Function at 0x4ea192
Capabilities:
Accept command line arguments

Disassembly:
push edi
push ecx
push 0x49fcd8db
pop ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], eax
push edi
push ecx
mov ecx, 0x619b3ec8
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push eax
mov dword [esp], esi
mov dword [esp], ebp
push ebp
mov ebp, 0x6a38fb44
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
jmp 0x51b062
jmp 0x4f1504
call sub.IMM32.dll_ImmGetContext
jmp 0x55c2db
cmp ecx, dword [ebp - 0x1c]
jmp 0x4fec81
mov dx, word [ecx]
jmp 0x516804
push dword [ebp - 0x10]
mov ecx, dword [esp]
push esi
mov esi, esp
push ebx
mov ebx, 4
add esi, ebx
pop ebx
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push 0x2d6f6752
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push 0x63395536
mov dword [esp], esi
mov esi, 0xcef16e3
shl esi, 2
sub esi, 0x7ffffe9c
add esi, 0x77d37d72
xor esi, 0x2b8fda66
sub ebp, esi
pop esi
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
push 0x405c823f
mov dword [esp], ebx
mov ebx, 0x5f7fb71d
sub ecx, ebx
pop ebx
sub ecx, 0x77f7756e
add ecx, eax
add ecx, 0x77f7756e
push ebx
mov ebx, 0x6dff2edb
dec ebx
neg ebx
xor ebx, 0x2dffa9a3
neg ebx
not ebx
sub ebx, 0x607fc167
add ecx, ebx
pop ebx
mov ecx, dword [esp]
push ebx
mov ebx, esp
push ebp
push esi
mov dword [esp], 4
pop ebp
add ebx, ebp
pop ebp
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x502813
push eax
mov eax, 0x53bf6948
shr eax, 4
xor eax, ebp
xor ebp, eax
xor eax, ebp
not ebp
push eax
push ebp
pop eax
mov ebp, dword [esp]
add esp, 4
sub eax, 0x77bfc61f
sub eax, 0xa93d2eb
mov dword [0x636878], eax
pop eax
push edi
mov edi, esp
push ecx
mov ecx, 0x3d926444
add ecx, 0x3ff18ad6
add ecx, 0x827c10ea
add edi, ecx
pop ecx
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push edx
mov edx, esp
push ebx
mov ebx, 4
add edx, ebx
pop ebx
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
push ebx
mov ebx, 4
add edx, ebx
pop ebx
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x561bc9
jmp 0x50a6f7
cmp esi, eax
jmp 0x4faa30
push ecx
mov ecx, esp
push esi
mov esi, 0x6376cd2d
shl esi, 4
add esi, 0xc8932d34
add ecx, esi
pop esi
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edi
mov dword [esp], eax
mov dword [esp], ebx
push edx
mov dword [esp], 0x39993bae
mov dword [esp], ecx
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
sub esp, 4
mov dword [esp], esi
mov dword [esp], 0x5c812ab4
mov dword [esp], ebx
push esi
mov esi, 0x636a58
mov dword [esp + 4], esi
pop esi
jmp 0x4ee363
jae 0x4e3ef7
jmp 0x5146a0
push esi
mov dword [esp], edx
push ecx
mov ecx, 0x3b560714
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
pop dword [0x636c2c]
jmp 0x41805c
push ecx
sub esp, 4
mov dword [esp], ebx
push 0x59a3caa
pop ebx
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push 0x586ded92
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [ebp - 0x18]
mov eax, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
push edi
mov edi, 4
add ebx, edi
pop edi
xchg dword [esp], ebx
pop esp
push eax
push 0x3a76dcb6
mov dword [esp], esp
add dword [esp], 4
pop eax
add eax, 4
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], ecx
push ebp
mov ebp, 0x59fc79ee
not ebp
inc ebp
sub ebp, 0x46052fa1
add ecx, ebp
pop ebp
add ecx, eax
push 0x3444575f
mov dword [esp], ebx
mov ebx, 0x1dd78c91
sub ebx, 0x76fb2155
xor ebx, 0x3f5f4d02
sub ebx, 0x3984cfcd
sub ecx, ebx
pop ebx
push dword [esp]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0x51dc6c
push esi
mov dword [esp], 0x1a85ba49
mov dword [esp], edx
push ebx
push 0x636a58
pop ebx
mov dword [esp + 4], ebx
pop ebx
jmp 0x50d987
push ecx
mov dword [esp], 0x3e4a1d99
mov dword [esp], esi
push esi
push 0x636878
pop esi
mov dword [esp + 4], esi
pop esi
jmp 0x55e110
push edx
push eax
push 0x286028d
pop eax
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
push edx
mov edx, 0x6719bfdb
shr edx, 2
add edx, 0x5ff737cd
shl edx, 3
dec edx
xor edx, 0xcded3e13
add ebp, edx
pop edx
xchg dword [esp], ebp
pop esp
push dword [esp]
mov edx, dword [esp]
push eax
mov eax, esp
push ecx
mov ecx, 0x7fafea40
sub ecx, 0x75bbbf51
