Function at 0xacff7d
Capabilities:
Accept command line arguments

Disassembly:
push dword [0x658030]
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
push eax
mov dword [esp], esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
jmp 0xbcdabc
push ecx
mov dword [esp], ebx
mov dword [esp], edx
push eax
mov eax, 0x4198b41b
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
jmp 0xc16a8e
and edx, eax
jmp 0xbdecad
test eax, eax
jmp 0xad5b1e
push edx
push ebp
mov ebp, 0x105a4662
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], esi
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push ebx
mov ebx, 4
add ebp, ebx
pop ebx
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
mov edx, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
push 0x1a5e4b33
mov dword [esp], ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
push ebx
push edi
mov edi, 0xd5c9490
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
pop dword [ebp - 0x18]
push 0x77aff326
mov dword [esp], ebx
push esi
push 0x576f8b46
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push 0x2a95c157
mov dword [esp], esi
mov esi, esp
push ebp
mov ebp, 0x5fbe3e64
dec ebp
xor ebp, 0x5fbe3e67
add esi, ebp
pop ebp
add esi, 4
xchg dword [esp], esi
pop esp
mov eax, dword [esp]
push ecx
push esi
mov dword [esp], esp
add dword [esp], 4
pop ecx
push eax
mov eax, 4
add ecx, eax
pop eax
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xc0f307
sub esp, 4
mov dword [esp], ebp
push edi
mov edi, 0x149f110c
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], ebx
push 0x31a58256
mov dword [esp], ebp
mov ebp, esp
push edi
mov edi, 4
add ebp, edi
pop edi
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
pop ebx
mov ebx, dword [esp]
push edi
push esp
pop edi
push ebx
mov ebx, 4
add edi, ebx
mov ebx, dword [esp]
add esp, 4
add edi, 4
xchg dword [esp], edi
pop esp
sub esp, 4
mov dword [esp], ebp
push 0x5f34e195
mov dword [esp], ebp
push 0x65ba58
pop ebp
mov dword [esp + 4], ebp
pop ebp
jmp 0xb086f3
push 0x576133d6
mov dword [esp], edx
mov edx, esp
push esi
push 4
pop esi
add edx, esi
pop esi
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edx
push edi
mov dword [esp], 0x706b35e6
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [0x658034]
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
push ebp
mov ebp, 0x7f7f5f0f
or ebp, 0x6fc68a16
sub ebp, 0x7fffdf1b
add eax, ebp
pop ebp
xchg dword [esp], eax
pop esp
push 0x2f682721
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], edx
mov dword [esp], ecx
push 0x36934cba
mov dword [esp], edi
mov edi, 0x77aeb90a
add ecx, 0x71f917e0
sub ecx, edi
sub ecx, 0x71f917e0
pop edi
add ecx, 0x77ba19b5
add ecx, eax
sub ecx, 0x77ba19b5
add ecx, 0x77aeb90a
push dword [esp]
pop ecx
push eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
jmp 0xacebae
push 0x576ae502
mov dword [esp], edi
push esp
pop edi
add edi, 4
push ecx
mov ecx, 0x3f6aa150
sub ecx, 0x3f6aa14c
sub edi, ecx
pop ecx
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
push eax
mov eax, 0x3ffff35b
shr eax, 7
shr eax, 7
push edx
mov edx, 0x535e7ad2
add eax, edx
pop edx
sub ecx, eax
pop eax
sub ecx, 0x6ffe226a
sub ecx, 0x6ff32b62
add ecx, eax
add ecx, 0x6ff32b62
add ecx, 0x6ffe226a
add ecx, 0x535f7ad1
push dword [esp]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push ecx
mov ecx, esp
push esi
push 4
pop esi
add ecx, esi
pop esi
sub ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], ecx
push edi
mov edi, 0x774776ea
add ecx, 0x35ef1c34
sub ecx, 0x5ff98acb
sub ecx, 0x3ebfd507
sub ecx, edi
add ecx, 0x3ebfd507
add ecx, 0x5ff98acb
sub ecx, 0x35ef1c34
pop edi
add ecx, eax
add ecx, 0x774776ea
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push esi
mov esi, esp
push ebp
mov ebp, 4
add esi, ebp
pop ebp
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0xbc211f
je 0xb8b38c
jmp 0xca7c5c
je 0xc4f741
jmp 0xc16a98
push edx
mov dword [esp], eax
push edx
mov edx, 0x2723d6cb
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov ebx, dword [esp]
push ebx
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
mov edx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
sub esp, 4
mov dword [esp], ebp
push ecx
push 0x65ba58
mov ecx, dword [esp]
add esp, 4
mov dword [esp + 4], ecx
pop ecx
push ebx
mov ebx, esp
push eax
push esi
mov esi, 0x7f39e2d0
or esi, 0x774de54b
not esi
and esi, 0x716d23fe
xor esi, 0x7bfd4fd9
sub esi, 0x7bfd4ff9
mov eax, esi
pop esi
add ebx, eax
pop eax
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edx
mov dword [esp], eax
push 0x4349364f
mov dword [esp], ebx
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
push ecx
mov ecx, 0x30e67f6f
inc ecx
add ecx, 0x70efb6f9
dec ecx
dec ecx
dec ecx
xor ecx, 0xa1d63662
add esi, ecx
pop ecx
xchg dword [esp], esi
pop esp
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0xb6690a
jae 0xc7cb0f
jmp 0xb34b6b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xafec96
