Function at 0x4ef8ad
Capabilities:
Accept command line arguments

Disassembly:
cmp esi, eax
jmp 0x4d6e00
push esi
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], ebx
push 0x3c2ba8
mov dword [esp], ecx
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push eax
mov dword [esp], esi
push edi
mov dword [esp], eax
mov eax, 0x633a48
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], eax
push ebx
mov ebx, 0x4b71d4f6
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], eax
mov dword [esp], ebx
push 0x6f5b4f40
mov dword [esp], ecx
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov ebx, dword [esp]
push ebp
mov ebp, esp
push esi
push 4
pop esi
add ebp, esi
pop esi
push esi
mov esi, 4
add byte [eax], al
add ebp, esi
pop esi
xchg dword [esp], ebp
pop esp
jmp 0x521776
push ecx
mov ecx, esp
push edx
mov edx, 4
add ecx, 0x7bec954f
add ecx, edx
sub ecx, 0x7bec954f
pop edx
sub ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], eax
push 0x274c0f73
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], edx
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
jmp 0x4ec6e6
push 0x36803b3e
mov dword [esp], edx
push 0xa
pop edx
push edi
mov dword [esp], edx
pop dword [ebp - 0x14]
pop edx
push ebx
push esp
pop ebx
add ebx, 4
push ebp
mov ebp, 4
sub ebx, ebp
pop ebp
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
push edi
mov edi, 4
add ebp, edi
pop edi
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x52a818
push ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], eax
pop dword [0x633c34]
jmp 0x5463e7
call fcn.00417ac0
jmp 0x4cf516
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
push ebx
push dword [esp + 4]
push dword [esp]
pop ebx
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
push edi
mov edi, 4
add edx, edi
pop edi
xchg dword [esp], edx
pop esp
push ecx
sub esp, 4
mov dword [esp], esi
mov esi, 0x633a48
mov dword [esp + 4], esi
mov esi, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x546301
push dword [ebp - 0x10]
mov eax, dword [esp]
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0x54bcac
jmp 0x521794
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], edi
mov dword [esp], ecx
add ecx, 0x2bcbc92d
add ecx, 0x6f3e856a
add ecx, eax
push eax
mov eax, 0x3bbf4803
neg eax
shr eax, 4
xor eax, 0x637a8e15
sub ecx, eax
pop eax
sub esp, 4
mov dword [esp], esi
mov esi, 0x57ff30aa
shl esi, 5
shr esi, 1
shr esi, 1
sub esi, 0x142dbc23
sub ecx, esi
pop esi
mov ecx, dword [esp]
push ebx
push esp
mov ebx, dword [esp]
add esp, 4
add ebx, 4
push edx
mov edx, 4
add ebx, edx
pop edx
xchg dword [esp], ebx
pop esp
push dword [ebp - 0x10]
mov ecx, dword [esp]
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0x51d72a
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
push edx
mov edx, 0x71b246b2
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
add ecx, 0x747eeac0
add ecx, eax
push edi
mov dword [esp], eax
push 0x747eeac0
pop eax
sub ecx, eax
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov ecx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push esi
mov esi, esp
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
mov dword [esp], ebx
mov dword [esp], eax
pop dword [0x6364f0]
push edi
mov dword [esp], 0x2e3b416c
mov dword [esp], ebx
push ebp
mov ebp, 0x554beb8b
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
push ebx
push dword [esp]
push dword [esp]
pop eax
add esp, 4
add esp, 4
push dword [esp]
mov eax, dword [esp]
push esi
mov esi, esp
