Function at 0x4da4d1
Capabilities:
Accept command line arguments

Disassembly:
push 0x3b07c825
mov dword [esp], esi
mov dword [esp], 0x1ee26feb
mov dword [esp], ecx
mov dword [esp], edi
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push esi
push esp
mov esi, dword [esp]
add esp, 4
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
add esp, 4
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x7b819a76
mov dword [esp], edx
mov dword [esp], 0x62c1ad7c
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], ecx
add ecx, 0x679f08ce
sub ecx, 0x7bb3a230
add ecx, eax
add ecx, 0x7bb3a230
push esi
mov esi, 0x33ffc409
dec esi
sub esi, 0x1737dc9d
shl esi, 7
push ebp
mov ebp, 0x4f0f7437
xor ebp, 0x4b63c979
xor esi, ebp
pop ebp
sub ecx, esi
mov esi, dword [esp]
add esp, 4
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], edi
mov edi, esp
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x3d5b67c0
sub ebx, 0x3d5b67bc
add edi, ebx
pop ebx
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x4fc116
je 0x4a9ce4
jmp 0x537119
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x4b20cf
jne 0x517e0b
jmp 0x533039
push edi
push ebx
mov ebx, 0x306c9816
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], esi
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push edi
mov edi, esp
push esi
mov esi, 0x6c7d2d80
xor esi, 0x6c7d2d84
add edi, esi
pop esi
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push ebx
mov dword [esp], edx
mov edx, esp
push edi
mov edi, 0x7cffab53
xor edi, 0x7cffab57
add edx, edi
pop edi
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
pop dword [0x633c34]
push 0xcd3d1a1
mov dword [esp], ecx
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x45617340
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], eax
push ebx
mov dword [esp], 0x1d2a637b
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
pop eax
push 0x4a5dd4c8
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x417e2a
call fcn.00417ac0
jmp 0x524250
jmp 0x4a9ce4
je 0x4b019f
jmp 0x4a8ddb
je 0x520d5d
jmp 0x527176
cmp dword [ebp - 0x10], 0x1000000
jmp 0x520d68
push dword [ebp - 4]
push dword [esp]
mov ecx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
push eax
mov dword [esp], edx
mov edx, esp
push ebx
mov ebx, 0x7efb8273
neg ebx
shr ebx, 3
neg ebx
xor ebx, 0xefdf704b
add edx, 0x1d8a6879
add edx, ebx
sub edx, 0x1d8a6879
pop ebx
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edx
push esi
mov dword [esp], eax
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
push eax
mov dword [esp], edx
push esp
pop edx
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
jmp 0x4f9618
push dword [0x630038]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push eax
mov dword [esp], ecx
push edx
mov edx, 0x60dbf2f
mov dword [esp + 4], edx
pop edx
mov dword [esp], edx
mov dword [esp], ecx
push edi
mov edi, 0x549fe328
add ecx, edi
mov edi, dword [esp]
add esp, 4
add ecx, eax
push ebp
mov ebp, 0x776f224f
dec ebp
inc ebp
not ebp
sub ebp, 0x33f0fa88
sub ecx, 0x3fcbd140
sub ecx, ebp
add ecx, 0x3fcbd140
pop ebp
push dword [esp]
push dword [esp]
pop ecx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
jmp 0x4c52c0
push ebx
mov dword [esp], ecx
push ebx
mov ebx, 0x317396eb
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], ecx
push edx
push ebx
mov dword [esp], 0x3ffffe3a
mov edx, dword [esp]
add esp, 4
add ecx, edx
pop edx
add ecx, eax
sub ecx, 0x3ffffe3a
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [ebp - 0x18]
push dword [esp]
pop eax
push esi
mov esi, esp
add esi, 4
push edi
mov edi, 0x6f7bfc3e
