Function at 0xaac623
Capabilities:
Accept command line arguments

Disassembly:
push dword [0x84ee60]
push dword [esp]
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
push esi
push 0x337dc118
mov dword [esp], ebp
mov ebp, 0x3c41c568
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edi
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push 0x3c84b05a
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push dword [esp]
pop edx
push edx
push esp
pop edx
push ebx
mov ebx, 0x7eefd255
add ebx, 0x81102daf
add edx, ebx
pop ebx
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xca63ef
mov al, byte [0x64e03d]
push esi
mov esi, esp
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
mov esi, dword [esp]
add esp, 4
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
push edi
mov edi, 0x5ebfc6ab
dec edi
push edi
not dword [esp]
pop edi
xor edi, 0x9eac35fc
sub ecx, edi
pop edi
add ecx, 0x7dfd2fc1
add ecx, eax
sub ecx, 0x7dfd2fc1
push edx
mov edx, 0x79fbce22
or edx, 0x7ffa3d55
shl edx, 5
xor edx, 0xc093e249
add ecx, edx
pop edx
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xba55db
push dword [ebp - 0x18]
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
sub esp, 4
mov dword [esp], esi
push edi
push 0x2199d33b
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], ebx
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
mov ebx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
add esp, 4
jmp 0xb9b2fa
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
mov dword [esp], 0x56513b6f
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop eax
push esi
push esp
pop esi
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
mov al, byte [0x64eab1]
push ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], edx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
mov ebx, dword [esp]
push ecx
mov dword [esp], edx
mov edx, esp
add edx, 4
push eax
mov eax, 4
add edx, eax
pop eax
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
jmp 0xac1e65
push edi
mov dword [esp], 0x1694a4fa
mov dword [esp], ebx
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0xbf99c0
add esp, 4
jmp 0xb1b2a2
mov cx, word [eax]
jmp 0xaabcc7
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push 0x76ae57f9
mov dword [esp], ebx
push ecx
mov ecx, 0x7f077c9f
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], edx
push edi
push 0x582974a7
mov dword [esp], edi
mov edi, 0x5ba95bf9
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
pop edx
push dword [esp]
pop edx
push ebx
push esp
pop ebx
add ebx, 4
push esi
mov esi, 4
add ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
jmp 0xbbb1b6
push ebp
push eax
mov eax, 0x34bdd0e9
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], esi
mov dword [esp], ecx
sub ecx, 0x7bb9ea85
add ecx, 0x4fdc12b9
add ecx, 0x73ff8537
add ecx, eax
sub ecx, 0x73ff8537
sub ecx, 0x4fdc12b9
push ebx
push 0x7bb9ea85
pop ebx
add ecx, ebx
pop ebx
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [ebp - 0x18]
push dword [esp]
pop eax
push eax
mov eax, esp
push ebp
mov ebp, 4
add eax, ebp
pop ebp
add eax, 4
xchg dword [esp], eax
pop esp
push ebp
mov ebp, esp
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], ebp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ebx
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
mov ebx, dword [esp]
push 0x49641e3c
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
jmp 0xb854ca
cmp dword [0xa4edb8], 0x23f0
jmp 0xc452e6
cmp edx, dword [ebp - 0xc]
jmp 0xb7af6e
push 0x336b394f
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push 0x2850863c
mov dword [esp], esi
mov esi, 4
sub ebp, esi
pop esi
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
push esi
push esp
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edi
mov dword [esp], ecx
pop ebx
mov ebx, dword [esp]
push eax
push esp
pop eax
add eax, 4
push edi
push 4
pop edi
add eax, edi
pop edi
xchg dword [esp], eax
pop esp
push ebp
mov ebp, 0x4d7be822
shr ebp, 2
shl ebp, 6
push ebx
mov ebx, 0x67fb2e50
shr ebx, 5
push 0x418803c
mov dword [esp], ebx
not dword [esp]
pop ebx
xor ebx, 0x92892b00
sub ebp, ebx
pop ebx
push ebp
pop dword [0x64eaae]
pop ebp
push edi
mov edi, esp
add edi, 4
sub edi, 4
push 0x2cae364
