Function at 0x4ae371
Capabilities:
Accept command line arguments

Disassembly:
mov ecx, ecx
mov ebp, ebp
mov esi, esi
mov edi, edi
mov ebp, ebp
mov ecx, ecx
mov ecx, ecx
mov ebx, ebx
mov ecx, ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
jmp dword [eax + 0x63bca8]
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push esi
push ebp
push 0x770b3245
mov ebp, dword [esp]
add esp, 4
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
push ecx
mov dword [esp], edx
mov dword [esp], 0x432736ed
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
sub esp, 4
mov dword [esp], esi
mov esi, 4
add edi, esi
pop esi
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0x4c225d
push 0x77220900
mov dword [esp], ebx
mov dword [esp], 0x48951c18
mov dword [esp], ebx
mov dword [esp], edx
mov dword [esp], ebx
push 0x42395435
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push eax
push ecx
push edi
mov edi, 0x53cb22cf
dec edi
xor edi, 0x6f7f398c
or edi, 0x53fd5137
add edi, 0x7c3f5d94
xor edi, 0xfc5fe0f3
mov ecx, edi
pop edi
mov dword [esp + 4], ecx
push dword [esp]
pop ecx
add esp, 4
push eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 4
sub eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
sub esp, 4
mov dword [esp], edi
mov edi, 0x79e6b278
sub ecx, 0x7fff78b7
sub ecx, edi
add ecx, 0x7fff78b7
pop edi
sub ecx, 0x7f5bf64f
add ecx, eax
add ecx, 0x7f5bf64f
add ecx, 0x79e6b278
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x4c9a0d
push dword [0x635abc]
push dword [esp]
pop esi
push 0x271c5aca
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push edi
mov edi, esp
push ebx
push 4
pop ebx
sub edi, 0x27df9867
add edi, ebx
add edi, 0x27df9867
pop ebx
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
push 0x6ba91d93
mov dword [esp], eax
mov dword [esp], 0x6cda4370
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push ebp
mov dword [esp], edi
mov edi, esp
push ecx
mov ecx, 0x788f9fdc
add ecx, 0x87706028
add edi, ecx
pop ecx
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x4ad67a
sub esp, 4
mov dword [esp], edx
mov edx, 3
sub edx, 0x1dfd280b
add edx, ecx
add edx, 0x1dfd280b
push ecx
mov ecx, 0
add ecx, edx
xor esi, dword [ecx]
pop ecx
mov edx, dword [esp]
add esp, 4
jmp 0x50c9fc
mov eax, 0x9f1ec5b2
lodsb al, byte [esi]
lodsb al, byte ds:[esi]
lodsb al, byte [esi]
lodsb al, byte [esi]
mov bh, 0xa7
adc ecx, ebp
inc edi
or eax, dword [edx]
add cl, ch
lodsd eax, dword [esi]
adc al, byte [ebx]
add bh, bh
jne 0x4ae36a
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
push eax
mov eax, 4
add edx, eax
pop eax
xchg dword [esp], edx
mov esp, dword [esp]
push 0x4a5d1724
mov dword [esp], edi
push esi
mov esi, 0x4ed1c9b9
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebx
mov dword [esp], ecx
push ebx
mov ebx, 0x63ebb540
add ecx, ebx
pop ebx
add ecx, eax
sub esp, 4
mov dword [esp], eax
push 0x63ebb540
pop eax
sub ecx, eax
pop eax
push dword [esp]
pop ecx
push esi
mov dword [esp], edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x55d328
push ecx
mov dword [esp], 0x2ab49a38
mov dword [esp], edx
push ebx
mov ebx, 0x4b4a39f
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ecx
push esi
push 0x6ffd982e
pop esi
or esi, 0x7dff8d36
shr esi, 3
and esi, 0x7fff6d41
add esi, 0x6f331d35
add ecx, 0x7fff5834
add ecx, esi
sub ecx, 0x7fff5834
pop esi
add ecx, 0x7bfbec39
add ecx, eax
sub ecx, 0x7bfbec39
sub ecx, 0x7f327e36
push dword [esp]
pop ecx
push edi
mov edi, esp
push edx
mov edx, 0x79fa13a5
neg edx
shl edx, 8
sub edx, 0x5ec5afc
add edi, edx
pop edx
push ebp
mov ebp, 4
add edi, ebp
pop ebp
xchg dword [esp], edi
pop esp
push dword [0x638c90]
push dword [esp]
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
jmp 0x4c3da6
push 0x5752a26a
mov dword [esp], edx
mov dword [esp], esi
mov dword [esp], eax
pop dword [0x638c90]
