Function at 0x950355
Capabilities:
Resolve function by parsing pe exports

Disassembly:
jmp 0x9502ab
jmp 0x9503af
jmp 0x950436
jmp 0x95051a
jmp 0x9507c3
jmp 0x9508dd
jmp 0x950928
jmp 0x9509f4
jmp 0x950a34
jmp 0x950aa7
jmp 0x950cec
jmp 0x950e10
jmp 0x950ea2
jmp 0x954331
cmp ecx, dword [ebp + 0x232e2f]
jae 0x77f961
push eax
mov dword [esp], ecx
push edi
mov edi, 0x4d2257a4
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], ecx
push dword [esi]
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
push edx
mov edx, 4
add esi, edx
pop edx
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
test ebx, ebx
je 0x77f944
push dword [ebx + 0x3c]
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
sub esp, 4
mov dword [esp], eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
sub ebx, 0x77fe5200
add ebx, eax
push edx
push 0x6fffa9a4
pop edx
push ebx
mov ebx, 0x67feda81
neg ebx
not ebx
inc ebx
sub ebx, 0x2cbf7bd0
or edx, ebx
pop ebx
shl edx, 3
shr edx, 2
sub edx, 0xc801ad6a
add ebx, edx
pop edx
push dword [ebx + 0x78]
push dword [esp]
pop ebx
push ebp
mov ebp, esp
add ebp, 4
push edx
mov edx, 4
add ebp, edx
pop edx
xchg dword [esp], ebp
pop esp
sub esp, 4
mov dword [esp], eax
push esi
push ebx
mov ebx, 0
mov dword [esp + 4], ebx
pop ebx
pop eax
add eax, esi
add ebx, dword [eax]
pop eax
push eax
mov eax, 0x18
sub eax, 0x6767dfb9
sub eax, 0x635b19c9
add eax, ebx
add eax, 0x635b19c9
push esi
mov esi, 0x6767dfb9
add eax, esi
pop esi
push ebx
mov ebx, 0
add ebx, eax
add edx, dword [ebx]
pop ebx
pop eax
push edx
mov dword [esp], edi
mov edi, 0x3bff1727
shr edi, 2
shr edi, 8
xor edi, 0xeffc4
add edx, edi
push dword [esp]
pop edi
add esp, 4
mov ecx, dword [esp]
push eax
push esp
pop eax
push edi
mov edi, 0x6de3da93
shr edi, 7
xor edi, 0xdbc7b1
add eax, edi
pop edi
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
sub esp, 4
mov dword [esp], ecx
push esi
mov esi, 0x76ff8b69
dec esi
sub esi, 1
xor esi, 0x76ff8b63
push esi
pop ecx
pop esi
add esi, ecx
pop ecx
push ebp
mov dword [esp], 0x1a6e4487
mov dword [esp], edi
mov edi, 1
add ecx, 0x31ef3d70
cmp eax, 0xf90131ef
cmp eax, 0xf90131ef
sub ecx, 0x31ef3d70
pop edi
jmp 0x77f697
push edx
mov eax, dword [esp]
push 0x6033d3d8
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push ebp
mov ebp, 4
add ecx, ebp
pop ebp
xchg dword [esp], ecx
pop esp
shl eax, 3
push 0x5bbbffad
mov dword [esp], edx
mov dword [esp], esi
mov dword [esp], edx
mov dword [esp], 0x7e2edeac
mov dword [esp], eax
call dword [ebp + 0x2335d4]
sub esp, 4
mov dword [esp], esi
push ebp
mov ebp, 0x4704b235
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
pop dword [ebp + 0x22bbdc]
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov dword [esp], esi
mov dword [esp], 0x32280bd8
mov dword [esp], eax
call dword [ebp + 0x2331f8]
push dword [ebp + 0x234366]
push dword [esp]
mov esi, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
push dword [ebp + 0x2346f5]
push dword [esp]
pop edi
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
xor ecx, ecx
push dword [ebp + 0x22bbdc]
mov edx, dword [esp]
push edx
push esp
mov edx, dword [esp]
add esp, 4
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
cmp ecx, dword [ebp + 0x232e2f]
jae 0x780477
push esi
push ecx
mov dword [esp], edx
mov edx, 0x1ac9dbd7
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
push esi
mov esi, esp
push edi
mov edi, 0x47bf6511
xor edi, 0x47bf6515
add esi, edi
pop edi
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], edx
pop dword [edi]
push dword [esi]
push dword [esp]
pop eax
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
test eax, eax
je 0x780443
push edi
mov dword [esp], eax
push eax
mov eax, 0x1315e8a8
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