sub edi, 0x6f7bfc3a
add esi, edi
pop edi
xchg dword [esp], esi
pop esp
jmp 0x4f83b3
push ecx
mov ecx, esp
add ecx, 4
push ebx
mov ebx, 0x71eb50e4
shr ebx, 8
xor ebx, 0x79bf80b3
not ebx
not ebx
xor ebx, 0x79ce6be7
sub ecx, ebx
pop ebx
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push edx
mov dword [esp], 0x2b0fbfb6
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
push edi
mov edi, 4
add esi, edi
mov edi, dword [esp]
add esp, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
push dword [ebp - 0x18]
mov edx, dword [esp]
push edx
mov edx, esp
push eax
mov eax, 4
add edx, eax
pop eax
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
jmp 0x55a028
push edx
mov dword [esp], 0x4ab60d44
mov dword [esp], edi
mov dword [esp], 0x65e8cc67
mov dword [esp], ecx
mov dword [esp], ebx
push 0x5d523b2a
mov dword [esp], ecx
mov ebx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop ebx
push ebx
mov ebx, esp
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
push eax
mov eax, 4
add ebx, eax
pop eax
xchg dword [esp], ebx
pop esp
push esi
mov dword [esp], eax
push 5
pop eax
add eax, edx
push ecx
mov ecx, 0
add ecx, eax
xor esi, dword [ecx]
pop ecx
mov eax, dword [esp]
add esp, 4
push esi
push ebx
mov dword [esp], esp
add dword [esp], 4
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], edx
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
push edi
mov edi, esp
push ebx
mov ebx, 4
add edi, 0x7def2fc2
add edi, ebx
sub edi, 0x7def2fc2
pop ebx
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0x4a89ce
cmp esi, eax
jmp 0x4a89d9
mov byte [0x633872], al
sub esp, 4
mov dword [esp], edx
push ebp
mov ebp, 0x41b63014
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
push ebp
mov ebp, esp
push esi
mov esi, 4
add ebp, esi
pop esi
push edx
mov edx, 4
sub ebp, edx
pop edx
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push eax
mov eax, esp
push edi
mov edi, 0x792fe28d
inc edi
neg edi
shl edi, 1
sub edi, 0xdf99262
sub edi, 0xffa6a87e
add eax, edi
mov edi, dword [esp]
add esp, 4
push esi
mov esi, 4
add eax, esi
pop esi
xchg dword [esp], eax
pop esp
jmp 0x542b6b
sub esp, 4
mov dword [esp], ebx
mov dword [esp], 0x3119a5e9
mov dword [esp], esi
mov dword [esp], edx
mov dword [esp], ebx
push ebp
mov dword [esp], 0x7e1d8f0f
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
mov ebx, dword [esp]
push ebp
mov ebp, esp
push edi
push ebp
mov ebp, 0x5df9d2e5
xchg ebp, esi
inc esi
xchg ebp, esi
and ebp, 0x62fdeceb
and ebp, 0x7ffa82ad
or ebp, 0x6ee37f80
xor ebp, 0x6efbffa4
mov edi, ebp
pop ebp
add ebp, edi
pop edi
add ebp, 4
xchg dword [esp], ebp
pop esp
push edx
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
push 0x633a48
pop ebx
mov dword [esp + 4], ebx
pop ebx
push 0x5739b2d2
mov dword [esp], esi
push ecx
mov ecx, 0x393cfb4c
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], edi
mov dword [esp], ecx
push eax
mov eax, 0x72b2dff4
sub ecx, eax
pop eax
add ecx, eax
push esi
mov esi, 0x72b2dff4
add ecx, 0x7dfefd7c
sub ecx, 0x3f794df3
add ecx, esi
add ecx, 0x3f794df3
sub ecx, 0x7dfefd7c
pop esi
mov ecx, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
jmp 0x505e5c
push ecx
mov ecx, esp
push eax
mov eax, 0x4bff72c5
sub eax, 0x73ffabe4
push edi
mov edi, 0x5f6f041f
xor edi, 0x3bff80c4
sub edi, 0xa96d5f0
xor eax, edi
pop edi
inc eax
push edx
mov edx, 0x3e8fdb18
or edx, 0x77fbb2c4
sub edx, 0x94521b1
and eax, edx
pop edx
xor eax, 0x602480f
add ecx, eax
pop eax
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
push eax
mov dword [esp], ecx
push dword [esp]
pop ebx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop ebx
