Function at 0xaf7a92
Capabilities:
Accept command line arguments

Disassembly:
push ebx
push ebx
mov ebx, 0x934199d
mov dword [esp + 4], ebx
push dword [esp]
pop ebx
add esp, 4
mov dword [esp], ecx
sub ecx, 0x573164d4
add ecx, 0x2fad7000
add ecx, eax
push ebp
mov ebp, 0x2fad7000
sub ecx, ebp
mov ebp, dword [esp]
add esp, 4
push ebp
mov ebp, 0x573164d4
add ecx, ebp
pop ebp
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push eax
mov dword [esp], esi
push edi
mov edi, 0x1fe60266
mov dword [esp + 4], edi
pop edi
mov dword [esp], ebp
mov dword [esp], edx
push edx
mov edx, esp
push ebx
mov ebx, 4
add edx, ebx
pop ebx
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0xb8c411
push 0x4254e2e5
mov dword [esp], edx
push eax
mov dword [esp], esi
mov esi, 0x57335a92
mov dword [esp + 4], esi
pop esi
mov dword [esp], edx
push 0x3581d9a
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
mov edx, dword [esp]
push eax
mov dword [esp], 0x668c3557
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push 0x6ae543a4
mov dword [esp], ebx
push esi
mov dword [esp], 0x3c
pop ebx
sub ebx, 0x2fcb47b0
add ebx, ecx
add ebx, 0x2fcb47b0
add edx, dword [ebx]
pop ebx
push ecx
mov dword [esp], esi
push edi
mov dword [esp], ebx
mov ebx, 0x1a9d4454
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebx
push ebx
push esp
pop ebx
add ebx, 4
push ecx
mov ecx, 4
sub ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push edx
mov dword [esp], esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0xb8abd1
push 0x45c3172c
mov dword [esp], edi
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x7be54f9a
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
push ebx
mov dword [esp], 0x16e459f0
mov dword [esp], ecx
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov edx, dword [esp]
push esi
mov esi, esp
push eax
mov eax, 0x2ff9ac32
sub eax, 0x2ff9ac2e
add esi, 0x6d596f5d
add esi, eax
sub esi, 0x6d596f5d
pop eax
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push dword [ebp - 4]
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0xb6c942
jne 0xb726da
jmp 0xb548bf
jmp 0xb66b69
jmp 0xb66b69
jmp 0xbaf590
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edi
mov dword [esp], 0x2db60dc6
mov dword [esp], ecx
pop dword [0x65b020]
push edi
push esi
mov esi, 0x72ae175b
mov dword [esp + 4], esi
mov esi, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], eax
push edi
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xb4826c
push ecx
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], esi
mov dword [esp], edx
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push eax
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push ebp
mov dword [esp], ebx
mov ebx, esp
push esi
mov esi, 0x5eebbbab
dec esi
sub esi, 0x5fff7b0e
sub esi, 0x75ed6bfc
sub esi, 0x88fed49c
add ebx, esi
pop esi
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebp
mov dword [esp], ecx
push eax
push ebx
mov dword [esp], 0x2dceeec6
mov dword [esp], ebp
mov ebp, 0x1fee1663
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
push ebp
push 0x5eff1a5e
pop ebp
add ecx, ebp
pop ebp
sub ecx, 0x66bfe2be
add ecx, eax
push ebp
mov ebp, 0x5c5fe457
or ebp, 0x2cdf8bdb
xor ebp, 0x3a4b763d
not ebp
shr ebp, 1
sub ebp, 0xf5f5d050
add ecx, ebp
pop ebp
sub ecx, 0x5eff1a5e
push dword [esp]
pop ecx
push ebx
mov ebx, esp
push esi
mov esi, 0x7e9d5c83
inc esi
not esi
inc esi
and esi, 0x7aee9af7
sub esi, 0x628270
add ebx, esi
pop esi
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
jmp 0xb9c681
push edi
