Function at 0xab3dcc
Capabilities:
Accept command line arguments

Disassembly:
je 0xaf6b56
jmp 0xad6257
je 0xaae91a
jmp 0xaf6c36
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
mov dword [esp], 0x5270cff0
mov dword [esp], ecx
pop edx
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp dword [eax + 0xa4adc8]
push eax
mov eax, 5
add eax, edx
push ecx
push 0
pop ecx
add ecx, eax
push ebx
mov ebx, 0
add ebx, ecx
xor esi, dword [ebx]
pop ebx
mov ecx, dword [esp]
add esp, 4
pop eax
jmp 0xadaec0
push ecx
mov dword [esp], esi
push esi
mov esi, 0x345328da
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], ebx
push esi
mov esi, esp
add esi, 4
push eax
mov eax, 4
sub esi, eax
pop eax
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
push eax
mov eax, 4
add edi, eax
pop eax
xchg dword [esp], edi
pop esp
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
jmp 0xad5b74
push 0x71cea6ff
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push 0x18577d4c
mov dword [esp], edi
mov edi, 4
add ebp, edi
pop edi
xchg dword [esp], ebp
mov esp, dword [esp]
push dword [ebp - 0x10]
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 4
add ebx, edx
pop edx
xchg dword [esp], ebx
mov esp, dword [esp]
push esi
mov esi, esp
add esi, 4
push edx
push 0x6e772337
pop edx
neg edx
dec edx
sub edx, 0x6ff52839
push eax
mov eax, 0x7ff7ba13
sub eax, 0xa18b6e9e
add edx, eax
pop eax
sub esi, edx
pop edx
xchg dword [esp], esi
pop esp
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
push dword [esp]
pop eax
push ebp
mov ebp, esp
push esi
mov esi, 4
add ebp, esi
mov esi, dword [esp]
add esp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xadd1d1
push edi
mov dword [esp], 0x40aed2f0
mov dword [esp], edi
push ebp
mov ebp, 0x64ac98
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], eax
mov dword [esp], esi
mov dword [esp], ebx
push edi
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop ebx
push edi
mov edi, esp
push ebp
mov dword [esp], ebx
mov ebx, 4
add edi, ebx
pop ebx
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xafd776
push ebx
push ecx
mov ecx, 0x70277830
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], ebp
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 4
add ebx, ebp
mov ebp, dword [esp]
add esp, 4
xchg dword [esp], ebx
pop esp
mov edx, dword [esp]
push edx
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ecx
mov dword [esp], ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push ecx
sub esp, 4
mov dword [esp], edx
mov edx, 0x68bee77a
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], eax
push ebp
mov dword [esp], 0x72d7986c
mov dword [esp], edi
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
mov eax, dword [esp]
sub esp, 4
mov dword [esp], edi
push ebp
mov dword [esp], esp
add dword [esp], 4
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xad2444
push eax
mov dword [esp], ecx
push eax
mov eax, 0x6d24a910
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], edx
push edi
mov dword [esp], ecx
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push dword [esp]
pop edx
push edx
push esp
pop edx
push edi
mov edi, 4
add edx, edi
pop edi
add edx, 4
xchg dword [esp], edx
pop esp
xor ecx, ecx
jmp 0xaf0db5
push ecx
push 0x401f8491
mov dword [esp], ecx
mov ecx, 0x6bb82e0d
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], edi
mov dword [esp], edx
push 0x1fc9bc75
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
mov edx, dword [esp]
push edx
push esp
pop edx
add edx, 4
push esi
mov esi, 4
add edx, esi
pop esi
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
push esi
push esp
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edx
mov dword [esp], eax
pop dword [ebp - 0x10]
jmp 0xaee606
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0xaf2ca7