mov dword [esp], esi
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], esi
push edi
mov edi, 0x47829ca3
mov dword [esp + 4], edi
pop edi
mov dword [esp], edi
sub esp, 4
mov dword [esp], ebp
push eax
mov eax, 0x65c05cb
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], ebx
push eax
mov dword [esp], 0x2a687bf5
mov dword [esp], eax
mov ecx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
xor eax, eax
push edx
mov dword [esp], 0xeba0b64
mov dword [esp], esi
mov dword [esp], ecx
mov dword [esp], 0x3c
pop esi
sub esi, 0x7fdb0419
add esi, ecx
push 0x162a8d40
mov dword [esp], ebp
mov ebp, 0x576b67ce
shl ebp, 2
add ebp, 0x5d9ea38a
sub ebp, 0x3b713ea9
add esi, ebp
mov ebp, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
lodsw ax, word [esi]
push esi
push esi
mov dword [esp], 0x7be9950c
pop esi
inc esi
or esi, 0x6e5df7a1
and esi, 0x777cff3c
neg esi
add esi, 0xb46ae5f9
add eax, esi
pop esi
sub eax, 0x4ebfb6af
add eax, ecx
add eax, 0x4ebfb6af
sub eax, 0x3cedeecd
push dword [eax + 0x78]
push dword [esp]
mov esi, dword [esp]
add esp, 4
add esp, 4
sub esi, 0x7dff2fa9
sub esi, 0x2fee37a7
add esi, ecx
push 0x6ef86bc8
mov dword [esp], edi
mov edi, 0x2f7e1f42
dec edi
xor edi, 0x9028e6
add esi, edi
pop edi
push edx
mov edx, 0x57c76385
and edx, 0x79eb13c1
shl edx, 5
sub edx, 0xba614077
add esi, edx
pop edx
push dword [esi + 0x18]
push dword [esp]
pop eax
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push ebx
mov dword [esp], esi
mov dword [esp], ebp
mov dword [esp], 0x698472d5
mov dword [esp], eax
pop dword [ebp + 0x22bf91]
shl eax, 2
push edx
push dword [esp]
pop edi
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
push dword [esi + 0x20]
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push eax
push esp
pop eax
add eax, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], eax
pop esi
push ecx
mov ecx, 0x3b6b1e29
add esi, ecx
pop ecx
sub esi, 0x7fffaebf
add esi, ecx
add esi, 0x7fffaebf
push ebx
mov ebx, 0x76d7a31a
add ebx, 0x73fe9dab
add ebx, 0x7fff721d
push 0
sub dword [esp], ebx
pop ebx
sub ebx, 0x7fdfdb2d
and ebx, 0x6a7e88ed
sub ebx, 0xc4dee2b8
sub esi, ebx
pop ebx
push esi
push esp
pop esi
add esi, 4
push edi
push 4
pop edi
sub esi, edi
pop edi
xchg dword [esp], esi
pop esp
mov dword [esp], edx
xor ebx, ebx
push dword [ebp + 0x22bf91]
push dword [esp]
push dword [esp]
pop eax
add esp, 4
add esp, 4
stosd dword es:[edi], eax
cmp ebx, dword [ebp + 0x22bf91]
jae 0x78036a
push eax
push esi
mov esi, 0x544e90ba
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], esi
mov dword [esp], ebx
lodsd eax, dword [esi]
add eax, 0x667d1883
push ecx
mov ecx, 0x3dfc67bc
and ecx, 0x5ebf083b
not ecx
dec ecx
shl ecx, 7
add ecx, 0xcd7ec04b
sub eax, ecx
pop ecx
sub eax, 0xfbf3d37
sub eax, 0x1eff60ea
add eax, ecx
add eax, 0x1eff60ea
add eax, 0xfbf3d37
add eax, 0x6f7ea34b
sub eax, 0x667d1883
push ecx
mov ecx, esp
push ebp
mov ebp, 4
add ecx, ebp
pop ebp
sub ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], esi
push ecx
push esp
pop ecx
add ecx, 4
push edx
mov edx, 0x4f6246ca
xor edx, 0x1c9f62b9
dec edx
add edx, 0x7778e3ce
neg edx
add edx, 0x77bf9e0c
add edx, 0x53b66a38
sub ecx, edx
pop edx
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov dword [esp], edi
push edx
mov dword [esp], ebp
mov dword [esp], eax
push eax
mov eax, 0xa0fb8f5
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
push ebx
push 0x44d08f3a
mov dword [esp], edi
mov edi, 0x51f712f6
mov dword [esp + 4], edi
pop edi
mov dword [esp], esi
mov dword [esp], ebx
push eax
push dword [esp]
mov edi, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push edi
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
add esp, 4
xor al, al
cmp byte [edi], 0
je 0x7800fe
push ebx
push 1
pop ebx
