Function at 0xa970ea
Capabilities:
Accept command line arguments

Disassembly:
push 0x24508f52
mov dword [esp], eax
sub esp, 4
mov dword [esp], edx
mov edx, 0x76b9c165
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
push ebp
push esp
pop ebp
push edx
mov edx, 4
add ebp, edx
pop edx
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
pop eax
mov eax, dword [esp]
push eax
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push ecx
push 0x48f4bbce
pop ecx
xor ecx, 0x77fd3faf
add ecx, 0x757a9c40
sub ecx, 0xb484209d
add ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
push dword [ebp - 0x10]
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
push esi
mov esi, 0x37efb4f0
shr esi, 8
neg esi
shr esi, 3
add esi, 0x4b8d1556
neg esi
xor esi, 0x9479e8a5
add edx, esi
pop esi
xchg dword [esp], edx
pop esp
jmp 0xb34ddd
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edi
push edi
mov edi, 0x1d1ef2fb
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
push eax
mov dword [esp], ebp
mov dword [esp], edx
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [ebp - 0x18]
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
push ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebp
mov dword [esp], ecx
mov dword [esp], edx
push 0x5fdd2424
mov dword [esp], ecx
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 4
add eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
jmp 0xb62806
jmp 0xab09c6
jmp 0xab09c6
push ebp
mov dword [esp], edi
mov dword [esp], esi
push ecx
mov ecx, 0x5963464f
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
push ebp
push ebx
mov ebx, 0x7398b4c6
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], ecx
pop ebx
push dword [esp]
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
add esp, 4
push dword [ebp - 0x18]
push dword [esp]
pop edx
push edi
mov edi, esp
push edx
mov edx, 0x5fb3fe77
add edx, 0xeead273
sub edx, 0x7dd41dba
dec edx
sub edx, 0xf0cab32b
add edi, edx
pop edx
add edi, 4
xchg dword [esp], edi
pop esp
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], ecx
mov dword [esp], edi
mov dword [esp], ebx
push 0x519b6665
mov dword [esp], edi
push esi
mov esi, 0x546edf9b
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
pop ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
jmp 0xae02cb
ja 0xb47040
jmp 0xb2ede7
jae 0xac05c7
jmp 0xb4d1b1
add byte [ecx], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
sldt word [eax]
add byte [ebx + 0x4c], ch
outsd dx, dword [esi]
popal
jb 0xa98088
outsd dx, dword [esi]
arpl word [ebx], bp
mov byte [0x40517572], al
jne 0xa980c3
inc ecx
insb byte es:[edi], dx
push ebp
inc eax
jle 0xa980c9
jbe 0xa980c8
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax + 0x2a], ch
dec esi
mov edi, 0x2404892b
mov eax, esp
add eax, 4
sub eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
mov dword [esp], ebp
mov dword [esp], ecx
sub esp, 4
mov dword [esp], edx
mov edx, 0x3dbf9b35
inc edx
add edx, 0x42202bfd
sub ecx, edx
pop edx
add ecx, eax
sub esp, 4
mov dword [esp], esi
and byte [edx + 0x29], al
rcr dword [edx + 1], 1
rol dword [ebx + 0x348904ec], 0x24
mov esi, 0x779d31ee
sub esi, 0x2fad8db0
inc esi
shr esi, 5
sub esi, 0x825fb5ee
add ecx, esi
pop esi
push dword [esp]
pop ecx
push ebp
mov ebp, esp
push ecx
mov ecx, 0x367b4425
add ecx, 0x6b5bf2a6
neg ecx
add ecx, 0x77fb8386
rol dword [esi - 0x7e88047d], 0xe1
pop esi
and ecx, 0x6367165e
xor ecx, 0x4224041e
loope 0xa98129
push ss
arpl word [bx + di + 0x1ef1], ax
add al, 0x24
inc edx
add ebp, ecx
mov ecx, dword [esp]
add esp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [0x654034]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push 0x37e18d9d
mov dword [esp], edi
mov dword [esp], ecx
push edx
mov edx, 0x469b8afd
mov dword [esp + 4], edx
pop edx
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add al, 0
add byte [eax], al
push edi
mov edi, 4
add eax, edi
pop edi
xchg dword [esp], eax
pop esp
mov ebx, dword [esp]
push ecx
mov ecx, esp
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
add ecx, 4
push ecx
push dword [esp + 4]
mov ecx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
jmp 0xb2f189
jmp 0xb2ede7
mov cx, word [eax]
jmp 0xa99976
cmp ecx, dword [ebp - 0x1c]
jmp 0xae066b
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xaebf92