mov al, byte [0x64aac1]
jmp 0xaff1ed
push ebp
mov dword [esp], edx
mov dword [esp], 0x2f7c3512
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push ecx
mov ecx, 0x77fd9a36
add ecx, 0x5abf0f8f
xor ecx, 0x287d40cc
add ecx, 0x53e16fb
add ebx, ecx
pop ecx
xchg dword [esp], ebx
mov esp, dword [esp]
push dword [esp]
pop ebx
push eax
mov eax, esp
push edx
mov edx, 0x6dfe531e
neg edx
dec edx
add edx, 0x7fd97deb
shr edx, 3
add edx, 0xfdc49aab
add eax, edx
pop edx
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push dword [ebp - 0x18]
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 0x77fbd823
xor edx, 0x7ffb9768
and edx, 0x7fec4725
neg edx
neg edx
or edx, 0x7cfb2667
push ecx
mov ecx, 0x7cbb6477
not ecx
shl ecx, 1
add ecx, 0x5dffb166
neg ecx
shr ecx, 2
sub ecx, 0xa3d92d45
add edx, ecx
pop ecx
sub ebx, edx
mov edx, dword [esp]
add esp, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edx
push ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov edx, dword [esp]
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push ecx
mov ecx, 0x3fabedd2
xor ecx, 0x3fabedd6
add ebx, ecx
pop ecx
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
jmp 0xada9af
push dword [ebp - 4]
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
add esp, 4
jmp 0xabd4a4
push ebx
mov dword [esp], ebp
push edx
mov edx, 0x64a3f993
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], eax
push edi
mov dword [esp], ebx
push dword [esp]
pop eax
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
push ecx
mov ecx, 4
add edi, 0x7cff0d95
add edi, ecx
sub edi, 0x7cff0d95
mov ecx, dword [esp]
add esp, 4
xchg dword [esp], edi
pop esp
xor edx, edx
push esi
mov dword [esp], edx
mov dword [esp], edi
mov dword [esp], ebp
mov dword [esp], edx
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
push ecx
mov ecx, esp
push eax
mov eax, 0x5fff7402
inc eax
or eax, 0x13fbf5ef
xor eax, 0x7d57efd3
and eax, 0x7ef5680f
sub eax, 0x6fdf3b99
add eax, 0x4d3f3391
add ecx, eax
pop eax
push edi
mov edi, 4
sub ecx, 0x77ff331f
add ecx, edi
add ecx, 0x77ff331f
pop edi
xchg dword [esp], ecx
pop esp
jmp 0xaecdc4
push ebx
mov dword [esp], 0x7381148d
mov dword [esp], edx
pop dword [0x64a024]
jmp 0xab3d83
push 0x3f824287
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], esi
mov dword [esp], edi
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov ebx, dword [esp]
push ebp
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [0x84ae70]
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push ebx
mov ebx, 0x77b7cdb4
inc ebx
shl ebx, 2
sub ebx, 0x56f94c1b
inc ebx
xor ebx, 0x87e5eabe
add ebp, ebx
pop ebx
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0xaccd1c
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
push ebx
mov ebx, 0x7fcf9507
add ebx, 0x72b77008
push ecx
mov ecx, 0x70fdcf48
xor ecx, 0x3fff3bce
xor ecx, 0xc3fa1b39
add ebx, ecx
pop ecx
add ecx, ebx
pop ebx
add ecx, eax
push edx
mov edx, 0x1bafe60c
shl edx, 3
shl edx, 4
neg edx
sub edx, 0xa88d0532
add ecx, 0x69dfa911
sub ecx, edx
sub ecx, 0x69dfa911
pop edx
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push 0x60520100
mov dword [esp], ebp
mov ebp, 0x7ffe6f54
inc ebp
and ebp, 0x7bad6a8f
and ebp, 0x1f4d4db5
sub ebp, 0x777f364e
sub ebp, 0x7feb4c50
sub esp, 4
mov dword [esp], edi
mov edi, 0x67ffd6e9
inc edi
xor edi, 0x6d3172e6
add ebp, edi
pop edi
mov dword [0x64aabc], ebp
mov ebp, dword [esp]
add esp, 4
jmp 0xb6223d
sub esp, 4
mov dword [esp], eax
mov eax, esp
push esi
mov esi, 4
add eax, esi
pop esi
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], eax
pop dword [0x64ae6c]
push ecx
mov dword [esp], edi
push ecx
push 0x7a779ba3
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], esi
mov dword [esp], ebx
pop eax
mov eax, dword [esp]
push esi
push esp
