Function at 0x1390ce2
Capabilities:
Hash data with md5

Disassembly:
call 0x138ff92
jmp 0x13fe2ea
jle 0x13fec7b
jg 0x13fec7b
ljmp 0xa0cd:0x3e5bcb46
int3
pushal
mov dh, 0xf0
xchg di, bx
mov cl, dh
mov edx, dword [esp]
lea edi, [ebx - 0x532a]
bswap ebx
mov cx, bx
setae ch
popal
pushfd
mov dword [esp], ebx
push esp
push word [esp + 6]
mov byte [esp + 8], dh
pop dword [esp]
mov dword [esp], eax
lea esp, [esp + 2]
push word [esp + 1]
lea esp, [esp + 2]
lea esp, [esp + 4]
jge 0x13fda1d
jl 0x13fda1d
push esi
aad 0x45
sub al, 0xdf
invalid
leave
ret 8
pop esi
jmp 0x13fdc44
cdq
sub eax, edx
mov edi, eax
mov eax, dword [ebp - 0x10]
sar edi, 1
mov edx, dword [eax + edi*4]
add edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
call fcn.01390ea7
jle 0x13fddd9
jg 0x13fddd9
dec edi
int 0x5d
and al, 0xd7
jmp 0xd9f90756
xor esi, esi
pushal
pop word [esp + 0x12]
jb 0x13fe038
jae 0x13fe038
sub al, 0xaa
cmp byte [edi - 0x56], bl
sub eax, 0xe7ab4784
scasd eax, dword es:[edi]
mov dl, 0xd2
test byte [ebp - 0x727af040], 0
add byte [eax], al
test eax, eax
jne 0x13fde6e
mov eax, dword [ebp - 8]
jns 0x13fde49
js 0x13fde49
test al, 0x2d
mov ebp, 0x11b237c4
xchg ecx, eax
add dword [eax - 0x6d], esp
sal byte [esi - 5], 0x6b
push cs
std
nop
invalid
mov eax, dword [ebp - 4]
add eax, ebx
jl 0x13fdd86
jge 0x13fdd86
lea ebx, [eax - 1]
invalid
push ecx
xlatb
inc edi
and dl, cl
jecxz 0x13fde29
jnp 0x13fde22
invalid
movzx eax, word [eax + edi*2]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx + eax*4]
jae 0x13fded2
jb 0x13fded2
dec ebp
leave
pop ecx
cmp bl, cl
dec esi
mov ecx, dword [edx + eax*4]
in eax, 0x14
xchg ebx, eax
loopne 0x13fdec7
invalid
cmp dword [ebp - 4], ebx
je 0x13fdff7
test eax, eax
jle 0x13fe182
lea ebx, [edi - 1]
jmp 0x13fe21e
mov word [esp + 5], ax
pop dword [esp + 0xb]
pop dword [esp + 2]
lea esp, [esp + 0xf]
lea esp, [esp + 2]
add eax, dword [ebp + 8]
mov dword [ebp - 0xc], eax
jno 0x13fdf82
jo 0x13fdf82
fstp qword [ecx - 0x37]
test al, 0x5b
fisubr word [ebx - 0x14]
bound eax, qword [0xfa5073f4]
pushfd
push word [esp + 2]
mov byte [esp + 4], bh
sub esp, 0x13
jp 0x13fde9d
jnp 0x13fde9d
mov edx, 0xf46dfd7d
pop es
push esp
pop ds
pushfd
xor dl, byte [ebp - 0x5c]
iretd
jge 0x13fdee2
insd dword es:[edi], dx
hlt
stc
pushfd
lea esp, [esp + 3]
add esp, 0
push ax
mov word [esp], di
lea esp, [esp + 3]
cmp eax, esi
pushal
push word [esp + 0xc]
mov word [esp + 0x19], di
push word [esp + 0x20]
mov byte [esp + 3], cl
lea esp, [esp + 0x20]
lea esp, [esp + 4]
jb 0x13fdfcf
jae 0x1401ae8
push ss
wait
or ebp, dword [esi - 0x63]
invalid
test eax, eax
jne 0x13fe2ab
jmp 0x13fe2ab
mov edi, dword [ebp - 8]
jmp 0x13fddb7