jmp 0x507a05
push ebp
push 0x58862218
mov dword [esp], ebp
push 0x6359f8
pop ebp
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
jmp 0x50c9f1
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push edi
mov dword [esp], esi
mov esi, 4
sub ecx, esi
pop esi
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
push eax
mov dword [esp], ebx
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov eax, dword [esp]
push ebp
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
push 0x19924cbb
mov dword [esp], edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
push eax
push ebx
mov ebx, 0x5f9d935f
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], eax
mov dword [esp], ecx
jmp 0x56357c
push eax
mov dword [esp], edx
push esp
pop edx
add edx, 4
push esi
mov esi, 4
sub edx, esi
pop esi
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
push ebp
push 0x7efe0271
pop ebp
add ecx, ebp
pop ebp
add ecx, 0x3f1f7e1f
add ecx, eax
push edx
mov edx, 0x3f1f7e1f
sub ecx, edx
pop edx
sub ecx, 0x7efe0271
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
push eax
mov eax, 4
add esi, eax
pop eax
xchg dword [esp], esi
pop esp
push ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebp
push edi
mov edi, 0x6359f8
mov dword [esp + 4], edi
pop edi
push ecx
mov ecx, esp
push esi
push 4
pop esi
add ecx, esi
pop esi
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ebx
push ebx
mov dword [esp], ecx
push dword [esp]
pop ebx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], ebx
push esp
pop ebx
push edi
mov edi, 4
add ebx, edi
pop edi
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x53864d
sub esp, 4
mov dword [esp], esi
push 0x2de10c85
mov dword [esp], edx
mov edx, 0xb301683
mov dword [esp + 4], edx
pop edx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
push dword [esp]
pop ebx
push esi
mov esi, esp
push edi
mov edi, 4
add esi, edi
pop edi
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
push 0x54597a9
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push eax
mov eax, 4
sub ecx, eax
pop eax
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
mov dword [esp], 0x635818
sub esp, 4
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop ebx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
mov esp, dword [esp]
jmp 0x55c2bb
cmp esi, eax
jmp 0x524cd6
cmp ecx, dword [ebp - 0x1c]
jmp 0x51af63
mov dx, word [ecx]
jmp 0x4f4a2c
push dword [0x638c90]
push dword [esp]
pop ecx
push ecx
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x4a7b73
push ecx
mov ecx, esp
push esi
push 4
pop esi
add ecx, esi
pop esi
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
push edx
mov dword [esp], 0x5e3ce1a3
mov dword [esp], ecx
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov ebx, dword [esp]
push esi
mov esi, esp
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
mov ebx, 4
add esi, ebx
pop ebx
add esi, 4
xchg dword [esp], esi
pop esp
push dword [0x635abc]
mov esi, dword [esp]
push 0x6b735acc
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
push eax
mov dword [esp], edx
push edi
mov edi, 0xffccf51
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
mov dword [esp], eax
push ebx
mov dword [esp], edx
push eax
mov eax, 0x61dd0c65
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push 0x386a6d4c
mov dword [esp], edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x554fca
jne 0x5785da
jmp 0x558e41
push edi
push ecx
push 0x27b25d6e
pop ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], edx
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
mov esi, dword [esp]
add esp, 4
pop dword [esp]
pop esp
push 0x4dfed9f7
mov dword [esp], ebx
push 0x2e706973
pop ebx
push ebx
pop dword [0x63581c]
mov ebx, dword [esp]
add esp, 4
push 0x6d3598ab
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
mov dword [esp], edi
