Function at 0x5d28ed
Capabilities:
Access the windows event log

Disassembly:
xor eax, 0x47ca64c6
add eax, 0x7b2cac03
xor edi, eax
jmp 0x5cd86c
pop eax
xor esi, edi
jmp 0x5d0950
pop ebx
jmp 0x5d3a02
mov ecx, 0x6bc21468
sub ecx, 0xace4a23d
add ecx, 0x7843a3a9
xor ecx, 0x7d4e7d35
xor edi, ecx
pop ecx
push ebx
mov ebx, 0xabfd5dae
xor ebx, 0xfec889c6
add ebx, 0x46ff872f
xor edi, ebx
pop ebx
jmp 0x5ce931
sub edx, ecx
pop ecx
jmp 0x5d4b68
add eax, 0x2c01c59e
xor edx, eax
pop eax
push eax
mov eax, 0xfbf804ca
xor eax, 0xd564a29e
add eax, 0xda0e8fd6
add eax, 0x958dfa5a
add edx, eax
jmp 0x5cde15
pop eax
xor ecx, edx
pop edx
push ebx
mov ebx, 0x7c28d961
xor ebx, 0xe01c94f0
sub ebx, 0xa3a2cb8f
xor ebx, 0xaaff5a87
jmp 0x5d43a1
mov dword [esp + edi], eax
pop edi
pop eax
push esp
push esi
mov esi, 0x5f732192
sub esi, 0xdc50c7b5
sub esi, 0x992ae10f
sub esi, 0x58a32774
push edx
mov edx, 0x1a169156
sub edx, 0x22d77e35
add edx, 0xa2d2ba16
add edx, 0xe42b80fc
xor edx, 0xdef90c12
jmp 0x5d3e37
sub eax, 0x787a1921
add eax, 0x12b9b82e
xor ebx, eax
pop eax
sub esi, ebx
pop ebx
jmp 0x5ce57a
sub esi, 0x80d23dbc
sub esi, 0x54bcf71e
xor esi, 0xb2acf617
xor edi, esi
pop esi
push ebx
mov ebx, 0x265a429f
xor ebx, 0xa5ecbe27
jmp 0x5d3835
push ebx
mov ebx, 0xad133ccc
sub ebx, 0xd147c7ac
sub ebx, 0x9cc0d0c4
sub ebx, 0x7e814f68
add ebx, 0xd1bbeb13
push esi
mov esi, 0xc25b7a3f
sub esi, 0xaf85b81b
xor esi, 0xc30e31c
add esi, 0xdfe7e984
xor ebx, esi
jmp 0x5d2859
sub ecx, 0x3cf881c2
push eax
mov eax, 0xbeda8e65
jmp 0x5ce641
sub eax, 0x8b44eb7f
add eax, 0x3b61ca73
add eax, 0xc5079366
jmp 0x5ce667
add ecx, 0x76c9211f
sub ebx, ecx
pop ecx
add edi, ebx
pop ebx
push esi
jmp 0x5d163d
sub ecx, eax
pop eax
jmp 0x5d09c5
mov edi, 0xd7ff3072
sub edi, 0xe6164ab1
add edi, 0x6dc68d28
push esi
mov esi, 0xe253db2e
sub esi, 0x2e7c4f24
sub esi, 0xfdb66327
xor esi, 0x7b326a0b
add edi, esi
pop esi
jmp 0x5ce73c
push esi
jmp 0x5ce747
mov esi, 0x6d761d24
jmp 0x5ce7f1
jmp 0x5d4b43
push edx
mov edx, 0xd9b221f1
sub edx, 0x378bcb78
sub edx, 0x6e9fbfd6
jmp 0x5cee25
xor eax, 0x9371ae6b
sub eax, 0x7ac686b8
add ebx, eax
pop eax
push edx
mov edx, 0xd9228c01
xor edx, 0xf5c5eed
xor edx, 0x98404931
xor edx, 0x9f909c0c
jmp 0x5ce9d6