mov dword [esp], edi
push dword [esp + 4]
mov edi, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], ecx
sub ecx, 0x1efe3ddf
add ecx, eax
push esi
push 0x7ff97c22
pop esi
sub esi, 0x5dbb1d92
add esi, 0x76ef5539
sub esi, 0x7a2f75ea
add ecx, 0x5fff164d
add ecx, esi
sub ecx, 0x5fff164d
mov esi, dword [esp]
add esp, 4
push dword [esp]
pop ecx
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0xb543ef
push dword [0x64e024]
push dword [esp]
pop edx
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xb14160
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], esi
mov dword [esp], eax
mov dword [esp], edi
mov dword [esp], eax
push edx
mov dword [esp], ebx
push dword [esp]
pop eax
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop eax
push edx
mov edx, esp
push ecx
mov ecx, 4
add edx, 0x1b7b6ae4
add edx, ecx
sub edx, 0x1b7b6ae4
pop ecx
add edx, 4
xchg dword [esp], edx
pop esp
push ecx
mov ecx, 0x6fe5d302
and ecx, 0x7e6f6e8c
shl ecx, 8
and ecx, 0x76dfe2ba
shl ecx, 6
push edi
mov edi, 0x7f7784ac
push edx
mov edx, 0x7fdbe0bd
xor edx, 0xfbff954
add edx, 0xee90eb33
add edi, edx
pop edx
dec edi
shr edi, 2
and edi, 0x4fdf58ef
xor edi, 0x33246e24
sub ecx, 0x7ef96ec4
add ecx, edi
add ecx, 0x7ef96ec4
mov edi, dword [esp]
add esp, 4
xor ecx, 0x6b4f0736
mov dword [0x64eaac], ecx
pop ecx
sub esp, 4
mov dword [esp], edi
push edx
mov edx, 0x359b7f54
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
push ebx
mov ebx, 4
add edx, ebx
pop ebx
xchg dword [esp], edx
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0xab78e8
cmp esi, eax
jmp 0xb80f2a
push edx
mov dword [esp], ecx
mov dword [esp], 0x27e776
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], edx
push eax
mov eax, esp
push ebx
mov ebx, 4
add eax, ebx
pop ebx
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edx
mov dword [esp], ecx
pop edx
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
push ebp
mov ebp, 4
add eax, ebp
pop ebp
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
push ebp
push edx
mov edx, 0x3fff0239
xor edx, 0x3ecdfc2e
dec edx
sub edx, 0x132ee16
mov ebp, edx
pop edx
sub eax, ebp
push dword [esp]
mov ebp, dword [esp]
add esp, 4
add esp, 4
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebp
mov dword [esp], ebx
mov dword [esp], 0x488b40f0
mov dword [esp], ebx
push eax
push eax
mov eax, 0x7307ad6b
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
mov ebx, dword [esp]
push 0x2df7da9c
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
jmp 0xab2090
push dword [0x64ed4c]
push dword [esp]
mov esi, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push ecx
push ecx
push 0x377f3a5f
mov ecx, dword [esp]
add esp, 4
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push edi
mov edi, esp
push ebx
mov ebx, 0x7ecf6968
add ebx, 0x73fda012
add ebx, 0xd32f68a
add edi, ebx
pop ebx
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push dword [esp]
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
jmp 0xc55278
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ecx
push edi
push 0x3e754e77
pop edi
sub edi, 0x7ff72718
add edi, 0xb019611b
sub ecx, edi
pop edi
add ecx, eax
push edx
mov edx, 0x6e97887a
add ecx, 0x1bb3ac51
add ecx, edx
sub ecx, 0x1bb3ac51
pop edx
push dword [esp]
pop ecx
push edi
mov edi, esp
add edi, 4
push eax
mov eax, 4
sub edi, 0x569bea5f
add edi, eax
add edi, 0x569bea5f
pop eax
xchg dword [esp], edi
pop esp
xor eax, eax
push edi
mov edi, esp
add edi, 4
push ebx
mov ebx, 4
sub edi, ebx
pop ebx
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], ecx
mov dword [esp], eax
push ebx
mov dword [esp], 0x6ffa84d4
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
pop eax
push eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
jmp 0xb351e8
cmp ecx, dword [ebp - 0x1c]
jmp 0xabee0b
mov dx, word [ecx]
jmp 0xa8fdb1
push edi
mov dword [esp], esi
push 0x1000
push dword [esp]
pop esi
add esp, 4
add edx, esi
pop esi
push ebp
mov ebp, esp
add ebp, 4
push edx
mov edx, 0x7bddc18f
add edx, 0x84223e75
sub ebp, edx
pop edx
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
mov dword [esp], eax
push edx
mov dword [esp], ebx
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov eax, dword [esp]
push esi
mov esi, esp
push eax
mov eax, 0x5cf5af41
