Function at 0x6c0601
Capabilities:
Accept command line arguments

Disassembly:
push edi
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
push ebp
push dword [esp + 4]
mov ebp, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
mov edx, dword [esp]
push edx
push esp
pop edx
add edx, 4
sub esp, 4
mov dword [esp], esi
mov esi, 4
add edx, esi
pop esi
xchg dword [esp], edx
pop esp
push esi
mov esi, esp
push ecx
mov ecx, 0x57bde34
and ecx, 0x5fb7975a
add ecx, 1
not ecx
add ecx, 0x5339616
add esi, ecx
pop ecx
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
pop dword [0x4c9730]
push ebp
push esp
pop ebp
push ebx
push 0x7b9e80bb
pop ebx
add ebx, 0x1fee6c12
add ebx, 0x64731337
add ebp, ebx
pop ebx
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
push ebx
mov dword [esp], 0x6b751653
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
jmp 0x5d6c36
push edx
push ebp
mov dword [esp], esi
push 0x40b69847
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], eax
push ebx
push dword [esp]
push dword [esp]
pop eax
add esp, 4
add esp, 4
push dword [esp]
pop eax
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push dword [ebp - 0x18]
push dword [esp]
pop edx
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x5af1de
mov al, byte [0x4c88c1]
jmp 0x6358a0
push 0x7a49c291
mov dword [esp], edx
push ebp
mov ebp, 0x2f050344
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ebp
mov dword [esp], eax
push esi
mov dword [esp], ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
push edx
mov edx, 0x3ab3fc06
and edx, 0x6f7b78bb
shl edx, 1
shl edx, 1
and edx, 0x537f95a8
sub edx, 0x4d8004
add ebx, edx
pop edx
add ebx, 4
xchg dword [esp], ebx
pop esp
mov eax, dword [esp]
push ebx
push esp
mov ebx, dword [esp]
add esp, 4
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push edx
push 0x4dfb50a9
mov edx, dword [esp]
add esp, 4
dec edx
not edx
add edx, 0xffffffff
add edx, 0x7dff55f6
shr edx, 2
xor edx, 0x65747520
mov dword [0x4c88be], edx
pop edx
jmp 0x5794c4
mov al, byte [0x4c5043]
push esi
push esp
mov esi, dword [esp]
add esp, 4
add esi, 4
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], ecx
sub ecx, 0x1bdf6762
add ecx, eax
push edi
mov edi, 0x1bdf6762
add ecx, edi
mov edi, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
push edi
mov edi, 4
add edx, edi
pop edi
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
jmp 0x65bbd7
push eax
push ebp
push 0x74357925
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edi
mov dword [esp], ebx
push edi
push edi
mov edi, 0x6d3b32ec
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
mov ebx, dword [esp]
push ebx
mov ebx, esp
push edi
mov edi, 4
add ebx, edi
pop edi
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
sub esp, 4
mov dword [esp], eax
push 0x47982189
mov dword [esp], edi
push 0x6c6c642e
pop edi
mov eax, edi
pop edi
mov dword [0x4c88c2], eax
pop eax
jmp 0x5aaf1c
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push eax
mov eax, esp
add eax, 4
push edx
mov edx, 0x7ef7cced
add edx, 0x81083317
sub eax, edx
pop edx
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov dword [esp], 0x6e9b8510
mov dword [esp], ebx
push ebp
mov dword [esp], 0x546be96f
mov dword [esp], edi
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
mov ebx, dword [esp]
push eax
mov eax, esp
push ecx
mov ecx, 4
add eax, 0x1dff78b6
add eax, ecx
sub eax, 0x1dff78b6
pop ecx
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
jmp 0x571de6
push ebp
mov dword [esp], eax
mov dword [esp], ebp
push ebp
mov ebp, 0x72d59140
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
push ebp
push edi
mov edi, 0x1d0791d4
mov dword [esp + 4], edi
pop edi
mov dword [esp], edi
mov dword [esp], ebx
pop eax
push dword [esp]
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add esp, 4
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x5b35bb
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], eax
pop dword [ebp - 4]
sub esp, 4
mov dword [esp], ebp
mov dword [esp], edx
mov dword [esp], ebp
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push edx
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
push ebp
mov ebp, 4
add ecx, ebp
pop ebp
xchg dword [esp], ecx
pop esp
jmp 0x5eac7b
push edx
push esp
pop edx
push ebp
mov ebp, 0x6d594005
xor ebp, 0x6d594001
add edx, ebp
pop ebp
push esi
mov esi, 4
sub edx, esi
pop esi
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
push ebx
mov dword [esp], ecx
mov dword [esp], edx
mov dword [esp], 0x3c72eb75
mov dword [esp], ecx
pop ebx
mov ebx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 0x7ff55273
