Function at 0x4db4ba
Capabilities:
Accept command line arguments

Disassembly:
add esp, 4
jmp 0x50157e
mov cx, word [eax]
jmp 0x50ca18
push ebx
push esi
push 0x260bd211
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], eax
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
pop edx
push dword [esp]
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
add esp, 4
push dword [ebp - 0x10]
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
push eax
mov eax, 4
add edx, eax
pop eax
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
jmp 0x4f588e
push dword [ebp - 0x14]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push esi
mov esi, esp
push eax
mov eax, 0xffea08c
add eax, 0xf0015f78
add esi, eax
pop eax
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
push ecx
mov ecx, 4
add edi, ecx
pop ecx
xchg dword [esp], edi
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
xchg dword [esp], ecx
pop esp
jmp 0x527d44
push ecx
mov ecx, esp
push edi
mov edi, 4
add ecx, edi
pop edi
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebp
mov dword [esp], eax
pop dword [ebp - 0x10]
jmp 0x50cddb
jne 0x4f580f
jmp 0x5009d3
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x5017d4
push 0x3ac3baf
mov dword [esp], edi
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], edx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edx
mov dword [esp], ecx
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov ebx, dword [esp]
push 0xf29ae4c
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
sub esp, 4
mov dword [esp], edi
mov dword [esp], ebx
mov ebx, 3
add ebx, ecx
sub esp, 4
mov dword [esp], eax
mov eax, 0
add eax, ebx
xor esi, dword [eax]
pop eax
pop ebx
push edx
mov edx, esp
push ebp
mov ebp, 4
add edx, 0x6efa1d0
add edx, ebp
sub edx, 0x6efa1d0
pop ebp
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ebx
push 0xd3c3ed5
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop ebx
push ecx
push esp
pop ecx
add ecx, 4
push ebp
mov ebp, 4
add ecx, ebp
pop ebp
xchg dword [esp], ecx
pop esp
jmp 0x536a6e
push esi
mov esi, 0x6fb41ed4
add esi, 0x904be134
push esi
pop dword [ebp - 8]
mov esi, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
push ecx
push edi
mov edi, 0x5efd0dfa
mov dword [esp + 4], edi
push dword [esp]
pop edi
add esp, 4
mov dword [esp], ecx
sub ecx, 0x73ef452e
push esi
mov esi, 0x7aff2c76
add ecx, esi
mov esi, dword [esp]
add esp, 4
add ecx, eax
push eax
mov eax, 0x7aff2c76
sub ecx, eax
pop eax
add ecx, 0x73ef452e
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x4fbded
push 0x43d982c2
mov dword [esp], edx
push 0x51ef02cf
pop edx
not edx
xchg edx, ecx
not ecx
xchg edx, ecx
shl edx, 3
xor edx, 0x677fd1c5
push ecx
mov ecx, 0xe807c7b7
xor edx, ecx
pop ecx
mov dword [ebp - 0x14], edx
pop edx
jmp 0x4f1c36
push edi
mov dword [esp], 0x61f57470
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], ebx
push ebx
mov dword [esp], ecx
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
push dword [esp]
mov ebx, dword [esp]
push edx
mov edx, esp
push eax
mov eax, 4
add edx, eax
pop eax
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], esi
push edx
mov edx, 0x4b8cf0
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
jmp 0x4f0b07
sub esp, 4
mov dword [esp], esi
mov esi, 0x1000
sub eax, esi
push dword [esp]
pop esi
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x4ef1b8
push esi
push ebp
mov ebp, 0x72a615fc
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
mov dword [esp], 0x584efe15
mov dword [esp], ebx
push ecx
mov dword [esp], ebp
mov dword [esp], ecx
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop ebx
sub esp, 4
mov dword [esp], eax