push edx
push 0xfff175e
pop edx
sub edx, 0x63fffd9d
neg edx
xor edx, 0xf5d8668
xor eax, edx
pop edx
sub eax, 0x7a8cf12
add esi, eax
pop eax
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0xb59134
push esi
mov esi, esp
push ebx
push ebp
mov dword [esp], 0x5dcd3e1f
pop ebx
inc ebx
not ebx
not ebx
neg ebx
sub ebx, 0x3ff751d4
sub ebx, 0x623b7008
add esi, ebx
pop ebx
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
mov ebx, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
push ebx
push eax
mov eax, 0x7fbfe51a
add eax, 0xb4ffc971
mov ebx, eax
pop eax
sub ebx, 0x7cf54308
dec ebx
xor ebx, 0x7fdea634
not ebx
add ebx, 0xc814cdbb
add ebp, ebx
pop ebx
xchg dword [esp], ebp
pop esp
push eax
push eax
mov eax, 0x7180d466
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], eax
pop dword [ebp - 0x10]
push ecx
mov ecx, esp
add ecx, 4
push 0xe5e107c
mov dword [esp], eax
push 4
pop eax
sub ecx, eax
pop eax
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ecx
push ecx
mov ecx, 0x525534c
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
pop eax
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0xab8b38
sub esp, 4
mov dword [esp], edi
push esp
mov edi, dword [esp]
add esp, 4
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
sub ecx, 0x77fda8eb
add ecx, 0x7be733d3
add ecx, eax
sub esp, 4
mov dword [esp], eax
mov eax, 0x7be733d3
sub ecx, 0x7feebcb5
sub ecx, eax
add ecx, 0x7feebcb5
pop eax
add ecx, 0x77fda8eb
push dword [esp]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
push ebp
mov bp, 0x8337
push di
mov di, 0xc579
and bp, di
pop di
shr bp, 4
push 0xc1fb
mov word [esp], dx
mov dx, 0x630f
sub bp, dx
mov dx, word [esp]
add esp, 2
shl bp, 4
shl bp, 6
xor bp, 0x7c64
mov word [0x64eab0], bp
pop ebp
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
push ebx
mov ebx, 0x664caded
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebx
push eax
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
mov ebx, dword [esp]
push ebx
mov dword [esp], ecx
mov ecx, esp
push eax
push edx
mov edx, 0x4f23602f
xor edx, 0x1cf4baf2
mov eax, edx
pop edx
not eax
xor eax, 0x393e2745
xor eax, 0x95160263
add ecx, eax
pop eax
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xa84537
push dword [ebp - 0x10]
push dword [esp]
pop ecx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push edi
push esp
pop edi
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebp
mov dword [esp], 0x2e0f5a7a
mov dword [esp], ecx
add ecx, 0x3f36146a
push eax
push ebx
mov ebx, 0x751ec185
sub ebx, 0x7febb11b
not ebx
shr ebx, 8
add ebx, 0x63f48f2a
mov eax, ebx
pop ebx
sub ecx, eax
pop eax
sub ecx, 0x7ffd98b5
add ecx, eax
add ecx, 0x7ffd98b5
add ecx, 0x63ff5c19
sub ecx, 0x3f36146a
push dword [esp]
mov ecx, dword [esp]
push edi
mov edi, esp
add edi, 4
push ecx
mov ecx, 4
add edi, ecx
pop ecx
xchg dword [esp], edi
pop esp
add esp, 4
jmp 0xad5a73
je 0xac2ef5
jmp 0xb19a44
je 0xb9b2d6
jmp 0xbe09b5
mov byte [0x64eab2], al
jmp 0xc4c6e7
cmp dword [ebp - 0x10], 0x1000000
jmp 0xb7af79
push dword [ebp - 0x10]
push dword [esp]
push dword [esp]
pop eax
add esp, 4
add esp, 4
jmp 0xaa0dbb
push edi
push ecx
push 0x36d16c27
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
pop dword [ebp - 0x18]
push esi
mov esi, esp
add esi, 4
push edi
mov edi, 0x2da9a125
push ecx
mov ecx, 0xd2565edf
add edi, ecx
pop ecx
sub esi, edi
pop edi
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], edx
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
pop edx
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
push edx
mov edx, 0x6757d00c
not edx
xor edx, 0x98a82ff7
add ecx, edx
pop edx
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xb17dbb
push esi
mov esi, esp
add esi, 4
push edx
mov edx, 0x6bff0939
neg edx
shl edx, 6
or edx, 0x7dfeaede
sub edx, 0x7dffbfda
sub esi, edx
pop edx
xchg dword [esp], esi
pop esp
mov dword [esp], edx
pop dword [0x64e024]
push edx
mov edx, esp
push ecx
mov ecx, 0x6f77cd42
shl ecx, 1
add ecx, 0x77f70a81
shr ecx, 5
add ecx, 0xfd48cadc
add edx, ecx
pop ecx
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edx
mov dword [esp], ecx
mov dword [esp], edx
push ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
jmp 0xad4a86
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], ebx
