Function at 0x52c54b
Capabilities:
Accept command line arguments

Disassembly:
push dword [ebp - 0x18]
mov ecx, dword [esp]
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x5b9a72
push edi
push edi
mov dword [esp], 0x69757473
push dword [esp]
pop edi
add esp, 4
mov dword [0x4bab1e], edi
pop edi
jmp 0x5937e1
push 0x7d73d9a3
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], eax
push 0x1e4f844
mov dword [esp], edx
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
pop eax
push ebp
mov ebp, esp
push ebx
mov ebx, 0x5eef0439
shl ebx, 1
dec ebx
inc ebx
add ebx, 0x4221f792
add ebp, ebx
pop ebx
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push edi
push esp
pop edi
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], edx
pop dword [0x4ba014]
jmp 0x553b97
push edx
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
push esi
mov esi, 0x5e7b25c6
shl esi, 3
inc esi
shl esi, 1
xor esi, 0x7bdf7d1e
xor esi, 0x9c6d2178
add edx, esi
pop esi
xchg dword [esp], edx
mov esp, dword [esp]
push dword [0x4ba010]
push dword [esp]
push dword [esp]
pop edx
add esp, 4
add esp, 4
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
mov dword [esp], ebx
mov dword [esp], ebp
mov dword [esp], ecx
push ebx
mov ebx, 0x3fe8186d
add ecx, ebx
pop ebx
add ecx, 0x707d05c7
add ecx, eax
sub ecx, 0x707d05c7
push ecx
mov dword [esp], edi
mov edi, 0x3fe8186d
sub ecx, edi
pop edi
push dword [esp]
mov ecx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x5ed7ff
jmp 0x417a5c
push ecx
mov dword [esp], 0x751e979
mov dword [esp], eax
push ebp
mov ebp, 0x4bacf8
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
jmp 0x51e92e
push dword [0x4badbc]
mov esi, dword [esp]
push eax
mov eax, esp
push edx
mov edx, 4
add eax, edx
pop edx
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x61bbf2
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edi
mov dword [esp], 0x6c1a8b8a
mov dword [esp], ecx
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
pop eax
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop eax
push edi
mov edi, esp
push esi
mov esi, 4
add edi, esi
pop esi
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push ebx
push esp
pop ebx
add ebx, 4
push edi
mov edi, 4
sub ebx, edi
pop edi
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ebx
push eax
mov dword [esp], 0x6e41643b
mov dword [esp], ecx
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
add esp, 4
jmp 0x513116
push esi
push ebp
push 0x4bacf8
mov ebp, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp + 4], ebp
pop ebp
push ebx
push 0x1a44efab
mov dword [esp], edx
push 0x2a4652e1
pop edx
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
sub ecx, 0x7ef7fb62
sub esp, 4
mov dword [esp], ebx
mov dword [esp], edx
mov edx, 0x5fe3fb2a
and edx, 0x767ee9ac
add edx, 0x7fef186b
or edx, 0x7e2d760f
inc edx
add edx, 0x60800d84
sub ecx, edx
pop edx
add ecx, eax
add ecx, 0x5eff8524
add ecx, 0x7ef7fb62
push dword [esp]
pop ecx
push ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 4
add ebx, edx
mov edx, dword [esp]
add esp, 4
xchg dword [esp], ebx
pop esp
jmp 0x51661b
sub esp, 4
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
push eax
mov eax, 4
sub ebx, eax
pop eax
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
push ebx
mov ebx, esp
push edi
mov edi, 0x3ff6b52c
not edi
shl edi, 6
dec edi
or edi, 0x1575e002
add edi, 0xe8880b45
add ebx, edi
pop edi
sub ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov dword [esp], ecx
pop ebx
mov ebx, dword [esp]
push esi
push ebp
mov dword [esp], esp
add dword [esp], 4
pop esi
add esi, 4
push ebp
mov ebp, 4
add esi, ebp
pop ebp
xchg dword [esp], esi
pop esp
push esi
mov dword [esp], 0x610e4d40
mov dword [esp], ebx
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0x53a4bb
push edi
push 0x6225a25
mov dword [esp], ecx
push 0xb754a5b
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
push 0x1dfccbcb
mov dword [esp], ebx
mov eax, dword [esp]
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
push esi
mov esi, 4
add edx, esi
mov esi, dword [esp]
add esp, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
jmp dword [eax + 0x4bbfe8]
mov cx, word [eax]
jmp 0x51261d
cmp ecx, dword [ebp - 0x1c]
jmp 0x524c49
push ecx
push ebx
mov ebx, 0x6a990beb
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], eax
pop dword [ebp - 0x10]
push ebp
push esp
pop ebp
push edi
mov edi, 0x7d9f42bd
dec edi
inc edi
add edi, 0x8260bd47
add ebp, edi
pop edi
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], esi
mov dword [esp], ebx
push 0x6f92f3c
mov dword [esp], ecx
mov ebx, dword [esp]
