Function at 0x4a5a8d
Capabilities:
Accept command line arguments

Disassembly:
sub esp, 4
mov dword [esp], eax
push esp
pop eax
add eax, 4
push ecx
mov ecx, 4
sub eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
mov dword [esp], edx
push ebx
mov dword [esp], 0x4f5f1b53
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
push esi
mov esi, 4
add edx, esi
pop esi
xchg dword [esp], edx
mov esp, dword [esp]
push ebp
mov ebp, esp
push ebx
mov ebx, 4
add ebp, ebx
pop ebx
push ecx
mov ecx, 4
sub ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
pop dword [ebp - 0x10]
push 0x684b7116
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push ebx
push dword [esp]
push dword [esp]
pop eax
add esp, 4
add esp, 4
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push 0x25d561b6
mov dword [esp], edi
mov edi, 4
add ecx, edi
pop edi
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
jmp 0x4f8c03
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x4b77b3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x52260b
push dword [0x636034]
push dword [esp]
pop edx
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x513f42
mov cx, word [eax]
jmp 0x4a9073
cmp ecx, dword [ebp - 0x1c]
jmp 0x52f1c0
jne 0x4fc907
jmp 0x4d6e29
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x5377f7
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ebp
mov dword [esp], edx
mov edx, esp
push edi
mov edi, 0x2defcf5a
and edi, 0x73fb90c1
add edi, 0x4df31a18
not edi
xor edi, 0x7fdf313b
inc edi
sub edi, 0xeffe5499
add edx, edi
pop edi
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push eax
mov eax, esp
add eax, 4
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], ebp
push edi
mov edi, 0x639a28
mov dword [esp + 4], edi
pop edi
jmp 0x505272
sub esp, 4
mov dword [esp], esi
push ecx
mov ecx, 0x3c33834c
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
mov dword [esp], ebx
push esi
push ecx
mov ecx, 0x2dbe0a82
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebp
mov dword [esp], ecx
pop ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push esi
push esp
mov esi, dword [esp]
add esp, 4
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
pop dword [ebp - 0x18]
jmp 0x4d10cb
add esp, 4
jmp 0x548cc3
push dword [0x63bcc0]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
jmp 0x4e8149
push 0x5af25950
mov dword [esp], ecx
push ebx
push 0xff2c124
pop ebx
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ecx
sub ecx, 0x6acf4499
sub ecx, 0x25e33904
add ecx, eax
push esi
mov esi, 0x25e33904
add ecx, esi
mov esi, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add ecx, 0x6acf4499
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push edx
mov edx, 0x3dff92d1
inc edx
push ebp
mov ebp, 0x7fdbbf27
add ebp, 0x45fbbcbd
shl ebp, 3
sub ebp, 0x6cbb61f2
sub edx, 0x7ff7bf20
add edx, ebp
add edx, 0x7ff7bf20
pop ebp
sub eax, 0x4d7764d5
add eax, 0x7dadea1a
sub eax, edx
sub eax, 0x7dadea1a
add eax, 0x4d7764d5
pop edx
push esi
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ebx
push eax
mov dword [esp], 0x156f8910
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
mov ebx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push esi
push 4
pop esi
add ebx, esi
pop esi
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0x4ec825
push esi
mov esi, esp
add esi, 4
push eax
mov eax, 4
sub esi, eax
pop eax
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ecx
mov dword [esp], edx
sub esp, 4
mov dword [esp], eax
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
push eax
push esp
pop eax
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
mov eax, dword [esp]
add esp, 4
pop dword [esp]
pop esp
push dword [0x636034]
push dword [esp]
pop ecx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0x533655
push ecx
mov dword [esp], esi
mov esi, esp
push ebp
mov ebp, 4
add esi, ebp
pop ebp
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
push edi
push 0x776e8dda
mov edi, dword [esp]
add esp, 4
add ecx, edi
pop edi
sub ecx, 0x7f1f270d
add ecx, eax
add ecx, 0x7f1f270d
sub ecx, 0x776e8dda
push dword [esp]
mov ecx, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add esp, 4
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], esi
mov dword [esp], 0x2067fc27
mov dword [esp], edx
pop dword [0x636030]
sub esp, 4
mov dword [esp], ecx