push ebp
mov ebp, 0x35ff6510
neg ebp
or ebp, 0x77ffcad2
neg ebp
add ebp, 0x7ffe2881
xor ebp, 0x7ffe4d8b
add esi, ebp
pop ebp
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
jmp 0x4c3307
add esp, 4
jmp 0x51af47
jne 0x52be62
jmp fcn.004d0306
push ebp
mov dword [esp], ecx
push esp
mov ecx, dword [esp]
add esp, 4
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
push 0x279bd2b3
mov dword [esp], ecx
push dword [esp]
pop edx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
pop edx
push esi
push esp
mov esi, dword [esp]
add esp, 4
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push edx
mov dword [esp], esi
push edx
push 0x6ffff84e
pop edx
add edx, 0xf7f3e08b
mov esi, edx
pop edx
add esi, 0x7ffbb918
xor esi, 0x6ce7f0ae
shl esi, 5
or esi, 0x7add6cf7
not esi
add esi, 0xe552e46b
mov dword [0x63386e], esi
mov esi, dword [esp]
add esp, 4
jmp 0x4f7e75
mov dx, word [ecx]
jmp 0x4dca8a
cmp edx, dword [ebp - 0xc]
jmp 0x519ca7
push eax
push esp
pop eax
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
mov dword [esp], eax
pop dword [0x6364f8]
jmp 0x526992
xor edx, edx
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
and al, 0x8b
and al, 0x24
and al, 0x8b
and al, 0x24
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], ebx
push 0x4c56c954
mov dword [esp], edx
mov dword [esp], esi
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push 0x335b1eb8
mov dword [esp], esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x4dca82
push 0x39588343
mov dword [esp], edx
mov edx, esp
add edx, 4
push esi
mov esi, 4
sub edx, esi
pop esi
xchg dword [esp], edx
pop esp
mov dword [esp], eax
push ebp
mov dword [esp], esi
mov dword [esp], ecx
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
add esp, 4
push ecx
push edi
push 0x6ac22b5e
mov dword [esp], eax
mov eax, 0x7e7fc7c6
add eax, 0x9ab1a32b
mov edi, eax
pop eax
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
push edx
mov dword [esp], ebx
push ebp
mov ebp, 0x6b7b463
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ebx
push ebx
mov dword [esp], ecx
push dword [esp]
pop ebx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
add esp, 4
jmp 0x4f9291
jmp 0x507a63
jmp 0x507a63
sub esp, 4
mov dword [esp], ebp
mov dword [esp], eax
mov eax, 0x6c6c642e
sub esp, 4
mov dword [esp], eax
pop dword [0x633872]
pop eax
jmp 0x4b48f0
push ebx
push eax
mov dword [esp], 0x56026271
mov dword [esp], eax
mov eax, 0x44494967
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
sub ecx, 0x3ffccd82
sub ecx, 0x7e7b1d00
add ecx, eax
push ebx
mov ebx, 0x7e7b1d00
add ecx, ebx
mov ebx, dword [esp]
add esp, 4
push eax
mov eax, 0x3ffccd82
add ecx, eax
pop eax
mov ecx, dword [esp]
push eax
push ecx
mov dword [esp], esp
add dword [esp], 4
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push ebp
mov ebp, esp
push esi
mov esi, 0x72df3fa7
not esi
neg esi
shl esi, 3
xor esi, 0x96f9fd44
push ecx
mov ecx, 0x5d9eaa2d
and ecx, 0x7fefe9f5
xor ecx, 0x7df5a2ce
not ecx
xor ecx, 0xa1cf9ddc
add ebp, ecx
pop ecx
add ebp, esi
sub ebp, 0x7e4b68c8
pop esi
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
push ebp
mov dword [esp], ecx
mov dword [esp], edi
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
push ebp
mov ebp, esp
push edx
mov edx, 0x7fff6f60
sub edx, 0x7ffc4dd9
shl edx, 3
add edx, 0x1fee9da8
push esi
mov esi, 0x2007a9dc
sub edx, esi
pop esi
add ebp, edx
pop edx
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x4b5d32
push 0x6d5bddb7
