Function at 0xb96f3d
Capabilities:
Accept command line arguments

Disassembly:
push ebx
push eax
push 0x5b988b96
mov eax, dword [esp]
add esp, 4
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
push dword [ebp - 0x18]
mov eax, dword [esp]
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
jmp 0xba132f
push eax
push 0x2e706973
mov eax, dword [esp]
add esp, 4
push 0x2f8b457d
mov dword [esp], eax
pop dword [0x65981c]
pop eax
push edx
push esi
mov esi, 0x8065ef7
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], ecx
sub ecx, 0x7d7dfeda
add ecx, eax
push ecx
mov dword [esp], ebx
mov ebx, 0x73ff7cf0
shl ebx, 3
sub ebx, 0x227de8a6
add ecx, 0x6afddbab
sub ecx, 0x7bed4742
add ecx, ebx
add ecx, 0x7bed4742
sub ecx, 0x6afddbab
pop ebx
push dword [esp]
mov ecx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
add esp, 4
jmp 0xc16397
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
push eax
mov eax, 0x42988742
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], eax
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
push esi
mov dword [esp], eax
mov eax, esp
add eax, 4
push edi
mov edi, 0x3ff79423
and edi, 0x7f99b6f2
not edi
add edi, 0x1fde9898
xor edi, 0x7d7a7ad3
xor edi, 0x9d377ea2
add eax, edi
pop edi
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
push edx
mov edx, 3
add edx, 0x6fd7cb6a
add edx, ecx
sub edx, 0x6fd7cb6a
push ebx
push 0
pop ebx
add ebx, edx
push edx
mov edx, 0
add edx, ebx
xor esi, dword [edx]
pop edx
pop ebx
pop edx
jmp 0xba6e6e
jne 0xba2c35
jmp 0xb643d6
jmp dword [eax + 0xa59ca8]
jmp 0xb674ae
jmp 0xc0d396
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push ebx
mov dword [esp], edx
mov edx, esp
add edx, 4
push edi
mov edi, 4
sub edx, edi
pop edi
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ecx
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x7eedc34a
or ebp, 0x7ff62627
add ebp, 0xffffffff
shl ebp, 2
add ebp, 0x57dd4c19
add ecx, 0xfa3dada
sub ecx, ebp
sub ecx, 0xfa3dada
pop ebp
add ecx, eax
add ecx, 0x57dce9d1
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0xb67f66
je 0xbabc9c
jmp 0xb656df
ja 0xbc3c42
jmp 0xc0d396
cmp dword [ebp - 0x10], 0x1000000
jmp 0xb674a3
push 0x2f91daf4
mov dword [esp], esi
mov esi, esp
sub esp, 4
mov dword [esp], edi
mov edi, 0x75bf57f5
xor edi, 0x75bf57f1
add esi, edi
pop edi
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
add ecx, 0x4ee4ac5a
sub ecx, 0x7fefffdc
add ecx, eax
push ebp
mov ebp, 0x7fcf54df
inc ebp
or ebp, 0x77bf89fe
sub ebp, 0x377f0bb0
xor ebp, 0x2ffd006c
push edi
mov edi, 0x6f95d2d1
and ebp, edi
mov edi, dword [esp]
add esp, 4
add ebp, 0x18da2ddc
add ecx, ebp
pop ebp
sub ecx, 0x4ee4ac5a
push dword [esp]
pop ecx
push esi
mov esi, esp
add esi, 4
push eax
mov eax, 4
add esi, eax
pop eax
xchg dword [esp], esi
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0xbba61c
push ebp
mov dword [esp], 0x73748bb1
mov dword [esp], esi
mov dword [esp], ecx
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
push dword [esp]
pop ebx
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
push ebp
mov dword [esp], edx
push ecx
mov ecx, 0x6599f8
mov dword [esp + 4], ecx
mov ecx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0xb67bd5
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
sub esp, 4
mov dword [esp], ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop ebx
sub esp, 4
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [0x859c90]
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
add esp, 4
push ecx
push esp
pop ecx
add ecx, 4
push ebx
mov ebx, 0x5bf7eb6b
shr ebx, 3
or ebx, 0x3bf6a272
sub ebx, 0x6dfd5659
inc ebx
add ebx, 0x31fe56dd
sub ecx, ebx
pop ebx
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], eax
push ebp
mov dword [esp], 0x655ede27
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], esi
mov esi, esp
push eax
mov eax, 0x377f5bcb
add eax, 0x5b75df42
neg eax
neg eax
xor eax, 0x92f53b09
add esi, eax
pop eax
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0xc295c7
push 0x388d2bc6
mov dword [esp], esi
mov dword [esp], edi
mov dword [esp], eax
push 0x40345011
mov dword [esp], edx
mov dword [esp], 0x12583553
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
push eax
mov eax, 4
add ebx, eax
pop eax
add ebx, 4
xchg dword [esp], ebx
pop esp
push ebx
push eax
mov eax, 0x42286997
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], eax