mov eax, esp
push esi
mov esi, 4
add eax, esi
pop esi
add eax, 4
xchg dword [esp], eax
pop esp
push ebp
push 0x706d6f63
pop ebp
push ebp
pop dword [0x4b8b26]
mov ebp, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x527738
cmp dword [ebp - 0x10], 0x1000000
jmp 0x501dca
push ebx
mov dword [esp], ebp
mov dword [esp], edi
push ebp
mov ebp, 0x558db1ce
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
push 0x5c294eec
mov dword [esp], esi
push edx
push ebx
mov dword [esp], 0x4b8b24
pop edx
mov dword [esp + 4], edx
pop edx
push eax
push edi
push eax
mov eax, 0x7ff22e09
xor eax, 0x4f51e325
mov edi, eax
pop eax
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], eax
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
push esi
mov esi, esp
add esi, 4
push ecx
mov ecx, 4
add esi, ecx
pop ecx
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
jmp 0x500df7
push dword [0x4b9788]
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
mov eax, dword [esp]
add esp, 4
pop dword [esp]
pop esp
push edi
mov edi, esp
add edi, 4
push ebp
mov ebp, 0x3bbf02b3
not ebp
add ebp, 0x777d1007
dec ebp
neg ebp
sub ebp, 0x5fdec0d5
push ebx
mov ebx, 0x9b9cce2b
add ebp, ebx
pop ebx
sub edi, ebp
pop ebp
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ebx
push esi
mov esi, esp
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
pop ebx
push dword [esp]
push dword [esp]
pop ebx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
jmp 0x5031ee
push eax
push esp
mov eax, dword [esp]
add esp, 4
add eax, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ecx
push esi
mov esi, 0x7cbf098a
sub ecx, esi
pop esi
push eax
mov eax, 0x74d91267
add ecx, eax
pop eax
sub ecx, 0x5fed9860
add ecx, eax
add ecx, 0x5fed9860
sub ecx, 0x74d91267
add ecx, 0x7cbf098a
mov ecx, dword [esp]
push esi
mov esi, esp
push edx
mov edx, 4
add esi, edx
pop edx
push ebp
mov ebp, 4
sub esi, 0x5fef3549
add esi, ebp
add esi, 0x5fef3549
pop ebp
xchg dword [esp], esi
pop esp
push 0x9277e55
mov dword [esp], eax
push eax
push 0x4b8cf0
pop eax
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
jmp 0x4fbd61
push ecx
push edx
mov edx, 0xc1adeaf
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], esi
mov dword [esp], 0x4b8cf0
jmp 0x50c6e7
push esi
mov esi, esp
add esi, 4
push ecx
mov ecx, 4
sub esi, ecx
pop ecx
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ebp
mov dword [esp], ecx
push ebx
mov ebx, 0x3c7637f9
inc ebx
or ebx, 0x7e9c41f7
sub ebx, 0x30ed32f
sub ecx, 0x6ade1555
sub ecx, ebx
add ecx, 0x6ade1555
mov ebx, dword [esp]
add esp, 4
add ecx, 0x5ffff036
add ecx, eax
sub ecx, 0x5ffff036
add ecx, 0x7befa4d0
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ebx
push edx
mov edx, 0x43800e4c
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], eax
pop dword [0x4b9780]
push ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
mov dword [esp], 0x980833a
mov dword [esp], eax
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
push 0x222f7727
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x50c9e6
sub esp, 4
mov dword [esp], ebp
push ecx
push 0x4cf5a7ce
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
push edx
mov dword [esp], ebx
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push edi
mov edi, 4
add ebp, edi
pop edi
xchg dword [esp], ebp
pop esp
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
push eax
mov eax, 4
add ecx, eax
pop eax
xchg dword [esp], ecx
mov esp, dword [esp]
push ebp
mov dword [esp], 0x3478a67a
mov dword [esp], ecx
mov dword [esp], ebp
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0x501a68
push edx
mov edx, esp
push ebx
mov ebx, 0x7f5f3bc1
add ebx, 0x6bf900f2