je 0xb6d217
jmp 0xb71f77
ja 0xb8fcf1
jmp 0xbc533e
xor ecx, ecx
push ebx
mov ebx, esp
push edi
mov edi, 0x55df4714
sub edi, 0x55df4710
add ebx, edi
pop edi
push esi
mov esi, 0x1cfde0c6
or esi, 0x4fba8980
and esi, 0x3edfcb7a
sub esi, 0x7fbe38a0
sub esi, 0x9f21909e
sub ebx, esi
pop esi
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ecx
push eax
mov eax, 0x777e79a4
and eax, 0x7cf3e163
and eax, 0x7fffd646
add eax, 0x1f2fd784
or eax, 0x6ffe713b
xor eax, 0xd1590a05
sub ecx, eax
pop eax
add ecx, eax
push 0x58592567
mov dword [esp], edi
mov edi, 0x2ea77dba
sub ecx, 0x7df7bce0
add ecx, edi
add ecx, 0x7df7bce0
pop edi
push dword [esp]
pop ecx
push ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 4
add ebx, edx
pop edx
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0xaf7901
push dword [0x658034]
push dword [esp]
pop ecx
push eax
mov eax, esp
push ecx
mov ecx, 0x7f6f7f1b
xor ecx, 0x67bde67b
shr ecx, 5
not ecx
xor ecx, 0xff396b30
add eax, ecx
pop ecx
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xb4ab60
mov cx, word [eax]
jmp 0xaf7909
cmp ecx, dword [ebp - 0x1c]
jmp 0xad5b29
push esi
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ebx
mov dword [esp], ecx
sub ecx, 0x7dd3fcaf
add ecx, eax
push ebx
mov ebx, 0x7cddbefd
not ebx
push 0x6964d95
mov dword [esp], edi
mov edi, 0x5fffd4c7
and edi, 0x7fff4c8a
xor edi, 0xa54eff2f
add ebx, edi
pop edi
add ecx, ebx
mov ebx, dword [esp]
add esp, 4
mov ecx, dword [esp]
push ecx
mov dword [esp], esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push ecx
push 0x706d6f63
push dword [esp]
pop ecx
add esp, 4
push ecx
pop dword [0x65b87a]
pop ecx
jmp 0xc32af4
push ebx
push esp
mov ebx, dword [esp]
add esp, 4
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0xcb3e76
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], eax
pop dword [0x85bcf0]
jmp 0xba6802
xor eax, eax
jmp 0xb9bc61
cmp esi, eax
jmp 0xb748fa
cmp esi, eax
jmp 0xc3430b
jmp dword [eax + 0xa5bd08]
jmp 0x4dcbaa
push edi
mov dword [esp], 0x554120b
mov dword [esp], esi
push 0x7f5ed171
pop esi
shl esi, 6
xor esi, 0x7f637e31
xor esi, 0x74fe6251
or esi, 0x5ae8fa44
add esi, 0x211605a4
mov dword [ebp - 8], esi
mov esi, dword [esp]
add esp, 4
push eax
mov dword [esp], ebx
push ebx
push 0x7456b97f
pop ebx
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push edx
push esp
pop edx
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
push dword [esp]
pop eax
push esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
jmp 0xb5fc05
dec ebp
dec ebp
and ebp, 0x7feb4faa
sub ebp, 0x58624584
add ebx, ebp
pop ebp
add ebx, 4
xchg dword [esp], ebx
pop esp
mov eax, dword [esp]
push edx
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push esi
mov esi, 0x6dbf5f0f
or esi, 0x79f02847
not esi
inc esi
neg esi
xor esi, 0x3fd5e253
add esi, 0xbdd562e8
add ebp, esi
pop esi
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0xb5b4fe
sub esp, 4
mov dword [esp], ecx
push esp
pop ecx
push ebp
mov ebp, 0x5fef3210
dec ebp
sub ebp, 0x7f7f0af2
shr ebp, 7
xor ebp, 0x4b728a42
or ebp, 0x7fe179ef
xor ebp, 0x7ff37beb
add ecx, ebp
pop ebp
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
sub ecx, 0x6ff7ff89
add ecx, 0x5f3802c4
add ecx, 0x1bddba63
add ecx, eax
sub ecx, 0x1bddba63
sub ecx, 0x5f3802c4
push ebx
push 0x1edffdae
pop ebx
shr ebx, 8
or ebx, 0x5bdcabfb
add ebx, 0x1418ff8a
add ecx, ebx
pop ebx
push dword [esp]
pop ecx
push ebx
push esp
pop ebx
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
add ebx, 4
xchg dword [esp], ebx
pop esp
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0xb7c759
mov dx, word [ecx]
jmp 0xb16faa
cmp edx, dword [ebp - 0xc]
jmp 0xaf3e4a
push edx
mov dword [esp], eax
mov dword [esp], ecx
push edx
push 0x65ba58
pop edx
mov dword [esp + 4], edx
pop edx
jmp 0xb7b777
shr ecx, 2
push edi
mov dword [esp], eax
mov dword [esp], esi
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], eax
push 0x674d1e45
mov dword [esp], ebx
mov eax, dword [esp]
push edi
mov edi, esp
push ebx
mov ebx, 4
add edi, ebx
pop ebx
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
push ebp
mov ebp, 4
add edi, ebp
pop ebp
xchg dword [esp], edi
pop esp
jmp 0xac6dce
push edi
push edi
mov dword [esp], ebx
mov ebx, 0x1e3f772e
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
pop dword [0x658030]
jmp 0xafec8f
sub esp, 4
mov dword [esp], ecx
mov dword [esp], 0x4d484125
mov dword [esp], edx
mov dword [esp], 0x352f9f2a
mov dword [esp], edx
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov edx, dword [esp]
push edi
push esp
pop edi
push ecx
mov ecx, 0x3fd5ee11
push ebx
mov ebx, 0x6fbfbd81
add ebx, 0xc1fedcf
sub ecx, ebx
pop ebx
shr ecx, 3
shl ecx, 4
inc ecx
sub ecx, 0x751786e1
sub ecx, 0x12d4fe9c
add edi, ecx
pop ecx
add edi, 4
xchg dword [esp], edi
pop esp
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push ebx
mov dword [esp], edi
mov dword [esp], 0x30d825a9
mov dword [esp], eax
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop ebx