pop dword [0x659bcc]
jmp 0x4dcafa
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push esi
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov eax, dword [esp]
push ecx
push esp
mov ecx, dword [esp]
add esp, 4
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0xb9265d
push dword [0x659abc]
push dword [esp]
pop esi
push edi
mov edi, esp
push ebx
mov ebx, 4
add edi, ebx
pop ebx
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xbca35f
push ebx
mov dword [esp], 0x5d5fc98d
mov dword [esp], ecx
mov dword [esp], 0x9cc64be
mov dword [esp], ecx
pop dword [ebp - 0x18]
push edi
push eax
push esi
mov dword [esp], 0x48128816
pop eax
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
pop edx
push ecx
mov ecx, esp
push eax
mov eax, 0x7be2b96f
sub eax, 0x72e7949f
shl eax, 8
shr eax, 3
inc eax
and eax, 0x47ff9fd1
push ecx
mov ecx, 0x3ef593b8
inc ecx
add ecx, 0x73579286
neg ecx
xor ecx, 0x28fffdea
xor ecx, 0x7fc51371
xor ecx, 0x1decaea7
sub eax, ecx
pop ecx
add ecx, eax
pop eax
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xc1d038
push dword [ebp - 0x18]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
sub esp, 4
mov dword [esp], edi
mov dword [esp], ebp
push ebp
mov ebp, 0x733f57aa
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
push ebp
mov dword [esp], 0x6be366ae
mov dword [esp], ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop eax
push ebx
mov ebx, esp
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
jmp 0xb63177
push edi
push 0x2c9b4d71
pop edi
xor edi, 0x3ad54468
push ecx
mov ecx, 0x3ee2100b
xor edi, ecx
pop ecx
sub edi, 0x28ad1912
and ecx, edi
push dword [esp]
pop edi
add esp, 4
push eax
sub esp, 4
mov dword [esp], ebx
push 0x9bf2f9b
pop ebx
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], eax
push ebx
push esi
mov esi, 0x35fcba4c
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0xbe08ad
mov cx, word [eax]
jmp 0xb72d5c
cmp ecx, dword [ebp - 0x1c]
jmp 0xbd397d
push ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
mov dword [esp], esi
mov dword [esp], 0x6599f8
jmp 0xb6622e
push dword [ebp - 0x18]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
sub esp, 4
mov dword [esp], edi
push eax
mov eax, 0x2ada7e5d
mov dword [esp + 4], eax
pop eax
mov dword [esp], esi
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push edi
push esp
pop edi
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
push edx
mov edx, 4
add edi, edx
pop edx
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0xb9bb39
call fcn.0044a2c0
jmp 0xbf783f
jmp 0xb674ae
push eax
push ebx
mov ebx, 0x5d8b9931
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], esi
mov dword [esp], eax
push 0x417a86b4
mov dword [esp], ebx
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
push dword [esp]
pop eax
push esi
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ebp
push esi
mov dword [esp], ecx
mov ecx, 0x6599f8
mov dword [esp + 4], ecx
mov ecx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0xb68e17
push esi
mov esi, esp
add esi, 4
push ecx
push ebp
mov ebp, 4
mov ecx, ebp
pop ebp
sub esi, ecx
pop ecx
xchg dword [esp], esi
pop esp
mov dword [esp], eax
pop dword [ebp - 0x10]
push ebp
mov ebp, esp
add ebp, 4
push ebx
mov ebx, 4
sub ebp, ebx
pop ebx
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], ecx
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ecx
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop edx
push esi
mov esi, esp
push ecx
mov ecx, 4
add esi, 0x4f7fc040
add esi, ecx
sub esi, 0x4f7fc040
pop ecx
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0xbbc0c0
push dword [0x859c90]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push esi
mov esi, esp
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
mov dword [esp], eax
mov dword [esp], edi
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 0x773e84c6
neg ecx
dec ecx
or ecx, 0x5bdf65b8
xor ecx, 0xdbdf7fbd
add eax, ecx
pop ecx
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0xb68fbe
shr ecx, 2
push esi
mov esi, esp
add esi, 4
push ebp
mov ebp, 4
sub esi, ebp
mov ebp, dword [esp]
add esp, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], eax
push 0x5e83a895
mov dword [esp], ebp
mov dword [esp], 0x10eb07ca
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
jmp 0xbd2e92
pop esi
mov dword [ebp - 0xc], esi