shl ecx, 7
sub ecx, 0xfa15777c
add eax, ecx
pop ecx
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x4fd20d
sub esp, 4
mov dword [esp], ebx
push ebx
mov ebx, 0x1a4e08f4
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push esi
push esp
pop esi
push edi
mov edi, 0x6f75160e
xor edi, 0x6f75160a
add esi, edi
pop edi
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], ecx
push 0x242ca271
mov dword [esp], ebx
and al, 0x89
add al, 0x24
xor edx, edx
push eax
mov eax, esp
push ebx
mov ebx, 0x3ff7423e
shl ebx, 2
sub ebx, 0xffdd08f4
add eax, ebx
mov ebx, dword [esp]
add esp, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebp
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ecx
mov ecx, esp
add ecx, 4
push edi
mov edi, 4
add ecx, edi
pop edi
xchg dword [esp], ecx
pop esp
push dword [esp]
pop edx
sub esp, 4
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x4cb851
cmp dword [ebp - 0x10], 0x1000000
jmp 0x4feca2
push ebx
push esp
pop ebx
add ebx, 4
push edi
mov edi, 4
sub ebx, edi
pop edi
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
pop dword [0x637508]
jmp 0x4d13b6
sub esp, 4
mov dword [esp], ecx
push esp
mov ecx, dword [esp]
add esp, 4
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
add ecx, 0x3fefd5e9
push esi
push 0x74f7a07c
pop esi
not esi
inc esi
shr esi, 1
xor esi, 0x247613c
sub ecx, esi
pop esi
add ecx, eax
add ecx, 0x47c34efe
sub ecx, 0x3fefd5e9
push dword [esp]
mov ecx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
add esp, 4
push 0x471c8cf1
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], eax
pop dword [ebp - 4]
push 0x710b7835
mov dword [esp], esi
push esi
mov esi, 0x1f91c1fb
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
add ecx, 0x3fefabc0
add ecx, eax
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x3fefabc0
sub ecx, 0x5fb1884c
sub ecx, ebp
add ecx, 0x5fb1884c
mov ebp, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
pop ecx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
jmp 0x53aed3
push dword [0x636b1c]
mov eax, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x5746d4
push dword [0x636b1c]
mov esi, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0x56f4db
jne 0x4cca75
jmp 0x5391c0
mov cl, byte [0x636881]
jmp 0x516e0d
je 0x4f1504
jmp 0x4ea155
sub esp, 4
mov dword [esp], ecx
push eax
mov eax, 0x3c483e8e
mov dword [esp + 4], eax
pop eax
mov dword [esp], esi
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
push edx
mov edx, 4
add eax, edx
pop edx
xchg dword [esp], eax
pop esp
mov eax, dword [esp]
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
push edi
push 4
pop edi
add esi, edi
pop edi
xchg dword [esp], esi
pop esp
push ebx
push edx
push eax
mov dword [esp], 0x636a58
pop edx
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
jmp 0x548e36
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], esi
mov dword [esp], ecx
mov dword [esp], edx
pop dword [0x633034]
jmp 0x584cd3
push dword [ebp - 0x18]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x4f6988
je 0x50983d
jmp 0x51b06c
je 0x4f980f
jmp 0x4c7efc
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
jmp 0x562778
ja 0x584cd3
jmp 0x50a6f7
test eax, eax
jmp 0x4fcf69
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x4d7dfa
push edi
push esi
mov esi, 0x1f784829
mov dword [esp + 4], esi
mov esi, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
push ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 0x77efe7e5
or edx, 0x3f7e3d26
and edx, 0x7f7bfc46
not edx
not edx
xor edx, 0x7f7bfc42
sub ecx, edx
pop edx
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
mov edx, dword [esp]
push ebp
mov ebp, esp
push edx
mov edx, 0x3dbfe9be
sub edx, 0x3dbfe9ba
add ebp, edx
pop edx
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
push edx
mov edx, esp
push ebp
mov ebp, 0x7b37bc96
shr ebp, 2
sub ebp, 0x7bfb1a00
sub ebp, 0xa2d2d521
add edx, ebp
pop ebp
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ecx
pop dword [ebp - 0x18]
jmp 0x55bcea
push eax
mov dword [esp], ebx
mov ebx, esp
push ecx
mov ecx, 0x175ff66c
xor ecx, 0x175ff668
add ebx, ecx
pop ecx