mov dword [esp], 0x3769584
mov dword [esp], eax
push ebx
mov ebx, esp
add ebx, 4
push ecx
mov ecx, 4
sub ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
jmp 0xba152e
sub esp, 4
mov dword [esp], ebp
push ebp
mov ebp, 0x6cfc2fb
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
pop dword [str._____]
push eax
mov dword [esp], 0x32f0a2cd
mov dword [esp], ecx
mov dword [esp], 0x7b8674bc
mov dword [esp], edi
mov dword [esp], edx
push 0x5779f783
mov dword [esp], edi
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xaab063
xor ecx, ecx
push 0x4ef3c337
mov dword [esp], esi
push edi
mov edi, 0x706fee84
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
mov ecx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
mov ecx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
jmp 0xa84700
push eax
mov eax, esp
add eax, 4
push ebx
mov ebx, 4
sub eax, ebx
pop ebx
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov dword [esp], eax
pop dword [0x64ee5c]
jmp 0x4db8fa
push edx
mov edx, esp
push ebx
mov ebx, 0x7fb32c08
xor ebx, 0x7fb32c0c
add edx, ebx
pop ebx
push ebp
mov ebp, 4
sub edx, ebp
pop ebp
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], eax
push 0x3e9790a
mov dword [esp], ebx
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
shr ecx, 2
jmp 0xca5cd9
and edx, eax
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov dword [esp], edi
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
push ebx
mov ebx, 4
add edx, ebx
pop ebx
xchg dword [esp], edx
mov esp, dword [esp]
push dword [esp]
pop eax
push eax
mov eax, esp
push esi
push 0x7feb9a71
pop esi
shl esi, 2
xor esi, 0xffae69c0
add eax, esi
pop esi
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xae2f9a
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
mov dword [esp], 0x43dc9efe
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push ebx
mov ebx, 0x7bfeda4b
sub ebx, 0x3efa5b9f
inc ebx
inc ebx
shr ebx, 8
sub ebx, 0x3d047a
add ebp, ebx
pop ebx
xchg dword [esp], ebp
pop esp
mov eax, dword [esp]
push ebx
mov ebx, esp
push edx
push 4
pop edx
add ebx, edx
pop edx
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push dword [ebp - 0x10]
mov edx, dword [esp]
push ebx
mov dword [esp], 0x2caf63cf
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push 0x3e040a53
mov dword [esp], edi
mov dword [esp], ebx
mov dword [esp], ecx
mov dword [esp], eax
push ebx
mov dword [esp], 0x66942551
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
push ecx
mov ecx, 4
add esi, ecx
pop ecx
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
jmp 0xb5ad04
sub esp, 4
mov dword [esp], eax
mov eax, esp
push esi
mov esi, 4
add eax, esi
pop esi
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], ecx
add ecx, 0x79fb33f6
add ecx, eax
push edi
mov edi, 0x37fb0961
xor edi, 0x7eb3a880
add edi, 0x30b29215
push ebp
mov ebp, 0x7bec4ef5
xor ebp, 0x3611bb99
sub ecx, ebp
pop ebp
sub ecx, edi
add ecx, 0x4dfdf56c
mov edi, dword [esp]
add esp, 4
push dword [esp]
mov ecx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [ebp - 0x18]
push dword [esp]
push dword [esp]
pop eax
add esp, 4
add esp, 4
jmp 0xafa446
test eax, eax
jmp 0xabee00
cmp esi, eax
jmp 0xb3edc3
push esi
push esp
pop esi
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
mov dword [esp], edi
mov dword [esp], ecx
sub ecx, 0x6ade0be9
sub ecx, 0x7efedfe8
add ecx, 0x3bfd27e7
add ecx, eax
sub ecx, 0x3bfd27e7
push ebx
mov ebx, 0x7efedfe8
sub ecx, 0x7f569c81
add ecx, ebx
add ecx, 0x7f569c81
pop ebx
add ecx, 0x6ade0be9
push dword [esp]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
mov al, byte [0x64e033]
push edi
push ebx
mov dword [esp], esi
mov esi, 0x7804ac31
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], ebx
push ebp
mov dword [esp], ecx
mov ebx, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
push edx
mov edx, 0x7ee5e4b2
add edx, 0x7efa5615
sub edx, 0x1ff726cf
xor edx, 0x6fffb445
add edx, 0x4de95847
add edi, edx
pop edx
xchg dword [esp], edi
pop esp
jmp 0xb820da
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xb1b2a9
jne 0xc390b7
jmp 0xc0f95c
sub esp, 4
mov dword [esp], eax
push ebx
mov ebx, 0x64ec88
mov dword [esp + 4], ebx
push dword [esp]
pop ebx
add esp, 4
jmp 0xc452f1