pop esi
push eax
push esp
pop eax
add eax, 4
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
sub ecx, 0x3de6c59c
add ecx, eax
push 0x421e8386
mov dword [esp], edx
mov edx, 0x3de6c59c
sub ecx, 0x66daced
sub ecx, 0x7ffbba73
add ecx, edx
add ecx, 0x7ffbba73
add ecx, 0x66daced
pop edx
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
push ebx
mov ebx, 0x68ece5bb
add ebx, 0x5df5d1cd
not ebx
neg ebx
or ebx, 0x4f4f372a
xor ebx, 0xcfefb7af
add ebp, ebx
pop ebx
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xb9baae
mov dx, word [ecx]
jmp 0xb9a7ef
cmp edx, dword [ebp - 0xc]
jmp 0xb67498
push edx
mov dword [esp], 0x7c18fb3b
mov dword [esp], edx
push edi
mov edi, 0x75954f69
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov edx, dword [esp]
push edx
mov edx, esp
push ebx
mov ebx, 0xa37742e
add ebx, 0x6f7d033e
shr ebx, 3
add ebx, 0x74f71463
add ebx, 0x7bd25cb4
add edx, 0x6ffc88b3
add edx, ebx
sub edx, 0x6ffc88b3
pop ebx
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push edi
sub esp, 4
mov dword [esp], esi
mov esi, 0x1632a1a
mov dword [esp + 4], esi
pop esi
mov dword [esp], edx
pop dword [ebp - 0x10]
jmp 0xbc6ade
push dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
mov eax, dword [esp]
push eax
mov dword [esp], edi
mov edi, esp
add edi, 4
push edx
mov edx, 0x7d6b342d
xor edx, 0x7d6b3429
add edi, edx
pop edx
xchg dword [esp], edi
pop esp
push eax
mov eax, esp
push ecx
mov ecx, 4
add eax, ecx
pop ecx
sub eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov edx, dword [esp]
sub esp, 4
mov dword [esp], eax
push esp
pop eax
add eax, 4
push ecx
mov ecx, 4
add eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
jmp 0xbdf1c8
sub esp, 4
mov dword [esp], edi
mov dword [esp], eax
push ebp
mov ebp, 0xbc633ab
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ebx
push ebx
mov dword [esp], ecx
mov ebx, dword [esp]
push 0x42affdd5
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edx
mov edx, esp
push ecx
mov ecx, 4
add edx, ecx
pop ecx
add edx, 4
xchg dword [esp], edx
pop esp
xor ecx, ecx
sub esp, 4
mov dword [esp], edx
mov dword [esp], ecx
mov dword [esp], 0x583667d9
mov dword [esp], esi
mov dword [esp], edx
push 0x5e503c70
mov dword [esp], ecx
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xb72d54
push dword [ebp - 0x18]
push dword [esp]
pop eax
push 0x3fd558f4
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], eax
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push dword [esp]
pop ebx
push ebx
mov ebx, esp
push edx
mov edx, 0x3bfd8d12
sub edx, 0x3ff7e229
or edx, 0x739f8477
inc edx
xor edx, 0xff9faf04
add ebx, edx
pop edx
push eax
mov eax, 4
add ebx, eax
pop eax
xchg dword [esp], ebx
pop esp
jmp 0xba72c3
push eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 4
sub eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
mov dword [esp], edi
mov dword [esp], 0x644e9e9c
mov dword [esp], edx
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], eax
mov dword [esp], 0x29f5130d
mov dword [esp], ecx
pop edx
push dword [esp]
pop edx
push edi
push esp
pop edi
push edx
mov edx, 0x7e6e1575
or edx, 0x77fd52e3
add edx, 0x8000a80d
add edi, edx
pop edx
add edi, 4
xchg dword [esp], edi
pop esp
push ebx
mov ebx, 0x3c
add ebx, 0x75efa960
add ebx, edx
push ecx
mov ecx, 0x7fcf1382
or ecx, 0x7f6b15ec
push ebx
mov ebx, 0x7d7fb9ac
inc ebx
add ebx, 0x665a5486
or ebx, 0x3bfd11a2
not ebx
sub ebx, 0xe004eda
add ecx, ebx
pop ebx
sub ebx, ecx
mov ecx, dword [esp]
add esp, 4
add eax, dword [ebx]
pop ebx
jmp 0xbea397
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
mov dword [esp], edi
mov dword [esp], ebp
mov dword [esp], eax
push edi
push 0x62a1d03a
mov dword [esp], eax
mov eax, 0x19745eb
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push ebx
mov ebx, esp
push eax
mov eax, 0x7c73cd15
not eax
inc eax
sub eax, 0x7f9f50a8
not eax
neg eax
xor eax, 0x3ece240
add ebx, eax
pop eax
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
jmp 0xb68998
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], esi
mov esi, 0x5bdcd6af
add esi, 0x76f7d60b
or esi, 0x56ff0506
or esi, 0x5fef3770
xor esi, 0xaf92d09d
push esi
pop dword [0x65981a]
pop esi
jmp 0xbf181a
jae 0xbe40c2
jmp 0xbd27aa
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xbf0c88
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
push ecx
mov ecx, 4
add edi, 0x3b7f1147