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xaf78df
sub esp, 4
mov dword [esp], edi
push esi
mov esi, 0x124a904d
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], edx
sub esp, 4
mov dword [esp], eax
push esi
mov esi, 0x7e97b81c
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
pop edx
push dword [esp]
pop edx
push edi
mov edi, esp
sub esp, 4
mov dword [esp], esi
mov esi, 0x6fea2f44
neg esi
or esi, 0x7fdec519
not esi
xor esi, 0x6d272bf6
sub esi, 0x7f7f393b
add esi, 0x1278378b
add edi, esi
pop esi
add edi, 4
xchg dword [esp], edi
pop esp
push ebx
mov ebx, 0x3b8a72e4
push edi
mov edi, 0x753f683c
and edi, 0x1ff3fe22
not edi
push edx
mov edx, 0x76ffc48b
and edx, 0x7a37574f
dec edx
push esi
mov esi, 0x37ed2c89
and esi, 0x7dff4e3d
dec esi
add esi, 0x3a001e86
sub edx, esi
pop esi
dec edx
add edx, 0x43cb3ff0
add edi, edx
pop edx
add ebx, edi
pop edi
mov dword [0x6577b2], ebx
mov ebx, dword [esp]
add esp, 4
jmp 0xaa4a81
test eax, eax
jmp 0xad63c4
push edx
push esp
pop edx
add edx, 4
sub edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push edi
push ebx
push esi
mov esi, 0x6d75c543
mov ebx, esi
pop esi
mov edi, ebx
pop ebx
dec edi
inc edi
push ebp
mov ebp, 0x29fcee69
xor edi, ebp
pop ebp
shl edi, 7
sub edi, 0x449594f6
push edi
pop dword [ebp - 0x14]
pop edi
jmp 0xac7817
push ecx
mov dword [esp], 0x72df96bc
mov dword [esp], esi
mov dword [esp], 0x74b6a379
mov dword [esp], edx
pop dword [0x654034]
push 0x65f2310c
mov dword [esp], esi
mov esi, esp
add esi, 4
push ebp
mov ebp, 0x7efe36f9
xor ebp, 0x3fef3aee
shl ebp, 5
push ebx
mov ebx, 0x76beb0f3
xor ebp, ebx
pop ebx
sub ebp, 0x7de723ea
neg ebp
xor ebp, 0x2947f1d3
sub esi, ebp
pop ebp
xchg dword [esp], esi
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], edi
mov dword [esp], esi
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
pop edx
push edx
mov edx, esp
push edi
mov edi, 4
add edx, edi
pop edi
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0xb47040
push edi
mov edi, esp
add edi, 4
sub edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], ebx
mov dword [esp], ecx
pop dword [ebp - 0x18]
push esi
mov dword [esp], 0x43f617f6
mov dword [esp], ecx
mov dword [esp], 0x5ee63e85
mov dword [esp], edi
mov dword [esp], ecx
push 0x204655d2
mov dword [esp], ebx
mov ebx, 0x33ef9e1a
inc ebx
push ebx
not dword [esp]
pop ebx
neg ebx
add ebx, 0x607d878
add ecx, ebx
pop ebx
add ecx, eax
push edi
mov edi, 0x39f77694
sub ecx, edi
pop edi
push dword [esp]
pop ecx
push eax
mov eax, esp
push esi
mov esi, 0x75f5ab84
sub esi, 0x7fffef74
sub esi, 0x6f7f9b81
and esi, 0x4ffe8336
xor esi, 0x6760002
add eax, esi
pop esi
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
jmp 0xa93820
add esp, 4
jmp 0xaa2564
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
push 0x40c82b98
mov dword [esp], ecx
mov ecx, 0x657988
mov dword [esp + 4], ecx
pop ecx
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], edx
mov dword [esp], eax
push edi
mov dword [esp], 0x25403362
mov dword [esp], ebx
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov eax, dword [esp]
push 0x5584ba63
mov dword [esp], ebp
mov ebp, esp
push eax
mov eax, 0x7996c57
add eax, 0x7fff7551
shl eax, 2
sub eax, 0x1e63869c
add ebp, eax
pop eax
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0xb1266f
cmp dword [ebp - 0x10], 0x1000000
jmp 0xa97a94
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 4
sub ecx, edx
pop edx
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ecx
push esi
mov esi, 0x7dfd45d9
add ecx, esi
pop esi
sub ecx, 0x7adbf1ff
add ecx, 0x2f5f9dd6
add ecx, eax
sub ecx, 0x2f5f9dd6
add ecx, 0x7adbf1ff
push eax
mov eax, 0x7f9f29cb
xor eax, 0x2626c12
sub ecx, eax
pop eax
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
xor edx, edx
sub esp, 4
mov dword [esp], edi
push esi
mov esi, 0x65f58c87
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], ecx
add ecx, 0x4fdb59a0
add ecx, eax
push eax
push 0x541e9a51
mov eax, dword [esp]
add esp, 4
shl eax, 5
not eax
push edx
mov edx, 0xd3aea3c1
add eax, edx
pop edx
sub ecx, eax
pop eax
push dword [esp]
pop ecx
push edx
mov edx, esp
push edi
mov edi, 4
add edx, edi
pop edi
push esi
mov esi, 4
add edx, esi
pop esi
xchg dword [esp], edx
pop esp
jmp 0xac7c12
mov byte [0x6577b2], al
jmp 0xb4ad4b
call fcn.0044a290
jmp 0xaa79e6
push esi
mov dword [esp], edx