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push dword [0x633b0c]
mov esi, dword [esp]
push eax
mov eax, esp
push ebx
mov ebx, 4
add eax, ebx
pop ebx
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
jmp 0x4b1ff5
push dword [0x630034]
mov edx, dword [esp]
push ecx
mov ecx, esp
push eax
mov eax, 4
add ecx, eax
pop eax
push esi
mov esi, 0x67bfa7b5
dec esi
xor esi, 0x67bfa7b0
add ecx, esi
pop esi
xchg dword [esp], ecx
pop esp
jmp 0x4fc139
push ecx
mov dword [esp], ebp
mov dword [esp], ebx
mov dword [esp], edi
mov dword [esp], edx
push esi
mov dword [esp], ebx
mov dword [esp], edi
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
push ebx
mov dword [esp], edx
mov edx, 4
add edi, 0x53fe540c
add edi, edx
sub edi, 0x53fe540c
pop edx
xchg dword [esp], edi
pop esp
sub esp, 4
mov dword [esp], esi
mov dword [esp], ebx
push edi
mov dword [esp], 7
pop ebx
or ecx, ebx
pop ebx
jmp 0x518dbc
jmp dword [eax + 0x638d10]
push eax
push ecx
mov dword [esp], ebx
mov ebx, 0x21c11f36
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ecx
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov eax, dword [esp]
push ebp
push esp
pop ebp
push esi
mov esi, 0x56eb9a26
shl esi, 7
xor esi, 0x6e17610e
and esi, 0x79eb3a20
add esi, 0xe635ce04
add ebp, esi
pop esi
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x4a8be4
push dword [ebp - 0x10]
push dword [esp]
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
jmp 0x4ec502
push 0x3bb64ec
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], eax
pop dword [ebp - 0x10]
push edi
push esp
pop edi
push ebp
mov ebp, 4
add edi, ebp
pop ebp
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edi
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
mov ebx, dword [esp]
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
jmp 0x54e0cd
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push edi
mov dword [esp], esi
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop eax
push ebx
push esp
pop ebx
push esi
mov esi, 0x38f774e4
sub esi, 0x38f774e0
add ebx, esi
pop esi
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x4b414b
mov al, byte [0x630043]
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
sub esp, 4
mov dword [esp], ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
mov dword [esp], esi
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push 0x711175c1
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov eax, dword [esp]
push edi
push esp
pop edi
push ebx
mov ebx, 4
add edi, ebx
pop ebx
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0x4aeca5
push 0x4da31f76
mov dword [esp], ebp
mov dword [esp], edi
sub esp, 4
mov dword [esp], edi
mov edi, 0x633a48
mov dword [esp + 4], edi
pop edi
jmp 0x4d8c75
push ebx
push esp
pop ebx
add ebx, 4
push esi
mov esi, 4
sub ebx, esi
pop esi
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push esi
mov dword [esp], edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push eax
push ecx
mov dword [esp], ebp
mov dword [esp], ecx
mov ecx, 0x633a48
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], edx
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
mov dword [esp], 0x4959c922
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push ecx
mov ecx, 0x3ed5e6c3
shr ecx, 3
or ecx, 0x6fa5b13c
not ecx
push esi
mov esi, 0x5f1fbced
inc esi
dec esi
dec esi
or esi, 0x67df5471
xor esi, 0x102042fc
add ecx, esi
mov esi, dword [esp]
add esp, 4
add ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
jmp 0x4a6d4f
cmp dword [0x638d10], 0x23f0
jmp 0x505e51
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x4fb484