mov dword [esp], ebp
mov dword [esp], edi
mov dword [esp], 0x45862ef9
mov dword [esp], ecx
sub ecx, 0x5fbd431a
push edi
mov edi, 0x7d4e3622
push ebx
mov ebx, 0x46c73f18
xor edi, ebx
pop ebx
xor edi, 0x776de647
add edi, 0xf2397662
add ecx, 0x38ef7ebc
sub ecx, edi
sub ecx, 0x38ef7ebc
pop edi
add ecx, eax
add ecx, 0x3f1e65df
add ecx, 0x5fbd431a
push dword [esp]
mov ecx, dword [esp]
push ecx
mov ecx, esp
push esi
mov esi, 0x3e298088
dec esi
xor esi, 0x3e298083
add ecx, esi
pop esi
add ecx, 4
xchg dword [esp], ecx
pop esp
add esp, 4
jmp 0x51fbd4
push ecx
mov dword [esp], eax
mov eax, 7
or ecx, eax
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push ecx
sub esp, 4
mov dword [esp], edx
mov dword [esp], esp
add dword [esp], 4
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
push 0x1273ed2f
mov dword [esp], eax
mov eax, 0x3bfcc951
sub ecx, 0x3f5af9ed
add ecx, eax
add ecx, 0x3f5af9ed
pop eax
add ecx, eax
push edi
mov edi, 0x3bfcc951
sub ecx, edi
pop edi
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x54014e
push ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebp
mov dword [esp], ecx
add ecx, 0x1ef36047
push edi
mov edi, 0x2f4855f9
add ecx, edi
pop edi
sub ecx, 0x7fdfa178
add ecx, eax
add ecx, 0x7fdfa178
sub ecx, 0x2f4855f9
push ebx
mov ebx, 0x1ef36047
sub ecx, ebx
pop ebx
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push eax
mov dword [esp], esi
mov dword [esp], edi
sub esp, 4
mov dword [esp], edi
mov edi, 0x639a28
mov dword [esp + 4], edi
pop edi
push eax
mov eax, esp
push ebx
mov ebx, 4
add eax, ebx
pop ebx
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
mov dword [esp], 0x7a223925
mov dword [esp], edx
push edi
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
pop edx
push dword [esp]
mov edx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x4a9086
jmp 0x4183ea
cmp dword [0x63dcd8], 0x23f0
jmp 0x4d6af9
push ecx
push esp
pop ecx
add ecx, 4
push eax
mov eax, 4
sub ecx, eax
pop eax
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], ebx
push ecx
push edx
mov edx, 0x519b7df7
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
mov ebx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
add esp, 4
xor ecx, ecx
push eax
mov eax, esp
push esi
mov esi, 4
add eax, esi
pop esi
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edx
mov dword [esp], ebx
mov dword [esp], eax
push ebx
mov ebx, esp
push esi
mov esi, 4
add ebx, esi
pop esi
push ecx
mov ecx, 4
sub ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
pop eax
mov eax, dword [esp]
push esi
mov esi, esp
push ebx
mov ebx, 0x5ef7cba4
neg ebx
dec ebx
sub ebx, 0xa1083457
add esi, ebx
pop ebx
push edx
mov edx, 0x6f7b81f9
not edx
and edx, 0x7abf83c5
shl edx, 6
or edx, 0x63bd4853
sub edx, 0x63bdc94f
add esi, edx
pop edx
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
jmp 0x4a906b
push edx
mov dword [esp], edi
push 0x7f51d69e
mov dword [esp], esi
mov esi, 0x1d316967
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebx
push ebp
mov dword [esp], ecx
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov ebx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
push esi
mov esi, 0x7c8abc34
neg esi
shr esi, 7
sub esi, 0x4bee743f
xor esi, 0xb518764c
add ebx, esi
pop esi
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push dword [0x636030]
mov edx, dword [esp]
push 0x1a2d5939
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x4e3e2d
jmp 0x4c4839
push dword [ebp - 0x10]
push dword [esp]
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
sub esp, 4
mov dword [esp], edi
mov dword [esp], ebx
push ebx
mov ebx, 0x1e379c45
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
push ebp
mov ebp, 4
add eax, ebp
pop ebp
xchg dword [esp], eax
pop esp
add esp, 4
jmp 0x4dee53
je 0x4f306c
jmp 0x5626ea
ja 0x53e53b
jmp 0x4c4839
jae 0x50c5b6
jmp 0x4b6397
push eax
mov eax, esp
push edx
push 0x6db9a105
pop edx
shl edx, 3
sub edx, 0x5bbe367d
inc edx
sub edx, 0x120ed1a8
add eax, edx
pop edx
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
jmp dword [eax + 0x63dcd8]
sub esp, 4
mov dword [esp], edi
push esp
pop edi
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], esi
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
mov eax, dword [esp]
push ecx
mov ecx, esp
push eax
mov eax, 4
add ecx, eax
mov eax, dword [esp]
