Function at 0x5222f2
Capabilities:
Accept command line arguments

Disassembly:
push ecx
mov dword [esp], ebx
push ecx
mov ecx, 0x495d23c2
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], ebx
push edx
mov dword [esp], 0xc48f9d4
stc
dec eax
or al, 0x89
or al, 0x24
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
pop ebx
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [ebp - 0x10]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push edx
mov edx, esp
add edx, 4
push ebp
mov dword [esp], ebx
mov ebx, 0x67af88b4
sub ebx, 0x39b99516
add ebx, 0xffffffff
xor ebx, 0x2df5f399
sub edx, ebx
pop ebx
xchg dword [esp], edx
pop esp
mov dword [esp], edx
push edi
mov edi, esp
add edi, 4
sub edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push 0x53018d04
mov dword [esp], edi
mov edi, 0x76fb7e9b
add edi, 0x67bf907a
push ecx
mov ecx, 0x6fff06fb
add edi, ecx
pop ecx
or edi, 0x775f863d
add edi, 0x3b7109b9
add edi, 0x448f600e
add ecx, edi
pop edi
xchg dword [esp], ecx
pop esp
jmp 0x4d98e4
push ebx
mov dword [esp], ecx
mov ecx, esp
push edi
mov dword [esp], edx
mov edx, 4
add ecx, edx
pop edx
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
push ebp
mov dword [esp], edx
push ebx
mov ebx, 0x2c7bbcae
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push eax
mov eax, esp
push esi
mov esi, 0x1feaa5ed
xor esi, 0x73fb15f3
inc esi
xchg esi, ebp
dec ebp
xchg esi, ebp
sub esi, 0x6c11b01a
add eax, esi
pop esi
add eax, 4
xchg dword [esp], eax
pop esp
push eax
mov dword [esp], esi
push 0x6ca961f9
mov dword [esp], ebx
mov ebx, 0x633848
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
push esi
mov esi, 0x6f942867
neg esi
sub esi, 0x7bbfc31a
add esi, 0x77bf6a7c
shl esi, 1
add esi, 0xe729020e
add ecx, esi
pop esi
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
mov dword [esp], 0x410dec37
mov dword [esp], ecx
push edx
mov edx, 0x2dfc3d10
sub ecx, edx
pop edx
add ecx, eax
sub esp, 4
mov dword [esp], eax
mov eax, 0x2dfc3d10
add ecx, eax
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov ecx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x55bd39
push 0xf0b58d6
mov dword [esp], ebx
push esi
push 0x69890135
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebx
push edx
mov dword [esp], 0x222234ff
mov dword [esp], ecx
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [ebp - 4]
push dword [esp]
pop ecx
push ecx
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push ebp
mov dword [esp], edx
push eax
mov eax, 0x50976a07
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebx
mov dword [esp], edx
push 0x5bfb993d
mov dword [esp], ecx
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
push ebx
mov ebx, 4
add eax, ebx
pop ebx
xchg dword [esp], eax
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
jmp 0x50abcc
push ecx
mov dword [esp], ebx
mov ebx, 3
sub ebx, 0x75f777c6
add ebx, ecx
add ebx, 0x75f777c6
sub esp, 4
mov dword [esp], ecx
mov ecx, 0
add ecx, ebx
xor esi, dword [ecx]
pop ecx
pop ebx
push ebp
mov dword [esp], ecx
push ebp
push ebx
mov ebx, 0x465f5
mov ebp, ebx
pop ebx
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
push ebx
mov ebx, 0x29be7e55
neg ebx
dec ebx
push edx
mov edx, 0x3ffe64c4
dec edx
dec edx
xor edx, 0x4848516c
add ebx, edx
pop edx
neg ebx
sub ebx, 0x32c85c44
sub ecx, ebx
pop ebx
push ebp
mov ebp, 0x7fb7f5c8
sub ecx, ebp
pop ebp
add ecx, eax
add ecx, 0x7fb7f5c8
add ecx, 0x7f3fec64
push dword [esp]
pop ecx
push 0x1a84bb1f
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push edx
mov edx, 4
add ebp, edx
pop edx
xchg dword [esp], ebp
pop esp
jmp 0x522360
push ebx
push esp
pop ebx
push eax
mov eax, 4
add ebx, eax
pop eax
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
pop dword [0x636cc0]
push 0x24ed8be5
mov dword [esp], ebx
push eax
mov dword [esp], edi
mov edi, 0x4d35f9d9
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
push ebp
mov ebp, 4
sub edi, 0x7f79eb8e
add edi, ebp
add edi, 0x7f79eb8e
pop ebp
xchg dword [esp], edi
pop esp
jmp 0x54da63
push ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push eax
mov dword [esp], edi
