Function at 0x4e508d
Capabilities:
Accept command line arguments

Disassembly:
mov ebp, ebp
mov ebx, ebx
mov ecx, ecx
mov edi, edi
mov ecx, ecx
mov edx, edx
mov ecx, ecx
mov edx, edx
mov edi, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push eax
mov dword [esp], 0xfe0f7d2
mov dword [esp], edx
mov dword [esp], 0x60a30842
mov dword [esp], ebp
mov dword [esp], eax
push edi
mov dword [esp], ecx
mov dword [esp], ebx
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop eax
push 0x5a920da3
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x4a74ba
push esi
push esi
mov esi, 0x6bcaad06
mov dword [esp + 4], esi
push dword [esp]
pop esi
add esp, 4
mov dword [esp], ebx
push ecx
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
add esp, 4
push dword [esp]
pop ebx
push eax
mov eax, esp
push edi
mov edi, 0x5ff3926b
add edi, 0xa00c6d99
add eax, edi
pop edi
push edi
mov edi, 4
add eax, edi
pop edi
xchg dword [esp], eax
pop esp
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x4f9ecb
jmp dword [eax + 0x604ce0]
push edi
mov edi, esp
add edi, 4
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
mov dword [esp], edi
mov dword [esp], ecx
pop dword [ebp - 0x18]
jmp 0x4ef34e
push 0x48bc2ef7
mov dword [esp], ebx
mov dword [esp], eax
push edx
mov edx, 0x4cbcd72c
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
push 0x1e861e13
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
mov eax, dword [esp]
push ebx
mov dword [esp], esi
push ebx
mov dword [esp], esp
add dword [esp], 4
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push esi
push edi
push 0x536f04eb
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
pop dword [0x600c04]
jmp 0x53348d
push ebp
push ebx
push eax
mov eax, 0x59bb0542
mov ebx, eax
pop eax
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], ebx
push edx
mov dword [esp], ebp
mov dword [esp], ecx
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
mov ebx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [0x600af4]
mov esi, dword [esp]
push eax
mov eax, esp
push edi
mov edi, 0x5cff916c
dec edi
shl edi, 7
add edi, 0x80374a84
add eax, edi
mov edi, dword [esp]
add esp, 4
add eax, 4
xchg dword [esp], eax
pop esp
push edx
push esp
mov edx, dword [esp]
add esp, 4
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], edx
push eax
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
mov edx, dword [esp]
push 0x5cb69073
mov dword [esp], eax
mov eax, esp
push edx
mov edx, 4
add eax, edx
pop edx
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x4e9927
sub esp, 4
mov dword [esp], esi
push edx
mov edx, 0x31ec8fdd
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], edx
push eax
mov dword [esp], esi
mov dword [esp], 0x14c7ac3b
mov dword [esp], esi
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push ecx
mov ecx, esp
push edx
mov edx, 4
add ecx, 0x3d7fcf30
add ecx, edx
sub ecx, 0x3d7fcf30
pop edx
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov byte [0x60085a], al
jmp 0x4fbc01
push dword [ebp - 0x18]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
sub esp, 4
mov dword [esp], ebx
push edi
mov edi, 0x35124c6c
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], eax
push esi
mov dword [esp], ebx
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0x5483d6
mov cx, word [eax]
jmp 0x4aed9e
cmp ecx, dword [ebp - 0x1c]
jmp 0x4bed78
push dword [0x602cc8]
mov edx, dword [esp]
push esi
push esp
pop esi
add esi, 4
push eax
mov eax, 4
add esi, eax
pop eax
xchg dword [esp], esi
pop esp
push eax
mov eax, esp
push edi
mov edi, 0x7f7fb323
and edi, 0x2fed2037
neg edi
xor edi, 0xd092dfd9
add eax, edi
pop edi
push ecx
mov ecx, 4
sub eax, ecx
pop ecx
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], ebx
push eax
mov eax, esp
push ecx
mov ecx, 4
add eax, 0x29fd2412
add eax, ecx
sub eax, 0x29fd2412
pop ecx
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push ebp
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x4c57a5
push dword [ebp - 0x18]
push dword [esp]
pop edx
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push ecx
mov dword [esp], ebx
push edx
mov edx, 0x16aa1953
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], ecx
sub ecx, 0x7ffbc48a
add ecx, 0x7d9372da
add ecx, eax
sub ecx, 0x7d9372da
push eax
mov dword [esp], 0x5b851b4b
mov dword [esp], ebp
mov ebp, 0x7ffbc48a
add ecx, ebp
pop ebp
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x50bfee
je 0x52b3e9
jmp 0x4abbbd
je 0x4be05d
jmp 0x55ac35
push dword [0x600af4]
mov esi, dword [esp]
push eax
push esp
pop eax
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
push edi
mov dword [esp], 0x59d2be42