mov edi, 0x6ff9bf28
push edi
mov dword [esp], eax
mov eax, 0x7e7a4c6d
and eax, 0x3ddfb0b2
add eax, 0xca32cb3b
xor edi, eax
pop eax
mov dword [0x65bace], edi
mov edi, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push eax
mov eax, esp
add eax, 4
push edi
push 0x7dfbaf5a
pop edi
xor edi, 0x7d77e5fc
neg edi
not edi
shl edi, 6
sub edi, 0x2312a93c
sub eax, edi
pop edi
xchg dword [esp], eax
pop esp
mov dword [esp], edi
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push eax
mov eax, esp
push ebx
mov ebx, 4
add eax, ebx
pop ebx
push edx
mov edx, 4
add eax, edx
pop edx
xchg dword [esp], eax
pop esp
push dword [esp]
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
jmp 0xb3176e
push ebx
push edi
push 0x68889d3b
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
push 0x257adbb
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop edx
push eax
mov eax, esp
push edx
mov edx, 0x6af65ea3
inc edx
sub edx, 0x66df577e
xor edx, 0x4170722
add eax, edx
pop edx
push ecx
mov ecx, 4
add eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
push dword [0x85cf40]
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xb09728
push dword [ebp - 0x14]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0xb77390
push 0x73608bc7
mov dword [esp], ebx
mov ebx, 0xa
push ebx
pop dword [ebp - 0x14]
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push edi
mov edi, esp
add edi, 4
sub edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push ecx
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
push edi
mov edi, 4
add edx, edi
pop edi
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
jmp 0xb62ba2
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push ebp
mov ebp, esp
add ebp, 4
push ebx
push 4
pop ebx
sub ebp, 0x2fcf8f54
sub ebp, ebx
add ebp, 0x2fcf8f54
pop ebx
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
push 0x5f45bb4a
mov dword [esp], ecx
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov ebx, dword [esp]
push edi
push ecx
mov dword [esp], esp
add dword [esp], 4
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0xb2883e
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 0x3fffccba
shl edx, 6
not edx
sub edx, 0xcd17b
sub ebx, edx
pop edx
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ecx
push ebp
mov ebp, 0x7f2de5ad
shl ebp, 1
add ebp, 0x7c7e03cc
dec ebp
xchg ebp, edi
xchg edi, eax
not eax
xchg edi, eax
xchg ebp, edi
sub ebp, 0x5406ec0
sub ecx, 0x7afe28c3
sub ecx, ebp
add ecx, 0x7afe28c3
pop ebp
add ecx, eax
add ecx, 0x7fe5c21a
mov ecx, dword [esp]
push eax
push esp
mov eax, dword [esp]
add esp, 4
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
push dword [0x65bd6c]
push dword [esp]
pop esi
push edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], esi
mov dword [esp], edx
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebp
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
push esi
mov esi, 0x7eff112d
shr esi, 8
push ebp
mov ebp, 0x757f8a1d
add esi, ebp
pop ebp
shr esi, 5
xor esi, 0x3aff44d
add edx, esi
pop esi
xchg dword [esp], edx
pop esp
jmp 0xbaa34d
je 0xb1c5a0
jmp 0xaee37a
je 0xb2d35d
jmp 0xaee384
and ecx, edx
jmp 0xb9bf7d
push dword [ebp - 0x18]
mov ecx, dword [esp]
push esi
mov dword [esp], 0x37e1472a
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0xb2e4ac
push 0x55457d75
mov dword [esp], edi
mov edi, esp
push esi
mov esi, 4
add edi, esi
mov esi, dword [esp]
add esp, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], eax
push 0x12c94ed6
mov dword [esp], ebp
mov dword [esp], 0x3001d200