add esp, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [ebp - 0x18]
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
xchg dword [esp], ecx
mov esp, dword [esp]
push ebp
mov dword [esp], 0x67aa2493
mov dword [esp], edi
mov dword [esp], 0x71672a67
mov dword [esp], ebp
mov dword [esp], ecx
push ebx
mov ebx, 0x5f7f1d43
push esi
mov esi, 0x2d6cac20
add esi, 0x52dcfd2f
sub esi, 0x7ffb3ec3
add esi, 0x21433499
add ebx, 0x6eaf8186
sub ebx, esi
sub ebx, 0x6eaf8186
pop esi
sub ecx, ebx
pop ebx
add ecx, 0x2175600a
add ecx, eax
sub ecx, 0x2175600a
add ecx, 0x3ded7e1e
mov ecx, dword [esp]
push esi
push esp
pop esi
add esi, 4
push ebx
push 4
pop ebx
add esi, ebx
pop ebx
xchg dword [esp], esi
pop esp
jmp 0x4e02db
mov dx, word [ecx]
jmp 0x4da8dd
cmp edx, dword [ebp - 0xc]
jmp 0x52f1cb
push ebp
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push eax
mov eax, esp
push edx
mov edx, 0x7fffa076
not edx
shr edx, 2
xor edx, 0x200017e6
add eax, edx
pop edx
add eax, 4
xchg dword [esp], eax
pop esp
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
mov ecx, dword [esp]
add esp, 4
pop dword [esp]
mov esp, dword [esp]
push ecx
mov dword [esp], ebx
push edx
mov edx, 0x3b759053
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], edx
jmp 0x531b58
push dword [ebp - 0x18]
push dword [esp]
pop eax
push 0x1e91543e
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
sub esp, 4
mov dword [esp], ebp
mov dword [esp], 0x60451d86
mov dword [esp], esi
mov dword [esp], 0x7f11da8
mov dword [esp], ecx
push ebp
mov ebp, 0x61bdf122
sub ecx, 0x655d2dc8
add ecx, ebp
add ecx, 0x655d2dc8
pop ebp
add ecx, 0x55f9e2a5
sub ecx, 0x7477974e
add ecx, eax
add ecx, 0x7477974e
sub ecx, 0x55f9e2a5
sub ecx, 0x61bdf122
mov ecx, dword [esp]
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 4
add ecx, edx
pop edx
xchg dword [esp], ecx
pop esp
jmp 0x51079f
add edx, 0x5fdb8d41
push eax
mov eax, 0x7df256b1
neg eax
or eax, 0x7ada7b56
xor eax, 0xa100a2c5
add edx, 0x19f722a1
add edx, eax
sub edx, 0x19f722a1
pop eax
sub edx, ecx
push eax
mov eax, 0x2dafa883
shr eax, 5
or eax, 0x606cd21a
inc eax
add eax, 0x7efb51bc
sub eax, 0x8489f781
sub edx, eax
pop eax
sub edx, 0x5fdb8d41
jmp 0x4bdcf4
push eax
mov eax, esp
push ebp
mov ebp, 0x3fff5b0a
and ebp, 0x75f7a987
xor ebp, 0x7fff493f
sub ebp, 0x4a084039
add eax, ebp
pop ebp
push edx
mov edx, 4
sub eax, edx
pop edx
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop edx
push edi
push esp
pop edi
push ebx
mov ebx, 0x3fed1ec5
inc ebx
shr ebx, 3
inc ebx
not ebx
dec ebx
xor ebx, 0xf8025c21
add edi, ebx
pop ebx
add edi, 4
xchg dword [esp], edi
pop esp
push edx
mov edx, esp
add edx, 4
push edi
mov edi, 4
sub edx, edi
pop edi
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], eax
pop dword [ebp - 0x10]
push 0x16a70975
mov dword [esp], esi
push ebx
mov ebx, 0x46714bb3
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebx
mov dword [esp], ecx
sub esp, 4
mov dword [esp], eax
mov eax, 0x7b76c46e
xor eax, 0x14851ef0
sub ecx, eax
pop eax
add ecx, eax
push ebx
mov ebx, 0x6ff3da9e
add ecx, 0x6dfd442a
add ecx, ebx
sub ecx, 0x6dfd442a
pop ebx
push dword [esp]
pop ecx
push eax
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0x553417
push edi
mov edi, esp
push ecx
mov ecx, 0x5f5d0394
not ecx
dec ecx
add ecx, 0x5bef2879
sub ecx, 1
shr ecx, 3
xor ecx, 0x1f924498
add edi, ecx
pop ecx
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], edi
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
push edx
mov edx, 4
add esi, edx
pop edx
xchg dword [esp], esi
pop esp
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push edi
mov dword [esp], ebx
push eax
mov eax, 0x56ca02a7
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebx
mov dword [esp], ecx
push 0x5712e313
mov dword [esp], edi
mov edi, 0x6b9f21b2
not edi
push edx
mov edx, 0x7b9ecc6e
sub edi, edx
pop edx
shr edi, 1
xor edi, 0x6ffe6d1f
dec edi
sub edi, 0x35907240
sub ecx, edi
pop edi
add ecx, 0x3ffbdcab
add ecx, eax
sub ecx, 0x3ffbdcab
add ecx, 0x2e0ef3af
push dword [esp]
pop ecx
push ebx
mov ebx, esp
add ebx, 4
sub esp, 4
mov dword [esp], ecx
mov ecx, 4
add ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
jmp 0x58c2be
push ebp
mov dword [esp], 0x177c4603
mov dword [esp], edx
mov dword [esp], ecx
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push edi
mov edi, esp