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push ebp
push esp
mov ebp, dword [esp]
add esp, 4
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
push edx
mov edx, 4
add esi, edx
pop edx
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0x55a7af
test eax, eax
jmp 0x4bed6d
cmp esi, eax
jmp 0x51bd80
je 0x518b29
jmp 0x55ac3f
ja 0x4e9819
jmp 0x4fd795
push 0x37cef93e
mov dword [esp], edx
push ebx
mov ebx, 0x66ee8417
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push eax
mov eax, esp
push ecx
mov ecx, 0x3a3f0ab6
neg ecx
shl ecx, 6
add ecx, 0x8fc2ad84
add eax, ecx
pop ecx
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov eax, dword [esp]
push 0x7541d714
mov dword [esp], esi
mov esi, esp
add esi, 4
push edx
mov edx, 0x67933702
xor edx, 0x67933706
add esi, edx
pop edx
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
push dx
mov dx, 0x6c64
push dx
pop word [0x600858]
mov dx, word [esp]
push edi
push esp
pop edi
add edi, 4
add edi, 2
xchg dword [esp], edi
pop esp
push eax
mov eax, esp
add eax, 4
push 0x6487cf14
mov dword [esp], ebp
mov ebp, 4
sub eax, ebp
pop ebp
xchg dword [esp], eax
pop esp
mov dword [esp], edx
mov dword [esp], eax
push ebx
push dword [esp]
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
mov eax, dword [esp]
push edx
mov dword [esp], esi
mov esi, esp
add esi, 4
push eax
mov eax, 0x7ff728e1
inc eax
add eax, 0x8008d722
add esi, eax
pop eax
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
jmp 0x5025e5
push ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], 0x600a30
push esi
mov dword [esp], edx
mov dword [esp], 0x37b00087
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
push 0x4e8e2814
mov dword [esp], ebp
mov ebp, 0x5ff77c7d
add ecx, ebp
pop ebp
sub ecx, 0x3c570b88
add ecx, eax
add ecx, 0x3c570b88
push edi
mov edi, 0x5ff77c7d
sub ecx, edi
pop edi
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x4a2ede
jmp dword [eax + 0x604ce0]
push ebp
push esp
mov ebp, dword [esp]
add esp, 4
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
mov dword [esp], edx
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov edx, dword [esp]
push edi
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push edi
mov edi, 4
add ebx, edi
pop edi
xchg dword [esp], ebx
mov esp, dword [esp]
push edi
mov edi, 0x3fffaa1b
shr edi, 5
inc edi
push ebp
push 0x7affaab6
pop ebp
xor edi, ebp
pop ebp
push ecx
mov ecx, 0x6e1d3a92
inc ecx
shl ecx, 5
push eax
mov eax, 0x7bd6c762
add eax, 0x7edbab49
shr eax, 4
xor eax, 0x272d0e41
and eax, 0x5bb3f667
and eax, 0x7b7f7750
xor eax, 0x57f5ba63
xor ecx, eax
pop eax
add ecx, 0x76245b51
xor edi, ecx
pop ecx
mov dword [0x600856], edi
pop edi
jmp 0x5771b0
call fcn.00417d50
jmp 0x4e3ea6
imul eax, ecx
jmp 0x556339
add esp, 4
jmp 0x4d1066
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
mov dword [esp], ecx
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push edi
mov edi, esp
push edx
mov edx, 0x34f59f1a
xor edx, 0x2cf4684f
add edx, 0xe7fe08af
add edi, edx
pop edx
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
pop edx
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push 0x4054cd27
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
mov dword [esp], eax
pop dword [ebp - 0x10]
push ebp
push ebx
push 0x144666ea
pop ebx
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edi
mov dword [esp], ebx
push ecx
mov dword [esp], esi
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
mov ebx, dword [esp]
push ebp
mov ebp, esp
push esi
push 0x3afabe33
pop esi
add esi, 0xc50541d1
sub ebp, 0x7d7f0d4d
add ebp, esi
add ebp, 0x7d7f0d4d
pop esi
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x52d12e
push 0x6a644fba
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], ebp
mov dword [esp], ecx
sub ecx, 0x7dffc0a5
add ecx, 0x7f351e2e
add ecx, eax
push edx
mov edx, 0x7b5d427a
shr edx, 5
not edx
sub edx, 0x36754aba
add edx, 0x3e7d9db8
neg edx
sub edx, 0x7c9d78e8
sub ecx, edx
pop edx
push edi
mov edi, 0x77ad454c
sub edi, 0x7f7771c4
not edi
shr edi, 4
add edi, 0x7d831dde
sub ecx, 0x4effe493
add ecx, edi
add ecx, 0x4effe493
pop edi
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ebp
push ebx
mov dword [esp], 0x706d6f63
pop ebp
push ebp
pop dword [0x600852]
mov ebp, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
push edi
mov dword [esp], ebp
mov ebp, 4
sub ebx, ebp
pop ebp
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], edx
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edi
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
jmp 0x4dfb88
push dword [ebp - 0x10]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x567eb9