push ebx
mov ebx, 0x4f8aa38a
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], ecx
jmp 0xa9e001
push edi
push ecx
mov ecx, 0x657988
mov dword [esp + 4], ecx
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
jmp 0xb3ea31
jne 0xaca490
jmp 0xadcf6e
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0xb5820f
push ebx
push 5
pop ebx
add ebx, edx
push eax
mov eax, 0
push edi
mov edi, 0x1eff70ec
sub eax, edi
pop edi
add eax, ebx
add eax, 0x1eff70ec
xor esi, dword [eax]
pop eax
pop ebx
push eax
mov dword [esp], 0x104c68b0
mov dword [esp], edi
mov dword [esp], ebx
mov dword [esp], edi
mov dword [esp], edx
push ebx
mov dword [esp], ecx
mov edx, dword [esp]
push 0x1fd7b21a
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
pop edx
push esi
mov esi, esp
push eax
mov dword [esp], ebp
mov ebp, 0x5fef4c5b
neg ebp
add ebp, 0x5fef4c5f
add esi, ebp
pop ebp
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0xa9e00c
push ebx
mov dword [esp], 0x4c7d3899
mov dword [esp], edx
push esi
mov esi, 0x6c3686f7
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push ecx
mov ecx, esp
push esi
mov esi, 4
add ecx, esi
pop esi
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push ebx
mov ebx, 8
push ebx
pop dword [ebp - 8]
mov ebx, dword [esp]
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push 0x3d381ac0
mov dword [esp], ebx
push ebx
mov ebx, 0x17cd4d36
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edi
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push esi
mov esi, esp
push ebx
mov ebx, 0x7cefb32a
dec ebx
neg ebx
neg ebx
xor ebx, 0x7cefb32d
add esi, ebx
pop ebx
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0xadc738
mov dx, word [ecx]
jmp 0xac7c1a
cmp edx, dword [ebp - 0xc]
jmp 0xae0676
push ebx
push 0xc7d39ec
mov dword [esp], eax
mov eax, 0x411dbaf5
mov dword [esp + 4], eax
pop eax
mov dword [esp], esi
mov dword [esp], ecx
add ecx, 0x7b966410
add ecx, eax
push eax
push 0x7debd40d
pop eax
push ecx
mov ecx, 0x6faf47a9
shr ecx, 5
or ecx, 0x7fe7b60f
shr ecx, 3
add ecx, 0x5f3d7d25
not ecx
sub ecx, 0x2b47f113
and eax, ecx
pop ecx
or eax, 0x5f5f1d06
xor eax, 0x4e9f916
sub ecx, eax
mov eax, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
lea ecx, [eax + edx + 0x657798]
push ebx
push edx
mov dword [esp], ecx
mov dword [esp], edx
mov edx, 0x1ca8828a
mov dword [esp + 4], edx
pop edx
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
push dword [esp]
pop ebx
push edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
mov esp, dword [esp]
jmp 0xac05a8
push esi
mov dword [esp], 0x593d14d7
mov dword [esp], esi
mov dword [esp], edi
mov dword [esp], 0x686a56a9
mov dword [esp], edx
sub esp, 4
mov dword [esp], edi
push esi
mov esi, 0x7306c864
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
pop edx
push dword [esp]
pop edx
push 0x4ad549aa
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push ecx
mov ecx, 0x2fff026e
add ecx, 0x3c3f07b8
push ebx
mov ebx, 0x3f0db41d
sub ebx, 0xffffffff
or ebx, 0x3eb92be8
shl ebx, 6
add ebx, 0xd2c25fcd
add ecx, ebx
pop ebx
push ecx
pop dword [0x6577ac]
mov ecx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
push ecx
mov ecx, 0x7fedb046
or ecx, 0x7fcefb89
shl ecx, 4
add ecx, 0x1004314
push edx
mov edx, 0x6ffccc9e
add edx, 0xaf8839a
sub ebx, edx
pop edx
add ebx, ecx
add ebx, 0x7af55038
pop ecx
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
push eax
mov eax, 4
add ebx, eax
pop eax
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
jmp 0xb5e3d9
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], ebp
mov dword [esp], ecx
push eax
push 0x46f6c34f
pop eax
not eax
shl eax, 1
or eax, 0x77bfee09
push edx
mov edx, 0x3ebefdbf
add edx, 0x7fdf5325
and edx, 0x5bce71ed
shr edx, 5
and edx, 0x317f010d
xor edx, 0x6dde8cb2
push eax
mov eax, 0xf074d305
add edx, eax
pop eax
add eax, edx
pop edx
xor eax, 0x8a4ace3d
sub ecx, eax
pop eax
add ecx, eax
add ecx, 0x5ff59118
push dword [esp]
pop ecx
push ecx
mov ecx, esp
push ebp
mov ebp, 0x6edcf31b
add ebp, 0x77bf340c
not ebp
inc ebp
push 0
sub dword [esp], ebp
pop ebp
dec ebp
sub ebp, 0xe69c2722
add ecx, ebp
pop ebp
add ecx, 4
xchg dword [esp], ecx
pop esp
sub esp, 4
mov dword [esp], esi
mov dword [esp], 0x8d4d2b7
mov dword [esp], ebp
mov ebp, 0x78707061
push ebp
pop dword [0x6577a8]
pop ebp
push edi
mov edi, esp