mov dword [esp], eax
push 0x50ae32a5
mov dword [esp], ebx
push dword [esp]
pop eax
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop eax
push 0x506caa29
mov dword [esp], esi
mov esi, esp
add esi, 4
push edi
mov edi, 4
add esi, edi
pop edi
xchg dword [esp], esi
pop esp
jmp 0x4f1334
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], edi
mov dword [esp], edx
push ebp
push edi
mov edi, 0x1ede776a
mov dword [esp + 4], edi
pop edi
mov dword [esp], edi
mov dword [esp], ecx
pop edx
push dword [esp]
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push ecx
mov dword [esp], ebp
push eax
mov eax, 0x6b187ee6
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], edx
push 0x25404851
mov dword [esp], edx
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
push 0x72d7faef
mov dword [esp], eax
mov eax, 4
add ebp, eax
pop eax
xchg dword [esp], ebp
pop esp
jmp 0x4b58b3
jmp 0x4180ba
sub esp, 4
mov dword [esp], edi
mov edi, 0x5cbf34fd
push esi
mov esi, 0x5cbf34f7
xor edi, esi
pop esi
push edi
pop dword [ebp - 0x14]
mov edi, dword [esp]
add esp, 4
push 0x7df035a5
mov dword [esp], ebp
mov dword [esp], ecx
push esi
mov esi, 0x40112c2
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebx
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edi
mov dword [esp], ebx
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0x5545e8
push eax
mov eax, esp
push esi
mov esi, 4
add eax, 0x7ec605a0
add eax, esi
sub eax, 0x7ec605a0
mov esi, dword [esp]
add esp, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
push ebx
mov ebx, 0x37bfbdd9
add ecx, ebx
pop ebx
add ecx, eax
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
mov eax, 0x37bfbdd9
sub ecx, eax
pop eax
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
sub esp, 4
mov dword [esp], edi
push ebx
mov ebx, 0x7209a151
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], eax
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push eax
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
push dword [esp]
pop ebx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
jmp 0x4b1954
push eax
mov eax, esp
push esi
mov esi, 0x5bd7a4d6
sub esi, 0x6f3d7d74
not esi
shr esi, 7
shr esi, 5
add esi, 0xfffec9a7
add eax, 0x4fbbc02f
add eax, esi
sub eax, 0x4fbbc02f
pop esi
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], ecx
push esi
mov esi, 0x57fe83cf
add ecx, esi
pop esi
push edi
mov edi, 0x7f8bbde0
sub ecx, edi
pop edi
add ecx, eax
add ecx, 0x7f8bbde0
push ebx
mov ebx, 0x57fe83cf
sub ecx, ebx
pop ebx
push dword [esp]
mov ecx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
add esp, 4
xor edx, edx
jmp 0x4b8115
cmp dword [0x63bca8], 0x23f0
jmp 0x4ddcb6
cmp esi, eax
jmp 0x4c62e3
ja 0x507945
jmp 0x4d0f09
jae 0x4b54d6
jmp 0x4b3387
cmp dword [ebp - 0x10], 0x1000000
jmp 0x4ddcab
push ebx
push edi
mov edi, 0x78ba5fd3
mov dword [esp + 4], edi
pop edi
mov dword [esp], ebp
mov dword [esp], ebx
push ecx
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
add esp, 4
mov ebx, dword [esp]
push eax
push edx
push esp
pop dword [esp]
add dword [esp], 4
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ecx
push 0x706d6f63
pop ecx
push ecx
pop dword [0x63581a]
push dword [esp]
pop ecx
add esp, 4
sub esp, 4
mov dword [esp], ecx
mov dword [esp], ebx
mov dword [esp], esi
mov dword [esp], ebx
push ecx
push ebp
mov ebp, 0x46c32cd4
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push edx
mov edx, esp
push ebp
mov ebp, 4
add edx, ebp
mov ebp, dword [esp]
add esp, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x4e3da6
sub esp, 4
mov dword [esp], edx
mov edx, 0x7f3f3b02
and edx, 0x7cb3d6cc
shr edx, 5
xor edx, 0x5feb6e74
add edx, 0x58a7670c
push ebp
mov ebp, 0x2dff27fa
push esi
mov esi, 0x31aef997
and esi, 0x29ffa47e
add esi, 0xffffffff
inc esi
xor esi, 0x6a5c8c4b
and ebp, esi
pop esi
shl ebp, 3
