Function at 0xa914f9
Capabilities:
Accept command line arguments

Disassembly:
push edx
push esi
mov dword [esp], ebp
push 0x64cab8
mov ebp, dword [esp]
add esp, 4
mov dword [esp + 4], ebp
pop ebp
jmp 0xacb24b
push ebx
mov dword [esp], 0x6eda26fe
mov dword [esp], edi
mov dword [esp], 0x2a554ec4
mov dword [esp], ebp
mov dword [esp], edx
push edx
mov dword [esp], 0x1017fcd4
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0xa93b64
push edx
mov edx, esp
push edi
mov edi, 4
sub edx, 0x7f4f1e11
add edx, edi
add edx, 0x7f4f1e11
pop edi
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
push esi
mov esi, 4
add eax, esi
pop esi
xchg dword [esp], eax
pop esp
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
mov ebp, dword [esp]
add esp, 4
pop dword [esp]
mov esp, dword [esp]
push dword [ebp - 4]
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
add esp, 4
sub esp, 4
mov dword [esp], esi
push esp
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ecx
mov ecx, esp
push eax
mov eax, 0x3fff228a
xor eax, 0x3fff228e
add ecx, eax
pop eax
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
jmp 0xae9899
push esi
push ecx
mov ecx, 0x343f97c5
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
push edx
mov edx, 4
add eax, edx
pop edx
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov edx, dword [esp]
push esi
mov esi, esp
push eax
mov eax, 0x3ff7ba84
shr eax, 8
xor eax, 0x5a3f87d2
shl eax, 8
and eax, 0x7e986216
sub eax, 0x105ffc
add esi, eax
pop eax
push eax
mov eax, 4
add esi, eax
pop eax
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
push dword [ebp - 0x18]
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
push edx
mov dword [esp], edi
mov edi, 4
add eax, edi
pop edi
xchg dword [esp], eax
pop esp
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], edx
push esi
mov esi, esp
add esi, 4
push ecx
mov ecx, 4
sub esi, ecx
mov ecx, dword [esp]
add esp, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
pop edx
push dword [esp]
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0xaea17b
push ebp
mov dword [esp], ecx
mov dword [esp], 0x501b071a
mov dword [esp], ebp
mov dword [esp], edx
mov dword [esp], eax
sub esp, 4
mov dword [esp], ecx
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
push 0x32f3e4fe
mov dword [esp], edx
push edi
mov dword [esp], 0x5eaf031d
mov dword [esp], edx
mov edx, 0x64cc98
mov dword [esp + 4], edx
pop edx
push ebx
push edx
mov edx, 0x440faa0c
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], ebp
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push edx
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
jmp 0xaf8fb3
sub esp, 4
mov dword [esp], ecx
sub esp, 4
mov dword [esp], eax
mov eax, 0x796c4f8c
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebx
push eax
mov dword [esp], ecx
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
push ecx
mov ecx, 0x3c
sub ecx, 0x7e5ddbe5
add ecx, 0x76f72fd1
add ecx, edx
sub ecx, 0x76f72fd1
push edi
mov edi, 0x5f9b1d87
or edi, 0x4fdf7093
sub edi, 0x7656e910
shl edi, 5
shl edi, 3
sub edi, 0xa36ab1b
add ecx, edi
pop edi
push edx
mov edx, 0
add edx, ecx
add eax, dword [edx]
pop edx
pop ecx
jmp 0xac9321
push ebx
mov ebx, 0x7ff60f86
shr ebx, 6
shl ebx, 6
xchg ebx, eax
not eax
xor ebx, eax
xor eax, ebx
xor ebx, eax
sub ebx, 0xf9c811c
push esi
mov dword [esp], ebx
pop dword [0x64caba]
pop ebx
push ebp
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
push edi
mov edi, 4
add ebp, edi
pop edi
xchg dword [esp], ebp
pop esp
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push eax
mov dword [esp], ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
jmp 0xab9484
push ebx
push esp
pop ebx
add ebx, 4
push esi
mov esi, 0x3dfe3c34
dec esi
shl esi, 8
shr esi, 6
not esi
or esi, 0x7f5fa5f9
xor esi, 0xff5fafff
sub ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
mov dword [esp], edi
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
mov edx, dword [esp]