sub ebx, 0xeb583caf
add edx, ebx
pop ebx
push ebp
mov ebp, 0x63307025
neg ebp
and ebp, 0x7f49362f
push ebx
mov ebx, 0x6efe7a7f
add ebp, ebx
pop ebx
not ebp
add ebp, 0x22efe6d8
sub ebp, 0x97a86649
sub edx, ebp
pop ebp
xchg dword [esp], edx
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push ecx
mov ecx, esp
push ebp
push 0x7bf0e520
pop ebp
shr ebp, 8
sub ebp, 0x6ead0814
inc ebp
sub ebp, 0x91cee8ce
add ecx, ebp
pop ebp
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], eax
push 0x17798d8d
mov dword [esp], ebx
mov dword [esp], 0x128a1c8
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
push edx
mov edx, esp
push ebx
mov ebx, 0x76933dbd
add ebx, 0x896cc247
add edx, ebx
pop ebx
push ebp
mov ebp, 0x37571c54
xor ebp, 0x37571c50
add edx, ebp
pop ebp
xchg dword [esp], edx
pop esp
jmp 0x4fe50b
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x4f5bde
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x4fe22f
push esi
sub esp, 4
mov dword [esp], eax
push ebp
mov ebp, 0x4b8cf0
mov eax, ebp
pop ebp
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
push eax
mov eax, esp
push edi
mov edi, 0x3ff68ac3
dec edi
not edi
push edx
mov edx, 0x527e9f9e
and edx, 0x1dbdbff6
neg edx
shr edx, 2
not edx
xor edx, 0x6f7fa797
sub edx, 0x6b90cd69
add edi, edx
pop edx
add edi, 0x16d7be
add eax, edi
pop edi
sub eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
mov dword [esp], ecx
push edx
mov edx, 0xbfc29db
sub ecx, edx
mov edx, dword [esp]
add esp, 4
add ecx, eax
push esi
mov esi, 0x4dcda7bb
sub esi, 0x14ffce15
sub esi, 0xffffffff
dec esi
and esi, 0x77dfdfda
neg esi
xor esi, 0xc4ce0fa5
add ecx, esi
pop esi
mov ecx, dword [esp]
push eax
push esp
pop eax
add eax, 4
push edx
mov edx, 0x76fd690f
and edx, 0x23ff4265
shl edx, 3
sub edx, 0x79ff3c63
sub edx, 0x5ff7d0d5
sub edx, 0x377f2aa9
xor edx, 0x673c843
add eax, edx
pop edx
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
jmp 0x50c8f2
cmp esi, eax
jmp 0x536a79
cmp esi, eax
jmp 0x4f0afc
push edi
mov dword [esp], esi
mov dword [esp], edi
push edx
mov edx, 0x4812593b
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
push esi
mov esi, 0x1fd62e02
xor esi, 0x7bf61c55
or esi, 0x3f4d5678
xor esi, 0xf2cf34
add ecx, esi
mov esi, dword [esp]
add esp, 4
add ecx, 0x67e7dfae
add ecx, eax
push ebp
mov ebp, 0x77ff430c
xor ebp, 0x10189ca2
sub ecx, ebp
pop ebp
sub ecx, 0x7f9fb94b
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], edi
mov edi, esp
push edx
mov edx, 4
add edi, edx
pop edx
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push 0x7df4d61f
mov dword [esp], ebp
mov dword [esp], esi
mov dword [esp], edi
mov dword [esp], eax
pop dword [0x4b8ec4]
jmp 0x5064cc
mov byte [0x4b8b2e], al
push eax
push eax
push edx
mov edx, 0x76eb19be
inc edx
inc edx
dec edx
inc edx
xor edx, 0x2c965652
mov eax, edx
pop edx
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
push esi
mov esi, 4
add ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
mov ebx, dword [esp]
push edi
mov edi, esp
push ebx
mov ebx, 0x7fffdd1d
or ebx, 0x3dffc013
neg ebx
add ebx, 0x77df7ace
not ebx
neg ebx
xor ebx, 0xf7df9db4
add edi, ebx
pop ebx
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
mov esp, dword [esp]
jmp 0x4f5aa8
push esi
push ebp
mov ebp, 0x5b50f03a
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ebx
mov dword [esp], eax
push ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov eax, dword [esp]
push edi
mov edi, esp
push edx
mov edx, 0x4db7ec1a
add edx, 0xb24813ea
add edi, edx
pop edx
push ecx
mov ecx, 4
add edi, ecx
pop ecx
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
jmp dword [eax + esi]
push dword [ebp - 0x18]