add edx, 0x7f7f5c1d
xor edx, 0xff74ae94
sub ebx, edx
pop edx
xchg dword [esp], ebx
pop esp
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
and edx, eax
jmp 0x5d18ee
push ebp
push edi
mov dword [esp], edx
push 0x2f3c1763
pop edx
mov dword [esp + 4], edx
pop edx
mov dword [esp], edx
push ecx
mov edx, dword [esp]
sub esp, 4
mov dword [esp], esi
mov esi, esp
push edx
mov edx, 4
add esi, edx
pop edx
add esi, 4
xchg dword [esp], esi
pop esp
mov edx, dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, esp
push eax
mov dword [esp], ebx
mov ebx, 0x3edf7b65
neg ebx
neg ebx
dec ebx
xor ebx, 0x3edf7b60
add edx, ebx
pop ebx
add edx, 4
xchg dword [esp], edx
pop esp
push eax
mov eax, 3
add eax, ecx
push ebx
mov ebx, 0
add ebx, eax
xor esi, dword [ebx]
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop eax
add esp, 4
push edx
push ebx
mov ebx, 0x53c1d488
mov dword [esp + 4], ebx
mov ebx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push dword [esp]
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
push ebx
mov ebx, 4
add esi, ebx
pop ebx
xchg dword [esp], esi
pop esp
add esp, 4
jmp 0x59afbc
push eax
mov dword [esp], 0x5328b445
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ebx
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edx
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push edx
mov edx, esp
push ecx
mov dword [esp], esi
mov esi, 4
add edx, esi
pop esi
add edx, 4
xchg dword [esp], edx
pop esp
push eax
push esp
pop eax
add eax, 4
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], eax
pop dword [0x4c8e6c]
push 0x5b45e68a
mov dword [esp], edi
push esp
pop edi
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edx
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push edx
mov edx, esp
push ebp
mov ebp, 4
add edx, ebp
pop ebp
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0x41823a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x5a38d6
jne 0x6faf49
jmp 0x604290
cmp dword [0x4c9f48], 0x23f0
jmp 0x638ccf
test eax, eax
jmp 0x6683f6
cmp esi, eax
jmp 0x59afc7
cmp dword [ebp - 0x10], 0x1000000
jmp 0x638cc4
push esi
push esp
mov esi, dword [esp]
add esp, 4
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], eax
push ebp
mov dword [esp], ebx
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
push edx
mov dword [esp], edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
push 0x6c8d0aca
mov dword [esp], ebp
push 7
mov ebp, dword [esp]
add esp, 4
or ecx, ebp
mov ebp, dword [esp]
add esp, 4
jmp 0x655ffb
push ebx
sub esp, 4
mov dword [esp], edx
mov edx, 0x69d01cbd
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edi
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push 0x3de984c9
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x6ff30212
xchg ecx, eax
inc eax
xchg ecx, eax
push ebp
mov ebp, 0x777b8589
xor ecx, ebp
pop ebp
sub ecx, 0x47fd9c25
xor ecx, 0x2fee9af3
xor ecx, 0xff64718c
push ecx
pop dword [ebp - 0x14]
pop ecx
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
push ecx
push dword [esp + 4]
mov ecx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], edi
mov dword [esp], ecx
push ecx
mov dword [esp], esi
mov esi, 0x5fe7bd8c
add ecx, esi
pop esi
add ecx, eax
push edx
mov edx, 0x3bdbd453
and edx, 0x3ff7d11a
sub edx, 0x7eff4469
or edx, 0x56ef6420
sub edx, 0x9f18321d
sub ecx, edx
mov edx, dword [esp]
add esp, 4
mov ecx, dword [esp]
push edi
push esp
pop edi
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
mov esp, dword [esp]
jmp 0x6e706f
push dword [ebp - 0x10]
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
sub esp, 4
mov dword [esp], ebp
mov dword [esp], 0x7773be0e
mov dword [esp], edx
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 0x6d9e53f4
add ebp, 0x7bfd6276
sub ebp, 0x271e4c7d
xor ebp, 0x7be98068
add ebp, 0x466b167f
add ebx, 0x7f6c441b
add ebx, ebp
sub ebx, 0x7f6c441b
pop ebp
xchg dword [esp], ebx
pop esp
push dword [esp]
pop eax
push edx
mov edx, esp
push ecx
mov ecx, 4
add edx, ecx
pop ecx
push eax
mov eax, 4
add edx, eax
pop eax
xchg dword [esp], edx
pop esp
jmp 0x730ee8
sub esp, 4
mov dword [esp], ebx
push ecx
mov ecx, 0x14b22c31
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
mov dword [esp], eax
push edx
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
mov eax, dword [esp]
push ebp
push 0x29fe10ec
mov dword [esp], esp
add dword [esp], 4
pop ebp
push esi
mov esi, 4
add ebp, esi
pop esi
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [ebp - 0x18]
push dword [esp]
pop eax
push ecx
mov ecx, esp
push eax
mov eax, 0x3faae949
dec eax