or ebp, 0x17ff4742
and ebp, 0x3ef66f92
add ebp, 0x5f08feb4
xor edx, ebp
pop ebp
sub edx, 0x5fd7c753
mov dword [0x63581e], edx
pop edx
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], eax
push 0x6614ca5d
mov dword [esp], ebx
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push esi
mov esi, 4
add ebp, esi
pop esi
xchg dword [esp], ebp
pop esp
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ecx
push esp
pop ecx
push eax
mov eax, 0x577dbeb7
or eax, 0x5dfeed71
dec eax
sub eax, 0x5ffffff2
add ecx, eax
pop eax
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x5228c5
push dword [ebp - 0x18]
mov edx, dword [esp]
push ecx
mov ecx, esp
push eax
mov eax, 0x7d26dc3c
dec eax
xor eax, 0x7d26dc3f
add ecx, eax
pop eax
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
jmp 0x5322bc
push dword [ebp - 8]
mov edx, dword [esp]
push esi
mov dword [esp], edi
mov edi, esp
push ecx
mov ecx, 0x6efb35f4
shl ecx, 1
shr ecx, 5
or ecx, 0x21f7cb19
xor ecx, 0x27fffb5b
add edi, ecx
pop ecx
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x5487c1
push edi
mov edi, esp
push edx
mov edx, 0x7efd4f16
inc edx
add edx, 0x8102b0ed
add edi, edx
pop edx
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edx
mov dword [esp], 0x705ba386
mov dword [esp], edx
push ecx
push dword [esp]
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
push dword [esp]
pop edx
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push ebx
mov ebx, 0x3c
push edx
mov edx, 0x67a7c25f
and edx, 0x7e3e5bbf
add edx, 0xd7836614
add ebx, edx
pop edx
add ebx, edx
push eax
mov eax, 0x7cdd158b
or eax, 0x3efb4245
add eax, 0xbeaa5064
sub ebx, eax
pop eax
push edx
mov edx, 0
add edx, ebx
add eax, dword [edx]
pop edx
pop ebx
push eax
push edx
push edi
mov dword [esp], 0x17838a3e
pop edx
mov dword [esp + 4], edx
pop edx
mov dword [esp], edx
push eax
mov dword [esp], ebp
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x549fc3
push ecx
mov ecx, esp
push edx
push 0x5dcdd861
pop edx
sub edx, 0x4b73d6b9
not edx
shl edx, 1
xor edx, 0xdb4bfcaa
add ecx, edx
pop edx
push esi
mov esi, 4
sub ecx, esi
pop esi
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], edx
mov dword [esp], 0x4744e66
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
mov eax, dword [esp]
push eax
mov eax, esp
push ecx
mov ecx, 0x7dff0022
not ecx
shl ecx, 2
shr ecx, 4
push edx
mov edx, 0xff7fc00d
add ecx, edx
pop edx
add eax, ecx
pop ecx
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
push ebx
mov ebx, 0x6359f8
mov dword [esp + 4], ebx
pop ebx
jmp 0x4cfdd1
push ebx
mov bx, 0x16a
push bp
mov bp, 0x3b01
sub bx, bp
pop bp
add bx, 0x9a40
push ecx
mov cx, 0xc264
neg cx
neg cx
shl cx, 5
push cx
not word [esp]
pop cx
dec cx
push edi
mov di, 0x84d6
shl di, 2
add di, 0xd15b
add cx, di
pop edi
or bx, cx
pop ecx
add bx, 0x73ab
mov word [0x635820], bx
pop ebx
push ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov dword [esp], edx
mov dword [esp], ebx
push 0x52bcf544
mov dword [esp], eax
mov dword [esp], 0x6bba5fd0
mov dword [esp], ebx
mov dword [esp], ecx
pop ebx
mov ebx, dword [esp]
push edx
mov dword [esp], eax
push esp
pop eax
add eax, 4
push edi
mov edi, 4
add eax, edi
pop edi
xchg dword [esp], eax
pop esp
jmp 0x5544f0
mov cx, word [eax]
jmp 0x4b810d
cmp edx, dword [ebp - 0xc]
jmp 0x51af6e
push esi
push esp
mov esi, dword [esp]
add esp, 4
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edi
mov dword [esp], ecx
sub ecx, 0x387d1a36
push edi
mov dword [esp], ebx
mov ebx, 0x2db5fa43
sub ecx, ebx
pop ebx
add ecx, eax
push edx
mov edx, 0x7f7f65d6
add edx, 0x55feaefa
or edx, 0x7eb7dec7
sub edx, 0xd249e494
add ecx, edx
pop edx
add ecx, 0x387d1a36
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, esp
push edi
mov edi, 0x7b03e572
and edi, 0x2cdf89a0
add edi, 0xd7fc7ee4
add edx, edi
pop edi