add edi, 4
push ecx
mov ecx, 4
sub edi, ecx
pop ecx
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], eax
mov dword [esp], ebx
push 0x56a27834
mov dword [esp], eax
mov dword [esp], 0x3ae549de
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push esi
mov esi, 0x7fff47d7
dec esi
add esi, 0x3f7f0c69
and esi, 0x6fbf5232
not esi
shr esi, 3
sub esi, 0x1a1835f5
add ecx, esi
pop esi
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0xac90e6
push ebp
push 0x2280d93a
mov dword [esp], edx
mov dword [esp], eax
mov eax, 0x19bc8154
mov dword [esp + 4], eax
pop eax
mov dword [esp], eax
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
pop eax
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
push esi
sub esp, 4
mov dword [esp], edi
mov edi, 0x20510558
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
pop dword [0x657b5c]
jmp 0x4dcb4a
je 0xab09c6
jmp 0xb4bfab
push ecx
push esi
mov dword [esp], 0x206e5b1c
mov dword [esp], ebx
mov ebx, 0x657988
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
jmp 0xadd8b8
push edi
mov edi, esp
add edi, 4
sub edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], ebp
mov dword [esp], 0x318d7157
mov dword [esp], edx
push edx
sub esp, 4
mov dword [esp], edi
mov edi, 0x481e1cd
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
pop edx
push dword [esp]
mov edx, dword [esp]
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
jmp dword [eax + 0xa57c38]
push eax
push ebp
mov ebp, 0x63687b79
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
mov dword [esp], ebx
push 0x7f858c1e
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 0x7ffd3b0b
and ecx, 0x1efef42b
add ecx, 0x55b33d3d
dec ecx
shr ecx, 8
push edx
mov edx, 0x6ef32833
and ecx, edx
pop edx
push ebp
mov ebp, 0x7ffe6cd8
sub ebp, 0x7f8e44b3
xor ecx, ebp
pop ebp
add eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push edx
push esp
pop edx
push eax
push 4
pop eax
add edx, eax
pop eax
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
push ebp
mov dword [esp], eax
mov dword [esp], edx
mov dword [esp], 0x66159a4e
mov dword [esp], ecx
pop ebx
push dword [esp]
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0xb06902
push dword [ebp - 0x18]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xb43e78
je 0xa970ba
jmp 0xa9404e
je 0xae9fb3
jmp 0xa94058
push ecx
push ecx
mov dword [esp], edi
mov edi, 0x7734ea6b
mov dword [esp + 4], edi
pop edi
mov dword [esp], edi
mov dword [esp], ecx
push esi
mov dword [esp], ebp
push 0x3ebffbc2
pop ebp
add ecx, 0x7ff69764
sub ecx, ebp
sub ecx, 0x7ff69764
pop ebp
add ecx, eax
add ecx, 0x3ebffbc2
push dword [esp]
pop ecx
push ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 4
add ecx, edx
pop edx
xchg dword [esp], ecx
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
jmp 0xb41e96
xor ecx, ecx
push edi
push ecx
mov ecx, 0x16b59dee
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], edi
mov dword [esp], 0x141dc62a
mov dword [esp], ebx
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
mov ebx, dword [esp]
push edx
mov edx, esp
push esi
mov esi, 0x23f5c573
and esi, 0x7f7ceb3f
sub esi, 0x2374c12f
add edx, esi
mov esi, dword [esp]
add esp, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
jmp 0xa9996e
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
pop dword [0x657b5c]
sub esp, 4
mov dword [esp], ebx
push edi
push 0x5ada91ac
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
push ebx
mov eax, dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
jmp 0xb186f4
push ebp
push eax
mov dword [esp], ecx
mov ecx, 0x5cd165a8
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
mov dword [esp], ecx
add ecx, 0x67feb78f
add ecx, 0x7ff74097
add ecx, eax
push ebx
mov ebx, 0x7ffeff6c
xor ebx, 0x9bffb
sub ecx, ebx
mov ebx, dword [esp]
add esp, 4
push esi
mov esi, 0x67feb78f
sub ecx, esi
pop esi
mov ecx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 4
add ecx, edx
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
xchg dword [esp], ecx
pop esp
push ebx
push esp
pop ebx
add ebx, 4
push eax
mov eax, 0x6fff5fbe
or eax, 0x7fd48ae0
and eax, 0x55ffe221
add eax, 0x6fdb1a94
or eax, 0x36dd92d4
or eax, 0x739d6a71
xor eax, 0xf7dffef1
sub ebx, eax
pop eax
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0xb11260
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xaf78d8