add ebx, edx
jmp 0x5cea78
pop edx
push ecx
mov ecx, 0x10577b08
xor ecx, 0x52bd419e
xor ecx, 0xf983aeab
add ecx, 0xb651205d
jmp 0x5cec5f
jmp 0x5ced21
xor ecx, 0x694c1d4e
sub ebx, ecx
pop ecx
xor edi, ebx
jmp 0x5ced40
pop ebx
push eax
mov eax, 0xb596ee38
xor eax, 0x3c096481
sub eax, 0xc6148077
xor eax, 0x98589dee
sub eax, 0x5193426d
push ebx
mov ebx, 0x2643952d
sub ebx, 0xd3eb40e7
xor ebx, 0x17de55c3
add ebx, 0x2fd3228e
sub ebx, 0x1b34174b
add eax, ebx
pop ebx
push edx
mov edx, 0x458fc365
xor edx, 0x406947cc
xor edx, 0x2f2595b6
sub edx, 0xa4310e7d
sub edx, 0x45edb0a0
sub eax, edx
pop edx
xor edi, eax
pop eax
mov byte [0x61b361], bh
pop edi
push esi
mov esi, 0x59a4a87c
sub esi, 0xa90760f
sub esi, 0x63bdf560
add esi, 0x776635ac
sub esi, 0x1949dbc
push edi
mov edi, 0x85aebaf0
sub edi, 0x69f40f58
add edi, 0x5b5d4580
xor esi, edi
pop edi
push ebx
mov ebx, 0xb341a85b
xor ebx, 0xa0dfc78a
sub ebx, 0xb0b420c3
xor ebx, 0x658b4c5a
xor esi, ebx
pop ebx
push edi
mov edi, 0xbf858803
sub edi, 0x9c13caad
sub edi, 0xde88e84b
sub edi, 0x78d90b42
xor esi, edi
pop edi
push ebx
mov ebx, 0xc8b3efff
sub ebx, 0xb4b0401f
jmp 0x5d1653
xor edx, 0xc46a2ea1
add edi, edx
pop edx
jmp 0x5cf33a
push ecx
jmp 0x5cf35b
xor eax, 0xb276865e
add eax, 0x3a3de87b
sub eax, 0xcb27c906
jmp 0x5cf354
sub edi, eax
jmp 0x5d0400
mov ecx, 0x46b9668e
sub ecx, 0x868ebdc7
add ecx, 0xbbdd54bf
add edi, ecx
pop ecx
push ecx
mov ecx, 0x23fbe6cb
add ecx, 0x728f0c36
sub ecx, 0x8c2ef24d
push edi
mov edi, 0x2aac5f6c
add edi, 0x2254b35c
xor edi, 0x10913375
add ecx, edi
pop edi
push eax
mov eax, 0xdb79bc7
xor eax, 0xce06181a
jmp 0x5cf3b4
xor eax, 0xb8d1a266
add eax, 0x94540c14
xor eax, 0x6980a9b9
xor ecx, eax
pop eax
push edi
mov edi, 0x8d584f16
add edi, 0x90224f20
xor edi, 0xd48e95fc
xor edi, 0x1fb27aa
xor ecx, edi
jmp 0x5cf473
pop edi
sub edi, ecx
pop ecx
push eax
mov eax, 0x1585722a
add eax, 0x755bd7d4
add eax, 0x167a1925
jmp 0x5d1d18
xor edi, 0x79b1b22b
sub edi, 0xfbdb7ecf
jmp 0x5cf51f
xor ebx, edi
jmp 0x5d34bc
pop edi
push ebx
mov ebx, 0x174461e1
xor ebx, 0x9fd31f2
sub ebx, 0x26f5ba49
jmp 0x5d14c6
xor edi, 0xc648d947
add edi, 0xa49215f4
sub eax, edi
pop edi
sub ecx, eax
pop eax
push esi
mov esi, 0xf60fc36a
add esi, 0xc5b465bc