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push 0x680cead9
mov dword [esp], esi
mov esi, 4
add ebx, esi
mov esi, dword [esp]
add esp, 4
xchg dword [esp], ebx
pop esp
push ecx
mov ecx, 0x7b3b678b
push edi
mov edi, 0x5dee4b4e
and ecx, edi
pop edi
add ecx, 1
sub ecx, 0xe0b9d2aa
mov dword [0x64cab8], ecx
push dword [esp]
pop ecx
add esp, 4
sub esp, 4
mov dword [esp], ebp
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], eax
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ebp
mov ebp, esp
push ebx
mov ebx, 0x6ff66178
shl ebx, 4
not ebx
or ebx, 0x4efdd769
add ebx, 0x75ff94db
dec ebx
add ebx, 0x3b026bab
add ebp, ebx
pop ebx
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop edx
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0xac40c0
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push 0x4b10b6cc
mov dword [esp], edx
push edi
push 0x39dde9a9
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
push eax
mov eax, 0x79de1b8e
neg eax
not eax
inc eax
sub eax, 0x5fff463d
sub eax, 0xe41398a8
sub ecx, 0x7d39e20b
add ecx, eax
add ecx, 0x7d39e20b
pop eax
add ecx, 0x6fb7ea7b
add ecx, eax
sub ecx, 0x6fb7ea7b
sub ecx, 0x35cb3ca9
mov ecx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push ebx
mov ebx, 4
add ecx, 0x7e5cd238
add ecx, ebx
sub ecx, 0x7e5cd238
pop ebx
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
jmp 0xabd7da
push ebx
push ebp
mov dword [esp], 0x53c173bf
mov dword [esp], ebp
mov ebp, 0x24074297
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop ebx
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov byte [0x64cac2], al
jmp 0xabd2d8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xac5eca
jne 0xa9b533
jmp 0xaa7d50
push dword [ebp - 0x18]
mov eax, dword [esp]
push 0xf212112
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push esi
mov esi, 4
add ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
jmp 0xabd920
push ebx
mov ebx, esp
push edx
push 0x37ec19af
pop edx
xor edx, 0x37ec19ab
add ebx, edx
pop edx
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
pop dword [0x64ce6c]
jmp 0x4db2ea
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp fcn.00abed22
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xac5ed1
push ecx
mov dword [esp], edi
mov dword [esp], 0x49eef91a
mov dword [esp], edx
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop edx
push edx
mov edx, esp
push ebp
mov ebp, 0x7db63352
sub ebp, 0x7db6334e
add edx, ebp
pop ebp
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
push 0x4bf18856
mov dword [esp], ebx
push ebp
mov ebp, 0x6e7f73f7
sub ebp, 0x6e7f73f2
mov ebx, ebp
pop ebp
sub ebx, 0x7e1fd0df
add ebx, edx
add ebx, 0x7e1fd0df
xor esi, dword [ebx]
mov ebx, dword [esp]
add esp, 4
jmp 0xaa2743
push edi
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push ebx
mov dword [esp], eax
mov eax, 4
sub ebp, eax
pop eax
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
push eax
mov dword [esp], 0x126869d4
mov dword [esp], ecx
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
push edi
push esp
pop edi
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
push 3
pop ebx
add ebx, ecx
xor esi, dword [ebx]
pop ebx
push esi
push esp
mov esi, dword [esp]
add esp, 4
add esi, 4
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], eax
push edx
mov dword [esp], ebx
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov eax, dword [esp]
push edi
push 0x50c6d75
mov dword [esp], esp
push ebp
mov ebp, 4
add dword [esp + 4], ebp
pop ebp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xaa1f67
push esi
sub esp, 4
mov dword [esp], esi
push 0x101ee3
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], eax
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push ebp
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push 0x2f3f1403
mov dword [esp], eax
push edx
mov edx, 0x64cc98
mov dword [esp + 4], edx
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push 0x4b50e45