mov eax, dword [esp]
push ebp
mov ebp, esp
push edi
mov edi, 0x7fdb061c
add edi, 0x797ffa22
neg edi
and edi, 0x6ef7b11c
xor edi, 0x7df6171c
inc edi
add edi, 0x84ad59e7
add ebp, edi
pop edi
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push 0x7dc844d8
mov dword [esp], eax
mov dword [esp], 0x197e2b60
mov dword [esp], edi
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
sub esp, 4
mov dword [esp], esi
mov esi, 4
add ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
jmp 0x4fa37c
push dword [0x4b8db4]
push dword [esp]
push dword [esp]
pop esi
add esp, 4
add esp, 4
push ebp
mov ebp, esp
push eax
mov eax, 0x59db8aae
or eax, 0x67ff3387
not eax
dec eax
shl eax, 7
add eax, 0xffddd884
add ebp, eax
pop eax
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
mov dword [esp], ebp
mov dword [esp], eax
push ebx
push dword [esp]
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
push dword [esp]
pop eax
push eax
mov dword [esp], edi
mov edi, esp
push ebp
mov ebp, 0x5ffd1ad1
dec ebp
sub ebp, 0x79fb9560
xor ebp, 0xe6018574
add edi, ebp
pop ebp
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x4f1540
push edx
push edx
mov edx, 0xf39d78b
mov dword [esp + 4], edx
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
push ecx
mov dword [esp], ebx
mov eax, dword [esp]
push esi
mov esi, esp
push eax
mov eax, 4
add esi, eax
pop eax
add esi, 4
xchg dword [esp], esi
pop esp
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
push ebp
mov ebp, 0x7faa7a16
and ebp, 0x7ffe517f
add ebp, 0x79ef5d48
add ebp, 0x59fb8910
neg ebp
or ebp, 0x7efbb3cc
xor ebp, 0xfefbfbda
add eax, 0x6fdd02a
add eax, ebp
push ebp
mov ebp, 0xebb85ae
neg ebp
xor ebp, 0x1996419f
add ebp, 0x1e2b945d
sub eax, ebp
pop ebp
pop ebp
xchg dword [esp], eax
pop esp
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x50c61c
push edi
push edi
mov edi, 0x6f66b373
mov dword [esp + 4], edi
mov edi, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
push ecx
mov dword [esp], 0x32b39aef
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
pop ebx
push eax
mov eax, esp
push ebp
mov ebp, 0x7faf5358
inc ebp
or ebp, 0x64fe7529
add ebp, 0x8000888b
add eax, ebp
pop ebp
push esi
mov esi, 4
add eax, esi
pop esi
xchg dword [esp], eax
pop esp
push esi
mov si, 0x1260
not si
and si, 0x4a6a
shl si, 6
push bp
push 0x65ee
pop bp
add si, 0xbf62
sub si, bp
sub si, 0xbf62
pop bp
add si, 0xcfd2
push si
pop word [0x4b8b2c]
pop esi
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edx
mov dword [esp], ebx
mov dword [esp], edx
push ebx
mov dword [esp], 0x6130aef0
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x501eef
test eax, eax
jmp 0x531cb8
xor edx, edx
jmp 0x50ca20
push edx
mov edx, esp
add edx, 4
push ecx
mov ecx, 4
sub edx, ecx
pop ecx
xchg dword [esp], edx
pop esp
mov dword [esp], esi
mov dword [esp], edi
mov dword [esp], edx
push 0x316a4df7
mov dword [esp], ebx
mov dword [esp], ecx
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
pop edx
push edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
mov edx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
push dword [ebp - 0x18]
push dword [esp]
pop edx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x504f66
push esi
mov dword [esp], ebx
mov dword [esp], edx
mov edx, 0x78707061
push edx
pop dword [0x4b8b24]
mov edx, dword [esp]
add esp, 4
push ebx
mov dword [esp], 0x737bbb2c
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], esi
mov dword [esp], ebx
push 0x5f80e921
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x50ccd8
cmp edx, dword [ebp - 0xc]
jmp 0x501de0
call fcn.00417250
jmp 0x4d41c0
jmp 0x4f5a90
sub esp, 4
mov dword [esp], ebp
mov dword [esp], 0x1cbd70d5