sub eax, 0x6dda3024
xor eax, 0xd1d0b920
add ecx, eax
pop eax
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x6d978b
sub esp, 4
mov dword [esp], edi
push ecx
mov ecx, 0x35b40c52
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], edx
push edx
mov dword [esp], ecx
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov edx, dword [esp]
push edx
push esp
pop edx
push eax
mov eax, 4
add edx, 0x7daa76ee
add edx, eax
sub edx, 0x7daa76ee
pop eax
add edx, 4
xchg dword [esp], edx
pop esp
push dword [ebp - 0x14]
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push ebx
mov ebx, 4
add ebp, ebx
mov ebx, dword [esp]
add esp, 4
xchg dword [esp], ebp
pop esp
push 0x6c8391fa
mov dword [esp], edx
push edx
mov edx, 0x56f5171
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], edx
push esi
mov dword [esp], ecx
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push dword [esp]
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
add esp, 4
jmp 0x67db06
push eax
push 5
mov eax, dword [esp]
add esp, 4
push edx
mov edx, 0x2ef63d63
add eax, edx
pop edx
add eax, edx
sub eax, 0x2ef63d63
xor esi, dword [eax]
pop eax
jmp 0x677717
sub esp, 4
mov dword [esp], ebx
mov dword [esp], ebp
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x4c8a98
mov dword [esp + 4], ebp
pop ebp
jmp 0x6d795f
push edx
mov edx, esp
add edx, 4
push edi
mov edi, 4
sub edx, edi
pop edi
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], esi
mov dword [esp], ecx
push ebp
mov ebp, 0x27f9c2bf
sub ecx, ebp
pop ebp
sub ecx, 0x779cc2d6
add ecx, eax
push 0x7c0a7a89
mov dword [esp], ebx
mov ebx, 0x4ffb6e2c
add ebx, 0x3ede1f8d
and ebx, 0x5afffdc7
sub ebx, 0x933ccaab
add ecx, ebx
pop ebx
add ecx, 0x27f9c2bf
push dword [esp]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x6daa12
push ebx
push edi
mov edi, 0x3a247b45
mov dword [esp + 4], edi
pop edi
mov dword [esp], esi
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push edx
mov dword [esp], 0x6049d956
mov dword [esp], eax
push ecx
mov ecx, 0x4c8a98
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
jmp 0x66f1fd
push dword [ebp - 0x10]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push 0x47da43ff
mov dword [esp], edx
push ebp
mov ebp, 0x299ff623
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], esi
mov dword [esp], ecx
sub ecx, 0x5bff1d81
sub ecx, 0x5fbbbf54
add ecx, eax
sub esp, 4
mov dword [esp], edx
push 0x7fbb4e59
pop edx
neg edx
xor edx, 0xdfff0ef3
add ecx, edx
pop edx
add ecx, 0x5bff1d81
push dword [esp]
mov ecx, dword [esp]
push 0x363a688
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
jmp 0x6066d9
push esi
mov dword [esp], edx
push esp
pop edx
add edx, 4
push ebp
mov ebp, 4
sub edx, ebp
pop ebp
xchg dword [esp], edx
pop esp
mov dword [esp], eax
push esi
push esi
push 0x4e1ca34f
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebx
pop eax
mov eax, dword [esp]
push esi
mov esi, esp
push edi
mov edi, 0x1b0d7630
xor edi, 0x1b0d7634
add esi, edi
pop edi
push ebp
push 4
pop ebp
add esi, ebp
pop ebp
xchg dword [esp], esi
pop esp
push dword [0x4c9730]
push dword [esp]
pop ecx
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x6012bd
push eax
push ecx
push 0x55874348
mov ecx, dword [esp]
add esp, 4
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], edx
push ebp
push eax
mov eax, 0x56e80231
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
pop edx
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
xor eax, eax
jmp 0x57863c
je 0x5730a7
jmp 0x62630b
je 0x57caa8
jmp 0x626315
push eax
mov dword [esp], 0x1da2dc19
mov dword [esp], eax
mov dword [esp], ebx
mov dword [esp], ebp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov ebx, dword [esp]
push edi
mov edi, esp
push edx
mov edx, 4
add edi, edx
pop edx
push ebp
mov ebp, 0x375bbeaa
not ebp
shr ebp, 1
shl ebp, 6
shr ebp, 3
sub ebp, 0x291054c
add edi, ebp
pop ebp
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
sub esp, 4
mov dword [esp], ecx
push ecx
mov ecx, 0x5dcab07f
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
pop dword [ebp - 0x10]
sub esp, 4
mov dword [esp], ebx
push ecx
mov ecx, 0xacebd2d
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], esi
mov dword [esp], ebx
push edx
mov dword [esp], 0x65e25d3b
mov dword [esp], ecx
mov ebx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
pop ebx
sub esp, 4
mov dword [esp], edx
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x5c6181
push esi
mov esi, esp
push ecx
mov ecx, 0x5effc8ac
xor ecx, 0x5effc8a8
add esi, ecx
pop ecx
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ecx