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
mov esi, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], ecx
sub ecx, 0x7fd75225
sub ecx, 0x379dd6fd
add ecx, eax
add ecx, 0x379dd6fd
push ebp
push 0x7fd75225
pop ebp
add ecx, ebp
mov ebp, dword [esp]
add esp, 4
push dword [esp]
pop ecx
push eax
push esp
pop eax
add eax, 4
push ebx
mov ebx, 4
add eax, ebx
pop ebx
xchg dword [esp], eax
pop esp
push dword [ebp - 0x18]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ecx
push 0x490128b8
mov dword [esp], edi
push 0x7bb2d99e
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
push 0x7bce57a2
mov dword [esp], ecx
mov edx, dword [esp]
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0x51af4e
push dword [ebp - 4]
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0x4ef89d
sub esp, 4
mov dword [esp], ebp
mov dword [esp], 0x63b3f2a4
mov dword [esp], ebp
mov dword [esp], 0x18e438b7
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [ebp - 0x18]
mov eax, dword [esp]
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push eax
mov dword [esp], ecx
mov dword [esp], 0x612a3318
mov dword [esp], edx
mov dword [esp], ecx
sub ecx, 0x7aeb2eef
sub ecx, 0x696f8843
sub ecx, 0x76a93426
add ecx, eax
add ecx, 0x76a93426
add ecx, 0x696f8843
push edx
push 0x7d763a46
pop edx
neg edx
or edx, 0x6ff9ae79
shr edx, 1
dec edx
shl edx, 4
sub edx, 0x4e450d1
add ecx, edx
pop edx
push dword [esp]
pop ecx
push ebx
mov ebx, esp
sub esp, 4
mov dword [esp], edi
mov edi, 4
add ebx, edi
pop edi
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x557321
cmp dword [ebp - 0x10], 0x1000000
jmp 0x539d19
push edx
push esp
pop edx
add edx, 4
push edi
mov edi, 4
sub edx, edi
pop edi
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ecx
add ecx, 0x76f7f7a5
sub ecx, 0x3bf128a8
add ecx, eax
push edx
mov edx, 0x3bf128a8
add ecx, edx
mov edx, dword [esp]
add esp, 4
push edi
mov edi, 0x76f7f7a5
sub ecx, edi
pop edi
push dword [esp]
pop ecx
push 0x4d889593
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push edx
mov edx, esp
push 0x71797b21
mov dword [esp], ebx
mov ebx, 4
add edx, ebx
pop ebx
sub edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], ecx
push ebp
mov dword [esp], ecx
mov dword [esp], edi
mov edi, 0x37ff5650
sub edi, 0x93aa648
sub ecx, edi
pop edi
add ecx, 0x71da7b22
add ecx, eax
sub ecx, 0x71da7b22
add ecx, 0x2ec4b008
mov ecx, dword [esp]
push ebp
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
push eax
mov eax, 4
add ebx, eax
pop eax
xchg dword [esp], ebx
pop esp
jmp 0x55808f
push edx
mov edx, esp
push ebx
mov ebx, 0x7f5d0563
shl ebx, 7
inc ebx
xor ebx, 0x7df6e681
xor ebx, 0xd3745704
add edx, ebx
pop ebx
push edi
mov edi, 4
sub edx, edi
pop edi
xchg dword [esp], edx
pop esp
mov dword [esp], esi
mov dword [esp], eax
push 0x2f146410
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
mov eax, dword [esp]
push ebp
mov ebp, esp
push ecx
push ecx
mov dword [esp], 0x72df6b20
pop ecx
xor ecx, 0x1bec03ef
neg ecx
sub ecx, 0x77e7388d
not ecx
not ecx
xor ecx, 0x1ee55ea0
add ebp, ecx
pop ecx
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [0x633b0c]
mov esi, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push ebp
mov ebp, 4
add ecx, ebp
pop ebp
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
jmp 0x52b64f
push ebx
mov ebx, esp
add ebx, 4
push edi
mov edi, 0x3b377a9b
push ebx
mov ebx, 0
sub ebx, edi
mov edi, ebx
pop ebx
not edi
sub edi, 0x62fdbbd0
add edi, 0x5db96d4
xor edi, 0xde15559a
sub ebx, edi
pop edi