push ebp
mov ebp, 0x3dfea99d
sub ebp, 0x5df3fbdf
neg ebp
sub ebp, 0x1ff5523e
add edi, ebp
pop ebp
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
pop ebx
push eax
mov dword [esp], esi
mov esi, esp
push ecx
mov ecx, 4
add esi, ecx
pop ecx
add esi, 4
xchg dword [esp], esi
pop esp
push 0x10146ccf
mov dword [esp], esi
push edi
mov edi, 0x1f2f6519
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
pop dword [ebp - 0x10]
jmp 0x4fdc8d
push edi
push esp
pop edi
push ecx
push 0x76ffcbe4
pop ecx
dec ecx
not ecx
and ecx, 0x7fa93aff
add ecx, 0xf6ffcfe8
add edi, ecx
pop ecx
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
push ecx
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
add esp, 4
push dword [esp]
pop ebx
push ebx
mov ebx, esp
add ebx, 4
push eax
mov eax, 4
add ebx, eax
pop eax
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push eax
push 0x7ab749e7
mov eax, dword [esp]
add esp, 4
push edx
mov edx, 0x6fedb8cc
inc edx
sub edx, 0x50ee05ff
add eax, edx
pop edx
sub eax, 1
sub eax, 0x99b7fcb4
and ecx, eax
pop eax
push 0x7030de5c
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], edi
mov dword [esp], ebx
push 0x700b019c
mov dword [esp], ecx
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
mov ebx, dword [esp]
push edi
mov dword [esp], edx
push esp
pop edx
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
jmp 0x4e53d2
push dword [0x639aec]
mov esi, dword [esp]
push ebx
mov ebx, esp
push ecx
mov ecx, 0x73fe14e0
sub ecx, 0x73bfb567
add ecx, 0x7fe98cfd
push edi
mov edi, 0x3df7c752
sub edi, 0x75fb64eb
or edi, 0x59ef9e0b
neg edi
xor edi, 0x5fd8121f
add ecx, edi
pop edi
add ebx, ecx
pop ecx
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x5301c6
push eax
mov eax, esp
push ebx
mov ebx, 4
add eax, ebx
pop ebx
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov dword [esp], eax
pop dword [ebp - 0x10]
jmp 0x55ac18
sub esp, 4
mov dword [esp], ebx
mov dword [esp], 0x4bb8f50d
mov dword [esp], ebp
push esi
mov esi, 0x639a28
mov dword [esp + 4], esi
pop esi
jmp 0x4a5da5
or dword [eax], eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
cmp ecx, ebp
sub eax, 0xe9fffcc8
sbb byte [ecx], cl
add dword [eax], eax
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ebx
mov dword [esp], ecx
push edx
mov edx, 0x75e8b6b1
sub ecx, 0x3bfc9241
add ecx, edx
add ecx, 0x3bfc9241
mov edx, dword [esp]
add esp, 4
add ecx, 0x5fff8939
add ecx, eax
sub ecx, 0x5fff8939
sub ecx, 0x75e8b6b1
push dword [esp]
pop ecx
push eax
mov eax, esp
add eax, 4
sub esp, 4
mov dword [esp], ebx
mov ebx, 4
add eax, ebx
pop ebx
xchg dword [esp], eax
pop esp
push dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
push dword [esp]
push dword [esp]
pop eax
add esp, 4
add esp, 4
jmp 0x4e4cad
cmp dword [ebp - 0x10], 0x1000000
jmp 0x4d6aee
mov al, byte [0x63604d]
push edx
mov edx, esp
add edx, 4
push ebp
push 4
pop ebp
sub edx, ebp
pop ebp
xchg dword [esp], edx
pop esp
mov dword [esp], esi
mov dword [esp], ecx
push ebx
mov ebx, 0x6fb422f2
sub ecx, ebx
pop ebx
push ebx
mov ebx, 0x65e9c844
inc ebx
dec ebx
push ebp
mov ebp, 0x75f7aba2
and ebx, ebp
pop ebp
not ebx
xor ebx, 0xe4a6bccf
add ecx, ebx
pop ebx
add ecx, eax
sub ecx, 0x7eb8cb30
add ecx, 0x6fb422f2
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x515615
push ebx
mov ebx, esp
add ebx, 4
push edi
mov edi, 4
sub ebx, edi
pop edi
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ebx
mov dword [esp], eax
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], esi
mov dword [esp], 0x7f4526ac
mov dword [esp], ebx
pop eax
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
add esp, 4
mov byte [0x63604d], al
push ecx
mov ecx, esp
add ecx, 4
push eax
mov eax, 4
sub ecx, eax
pop eax
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ebp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebp
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
pop eax
push edi
push esp
pop edi
add edi, 4
push ecx
mov ecx, 4
add edi, ecx
pop ecx
xchg dword [esp], edi
pop esp
jmp 0x4bd0e2
push 0x2dded7d0
mov dword [esp], edx
push 0x706d6f63
pop edx
push edx
pop dword [0x63984a]
mov edx, dword [esp]
add esp, 4
jmp 0x59a12d
push eax
mov dword [esp], ecx
mov ecx, 0x6c6c642e
push 0xf5c9584
mov dword [esp], edi
mov dword [esp], ecx
pop dword [0x639852]
pop ecx
jmp 0x561895
push eax
push esp
pop eax