sub ecx, 0x3dd6a0a9
add ecx, 0x6bfb71d7
add ecx, 0x47ff1b3f
sub ecx, 0x7e7f1f2a
add ecx, eax
add ecx, 0x7e7f1f2a
sub ecx, 0x47ff1b3f
push edi
mov edi, 0x2ffe7a50
neg edi
shl edi, 4
or edi, 0x7a9f2d15
xor edi, 0x11640ec2
sub ecx, edi
pop edi
add ecx, 0x3dd6a0a9
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push 0x28121177
mov dword [esp], eax
push ebx
mov ebx, 0x2461635d
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
pop dword [0x4c5034]
jmp 0x61a374
push dword [ebp - 0x18]
push dword [esp]
pop eax
push ebx
mov ebx, esp
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
add ebx, 4
xchg dword [esp], ebx
pop esp
sub esp, 4
mov dword [esp], esi
push esp
pop esi
push ecx
mov ecx, 4
add esi, ecx
pop ecx
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
push edi
mov dword [esp], edx
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0x664d89
jmp 0x59f840
push di
mov word [esp], ax
mov ax, 0x6c64
push ax
pop word [0x4c88c0]
mov ax, word [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 2
xchg dword [esp], ecx
pop esp
jmp 0x574734
cmp edx, dword [ebp - 0xc]
jmp 0x5ce87f
sub esp, 4
mov dword [esp], esi
push edi
mov edi, 0x205ff8ed
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
mov dword [esp], eax
push 0x28933d8f
mov dword [esp], ebx
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
pop eax
push edi
push esp
pop edi
add edi, 4
push ecx
mov ecx, 4
add edi, ecx
pop ecx
xchg dword [esp], edi
pop esp
push dword [ebp - 4]
push dword [esp]
mov ecx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
push ecx
mov dword [esp], ebp
push 0x4dc4abc2
mov dword [esp], ebp
mov ebp, 0x56f6f3c
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ebx
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov edx, dword [esp]
push 0x1ea904be
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
jmp 0x647667
push esi
mov dword [esp], 0x57bb6285
mov dword [esp], edx
mov dword [esp], 0x6cea3aeb
mov dword [esp], ebx
mov dword [esp], ecx
push ebp
mov ebp, 0x2bff0fc3
shr ebp, 1
shl ebp, 5
push ebp
not dword [esp]
pop ebp
xor ebp, 0x1dc0304e
sub ecx, ebp
pop ebp
add ecx, 0x77edd027
add ecx, eax
sub ecx, 0x77edd027
push edx
mov edx, 0x5dcf3391
add ecx, edx
pop edx
mov ecx, dword [esp]
push edx
mov edx, esp
push ebp
push esi
mov esi, 4
mov ebp, esi
pop esi
add edx, 0x7bd55418
add edx, ebp
sub edx, 0x7bd55418
pop ebp
add edx, 4
xchg dword [esp], edx
pop esp
push dword [0x4c5034]
mov edx, dword [esp]
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebp
mov dword [esp], 0x6097c85d
mov dword [esp], edx
mov dword [esp], eax
push edx
mov edx, esp
push ebx
mov ebx, 0x377bab5b
add ebx, 0xc88454a9
add edx, ebx
pop ebx
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push edi
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
jmp 0x59172a
push dword [ebp - 0x18]
push dword [esp]
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
sub esp, 4
mov dword [esp], edx
mov edx, esp
push edi
mov edi, 0x79f7a440
xor edi, 0x6af7b5c7
xor edi, 0x75efd74f
sub edi, 0x7f543f0e
dec edi
sub edi, 0xe79b87b5
add edx, edi
pop edi
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push esi
push esp
pop esi
add esi, 4
push edx
mov edx, 4
add esi, edx
pop edx
xchg dword [esp], esi
pop esp
mov eax, dword [esp]
push eax
mov eax, esp
push ecx
mov ecx, 0x3e6e8bda
sub ecx, 0x77ee552b
xor ecx, 0xc68036ab
add eax, 0x3fe50e3f
add eax, ecx
sub eax, 0x3fe50e3f
pop ecx
push ebp
mov ebp, 4
add eax, ebp
pop ebp
xchg dword [esp], eax
pop esp
jmp 0x68752f
push dword [0x4c8b5c]
mov esi, dword [esp]
push esi
mov esi, esp
push edi
mov edi, 4
add esi, edi
pop edi
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov dword [esp], ecx
mov dword [esp], 0x5a161ceb
mov dword [esp], ecx
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x27f36b2d
sub ecx, 0x4f7f3e9b
sub ecx, ebx
add ecx, 0x4f7f3e9b
pop ebx
add ecx, 0x5f1f38eb
add ecx, eax
sub ecx, 0x5f1f38eb
add ecx, 0x27f36b2d
mov ecx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
push esi
push 4
pop esi
add ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
jmp 0x591f9e
push ebp
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], eax
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], esi
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
mov eax, dword [esp]
push esi
mov dword [esp], ebp
push esp
mov ebp, dword [esp]
add esp, 4
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp dword [eax + 0x4c9f48]
push ebp
push esp
pop ebp
push edi
mov edi, 4
add ebp, edi
pop edi
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], ebx