lea esp, [esp + 2]
lea esp, [esp + 0x1c]
test ebx, ebx
jl 0x13fe061
mov eax, dword [ebp - 0x10]
jp 0x13fe07d
jmp 0x13fe07d
mov eax, dword [ebp - 0xc]
jmp 0x13fe74d
mov edx, dword [eax + esi*4]
stc
add edx, dword [ebp + 8]
js 0x13fe0f9
jns 0x13fe0f9
fistp word [esi - 0x34]
stosd dword es:[edi], eax
xor ax, 0x7fff
out dx, eax
mov bh, byte [ecx]
mov cs, word [edi]
lahf
cli
or dword [eax - 0x4ddfab3d], edx
rol byte [eax], cl
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add al, ah
invalid
mov eax, dword [ebp + 0xc]
call fcn.01390ea7
test eax, eax
je 0x13fe149
inc esi
cmp esi, ebx
jle 0x13fe044
jmp 0x13fe061
movzx eax, word [edi + esi*2]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx + eax*4]
add eax, dword [ebp + 8]
mov dword [ebp - 0xc], eax
jmp 0x13fe061
inc edi
mov dword [ebp - 4], edi
jmp 0x13fe21e
pushfd
add esp, 2
push word [esp]
mov byte [esp + 1], dh
pop word [esp]
lea esp, [esp + 2]
cmp dword [ebp - 4], ebx
jle 0x13fde1d
jmp 0x13fdff7
jne 0x13fe74d
jmp 0x13fe21e
pop eax
sub eax, 0xb5edbe28
add eax, 0xb5f496aa
xchg dword [esp + 4], eax
popfd
push dword fs:[0]
mov dword fs:[0], esp
pushal
lea eax, [esi - 0x5d2a]
setle bh
mov ebx, 0x680f1fdd
mov dh, byte [esp]
mov ax, sp
mov di, 0x5246
mov al, byte [esp]
mov ecx, 0x6f45d21
mov ebp, esp
mov cl, dh
popal
pushal
lea esp, [esp + 0x12]
mov dword [esp + 1], edx
push dword [esp]
push ax
mov dword [esp + 6], edx
push word [esp + 6]
mov byte [esp + 9], cl
pop dword [esp + 1]
pop dword [esp + 9]
lea esp, [esp + 0xd]
mov byte [esp], al
push dx
lea esp, [esp + 3]
jmp 0x13fda9b
add eax, 0xf000002
invalid
je 0x13fe3f2
push 0xd
cld
ror byte [esi], 0xa
cli
int1
pop word [si + 0x24]
or ah, byte [esi - 1]
je 0x13fe434
add al, 0x8d
and al, 3
lea esp, [esp + 0x20]
pushfd
jne 0x138ff8d
je 0x138ff8d
loop 0x13fe489
int1
nop
arpl word [edx], si
or edx, dword [ebx + 0x14956603]
and al, 0xa1
xor dword [eax - 0x5d], edx
invalid
lea esp, [esp + 1]
push ebx
push edi
mov dword [ebp - 0x14], ecx
test ecx, ecx
jle 0x13fe50a
lea esi, [eax + 8]
mov eax, dword [esi + 0xc]
mov edi, dword [esi]
mov ecx, dword [esi + 8]
test eax, eax
je 0x13fe4d5
xor edx, edx
jns 0x13fe4a6
js 0x13fe4a6
and dword [ecx - 0xf5cafcf], esp
call 0x6cd8ddd8
add bh, bh
jge 0x13fe460
je 0x13fe3fc
mov ecx, 0xc0924c6c
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
sub ebp, dword [edx - 0x655a0c8]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx], ch
stosb byte es:[edi], al
cmp byte [edi - 0x56], bl
stc
inc edx
les ebx, [edx + 0x3d]
int3
mov eax, edi
div dword [ebp - 4]
mov eax, edx
test edx, edx
jne 0x13fe53c
mov eax, dword [ebp - 4]
jmp 0x13fe53c
inc dword [ebp - 8]