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov dword [esp], 0x996673e
mov dword [esp], ecx
push ebp
mov dword [esp], esi
mov esi, 0x571f3164
not esi
inc esi
xchg esi, edx
not edx
xchg esi, edx
not esi
push edi
mov edi, 0x75b7d791
or edi, 0x3ef68035
sub edi, 0x2fff0b9a
add edi, 0x59fea135
and edi, 0x7ff2c8a5
add edi, 0x3bbd001a
xor edi, 0x95b0518e
xor esi, edi
pop edi
add ecx, esi
pop esi
add ecx, eax
sub ecx, 0x58ffd708
push dword [esp]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0xaa98f9
push dword [ebp - 0x10]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
jmp 0xac77e0
call fcn.00449a60
jmp 0xaeb071
jmp 0xac426d
mov cx, word [eax]
jmp 0xaa6dfc
cmp ecx, dword [ebp - 0x1c]
jmp 0xab5d69
push esi
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x1b7fca55
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop edx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
mov edx, dword [esp]
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
sub esp, 4
mov dword [esp], esi
push eax
mov dword [esp], 0x65ea5f66
pop esi
sub esi, 0x65ea5f5c
mov dword [ebp - 0x14], esi
mov esi, dword [esp]
add esp, 4
jmp 0xac1acb
ja 0xac4213
jmp 0xacb22d
jae 0xab22ad
jmp 0xab4a15
push ebx
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push ebp
push esp
mov ebp, dword [esp]
add esp, 4
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
pop dword [esp]
pop esp
jmp dword [eax + 0xa4cdc8]
push edx
mov edx, esp
push esi
mov esi, 4
add edx, esi
pop esi
push ebp
push 4
pop ebp
sub edx, ebp
pop ebp
xchg dword [esp], edx
pop esp
mov dword [esp], eax
push ecx
mov dword [esp], 0x51a28e3a
mov dword [esp], edi
mov dword [esp], 0x5aa8d3ad
mov dword [esp], ebx
pop eax
mov eax, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x249bf0b
mov dword [esp], ecx
push esi
mov esi, 0x74be06bf
mov dword [esp + 4], esi
pop esi
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push 0x577e8037
mov dword [esp], esi
mov esi, 4
add ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xab945a
push edx
mov edx, esp
add edx, 4
push ecx
mov ecx, 4
sub edx, ecx
pop ecx
xchg dword [esp], edx
pop esp
mov dword [esp], eax
push esi
mov esi, 0x64cc98
mov dword [esp + 4], esi
pop esi
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebp
mov dword [esp], eax
push eax
push esi
mov esi, 0x1652640f
mov dword [esp + 4], esi
pop esi
mov dword [esp], esi
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
push ebp
mov ebp, 4
add ecx, ebp
pop ebp
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0xa9024c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x1c41c401
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], ebx
push ebp
mov dword [esp], 0x67a841ec
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
push ebx
mov ebx, 4
add ebp, ebx
pop ebx
xchg dword [esp], ebp
pop esp
jmp 0xaa6062
push esi
push edi
push 0x64cc98
pop edi
mov dword [esp + 4], edi
push dword [esp]
pop edi
add esp, 4
push ebp
mov ebp, esp
push esi
mov esi, 0x7f370641
neg esi
xor esi, 0x53f62a06
not esi
xor esi, 0x2cc12c42
sub ebp, 0x7f7f5f15
add ebp, esi
add ebp, 0x7f7f5f15
pop esi
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], eax
push edx
mov edx, esp
push ebp
mov ebp, 4
add edx, ebp
pop ebp
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
push ecx
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
jmp 0xab2488
jne 0xa9f0a0
jmp 0xabebb2
je 0xae1b62
jmp 0xaa6dea
je 0xaa00ea
jmp 0xac0693
push dword [ebp - 0x10]
push dword [esp]
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
jmp 0xac5e00
mov al, byte [0x64cac1]
push eax
push 0x3213e7ef
mov dword [esp], ebx
mov ebx, 0x71fb9639
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], edx
push 0x272101a5
mov dword [esp], eax
mov dword [esp], ecx
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xaa14e5
push 0x9b36
mov word [esp], bp
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
mov cx, 0x189c
neg cx
add cx, 0x8500
mov bp, cx
pop ecx
mov word [0x64cac0], bp
pop bp