push 0x1def2dc6
mov dword [esp], esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0xba5873
push bp
push 0x6c64
pop bp
sub esp, 2
mov word [esp], bp
pop word [0x65b880]
mov bp, word [esp]
add esp, 2
jmp 0xbcd1ca
push eax
mov eax, esp
add eax, 4
push edi
mov edi, 4
sub eax, edi
pop edi
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
push edi
mov edi, 4
sub edx, 0x7cf3cd61
add edx, edi
add edx, 0x7cf3cd61
pop edi
xchg dword [esp], edx
pop esp
mov eax, dword [esp]
push 0x273b0cbf
mov dword [esp], edi
mov edi, esp
push edx
mov edx, 4
add edi, edx
mov edx, dword [esp]
add esp, 4
add edi, 4
xchg dword [esp], edi
pop esp
push esi
mov dword [esp], ebx
push edx
mov edx, 0x10469ab6
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
pop dword [0x65bc2c]
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
push eax
mov eax, 0x69f6e352
inc eax
xor eax, 0x743757a7
sub eax, 0x1dc1b4f0
add edi, eax
pop eax
xchg dword [esp], edi
pop esp
mov eax, dword [esp]
push eax
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0xb03570
push eax
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], edx
pop dword [ebp - 0x10]
jmp 0xc15b49
push dword [ebp - 0x18]
push dword [esp]
pop eax
push edi
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xb99397
push 0x3936b54a
mov dword [esp], ecx
sub esp, 4
mov dword [esp], eax
mov eax, 0x65ba58
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
jmp 0xc21c71
add esp, 4
jmp 0xacebb5
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0xb768cf
push 0xe7526b7
mov dword [esp], edx
push edi
push ebp
mov ebp, 0x615d0db4
mov edi, ebp
pop ebp
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
push edx
push 0x73edf7c2
pop edx
neg edx
add edx, 0xa9550d05
add ecx, edx
pop edx
sub ecx, 0x7fb34c08
add ecx, eax
add ecx, 0x7fb34c08
push edi
mov edi, 0x35671543
sub ecx, edi
pop edi
mov ecx, dword [esp]
push ecx
mov ecx, esp
push ebx
mov ebx, 0x5777099e
add ebx, 0x7ffbeecf
or ebx, 0x751fce51
sub ebx, 0x3ff7ee37
add ebx, 0x4877efbe
add ecx, ebx
pop ebx
push ebp
push 0x287f5146
pop ebp
xor ebp, 0x7f6f0d74
inc ebp
add ebp, 0xa8efa3d1
add ecx, ebp
pop ebp
xchg dword [esp], ecx
pop esp
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push edi
push esp
pop edi
add edi, 4
sub edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], edx
push edi
push ebp
mov ebp, 0x3c57bb04
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push esi
push esp
pop esi
add esi, 4
push ebx
mov ebx, 4
add esi, ebx
pop ebx
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0xaf9893
push edi
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
mov dword [esp], 0x2d003f14
mov dword [esp], ecx
sub ecx, 0x6defe2fe
sub ecx, 0x6dab5fa9
add ecx, eax
push eax
push 0x757f45f3
pop eax
not eax
sub eax, 0x1cd55a63
add ecx, eax
pop eax
push eax
mov eax, 0x6defe2fe
add ecx, eax
pop eax
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push esi
mov esi, esp
push eax
mov eax, 0x78ea5a19
shr eax, 5
neg eax
neg eax
add eax, 0xfc38ad34
add esi, eax
pop eax
add esi, 4
xchg dword [esp], esi
pop esp
push dword [0x65bb1c]
push dword [esp]
mov esi, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], eax
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], ecx
push ebp
mov ebp, 0x3dcd7e75
and ebp, 0x1fff82c4
add ebp, 0x3a2ec16e
sub ecx, 0x7ee4085f
add ecx, ebp
add ecx, 0x7ee4085f
pop ebp
add ecx, 0x1dad47cc
add ecx, eax
push edi
mov edi, 0x1dad47cc
sub ecx, edi
pop edi
sub ecx, 0x57fbc3b2
push dword [esp]
pop ecx
push edx
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xb7fe07
jmp 0xb8b38c
jmp 0xbc533e
jne 0xaf8e3e
jmp 0xb034f0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xb5a32c
push edi
mov edi, esp
push edx
push ecx
mov dword [esp], 4
pop edx
add edi, edx
pop edx
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
push edx
mov edx, 0x7be7511d
not edx
xor edx, 0xfb27f242
add ecx, edx
mov edx, dword [esp]
add esp, 4
add ecx, eax
push edx
mov edx, 0x3dfd3d53
shl edx, 7
inc edx
xor edx, 0x55996d15
neg edx
inc edx
push esi
mov esi, 0x2a472133
add edx, esi
pop esi
sub ecx, edx
pop edx
push dword [esp]
pop ecx
push edx
mov edx, esp
add edx, 4
add edx, 4
push 0x33dfa51d
mov dword [esp], edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
push eax
mov dword [esp], edx
push ebx
mov dword [esp], edi
mov dword [esp], ecx
mov ecx, 0x65b878
mov dword [esp + 4], ecx
pop ecx
jmp 0xad3f69
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push esi
mov dword [esp], eax
mov dword [esp], 0x19ca4f56
mov dword [esp], ebx
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
jmp 0xbb292c
push esi
mov esi, esp
add esi, 4
push ecx
mov ecx, 0x7e8e252c
not ecx
sub ecx, 0x6df253ba
not ecx
dec ecx
sub ecx, 0x66fb900e
add ecx, 0x7a7b172d
sub esi, ecx
pop ecx
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
push eax
push 0x7ffd1b1e
pop eax
add ecx, eax
pop eax
add ecx, eax
push eax
push 0x7ffd1b1e
