Function at 0x651ccf
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
xchg dword [esi + eax*2], ecx
mov cl, 0x7f
lodsd eax, dword [esi]
push edi
mov ch, 0x32
add dword [reloc.oleaut32.dll_SysFreeString], ecx
jo 0x64ad04
sub ebx, esi
cmp byte fs:[ecx - 0x15247fc9], ch
aas
movsb byte es:[edi], byte [esi]
sbb eax, 0x56208bad
enter 0xfffffffffffff24f, 0x26
or cl, byte [edi + 0x25]
invalid
aam 0x2e
out dx, eax
out dx, al
xor byte [ecx - 0x25], al
mov ah, 0xe7
popfd
mov dword [ecx - reloc.oleaut32.dll_SysFreeString], edx
inc ebp
sub cl, byte [edi]
retf
mov ebp, dword [esp + 7]
mov dh, ch
mov dh, dl
add esp, 5
lea esp, [esp + 1]
jmp 0x64b8df
xchg dword [esp + 0xd], ebp
xchg word [esp + 0x1b], bp
lea esp, [esp + 0x20]
mov edx, dword [esp + 2]
jmp 0x64b3bc
pop bp
xchg byte [esp + 0xd], dh
shr dl, 0
mov edx, 0x60f5449d
lea ebp, [edx + ebx]
mov dword [esp + 0xa], ebx
neg bp
mov byte [esp], ch
sub esp, 0x1c
push word [esp + 0xb]
xchg dword [esp + 0x17], edx
jmp 0x64b3da
sub esp, 0
push dword [esp + 2]
adc ebp, 0x6ad9143c
adc edx, eax
mov dh, byte [esp + 0x12]
dec dl
mov edx, esp
mov bp, word [esp + 0xf]
mov bp, 0x7f8b
mov byte [esp + 8], bh
mov bp, word [esp + 9]
bswap ebp
bswap ebp
mov bp, si
jmp 0x64b3fc
inc dword [eax + 0x4f8a41]
pushfd
pushfd
push ax
mov byte [esp + 4], ch
cmc
push cx
sub esp, 3
sub esp, 0x1d
pop word [esp + 0x10]
add esp, 0x23
lea esp, [esp + 1]
mov word [esp], dx
cld
lea esp, [esp + 1]
lea esp, [esp + 1]
push ebp
lea ebp, [eax + ebp]
push ebp
dec ebp
bsf bp, sp
bswap bp
btr bp, sp
neg ebp
btr bp, di
pop word [esp]
mov ebp, 0x78386aa5
rcl ebp, 0x1d
lea esp, [esp + 2]
push edx
mov bp, cx
not ebp
mov dh, byte [esp]
mov dl, byte [esp]
xchg ebp, edx
lea edx, [ebx*4]
dec ebp
neg dh
neg bp
lea ebp, [ecx + edi]
lea ebp, [edx*4]
mov ebp, dword [esp]
mov ebp, 0x1d2332f8
dec dh
xchg dx, bp
mov ebp, 0x30e52343
mov dh, 0x15
lea ebp, [eax + esi]
mov dh, byte [esp]
cld
mov bp, 0x1ac2
mov dh, 0x92
mov bp, 0x5ea1
rol dh, 6
not ebp
mov ebp, dword [esp]
setp dh
lea ebp, [edx*4]
lea ebp, [esi*4]
mov edx, ebp
seto dh
mov bp, ax
mov dh, al
btr bp, bx
mov ebp, ebx
mov bp, sp
or bp, ax
clc
mov bp, 0x16ae
not dh
bsr dx, sp
mov bp, word [esp]
bsr bp, cx
bswap ebp
cmc
not dh
lea ebp, [eax + edx]
mov edx, dword [esp]
bt ebp, ebx
bswap ebp
mov bp, sp
mov dh, 0xe1
lea ebp, [ecx + edi]
mov ebp, ecx
btr ebp, ecx
mov bp, 0x5e49
lea ebp, [ebx + ebx]
lea edx, [edi + 0x14]
xchg dl, dh
neg bp
not dh
mov dh, ah
not bp
pushfd
lea ebp, reloc.oleaut32.dll_SysFreeString
not dh
xchg dword [esp], ebp
lea ebp, [ecx + edx]
rol edx, 2
mov ebp, ecx
xchg word [esp], dx
pop word [esp]
sub esp, 0x1a
not bp
pushal
xchg dword [esp + 0x34], ebp
mov bp, word [esp + 0x37]
mov dh, 0x8a
and edx, 0x6ffc7542
cmc
xchg byte [esp + 0x1b], dh
mov dl, byte [esp + 0x18]
neg dh
pop ebp
bswap bp
not edx
mov word [esp + 0x22], bp
push word [esp + 9]
pop ebp
cmc
mov dh, 0x51
mov dh, byte [esp + 0x28]
mov ebp, 0x1d54b69
mov dh, 0xd6
pop ebp
mov bp, word [esp + 4]
not dh
xchg dh, dl
bsf bp, si
pushal
lea esp, [esp + 0x52]
mov ebp, esi
lea ebp, reloc.oleaut32.dll_SysFreeString
bswap ebp
neg bp
cld
mov bp, word [esp]
bts ebp, eax
xchg dx, bp
mov dh, bh
lea ebp, [esi + ebp]
mov dl, ch
rcl edx, 0x19
bts ebp, eax
dec ebp
mov dh, 0xe7
adc dh, dh
stc
mov dl, 0x79
neg bp
bswap bp
sub esp, 0x15
pop dx
lea edx, [edi*4]
mov edx, 0x63785f99
bswap bp
sub esp, 8
pop word [esp + 0x11]
mov ebp, dword [esp + 0xf]
add esp, 0x15
mov ebp, esi
dec dh
xchg word [esp], bp
mov ebp, eax
shl dh, 3
mov dh, 0xbc
mov dh, 0xcd
lea esp, [esp]
mov dh, byte [esp + 2]
not dl
mov dh, 0x71
sub esp, 0x11
mov bp, word [esp + 3]
mov ebp, 0x5f7a7f68
dec dx
not bp
btr bp, di
pop word [esp + 9]
mov edx, dword [esp + 8]
add esp, 2
bswap ebp
cmc
not dl
mov dl, cl
lea ebp, [edi + 0x25]
bswap dx
push dword [esp + 0xa]
mov bp, word [esp + 0x14]
rcr ebp, cl
bsr ebp, esp
push word [esp + 0xd]
mov ebp, dword [esp + 8]
push dword [esp + 0xa]
lea esp, [esp + 0x1a]
bswap bp
mov ebp, 0x21d8035c
lea ebp, reloc.oleaut32.dll_SysFreeString
xchg byte [esp], dh
mov dl, al
setg dh
mov dh, al
bt ebp, edi
rol dh, cl
mov dh, ch
bswap ebp
mov bp, word [esp]
mov bp, word [esp]
stc
setnp dh
lea esp, [esp]
neg ebp
mov bp, sp
mov dh, byte [esp]
stc
dec bp
sub esp, 0x1c
xchg word [esp + 0xd], dx
mov ebp, 0x1035394d
lea ebp, [ecx*4]
xchg dword [esp + 0xe], ebp
mov bp, bx
xchg byte [esp + 0xf], dh
bsf dx, dx
pop dword [esp + 2]
mov ebp, edx
setns dh
mov bp, word [esp + 2]
shr dh, cl
mov bp, 0x1ac7
mov dh, 0x3e
bsr bp, cx
bsf ebp, eax
mov byte [esp + 2], al
mov dh, cl
not bp
mov dword [esp + 1], ebp
pop ebp
lea ebp, [ecx*4]
bsf bp, bx
pop bp
pop dword [esp + 1]
mov ebp, dword [esp + 0xa]
setge dh
sbb ebp, 0x5f122f1c
bsr edx, edx
pop dword [esp + 1]
mov dh, byte [esp + 7]
bswap ebp
sbb dl, al
mov ebp, dword [esp + 2]
mov dx, 0x3037
rcr dx, cl
mov dl, 0xbb
mov byte [esp + 3], ch
ror dl, cl
neg edx
lea esp, [esp + 0xa]
mov edx, 0x709e605a
mov dh, 0x64
mov dx, word [esp]
sub esp, 6
xchg ebp, edx
rol ebp, cl
lea ebp, [eax + ecx]
btc dx, cx
lea edx, [esp + edx]
lea ebp, reloc.oleaut32.dll_SysFreeString
pop bp
mov dh, ch
xchg word [esp + 1], bp
xchg word [esp + 1], dx
add esp, 4
mov ebp, ebx
sub esp, 0x14
setnp dh
mov dl, byte [esp + 6]
neg bp
mov byte [esp + 4], dh
mov dl, byte [esp + 2]
mov ebp, 0xd2f798a
rcl ebp, cl
pop dword [esp + 8]
setp dl
mov word [esp + 9], di
xchg dh, dl
mov dh, byte [esp + 2]
mov word [esp + 0xb], sp
mov bp, 0x3cdd
bswap ebp
mov dword [esp], edi
xchg byte [esp + 0xc], dh
pop ebp
mov bp, bx
push word [esp + 0xc]
jmp 0x64b435
push eax
jmp 0x64cd4e
bswap ebp
not dh
mov bp, 0x2930
push dword [esp + 3]
clc
xchg word [esp], bp
jmp 0x64bdb9
btr bp, di
xchg dh, dl
add bp, cx
mov dh, 0x93
mov byte [esp + 1], ah
lea ebp, [eax + edx]
sets dl
mov dx, bx
mov word [esp], bx
bsr ebp, ebx
bswap bp
lea ebp, reloc.oleaut32.dll_SysFreeString
lea ebp, [ebx + edi]
pushal
add esp, 0x1a
setb dl
setl dh
push dword [esp + 5]
sub esp, 0x17
pop ebp
btc bp, bx
neg ebp
neg dh
xchg word [esp + 0x1a], bp
mov bp, dx
xchg dx, bp
mov ebp, edx
xchg dword [esp + 9], ebp
lea ebp, [edi + ebp]
lea esp, [esp + 0x1c]
xchg word [esp + 1], bp
bsr edx, esp
jmp 0x64b847
mov bp, word [esp + 1]
stc
lea esp, [esp + 4]
xchg byte [esp], dl
mov word [esp + 2], si
lea esp, [esp + 2]
lea ebp, [edx*4]
mov byte [esp + 1], bh
jmp 0x64b869
lea ebp, [eax + ecx]
mov bp, si
neg dh
lea ebp, reloc.oleaut32.dll_SysFreeString
jmp 0x64cbe9
cld
mov dl, 0x5e
bsf edx, esi
mov dh, 0x2f
mov ebp, dword [esp]
mov dh, ch
mov dh, cl
bswap ebp
btc bp, sp
add esp, 0
mov byte [esp], cl
lea ebp, [edx*4]
jmp 0x64b913
mov bp, si
lea esp, [esp + 1]
setge dh
mov dh, byte [esp]
mov bp, 0x1812
cmc
jmp 0x64b92f
push di
add esp, 0x20
mov ebp, ebx
inc bp
lea esp, [esp + 3]
cmc
xchg word [esp], bp
add esp, 1
xchg ebp, edx
mov bp, di
lea ebp, [ecx + ebp]
mov dx, 0x618d
inc ebp
mov dh, byte [esp]
lea ebp, [ecx*4]
btr ebp, edi
lea esp, [esp]
lea ebp, [ebx + ebp]
lea ebp, [ecx*4]
lea ebp, [edx + ebx]
neg dh
or ebp, 0x28532b2f
bswap bp
and edx, 0x3826673f
bswap dx
neg bp
bswap ebp
sub esp, 0x12
add esp, 0xc
mov bp, 0x31dc
lea edx, [ecx + edx]
xchg word [esp + 2], dx
lea ebp, [edx*4]
mov bp, word [esp + 1]
mov ebp, ecx
mov ebp, dword [esp + 2]
bswap bp
add esp, 5
lea esp, [esp]
xchg byte [esp], dh
mov dl, dh
sub esp, 0xe
lea ebp, reloc.oleaut32.dll_SysFreeString
not dx
setp dh
mov word [esp + 2], ax
mov byte [esp + 3], cl
btr bp, bx
mov edx, esp
mov dh, byte [esp + 4]
pop word [esp + 6]
pop dword [esp]
sub esp, 0x10
not ebp
mov dword [esp], eax
clc
inc bp
mov word [esp + 0xb], bx
mov dword [esp + 0xe], ebp
shl bp, 0xf
xchg dh, dl
pop dword [esp + 4]
xchg byte [esp], dh
not bp
lea ebp, [ebp - 0x5d]
setbe dl
xchg dh, dl
lea ebp, reloc.oleaut32.dll_SysFreeString
pop dword [esp + 0xd]
neg dh
mov ebp, dword [esp + 7]
pop dword [esp]
push word [esp + 8]
mov ebp, dword [esp + 0xb]
mov ebp, 0x19eb3bcb
bswap bp
mov dh, byte [esp]
mov word [esp + 1], sp
cld
pop word [esp + 5]
xchg word [esp + 6], bp
mov bp, 0x4d12
mov bp, 0x2c8e
mov ebp, 0x5ab9461c
bts ebp, eax
mov ebp, 0x64cf3476
stc
sbb dh, dh
pop bp
lea ebp, reloc.oleaut32.dll_SysFreeString
pop dx
mov bp, bx
bswap ebp
xchg dword [esp], edx
mov word [esp + 4], cx
mov byte [esp + 7], ch
neg dh
pop dword [esp]
mov edx, 0x154e2435
xchg dword [esp], ebp
pop ebp
jmp 0x64b962
mov bp, ax
mov word [esp + 0x1a], cx
xchg byte [esp + 0x1d], dh
pushal
shr bp, 4
mov dh, 0x80
lea esp, [esp + 9]
lea esp, [esp + 0x16]
push eax
clc
mov dword [esp + 0xe], ecx
pop word [esp + 0x11]
mov byte [esp + 2], ch
pop word [esp + 0x19]
mov dword [esp + 0xd], edi
mov byte [esp + 0x15], dh
xchg dword [esp + 0xe], ebp
mov dl, ch
lea ebp, reloc.oleaut32.dll_SysFreeString
jmp 0x64b981
setne dl
not bp
mov ebp, 0x69b47837
mov dx, 0x37e3
mov ebp, 0xb1b7ad7
lea edx, [ecx + 0xce]
sub esp, 0x16
mov byte [esp + 0xc], ch
bswap ebp
mov word [esp + 1], sp
xchg word [esp + 5], bp
xchg word [esp + 1], bp
lea esp, [esp + 0x1b]
bt ebp, ebp
lea ebp, [ecx + ebx]
bswap ebp
mov ebp, dword [esp]
sub esp, 8
xchg ebp, edx
xchg dx, bp
adc bp, bx
mov dl, byte [esp + 4]
pop word [esp + 6]
mov dh, byte [esp]
xchg word [esp + 2], dx
mov bp, bx
mov bp, 0x1c7d
pop dword [esp]
pushfd
bswap bp
mov word [esp + 5], cx
sub esp, 3
mov dh, 0xad
pop ebp
neg ebp
lea ebp, [edx - 0xb]
setnp dh
mov bp, word [esp]
rcl bp, cl
lea esp, [esp + 3]
cld
mov bp, 0x57a6
bswap bp
sub esp, 0x1c
lea edx, [ebx - 0x11]
mov byte [esp + 8], cl
mov dx, word [esp + 0x1e]
pop ebp
pop ebp