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
mov eax, dword [esp]
push edx
push esp
pop edx
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
mov esp, dword [esp]
push dword [0x633aec]
mov esi, dword [esp]
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
jmp 0x4a64f2
push ebx
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
mov eax, 0xf628f0e
mov dword [esp + 4], eax
pop eax
mov dword [esp], eax
push 0x3e37eabc
mov dword [esp], ebx
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov eax, dword [esp]
push ecx
push esp
pop ecx
push eax
push 0x52fe2a43
pop eax
add eax, 0x54f81c5d
dec eax
shl eax, 3
and eax, 0x6fcf2a6e
shl eax, 5
xor eax, 0xf0440d04
add ecx, eax
pop eax
add ecx, 4
xchg dword [esp], ecx
pop esp
push edx
mov edx, esp
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], edi
mov edi, 0x2e706973
push edi
pop dword [0x63384c]
pop edi
push edi
mov edi, esp
push esi
push 0x3fd38957
pop esi
add esi, 0x6ff79e41
sub esi, 0x7be98708
inc esi
sub esi, 0x33e1a08d
add edi, esi
pop esi
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], eax
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
push dword [esp]
mov edx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
jmp 0x4ca00a
push edx
mov edx, 0x7a8fcf0c
not edx
sub esp, 4
mov dword [esp], edx
xchg dword [esp], ebx
neg ebx
xchg dword [esp], ebx
pop edx
add edx, 0xf5dda056
push edx
pop dword [0x63384a]
pop edx
sub esp, 4
mov dword [esp], ebx
mov dword [esp], esi
push ecx
mov ecx, 0x6b81c4ef
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
push edi
mov edi, 0x5c5f91f8
sub edi, 0xdc67e440
add ecx, edi
pop edi
add ecx, 0x7fff20da
add ecx, eax
sub ecx, 0x7fff20da
push eax
push 0x7cef8083
pop eax
add eax, 0x71a66833
add eax, 0x7f7e3514
shr eax, 7
sub eax, 0x80e47a83
sub ecx, eax
pop eax
push dword [esp]
pop ecx
push edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
mov edi, dword [esp]
add esp, 4
pop dword [esp]
pop esp
jmp 0x4e7044
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], esi
mov dword [esp], eax
push ecx
mov dword [esp], ebx
push dword [esp]
pop eax
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop eax
push ebx
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], esi
mov dword [esp], eax
pop dword [ebp - 4]
push ebp
mov dword [esp], 0x4b3233aa
mov dword [esp], eax
push ebp
mov ebp, 0x2588a499
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
sub ecx, 0x7ff76e8c
add ecx, eax
push esi
push 0x7ff76e8c
pop esi
add ecx, 0x5fee8054
add ecx, 0x2fb627ba
add ecx, esi
sub ecx, 0x2fb627ba
sub ecx, 0x5fee8054
pop esi
mov ecx, dword [esp]
push edi
push esp
pop edi
add edi, 4
add edi, 4
push ebx
mov dword [esp], edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
jmp 0x4a6426
cmp edx, dword [ebp - 0xc]
jmp 0x52b7e0
jmp 0x5037c4
cmp esi, eax
jmp 0x500cfa
ja 0x4a3f54
jmp 0x5037c4
jae 0x4ffbcf
jmp 0x4f071b
push ebp
push esp
mov ebp, dword [esp]
add esp, 4
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
push ecx
mov edx, dword [esp]
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push dword [esp]
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
push ebp
push dword [esp + 4]
mov ebp, dword [esp]
add esp, 4
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov eax, dword [esp]
push ebx
mov ebx, esp
sub esp, 4
mov dword [esp], eax
mov eax, 4
add ebx, eax
mov eax, dword [esp]
add esp, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x51f86b
push dword [0x636cc0]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push edi
mov edi, esp
push ebx
mov dword [esp], ebp
mov ebp, 0x7a98a41e
or ebp, 0x4d9f89cf
xor ebp, 0x7f9faddb
add edi, ebp
pop ebp
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
push edi
mov edi, 0x5efa54e6
dec edi
dec edi
neg edi
shr edi, 6
and edi, 0x56dfdaec
sub edi, 0x829d1474
add ecx, edi
pop edi
sub ecx, 0x67ff7533
sub ecx, 0x7e6f1137
add ecx, eax
add ecx, 0x7e6f1137
push eax
mov eax, 0x67ff7533
add ecx, eax
pop eax
sub ecx, 0x7fe6fe38
push dword [esp]
pop ecx
push ebp
mov dword [esp], eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x4fe55d