pop eax
sub ecx, eax
pop eax
mov ecx, dword [esp]
push ebx
mov ebx, esp
push edx
mov edx, 0x5fff3e65
xor edx, 0x77ff3ec0
sub edx, 0x280000a1
add ebx, edx
pop edx
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
push dword [0x85bcf0]
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
push edx
mov edx, 4
add eax, edx
pop edx
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0xb6dc22
push esi
push esp
pop esi
add esi, 4
push eax
push 4
pop eax
sub esi, eax
pop eax
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
push ebx
mov ebx, 0x2f7f37c8
push edx
mov edx, 0x3babe682
and edx, 0x77b513b1
shl edx, 4
sub edx, 0xde1118db
add ebx, edx
pop edx
or ebx, 0x737fbd06
sub ebx, 0x6b7b4d8e
inc ebx
xor ebx, 0xfde3c282
sub ecx, ebx
pop ebx
sub ecx, 0x7fb70466
sub ecx, 0x3f4d0fed
add ecx, eax
add ecx, 0x3f4d0fed
add ecx, 0x7fb70466
add ecx, 0x6de770e0
push dword [esp]
mov ecx, dword [esp]
push esi
mov esi, esp
push ebp
mov ebp, 4
add esi, ebp
pop ebp
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
sub esp, 4
mov dword [esp], ebx
mov ebx, 5
sub ebx, 0x6cd03dc7
add ebx, edx
add ebx, 0x6cd03dc7
push eax
mov eax, 0
add eax, ebx
xor esi, dword [eax]
mov eax, dword [esp]
add esp, 4
pop ebx
jmp 0xb8073c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0xad0c42
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xafec9d
cmp dword [ebp - 0x10], 0x1000000
jmp 0xaf3e55
lea ecx, [eax + edx + 0x65b868]
jmp 0xbbc619
push dword [ebp - 0x14]
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push esi
push esp
mov esi, dword [esp]
add esp, 4
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], eax
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], ebx
pop eax
push dword [esp]
mov eax, dword [esp]
add esp, 4
push esi
mov esi, esp
push eax
mov eax, 4
add esi, eax
pop eax
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0xb8b398
push edx
push ebp
push 0x447d0a7d
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push 0x103ce091
mov dword [esp], ebx
mov ebx, esp
push edx
mov edx, 4
add ebx, edx
pop edx
add ebx, 4
xchg dword [esp], ebx
pop esp
mov edx, dword [esp]
push esi
mov dword [esp], edx
mov edx, esp
add edx, 4
push ebx
mov ebx, 4
add edx, ebx
pop ebx
xchg dword [esp], edx
mov esp, dword [esp]
push dword [ebp - 0x10]
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
push esi
push esp
pop esi
add esi, 4
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
push eax
mov dword [esp], ecx
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov ebx, dword [esp]
push edx
push esp
pop edx
add edx, 4
sub esp, 4
mov dword [esp], esi
mov esi, 4
add edx, esi
pop esi
xchg dword [esp], edx
pop esp
jmp 0xbc2f30
push ebx
mov ebx, 0x3c
add ebx, 0x35eb5d3e
add ebx, edx
sub ebx, 0x35eb5d3e
sub esp, 4
mov dword [esp], edx
mov edx, 0
sub edx, 0x5f67c6d4
add edx, ebx
add edx, 0x5f67c6d4
add eax, dword [edx]
pop edx
pop ebx
jmp 0xaf9870
mov al, byte [0x658043]
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
mov dword [esp], esi
mov dword [esp], ebp
mov dword [esp], edx
push edi
mov dword [esp], ebx
mov dword [esp], ecx
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop edx
push ecx
mov ecx, esp
push edi
push ecx
mov ecx, 0x5fff7652
dec ecx
dec ecx
xor ecx, 0x5fff7654
mov edi, ecx
pop ecx
add ecx, edi
pop edi
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xbcdafd
push esi
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], esi
mov dword [esp], eax
mov dword [esp], edx
push edx
mov dword [esp], ecx
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov edx, dword [esp]
push edx
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
push dword [0x85bcf0]
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push edx
mov edx, esp
push eax
mov eax, 0x387c74b5
or eax, 0x2f7caad8
add eax, 1
and eax, 0x775dc048
shr eax, 2
sub eax, 0xdd7300e
add edx, eax
pop eax
push esi
mov esi, 0x5adf29ab
or esi, 0x7ca51389
xor esi, 0x7eff3baf
sub edx, esi
pop esi
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
push ebp
mov ebp, 0x7d778e38
neg ebp
not ebp
neg ebp
shr ebp, 6
shl ebp, 3
sub ebp, 0x98911e65
add ecx, ebp
pop ebp
sub ecx, 0x7e7b7014
add ecx, eax
push ebx
mov ebx, 0x7e7b7014
add ecx, ebx
pop ebx
push ebp
mov ebp, 0x77bfefd3
sub ecx, ebp
pop ebp
push dword [esp]
pop ecx
push ebp
mov dword [esp], ebx
mov ebx, esp
push edi
mov edi, 4
add ebx, edi
pop edi
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0xbd9524
push edx
mov dword [esp], esi
push esp
pop esi
add esi, 4
push eax
mov eax, 4
sub esi, eax
pop eax
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
sub ecx, 0x6fa72088
sub ecx, 0x7ddf6300
add ecx, eax
add ecx, 0x7ddf6300
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], esi
mov esi, 0x6fa72088
add ecx, esi
pop esi
push dword [esp]
pop ecx
push ebp
mov ebp, esp
push esi
mov esi, 0x57ffae3a
inc esi
inc esi
shr esi, 7
shl esi, 2
sub esi, 0x2bffd6c
add ebp, 0x63f75170
add ebp, esi
sub ebp, 0x63f75170
