Function at 0xbd3b10
Capabilities:
Accept command line arguments

Disassembly:
push dword [0x653df4]
push dword [esp]
mov esi, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
push esi
mov esi, esp
push edx
mov edx, 0x4efe86ce
add edx, 0x6eab6026
xor edx, 0x5dff4d26
shl edx, 7
xor edx, 0x767e2850
sub edx, 0x5d2bc14c
add esi, edx
pop edx
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], ecx
mov dword [esp], edx
push edi
mov dword [esp], ecx
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
push edi
mov edi, 4
add ebx, edi
pop edi
xchg dword [esp], ebx
pop esp
jmp 0xc21e51
push edi
sub esp, 4
mov dword [esp], ecx
push 0x653d30
pop ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
push esi
push esp
mov esi, dword [esp]
add esp, 4
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ecx
push eax
mov eax, 0x67fee63f
inc eax
xor eax, 0x9df30b1
push 0
sub dword [esp], eax
pop eax
shr eax, 6
xor eax, 0x776f032b
add eax, 0xa6c76f63
add ecx, 0x7c2fc0a4
sub ecx, eax
sub ecx, 0x7c2fc0a4
pop eax
add ecx, 0x6fde4983
add ecx, eax
sub ecx, 0x6fde4983
add ecx, 0x1befeaf2
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0xbe6b76
push dword [ebp - 0x18]
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
sub esp, 4
mov dword [esp], edi
mov dword [esp], eax
mov dword [esp], ebx
mov dword [esp], edx
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edx
mov dword [esp], esi
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
push ebp
mov ebp, 4
add edi, ebp
mov ebp, dword [esp]
add esp, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
jmp 0xc19812
push dword [ebp - 4]
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
add esp, 4
jmp 0xbd68ba
cmp dword [ebp - 0x10], 0x1000000
jmp 0xc07e06
push 0x47a789b8
mov dword [esp], edi
push edx
push esi
mov esi, 0x71d12175
mov edx, esi
pop esi
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
sub ecx, 0x4cfd3bd8
sub ecx, 0x3eff3470
add ecx, eax
add ecx, 0x3eff3470
push esi
push 0x7fff5e71
pop esi
inc esi
not esi
shl esi, 6
push ebx
mov ebx, 0x33f501b0
inc ebx
add ebx, 0x18e056e7
xor esi, ebx
pop ebx
add ecx, esi
pop esi
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
xor edx, edx
push edi
mov dword [esp], 0x43cdd143
mov dword [esp], esi
push eax
mov eax, 0x76c915c7
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
sub ecx, 0x53770502
add ecx, eax
push ebx
mov dword [esp], edx
mov edx, 0x53770502
sub ecx, 0x5fafb0c2
sub ecx, 0x377f9921
add ecx, edx
add ecx, 0x377f9921
add ecx, 0x5fafb0c2
pop edx
mov ecx, dword [esp]
push eax
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
mov esp, dword [esp]
jmp 0xc29590
jne 0xc08f29
jmp 0xbe9981
cmp dword [0xa541e0], 0x23f0
jmp 0xc07e11
push 0x347573e4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
mov dword [esp], ecx
pop dword [ebp - 0x18]
jmp 0xbe7a3a
push ebp
push 0xe795fb5
mov dword [esp], ecx
push 0x7f04bd30
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
push dword [esp]
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
add esp, 4
push esi
push ecx
mov ecx, 0x4d62e6da
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0xbd639e
sub esp, 4
mov dword [esp], edx
push ebx
push 0x653b68
pop ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
push edi
mov dword [esp], esi
mov dword [esp], ebx
mov dword [esp], esi
mov dword [esp], eax
mov dword [esp], ecx
sub ecx, 0x3f7b4064
push ebp
mov ebp, 0x6eff83e7
not ebp
and ebp, 0x765bf48b
sub ebp, 0x901283fc
sub ecx, ebp
pop ebp
add ecx, eax
push edx
mov edx, 0x1dffc887
shr edx, 4
sub edx, 0x76ffbd79
not edx
not edx
xor edx, 0xf50dcf03
add ecx, edx
pop edx
push edi
mov edi, 0x6fdfe484
shl edi, 3
inc edi
sub edi, 0x3f83e3bd
add ecx, edi
pop edi
push dword [esp]