mov eax, dword [ebp - 8]
add esi, 0x28
cmp eax, dword [ebp - 0x14]
jl 0x13fe452
jmp 0x13fe50a
bswap esi
pop dword [esp]
mov esi, dword [esp + 4]
jle 0x13fe51c
jg 0x13fe51c
or al, 0x8c
add ah, byte [ebp - 0x6c]
test al, 0xa2
and dword [ecx - 0x428ddc30], esi
cmp dword [ecx + 0x6bbe3bc8], ebp
push ss
xor eax, eax
jmp 0x13fe910
push edi
push word [esp]
jnp 0x13fe887
jp 0x13fe887
cmpsd dword [esi], dword es:[edi]
sub edi, dword [ebx + 0x3f7a2dde]
mov esp, 0xafc43552
xor edx, dword [edi + 0x4f]
mov edx, dword [ebp - 4]
mov ebx, dword [ebp - 0x10]
jae 0x13fe598
jb 0x13fe598
push edx
out dx, eax
insd dword es:[edi], dx
std
test byte [edi + 0x49], dh
jo 0x13fe545
add dh, cl
lodsb al, byte [esi]
jmp 0x13fe5c7
push esp
push dword [esp + 1]
jl 0x13fe4e9
jge 0x13fe4e9
fcomp qword [ecx - 0x37]
test al, 0x5b
ficomp word [ebx]
lahf
punpckhdq mm3, qword [ecx + 0x69013f6]
popal
nop
sti
loop 0x13fe4fd
aad 0xeb
mov al, byte [ebx]
cli
add edi, edx
jae 0x13fe6c1
jb 0x13fe6c1
cmp byte [eax - 0x7b47b6d2], bh
out dx, al
insd dword es:[edi], dx
std
test byte [edi + 0x26], dh
cmp al, 8
stosd dword es:[edi], eax
sub edx, eax
stc
push ebp
sub esp, 0x1f
pushal
lea esp, [esp + 3]
jl 0x13fe57b
jge 0x13fe57b
pop ds
lahf
punpckhdq mm3, qword [ecx + 0x67f77620]
add dh, cl
js 0x13fe61a
in eax, 0x75
sbb al, 0xef
mov esp, 0xe43f53cc
jecxz 0x13fe5cf
mov bh, 0x4a
push es
and dword [ebp - 8], 0
push eax
push word [esp + 2]
lea esp, [esp + 1]
and al, 1
push word [esp + 1]
pop word [esp + 2]
lea esp, [esp + 4]
lea esp, [esp]
jge 0x13fe43e
jl 0x13fe43e
invalid
shr al, 1
daa
sbb eax, 0x4a8bfff9
cmp byte [ecx + 0x4a8bfc4d], cl
cmp al, 0x89
dec ebp
invalid
jb 0x13fe4d5
add edi, ebx
cmp dword [ebp + 8], edi
jae 0x13fe4d5
mov edx, dword [esi + 0xc]
mov eax, edx
sub esp, 0x11
pop dword [esp + 6]
jle 0x13fe726
jg 0x13fe726
pop edx
jecxz 0x13fe708
push ss
in eax, 0x64
xchg edi, eax
sbb ecx, dword [ebx + 0x564a1dee]
push ebx
mov ebx, dword [esi + 4]
cmp dword [ebp + 8], ebx
jnp 0x13fe669
jp 0x13fe669
pop esi
jecxz 0x13fe720
push ss
in eax, 0x88
sbb eax, 0xa55633a3
lahf
imul ebp, edx, 0x78
pop ds
ljmp 0xcf04
push ecx
lea esp, [esp + 3]
lea esp, [esp]
pushal
lea esp, [esp + 0x1a]
mov byte [esp + 3], dh
lea esp, [esp + 3]
sbb cl, byte [eax - 0x72fcdb8c]
and al, 3
lea esp, [esp + 0x44]
xor edx, edx
pushal
setbe dl
mov ebx, dword [esp]
bswap ebp
bswap eax
xchg bx, dx
mov ah, 0x39
mov eax, 0x3f266c49
mov bp, sp
mov dword [esp + 0x1c], ecx
push ax
pushal
push dword [esp + 0xb]
lea esp, [esp + 2]
lea esp, [esp + 0x24]
popal
and al, 0x61
mov eax, ecx
div ebx
mov dword [ebp - 0xc], edx
test edx, edx
jne 0x13fe6a0
mov dword [ebp - 0xc], ebx