mov dword [esp], edx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov ebx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ebp
push ebx
mov dword [esp], 0x77fb0d
mov dword [esp], eax
mov eax, 0x4b8cf0
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
push eax
push ebp
push esi
mov dword [esp], 0x46dee020
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push edx
push esp
pop edx
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
push dword [esp]
pop ebx
push edi
push esp
pop edi
add edi, 4
push ecx
mov ecx, 0x7befbb56
shl ecx, 3
or ecx, 0x7bba986b
inc ecx
sub ecx, 0xffffdaf8
add edi, ecx
pop ecx
xchg dword [esp], edi
pop esp
jmp 0x501afc
push dword [ebp - 4]
mov ecx, dword [esp]
push eax
mov eax, esp
push ebx
mov ebx, 0x7fbe05f9
xor ebx, 0x7fbe05fd
sub eax, 0x63c6db30
add eax, ebx
add eax, 0x63c6db30
pop ebx
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x501585
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
sub esp, 4
mov dword [esp], ebp
mov dword [esp], ebx
mov dword [esp], edi
mov dword [esp], ecx
sub ecx, 0x4a97a04f
push edi
push 0x7bfda575
pop edi
add ecx, edi
pop edi
add ecx, eax
push ebp
mov ebp, 0x7bfda575
sub ecx, ebp
pop ebp
add ecx, 0x4a97a04f
mov ecx, dword [esp]
push ebx
sub esp, 4
mov dword [esp], esp
push ebx
mov ebx, 4
add dword [esp + 4], ebx
pop ebx
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x4f63a8
push 0x57a4f2d9
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
mov dword [esp], ecx
push ebx
mov ebx, 0x1fb55890
add ebx, 0x7ffe11cf
sub ebx, 0x7af943cc
xchg ebx, edi
not edi
xchg ebx, edi
dec ebx
neg ebx
sub ebx, 0xc57ee5ad
add ecx, ebx
pop ebx
add ecx, 0x7ffde260
add ecx, 0x77ef1277
add ecx, eax
sub ecx, 0x77ef1277
sub ecx, 0x7ffde260
sub ecx, 0x5f3b40e8
push dword [esp]
mov ecx, dword [esp]
push 0x25cb4669
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
sub esp, 4
mov dword [esp], ebx
push eax
push 0x748a2e89
pop eax
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
push edx
push esp
pop edx
add edx, 4
push esi
mov esi, 4
sub edx, esi
pop esi
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], ecx
sub ecx, 0x6e7b41be
add ecx, eax
push edi
push 0x6e7b41be
pop edi
add ecx, edi
mov edi, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov ecx, dword [esp]
push edx
push esp
pop edx
push eax
mov eax, 0x73fdc764
and eax, 0x6f7fd7e5
xor eax, 0x3b9fca6e
dec eax
push ebx
mov ebx, 0x5f7b421c
add eax, ebx
pop ebx
xor eax, 0xb85d4f21
add edx, eax
pop eax
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x4fbc2f
ja 0x4db488
jmp 0x537df2
jae 0x501978
jmp 0x532396
je 0x501deb
jmp 0x50c9dc
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
jmp 0x50c8b4
sub esp, 4
mov dword [esp], ecx
push esp
pop ecx
push esi
mov esi, 4
add ecx, esi
pop esi
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
sub ecx, 0x71f71bc0
push ebx
mov ebx, 0x6bfb1598
sub ecx, 0x7fb7a2d9
add ecx, ebx
add ecx, 0x7fb7a2d9
mov ebx, dword [esp]
add esp, 4
add ecx, eax
sub ecx, 0x6bfb1598
add ecx, 0x71f71bc0
push dword [esp]
pop ecx
push ebp
mov ebp, esp
push ecx
mov ecx, 0x5f573cef
not ecx
push ebx
mov ebx, 0xa0a8c30c
sub ecx, ebx
pop ebx
add ebp, ecx
pop ecx
add ebp, 4
xchg dword [esp], ebp
pop esp
mov al, byte [0x4b8b2d]
push ebx
sub esp, 4
mov dword [esp], ebp
push 0x6381391e
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
add ecx, 0x7bc73d53
add ecx, 0x76ff079d
push ebx
mov ebx, 0x3c55a9ef
shr ebx, 6
shl ebx, 2
neg ebx
inc ebx
and ebx, 0x5fbb0806
xor ebx, 0x7a6181d3
add ecx, ebx
pop ebx
add ecx, eax
sub ecx, 0x265b81d7
push edx
mov edx, 0x3fe6dac6
shl edx, 1
or edx, 0x39f7db4a
xor edx, 0x900f853
sub ecx, edx