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
mov dword [esp], ebx
push 0x72750d01
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop ebx
push ebp
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [ebp - 0x18]
push dword [esp]
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
push esi
mov esi, esp
push edx
mov edx, 4
add esi, 0xbf75758
add esi, edx
sub esi, 0xbf75758
pop edx
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edi
mov dword [esp], ecx
sub ecx, 0x5ffeacd0
add ecx, 0x7bc7e284
add ecx, eax
sub ecx, 0x7bc7e284
push ebp
mov ebp, 0x42bae6d2
add ebp, 0x79ed8c2b
push eax
mov eax, 0x7f821461
add eax, 0xe0796625
or ebp, eax
pop eax
shr ebp, 1
dec ebp
xor ebp, 0x200311ae
add ecx, 0x6edfa07e
add ecx, ebp
sub ecx, 0x6edfa07e
pop ebp
mov ecx, dword [esp]
push ebp
mov dword [esp], 0x675bba03
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x51ef78
cmp dword [0x637d48], 0x23f0
jmp 0x4e77bf
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x4ed55d
push esi
push 0x43bf5eca
mov dword [esp], eax
mov dword [esp], ecx
push 0x636a58
pop ecx
mov dword [esp + 4], ecx
pop ecx
push 0x705017bc
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], edx
push eax
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov dword [esp], ecx
pop edx
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edi
mov edi, esp
push ecx
mov ecx, 0x6f799de6
add ecx, 0x9086621e
add edi, ecx
pop ecx
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x4eee06
cmp edx, dword [ebp - 0xc]
jmp 0x4fec8c
push edx
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop edx
add edx, 4
push esi
mov esi, 4
sub edx, esi
pop esi
xchg dword [esp], edx
pop esp
mov dword [esp], eax
push 0x7287239a
mov dword [esp], ecx
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov byte [0x636882], cl
jmp 0x4ed541
call fcn.00417ce0
jmp 0x551580
jmp 0x4f1504
sub esp, 4
mov dword [esp], esi
mov esi, 0x7ff79846
xchg esi, ebx
not ebx
xchg esi, ebx
and esi, 0x67efb850
add esi, 0xfff7eff0
sub eax, esi
mov esi, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
sub esp, 4
mov dword [esp], eax
push edx
mov edx, 0x4854c00a
mov dword [esp + 4], edx
pop edx
mov dword [esp], ebp
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop edx
push 0x64beba32
mov dword [esp], edx
mov edx, esp
push ebp
mov ebp, 4
add edx, ebp
pop ebp
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x5298e3
push eax
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edx
mov dword [esp], esi
mov dword [esp], ecx
push esi
push 0x4fcdeb8b
pop esi
add esi, 0x73ff6a3f
dec esi
add esi, 0x3b7f59db
push ebx
mov ebx, 0x7fdbb2a9
xor ebx, 0x1242c7c
and esi, ebx
pop ebx
add esi, 0xbbb2a085
sub ecx, 0x7cc427c2
add ecx, esi
add ecx, 0x7cc427c2
pop esi
add ecx, eax
sub ecx, 0x39ff2f09
push dword [esp]
mov ecx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
xor ecx, ecx
push eax
mov eax, esp
push edx
mov edx, 0x43fb4737
sub edx, 0x43fb4733
add eax, edx
mov edx, dword [esp]
add esp, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], eax
push ebx
push dword [esp]
push dword [esp]
pop eax
add esp, 4
add esp, 4
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
push ecx
mov ecx, 4
add edi, ecx
pop ecx
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
mov esp, dword [esp]
jmp 0x551588
push edi
push 0x1ebcb71c
mov dword [esp], edi
push 0x1e0b3e42
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ebp
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
mov edx, dword [esp]
push ebp
push esp
mov ebp, dword [esp]
add esp, 4
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push dword [ebp - 0x18]
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x58416f
sub esp, 4
mov dword [esp], ecx
push ebp
mov ebp, 0x61125a23
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
push edi
push esi
mov esi, 0x613761b
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], ebx
pop eax
push dword [esp]
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
sub esp, 4
mov dword [esp], ebp
mov dword [esp], edx
mov dword [esp], eax
pop dword [ebp - 0x10]
jmp 0x4cbd6b
jmp dword [eax + 0x637d48]