push 0x613b9337
mov dword [esp], esi
mov esi, esp
add esi, 4
push ebx
mov ebx, 4
sub esi, ebx
pop ebx
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push eax
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push edi
mov edi, esp
push esi
mov esi, 0x3fdbba36
sub esi, 0x21ba043f
and esi, 0x5fed5005
dec esi
sub esi, 0x1e211000
add edi, esi
pop esi
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ecx
pop dword [ebp - 0x18]
push ebp
mov ebp, esp
sub esp, 4
mov dword [esp], ebx
mov ebx, 4
add ebp, ebx
pop ebx
sub ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
mov dword [esp], ebx
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebp
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x5ab2e6
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x6e11e2
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x69a7b3
jmp 0x41823a
push 0x1d8b4ff5
mov dword [esp], ebx
mov dword [esp], 0x27eefccb
mov dword [esp], ebx
mov dword [esp], esi
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop edx
push eax
mov eax, esp
push ecx
push esi
mov esi, 4
mov ecx, esi
pop esi
add eax, ecx
pop ecx
add eax, 4
xchg dword [esp], eax
pop esp
push dword [ebp - 0x10]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
jmp 0x653afd
add esp, 4
jmp 0x5a38cf
mov cx, word [eax]
jmp 0x6c227e
push dword [0x4c8b5c]
mov esi, dword [esp]
push eax
mov eax, esp
push edi
mov edi, 4
add eax, edi
pop edi
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push esi
mov esi, 4
sub ecx, esi
pop esi
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
mov dword [esp], 0x46120303
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
push edx
mov edx, 4
add esi, edx
mov edx, dword [esp]
add esp, 4
xchg dword [esp], esi
pop esp
jmp 0x5b0eb5
jmp 0x5a6e06
jmp 0x5a6e06
push dword [0x4c9730]
mov edx, dword [esp]
push edi
push esp
pop edi
add edi, 4
push ebx
mov ebx, 4
add edi, ebx
pop ebx
xchg dword [esp], edi
pop esp
push ecx
mov dword [esp], 0x60f7a119
mov dword [esp], ebp
mov dword [esp], 0x696bee05
mov dword [esp], ecx
mov dword [esp], edx
push ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov edx, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
jmp 0x61ad29
mov byte [0x4c88c2], al
push 0x3818bf76
mov dword [esp], ebp
push 0x600d22fb
mov dword [esp], eax
mov eax, 0x570f5cc5
mov dword [esp + 4], eax
pop eax
mov dword [esp], eax
sub esp, 4
mov dword [esp], eax
mov dword [esp], ebx
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop eax
push esi
mov esi, esp
push ebp
mov ebp, 0x3a5fe377
or ebp, 0x637f93e0
shr ebp, 4
not ebp
neg ebp
inc ebp
sub ebp, 0x7b7ff3d
add esi, ebp
pop ebp
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0x6e2b55
push edi
push esp
pop edi
push ecx
mov ecx, 4
add edi, 0x7bf800e5
add edi, ecx
sub edi, 0x7bf800e5
pop ecx
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
push edi
mov edi, 0x7dec5990
add ecx, edi
pop edi
sub ecx, 0x79fda8e8
add ecx, eax
add ecx, 0x79fda8e8
push esi
push 0x7dec5990
pop esi
sub ecx, esi
pop esi
mov ecx, dword [esp]
push edx
mov edx, esp
push ebx
mov ebx, 4
add edx, ebx
pop ebx
push ecx
mov ecx, 0x7a7f787f
xchg ecx, edi
not edi
xchg ecx, edi
add ecx, 0x7a7f7884
add edx, ecx
pop ecx
xchg dword [esp], edx
pop esp
jmp dword [eax + 0x4c9f48]
ja 0x61a374
jmp 0x59f840
jae 0x5bb180
jmp 0x6c061e
push ecx
push esi
mov esi, 0x7843252
mov dword [esp + 4], esi
push dword [esp]
pop esi
add esp, 4
mov dword [esp], eax
push 0x1f5cb7f7
mov dword [esp], edx
push esp
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
pop eax
push dword [esp]
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
xor edx, edx
push 0x45ef1cde
mov dword [esp], ebp
mov dword [esp], edi
push ebp
mov ebp, 0x28377ea1
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
push edi
mov dword [esp], ebx
mov eax, dword [esp]
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
jmp 0x6c2286
call fcn.00417ed0
jmp 0x61a3d8
push ecx
mov ecx, esp
push ebp
push 0x7ffae650
pop ebp
neg ebp
neg ebp
add ebp, 0x16ffce99
add ebp, 0x54b9ae88
add ebp, 0x144b9c93
add ecx, 0x737e6dd1
add ecx, ebp
sub ecx, 0x737e6dd1
pop ebp
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
push 0x1c621717
mov dword [esp], edi
mov dword [esp], ecx
mov ebx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], esi
mov dword [esp], 0x2e481150
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov eax, dword [esp]
push ecx
mov dword [esp], eax
mov eax, esp
push ebx
mov ebx, 4
add eax, ebx
pop ebx
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x62cf20
push ebp
mov dword [esp], eax
