Function at 0x4fc6f1
Capabilities:
Accept command line arguments

Disassembly:
mov eax, eax
mov ebp, ebp
mov edx, edx
mov ebp, ebp
mov edx, edx
mov ecx, ecx
mov ecx, ecx
mov edi, edi
mov eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [ebp - 0x10], 0x1000000
jmp 0x502e25
push ebx
push esp
pop ebx
add ebx, 4
push edx
mov edx, 0xfdbf33e
dec edx
sub edx, 0xfdbf339
sub ebx, edx
pop edx
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
mov dword [esp], eax
push 0x5f674428
mov dword [esp], ecx
mov dword [esp], ebp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push edi
mov edi, esp
add edi, 4
sub edi, 4
push edi
push dword [esp + 4]
mov edi, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], edx
pop dword [0x632030]
jmp 0x5421a6
push ebx
mov dword [esp], eax
push edx
mov edx, 0x4c64f748
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
push ebp
mov ebp, 4
add ecx, 0x6df903e9
add ecx, ebp
sub ecx, 0x6df903e9
pop ebp
xchg dword [esp], ecx
pop esp
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x54efff
jmp 0x417e5c
push dword [ebp - 0x10]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x54e3ef
push dword [0x6364e0]
push dword [esp]
pop edx
push 0x40e82314
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x51e223
je 0x5460ab
jmp 0x524257
je 0x55bc66
jmp 0x524261
push dword [0x632034]
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x53251b
push dword [ebp - 4]
push dword [esp]
pop ecx
push ebx
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x5803f6
push ebp
mov ebp, 0x6afd12cf
or ebp, 0x77f73677
shl ebp, 5
sub ebp, 0xffffffff
neg ebp
push eax
mov eax, 0x15bb6898
xor ebp, eax
pop eax
sub ebp, 0x15a23887
sub edx, 0x5d6fbb7e
add edx, ebp
add edx, 0x5d6fbb7e
mov ebp, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ebp
mov dword [esp], 0x4fad0f6c
mov dword [esp], ebp
mov dword [esp], ecx
push eax
mov eax, 0x5fefa1b8
add eax, 0x7d9f1b8c
xor eax, 0x57db1193
shr eax, 8
inc eax
add eax, 0x7cbb7164
xor eax, 0x8baad92
add ecx, 0x7fff5a64
sub ecx, eax
sub ecx, 0x7fff5a64
pop eax
add ecx, eax
push 0x3cc67ec8
mov dword [esp], ebx
mov ebx, 0x5bb3cce1
shr ebx, 5
xor ebx, 0x7cbdca2
neg ebx
or ebx, 0x7afb5340
xor ebx, 0x45ce50a5
add ebx, 0xb6c9baa5
add ecx, ebx
pop ebx
push dword [esp]
mov ecx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x559056
call fcn.00417ae0
jmp 0x4f8f91
push edx
mov dword [esp], edi
push edi
mov dword [esp], 0x69757473
pop edi
push edi
pop dword [0x63584e]
pop edi
jmp 0x519894
push ebp
push ebp
mov ebp, 0x261c30c2
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
mov dword [esp], 0x1aa695d8
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push edx
mov edx, esp
push eax
mov eax, 0x7dbec4e6
sub eax, 0x7dbec4e2
add edx, eax
pop eax
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov edx, dword [esp]
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
push eax
mov eax, esp
add eax, 4
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], ebp
mov dword [esp], eax
pop dword [0x6364e0]
push edx
push edi
mov edi, 0x5fa01a6d
mov dword [esp + 4], edi
pop edi
mov dword [esp], ebx
mov dword [esp], eax
push esi
push ebx
mov ebx, 0x4c2ec918
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
push ebp
push esp
mov ebp, dword [esp]
add esp, 4
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x57d350
push dword [0x635aec]
mov esi, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push edx
mov edx, 0x5dbfbc7a
xor edx, 0x5dfcbf00
or edx, 0x4bf7249b
xor edx, 0x7379b179
or edx, 0x3cff2cc3
add edx, 0xc3004141
add ebp, edx
pop edx
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x52df4f
push edi
push ebx
push edi
mov dword [esp], 0x55d03062
pop ebx
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], eax
push esi
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov dword [esp], ebx
mov dword [esp], ecx
sub ecx, 0x7fff60bf
push ebx
mov ebx, 0x7e6a5d3b
add ecx, ebx
mov ebx, dword [esp]
add esp, 4
add ecx, eax
sub ecx, 0x7e6a5d3b
push ebp
mov ebp, 0x7fff60bf
add ecx, ebp
pop ebp
mov ecx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
push dword [esp]
pop ebx
add esp, 4
pop dword [esp]
pop esp
jmp 0x4dbb50
push edi
push edx
push ecx
mov dword [esp], 0x5257afc3
pop edx
mov dword [esp + 4], edx
pop edx
mov dword [esp], edx
push 0x5d1c5d5
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edx
mov edx, esp
push edi
mov edi, 0x7fdf6f37
inc edi
xor edi, 0x31abcdfa
inc edi
dec edi
xor edi, 0x4e74a2c6
add edx, edi
pop edi
add edx, 4
xchg dword [esp], edx
pop esp
sub esp, 4
mov dword [esp], ecx
push edx
push 0x635a28
pop edx
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
jmp 0x54f572
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
mov dword [esp], ebx
push 0x75dcb86e
mov dword [esp], edi
mov edi, esp
add edi, 4
push edx
mov edx, 0x65fbf2e0
sub edx, 0x34d76fa8
neg edx
sub edx, 0x7e7d5746
add edx, 0xafa1da82
sub edi, edx
pop edx
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
pop ebx