pop esi
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [ebp - 0x18]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push edx
mov dword [esp], 0x30bf563f
mov dword [esp], ebp
mov dword [esp], 0x25106a8b
mov dword [esp], ecx
mov dword [esp], eax
push 0x10bb1236
mov dword [esp], ebx
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push dword [esp]
pop eax
push eax
mov eax, esp
push edi
mov edi, 4
add eax, edi
pop edi
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
jmp 0xc9bed2
push eax
push eax
mov dword [esp], 0x27984b55
mov dword [esp], edi
push 0x65ba58
pop edi
mov dword [esp + 4], edi
pop edi
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
push 0x46326268
mov dword [esp], ecx
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop ebx
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0xb52f45
push 0x54ca87ea
mov dword [esp], ebx
push eax
mov eax, 0x55c114dd
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push ecx
push ebx
mov ebx, 4
mov ecx, ebx
pop ebx
add ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
push dword [esp]
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
push esi
mov esi, 4
sub ecx, esi
pop esi
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov dword [esp], edx
mov dword [esp], ecx
push esi
push ebx
mov ebx, 0x65b86d5e
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edi
mov dword [esp], 0x7a908e83
mov dword [esp], edx
push 0xbcdd6f3
mov dword [esp], ecx
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
jmp 0xb74905
sub esp, 4
mov dword [esp], ebp
push esi
mov esi, 0x36aeed0e
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], eax
push 0x50ceb667
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
push dword [ebp - 8]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xb8d0ed
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], 0x115bcc73
mov dword [esp], edx
push eax
mov eax, esp
push edx
mov edx, 0x6ad68900
not edx
dec edx
xor edx, 0x952976fa
add eax, edx
pop edx
sub eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
mov dword [esp], ecx
pop edx
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov dword [esp], eax
pop dword [0x65bc2c]
jmp 0x4dcbaa
push eax
push ecx
mov dword [esp], eax
mov eax, 0x59e53e
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], edx
sub esp, 4
mov dword [esp], esi
mov dword [esp], 0x25ea2e4f
mov dword [esp], edi
mov dword [esp], ecx
pop edx
push dword [esp]
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
push ebx
mov dword [esp], 0x1000
pop ebx
sub eax, ebx
pop ebx
push edx
mov edx, esp
push ebp
mov ebp, 4
add edx, ebp
pop ebp
push esi
mov esi, 0x6b792e18
add esi, 0x9486d1ec
sub edx, esi
pop esi
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], edx
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
mov eax, dword [esp]
push 0x68a7f613
mov dword [esp], esi
push esp
pop esi
add esi, 4
push ebx
mov ebx, 0x2dfd58d7
neg ebx
sub ebx, 0x777f443d
sub ebx, 0x5a8362e8
add esi, ebx
pop ebx
xchg dword [esp], esi
pop esp
jmp 0xc383ee
push ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebp
mov dword [esp], ebx
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
mov eax, dword [esp]
add esp, 4
pop dword [esp]
mov esp, dword [esp]
push esi
mov esi, 0x7dff6fff
dec esi
push ebx
mov ebx, 0x75dfa1ea
shl ebx, 5
not ebx
shr ebx, 4
shr ebx, 3
add ebx, 0x3fa9579a
sub ebx, 0xc0722079
xor esi, ebx
pop ebx
shl esi, 6
xor esi, 0xfc64322e
sub esp, 4
mov dword [esp], esi
pop dword [0x65b882]
mov esi, dword [esp]
add esp, 4
push ecx
mov ecx, esp
sub esp, 4
mov dword [esp], eax
mov eax, 4
add ecx, eax
pop eax
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
push ebp
push esp
pop ebp
push eax
mov eax, 4
add ebp, eax
pop eax
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
pop edx
push dword [esp]
mov edx, dword [esp]
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
jmp 0xbed16a
cmp dword [0xa5bd08], 0x23f0
jmp 0xaed7b2
push 0x6481cc76
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], eax
mov dword [esp], edx
sub esp, 4
mov dword [esp], edx
mov dword [esp], ecx
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
push ecx
mov ecx, 4
add edi, ecx
pop ecx
xchg dword [esp], edi
pop esp
mov al, byte [0x65b881]
push 0xf1d402a
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push ebp
mov dword [esp], eax
mov eax, 4
sub ebx, eax
pop eax
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
push 0x2481e686
mov dword [esp], ecx
mov ebx, dword [esp]
push ebx
mov ebx, esp
push edi
mov edi, 4
add ebx, edi
pop edi
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop ebx
push 0x736e2e03
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xbe5fac
push 0x5b13943b
mov dword [esp], ebx
push 0x397d1b73
pop ebx
shl ebx, 6
or ebx, 0x5bf94225
not ebx
or ebx, 0x679d8703
add ebx, 0x882bc676
add edx, 0x79f9ebce
add edx, ebx
sub edx, 0x79f9ebce
pop ebx
sub edx, ecx
sub edx, 0x6fc96d91