jmp 0x13fe6a0
pop edi
push cs
mov ecx, 0x8d4cea45
and al, 9
lea esp, [esp + 9]
pop word [esp]
lea esp, [esp + 2]
jne 0x13feb90
je 0x13feb90
lcall 0xeea4, 0x25d6b323
insb byte es:[edi], dx
loop 0x13fe6cd
je 0x13fe76f
sbb edi, dword [eax + 0x25]
pop edi
pop ebx
jmp 0x13fdce3
mov dword [esp + 0x11], ebx
push dword [esp + 0x1f]
js 0x13fe85e
jns 0x13fe85e
xchg ebp, eax
push ss
test bl, ah
push ds
jne 0x13fe788
xchg ebp, eax
add eax, 0x24a19f6c
xor edi, dword [esi - 7]
sub esp, 0xb
lea esp, [esp + 9]
lea esp, [esp + 1]
lea esp, [esp]
add esp, 0
lea esp, [esp + 1]
sub esp, 0x40
push edi
mov edi, eax
mov eax, ecx
push edx
mov dword [esp], edi
mov word [esp + 1], dx
mov byte [esp + 1], ch
pop word [esp]
lea esp, [esp + 1]
lea esp, [esp + 1]
shr eax, 3
pushfd
mov byte [esp + 1], bh
mov dword [esp], edi
mov byte [esp], al
push word [esp + 3]
lea esp, [esp + 2]
push edx
pop word [esp]
lea esp, [esp + 2]
lea esp, [esp + 4]
lea edx, [ecx + edi*8]
and eax, 0x3f
pushfd
push sp
add esp, 0
sub esp, 8
push word [esp + 9]
push dword [esp + 4]
pushfd
push si
lea esp, [esp + 2]
and al, 2
cmp edx, ecx
pushal
push dword [esp + 7]
mov dword [esp + 6], ebx
mov word [esp + 0xf], di
push word [esp + 0x16]
jg 0x13fe756
jle 0x13fe756
cmpsd dword [esi], dword es:[edi]
mov ah, 0xd3
jge 0x13fe7f1
push eax
invalid
lea esp, [esp + 2]
lea esp, [esp + 0x40]
jae 0x13fe8f2
jb 0x13fe8c3
scasd eax, dword es:[edi]
sub byte [esi - 0x5e50d727], bh
and dword [ecx - 0x478fdc30], esi
cmp dword [ecx - 0x18adc438], ebp
cmc
pushfd
outsd dx, dword [esi]
push ecx
mov bl, 0x8d
and al, 2
lea esp, [esp + 2]
lea esp, [esp + 0xc]
leave
ret
push si
add esp, 1
lea esp, [esp + 1]
add dword [esi + 4], ecx
jge 0x13fe8d1
jl 0x13fe8d1
sti
adc dword [ebx], 0x76
test dword [esp + edx*8], eax
push ecx
shl dword [eax + 0x6ceed653], 0xe2
test dword [ebp + 9], esi
int 0xf4
sbb edi, edi
inc esi
add al, 0xeb
sub dl, byte [ebx]
nop
push es
popal
nop
sti
pop ebx
invalid
inc dword [esi + 4]
jmp 0x13fe8f2
mov dword [esi], edx
test edi, edi
je 0x13feb45
jne 0x13fea64
adc dl, byte [edx - 0x516d9900]
div dword [esi - 0x1c]
cmp dword [esi + 0x2d], 0x4c
sub dword [esi], edx
dec byte cs:[ebx + 0x1de9c1cf]
mov ecx, edi
shr ecx, 0x1d
jbe 0x13fe89d
ja 0x13fe89d
cmp eax, 0xbb4829b9
mov al, 0x35
movsd dword es:[edi], dword [esi]
int3
push sp
pushfd
push bx
pop di
mov byte [esp + 2], cl
lea esp, [esp + 2]
mov edi, dword [esp + 4]
push eax
lea esp, [esp + 0xc]
mov bh, byte [esp]
mov bl, 0xa7
not bh
pushal
xchg word [esp + 0xe], bx
xchg bh, bl
mov bh, byte [esp + 3]
xchg dword [esp + 0x10], ebx
mov ebx, dword [esp + 0xb]
mov ebx, dword [esp + 0x20]
pushfd
push word [esp + 2]