push ebx
mov ebx, 3
add ebx, ecx
push ecx
mov ecx, 0
add ecx, 0x374db839
add ecx, ebx
push eax
mov eax, 0x5f6faf12
sub eax, 0x7eaf250e
shr eax, 7
dec eax
xor eax, 0x3fafa9a7
and eax, 0x7f79a36b
sub eax, 0x71a67e7
sub ecx, eax
pop eax
xor esi, dword [ecx]
mov ecx, dword [esp]
add esp, 4
pop ebx
push eax
push esp
pop eax
add eax, 4
push edx
mov edx, 4
add eax, 0x57df6016
sub eax, edx
sub eax, 0x57df6016
pop edx
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
push 0x2076729f
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], ecx
pop ebx
push dword [esp]
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
jmp 0x534dcf
push eax
push esp
pop eax
add eax, 4
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push ecx
mov ecx, esp
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [esp]
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
add esp, 4
push edi
push 0x6bfe1411
pop edi
xor edi, 0x5f7d7e3e
dec edi
or edi, 0x4fdff83e
push ebx
mov ebx, 0x3f37946b
add edi, ebx
pop ebx
push ebp
mov ebp, 0x57fc6722
dec ebp
add ebp, 0x15b54766
shr ebp, 5
and ebp, 0x78e7fbc0
and ebp, 0x3fad5d2b
xor ebp, 0xbf32879f
sub edi, ebp
mov ebp, dword [esp]
add esp, 4
mov dword [ebp - 0x14], edi
pop edi
jmp 0x584f92
push ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 0x6add8303
inc ebp
push ebp
not dword [esp]
pop ebp
or ebp, 0x77ff49f0
add ebp, 0x79fd5025
shl ebp, 4
sub ebp, 0x1fcce1fc
sub ebx, 0x7fbfa84e
sub ebx, ebp
add ebx, 0x7fbfa84e
pop ebp
xchg dword [esp], ebx
pop esp
mov dword [esp], edx
push ecx
mov ecx, esp
push edx
mov edx, 4
add ecx, edx
pop edx
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
pop edx
push ebx
mov ebx, esp
push eax
mov eax, 0x5bfd010c
shr eax, 1
and eax, 0x7ffebf8c
xor eax, 0x2dfe8080
add ebx, eax
pop eax
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push dword [ebp - 0x10]
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push esi
mov esi, 0x6fe91bd4
shl esi, 5
shr esi, 4
xor esi, 0xfd237ac
add ecx, esi
mov esi, dword [esp]
add esp, 4
xchg dword [esp], ecx
pop esp
push edi
push ebp
mov ebp, 0x60a2ba5f
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
mov dword [esp], ebx
mov dword [esp], edx
push 0x4db90840
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
pop edx
push edi
mov dword [esp], eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x54b1f7
jne 0x51e132
jmp 0x4a560f
push edi
mov dword [esp], esi
push edi
mov edi, 0xdcd4f25
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], edx
sub esp, 4
mov dword [esp], ebx
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
push ebx
mov ebx, 4
add eax, ebx
pop ebx
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], eax
pop dword [0x600c04]
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], 0x24d9c62a
mov dword [esp], ecx
sub ecx, 0x1ffc6279
push edi
mov edi, 0x7cdecef3
or edi, 0x3b7e841f
add edi, 0xfd787cb7
add ecx, edi
pop edi
add ecx, eax
sub ecx, 0x7d774bb6
push ebp
mov ebp, 0x7ef97378
neg ebp
dec ebp
sub ebp, 0x610a2a0e
add ecx, 0x7bffd8b5
add ecx, ebp
sub ecx, 0x7bffd8b5
pop ebp
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x4180ba
push 0x6b76b3b1
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x1feb2686
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
add ecx, 0x6fba0963
push esi
mov esi, 0x5ef78979
xor esi, 0x293063b6
add ecx, 0x3cccf39c
sub ecx, esi
sub ecx, 0x3cccf39c
pop esi
add ecx, eax
push ebx
mov ebx, 0x79fd37f9
and ebx, 0x657dcb06
xor ebx, 0x5ffdf76f
neg ebx
or ebx, 0x3fd3de9e
neg ebx
add ebx, 0x77c7ca6e
add ecx, ebx
pop ebx
sub ecx, 0x6fba0963
push dword [esp]
pop ecx
push eax
mov eax, esp
add eax, 4
add eax, 4
push 0x64ac444d
mov dword [esp], eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
push eax
mov eax, esp
add eax, 4
push edx
mov edx, 4
sub eax, edx
pop edx
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], ecx
mov dword [esp], 0x600a30
push ebp
push ecx
push 0x20329450
pop ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], edx
push ecx
mov ecx, esp
push ebx
mov ebx, 4
add ecx, ebx
mov ebx, dword [esp]
add esp, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
sub esp, 4
mov dword [esp], edi
push esp
pop edi
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
jmp 0x567798
push dword [ebp - 8]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x54c488
push ebp
push esi
mov esi, 7
push eax
mov dword [esp], esi
pop ebp
pop esi
or ecx, ebp
mov ebp, dword [esp]
add esp, 4
jmp 0x4e3e9e
push edi
mov dword [esp], ebx
push ebp
push 0x600a30
mov ebp, dword [esp]
add esp, 4
mov dword [esp + 4], ebp
pop ebp
jmp 0x55ec54
push ebp
push esp
pop ebp
push eax
mov eax, 4