push 0x246dd939
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
jmp 0x5991e3
push edx
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], ebx
mov dword [esp], edx
push ebp
mov dword [esp], 0x382f4b49
mov dword [esp], ecx
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov edx, dword [esp]
push edi
push esp
pop edi
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
mov esp, dword [esp]
push 0x39858145
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x4bacf8
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
jmp 0x5448cb
mov cl, byte [0x4bab21]
jmp 0x5b4b13
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x531b9e
and al, byte [0x4ba02a]
jmp 0x59a9b5
push esi
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
mov dword [esp], eax
pop dword [0x4badbc]
push ebp
mov ebp, esp
push 0x2fb7bce6
mov dword [esp], esi
mov esi, 0x4ee7eab4
add esi, 0xb1181550
add ebp, esi
pop esi
push ecx
mov ecx, 4
sub ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
mov edx, dword [esp]
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
push 0x25b4c9fd
mov dword [esp], edx
mov edx, 4
add esi, edx
pop edx
xchg dword [esp], esi
pop esp
jmp 0x52954b
push ebx
push esp
pop ebx
push esi
mov esi, 4
add ebx, esi
pop esi
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], esi
mov dword [esp], edx
push esi
mov dword [esp], ecx
mov edx, dword [esp]
push esi
mov esi, esp
push ebx
mov ebx, 4
add esi, ebx
pop ebx
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop edx
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x5ed6ad
push edi
mov edi, esp
push ebx
push edx
push 0x73fda261
pop edx
or edx, 0x77fbc1d9
xor edx, 0x1f778c14
dec edx
shr edx, 1
add edx, 0xcbbbc80e
mov ebx, edx
pop edx
add edi, ebx
pop ebx
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push esi
mov esi, esp
push edx
mov edx, 4
add esi, edx
pop edx
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push dword [esp]
pop eax
push ecx
mov ecx, esp
push ebp
mov ebp, 0x5cf7772e
xor ebp, 0x77ff0c4d
sub ebp, 0x33b59cf6
shl ebp, 8
or ebp, 0x47ee5581
inc ebp
sub ebp, 0x57fe7d7e
add ecx, ebp
pop ebp
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push di
push ebp
push 0x30d
pop bp
xor bp, 0xd8af
shr bp, 3
inc bp
xor bp, 0xe757
add bp, 0x7042
mov di, bp
push dword [esp]
pop ebp
add esp, 4
mov word [0x4bab20], di
pop di
push esi
push edx
mov edx, 0x6a8bb0f2
mov dword [esp + 4], edx
pop edx
mov dword [esp], ebx
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
jmp 0x516610
push 0x4cb60a3a
mov dword [esp], ebx
push edx
mov edx, 0x7771f472
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
pop dword [0x4bb7b0]
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edx
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
add esp, 4
jmp 0x508bbe
ja 0x553b97
jmp 0x539e7e
jae 0x540f56
jmp 0x5a879b
je 0x57c915
jmp 0x56da17
je 0x52e74b
jmp 0x525401
push 0xca92010
mov dword [esp], ebx
mov dword [esp], ebp
mov dword [esp], 0x19ab18e8
mov dword [esp], ebp
mov dword [esp], eax
jmp 0x57d463
push ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
mov dword [esp], edx
push eax
push esp
pop eax
add eax, 4
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], ecx
pop edx
push dword [esp]
pop edx
push edi
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
push dword [ebp - 0x10]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
sub esp, 4
mov dword [esp], ecx
push esp
pop ecx
push eax
mov eax, 0x1fd3eeab
and eax, 0x7d7fac41
shr eax, 2
not eax
xor eax, 0x74f12c4b
and eax, 0x33ffff43
xor eax, 0x5a3804
add ecx, eax
pop eax
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
push 0x9bfa29f
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
add esp, 4
jmp 0x5294fe
call fcn.004176e0
jmp 0x549c42
jmp 0x57c915
xor ecx, ecx
jmp 0x512615
cmp esi, eax
jmp 0x5492fc
push eax
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebp
mov dword [esp], edx
jmp 0x5253f7
je 0x584ccb
jmp 0x57d459
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
jmp 0x52342c
push 0x78b87f7d
mov dword [esp], ebp
push esi
push 0x3134a0cc
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], edx
push edi
mov edi, esp
push ecx
push 4
pop ecx
add edi, ecx
pop ecx
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
pop edx
push dword [esp]
mov edx, dword [esp]
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
sub esp, 4
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
pop dword [ebp - 0x18]
push edi
mov edi, esp
add edi, 4
sub edi, 4
push edi
push dword [esp + 4]
mov edi, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], edi