sub esp, 4
mov dword [esp], eax
push edi
mov edi, 0x64ec88
mov dword [esp + 4], edi
push dword [esp]
pop edi
add esp, 4
jmp 0xc2b351
jmp dword [eax + 0xa4edb8]
push edx
push esi
mov dword [esp], 7
pop edx
or ecx, edx
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0xbd3f94
push eax
mov eax, 0x6ffd05ae
shr eax, 3
push ebp
mov ebp, 0xffffffff
sub eax, ebp
pop ebp
sub eax, 0xffffffff
shr eax, 5
push edi
mov edi, 0x6ff73691
shr edi, 8
shl edi, 2
shr edi, 4
dec edi
sub edi, 0xf0232dac
or eax, edi
pop edi
add eax, 0x5c6c6709
mov dword [0x64eab2], eax
pop eax
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
push esi
mov esi, 0x5fd6d553
shr esi, 7
dec esi
or esi, 0x7dc793dc
add esi, 0x82004007
sub eax, 0x6bbf5dda
sub eax, esi
add eax, 0x6bbf5dda
pop esi
xchg dword [esp], eax
pop esp
mov dword [esp], eax
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
push edx
mov edx, esp
push eax
mov eax, 4
add edx, eax
mov eax, dword [esp]
add esp, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xc4a8b6
push 0x77feaf13
mov dword [esp], eax
mov eax, esp
add eax, 4
push edi
mov edi, 4
sub eax, edi
pop edi
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push 0x25306d45
mov dword [esp], ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
push dword [esp]
pop edx
push eax
mov eax, esp
push esi
mov esi, 4
add eax, esi
pop esi
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], edx
pop dword [ebp - 0x10]
jmp 0xa7429f
push ebp
mov dword [esp], esi
push esp
mov esi, dword [esp]
add esp, 4
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
push ebp
mov ebp, 0x5dc2d10c
dec ebp
push edi
mov edi, 0x56ff2528
xor ebp, edi
pop edi
push eax
mov eax, 0x5f3f791a
sub ebp, eax
pop eax
or ebp, 0x5e7d5ab6
dec ebp
sub ebp, 0xd0803761
sub ecx, ebp
pop ebp
sub ecx, 0x77ff74cb
add ecx, eax
add ecx, 0x77ff74cb
add ecx, 0x2f7f445d
push dword [esp]
pop ecx
push 0x49265aa2
mov dword [esp], ecx
mov ecx, esp
push edi
mov edi, 0x5dfc4b14
dec edi
add edi, 0x7f0fc229
xor edi, 0xdd0c0d38
add ecx, edi
pop edi
add ecx, 4
xchg dword [esp], ecx
pop esp
push eax
push esp
pop eax
push edx
mov edx, 4
add eax, 0x43ddad5f
add eax, edx
sub eax, 0x43ddad5f
pop edx
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edx
jmp 0xba5641
push esi
mov esi, esp
push ecx
mov ecx, 4
add esi, ecx
pop ecx
push edx
mov edx, 4
sub esi, edx
mov edx, dword [esp]
add esp, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edx
push esi
mov dword [esp], 0x2ae89bb3
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
xor edx, edx
push edx
push edi
push esp
pop dword [esp]
add dword [esp], 4
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ebx
mov ebx, esp
push eax
push 4
pop eax
add ebx, eax
pop eax
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push 0xf6fc91c
mov dword [esp], ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0xaabccf
push 0x2ea91be
mov dword [esp], ebx
mov dword [esp], edi
mov dword [esp], 0x58638693
mov dword [esp], edi
mov dword [esp], ebx
push 0xeacfa7
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add edx, 0x77176c26
sub edx, ecx
push ebx
mov ebx, 0x77176c26
push edi
mov dword [esp], ebx
mov ebx, 0x7d7e3a26
add edx, ebx
pop ebx
sub edx, ebx
sub edx, 0x7d7e3a26
pop ebx
jmp 0xaec1b3
push ebx
mov dword [esp], ebp
mov dword [esp], esi
mov dword [esp], ebx
mov dword [esp], ecx
push eax
mov eax, 0x75bf6789
not eax
add eax, 0x3cee5f4a
xor eax, 0xbad731b2
add ecx, eax
pop eax
add ecx, eax
push ebx
mov ebx, 0x1eefa0f5
push ebp
mov ebp, 0x7ffeef8c
sub ebx, 0x3dfaa2bf
sub ebx, ebp
add ebx, 0x3dfaa2bf
pop ebp
sub ebx, 0x20f6eaf7
sub ecx, ebx
pop ebx
push dword [esp]
pop ecx
push ecx
mov ecx, esp
push edi
mov edi, 4
add ecx, edi
pop edi
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
push ecx
mov dword [esp], 0x5ce70e3c
mov dword [esp], edi
mov edi, 0x75ff9f5e
sub edi, 0x77bc6741
push edi
not dword [esp]
pop edi
xor edi, 0x1cdfd01e
xor edi, 0x5ff34671
xor edi, 0x3ae021ec
mov dword [0x64eaa8], edi
mov edi, dword [esp]
add esp, 4
jmp 0xa9316a
je 0xa87982
jmp 0xbe09bf
ja 0xad4a86
jmp 0xa8c19c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xa98271
jne 0xb798b5
jmp 0xb44118
push ebx
mov dword [esp], esi
push eax
mov eax, 0x10617e40