jmp 0xab5f92
push dword [0x84ce70]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xac2de3
push eax
mov eax, esp
add eax, 4
push edx
mov edx, 4
sub eax, edx
pop edx
xchg dword [esp], eax
pop esp
mov dword [esp], edx
mov edx, 0x69757473
push edx
pop dword [0x64cabe]
pop edx
jmp 0xb03e77
push esi
mov esi, esp
add esi, 4
push ecx
mov ecx, 4
sub esi, ecx
mov ecx, dword [esp]
add esp, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edx
mov dword [esp], ecx
sub ecx, 0x5ff6e3fa
sub ecx, 0x654e8aa7
add ecx, eax
add ecx, 0x654e8aa7
push edi
mov edi, 0x5ff6e3fa
add ecx, edi
push dword [esp]
pop edi
add esp, 4
push dword [esp]
pop ecx
push ebx
mov ebx, esp
push ebp
mov ebp, 0x7dfa5876
add ebp, 0x8205a78e
add ebx, ebp
pop ebp
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push ebp
mov dword [esp], esi
mov dword [esp], edx
push ecx
mov ecx, 0x59524dea
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], edx
push edx
mov dword [esp], ecx
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push esi
push 4
pop esi
sub ebp, 0x7fe63518
add ebp, esi
add ebp, 0x7fe63518
pop esi
xchg dword [esp], ebp
pop esp
jmp 0xa89546
push ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 4
sub ecx, edx
pop edx
push ecx
push dword [esp + 4]
mov ecx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], ecx
push esi
mov esi, 0x73f76e7b
dec esi
xor esi, 0x888df4
sub ecx, esi
pop esi
add ecx, eax
push ebx
mov ebx, 0x22f1bc3f
add ebx, 0xffffffff
xor ebx, 0x518e5fb0
add ecx, ebx
mov ebx, dword [esp]
add esp, 4
mov ecx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push ebp
mov ebp, 4
add ecx, ebp
pop ebp
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
push dword [0x64cd5c]
mov esi, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
jmp 0xaa2f20
mov dx, word [ecx]
jmp 0xabaa92
cmp edx, dword [ebp - 0xc]
jmp 0xab5d74
push eax
push edi
push 0x12b78a51
pop edi
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], ecx
push ebp
mov ebp, 0x3ce3a99d
add ecx, 0x731df400
sub ecx, ebp
push esi
push 0x7f7f32f2
pop esi
and esi, 0x6beecf0d
and esi, 0x7f5fb99a
not esi
inc esi
xor esi, 0xe7aff400
sub ecx, esi
pop esi
pop ebp
add ecx, eax
add ecx, 0x3ce3a99d
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
push eax
mov eax, 0x6f766e38
sub eax, 0x7cddb85a
shl eax, 6
sub eax, 0x62be3878
sub eax, 0x436f3f04
add ebp, eax
pop eax
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push edx
mov dword [esp], eax
push 0x5cd93c9d
mov dword [esp], ecx
mov dword [esp], eax
mov eax, 0x64cc98
mov dword [esp + 4], eax
pop eax
jmp 0xab94ae
push edx
push esi
mov dword [esp], edx
push 0x951825d
pop edx
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
push ecx
push ebx
mov ebx, 0x518c84d8
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
sub esp, 4
mov dword [esp], edi
mov dword [esp], eax
pop dword [0x84ce70]
jmp 0xa91677
xor ecx, ecx
push esi
push esp
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebp
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ebx
mov ebx, esp
push edi
mov edi, 4
add ebx, edi
pop edi
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push dword [esp]
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
jmp 0xaa6df4
push edi
mov edi, esp
add edi, 4
push ebx
mov ebx, 4
sub edi, ebx
pop ebx
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
mov dword [esp], edi
mov dword [esp], edx
push 0x68251c05
mov dword [esp], ecx
mov edx, dword [esp]
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov edx, dword [esp]
push 0x20f6d520
mov dword [esp], esi
mov esi, esp
add esi, 4
push 0x5387d026
mov dword [esp], ebx
mov ebx, 0x5b85a060
sub ebx, 0x7ff96444
inc ebx
or ebx, 0x63e7915b
neg ebx
add ebx, 0xfbefbd63
add esi, ebx
pop ebx
xchg dword [esp], esi
pop esp
jmp dword [eax + 0xa4cdc8]
jmp 0xac426d
jmp 0xacb22d
sub esp, 4
mov dword [esp], ebp
push esp
mov ebp, dword [esp]
add esp, 4
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
push esi
mov esi, esp