add ebp, eax
pop eax
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov eax, dword [esp]
push edi
mov edi, esp
push ecx
mov ecx, 4
add edi, ecx
pop ecx
push ecx
mov ecx, 4
add edi, ecx
pop ecx
xchg dword [esp], edi
mov esp, dword [esp]
push dword [0x5fd038]
push dword [esp]
pop ecx
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push eax
push 0x5e7abafb
mov dword [esp], ebx
push 0x6dc50352
pop ebx
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebx
push esi
mov esi, esp
add esi, 4
sub esp, 4
mov dword [esp], ebp
mov ebp, 4
sub esi, ebp
pop ebp
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
pop ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
xchg dword [esp], ecx
pop esp
jmp 0x4fbbe7
cmp dword [0x604ce0], 0x23f0
jmp 0x534dc4
push ecx
push 0x3c
mov ecx, dword [esp]
add esp, 4
add ecx, edx
add eax, dword [ecx]
push dword [esp]
pop ecx
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 4
sub ecx, edx
pop edx
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
push edx
push edi
mov edi, 0x4fb178d6
push edi
pop edx
pop edi
add ecx, 0x7cf7e215
sub ecx, edx
sub ecx, 0x7cf7e215
pop edx
add ecx, eax
add ecx, 0x4fb178d6
push dword [esp]
pop ecx
push ebp
push esp
pop ebp
push edi
mov edi, 4
add ebp, edi
pop edi
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x52acdf
sub esp, 4
mov dword [esp], edi
mov dword [esp], ebp
mov dword [esp], eax
mov dword [esp], ecx
sub ecx, 0x5fef8410
add ecx, 0x34bfdf1d
add ecx, 0x3e3c24e7
sub ecx, 0x7ffe5e06
add ecx, eax
add ecx, 0x7ffe5e06
push ebp
mov ebp, 0x3e3c24e7
sub ecx, ebp
pop ebp
sub ecx, 0x34bfdf1d
add ecx, 0x5fef8410
push dword [esp]
mov ecx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
xor edx, edx
jmp 0x50242e
push ebp
mov dword [esp], esi
mov esi, esp
add esi, 4
push ecx
mov ecx, 4
sub esi, ecx
pop ecx
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ecx
push 0x788ccbe2
mov dword [esp], ebp
push ebp
mov dword [esp], 0x377606d5
pop ebp
add ecx, ebp
pop ebp
add ecx, eax
sub ecx, 0x377606d5
push dword [esp]
pop ecx
push ebp
push edi
mov dword [esp], esp
add dword [esp], 4
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push 0x7b4e172b
mov dword [esp], edi
mov dword [esp], 0x1a8a2368
mov dword [esp], esi
mov dword [esp], eax
pop dword [0x602cc8]
push edi
push ebx
mov ebx, 0x5e91a7e7
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], edx
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
push eax
push esp
pop eax
add eax, 4
push edi
mov edi, 4
add eax, edi
pop edi
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
jmp 0x56232c
mov dx, word [ecx]
jmp 0x502436
cmp edx, dword [ebp - 0xc]
jmp 0x4d52f0
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edi
mov dword [esp], 0x5d4a7333
mov dword [esp], edx
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
push dword [esp]
pop eax
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov al, byte [0x600859]
push edx
mov edx, esp
add edx, 4
push esi
mov esi, 0x7efa5eb2
dec esi
not esi
sub esi, 0x65f252b3
sub esi, 0x5f23226b
inc esi
xor esi, 0x71fff418
xor esi, 0xca0fd82d
add edx, 0x71fff4ca
sub edx, esi
sub edx, 0x71fff4ca
pop esi
xchg dword [esp], edx
pop esp
mov dword [esp], eax
push esi
mov dword [esp], ebx
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x4aa8f3
push ebx
push 0x102c3c3
mov dword [esp], esi
mov esi, 0x600850
mov dword [esp + 4], esi
mov esi, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push ebp
push edi
mov edi, 0x6a711a9e
mov dword [esp + 4], edi
push dword [esp]
pop edi
add esp, 4
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
push dword [esp]
pop eax
push ecx
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x54a42d
push dword [ebp - 0x18]
push dword [esp]
pop eax
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x4fd96b
push 0x6a952326
mov dword [esp], ebp
mov dword [esp], eax
push esi
mov esi, 0x4305e719
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebx
push eax
mov dword [esp], 0x7e1f7242
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
mov ebx, dword [esp]
push 0xceb938c
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
lea ecx, [eax + edx + 0x600840]
jmp 0x54ea2a
push edi
push ebx
push 0x34c56e32
pop ebx
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ecx
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop edx
push ecx
mov ecx, esp
push ebp
push 0x3fdaf2d7
pop ebp
and ebp, 0x3beddabc
xor ebp, 0x3bc8d290
add ecx, ebp
pop ebp
add ecx, 4
xchg dword [esp], ecx
pop esp
push ecx
push eax
mov eax, 0x3c8a0d0b
mov dword [esp + 4], eax
pop eax
mov dword [esp], esi
mov dword [esp], ebx
mov dword [esp], 0x600a30