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push 0x34f82e62
mov dword [esp], edi
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], esi
mov esi, 0x6359f8
mov dword [esp + 4], esi
pop esi
jmp 0x553cd1
push dword [ebp - 0x10]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x53b6cf
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ecx
sub ecx, 0x7eff24d4
add ecx, eax
push esi
mov dword [esp], edx
mov edx, 0x7eff24d4
add ecx, edx
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov ecx, dword [esp]
push 0x615ce07c
mov dword [esp], edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push dword [ebp - 0x18]
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x53b171
push esi
mov esi, esp
add esi, 4
push eax
mov eax, 4
sub esi, eax
mov eax, dword [esp]
add esp, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], edx
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
pop edx
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
push ebp
push 4
pop ebp
add edi, ebp
pop ebp
xchg dword [esp], edi
pop esp
sub esp, 4
mov dword [esp], esi
push ebp
mov dword [esp], edx
push 0x6359f8
pop edx
mov dword [esp + 4], edx
pop edx
jmp 0x4a5062
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x50a016
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x4b5b66
je 0x4e653b
jmp 0x560b79
je 0x52d3ec
jmp 0x54fc0e
sub esp, 4
mov dword [esp], ebx
push ebp
mov ebp, 0x170b1e10
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
pop dword [ebp - 0x10]
jmp fcn.004a7e39
push ebx
push ebp
push 0x3be5b8a1
pop ebp
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], ebx
sub esp, 4
mov dword [esp], esi
mov dword [esp], 0x5864b2a5
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
mov ebx, dword [esp]
push edx
mov edx, esp
push ebx
mov ebx, 0x7be75d1c
shl ebx, 6
inc ebx
not ebx
xor ebx, 0x628b8fa
sub edx, 0x6e7f367a
add edx, ebx
add edx, 0x6e7f367a
mov ebx, dword [esp]
add esp, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [ebp - 4]
push dword [esp]
pop ecx
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x4d0de3
push ebp
push esp
pop ebp
add ebp, 4
push ebx
mov ebx, 4
sub ebp, ebx
pop ebx
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], ecx
push ecx
mov dword [esp], edx
mov edx, 0x7f6e2a34
add edx, 0x819495
sub ecx, 0x5ffed2e5
sub ecx, edx
add ecx, 0x5ffed2e5
mov edx, dword [esp]
add esp, 4
add ecx, eax
add ecx, 0x7fefbec9
mov ecx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push ebp
mov ebp, 0x7354eabd
not ebp
add ebp, 0x7b6a712b
sub ebp, 0x7b3b1c73
xor ebp, 0x7ccfbcf5
dec ebp
xor ebp, 0xf015d50a
add ecx, ebp
mov ebp, dword [esp]
add esp, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push edx
push 0x3eecb228
mov edx, dword [esp]
add esp, 4
dec edx
or edx, 0x39ff9cc9
xor edx, 0x7d5f4b2a
add edx, 0x29cb6e69
push edx
pop dword [0x635822]
mov edx, dword [esp]
add esp, 4
push edi
mov dword [esp], ebp
sub esp, 4
mov dword [esp], esi
mov esi, 0x724a9a4a
mov dword [esp + 4], esi
pop esi
mov dword [esp], eax
push 0x47f955e9
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
push ebx
mov dword [esp], ecx
mov ecx, 0x7bfe1f78
dec ecx
and ecx, 0xb9f6aa3
shr ecx, 1
add ecx, 0x7ee6643e
xor ecx, 0x84b5694b
add ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
jmp 0x4ce461
jne 0x4e1651
jmp 0x4a4640
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x4d94ff
mov byte [0x635822], al
push 0x467597a6
mov dword [esp], eax
push ebx
mov ebx, 0x597623
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], ecx
sub ecx, 0x47df6078
add ecx, eax
push ebp
push esi
mov esi, 0x7ff636d3
and esi, 0x75fbb988
shl esi, 1
push edi
mov edi, 0x677f287b
and esi, edi
pop edi
add esi, 0xe47b4078
mov ebp, esi
pop esi
add ecx, 0x5c743678
add ecx, ebp
sub ecx, 0x5c743678
pop ebp
mov ecx, dword [esp]
push ebp
push esp
pop ebp
push esi
mov esi, 4