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
xor eax, eax
jmp 0xb2be7a
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0xb6ac1b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xb65983
push eax
mov dword [esp], 0x41df7f6a
mov dword [esp], ebp
push edi
push 0x65bca8
pop edi
mov dword [esp + 4], edi
pop edi
push 0x659f7dbe
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push esi
mov esi, 0xedb02ae
add esi, 0x5fcfa64f
xor esi, 0x37ed53e3
shr esi, 8
shl esi, 4
xor esi, 0x5947fb4
sub ebp, esi
pop esi
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
jmp fcn.00b25b1f
push edx
push edx
push 0x3d66672d
pop edx
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
push ecx
mov ecx, 0x7ebf6b2c
not ecx
sub ecx, 0x814094cf
add ebx, ecx
mov ecx, dword [esp]
add esp, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
mov eax, dword [esp]
push edi
mov edi, esp
push ecx
push 0x539ecb60
pop ecx
sub ecx, 0x7ff7584d
or ecx, 0x56c74e33
neg ecx
not ecx
shl ecx, 2
sub ecx, 0x5f9dfcc4
sub edi, 0x6f4ea39a
add edi, ecx
add edi, 0x6f4ea39a
pop ecx
add edi, 4
xchg dword [esp], edi
pop esp
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push edx
push esp
pop edx
add edx, 4
push edi
mov edi, 4
sub edx, edi
pop edi
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], eax
push esi
mov dword [esp], ebx
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xb02bd7
push 0x2907bcfb
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push edi
mov edi, 4
sub ebx, edi
mov edi, dword [esp]
add esp, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
push dword [esp]
pop eax
push eax
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push dword [ebp - 0x18]
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
push edi
push esp
pop edi
push ebx
mov ebx, 0x75ad2907
or ebx, 0x7ef88749
or ebx, 0x5ea9bda9
add ebx, 0x80024015
add edi, ebx
pop ebx
push ecx
mov ecx, 4
sub edi, ecx
pop ecx
xchg dword [esp], edi
pop esp
mov dword [esp], eax
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
mov eax, dword [esp]
push edx
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push eax
mov eax, 4
add ecx, eax
pop eax
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0xb1fc49
add esp, 4
jmp 0xb6597c
mov ax, word [edx]
jmp 0xb3a82f
push eax
push edx
mov edx, 0x5dad717f
mov dword [esp + 4], edx
pop edx
mov dword [esp], edi
mov dword [esp], 0x1ab652e
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push ecx
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
mov eax, dword [esp]
add esp, 4
pop dword [esp]
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
jmp 0xbb04d6
push dword [ebp - 0x18]
push dword [esp]
pop edx
push edx
mov edx, esp
push esi
mov esi, 4
add edx, esi
pop esi
add edx, 4
xchg dword [esp], edx
pop esp
push edi
mov dword [esp], ecx
push esi
mov esi, 0x1b690a24
mov dword [esp + 4], esi
pop esi
mov dword [esp], esi
mov dword [esp], eax
push ebx
mov eax, dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0xae9b55
push ecx
mov cl, 0x2f
not cl
shr cl, 1
dec cl
not cl
push edx
mov dh, 0x39
and dh, 0xe4
add dh, 0x2f
dec dh
sub dh, 0x77
or cl, dh
pop edx
dec cl
push 0x1c1edab9
mov dword [esp], eax
mov ah, 0xe3
or ah, 0x7a
inc ah
xor ah, 0x2b
sub cl, ah
pop eax
or al, cl
pop ecx
jmp 0xb7d5e9
sub esp, 4
mov dword [esp], edi
push eax
mov eax, 0x66cf2a34
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], ebx
push 0x453198d7
mov dword [esp], eax
mov dword [esp], edx
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push ecx