sub esi, 0xce96cd6f
sub esi, 0xbad6afee
add esi, 0x81b0d48e
jmp 0x5cfcfa
push ebx
mov ebx, 0x8241a113
add ebx, 0x79201401
add ebx, 0x6cb0381e
xor esi, ebx
pop ebx
push edi
jmp 0x5d26a4
pop eax
push esi
mov esi, 0xc11959f9
sub esi, 0x5ff3069d
add esi, 0x5cb73a52
sub esi, 0x1c33bc06
xor edi, esi
pop esi
add eax, edi
pop edi
push ecx
mov ecx, 0x614971a3
sub ecx, 0x1e39ec31
sub ecx, 0x5f9220ec
push ebx
mov ebx, 0xf9cfddce
xor ebx, 0xc7d311b8
xor ebx, 0x50305a4a
jmp 0x5d0529
sub ecx, ebx
pop ebx
push eax
mov eax, 0x4be44477
xor eax, 0x95774950
add eax, 0x17e7e373
sub ecx, eax
pop eax
jmp 0x5d0588
push edi
mov edi, 0x1b38fef6
xor edi, 0x293382ef
sub edi, 0x67730abb
jmp 0x5d05d2
xor edi, 0xfe8add90
add ecx, edi
pop edi
sub eax, ecx
jmp 0x5d063e
pop ecx
mov dword [eax + ebp], edi
pop eax
push edi
jmp 0x5ce6dc
xor edx, 0x671fad46
add edx, 0xfe9eb08b
sub edx, 0xc3f7b8f2
xor edx, 0xbb15cb06
add edi, edx
pop edx
push eax
mov eax, 0xed200d37
jmp 0x5d06a1
xor eax, 0xa5ced60d
xor eax, 0x4cec2ee8
jmp 0x5cd772
pop edi
push edi
mov edi, 0x306b8497
sub edi, 0xff15acfb
sub edi, 0xf56d18d5
add edi, 0xe99427ad
xor edi, 0xf6e1ed0e
push ecx
mov ecx, 0x95ca551b
add ecx, 0x8ad1478e
add ecx, 0x409140f6
xor edi, ecx
pop ecx
push eax
mov eax, 0x6b9a663e
xor eax, 0x6acca2a3
xor eax, 0xe714b59c
add eax, 0x9c37131f
jmp 0x5d09a4
xor eax, 0x630c66d9
xor edi, eax
pop eax
xor esi, edi
jmp 0x5cfbe9
invalid
push edx
jmp 0x5d09f8
mov edx, 0x8fbf7d13
add edx, 0x7bd11203
add edx, 0x50447680
xor edx, 0x7aa15289
sub edx, 0x70ba412a
add ecx, edx
pop edx
push edi
mov edi, 0x914f6a04
sub edi, 0x3305df5e
add edi, 0x8b575d46
jmp 0x5d1cd9
pop eax
push eax
mov eax, 0xd8acc12c
jmp 0x5d0a84
xor eax, 0x6ebbe443
jmp 0x5ce540
sub edi, eax
pop eax
push ecx
mov ecx, 0x50907e1c
add ecx, 0x3b658bbe
add ecx, 0x1c77a4b2
push eax
jmp 0x5d0dfa
mov eax, 0xca2b0f0c
add eax, 0x9fde8557
jmp 0x5d0e2a
xor eax, 0x6d122dac
add eax, 0xe351a6df
sub eax, 0xacd8f52f
xor ecx, eax
pop eax
push edx
mov edx, 0x871fdddf
xor edx, 0x7cb241c2
xor edx, 0xe1966e4f
sub ecx, edx
pop edx
push ebx
mov ebx, 0xa5f53392
add ebx, 0x7ae59cde
add ebx, 0x7870f349
add ebx, 0xda7e27af
sub ebx, 0x26e38e54
xor ecx, ebx
pop ebx
push esi
mov esi, 0x326ebdc5