xchg dx, bp
dec ebp
mov edx, dword [esp + 0x18]
mov dword [esp + 9], ebx
not ebp
sub esp, 7
pop word [esp + 8]
pop word [esp + 2]
neg ebp
mov dx, bp
xchg byte [esp + 0x13], dh
bswap ebp
mov dl, dh
xchg dword [esp + 0xe], ebp
sub esp, 0x19
setle dh
lea ebp, [ebp*4]
neg ebp
mov dword [esp + 0x2f], esi
setns dh
mov dword [esp + 3], ecx
shl ebp, 0x1c
clc
lea ebp, [eax*4]
push word [esp + 0x19]
mov dh, byte [esp + 0x33]
xchg word [esp + 0xa], bp
push word [esp + 0x27]
dec edx
push esi
mov dword [esp + 0x13], ecx
bsr dx, dx
xchg dh, dl
cld
mov bp, word [esp + 0xc]
mov ebp, dword [esp + 2]
mov dh, cl
mov word [esp + 0x27], ax
mov dword [esp + 0x31], edx
sub esp, 0x1d
lea esp, [esp + 0x5a]
mov dx, 0x460b
mov dh, cl
mov ebp, edi
mov bp, bx
mov bp, cx
xchg ebp, edx
lea edx, [eax*4]
mov dx, word [esp]
seto dl
setnp dl
cmc
mov dx, 0x1d16
bswap bp
shl dh, 2
inc dh
sub esp, 0x10
xchg dword [esp + 7], ebp
pop dword [esp + 5]
mov bp, word [esp + 1]
bswap ebp
neg ebp
xchg dx, bp
mov dh, byte [esp + 0xb]
xchg word [esp + 8], dx
bsr bp, di
pushfd
mov bp, word [esp + 6]
mov byte [esp + 0xe], ch
mov dh, byte [esp]
bt edx, esi
pop dword [esp + 3]
mov dword [esp + 5], ebx
pop word [esp + 7]
bswap bp
mov bp, 0x7c5b
neg bp
push dword [esp + 1]
add esp, 5
not edx
mov ebp, dword [esp + 7]
mov dl, 0x9f
neg dh
mov dx, word [esp + 8]
stc
mov dh, bl
xchg dword [esp + 4], ebp
inc bp
lea ebp, [ebx*4]
add esp, 1
mov ebp, esi
sbb bp, 0x2ab0
not bp
mov dx, 0x4d05
mov ebp, dword [esp + 7]
neg edx
bsr ebp, esi
sets dh
mov dh, ah
add esp, 7
bswap bp
lea ebp, [eax*4]
mov bp, word [esp]
cmp bp, 0x758
not ebp
add esp, 0
rol dh, cl
mov dh, 0x74
push di
setg dl
bswap bp
push word [esp + 2]
mov word [esp + 2], cx
pop bp
mov dl, al
push word [esp]
xchg word [esp], bp
cmc
mov dl, bl
pop bp
push word [esp]
mov bp, bx
lea esp, [esp + 3]
xchg byte [esp], dh
mov bp, di
not dh
bsf bp, bx
mov byte [esp], ch
xchg dl, dh
bts bp, dx
adc ebp, 0x50800b29
bswap bp
bsr ebp, ebp
pushal
jmp 0x64baef
xchg word [esp + 4], bp
lea edx, [edx*4]
lea edx, [eax*4]
pushfd
lea esp, [esp + 2]
xchg byte [esp + 3], dh
mov bp, 0xdf6
push dx
pop bp
mov dh, byte [esp + 2]
mov dword [esp + 2], eax
setp dh
mov dh, bl
setbe dh
bswap bp
mov ebp, 0x4e587bbb
xchg dh, dl
push dword [esp + 8]
rcl dh, cl
pop dword [esp]
mov ebp, dword [esp + 9]
mov edx, 0x23bf2e3f
setns dh
mov ebp, dword [esp + 4]
pop dword [esp]
bsf bp, di
xchg word [esp + 3], bp
xchg dh, dl
push word [esp + 4]
xchg word [esp + 4], dx
mov bp, word [esp + 1]
lea ebp, [edi*4]
bswap bp
bswap ebp
pop edx
pop word [esp]
xchg dl, dh
bswap bp
bswap bp
mov ebp, 0x69bb4e74
clc
setnp dh
rcl dx, 0
mov bp, 0x25b0
bswap ebp
cld
add esp, 0
mov dh, byte [esp]
mov dh, 0xe9
lea esp, [esp + 1]
add esp, 0
bswap ebp
dec dh
bswap edx
mov byte [esp], cl
neg edx
mov dh, 0x2c
mov dh, 0x1a
rcl ebp, 9
dec ebp
mov dh, cl
lea esp, [esp]
inc dx
btc dx, bx
not dh
bsf dx, dx
bsf bp, ax
lea esp, [esp]
lea esp, [esp]
bswap bp
neg dh
mov ebp, dword [esp]
mov dh, al
bswap ebp
bswap ebp
mov ebp, dword [esp]
mov bp, word [esp]
bsf bp, si
bt ebp, ecx
lea ebp, [edx*4]
mov dh, cl
bswap bp
bswap bp
btc dx, sp
neg bp
btc bp, dx
mov dx, 0x7c2a
bts bp, dx
neg dh
rcr ebp, 1
mov ebp, esi
setg dl
lea edx, [ecx*4]
lea edx, [esp + 0x85]
lea edx, [ecx*4]
mov bp, ax
mov bp, word [esp]
mov ebp, 0x342610a1
stc
sub ebp, esp
mov dh, byte [esp]
mov ebp, 0x4c3a3479
rol bp, 7
xchg ebp, edx
mov bp, word [esp]
pushfd
inc bp
mov ebp, dword [esp + 3]
mov edx, 0x1eea0651
rcl ebp, 0x18
mov dh, 0x4f
add esp, 0
push esi
sub esp, 0x16
mov byte [esp], bl
mov dh, byte [esp + 0x18]
lea ebp, reloc.oleaut32.dll_SysFreeString
bswap ebp
not bp
mov bp, bx
pop ebp
lea ebp, [edx*4]
mov bp, 0x6b82
bsf ebp, esi
push dword [esp + 0x10]
push word [esp + 0x1a]
push dword [esp + 0x11]
add esp, 0x12
setle dh
push word [esp + 9]
neg bp
pop word [esp + 1]
lea ebp, [eax + ebx]
pop ebp
bsr edx, esp
or ebp, esi
mov dx, bx
bswap edx
shl dx, 0
mov dx, word [esp + 0xb]
lea esp, [esp + 0xc]
neg dh
clc
bswap bp
mov ebp, esp
mov ebp, ebx
mov byte [esp], ch
lea esp, [esp + 2]
mov byte [esp], dh
bts ebp, ebx
bsr ebp, edx
mov ebp, dword [esp]
lea ebp, reloc.oleaut32.dll_SysFreeString
neg dh
rcl dh, cl
xchg byte [esp], dl
mov ebp, 0x317744e9
bsr edx, ebp
lea esp, [esp]
dec dh
mov bp, word [esp]
add esp, 0
mov dx, di
stc
mov byte [esp], dh
mov bp, word [esp]
bsf ebp, esp
bswap ebp
neg ebp
cld
bswap dx
bswap dx
lea esp, [esp]
lea edx, reloc.oleaut32.dll_SysFreeString
mov ebp, dword [esp]
cld
mov bp, dx
pushfd
lea ebp, [edx + ebp]
xchg byte [esp + 3], dh
adc bp, 0x149
mov dl, byte [esp]
pop word [esp]
dec bp
push word [esp + 1]
mov bp, word [esp]
lea ebp, [esi + esi]
cld
cmc
inc bp
xchg ebp, edx
pop word [esp]
xchg word [esp], bp
cmc
mov dx, 0x6b59
inc dx
setle dh
not ebp
mov dh, bl
mov dx, word [esp]
lea esp, [esp + 2]
mov bp, word [esp]
mov bp, word [esp]
mov bp, word [esp]
xchg byte [esp], dl
lea esp, [esp]
bsf edx, ecx
lea ebp, [edi*4]
lea edx, [edi - 0xf]
dec ebp
lea ebp, reloc.oleaut32.dll_SysFreeString
push cx
push word [esp + 1]
bsf dx, bp
pop bp
lea edx, [eax*4]
mov bp, si
mov word [esp], sp
bsf bp, sp
lea ebp, [ecx*4]
lea ebp, reloc.oleaut32.dll_SysFreeString
clc
mov byte [esp], bl
pushal
xchg dword [esp + 0x11], ebp
mov bp, 0x2586
lea ebp, [ecx*4]
push dword [esp + 0x1d]
shr dh, 1
lea ebp, [ebx + esi]
not bp
bswap edx
dec dh
stc
add esp, 0x1e
lea ebp, reloc.oleaut32.dll_SysFreeString
mov dword [esp + 3], esi
push word [esp + 3]
inc bp
bsf dx, cx
push word [esp + 8]
mov bp, sp
pop dword [esp + 3]
sbb dh, dh
add esp, 4
xchg word [esp + 1], bp
pop edx
lea ebp, [esp - 0x32]
setae dh
mov dl, ch
mov ebp, dword [esp]
mov edx, ebx
setb dl
not bp
inc ebp
mov bp, word [esp]
lea ebp, [edi*4]
lea ebp, [esp + ebx]
mov ebp, edi
lea ebp, reloc.oleaut32.dll_SysFreeString
xchg byte [esp], dh
lea ebp, [edi - 0x6f]
not ebp
not ebp
mov dh, 0x54
mov ebp, 0x25fe2653
neg ebp
mov edx, 0x3d215676
clc
xchg byte [esp], dh
neg dh
shr edx, cl
mov dh, 0x9a
lea ebp, reloc.oleaut32.dll_SysFreeString
bswap edx
sub esp, 0x16
push word [esp + 0xf]
cmc
mov dword [esp + 7], ebp
mov dh, al
pop word [esp + 7]
ror ebp, cl
pop bp
bts bp, di
push dword [esp + 3]
mov edx, dword [esp + 0xb]
inc dl
bswap bp
pushfd
mov ebp, dword [esp + 0x12]
btc dx, cx
push word [esp + 0x19]
xchg ebp, edx
mov byte [esp], dl
mov dh, 0xcd
dec ebp
mov byte [esp + 7], ah
btc ebp, esi
lea ebp, [esp + edi]
clc
push edx
mov byte [esp + 0x13], dl
dec edx
neg dh
mov bp, word [esp + 0x1c]
btc dx, si
xchg dword [esp + 5], edx
mov bp, dx
pop bp
inc bp
neg bp
xchg edx, ebp
bswap ebp
mov byte [esp + 8], bl
xchg word [esp + 0x13], bp
cmc
xchg byte [esp + 0xd], dl
dec bp
lea esp, [esp + 0x12]
xchg byte [esp + 7], dl
bswap ebp
bsr ebp, ebx
bswap ebp
xor ebp, ebx
mov edx, dword [esp + 0xc]
lea ebp, [edi + 0x5a]
mov dh, cl
add esp, 0xe
neg dh
rcl dl, cl
mov ebp, 0x76da3cf9
mov edx, 0x7c7146cf
mov bp, ax
mov dh, ah
sub esp, 9
setbe dh
mov bp, word [esp + 2]
lea esp, [esp + 7]
mov byte [esp], ah
mov word [esp], dx
mov bp, sp
mov byte [esp + 1], ah
mov dl, 0x30
setae dh
sub esp, 0x17
push ax
bswap dx
pop word [esp + 0xc]
xchg bp, dx
shr dh, 1
mov ebp, dword [esp + 0x11]
bts bp, ax
mov ebp, 0x16711a88
pop dword [esp + 8]
mov byte [esp + 7], ch
mov dh, 0x9d
bt bp, ax
bswap bp
push word [esp + 0x12]
mov ebp, 0x3ff2b77
mov word [esp + 2], dx
bsr ebp, esp
pop dword [esp + 2]
pop bp
pop bp
mov dx, sp
mov dh, byte [esp + 4]
add esp, 9
pushal
pop bp
mov ebp, 0x6bf1588f
dec dl
push word [esp + 7]
lea ebp, [eax*4]
mov dh, byte [esp + 0xb]
xchg byte [esp + 0xc], dh
mov dh, 0x35
mov ebp, dword [esp + 0xa]
sub esp, 0x10
bswap edx
pop ebp
mov edx, ecx
adc dh, 0xc4
pop dword [esp + 0x1d]
mov edx, 0x427665f4
not dh
lea ebp, [esp + eax]
bswap bp
mov ebp, edi
pop word [esp + 0xf]
mov bp, word [esp + 0x1c]
mov bp, 0x2a34
lea esp, [esp + 0x1e]
mov dword [esp + 0xa], esi
lea ebp, [edx*4]
pop bp
lea ebp, [ebp - 0x2a]
pop dword [esp + 4]
pop dword [esp]
sub esp, 0xa
and bp, 0x48af
setg dh
mov dl, 6
bts ebp, edx
pop ebp
mov dword [esp + 2], eax
mov dword [esp + 4], esp
sub esp, 0x11
mov bp, word [esp + 0x12]
xchg dword [esp + 0x16], ebp
bt dx, dx
mov dword [esp + 8], edx
xor ebp, esi
pop bp
xchg dword [esp + 8], ebp
mov dl, byte [esp + 0xc]
mov dword [esp + 0xb], ecx
mov dl, 0x64
neg bp
mov ebp, 0x48e37d1d
push word [esp + 0x17]
pop dx
bsf bp, bp
dec bp
xchg byte [esp + 1], dl
rcl dh, cl
mov ebp, 0x337a7ccc
mov dl, 0x5e
not dh
push word [esp + 2]
sub esp, 0x1f
mov byte [esp + 4], bh
mov word [esp + 0x2d], sp
pop dword [esp + 0x2f]
xchg word [esp + 0x17], bp
push dword [esp + 0x1f]
neg edx
mov bp, 0x63aa
bswap bp
push di
lea ebp, [ebx + ebx]
lea esp, [esp + 0x33]
mov dx, 0x2454
not dl
lea esp, [esp + 1]
mov ebp, 0x4eec099d
lea edx, [edx + edx]
xchg dword [esp + 4], ebp
mov ebp, 0x14867de0
bsf edx, edi
push dword [esp]
mov dh, ch
mov dh, 0x87
btr bp, di
mov ebp, 0x30475674
sub esp, 0x1e
sub esp, 0xa
adc ebp, 0x5d5c2ef3
lea esp, [esp + 0x21]
neg bp
mov bp, word [esp + 0x12]
lea ebp, [ecx + edi]
pop dword [esp + 9]
add esp, 2
mov bp, bx
pop dx
add esp, 3
push dword [esp + 2]
mov ebp, dword [esp + 0xb]
xchg bp, dx
btr edx, ecx
lea esp, [esp + 3]
stc
xchg dword [esp + 3], ebp
push word [esp + 4]
mov dh, 0x38
not bp
rcl ebp, cl
push word [esp]
mov bp, 0x1617
bswap dx
dec ebp
pop ebp
stc
mov bp, word [esp + 9]
mov dword [esp + 2], ebp
mov byte [esp + 1], dl
bswap bp
push word [esp + 1]
xchg word [esp + 6], bp
pop dword [esp + 3]
pop dword [esp]