add ebp, esi
pop esi
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x4a6e7d
push ebx
mov ebx, esp
add ebx, 4
push eax
mov eax, 4
sub ebx, eax
pop eax
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], eax
pop dword [0x635bcc]
jmp 0x4cc48c
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov dword [esp], edx
mov dword [esp], esi
mov dword [esp], eax
push ecx
mov dword [esp], ebx
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
pop eax
push esi
mov esi, esp
add esi, 4
push ecx
mov ecx, 4
add esi, ecx
pop ecx
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
jmp 0x4b2f97
push dword [ebp - 0x18]
mov eax, dword [esp]
push edx
mov edx, esp
push ebp
mov ebp, 4
add edx, ebp
pop ebp
push ebx
mov ebx, 4
add edx, ebx
pop ebx
xchg dword [esp], edx
pop esp
push edx
push esp
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edx
mov dword [esp], 0x65e48022
mov dword [esp], ecx
push ebx
mov ebx, 0x7faf9928
sub ecx, ebx
mov ebx, dword [esp]
add esp, 4
add ecx, 0x3fbf2a8b
add ecx, eax
push esi
mov esi, 0x7a8f7cb1
and esi, 0x55fffe4f
and esi, 0x7de3c3cb
sub esi, 0x1effb61c
xor esi, 0xe3ca36e
sub ecx, esi
pop esi
add ecx, 0x7faf9928
push dword [esp]
pop ecx
push edi
mov edi, esp
push esi
mov esi, 0x7ff88fa8
xor esi, 0x7ff88fac
add edi, esi
pop esi
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
jmp 0x4e95e4
sub esp, 4
mov dword [esp], edx
mov dword [esp], 0x6e9c011a
mov dword [esp], edi
mov dword [esp], eax
mov dword [esp], edx
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
pop edx
push edi
mov edi, esp
push esi
mov esi, 4
add edi, 0x67ff9002
add edi, esi
sub edi, 0x67ff9002
pop esi
add edi, 4
xchg dword [esp], edi
pop esp
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebp
mov dword [esp], 0x678485a5
mov dword [esp], ebp
mov dword [esp], ecx
push 0x170fb0e2
mov dword [esp], esi
mov esi, 0x3bff9a94
add esi, 0xd3f8423c
sub ecx, esi
pop esi
sub ecx, 0x5fe6780c
add ecx, 0x7d5ed629
add ecx, eax
sub ecx, 0x7d5ed629
add ecx, 0x5fe6780c
add ecx, 0xff7dcd0
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x4ecd10
push edx
mov dword [esp], 0x47d5e110
mov dword [esp], ebp
mov dword [esp], 0x3be90426
mov dword [esp], edx
push esi
mov dword [esp], 0x23d23c24
mov dword [esp], ebx
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
pop edx
push ecx
mov ecx, esp
push eax
mov eax, 4
add ecx, eax
mov eax, dword [esp]
add esp, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
mov dword [esp], 0x55ab1c15
mov dword [esp], eax
pop dword [0x638c88]
push ecx
mov dword [esp], ebx
mov dword [esp], 0x20baad62
mov dword [esp], ebx
mov dword [esp], ebp
mov dword [esp], edx
push ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 4
sub ebx, edx
mov edx, dword [esp]
add esp, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
pop edx
push dword [esp]
pop edx
push ecx
mov ecx, esp
push eax
mov eax, 4
add ecx, eax
pop eax
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
jmp 0x54fc18
push 0x5774ee37
mov dword [esp], edi
mov edi, 0x1000
push edi
mov dword [esp], ebp
mov ebp, 0x7ffff213
add eax, ebp
pop ebp
sub eax, edi
sub eax, 0x7ffff213
pop edi
jmp 0x51c8e7
push edi
mov edi, esp
push ebx
mov ebx, 4
add edi, ebx
pop ebx
push esi
mov esi, 4
sub edi, esi
pop esi
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
mov dword [esp], ecx
add ecx, 0x6fe65174
add ecx, eax
push 0x44ec416f
mov dword [esp], edi
push eax
mov dword [esp], 0x6fe65174
pop edi
sub ecx, edi
pop edi
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [ebp - 0x14]
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push edi
mov edi, 4
add ebp, edi
mov edi, dword [esp]
add esp, 4
xchg dword [esp], ebp
pop esp
push eax
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
push eax
mov dword [esp], 0x3fbae25e
mov dword [esp], ecx