jne 0x5339ed
jmp 0x4c902b
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], esi
mov dword [esp], ebp
mov dword [esp], eax
mov dword [esp], edx
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
mov edx, dword [esp]
push ebx
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add esp, 4
push dword [0x630030]
push dword [esp]
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add esp, 4
push esi
mov dword [esp], ecx
push eax
mov dword [esp], ebx
mov ebx, 0x3c89b8de
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], eax
push ebx
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [esp]
pop eax
push edx
push esp
pop edx
add edx, 4
push ecx
mov ecx, 4
add edx, ecx
pop ecx
xchg dword [esp], edx
pop esp
jmp 0x4f04e1
push edx
push 0x1000
mov edx, dword [esp]
add esp, 4
sub eax, 0x62fef52a
sub eax, edx
add eax, 0x62fef52a
mov edx, dword [esp]
add esp, 4
push edi
push esp
pop edi
push ebp
mov ebp, 4
add edi, ebp
pop ebp
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], eax
push ecx
mov ecx, esp
add ecx, 4
push ebp
mov ebp, 4
sub ecx, ebp
pop ebp
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
push edi
mov edi, 0x3d5f8a00
add edi, 0xc2a07604
sub edx, edi
pop edi
xchg dword [esp], edx
pop esp
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x4cee52
push ecx
push esi
mov dword [esp], esp
add dword [esp], 4
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov dword [esp], eax
push ebx
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push dword [esp]
pop eax
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push eax
push 0x5fefd2d2
pop eax
add edx, eax
pop eax
sub edx, ecx
push ebx
mov ebx, 0x5fefd2d2
add edx, 0x3fff7ca6
sub edx, ebx
sub edx, 0x3fff7ca6
pop ebx
jmp 0x545dad
mov al, byte [0x633871]
jmp 0x4b3b95
push esi
sub esp, 4
mov dword [esp], edi
push 0x633868
pop edi
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
push eax
mov dword [esp], 0x604bb982
mov dword [esp], eax
push ecx
mov ecx, 0x74f84d83
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
pop eax
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov eax, dword [esp]
sub esp, 4
mov dword [esp], esi
mov esi, esp
push edx
mov edx, 0x7ddf2a6b
neg edx
xor edx, 0x7f171814
or edx, 0x7ffbb191
xor edx, 0xfffffd95
add esi, edx
pop edx
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0x4cbf98
sub esp, 4
mov dword [esp], eax
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], ebx
push esi
mov dword [esp], 0x55afc8a6
mov dword [esp], ecx
mov dword [esp], edx
mov dword [esp], ecx
pop ebx
mov ebx, dword [esp]
push 0x49dcf187
mov dword [esp], ebx
mov ebx, esp
push ebp
mov ebp, 0x277fd686
shl ebp, 8
add ebp, 0x80297a04
add ebx, ebp
pop ebp
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push dword [0x633b0c]
push dword [esp]
pop esi
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x55d1a1
push ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
mov dword [esp], eax
pop dword [0x6364f0]
push eax
mov eax, esp
add eax, 4
push edx
mov edx, 4
sub eax, edx
pop edx
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push ebx
push dword [esp]
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
mov eax, dword [esp]
push esi
mov esi, esp
push ebx
push 0x7f5ea279
pop ebx
add ebx, 0x7cbf46aa
add ebx, 0x7ffe55f0
xor ebx, 0x7c1c3f17
add esi, 0x777f87d3
add esi, ebx
sub esi, 0x777f87d3
pop ebx
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x527180
push edx
push esp
push dword [esp]
pop edx
add esp, 4
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edx
push ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push esi
mov esi, 4
add ebx, esi
pop esi
sub esp, 4
mov dword [esp], ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
xor edx, edx
jmp 0x53f9c0
xor ecx, ecx
jmp 0x524258
cmp esi, eax
jmp 0x4dd970
push dword [0x6364f8]
mov edx, dword [esp]
push ebp
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x4b8128
and edx, eax
jmp 0x560fbd
test eax, eax
jmp 0x4a873b
push dword [ebp - 0x10]
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
push esi
mov esi, esp
add esi, 4
sub esp, 4
mov dword [esp], ebp
mov ebp, 4
sub esi, ebp
pop ebp
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], ebx
push edx
mov dword [esp], 0x449f7fd5
mov dword [esp], ecx
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop ebx
push ecx
mov dword [esp], edx
mov edx, esp
push esi
mov esi, 0x7b5d9a81
sub esi, 0x7fbb8812
and esi, 0x5efb9ccd
add esi, 0xa55defb7
add edx, esi
pop esi
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x50828e
jae 0x57ad5f
jmp 0x4dc89f
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x537e0b
push edx
mov edx, esp
push eax
mov eax, 0x1f7b9abf
xor eax, 0x6bb562d8
sub eax, 0x74cef863
add edx, eax
pop eax
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], esi
mov dword [esp], ebx
push 0x14846d48
mov dword [esp], edx
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
push ebp
mov ebp, 0x3ec34561
sub ebp, 0x3ec3455d
add esi, ebp
pop ebp
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
sub esp, 2
mov word [esp], bx
push 0x6c64
pop bx
push bx
pop word [0x633870]
mov bx, word [esp]
add esp, 2
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ebp
push esp
mov ebp, dword [esp]
add esp, 4
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov edx, dword [esp]
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esp, 4
mov dword [esp], eax
mov eax, 4
add esi, eax
pop eax
xchg dword [esp], esi
pop esp
jmp 0x4f0568
sub esp, 4
mov dword [esp], edx
push eax
mov eax, 0x7d81f9b4
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], edx
sub esp, 4
mov dword [esp], eax
mov dword [esp], ecx
push ebp
mov ebp, 0x262ee048
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
push esi
mov dword [esp], ecx
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x4a8dd1
cmp edx, dword [ebp - 0xc]
jmp 0x4a99e1
push esi
mov dword [esp], ecx
mov ecx, 0x7bfd8905
add ecx, 1
sub ecx, 0xffffffff
and ecx, 0x57fa040c
sub ecx, 0xdb878fa3
push ecx
pop dword [0x633868]
pop ecx
sub esp, 4
mov dword [esp], eax
push ecx
mov ecx, 0x5d90c8d3
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
mov dword [esp], eax
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x555597
imul eax, ecx
push edi
push esp
pop edi
push ebx
mov ebx, 0x36ff334f
dec ebx
inc ebx
or ebx, 0x7fdf9cfa
and ebx, 0x5fef71ff
shr ebx, 7
xor ebx, 0xbfde67
add edi, ebx
pop ebx
push eax
mov eax, 4
sub edi, eax
pop eax
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push 0x34d75974
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0x4bb9cf
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
jmp 0x53a045
ja 0x4ce00b
jmp 0x4dd41b
add esp, 4
jmp 0x4fc140
mov cx, word [eax]
jmp 0x53f9b8
jmp 0x4a9ce4
jmp 0x4dd41b
jmp dword [eax + 0x638d10]
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
push edx
push edi
mov edi, 0x6bfb5d9c
xor edi, 0x6bfb5d98
mov edx, edi
pop edi
sub eax, edx
pop edx
xchg dword [esp], eax
pop esp
mov dword [esp], edx
push ebp
mov dword [esp], ecx
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop edx
push 0x7f459df3
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
push ebx
mov ebx, 0x75bf7342