sub edi, ecx
sub edi, 0x3b7f1147
pop ecx
xchg dword [esp], edi
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov eax, dword [esp]
push edi
mov edi, esp
push ecx
mov ecx, 4
sub edi, 0x717ffc91
add edi, ecx
add edi, 0x717ffc91
pop ecx
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push edx
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edi
mov dword [esp], eax
pop dword [0x859c88]
jmp 0xb656e9
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push 0x62b20810
mov dword [esp], edx
mov dword [esp], 0x54b731bf
mov dword [esp], edi
mov dword [esp], ecx
mov dword [esp], edx
push ebx
mov dword [esp], esi
mov dword [esp], 0x3492753
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
pop edx
push edi
push esp
pop edi
push ecx
mov ecx, 4
add edi, ecx
pop ecx
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xbf14f5
push eax
push esp
pop eax
push ebx
mov ebx, 0x77f6278d
shl ebx, 8
add ebx, 0x3e579de5
shl ebx, 8
sub ebx, 0x7f2ae4fc
add eax, ebx
pop ebx
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov dword [esp], eax
push ebp
mov dword [esp], 0x4397a20f
mov dword [esp], ebx
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], eax
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ebp
mov ebp, esp
add ebp, 4
push edx
mov edx, 4
sub ebp, edx
pop edx
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
mov dword [esp], edx
pop dword [0x656030]
push edi
mov dword [esp], eax
push esp
pop eax
push ecx
mov ecx, 0x5fbf2f0d
neg ecx
add ecx, 0x5fbf2f11
add eax, ecx
pop ecx
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edx
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xbff01c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0xb7ade4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xc21123
jne 0xbe4436
jmp 0xbead91
push eax
push esi
mov esi, 0x6581d5b2
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], ebp
mov dword [esp], edx
push edi
mov dword [esp], edx
mov dword [esp], ecx
push ebx
mov ebx, 0x5a628532
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edx
mov dword [esp], 0x19f8c4c7
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push esi
push esp
pop esi
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
jmp 0xb7a4d2
push esi
mov dword [esp], edi
push esp
pop edi
add edi, 4
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push edx
mov edx, esp
push ecx
mov ecx, 0x7eaf70ba
or ecx, 0x79dac607
dec ecx
xor ecx, 0x7ffff6ba
add edx, ecx
pop ecx
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
push edi
push ebp
mov ebp, 0x36e7e55f
sub ebp, 0x764f80f2
dec ebp
not ebp
not ebp
xchg ebp, ecx
xchg ecx, eax
not eax
xchg ecx, eax
xchg ebp, ecx
sub ebp, 0xaac89b
mov edi, ebp
pop ebp
sub edi, 1
add edi, 0xc1433d09
add edx, edi
pop edi
jmp 0xb9b998
push 0x63db0c28
mov dword [esp], edi
push eax
mov dword [esp], ebp
mov ebp, 0x2db3ef55
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
push esi
push 0x7a7311dc
pop esi
add ecx, esi
pop esi
add ecx, eax
push 0x5256450a
mov dword [esp], ebx
mov ebx, 0x2bbf3aac
add ebx, 0x4eb3d730
sub ecx, ebx
pop ebx
mov ecx, dword [esp]
push edx
mov edx, esp
add edx, 4
push ebp
mov ebp, 0x7b37ade5
inc ebp
push edi
mov edi, 0x5baff5de
shl edi, 7
xor edi, 0x7fe70f20
inc edi
add edi, 0x95ae6acf
and ebp, edi
pop edi
and ebp, 0x73fb6bde
add ebp, 0xcefff744
add edx, ebp
mov ebp, dword [esp]
add esp, 4
xchg dword [esp], edx
pop esp
mov byte [0x659822], al
jmp 0xb67cfa
push ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
push ecx
push dword [esp + 4]
mov ecx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], ecx
sub ecx, 0x3fe8c7f0
add ecx, 0x7fffdd38
sub ecx, 0x3e7f042f
add ecx, 0x77fc58bd
add ecx, eax
sub ecx, 0x77fc58bd
push eax
mov eax, 0x3e7f042f
add ecx, eax
pop eax
sub ecx, 0x7fffdd38
add ecx, 0x3fe8c7f0
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ebp
mov dword [esp], edi
push 0x1000
pop edi
add eax, 0x4f3b7ede
sub eax, edi
sub eax, 0x4f3b7ede
mov edi, dword [esp]
add esp, 4
jmp 0xb842b5
push ebx
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], 0x10c82925
mov dword [esp], edx
mov dword [esp], eax
push edi
mov dword [esp], ebx
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
push ecx
mov ecx, 0x7fff83d6
add ecx, 0x7cd738e8
shr ecx, 4
add ecx, 0x4e3bcde3
or ecx, 0x7fff747c
dec ecx
add ecx, 0x80008207
add edx, ecx
pop ecx
xchg dword [esp], edx