lea ebp, reloc.oleaut32.dll_SysFreeString
pop word [esp]
add esp, 0
bsf bp, cx
lea edx, [esp + edi]
push edi
lea ebp, [eax + esi]
xchg word [esp + 3], bp
pop bp
mov bp, dx
mov word [esp + 1], sp
sub esp, 0x1a
pop word [esp + 0x10]
push word [esp + 0x12]
lea ebp, reloc.oleaut32.dll_SysFreeString
mov byte [esp], ch
mov word [esp + 0xa], sp
mov bp, 0x5188
neg bp
mov bp, 0x24a1
pop bp
bt dx, dx
xchg byte [esp + 0xf], dh
dec dh
setl dh
mov ebp, dword [esp + 8]
mov dword [esp + 0xf], edx
neg bp
mov bp, 0x10bd
pop ebp
setno dh
mov dh, byte [esp + 7]
xchg word [esp + 0xd], dx
btc bp, bp
not ebp
setnp dl
mov dh, 0x77
mov ebp, ebx
push word [esp + 0x17]
xchg word [esp + 0x15], bp
xchg edx, ebp
xchg edx, ebp
mov dword [esp + 6], edx
push dword [esp + 0x10]
mov dx, 0x70b2
pop dword [esp]
rcr dh, 4
xchg dl, dh
xchg dword [esp + 7], ebp
push dword [esp + 0x18]
xchg edx, ebp
mov dh, dl
pop word [esp + 0xe]
bsf edx, edx
pop ebp
xchg word [esp], dx
xchg dx, bp
add esp, 5
mov ebp, 0x4d40110c
cmc
pop ebp
mov bp, word [esp]
xchg dl, dh
mov dh, ah
pop ebp
mov ebp, eax
shr ebp, cl
mov dword [esp + 1], ebx
sub esp, 8
mov word [esp + 9], bx
lea ebp, reloc.oleaut32.dll_SysFreeString
push dword [esp + 5]
xchg bp, dx
mov bp, 0x609e
pop ebp
mov byte [esp + 0xb], al
xchg dh, dl
bswap ebp
neg dx
cld
bswap ebp
sub ebp, edi
mov byte [esp + 0x11], bl
mov dh, 0x65
mov ebp, edx
mov dh, ch
ror ebp, cl
neg bp
xchg dl, dh
xchg word [esp + 1], dx
pop word [esp + 7]
mov dh, dl
xchg ebp, edx
not bp
push dword [esp + 6]
mov ebp, ebx
add esp, 5
bswap ebp
not ebp
mov bp, di
xchg ebp, edx
mov dh, bh
xchg byte [esp + 0xc], dh
mov bp, word [esp]
pop dword [esp + 5]
push dword [esp + 1]
mov dword [esp + 0xa], edi
mov dh, byte [esp + 0xf]
sub esp, 7
push word [esp + 0x11]
xchg word [esp + 4], bp
pop word [esp + 0xd]
neg ebp
mov dword [esp + 0xb], ecx
push bp
bswap bp
pop ebp
xchg dword [esp + 0x10], ebp
cld
push word [esp + 7]
mov byte [esp + 0x12], dl
mov dx, sp
mov dh, ch
neg bp
mov bp, word [esp + 0xb]
mov word [esp + 0xd], bx
mov word [esp + 0x11], sp
setg dh
mov word [esp + 8], ax
add esp, 0x14
mov edx, dword [esp]
inc bp
mov ebp, edi
mov edx, dword [esp]
lea ebp, [ecx + ebx]
push word [esp + 1]
clc
mov ebp, 0x5a535b13
push dword [esp + 1]
mov dx, word [esp + 2]
push di
lea ebp, [edi + ebp]
seto dh
xchg word [esp + 4], dx
lea ebp, [ecx + edi]
neg dh
pop ebp
push dword [esp + 1]
mov dword [esp + 2], edi
push ecx
lea edx, [ebx + esi]
push dword [esp + 0xd]
mov bp, word [esp + 9]
mov bp, word [esp + 0x10]
push dword [esp + 0xf]
push word [esp + 2]
cld
xchg bp, dx
xchg dword [esp + 5], edx
pop dword [esp + 0xc]
xchg word [esp + 0x11], bp
xor ebp, 0x2b4c34b0
mov byte [esp + 0xe], cl
btr ebp, edx
bt bp, sp
add esp, 0xb
pop dword [esp]
inc ebp
lea edx, [ebp*4]
pop ebp
mov dh, 0x5a
mov byte [esp], bh
mov ebp, ebx
mov ebp, dword [esp]
bts ebp, ebp
mov word [esp], si
lea ebp, [edx + ebx]
mov dh, 0xd3
lea ebp, [ebp + ebp]
lea ebp, [ebx + esi]
setae dl
mov edx, ebx
bswap ebp
bswap bp
xchg dh, dl
mov dh, 0xaa
add esp, 0
neg bp
clc
mov word [esp], cx
mov dh, al
shr ebp, cl
sete dh
add esp, 0
bswap edx
bsr ebp, ebx
xchg byte [esp], dh
xchg byte [esp], dh
shl dh, cl
mov bp, sp
rol ebp, cl
mov dh, byte [esp]
lea ebp, reloc.oleaut32.dll_SysFreeString
bsr edx, esp
cld
mov ebp, 0x2de8508d
mov dh, byte [esp + 1]
xchg word [esp], bp
mov word [esp], si
btc ebp, ebp
bsr edx, edi
mov byte [esp], bl
mov byte [esp], cl
lea ebp, [ecx + 0xb7]
bswap bp
pop bp
bt edx, edx
mov dx, word [esp]
lea edx, [edi*4]
lea ebp, [edx - 1]
mov bp, bx
bswap ebp
rol dx, 6
mov dh, cl
mov ebp, esp
mov ebp, eax
neg dh
xchg ebp, edx
clc
inc dh
xchg dh, dl
bswap dx
push cx
xchg ebp, edx
mov dh, byte [esp + 1]
lea esp, [esp + 1]
bswap ebp
neg dl
mov dh, byte [esp]
add esp, 0
xchg byte [esp], dh
mov dh, byte [esp]
mov edx, 0x5aab21e4
xchg dx, bp
add esp, 0
mov ebp, dword [esp]
mov byte [esp], cl
mov dh, 0xc3
mov bp, cx
sub esp, 0x11
pushfd
bsf bp, di
not dh
lea esp, [esp + 0x14]
mov byte [esp], ah
mov word [esp], di
mov ebp, edx
mov byte [esp], dh
dec dl
mov dh, byte [esp]
mov dh, ah
sbb edx, esp
mov word [esp], sp
mov bp, word [esp]
setnp dh
sub esp, 0x16
mov ebp, dword [esp + 0x15]
mov word [esp + 8], sp
not edx
mov ebp, dword [esp + 9]
mov ebp, 0x67ab219e
clc
bswap bp
mov bp, word [esp + 6]
mov bp, bx
mov bp, dx
mov bp, 0x4fd3
mov bp, 0x2c79
mov edx, 0x42833a58
push edx
not dx
mov dl, ch
push dword [esp + 0x14]
mov bp, 0x2657
lea edx, [eax + 0xa3]
pop dword [esp + 2]
bsr ebp, edi
push dword [esp + 0xd]
pop word [esp + 0x18]
bsr edx, eax
cld
sub esp, 5
push dword [esp + 0x22]
lea ebp, [esi + esi]
pop dword [esp + 0x1a]
mov byte [esp + 0x15], ah
mov dx, 0x584a
mov dl, cl
lea esp, [esp + 0x20]
pushfd
xchg word [esp + 3], bp
lea ebp, reloc.oleaut32.dll_SysFreeString
push word [esp + 5]
mov word [esp + 2], ax
bswap ebp
ror bp, 0
xchg bp, dx
cmc
lea ebp, [eax + edx]
xchg word [esp + 2], dx
clc
push dword [esp + 8]
push word [esp + 0xc]
pop ebp
pop word [esp + 2]
xchg byte [esp + 5], dl
bswap bp
add esp, 2
mov ebp, 0x6b37f6b
lea esp, [esp + 3]
pop word [esp]
xchg word [esp], dx
mov dx, word [esp + 1]
not bp
mov bp, dx
xor ebp, 0x65261ebc
bswap ebp
xchg byte [esp], dl
mov dh, byte [esp + 1]
dec dh
mov dl, 0x7f
bswap ebp
mov dh, byte [esp + 1]
bsr ebp, ecx
mov ebp, dword [esp]
lea ebp, [eax + 0x6a]
xchg word [esp], dx
shl dh, 6
push edx
mov ebp, 0x54e5ed9
xchg word [esp + 2], bp
mov bp, 0x5f3b
btr bp, sp
pushal
xchg dword [esp + 0xf], edx
inc edx
not dh
mov ebp, dword [esp + 3]
adc dx, di
btc bp, dx
mov ebp, 0x2d8f052d
not bp
lea esp, [esp + 1]
pop dword [esp + 5]
sub esp, 0xe
mov edx, dword [esp + 0x2e]
setb dl
mov dword [esp + 0x23], edx
mov ebp, dword [esp + 7]
clc
xchg byte [esp + 0x1d], dh
bswap ebp
push word [esp + 6]
xchg word [esp + 0xf], bp
mov dx, word [esp + 0x19]
push dword [esp + 0x2e]
mov byte [esp + 0xd], dl
pop word [esp + 0xd]
pop bp
lea edx, [esp + ebx]
pop ebp
xchg dword [esp + 0x12], ebp
lea esp, [esp + 0x20]
mov byte [esp + 2], ah
xchg dx, bp
setg dh
xchg word [esp + 6], bp
mov byte [esp + 8], bh
mov dl, 0xe2
rcr ebp, cl
xchg dword [esp], ebp
lea ebp, [edi + 0x67]
lea ebp, [ecx + edi]
mov bp, word [esp + 2]
xchg word [esp], dx
mov bp, word [esp + 6]
push dword [esp + 9]
ror bp, 0xd
mov dh, ah
xchg byte [esp + 0xa], dl
mov ebp, dword [esp + 7]
pop dword [esp + 7]
neg ebp
and ebp, eax
neg dh
mov bp, si
mov dh, bh
xchg dword [esp + 7], ebp
mov bp, 0x355c
mov ebp, dword [esp + 9]
cmc
xchg dword [esp + 8], edx
pop dx
push si
sub dh, 0xbb
lea ebp, [ebx*4]
mov bp, 0x4b02
lea ebp, [edx*4]
sbb edx, ebx
pop word [esp + 6]
mov bp, word [esp + 9]
sete dh
bsr ebp, ebx
mov dword [esp + 5], eax
setg dh
shr bp, 9
mov bp, 0x1708
not ebp
mov edx, esi
pop ebp
lea ebp, [ebx - 0x91]
mov dh, byte [esp + 5]
mov word [esp + 4], bp
mov word [esp + 4], dx
mov dx, word [esp + 4]
xchg dword [esp], ebp
push word [esp + 4]
mov ebp, edi
lea ebp, reloc.oleaut32.dll_SysFreeString
bt dx, bx
mov dh, 0xb
xchg word [esp + 2], dx
push esi
bsf bp, bx
lea ebp, reloc.oleaut32.dll_SysFreeString
pushal
rol edx, 0x11
lea edx, [eax*4]
bswap ebp
mov ebp, dword [esp + 0x2c]
mov bp, word [esp + 0x10]
pop bp
cmc
mov dword [esp + 5], edi
lea esp, [esp + 3]
lea ebp, [edx*4]
mov ebp, edi
lea ebp, [esi*4]
bswap bp
lea edx, [ebx + ebp]
mov word [esp + 0x19], ax
mov dh, 0xd2
mov dh, cl
mov word [esp + 2], si
mov byte [esp + 0x11], al
xchg dl, dh
sete dh
lea ebp, [eax*4]
pushal
bswap ebp
setnp dl
mov dl, byte [esp + 7]
mov dh, bh
xchg word [esp + 0x35], bp
xchg bp, dx
mov ebp, dword [esp + 0xd]
pop dword [esp + 0x2c]
mov ebp, dword [esp + 1]
mov dh, 0x2d
mov byte [esp + 0x32], ah
mov word [esp + 0x3b], bp
lea esp, [esp + 0x2e]
mov dh, bh
mov dl, byte [esp + 1]
push dword [esp + 0x15]
xchg dword [esp + 0x11], edx
not ebp
mov edx, 0x1fd35eb4
not bp
inc dl
pop bp
xchg ebp, edx
xchg ebp, edx
bswap ebp
lea ebp, [edx + edx]
pop dword [esp + 2]
mov ebp, 0x5702299e
mov word [esp + 5], di
mov bp, word [esp + 2]
rcl dh, cl
mov word [esp + 1], bp
mov word [esp + 0xd], bx
bts dx, bp
sub esp, 6
mov dh, byte [esp + 0x13]
lea ebp, [esi*4]
lea esp, [esp + 0x14]
sub esp, 8
pop bp
pop word [esp + 7]
lea ebp, [edi*4]
pop bp
jmp 0x64bb43
not bp
add esp, 0x13
mov dx, word [esp + 4]
lea ebp, [ebx + edi]
lea edx, reloc.oleaut32.dll_SysFreeString
mov ebp, dword [esp + 5]
xchg byte [esp + 0x14], dh
sbb bp, 0x6f59
jmp 0x64e25d
mov dh, 0x2e
lea esp, [esp + 2]
mov dh, 0xbb
sub esp, 0xf
ror bp, cl
mov ebp, dword [esp]
lea ebp, [ecx*4]
mov byte [esp], ah
add esp, 4
pop dx
mov dh, 0x89
lea ebp, [ecx + edx]
push dword [esp + 0xa]
cld
not ebp
pop word [esp]
mov bp, si
pop word [esp + 3]
pop word [esp + 1]
xchg byte [esp + 1], dh
mov bp, 0x4043
xchg dword [esp + 1], ebp
cld
clc
setae dh
push word [esp + 7]
mov dl, cl
mov ebp, 0x24633e2d
neg ebp
push dword [esp + 0xa]
mov edx, esi
neg dx
lea ebp, [edx*4]
mov bp, cx
xchg byte [esp], dl
mov ebp, 0x4817597f
mov bp, word [esp + 2]
sub esp, 0x1a
neg dx
jmp 0x64cb21
neg dh
not dh
xchg byte [esp], dh
mov dx, 0x7701
neg ebp
mov dh, 0x84
lea ebp, reloc.oleaut32.dll_SysFreeString
lea ebp, [ebp*4]
mov dh, byte [esp]
mov ebp, dword [esp]
lea esp, [esp]
btc ebp, esp
lea ebp, reloc.oleaut32.dll_SysFreeString
btr bp, bx
mov dh, 0x70
mov bp, 0x1bd4
xchg byte [esp], dh
lea ebp, reloc.oleaut32.dll_SysFreeString
mov ebp, dword [esp]
stc
add esp, 0
mov dh, 0xe
sbb dx, cx
sub esp, 0x19
mov dh, 0xe3
not dh
pop bp
lea esp, [esp + 7]
pop word [esp]
mov bp, dx
mov dword [esp + 4], esi
mov bp, 0x5d3c