pop esi
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
jmp 0x4db2ca
cmp dword [ebp - 0x10], 0x1000000
jmp 0xaed343
push dword [0x64ad5c]
push dword [esp]
pop esi
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xaa63f6
push ebp
mov dword [esp], esi
mov esi, 0x78707061
mov dword [0x64aab8], esi
push dword [esp]
mov esi, dword [esp]
add esp, 4
add esp, 4
jmp 0xac0899
push dword [0x84ae70]
mov ecx, dword [esp]
push 0x13281074
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0xaf27da
push ecx
mov dword [esp], esi
mov esi, esp
add esi, 4
push edx
mov edx, 0x52bd7881
add edx, 0x3dbdb7c9
sub edx, 0x907b3046
sub esi, edx
pop edx
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
pop dword [ebp - 0x18]
jmp 0xad7dfa
push edx
mov edx, esp
push ebx
mov ebx, 4
add edx, ebx
pop ebx
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], esi
mov dword [esp], eax
pop dword [0x84ae70]
jmp 0xb08bb8
call fcn.00449a40
jmp 0xb67c2d
jmp 0xac77f0
test eax, eax
jmp 0xaed0a9
cmp esi, eax
jmp 0xaec4cc
push edi
push 0x50e5c620
mov dword [esp], esi
push edi
mov edi, 0x64aab8
mov esi, edi
mov edi, dword [esp]
add esp, 4
mov dword [esp + 4], esi
pop esi
push esi
mov dword [esp], 0x264d3aad
mov dword [esp], ecx
mov dword [esp], edx
mov dword [esp], ecx
push eax
mov eax, 0x7faf58c0
push edx
mov edx, 0x4ff2e359
xor edx, 0x5215aa6d
or eax, edx
pop edx
inc eax
not eax
add eax, 0x5ff77231
neg eax
add eax, 0x5e86f3f0
add ecx, 0x670789b2
sub ecx, eax
sub ecx, 0x670789b2
pop eax
add ecx, 0x17ffa8fa
add ecx, eax
sub ecx, 0x17ffa8fa
add ecx, 0x7e7edbb5
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0xafecac
push dword [ebp - 0x10]
push dword [esp]
push dword [esp]
pop edx
add esp, 4
add esp, 4
jmp 0xad81e8
sub al, 0x6e
mov dword [esp], edi
mov edi, 0x5eb75ddd
push ecx
mov ecx, 0x7fff7ca9
sub edi, ecx
pop ecx
shl edi, 6
xor edi, 0xda06312f
sub ecx, edi
pop edi
sub ecx, 0x6dd6af24
add ecx, eax
add ecx, 0x6dd6af24
add ecx, 0x77fe7c2f
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
and edx, eax
jmp 0xabd700
sub esp, 4
mov dword [esp], esi
mov dword [esp], ebx
mov dword [esp], ebp
mov dword [esp], edx
jmp 0xad624d
push edx
mov edx, esp
add edx, 4
push ebx
mov ebx, 4
sub edx, ebx
mov ebx, dword [esp]
add esp, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], eax
push edx
mov dword [esp], 0x70257b53
mov dword [esp], edi
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
push ebx
mov ebx, 0x3c
sub ebx, 0x3d57b080
push ecx
mov ecx, 0xff673a7
sub ebx, ecx
pop ecx
add ebx, edx
add ebx, 0xff673a7
add ebx, 0x3d57b080
add eax, dword [ebx]
mov ebx, dword [esp]
add esp, 4
jmp 0xb5658c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xadaed6
jne 0xace140
jmp 0xaa5de7
cmp esi, eax
jmp 0xadaecb
push ecx
mov dword [esp], edi
push 0x1000
mov edi, dword [esp]
add esp, 4
sub eax, edi
mov edi, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
sub ecx, 0x5bd69e82
push edx
mov edx, 0x3b98b95
xor edx, 0x68fd452f
not edx
sub edx, 0x17ce1817
add ecx, 0x7bfc4765
sub ecx, edx
sub ecx, 0x7bfc4765
pop edx
add ecx, eax
add ecx, 0x7ced192e
push esi
mov esi, 0x5bd69e82
add ecx, esi
pop esi
push dword [esp]
pop ecx
push eax
push esp
pop eax
push edx
mov edx, 4
add eax, edx
pop edx
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xab9c54
push edx
push 0x69757473
mov edx, dword [esp]
add esp, 4
push edx
pop dword [0x64aabe]
mov edx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 4
sub ecx, edx
pop edx
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
mov dword [esp], 0xa1c868d
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ebp
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
mov edx, dword [esp]
push ebx
mov ebx, esp
push ebp
mov ebp, 0x3ebf3bdb
shr ebp, 4
shl ebp, 7
add ebp, 0xa062184
add ebx, ebp
pop ebp