push ecx
mov ecx, 0x7bbb59bf
sub ecx, 0x3fe117f7
and ecx, 0x5f3d49bb
neg ecx
or ecx, 0x57fac80e
sub ecx, 0xf7fffe7a
add eax, ecx
pop ecx
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], ecx
add ecx, 0x6e9fda11
sub esp, 4
mov dword [esp], edx
push edi
mov edi, 0x3b6e5017
and edi, 0x13ef05f4
neg edi
sub edi, 0x6ed2b76f
mov edx, edi
pop edi
add ecx, edx
pop edx
add ecx, eax
sub ecx, 0x7dbf487d
sub ecx, 0x6e9fda11
mov ecx, dword [esp]
push ebp
push esp
pop ebp
push ebx
mov ebx, 0x7bdfd835
xor ebx, 0x597dd27e
and ebx, 0x6f306495
push esi
mov esi, 0x7ff54e56
xor ebx, esi
pop esi
or ebx, 0x75b79f8f
add ebx, 0x82082025
add ebp, ebx
pop ebx
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [ebp - 0x10]
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push edi
mov edi, esp
add edi, 4
push ebp
mov ebp, 4
sub edi, ebp
mov ebp, dword [esp]
add esp, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
push edi
mov edi, 4
add ebx, edi
pop edi
xchg dword [esp], ebx
pop esp
mov eax, dword [esp]
push ecx
push esp
mov ecx, dword [esp]
add esp, 4
push ebp
mov ebp, 0x3ffa105e
add ebp, 0xc005efa6
add ecx, ebp
pop ebp
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x560040
push edx
mov dword [esp], 0x75293c42
mov dword [esp], ebp
push esi
mov esi, 0x674249b1
mov dword [esp + 4], esi
pop esi
mov dword [esp], eax
push edx
push ecx
push 0x47ae512
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
mov edx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
push dword [0x636038]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ebp
push esi
mov esi, 0xd683e74
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], esi
mov dword [esp], edx
push 0x7ccbd0bf
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
mov edx, dword [esp]
sub esp, 4
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
jmp 0x4beb3f
push dword [ebp - 0x14]
mov eax, dword [esp]
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x514857
sub esp, 4
mov dword [esp], ecx
push ecx
mov ecx, 0x39f810b6
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], ecx
push esi
mov esi, 0x3cefeaf5
xor esi, 0x312068c
sub ecx, esi
pop esi
push ebx
mov ebx, 0x2dafc6fb
shl ebx, 4
sub ebx, 0x7fefe897
sub ebx, 0x2b2930d2
add ecx, ebx
pop ebx
add ecx, eax
sub ecx, 0x2fe35647
push ebx
mov ebx, 0x5fff5c7e
xor ebx, 0x6002b007
add ecx, ebx
pop ebx
push dword [esp]
mov ecx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push 0x7846b7a9
mov dword [esp], eax
push 8
pop eax
mov dword [ebp - 8], eax
push dword [esp]
pop eax
add esp, 4
push ecx
mov ecx, esp
sub esp, 4
mov dword [esp], ebp
push ecx
mov ecx, 0x799bfee1
shl ecx, 7
neg ecx
sub ecx, 0x5b7b36ff
shl ecx, 3
not ecx
xor ecx, 0x4bd53bf3
mov ebp, ecx
pop ecx
add ecx, ebp
pop ebp
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
push 0x3f913f05
mov dword [esp], edx
push eax
mov eax, 0x27756088
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
pop ebx
mov ebx, dword [esp]
push ecx
mov ecx, esp
push ecx
mov dword [esp], esi
mov esi, 4
add ecx, esi
mov esi, dword [esp]
add esp, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x4bf465
sub esp, 4
mov dword [esp], ebp
mov dword [esp], 0x19c8b78b
mov dword [esp], edi
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ebx
mov ebx, esp
push 0x43db5f7
mov dword [esp], ebp
mov ebp, 0x7c1ba7cf
xor ebp, 0x7c1ba7cb
add ebx, ebp
pop ebp
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
push eax
mov eax, 4
add edi, eax
pop eax
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x4ec848
push esi
mov dword [esp], ebx
push edx
mov edx, 0x2715549f
mov dword [esp + 4], edx
pop edx
mov dword [esp], edx
pop dword [0x636034]
push 0x4034165f
mov dword [esp], eax
mov dword [esp], edi
push ebp
mov ebp, 0x63758b45
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
push ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
jmp 0x53e53b
push 0x659cd858
mov dword [esp], esi
push esi
push 0x639a28
mov esi, dword [esp]
add esp, 4
mov dword [esp + 4], esi
pop esi
jmp 0x518043
push dword [0x63bcc0]
mov edx, dword [esp]
push ebp
push esp
pop ebp
push edi
mov edi, 4
add ebp, edi
pop edi
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp fcn.004ba135
push esi
push ebp
push 0x566805d7
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
push esi
mov esi, 0x79df508f
shl esi, 8