sub edi, 0x777eefd3
add edi, ebx
push ecx
mov ecx, 0x1bea2c88
or ecx, 0x6765b5f1
add ecx, 0x7d7c78ce
add ecx, 0x6dfff807
and ecx, 0x5dfb85c2
add ecx, 0x5ffe90c3
sub ecx, 0x31e7a5b2
add edi, ecx
pop ecx
pop ebx
jmp 0x77fe5c
sub esp, 4
mov dword [esp], ebx
push ecx
mov ecx, 0x6c7e8615
shl ecx, 6
xor ecx, 0xe05e7abf
mov ebx, ecx
pop ecx
sub edi, 0x5bed70d8
sub edi, ebx
add edi, 0x5bed70d8
pop ebx
push ebp
mov ebp, 0x6ddfa7c5
push edx
mov edx, 0xfea83cb
sub edx, 1
dec edx
shl edx, 8
add edx, 0x8f7ba850
xor ebp, edx
pop edx
shl ebp, 6
sub ebp, 0xc9c8775e
sub edi, ebp
mov ebp, dword [esp]
add esp, 4
sub edi, ebx
add edi, 0x3e6d2de2
push ebx
mov esi, dword [esp]
push edx
push esp
mov edx, dword [esp]
add esp, 4
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
xor ecx, ecx
push ebx
push ecx
mov ecx, 0x1ddd14a6
xor ecx, 0x622fcead
mov ebx, ecx
pop ecx
and ebx, 0x7fde9cd4
or ebx, 0x7faf93b4
dec ebx
shr ebx, 4
push edx
mov edx, 0xf8000646
add ebx, edx
pop edx
add ecx, 0x5f7f7b08
sub ecx, ebx
sub ecx, 0x5f7f7b08
pop ebx
push 0x5df7f5d8
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
xor eax, eax
xor ebx, ebx
lodsb al, byte [esi]
xor al, cl
mov cl, ch
mov ch, dl
mov dl, dh
push ebx
mov dword [esp], 0x2dbc3084
mov dword [esp], eax
mov al, 4
shl al, 8
shl al, 3
push ebx
mov bl, 0x8a
add bl, 0xce
shl bl, 1
shl bl, 8
or bl, 0xc8
xor bl, 0xc0
add al, bl
mov ebx, dword [esp]
add esp, 4
mov dh, al
pop eax
shr bx, 1
rcr ax, 1
jae 0x7801f9
push edx
mov dx, 0x15e
push cx
mov cx, 0x2643
xor dx, cx
pop cx
shr dx, 8
and dx, 0xf757
push ebx
mov bx, 0x46f1
inc bx
xor bx, 0x277f
add bx, 0xeead
sub dx, 0xb7e6
add dx, bx
add dx, 0xb7e6
mov ebx, dword [esp]
add esp, 4
xor ax, dx
pop edx
push eax
push 0x6d73
mov ax, word [esp]
add esp, 2
add ax, 1
add ax, 0xbce4
inc ax
add ax, 0x29f0
xor bx, ax
mov eax, dword [esp]
add esp, 4
dec dh
jne 0x78016a
xor ecx, eax
xor edx, ebx
dec edi
jne 0x78014b
push edx
push edi
pop edx
pop edi
not edi
push edx
push edi
pop edx
push dword [esp]
pop edi
add esp, 4
xor ecx, ebx
xor ebx, ecx
xor ecx, ebx
push ebx
xchg dword [esp], edx
not edx
xchg dword [esp], edx
pop ebx
xor ecx, ebx
xor ebx, ecx
xor ecx, ebx
push ebx
mov dword [esp], ecx
mov dword [esp], edx
push dword [esp]
pop eax
add esp, 4
rol eax, 0x10
mov ax, cx
mov ebx, dword [esp]
push 0x47b3f455
mov dword [esp], edi
push esp
mov edi, dword [esp]
add esp, 4
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
pop ecx
push ebx
push edi
mov dword [esp], esp
add dword [esp], 4
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
mov edi, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
push dword [esp]
pop esi
push ecx
mov ecx, esp
add ecx, 4
push esi
mov esi, 4
add ecx, esi
mov esi, dword [esp]
add esp, 4
xchg dword [esp], ecx
pop esp
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
push edi
mov edi, 4
add edx, edi
mov edi, dword [esp]
add esp, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
stosd dword es:[edi], eax
push ebx
mov dword [esp], 0x2ad63d53
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], eax
mov dword [esp], ebx
push dword [esp]
pop edx
add esp, 4
sub edx, 0x7fbac965
add edx, eax
push edi
mov edi, 0x7fff565e
push eax
mov eax, 0x6edf5ba1
shl eax, 3
or eax, 0x793efba2
neg eax
sub eax, 0x4781fb95
and edi, eax
pop eax
push esi
mov esi, 0x69dfaf83
neg esi
shr esi, 3
xor esi, 0x35dfc155
add esi, 0x4be32949
add edi, esi
pop esi
sub edi, 0x2bc32f7e
add edx, edi
mov edi, dword [esp]
add esp, 4
push 0x77e26c1c
mov dword [esp], eax
mov eax, 0x2333e6
push edi
mov edi, 0x277b876e
add eax, edi
pop edi
add eax, ebp
sub eax, 0x277b876e
xor edx, dword [eax]
mov eax, dword [esp]
add esp, 4
push ebx
push 0x234331
mov ebx, dword [esp]
add esp, 4
add ebx, 0x3bf7a73b
add ebx, ebp