jne 0xaf5d44
jmp 0xb19c35
push edx
push edi
push 0x5202dc75
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
push ebx
mov ebx, 4
add ebp, ebx
pop ebx
add ebp, 4
xchg dword [esp], ebp
pop esp
push esi
mov dword [esp], eax
mov dword [esp], 0x52ac64fd
mov dword [esp], ecx
mov ecx, 0x7bef2c07
not ecx
add ecx, 0xec5c9b6b
push ecx
pop dword [0x6577aa]
pop ecx
push ecx
mov dword [esp], 0x6d35b04b
mov dword [esp], edi
mov dword [esp], esi
mov dword [esp], ebx
push esi
mov dword [esp], ecx
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push edi
mov edi, 4
add ecx, edi
mov edi, dword [esp]
add esp, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
jmp 0xb0a096
cmp esi, eax
jmp 0xaf1af1
cmp esi, eax
jmp 0xac0ba2
push dword [ebp - 8]
push dword [esp]
pop edx
push ecx
mov ecx, esp
add ecx, 4
push esi
mov esi, 4
add ecx, esi
pop esi
xchg dword [esp], ecx
pop esp
push edi
mov edi, esp
add edi, 4
push ebx
mov ebx, 0x7edd40d3
not ebx
neg ebx
xor ebx, 0x7fadc215
dec ebx
sub ebx, 0x17082bc
sub edi, 0x7cc2ec24
sub edi, ebx
add edi, 0x7cc2ec24
pop ebx
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
push eax
mov eax, esp
add eax, 4
sub eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push esi
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0xb511c9
push ebx
mov ebx, esp
add ebx, 4
push esi
mov esi, 4
sub ebx, esi
pop esi
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ebp
mov dword [esp], edx
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebp
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
push edx
mov edx, 4
add ebx, edx
pop edx
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push eax
sub esp, 4
mov dword [esp], ebx
mov dword [esp], 0x4f7c61bb
mov eax, dword [esp]
add esp, 4
not eax
neg eax
shr eax, 4
shl eax, 6
and eax, 0x6ffe171d
sub eax, 0xc47a918d
mov dword [0x6577ae], eax
pop eax
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], ebp
mov dword [esp], eax
push edx
mov edx, esp
push esi
mov esi, 0x59ff8ce7
shl esi, 1
push esi
not dword [esp]
pop esi
add esi, 0xb3ff19d3
add edx, esi
pop esi
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
jmp 0xaa027e
push esi
push 0x4307338f
mov dword [esp], esp
add dword [esp], 4
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ebx
push 0x6f683a51
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
push ebx
mov ebx, esp
push eax
mov eax, 4
add ebx, eax
pop eax
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], eax
pop dword [ebp - 0x10]
jmp 0xb4ad26
push eax
mov eax, 3
add eax, ecx
sub esp, 4
mov dword [esp], edx
push 0
mov edx, dword [esp]
add esp, 4
add edx, eax
xor esi, dword [edx]
pop edx
pop eax
push edx
push edi
push 0x2b0d9123
pop edi
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], edx
push ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xaf1ae6
push dword [ebp - 4]
push dword [esp]
pop ecx
push 0x529c47c7
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
push edi
push dword [esp + 4]
mov edi, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], edx
push edi
mov dword [esp], ecx
mov edx, dword [esp]
push edx
mov edx, esp
push eax
mov eax, 0x77dee6aa
and eax, 0x6df55d98
not eax
neg eax
and eax, 0x77bfda3f
shl eax, 1
xor eax, 0xcb288016
add edx, eax
pop eax
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xaba32c
push 0x259944c5
mov dword [esp], ecx
push esi
mov esi, 0x6ed9e6f3
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push 0xb4d0070
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
pop edx
push ecx
mov ecx, esp
push ebx
mov ebx, 4
add ecx, ebx
mov ebx, dword [esp]
add esp, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0xb1ee42
jmp 0x4dcb4a
jmp dword [eax + 0xa57c38]
push dword [0x857c20]
push dword [esp]
pop ecx
push edi
mov edi, esp
add edi, 4
push edx
mov edx, 4
add edi, edx
pop edx
xchg dword [esp], edi
pop esp
push esi
push eax
push ebp
mov ebp, 0x6edfe445
not ebp
add ebp, 0x7ffb0d90
shr ebp, 5
push edi
mov edi, 0x7d7f7c84
neg edi
neg edi
sub edi, 0x6c4b2c0
sub ebp, edi
pop edi
xor ebp, 0x8706d861
mov eax, ebp
pop ebp
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
push edx
mov edx, 0x5bbc0576
sub ecx, edx
pop edx
add ecx, eax
push edi
push eax
mov eax, 0x5bbc0576
push eax
pop edi
pop eax
add ecx, edi
pop edi
push dword [esp]
pop ecx
push ebp