pop esp
push dword [esp]
pop eax
push ebp
push esp
pop ebp
push esi
mov esi, 0x7ff66a2e
add esi, 0x800995d6
add ebp, esi
pop esi
add ebp, 4
xchg dword [esp], ebp
pop esp
push edx
mov dword [esp], ecx
push ebx
mov ebx, 0x659818
mov dword [esp + 4], ebx
push dword [esp]
pop ebx
add esp, 4
jmp 0xba144c
push 0x61b6d658
mov dword [esp], eax
sub esp, 4
mov dword [esp], edx
mov edx, 0x1e1b2bf
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
add ecx, 0x7ffe2f28
sub ecx, 0x76f3c7cd
add ecx, eax
add ecx, 0x76f3c7cd
push edi
mov dword [esp], ebp
push 0x76ff1b3e
pop ebp
sub ebp, 0x527e04e8
or ebp, 0x5adad612
xor ebp, 0x125f97e
sub ecx, ebp
pop ebp
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [ebp - 0x10]
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
add esp, 4
jmp 0xb6b4b0
push esi
mov esi, esp
push eax
mov eax, 4
add esi, eax
pop eax
push ebp
push ebx
mov ebx, 0x679d4c53
mov ebp, ebx
pop ebx
shl ebp, 6
neg ebp
shr ebp, 3
add ebp, 0xfcea629c
sub esi, ebp
pop ebp
xchg dword [esp], esi
pop esp
mov dword [esp], edx
push ebp
mov dword [esp], ecx
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [esp]
pop edx
sub esp, 4
mov dword [esp], eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [ebp - 0x10]
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push ebx
mov ebx, 0x7d7f6f30
inc ebx
dec ebx
shl ebx, 2
sub ebx, 0xf5fdbcbc
add ebp, 0x7dffba57
add ebp, ebx
sub ebp, 0x7dffba57
pop ebx
xchg dword [esp], ebp
pop esp
jmp 0xbba4a8
push dword [ebp - 0x10]
mov edx, dword [esp]
push edx
push esp
pop edx
push ecx
mov ecx, 4
add edx, ecx
pop ecx
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xbb7ab3
push eax
mov eax, esp
push ebp
push 0x7cc6c9af
pop ebp
sub ebp, 0x7cc6c9ab
add eax, ebp
pop ebp
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edi
mov dword [esp], edx
push ebp
mov dword [esp], ecx
mov edx, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov edx, dword [esp]
push eax
mov dword [esp], 0x5bc33390
mov dword [esp], edi
mov edi, esp
push ebx
mov ebx, 0x5bfed714
sub ebx, 0x1f7f480f
shr ebx, 3
xor ebx, 0x6e5e7c07
and ebx, 0x77df922a
sub ebx, 0x61d1801e
add edi, ebx
pop ebx
add edi, 4
xchg dword [esp], edi
pop esp
mov al, byte [0x65604d]
push edx
mov dword [esp], eax
push eax
mov eax, 0x5fd21867
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], edx
push edx
mov dword [esp], ebx
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
push dword [esp]
pop edx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
jmp 0xbe2b9d
push edx
mov edx, esp
push esi
mov esi, 4
add edx, esi
pop esi
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
push 5
pop eax
add eax, edx
xor esi, dword [eax]
pop eax
push edi
mov dword [esp], edx
mov edx, esp
add edx, 4
push eax
mov eax, 4
sub edx, eax
pop eax
xchg dword [esp], edx
pop esp
mov dword [esp], esi
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
mov edx, dword [esp]
sub esp, 4
mov dword [esp], ecx
push esp
pop ecx
push edx
mov edx, 0x5ffb6098
inc edx
xor edx, 0x67f3cd60
add edx, 0xc7f7520b
add ecx, edx
pop edx
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xbb4280
imul eax, ecx
push ecx
mov dword [esp], edx
mov edx, esp
push ecx
mov ecx, 4
add edx, ecx
mov ecx, dword [esp]
add esp, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edx
push 0x53c732c9
mov dword [esp], edx
mov dword [esp], 0x2601b7c3
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
push esi
push esp
pop esi
add esi, 4
push ecx
mov ecx, 4
add esi, ecx
pop ecx
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0xbe4cd3
push eax
push edi
mov dword [esp], edx
mov dword [esp], esi
push 0x6599f8
pop esi
mov dword [esp + 4], esi
pop esi
jmp 0xbfcc28
push ecx
mov ecx, esp
add ecx, 4
push ebx
mov ebx, 4
sub ecx, ebx
pop ebx
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov dword [esp], edx
push 0x1961e77
mov dword [esp], ecx
mov edx, dword [esp]
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov edx, dword [esp]
push ebp
mov ebp, esp
push edi
mov edi, 0x72bf8743
push esi
mov esi, 0x72bf873f
add edi, 0x7ee4932d
sub edi, esi
sub edi, 0x7ee4932d
pop esi
add ebp, edi
pop edi
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [0x656030]
mov edx, dword [esp]
push edx
push esp
mov edx, dword [esp]
add esp, 4
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xbe44f3
je 0xb674ae
jmp 0xb77615