mov dword [esp], ebx
push ebp
mov dword [esp], ecx
push dword [esp]
pop ebx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edx
mov edx, 4
add ebp, edx
pop edx
xchg dword [esp], ebp
pop esp
jmp 0x52530c
push dword [ebp - 0x18]
push dword [esp]
pop eax
push eax
mov eax, esp
push edx
mov edx, 0x5fef88b9
add edx, 0x7f834e80
sub edx, 0xdf72d735
add eax, edx
pop edx
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x5838a5
push eax
mov eax, esp
push ebx
mov ebx, 0x7f178331
sub ebx, 0xffffffff
sub ebx, 0x75dbd9cf
shl ebx, 5
neg ebx
add ebx, 0x27752c64
add eax, ebx
pop ebx
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edx
pop dword [0x4ba010]
push ebp
mov ebp, esp
add ebp, 4
push edi
push 4
pop edi
sub ebp, edi
mov edi, dword [esp]
add esp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
push 0x6cc835f4
mov dword [esp], edi
mov dword [esp], eax
mov dword [esp], 0x3b755d5b
mov dword [esp], ebx
pop eax
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
push eax
mov eax, 0x2ffedaef
or eax, 0x7ffb61a6
xor eax, 0x7ffffbeb
add ebx, eax
pop eax
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x55b1b6
push edi
mov edi, esp
add edi, 4
push ebx
mov ebx, 0x79168c8d
sub ebx, 0x76c60eef
sub ebx, 0x5fff627c
or ebx, 0x6bde8139
add ebx, 0x142064c9
sub edi, ebx
mov ebx, dword [esp]
add esp, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
push eax
mov eax, 4
add ebx, eax
pop eax
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [ebp - 0x18]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push eax
push esp
pop eax
push esi
mov esi, 0xddf0d73
xor esi, 0xddf0d77
add eax, esi
mov esi, dword [esp]
add esp, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edx
push edi
push edx
push 0x75254066
pop edx
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push edi
push esp
pop edi
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
mov edi, dword [esp]
add esp, 4
pop dword [esp]
pop esp
jmp 0x52bc24
push ebx
push eax
push esi
mov esi, 0x7fffe018
mov dword [esp + 4], esi
pop esi
pop ebx
shl ebx, 7
push ebp
mov ebp, 0xfff00c0a
xor ebx, ebp
pop ebp
mov dword [ebp - 0x14], ebx
pop ebx
jmp 0x55ba49
push edi
push 0x68d898e7
mov dword [esp], ecx
mov dword [esp], edx
mov edx, 0x4bab18
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
jmp 0x5459a5
test eax, eax
jmp 0x524c3e
shr ecx, 2
jmp 0x50d436
push ebx
push ebx
mov dword [esp], eax
push ebp
mov ebp, 0x37545f32
mov eax, ebp
pop ebp
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebx
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop ebx
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [0x4ba014]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x5caad4
cmp dword [0x4bbfe8], 0x23f0
jmp 0x5234be
push dword [ebp - 4]
push dword [esp]
pop ecx
push ebx
mov ebx, esp
add ebx, 4
push eax
mov eax, 4
add ebx, eax
pop eax
xchg dword [esp], ebx
pop esp
push ebx
mov ebx, esp
add ebx, 4
push esi
push edx
mov dword [esp], 4
pop esi
sub ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
push 0x5601be41
mov dword [esp], ecx
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop ebx
push esi
push esp
pop esi
push ebp
mov ebp, 4
add esi, ebp
pop ebp
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x5b7a6d
push ebx
mov dword [esp], ebp
push edx
mov edx, 0x4bacf8
mov dword [esp + 4], edx
push dword [esp]
pop edx
add esp, 4
push ebp
mov ebp, esp
push esi
mov esi, 0x65b7fd11
add esi, 0x497e90a5
dec esi
shr esi, 4
inc esi
add esi, 0xf50c9728
add ebp, esi
pop esi
sub ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
mov dword [esp], ecx
mov dword [esp], ebx
push ecx
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
add esp, 4
mov ebx, dword [esp]
push ebx
push eax
mov eax, 0x520b84b
mov dword [esp + 4], eax
pop eax
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x50f487
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x573f5e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x575a1e
push 0x3d3818df
mov dword [esp], eax
push esi
mov esi, 0x212d44d7
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], eax
push ebx
push dword [esp]
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push esi
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x545a0d
push esi
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
pop dword [0x4baecc]
push eax
mov dword [esp], edx
mov dword [esp], ebx
mov dword [esp], edi
mov dword [esp], ecx
mov dword [esp], edx
push esi
mov dword [esp], 0x798f89bc
mov dword [esp], ecx
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x417a5c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x526d13