and ebx, 0x3fb76548
push eax
mov eax, 0x3f772020
or ebx, eax
pop eax
dec ebx
push ebx
not dword [esp]
pop ebx
sub ebx, 0x3dfb1f95
xor ebx, 0xf2601068
push ebx
pop dword [0x63386a]
add eax, 0x63386a
push edi
mov edi, esp
push eax
mov dword [esp], ecx
mov ecx, 4
add edi, ecx
pop ecx
push edx
mov edx, 4
sub edi, edx
pop edx
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push esi
mov esi, 0x7b7892ed
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push dword [ebp - 0x18]
mov eax, dword [esp]
push ebx
mov ebx, esp
push edx
mov edx, 0x677fe219
add edx, 0x6fddc816
shr edx, 4
xor edx, 0xd75daa6
sub ebx, 0x5f7fd9f6
add ebx, edx
add ebx, 0x5f7fd9f6
pop edx
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x4fb47d
push ecx
push ebx
mov dword [esp], ecx
mov ecx, 0xf98b5e2
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], edi
mov dword [esp], edx
push eax
mov dword [esp], 0x4741a441
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
pop edx
push dword [esp]
mov edx, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
push dword [0x6364f8]
push dword [esp]
pop ecx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
push esi
mov esi, esp
add esi, 4
push ebp
mov ebp, 0x72d79733
shl ebp, 7
or ebp, 0x6efd0527
not ebp
sub ebp, 0x90006254
sub esi, ebp
pop ebp
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
push edx
mov edx, 0x3bff0673
add ecx, edx
mov edx, dword [esp]
add esp, 4
add ecx, eax
push edx
mov edx, 0x79f73716
not edx
dec edx
dec edx
push edi
mov edi, 0x6f873edb
add edi, 0x56db93a3
and edi, 0x37bd87af
and edi, 0x2fcf9a0b
shr edi, 7
sub edi, 0x5aefc9eb
add edi, 0xcad3235e
and edx, edi
pop edi
not edx
sub edx, 0xbdf8b125
sub ecx, edx
pop edx
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0x4f794a
push ebp
sub esp, 4
mov dword [esp], edi
mov edi, 0x73aa3500
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
pop dword [0x6364f8]
push esi
mov esi, esp
push edi
mov edi, 0x58ffda89
add edi, 0x6fbfd2ca
shr edi, 1
dec edi
not edi
add edi, 0x645fd6ad
add esi, edi
pop edi
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], esi
mov dword [esp], eax
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop edx
push ebx
push 0x6bcda032
mov dword [esp], esp
add dword [esp], 4
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x4aedb1
cmp ecx, dword [ebp - 0x1c]
jmp 0x4a99d6
mov dx, word [ecx]
jmp 0x5133e4
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], eax
push 0x708f18dc
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
add esp, 4
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x4dc9ea
xor eax, eax
push edx
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], esi
mov esi, 0x5b8ec54b
mov dword [esp + 4], esi
pop esi
mov dword [esp], eax
push ebp
mov dword [esp], 0x55c6e974
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
mov eax, dword [esp]
push edi
push esp
pop edi
push eax
push 4
pop eax
add edi, eax
pop eax
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x4da4cc
push ebx
mov ebx, esp
push edi
mov edi, 0x59df4265
dec edi
xor edi, 0x57cdeebc
sub edi, 0x5b74b119
xor edi, 0xb29dfbbb
sub ebx, 0xfb8d338
add ebx, edi
add ebx, 0xfb8d338
pop edi
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ecx
push edi
push 0x5e97ea07
pop edi
sub ecx, edi
mov edi, dword [esp]
add esp, 4
sub ecx, 0x6907d8e4
add ecx, eax
add ecx, 0x6907d8e4
add ecx, 0x5e97ea07
mov ecx, dword [esp]
push edi
mov edi, esp
add edi, 4
push eax
mov eax, 0x29d79950
dec eax
dec eax
not eax
add eax, 0x29d79953
add edi, eax
pop eax
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
mov esp, dword [esp]