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
push edi
mov edi, 4
sub eax, 0x7ff73674
add eax, edi
add eax, 0x7ff73674
mov edi, dword [esp]
add esp, 4
xchg dword [esp], eax
pop esp
push esi
push esi
push 0x85c07ec
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
mov dword [esp], 0x635a28
push ebx
mov dword [esp], esi
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov dword [esp], ebx
push ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov ebx, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
jmp 0x50d227
push 0x4f5ce10c
mov dword [esp], esi
push ebp
push 0x635a28
pop ebp
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
jmp 0x4bce27
push ecx
mov ecx, esp
push ebx
push esi
mov esi, 4
mov ebx, esi
pop esi
add ecx, ebx
pop ebx
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push 0x28374081
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
add esp, 4
and al, byte [0x63204a]
push 0x77d2631c
mov dword [esp], ebx
push ecx
mov ecx, 0x396ccfaf
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebp
mov dword [esp], eax
push edx
mov dword [esp], 0x47f89330
mov dword [esp], ebx
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop eax
push ebp
push esp
pop ebp
push edx
mov edx, 4
add ebp, edx
pop edx
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x560ecf
push ebp
push esp
pop ebp
push ebp
mov dword [esp], esi
mov esi, 4
add ebp, esi
pop esi
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
sub ecx, 0x62ff6ef9
push 0x39563b7c
mov dword [esp], ebp
mov ebp, 0x6e35ca78
dec ebp
inc ebp
or ebp, 0x7dfccd0e
xor ebp, 0x100b7f87
sub ecx, ebp
pop ebp
add ecx, 0x733e2e84
add ecx, eax
sub ecx, 0x733e2e84
add ecx, 0x6ff6b0f9
add ecx, 0x62ff6ef9
push dword [esp]
pop ecx
push esi
mov esi, esp
add esi, 4
push edx
mov edx, 4
add esi, edx
pop edx
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
sub esp, 4
mov dword [esp], esi
mov esi, 0x3ffb7993
sub edx, esi
mov esi, dword [esp]
add esp, 4
add edx, 0x5ebb8e23
sub edx, ecx
sub edx, 0x5ebb8e23
add edx, 0x3ffb7993
push eax
mov eax, esp
add eax, 4
push edx
mov edx, 4
sub eax, edx
pop edx
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
sub ecx, 0x5bff023e
add ecx, 0x43dff9f6
add ecx, eax
push edx
mov edx, 0x5df55537
shl edx, 6
neg edx
shr edx, 5
not edx
push ebx
mov ebx, 0xb835539b
xor edx, ebx
pop ebx
sub ecx, edx
pop edx
push ebx
mov ebx, 0x5bff023e
add ecx, ebx
pop ebx
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x4baab5
call sub.IMM32.dll_ImmGetContext
jmp 0x4f2128
sub esp, 4
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edx
mov edx, 0x373e9eae
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
push 0x3311837
mov dword [esp], ebx
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [ebp - 0x10]
push dword [esp]
push dword [esp]
pop edx
add esp, 4
add esp, 4
jmp 0x4c4a49
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push esi
push 0x3b6eefe8
mov dword [esp], ecx
push 0x19cefaa6
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], esi
mov dword [esp], eax
mov dword [esp], ecx
pop ebx
push dword [esp]
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
add esp, 4
jmp 0x4c94e1
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
push eax
mov eax, 4
sub edx, eax
pop eax
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], eax
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
mov eax, dword [esp]
push esi
mov esi, esp
push eax
push 0x46fe9582
pop eax
neg eax
sub eax, 0x7fdd9a23
or eax, 0x77f6cc5d
sub eax, 0x4a356423
xor eax, 0x35c27838
add esi, eax
pop eax
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov al, byte [0x63204d]
jmp 0x4db200
jne 0x536ba8
jmp 0x5764c1
push ecx
push 0x706d6f63
mov ecx, dword [esp]
add esp, 4
mov dword [0x63584a], ecx
push dword [esp]
pop ecx
add esp, 4
jmp 0x4c85d7
push edi
mov dword [esp], esi
mov dword [esp], 0x26cc2721
mov dword [esp], ebx
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0x4c417d
push edi
push 0x7ff7b36b
pop edi
dec edi
push ebp
mov ebp, 0x5fef1554
and edi, ebp
pop ebp
shl edi, 3
shl edi, 3
shr edi, 8
sub edi, 0xf9c448
mov dword [ebp - 8], edi
mov edi, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
sub esp, 4
mov dword [esp], esi
mov dword [esp], 0x47f54fdf
mov dword [esp], ebp
mov dword [esp], 0x3d3e5465
mov dword [esp], ecx
push eax
mov eax, 0x45d33b3a
or eax, 0x65ff8d45
push ebp
mov ebp, 0x1bfcf414
xor eax, ebp
pop ebp
neg eax
shl eax, 3
inc eax
sub eax, 0xb8363a12
sub ecx, eax
push dword [esp]
pop eax
add esp, 4
add ecx, eax
add ecx, 0x57af6a97
push dword [esp]
pop ecx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
mov esp, dword [esp]
jmp 0x5574b3
push 0x7058d2c
mov dword [esp], esi
push ecx
mov ecx, 0x1665886
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebp
mov dword [esp], ecx
push ecx
mov dword [esp], edx
mov edx, 0x75ff5fcc
add edx, 1
push ecx
mov ecx, 0xe6facf13
add edx, ecx
pop ecx
sub ecx, edx
pop edx
add ecx, eax
add ecx, 0x5cfa2ee0
push dword [esp]
pop ecx
push edx
mov edx, esp