jne 0x5b2c6e
jmp 0x51215d
imul eax, ecx
jmp 0x539cf6
add esp, 4
jmp 0x5358d6
mov dx, word [ecx]
jmp 0x553000
cmp edx, dword [ebp - 0xc]
jmp 0x529540
push ecx
push esp
pop ecx
add ecx, 4
push ebx
mov ebx, 4
sub ecx, ebx
pop ebx
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], eax
push ebp
mov dword [esp], ebx
mov eax, dword [esp]
push eax
mov eax, esp
push ebp
mov ebp, 0x2fdf9542
or ebp, 0x7eff7b6a
add ebp, 0x7dff2fd4
add ebp, 0x5d7e8a0c
shr ebp, 5
sub ebp, 0x2dbedc6
add eax, ebp
pop ebp
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
mov eax, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add esp, 4
push dword [ebp - 0x10]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x5c2b03
jne 0x5adbf8
jmp 0x558a4d
jmp dword [eax + 0x4bbfe8]
push edi
push esp
pop edi
add edi, 4
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
mov dword [esp], ebp
mov dword [esp], eax
push ecx
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push ebp
mov dword [esp], edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
xor eax, eax
jmp 0x591279
push ebx
push ecx
mov ecx, 8
mov ebx, ecx
mov ecx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov dword [ebp - 8], ebx
mov ebx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], edx
mov dword [esp], ebx
push ebp
mov ebp, 0x7a0a1488
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
push eax
mov eax, 0x3dbfae95
and eax, 0x154fc8fa
dec eax
shl eax, 8
add eax, 0x67e99d88
sub ecx, eax
pop eax
sub ecx, 0x2fbca795
sub ecx, 0x7dfb5cf7
add ecx, eax
add ecx, 0x7dfb5cf7
push eax
mov eax, 0x7aefa687
add eax, 0x5cdda732
add eax, 0x64fda90f
or eax, 0x73b7a615
xor eax, 0x77fe7f5a
sub eax, 0xd844e1f2
add ecx, eax
pop eax
add ecx, 0x77722c88
mov ecx, dword [esp]
push ebx
mov dword [esp], 0x158f0c62
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
jmp 0x5aedeb
sub esp, 4
mov dword [esp], edi
mov dword [esp], 0x339091e1
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], ebx
push ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
mov ebx, dword [esp]
push esi
mov esi, esp
push ecx
mov ecx, 4
add esi, ecx
pop ecx
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
push dword [0x4badbc]
push dword [esp]
pop esi
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push edx
push esp
pop edx
push esi
push 4
pop esi
add edx, esi
pop esi
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
xchg dword [esp], ebx
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x582731
push edx
mov dword [esp], ecx
mov ecx, 0x6dfa113b
xchg ecx, edi
not edi
xchg ecx, edi
shr ecx, 5
add ecx, 0xfb6fe08a
sub edx, 0x77dd07ac
add edx, 0x4e7e7f06
add edx, ecx
sub edx, 0x4e7e7f06
add edx, 0x77dd07ac
pop ecx
jmp 0x5b5aee
push edx
mov dword [esp], esi
mov esi, 7
or ecx, esi
mov esi, dword [esp]
push ebp
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x549c3a
push dword [ebp - 0x18]
push dword [esp]
pop eax
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push ebp
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x55ee9b35
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop ebx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop ebx
push eax
mov eax, esp
push edi
mov edi, 4
add eax, edi
mov edi, dword [esp]
add esp, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x526d0c
push dword [ebp - 0x14]
push dword [esp]
mov ecx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add esp, 4
push ecx
push esp
pop ecx
push edx
mov edx, 4
add ecx, edx
pop edx
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push ecx
mov ecx, 4
add ebp, 0x5ebdfa2b
add ebp, ecx
sub ebp, 0x5ebdfa2b
pop ecx
xchg dword [esp], ebp
pop esp
mov edx, dword [esp]
sub esp, 4
mov dword [esp], ecx
push esp
pop ecx
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x5cc4f4
push 0x234ad76a
mov dword [esp], ebp
push ecx
mov dword [esp], eax
mov eax, 0x16996bca
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
jmp 0x5b59bc
push dword [0x4bb7b0]
push dword [esp]
push dword [esp]
pop eax
add esp, 4
add esp, 4
jmp 0x563488
mov dword [esp], edx
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x574ddc9e
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebx
push 0x2db7133c
mov dword [esp], ecx
mov ebx, dword [esp]
push edx
mov edx, esp
push edi
mov edi, 0x77f78cbe
shr edi, 2
add edi, 0xe2021cd5
add edx, edi
pop edi
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [ebp - 0x10]
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push ecx
mov dword [esp], edx
mov edx, esp
push ebp
mov ebp, 4
add edx, ebp
pop ebp
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push eax