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ecx
push edx
mov edx, 0x7ffdc12b
add ecx, edx
mov edx, dword [esp]
add esp, 4
add ecx, 0x6f9fa01f
sub ecx, 0x1fdfa405
add ecx, eax
add ecx, 0x1fdfa405
sub ecx, 0x6f9fa01f
sub ecx, 0x7ffdc12b
push dword [esp]
pop ecx
push ebx
mov dword [esp], eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [ebp - 0x14]
mov eax, dword [esp]
push ebp
push esp
pop ebp
push edi
mov edi, 4
add ebp, edi
pop edi
add ebp, 4
xchg dword [esp], ebp
pop esp
push edi
push eax
mov dword [esp], ebx
push 0x1617bbe1
pop ebx
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ecx
sub ecx, 0x7f9b6cdc
add ecx, 0x7fbf7a09
sub ecx, 0x7ccf4b30
add ecx, eax
add ecx, 0x7ccf4b30
push edx
mov edx, 0x3a9dd493
xor edx, 0x4522ae9a
sub ecx, edx
pop edx
push eax
mov eax, 0x7f9b6cdc
add ecx, eax
pop eax
push dword [esp]
mov ecx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
jmp 0x52a169
je 0x507a63
jmp 0x4fad0b
je 0x556d42
jmp 0x4f4eae
je 0x4b26ba
jmp 0x4f4eb8
test eax, eax
jmp 0x5196d2
xor ecx, ecx
jmp 0x51d801
sub esp, 4
mov dword [esp], edx
mov dword [esp], ecx
push edx
mov edx, 0x79722851
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
push ebp
mov dword [esp], ebx
mov eax, dword [esp]
push 0x38e07396
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
pop eax
push eax
mov eax, esp
push ebx
mov ebx, 4
add eax, ebx
pop ebx
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
push ebx
push edi
mov edi, 0x7ec3c672
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
mov dword [esp], ecx
pop dword [ebp - 0x18]
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push eax
mov eax, esp
add eax, 4
push eax
mov dword [esp], ebx
mov ebx, 0x7f7ec685
or ebx, 0x4ffb23dc
dec ebx
shr ebx, 7
neg ebx
sub ebx, 0xff00002d
sub eax, ebx
pop ebx
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0x550895
mov cx, word [eax]
jmp 0x51d809
cmp ecx, dword [ebp - 0x1c]
jmp 0x519c9c
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x550a11
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x4a3074
cmp dword [0x638d10], 0x23f0
jmp 0x539d24
push dword [ebp - 0x18]
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push edi
mov edi, 0x3bb3e93d
add edi, 0x7f6fd3fa
add edi, 0x44dc42cd
add ebp, edi
pop edi
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0x4c850b
lea ecx, [eax + edx + 0x633858]
push edx
push esp
pop edx
add edx, 4
push esi
mov esi, 0x7fdfb676
shl esi, 6
not esi
xor esi, 0x3fdfcb0c
add esi, 0xc8325691
sub edx, esi
pop esi
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ebx
push 0x8bcda01
mov dword [esp], ebp
push eax
mov eax, 0x7fe584f8
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
pop ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
jmp 0x4f2281
push esi
push 8
pop esi
mov dword [ebp - 8], esi
mov esi, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push edx
push esp
pop edx
push esi
mov esi, 0x6f73db94
dec esi
dec esi
xor esi, 0x5fbe7cd8
sub esi, 0x30cda746
add edx, esi
pop esi
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ebx
push edx
mov dword [esp], 0x5f8d1f1b
mov dword [esp], ecx
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop ebx
push edi
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
jmp 0x564d50
push edx
mov edx, esp
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
mov dword [esp], eax
push 0x7c361e90
mov dword [esp], ebx
push edi
mov edi, 0x29d39e49
mov dword [esp + 4], edi
pop edi
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