push ecx
mov ecx, 0x7ff7e235
not ecx
shr ecx, 2
xor ecx, 0x20020776
add edx, ecx
pop ecx
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov al, byte [0x632043]
jmp 0x4f16da
push dword [0x632038]
mov ecx, dword [esp]
push ebx
mov ebx, esp
push eax
mov eax, 0x7ef78115
shr eax, 7
add eax, 0x7d5f6d4b
sub eax, 0x67fa75fc
dec eax
xor eax, 0x1662e654
add ebx, eax
pop eax
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push edi
mov dword [esp], eax
mov dword [esp], ebp
push edx
mov edx, 0x141a481
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push dword [esp]
pop eax
push ebx
mov ebx, esp
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
push eax
mov eax, 4
add ebx, eax
pop eax
xchg dword [esp], ebx
pop esp
jmp 0x5159ee
push edi
push esp
pop edi
add edi, 4
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
push edx
mov edx, esp
push ebx
mov ebx, 4
add edx, ebx
pop ebx
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
sub esp, 4
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
imul eax, ecx
jmp 0x4c415b
push edx
mov dword [esp], edi
push edx
mov edx, 0x55717e00
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], edx
push eax
push esp
pop eax
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
push esi
mov esi, 4
add edi, esi
pop esi
xchg dword [esp], edi
mov esp, dword [esp]
push esi
mov esi, esp
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
pop dword [0x635aec]
push ecx
push 0x45e9f14a
mov dword [esp], edx
mov edx, 0x17ee815
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
mov dword [esp], ecx
sub ecx, 0x5bef7be9
add ecx, 0x3d708959
add ecx, eax
sub ecx, 0x3d708959
push edi
mov edi, 0x7fcf91ce
push ecx
mov ecx, 0
sub ecx, edi
xchg edi, ecx
pop ecx
neg edi
push eax
mov eax, 0x77ad229b
and eax, 0x7179aea7
xor eax, 0xad36c898
add edi, eax
pop eax
add ecx, edi
pop edi
mov ecx, dword [esp]
push ecx
mov ecx, esp
push edx
mov edx, 4
add ecx, edx
mov edx, dword [esp]
add esp, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
jmp 0x4ddcc3
cmp edx, dword [ebp - 0xc]
jmp 0x4c3f93
push ebp
push esi
mov esi, 0x7d9e10c7
inc esi
push eax
mov eax, 0x37eb226a
and esi, eax
pop eax
shr esi, 8
xor esi, 0x7f9ffd62
mov ebp, esi
pop esi
sub ebp, 0x7fdf9978
dec ebp
or ebp, 0x163f4524
or ebp, 0x3df73ccd
push ebx
mov ebx, 0x3fdfadee
add ebx, 0x91afe68c
sub ebp, ebx
pop ebx
mov dword [0x63584c], ebp
mov ebp, dword [esp]
add esp, 4
jmp 0x56d315
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x500910
jne 0x4e3e2b
jmp 0x5560e7
add esp, 4
jmp 0x5421ad
mov cx, word [eax]
jmp 0x51d711
lea edx, [ecx + eax + 0x635838]
push edx
mov edx, esp
add edx, 4
sub edx, 4
push 0x2f5e9043
mov dword [esp], edx
push dword [esp + 4]
mov edx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], eax
push esi
mov dword [esp], ebx
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push dword [esp]
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add esp, 4
jmp 0x532f0a
aas
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push ebx
push 0x2b750b4d
mov dword [esp], ebp
mov ebp, 0x52821257
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
pop dword [ebp - 0x10]
jmp 0x4dd548
cmp esi, eax
jmp 0x4f6ea4
cmp esi, eax
jmp 0x4e3623
push dword [ebp - 0x18]
push dword [esp]
push dword [esp]
pop eax
add esp, 4
add esp, 4
push edi
mov dword [esp], ebx
sub esp, 4
mov dword [esp], esi
mov esi, 0x7efe2d1d
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebx
push ebp
mov dword [esp], ecx
push dword [esp]
pop ebx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov ebx, dword [esp]
push ebx
push esp
mov ebx, dword [esp]
add esp, 4
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0x545922
ja 0x4c3571
jmp 0x50d209
jae 0x4d826d
jmp 0x4da6f8
push ecx
push ebx
push edi
mov edi, 0x4d0bc9f9
push edi
pop ebx
pop edi
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebx
push 0x4973a129
mov dword [esp], ecx
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
push dword [esp]
pop ebx
push 0x30a54b84
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push edi
push ecx
push 0x435a6d3f
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebp
mov dword [esp], ecx
add ecx, 0x3ff5d0be
push edx
mov edx, 0x7fbb04c0
sub ecx, 0x3e972727
sub ecx, edx
add ecx, 0x3e972727
pop edx
sub ecx, 0xa2f2f73
add ecx, eax
add ecx, 0xa2f2f73
add ecx, 0x7fbb04c0
sub ecx, 0x3ff5d0be
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 4
add eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
jmp 0x4c3598
cmp dword [0x636d18], 0x23f0
jmp 0x502e30
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x528aba
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x500917
push ebx
push esp
pop ebx
push ebp
mov ebp, 0x7fdff77e
sub ebp, 0x762d4620
shl ebp, 8
neg ebp
sub ebp, 0x6fff6cb0
or ebp, 0x69ef5a7d
sub ebp, 0xfdef7f79
add ebx, ebp
pop ebp
sub ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov dword [esp], ebx
push 0x2c898b1e
mov dword [esp], ecx
mov ebx, dword [esp]
push 0xd78a1c5
