x10037b30
call fcn.00543e0a
add esp, 4
jmp 0x52c9f2
cmp dword [ebp - 0xc], 0x22b8
je 0x52ca31
push 0
mov ebx, 0x10037b30
call fcn.00543e0a
add esp, 4
jmp 0x52ca10
push 0
push 0
push 0
push 0x80000301
push 0
push 3
push 0x80000005
push 0
mov eax, dword [0x10136c64]
test eax, eax
jne 0x52ca58
mov eax, 0x100eecd4
push eax
push 3
mov ebx, 0x100369b0
call fcn.00543e0a
add esp, 0x28
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
cmp ecx, 0x80000101
jne 0x52ca8c
and eax, 0xff
jmp 0x52cab2
cmp ecx, 0x80000201
jne 0x52ca97
cwde
jmp 0x52cab2
mov dword [ebp - 0x34], eax
cmp ecx, 0x80000301
je 0x52cab5
cmp ecx, 0x80000401
jne 0x52caba
mov dword [ebp - 0x30], edx
fild qword [ebp - 0x34]
jmp 0x52cae6
mov dword [ebp - 0x34], eax
fild dword [ebp - 0x34]
jmp 0x52cae6
cmp ecx, 0x80000501
jne 0x52cac7
fld dword [ebp - 0x34]
jmp 0x52cae6
cmp ecx, 0x80000601
je 0x52caef
push 0x1848
push 0x40102cf
push 2
call fcn.00543e04
add esp, 0xc
fstp qword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], edx
fld qword [ebp - 0x34]
fsub qword [0x100efc1d]
fstp qword [ebp - 0x3c]
mov ecx, dword [ebp - 0x24]
cmp ecx, 0x80000004
je 0x52cb18
cmp ecx, 0x80000005
jne 0x52cb28
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x52cb28
push ebx
call fcn.00543dfe
add esp, 4
fild dword [ebp - 0xc]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x3c]
fsub qword [ebp - 0x44]
ftst
fnstsw ax
test ah, 1
je 0x52cb3f
fchs
fcomp qword [0x100ef824]
fnstsw ax
test ah, 0x41
jne 0x52cbcb
mov eax, 1
cmp eax, 2
jne 0x52cb50
cmp dword [ebp - 0x1c], 0
jne 0x52cb78
push 0
mov ebx, 0x10037b30
call fcn.00543e0a
add esp, 4
jmp 0x52cb5a
call fcn.00510125
push 0
call fcn.00543e1c
add esp, 4
call fcn.00512d95
cmp dword [ebp - 0x1c], 0
jne 0x52cbaa
push 0
mov ebx, 0x10037b30
call fcn.00543e0a
add esp, 4
jmp 0x52cb8c
cmp dword [ebp - 0xc], 0x22b8
je 0x52cbcb
push 0
mov ebx, 0x10037b30
call fcn.00543e0a
add esp, 4
jmp 0x52cbaa
fild qword [0x10136c68]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fdiv qword [0x100efc25]
fstp qword [ebp - 0x30]
fild dword [ebp - 0x10]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x30]
fsub qword [ebp - 0x38]
ftst
fnstsw ax
test ah, 1
je 0x52cbf7
fchs
fcomp qword [0x100ef824]
fnstsw ax
test ah, 0x41
jne 0x52cc83
mov eax, 1
cmp eax, 2
jne 0x52cc08
cmp dword [ebp - 0x1c], 0
jne 0x52cc30
push 0
mov ebx, 0x10037b30
call fcn.00543e0a
add esp, 4
jmp 0x52cc12
call fcn.00510125
push 0
call fcn.00543e1c
add esp, 4
call fcn.00512d95
cmp dword [ebp - 0x1c], 0
jne 0x52cc62
push 0
mov ebx, 0x10037b30
call fcn.00543e0a
add esp, 4
jmp 0x52cc44
cmp dword [ebp - 0xc], 0x22b8
je 0x52cc83
push 0
mov ebx, 0x10037b30
call fcn.00543e0a
add esp, 4
jmp 0x52cc62
call fcn.00528d7c
push 3
call fcn.0052a05d
mov dword [ebp - 0x24], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x52cca8
mov eax, 0x100eec92
push eax
push 1
mov ebx, 0x100361b0
call fcn.00543e0a
add esp, 0x10
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x52ccce
push ebx
call fcn.00543dfe
add esp, 4
cmp dword [ebp - 0x28], 1
jge 0x52cd10
call fcn.00512d95
call fcn.00510125
push 0x80000301
push 0
push 0x211d1ae3
push 1
mov ebx, 0x10037d40
call fcn.00543e0a
add esp, 0x10
xor eax, eax
xor ecx, ecx
xor edx, edx
xor ebx, ebx
xor esp, esp
xor ebp, ebp
xor esi, esi
xor edi, edi
push 0x80000301
push 0
lea eax, [ebp - 0x20]
push eax
push 0
push 0
push 0
push 0x80000006
push 0
push 0x10020ca3
push 3
mov eax, 3
mov ebx, 0x10098400
call fcn.00543e22
add esp, 0x28
push 0x80000301
push 0
push dword [ebp - 0x20]
push 1
mov eax, 3
mov ebx, 0x10098530
call fcn.00543e22
add esp, 0x10
jmp 0x52cd75
mov esp, ebp
pop ebp
ret