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov ebx, dword [esp]
push 0x6b8a422c
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
mov esp, dword [esp]
jmp 0x565a80
push ecx
mov ecx, esp
push ebp
mov ebp, 4
add ecx, ebp
pop ebp
sub ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], eax
pop dword [ebp - 4]
push esi
push ebx
push 0x5a0247c6
mov ebx, dword [esp]
add esp, 4
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ecx
add ecx, 0x776f87cd
add ecx, eax
sub esp, 4
mov dword [esp], edi
push esi
mov esi, 0x776f87cd
mov edi, esi
pop esi
sub ecx, edi
mov edi, dword [esp]
add esp, 4
push dword [esp]
pop ecx
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0x51fd80
jmp 0x4e09f2
jmp 0x4d0f09
push 0x484286a3
mov dword [esp], ecx
push edx
mov dword [esp], ebp
mov ebp, 0x37d00931
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
sub esp, 4
mov dword [esp], esi
mov esi, 0x1cfb6b9a
add ecx, esi
pop esi
add ecx, 0x1cf72d30
add ecx, eax
sub ecx, 0x1cf72d30
push ebp
mov ebp, 0x37b72ced
xor ebp, 0x2b4c4777
sub ecx, ebp
pop ebp
push dword [esp]
pop ecx
push ecx
push esp
pop ecx
add ecx, 4
push eax
mov eax, 4
add ecx, eax
pop eax
xchg dword [esp], ecx
pop esp
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push edi
push esp
pop edi
add edi, 4
push ebx
mov ebx, 4
sub edi, ebx
mov ebx, dword [esp]
add esp, 4
xchg dword [esp], edi
pop esp
mov dword [esp], eax
push 0x53e9e2ae
mov dword [esp], ebx
push dword [esp]
pop eax
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
jmp 0x4e856a
push ebx
mov ebx, esp
push ebx
mov dword [esp], ecx
mov ecx, 4
add ebx, ecx
pop ecx
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], ebx
push ebx
mov dword [esp], ecx
mov ebx, dword [esp]
push edi
mov edi, esp
push edx
mov edx, 4
add edi, edx
pop edx
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edx
mov edx, esp
push ebp
mov ebp, 0x60be87f6
xor ebp, 0x60be87f2
add edx, ebp
pop ebp
add edx, 4
xchg dword [esp], edx
pop esp
mov al, byte [0x635821]
jmp 0x529d8e
push ecx
push 0x4047af36
mov dword [esp], esp
add dword [esp], 4
pop ecx
add ecx, 4
push ebx
mov ebx, 4
sub ecx, ebx
pop ebx
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
push esi
mov esi, 0x1cdfe7c9
sub ecx, 0x2fed6fd6
sub ecx, esi
add ecx, 0x2fed6fd6
pop esi
add ecx, 0x37fd9644
add ecx, eax
sub ecx, 0x37fd9644
push eax
mov eax, 0x1cdfe7c9
add ecx, eax
pop eax
push dword [esp]
pop ecx
push edx
mov edx, esp
add edx, 4
push ecx
push 4
pop ecx
add edx, ecx
pop ecx
xchg dword [esp], edx
pop esp
push 0x52c72977
mov dword [esp], ebx
push 8
mov ebx, dword [esp]
add esp, 4
push ebx
pop dword [ebp - 8]
pop ebx
push edx
push esp
pop edx
add edx, 4
push ebp
mov ebp, 4
sub edx, ebp
mov ebp, dword [esp]
add esp, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edx
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
mov edx, dword [esp]
push 0x6ad5e178
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
jmp 0x4f5488
push ebx
push edx
mov dword [esp], 5
pop ebx
add ebx, edx
push edx
mov edx, 0
add edx, ebx
xor esi, dword [edx]
mov edx, dword [esp]
add esp, 4
pop ebx
push ebp
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
push edi
mov edi, 4
sub ebx, edi
pop edi
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
add ecx, 0x68e2061f
sub ecx, 0x6bffcec2
add ecx, eax
add ecx, 0x6bffcec2
push edi
push ebx
mov ebx, 0x7f1eea45
or ebx, 0x79adef05
xor ebx, 0xc034f8
push ebx
pop edi
pop ebx
not edi
xor edi, 0xe862225d
sub ecx, edi
pop edi
mov ecx, dword [esp]
push ecx
mov ecx, esp
push 0x2141145
mov dword [esp], esi
mov esi, 0x3bef8335
shl esi, 7
add esi, 0x7d6fe4a1
push edi
mov edi, 0
sub edi, esi
xchg esi, edi
pop edi
sub esi, 0x67dff88e
add esi, 0x2bff78fa
xor esi, 0x4eee014f
add ecx, esi
pop esi
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x524ce1
jmp dword [eax + 0x63bca8]
push eax