push ecx
mov ecx, 0x5e7737a6
push eax
mov eax, 0x13e75622
neg eax
xor eax, 0x79ffbb08
not eax
shl eax, 2
inc eax
add eax, 0xb61382fd
sub ecx, eax
pop eax
add ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
jmp 0xae2bb9
push ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], edx
push eax
mov dword [esp], ebp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push eax
mov eax, 3
sub eax, 0x7df326d6
add eax, ecx
push edx
mov edx, 0x2fdded7e
not edx
dec edx
and edx, 0x5ecdda13
push ebp
mov ebp, 0x25d9cd15
neg ebp
add ebp, 0x3f9d40ff
add edx, ebp
pop ebp
add edx, 0x5c7714a4
add edx, 0xb7b88c48
add eax, edx
pop edx
xor esi, dword [eax]
mov eax, dword [esp]
add esp, 4
jmp 0xaec4c1
sub esp, 4
mov dword [esp], ecx
push edi
mov edi, 0x526c01c
mov dword [esp + 4], edi
pop edi
mov dword [esp], ebp
mov dword [esp], ecx
push edx
mov edx, 0x6fb71620
shr edx, 1
shr edx, 8
shr edx, 4
push 0
sub dword [esp], edx
pop edx
shr edx, 5
push eax
mov eax, 0xd0e00d02
sub edx, eax
pop eax
add ecx, 0x62f67a9d
add ecx, edx
sub ecx, 0x62f67a9d
pop edx
add ecx, eax
sub ecx, 0x371fd710
push dword [esp]
pop ecx
push ebp
mov ebp, esp
push edx
mov edx, 4
add ebp, edx
pop edx
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
push ebx
mov dword [esp], edx
mov edx, 0x6c6c642e
push ebx
mov dword [esp], edx
pop dword [0x64aac2]
mov edx, dword [esp]
add esp, 4
push esi
mov dword [esp], ebp
push esi
push 0x62226938
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
push edx
push 0x74df5352
pop edx
neg edx
xor edx, 0x901e73b7
add ecx, edx
mov edx, dword [esp]
add esp, 4
add ecx, 0x27f187f8
add ecx, eax
sub ecx, 0x27f187f8
sub ecx, 0x1b3edf19
push dword [esp]
pop ecx
push edx
mov dword [esp], eax
mov eax, esp
add eax, 4
push ebx
mov ebx, 4
add eax, ebx
pop ebx
xchg dword [esp], eax
pop esp
jmp fcn.00ae53b9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xad639a
jne 0xb3b743
jmp 0xb5e7f8
mov dx, word [ecx]
jmp 0xaecdcc
cmp edx, dword [ebp - 0xc]
jmp 0xaa28cc
je 0xac77f0
jmp 0xaf2e8b
ja 0xab3d83
jmp 0xb3b725
jae 0xaf5b42
jmp 0xab44b0
push ecx
sub esp, 4
mov dword [esp], ebx
mov ebx, 0xf48fec4
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], eax
push edi
mov dword [esp], eax
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
mov eax, dword [esp]
push ecx
mov ecx, esp
push edx
push 4
pop edx
add ecx, edx
pop edx
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [ebp - 0x10]
mov ecx, dword [esp]
push esi
mov esi, esp
add esi, 4
push edi
mov edi, 0x6fb7724e
shl edi, 2
shr edi, 2
sub edi, 0x4ffff02b
add edi, 0x75ae8138
sub edi, 0x55660357
add esi, edi
pop edi
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
jmp 0xad3524
push ebx
mov dword [esp], ebp
push eax
mov dword [esp], esi
mov esi, 0x22354be2
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
push eax
mov eax, 0x755f78e4
xor eax, 0x7db721f6
dec eax
dec eax
neg eax
add eax, 0x5e4bf342
add ecx, eax
pop eax
add ecx, 0x7efe8b9b
push eax
mov eax, 0x76fb3b0b
sub ecx, eax
pop eax
add ecx, eax
add ecx, 0x76fb3b0b
sub ecx, 0x7efe8b9b
sub ecx, 0x55639a32
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], ebx
push esp
pop ebx
push edi
mov edi, 0x757df6a0
inc edi
or edi, 0x7bd3105d
or edi, 0xa1baa37
sub edi, 0x7f510eb2
not edi
xor edi, 0xff510fb6
add ebx, edi
pop edi
add ebx, 4
xchg dword [esp], ebx
pop esp
push 0xa3874a5
mov dword [esp], edi
push edi
push 0x64ac98
mov edi, dword [esp]
add esp, 4
mov dword [esp + 4], edi
pop edi
jmp 0xab450c
mov cx, word [eax]
jmp 0xaf0dbd
cmp ecx, dword [ebp - 0x1c]
jmp 0xaa28c1
push ebp
push esp
mov ebp, dword [esp]
add esp, 4
push edi
mov edi, 0x35cf8493
inc edi
or edi, 0x7f7fb2f6
xor edi, 0x7fffb6f2
add ebp, edi
pop edi
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
push dword [0x64ad5c]
mov esi, dword [esp]