jmp 0x54fa29
push edx
mov edx, esp
add edx, 4
sub edx, 4
sub esp, 4
mov dword [esp], ecx
mov dword [esp], edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], edx
push 0x6fc40a36
mov dword [esp], ecx
mov edx, dword [esp]
push 0x3d5c03d7
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop edx
push esi
mov esi, esp
push edx
mov edx, 4
add esi, 0x7fd99fe6
add esi, edx
sub esi, 0x7fd99fe6
pop edx
add esi, 4
xchg dword [esp], esi
pop esp
sub esp, 4
mov dword [esp], esi
push ebx
mov ebx, 0x600a30
mov dword [esp + 4], ebx
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push edx
push esi
mov esi, 0xebcfbbf
mov dword [esp + 4], esi
pop esi
mov dword [esp], edi
mov dword [esp], 0xb7805a7
mov dword [esp], edx
sub esp, 4
mov dword [esp], ebp
mov dword [esp], ecx
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
push ebx
mov dword [esp], ecx
mov ecx, 4
add eax, 0x5fbf498d
add eax, ecx
sub eax, 0x5fbf498d
pop ecx
xchg dword [esp], eax
pop esp
jmp 0x55d0a2
jmp 0x4fd795
push ebp
mov dword [esp], 0x23b584f7
mov dword [esp], eax
mov dword [esp], edx
mov dword [esp], ebx
mov dword [esp], ecx
add ecx, 0x7a99d2a4
add ecx, eax
push esi
mov esi, 0x7fd28dee
not esi
shr esi, 1
add esi, 0x6bbf9063
not esi
push edi
push 0x24368ffc
mov dword [esp], edx
mov edx, 0x2eb06430
mov edi, edx
pop edx
xor esi, edi
pop edi
sub ecx, esi
pop esi
mov ecx, dword [esp]
push ebp
mov ebp, esp
push ebx
mov ebx, 4
add ebp, 0x375e2d23
add ebp, ebx
sub ebp, 0x375e2d23
pop ebx
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edi
push ebx
push 0x600a30
pop ebx
mov dword [esp + 4], ebx
pop ebx
push eax
push esp
pop eax
add eax, 4
sub eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
mov dword [esp], edi
mov dword [esp], ebx
push 0x19d9ec6e
mov dword [esp], ecx
mov ebx, dword [esp]
push ebp
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop ebx
push 0x46c8d6de
mov dword [esp], eax
mov eax, esp
push ecx
mov ecx, 4
add eax, ecx
pop ecx
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x5344af
push ebp
mov ebp, esp
add ebp, 4
push eax
mov eax, 4
add ebp, 0x7eff6035
sub ebp, eax
sub ebp, 0x7eff6035
pop eax
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push 0x1e360bb5
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
push edi
mov edi, 0x7eef132a
xor edi, 0x7eef132e
add esi, edi
pop edi
xchg dword [esp], esi
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push ecx
push esp
mov ecx, dword [esp]
add esp, 4
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebp
mov dword [esp], eax
sub esp, 4
mov dword [esp], eax
mov dword [esp], ebx
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
push dword [esp]
pop eax
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x501bae
jne 0x4e8aee
jmp 0x4de465
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x52841f
push ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ecx
mov dword [esp], eax
mov eax, esp
add eax, 4
push esi
mov esi, 4
add eax, esi
pop esi
xchg dword [esp], eax
pop esp
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push esi
mov esi, 0x39d09c37
xor esi, 0x75f5db40
inc esi
inc esi
sub esi, 0x70d7c591
push ebp
mov dword [esp], edx
mov edx, 0x7eff9043
neg edx
and edx, 0x6bff530d
sub edx, 0xffffffff
xor edx, 0x5ff7e5cf
sub esi, edx
pop edx
xor esi, 0x425ab46
push esi
pop dword [0x600850]
pop esi
jmp 0x548a15
push dword [ebp - 4]
mov ecx, dword [esp]
push edi
mov edi, esp
push ebp
mov ebp, 4
add edi, ebp
pop ebp
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
sub esp, 4
mov dword [esp], edx
mov dword [esp], 0x641ff61
mov dword [esp], eax
mov dword [esp], edx
mov dword [esp], ecx
push esi
push 0x6ff2b23a
pop esi
push edx
mov edx, 0x78c73ac
add esi, edx
pop edx
add ecx, esi
pop esi
add ecx, 0x4fee0087
add ecx, eax
sub ecx, 0x4fee0087
sub ecx, 0x777f25e6
push dword [esp]
push dword [esp]
pop ecx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add esp, 4
jmp 0x4fdebd
cmp esi, eax
jmp 0x4ef456
push 0x4a6da08b
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], eax
pop dword [ebp - 4]
push ebp
mov ebp, esp
add ebp, 4
push edx
push 4
pop edx
add ebp, 0x7f55aac4
sub ebp, edx
sub ebp, 0x7f55aac4
pop edx
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
push edx
push esp
pop edx
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push 0x4919a73d
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
jmp 0x522bf7
cmp dword [ebp - 0x10], 0x1000000
jmp 0x4d52fb
push dword [ebp - 0x10]
push dword [esp]
pop ecx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push ebx
mov dword [esp], 0x7ab41467
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edi