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop ebx
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push eax
mov eax, esp
push edx
mov edx, 4
add eax, edx
pop edx
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], eax
mov dword [esp], edx
jmp 0x4c6842
push edx
push esi
mov dword [esp], edi
push 0x2214196b
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
push 0x1bd73db9
mov dword [esp], ebx
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
push ebx
mov ebx, 4
add edi, ebx
pop ebx
xchg dword [esp], edi
pop esp
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push esi
mov dword [esp], ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
mov esp, dword [esp]
push ebx
push 3
pop ebx
add ebx, 0x74df2f0e
add ebx, edx
push esi
mov esi, 0x7fbad311
sub esi, 0x7fbf001c
add esi, 0x5f7f2f12
add esi, 0x15642d07
add ebx, 0x77eeb525
sub ebx, esi
sub ebx, 0x77eeb525
pop esi
xor esi, dword [ebx]
pop ebx
sub esp, 4
mov dword [esp], esi
mov esi, esp
push 0x52a041a0
mov dword [esp], edx
mov edx, 4
add esi, edx
pop edx
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push esi
mov esi, esp
push ecx
mov ecx, 4
add esi, ecx
pop ecx
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
push ebx
mov ebx, 0x7f9baffd
xor ebx, 0x7fb8fdb9
xor ebx, 0x3fff07c5
and ebx, 0x4b773542
not ebx
add ebx, 0xb541505
add edi, ebx
pop ebx
xchg dword [esp], edi
pop esp
jmp 0x4f6e99
push edi
mov dword [esp], 0x210f21ad
mov dword [esp], edx
push ebp
mov ebp, 0x2fd7f487
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
push esi
mov dword [esp], ebx
mov eax, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
mov eax, dword [esp]
push edx
mov edx, esp
push ecx
mov dword [esp], eax
mov eax, 4
add edx, eax
pop eax
push esi
mov esi, 4
add edx, esi
pop esi
xchg dword [esp], edx
pop esp
push 0x49ab7e6d
mov dword [esp], ecx
push esi
push ecx
mov ecx, 0x3c
mov dword [esp + 4], ecx
pop ecx
pop ecx
add ecx, edx
add eax, dword [ecx]
pop ecx
jmp 0x4e4677
push eax
push ecx
push ebp
mov dword [esp], 0x5536276f
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], edx
push 0x5435d0b
mov dword [esp], ecx
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push eax
push 7
pop eax
or ecx, eax
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edi
mov dword [esp], esi
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push 0x60afb14b
mov dword [esp], ebp
mov dword [esp], edi
mov edi, 4
add ebp, edi
pop edi
xchg dword [esp], ebp
pop esp
jmp 0x4f1881
sub esp, 4
mov dword [esp], ecx
mov dword [esp], ebx
push ecx
mov ecx, 0x77de4e66
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [0x632034]
push dword [esp]
pop ecx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x57adbe
push ebp
push 0x20140893
mov dword [esp], edx
mov edx, 0x1e8f6862
push esi
mov esi, 0x7fbeeec0
xor esi, 0x7f9f5602
sub esi, 0x777b427b
and esi, 0x5b3e85ae
inc esi
add esi, 0x7596fe9a
xor edx, esi
pop esi
xor edx, 0xf5e0eed
mov ebp, edx
pop edx
mov dword [0x635852], ebp
mov ebp, dword [esp]
add esp, 4
jmp 0x52071d
push dword [ebp - 0x10]
mov ecx, dword [esp]
push ebx
mov ebx, esp
push edi
mov edi, 4
sub ebx, 0x5bdd24d5
add ebx, edi
add ebx, 0x5bdd24d5
pop edi
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x55fa99
cmp ecx, dword [ebp - 0x1c]
jmp 0x4c3f88
mov dx, word [ecx]
jmp 0x4f2eb6
push ecx
push edi
mov edi, 0x2455f773
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
mov dword [esp], ecx
mov dword [esp], edx
push edi
mov dword [esp], 0x37b3335b
mov dword [esp], ecx
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [0x635aec]
push dword [esp]
pop esi
push ebp
mov ebp, esp
add ebp, 4
push eax
mov eax, 4
add ebp, eax
pop eax
xchg dword [esp], ebp
pop esp
jmp 0x513bf5
sub esp, 4
mov dword [esp], ebx
push ecx
mov ecx, 0x2d49a7e8
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
push eax
mov eax, 0x7fbd91d4
inc eax
shl eax, 1
add eax, 0x84dc5a
add edi, eax
pop eax
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
push edx
push 0x7dfb3c23
mov edx, dword [esp]
add esp, 4
sub edx, 0x7dfb3c19
push 0x15810909
mov dword [esp], edx
pop dword [ebp - 0x14]
pop edx
jmp 0x4e7e4a
je 0x4baa1f
jmp 0x502dbe
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x577e97
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x57c8fd
jmp 0x4baa1f
jmp 0x4baa1f
push dword [0x6364e0]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
sub esp, 4
mov dword [esp], ebx
push edx
mov edx, 0xc6e450
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], ebx
push eax
push esp
pop eax
push ebp
mov ebp, 4
add eax, ebp
pop ebp
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
mov esp, dword [esp]
jmp 0x4cbfb2
push ebp
push esp
mov ebp, dword [esp]
add esp, 4
add ebp, 4
sub ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push 0x497a6775
mov dword [esp], eax
mov eax, 4
add ebp, eax
pop eax
xchg dword [esp], ebp
mov esp, dword [esp]
push edx
mov edx, 5
sub edx, 0x6efe68cb
add edx, 0x5fff548c
add edx, eax
sub edx, 0x5fff548c
add edx, 0x6efe68cb