push ebp
push ebp
push 0x3f000356
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
mov dword [esp], 0x633a48
push ebx
mov ebx, esp
add ebx, 4
push edi
mov edi, 4
sub ebx, edi
pop edi
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov dword [esp], ecx
mov dword [esp], ebx
push edx
mov dword [esp], 0x36e2103
mov dword [esp], ecx
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov ebx, dword [esp]
push edi
push esp
mov edi, dword [esp]
add esp, 4
add edi, 4
push ebx
mov ebx, 0x6dafcf53
xor ebx, 0x6dafcf57
add edi, ebx
pop ebx
xchg dword [esp], edi
pop esp
jmp 0x5655f0
push esi
mov esi, esp
add esi, 4
push eax
mov eax, 4
add byte [ecx - 0x187aee3a], al
jg 0x545dec
mov byte [ecx - 0x187aee12], 0x7f
pop eax
xchg dword [esp], esi
pop esp
mov dword [esp], edi
mov dword [esp], ebx
push edi
mov dword [esp], ebp
mov dword [esp], edi
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push esi
mov dword [esp], ecx
mov dword [esp], edx
mov dword [esp], ebp
mov dword [esp], edx
pop dword [0x630030]
push edx
push esp
mov edx, dword [esp]
add esp, 4
push ebp
mov ebp, 4
add edx, ebp
pop ebp
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
push eax
mov dword [esp], 0x53ac7ec4
mov dword [esp], ebx
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop eax
push ebp
push esp
mov ebp, dword [esp]
add esp, 4
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x54151d
push edx
push eax
mov dword [esp], ebp
mov ebp, 0x3e8c0176
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0x4abdda
push dword [ebp - 0x10]
mov ecx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push esi
mov esi, 0x4fb34366
add esi, 0xb04cbc9e
sub ecx, 0x3cdca0cd
add ecx, esi
add ecx, 0x3cdca0cd
pop esi
xchg dword [esp], ecx
pop esp
jmp 0x565587
push ecx
mov ecx, esp
add ecx, 4
push esi
mov esi, 4
sub ecx, esi
pop esi
push ecx
push dword [esp + 4]
mov ecx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], ecx
add ecx, 0x7bad9b66
sub ecx, 0x5fb696f4
add ecx, 0x69efe6c9
add ecx, eax
sub ecx, 0x69efe6c9
push edi
mov edi, 0x75e72d86
shl edi, 4
push edx
mov edx, 0x7e6add67
sub edx, 0x6f7fdf49
neg edx
and edx, 0x7bbef463
shl edx, 1
neg edx
sub edx, 0x1c9440a8
add edi, edx
pop edx
add ecx, edi
pop edi
sub ecx, 0x7bad9b66
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], eax
mov eax, esp
push edx
mov edx, 4
add eax, edx
pop edx
add eax, 4
xchg dword [esp], eax
pop esp
push ecx
push 0x4ffdefdc
mov ecx, dword [esp]
add esp, 4
sub ecx, 0x56ae113f
sub ecx, 0x3ebff471
and ecx, 0x66fdfce8
add ecx, 0xffffffff
inc ecx
push ebp
mov ebp, 0xcfd815b
xor ecx, ebp
pop ebp
mov dword [0x63386c], ecx
pop ecx
push ebp
push esp
pop ebp
add ebp, 4
push edx
mov edx, 4
sub ebp, edx
mov edx, dword [esp]
add esp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
push ebp
mov ebp, 0x377704e5
add ebp, 0x7afe6349
add ebp, 0xffffffff
xor ebp, 0x3c77b0bb
not ebp
xor ebp, 0x982aab9
sub ecx, ebp
pop ebp
push edx
mov edx, 0x35fe5fa3
dec edx
sub edx, 0x7de6efb5
shr edx, 4
add edx, 0x14760f3b
sub ecx, edx
pop edx
add ecx, eax
add ecx, 0x1ff78639
add ecx, 0x787f8dd0
push dword [esp]
mov ecx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x506967
push eax
mov dword [esp], esi
mov dword [esp], edi
mov dword [esp], ecx
mov dword [esp], eax
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
pop eax
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
push dword [ebp - 0x18]
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0x55f4f5
push 0x2f18640a
mov dword [esp], eax
mov eax, 3
add eax, ecx
xor esi, dword [eax]
mov eax, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push eax