mov ecx, esp
push esi
mov esi, 4
add ecx, esi
pop esi
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
xchg dword [esp], ecx
pop esp
sub esp, 4
mov dword [esp], ecx
mov dword [esp], ebx
push 0x6c6c642e
pop ebx
mov dword [0x65bad2], ebx
mov ebx, dword [esp]
add esp, 4
jmp 0xb06a16
push edi
mov dword [esp], esi
push 0x4b9d0599
pop esi
push ebp
mov ebp, 0x4b9cf599
sub esi, ebp
pop ebp
sub edx, esi
mov esi, dword [esp]
add esp, 4
push edx
push esp
pop edx
add edx, 4
sub edx, 4
push edi
mov dword [esp], edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], ebx
push edi
push esp
pop edi
add edi, 4
sub edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], ecx
pop ebx
push dword [esp]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0xb77480
push eax
mov eax, esp
push ecx
mov ecx, 4
add eax, ecx
pop ecx
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
mov dword [esp], edx
pop dword [0x85cf38]
jmp 0xaf18e9
cmp eax, dword [ebp - 0x1c]
jmp 0xb0c21d
mov cx, word [eax]
jmp 0xb8824f
push 0x23c2f361
mov dword [esp], ebx
mov dword [esp], eax
mov dword [esp], 0x198586aa
mov dword [esp], eax
pop dword [ebp - 0x18]
push 0x38a10b85
mov dword [esp], ebp
push eax
mov dword [esp], ebx
mov ebx, 0x27b2e70e
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebx
push 0x657a7b82
mov dword [esp], ecx
mov ebx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 4
add ebx, edx
pop edx
xchg dword [esp], ebx
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edx
mov edx, esp
push ebx
mov ebx, 0x33ff111d
neg ebx
add ebx, 0x379e1f7a
and ebx, 0x25f7f5f3
inc ebx
sub ebx, 0x197044e
add edx, ebx
pop ebx
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xb3c176
push dword [ebp - 0x10]
push dword [esp]
pop ecx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0xafbbce
sub esp, 4
mov dword [esp], edi
push 0x1944350a
mov dword [esp], edx
mov edx, 0x65bca8
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
jmp 0xb0957b
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
mov dword [esp], ebp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ebp
mov dword [esp], ecx
mov ebx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
add esp, 4
push edi
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edx
push 0x65bca8
pop edx
mov dword [esp + 4], edx
pop edx
push 0x7249977f
mov dword [esp], ebx
mov ebx, esp
push eax
mov eax, 0x6ef3eb7c
not eax
add eax, 0x2f7d1f4b
add eax, 0x6bffee06
dec eax
add eax, 0xd376de31
add ebx, eax
pop eax
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], ecx
add ecx, 0x6c3dbbe2
add ecx, 0x69176602
sub ecx, 0x2bbd22ec
add ecx, eax
add ecx, 0x2bbd22ec
sub ecx, 0x69176602
push edi
mov edi, 0x78fd6b8a
push edx
mov edx, 0x6de99d4c
sub edx, 0x7aa94cf4
add edi, edx
pop edx
sub ecx, edi
pop edi
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0xae9a96
push eax
mov dword [esp], 0x645df6bf
mov dword [esp], ecx
mov dword [esp], ebx
mov dword [esp], ecx
mov dword [esp], ebx
push ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
xor edx, edx
push esi
push esp
pop esi
push edx
mov edx, 4
add esi, edx
pop edx
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], eax
push 0x6b49b6e0
mov dword [esp], esi
mov dword [esp], 0x37e2d0b1
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0xbabd54
je 0xb66b69
jmp 0xb295be
sub esp, 4
mov dword [esp], ebp
mov dword [esp], edx
push esp
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
push edx
mov dword [esp], ecx
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
add esp, 4