push eax
mov eax, 0
add eax, edx
push ebx
mov ebx, 0
add ebx, eax
xor esi, dword [ebx]
pop ebx
pop eax
pop edx
push ebx
mov dword [esp], edx
push ebx
mov ebx, 0x18553f1
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edi
mov dword [esp], eax
push edi
mov dword [esp], 0x179c4b7f
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
pop eax
push esi
push ecx
mov dword [esp], esp
add dword [esp], 4
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x50d232
push esi
push esp
pop esi
push eax
mov eax, 4
add esi, eax
pop eax
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
mov dword [esp], ebx
push 0x3f36a92d
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop ebx
push ebp
mov ebp, esp
push edi
mov edi, 0x3e7bfc6e
not edi
dec edi
neg edi
shl edi, 2
push eax
mov eax, 0x7ffdf95f
sub edi, eax
pop eax
add edi, 0x860e07a3
add ebp, edi
pop edi
add ebp, 4
xchg dword [esp], ebp
pop esp
mov cl, byte [0x635851]
jmp 0x536be4
push edx
mov edx, esp
add edx, 4
sub edx, 4
push eax
mov dword [esp], edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], ebx
mov dword [esp], edx
push edi
mov edi, esp
add edi, 4
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
pop edx
push dword [esp]
pop edx
push ecx
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
and edx, eax
jmp 0x57c8da
push edx
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], ebx
mov dword [esp], edx
push eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 0x7fbf9717
and ecx, 0x7fffabcd
not ecx
shr ecx, 3
inc ecx
or ecx, 0x3b6ecdc8
xor ecx, 0x3b6ecfec
sub eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
mov dword [esp], ecx
mov dword [esp], edx
push 0x1ed6581f
mov dword [esp], esi
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
push edi
mov edi, 4
add ebp, edi
pop edi
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x5214b1
push ecx
mov dword [esp], edx
push ebp
mov dword [esp], 0x78707061
mov edx, dword [esp]
add esp, 4
mov dword [0x635848], edx
pop edx
jmp 0x4f5a8e
sub esp, 4
mov dword [esp], ebp
mov dword [esp], esi
push eax
mov eax, 0x20104cb5
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
sub ecx, 0x74ff6847
push edx
mov edx, 0x7b7fe90e
sub ecx, edx
pop edx
add ecx, eax
push eax
mov eax, 0x7b7fe90e
add ecx, eax
pop eax
push eax
mov eax, 0x74ff6847
add ecx, eax
pop eax
mov ecx, dword [esp]
push 0x27759bbb
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
push edx
mov edx, 4
add ebp, edx
pop edx
xchg dword [esp], ebp
pop esp
mov byte [0x635852], cl
jmp 0x55bac1
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], esi
mov dword [esp], edx
mov dword [esp], esi
mov dword [esp], eax
push ebx
push dword [esp]
push dword [esp]
pop eax
add esp, 4
add esp, 4
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
add esp, 4
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x57d44e
xor eax, eax
jmp 0x4eaa81
test eax, eax
jmp 0x520eaa
push edi
push esp
pop edi
push ecx
mov ecx, 4
sub edi, 0x7fffd0e1
add edi, ecx
add edi, 0x7fffd0e1
pop ecx
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], eax
push ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
mov eax, dword [esp]
push ecx
mov dword [esp], edx
mov edx, esp
push ecx
mov ecx, 4
add edx, ecx
pop ecx
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
xor ecx, ecx
push edx
mov dword [esp], edi
push eax
mov eax, 0x725c0083
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebp
mov dword [esp], ecx
push esi
mov esi, 0x7dfedfbd
sub ecx, esi
mov esi, dword [esp]
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add ecx, eax
add ecx, 0x7dfedfbd
push dword [esp]
mov ecx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x4f8f99
push edx
mov edx, esp
add edx, 4
push edi
mov edi, 4
add edx, 0x7ffea97d
sub edx, edi
sub edx, 0x7ffea97d
pop edi
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ecx
mov dword [esp], 0x678eeac9
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 4
sub ebx, 0x77755df2
add ebx, ebp
add ebx, 0x77755df2
pop ebp
xchg dword [esp], ebx
pop esp
push dword [ebp - 0x18]
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
xchg dword [esp], ebx
pop esp
jmp 0x57c7de
push ebp
mov ebp, 0x6ed75b09
not ebp
inc ebp
push edx
push 0x49f7625a
mov edx, dword [esp]
add esp, 4
xor edx, 0x1228ebef
and ebp, edx
pop edx
add ebp, 0xeef78f4b
sub eax, ebp
pop ebp
jmp 0x56ac51
sub esp, 4
mov dword [esp], ecx
push edi
mov dword [esp], ebp
mov ebp, 0x47c4b9d3
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 4
add ebx, edx
pop edx
xchg dword [esp], ebx
mov esp, dword [esp]
mov edx, dword [esp]
push edi
mov edi, esp
push ebx
mov ebx, 0x6eda5e14
or ebx, 0x5ffdc92c
or ebx, 0x73fb8781
shr ebx, 5
add ebx, 0x7f7b8a96
xor ebx, 0x73bfc04e
add ebx, 0xf3bb627
add edi, 0x5beef34e
add edi, 0x3fcf265c
add edi, ebx
sub edi, 0x3fcf265c
sub edi, 0x5beef34e
pop ebx
add edi, 4
xchg dword [esp], edi
pop esp
push edx
mov dword [esp], 0x5bc2fa40
mov dword [esp], edi
push ecx
mov ecx, 0x635a28
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