push dword [ebp - 4]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push eax
push edx
push 0x36d7ee3a
pop edx
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov ebx, dword [esp]
push edx
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
jmp 0x4f10f2
push edx
mov edx, esp
add edx, 4
push esi
mov esi, 0x3ddede3f
push eax
mov eax, 0x5ebbe298
add eax, 0x7dbbbbc0
not eax
sub eax, 0x7fae888d
shr eax, 1
xor eax, 0x2e1bb3de
and esi, eax
pop eax
neg esi
and esi, 0x6cdf5fde
shr esi, 4
xor esi, 0x4009018
sub edx, esi
pop esi
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push eax
push esp
pop eax
push edi
mov edi, 4
add eax, edi
pop edi
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop eax
push 0x6d4eaea
mov dword [esp], ebx
mov ebx, esp
push esi
mov esi, 4
add ebx, esi
pop esi
add ebx, 4
xchg dword [esp], ebx
pop esp
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push eax
push esi
push 0x28427c09
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], edx
mov dword [esp], ecx
add ecx, 0x7ef71157
add ecx, 0x7ee770f7
add ecx, eax
sub ecx, 0x7ee770f7
push 0x977b345
mov dword [esp], esi
mov esi, 0x7bfccd1a
push ecx
mov ecx, 0x2fa443d
add esi, ecx
pop ecx
sub ecx, esi
pop esi
push dword [esp]
pop ecx
push ebx
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x55b9fc
add esp, 4
jmp 0x4ff7e7
mov cx, word [eax]
jmp 0x4cb849
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edx
mov dword [esp], ebx
mov dword [esp], eax
push ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 0x7dbd5f0f
dec edx
xor edx, 0x7dbd5f0a
sub ebx, edx
pop edx
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push ebp
mov bp, 0x3657
push cx
mov cx, 0xb0a1
sub bp, cx
pop cx
shl bp, 8
inc bp
not bp
shl bp, 5
push ebx
mov bx, 0x3a3b
push di
mov di, 0x342f
sub bx, di
pop di
sub bx, 0x6792
xor bx, 0x2318
sub bx, 0x69be
xor bp, bx
pop ebx
push bp
pop word [0x636880]
pop ebp
jmp 0x4faa3b
push ebx
push ecx
push edi
mov edi, 0x38ba5b5d
mov ecx, edi
pop edi
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], ecx
sub ecx, 0x7cdeb5e0
add ecx, eax
push esi
mov dword [esp], eax
mov eax, 0x7afb5b57
add eax, 0x58fd7b26
shl eax, 1
xor eax, 0xdb2f191a
push ebx
mov ebx, 0x79ff41c8
sub ecx, ebx
pop ebx
add ecx, eax
add ecx, 0x79ff41c8
pop eax
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push esi
mov esi, 4
add ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
push dword [0x637510]
push dword [esp]
push dword [esp]
pop eax
add esp, 4
add esp, 4
jmp 0x4f9832
push edx
push esi
push 0x738a5032
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], eax
mov dword [esp], edx
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
sub esp, 4
mov dword [esp], ecx
mov ecx, 4
add ebp, ecx
pop ecx
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
push dword [ebp - 0x10]
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push esi
mov esi, 4
add ebx, esi
mov esi, dword [esp]
add esp, 4
xchg dword [esp], ebx
pop esp
jmp 0x4bace6
push edx
push esp
pop edx
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
push ebp
mov dword [esp], 0x2f61893b
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
pop ebx
push edx
push esp
pop edx
add edx, 4
push ecx
mov ecx, 4
add edx, ecx
pop ecx
xchg dword [esp], edx
pop esp
push edx
push esp
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], eax
pop dword [0x636b1c]
push eax
mov eax, esp
push ecx
mov ecx, 4
add eax, ecx
pop ecx
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], ecx
add ecx, 0x5da7ba54
add ecx, 0x6cafde73
add ecx, eax
sub ecx, 0x6cafde73
push eax
push ebp
mov ebp, 0x5da7ba54
push ebp
pop eax
pop ebp
sub ecx, eax
pop eax
push dword [esp]
pop ecx
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
jmp 0x4fec97
push ebp
push ebx
push ecx
mov dword [esp], 0x27804bb0
pop ebx
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push dword [esp]
pop ebx
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
sub esp, 4
mov dword [esp], edi
mov edi, 0x1e502320
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], ecx
sub ecx, 0x77aa6481
push edi
mov edi, 0xdb3afd2
add ecx, edi
pop edi