mov eax, esp
push ecx
mov ecx, 0x2fa3a030
add ecx, 0x6c3b8938
inc ecx
dec ecx
add ecx, 0x6420d69c
add eax, ecx
pop ecx
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push dword [esp]
pop ebx
push edx
mov edx, esp
push edi
mov edi, 0x7f3e9a55
shr edi, 3
dec edi
and edi, 0x77ab62f0
xor edi, 0x7a34244
add edx, edi
pop edi
push ecx
mov ecx, 4
add edx, ecx
pop ecx
xchg dword [esp], edx
pop esp
jmp 0x5677f7
cmp esi, eax
jmp 0x558a42
cmp dword [ebp - 0x10], 0x1000000
jmp 0x5234b3
jmp 0x57c915
call sub.IMM32.dll_ImmGetContext
jmp 0x519216
push 0x3e62c6e8
mov dword [esp], ebx
mov ebx, esp
push edx
mov edx, 4
add ebx, edx
pop edx
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edi
mov dword [esp], ecx
push edx
mov edx, 0x7ef9009c
add ecx, edx
push dword [esp]
pop edx
add esp, 4
add ecx, eax
push edx
mov edx, 0x6fd7d808
neg edx
shr edx, 2
shl edx, 7
or edx, 0x3eaf8f00
xor edx, 0x4156ff9c
sub ecx, edx
pop edx
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push esi
mov esi, esp
push edi
mov edi, 0x7ae6fb1f
sub edi, 0x775feaa4
dec edi
not edi
xor edi, 0x7cfd4862
and edi, 0x37ba96a7
add edi, 0xff7f795d
add esi, edi
pop edi
add esi, 4
xchg dword [esp], esi
pop esp
push dword [0x4ba018]
push dword [esp]
mov ecx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
jmp 0x56b26c
push ebp
mov dword [esp], edx
mov edx, esp
add edx, 4
push ecx
mov ecx, 0x6d3dd967
shr ecx, 7
dec ecx
xor ecx, 0xda7bb5
sub edx, ecx
pop ecx
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], edx
push 0x76a69bca
mov dword [esp], ecx
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov edx, dword [esp]
push 0x3185d8d
mov dword [esp], eax
mov eax, esp
push edi
mov edi, 4
add eax, edi
pop edi
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
push edx
push 5
mov edx, dword [esp]
add esp, 4
add edx, eax
push ecx
mov ecx, 0
add ecx, edx
xor esi, dword [ecx]
pop ecx
mov edx, dword [esp]
add esp, 4
jmp 0x5448d6
push 0x703d887f
mov dword [esp], edx
push ebx
mov ebx, 0x2968d4e3
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], eax
push ecx
mov dword [esp], ebx
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
add esp, 4
push 0xfec61d9
mov dword [esp], edx
mov dword [esp], ebx
mov ebx, 0x3c
add ebx, edx
push edx
mov edx, 0
add edx, ebx
add eax, dword [edx]
mov edx, dword [esp]
add esp, 4
pop ebx
jmp 0x510984
push edi
mov edi, esp
add edi, 4
push esi
push edi
mov edi, 4
mov esi, edi
pop edi
sub edi, esi
pop esi
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ecx
add ecx, 0x7bcf1253
add ecx, eax
push 0x15156672
mov dword [esp], ebp
mov ebp, 0x4fdf7c85
inc ebp
push ecx
mov ecx, 0x295dd2cb
sub ecx, 0xfd6e3cfe
add ebp, ecx
pop ecx
sub ecx, ebp
mov ebp, dword [esp]
add esp, 4
push dword [esp]
pop ecx
push edi
mov edi, esp
add edi, 4
push ecx
mov ecx, 0x75af841f
neg ecx
neg ecx
neg ecx
sub ecx, 0x8a507bdd
add edi, ecx
pop ecx
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
push dword [0x4badbc]
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 4
add eax, 0x7f6f2f3f
add eax, ecx
sub eax, 0x7f6f2f3f
pop ecx
xchg dword [esp], eax
pop esp
push ebx
mov ebx, esp
push edi
mov edi, 0x742e8a1b
sub edi, 0x742e8a17
add ebx, edi
pop edi
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], esi
mov dword [esp], edi
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push edx
mov edx, esp
push ebx
mov ebx, 0x7bf52850
sub ebx, 0x7fbfd1af
dec ebx
and ebx, 0x6fb71ebc
add ebx, 0x93cae964
add edx, ebx
pop ebx
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop ebx
push eax
mov eax, esp
push esi
mov esi, 4
add eax, esi
pop esi
push esi
mov esi, 0x13f50597
sub esi, 0x77fc159a
shl esi, 8
or esi, 0x1fdf6640
inc esi
not esi
xor esi, 0xba
add eax, esi
pop esi
xchg dword [esp], eax
pop esp
jmp 0x524ee6
mov al, byte [0x4ba023]
jmp 0x57e97b
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
pop eax
push 0x48c891a5
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push ecx
mov dword [esp], edi
mov edi, 0x6c6c642e
sub esp, 4
mov dword [esp], edi
pop dword [0x4bab22]
mov edi, dword [esp]
add esp, 4
push esi
mov dword [esp], 0x4f258426
mov dword [esp], eax
mov dword [esp], edx
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push eax
mov eax, esp
push ebx
mov ebx, 0x6bbe0c18
and ebx, 0x77ffd72e
or ebx, 0x79ffef9e
shr ebx, 5
add ebx, 0xfc200088
add eax, ebx
pop ebx
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov ebx, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
push edx
mov edx, 4
add ecx, edx
pop edx
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0x531b7b
push dword [ebp - 0x10]