je 0xb6e892
jmp 0xb7a4dc
push ebx
push ebp
mov dword [esp], eax
mov eax, 0x3c944e5e
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebx
push edi
push esp
pop edi
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ecx
pop ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
push ecx
mov ecx, 4
add esi, ecx
pop ecx
xchg dword [esp], esi
pop esp
and edx, eax
jmp 0xbfcca2
push ebx
mov dword [esp], ecx
mov dword [esp], eax
mov eax, 7
or ecx, eax
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xbcb827
push esi
push ebp
push 0x87b5680
mov ebp, dword [esp]
add esp, 4
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ebx
push edx
mov dword [esp], ecx
push dword [esp]
pop ebx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [ebp - 0x10]
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xb72ce3
push eax
push edi
mov edi, 0x574d27cd
mov dword [esp + 4], edi
pop edi
mov dword [esp], edi
mov dword [esp], eax
pop dword [ebp - 0x10]
push eax
mov eax, esp
push ebp
mov ebp, 0x73a7221c
sub esp, 4
mov dword [esp], edx
mov edx, 0x36ee25d9
add ebp, edx
pop edx
not ebp
dec ebp
sub ebp, 0x556ab805
add eax, ebp
pop ebp
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov ebx, dword [esp]
push 0x56bc651e
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
pop ebx
push ebx
mov ebx, esp
add ebx, 4
push eax
mov eax, 4
add ebx, eax
pop eax
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0xbda9f7
push ebp
mov dword [esp], 0x4ddc8b74
mov dword [esp], eax
mov dword [esp], 0x503ec4fd
mov dword [esp], edi
mov dword [esp], eax
push eax
mov dword [esp], ebx
mov eax, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov eax, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
push edx
mov edx, 4
add ebx, edx
pop edx
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
sub esp, 4
mov dword [esp], edx
push esp
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
pop dword [ebp - 0x10]
sub esp, 4
mov dword [esp], edi
mov dword [esp], 0x564089d9
mov dword [esp], edx
mov dword [esp], eax
push 0x77ff398d
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop eax
push eax
mov eax, esp
add eax, 4
push esi
mov esi, 4
add eax, esi
pop esi
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0xbc61e7
push edi
push 0x7aecc20d
mov dword [esp], ebx
mov ebx, 0x7c797a01
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], ebx
push ecx
push dword [esp]
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
and al, byte [0x65604a]
sub esp, 4
mov dword [esp], ecx
push 0x7fc267ae
mov dword [esp], ebp
mov ebp, 0xea55c1
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
push ebx
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
push eax
mov eax, 4
add ebp, eax
pop eax
add ebp, 4
xchg dword [esp], ebp
pop esp
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
push ecx
mov ecx, 0x7f97743f
xor ecx, 0x6dde9c52
not ecx
inc ecx
and ecx, 0x3bf9b748
push edx
mov edx, 0xd64fe904
sub ecx, 0x3ebb5d76
add ecx, edx
add ecx, 0x3ebb5d76
pop edx
add edx, ecx
pop ecx
xchg dword [esp], edx
pop esp
jmp 0xc00664
push ebx
push 0x2a9313c6
mov dword [esp], edx
push 0x6599f8
pop edx
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
jmp 0xbb4275
push edx
mov edx, 0x29c9ae36
push eax
mov eax, 0x4ea6c22b
add edx, eax
pop eax
mov dword [0x659818], edx
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0xb633d9
push ecx
mov ecx, 0x7c338179
push ebx
push 0x2f571cd0
pop ebx
xor ecx, ebx
pop ebx
xor ecx, 0x2cfa0a85
sub edx, ecx
pop ecx
sub edx, ecx
push edi
mov edi, 0x7f9e972c
add edx, edi
pop edi
push ebp
push esp
pop ebp
push edx
mov edx, 4
add ebp, edx
pop edx
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], ebx
push ebx
mov dword [esp], 0x5110df3f
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
push edi
mov edi, 4
add eax, edi
pop edi
xchg dword [esp], eax
pop esp
jmp 0xbadbe0
push edi
mov dword [esp], eax
push ecx
mov ecx, 0x2140aa67
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], ebx
push ebp
mov dword [esp], ecx
mov ebx, dword [esp]
push edi
mov edi, esp
push ecx
mov ecx, 0x7fbdc39c
shr ecx, 2
inc ecx
inc ecx
dec ecx
xor ecx, 0x1fef70ec
add edi, ecx
pop ecx
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
push dword [0x656034]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ebp
mov dword [esp], ebx
push ecx
mov dword [esp], ebp