mov bp, 0x4547
bsf bp, ax
mov dword [esp + 7], edx
lea ebp, [ecx - 0x1b]
and bp, sp
clc
lea ebp, [edx - 0xe6]
lea edx, [ecx*4]
xchg dword [esp + 2], ebp
pop dx
xchg byte [esp + 8], dh
mov ebp, ecx
xchg dh, dl
pop dword [esp + 2]
mov ebp, 0x4491442a
xchg byte [esp + 2], dh
pop bp
bswap bp
lea ebp, reloc.oleaut32.dll_SysFreeString
bswap bp
mov bp, word [esp + 3]
lea ebp, reloc.oleaut32.dll_SysFreeString
setnp dh
mov dl, byte [esp + 1]
xor dx, 0x412b
mov ebp, dword [esp + 1]
xchg dx, bp
mov byte [esp], al
rol ebp, cl
pop word [esp + 2]
neg dh
jmp 0x64cb51
push word [esp + 7]
mov byte [esp + 0x16], ah
push word [esp + 0x16]
pushal
push word [esp + 0xa]
mov byte [esp + 8], bl
push dword [esp + 0xc]
jmp 0x64d3f2
cmp dword [eax + reloc.oleaut32.dll_SysFreeString], 0
je 0x64b477
lea esp, [esp + 8]
popal
jmp 0x64acbf
call 0x64cd53
pop eax
sub eax, 0x64cd53
jmp 0x64cd24
push 0x87d77ce6
add dword [esp], reloc.oleaut32.dll_SysFreeString
pushal
pop word [esp + 0xb]
push dword [esp + 0x17]
mov dword [esp + 0xe], eax
pop dword [esp + 0xe]
mov dword [esp + 0x15], esi
push word [esp + 3]
pushfd
push dword [esp + 0xe]
mov byte [esp + 6], dh
mov byte [esp + 0x1b], dh
lea esp, [esp + 0x12]
pop word [esp + 2]
pop word [esp + 1]
mov word [esp], bx
push dword [esp + 0x11]
pop word [esp + 4]
mov dword [esp + 9], ecx
mov word [esp + 0x11], bx
push si
mov byte [esp], bh
mov dword [esp + 0xe], esi
mov word [esp + 7], si
pop word [esp + 7]
mov byte [esp + 3], dh
mov byte [esp + 0x10], bl
pop word [esp + 9]
mov dword [esp + 3], eax
push word [esp + 0x11]
lea esp, [esp + 4]
push word [esp + 7]
mov byte [esp + 2], ch
push si
mov word [esp + 0xc], cx
pop dword [esp + 1]
push dx
pop word [esp + 0xc]
pop dword [esp + 2]
mov word [esp + 5], cx
mov word [esp + 9], bp
pop word [esp + 5]
pop dword [esp]
pushal
mov dword [esp + 0x19], edi
pop dword [esp + 0xb]
mov dword [esp + 0xb], edx
mov word [esp], bp
mov byte [esp + 0xb], ch
lea esp, [esp + 3]
mov dword [esp + 0x11], esi
push word [esp + 0x15]
mov byte [esp + 0x19], bl
push word [esp + 0x1f]
push dword [esp + 0x21]
mov byte [esp + 0x16], dl
push dword [esp + 0x1f]
mov word [esp], bx
pop word [esp + 0x18]
push word [esp + 0xc]
pop word [esp + 0x24]
push word [esp + 0xa]
pop dword [esp + 0x20]
mov word [esp + 0x11], sp
mov word [esp + 0x10], sp
pushfd
push dword [esp + 0xe]
lea esp, [esp + 0x11]
push word [esp + 2]
mov word [esp + 0x1a], di
push bp
push edi
pop word [esp + 0x11]
pop word [esp + 0x1d]
mov byte [esp + 0xd], al
pop dword [esp + 0x16]
pushfd
push dword [esp + 0xd]
pop word [esp + 0x17]
lea esp, [esp + 0xc]
jmp 0x64ccf7
push dword [esp + 4]
mov word [esp + 8], bp
setp dh
bswap edx
stc
mov word [esp + 7], cx
bswap ebp
setae dh
xchg dword [esp + 6], edx
dec edx
mov dl, 0x71
pop ebp
shl bp, cl
bsf dx, ax
neg edx
add esp, 0xf
mov word [esp + 3], bp
push word [esp + 2]
pushfd
mov ebp, ebx
bswap bp
mov dx, word [esp + 8]
mov dx, word [esp + 6]
mov dx, 0xba2
sub esp, 9
cmp dx, 0xed7
xchg dword [esp + 6], ebp
mov dx, bp
pop bp
mov byte [esp], ah
bt dx, cx
lea ebp, [esi*4]
mov dh, 0x38
pushal
mov byte [esp + 0x20], dl
push word [esp + 0xb]
xchg word [esp], bp
btr edx, esp
xchg dl, dh
mov bp, word [esp + 0x34]
lea esp, [esp + 0x1c]
push word [esp + 0x11]
mov bp, word [esp + 5]
push bx
mov ebp, dword [esp + 0xf]
xchg dword [esp + 9], edx
add esp, 0x13
lea esp, [esp + 8]
bswap ebp
mov dh, ah
lea edx, [ebp*4]
btc dx, dx
xchg dx, bp
pop bp
mov edx, 0x59f31762
shl bp, 0xe
lea ebp, [ebx + edi]
mov ebp, dword [esp]
mov dl, dh
not ebp
mov ebp, edx
neg bp
bswap bp
lea edx, [esi*4]
mov dh, 0xb
bswap ebp
not dl
rcl dl, 5
lea ebp, [eax + edx]
not dl
lea ebp, reloc.oleaut32.dll_SysFreeString
lea ebp, [edx + esi]
lea ebp, reloc.oleaut32.dll_SysFreeString
not bp
dec dl
mov dh, cl
neg bp
lea ebp, [ebx + ebp]
mov dh, bl
push ax
add edx, edx
lea ebp, [edx*4]
lea ebp, [eax + ebp]
sub esp, 0x1d
mov ebp, dword [esp + 0x12]
mov bp, 0x491b
mov ebp, eax
not bp
mov word [esp + 0x12], di
pop bp
bswap ebp
xchg word [esp + 4], bp
mov ebp, dword [esp + 0xb]
sets dh
mov byte [esp], al
xchg byte [esp + 3], dh
xchg dword [esp + 6], ebp
mov dh, byte [esp + 7]
clc
xchg word [esp + 0xd], dx
pop word [esp + 0x13]
cmc
not dh
mov bp, word [esp + 0x10]
bsf bp, cx
lea ebp, reloc.oleaut32.dll_SysFreeString
lea ebp, [esi + edi]
pushfd
lea edx, [edi + 0x81]
sub esp, 0x16
mov word [esp + 0x26], si
mov bp, 0x77bb
bt ebp, ebx
btr bp, bx
mov edx, dword [esp + 0x26]
bsf ebp, edx
push dword [esp + 0x1d]
not bp
pop word [esp + 0x18]
pop word [esp + 7]
pop ebp
btr bp, dx
mov byte [esp + 0x18], bh
mov dh, byte [esp + 0x1e]
lea edx, [esp + eax]
mov word [esp + 0x2d], dx
mov dx, ax
mov dx, bx
adc bp, 0x63b1
bswap ebp
pop bp
neg dl
xchg ebp, edx
mov word [esp + 9], di
push dword [esp + 0x21]
pop dword [esp + 8]
xchg dl, dh
lea ebp, [ebx*4]
mov dword [esp + 0x21], ebp
mov dx, 0x4c55
mov bp, dx
pop bp
bswap bp
mov bp, word [esp + 9]
xchg byte [esp + 0xc], dh
neg dh
btc ebp, edx
mov byte [esp + 0x26], bl
push dword [esp + 0x1e]
not edx
lea ebp, reloc.oleaut32.dll_SysFreeString
mov dword [esp + 0x20], ebx
mov dx, word [esp + 0x1d]
mov dh, ah
bswap bp
mov dx, 0x5e93
mov bp, sp
not ebp
mov dh, dl
push bx
mov bp, word [esp + 7]
bswap ebp
pushal
lea esp, [esp + 0x53]
mov edx, 0x331f545d
mov ebp, eax
cld
pushfd
bswap edx
stc
not ebp
mov ebp, esi
sub esp, 0x1c
push word [esp + 0x14]
setp dh
setnp dh
setg dh
shr bp, 7
seto dh
mov byte [esp + 0x20], al
xchg ebp, edx
mov dh, byte [esp]
lea ebp, [ebx*4]
mov ebp, dword [esp + 0xa]
mov dword [esp + 0x1d], eax
xchg byte [esp + 9], dh
btr bp, si
xchg dx, bp
xchg byte [esp + 0xf], dh
mov edx, dword [esp + 0x18]
lea edx, reloc.oleaut32.dll_SysFreeString
mov ebp, dword [esp + 0xf]
mov edx, esp
lea ebp, [esi*4]
lea ebp, [ebp*4]
mov byte [esp + 3], dl
setb dh
add esp, 0xa
xchg word [esp + 0x15], dx
bswap bp
add esp, 0x16
lea ebp, reloc.oleaut32.dll_SysFreeString
neg dh
xchg word [esp], bp
bsf ebp, edx
add ebp, 0x34581e35
pushfd
xchg byte [esp + 3], dh
pop word [esp]
bts ebp, edi
pop dx
mov word [esp], dx
pop bp
mov dh, byte [esp]
lea ebp, [ecx*4]
rcl bp, 0xc
not dh
not ebp
mov bp, word [esp]
mov dh, byte [esp]
mov dl, 0xd7
bsr bp, si
rcr dx, cl
mov bp, ax
neg dx
mov ebp, esp
mov ebp, 0x61eb6cea
inc edx
not dh
not bp
push cx
mov byte [esp], al
not dh
btr bp, sp
push word [esp]
mov dh, bl
bsf dx, cx
mov ebp, 0x7db11079
mov dh, 0x31
mov dh, dl
mov dh, ch
setle dh
mov ebp, dword [esp]
bsr ebp, ecx
inc bp
mov edx, dword [esp + 4]
bsf ebp, esi
inc bp
neg bp
sub esp, 0x1c
pop dword [esp + 0x10]
mov dword [esp + 0x13], ecx
mov byte [esp + 0xe], bl
mov bp, word [esp + 0x17]
pop dword [esp + 0xc]
pop bp
xchg word [esp + 4], bp
add esp, 3
lea esp, [esp + 3]
mov ebp, dword [esp + 0x14]
lea esp, [esp + 0x18]
popfd
jno 0x64cd6a
push 0x87d77ce6
jmp 0x64cd6f
push cx
lea esp, [esp]
lea esp, [esp]
mov byte [esp], ch
push word [esp + 1]
push word [esp]
lea esp, [esp + 4]
push ax
push word [esp + 2]
push dword [esp + 4]
lea esp, [esp + 2]
jmp 0x650151
lea esp, [esp + 0x32]
mov dword [esp + 1], ebp
mov word [esp + 0xa], sp
mov dword [esp + 4], ecx
push dword [esp + 8]
pop dword [esp + 8]
push word [esp + 0xc]
mov dword [esp + 5], esi
pushal
pop word [esp + 0x18]
push dword [esp + 0xc]
push word [esp + 0x1a]
mov word [esp + 0x24], si
pop dword [esp]
mov byte [esp + 0x20], cl
mov dword [esp], esp
push dx
mov word [esp + 0x12], bp
pushfd
mov dword [esp + 0x26], esp
mov dword [esp + 0x22], eax
push word [esp + 0x1d]
push dword [esp + 0xa]
mov word [esp + 0x1e], bp
mov byte [esp], bl
push word [esp + 0x26]
pushal
lea esp, [esp + 0x5e]
push ebx
mov byte [esp + 1], dh
mov dword [esp], ebp
lea esp, [esp + 3]
push bx
push word [esp]
pop word [esp]
push edx
pop word [esp]
push dword [esp]
pop word [esp + 2]
push edi
lea esp, [esp + 0xa]
mov byte [esp], ah
push bp
push word [esp + 2]
pop word [esp]
lea esp, [esp + 2]
push esi
mov byte [esp + 1], dl
mov word [esp], ax
mov dword [esp], ebx
pushfd
push cx
lea esp, [esp + 3]
lea esp, [esp + 8]
push 0
jmp 0x64d255
lea esp, [esp + 0x54]
push cx
push word [esp + 1]
mov byte [esp + 1], dh
lea esp, [esp + 3]
pushfd
mov word [esp], bp
pushal
mov byte [esp + 0x1c], ch
pop dword [esp + 0x1c]
lea esp, [esp + 5]
push word [esp]
pushal
push word [esp + 0x2f]
mov dword [esp + 0x31], ecx
mov dword [esp + 0x3b], edx
jmp 0x64d28b
mov dword [esp + 0xe], ebp
pushal
mov word [esp + 0xc], cx
mov word [esp + 0x2f], si
pop dword [esp + 0x22]
push dword [esp + 0x37]
pop dword [esp + 0x1c]
mov word [esp + 0x24], bx
pop dword [esp + 0x18]
pushfd
push word [esp + 0x27]
mov dword [esp + 0x32], esi
push word [esp + 0x49]
push dword [esp + 0x2e]
pop word [esp + 3]
push word [esp + 0x37]
push dword [esp + 0x12]
jmp 0x64d359
push dword [esp + 0x38]
mov word [esp + 0x3a], dx
pop dword [esp + 0x39]
push dword [esp + 0x16]
lea esp, [esp + 0x29]
mov dword [esp + 0x18], esp
mov byte [esp + 0xa], dl
lea esp, [esp + 0xa]
push word [esp + 4]
pop dword [esp + 0xb]
mov word [esp + 0xb], ax
mov byte [esp + 2], cl
pop dword [esp]
mov dword [esp + 2], eax
lea esp, [esp + 1]
lea esp, [esp + 0xc]
push 0
push ebx
mov byte [esp], al
mov dword [esp], esi
mov dword [esp], ebx
push word [esp + 3]
lea esp, [esp + 4]
mov word [esp], cx
lea esp, [esp + 1]
mov byte [esp], ch
mov byte [esp], bh
lea esp, [esp]
lea esp, [esp]
mov byte [esp], cl
push edi
mov byte [esp + 3], ch
mov dword [esp], ecx
push dword [esp]
push word [esp + 1]
pop dword [esp]
push word [esp + 4]
mov word [esp + 2], di