inc esi
add esi, 0x57ea97d6
add esi, 0x2fa7191c
sub esi, 0xef871df8
sub ecx, esi
pop esi
sub ecx, 0x4ffd8132
add ecx, 0x395d44c5
add ecx, eax
sub ecx, 0x395d44c5
add ecx, 0x4ffd8132
push edx
mov edx, 0x775b21fb
add ecx, edx
pop edx
push dword [esp]
mov ecx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push edi
push ebp
mov ebp, 0x7216c19c
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], esi
mov dword [esp], eax
pop dword [0x63bcb8]
jmp 0x4cf99f
push 0x57ce46b0
mov dword [esp], edx
mov edx, esp
add edx, 4
push ecx
mov ecx, 0x7efe80e7
dec ecx
sub ecx, 0x7efe80e2
sub edx, ecx
pop ecx
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
mov ecx, 0x3c
add ecx, edx
add eax, dword [ecx]
pop ecx
jmp 0x55f5bc
push 0x5ae1b77
mov dword [esp], esi
mov dword [esp], ebx
push ecx
mov ecx, 0x5b1d1d72
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop ebx
push edx
mov edx, esp
push eax
mov eax, 4
sub edx, 0x7ffb0091
add edx, eax
add edx, 0x7ffb0091
pop eax
add edx, 4
xchg dword [esp], edx
pop esp
xor edx, edx
jmp 0x4da8d5
push ecx
mov ecx, esp
push ebp
mov ebp, 4
add ecx, ebp
mov ebp, dword [esp]
add esp, 4
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ecx
sub ecx, 0x7ef30326
add ecx, eax
push eax
mov dword [esp], edx
mov edx, 0x7bff9b71
push edi
mov edi, 0x7e3f15ce
and edx, edi
pop edi
shl edx, 6
not edx
not edx
and edx, 0x67c056b0
push edi
mov edi, 0x88cd4cda
sub edx, edi
pop edi
add ecx, edx
pop edx
push dword [esp]
pop ecx
push ebp
mov ebp, esp
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
push edi
mov edi, 4
add ebp, edi
pop edi
xchg dword [esp], ebp
pop esp
and edx, eax
jmp 0x5080d4
push edi
mov edi, esp
push edx
mov dword [esp], esi
mov esi, 4
add edi, esi
pop esi
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], edx
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov edx, dword [esp]
push ebx
mov ebx, esp
push ebp
mov ebp, 0x70ec444c
and ebp, 0x7de9df70
dec ebp
add ebp, 0x8f17bbc5
sub ebx, 0x7b5fcba8
add ebx, ebp
add ebx, 0x7b5fcba8
pop ebp
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
lea ecx, [eax + edx + 0x639838]
jmp 0x53a802
and al, byte [0x63604a]
push edi
push esp
pop edi
push eax
mov eax, 4
add edi, eax
pop eax
sub edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], eax
push 0x73275c79
mov dword [esp], ebx
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x4fbb88
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x567473
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x50c5d7
mov al, byte [0x636043]
push edx
push esp
mov edx, dword [esp]
add esp, 4
add edx, 4
sub edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], ebx
push edx
mov dword [esp], ecx
push dword [esp]
pop ebx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0x4fe219
push dword [ebp - 0x18]
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
jmp 0x50f838
sub esp, 4
mov dword [esp], eax
mov dword [esp], 0x2218b88f
mov dword [esp], edi
mov dword [esp], edx
push ebx
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
xor eax, eax
jmp 0x5186e8
cmp esi, eax
jmp 0x4a907b
je 0x4d9ea0
jmp 0x534e2f
je 0x4e4da1
jmp 0x534e39
push ebx
push ecx
mov ecx, 0x773e2afb
dec ecx
shl ecx, 7
or ecx, 0x694b360d
sub ecx, 0xff5f7f0a
mov ebx, ecx
pop ecx
add ebx, ecx
push ecx
mov ecx, 0
add ecx, ebx
xor esi, dword [ecx]
pop ecx
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x4a5db0
call fcn.00418080
jmp 0x4b7001
push ebx
mov dword [esp], 0x42f021e8
mov dword [esp], ebx
mov dword [esp], eax
mov dword [esp], esi
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push ecx
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
push edx
mov edx, 4
add edi, edx
pop edx
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
shr ecx, 2
jmp 0x4cf913
jmp 0x4f306c
jmp 0x4f306c
push dword [ebp - 8]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x500c36
push eax
mov dword [esp], edx
mov edx, esp
push ebp
push 4
pop ebp
add edx, ebp
pop ebp
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebp
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
pop eax
push edx
push esp
pop edx
push ecx
mov ecx, 4
add edx, ecx
pop ecx
add edx, 4
xchg dword [esp], edx
pop esp
push eax
push 0x5602eb2d
mov dword [esp], ecx
mov ecx, 0x75f34363
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], ecx
jmp 0x560f7d