add esi, 4
push edi
mov edi, 4
sub esi, edi
pop edi
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push eax
mov eax, esp
push ecx
mov ecx, 4
add eax, ecx
mov ecx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add eax, 4
xchg dword [esp], eax
pop esp
push ebx
push 8
pop ebx
mov dword [ebp - 8], ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
jmp 0xae844f
push ebx
push esp
push dword [esp]
pop ebx
add esp, 4
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
push esi
push esi
mov dword [esp], ecx
mov ecx, 0x37811637
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
pop ebx
push dword [esp]
mov ebx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
add esp, 4
push dword [ebp - 0x18]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], edx
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
add esp, 4
jmp 0xa99d10
sub esp, 4
mov dword [esp], eax
push ecx
mov ecx, 0x37322fc5
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], edi
mov dword [esp], eax
push edx
mov edx, esp
add edx, 4
sub esp, 4
mov dword [esp], ebp
mov ebp, 4
sub edx, ebp
pop ebp
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
pop eax
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
sub esp, 4
mov dword [esp], eax
mov eax, 4
add ecx, eax
pop eax
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [0x64cd5c]
push dword [esp]
pop esi
push 0x2ed7a7e
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0xaa42fe
test eax, eax
jmp 0xaea7a3
push eax
push edi
mov dword [esp], 0x2e706973
mov eax, dword [esp]
add esp, 4
mov dword [0x64cabc], eax
mov eax, dword [esp]
add esp, 4
push eax
mov dword [esp], esi
push esi
mov esi, 0x7ea54783
mov dword [esp + 4], esi
pop esi
mov dword [esp], edx
mov dword [esp], ebx
push 0x3b957982
mov dword [esp], ecx
push dword [esp]
pop ebx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov ebx, dword [esp]
push ecx
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
jmp 0xab86d5
cmp dword [ebp - 0x10], 0x1000000
jmp 0xaa7450
push eax
push esp
pop eax
add eax, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ebp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push 0x115ca550
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
pop eax
push edx
mov edx, esp
push ecx
push 4
pop ecx
add edx, ecx
pop ecx
add edx, 4
xchg dword [esp], edx
pop esp
push ecx
mov ecx, esp
add ecx, 4
push edi
mov edi, 4
sub ecx, edi
pop edi
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], ebp
mov dword [esp], edx
push eax
push 0xddc10ff
mov dword [esp], edi
mov edi, 0x5f00c8b2
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
mov edx, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
jmp 0xaa6de0
cmp esi, eax
jmp 0xaa1f72
cmp esi, eax
jmp 0xab4ade
push esi
push esp
pop esi
add esi, 4
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
push ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
sub esp, 4
mov dword [esp], esi
mov dword [esp], ecx
mov dword [esp], ebx
mov dword [esp], ecx
pop dword [ebp - 0x18]
push ebp
mov ebp, esp
add ebp, 4
push ecx
mov dword [esp], ebx
mov ebx, 4
add ebp, 0x3fddc029
sub ebp, ebx
sub ebp, 0x3fddc029
pop ebx
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], ebx
push ebx
mov ebx, 0x77435b95
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
mov esp, dword [esp]
jmp 0xab5dd5
push 0x3fd0228
mov dword [esp], ecx
push 0x3331ea7f
mov dword [esp], ebp
mov ebp, 0x11be9e73
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
push 0x50546914
mov dword [esp], ebx
mov dword [esp], esi
mov esi, 0x7a39770f
xor esi, 0xccc2767
add ecx, esi
mov esi, dword [esp]
add esp, 4
add ecx, eax
sub ecx, 0x76f55068
push dword [esp]
pop ecx
push eax
mov eax, esp
add eax, 4
push ecx
push 4
pop ecx
add eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
sub esp, 4
mov dword [esp], esi
push ebx
mov ebx, 0x4de11712
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0xa914b4
cmp dword [0xa4cdc8], 0x23f0
jmp 0xaa745b
push 0x378c4ba0