push word [esp + 2]
mov byte [esp], ah
pushal
push dword [esp + 0x24]
push ebp
pop word [esp + 0x1c]
mov dword [esp + 0x23], eax
mov dword [esp + 0xd], ebp
pop dword [esp + 0x12]
pop dword [esp + 0x21]
pop word [esp + 0x14]
mov byte [esp + 8], bl
pop dword [esp + 0xe]
lea esp, [esp + 0x12]
lea esp, [esp + 2]
mov dword [esp + 2], esp
push word [esp + 0xe]
mov byte [esp + 4], cl
mov byte [esp + 8], bl
pop word [esp + 6]
mov word [esp + 3], sp
pop word [esp + 1]
push dword [esp + 7]
push dword [esp + 3]
push dword [esp]
push dword [esp + 0x15]
mov word [esp + 5], bx
push di
mov word [esp + 0x16], sp
mov byte [esp + 0x1a], dh
mov word [esp + 0x1c], di
push word [esp + 0x17]
push word [esp + 2]
pop dword [esp + 0x14]
push edx
pushfd
mov word [esp + 0x18], bx
mov byte [esp + 2], bl
push di
push word [esp + 0x11]
push word [esp + 0x1e]
mov byte [esp + 0x1c], cl
mov byte [esp + 0x24], ah
mov word [esp + 0x2a], di
mov word [esp + 0x23], ax
push dword [esp + 0x25]
push dword [esp + 5]
mov word [esp + 0xc], dx
pushfd
push dword [esp + 0x28]
push word [esp + 0x3b]
mov byte [esp + 0x14], cl
pop word [esp + 4]
pop dword [esp + 7]
pop dword [esp + 4]
push dword [esp + 0xf]
push word [esp + 0x19]
mov word [esp + 0x32], ax
mov dword [esp + 0x31], esp
mov dword [esp + 0xc], ebx
pop word [esp + 0x10]
mov word [esp + 0x31], ax
mov byte [esp + 0x1b], bl
mov word [esp + 0xc], ax
pushal
lea esp, [esp + 0x59]
push dx
mov word [esp], dx
lea esp, [esp + 1]
lea esp, [esp]
push bx
lea esp, [esp + 2]
push ax
lea esp, [esp + 2]
mov byte [esp], dl
push ax
push word [esp + 2]
push dword [esp + 3]
push dword [esp + 7]
mov dword [esp + 8], ebx
lea esp, [esp + 1]
lea esp, [esp + 0xc]
push 0
push edx
push dword [esp]
lea esp, [esp]
pop dword [esp]
mov dword [esp], edx
push ebx
pushfd
pop dword [esp]
mov byte [esp + 4], dl
pushal
push word [esp + 0x15]
mov dword [esp + 0x1e], ebp
mov byte [esp + 0xf], bl
push dword [esp + 6]
pop dword [esp + 0x1b]
push word [esp + 0xe]
mov word [esp + 4], di
jmp 0x64d39e
lea esp, [esp + 0x17]
not dl
cld
xchg word [esp + 1], bp
mov word [esp + 0xc], bx
shl dh, 6
cld
mov ebp, 0x18595c22
bswap ebp
mov ebp, ecx
push dword [esp + 1]
inc bp
mov bp, cx
mov dh, byte [esp + 0x10]
mov dx, word [esp + 7]
pushfd
inc dh
mov dh, byte [esp + 0x17]
clc
inc ebp
and bp, 0x265c
sbb dl, cl
xchg word [esp + 0x14], dx
mov dh, bl
sub esp, 0xc
xchg word [esp + 0x26], dx
mov dword [esp + 0x17], esp
mov dh, byte [esp + 0x18]
pop dx
push dword [esp + 0xf]
cld
push word [esp + 0x1d]
push dword [esp + 0x1d]
neg dh
mov ebp, eax
mov dh, cl
bsf edx, edx
bswap ebp
xchg bp, dx
xchg dword [esp + 0x23], ebp
bsr bp, di
mov bp, 0x816
setle dh
mov ebp, 0x4487577d
pushal
lea esp, [esp + 0x53]
or bp, si
sub esp, 0xa
mov bp, word [esp + 5]
mov ebp, dword [esp + 8]
pop word [esp + 1]
sub esp, 2
bswap bp
lea ebp, [ecx + ebx]
lea edx, [ecx + esi]
xchg dword [esp + 1], ebp
pop word [esp + 2]
pop ebp
mov word [esp], sp
dec dh
sub esp, 0xd
mov dh, 0x8c
not dh
mov bp, sp
lea ebp, reloc.oleaut32.dll_SysFreeString
pop bp
mov byte [esp], bl
mov ebp, dword [esp + 0xc]
sets dh
mov edx, 0x3ed784f
mov bp, 0x445
xchg byte [esp + 0xb], dh
mov byte [esp], bh
pop dword [esp]
pop word [esp + 5]
btr ebp, esi
pop ebp
setge dh
xchg byte [esp + 3], dl
mov dx, di
not ebp
bsr ebp, eax
rcl dx, cl
inc ebp
xchg dword [esp], edx
neg ebp
bswap edx
lea esp, [esp + 3]
pushal
mov bp, 0xcbb
lea ebp, [ebx*4]
pop bp
mov byte [esp + 0xb], bl
mov byte [esp + 0x13], al
push word [esp + 0x1c]
mov bp, word [esp + 5]
xchg word [esp + 0x19], bp
mov bp, 0x6274
mov dword [esp + 0x12], esp
cmc
xchg byte [esp + 0x18], dh
sub esp, 0x1b
mov dh, byte [esp + 0x26]
inc bp
mov bp, 0x35db
push sp
push eax
pop bp
xchg dl, dh
push dword [esp + 4]
mov dh, byte [esp + 0x17]
dec bp
sub esp, 0xe
lea esp, [esp + 0x53]
bsf bp, si
btc ebp, ebx
sub esp, 0x17
pop dx
lea edx, [eax*4]
xchg word [esp + 0xc], bp
xchg dword [esp + 6], ebp
pop dx
bswap dx
pop dx
lea ebp, [ecx*4]
mov ebp, esp
lea ebp, [ecx - 0xb1]
clc
pop dword [esp + 1]
neg dh
pushal
lea ebp, [esi*4]
neg ebp
mov word [esp + 8], cx
bswap bp
push word [esp + 0x22]
not dl
sub esp, 0x1a
lea ebp, [esi*4]
neg ebp
mov ebp, 0x7bd263cb
lea ebp, [esp + esi]
push dword [esp + 9]
bswap bp
pop dword [esp + 0x22]
mov dl, al
mov bp, 0x487e
mov dl, 0x77
pop dword [esp]
mov bp, 0x6eda
add esp, 0x12
xchg byte [esp + 0x22], dl
mov byte [esp + 0xd], bl
cmc
push bx
mov ebp, edx
mov bp, 0x6d73
clc
mov dh, bl
pop bp
push dword [esp + 0x32]
lea ebp, [ebx*4]
lea esp, [esp + 0x1f]
mov ebp, eax
btc ebp, ecx
bts ebp, ebp
pop bp
bsf bp, bp
setae dh
mov dword [esp + 0xe], eax
mov dl, 0xc7
lea esp, [esp + 7]
mov bp, word [esp]
mov dh, 0xe4
neg bp
mov dl, byte [esp + 0xb]
lea ebp, [eax + edx]
mov ebp, 0x680c6f46
mov dh, byte [esp + 0xd]
mov ebp, esp
xchg byte [esp], dl
bsf dx, sp
mov dh, dl
neg bp
mov dword [esp + 7], esp
pop dword [esp]
mov word [esp + 3], di
push word [esp + 7]
push dword [esp + 1]
mov ebp, dword [esp + 0xc]
xchg dx, bp
neg dx
mov dh, al
mov bp, si
push dword [esp + 0xc]
neg bp
bsr bp, dx
sete dh
xchg dword [esp + 4], edx
pushal
dec ebp
btc bp, ax
lea edx, reloc.oleaut32.dll_SysFreeString
mov bp, 0x7e2e
neg bp
mov dx, 0x658d
push cx
mov edx, dword [esp + 0x18]
neg dh
lea ebp, [ebp*4]
mov dh, 0xfe
bsf ebp, ebx
pushfd
btr bp, si
add esp, 0xd
bt bp, si
mov dx, bp
bsf bp, si
mov bp, 0x331c
bswap bp
ror bp, 0xd
not bp
mov edx, dword [esp + 0x11]
pop dx
mov byte [esp + 0x11], dh
lea ebp, [esi*4]
lea esp, [esp + 0x15]
xchg dx, bp
lea esp, [esp + 2]
mov ebp, 0x726701d1
sub esp, 0x14
neg edx
mov word [esp + 0x19], bx
sub esp, 0x14
bt bp, bp
neg bp
lea ebp, reloc.oleaut32.dll_SysFreeString
mov dh, byte [esp + 0x29]
pop word [esp + 0x1d]
mov byte [esp + 0x12], bl
not edx
xor dx, 0x4549
mov ebp, edi
lea edx, [esi*4]
xchg dl, dh
not dh
mov dh, bl
bswap bp
inc ebp
mov bp, word [esp + 0x2b]
mov bp, word [esp + 0xf]
push dword [esp + 0x14]
sub esp, 0x12
lea esp, [esp + 0x51]
mov dh, dl
sub esp, 0x15
lea edx, [ebp*4]
lea ebp, [ebx + 0xbb]
rol dx, 0
mov word [esp + 2], sp
neg bp
mov dh, al
bsf bp, bp
neg dh
xchg dword [esp + 0xa], ebp
mov bp, dx
dec edx
push word [esp]
bswap ebp
mov byte [esp + 0xd], al
bt ebp, esi
sub esp, 7
bswap ebp
lea ebp, reloc.oleaut32.dll_SysFreeString
stc
xchg edx, ebp
xchg byte [esp + 3], dh
xchg dword [esp + 0x12], ebp
push edi
inc dh
mov byte [esp + 0x17], bl
pop bp
mov edx, esi
cld
mov edx, dword [esp + 6]
setns dh
bsr ebp, esp
xchg word [esp + 0x1c], dx
inc bp
lea ebp, reloc.oleaut32.dll_SysFreeString
push dword [esp + 0x1f]
mov word [esp + 9], si
mov dh, byte [esp]
rol dl, 6
mov word [esp + 0x1e], di
push word [esp + 0xe]
mov bp, 0x4a10
pop word [esp + 0x20]
lea ebp, reloc.oleaut32.dll_SysFreeString
xchg dx, bp
mov word [esp + 0xb], bx
pop bp
mov byte [esp + 3], dl
mov dh, 0x6b
mov bp, 0x1b4f
not bp
xchg byte [esp + 4], dl
xchg byte [esp + 0x12], dh
pop word [esp + 8]
mov bp, 0x60fe
lea ebp, [edx*4]
mov ebp, dword [esp + 0x16]
setp dh
mov ebp, eax
xchg word [esp + 0x15], bp
xchg dx, bp
lea edx, [eax*4]
neg ebp
mov byte [esp + 5], dh
xchg dword [esp + 9], ebp
mov ebp, ebx
xchg word [esp + 5], bp
pop bp
not bp
pop dword [esp + 0xf]
mov bp, word [esp + 0x10]
pop bp
pop word [esp + 0x11]
bswap ebp
lea ebp, [eax*4]
bt ebp, ebp
mov dh, al
pop edx
lea edx, reloc.oleaut32.dll_SysFreeString
xchg edx, ebp
bsf dx, ax
xchg word [esp + 0xd], bp
lea ebp, [eax + edi]
bsr ebp, edi
xor bp, si
bswap ebp
neg dh
add esp, 0xa
push dword [esp + 7]
mov dh, ch
cmp ebp, ebp
xchg dword [esp + 6], ebp
lea edx, [ebx + esi]
bswap bp
mov dword [esp + 2], eax
add esp, 4
setns dh
xchg byte [esp + 3], dh
mov dword [esp], edx
neg bp
mov dx, ax
dec dl
bswap bp
pop edx
mov byte [esp + 2], bl
mov ebp, 0x611712a2
mov bp, 0x8b2
xchg word [esp + 1], dx
mov ebp, ebx
neg dx
lea ebp, [eax*4]
push dword [esp]
not dh
not ebp
pop word [esp + 1]
pop ebp
xchg word [esp], bp
xchg word [esp], bp
lea esp, [esp]
mov ebp, 0x6e9e2d81
push esi
lea ebp, [edx*4]
pushal
bswap edx
lea ebp, [ecx + ebx]
mov ebp, 0x239f6cc4
mov bp, dx
stc
xchg dl, dh
xchg byte [esp + 0xb], dl
pop dword [esp + 9]
xchg word [esp + 7], bp
pop word [esp + 0x19]
pushfd
lea ebp, reloc.oleaut32.dll_SysFreeString
mov dx, word [esp + 0x18]
neg dh
xchg ebp, edx
mov bp, 0x4ec
pop word [esp + 0x17]
push dword [esp + 0x13]
mov ebp, edx
lea ebp, [edx + ebp]
setl dh
push dword [esp + 0xe]
pop edx
pop dword [esp + 0xf]
mov dh, byte [esp + 0xf]
push edi
lea ebp, reloc.oleaut32.dll_SysFreeString
sbb dl, 0xed
xchg dword [esp + 0x19], ebp
lea ebp, reloc.oleaut32.dll_SysFreeString
push dword [esp + 0x1a]
mov word [esp + 0x13], di
lea ebp, reloc.oleaut32.dll_SysFreeString
pop dword [esp + 0x20]
mov ebp, 0x77a84133
pushal
mov ebp, 0x33f73e3d
btr dx, cx
pushfd
bswap edx
push word [esp + 0x46]
pop dword [esp + 0x2d]
mov word [esp + 0x30], sp
xchg word [esp + 0x2d], dx
mov dword [esp + 6], ebx
xchg byte [esp + 4], dh
xchg dword [esp + 0x18], ebp
bsf ebp, edi
mov word [esp + 0xb], dx
mov bp, word [esp + 0x30]
dec bp
push cx
xchg dword [esp + 0x25], ebp
pop edx
rol dh, cl
xchg byte [esp + 0x20], dh
mov dh, 0x65
add esp, 0x33
btr bp, di
lea ebp, reloc.oleaut32.dll_SysFreeString
inc ebp
xchg dh, dl
add esp, 5
rol dh, cl
mov dx, 0x3d3e
lea esp, [esp + 6]
bswap ebp
push dword [esp + 7]
pop dword [esp + 2]
not bp
bsf ebp, ebp
cld
xchg dword [esp + 1], ebp
setb dh
bswap bp
xchg word [esp + 5], bp
xchg word [esp], bp
btr edx, eax
xchg bp, dx
setl dl
bswap dx
bswap ebp
inc ebp
sub esp, 0x17