jmp 0xb50411
push dword [0x658038]
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
add esp, 4
push 0x383ea3d
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
push ecx
mov ecx, 4
sub ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
push esi
mov esi, 0x1f3f4fb1
sub ecx, esi
pop esi
sub ecx, 0x6bf7dcc1
sub ecx, 0x29ff71b0
add ecx, eax
add ecx, 0x29ff71b0
add ecx, 0x6bf7dcc1
push eax
mov eax, 0x1f3f4fb1
add ecx, eax
pop eax
push dword [esp]
pop ecx
push edx
mov dword [esp], edi
mov edi, esp
push ebp
mov ebp, 4
add edi, ebp
pop ebp
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xbf2509
push ebx
mov dword [esp], esi
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x438c2885
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ebx
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ebp
mov dword [esp], ecx
pop ebx
push dword [esp]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
imul eax, ecx
jmp 0xad1daa
push ecx
mov dword [esp], edx
push 3
pop edx
add edx, 0x4dbf1aae
add edx, ecx
sub edx, 0x4dbf1aae
push ecx
mov ecx, 0
add ecx, edx
xor esi, dword [ecx]
pop ecx
pop edx
sub esp, 4
mov dword [esp], edi
push eax
push 0x1d1b8eaf
pop eax
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
push esi
mov dword [esp], edx
mov edx, 0x6f9dcd87
shl edx, 4
and edx, 0x7b7e542b
xor edx, 0x4ed3ca12
and edx, 0x4ff5660f
add edx, 0x785a0fb2
add ecx, edx
pop edx
add ecx, eax
push eax
mov eax, 0x7fdf11b4
sub ecx, 0x3bef503f
sub ecx, eax
add ecx, 0x3bef503f
pop eax
mov ecx, dword [esp]
push edx
mov edx, esp
add edx, 4
push ecx
mov ecx, 4
add edx, ecx
pop ecx
push ebx
mov dword [esp], edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
jmp 0xaed7bd
push dword [0x65bb1c]
mov esi, dword [esp]
push esi
mov dword [esp], edx
mov edx, esp
add edx, 4
push edi
mov edi, 0x6b9f0e7a
and edi, 0x3feb2f7a
sub edi, 0x677d9da0
shr edi, 6
xor edi, 0x5e7730b5
sub edi, 0x5d670572
add edx, edi
pop edi
xchg dword [esp], edx
pop esp
jmp 0xbd9073
push edx
mov dword [esp], ebp
push ecx
push 0x27d2896e
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
xchg dword [esp], ebp
mov esp, dword [esp]
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push edx
push ecx
mov ecx, 0x218c923b
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], edx
pop dword [0x658034]
jmp 0xb8fcf1
push edx
mov edx, esp
add edx, 4
push esi
mov esi, 4
sub edx, esi
mov esi, dword [esp]
add esp, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ebx
push eax
mov dword [esp], ebx
mov dword [esp], ecx
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov ebx, dword [esp]
push edx
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop edx
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov byte [0x65b882], al
push edi
push esp
pop edi
push eax
mov eax, 4
add edi, eax
pop eax
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ebx
push ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
mov ebx, dword [esp]
push ecx
mov ecx, esp
push 0x5b464902
mov dword [esp], edi
mov edi, 0x7f1a47ad
neg edi
add edi, 0x7f1a47b1
add ecx, edi
pop edi
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0xae1fb9
push eax
mov dword [esp], ebx
push 0xa
pop ebx
push 0x41bd3063
mov dword [esp], ebx
pop dword [ebp - 0x14]
pop ebx
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
mov dword [esp], ebp
mov dword [esp], ecx
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
push esi
mov esi, 4
add ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
push dword [esp]
pop eax
push eax
mov dword [esp], ebp
mov ebp, esp
push ebx
mov ebx, 4
add ebp, ebx
pop ebx
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xb03cd9
push ecx
mov dword [esp], ebp
push 7
pop ebp
or ecx, ebp
mov ebp, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0xbd6387
push dword [ebp - 0x10]
mov edx, dword [esp]
push eax
push edi
mov dword [esp], esp
add dword [esp], 4
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xaccb4f
push ecx
mov dword [esp], edx
push eax
mov dword [esp], esp
add dword [esp], 4
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
add ecx, 0x5bff2223
sub ecx, 0x5fffadfc
add ecx, eax
add ecx, 0x5fffadfc
push ebp
mov dword [esp], edi
mov edi, 0x5bff2223
sub ecx, edi
mov edi, dword [esp]
add esp, 4
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov byte [0x65804d], al
push esi
mov dword [esp], eax
mov dword [esp], edi
mov edi, esp
add edi, 4
push eax
mov eax, 4
sub edi, eax
pop eax
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
push eax
mov eax, 0x59bf6e84
sub eax, 0x74efb718
neg eax
and eax, 0x6ef736e5
push ecx
push 0x73dfc329
pop ecx
sub ecx, 0x35fd7bdf
or ecx, 0x5ddd3478
sub ecx, 0x7effc3bf
sub ecx, 0x8d6933ae
add eax, ecx
mov ecx, dword [esp]
add esp, 4
sub ecx, eax
pop eax
add ecx, eax
add ecx, 0x7bc68091
mov ecx, dword [esp]
push 0x3a7522a
mov dword [esp], eax
mov eax, esp
push edi
mov edi, 0x5feed630
not edi
xor edi, 0xa01129cb
add eax, edi
pop edi