jmp dword [eax + 0xa5df58]
push edi
push 0x7ddf6707
pop edi
or edi, 0x77fbb21f
inc edi
push ecx
mov ecx, 0x4c7baabe
and edi, ecx
mov ecx, dword [esp]
add esp, 4
push edx
mov edx, 0x61cf876f
shr edx, 3
sub edx, 0x943a0d80
and edi, edx
pop edx
xor edi, 0x447ba228
mov dword [ebp - 8], edi
pop edi
jmp 0xb48140
test eax, eax
jmp 0xb528c7
cmp esi, eax
jmp 0xaed6f1
cmp dword [ebp - 0x10], 0x1000000
jmp 0xb66b81
ja 0xb821de
jmp 0xbaf590
jae 0xb3c19b
jmp 0xb8b694
push dword [ebp - 0x18]
push dword [esp]
push dword [esp]
pop edx
add esp, 4
add esp, 4
push edx
mov dword [esp], esi
mov esi, esp
push edx
mov edx, 0x5dfbd5e0
or edx, 0x6d7c24b6
shr edx, 6
add edx, 0xfe08002d
add esi, edx
pop edx
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], ebx
push ebx
mov dword [esp], 0x7986859d
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0xb32918
push ecx
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
sub ecx, 0x79fd78c4
add ecx, eax
push edi
mov edi, 0x7aeedb14
and edi, 0x7f7f51ad
push eax
mov eax, 0x5ff387c9
shl eax, 4
xchg ebp, eax
not ebp
xchg ebp, eax
shr eax, 8
add eax, 0x4ed532ad
or edi, eax
mov eax, dword [esp]
add esp, 4
add edi, 0x5fef8846
add edi, 0x7dbee865
xor edi, 0x2553131b
add ecx, edi
pop edi
push dword [esp]
pop ecx
push ebp
mov ebp, esp
push edx
mov edx, 0x5ffe20e1
neg edx
xor edx, 0x6f4d9342
push edi
mov edi, 0x6ff7226a
sub edx, edi
pop edi
xor edx, 0x78fb6552
sub edx, 0x27ae4c9d
add ebp, edx
pop edx
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [0x65b028]
mov eax, dword [esp]
push ebp
mov ebp, esp
push ebx
mov ebx, 4
add ebp, ebx
pop ebx
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push ebp
push esp
pop ebp
push ebx
mov ebx, 0x76fe8a58
shl ebx, 8
dec ebx
or ebx, 0x73e378c5
not ebx
sub ebx, 0x147ffc
sub ebp, 0x1cf66295
add ebp, ebx
add ebp, 0x1cf66295
pop ebx
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
push edx
mov dword [esp], 0x47de1cf4
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ecx
mov ecx, esp
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xb2e524
push esi
mov esi, esp
add esi, 4
push ebp
mov ebp, 0xf3e191f
sub ebp, 0x3fffc462
not ebp
push ecx
mov ecx, 0x65e728cd
xor ecx, 0x7b77a709
sub ecx, 0x7af285c6
or ecx, 0x5e7c818b
shr ecx, 8
xor ecx, 0x68023eb0
and ebp, ecx
pop ecx
add ebp, 0xdf3e8004
sub esi, ebp
mov ebp, dword [esp]
add esp, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
push 0x3549a8b6
mov dword [esp], edi
mov edi, 0x7dff77a5
sub ecx, edi
pop edi
add ecx, eax
push ecx
mov dword [esp], edi
mov edi, 0x7dff77a5
add ecx, edi
pop edi
mov ecx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push edx
mov dword [esp], ebp
push edx
push 0x65bca8
pop edx
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
jmp 0xb293d0
xor ecx, ecx
push eax
mov eax, esp
add eax, 4
push ebx
mov ebx, 0x6757d491
sub ebx, 0x6757d48d
sub eax, ebx
pop ebx
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov dword [esp], 0x6b45b493
mov dword [esp], edx
push ebp
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
push dword [esp]
pop edx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
jmp 0xb3a837
push edi
push esp
pop edi
add edi, 4
push esi
mov esi, 4
sub edi, esi
pop esi
xchg dword [esp], edi
pop esp
mov dword [esp], eax
push ecx
mov dword [esp], edi
mov dword [esp], 0x7bbfb58b
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
mov eax, dword [esp]
push 0x1516093
mov dword [esp], eax
mov eax, esp
push esi
mov esi, 0x5bff7053
shl esi, 1
shr esi, 6
sub esi, 0x2dffb7e
add eax, esi
pop esi