pop word [esp + 0xa]
inc dh
pop edx
add esp, 4
xchg dh, dl
mov bp, 0x2b
xchg byte [esp + 3], dh
xor ebp, esp
mov edx, esi
pop dword [esp + 9]
add esp, 0xa
bsr ebp, ebp
xchg byte [esp], dh
mov ebp, dword [esp]
xchg word [esp + 1], dx
or ebp, esp
setns dh
sub esp, 0x1c
lea ebp, [ebx*4]
lea ebp, reloc.oleaut32.dll_SysFreeString
mov bp, 0x7d44
mov ebp, dword [esp + 8]
ror ebp, 0xf
xchg dx, bp
mov word [esp + 0x12], cx
mov ebp, 0x50d75ead
pushal
lea ebp, [eax*4]
mov edx, dword [esp + 0x41]
xchg dword [esp + 0xb], ebp
lea ebp, [eax + edi]
pop dword [esp + 0x2c]
bsr ebp, ecx
or ebp, edx
mov byte [esp + 1], cl
mov edx, esp
lea ebp, [edx*4]
mov edx, esp
mov edx, 0x4ee81751
sub esp, 0x14
lea esp, [esp + 0x53]
sub esp, 3
mov dx, 0x5f20
add esp, 0
cmp ebp, ebp
mov bp, cx
xchg word [esp], bp
bswap bp
lea ebp, [edx*4]
clc
mov byte [esp], cl
lea ebp, reloc.oleaut32.dll_SysFreeString
neg dh
bswap bp
lea esp, [esp + 1]
neg ebp
mov dh, al
shl ebp, cl
bswap ebp
mov ebp, dword [esp]
lea ebp, [ecx*4]
push word [esp]
mov dh, al
mov dh, dl
bswap ebp
mov bp, 0x67d5
mov dh, byte [esp + 3]
pop word [esp]
neg dx
xchg dl, dh
stc
lea ebp, reloc.oleaut32.dll_SysFreeString
lea edx, [eax + 0xaa]
mov dh, 0x1f
mov byte [esp], dh
mov dh, dl
not dh
mov bp, word [esp]
bsr bp, ax
neg bp
xchg dx, bp
mov edx, dword [esp]
setnp dh
lea ebp, [ecx*4]
lea ebp, [eax*4]
not bp
mov byte [esp], al
inc dh
lea ebp, [edx*4]
cmc
rol dh, 3
bswap ebp
bsf ebp, eax
bswap ebp
mov bp, 0x4f03
xchg dh, dl
lea ebp, [esp + edx]
mov bp, 0xc90
xchg word [esp], dx
push bx
mov ebp, dword [esp + 1]
mov dh, byte [esp + 3]
pop word [esp]
rcr bp, 0xc
mov dh, 0x8b
dec edx
xchg byte [esp], dh
bswap dx
add esp, 0
mov dh, 0x32
lea ebp, [ebp*4]
neg bp
neg bp
xor ebp, edx
add esp, 1
lea edx, [edi*4]
bsf edx, ebx
bswap bp
mov dh, 0x6c
bts ebp, esi
push eax
push dword [esp]
mov ebp, 0x7d85cbf
not ebp
neg edx
pop ebp
mov word [esp], cx
pop word [esp]
lea edx, reloc.oleaut32.dll_SysFreeString
dec ebp
mov edx, esp
mov ebp, 0x8816855
bts ebp, edi
inc dh
add esp, 0
neg ebp
xchg word [esp], bp
mov edx, 0x259639f3
xchg dx, bp
add ebp, 0x625f0c4b
bswap bp
mov bp, 0x1ba7
bts bp, bx
bsr dx, sp
add esp, 2
dec bp
setb dh
push cx
mov dh, cl
xchg byte [esp + 1], dl
mov dl, ch
xchg byte [esp], dh
bswap bp
add esp, 2
clc
mov bp, 0x26b7
lea esp, [esp]
setb dh
sub esp, 8
pop ebp
bts ebp, eax
stc
sub esp, 0xe
xchg ebp, edx
lea esp, [esp + 0xf]
mov word [esp], cx
mov bp, 0x1427
xchg dword [esp], ebp
mov dh, 0xaa
lea ebp, [ecx*4]
sub esp, 0x1d
mov edx, ecx
neg dh
neg edx
pop dword [esp + 3]
mov dh, 0x97
sets dh
xchg ebp, edx
mov bp, di
mov edx, edi
sub esp, 0x13
clc
lea ebp, [eax + ecx]
mov dword [esp + 0x28], ebx
not dh
neg edx
lea ebp, [ebp + ebp]
mov dh, 0x40
lea esp, [esp + 0xc]
mov edx, esi
pop edx
mov ebp, ecx
not bp
pop bp
lea esp, [esp + 8]
mov dx, bx
mov ebp, ebx
dec bp
lea esp, [esp + 5]
pop word [esp + 7]
mov edx, esp
bsf bp, ax
mov dword [esp + 2], edx
xchg dword [esp + 2], ebp
mov ebp, 0x61792d3f
lea ebp, [ebx + edi]
lea ebp, [ecx + edi]
mov edx, ecx
bts bp, di
mov bp, word [esp + 0xc]
mov byte [esp + 0xd], cl
bsf ebp, esi
mov bp, 0x6a3b
bsf dx, si
mov ebp, dword [esp + 0xd]
not bp
mov dword [esp + 6], eax
xchg dword [esp + 2], ebp
shr bp, 0xe
not dh
setae dh
setle dh
push dword [esp + 1]
pop dword [esp + 0xa]
mov word [esp + 4], di
mov ebp, eax
pushal
not ebp
mov word [esp + 0xc], dx
xchg bp, dx
rcl edx, 0x18
pushal
cmc
cmc
sub esp, 0x17
lea esp, [esp + 0x66]
mov dx, si
lea edx, [edi*4]
push ax
xchg word [esp], bp
bts ebp, esp
cmc
mov word [esp], si
lea esp, [esp + 1]
mov dx, 0x479f
bsf bp, sp
pushal
sbb dh, ch
mov ebp, 0x29e852ab
mov dl, 0x71
mov bp, 0x7a15
mov ebp, 0x5d3074ca
sete dh
sub esp, 2
pop dx
mov edx, 0x33ea48c2
dec ebp
bts ebp, ebp
bswap bp
neg ebp
setbe dl
mov dh, byte [esp + 4]
mov dh, byte [esp + 7]
mov bp, 0x685e
add esp, 0xa
bswap dx
mov ebp, 0xdd65b68
xchg dword [esp + 0x10], ebp
dec bp
pop word [esp + 7]
xchg byte [esp], dh
sub esp, 0xa
bswap dx
add esp, 0xa
ror ebp, 0x11
mov dword [esp + 3], edi
lea ebp, [eax - 0x37]
setb dh
jmp 0x64cec3
lea edx, [ecx*4]
cmc
pop word [esp + 2]
mov dh, byte [esp + 0x1c]
push dword [esp + 3]
dec bp
mov bp, word [esp + 0xb]
mov ebp, 0x178d59e1
bt ebp, edx
push dword [esp + 0x16]
xchg word [esp + 0x1d], bp
and bp, cx
mov dh, 0x70
cmc
mov dword [esp + 4], esi
sub esp, 0x1e
mov ebp, dword [esp + 0x3d]
mov bp, 0xa32
mov bp, word [esp + 0x33]
xchg word [esp + 0x3d], dx
mov edx, ecx
bswap ebp
xchg bp, dx
neg dx
add esp, 0xd
mov word [esp + 0x18], di
mov bp, sp
lea esp, [esp + 0x15]
xchg dh, dl
mov word [esp + 4], di
lea ebp, [ebx*4]
pop word [esp + 8]
mov dl, byte [esp + 0xb]
mov dword [esp + 0xc], ecx
mov bp, word [esp + 0x15]
mov word [esp + 1], bx
neg dh
neg bp
mov dl, byte [esp + 3]
stc
mov byte [esp + 0x1e], ah
cld
xchg dh, dl
bswap bp
mov dh, bh
mov dh, al
lea edx, [eax*4]
lea edx, [eax + edx]
xchg dword [esp + 0x14], ebp
pop word [esp + 0xa]
mov dword [esp + 0x14], edx
xchg edx, ebp
mov bp, 0x132d
mov dword [esp + 0x19], ebx
pop word [esp + 0xc]
xchg dword [esp + 7], ebp
lea esp, [esp + 0x14]
mov bp, cx
cld
sub esp, 0x19
bswap ebp
mov word [esp + 0xc], cx
mov word [esp + 0x1e], di
mov byte [esp + 0xc], al
neg dl
mov dword [esp + 4], esp
mov ebp, esi
pop ebp
mov ebp, edi
mov bp, cx
mov ebp, dword [esp + 0x16]
pop dx
pop dword [esp + 1]
push dword [esp + 3]
bt bp, bp
xchg bp, dx
pop word [esp + 0x11]
xchg word [esp + 0xb], dx
mov ebp, 0x3d227160
xchg byte [esp + 0x15], dh
sub esp, 3
and dl, 0x11
xchg word [esp + 0xb], bp
mov ebp, ebx
mov dh, byte [esp + 0x15]
mov word [esp + 0x16], bx
inc bp
lea esp, [esp + 0x17]
pop ebp
mov dx, word [esp]
not bp
setae dh
xchg ebp, edx
bsf edx, esi
mov dx, si
bsf bp, bp
lea esp, [esp]
lea ebp, [esp + ecx]
add esp, 0
or ebp, 0x7f5328d0
cld
rol bp, cl
lea ebp, [ebp*4]
mov bp, 0x357e
xchg byte [esp], dh
rcl bp, 0xb
lea ebp, reloc.oleaut32.dll_SysFreeString
mov dx, 0x1ebb
btr ebp, ecx
neg dl
lea esp, [esp]
lea ebp, reloc.oleaut32.dll_SysFreeString
inc bp
pushal
lea ebp, reloc.oleaut32.dll_SysFreeString
not dh
mov word [esp + 3], cx
xchg word [esp + 0xf], bp
mov dword [esp + 1], esi
push word [esp + 6]
xchg dh, dl
pop bp
mov dh, 0x30
mov dword [esp + 7], esi
lea edx, [esi + ebp]
shr bp, 5
lea ebp, [esi*4]
bswap dx
mov dh, byte [esp + 0x1f]
pop bp
xchg dl, dh
pop dword [esp + 5]
xchg edx, ebp
clc
push word [esp + 0x11]
pop word [esp + 8]
cmp edx, 0x451a4180
sub esp, 0xc
pop dword [esp + 0xc]
mov byte [esp + 0xf], bl
mov bp, bx
bsf dx, bx
pushfd
pushal
pop dword [esp + 0xc]
mov ebp, ecx
mov ebp, dword [esp + 0x37]
mov dx, 0x1848
mov dx, word [esp + 5]
lea ebp, [edx*4]
pop ebp
lea ebp, [eax + ecx]
mov ebp, ebx
mov dword [esp + 0x1d], ecx
push word [esp + 0x21]
bswap ebp
pop dword [esp + 0x1c]
clc
xchg word [esp + 0x36], bp
mov ebp, 0x3e190649
lea ebp, reloc.oleaut32.dll_SysFreeString
sub esp, 4
xchg dword [esp + 0xf], ebp
dec dh
bswap bp
lea esp, [esp + 0x13]
neg dh
xchg word [esp + 0x14], bp
jmp 0x64d605
bswap edx
add esp, 1
mov word [esp + 0xa], cx
mov word [esp + 4], ax
not bp
shr dl, cl
push dword [esp + 0xf]
xchg dh, dl
xchg dword [esp + 0xe], ebp
bswap bp
lea ebp, [edx*4]
xchg word [esp + 0x13], bp
add esp, 0x14
mov byte [esp + 2], cl
setb dh
mov ebp, 0x392b261a
lea ebp, [ecx + ebx]
pop bp
mov bp, 0x93d
mov word [esp + 1], cx
shl bp, 0xe
add esp, 0
mov dl, 0x83
lea ebp, [eax + ebp]
lea ebp, [edx + esi]
add dh, 0xd6
mov ebp, dword [esp + 1]
xchg ebp, edx
push word [esp + 2]
pop word [esp + 1]
mov dh, ch
mov dx, 0x723b
xchg dword [esp], ebp
neg dh
pop ebp
mov dh, 0x7a
mov dh, 0x5d
bswap bp
shl dx, 2
mov dh, 0xa8
sub esp, 0x11
mov dx, 0x4d22
mov bp, word [esp + 0xd]
mov bp, word [esp + 1]
sete dl
pop word [esp]
sbb ebp, eax
and ebp, 0x612a60b6
bswap ebp
shl dh, cl
push word [esp + 9]
mov bp, word [esp + 0xb]
push dword [esp + 1]
inc ebp
mov byte [esp + 0xe], cl
mov byte [esp + 0xe], ch
xchg byte [esp], dh
mov bp, 0x5b2f
push dword [esp + 7]
mov bp, dx
push sp
sub esp, 1
sub esp, 6
bts ebp, eax
sub esp, 0x11
mov bp, cx
neg dl
mov byte [esp + 5], bh
pop dx
mov dword [esp + 0x1a], edx
mov ebp, dword [esp + 0x27]
mov bp, ax
pop ebp
setne dh
mov bp, word [esp + 3]
rol dh, cl
push word [esp + 0x1c]
neg dl
push dword [esp + 0x2c]
add esp, 3
mov bp, 0x6c9c
mov byte [esp + 7], ch
shl dh, 5
cld
lea esp, [esp + 0x1e]
mov byte [esp + 0xa], cl
mov dh, byte [esp + 5]
xchg word [esp + 4], bp
mov dl, ch
mov dword [esp + 9], ebx
mov dh, 0x4a
mov dword [esp + 1], ecx
xchg word [esp + 7], dx
push dword [esp + 0xe]
setg dh
push dword [esp + 0xf]
pop word [esp + 0xf]
mov bp, 0x440e
bsf bp, bx
add esp, 1
bswap bp
sub esp, 9
mov byte [esp + 0xb], cl
bswap ebp
lea esp, [esp + 0x1e]
mov word [esp], bx
neg ebp
bt ebp, edi
bsr ebp, esp
lea edx, reloc.oleaut32.dll_SysFreeString
mov ebp, 0x21a95ff0
mov byte [esp], bl
mov ebp, esi
bsr bp, di
bsf ebp, ecx
bswap bp
bswap edx
mov dh, bh
pop bp
mov dh, byte [esp]
push esi
push dword [esp + 2]
add esp, 0
lea edx, [esi + edi]
add bp, 0x4170
mov ebp, dword [esp + 6]
mov dword [esp + 3], ebx
lea esp, [esp + 1]
mov ebp, edi
mov ebp, dword [esp + 2]
neg ebp
mov dh, 0xdb
xchg word [esp], dx
xchg word [esp], bp
push dword [esp + 5]
mov byte [esp + 6], dl
setne dh
mov dh, 0xe3
pop word [esp + 1]
pop word [esp + 4]
sub esp, 0x14
xchg byte [esp + 7], dh
pushfd
mov word [esp + 0x18], cx
mov edx, 0x10d97467
pop word [esp + 2]
mov dx, 0x3fc0
mov dh, ah
lea esp, [esp + 0xb]
and ebp, 0x7f123277
push dword [esp + 0xe]
mov dx, si
xchg dword [esp + 5], ebp