push dword [esp]
pop ecx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ebp
mov ebp, esp
add ebp, 4
push ebx
push 4
pop ebx
sub ebp, ebx
pop ebx
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], eax
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop eax
push eax
mov eax, esp
add eax, 4
push esi
mov esi, 4
add eax, 0x7b56bce3
add eax, esi
sub eax, 0x7b56bce3
pop esi
xchg dword [esp], eax
pop esp
jmp 0x52b1e6
push ebp
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop ebp
add ebp, 4
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], ecx
push edx
mov edx, 0x2ede855e
add edx, 0xc4fde27
sub ecx, edx
pop edx
push ebp
mov ebp, 0x1dea15ae
add ebp, 0x3fbfafaa
add ebp, 0x11d28216
sub ecx, ebp
pop ebp
add ecx, eax
add ecx, 0x6f7c476e
push eax
mov eax, 0x3fb9413e
add eax, 0xfb752247
add ecx, eax
pop eax
push dword [esp]
pop ecx
push ebp
mov dword [esp], 0x1f9f40b
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov byte [0x4ba02d], al
jmp 0x5a8724
sub esp, 4
mov dword [esp], ebx
mov dword [esp], ecx
push ebp
mov ebp, 0x6cf81122
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push dword [ebp - 8]
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
push ebx
mov ebx, esp
push esi
mov esi, 0x7b3fef34
add esi, 0x59fc163e
shr esi, 3
add esi, 0xe5587f56
add ebx, esi
pop esi
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], ebp
mov dword [esp], ebx
push edx
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
push ebx
mov ebx, 0x6feb020d
push ebx
not dword [esp]
pop ebx
neg ebx
sub ebx, 0x7afdfddd
shl ebx, 1
sub ebx, 0xe9da085e
add edx, ebx
pop ebx
xchg dword [esp], edx
pop esp
jmp 0x571714
push dword [0x4ba014]
mov ecx, dword [esp]
push esi
mov esi, esp
push edx
mov edx, 0x7fffb043
neg edx
dec edx
add edx, 0x7fffb048
add esi, edx
pop edx
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
jmp 0x535ef8
push ebx
mov dword [esp], 0x642ac5a4
mov dword [esp], edi
push 0x538da
mov dword [esp], edi
mov edi, 0x4bacf8
mov dword [esp + 4], edi
pop edi
jmp 0x5c42e2
push edi
push esi
mov esi, 0x2bc69dba
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
mov dword [esp], 0x4139943a
mov dword [esp], eax
push edx
mov dword [esp], ebx
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
push dword [esp]
pop eax
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push 0x58523d61
mov dword [esp], edx
push 0x78707061
pop edx
push edx
pop dword [0x4bab18]
mov edx, dword [esp]
add esp, 4
push edi
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], edx
push 0x4b40b032
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop edx
push ebx
push esp
mov ebx, dword [esp]
add esp, 4
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x5c4925
sub esp, 4
mov dword [esp], edx
push edx
push 0x4bacf8
pop edx
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
push edx
mov dword [esp], 0x33d3246b
mov dword [esp], ebp
push edx
mov edx, 0xd2a4cbf
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
push ecx
mov dword [esp], esi
mov dword [esp], 0x5deeafd
mov dword [esp], ebp
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
push ebp
mov ebp, 0x3ffe49dd
dec ebp
sub ebp, 0x3ffe49d8
add edi, ebp
pop ebp
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0x5c9132
push esi
mov dword [esp], ebp
push esi
mov esi, 0x28d41df6
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
push edi
mov edi, 4
add esi, edi
pop edi
xchg dword [esp], esi
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
push ebp
mov ebp, 4
add eax, ebp
pop ebp
xchg dword [esp], eax
pop esp
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x706d6f63
push ebx
pop dword [0x4bab1a]
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push eax
mov dword [esp], 0x17a3e26a
mov dword [esp], eax
mov dword [esp], edx
mov dword [esp], edi
mov dword [esp], edx
push esi
mov dword [esp], 0x242dd595
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x50947a
sub esp, 4
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], edx
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
pop edx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add esp, 4
mov byte [0x4bab22], cl
push esi
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], eax
push esi
mov dword [esp], ebx
mov eax, dword [esp]
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
jmp 0x5102de
push edi
mov edi, esp
push ecx
mov ecx, 0x76ff6788
shr ecx, 2
dec ecx
dec ecx
shl ecx, 6
xor ecx, 0x6ff67804
add edi, ecx
pop ecx
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], esi
mov dword [esp], eax
pop dword [0x4baecc]
jmp 0x50d558
sub esp, 4
mov dword [esp], ecx