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push edx
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov edx, dword [esp]
push esi
push esp
pop esi
push edx
mov edx, 0x79ffa485
sub edx, 0x7f0fb406
dec edx
neg edx
not edx
xor edx, 0x51ff6409
sub edx, 0xab109470
add esi, edx
mov edx, dword [esp]
add esp, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [0x64e028]
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push esi
push edx
mov dword [esp], esp
add dword [esp], 4
pop esi
add esi, 4
push edi
mov edi, 4
sub esi, edi
pop edi
xchg dword [esp], esi
pop esp
mov dword [esp], edx
push ebp
mov dword [esp], 0x5b338de3
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
pop edx
push ecx
mov ecx, esp
push eax
mov eax, 4
add ecx, eax
pop eax
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0xb4b4dc
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
push edi
mov edi, 0x6b57fb13
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
push edi
mov edi, 4
add eax, edi
pop edi
xchg dword [esp], eax
pop esp
push dword [esp]
pop edx
push edi
mov edi, esp
push eax
mov eax, 0x37bff2c2
or eax, 0x37bf813d
xor eax, 0x37bff3fb
add edi, eax
pop eax
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push 0x2a6041f1
mov dword [esp], ecx
push 0x3c
mov ecx, dword [esp]
add esp, 4
add ecx, edx
add eax, dword [ecx]
mov ecx, dword [esp]
add esp, 4
jmp 0xa846e2
sub esp, 4
mov dword [esp], ebp
push esi
push 0x11369c03
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], eax
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
mov eax, dword [esp]
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
push ecx
push ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], esi
mov esi, 0x64ec88
mov dword [esp + 4], esi
pop esi
jmp 0xae37ee
push dword [ebp - 0x18]
push dword [esp]
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
jmp 0xa87e00
push ecx
mov ecx, esp
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
pop dword [0x84ee58]
jmp 0xbd6f2d
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebp
mov dword [esp], 0x61b2e165
mov dword [esp], eax
push 0x3283fd35
mov dword [esp], ebx
mov eax, dword [esp]
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov eax, dword [esp]
push ebx
mov dword [esp], 0xc31fbf0
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [0x84ee60]
mov ecx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0xaa514d
push ecx
push esp
pop ecx
push ebx
mov dword [esp], ebp
mov ebp, 4
add ecx, ebp
pop ebp
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
push edx
push esp
pop edx
push ebx
mov ebx, 4
add edx, ebx
pop ebx
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
push ebx
push ecx
mov ecx, 4
mov ebx, ecx
pop ecx
add ecx, ebx
pop ebx
xchg dword [esp], ecx
pop esp
and al, byte [0x64e03a]
jmp 0xba5637
mov byte [0x64e03d], al
jmp 0xc3ff4e
call fcn.00449ca0
jmp 0xa846f8
push eax
mov dword [esp], ecx
push eax
mov eax, 0x1ae832a0
mov dword [esp + 4], eax
pop eax
mov dword [esp], eax
mov dword [esp], ecx
push 0x5dce828c
mov dword [esp], edx
mov edx, 0x7fdd0099
sub ecx, edx
pop edx
push ebp
mov ebp, 0x3cffa1d9
add ecx, ebp
pop ebp
add ecx, eax
sub ecx, 0x3cffa1d9
add ecx, 0x7fdd0099
mov ecx, dword [esp]
push esi
push esp
pop esi
add esi, 4
push ebp
mov ebp, 4
add esi, ebp
pop ebp
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
push edi
push esp
pop edi
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebp
mov dword [esp], eax
pop dword [0x84ee60]
jmp 0xa74480
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x27953ce1
mov dword [esp], edx
mov dword [esp], ecx
mov dword [esp], edx
mov dword [esp], ebx
mov dword [esp], eax
push edi
mov dword [esp], ebx
mov eax, dword [esp]
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop eax
push ecx
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
jmp 0xafeb7e
imul eax, ecx
push esi
mov esi, esp
add esi, 4
push ebp
mov ebp, 4
sub esi, ebp
pop ebp
xchg dword [esp], esi
pop esp
mov dword [esp], edi
mov dword [esp], esi
mov dword [esp], ecx
push edi
mov edi, 0x65bf7a67
sub ecx, edi
pop edi
add ecx, 0x6ddefdc5
add ecx, eax
sub ecx, 0x6ddefdc5
push ebx
push 0x65bf7a67
pop ebx
add ecx, ebx
pop ebx
push dword [esp]
push dword [esp]
pop ecx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add esp, 4