sub esp, 8
pop dword [esp + 0x13]
not dl
mov dword [esp + 7], edi
sub esp, 9
inc dx
rcl bp, cl
pop word [esp + 0xb]
bswap ebp
pop word [esp + 0xf]
xchg edx, ebp
add esp, 0xd
lea ebp, [edx + edi]
xchg dh, dl
push word [esp + 0xd]
xchg byte [esp + 0x11], dh
stc
shl dh, cl
lea esp, [esp + 6]
lea edx, [eax + edx]
mov edx, 0x3cc1172e
inc bp
bswap ebp
mov edx, 0x3d13171c
lea ebp, [esi*4]
mov bp, dx
lea ebp, [eax + esi]
lea edx, [ebp*4]
mov byte [esp + 3], ch
clc
push cx
mov dh, bh
pop ebp
lea ebp, [ecx*4]
push dword [esp + 4]
mov dword [esp + 9], ebx
mov byte [esp + 0xc], bl
mov word [esp + 0xd], sp
pop word [esp + 8]
mov dx, word [esp + 4]
mov byte [esp + 0xb], dh
rcr ebp, cl
mov word [esp + 7], bx
neg bp
bt ebp, edi
mov ebp, 0x48fb1ffc
pop ebp
pop dx
inc bp
xor ebp, 0x64147062
cld
bsf ebp, ecx
cld
xchg ebp, edx
add esp, 2
mov dx, sp
inc bp
inc bp
mov dl, 0x85
inc dh
lea edx, [ebx*4]
mov bp, word [esp + 5]
xchg word [esp], dx
mov bp, word [esp + 2]
lea edx, [edi*4]
stc
xchg dword [esp], ebp
lea ebp, reloc.oleaut32.dll_SysFreeString
xchg byte [esp + 4], dh
bsr bp, si
lea esp, [esp + 3]
mov word [esp], di
clc
mov bp, cx
mov bp, di
add esp, 1
add esp, 1
xchg bp, dx
mov dh, byte [esp]
mov byte [esp], ch
neg bp
bswap edx
lea ebp, reloc.oleaut32.dll_SysFreeString
sub esp, 9
pop word [esp + 2]
lea ebp, [edx + ebx]
xchg word [esp + 3], bp
lea ebp, [edx*4]
push cx
mov bp, 0x3792
xchg dl, dh
xchg word [esp + 5], bp
mov ebp, esi
mov ebp, dword [esp + 8]
mov dh, 8
mov dh, bh
mov dh, byte [esp + 4]
pop ebp
add esp, 1
ror ebp, cl
xchg dword [esp], edx
bswap bp
not ebp
lea ebp, [esp + esi]
lea ebp, [ecx*4]
inc dx
mov dh, 0x88
push word [esp + 2]
push ebp
mov ebp, esi
rcr dx, 6
pop ebp
xchg byte [esp + 2], dh
mov dl, bh
mov dh, byte [esp + 4]
btc ebp, esp
mov dx, bx
mov word [esp], cx
lea esp, [esp + 2]
setb dh
mov bp, 0x230d
lea ebp, reloc.oleaut32.dll_SysFreeString
mov dh, ah
mov word [esp + 1], bx
push word [esp + 3]
neg dl
add esp, 5
bsf bp, cx
mov ebp, edi
push word [esp]
mov dword [esp], esp
pop ebp
setbe dl
add dh, 0xe3
shl ebp, 0x12
mov ebp, 0x273d255d
mov bp, 0x3c59
lea ebp, [edx*4]
lea ebp, [eax + ebx]
bswap ebp
bswap bp
not bp
bswap bp
mov dh, 0x3a
sub esp, 7
mov edx, 0x438a1f0d
mov dword [esp], ebx
mov byte [esp], dh
sub esp, 0x17
sub esp, 0xb
mov dh, 0x95
pop word [esp + 0x19]
xchg byte [esp + 0x1c], dh
lea ebp, reloc.oleaut32.dll_SysFreeString
mov bp, ax
mov bp, si
mov ebp, esp
ror ebp, cl
bts bp, dx
mov bp, sp
neg bp
mov dh, dl
lea ebp, [esi + esi]
neg ebp
bswap ebp
bsf ebp, edi
xchg dword [esp + 0x1c], ebp
pop word [esp + 0x15]
mov bp, word [esp + 0x21]
xchg word [esp + 2], bp
pop ebp
mov dl, byte [esp + 0xd]
neg dh
add esp, 0x1a
mov dx, sp
neg dh
xchg bp, dx
lea ebp, reloc.oleaut32.dll_SysFreeString
lea ebp, [ebp*4]
inc ebp
mov dword [esp], eax
lea ebp, [ecx*4]
mov byte [esp + 5], cl
pushal
lea esp, [esp + 0x18]
dec bp
xchg bp, dx
xchg byte [esp + 2], dh
mov byte [esp + 1], dh
mov byte [esp + 8], bh
bsr ebp, ecx
mov edx, ebx
lea edx, [edi*4]
bswap bp
xchg dword [esp + 8], ebp
mov bp, 0x5851
mov dl, 0x47
bswap bp
lea ebp, reloc.oleaut32.dll_SysFreeString
xchg dl, dh
bsr ebp, ecx
not dh
mov ebp, edx
mov dx, 0x7e43
sub esp, 0x18
mov ebp, dword [esp + 0x1a]
add esp, 0x21
shl dh, cl
mov bp, si
push word [esp + 3]
neg dh
mov ebp, dword [esp + 5]
push word [esp + 5]
cmc
bswap bp
bswap ebp
mov byte [esp + 6], bh
push di
inc dx
mov edx, dword [esp + 9]
xchg word [esp + 6], bp
sub esp, 9
mov dword [esp + 4], ebp
mov bp, si
push edx
mov byte [esp + 0xc], dl
lea esp, [esp + 0x15]
lea ebp, [eax + ebx]
xchg bp, dx
lea ebp, [eax + ecx]
mov edx, dword [esp]
bswap dx
mov dword [esp], edx
xchg edx, ebp
bt bp, ax
mov ebp, 0x68e44ae2
bsf dx, di
rol dl, 0
mov word [esp + 1], si
mov dword [esp], esi
bswap ebp
mov edx, eax
mov dh, byte [esp + 3]
lea ebp, [ebp*4]
setle dh
pushfd
mov bp, word [esp]
sub esp, 0x15
lea esp, [esp + 0x14]
mov dh, byte [esp + 5]
mov dword [esp + 1], esi
mov bp, word [esp + 8]
lea esp, [esp + 1]
xchg word [esp + 2], bp
neg dh
xchg dword [esp + 3], ebp
shl dx, 0xc
mov edx, 0x1c8e357e
mov byte [esp], cl
sub esp, 0xf
bswap ebp
and ebp, 0x15f159e2
mov bp, word [esp + 0xe]
add esp, 0x12
xchg word [esp + 1], bp
pushal
mov dword [esp + 3], ebp
push dword [esp + 0x24]
mov dh, 0x96
xchg dword [esp], ebp
clc
mov edx, eax
xchg byte [esp + 9], dh
mov dh, cl
mov bp, word [esp + 6]
mov bp, 0x2c13
cmc
xchg dx, bp
pop dword [esp + 1]
lea edx, reloc.oleaut32.dll_SysFreeString
pop word [esp + 9]
add esp, 0xb
pushal
xchg dword [esp + 0x2a], ebp
neg dh
mov bp, 0x2a19
pop ebp
xchg word [esp + 0x1f], bp
mov dword [esp + 0x10], esi
cld
sub esp, 0x12
push dword [esp + 0x2e]
pop bp
xchg byte [esp + 3], dh
inc dx
bswap bp
mov word [esp + 0x33], bx
rcl bp, 3
pop word [esp + 0x20]
lea ebp, reloc.oleaut32.dll_SysFreeString
mov dl, 0xe6
pop ebp
xchg dword [esp + 0x3c], ebp
mov dword [esp + 0x2b], esp
add bp, di
mov dh, byte [esp + 0x2e]
rol dh, 6
pop edx
bswap ebp
mov dword [esp + 5], ebx
push word [esp + 0x33]
mov word [esp + 0x3d], dx
mov byte [esp + 9], al
lea ebp, reloc.oleaut32.dll_SysFreeString
or bp, di
mov dh, ah
bswap bp
xchg byte [esp + 0xe], dl
mov dh, 0x47
pop word [esp + 0x1b]
mov dh, byte [esp + 0x22]
bswap bp
push dword [esp + 0x10]
mov word [esp + 0x27], si
push ax
push word [esp + 0x1d]
pop edx
rol edx, 0x19
lea edx, [eax*4]
neg ebp
btr ebp, ebx
xchg word [esp + 0x19], bp
cld
ror ebp, 0x18
push dword [esp + 0x39]
xchg dword [esp + 0x28], ebp
mov dh, ch
dec ebp
lea esp, [esp + 0x1b]
bswap edx
pop dword [esp + 0x15]
mov ebp, ecx
xchg word [esp + 3], bp
shl bp, cl
not ebp
mov bp, ax
dec bp
bswap dx
xchg dword [esp + 0x19], ebp
mov edx, esp
xchg byte [esp + 1], dh
lea esp, [esp + 2]
sub esp, 0x1d
pop bp
mov dx, word [esp + 0x25]
mov edx, dword [esp + 9]
mov bp, word [esp + 3]
cmc
bsr dx, bx
add esp, 0x36
bswap ebp
add esp, 1
mov edx, 0x1fd16637
xchg word [esp + 6], bp
not ebp
xchg word [esp + 1], bp
mov dh, byte [esp + 5]
mov byte [esp + 3], al
not dh
xchg byte [esp + 7], dh
pop word [esp]
xchg edx, ebp
mov word [esp + 3], bx
bts dx, sp
xchg word [esp], bp
pop word [esp]
mov word [esp + 2], si
mov byte [esp + 2], bh
xchg dx, bp
mov word [esp], bx
lea ebp, reloc.oleaut32.dll_SysFreeString
lea ebp, [esi*4]
mov dword [esp], ecx
pop word [esp]
xor bp, sp
add esp, 2
mov dh, 0x82
btr ebp, edx
mov bp, di
mov ebp, ecx
mov bp, di
bswap edx
mov edx, ebp
mov bp, word [esp]
shr bp, cl
setno dh
rcl bp, 3
xchg byte [esp], dh
mov bp, word [esp]
stc
push cx
mov dh, 0x2d
mov edx, 0x46de35dd
pushal
sub esp, 0xd
mov byte [esp + 0x18], bl
mov dh, byte [esp + 0xf]
mov ebp, 0x54a3304d
xchg word [esp], dx
mov dword [esp + 8], esp
mov dword [esp + 0xd], edx
push ebx
xchg byte [esp + 0x17], dh
mov ebp, dword [esp + 0x24]
cmc
mov ebp, dword [esp + 0x15]
cmc
pop ebp
pop ebp
mov dh, 0xff
add esp, 0x18
lea ebp, [esi + 0x14]
btc ebp, esi
xchg word [esp + 0xc], bp
pop dword [esp + 3]
lea ebp, reloc.oleaut32.dll_SysFreeString
xchg byte [esp + 0xd], dh
mov dword [esp + 0xb], esi
not bp
not ebp
neg ebp
lea edx, [edx*4]
sub esp, 0xf
pop edx
pop dword [esp + 0xc]
neg ebp
mov dh, 0x24
pop word [esp + 0xd]
not bp
lea esp, [esp + 8]
mov edx, esi
mov word [esp + 5], dx
add bp, 0x3e55
shr dh, cl
mov dh, bh
neg ebp
push word [esp + 5]
lea ebp, [esp + edi]
not dl
not ebp
mov bp, word [esp + 0xc]
mov dx, word [esp + 2]
setp dh
bt bp, sp
xchg dword [esp], ebp
rcl ebp, cl
mov bp, dx
neg dl
not ebp
dec dh
mov word [esp + 4], bx
pop word [esp + 1]
mov word [esp + 4], bp
mov dh, byte [esp + 9]
dec dx
lea esp, [esp + 3]
dec ebp
bsf ebp, ebx
not dh
mov dh, 0x86
bswap bp
pop word [esp + 4]
pushal
neg ebp
bsf bp, dx
xchg byte [esp + 3], dh
mov ebp, 0xea21968
dec ebp
xchg byte [esp + 0xf], dh
neg bp
neg dh
mov dword [esp + 0x22], esp
mov word [esp + 0x15], bp
lea ebp, [edx + ebp]
pop word [esp + 0x17]
lea edx, reloc.oleaut32.dll_SysFreeString
bswap edx
mov dh, byte [esp + 0x10]
mov dx, ax
bsr dx, sp
mov bp, word [esp + 0x11]
mov ebp, 0x78eb1a6f
pushal
dec ebp
not dx
add esp, 0x28
pop dword [esp + 0xc]
bts ebp, ebx
mov dword [esp + 5], esp
btr ebp, eax
xchg dl, dh
pop bp
pop word [esp + 0x13]
sub esp, 0x14
bsr dx, bx
bts bp, dx
xchg word [esp + 0x24], bp
cmp dx, 0x5d0a
inc dx
bswap ebp
mov bp, ax
lea edx, [ebx + 0x1c]
setb dh
bswap bp
sub esp, 5
xchg edx, ebp
xchg word [esp + 0x1f], bp
xchg byte [esp + 6], dh
push dword [esp + 0x20]
xchg word [esp + 0xe], bp
btr ebp, edx
pop ebp
mov word [esp + 1], bp
mov bp, word [esp + 0x2a]
sub esp, 5
bts bp, si
mov byte [esp + 7], cl
mov edx, ecx
shl dx, cl
pop dword [esp + 0x26]
xchg dword [esp + 0x18], ebp
xchg word [esp + 0xc], dx
mov bp, word [esp + 0x18]
mov ebp, esi
mov dh, bh
pop word [esp + 0x18]
mov bp, 0x1c96
lea edx, [edx + ebx]
bswap ebp
bsr bp, bp
pushal
lea ebp, [esi*4]
lea ebp, [eax*4]
mov ebp, 0x68ac4d22
mov word [esp + 0x28], di
mov dword [esp + 0x1a], edi
inc ebp
mov dh, byte [esp + 2]
rcr dh, 3
not dl
mov bp, word [esp + 0x13]
mov byte [esp + 0x10], dh
pop bp
add esp, 3
pop dword [esp + 0x25]
push ax
xchg edx, ebp
push dx
xchg dword [esp + 0x11], edx
bswap ebp
lea esp, [esp + 0x25]
xchg dh, dl
xchg byte [esp + 5], dh
lea ebp, [esi + ebp]
mov word [esp + 0x10], di
pop ebp
mov dword [esp + 0xb], eax
pop word [esp + 2]
push dword [esp + 0xa]
neg dh
pop edx
bsf bp, ax
mov bp, word [esp + 0x13]
inc edx
mov dh, byte [esp + 0x17]
mov dh, byte [esp + 9]
bswap ebp
mov dh, byte [esp + 0x10]
mov dh, ch
mov ebp, dword [esp + 0xa]
mov bp, cx
bswap ebp
shr ebp, cl