mov dword [esp], 0x6fdcf9f7
mov dword [esp], edx
mov dword [esp], eax
push ebx
push ebp
mov ebp, 0x5e133e01
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
push esi
push eax
push eax
mov eax, 0x2e706973
mov dword [esp + 4], eax
pop eax
mov esi, dword [esp]
add esp, 4
mov dword [0x4c88bc], esi
pop esi
jmp 0x5e13e4
sub esp, 4
mov dword [esp], ecx
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebp
mov dword [esp], eax
push 0x55a218c0
mov dword [esp], ebx
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 0x62fb003b
xor edx, 0x3ff14eef
sub edx, 0x5d0a4ed0
add ecx, edx
pop edx
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
push ecx
mov dword [esp], 0x195d834b
mov dword [esp], ebp
mov ebp, 0x7afd4c40
neg ebp
add ebp, 0x7eff40c9
dec ebp
push ebp
dec dword [esp]
pop ebp
or ebp, 0x7ffec8ce
add ebp, 0x80001331
sub eax, ebp
mov ebp, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], esi
mov dword [esp], ebp
mov dword [esp], ecx
push eax
mov eax, 0x1dfee49a
shr eax, 8
sub eax, 0xa09e3200
add ecx, eax
pop eax
push edi
mov edi, 0x7fdf25f4
add edi, 0x6defaa8e
dec edi
sub edi, 0x6ffb14d3
add edi, 0xe1bb7143
add ecx, edi
mov edi, dword [esp]
add esp, 4
add ecx, eax
sub ecx, 0x5f8f2cf1
sub ecx, 0x5f7fcce4
push dword [esp]
mov ecx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
add esp, 4
jmp 0x5d111a
push edi
mov dword [esp], 0x2377d78f
mov dword [esp], ebp
mov dword [esp], esi
mov dword [esp], ecx
push edx
push 0x6edb26b2
mov edx, dword [esp]
add esp, 4
not edx
inc edx
sub edx, 0x2965b3ec
sub ecx, edx
pop edx
add ecx, eax
add ecx, 0x67bf2562
push dword [esp]
pop ecx
push ebp
mov ebp, esp
push esi
mov esi, 0x2ebf9121
dec esi
dec esi
shl esi, 7
inc esi
xor esi, 0x5fc88f85
add ebp, esi
pop esi
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
imul eax, ecx
push ebp
mov ebp, esp
push esi
push 4
pop esi
add ebp, esi
pop esi
push ebx
mov ebx, 0x37c74aec
shl ebx, 6
sub ebx, 0x5efd0caa
and ebx, 0x3aada5b4
shr ebx, 3
xor ebx, 0x250b486
sub ebp, ebx
pop ebx
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
push edi
mov dword [esp], ecx
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop edx
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0x5eddd7
push dword [0x4c5038]
push dword [esp]
pop ecx
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x5a9be3
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], eax
mov dword [esp], edx
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
sub esp, 4
mov dword [esp], edx
push esp
pop edx
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
push ecx
mov ecx, esp
push ebp
mov ebp, 0x7edd18ef
sub ebp, 0x5a7d0f9d
xor ebp, 0x35cef166
xor ebp, 0x11aef830
add ecx, ebp
pop ebp
sub ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov dword [esp], eax
pop dword [0x4c9728]
push esi
mov dword [esp], ebp
push edx
push 0x23583f59
pop edx
mov dword [esp + 4], edx
pop edx
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push 0x18176a88
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov ebx, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
push edi
mov edi, 4
add ebp, edi
pop edi
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x5d94f9
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], ebx
mov dword [esp], 0x1adc36bc
mov dword [esp], ecx
push ebp
mov ebp, 0x6b7f1dd2
inc ebp
not ebp
dec ebp
or ebp, 0x7fef460e
xor ebp, 0x96917d5a
add ecx, ebp
pop ebp
sub ecx, 0x7f7f0cd8
add ecx, eax
push edi
mov edi, 0x4fff9547
or edi, 0x5f770e51
add edi, 0x7fe2fa38
xor edi, 0x5e6ded29
inc edi
shr edi, 1
sub edi, 0xc148ad7b
add ecx, edi
pop edi
push eax
mov eax, 0x4cfb9a6d
neg eax
dec eax
sub eax, 0x1cbf4815
not eax
sub eax, 0x3c470d
sub ecx, eax
pop eax
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push esi
mov esi, esp
push eax
mov eax, 4
add esi, eax
pop eax
add esi, 4
xchg dword [esp], esi
pop esp
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
push 0x1d4e4010
mov dword [esp], ecx
mov ecx, 0x4c8a98
mov dword [esp + 4], ecx
pop ecx
jmp 0x610fa5
je 0x5a6e06
jmp 0x5f8f5c
push ebp
push ebp
mov ebp, 0x5c078570
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
mov ecx, 0x78707061
push ecx
pop dword [0x4c88b8]
pop ecx
push 0x34931a26
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edx
mov dword [esp], 0x3d54451d
mov dword [esp], eax
push 0x60581f23
mov dword [esp], ebx
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov eax, dword [esp]
push edi
push esp
pop edi
add edi, 4
push eax
mov eax, 4
add edi, eax
pop eax
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
jmp 0x651c3f