lea esp, [esp + 1]
lea esp, [esp + 1]
lea esp, [esp + 0x28]
jmp 0x13fe55b
pushal
mov ax, 0x7e9a
mov ax, bx
mov ah, byte [esp]
mov al, bl
mov bp, word [esp]
jno 0x13fea06
jo 0x13fea06
add ecx, dword [ebx + 0xc8d7e1b]
clc
jge 0x13fe983
je 0x13fe91f
add al, ch
inc ebp
aad 0xbc
dec edi
sbb al, 0xe0
call 0x7dcab05d
and al, 8
seto al
mov edx, dword [esp + 0x17]
mov byte [esp + 0x15], dl
lea esp, [esp + 0x20]
popal
pushfd
push dword [esp + 1]
mov byte [esp + 4], dh
lea esp, [esp + 2]
pop word [esp + 1]
lea esp, [esp + 4]
lea esp, [esp + 4]
pushal
mov ah, cl
mov edx, dword [esp]
xchg bp, ax
jl 0x13fec0e
jge 0x13fec0e
invalid
bswap ebp
popal
pushfd
pop word [esp]
push word [esp + 1]
lea esp, [esp]
jmp 0x13fea47
test edi, edi
jne 0x13fea65
pop ebx
jmp 0x13feb45
mov dword [esp], ebp
jnp 0x13feb61
jmp 0x13feb61
push ebx
mov ecx, dword [ebp + 8]
mov cl, byte [ecx]
dec edi
mov byte [eax + esi + 0x18], cl
inc eax
inc dword [ebp + 8]
push esp
cmp eax, 0x40
pushal
push word [esp + 8]
lea esp, [esp + 0x13]
lea esp, [esp + 3]
lea esp, [esp + 0x10]
jne 0x13fea30
sub esp, 0xf
lea esp, [esp + 7]
pop word [esp]
add esp, 4
mov byte [esp], al
mov byte [esp], bl
sub esp, 0x13
lea esp, [esp + 1]
xor ecx, ecx
lea esp, [esp + 0x14]
lea eax, [esi + 0x1a]
movzx edx, byte [eax + 1]
movzx ebx, byte [eax]
pushfd
push dword [esp]
pushal
shl edx, 8
pushfd
mov byte [esp], cl
lea esp, [esp + 0x2c]
or edx, ebx
movzx ebx, byte [eax - 1]
shl edx, 8
or edx, ebx
movzx ebx, byte [eax - 2]
pushal
shl edx, 8
pushal
mov word [esp + 0x10], si
pop word [esp]
pushfd
mov byte [esp + 5], al
lea esp, [esp + 2]
push dx
lea esp, [esp + 2]
lea esp, [esp + 0x40]
or edx, ebx
mov dword [ebp + ecx*4 - 0x40], edx
inc ecx
add eax, 4
cmp ecx, 0x10
jb 0x13feaaf
lea ecx, [esi + 8]
lea eax, [ebp - 0x40]
call fcn.013f0749
stc
push esp
pop word [esp]
push bp
push dword [esp + 3]
xor eax, eax
pushal
mov dword [esp + 0x15], ebx
mov dword [esp + 0x12], eax
lea esp, [esp + 0x28]
jmp 0x13fea30
pop edi
leave
ret
push word [esp + 3]
pop word [esp + 1]
lea esp, [esp + 4]
sub esp, 0x12
mov dword [esp + 7], ecx
js 0x13fec38
jns 0x13fec38
out 0x6b, eax
sti
sahf
insd dword es:[edi], dx
cmp bl, byte [ebp - 0x22]
dec esp
sub esp, esi
lea ecx, [ebp + 0x79]
sub eax, ebx
pushal
pop word [esp + 4]
mov byte [esp + 0x15], ch
pop word [esp + 0x13]
push eax
push dword [esp + 5]
pushal
push dword [esp + 0xa]
lea esp, [esp + 0x48]
add eax, dword [ebp + 8]
cmp eax, edx
jb 0x13fe4d5
push ecx
sub esp, 0xe
lea esp, [esp + 2]
lea esp, [esp + 0x10]
sub ecx, dword [ebp - 0xc]
cmc
push esp
mov dword [esp], ecx
push dword [esp]
stc
add esp, 2
push word [esp + 1]
mov word [esp + 2], di