mov edi, esp
push ecx
mov ecx, 4
add edi, ecx
pop ecx
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x4a6bf6
jmp 0x4180ba
push esi
mov dword [esp], edi
push ebx
push 0x43880e62
pop ebx
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebx
push edi
mov edi, esp
push ebx
mov ebx, 4
add edi, ebx
pop ebx
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push ebp
mov ebp, esp
add ebp, 4
push ebx
mov ebx, 4
add ebp, 0x7ef4e208
sub ebp, ebx
sub ebp, 0x7ef4e208
pop ebx
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], ecx
sub ecx, 0x7fcab5d6
add ecx, eax
sub esp, 4
mov dword [esp], ebx
push 0x1f3bd1bf
pop ebx
and ebx, 0x33bebc8f
shl ebx, 6
push ecx
mov ecx, 0x7adfb444
xor ecx, 0x660fbd53
sub ecx, 0xcdf69b2d
sub ebx, ecx
pop ecx
add ecx, ebx
pop ebx
mov ecx, dword [esp]
push eax
mov eax, esp
push ebp
push esi
mov esi, 0x69e75c6a
add esi, 0x7aeb9fca
sub esi, 0x7dbec98e
not esi
xor esi, 0x98ebcd5d
mov ebp, esi
pop esi
add eax, ebp
pop ebp
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x4f9d15
jae 0x515357
jmp 0x511b38
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x4d106d
push ecx
push 0x4991f733
mov dword [esp], ebp
push 0x22d67a11
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
sub esp, 4
mov dword [esp], edx
mov edx, 0x5effcfd5
sub ecx, 0x39ffedab
add ecx, edx
add ecx, 0x39ffedab
mov edx, dword [esp]
add esp, 4
add ecx, eax
sub ecx, 0x5effcfd5
push dword [esp]
push dword [esp]
pop ecx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
push dword [0x602cc8]
push dword [esp]
pop ecx
push eax
mov eax, esp
add eax, 4
push ebp
mov ebp, 4
add eax, ebp
pop ebp
xchg dword [esp], eax
pop esp
jmp 0x4a9fa1
push ebx
push edi
mov edi, 0x2ab32e6d
mov dword [esp + 4], edi
pop edi
mov dword [esp], edi
mov dword [esp], esi
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push edx
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov edx, dword [esp]
push edx
push esp
pop edx
push esi
mov esi, 0x5bcf167f
add esi, 0xa430e985
add edx, esi
pop esi
push ebp
mov ebp, 4
add edx, ebp
pop ebp
xchg dword [esp], edx
pop esp
xor ecx, ecx
push 0x32c4a615
mov dword [esp], eax
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], eax
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
mov eax, dword [esp]
push ebx
mov ebx, esp
sub esp, 4
mov dword [esp], eax
mov eax, 4
add ebx, eax
pop eax
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0x4aed96
push 0x234398fc
mov dword [esp], ebx
push 0x794ac743
mov dword [esp], edx
mov edx, 0x468cc6a3
mov dword [esp + 4], edx
pop edx
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push esi
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
push edx
mov edx, 4
add esi, edx
pop edx
xchg dword [esp], esi
pop esp
add esp, 4
push eax
push edx
mov edx, 0x2e706973
mov eax, edx
pop edx
mov dword [0x600854], eax
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push ecx
mov ecx, esp
add ecx, 4
push ebx
mov ebx, 0x6dfb6da4
push ebp
mov ebp, 0x2cdf5553
neg ebp
shr ebp, 2
xor ebp, 0x5933470b
xor ebx, ebp
pop ebp
sub ecx, ebx
pop ebx
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov dword [esp], ecx
sub ecx, 0x7fe7e267
add ecx, eax
push eax
push edi
mov edi, 0x7df4a54f
and edi, 0x7fa431a3
add edi, 0x4bfbc05f
sub edi, 0x49b7fefb
mov eax, edi
pop edi
sub ecx, 0x7dbf348a
add ecx, eax
push ebp
mov ebp, 0x7ef3377d
and ebp, 0x7effead2
not ebp
xor ebp, 0x3fe97fa5
sub ebp, 0x41266d80
add ecx, ebp
pop ebp
pop eax
mov ecx, dword [esp]
push ecx
mov ecx, esp
push esi
mov esi, 0x7f7ea3de
not esi
neg esi
xor esi, 0x7b12904f
sub esi, 0x46c338c
add ecx, esi
pop esi
push edi
mov edi, 4
add ecx, edi
pop edi
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
jmp 0x4d7afd
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x4829f3d9
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
mov dword [esp], eax
push 0x2c59036c
mov dword [esp], ebx
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop eax
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0x4efe8c
push 0x7a744bf2
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
push edi
mov edi, esp
push edx
mov edx, 4
add edi, edx
pop edx
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ecx
pop ebx
mov ebx, dword [esp]
push eax
push esp
pop eax
add eax, 4
push ecx
push eax
mov eax, 0x77b753d4
shr eax, 2
neg eax
and eax, 0x3fdf5b8c
xor eax, 0x22120b0c
mov ecx, eax
pop eax
add eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
push esi
push edx
push ebx
mov ebx, 0x63f99cd1
mov edx, ebx
pop ebx
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
pop dword [0x602cc0]
jmp 0x514b01
push ebx
mov ebx, esp
push ecx
mov ecx, 0x7387da28