jmp 0xa930c6
jmp 0xa8c19c
jmp 0xac2ef5
jmp 0xac2ef5
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], 0x5c14f56b
mov dword [esp], eax
push ecx
push esi
mov esi, 0x5ff7f394
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
push edx
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
sub esp, 4
mov dword [esp], edi
push ecx
mov dword [esp], edi
mov dword [esp], ecx
mov ecx, 0x64ec88
mov dword [esp + 4], ecx
pop ecx
push edx
mov dword [esp], ebx
mov dword [esp], ecx
mov dword [esp], edi
mov dword [esp], 0x37253682
mov dword [esp], eax
push edx
push eax
mov eax, 0xec92685
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xc7f64f
push 0x3fd3fb91
mov dword [esp], ebp
push edi
mov edi, 0xaba4d32
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], ebx
push esi
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
push dword [ebp - 4]
push dword [esp]
mov ecx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
push ebx
push ecx
mov dword [esp], esp
add dword [esp], 4
mov ebx, dword [esp]
add esp, 4
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], ebp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
pop edx
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0xb67622
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push eax
push 4
pop eax
sub ebp, eax
pop eax
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
push edx
mov edx, esp
push ebx
mov ebx, 0x7fdfd311
xor ebx, 0x7fdfd315
add edx, ebx
pop ebx
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push edx
mov dword [esp], edi
mov edi, esp
push ebx
mov ebx, 0x27ebef73
shl ebx, 3
or ebx, 0x7fffec3a
dec ebx
add ebx, 0x8000004b
add edi, ebx
pop ebx
add edi, 4
xchg dword [esp], edi
pop esp
jmp dword [eax + 0xa4edb8]
push ebp
push edx
mov edx, 0x64eaa8
mov dword [esp + 4], edx
mov edx, dword [esp]
push ecx
mov ecx, esp
push eax
mov eax, 4
add ecx, eax
pop eax
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xbbf8b1
sub esp, 4
mov dword [esp], ecx
push ebp
push 0x7799c08d
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
push esi
push ecx
mov ecx, 0x238b9138
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
push ecx
push 4
pop ecx
add esi, ecx
mov ecx, dword [esp]
add esp, 4
xchg dword [esp], esi
pop esp
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push esi
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
push edx
mov edx, 0x7ff3228d
add ecx, edx
pop edx
sub ecx, 0x7fed22b6
add ecx, eax
push esi
mov esi, 0x3e7ec6f7
neg esi
or esi, 0x7a5e0f05
xchg esi, ebp
not ebp
xchg esi, ebp
sub esi, 0x7df79351
not esi
add esi, 0x6165058
add ecx, esi
pop esi
sub ecx, 0x7ff3228d
push dword [esp]
pop ecx
push eax
mov eax, esp
push ebp
mov ebp, 4
add eax, ebp
pop ebp
push ebx
mov ebx, 0x577b2a7b
neg ebx
xor ebx, 0xa884d581
add eax, ebx
pop ebx
xchg dword [esp], eax
pop esp
jmp 0xa74217
and al, 0x5c
jmp 0xaac610
push ebx
push 0x5c721648
push esp
pop dword [esp]
add dword [esp], 4
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edx
push ecx
mov dword [esp], 0x58784cf6
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push 0x528087c5
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push 0x1bea6841
mov dword [esp], ecx
push 0x706d6f63
pop ecx
push ecx
pop dword [0x64eaaa]
mov ecx, dword [esp]
add esp, 4
jmp 0xa929a8
push dword [0x64e024]
push dword [esp]
mov ecx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
push eax
mov eax, esp
add eax, 4
sub esp, 4
mov dword [esp], edi
mov edi, 0x69f76066
xor edi, 0x69f76062
sub eax, edi
pop edi
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], eax
push 0x68aae29a
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
mov eax, dword [esp]
push edx
mov edx, esp
push eax
mov eax, 0x6faf9304
shl eax, 5
not eax
push ebp
mov ebp, 0x539757ee
shl ebp, 4
dec ebp
add ebp, 0x420a7537
sub eax, ebp
pop ebp
shr eax, 2
sub eax, 0x23a36ad6
add edx, eax
pop eax
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
jmp 0xb1070c
jae 0xbebcea
jmp 0xb4326f
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0xb8740c
push edx
mov dword [esp], eax
push ebp
mov ebp, 0x2e223265
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], ecx
push ebp
mov ebp, 0x4effa085
sub ecx, ebp
pop ebp
add ecx, eax
push edx