add ecx, edx
pushal
push dword [esp + 0x17]
lea esp, [esp + 0x2c]
add ecx, dword [ebp - 0x10]
cmp eax, ecx
jb 0x13fe910
jmp 0x13fe4d5
setae bh
mov eax, dword [esp]
not ebx
popal
push bx
mov byte [esp], dh
lea esp, [esp]
jle 0x13fec9b
jg 0x13fec9b
invalid
lea esp, [esp + 0xc]
push word [esp + 1]
push dword [esp + 3]
push bp
cmc
lea esp, [esp + 2]
lea esp, [esp + 0xc]
and dword [eax + 4], 0
and dword [eax], 0
mov dword [eax + 8], 0x7eb37ca8
mov dword [eax + 0xc], 0x26ee0559
mov dword [eax + 0x10], 0x35555adc
mov dword [eax + 0x14], 0x44424acc
ret
pushal
setp bl
xchg ebp, edx
jo 0x13fecf7
jno 0x13fecf7
je 0x13fec7b
push 0xd
cld
rcl byte [ebx + ebx*8 + 0x4b], 0x2e
fisttp qword [eax + 0x294ed85e]
fcomp dword [edi - 0x73]
lodsd eax, dword [esi]
aad 0xbb
mov word [esp], sp
mov byte [esp], dl
lea esp, [esp + 1]
lea esp, [esp]
mov byte [esp], dh
push si
lea esp, [esp + 3]
jmp 0x13fe977
lea esp, [esp]
lea esp, [esp + 2]
lea esp, [esp + 4]
pushal
mov cx, bp
lea edx, [0x613f1372]
xchg ch, ah
lea eax, [esp + 0x2d]
mov ebp, edi
jg 0x13fedb7
jle 0x13fedb7
push 0xea1f78ea
mov ebx, 0xed8a1497
sbb al, 0x77
jnp 0x13fed23
out 0x87, eax
shl dword [esi - 0x79], cl
ret
xchg ebx, edx
xchg bx, ax
xchg ebp, ecx
mov ah, al
push cx
lea esp, [esp + 2]
popal
pushal
mov dword [esp + 0x1a], ebp
push edi
mov word [esp + 3], si
lea esp, [esp + 0x21]
lea esp, [esp + 2]
pushal
lea esp, [esp + 0xa]
lea esp, [esp + 0x15]
push dx
lea esp, [esp + 2]
mov word [esp], di
mov word [esp], bx
jo 0x13fecbf
invalid
jno 0x13fecbf
jne 0x13fed32
imul ecx, dword [esi], 0xfffffffd
mov dword [esi], 0x8f7c1585
ficom word [ebp - 0x2f]
inc ecx
and bl, dl
push esi
jns 0x13fed52
mov cl, 0x62
test eax, eax
jne 0x13fe061
invalid
jmp 0x13fdff7
xchg edx, ebx
xchg ch, bl
popal
push bp
pushal
mov byte [esp + 9], ch
pop dword [esp + 0x10]
push cx
push dword [esp + 1]
lea esp, [esp + 0x1b]
push dword [esp + 5]
push dx
mov word [esp + 0xb], sp
lea esp, [esp + 3]
lea esp, [esp + 0xc]
jmp 0x13ff899
pushal
xchg ebx, edx
mov bx, bp
xchg ebp, eax
lea esi, [esi + 0x75303d1d]
xchg dx, ax
mov ebp, dword [esp]
xchg esi, edi
popal
pushal
pop dword [esp + 9]
push word [esp + 7]
mov byte [esp + 0x12], bh
pop word [esp + 0x12]
push dword [esp + 0x10]
lea esp, [esp]
push dword [esp + 0xd]
pop word [esp + 0x16]
mov dword [esp + 3], esp
mov word [esp + 0x1b], ax
lea esp, [esp + 2]
lea esp, [esp + 0x20]
and dword [eax + 4], 0
and dword [eax], 0
mov dword [eax + 8], 0x67452301
mov dword [eax + 0xc], 0xefcdab89
mov dword [eax + 0x10], 0x98badcfe
mov dword [eax + 0x14], 0x10325476
ret
mov ecx, dword [ebp - 0x18]
add ecx, esi
cmp eax, ecx
jb 0x13fed4b
jmp 0x13fdfcf