sub ebx, 0x3bf7a73b
push ecx
mov ecx, 0
add ecx, ebx
add edx, dword [ecx]
pop ecx
pop ebx
push 0x2dc66ac9
mov dword [esp], edx
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push dword [esp]
pop edx
push ebx
push esp
pop ebx
add ebx, 4
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
stosd dword es:[edi], eax
push ecx
mov ecx, 0x7bf984bf
add ecx, 0x7cfb95c1
push ebp
mov ebp, 0x15ff5813
sub ecx, ebp
mov ebp, dword [esp]
add esp, 4
add ecx, 0x1d0a3d94
add ebx, 0x7f260e47
add ebx, ecx
sub ebx, 0x7f260e47
pop ecx
jmp 0x77fe04
mov edx, dword [esp]
push esi
mov esi, esp
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x4feb37b9
add ebx, 0x7f776a37
sub ebx, 0xffffffff
xor ebx, 0xcf62a1f5
add esi, ebx
pop ebx
add esi, 4
xchg dword [esp], esi
pop esp
push ebx
push 4
pop ebx
add edx, ebx
push dword [esp]
pop ebx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [ebp + 0x22bf91]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
sub esp, 4
mov dword [esp], esi
mov dword [esp], edx
push edi
mov edi, 0x44a50efe
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
push 0
push esi
mov dword [esp], edi
mov dword [esp], 0x5ae34c52
mov dword [esp], ecx
mov dword [esp], edx
call dword [ebp + 0x22de95]
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edi
mov edx, dword [esp]
add esp, 4
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], esi
mov esi, esp
push ebp
mov ebp, 0x5bdcc148
add ebp, 0x7f2e549c
and ebp, 0x37bc2aef
sub ebp, 0x130800e0
add esi, ebp
pop ebp
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push dword [esp]
mov edi, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push dword [esp]
push dword [esp]
pop esi
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
push dword [esp]
mov ecx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
add esp, 4
xor ecx, esi
xor esi, ecx
xor ecx, esi
xchg esi, ebp
inc ebp
xchg esi, ebp
sub esp, 4
mov dword [esp], ecx
push esi
pop ecx
pop esi
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edx
mov edx, 4
add esi, 0x673f7859
add esi, edx
sub esi, 0x673f7859
mov edx, dword [esp]
add esp, 4
push ebp
mov dword [esp], ebx
mov ebx, 4
sub edi, 0x7f5dd376
add edi, 0x5353879e
add edi, ebx
sub edi, 0x5353879e
add edi, 0x7f5dd376
mov ebx, dword [esp]
add esp, 4
jmp 0x77fa0b
push eax
mov ecx, dword [esp]
push ebx
mov ebx, esp
push esi
mov esi, 0x7d5780f8
xor esi, 0x6f55db8a
shl esi, 1
add esi, 0xdbfb4920
sub ebx, 0x6abca308
add ebx, esi
add ebx, 0x6abca308
pop esi
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x950282
pushfd
push edx
push esp
pop edx
push edi
mov edi, 0x3f3a20f9
neg edi
add edi, 0x7bed1503
add edi, 0xc34d0bfa
add edx, edi
pop edi
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
mov dword [esp], 0xa4
push esi
mov esi, esp
add esi, 4
push edi
mov edi, 4
sub esi, edi
pop edi
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], eax
mov dword [esp], 0x550ede
push ebp
push esi
push 0x6d31aeaf
pop esi
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], eax
push esi
mov esi, esp
push edx
mov edx, 4
add esi, 0x7f8f65b4
add esi, edx
sub esi, 0x7f8f65b4
pop edx
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ebx
push dword [esp + 0x10]
push dword [esp]
push dword [esp]
pop eax
add esp, 4
add esp, 4
push dword [esp + 8]
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push ebx
mov ebx, 0x3ff1e367
inc ebx
xor ebx, 0x7dbfc77d
xor ebx, 0x95dd09b
shr ebx, 4
shr ebx, 4
add ebx, 0xffb4ec10
add ecx, ebx
pop ebx
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
mov ebx, dword [esp]
push edx
mov dword [esp], eax
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
push dword [esp]
push dword [esp]
pop eax
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x7391e2