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xbd4153
push 0x47789551
mov dword [esp], edi
mov dword [esp], ebp
push ebx
mov ebx, 0x254ee233
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push ebx
push esp
mov ebx, dword [esp]
add esp, 4
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
pop dword [ebp - 4]
push esi
push esi
mov esi, 0x23c97127
mov dword [esp + 4], esi
pop esi
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], eax
push 0x4e14e903
mov dword [esp], ebx
push dword [esp]
pop eax
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov eax, dword [esp]
push ebp
push 0x5b1d9647
mov dword [esp], edx
mov dword [esp], esp
add dword [esp], 4
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xc1c45e
push ebx
push edi
mov dword [esp], esi
mov esi, 0x63bf739b
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], eax
push eax
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop eax
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
jmp dword [eax + 0xa59ca8]
push edi
mov dword [esp], edx
mov dword [esp], 0x73dd79e7
mov dword [esp], edi
mov dword [esp], edx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
push dword [0x656034]
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
add esp, 4
jmp 0xb94395
test eax, eax
jmp 0xbd3972
cmp esi, eax
jmp 0xb643cb
push ebx
mov dword [esp], 0x4ee41427
mov dword [esp], eax
push eax
mov eax, 0x18129638
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
push eax
push ebx
mov ebx, 0xab90ea5
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
sub esp, 4
mov dword [esp], edx
mov dword [esp], edi
mov dword [esp], 0x11a04046
mov dword [esp], eax
pop dword [0x859c90]
jmp 0xb9fcdf
push esi
mov esi, 0x7fff6808
not esi
dec esi
push esi
mov dword [esp], edx
mov edx, 0x3577fa20
push edi
mov edi, 0x7c7c717e
dec edi
dec edi
sub edi, 0x5f971421
xor edi, 0x439b9b9c
and edx, edi
pop edi
dec edx
dec edx
shr edx, 5
sub edx, 0x1735d28a
xor esi, edx
pop edx
push esi
pop dword [0x65981e]
pop esi
jmp fcn.00bdd729
add esp, 4
jmp 0xbf0c81
push 0x31153b08
mov dword [esp], edx
push 0x697ec74f
mov dword [esp], eax
mov eax, 0x40f204e1
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
push 0xfaf3649
mov dword [esp], eax
mov eax, 0x76ffc146
sub ecx, eax
pop eax
add ecx, 0x5ffbc60a
sub ecx, 0x7ddf1bb6
add ecx, eax
add ecx, 0x7ddf1bb6
sub ecx, 0x5ffbc60a
add ecx, 0x76ffc146
mov ecx, dword [esp]
push ebp
push esp
mov ebp, dword [esp]
add esp, 4
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0xb75b1c
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
push esi
mov esi, 0x16eb1e21
mov dword [esp + 4], esi
pop esi
mov dword [esp], eax
push eax
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop eax
push edi
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push ebx
push ecx
push 0x571ffde6
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], edx
pop dword [0x656034]
push ecx
mov dword [esp], eax
mov dword [esp], edx
mov dword [esp], edi
mov dword [esp], ecx
push edx
mov edx, 0x6f7f1f7c
add ecx, edx
pop edx
add ecx, 0x43ab2c79
add ecx, eax
sub ecx, 0x43ab2c79
push edi
push 0x6f7f1f7c
pop edi
sub ecx, edi
pop edi
push dword [esp]
pop ecx
push eax
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0xbc3c42
xor eax, eax
jmp 0xc004f3
mov al, byte [0x656043]
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
mov dword [esp], 0x328ce9fe
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push 0x6ecc4fcf
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edx
mov edx, esp
push ebp
mov ebp, 0x47fd162f
and ebp, 0x6f7d7e33
shr ebp, 8
and ebp, 0x7bffc500
neg ebp
xor ebp, 0xffb8bb04
add edx, ebp
pop ebp
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xc1c43d
mov byte [0x65604d], al
push ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 4
sub ebx, 0x3f8f1378
sub ebx, edx
add ebx, 0x3f8f1378
pop edx
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
mov dword [esp], edx
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
push edi
mov edi, esp
push eax
mov eax, 0x5cfb1337
sub eax, 0x5cfb1333
add edi, eax
pop eax
push edx
mov edx, 4
add edi, edx
mov edx, dword [esp]
add esp, 4
xchg dword [esp], edi
pop esp
jmp 0xbede43
push edx
push esp
pop edx
push edi
mov edi, 4
add edx, edi
pop edi
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], esi
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebp
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
mov eax, dword [esp]
push esi
push ebp
mov dword [esp], 0x1e0a1af2
mov dword [esp], esp
add dword [esp], 4
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov al, byte [0x659821]
push esi
mov esi, esp
push eax
mov eax, 0x7bff9bc0
push ecx
mov ecx, 0x7efe91ed
and eax, ecx
pop ecx
add eax, 0x85016e44
add esi, eax
pop eax
push edx
mov edx, 4
sub esi, edx
pop edx
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
sub esp, 4
mov dword [esp], edx
mov edx, 0x36edba75
add ecx, 0x54fdbb1e
sub ecx, 0x6c1fecf4
add ecx, edx
add ecx, 0x6c1fecf4
sub ecx, 0x54fdbb1e
pop edx
add ecx, eax
sub ecx, 0x36edba75
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], edx
push esp
pop edx
add edx, 4
push edi
mov edi, 0x54b61abe
not edi
xor edi, 0xab49e545
add edx, edi
pop edi
xchg dword [esp], edx
pop esp
jmp 0xbb7f24
xor edx, edx
push esi
push edi
push ecx
mov dword [esp], 0x15861873
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
add ecx, 0x7df51918
add ecx, 0x39bfbb70
add ecx, 0x1ec255ce
add ecx, eax
sub ecx, 0x1ec255ce
push ebx
mov ebx, 0x1ffe4095
xor ebx, 0x7f678332
push edi
mov edi, 0x7db52ec2
sub edi, 0x60b5974a
and ebx, edi
pop edi
shr ebx, 5
xor ebx, 0x39bb7769
sub ecx, ebx
pop ebx
sub ecx, 0x7df51918
push dword [esp]
pop ecx
push edx
push esp
mov edx, dword [esp]
add esp, 4
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xb9a7e7
cmp dword [0xa59ca8], 0x23f0
jmp 0xba6e63
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], ecx
add ecx, 0x7ffeccdf
add ecx, 0x32fff1f5
push edx
mov edx, 0x1f39be1b
add ecx, edx
pop edx
add ecx, eax
sub ecx, 0x1f39be1b
sub ecx, 0x32fff1f5
push ebp
mov ebp, 0x7f7bc4ed
not ebp
sub ebp, 0x856e33
sub ecx, ebp
pop ebp
push dword [esp]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
push ax
mov ax, 0x6c64
mov word [0x659820], ax
mov ax, word [esp]
push eax
push esp
pop eax
add eax, 4
add eax, 2
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
push ecx
push 0x5577430c
mov dword [esp], ecx
push 0x612f3fc3
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
push ecx
mov dword [esp], ebp
mov ebp, 0x705a1999
shr ebp, 8
and ebp, 0x5f7dc9f4
push edi
mov edi, 0x718f0aa1
add ebp, edi
pop edi
add ecx, ebp
mov ebp, dword [esp]
add esp, 4
add ecx, eax
sub ecx, 0x71ff52b1
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], esi
mov esi, esp
push ebx
push 0x17bd0535
pop ebx
neg ebx
sub ebx, 0x7efbde91
sub ebx, 0x69471c36
add esi, ebx
pop ebx
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0xc03a8c
push dword [0x656038]
mov ecx, dword [esp]
push ebp
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xbd86f4
push dword [ebp - 4]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0xc0b487
push edi
push edx
push 0x48e83d6f
pop edx
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
mov dword [esp], ecx
add ecx, 0x557ff763
add ecx, 0x3f99c016
add ecx, eax
sub ecx, 0x3f99c016
push ebp
push 0x557ff763
mov ebp, dword [esp]
add esp, 4
sub ecx, ebp
pop ebp
push dword [esp]
pop ecx
push edi
mov edi, esp
push ebx
mov ebx, 0x7feb1200
xor ebx, 0x7feb1204
add edi, ebx
pop ebx
push eax
mov eax, 4
add edi, eax
pop eax
xchg dword [esp], edi
pop esp
push dword [ebp - 0x10]
push dword [esp]
push dword [esp]
pop edx
add esp, 4
add esp, 4
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
mov dword [esp], edx
mov dword [esp], 0x7e005527
mov dword [esp], ecx
push esi
mov esi, 0x7be732d1
neg esi
and esi, 0x7dd75848
add esi, 0x7beb0a89
add ecx, esi
pop esi
sub ecx, 0x7b228455
add ecx, 0x167be46b
add ecx, eax
sub ecx, 0x167be46b
add ecx, 0x7b228455
push edx
mov edx, 0x7ffb5291
sub ecx, edx
pop edx
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
jmp 0xbb6768
cmp esi, eax
jmp 0xbb428b
push dword [0x659abc]
mov esi, dword [esp]
push esi
mov esi, esp
push ebx
push 4
pop ebx
add esi, ebx
pop ebx
add esi, 4
xchg dword [esp], esi
pop esp
push edx
mov edx, esp
push eax
push 0xeff85eb
pop eax
xor eax, 0xeff85ef
add edx, eax
pop eax
sub edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], eax
push 0x52995a6d
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
mov eax, dword [esp]
push edx
mov edx, esp
push ecx
mov dword [esp], ebp
mov ebp, 4
sub edx, 0x5ffef475
add edx, ebp
add edx, 0x5ffef475
pop ebp
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xb63eb4