mov ebp, esp
push ebx
mov ebx, 0x71bfa0de
or ebx, 0x7e7f8ee5
add ebx, 0x537f829b
not ebx
xor ebx, 0x2c80ce61
add ebp, ebx
pop ebx
push ebx
mov ebx, 4
add ebp, ebx
pop ebx
xchg dword [esp], ebp
pop esp
jmp 0xb50fc6
push dword [0x857c20]
mov edx, dword [esp]
push esi
push esp
pop esi
push ecx
mov ecx, 0x3ffc9f3e
sub ecx, 0x6399f066
add ecx, 0x5f76f31d
add ecx, 0xc4265e0f
add esi, ecx
pop ecx
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0xb2db3e
push esi
push eax
push 0x52158778
mov eax, dword [esp]
add esp, 4
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ecx
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop edx
push 0x12bffbc6
mov dword [esp], edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov al, byte [0x6577b1]
push 0x29dc5d22
mov dword [esp], eax
push ebx
mov ebx, 0x3431615c
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebx
mov dword [esp], eax
push eax
mov dword [esp], 0x41d8b39e
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
mov eax, dword [esp]
push eax
push edx
mov edx, 0xe8ebe78
mov dword [esp + 4], edx
pop edx
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xabc3bb
push dword [0x657a4c]
push dword [esp]
pop esi
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push ebx
push eax
mov eax, 0x21f16d0a
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
mov dword [esp], 0x4655bf03
mov dword [esp], eax
push esi
mov dword [esp], ebx
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
push ebp
mov ebp, 4
add eax, ebp
pop ebp
xchg dword [esp], eax
pop esp
jmp 0xac3801
cmp dword [0xa57c38], 0x23f0
jmp 0xa97a9f
sub esp, 4
mov dword [esp], ebp
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop edx
push esi
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
and edx, eax
jmp 0xaa5126
push edi
push ebp
mov dword [esp], ecx
mov dword [esp], edi
mov edi, 0x3c0866f4
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
push ecx
push dword [esp]
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
mov edx, dword [esp]
push ebp
mov dword [esp], edx
mov edx, esp
add edx, 4
push edx
mov dword [esp], eax
mov eax, 4
add edx, eax
pop eax
xchg dword [esp], edx
pop esp
push ebp
mov ebp, esp
push eax
mov eax, 0x2bcf7f84
neg eax
or eax, 0x3fafcf76
add eax, 0x403086
sub ebp, 0x7ebb8366
add ebp, eax
add ebp, 0x7ebb8366
pop eax
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], edx
jmp 0xabd59b
push 0x20cb94d1
mov dword [esp], edx
mov edx, esp
push edi
mov edi, 0x777c46e7
neg edi
and edi, 0x1eff6b3a
and edi, 0x6cff48f8
sub edi, 0x8830814
add edx, edi
mov edi, dword [esp]
add esp, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push ebp
mov ebp, esp
push edi
mov edi, 0x47fef345
sub edi, 0x7b6f162c
not edi
shr edi, 7
add edi, 0x7c9fc0da
add edi, 0x3b0ddf67
add edi, 0x47eb7f7e
add ebp, edi
pop edi
add ebp, 4
xchg dword [esp], ebp
pop esp
mov eax, dword [esp]
push ebp
mov ebp, esp
push 0x37176a46
mov dword [esp], esi
mov esi, 4
add ebp, esi
pop esi
push ebx
mov ebx, 4
add ebp, ebx
pop ebx
xchg dword [esp], ebp
pop esp
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0xb23f42
push edx
push edi
mov edi, 0x6bc473aa
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
mov dword [esp], ecx
sub ecx, 0x76df448e
add ecx, 0x7ae957b3
add ecx, eax
push ebp
push edi
mov edi, 0x29bb6f79
push edi
pop ebp
pop edi
or ebp, 0x6b7762c2
xor ebp, 0x461b6a1a
or ebp, 0x3bdfeb83
neg ebp
sub ebp, 0x4516b86a
sub ecx, ebp
pop ebp
add ecx, 0x76df448e
push dword [esp]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push esi
mov dword [esp], 0x930d0f8
mov dword [esp], eax
mov dword [esp], edx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
push edx
mov edx, 4
add eax, edx
mov edx, dword [esp]
add esp, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0xb43d3a
push edx
mov edx, esp
add edx, 4
push ebx
mov ebx, 4
sub edx, ebx
pop ebx
xchg dword [esp], edx
pop esp
mov dword [esp], edx
mov dword [esp], ebx
push 0x4a738111
mov dword [esp], edx
mov dword [esp], esi
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push edi
push esp
pop edi
add edi, 4
push ebp
mov ebp, 4
add edi, ebp
pop ebp
xchg dword [esp], edi
pop esp
push ebx
mov dword [esp], ecx
push edx
mov edx, 0x6092ccb3
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
pop dword [0x857c20]
push 0x68dd16ba
mov dword [esp], ebp