add ecx, eax
sub ecx, 0xdb3afd2
push eax
push 0x7f2d6fac
pop eax
add eax, 0x7dfde313
add eax, 0x7a7f11c2
add ecx, eax
pop eax
mov ecx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
push edx
mov edx, 4
add ebx, edx
pop edx
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0x4e960d
push 0x6362ad3f
mov dword [esp], ecx
push 0x2e706973
pop ecx
push ecx
pop dword [0x63687c]
mov ecx, dword [esp]
add esp, 4
jmp 0x5530dd
push edi
mov edi, esp
add edi, 4
push ebp
mov dword [esp], ecx
push 4
pop ecx
sub edi, ecx
pop ecx
xchg dword [esp], edi
pop esp
mov dword [esp], edx
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], esi
mov dword [esp], 0x77296b98
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push ebx
push ebp
mov dword [esp], esp
add dword [esp], 4
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
sub esp, 4
mov dword [esp], ebx
mov dword [esp], 0x77368142
mov dword [esp], ecx
mov dword [esp], eax
pop dword [0x637510]
push 0x3c8427da
mov dword [esp], edi
mov dword [esp], esi
push ecx
mov ecx, 0x4aaa059d
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ebx
mov dword [esp], ecx
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov ebx, dword [esp]
push edi
mov edi, esp
push ebp
push 4
pop ebp
add edi, ebp
pop ebp
push esi
mov esi, 4
add edi, esi
pop esi
xchg dword [esp], edi
pop esp
jmp 0x4febc0
push esi
mov esi, esp
push edx
push 4
pop edx
add esi, edx
pop edx
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], ebx
mov ebx, 5
add ebx, eax
xor esi, dword [ebx]
pop ebx
jmp 0x500794
push edi
mov dword [esp], ebp
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x7eb8ae82
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
push 0xf6cb23e
mov dword [esp], ebx
mov dword [esp], 0x4e59f943
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
pop eax
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push eax
mov eax, esp
push ebp
mov ebp, 0x7fff4220
xor ebp, 0x7fff4224
add eax, ebp
pop ebp
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edx
mov dword [esp], ecx
mov dword [esp], eax
push eax
push esp
pop eax
push ebp
mov ebp, 0x77e535ef
and ebp, 0x65eed190
shr ebp, 5
xor ebp, 0xff762fd
xor ebp, 0xcd84275
add eax, ebp
pop ebp
push ecx
mov ecx, 4
sub eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
mov dword [esp], edx
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
push edi
mov edi, 4
add esi, edi
pop edi
xchg dword [esp], esi
pop esp
jmp 0x4c7f06
push 0x640e3b98
mov dword [esp], ecx
push esp
pop ecx
push edx
mov edx, 0x3ebec647
shl edx, 1
neg edx
neg edx
add edx, 0x82827376
add ecx, edx
pop edx
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
push ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop ebx
push eax
mov eax, esp
push ecx
mov ecx, 0x5f76c662
or ecx, 0x6dff8b2b
neg ecx
dec ecx
add ecx, 0x7d6f9c46
sub ecx, 0xfd6fccd6
add eax, ecx
pop ecx
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
sub esp, 4
mov dword [esp], ebp
mov dword [esp], 0x2d239e03
mov dword [esp], ecx
mov ecx, 0x3c
add ecx, 0x5ebf42e4
add ecx, edx
sub ecx, 0x5ebf42e4
add eax, dword [ecx]
pop ecx
push edx
push esp
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], eax
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
push dword [esp]
pop edx
push 0x67594811
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0x4f8b1f
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
mov dword [esp], 0x4f153d51
mov dword [esp], ebp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edi
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
pop ebx
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push dword [ebp - 0x10]
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push ecx
mov dword [esp], edx
mov edx, esp
push eax
mov dword [esp], ebp
mov ebp, 0x6cdf4110
not ebp
inc ebp
add ebp, 0x2f5f7dbb
shr ebp, 5
sub ebp, 0x61401e1
add edx, ebp
pop ebp
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
push ecx
mov dword [esp], esi
mov dword [esp], ecx
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
push ecx
mov ecx, 4
add edi, ecx
pop ecx
xchg dword [esp], edi
pop esp
jmp 0x51b46d