push edx
mov edx, 4
add eax, edx
pop edx
xchg dword [esp], eax
pop esp
push edx
mov edx, 0x706d6f63
sub esp, 4
mov dword [esp], edx
pop dword [0x65baca]
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xaffef9
lea eax, [edx + ecx + 0x65bab8]
push ebx
mov dword [esp], ecx
mov dword [esp], ebx
mov dword [esp], eax
push ecx
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
mov eax, dword [esp]
push edx
mov dword [esp], ecx
push 0x5246d149
mov dword [esp], esp
add dword [esp], 4
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp fcn.00b506b4
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
mov dword [esp], 0x5766904b
mov dword [esp], edx
pop dword [ebp - 0x10]
push ebp
mov dword [esp], 0x672dcb03
mov dword [esp], esi
push eax
mov eax, 0x388bdd50
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
push 0xccef0e7
mov dword [esp], ecx
mov edx, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xb8a0ee
imul edx, eax
jmp 0xb829c4
sub esp, 4
mov dword [esp], esi
push edx
push 0x6d827275
pop edx
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
add ecx, 0x77dcbde0
add ecx, eax
push edi
mov dword [esp], eax
mov eax, 0x6efbed45
shl eax, 8
push edi
mov edi, 0x84108720
sub eax, edi
pop edi
sub ecx, 0x73daa300
sub ecx, eax
add ecx, 0x73daa300
pop eax
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
xchg dword [esp], ebx
mov esp, dword [esp]
push dword [ebp - 0x10]
push dword [esp]
pop edx
push ecx
mov ecx, esp
push ebx
mov ebx, 0x78df99c3
add ebx, 0x73fa01e7
neg ebx
add ebx, 0x35b7fd51
or ebx, 0x1bf9d4b7
xor ebx, 0x5bfff5b3
add ecx, ebx
pop ebx
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xb31a16
push dword [0x65b024]
mov ecx, dword [esp]
push eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 0x4fd7267e
shl ecx, 3
xor ecx, 0x7eb933f4
add eax, ecx
pop ecx
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0xb1914a
cmp ecx, dword [ebp - 0xc]
jmp 0xb0c228
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebp
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push edx
mov edx, 4
add ebp, edx
pop edx
xchg dword [esp], ebp
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [ebp - 0x10]
mov eax, dword [esp]
push edi
mov edi, esp
push edx
mov edx, 4
add edi, edx
pop edx
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push ebx
mov dword [esp], edi
push edi
mov edi, 0x71a5008c
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
push ecx
mov ecx, 4
sub edx, 0x7e2a9d85
add edx, ecx
add edx, 0x7e2a9d85
pop ecx
xchg dword [esp], edx
pop esp
jmp 0xb3c0e8
push 0x4179c130
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], edi
mov dword [esp], edx
pop dword [ebp - 4]
jmp 0xaea13a
push edi
mov edi, esp
push esi
mov esi, 4
add edi, esi
pop esi
push esi
mov esi, 4
sub edi, esi
mov esi, dword [esp]
add esp, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edx
push eax
mov dword [esp], ecx
mov dword [esp], 0x234ad33
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
push ebp
push esp
pop ebp
push 0x16067b5
mov dword [esp], eax
mov eax, 0x3f5eeaea
add eax, 0x4e6f0d75
shr eax, 3
add eax, 0x5ff73862
add eax, 0x8e4f0897
add ebp, eax
pop eax
add ebp, 4
xchg dword [esp], ebp
pop esp
push ebx
push eax
mov dword [esp], ebp
push 0x65bca8
pop ebp
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
jmp 0xb280aa
sub esp, 4
mov dword [esp], ebx
mov dword [esp], edi
mov dword [esp], ebp
mov dword [esp], esi
mov dword [esp], ecx
push ebp
mov ebp, 0x7e7fdeea
inc ebp
shl ebp, 5
or ebp, 0x5fbee05a
xor ebp, 0xa214280c
sub ecx, ebp