pop edx
sub ecx, 0x7bc73d53
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x4fe798
push dword [ebp - 0x18]
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
push eax
mov eax, 4
add edi, eax
pop eax
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
push eax
push esp
pop eax
add eax, 4
push edx
mov edx, 0x7fbfde3f
not edx
sub edx, 0x76fdbb87
shl edx, 7
sub edx, 0xa1331c7c
sub eax, edx
pop edx
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], ecx
add ecx, 0x6bfbc48d
sub ecx, 0x5ffcfe69
sub ecx, 0x735b0311
add ecx, eax
add ecx, 0x735b0311
add ecx, 0x5ffcfe69
push ebx
mov ebx, 0x3ffe445f
and ebx, 0x7ff2f63b
sub ebx, 0xd3f67f8e
sub ecx, ebx
mov ebx, dword [esp]
add esp, 4
mov ecx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
sub esp, 4
mov dword [esp], esi
push dword [esp + 4]
mov esi, dword [esp]
add esp, 4
pop dword [esp]
pop esp
jmp 0x502a89
xor ecx, ecx
push ecx
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebp
mov dword [esp], edx
mov dword [esp], ecx
sub ecx, 0x5afaffad
add ecx, eax
sub esp, 4
mov dword [esp], ebp
push 0x5afaffad
mov ebp, dword [esp]
add esp, 4
add ecx, ebp
pop ebp
push dword [esp]
pop ecx
push ebx
mov ebx, esp
push edx
push 0x4f7f0aa9
pop edx
neg edx
add edx, 0x4f7f0aad
add ebx, edx
pop edx
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x4d41c8
push dword [0x4b8db4]
push dword [esp]
pop esi
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ecx
push esi
mov esi, 0x601d4eb2
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebp
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push esi
push edx
mov dword [esp], esp
add dword [esp], 4
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push ebp
mov ebp, 4
add ecx, ebp
pop ebp
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
jmp 0x5373e2
push dword [ebp - 0x18]
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push ebx
push 4
pop ebx
add ebp, ebx
pop ebx
xchg dword [esp], ebp
pop esp
jmp 0x50ca28
jmp 0x4174ca
sub esp, 4
mov dword [esp], esi
push ebp
mov ebp, 0x2cb55ada
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
mov dword [esp], ebx
push 0x9243917
mov dword [esp], ecx
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov ebx, dword [esp]
push 0x6ece62e7
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
push ecx
mov ecx, esp
push eax
mov eax, 0x669dba18
neg eax
add eax, 0x5d3ef894
xor eax, 0x5cfbb0f8
neg eax
xor eax, 0x55a57178
add ecx, eax
pop eax
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
pop dword [ebp - 0x18]
push 0x71fdff3f
mov dword [esp], edi
mov edi, esp
sub esp, 4
mov dword [esp], edx
mov edx, 4
add edi, edx
pop edx
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
add ecx, 0x69fc9a12
sub ecx, 0x7ffe95d8
add ecx, 0x7fdffc78
add ecx, eax
sub ecx, 0x7fdffc78
push ebx
mov ebx, 0x65f799d5
sub ebx, 0xffffffff
xor ebx, 0x7fffc4cf
shr ebx, 3
shr ebx, 3
xor ebx, 0x7f96b4ac
add ecx, ebx
pop ebx
sub ecx, 0x69fc9a12
push dword [esp]
pop ecx
push edx
mov edx, esp
push edi
mov edi, 4
add edx, edi
pop edi
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp fcn.0050cae5
push edi
mov dword [esp], 0x4df16260
mov dword [esp], ecx
mov dword [esp], 0x67ebb5da
mov dword [esp], eax
pop dword [0x4b8ec4]
push edi
mov dword [esp], 0x239c8116
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
mov dword [esp], edx
push 0x4beda37e
mov dword [esp], esi
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
push esi
mov dword [esp], ebx
mov ebx, 0x3fbe9c22
not ebx
sub ebx, 0xc04163d9
add ecx, ebx
pop ebx
xchg dword [esp], ecx
pop esp
jmp 0x4174ca
push ecx
mov ecx, esp
push 0x138aeddf
mov dword [esp], eax
mov eax, 0x1ffe7e44
not eax