sub esi, 0x317999c2
sub esi, 0x3850b2b0
add ecx, esi
pop esi
lea ecx, [ecx]
mov dword [esp + ecx], edi
pop ecx
pop edi
push eax
mov eax, 0x995d751d
sub eax, 0xbcfb76bc
xor eax, 0x196ceb4d
push edx
mov edx, 0xdf8513bc
sub edx, 0x58fc9d86
sub edx, 0x25ff1646
xor eax, edx
pop edx
push edi
mov edi, 0x52d0a1a5
xor edi, 0x566be210
xor edi, 0xbb66ead9
sub edi, 0xef1f843
sub edi, 0xb07dc7a7
jmp 0x5d0efb
sub eax, edi
pop edi
jmp 0x5d307d
add ebx, 0xd14d75a9
add ebx, 0xea58dadd
push edi
mov edi, 0xbb79463
jmp 0x5d15fc
jmp 0x5cf4ce
sub edi, 0x1f083d2f
sub esi, edi
pop edi
push eax
mov eax, 0xce175e92
xor eax, 0x2b766f9a
sub eax, 0x882cff65
jmp 0x5d2963
mov esi, 0xf25f9f29
add esi, 0xf0e98a64
add esi, 0xbdf2a295
jmp 0x5d1861
xor ebx, 0x238f84c3
xor ebx, 0x9ee8cfc4
add ebx, 0xd61f78c0
sub esi, ebx
pop ebx
push edx
jmp 0x5d178d
mov edx, 0x75a66441
jmp 0x5d17d2
xor esi, 0xe48ca269
push edx
mov edx, 0x4444960d
add edx, 0x5ffa5545
add edx, 0x7161a0e4
sub edx, 0xc356a2d3
xor esi, edx
pop edx
push edx
mov edx, 0xf31092c9
sub edx, 0xbdb83b33
add edx, 0x756111f7
add esi, edx
pop edx
xor edi, esi
pop esi
push eax
mov eax, 0x9fcaf38
sub eax, 0x6aa5f236
add eax, 0x74c0011c
add eax, 0x41b81646
push edx
mov edx, 0xf1275c8f
add edx, 0xbdd9c5ed
xor edx, 0x4be01759
xor edx, 0x321cfc82
add eax, edx
pop edx
push esi
mov esi, 0x412826ed
add esi, 0x489d9bff
sub esi, 0x319e00e3
sub esi, 0x85bc9661
sub eax, esi
pop esi
push ebx
mov ebx, 0x66156808
add ebx, 0x49ea9f48
sub ebx, 0x61252110
jmp 0x5d1a36
sub ebx, 0xf6c062ce
sub ebx, 0xfdb91117
jmp 0x5d4261
pop edx
jmp 0x5d1a6f
add eax, 0xe45b4add
jmp 0x5cdd7a
push edx
mov edx, 0x586ed379
add edx, 0x7db1c294
xor edx, 0xa60c19f7
add edx, 0xdbdb3cf8
push edi
mov edi, 0xd3fef9fd
add edi, 0x74597d45
add edi, 0x1fc20287
xor edi, 0x80c07eaf
xor edx, edi
pop edi
push edi
mov edi, 0xf31eb681
add edi, 0x13910595
add edi, 0xdbcd1a21
add edx, edi
jmp 0x5d1b57
pop edi
push eax
mov eax, 0x4e92a508
sub eax, 0x1b581de6
jmp 0x5d1a64
sub edi, 0xfe8840fc
sub ecx, edi
pop edi
push edx
mov edx, 0x85b1d596
add edx, 0xef591f4e
xor edx, 0x1ad8cff4
jmp 0x5d1d01
push edi
mov edi, 0x31668662
sub edi, 0x395eb3ac
add edi, 0x8116b99a
xor edx, edi
pop edi
jmp 0x5d1d53
xor eax, 0xe76062de