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
push edi
mov dword [esp], edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], edx
mov dword [esp], ecx
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop edx
push ecx
mov ecx, esp
add ecx, 4
push esi
mov esi, 0x6fbdbfe7
and esi, 0x373b61ab
xor esi, 0x273921a7
add ecx, esi
pop esi
xchg dword [esp], ecx
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xaa23a8
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], 0x60a103f7
mov dword [esp], ecx
sub ecx, 0x6c7f8546
sub ecx, 0x7ae6daf9
add ecx, eax
push edx
mov edx, 0x7ff7fa0e
sub edx, 0x7ebb3ae1
xor edx, 0x5bfe1ef3
push ebx
mov dword [esp], edx
not dword [esp]
pop edx
xor edx, 0xdfdb84d8
add ecx, edx
pop edx
add ecx, 0x6c7f8546
push dword [esp]
mov ecx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push ecx
mov dword [esp], eax
mov dword [esp], ebx
mov dword [esp], 0x31081cce
mov dword [esp], eax
pop dword [ebp - 0x10]
jmp 0xaa6dac
push dword [ebp - 0x18]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xac2305
push ebx
mov dword [esp], edi
push 0x35e5d92d
mov dword [esp], edx
mov edx, 0x769f1bf5
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
push ebx
push dword [esp]
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
push dword [esp]
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
push edi
mov dword [esp], ebp
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x64cc98
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
jmp 0xaa2738
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], eax
mov dword [esp], ecx
add ecx, 0x7f3b9d45
sub ecx, 0x6fad0edb
add ecx, eax
push eax
mov eax, 0x6ffebd67
add eax, 0x62fbb17b
dec eax
xor eax, 0xbd57603a
add ecx, eax
pop eax
push edi
mov dword [esp], ebp
mov ebp, 0x7f3b9d45
sub ecx, ebp
pop ebp
mov ecx, dword [esp]
push ebp
mov ebp, esp
push edi
mov edi, 0x40bf23b9
push ebx
mov ebx, 0x77efb8b4
or edi, ebx
pop ebx
not edi
sub edi, 0x8800443e
sub ebp, 0x67f29ff6
add ebp, edi
add ebp, 0x67f29ff6
pop edi
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [0x84ce70]
mov edx, dword [esp]
push ebx
push 0x4bab9cc6
mov dword [esp], esp
add dword [esp], 4
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0xab9fab
xor edx, edx
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edi
push esi
mov esi, 0x33444694
mov dword [esp + 4], esi
pop esi
mov dword [esp], edx
push edx
push eax
mov eax, 0x77f46efb
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push eax
mov eax, esp
push edx
mov dword [esp], ebx
mov ebx, 0x77f567c9
xor ebx, 0x77f567cd
add eax, ebx
pop ebx
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
jmp 0xabaa8a
push ebx
mov ebx, esp
push edi
mov edi, 0x7fbfc200
add edi, 1
shl edi, 4
shr edi, 4
sub edi, 0xfbfc1fd
add ebx, edi
pop edi
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
pop dword [0x84ce68]
jmp 0xac069d
je 0xac426d
jmp 0xaa2380
add esp, 4
jmp 0xac3398
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push ebp
mov ebp, esp
push edi
mov edi, 0x278e4732
not edi
not edi
shr edi, 7
and edi, 0x7fff9e4d
shr edi, 4
add edi, 0xfffb0e44
add ebp, edi
mov edi, dword [esp]
add esp, 4
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], eax
push 0x7d632d82
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
mov eax, dword [esp]
push eax
mov eax, esp
push 0x5a5136d4
mov dword [esp], esi
mov esi, 0x37a3633f
sub esi, 0x37a3633b
add eax, esi
pop esi
push ecx
mov ecx, 0x7ff8ba0a
add ecx, 0x7fbabb13
add ecx, 0x4c8ae7
add eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
jmp 0xae8f41
push 0x758bd59a
mov dword [esp], ebx
push 0x6c6c642e
pop ebx
push esi
mov dword [esp], ebx
pop dword [0x64cac2]
pop ebx
sub esp, 4
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], 0x75f839c9
mov dword [esp], eax
mov dword [esp], ebx
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
mov ebx, dword [esp]
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
jmp 0xaa7015