mov dword [esp], 0x73135297
mov dword [esp], edx
mov dword [esp], 0x7659cd9
mov dword [esp], ebp
mov dword [esp], ebx
push esi
push esp
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ecx
pop ebx
push dword [esp]
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push edx
mov edx, esp
push ebx
mov ebx, 4
add edx, ebx
pop ebx
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
mov dword [esp], eax
pop dword [0x635bcc]
push esi
push 0x53aa189a
mov dword [esp], edi
push 0x45d95fc3
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
sub ecx, 0x6fff5e8b
push ebp
mov ebp, 0x726e89b2
add ecx, ebp
pop ebp
add ecx, eax
push 0x4b3bd49a
mov dword [esp], esi
mov esi, 0x726e89b2
sub ecx, esi
pop esi
add ecx, 0x6fff5e8b
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0x4180ba
sub esp, 4
mov dword [esp], ecx
mov dword [esp], ebx
push eax
mov eax, 0x23958cc0
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
sub ecx, 0x7defdac0
add ecx, eax
push ebx
push 0x63d89b38
push dword [esp]
pop ebx
add esp, 4
dec ebx
neg ebx
sub ebx, 0x1e378a09
add ecx, ebx
pop ebx
push dword [esp]
pop ecx
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push edx
mov dword [esp], eax
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x233d3d59
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
sub esp, 4
mov dword [esp], edi
mov dword [esp], ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop eax
push edi
mov edi, esp
push ebx
mov ebx, 0x3bd9c14c
and ebx, 0x32bb71f0
dec ebx
shl ebx, 8
or ebx, 0x3f9eecbd
or ebx, 0x77b71c82
sub ebx, 0xffffffbb
add edi, ebx
pop ebx
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
jmp 0x55a18e
push ebx
mov ebx, esp
push esi
mov esi, 4
add ebx, esi
pop esi
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop eax
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
xor ecx, ecx
jmp 0x4f3951
jmp 0x4e09f2
push eax
mov eax, esp
add eax, 4
sub eax, 4
push eax
push dword [esp + 4]
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
pop dword [esp]
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
mov eax, dword [esp]
push 0x35b714f2
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push esi
mov esi, 0x79b13839
and esi, 0x7bfdb599
dec esi
and esi, 0x7d7fa461
xor esi, 0x79312004
add ebx, esi
pop esi
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x52bdfb
lea ecx, [eax + edx + 0x635808]
push ebx
mov ebx, esp
add ebx, 4
push esi
push ebp
mov ebp, 0x4b78a26a
neg ebp
inc ebp
add ebp, 0x4b78a26d
mov esi, ebp
pop ebp
sub ebx, esi
mov esi, dword [esp]
add esp, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov ebx, dword [esp]
push ecx
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop ecx
add ecx, 4
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
xchg dword [esp], ecx
pop esp
jmp 0x4b4d8d
push 0x17704b96
mov dword [esp], ebx
push esp
pop ebx
push edx
mov edx, 4
add ebx, edx
pop edx
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
push ebp
mov dword [esp], esi
mov dword [esp], 0x42621619
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
mov eax, dword [esp]
push 0x2f4d7cd8
mov dword [esp], edx
mov edx, esp
push eax
mov eax, 4
add edx, eax
pop eax
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push edi
mov dword [esp], 0x1d1ad5e3
mov dword [esp], ebx
mov ebx, 0x7fdb25e7
inc ebx
and ebx, 0x5f7d2b00
push ebx
not dword [esp]
pop ebx
add ebx, 0xd7c99162
push ebx
pop dword [0x635818]
pop ebx
push eax
mov dword [esp], edi
push edx
mov dword [esp], esp
add dword [esp], 4
pop edi
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edx
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
push edx
mov edx, 0x7fed13be
add edx, 0x14df4853
or edx, 0x6f2d15f2
xor edx, 0xffed5df7
add esi, edx
pop edx
push edi
mov dword [esp], esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
jmp 0x4c6f87