push edi
mov edi, 0x62a9d262
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
xchg dword [esp], ecx
mov esp, dword [esp]
mov eax, dword [esp]
push eax
push esp
pop eax
add eax, 4
push edx
mov edx, 4
add eax, edx
pop edx
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0xa938bb
push eax
push edx
mov edx, 0x5e72522c
mov dword [esp + 4], edx
push dword [esp]
pop edx
add esp, 4
mov dword [esp], eax
sub esp, 4
mov dword [esp], eax
mov dword [esp], 0x343ce0b9
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
mov eax, dword [esp]
push edi
mov dword [esp], 0x19edc524
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
push eax
push edx
push eax
mov eax, 0x657988
push eax
pop edx
mov eax, dword [esp]
add esp, 4
mov dword [esp + 4], edx
pop edx
push eax
mov dword [esp], 0x3b6d5ca2
mov dword [esp], edx
mov dword [esp], 0x2fe5682e
mov dword [esp], esi
mov dword [esp], edx
push ecx
mov ecx, esp
push esi
mov esi, 0x379f2556
and esi, 0x6dbbfeb4
dec esi
xor esi, 0x259b2417
add ecx, esi
pop esi
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xb37c44
push ebp
push edx
push 0x3659808c
mov edx, dword [esp]
add esp, 4
mov dword [esp + 4], edx
pop edx
mov dword [esp], edx
sub esp, 4
mov dword [esp], edx
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
mov edx, dword [esp]
push 0x4b3e9147
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
push ebx
mov ebx, 0x3c
sub ebx, 0x5bb5054e
sub ebx, 0x7ab653b5
add ebx, edx
add ebx, 0x7ab653b5
push edi
mov edi, 0x7bfec158
push ebp
mov ebp, 0x7fd0e97a
add edi, ebp
pop ebp
and edi, 0x34e291b6
or edi, 0x7bbfe8a5
sub edi, 0x7b376c83
xor edi, 0x5b7d797a
add ebx, edi
pop edi
add eax, dword [ebx]
pop ebx
push ebp
mov ebp, esp
push edx
mov edx, 0x7eff59a9
shl edx, 2
not edx
add edx, 0xfbfd66a9
add ebp, 0x4fff24ff
add ebp, edx
sub ebp, 0x4fff24ff
pop edx
push edx
mov edx, 4
sub ebp, edx
pop edx
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
push ebx
mov dword [esp], ecx
mov ebx, dword [esp]
push esi
mov esi, esp
push edx
mov edx, 0x17ffb61c
xor edx, 0x17ffb618
add esi, edx
pop edx
add esi, 4
xchg dword [esp], esi
pop esp
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push edi
push 4
pop edi
add ebp, edi
pop edi
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0xaf09cc
push dword [ebp - 0x10]
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push esi
mov esi, esp
push ebx
mov ebx, 0x57cd9d38
neg ebx
or ebx, 0x299529df
shr ebx, 4
inc ebx
dec ebx
sub ebx, 0xa9b76b9
sub esi, 0x7cf6b616
add esi, ebx
add esi, 0x7cf6b616
pop ebx
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], edx
push eax
mov dword [esp], ecx
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xb50c5f
push dword [ebp - 0x10]
push dword [esp]
pop ecx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
jmp 0xaa6e99
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], edi
push edx
mov edx, 0x657988
mov dword [esp + 4], edx
pop edx
jmp 0xac0bad
push dword [ebp - 0x18]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push esi
mov dword [esp], edi
mov dword [esp], 0x143d2ab
mov dword [esp], ecx
sub ecx, 0x5db57a20
add ecx, eax
push esi
mov esi, 0x5db57a20
add ecx, 0x779f4b5b
sub ecx, 0x3fbe6de7
add ecx, esi
add ecx, 0x3fbe6de7
sub ecx, 0x779f4b5b
mov esi, dword [esp]
add esp, 4
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0xaeb941
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], 0x657988
push 0x1765f7d9
mov dword [esp], edx
mov edx, esp
add edx, 4
push ebx
mov ebx, 4
sub edx, 0x53a21525
sub edx, ebx
add edx, 0x53a21525
pop ebx
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ebx
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
mov ebx, dword [esp]
push edx
mov edx, esp
push ebx
mov ebx, 4
sub edx, 0x3ffb6f6e
add edx, ebx
add edx, 0x3ffb6f6e
mov ebx, dword [esp]
add esp, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xb57410
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov dword [esp], ebp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ebp
mov dword [esp], 0x4ce160fe
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push 0x53c32ca8
mov dword [esp], ebp
mov ebp, esp
push ebx
mov ebx, 0x7fdf75a7
xor ebx, 0x7fdf75a3
add ebp, ebx
pop ebx
add ebp, 4
xchg dword [esp], ebp
pop esp
push edx
push ebx
mov dword [esp], 0x6da3929f
pop edx