push edx
mov edx, 4
add edi, edx
pop edx
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
push eax
push 3
pop eax
add eax, 0x4f3faaf7
add eax, ecx
sub eax, 0x4f3faaf7
push ebx
mov ebx, 0
add ebx, eax
xor esi, dword [ebx]
pop ebx
mov eax, dword [esp]
add esp, 4
jmp 0x521781
sub esp, 4
mov dword [esp], esi
mov dword [esp], ebx
push 0x706d6f63
mov ebx, dword [esp]
add esp, 4
mov dword [0x63386a], ebx
pop ebx
push esi
mov esi, esp
add esi, 4
push edx
mov dword [esp], ebx
mov ebx, 4
sub esi, ebx
pop ebx
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], edx
push edx
mov dword [esp], ecx
mov edx, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop edx
push esi
push esp
pop esi
add esi, 4
push edi
mov edi, 4
add esi, edi
pop edi
xchg dword [esp], esi
pop esp
jmp 0x4da48f
push esi
push 0x1e1bbc81
mov dword [esp], edx
mov edx, 0x6e4b41c2
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
pop dword [ebp - 4]
push ebp
mov ebp, esp
push eax
mov eax, 0x7eefc633
and eax, 0x7df7d490
and eax, 0x5f3e7127
sub eax, 0x7e96e0e3
shl eax, 8
inc eax
sub eax, 0x8f5f1cfd
add ebp, eax
pop eax
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
mov eax, dword [esp]
push esi
mov esi, esp
push ebp
mov ebp, 4
add esi, 0x5ceab0a0
add esi, ebp
sub esi, 0x5ceab0a0
pop ebp
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
jmp 0x4ffebb
push ebx
push 0x10062d00
mov dword [esp], ebp
push 0x633a48
pop ebp
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
jmp fcn.0053d17b
ja 0x4b8fa5
jmp 0x521794
jae 0x536869
jmp 0x4b713c
push ecx
mov ecx, esp
add ecx, 4
push ebp
mov ebp, 4
sub ecx, ebp
pop ebp
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], ebp
mov dword [esp], eax
push 0x1b04c9d9
mov dword [esp], ebx
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop eax
push 0x7799371f
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push edx
push eax
push 0x11ca78e0
mov eax, dword [esp]
add esp, 4
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
push edi
mov edi, 0x7ff23d44
shr edi, 8
shr edi, 4
sub edi, 0x338e936b
add edi, 0x9ac15c99
sub ecx, edi
pop edi
add ecx, eax
push ebx
mov ebx, 0x6fd96f2e
push ecx
mov ecx, 0x5c9f371c
xor ebx, ecx
pop ecx
shl ebx, 4
shl ebx, 6
shr ebx, 1
sub ebx, 0x7e3f1c63
push esi
mov esi, 0x357f25ba
xor esi, 0x12495af6
sub ebx, esi
pop esi
add ecx, ebx
pop ebx
mov ecx, dword [esp]
push edi
push esp
pop edi
push esi
mov esi, 4
add edi, esi
pop esi
push eax
mov eax, 4
add edi, eax
pop eax
xchg dword [esp], edi
and al, 0x5c
jmp 0x4a8439
jmp 0x417e2a
push ecx
push 0x4bfd6519
pop ecx
shr ecx, 4
not ecx
not ecx
inc ecx
push ebp
mov ebp, 0x7fff96b5
sub ecx, 0x5b7ef9fc
sub ecx, ebp
add ecx, 0x5b7ef9fc
pop ebp
shl ecx, 8
add ecx, 0x3fc07300
sub eax, ecx
pop ecx
jmp 0x59b244
push 0x246ea5f5
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ecx
sub ecx, 0x55dd51ce
push edx
push 0x77fdbe3c
pop edx
sub ecx, edx
pop edx
add ecx, 0x3efbe66e
add ecx, eax
sub ecx, 0x3efbe66e
add ecx, 0x77fdbe3c
add ecx, 0x55dd51ce
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
sub esp, 4
mov dword [esp], ecx
push eax
mov eax, 0x13bee7a2
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], edx
jmp 0x4b67e7
push 0x75c3006
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], ebx
mov dword [esp], edx
mov dword [esp], ecx
push ebp
push 0x7d0d3b1d
pop ebp
xor ebp, 0x7de461b6
xor ebp, 0x3f06dbd5
add ecx, ebp
pop ebp
sub ecx, 0x7f46a23b
sub ecx, 0x7f7bdaa8
add ecx, eax
add ecx, 0x7f7bdaa8