push edi
mov edi, 0xd598ab8e
add edi, 0x27fa2423
xor edi, 0xea88a7c1
sub eax, edi
pop edi
push esi
mov esi, 0xc58d7ebd
sub esi, 0x20a6a75e
sub esi, 0xfc13d050
xor esi, 0x46c93a2
add eax, esi
pop esi
jmp 0x5d0afb
push edi
mov edi, 0xafb54665
sub edi, 0xbbb1869e
sub edi, 0x2da18512
add edx, edi
jmp 0x5d1d77
pop edi
push ecx
mov ecx, 0x735aed87
add ecx, 0x82ec4837
add ecx, 0x863d9fa0
jmp 0x5d1e76
add ecx, 0xf79d23f7
sub edx, ecx
pop ecx
xor ecx, edx
jmp 0x5d1f11
jmp 0x5d1a61
mov edi, 0xf3076eea
sub edi, 0x6e47a29c
add edi, 0x5a2f0d3a
jmp 0x5d160b
pop ecx
push esi
mov esi, 0x9c090f74
jmp 0x5d27a7
xor esi, 0x3da89f0a
xor esi, 0x628656e4
add esi, 0xccb9e273
add ebx, esi
jmp 0x5d283c
pop esi
jmp 0x5d4471
pop esi
push ecx
mov ecx, 0xc684a696
xor ecx, 0x7a81d37b
add ecx, 0xe8c142c3
xor ecx, 0x95e0287
xor ecx, 0x4a4b490c
xor ebx, ecx
jmp 0x5d288c
pop ecx
add esi, ebx
pop ebx
push edi
mov edi, 0x4346459a
sub edi, 0x755e834b
sub edi, 0xaa385b43
xor edi, 0x3e82443d
add edi, 0x5bce3cb5
push ebx
mov ebx, 0xca2471cc
sub ebx, 0xed85cc10
sub ebx, 0x66d13553
xor ebx, 0x9f0d15f4
xor edi, ebx
pop ebx
push esi
mov esi, 0xdaf6ecc6
sub esi, 0x5d127ea5
xor esi, 0xdb025602
add edi, esi
jmp 0x5d2b34
xor ecx, 0x7337ac09
add edx, ecx
pop ecx
push esi
mov esi, 0x5a0bf597
xchg edi, eax
cmc
or ebx, dword [edx - 0x7f]
invalid
dec ebp
push ebx
invalid
pop edi
xor esi, 0x43520327
xor esi, 0xbf3861b7
xor edx, esi
pop esi
push esi
mov esi, 0x89ccd052
sub esi, 0xe2313788
sub esi, 0x65b5a860
sub edx, esi
pop esi
sub ecx, edx
pop edx
push eax
mov eax, 0xba55b74
sub eax, 0xcc451d5b
sub eax, 0x2acbfca4
sub eax, 0x2d206395
xor eax, 0x9e97579c
push ebx
mov ebx, 0x7cc032b4
xor ebx, 0x3c5113bc
sub ebx, 0x17cad698
add ebx, 0xeea616e1
sub ebx, 0xf84fc9a8
xor eax, ebx
pop ebx
push esi
jmp 0x5d2af4
xor eax, 0x8504d628
jmp 0x5d29c2
xor esi, eax
pop eax
push eax
mov eax, 0x9818204b
sub eax, 0xb9bd65e
xor eax, 0xd45f4141
add eax, 0xa5aa1251
add esi, eax
pop eax
sub ecx, esi
pop esi
push edx
mov edx, 0xda50cc8
add edx, 0x3d354969
sub edx, 0x25f46065
push edi
mov edi, 0x663f0e98
xor edi, 0x56bae496
add edi, 0xd6919912
add edi, 0x30f38fdc
add edx, edi
pop edi
push edi
mov edi, 0x579acf5c
add edi, 0x2d4f0544