pop ecx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
mov esp, dword [esp]
jmp 0xc07d7a
push 0xac9616e
mov dword [esp], eax
mov dword [esp], 0x240dcf45
mov dword [esp], ecx
push ebp
mov ebp, 0x653d30
mov dword [esp + 4], ebp
pop ebp
jmp fcn.00bdf7fe
sub esp, 4
mov dword [esp], ebp
push eax
mov dword [esp], esi
mov esi, 0x578646e
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push dword [esp]
pop ebx
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push esi
push 0x950f
pop si
dec si
push eax
mov ax, 0xd29
xor ax, 0xe5fd
and ax, 0x952f
dec ax
neg ax
add ax, 0xf64a
push bx
mov bx, 0xa6a
sub ax, 0x6431
sub ax, bx
add ax, 0x6431
pop bx
and si, ax
pop eax
xor si, 0x6d68
mov word [0x653b70], si
pop esi
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], esi
mov dword [esp], 0x75faa157
mov dword [esp], eax
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
jmp 0xc2d8c7
call fcn.0044a6e0
jmp 0xbebe8f
push ecx
mov ecx, esp
push eax
mov eax, 4
add ecx, eax
pop eax
push eax
mov eax, 0x2f5437c2
inc eax
push esi
mov esi, 0x3faf9d74
sub eax, esi
pop esi
or eax, 0x17f9f1cf
sub eax, 0x63f6a376
xor eax, 0x9c07585d
sub ecx, eax
pop eax
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
push ecx
mov dword [esp], eax
mov dword [esp], ecx
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop ebx
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
push edx
mov edx, 0x5ef75fa5
shr edx, 8
add edx, 0xffa108a5
add ebp, edx
pop edx
add ebp, 4
xchg dword [esp], ebp
pop esp
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0xc08c03
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
mov dword [esp], edi
mov dword [esp], ebp
mov dword [esp], ebx
push esi
mov dword [esp], 0x6530c55f
mov dword [esp], esi
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
mov ebx, dword [esp]
push 0x5e6807a2
mov dword [esp], esi
push esp
mov esi, dword [esp]
add esp, 4
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
jmp 0xbecf42
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xc2c0d3
push edx
push ebp
mov ebp, 0x76cde6b3
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ebx
mov dword [esp], eax
pop dword [ebp - 0x10]
jmp 0xbec5b5
jmp 0xbd657e
jmp 0xbd657e
jmp 0xbd69e6
push edi
push edx
mov edx, 0x3ac1bac7
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], ecx
sub ecx, 0x1f9c84e4
push eax
push 0x5dffce2a
pop eax
sub ecx, eax
pop eax
add ecx, eax
add ecx, 0x5dffce2a
push ebx
mov ebx, 0x27fa3de4
dec ebx
xor ebx, 0x7cf74590
shl ebx, 6
xor ebx, 0xdcc29824
add ecx, ebx
pop ebx
mov ecx, dword [esp]
push eax
mov eax, esp
add eax, 4
push esi
push 4
pop esi
add eax, esi
pop esi
xchg dword [esp], eax
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0xbde500
push esi
mov esi, esp
push edi
mov edi, 0x7ff7b97b
and edi, 0x19ff6fa8
xor edi, 0x19f7292c
add esi, edi
pop edi
push edx
mov edx, 4
sub esi, 0x635d5dcb
sub esi, edx
add esi, 0x635d5dcb
pop edx
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov ebx, dword [esp]
push edx
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [ebp - 0x18]
mov eax, dword [esp]
push eax
push esp
mov eax, dword [esp]
add esp, 4
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push edx
push edx
mov edx, 0x62d2662
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
mov dword [esp], ecx
add ecx, 0x6bdfd842
add ecx, 0x7df9b7f3
sub ecx, 0x7db74230
add ecx, eax
add ecx, 0x7db74230
push edx
mov edx, 0x19fc51e5
add edx, 0x63fd660e
sub ecx, edx
pop edx
push ebp
mov ebp, 0x6bdfd842
sub ecx, ebp
pop ebp
push dword [esp]
pop ecx
push edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
mov edi, dword [esp]
add esp, 4
pop dword [esp]
pop esp
jmp 0xc2c7d6
push dword [0x8541c8]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push ecx