lea esp, [esp + 0xd]
mov bp, sp
push cx
mov dword [esp + 1], ecx
push dword [esp + 0x12]
push word [esp + 2]
clc
bswap dx
xchg dword [esp + 0xe], ebp
lea esp, [esp + 9]
pushfd
xchg ebp, edx
xchg word [esp + 1], bp
lea ebp, reloc.oleaut32.dll_SysFreeString
sub esp, 0x18
add esp, 0xd
mov ebp, edx
push dx
lea esp, [esp + 0x1e]
mov ebp, dword [esp]
xchg word [esp], bp
mov ebp, edi
bswap bp
xchg byte [esp + 1], dh
bts bp, bx
mov edx, 0x127d5b90
push word [esp + 1]
seto dh
pop ebp
mov byte [esp], ch
mov dh, al
xchg bp, dx
lea ebp, reloc.oleaut32.dll_SysFreeString
mov ebp, dword [esp]
mov ebp, dword [esp]
mov bp, 0x3287
btr bp, bp
sub esp, 0x17
mov dh, byte [esp + 4]
mov bp, cx
push dword [esp + 2]
xchg word [esp + 0x16], bp
pop bp
add esp, 0xc
lea esp, [esp + 3]
xchg dword [esp + 6], edx
mov dh, al
mov edx, dword [esp + 2]
pop ebp
push dword [esp + 3]
mov dl, byte [esp + 9]
pop dword [esp]
not ebp
btr bp, bx
pop dx
pop word [esp]
mov bp, ax
mov byte [esp + 1], al
xchg byte [esp + 1], dh
mov word [esp], ax
xchg word [esp], dx
add esp, 1
bswap ebp
push word [esp + 1]
add esp, 1
mov word [esp], ax
rol dh, 0
mov edx, 0x6f875d35
add esp, 1
pop dx
not dh
lea ebp, [ecx + ebp]
pushal
pop ebp
mov bp, word [esp + 4]
mov byte [esp + 5], al
push dword [esp + 8]
mov ebp, dword [esp + 0x14]
xchg word [esp + 0x1d], bp
mov ebp, dword [esp + 0xc]
setp dh
xchg ebp, edx
mov ebp, 0x4a7f0fef
xchg byte [esp + 1], dh
mov byte [esp + 0x1a], dh
push dword [esp + 0x15]
sub esp, 0x1b
not edx
mov dl, 0x49
lea ebp, [ecx + ebp]
neg dh
mov edx, 0x5e3360d8
mov bp, 0x4133
mov ebp, 0x645d16ec
mov bp, 0x77a0
bswap edx
bsr bp, di
bswap edx
mov ebp, 0xb57739f
xchg dword [esp + 0xb], ebp
mov dh, byte [esp + 2]
mov dx, cx
bswap ebp
push word [esp + 0x2c]
sub ebp, ebx
mov byte [esp + 0xe], bl
pop bp
lea ebp, [ebx + 4]
lea ebp, [edx*4]
mov dword [esp + 0xd], esi
shl bp, cl
cld
sete dh
lea esp, [esp + 0x23]
lea edx, reloc.oleaut32.dll_SysFreeString
bsf ebp, ecx
mov dword [esp + 1], ebx
bswap bp
mov ebp, 0x15a46688
mov word [esp + 0x10], cx
bt bp, ax
cld
xchg byte [esp + 0xb], dh
seto dh
mov edx, eax
setg dh
xchg dword [esp + 0x14], edx
xchg byte [esp + 0xb], dh
rol dh, 3
push dword [esp + 0x1b]
setae dh
cld
neg ebp
xchg byte [esp + 0xc], dl
mov bp, dx
lea esp, [esp + 0x1c]
push dword [esp + 1]
bswap dx
mov ebp, 0xef64321
pop ebp
mov dh, byte [esp + 3]
mov bp, sp
mov byte [esp], bl
pop ebp
bswap dx
bts bp, bx
mov dh, 0xb2
inc ebp
bt bp, bp
mov dh, byte [esp]
lea edx, [esp + edi]
bt bp, cx
sub esp, 0x1e
lea ebp, [eax + ebx]
lea ebp, [ecx + ebx]
mov dh, bh
mov bp, si
xchg dword [esp + 2], ebp
xchg word [esp + 0x13], bp
lea ebp, reloc.oleaut32.dll_SysFreeString
bswap ebp
mov dh, cl
bswap ebp
mov dx, 0x59e3
pop word [esp + 1]
xchg byte [esp + 0xd], dh
cld
mov dh, dl
neg ebp
xchg dword [esp], ebp
lea ebp, [eax + edi]
mov ebp, dword [esp + 0x15]
ror dh, 2
setae dh
lea ebp, [esp - 0xcd]
btr ebp, edi
pop word [esp + 0xa]
xchg edx, ebp
lea ebp, [ecx + edi]
pop bp
add esp, 0xa
mov dh, al
add esp, 0xb
mov dh, byte [esp + 1]
xchg dh, dl
bswap ebp
btc edx, eax
cmc
push word [esp + 2]
lea edx, [ebp*4]
pop word [esp]
add esp, 0
neg ebp
xchg byte [esp], dh
xchg dx, bp
add esp, 0
inc edx
push word [esp + 2]
cld
not bp
bswap bp
inc dh
add esp, 0
bts bp, sp
bswap ebp
lea ebp, reloc.oleaut32.dll_SysFreeString
mov dh, 0xc6
bsf bp, ax
bswap ebp
xchg word [esp + 1], bp
add esp, 0
mov byte [esp], dh
setle dl
bt dx, bx
mov byte [esp + 1], al
pop word [esp]
pop dx
bswap ebp
lea esp, [esp]
xchg byte [esp], dh
mov dh, 0x3b
not edx
xchg bp, dx
pushfd
mov edx, 0x19400ec2
push dx
mov bp, word [esp + 3]
xchg bp, dx
mov ebp, dword [esp + 4]
mov dx, 0x379d
mov dword [esp], esi
mov byte [esp], bl
bt bp, bp
xchg word [esp + 1], bp
xchg byte [esp + 1], dh
lea ebp, [ebp*4]
bswap edx
cmp bp, bp
bswap bp
lea ebp, [ebp + ebp]
xchg dh, dl
mov ebp, ecx
push dword [esp + 5]
push word [esp + 4]
lea ebp, [esp + edi]
pop bp
bswap bp
xchg byte [esp + 7], dh
setae dh
mov dl, ah
mov byte [esp + 8], cl
push word [esp + 6]
push word [esp + 0xb]
mov word [esp + 2], bp
xchg word [esp + 0xa], bp
bts ebp, edi
lea ebp, [ebp + ebp]
setae dh
lea edx, [ebp + 0x1b]
sub esp, 0xb
rcl bp, cl
mov ebp, dword [esp + 0xa]
lea edx, reloc.oleaut32.dll_SysFreeString
xchg dword [esp + 1], ebp
bts ebp, ebp
lea ebp, [ebx*4]
xchg word [esp + 0x10], dx
bswap ebp
xchg dx, bp
lea ebp, reloc.oleaut32.dll_SysFreeString
not bp
mov ebp, dword [esp + 0x13]
not dl
xchg bp, dx
pushfd
shr dx, 0
mov edx, 0x705b5c90
push si
jmp 0x64dff0
mov dword [esp + 1], eax
lea eax, [edx - 0x8f]
mov eax, dword [esp]
bswap ax
push ax
pop ax
mov ah, byte [esp]
setbe ah
setge ah
mov eax, dword [esp]
mov eax, 0x410235e0
mov ax, 0x5b50
mov al, bl
setne al
mov eax, dword [esp]
mov ax, word [esp]
bswap eax
setp al
pushfd
xchg byte [esp + 1], al
push word [esp + 1]
pushal
mov ax, 0x1ed7
push dword [esp + 0x20]
mov ah, byte [esp + 0xa]
push dword [esp + 0x1f]
push word [esp + 0x21]
xchg byte [esp + 0x25], al
pop word [esp + 0x1f]
mov al, byte [esp + 0xf]
bswap eax
pop dword [esp + 0xe]
mov ax, word [esp + 0xe]
mov byte [esp + 1], bl
mov eax, dword [esp + 0x1d]
push esp
xchg byte [esp + 0x2c], al
mov eax, dword [esp + 0xe]
xchg byte [esp + 2], ah
mov word [esp + 0x10], dx
mov ax, 0x73ac
lea eax, [ecx + ebp]
pop dword [esp + 4]
bswap eax
pop word [esp + 0x1f]
pop ax
xchg word [esp + 0xc], ax
lea eax, [ebx + esi]
push ecx
xchg word [esp + 4], ax
lea eax, [esi*4]
mov ah, 0xba
pop word [esp + 0x23]
xchg dword [esp + 0x1e], eax
mov al, bl
mov eax, 0x3b927e2d
pop eax
push word [esp + 2]
bswap ax
not eax
setg al
pop ax
lea eax, [edx + ebx]
pop ax
mov ah, bh
xchg al, ah
lea eax, [esp + 0x5f]
mov word [esp + 0x18], ax
mov eax, dword [esp + 1]
setnp al
mov word [esp + 0x10], ax
pushfd
xchg word [esp + 0xd], ax
lea eax, [esi + edi]
lea eax, [eax + ebp]
bswap eax
xchg word [esp + 0x18], ax
pop eax
xchg word [esp + 2], ax
pop eax
pop word [esp + 0xa]
xchg word [esp + 0xd], ax
pop eax
setno al
pop eax
lea eax, reloc.oleaut32.dll_SysFreeString
pop dword [esp + 8]
lea eax, [edx + ebp]
mov word [esp + 8], cx
lea esp, [esp + 3]
setg al
lea eax, [edx + ebp]
push dword [esp + 0xc]
mov byte [esp + 0xa], dh
pop ax
pop eax
mov al, ah
pop word [esp + 3]
mov ax, word [esp + 7]
lea esp, [esp + 1]
mov ax, 0x6ba
mov eax, 0x8cb5755
mov eax, dword [esp]
bswap eax
lea eax, reloc.oleaut32.dll_SysFreeString
bswap eax
lea eax, reloc.oleaut32.dll_SysFreeString
pushal
not ax
mov word [esp + 0x17], sp
pop dword [esp + 0xc]
pop ax
push word [esp + 0xe]
lea esp, [esp + 8]
mov eax, dword [esp + 0x1d]
lea esp, [esp + 0x24]
call fcn.00503faa
jmp 0x651c13
call 0x6502f9
pop eax
jmp 0x651c74
add dword [esp], reloc.oleaut32.dll_SysFreeString
jmp 0x651ce7
call 0x651c18
jmp 0x651bf7
call 0x651c37
pop eax
jmp 0x65242f
mov byte [esp], al
lea esp, [esp + 5]
mov byte [esp], al
pushfd
mov word [esp + 2], bx
push ecx
mov word [esp], cx
jmp 0x651c90
sub eax, 0x6502f9
mov ebx, eax
add eax, 0x4fdf13
add ebx, 0x4c2ec8
mov dword [ebx], eax
popal
jmp 0x64acbf
lea esp, [esp]
pop word [esp + 3]
mov byte [esp + 5], bh
lea esp, [esp + 3]
jmp 0x651cf1
call 0x651ccf
push ebx
popal
outsb dx, byte gs:[esi]
imul ebp, dword [bp + 0x65], 0x69685320
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
and byte [esi + 0x32], dh
xor byte cs:[esi], ch
cmp byte [esi], ch
xor byte [eax], al
lea esp, [esp + 4]
pushfd
push si
jmp 0x651c51
call 0x4ff587
jmp 0x6502f4
mov dword [esp], eax
pushal
mov word [esp + 0x14], ax
mov word [esp + 0x1c], bx
pop dword [esp + 0xd]
mov byte [esp + 3], dl
mov word [esp + 0x19], bx
pushfd
jmp 0x651d9f
mov byte [esp + 3], dh
mov byte [esp + 1], cl
mov word [esp + 3], bx
mov dword [esp], ebp
jmp 0x6524e5
mov dword [esp + 0x3c], ebx
push eax
mov byte [esp], bh
push word [esp + 3]
jmp 0x651d2a
pop word [esp + 0x10]
pop dword [esp + 4]
mov dword [esp + 0x10], ebp
mov dword [esp + 0x15], ecx
push word [esp + 0xd]
push dword [esp]
push dword [esp + 0x15]
mov dword [esp + 0xa], ebx
push esi
pop dword [esp + 0x16]
jmp 0x651d4a
mov dword [esp + 0x1c], ecx
push si
mov byte [esp], bl
lea esp, [esp]
push word [esp + 1]
lea esp, [esp]
pop word [esp]
lea esp, [esp + 2]
mov dword [esp + 0x18], edx
push esp
lea esp, [esp]
mov byte [esp], ch
pushal
jmp 0x651d68
movzx ebx, word [eax + 0x3c]
add ebx, eax
cmp word [ebx], 0x4550
je 0x64b83a
jne 0x65243d
dec ebx
fisttp qword [ebp + 0x14]
out 0x52, eax
mov eax, dword ss:[0x8a35031]
enter 0xffffffffffffc052, 0xffffffffffffffa7
push edx
in eax, dx
fld dword [edx - 0x30]
mov bh, 0x42
jmp 0x651f01
invalid
xor ax, ax
cmp word [eax], 0x5a4d
je 0x651ea0
sub eax, 0x10000
jmp 0x652432
mov dword [esp], edx
mov word [esp + 3], sp
mov byte [esp + 4], dl
pop word [esp + 1]
push dword [esp + 2]
mov dword [esp + 0x40], esp
pushal
pushal
mov word [esp + 0x10], ax
mov byte [esp + 0x3e], ch
pop dword [esp + 0xe]
pop word [esp + 1]
mov byte [esp + 0x2e], ah
lea esp, [esp + 2]
mov dword [esp + 0x74], ebp
push eax
mov dword [esp], edi
push word [esp]
pushfd
mov dword [esp + 4], ebx
pop dword [esp]
mov dword [esp], esp
mov word [esp], ax
push dword [esp + 5]
lea esp, [esp + 2]
mov dword [esp + 0x78], esi
push edi
pushal
pop dword [esp + 0xe]
lea esp, [esp + 0x18]
mov dword [esp + 2], ebx
pushal
pop dword [esp + 0x16]
pop word [esp + 0x14]
mov dword [esp + 9], ebp
pop word [esp + 9]
pop word [esp + 0x14]
lea esp, [esp + 2]
mov dword [esp + 0x90], edi
lea esp, [esp + 0x90]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
push eax
jmp 0x651c32