neg ecx
shr ecx, 1
dec ecx
and ecx, 0x7bdf4113
push edi
mov edi, 0x421c0007
xor ecx, edi
pop edi
add ebx, ecx
pop ecx
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ecx
sub ecx, 0x3aef3ab0
push ebx
mov ebx, 0x37f2e5f2
inc ebx
and ebx, 0x76e8ffa2
or ebx, 0x78fa36ae
push ecx
push 0x6cba45
pop ecx
add ebx, ecx
pop ecx
sub ecx, ebx
pop ebx
add ecx, eax
add ecx, 0x7f67b1f3
add ecx, 0x3aef3ab0
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
push esi
mov esi, 0x5b1017a2
xor esi, 0x3fff0df8
not esi
sub esi, 0x9b10e5a1
add ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
push ecx
push edi
mov edi, 0x3efa25d8
mov dword [esp + 4], edi
push dword [esp]
pop edi
add esp, 4
mov dword [esp], edx
jmp 0x4e3e94
push eax
push ecx
mov dword [esp], edi
mov edi, 0x484be7e3
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], ebx
push 0x29432fe7
mov dword [esp], ecx
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [ebp - 0x14]
push dword [esp]
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
push eax
mov dword [esp], esi
push ebx
push 0x72e2ad7c
pop ebx
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
push 0x661d4259
mov dword [esp], edx
mov dword [esp], 0x65ccec23
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
mov edx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
jmp 0x50cd73
push 0xffffffffffffffff
outsd dx, dword [esi]
add ecx, 0x7feeefc0
add ecx, eax
sub ecx, 0x7feeefc0
push ebp
push 0x6d51abd4
pop ebp
push ebp
inc dword [esp]
pop ebp
sub ebp, 0x7fba48db
sub ebp, 0x7d97f829
add ecx, ebp
pop ebp
mov ecx, dword [esp]
push ebx
push esp
pop ebx
push edx
mov edx, 4
add ebx, edx
pop edx
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov al, byte [0x5fd043]
push esi
push edi
mov edi, 0x46beb8f3
mov dword [esp + 4], edi
pop edi
mov dword [esp], esi
mov dword [esp], eax
push 0x3e3233aa
mov dword [esp], ebx
mov eax, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
jmp 0x4fd0d3
push ecx
mov ecx, esp
push eax
mov eax, 4
add ecx, eax
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
push 0x866db8
mov dword [esp], ebx
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
push edx
mov edx, 4
add edi, edx
pop edx
xchg dword [esp], edi
pop esp
push dword [esp]
mov eax, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add esp, 4
push ecx
push edx
push esi
mov dword [esp], 0x136a221c
pop edx
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
jmp 0x4a256d
push edx
mov dword [esp], 0x172aeeb
mov dword [esp], ebx
push esi
mov esi, 0x2feff91f
mov dword [esp + 4], esi
pop esi
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push eax
mov eax, esp
push ecx
mov ecx, 4
add eax, ecx
pop ecx
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov edx, dword [esp]
push 0x284650fb
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
sub esp, 4
mov dword [esp], esi
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], edx
push esi
push 0x1f51d876
mov dword [esp], ecx
mov ecx, 0x5fb5392e
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push ecx
mov dword [esp], ebp
mov ebp, esp
push ebx
mov ebx, 4
add ebp, ebx
pop ebx
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x53b6ce
push ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], edx
pop dword [0x5fd034]
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
push esi
mov esi, 4
add ebx, esi
pop esi
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], edx
push 0x42682df
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
mov edx, dword [esp]
push 0x72824933
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push eax
mov eax, 4
add ecx, eax
pop eax
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
jmp 0x4e9819
push dword [0x5fd034]
push dword [esp]
pop edx
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
jmp 0x56226b
push ebx
mov ebx, 5
add ebx, 0x5edefecb
add ebx, edx
sub ebx, 0x5edefecb
sub esp, 4
mov dword [esp], eax
mov eax, 0
add eax, 0x71fc00d9
add eax, ebx
sub eax, 0x71fc00d9
xor esi, dword [eax]
pop eax
pop ebx
jmp 0x51bd8b
jmp 0x52b3e9
jmp 0x52b3e9
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
sub esp, 4
mov dword [esp], esi
push 0x117aabf9
mov dword [esp], edi
mov edi, 0x2bf8402e
mov dword [esp + 4], edi
pop edi
mov dword [esp], ebx
push 0x228f19da
mov dword [esp], esi
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0x510a4a
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push eax
push edi
mov edi, 0x380f2354
mov dword [esp + 4], edi
push dword [esp]
pop edi
add esp, 4
mov dword [esp], ecx
add ecx, 0x7cdfa7fc
sub ecx, 0x277ece90
sub ecx, 0x5fbf6b71
add ecx, eax
add ecx, 0x5fbf6b71