xor edi, 0x67968605
add edi, 0x1c2148fe
sub edx, edi
pop edi
jmp 0x5d2abc
push ebx
mov ebx, 0xdd45912a
xor ebx, 0xf952ae87
add ebx, 0xe1c0b1fb
xor edx, ebx
pop ebx
push ecx
mov ecx, 0xa706fbab
xor ecx, 0x4cea4289
xor ecx, 0x3faa53fb
sub ecx, 0x5ecc251a
sub ecx, 0x1cf3293a
jmp 0x5cdbde
mov esi, 0xc74330bc
xor esi, 0xd1be6e72
xor esi, 0x7debec3e
add eax, esi
pop esi
push edx
mov edx, 0x341a0257
xor edx, 0xb2bbe61b
sub edx, 0xc9e42dec
add eax, edx
pop edx
push edi
mov edi, 0xbffdcc42
add edi, 0x553543f3
sub edi, 0xd32a0ae1
jmp 0x5cfc2f
pop esi
push edx
mov edx, 0x897ee4d0
jmp 0x5d0658
sub edi, 0x7e4f4efd
sub edi, 0xcbec053b
sub esi, edi
pop edi
push ebx
mov ebx, 0x6161c498
add ebx, 0xa09d21d4
sub ebx, 0x3dc9bd96
push eax
mov eax, 0x3de4cd6b
sub eax, 0xdff12d7b
sub eax, 0xba2f2601
jmp 0x5d2bad
mov eax, 0x39eba3ff
sub eax, 0xda3baaf6
jmp 0x5cf33d
xor ebx, eax
jmp 0x5d0a74
push edx
mov edx, 0x61b8a9c2
add edx, 0x1e44409e
xor edx, 0x2153eaca
xor eax, edx
pop edx
push ebx
mov ebx, 0xa2d9ec66
add ebx, 0xd079fce2
add ebx, 0x179f8e0e
sub eax, ebx
pop ebx
push esi
mov esi, 0x655b8f1b
add esi, 0xa9997c82
xor esi, 0x7bcf5115
xor esi, 0x203aa5b1
push edi
mov edi, 0x4299962c
add edi, 0xa6a19239
sub edi, 0xcd9d1a74
add edi, 0xb6466aa6
add esi, edi
pop edi
push ebx
mov ebx, 0xcb8abee1
add ebx, 0xe705c9cf
sub ebx, 0x693583ab
add ebx, 0x251b074e
add esi, ebx
pop ebx
push ebx
mov ebx, 0x3edb46be
jmp 0x5d33f6
xor ebx, 0x56741c8
add ebx, 0x7d38e943
add esi, ebx
pop ebx
xor eax, esi
pop esi
push edi
mov edi, 0x548f0f1f
sub edi, 0x6fe098b8
xor edi, 0xc59af132
xor edi, 0x259a4f3b
sub edi, 0xd1c3ebba
push eax
jmp 0x5d2b9d
pop edi
push esi
mov esi, 0x868d71e5
xor esi, 0x13d69f22
xor esi, 0x5018afe6
xor ebx, esi
pop esi
lea ebx, [ebx]
mov dword [esp + ebx], esi
pop ebx
pop esi
call ebx
push esi
push esi
push ecx
mov ecx, 0x11bf3261
sub ecx, 0x36fecf38
sub ecx, 0xbf244454
xor ecx, 0x2a7a69a8
xor ecx, 0x9c624402
push edi
mov edi, 0x3f5c769e
xor edi, 0xf54ef835
jmp 0x5d353f
sub edi, 0xc41834cc
add ecx, edi
jmp 0x5d3565
pop edi
push ebx
mov ebx, 0xfd3f90c
xor ebx, 0x5ffabc09
xor ebx, 0xc97e4083
add ebx, 0xfbde3f1d
xor ebx, 0xa017f17c
xor ecx, ebx
jmp 0x5cd8ef
mov ecx, 0x60b48015
xor ecx, 0x99489f93