push ecx
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
mov ecx, 0x5e151b6b
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
push 0x71d08ae8
mov dword [esp], ecx
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
push edi
mov edi, 4
add edx, edi
pop edi
xchg dword [esp], edx
pop esp
mov ebx, dword [esp]
push eax
push esp
pop eax
push esi
mov esi, 4
add eax, esi
pop esi
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
jmp 0x50d0a1
push ebx
mov ebx, esp
push eax
mov eax, 0x5cdf2115
xor eax, 0x5cdf2111
add ebx, eax
pop eax
sub ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push edi
mov dword [esp], ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push esi
mov esi, 4
add ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
push dword [esp]
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
add esp, 4
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x4d897f
push dword [ebp - 0x10]
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push edx
mov edx, esp
add edx, 4
push eax
mov eax, 4
sub edx, 0x5bbbe1a6
sub edx, eax
add edx, 0x5bbbe1a6
mov eax, dword [esp]
add esp, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push esi
mov dword [esp], ecx
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
push eax
mov eax, 4
add ecx, eax
pop eax
push edx
mov edx, 4
add ecx, edx
pop edx
xchg dword [esp], ecx
pop esp
jmp 0x50fd34
push ebx
push edi
push 0x59dd70b3
mov edi, dword [esp]
add esp, 4
mov dword [esp + 4], edi
pop edi
mov dword [esp], ebx
push 0x6550edc4
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
mov ebx, dword [esp]
push esi
mov esi, esp
push ebp
mov ebp, 4
add esi, ebp
mov ebp, dword [esp]
add esp, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp dword [eax + 0x636d18]
push dword [0x632030]
mov edx, dword [esp]
push eax
mov eax, esp
push ebx
mov ebx, 4
add eax, ebx
pop ebx
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push edi
mov edi, esp
add edi, 4
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
mov dword [esp], esi
mov dword [esp], ecx
push esi
mov esi, 0x575e3b4b
add ecx, esi
mov esi, dword [esp]
add esp, 4
add ecx, eax
push ebp
mov ebp, 0x575e3b4b
sub ecx, ebp
mov ebp, dword [esp]
add esp, 4
mov ecx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
mov ecx, dword [esp]
add esp, 4
pop dword [esp]
mov esp, dword [esp]
jmp 0x4db7e3
push esi
push edx
push ebp
mov ebp, 0x764b6a76
sub ebp, 0x7efb65d9
dec ebp
dec ebp
inc ebp
shl ebp, 1
xor ebp, 0xcc876c74
mov edx, ebp
pop ebp
mov dword [esp + 4], edx
pop edx
mov dword [esp], esi
mov dword [esp], eax
push 0x357eab9f
mov dword [esp], esi
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
mov eax, dword [esp]
push ebx
mov dword [esp], edi
mov edi, esp
add edi, 4
push esi
mov esi, 0x7b2f3729
shr esi, 8
dec esi
and esi, 0x4fe69bbc
xor esi, 0x620b30
add edi, esi
mov esi, dword [esp]
add esp, 4
xchg dword [esp], edi
pop esp
push ebx
mov dword [esp], ebp
push ebp
mov ebp, 0x635a28
mov dword [esp + 4], ebp
push dword [esp]
pop ebp
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
push ebp
mov ebp, 4
sub ecx, ebp
pop ebp
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], edi
mov dword [esp], eax
push edx
mov dword [esp], ebx
mov eax, dword [esp]
push 0x46c6168b
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
push dword [esp]
pop eax
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x5214a6
push eax
mov eax, esp
add eax, 4
push edx
mov edx, 0x33fbe17a
neg edx
add edx, 0x33fbe17e
sub eax, edx
mov edx, dword [esp]
add esp, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edx
pop dword [ebp - 0x10]
push 0x2d8841d2
mov dword [esp], ebx
push ebx
mov ebx, 0x4536660d
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
mov dword [esp], ecx
sub ecx, 0x7eb0a18b
push ebx
mov ebx, 0x7a74332f
not ebx
sub ebx, 0x25b474cc
sub ecx, ebx
pop ebx
add ecx, eax
push edi
mov edi, 0x5fd75804
add ecx, edi
pop edi
push eax
mov eax, 0x7eb0a18b
add ecx, eax
pop eax
mov ecx, dword [esp]
push ebp
push esp
mov ebp, dword [esp]
add esp, 4
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0x4e35a2
push edx
mov dword [esp], esi
mov esi, esp
push edi
mov edi, 0x3ef0e6fc
xor edi, 0x2b65cb85
neg edi
sub edi, 0x37df69e4
inc edi
dec edi
xor edi, 0xb28b68a7
add esi, edi
pop edi
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop edx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov edx, dword [esp]
push eax
mov dword [esp], 0x32b9e720
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
push 0x1629b1d
mov dword [esp], edi
push esi
push 0x635a28
mov esi, dword [esp]
add esp, 4
mov dword [esp + 4], esi
pop esi
jmp 0x53955a
push eax
mov dword [esp], ebp
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x6cfe46b9
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
push ebx
mov ebx, 0x3f6e8c88
sub ecx, ebx
pop ebx
add ecx, eax
push 0x2850bb58
mov dword [esp], edx
mov edx, 0x3f6e8c88
sub ecx, 0x63ff1bee
add ecx, edx
add ecx, 0x63ff1bee
pop edx