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0xaf78cc
push 0x3127eacc
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
add ecx, 0x6cd7196e
add ecx, 0x5667043d
add ecx, eax
sub ecx, 0x5667043d
push edx
push 0x7bf7a7ce
mov edx, dword [esp]
add esp, 4
xor edx, 0x1720bea0
sub ecx, edx
pop edx
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
push ebx
mov ebx, 4
add edx, ebx
pop ebx
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov al, byte [0x65804d]
push ebx
push esp
mov ebx, dword [esp]
add esp, 4
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
push esi
mov dword [esp], 0x69d14303
mov dword [esp], edx
mov dword [esp], 0xc2375f8
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0xc3de95
call fcn.0044a2f0
jmp 0xb609f8
jmp 0xb8b38c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x3b3f033d
mov dword [esp], edi
mov edi, esp
add edi, 4
push eax
mov eax, 4
sub edi, eax
pop eax
xchg dword [esp], edi
pop esp
mov dword [esp], esi
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push ecx
mov ecx, esp
push esi
mov esi, 0x7ddf03ce
xor esi, 0x5ffff5af
xor esi, 0x2220f665
add ecx, esi
pop esi
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
jmp 0xbc13ed
push ebp
push esp
pop ebp
add ebp, 4
push edx
mov edx, 0x75ff6548
xor edx, 0x75ff654c
sub ebp, edx
pop edx
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
mov dword [esp], ecx
push ebx
mov ebx, 0x6bff974b
dec ebx
add ebx, 0x134f20a9
sub ecx, ebx
pop ebx
sub ecx, 0x6f3ddcff
add ecx, eax
add ecx, 0x6f3ddcff
push edi
push 0x7f4eb7f3
pop edi
add ecx, edi
pop edi
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push edi
mov edi, 0x7e58799e
dec edi
push esi
mov esi, 0x75fe90b9
sub esi, 0x483f4005
add edi, esi
pop esi
push 0
sub dword [esp], edi
mov edi, dword [esp]
add esp, 4
shr edi, 3
add edi, 0x23f362be
push edi
pop dword [0x65b87c]
pop edi
push edx
mov edx, esp
push ebp
mov ebp, 4
add edx, ebp
pop ebp
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ebx
mov dword [esp], ecx
add ecx, 0x7ce5fe99
sub ecx, 0x7fed850e
add ecx, eax
add ecx, 0x7fed850e
push esi
mov esi, 0x79ff521f
neg esi
inc esi
push ecx
mov ecx, 0x7f564355
add esi, ecx
pop ecx
sub esi, 0x8870f29e
add ecx, 0x7bfab784
sub ecx, esi
sub ecx, 0x7bfab784
pop esi
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0xb54dbb
sub esp, 4
mov dword [esp], esi
mov esi, esp
push ebp
mov ebp, 0x6bf9aca2
shl ebp, 3
xor ebp, 0x5fcd6514
add esi, ebp
pop ebp
push edi
mov edi, 0x3bda4dd5
inc edi
neg edi
and edi, 0x5e5f1240
xor edi, 0x73fd17f1
add edi, 0xc807fa13
sub esi, edi
pop edi
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
push esi
mov esi, esp
add esi, 4
push edx
mov edx, 4
sub esi, edx
pop edx
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ecx
pop ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
push dword [ebp - 0x10]
mov ecx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
mov esp, dword [esp]
push edx
mov dword [esp], ecx
push ebp
push 0x153016ae
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
push 0x6bd4625d
mov dword [esp], esi
mov dword [esp], ecx
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop edx
push ebp
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xacff62
push ebx
mov ebx, esp
add ebx, 4
push edi
mov edi, 0x7eff107a
add edi, 0x45deafa2
xor edi, 0x75eff9f1
shl edi, 2
xor edi, 0xc4c8e7b0
sub ebx, edi
pop edi
xchg dword [esp], ebx
pop esp
mov dword [esp], edx
mov dword [esp], 0x66057c3f
mov dword [esp], ebx
push ecx
push ebx
push 0x7f62ea59
pop ebx
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ecx
pop ebx
mov ebx, dword [esp]
push ecx
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
mov ecx, dword [esp]
add esp, 4
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ebp
push 0x67af9eda
pop ebp
dec ebp
shl ebp, 5
and ebp, 0x79f3d54d
add ebp, 0xf781a373
push ebp
pop dword [0x65b87e]
mov ebp, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xbc44ec
jne 0xc9d8a0
jmp 0xc34316
jmp dword [eax + 0xa5bd08]
push eax
mov eax, esp
add eax, 4
sub eax, 4
push eax
push dword [esp + 4]
mov eax, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], edi
mov dword [esp], ecx
push esi
mov esi, 0x3bfc065d
push eax
mov eax, 0x7dcdf1f3
and esi, eax
pop eax
neg esi
neg esi
add esi, 0x4df58b9c
sub esi, 0x58429f33
add ecx, esi
pop esi
sub ecx, 0x7f874ae8
sub ecx, 0x67df31db
add ecx, eax
add ecx, 0x67df31db
add ecx, 0x7f874ae8
sub ecx, 0x2f7eecba
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
sub esp, 4
mov dword [esp], esi
push edx
mov edx, 0x3ea41bd6
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
pop dword [ebp - 0x10]
jmp 0xc328c0
sub esp, 4
mov dword [esp], esi
sub esp, 4
mov dword [esp], edi
mov edi, 0x3c68c75d
mov dword [esp + 4], edi
pop edi
mov dword [esp], ebx
push esi
mov dword [esp], ecx
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
and al, byte [0x65804a]
push eax
mov dword [esp], ebx
push eax