mov ebp, dword [esp]
add esp, 4
add ecx, eax
push ebp
mov ebp, 0x7f5fab1d
or ebp, 0x6d5be945
xor ebp, 0x76dd23e6
add ebp, 0x76fe2ba9
neg ebp
add ebp, 0xfe6cc9da
add ecx, ebp
mov ebp, dword [esp]
add esp, 4
push dword [esp]
pop ecx
push esi
mov esi, esp
add esi, 4
push ebp
mov ebp, 0x2dcfbe26
add ebp, 0xd23041de
add esi, 0x7baf7275
add esi, ebp
sub esi, 0x7baf7275
pop ebp
xchg dword [esp], esi
pop esp
push dword [ebp - 8]
push dword [esp]
pop ecx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0xb05f1e
sub esp, 4
mov dword [esp], ebp
push ebp
mov ebp, 0x5d8901f1
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
pop dword [0x65b024]
push 0x2375d930
mov dword [esp], edi
mov edi, esp
add edi, 4
push ebx
mov ebx, 4
sub edi, ebx
pop ebx
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push 0x10b9233f
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop edx
push eax
mov eax, esp
push esi
mov esi, 4
add eax, esi
pop esi
push ecx
mov ecx, 4
add eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
jmp 0xb821de
call fcn.0044b860
jmp 0xb2be72
push edx
push 0x77d57309
mov dword [esp], ebp
mov ebp, 0x74398b13
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push eax
push esp
pop eax
add eax, 4
push edi
mov edi, 0x6f732831
xor edi, 0x6f732835
add eax, edi
pop edi
xchg dword [esp], eax
pop esp
push dword [esp]
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
push ebp
mov ebp, 0x7fc680f5
xor ebp, 0x577b2f10
shl ebp, 5
not ebp
sub ebp, 0xe84a035b
add edx, ebp
pop ebp
xchg dword [esp], edx
pop esp
add esp, 4
push ebp
mov dword [esp], ecx
push 3
pop ecx
add ecx, eax
push eax
push 0
pop eax
add eax, ecx
xor esi, dword [eax]
pop eax
pop ecx
push ebp
mov dword [esp], edi
mov dword [esp], 0x78471ded
mov dword [esp], esi
mov dword [esp], ecx
push ebx
mov dword [esp], edx
mov edx, 0x77dd8901
not edx
add edx, 0x8638f741
sub ecx, edx
pop edx
push edi
mov edi, 0x787a9bb1
add ecx, edi
pop edi
add ecx, eax
sub ecx, 0x787a9bb1
add ecx, 0xe5b6e3f
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
push eax
mov eax, 0x7bdf4adb
and eax, 0x6f7ca137
not eax
and eax, 0x7ff18b6d
and eax, 0x7bfa1c02
push ebx
mov ebx, 0x7fe76a2a
shl ebx, 6
shl ebx, 3
not ebx
dec ebx
xor ebx, 0x218ba3fa
xor eax, ebx
pop ebx
add ecx, eax
pop eax
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xb280b5
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], ecx
add ecx, 0x7f7ffac4
add ecx, 0x3bbb87d7
add ecx, eax
push edx
push 0x7fbd6cf8
pop edx
neg edx
xor edx, 0x7f8eb2b1
push eax
mov eax, 0x7d0362de
xor eax, 0x4f7fd395
sub eax, 0xe58c0021
and edx, eax
pop eax
xor edx, 0x777ba6ff
sub ecx, edx
pop edx
sub ecx, 0x7f7ffac4
push dword [esp]
pop ecx
push edx
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov dl, byte [0x65b033]
sub esp, 4
mov dword [esp], ebp
push eax
mov eax, 0x4fd574c
mov dword [esp + 4], eax
pop eax
mov dword [esp], esi
mov dword [esp], eax
push ecx
mov dword [esp], ebx
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
push dword [esp]
pop eax
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xb69fcb
cmp dword [0xa5df58], 0x23f0
jmp 0xb66b8c
push 0xf528840
mov dword [esp], edx
push ecx
mov ecx, 0x2976bbfa
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], edx
push ebp
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
push eax
mov dword [esp], edx
mov dword [esp], eax
mov eax, 4
add edx, eax
pop eax
xchg dword [esp], edx
pop esp
push edx
mov dword [esp], edi
mov dword [esp], 0xab2cea
mov dword [esp], eax
pop dword [0x85cf40]
jmp 0xb68a76