sub esp, 4
mov dword [esp], ebp
push edi
mov edi, 0x74ee3bf3
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
mov dword [esp], ecx
add ecx, 0x77f641ae
sub ecx, 0x7dda7a19
add ecx, 0x3bdd395b
add ecx, eax
sub ecx, 0x3bdd395b
push 0x8caead0
mov dword [esp], esi
mov esi, 0x7dda7a19
add ecx, esi
pop esi
sub ecx, 0x77f641ae
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push eax
mov eax, esp
push ebx
mov ebx, 0x4fff3240
inc ebx
shr ebx, 3
neg ebx
add ebx, 0x9ffe64c
add eax, ebx
pop ebx
add eax, 4
xchg dword [esp], eax
pop esp
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x695419
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x68584c
jne 0x66e8bf
jmp 0x637655
push ecx
mov dword [esp], 0x3bf88fa3
mov dword [esp], eax
push eax
mov eax, 0x384cbe61
mov dword [esp + 4], eax
pop eax
mov dword [esp], eax
sub esp, 4
mov dword [esp], esi
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
pop eax
push 0x2883e12c
mov dword [esp], ebx
mov ebx, esp
push edx
mov edx, 4
add ebx, edx
pop edx
add ebx, 4
xchg dword [esp], ebx
pop esp
lea ecx, [eax + edx + 0x4c88a8]
jmp 0x6f9525
cmp esi, eax
jmp 0x677722
xor ecx, ecx
push edi
push esp
mov edi, dword [esp]
add esp, 4
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], eax
push edi
mov dword [esp], 0x42604eb
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
mov eax, dword [esp]
push eax
mov eax, esp
push edi
mov dword [esp], esi
mov esi, 0x2e3b8797
inc esi
shl esi, 6
add esi, 0x5aff8b97
neg esi
xor esi, 0x161e8e6d
add eax, esi
pop esi
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
jmp 0x61a3e0
sub esp, 4
mov dword [esp], edx
push edx
push ebx
mov dword [esp], 0x4c8a98
pop edx
mov dword [esp + 4], edx
pop edx
push edi
mov edi, esp
push eax
mov eax, 0x3f67b485
xor eax, 0x3f67b481
add edi, eax
pop eax
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], eax
mov dword [esp], 0x21ff8071
mov dword [esp], ecx
sub ecx, 0x7fefddaf
add ecx, eax
push edi
push esi
mov esi, 0x7ea7caac
add esi, 0x33ffff27
neg esi
not esi
sub esi, 1
push edi
mov edi, 0x1f4d5f84
or edi, 0x5ffe9b91
and edi, 0x7ffbb21c
xor edi, 0x6d52d70f
sub esi, edi
pop edi
mov edi, esi
pop esi
sub edi, 0xea707
add ecx, edi
pop edi
push dword [esp]
pop ecx
push edi
mov edi, esp
add edi, 4
push 0x63da3609
mov dword [esp], ebp
mov ebp, 4
add edi, ebp
pop ebp
xchg dword [esp], edi
pop esp
jmp 0x649dfd
push ebp
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push edx
mov dword [esp], ecx
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
push dword [esp]
pop eax
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov dword [esp], ebx
mov dword [esp], eax
pop dword [0x4c8e6c]
push 0x17119394
mov dword [esp], ebx
mov dword [esp], ecx
push edx
mov edx, 0x7811a088
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
sub ecx, 0x7ff71399
add ecx, 0x5a61c844
push eax
mov eax, 0x74ffe83d
add eax, 0xffffffff
xor eax, 0x23002587
sub ecx, eax
pop eax
add ecx, eax
add ecx, 0x57ffcdbb
sub ecx, 0x5a61c844
add ecx, 0x7ff71399
mov ecx, dword [esp]
push edx
push esp
pop edx
add edx, 4
push ebx
mov ebx, 4
add edx, ebx
pop ebx
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x61908a
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x77c84c8b
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
push dword [esp]
pop ebx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
jmp 0x594eb4
pop dword [0x4c5030]
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
push edi
push 4
pop edi
add esi, edi
pop edi
xchg dword [esp], esi
pop esp
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
mov esp, dword [esp]
jmp 0x5cbab2
sub esp, 4
mov dword [esp], ebp
push ebx
mov ebx, 0x4c8a98
mov dword [esp + 4], ebx
push dword [esp]
pop ebx
add esp, 4
push ebp
mov dword [esp], ecx
push ebp
mov ebp, 0x138c904c
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], edx
push esi
mov dword [esp], 0x350d9642
mov dword [esp], ecx
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop edx
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
push esi
mov esi, 0x39cdef61
shl esi, 4
dec esi
dec esi
sub esi, 0x48fd2d25
sub esi, 0x53e1c8e5
add edi, esi
pop esi
xchg dword [esp], edi
pop esp
jmp 0x57fc5e
cmp ecx, dword [ebp - 0x1c]
jmp 0x5ce874
mov dx, word [ecx]
jmp 0x5e3e69
push ecx
mov ecx, esp
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ecx
mov dword [esp], edx
push 0x7692c99e
mov dword [esp], edx
mov dword [esp], 0x21d5cd52
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
push ebx
mov ebx, 4
add ebp, 0x3b815fa8
add ebp, ebx
sub ebp, 0x3b815fa8
pop ebx