mov ecx, dword [esp]
push esi
push esp
pop esi
push ebx
mov ebx, 0x7ee33eaf
or ebx, 0x773a1c73
or ebx, 0x77e7a255
or ebx, 0x7bff4353
or ebx, 0x7f6ec23b
sub ebx, 0x7ffffffb
add esi, ebx
pop ebx
push ecx
mov ecx, 4
add esi, ecx
pop ecx
xchg dword [esp], esi
pop esp
push dword [0x635aec]
mov eax, dword [esp]
push esi
mov esi, esp
push edx
mov edx, 0x6bbfbf61
xor edx, 0x65ca0f9c
add edx, 0x7fef600c
sub edx, 0x75cef8a3
add edx, 0x7ef7ebb4
not edx
xor edx, 0x6871fbe1
add esi, edx
pop edx
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0x4d3239
sub esp, 4
mov dword [esp], ebx
mov dword [esp], ecx
mov dword [esp], 0x2f2bb263
mov dword [esp], ecx
mov dword [esp], edx
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop edx
push 0x6f147a7b
mov dword [esp], eax
mov eax, esp
add eax, 4
push esi
mov esi, 4
add eax, esi
pop esi
xchg dword [esp], eax
pop esp
push edx
push eax
push 0x39c367af
pop eax
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
pop dword [ebp - 0x18]
push 0x18f5819e
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
mov dword [esp], edi
mov dword [esp], ecx
sub ecx, 0x473342fb
push edx
mov edx, 0x7ee774f5
add ecx, edx
pop edx
add ecx, eax
push ebx
mov ebx, 0x7ee774f5
sub ecx, ebx
mov ebx, dword [esp]
add esp, 4
add ecx, 0x473342fb
push dword [esp]
pop ecx
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
jmp 0x553bdc
mov byte [0x63204d], al
push ecx
mov dword [esp], esi
push 0x311ccab6
mov dword [esp], esi
mov esi, 0x61822ff0
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebx
push ebp
mov ebp, esp
push edi
mov edi, 0x7ffb985f
or edi, 0x7f4d9fc8
inc edi
inc edi
add edi, 0x80006023
add ebp, edi
pop edi
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
mov ebx, dword [esp]
push ebx
push esp
pop ebx
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0x51819e
push 0x43e001df
mov dword [esp], ecx
mov dword [esp], edi
mov dword [esp], ecx
mov dword [esp], edx
mov dword [esp], ebx
push ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
push dword [ebp - 0x14]
push dword [esp]
pop ecx
push eax
mov eax, esp
push esi
mov esi, 0x3bef2013
and esi, 0x6ac54cf9
inc esi
or esi, 0x4fdc98f7
xor esi, 0x6fdd98f3
add eax, esi
pop esi
add eax, 4
xchg dword [esp], eax
pop esp
sub esp, 4
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], 0x7012089c
mov dword [esp], esi
mov dword [esp], ecx
sub ecx, 0x7fbbc689
add ecx, 0x5ffdc48c
add ecx, eax
sub ecx, 0x5ffdc48c
push eax
mov eax, 0x6ffb239a
and eax, 0x6e73ea57
not eax
or eax, 0x7f7dfc20
xchg ecx, eax
inc ecx
xchg ecx, eax
shr eax, 8
sub eax, 0x81443774
add ecx, eax
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop ecx
push 0x6e69cc06
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push esi
mov esi, 4
add ebp, esi
pop esi
xchg dword [esp], ebp
pop esp
jmp 0x4f9b4b
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
mov dword [esp], eax
pop dword [ebp - 0x10]
push ecx
mov dword [esp], eax
push edx
mov edx, 0x7874ed53
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], edx
push eax
mov eax, esp
add eax, 4
push ebp
mov ebp, 0xdff79d6
xor ebp, 0x3ccd43ee
dec ebp
add ebp, 0xcecdc5cd
sub eax, ebp
pop ebp
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
push ebp
mov ebp, esp
push ebx
mov ebx, 0x7cfb81cd
shl ebx, 1
add ebx, 0x6dcc7f02
dec ebx
neg ebx
sub ebx, 0x983c7d61
add ebp, ebx
pop ebx
push esi
mov esi, 4
add ebp, esi
pop esi
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0x51a42c
push 0x704f
mov word [esp], di
push 0x6c64
pop di
mov word [0x635850], di
mov di, word [esp]
push eax
mov eax, esp
add eax, 4
add eax, 2
xchg dword [esp], eax
pop esp
push edi
push esp
pop edi
push edx
mov edx, 4
add edi, edx
pop edx
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ecx
push 0x756b9552
mov dword [esp], ebx
mov ebx, 0x7f7e78bc
sub ecx, 0x6eef21f7
add ecx, ebx
add ecx, 0x6eef21f7
pop ebx
add ecx, eax
push esi
mov esi, 0x7fe9501d
sub esi, 0x6ad761
sub ecx, esi
pop esi
mov ecx, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x52f571
push ebp
push ecx
push 0x2bd9133f
mov ecx, dword [esp]
add esp, 4
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebp
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
mov eax, dword [esp]
push ebx
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push edi
mov edi, 0x7b7c29a6
and edi, 0x738dc762
shr edi, 3
shl edi, 2
inc edi
shr edi, 5
xor edi, 0x1cc3000
sub ecx, 0x3fb9b4a7
add ecx, edi
add ecx, 0x3fb9b4a7
pop edi
xchg dword [esp], ecx
pop esp
jmp dword [eax + 0x636d18]
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push esi
mov esi, esp
push ecx
mov ecx, 4
add esi, ecx
pop ecx
push eax
mov dword [esp], ebx
mov ebx, 4
sub esi, ebx
pop ebx
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
add ecx, 0x73d7f221
sub ecx, 0x78d7997c
add ecx, eax
push edi
mov edi, 0x67e34a20
not edi
add edi, 0xe0bae39d
add ecx, edi
pop edi
push edi
mov edi, 0x73d7f221
sub ecx, edi
mov edi, dword [esp]
add esp, 4
mov ecx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push esi