push dword [ebp - 0x10]
push dword [esp]
pop eax
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push eax
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], eax
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
mov eax, dword [esp]
push 0x577231fc
mov dword [esp], esi
mov esi, esp
push ecx
mov ecx, 0x283bd82f
sub ecx, 0x283bd82b
add esi, ecx
pop ecx
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
jmp 0x4ba035
imul eax, ecx
push edx
mov edx, esp
add edx, 4
push ebp
mov ebp, 0x7cbf41c8
dec ebp
shl ebp, 1
neg ebp
and ebp, 0x3dfe3dec
and ebp, 0x36b96872
sub ebp, 0x480285c
sub edx, ebp
pop ebp
xchg dword [esp], edx
pop esp
mov dword [esp], eax
mov dword [esp], ecx
sub esp, 4
mov dword [esp], esi
mov esi, 0x7fef1443
inc esi
dec esi
xor esi, 0x7ceec05e
or esi, 0x7de7f6b8
push ebp
mov ebp, 0x401c7da1
xor esi, ebp
pop ebp
add ecx, esi
pop esi
add ecx, 0x5f82b3ec
add ecx, eax
sub ecx, 0x5f82b3ec
sub ecx, 0x3ffb8b1c
mov ecx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
jmp 0x4a8b96
test eax, eax
jmp 0x4d1b9e
push eax
mov eax, esp
add eax, 4
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], eax
pop dword [0x639bfc]
jmp 0x4c0edb
push eax
mov eax, esp
add eax, 4
push ebp
mov ebp, 0x7db7dc0d
neg ebp
add ebp, 0x4ffed014
shr ebp, 6
shl ebp, 2
add ebp, 0xf2db90c4
sub eax, ebp
pop ebp
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], edx
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esp, 4
mov dword [esp], eax
mov eax, 4
add esi, eax
pop eax
xchg dword [esp], esi
pop esp
push dword [ebp - 4]
push dword [esp]
pop ecx
push ebp
mov ebp, esp
add ebp, 4
push ecx
mov ecx, 0x46976daa
not ecx
add ecx, 0x677e958f
shl ecx, 7
add ecx, 0x8c6c0e04
add ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
jmp 0x511c94
push edx
push esp
pop edx
add edx, 4
push ebx
mov ebx, 4
sub edx, ebx
pop ebx
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], ebx
push ebp
mov dword [esp], 0x63f2f7fa
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
mov ebx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [ebp - 0x10]
push dword [esp]
pop ecx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push edx
mov dword [esp], 0x4a996a07
mov dword [esp], esi
push edi
mov edi, 0x1e520f8
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push eax
mov eax, esp
push ebp
mov ebp, 0x17ec0946
or ebp, 0x71e5990e
add ebp, 0x44e5500e
shr ebp, 1
shl ebp, 4
xor ebp, 0xe6974ae4
add eax, ebp
pop ebp
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov edx, dword [esp]
push edx
mov edx, esp
push eax
mov eax, 4
add edx, eax
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, 4
add edx, ebx
pop ebx
xchg dword [esp], edx
pop esp
jmp 0x4e6a3f
push dword [ebp - 0x10]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push edi
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x3095a2f1
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
push 0xdf87fe2
mov dword [esp], ecx
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov edx, dword [esp]
push ebp
push esp
mov ebp, dword [esp]
add esp, 4
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x4b68dc
push ebx
push ebx
mov dword [esp], edx
mov edx, 0x7ad19d52
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], edx
push 0xa927127
mov dword [esp], ecx
mov edx, dword [esp]
push ecx
mov ecx, esp
push eax
mov eax, 4
add ecx, eax
pop eax
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
push eax
mov eax, 0x7ffd97fa
and eax, 0x3fdbecd9
neg eax
neg eax
xor eax, 0x3fd984dc
add edx, eax
pop eax
xchg dword [esp], edx
pop esp
add esp, 4
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edi
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0x54ceda
push edi
mov edi, 0x1000
add edx, 0x7f9f29be
add edx, 0x3aad2094
add edx, edi
sub edx, 0x3aad2094
push esi
mov esi, 0x7f9f29be
sub edx, esi
pop esi
mov edi, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ecx
push eax
mov eax, 0x6deaae24
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], ecx
push esi
push 0xb3ffe09
pop esi
sub esi, 0xa5a0f395
sub ecx, esi
push dword [esp]
pop esi
add esp, 4
add ecx, eax
add ecx, 0x659f0a74
push dword [esp]
pop ecx
push edx
mov edx, esp
add edx, 4
add edx, 4
push ebp
mov dword [esp], edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
jmp 0x4a5a35
push eax
push edx
push 0x64e16112