xor edx, 0x5eff2aac
push ebp
mov ebp, 0x15ef7e25
and ebp, 0x7eff5641
shl ebp, 3
neg ebp
xor ebp, 0x3f63fcb5
xor edx, ebp
mov ebp, dword [esp]
add esp, 4
not edx
shr edx, 5
shl edx, 5
xor edx, 0xab45e480
sub eax, edx
pop edx
push edx
mov edx, esp
push ebx
mov ebx, 0x2767089b
xor ebx, 0x2fffbae9
xor ebx, 0x7f7cc470
add ebx, 0x881b8a02
add edx, ebx
pop ebx
sub edx, 4
sub esp, 4
mov dword [esp], edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], ecx
add ecx, 0x3fed4252
push esi
mov esi, 0x35f758c8
add ecx, esi
mov esi, dword [esp]
add esp, 4
add ecx, eax
sub ecx, 0x35f758c8
push ebp
mov ebp, 0x4ddde64a
xor ebp, 0x7230a418
sub ecx, ebp
pop ebp
mov ecx, dword [esp]
push 0x25fc08f2
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
push ebp
mov ebp, 4
add ecx, ebp
pop ebp
xchg dword [esp], ecx
pop esp
jmp 0xb0b17f
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
mov dword [esp], edx
mov dword [esp], 0x57f943e9
mov dword [esp], ecx
push ebp
mov ebp, 0x7ef74be0
sub ebp, 0x6ff8afb1
push edi
mov edi, 0x7507ecc7
xor ebp, edi
pop edi
sub ecx, 0x6b374345
add ecx, ebp
add ecx, 0x6b374345
pop ebp
add ecx, eax
push esi
mov esi, 0x7bf970e8
sub ecx, esi
pop esi
push dword [esp]
mov ecx, dword [esp]
push edx
mov edx, esp
push esi
mov esi, 0x455f16d4
sub esi, 0x455f16d0
add edx, esi
pop esi
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push edx
mov dword [esp], 0x43677e0e
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edx
mov dword [esp], ecx
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov ebx, dword [esp]
push edx
push esp
pop edx
push ebx
mov dword [esp], ecx
mov ecx, 4
add edx, ecx
pop ecx
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xad3955
push 0x4d926f62
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 4
sub ebx, ebp
pop ebp
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], edx
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push esi
mov esi, esp
push ebp
mov ebp, 0x65f8ea7b
sub ebp, 0x65f8ea77
add esi, ebp
pop ebp
add esi, 4
xchg dword [esp], esi
pop esp
push dword [0x657a4c]
push dword [esp]
pop esi
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xb0df88
push edx
push esp
pop edx
add edx, 4
push ecx
mov ecx, 4
sub edx, ecx
pop ecx
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ebx
push 0x5682bf3b
mov dword [esp], eax
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [ebp - 0x14]
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
push esi
mov esi, 4
add edi, esi
pop esi
xchg dword [esp], edi
pop esp
sub esp, 4
mov dword [esp], eax
mov dword [esp], ebx
push esi
mov esi, 0x4af95f06
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebx
push 0x7a35c2d8
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop ebx
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
jmp 0xac7ca6
push esi
mov esi, esp
push ebp
mov ebp, 4
add esi, ebp
pop ebp
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
pop eax
push eax
push esp
pop eax
add eax, 4
push ebp
mov ebp, 4
add eax, ebp
pop ebp
xchg dword [esp], eax
pop esp
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0xaae274
sub esp, 4
mov dword [esp], edi
push ebx
push 0x6577a8
mov ebx, dword [esp]
add esp, 4
mov dword [esp + 4], ebx
pop ebx
jmp 0xb50d8a
push ecx
mov dword [esp], edi
mov edi, esp
add edi, 4
push ebp
push 0x3fb72184
pop ebp
shr ebp, 2
not ebp
inc ebp
not ebp
or ebp, 0x6be76c52
add ebp, 0x90101392
sub edi, ebp
pop ebp
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
sub ecx, 0x14bf140e
sub ecx, 0x73763395
sub ecx, 0x5dd7e9e8
sub ecx, 0x1af2a488
add ecx, eax
push edi
mov edi, 0x1af2a488
add ecx, edi
pop edi
add ecx, 0x5dd7e9e8
add ecx, 0x73763395
add ecx, 0x14bf140e
push dword [esp]
push dword [esp]
pop ecx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 2
xchg dword [esp], ecx
pop esp
mov word [esp], si
push bx
mov bx, 0x6c64
mov si, bx
pop bx
mov word [0x6577b0], si
mov si, word [esp]
add esp, 2
jmp 0xb271af
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edi
mov dword [esp], 0x2738d970
mov dword [esp], eax
pop dword [0x857c18]
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], edx
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edx
mov dword [esp], 0x4168d4b8
mov dword [esp], ecx
pop edx
push dword [esp]
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
jmp 0xa98b81