xor ecx, 0x4c9cae73
jmp 0x5ce603
xor eax, 0x95f7c4aa
add eax, 0xd0d6da4
jmp 0x5d3986
add ebx, 0xc3e5d8f3
sub ebx, 0x5ff50068
add ebx, 0x2d1c860
push edi
jmp 0x5d38c9
mov edi, 0xedb84930
sub edi, 0x7630f73c
jmp 0x5d397b
sub edi, 0x47870de9
jmp 0x5d3a99
sub edi, eax
pop eax
jmp 0x5d39c0
push ecx
mov ecx, 0x57ec6a12
xor ecx, 0x86612551
xor ecx, 0x63fde8b0
int1
mov al, 0xe8
std
arpl word [ecx - 0x7ec24317], ax
nop
sub ecx, 0xcfe84ee2
sub edi, ecx
pop ecx
lea edi, [edi]
jmp 0x5cde36
push edx
mov edx, 0x33939a62
add edx, 0x7d5c6367
sub edx, 0x585e1c32
add edx, 0x1623a8d6
add ecx, edx
pop edx
push edx
mov edx, 0x598c7ef5
add edx, 0x5aece839
jmp 0x5d3a6c
add edx, 0x97f9daa3
push ecx
mov ecx, 0x7182fae8
sub ecx, 0xe482f270
jmp 0x5d28e2
xor ebx, edi
pop edi
push eax
jmp 0x5d3af2
mov eax, 0xdd21034e
jmp 0x5ce948
sub esi, edx
pop edx
push edi
mov edi, 0x6811411c
jmp 0x5d2b68
sub eax, ebx
jmp 0x5d4285
pop ebx
lea eax, [eax]
mov dword [esp + eax], edi
pop eax
pop edi
push ecx
push edi
mov edi, 0xa30eb05
xor edi, 0x8e2773ae
jmp 0x5d42a5
xor edi, 0x494c9516
jmp 0x5d4360
sub edi, 0x2de47958
sub edi, 0xbaf80f62
push ecx
jmp 0x5cdab2
add ebx, 0x84338bd8
push ecx
mov ecx, 0xc5f595cd
add ecx, 0xebaacc69
add ecx, 0xe7db9068
add ebx, ecx
jmp 0x5d276d
lea ebx, [ebx]
mov dword [esp + ebx], ecx
pop ebx
pop ecx
push esi
push esi
mov edi, eax
push ecx
push edi
mov edi, 0xd59d88ac
jmp 0x5d4706
jmp 0x5d4861
mov eax, 0xbd1a55d4
add eax, 0x95364cf
xor eax, 0xa1d5113a
xor eax, 0x89768db7
add ebx, eax
pop eax
push ecx
mov ecx, 0xc7e5a25a
sub ecx, 0xac1d8dd4
jmp 0x5d4825
xor ecx, 0x57719415
jmp 0x5ce655
xor edi, 0x807bbfe2
add edi, 0xa9f17334
xor edi, 0x53fbd009
push ebx
mov ebx, 0xfdccbf1a
sub ebx, 0xaa29c57e
xor ebx, 0xd5027b03
sub ebx, 0x76cf9199
sub edi, ebx
pop ebx
push ecx
mov ecx, 0xb35134ff
xor ecx, 0x688aefd6
xor ecx, 0xc12231c0
add ecx, 0xb5da7b29
sub edi, ecx
pop ecx
push ebx
mov ebx, 0x733282d0
xor ebx, 0xd9401833
xor ebx, 0x742694f9
push edi
mov edi, 0xb4e37535
add edi, 0xd1497133
jmp 0x5d4a5b
add edi, 0x4f846074
xor ebx, edi
pop edi
push eax
jmp 0x5d4778
sub esi, 0xbcd2daa3
jmp 0x5ce554
lea edx, [edx]
mov dword [esp + edx], ecx
pop edx
pop ecx
push eax
push ecx
jmp 0x5d3603