mov dword [esp], edx
mov edx, esp
add edx, 4
push ecx
mov ecx, 4
sub edx, ecx
pop ecx
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], edx
push ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
mov edx, dword [esp]
push ebx
mov ebx, esp
push ebp
mov ebp, 0x7fffe30b
add ebp, 0x1efb7209
shl ebp, 3
not ebp
shl ebp, 3
and ebp, 0x13658b96
add ebp, 0xfedf7574
add ebx, ebp
pop ebp
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
jmp 0xbd33c2
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
mov ebx, 0x3c
add ebx, edx
sub esp, 4
mov dword [esp], ecx
mov ecx, 0
add ecx, ebx
add eax, dword [ecx]
pop ecx
pop ebx
jmp 0xbdd576
cmp edx, dword [ebp - 0xc]
jmp 0xc07b67
push ecx
sub esp, 4
mov dword [esp], esi
push 0xbdb7dab
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
add ecx, 0x2ff27bae
sub ecx, 0x1fd4b7d6
add ecx, eax
push ebx
push edi
mov dword [esp], 0x6f9fd56a
pop ebx
add ebx, 0x4fef8693
sub ebx, 0x9fbaa427
add ecx, ebx
pop ebx
sub ecx, 0x2ff27bae
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push ebp
mov ebp, 0x67ef66c2
shl ebp, 2
push 0x37f3d955
mov dword [esp], edi
mov edi, 0x17ed1a09
xor edi, 0x995fd462
add ebp, edi
pop edi
push ebp
pop dword [0x653b6c]
mov ebp, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ebx
push ecx
push 0x6f32a61f
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
pop edx
sub esp, 4
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xbde8dc
push dword [ebp - 0x10]
push dword [esp]
pop edx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push edx
mov dword [esp], ebx
mov ebx, esp
push esi
mov esi, 0x634f65cd
shl esi, 8
sub esi, 0x4f65ccfc
add ebx, esi
pop esi
push esi
mov esi, 0x6ce47e01
shl esi, 2
not esi
dec esi
add esi, 0xb391f80a
sub ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
push eax
push 0x7fd58dfa
pop eax
add ecx, eax
pop eax
add ecx, eax
push edx
mov edx, 0x7dfb3343
push ecx
mov ecx, 0x1e2fa139
sub edx, ecx
pop ecx
dec edx
or edx, 0x7d7e6296
xor edx, 0x2a7f65
sub ecx, edx
pop edx
push dword [esp]
pop ecx
push edi
mov edi, esp
push esi
mov esi, 0x57ff35a3
or esi, 0x5f1ba56a
xor esi, 0x5fffb5ef
add edi, esi
mov esi, dword [esp]
add esp, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xc00ebc
test eax, eax
jmp 0xc26551
push 0x739e3031
mov dword [esp], ebx
push 0x5cdc747d
mov dword [esp], eax
mov eax, 0x427bbb83
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
push ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov edx, dword [esp]
push edx
push esp
pop edx
add edx, 4
push ecx
mov ecx, 4
add edx, ecx
pop ecx
xchg dword [esp], edx
mov esp, dword [esp]
mov byte [0x653b72], al
jmp 0xbd3762
push ecx
mov dword [esp], 0x158ccf30
mov dword [esp], edi
push edx
mov edx, 0x497eaa7c
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push eax
mov eax, esp
add eax, 4
push ebx
mov ebx, 0x4fcd0558
not ebx
or ebx, 0x4fdfe93b
shl ebx, 5
shr ebx, 4
xor ebx, 0xffff77a
sub eax, ebx
mov ebx, dword [esp]
add esp, 4
xchg dword [esp], eax
pop esp
mov dword [esp], eax
pop dword [0x8541c0]
push esi
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
mov ebx, 0x3102eb0d
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
push edi
mov edi, 4
add esi, edi
pop edi
xchg dword [esp], esi
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0xbe4148
push ebx
push ebx
mov ebx, 0x2fd5d9c
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebp
mov dword [esp], edi
mov dword [esp], edx
push ebx
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
push eax
mov eax, 0x5c36e5ed
or eax, 0x7fa91ee4
neg eax
sub eax, 0x7f3a040d
xor eax, 0x105fc02
add ecx, eax
pop eax
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp dword [eax + 0xa541e0]
add esp, 4
jmp 0xbe7f19
mov cx, word [eax]