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edx
mov edx, 0x7a2a2ded
mov dword [esp + 4], edx
pop edx
mov dword [esp], edx
push 0x1dbabaf4
mov dword [esp], ecx
mov edx, dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x4dd965
push ecx
mov ecx, 0x3c
sub ecx, 0x7f5b4a43
add ecx, edx
add ecx, 0x7f5b4a43
push ebx
mov ebx, 0
sub ebx, 0x3cbf9e75
add ebx, ecx
add ebx, 0x3cbf9e75
push edx
mov edx, 0
add edx, ebx
add eax, dword [edx]
pop edx
pop ebx
pop ecx
jmp 0x54d654
push edx
mov edx, esp
add edx, 4
push ecx
mov ecx, 4
sub edx, ecx
pop ecx
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
push edi
mov dword [esp], ebp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
mov edx, dword [esp]
push 0x46969201
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
push 0x4f8c7b24
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
mov dword [esp], edx
pop dword [0x630034]
push esi
mov esi, esp
push edi
mov edi, 4
add esi, edi
pop edi
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
mov dword [esp], eax
mov dword [esp], ebx
push 0x4a600219
mov dword [esp], ecx
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
push dword [esp]
pop ebx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
jmp 0x4ce00b
push eax
mov dword [esp], edx
push ebx
mov ebx, 0x67761830
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ecx
pop dword [ebp - 0x18]
push ebx
mov dword [esp], edx
sub esp, 4
mov dword [esp], edx
mov edx, 0x37675b1c
mov dword [esp + 4], edx
pop edx
mov dword [esp], ebx
push 0x716ecbcb
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0x4fee51
push ecx
mov dword [esp], edx
mov edx, esp
push esi
mov esi, 0x7d66d82b
neg esi
inc esi
shl esi, 7
sub esi, 0x4c93eafc
add edx, esi
pop esi
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push edx
mov dword [esp], 0x5282ea3
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], ecx
push ebx
mov ebx, 0x1fa759e8
add ebx, 0x3a4df5f3
add ecx, 0x2efec45b
add ecx, ebx
sub ecx, 0x2efec45b
pop ebx
push ebp
mov ebp, 0x79fb2398
add ecx, ebp
pop ebp
add ecx, eax
sub ecx, 0x79fb2398
sub ecx, 0x59f54fdb
mov ecx, dword [esp]
push 0x71236137
mov dword [esp], edx
push esp
mov edx, dword [esp]
add esp, 4
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x4f4615
push ecx
mov ecx, esp
add ecx, 4
push edi
mov edi, 0x5f0d5a14
sub edi, 0x1f79a855
shr edi, 2
inc edi
xor edi, 0xfe4ec74
sub ecx, edi
pop edi
push edi
mov dword [esp], ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov dword [esp], eax
push ebx
push edi
mov edi, 0x48553b16
mov dword [esp + 4], edi
pop edi
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
push eax
mov eax, esp
push edx
mov edx, 0x7bfb1638
add edx, 0x7a27de51
push esi
mov esi, 0x7d7f71c5
sub esi, 0x5ff90c64
xor esi, 0x4eff527b
neg esi
neg esi
shl esi, 2
add esi, 0x2df9b3c8
sub edx, esi
pop esi
dec edx
dec edx
sub edx, 0x7a446453
add eax, edx
pop edx
add eax, 4
xchg dword [esp], eax
pop esp
push ecx
mov ecx, esp
add ecx, 4
push edi
mov edi, 0x779775a3
sub edi, 0x7797759f
sub ecx, edi
pop edi
xchg dword [esp], ecx
pop esp
mov dword [esp], edi
push esi
mov esi, 0x633a48
mov dword [esp + 4], esi
pop esi
push ebx
mov ebx, esp
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
mov dword [esp], edx
mov dword [esp], ebx
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push edi
mov edi, esp
push eax
mov eax, 0x3ef30515
and eax, 0x7df311a2
xor eax, 0x3cf30104
add edi, eax
pop eax
push ebp
mov ebp, 0x7effd53f
shr ebp, 7
sub ebp, 0xfdffa6
add edi, ebp
pop ebp
xchg dword [esp], edi
pop esp
jmp 0x541476