push eax
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push esi
mov esi, 0x7f7a5616
dec esi
shl esi, 4
not esi
shl esi, 7
shl esi, 5
add esi, 0x56151004
add ecx, esi
pop esi
xchg dword [esp], ecx
pop esp
jmp 0xae2b2e
sub esp, 4
mov dword [esp], esi
push esp
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
push ebp
mov ebp, 0x37fdfeb4
neg ebp
and ebp, 0x12f7c692
sub ebp, 0x17759e7f
or ebp, 0x6e756aee
xor ebp, 0xeefd6beb
add edx, ebp
pop ebp
xchg dword [esp], edx
pop esp
mov eax, dword [esp]
push ecx
mov ecx, esp
push eax
mov eax, 4
add ecx, eax
pop eax
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
push ecx
push edi
mov edi, 0x54f4c987
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
push ebx
mov ebx, 0x64ac98
mov dword [esp + 4], ebx
pop ebx
sub esp, 4
mov dword [esp], ecx
push edi
push 0x4a918ba9
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push dword [esp]
pop eax
push ecx
mov ecx, esp
push ebp
mov ebp, 0x4effaec2
push ecx
mov ecx, 0x5fbf56dd
xor ecx, 0x6855556f
and ebp, ecx
pop ecx
dec ebp
sub ebp, 0x6ea027d
add ecx, ebp
pop ebp
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xafd7d5
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
mov edx, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop edx
push 0x2901b11d
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [ebp - 0x18]
mov eax, dword [esp]
push edi
push esp
pop edi
add edi, 4
push ebx
mov ebx, 0x3f75daff
or ebx, 0x7df7e043
add ebx, 0x80080505
add edi, ebx
pop ebx
xchg dword [esp], edi
pop esp
push eax
push esp
pop eax
push edx
mov edx, 0x78e55e31
or edx, 0x74eaf6b7
shr edx, 7
and edx, 0x24bb2bfa
sub edx, 0x7b9f58e5
neg edx
xor edx, 0x7ae64ce9
add eax, edx
pop edx
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edi
mov dword [esp], edx
push 0x5f411fdf
mov dword [esp], ecx
mov edx, dword [esp]
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop edx
push ecx
mov ecx, esp
push 0x2051f798
mov dword [esp], edi
mov edi, 4
add ecx, edi
pop edi
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xab9280
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push esi
push edi
push ebx
mov dword [esp], 0x50fd2df7
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
push dword [esp]
mov edx, dword [esp]
push edi
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
jmp 0xad796b
push ebp
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], eax
mov dword [esp], 0x64ac98
jmp 0xab9d24
sub esp, 4
mov dword [esp], ebp
push ecx
push 0x7b43b9fe
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
add ecx, 0x537f6671
add ecx, eax
push 0x7281f7a3
mov dword [esp], ebp
push esi
push 0x537f6671
pop esi
mov ebp, esi
pop esi
sub ecx, ebp
pop ebp
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [ebp - 0x18]
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
mov dword [esp], ecx
mov dword [esp], ebx
push 0x1b6723dd
mov dword [esp], ecx
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov ebx, dword [esp]
push ebx
push esp
pop ebx
push esi
mov esi, 0x6d6fbf92
or esi, 0x1fffb4c2
neg esi
xor esi, 0x4d2d3310
xor esi, 0x2b7f1886
add esi, 0x19ad944c
add ebx, esi
pop esi
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
jmp 0xabbc4e
jmp 0xac77f0
jmp 0xb3b725
push esi
push edx
push ebx
push eax
mov eax, 0x64ac98
mov dword [esp + 4], eax
pop eax
pop edx
mov dword [esp + 4], edx
pop edx
jmp 0xaf4db1
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push edx
push ebx
push edi
mov dword [esp], 0x3243d690
pop ebx
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0xaf000b
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push esi
push ebx
push 0x10fbb17e
mov ebx, dword [esp]
add esp, 4
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push edx
mov dword [esp], ecx
mov ecx, esp
push eax