mov eax, 0x699ca645
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
mov dword [esp], eax
push ebx
mov dword [esp], 0x697accf2
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xc0f780
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
push esi
mov esi, 0x4522e549
mov dword [esp + 4], esi
pop esi
mov dword [esp], eax
sub esp, 4
mov dword [esp], edi
mov dword [esp], 0x2477cc63
mov dword [esp], esi
mov dword [esp], ebx
pop eax
mov eax, dword [esp]
push ebx
mov ebx, esp
push ebp
push 4
pop ebp
sub ebx, 0x56ff567f
add ebx, ebp
add ebx, 0x56ff567f
pop ebp
add ebx, 4
xchg dword [esp], ebx
pop esp
xor edx, edx
sub esp, 4
mov dword [esp], ebp
mov dword [esp], ecx
mov dword [esp], ebp
mov dword [esp], edx
push eax
mov dword [esp], ecx
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop edx
push ebp
mov ebp, esp
push eax
mov eax, 4
add ebp, eax
pop eax
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0xb16fa2
push dword [ebp - 0x18]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xb5fbe3
push eax
mov dword [esp], 0x6d721b04
mov dword [esp], ecx
mov dword [esp], 0x2a90b0b8
mov dword [esp], eax
mov dword [esp], ecx
add ecx, 0x37aa420d
add ecx, 0x7df5a4e2
sub ecx, 0x7f3f921e
sub ecx, 0x7bf8823e
add ecx, eax
add ecx, 0x7bf8823e
add ecx, 0x7f3f921e
push ebp
mov ebp, 0x7df5a4e2
sub ecx, ebp
pop ebp
sub ecx, 0x37aa420d
push dword [esp]
pop ecx
push esi
push esp
mov esi, dword [esp]
add esp, 4
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push ebx
push 0x7649647b
mov dword [esp], ecx
push 0x65ba58
pop ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
push esi
mov dword [esp], 0x25da1bde
mov dword [esp], eax
push ebp
mov ebp, 0x6175fe82
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ebx
push edx
mov dword [esp], ecx
mov dword [esp], 0x7c9a9110
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
mov ebx, dword [esp]
push edi
push esp
mov edi, dword [esp]
add esp, 4
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0xb80731
push 0x3d90ae70
mov dword [esp], ebp
push esi
mov esi, 0x2765ff5e
mov dword [esp + 4], esi
pop esi
mov dword [esp], eax
pop dword [0x85bce8]
jmp 0xb71f81
push 0x32f0a7dd
mov dword [esp], edi
push eax
mov dword [esp], 0x78707061
pop edi
push edi
pop dword [0x65b878]
pop edi
jmp 0xc2e24a
sub esp, 4
mov dword [esp], esi
mov dword [esp], edx
mov dword [esp], edi
mov dword [esp], 0x7998f527
mov dword [esp], ecx
sub ecx, 0x6de9b25e
add ecx, eax
push 0x7f37191b
mov dword [esp], eax
mov eax, 0x7deb720c
dec eax
add eax, 0x28cf128f
push ebp
mov ebp, 0x495b2118
neg ebp
xor ebp, 0xd15b2c6f
or eax, ebp
pop ebp
dec eax
inc eax
push ebp
mov ebp, 0x85e9bbbf
add eax, ebp
pop ebp
add ecx, eax
pop eax
push dword [esp]
pop ecx
push ecx
mov ecx, esp
push esi
mov esi, 0x3ffbfb6f
sub esi, 0x6ff998a7
inc esi
xor esi, 0xd00262cd
add ecx, esi
pop esi
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
push dword [ebp - 0x18]
mov eax, dword [esp]
push esi
mov esi, esp
push ecx
mov ecx, 0x33ca1ee0
neg ecx
add ecx, 0x33ca1ee4
sub esi, 0x73ffc525
add esi, ecx
add esi, 0x73ffc525
pop ecx
add esi, 4
xchg dword [esp], esi
pop esp
push ecx
push ebx
mov ebx, 0x426b0895
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edi
mov dword [esp], 0x60a84696
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push edx
push esp
pop edx
push edi
mov edi, 0x73b6a17a
shr edi, 8
inc edi
neg edi
add edi, 0x73b6a6
add edx, edi
pop edi
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop edx
push ecx
mov ecx, esp
add ecx, 4
push ebp
mov ebp, 4
add ecx, ebp
pop ebp
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
jmp 0xaf57e1
push eax
mov dword [esp], 0x7fd451
mov dword [esp], eax
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
push ebp
mov ebp, 4
sub eax, 0x77ff6ab7
add eax, ebp
add eax, 0x77ff6ab7
pop ebp
xchg dword [esp], eax
pop esp
push dword [esp]
pop edx
push eax
push esp
pop eax
push edi
mov edi, 0x7d6f88d2
sub edi, 0x7d6f88ce
add eax, edi
pop edi
add eax, 4
xchg dword [esp], eax
pop esp
push dword [ebp - 4]
push dword [esp]
pop ecx
push esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
push ebp
mov ebp, esp
push esi
mov esi, 0x434e71c1
sub esi, 0x5f821c4e
inc esi
sub esi, 0xe3cc5570
sub ebp, 0x46ceaef7
add ebp, esi
add ebp, 0x46ceaef7
pop esi
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], ecx
push ebp
mov ebp, 0x7d6f0f8a
add ecx, ebp
mov ebp, dword [esp]
add esp, 4
add ecx, eax
push edx
mov dword [esp], ebp
mov ebp, 0xafae617
or ebp, 0x3cff7f3a
inc ebp
add ebp, 0x7bd780bc
inc ebp
dec ebp
add ebp, 0xc2978f8e
sub ecx, ebp
pop ebp
mov ecx, dword [esp]
push eax
mov eax, esp
add eax, 4
push esi
mov esi, 0x57bf8fde
or esi, 0x77cce1e3
neg esi
or esi, 0x6eefe172
add esi, 0x2d7ff1ad
push ecx
mov ecx, 0x777c8b23
add ecx, 0x77374508
sub ecx, 0x3dfdb127
add ecx, 0x6bb9c420
xor esi, ecx
pop ecx
sub eax, 0x77bb8b68
add eax, esi
add eax, 0x77bb8b68
pop esi
xchg dword [esp], eax
pop esp
jmp 0xc429a6