push ecx
mov ecx, 0x362e56b7
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov eax, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
push edi
mov edi, 4
add ebx, edi
pop edi
xchg dword [esp], ebx
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x5b542b
push ecx
mov dword [esp], edi
push edx
mov edx, 0x3f53d021
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
push dword [esp]
pop eax
push esi
mov esi, esp
push edx
push 0x45f2c29f
pop edx
neg edx
neg edx
inc edx
shr edx, 8
add edx, 0x777e6b82
sub edx, 0x77c45e40
add esi, edx
pop edx
add esi, 4
xchg dword [esp], esi
pop esp
push ecx
push edi
mov edi, 0x7344b955
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], edx
pop dword [ebp - 0x10]
push ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
push edi
mov dword [esp], ebp
mov ebp, 0x76df1c7e
dec ebp
not ebp
push edx
mov dword [esp], ecx
mov ecx, 0x29ab3d26
sub ebp, ecx
pop ecx
sub ecx, ebp
pop ebp
add ecx, eax
add ecx, 0x5f75a65c
mov ecx, dword [esp]
push edi
mov edi, esp
add edi, 4
push esi
mov esi, 0x6f578abe
not esi
and esi, 0x7ff94c81
inc esi
shl esi, 5
push esi
not dword [esp]
pop esi
xor esi, 0xeaf77fbb
add edi, esi
pop esi
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
jmp 0x5f1bcf
xor edx, edx
push ecx
push edi
mov edi, 0x5b4f2e77
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push eax
push esp
mov eax, dword [esp]
add esp, 4
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop edx
push ecx
mov ecx, esp
add ecx, 4
push esi
mov esi, 4
add ecx, esi
pop esi
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
jmp 0x552ff8
jmp 0x539e7e
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push esi
push 4
pop esi
sub ebp, esi
pop esi
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
push edx
mov edx, 0x7e7c3769
not edx
not edx
neg edx
push ebx
mov ebx, 0x3dfd6923
add ebx, 0x7fbb5098
sub ebx, 0x1fbf1602
add ebx, 0x9cc5734e
or edx, ebx
pop ebx
and edx, 0x7dffb04f
push ecx
mov ecx, 0x6650d4f3
xor edx, ecx
mov ecx, dword [esp]
add esp, 4
sub ecx, edx
pop edx
add ecx, eax
add ecx, 0x5fef44f4
push dword [esp]
pop ecx
push edx
push esp
mov edx, dword [esp]
add esp, 4
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], esi
mov dword [esp], 0x13f88e1e
mov dword [esp], ecx
pop dword [0x4bb7a8]
jmp 0x5b7abe
push 0x39681c68
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x31030567
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
add ecx, 0x73d9d90d
add ecx, 0x3dbd68b5
add ecx, eax
sub ecx, 0x3dbd68b5
push ebx
push edx
mov dword [esp], 0x73d9d90d
pop ebx
sub ecx, ebx
pop ebx
mov ecx, dword [esp]
push ebx
push esp
pop ebx
push edx
mov edx, 4
add ebx, 0x7e6d97f6
add ebx, edx
sub ebx, 0x7e6d97f6
pop edx
add ebx, 4
xchg dword [esp], ebx
pop esp
push edx
push 0x7df6716d
pop edx
not edx
and edx, 0x7eb672f5
sub edx, 0x7ebdeed5
push esi
mov esi, 0x7bb3df35
push edi
mov edi, 0x667f65e5
neg edi
or edi, 0x7dfbf1ea
xor edi, 0x77495d38
sub edi, 0x531b076d
sub edi, 0xbaa875ce
xor esi, edi
pop edi
shl esi, 3
sub esi, 0x5f7eb8a0
inc esi
not esi
xor esi, 0x4b2a7176
add edx, esi
pop esi
push ecx
mov ecx, 0x2ddfed43
add ecx, 0xc51f8a38
sub edx, ecx
pop ecx
sub eax, edx
pop edx
jmp 0x512cd4
push edx
mov dword [esp], eax
push ebx
mov ebx, 0x32b17f13
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
mov dword [esp], eax
push edi
mov dword [esp], ebx
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
mov eax, dword [esp]
push eax
mov eax, esp
push edx
mov edx, 4
push edx
mov edx, 0x79efad53
add eax, edx
pop edx
add eax, edx
sub eax, 0x79efad53
pop edx
add eax, 4
xchg dword [esp], eax
pop esp
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x7ccebcbc
mov dword [esp], esi
push ecx
push 0x620dba05
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
sub esp, 4
mov dword [esp], edx
mov edx, 0x5d1f37c5
dec edx
neg edx
shl edx, 6
shr edx, 5
add edx, 0x5a39f218
add ecx, edx
pop edx
add ecx, eax
push eax
mov dword [esp], esi
mov esi, 0x7f7cf0ec
and esi, 0x7ff8bddc
add esi, 0xe082d1c4
sub ecx, esi
pop esi
mov ecx, dword [esp]
push eax
mov eax, esp
add eax, 4
push edi
mov edi, 4
add eax, edi
mov edi, dword [esp]
add esp, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
jmp 0x50d74e
push edi
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop edi
add edi, 4
sub edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], ebx
push ebx
mov dword [esp], ecx
mov ebx, dword [esp]
push edi
mov edi, esp
push ecx
mov ecx, 4
add edi, ecx
pop ecx
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
pop ebx
push edi
mov edi, esp
push eax
mov eax, 0x17799bd9