xchg dword [esp], ebp
pop esp
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x5ca0a7
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], esi
mov dword [esp], 0x3d68ac62
mov dword [esp], ebx
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
mov dword [esp], 0xed669f5
mov dword [esp], ecx
pop ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
push esi
mov esi, 4
add ebp, esi
pop esi
add ebp, 4
xchg dword [esp], ebp
pop esp
push ecx
mov ecx, 0x3c
sub ecx, 0x5ccd8bb7
add ecx, edx
push edx
mov edx, 0x5ccd8bb7
add ecx, edx
pop edx
push edx
mov edx, 0
add edx, ecx
add eax, dword [edx]
mov edx, dword [esp]
add esp, 4
pop ecx
jmp 0x58218d
sub esp, 4
mov dword [esp], esi
push eax
push edx
mov dword [esp], 0x4c88b8
pop eax
mov dword [esp + 4], eax
pop eax
push edx
push esp
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], edx
push 0x507d25b8
mov dword [esp], ecx
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov edx, dword [esp]
push 0x66bc8b96
mov dword [esp], ebx
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x69eead
push edx
mov edx, esp
add edx, 4
push edi
mov edi, 4
sub edx, edi
pop edi
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push dword [ebp - 8]
push dword [esp]
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
jmp 0x5b0d91
sub esp, 4
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x6204a9d7
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
push eax
mov eax, 0x6fbfd203
sub ecx, 0x27fd0a68
sub ecx, eax
push ebx
push 0x7dfdc332
pop ebx
and ebx, 0x1f5b68e0
sub ebx, 0xf55c35b8
add ecx, ebx
pop ebx
pop eax
add ecx, eax
add ecx, 0x6fbfd203
push dword [esp]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
push ebx
push 0x488e0515
mov dword [esp], eax
push 0x4c8a98
pop eax
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
jmp 0x5b3cc4
push edi
push ebp
mov ebp, 0x3e79034
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edi
mov dword [esp], 0x4f656eb
mov dword [esp], ecx
add ecx, 0x6f37a15c
push edx
mov edx, 0x4fffd510
xchg edx, ebp
not ebp
xchg edx, ebp
dec edx
xor edx, 0x7bbbfcab
shr edx, 1
xor edx, 0x1832a975
sub ecx, edx
pop edx
sub ecx, 0x3ffb54d0
add ecx, eax
add ecx, 0x3ffb54d0
add ecx, 0x7def4257
sub ecx, 0x6f37a15c
push dword [esp]
push dword [esp]
pop ecx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
push edi
mov dword [esp], eax
mov eax, 0x66be0b06
add eax, 0x5fbf174b
push ebp
mov ebp, 0xc67d2259
xor eax, ebp
pop ebp
push 0x33bc0109
mov dword [esp], eax
pop dword [ebp - 8]
pop eax
jmp 0x66671e
push ebx
mov dword [esp], edi
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], ebx
push ecx
mov dword [esp], 0x267339d1
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], ecx
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
push 0x34d2b02b
mov dword [esp], ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
push 0x40855a32
mov dword [esp], edx
push 0x5e7f739b
pop edx
shr edx, 2
not edx
or edx, 0x7b2ff0dc
shl edx, 3
xor edx, 0xac942049
add ecx, 0x7f27a07d
sub ecx, edx
sub ecx, 0x7f27a07d
pop edx
add ecx, eax
add ecx, 0x77ebbea1
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
jmp 0x610fb0
push edx
push 0x706d6f63
mov edx, dword [esp]
add esp, 4
mov dword [0x4c88ba], edx
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push ebp
mov ebp, esp
add ebp, 4
push esi
mov esi, 4
sub ebp, esi
pop esi
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], edx
push esi
mov dword [esp], ecx
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop edx
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 4
add eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
jmp 0x577494
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov dword [esp], ebx
mov dword [esp], edx
mov dword [esp], ebx
push 0x2c4d6846
mov dword [esp], ecx
push dword [esp]
pop ebx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov ebx, dword [esp]
push 0x6b5469ac
mov dword [esp], eax
mov eax, esp
push ebx
push 4
pop ebx
add eax, ebx
pop ebx
add eax, 4
xchg dword [esp], eax
pop esp
push 0x769298e5
mov dword [esp], edx
mov dword [esp], esi
push ebx
mov ebx, 0x6e575d7f
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
push edx
push esp
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
mov dword [esp], ecx
sub ecx, 0x7ffecb88
add ecx, 0x2ffbbe84
add ecx, eax
push eax
mov eax, 0x2ffbbe84
sub ecx, eax
push dword [esp]
pop eax
add esp, 4
add ecx, 0x7ffecb88
push dword [esp]
pop ecx
push edi
mov edi, esp
add edi, 4
push edx
mov edx, 4
add edi, edx
pop edx
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0x648533