add ecx, 0x7f46a23b
sub ecx, 0x3fef817e
mov ecx, dword [esp]
push edx
mov edx, esp
add edx, 4
push eax
mov eax, 4
add edx, eax
pop eax
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
push dword [ebp - 0x10]
push dword [esp]
pop edx
push edx
mov edx, esp
push esi
mov esi, 0x77b3c856
xor esi, 0x3bacc8d2
add esi, 0xb3e0ff80
add edx, esi
pop esi
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x54c9cc
sub esp, 4
mov dword [esp], edi
push 0x1214c175
mov dword [esp], edi
mov edi, 0x464dbee8
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
push ebp
push 0x74cb96a7
pop ebp
sub ecx, ebp
pop ebp
add ecx, eax
push edx
push 0x74cb96a7
pop edx
add ecx, edx
pop edx
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
push dword [0x6364f8]
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x515717
push dword [ebp - 0x18]
push dword [esp]
push dword [esp]
pop edx
add esp, 4
add esp, 4
jmp 0x504b27
push edi
push 0x285b9263
mov dword [esp], ebp
mov ebp, 0x791f72f8
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], ebx
push esi
push esp
pop esi
add esi, 4
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], ecx
pop ebx
push dword [esp]
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
push ebx
mov ebx, 0x3c
add ebx, 0x395d4ea6
sub ebx, 0x2df76b81
add ebx, edx
add ebx, 0x2df76b81
sub ebx, 0x395d4ea6
add eax, dword [ebx]
push dword [esp]
pop ebx
add esp, 4
push edx
mov edx, esp
add edx, 4
push ecx
mov ecx, 4
sub edx, ecx
pop ecx
xchg dword [esp], edx
pop esp
mov dword [esp], edi
mov dword [esp], edx
mov dword [esp], ebx
push 0x4d0f4885
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x52f9ae
push eax
push esp
pop eax
add eax, 4
sub eax, 4
push 0x59e05544
mov dword [esp], eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
mov dword [esp], ebx
push ecx
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
add esp, 4
push dword [esp]
pop ebx
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push dword [ebp - 8]
push dword [esp]
pop edx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push ebp
mov dword [esp], edi
push ecx
mov ecx, 0x1370f77c
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
sub esp, 4
mov dword [esp], ebx
push 0x7dfd1753
pop ebx
inc ebx
dec ebx
not ebx
push ebp
mov ebp, 0x76d79b3c
or ebp, 0x3ca14780
dec ebp
sub ebp, 0x7fef1829
add ebp, 0xf8d0475f
xor ebx, ebp
pop ebp
sub ecx, ebx
pop ebx
add ecx, eax
add ecx, 0x75dbe65d
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
push edx
mov edx, 0x18f5ffa3
dec edx
add edx, 0xe70a0062
add edi, edx
pop edx
xchg dword [esp], edi
pop esp
jmp 0x5175b2
push edx
push ebp
push 0x633a48
pop ebp
mov dword [esp + 4], ebp
mov ebp, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push 0x6ddb9650
mov dword [esp], eax
push esp
pop eax
add eax, 4
sub eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
mov dword [esp], ecx
push ebp
push 0x2b37008e
pop ebp
add ebp, 0x7fd77701
or ebp, 0x5fbcfe83
shr ebp, 7
or ebp, 0x7efb47bd
shr ebp, 6
xor ebp, 0xc08d7c7
add ecx, 0x7fdf7337
sub ecx, ebp
sub ecx, 0x7fdf7337
pop ebp
add ecx, eax
push esi
mov esi, 0x5fbf440b
add esi, 0xae37e62d
add ecx, esi
pop esi
mov ecx, dword [esp]
push eax
mov eax, esp
push esi
mov esi, 4
add eax, esi
pop esi
sub esp, 4
mov dword [esp], edi
mov edi, 4
add eax, edi
pop edi
xchg dword [esp], eax
pop esp
jmp 0x50afc6
push ebx
mov dword [esp], ebp
mov dword [esp], esi
mov dword [esp], 0x416aa646
mov dword [esp], eax
pop dword [ebp - 0x10]
jmp 0x4c6638