neg eax
add eax, 0x17799bdd
add edi, eax
pop eax
push edx
mov edx, 4
add edi, edx
pop edx
xchg dword [esp], edi
pop esp
sub esp, 4
mov dword [esp], esi
mov esi, 0x5f9fb79e
add esi, 0xced0b1d5
push esi
pop dword [0x4bab1c]
push dword [esp]
pop esi
add esp, 4
jmp 0x51eca0
push ebp
push esp
mov ebp, dword [esp]
add esp, 4
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], ebx
push 0x589ad3e1
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
mov ebx, dword [esp]
push 0x6ab08e97
mov dword [esp], eax
mov eax, esp
add eax, 4
push edx
mov edx, 4
add eax, edx
pop edx
xchg dword [esp], eax
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov dword [esp], ebx
mov dword [esp], esi
mov dword [esp], edx
push 0x531251ee
mov dword [esp], ecx
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push eax
mov eax, 4
add ebp, eax
pop eax
xchg dword [esp], ebp
pop esp
push dword [esp]
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x59b946
push 0x2823fd4a
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], esi
mov dword [esp], ecx
mov dword [esp], ebx
push ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
pop ebx
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
and edx, eax
push ecx
push 0xee5ad93
mov dword [esp], ebp
mov ebp, 0x572adc0a
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
mov dword [esp], ebx
push ebx
mov ebx, esp
add ebx, 4
push ecx
mov ecx, 0x7eff46b5
sub ecx, 0x6dafc94c
not ecx
add ecx, 0x114f7d6e
sub ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push ebp
mov ebp, esp
push edx
mov edx, 4
add ebp, edx
pop edx
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0x50d2c9
push 0x6f227ea9
mov dword [esp], edx
push edx
mov edx, 0x75165040
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
mov dword [esp], edx
push eax
mov eax, esp
push ebx
mov ebx, 4
add eax, ebx
pop ebx
push ebp
mov ebp, 0x59fbd459
not ebp
neg ebp
shl ebp, 8
or ebp, 0xaf1830a
sub ebp, 0xfbf5db06
sub eax, ebp
pop ebp
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
lea edx, [ecx + eax + 0x4bab08]
push ebp
mov ebp, esp
push ecx
mov ecx, 0x76de9202
add ecx, 0x376cb411
add ecx, 0xffffffff
not ecx
sub ecx, 0x51b4b9e9
add ebp, ecx
pop ecx
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push dword [esp]
pop eax
push edi
push esp
mov edi, dword [esp]
add esp, 4
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x573f40
push dword [0x4bb7b0]
push dword [esp]
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
jmp 0x50d771
push ecx
push 0x4fff4ae3
pop ecx
push ebp
mov ebp, 0x7e3fe4ae
shl ebp, 1
add ebp, 0x7f79f5d0
sub edx, ebp
pop ebp
sub edx, ecx
add edx, 0x7bf9bf2c
pop ecx
sub edx, ecx
add edx, 0x4fff4ae3
push eax
mov dword [esp], 0x74ac8ebc
mov dword [esp], ebx
mov ebx, esp
push eax
mov eax, 4
add ebx, eax
pop eax
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
sub ecx, 0x5e77e38d
add ecx, eax
sub esp, 4
mov dword [esp], eax
mov dword [esp], edx
mov edx, 0x5e77e38d
sub ecx, 0x4ed653f3
add ecx, edx
add ecx, 0x4ed653f3
pop edx
push dword [esp]
pop ecx
push ebp
mov ebp, esp
push ecx
mov ecx, 0x7ff78ddc
shr ecx, 1
neg ecx
add ecx, 0x3ffbc6f2
add ebp, ecx
pop ecx
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x52c519
mov al, byte [0x4ba02d]
push ecx
push edi
mov edi, 0x55c429a7
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], ecx
mov dword [esp], ebx
push edx
mov dword [esp], ecx
push dword [esp]
pop ebx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
jmp 0x5170a6
sub esp, 4
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], ecx
push ebp
push eax
mov eax, 0x2affafa8
and eax, 0x33bd0604
xor eax, 0x7f8f5cd3
shr eax, 2
not eax
and eax, 0x5fbbe0b0
xor eax, 0x1f2c23da
mov ebp, eax
mov eax, dword [esp]
add esp, 4
sub ecx, ebp
pop ebp
add ecx, eax
push edx
mov edx, 0x579f43da
add ecx, edx
pop edx
push dword [esp]
pop ecx
push edi
mov edi, esp
add edi, 4
push edx
mov edx, 4
add edi, edx
pop edx
xchg dword [esp], edi
mov esp, dword [esp]
push eax
mov dword [esp], ebx
mov ebx, 3
sub ebx, 0x777f7a76
sub ebx, 0x7fdfe335
add ebx, edx
add ebx, 0x7fdfe335
push esi
mov esi, 0x777f7a76
add ebx, esi
pop esi
xor esi, dword [ebx]
pop ebx
push esi
mov esi, esp
push ecx
push 4
pop ecx
add esi, ecx
pop ecx
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
mov dword [esp], eax
push ecx
mov dword [esp], ebx
push dword [esp]
pop eax
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov eax, dword [esp]
push ebx
mov ebx, esp
push ecx
mov dword [esp], 0x5a9c0387
mov dword [esp], eax
mov eax, 4
add ebx, eax
pop eax
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x5492f1