jmp 0xc29588
push 0x2a082e33
mov dword [esp], ebx
push ebp
mov ebp, 0x5ece59ef
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], ecx
sub ecx, 0x6fff40b0
push ebp
push edi
mov edi, 0x6b7f6bee
shl edi, 4
not edi
inc edi
xor edi, 0x7ffebf7a
or edi, 0x7d3b2be3
sub edi, 0x410ea49
mov ebp, edi
pop edi
sub ecx, ebp
pop ebp
add ecx, eax
add ecx, 0x7bef15b2
add ecx, 0x6fff40b0
mov ecx, dword [esp]
push edx
mov edx, esp
push eax
mov eax, 0x59e7d4f2
not eax
inc eax
shl eax, 6
shr eax, 5
dec eax
push ecx
mov ecx, 0x4305617
sub eax, 0x5beab119
sub eax, ecx
add eax, 0x5beab119
pop ecx
add edx, eax
pop eax
add edx, 4
xchg dword [esp], edx
pop esp
push dword [ebp - 0x10]
mov ecx, dword [esp]
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push eax
push esp
pop eax
add eax, 4
push ecx
mov ecx, 0x7f6f61a7
add ecx, 0x7fbf18e2
inc ecx
xor ecx, 0x37fe8e52
xor ecx, 0x77f79ae2
shr ecx, 7
sub ecx, 0x17e4ed8
sub eax, ecx
pop ecx
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop ebx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov ebx, dword [esp]
push edx
push esp
pop edx
add edx, 4
push eax
mov eax, 4
add edx, eax
mov eax, dword [esp]
add esp, 4
xchg dword [esp], edx
pop esp
jmp fcn.00bd6a60
push edi
mov dword [esp], 0x1ba6aa6e
mov dword [esp], ebp
mov dword [esp], edi
mov dword [esp], eax
pop dword [0x8541c8]
jmp 0xc1af43
push ebp
push esp
pop ebp
add ebp, 4
push edi
mov edi, 0x3f9343a4
xor edi, 0x1e7598c1
and edi, 0x7fe736d5
and edi, 0x377b2f1d
sub edi, 0x21620201
sub ebp, edi
pop edi
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], edx
jmp 0xbdeb96
push ebp
push esp
mov ebp, dword [esp]
add esp, 4
push eax
mov eax, 0x7ff6c22
xor eax, 0x6f7fa9a3
neg eax
xor eax, 0x977f3a7b
add ebp, eax
pop eax
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
push ebx
mov dword [esp], ecx
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push ebx
mov ebx, 0x1ffbc193
neg ebx
sub ebx, 0x7f942b83
neg ebx
or ebx, 0x5b3fec11
add ebx, 0x204012ed
add ecx, 0x1edf978d
add ecx, ebx
sub ecx, 0x1edf978d
pop ebx
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
push ecx
mov ecx, 0x1000
sub eax, ecx
push dword [esp]
pop ecx
push eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
push eax
push eax
mov eax, 0x19ae58ae
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebp
mov dword [esp], 0x6ac4f0af
mov dword [esp], ecx
push ebx
mov ebx, 0x365b7e19
add ebx, 0x667fc3b3
xor ebx, 0xe101d0a0
sub ecx, ebx
pop ebx
sub ecx, 0x4eff59db
add ecx, eax
add ecx, 0x4eff59db
push eax
mov eax, 0x5db992a2
xor eax, 0x206303ce
add ecx, eax
mov eax, dword [esp]
add esp, 4
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
jmp 0xbe2f34
je 0xbd3b09
jmp 0xbe3abe
je 0xbdfe62
jmp 0xbe3ac8
push edx
push edi
push 0x1c5a8360
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
mov dword [esp], eax
push esi
mov esi, esp
add esi, 4
push ebp
mov ebp, 4
sub esi, ebp
pop ebp
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
mov eax, dword [esp]
push edi
mov edi, esp
push edx
push 4
pop edx
sub edi, 0x5e77099a
add edi, edx
add edi, 0x5e77099a
pop edx
add edi, 4
xchg dword [esp], edi
pop esp
push eax
mov dword [esp], ebx
push eax
push 0x653d30
pop eax
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
push ecx
push esp
pop ecx
push esi
mov esi, 4
add ecx, esi
pop esi
sub ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov dword [esp], ecx
add ecx, 0x5bafe064
sub ecx, 0x6d6e9068
add ecx, eax
add ecx, 0x6d6e9068
push esi
push 0x5bafe064
mov esi, dword [esp]
add esp, 4
sub ecx, esi
pop esi
mov ecx, dword [esp]
push ebx
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0xbdf5a8
push ecx
mov ecx, esp
add ecx, 4
push esi
push 4
pop esi
sub ecx, esi
mov esi, dword [esp]