inc eax
add eax, 0x1ffe7e48
add ecx, eax
pop eax
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
mov dword [esp], ebx
push ebp
push ecx
mov ecx, 0x4b55dfdb
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
push edx
mov edx, 4
add eax, edx
pop edx
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push edi
push 0x40b95b5d
mov dword [esp], eax
mov eax, 0x7e4f13da
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], ebx
push 0x730e3191
mov dword [esp], ecx
mov ebx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov ebx, dword [esp]
push 0x5ec212eb
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
jmp 0x50cc59
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
mov dword [esp], edx
jmp 0x501964
push ebp
mov dword [esp], edx
sub esp, 4
mov dword [esp], edi
mov dword [esp], 0x6c6c642e
pop edx
mov dword [0x4b8b2e], edx
pop edx
jmp 0x4f4c26
push dword [ebp - 8]
mov edx, dword [esp]
push esi
push esp
pop esi
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
jmp 0x4e410f
push edi
push ebp
mov ebp, 0x1b4cc746
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], eax
pop dword [0x4b9788]
jmp 0x500a9f
push ebx
push esp
pop ebx
add ebx, 4
push eax
mov eax, 0x1edfc76e
xor eax, 0x1edfc76a
sub ebx, eax
pop eax
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push esi
mov esi, esp
push eax
mov eax, 0x7febe293
dec eax
shr eax, 3
not eax
add eax, 0xffd7c57
add esi, eax
pop eax
add esi, 4
xchg dword [esp], esi
pop esp
mov eax, dword [esp]
push ebp
push esp
pop ebp
push edx
mov edx, 4
add ebp, edx
pop edx
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x50c838
jmp 0x4f5a90
jmp 0x537df2
cmp ecx, dword [ebp - 0x1c]
jmp 0x531cc3
mov dx, word [ecx]
jmp 0x501854
push ebp
mov dword [esp], ecx
mov ecx, 0x3c
add ecx, 0x7fffea2b
sub ecx, 0x4bffc341
sub ecx, 0x7fe78d83
add ecx, edx
add ecx, 0x7fe78d83
add ecx, 0x4bffc341
sub ecx, 0x7fffea2b
add eax, dword [ecx]
pop ecx
push ebp
mov ebp, esp
push edx
push 4
pop edx
add ebp, edx
pop edx
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
push 0x7b1c9c0c
mov dword [esp], ecx
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x4fb774
add al, 0
add byte [eax], al
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
push dword [ebp - 0x10]
push dword [esp]
pop edx
push ebp
mov ebp, esp
push eax
mov eax, 0x77582ea5
add eax, 0x7febd1c8
dec eax
and eax, 0x5bffce73
and eax, 0x23236b85
shl eax, 6
xor eax, 0xc0000004
add ebp, eax
pop eax
add ebp, 4
xchg dword [esp], ebp
pop esp
push 0x4c93187c
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edi
mov dword [esp], eax
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov edx, dword [esp]
push edi
mov edi, esp
push edx
mov edx, 0x75d763b4
neg edx
sub edx, 0x35dfa7a1
inc edx
push esi
mov esi, 0xffffffff
add edx, esi
pop esi
add edx, 0x7e973320
sub edx, 0xd2e027c7
add edi, edx
pop edx
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x50c7fc
push dword [0x4b9788]
mov ecx, dword [esp]
push ebp
mov ebp, esp
push ebx
push 4
pop ebx
add ebp, ebx
pop ebx
add ebp, 4
xchg dword [esp], ebp
pop esp
push 0xb590ee9
mov dword [esp], ebp
push ebp
push 0x7cbccac0
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ebx
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
mov ebx, dword [esp]
push eax
push esp
pop eax
push ebp
mov ebp, 0x395f4258
not ebp
add ebp, 0x2ffc075e
xor ebp, 0xf69cc501
add eax, ebp
pop ebp
push edi
mov edi, 4
add eax, edi
pop edi
xchg dword [esp], eax
pop esp
jmp 0x500ccd
push eax
push 0x6ffb2767
pop eax
not eax
add eax, 0x7ffb7dbe
push edi
mov dword [esp], ecx
mov ecx, 0x52bfc62c
sub ecx, 0x79bf634b
shr ecx, 5
sub ecx, 0xffffffff
sub ecx, 0x96e8f040