mov eax, 0x7ffd30f7
neg eax
neg eax
and eax, 0x4ffef8fc
dec eax
neg eax
xor eax, 0xb003cf09
add ecx, eax
pop eax
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
jmp 0xabe5d4
push eax
mov eax, esp
push ecx
push 0x6e2be2be
pop ecx
shr ecx, 6
shr ecx, 1
xor ecx, 0xdc57c1
add eax, ecx
pop ecx
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push edx
mov edx, esp
push esi
mov esi, 0x7f7d9f55
dec esi
not esi
and esi, 0x3eff7100
xor esi, 0x826004
add edx, esi
pop esi
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push edx
mov edx, esp
sub esp, 4
mov dword [esp], esi
mov esi, 4
add edx, esi
pop esi
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
push eax
mov dword [esp], 0x38d7b991
mov dword [esp], ecx
mov ebx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov ebx, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
push ecx
mov ecx, 4
add ebp, ecx
mov ecx, dword [esp]
add esp, 4
xchg dword [esp], ebp
pop esp
jmp 0xac0ffb
mov byte [0x64aac2], al
push ecx
push 0x43d22302
mov dword [esp], ecx
mov ecx, 0x48c53364
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
push eax
mov eax, 0x651ffe4f
xor eax, 0x7fbd9fce
or eax, 0x7ed7ae09
neg eax
push ebp
mov ebp, 0x73df1c9e
or eax, ebp
pop ebp
neg eax
xor eax, 0x5d5c2184
add ecx, 0x65ed9f49
add ecx, 0x7fe7e996
sub ecx, eax
sub ecx, 0x7fe7e996
sub ecx, 0x65ed9f49
pop eax
add ecx, eax
add ecx, 0x517cc285
mov ecx, dword [esp]
push edi
push ebp
mov dword [esp], esp
add dword [esp], 4
pop edi
push eax
mov eax, 0x76f7a9d5
add eax, 0x8908562f
add edi, eax
pop eax
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xaf891e
push dword [ebp - 0x18]
push dword [esp]
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
jmp 0xb59af6
cmp dword [0xa4adc8], 0x23f0
jmp 0xaed34e
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], ecx
mov dword [esp], ebx
push 0x245f9eb8
mov dword [esp], edi
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
pop ebx
push ecx
mov ecx, esp
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
push edi
mov edi, 0x7b177209
dec edi
or edi, 0x57f77936
inc edi
add edi, 0x800884c5
add ecx, edi
pop edi
xchg dword [esp], ecx
pop esp
push esi
push 0x706d6f63
mov esi, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], esi
pop dword [0x64aaba]
pop esi
push edx
push esp
pop edx
add edx, 4
push esi
mov esi, 4
sub edx, esi
pop esi
xchg dword [esp], edx
pop esp
mov dword [esp], esi
mov dword [esp], ecx
push eax
mov eax, 0x5cfa320f
sub ecx, eax
mov eax, dword [esp]
add esp, 4
add ecx, eax
push eax
push 0x6ef987be
pop eax
add eax, 0xee00aa51
add ecx, eax
pop eax
push dword [esp]
mov ecx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
jmp 0xadd4de
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edi
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0xabccb4
push edi
push esp
mov edi, dword [esp]
add esp, 4
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ecx
push ecx
mov dword [esp], esi
push 0x57f8f529
pop esi
add ecx, esi
mov esi, dword [esp]
add esp, 4
add ecx, eax
sub ecx, 0x57f8f529
push dword [esp]
pop ecx
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push 0x35e4b55d
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
pop dword [0x84ae68]
jmp 0xaf6c40
push 0x4b5ff0b0
mov dword [esp], eax
mov dword [esp], edi
mov dword [esp], ebx
push esi
mov esi, esp
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push ebp
mov ebp, esp
add ebp, 4
push eax
mov eax, 4
sub ebp, 0x73bd47f6
add ebp, eax
add ebp, 0x73bd47f6
pop eax
xchg dword [esp], ebp
pop esp
jmp dword [eax + 0xa4adc8]
push ebx
mov dword [esp], ebp
mov bp, 0xad98
and bp, 0x54c4
xor bp, 0xb738
inc bp
xor bp, 0xd87
sub bp, 0x51da
mov word [0x64aac0], bp
mov ebp, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
jmp 0xab9d39
add esp, 4
jmp 0xad6393