add ecx, 0x277ece90
push edi
mov edi, 0x6dd7aeb4
push esi
mov esi, 0
sub esi, edi
mov edi, esi
pop esi
xor edi, 0x25fd8141
xor edi, 0x5fff9288
add edi, 0x94b56577
sub ecx, edi
pop edi
mov ecx, dword [esp]
push esi
push esp
pop esi
add esi, 4
push eax
mov eax, 4
add esi, eax
pop eax
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0x5080c7
push ebx
mov dword [esp], eax
mov dword [esp], ecx
push ebx
mov ebx, 0x7f31d8e8
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], eax
push 0x2119004f
mov dword [esp], ebx
push dword [esp]
pop eax
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop eax
push ebp
push esp
pop ebp
add ebp, 4
push ecx
mov ecx, 0x75370d65
shl ecx, 4
shl ecx, 8
and ecx, 0x3d77ff9d
and ecx, 0x1edd97fb
sub ecx, 0x10540ffc
add ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
and edx, eax
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], esi
push edi
mov edi, 0x6216e465
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
push ebx
mov dword [esp], esi
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
push ebx
mov ebx, 4
add eax, ebx
mov ebx, dword [esp]
add esp, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x55249f
push ebx
mov ebx, esp
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
push ebp
mov ebp, 4
sub ebx, ebp
pop ebp
xchg dword [esp], ebx
pop esp
mov dword [esp], edx
mov dword [esp], ecx
sub ecx, 0x3fbde404
add ecx, eax
push eax
mov eax, 0x77ff9d7b
or eax, 0x1df72304
add eax, 0x7afdab5d
or eax, 0x3a966721
shr eax, 1
not eax
inc eax
xor eax, 0xbd3dac06
sub ecx, 0x7d7c4901
sub ecx, 0x5ad97d0f
add ecx, eax
add ecx, 0x5ad97d0f
add ecx, 0x7d7c4901
pop eax
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
push ebx
mov ebx, 0x67f35515
add ebx, 0x1f5e470a
or ebx, 0x7dff2c2f
sub ebx, 0x7feb746d
or ebx, 0x6fffd3cc
sub ebx, 0xefffd7da
add edi, ebx
pop ebx
xchg dword [esp], edi
pop esp
push dword [ebp - 0x18]
push dword [esp]
push dword [esp]
pop eax
add esp, 4
add esp, 4
jmp 0x54b0a7
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push ebp
push ebp
mov ebp, 0x5c0f3dff
mov dword [esp + 4], ebp
push dword [esp]
pop ebp
add esp, 4
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov eax, dword [esp]
push ebp
mov ebp, esp
push esi
mov esi, 4
add ebp, 0x5df765af
add ebp, esi
sub ebp, 0x5df765af
pop esi
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0x4ba547
push ebx
mov dword [esp], ebp
mov ebp, 0x7ed9f0e6
sub ebp, 0x5fed9ab9
push edi
mov edi, 0x7cffe952
add ebp, edi
pop edi
neg ebp
push ecx
mov ecx, 0x6413d081
xor ebp, ecx
mov ecx, dword [esp]
add esp, 4
sub eax, ebp
pop ebp
push ebp
push edx
push eax
mov dword [esp], 0x11410d86
pop edx
mov dword [esp + 4], edx
pop edx
mov dword [esp], ebx
push eax
mov dword [esp], ecx
push dword [esp]
pop ebx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
pop ebx
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0x4e4ff0
push 0x305a9512
mov dword [esp], ebp
mov ebp, esp
push ebx
push 0x3f5d1f17
pop ebx
shr ebx, 5
xor ebx, 0x1fae8fc
add ebp, ebx
pop ebx
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
sub esp, 4
mov dword [esp], edx
mov edx, 0x565bee4b
sub ecx, 0x5ddfdd01
sub ecx, edx
push edx
mov edx, 0x6c8f703b
not edx
xor edx, 0x3fffebf9
inc edx
add edx, 0x1d7aa899
not edx
xor edx, 0x682a2e29
add ecx, edx
pop edx
pop edx
add ecx, eax
add ecx, 0x565bee4b
push dword [esp]
push dword [esp]
pop ecx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
push ebp
mov ebp, 0x6feab30e
shl ebp, 4
shr ebp, 2
push edx
push 0x6b77287e
pop edx
shr edx, 1
xor edx, 0x7ef83a5a
push edx
inc dword [esp]
pop edx
dec edx
xor edx, 0x7dff96e0
add edx, 0x493ec9ae
sub ebp, 0x3dff7eb8
sub ebp, edx
add ebp, 0x3dff7eb8
pop edx
not ebp
neg ebp
xor ebp, 0xd3c3ae28
mov dword [0x60085a], ebp
pop ebp
jmp 0x4ea634
push ebx
mov dword [esp], edx
mov edx, esp
add edx, 4
push ebx
mov ebx, 0x317f095a
sub ebx, 1
dec ebx
shr ebx, 5
xor ebx, 0x18bf84e
sub edx, ebx
pop ebx
xchg dword [esp], edx
pop esp
mov dword [esp], edx
push ebx
mov dword [esp], ecx
push dword [esp]
pop edx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
sub esp, 4
mov dword [esp], eax
push 8
pop eax
mov dword [ebp - 8], eax
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
push ecx
push 0x7e51468c
pop ecx
dec ecx
or ecx, 0x6fde72e1
add ecx, 0x80208919
add ebp, ecx
pop ecx
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
push 0x24b32c36
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
mov eax, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
push ebx
mov ebx, 4
sub ecx, 0x37eee541
add ecx, ebx
add ecx, 0x37eee541
pop ebx
xchg dword [esp], ecx
pop esp
jmp 0x4db870