xor eax, ecx
pop ecx
or eax, 0x75fe5195
sub eax, 0x3ddb2e52
xor eax, 0x6c544e3e
mov dword [0x4b8b28], eax
pop eax
push eax
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], edx
mov dword [esp], ecx
push 0x2c834c3c
mov dword [esp], edx
mov edx, 0x73a31ccf
neg edx
not edx
sub edx, 0x2dabd538
add ecx, edx
push dword [esp]
pop edx
add esp, 4
add ecx, eax
sub ecx, 0x45f74796
mov ecx, dword [esp]
push ecx
mov ecx, esp
push edx
mov edx, 0x7dfa1c0e
not edx
add edx, 1
xor edx, 0x8205e3f6
add ecx, edx
pop edx
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x500fc0
push ebx
mov dword [esp], 0x28dded94
mov dword [esp], ebp
mov dword [esp], 0x6ca29983
mov dword [esp], ebp
mov dword [esp], edx
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
sub esp, 4
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [ebp - 0x10]
mov ecx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push 0x11dfc97f
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], eax
push 0x4fce337e
mov dword [esp], ebx
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
pop eax
push ecx
push esp
pop ecx
add ecx, 4
push ebp
mov ebp, 0x6dfd51fa
sub ebp, 0x4efccdc8
inc ebp
xor ebp, 0x1f008437
add ecx, ebp
pop ebp
xchg dword [esp], ecx
pop esp
jmp 0x50c50e
push edx
mov dword [esp], esi
push esp
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edi
mov dword [esp], ecx
sub ecx, 0x6f59f209
add ecx, eax
sub esp, 4
mov dword [esp], eax
mov eax, 0x6f59f209
add ecx, 0x6bdf6a59
add ecx, eax
sub ecx, 0x6bdf6a59
mov eax, dword [esp]
add esp, 4
mov ecx, dword [esp]
push edi
push esp
pop edi
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], esi
mov dword [esp], eax
mov dword [esp], edx
push ecx
push dword [esp]
push dword [esp]
pop edx
add esp, 4
add esp, 4
push dword [esp]
pop edx
push ebx
push esp
mov ebx, dword [esp]
add esp, 4
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x4fa359
push ebp
push esp
pop ebp
push ebx
mov ebx, 4
add ebp, ebx
pop ebx
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebp
mov dword [esp], edx
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
mov dword [esp], esi
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push 0x35529834
mov dword [esp], eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp dword [eax + esi]
push ebp
mov dword [esp], ebx
push 0x69757473
mov ebx, dword [esp]
add esp, 4
push ebx
pop dword [0x4b8b2a]
pop ebx
push esi
push ebx
mov ebx, 0x53e37f66
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0x50c81a
lea ecx, [eax + edx + 0x4b8b14]
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], ecx
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
mov ebx, dword [esp]
push ebp
mov ebp, esp
push ebx
mov ebx, 4
add ebp, ebx
pop ebx
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
jmp 0x501bb1
je 0x4f5a90
jmp 0x5020ba
je 0x501609
jmp 0x50196e
push ebx
sub esp, 4
mov dword [esp], ecx
push 0x4b8cf0
pop ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
jmp 0x51d93d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x4fe228
jne 0x4f58e0
jmp 0x523d16
push 0x344366ab
mov dword [esp], ebx
mov ebx, 5
add ebx, edx
push esi
mov dword [esp], edx
mov edx, 0
add edx, ebx
push ecx
mov ecx, 0
add ecx, edx
xor esi, dword [ecx]
pop ecx
pop edx
pop ebx
push edx
mov dword [esp], esi
mov dword [esp], ebp
mov dword [esp], ebx
mov dword [esp], ebp
mov dword [esp], eax
push edi
push ecx
mov ecx, 0x4108cdd3
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], ebx
pop eax
mov eax, dword [esp]
push ecx
mov dword [esp], esi
push esp
pop esi
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
jmp 0x4fbd6c
cmp dword [0x4b9fa0], 0x23f0
jmp 0x501dd5