add esp, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
push esi
mov dword [esp], 0x45188188
mov dword [esp], ecx
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
pop edx
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xc2d201
ja 0xc2d5c6
jmp 0xbd69e6
jae 0xc07c44
jmp 0xbde898
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
mov dword [esp], ecx
add ecx, 0x7b9e5cd2
push edx
push 0x5cde6798
pop edx
sub ecx, edx
mov edx, dword [esp]
add esp, 4
add ecx, eax
add ecx, 0x5cde6798
sub ecx, 0x7b9e5cd2
push dword [esp]
pop ecx
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
sub esp, 4
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x653d30
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
jmp 0xc2720c
push eax
mov eax, 0x78707061
push eax
pop dword [0x653b68]
mov eax, dword [esp]
push 0x15942ff2
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xbe785d
push dword [ebp - 0x18]
push dword [esp]
push dword [esp]
pop eax
add esp, 4
add esp, 4
push edx
push ecx
mov ecx, 0xdb7fa46
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
mov dword [esp], 0x3dbbbbbb
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop ebx
push ebp
mov ebp, esp
push edi
mov edi, 4
add ebp, edi
pop edi
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0xbe71aa
push dword [ebp - 0x18]
mov eax, dword [esp]
push 0x5db59b23
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
jmp 0xbe95ac
push esi
mov esi, esp
push ecx
push 4
pop ecx
add esi, ecx
pop ecx
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], ecx
push esi
mov esi, 0x7fec611f
sub ecx, esi
pop esi
push edi
mov edi, 0x7de9e8bd
neg edi
shr edi, 7
sub edi, 0x8134c796
sub ecx, edi
pop edi
add ecx, eax
push edx
mov edx, 0x3fdd82d3
sub edx, 0x7edfbde5
shl edx, 7
inc edx
or edx, 0x767e222e
shl edx, 6
xor edx, 0xc052af58
add ecx, edx
pop edx
add ecx, 0x7fec611f
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], eax
mov eax, esp
push edi
mov edi, 4
add eax, edi
pop edi
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
push ecx
mov ecx, 5
push ebx
mov ebx, 0x5e732f52
add ebx, 0x776f0675
inc ebx
dec ebx
xor ebx, 0x5ffb272f
xor ebx, 0xfa866565
sub ecx, 0x73f7725f
add ecx, ebx
add ecx, 0x73f7725f
mov ebx, dword [esp]
add esp, 4
add ecx, edx
sub ecx, 0x709f778d
xor esi, dword [ecx]
pop ecx
jmp 0xbe2e01
je 0xbd657e
jmp 0xbe6cb3
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], esi
push eax
mov eax, 0x755e341c
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebx
push edx
mov dword [esp], ebx
mov dword [esp], 0x659431b5
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
mov ebx, dword [esp]
push eax
push esp
pop eax
add eax, 4
add eax, 4
push ebp
mov dword [esp], eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0xbe6dce
cmp ecx, dword [ebp - 0x1c]
jmp 0xc07b5c
mov dx, word [ecx]
jmp 0xbe71e0
cmp esi, eax
jmp 0xbd698c
xor ecx, ecx
sub esp, 4
mov dword [esp], ebx
push ebp
mov ebp, 0x5c97d2c8
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop edx
push ebx
push esp
pop ebx
add ebx, 4
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
xchg dword [esp], ebx
pop esp
jmp 0xbebe97
push ecx
mov ecx, esp
add ecx, 4
push edx
push 4
pop edx
sub ecx, edx
pop edx
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
pop dword [0x654104]
sub esp, 4
mov dword [esp], ecx
push ecx
mov ecx, 0x3d562f39
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
mov eax, dword [esp]
sub esp, 4
mov dword [esp], edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0x4dd6b2
push dword [ebp - 0x10]
push dword [esp]
pop eax
push eax
mov eax, esp
push edi
mov edi, 4
add eax, edi
pop edi
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xc073dc
mov al, byte [0x653b71]
jmp 0xbe7f20