push 0x4effa085
pop edx
add ecx, 0x7d7eab47
add ecx, edx
sub ecx, 0x7d7eab47
pop edx
push dword [esp]
mov ecx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
sub esp, 4
mov dword [esp], esi
mov dword [esp], ecx
mov ecx, 5
add ecx, 0x3aff8a6c
add ecx, edx
sub ecx, 0x3aff8a6c
xor esi, dword [ecx]
mov ecx, dword [esp]
add esp, 4
jmp 0xb80f1f
push edi
mov edi, 0x6b9717ca
neg edi
or edi, 0x6ff599ce
sub edi, 0xfffdf9f4
push edi
pop dword [ebp - 0x14]
push dword [esp]
pop edi
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp fcn.00aa34e4
push 0x14f2d60
mov dword [esp], ebp
push edx
push 0x15ed097
pop edx
mov dword [esp + 4], edx
pop edx
mov dword [esp], ebx
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
pop ebx
push esi
push esp
pop esi
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
push 0x42eb4d7f
mov dword [esp], ebx
push edx
mov dword [esp], edi
mov edi, 0x64ec88
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
push edi
push esp
mov edi, dword [esp]
add esp, 4
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push ecx
mov ecx, esp
push edi
mov edi, 4
add ecx, edi
pop edi
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov eax, dword [esp]
push eax
push 0x2c17e699
mov dword [esp], esp
add dword [esp], 4
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0xc63111
push esi
mov esi, esp
add esi, 4
push edx
mov edx, 4
sub esi, edx
pop edx
xchg dword [esp], esi
pop esp
mov dword [esp], edi
mov dword [esp], eax
mov dword [esp], ebx
push eax
mov dword [esp], ebp
mov dword [esp], 0x2449eaba
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
mov ebx, dword [esp]
push 0x1b3357da
mov dword [esp], edi
mov edi, esp
push edx
mov edx, 4
add edi, edx
pop edx
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push 0x1a63130e
mov dword [esp], ebx
push edx
mov dword [esp], 3
pop ebx
add ebx, ecx
push ecx
mov ecx, 0
add ecx, ebx
xor esi, dword [ecx]
pop ecx
pop ebx
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
xchg dword [esp], ebp
mov esp, dword [esp]
push dword [esp]
pop ebx
push ebx
mov ebx, esp
add ebx, 4
push 0x1d705b67
mov dword [esp], edi
mov edi, 4
add ebx, edi
pop edi
xchg dword [esp], ebx
pop esp
jmp 0xb3edb8
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], esi
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], ecx
push eax
mov eax, 0x4cf7bcb9
and eax, 0x3af2c6e8
dec eax
xor eax, 0x3ffb6c45
add eax, 0x48c5c9e1
add ecx, eax
pop eax
add ecx, eax
push edx
mov dword [esp], edi
mov edi, 0x7bd6b40a
push eax
mov eax, 0x5ce34854
add eax, 0x7bdb22f3
xor eax, 0xdb4695fe
add edi, eax
pop eax
sub ecx, edi
pop edi
push dword [esp]
pop ecx
push ecx
mov ecx, esp
push edi
mov edi, 4
add ecx, edi
pop edi
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push ebx
mov ebx, esp
add ebx, 4
push ecx
mov ecx, 0x6de71e42
push edx
mov edx, 0x3bdde78a
xor edx, 0x3dbf0571
inc edx
xor edx, 0x5b6ec61f
neg edx
add edx, 0xdd075be2
add ecx, edx
pop edx
xor ecx, 0xede25545
sub ebx, ecx
pop ecx
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
push dword [esp]
pop eax
push esi
push esp
pop esi
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
jmp 0xc27bf6
sub esp, 4
mov dword [esp], ebx
push esp
mov ebx, dword [esp]
add esp, 4
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], ebp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
sub esp, 4
mov dword [esp], ecx
push esp
mov ecx, dword [esp]
add esp, 4
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push ebx
push edi
mov edi, 0x7191ec5d
mov dword [esp + 4], edi
push dword [esp]
pop edi
add esp, 4
mov dword [esp], eax
push 0x3de274bd
mov dword [esp], ebp
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
mov eax, dword [esp]
push eax
mov eax, esp
push ebx
mov ebx, 0x5a6e8fe2
shr ebx, 8
sub ebx, 0x7ddf7ac0
dec ebx
xor ebx, 0x73a62bad
neg ebx
add ebx, 0xf1dcd867
add eax, ebx
pop ebx
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
jmp 0xb43291
push dword [str._____]
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
push ebx
mov ebx, 4
add esi, ebx
pop ebx
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0xb73897
push dword [0x64ed4c]
push dword [esp]
pop esi
push 0x4f7bc1ae
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xc46c2a