mov esi, 4
add ebp, esi
push dword [esp]
pop esi
add esp, 4
xchg dword [esp], ebp
pop esp
jmp 0x5804a5
push 0x133af0e5
mov dword [esp], ebp
push ecx
push 0x3f719b7f
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
add ecx, 0x3a5f3776
sub ecx, 0x2ff37d43
add ecx, eax
push ebp
mov ebp, 0x2ff37d43
add ecx, ebp
pop ebp
push eax
mov eax, 0x7e7e7cde
add eax, 0xbbe0ba98
add ecx, 0x7bfb4c49
sub ecx, eax
sub ecx, 0x7bfb4c49
pop eax
push dword [esp]
pop ecx
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [ebp - 8]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push edx
push ebx
mov ebx, 0x7294b496
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ecx
mov dword [esp], 0x17a25c4
mov dword [esp], eax
push ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x561d0b
shr ecx, 2
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebp
mov dword [esp], 0x643ebe71
mov dword [esp], edi
mov dword [esp], edx
push 0xba047bb
mov dword [esp], edx
mov dword [esp], 0x5d7065ae
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 4
add ebx, edx
pop edx
xchg dword [esp], ebx
pop esp
add esp, 4
jmp 0x556bd8
push ebx
mov ebx, esp
push eax
mov eax, 4
add ebx, eax
pop eax
push edi
mov edi, 0x3bf7cf79
and edi, 0x3dfd6e98
not edi
push eax
mov eax, 0
sub eax, edi
mov edi, eax
pop eax
add edi, 0xc60ab1eb
sub ebx, edi
pop edi
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push eax
push esp
pop eax
add eax, 4
push ecx
mov ecx, 0x7fe3d3c2
and ecx, 0x5ffef737
shr ecx, 6
or ecx, 0xbcb29eb
inc ecx
not ecx
xor ecx, 0xf400540b
add eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [ebp - 0x18]
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
mov esp, dword [esp]
jmp 0x514088
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ebx
mov dword [esp], edx
pop dword [0x632034]
jmp 0x4c3571
push esi
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], eax
pop dword [0x635bfc]
jmp 0x4bd883
push edi
push edi
mov edi, 0x71798cad
mov dword [esp + 4], edi
mov edi, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
push esi
mov esi, esp
add esi, 4
push edx
mov edx, 4
sub esi, edx
pop edx
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push 0x44081bf5
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push dword [ebp - 0x18]
push dword [esp]
pop ecx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push 0x190ab2de
mov dword [esp], edx
push esi
mov esi, 0x12718b6f
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], eax
push esi
mov esi, esp
push ebx
mov ebx, 4
add esi, ebx
mov ebx, dword [esp]
add esp, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push esi
mov esi, esp
push edx
mov edx, 0x769d11f9
neg edx
sub edx, 0x3c3f0fe3
and edx, 0x5777f337
or edx, 0x6539d6e1
add edx, 0x5ebf83f5
xor edx, 0xc3fb5ade
add esi, edx
pop edx
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp fcn.004f2746
push 0x57c7fa93
mov dword [esp], ecx
push ecx
mov ecx, 0x76fb1ebb
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], ecx
push 0x22452aae
mov dword [esp], esi
mov esi, 0x3e65a8c1
push ebx
mov ebx, 0x7bdd6706
not ebx
sub ebx, 0x1ff55f42
add ebx, 0x1baaa125
xor esi, ebx
pop ebx
not esi
sub esi, 0x8a601e25
add ecx, esi
pop esi
sub ecx, 0x7bb5ffca
add ecx, eax
add ecx, 0x7bb5ffca
sub ecx, 0x33ed6fbd
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], edx
mov edx, esp
push esi
mov esi, 0x5bba9552
or esi, 0x3bbf9c36
shr esi, 4
dec esi
or esi, 0x79ef97ce
sub esi, 0x777a4bca
xor esi, 0x885b410
add edx, esi
pop esi
add edx, 4
xchg dword [esp], edx
pop esp
push eax
mov dword [esp], esi
push 0x439dc33f
mov dword [esp], ebx
push 0x635848
pop ebx
mov dword [esp + 4], ebx
pop ebx
push esi
push 0x14c8c51a
mov dword [esp], ecx
mov ecx, 0x1035129d
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov ebx, dword [esp]
push eax
push esp
pop eax
add eax, 4
push ebp
mov ebp, 4
add eax, ebp
mov ebp, dword [esp]
add esp, 4
xchg dword [esp], eax
pop esp
jmp 0x577db2
push eax
mov dword [esp], 0x6fd142f0
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], ebx
push edi
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
xor edx, edx
push ebx
push ebp
mov ebp, 0x50013edf
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edx
mov dword [esp], ecx
mov ebx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
mov ebx, dword [esp]
push edi
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
jmp 0x51d719
sub esp, 4
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], eax
pop dword [0x635bfc]
push ebp
push edi
push 0x89a4dfb
pop edi
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], ecx
push esi
mov dword [esp], edi
mov edi, 0x7ee795ff
or edi, 0x55fe11c5
push ecx
mov ecx, 0x5d9f1aff
sub ecx, 0xcebf486e
add edi, ecx
mov ecx, dword [esp]
add esp, 4
sub ecx, edi
pop edi
add ecx, eax
add ecx, 0xedf6890
push dword [esp]
pop ecx
push eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 4
add eax, ecx
mov ecx, dword [esp]
add esp, 4
xchg dword [esp], eax
pop esp
jmp 0x417e5c