pop edx
mov dword [esp + 4], edx
pop edx
mov dword [esp], ebp
mov dword [esp], edx
push 0x2a8097df
mov dword [esp], ecx
mov edx, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
pop edx
push ebx
mov ebx, esp
push edx
mov edx, 0x7cef021f
sub edx, 0x7cef021b
add ebx, edx
pop edx
push esi
mov esi, 4
add ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
mov dword [esp], 0x10a95bd0
mov dword [esp], ecx
mov dword [esp], edx
push esi
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
mov edx, dword [esp]
push edx
push esp
pop edx
push edi
mov edi, 0x777f0459
add edi, 0x7fef6930
add edi, 0x891927b
add edx, edi
pop edi
push edi
mov edi, 0x4ff6d49d
sub edi, 0x4ff6d499
add edx, edi
pop edi
xchg dword [esp], edx
pop esp
jmp 0x54a46e
push esi
mov esi, esp
add esi, 4
push 0x1f3c549e
mov dword [esp], ebx
push 4
pop ebx
sub esi, ebx
pop ebx
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
push ebp
mov dword [esp], 0x1837cbc9
mov dword [esp], ebx
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push eax
sub esp, 4
mov dword [esp], esi
mov dword [esp], edi
mov dword [esp], 0xa
pop eax
mov dword [ebp - 0x14], eax
pop eax
jmp 0x504c29
push dword [ebp - 0x18]
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
push edi
mov edi, 4
add eax, edi
mov edi, dword [esp]
add esp, 4
xchg dword [esp], eax
pop esp
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edi
mov dword [esp], 0x70fed2d4
mov dword [esp], eax
mov dword [esp], ebx
push 0x2ba83026
mov dword [esp], ebx
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x4ca918
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
mov dword [esp], edi
mov dword [esp], esi
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push eax
mov eax, 4
add ebp, eax
pop eax
xchg dword [esp], ebp
pop esp
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
push ebp
mov ebp, 0x3ffe2d4a
shr ebp, 2
add ebp, 0x77ef4a54
shr ebp, 6
xor ebp, 0x5fe90d51
push ebx
mov ebx, 0xa20949fd
add ebp, ebx
pop ebx
add edi, ebp
pop ebp
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
push edi
push edi
push 0x639a28
pop edi
mov dword [esp + 4], edi
push dword [esp]
pop edi
add esp, 4
push edx
push ebp
push ecx
mov ecx, 0x7cffe750
shr ecx, 8
add ecx, 0xffffffff
add ecx, 0x6f358325
mov ebp, ecx
pop ecx
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
sub ecx, 0x7e5fbf6f
sub ecx, 0x77ffc3c7
add ecx, eax
add ecx, 0x77ffc3c7
push eax
mov eax, 0x7e5fbf6f
sub ecx, 0x7a3a7c28
add ecx, eax
add ecx, 0x7a3a7c28
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop ecx
push ebx
mov ebx, esp
push edi
mov edi, 0x75bf597e
add edi, 0x7fbfd4a6
neg edi
push ecx
mov ecx, 0x7c0e39c5
sub edi, ecx
pop ecx
neg edi
add edi, 0x8e72981b
add ebx, edi
pop edi
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x51804e
push ebx
mov dword [esp], ecx
push edx
mov edx, 0x7b08d652
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], edx
push 0xa4010fe
mov dword [esp], ecx
mov edx, dword [esp]
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop edx
push edx
push esp
mov edx, dword [esp]
add esp, 4
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
sub esp, 4
mov dword [esp], edx
mov dword [esp], esi
mov dword [esp], 0x7d2522c6
mov dword [esp], eax
pop dword [0x63bcc0]
sub esp, 4
mov dword [esp], eax
push edx
push 0x4a13c243
pop edx
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
push eax
mov eax, 0x3d475d4a
add ecx, eax
pop eax
add ecx, eax
push edx
push 0x3d475d4a
mov edx, dword [esp]
add esp, 4
sub ecx, edx
pop edx
mov ecx, dword [esp]
push esi
mov esi, esp
push ebp
mov ebp, 0x6eefa498
add ebp, 0x7ae32ff6
add ebp, 0x162d2b76
add esi, ebp
pop ebp
push ebx
push ebp
mov ebp, 0x79ee4322
xor ebp, 0x7f27ee72
not ebp
shr ebp, 7
sub ebp, 0x54bf7e4f
shr ebp, 1
add ebp, 0xa96688d9
mov ebx, ebp
pop ebp
add esi, ebx
pop ebx
xchg dword [esp], esi
pop esp
jmp 0x519242
push edi
mov edi, esp
add edi, 4
push eax
mov eax, 0x6b5b3a5b
not eax
xor eax, 0x94a4c5a0
sub edi, eax
pop eax
xchg dword [esp], edi
pop esp
mov dword [esp], ebp
mov dword [esp], edx
push eax
mov dword [esp], ecx
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop edx
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
sub esp, 4
mov dword [esp], ebx
push 0x69757473
pop ebx
push ebx
pop dword [0x63984e]
mov ebx, dword [esp]
add esp, 4
jmp 0x4fc927