push 0x1f5c1ef8
mov dword [esp], esi
push esi
mov esi, 0x15406662
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], ecx
sub ecx, 0x55977bec
add ecx, 0x4ff26770
add ecx, 0x73ff10f4
add ecx, eax
push esi
mov esi, 0x73ff10f4
sub ecx, esi
pop esi
push eax
mov eax, 0x3fee1b31
sub eax, 0xeffbb3c1
sub ecx, eax
pop eax
add ecx, 0x55977bec
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
push edx
mov edx, esp
push esi
mov esi, 0x72cbb050
shr esi, 6
inc esi
add esi, 0xfe34d142
add edx, esi
mov esi, dword [esp]
add esp, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
pop dword [ebp - 0x10]
jmp 0x516fa9
push ecx
push esp
pop ecx
add ecx, 4
push edx
mov edx, 4
sub ecx, edx
pop edx
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], ecx
sub ecx, 0x53665c88
sub ecx, 0x7ffdea0d
add ecx, eax
add ecx, 0x7ffdea0d
push edx
mov dword [esp], eax
mov eax, 0x53665c88
add ecx, eax
mov eax, dword [esp]
add esp, 4
mov ecx, dword [esp]
push edi
push esp
pop edi
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
jmp 0x4a739d
push eax
push esi
push ebx
mov ebx, 0x3becf99b
push ecx
mov ecx, 0x7f961273
xor ecx, 0x3efacd0a
xor ecx, 0x1c8b5161
sub ebx, ecx
pop ecx
neg ebx
push edi
mov edi, 0x7b4f5567
add edi, 0x7d5b2603
inc edi
shr edi, 8
and edi, 0x7dfb9c65
shl edi, 7
xor edi, 0x3a7d30e
and ebx, edi
pop edi
and ebx, 0x6b6fdd15
not ebx
add ebx, 0x21c5ba2d
mov esi, ebx
pop ebx
mov dword [esp + 4], esi
pop esi
jmp 0x4e4b9b
cmp esi, eax
jmp 0x4fc007
sub esp, 4
mov dword [esp], eax
mov dword [esp], ebp
push ecx
push 0xd5cc
pop cx
add cx, 0xcf79
mov bp, cx
pop ecx
or bp, 0xe26d
neg bp
shr bp, 2
neg bp
add bp, 0x7288
mov word [0x633850], bp
pop ebp
push edx
mov dword [esp], edi
push 0x4ce2cf04
mov dword [esp], ecx
mov ecx, 0x1275e7ce
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push 0x1e3e784e
mov dword [esp], esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop ebx
push edi
mov edi, esp
add edi, 4
push edx
mov edx, 4
add edi, edx
mov edx, dword [esp]
add esp, 4
xchg dword [esp], edi
pop esp
jmp 0x4ea230
push ebx
push esi
mov esi, 0x27727ccb
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], ecx
pop dword [ebp - 0x18]
push edi
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], esi
mov esi, 0x39eef9ea
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
add ecx, 0x7f5f3516
add ecx, eax
push edi
push 0x7f5f3516
pop edi
sub ecx, edi
mov edi, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
push eax
mov eax, 4
add ebp, eax
pop eax
xchg dword [esp], ebp
pop esp
jmp 0x4f588b
push ebp
mov dword [esp], eax
push edx
mov dword [esp], esp
add dword [esp], 4
pop eax
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push ecx
mov ecx, esp
push esi
mov esi, 4
add ecx, esi
pop esi
add ecx, 4
xchg dword [esp], ecx
pop esp
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
push ecx
mov ecx, 4
add edx, ecx
pop ecx
xchg dword [esp], edx
mov esp, dword [esp]
push esi
push esp
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ecx
mov ecx, 0x78707061
mov dword [0x633848], ecx
pop ecx
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
sub esp, 4
mov dword [esp], ebp
mov ebp, 4
add edi, ebp
pop ebp
xchg dword [esp], edi
pop esp
jmp 0x4a7ec1
push 0x6cdb8b7c
mov dword [esp], edi
mov dword [esp], esi
mov dword [esp], eax
pop dword [0x636cb8]
jmp 0x4b2f52
push edx
push esi
mov esi, 0x55945a91
mov dword [esp + 4], esi
push dword [esp]
pop esi
add esp, 4
mov dword [esp], edx
push esi
mov dword [esp], ecx
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
push ebp
mov ebp, 4
add edi, ebp
pop ebp
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
push 0x7d8745b8
mov dword [esp], edi
mov edi, 0x6dffc1ac
xor edi, 0x1bd75947
add edi, 0x2e7cdaa8
add edi, 0x7eff0247
shl edi, 1
xor edi, 0x4748fbb4
sub eax, edi
push dword [esp]
mov edi, dword [esp]
add esp, 4
add esp, 4
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebp
mov dword [esp], edi
mov dword [esp], ecx
push eax
push 0x2fdd4d59
pop eax
sub ecx, 0x1fbf3dee
sub ecx, eax
add ecx, 0x1fbf3dee
pop eax
add ecx, eax
push edx
mov edx, 0x2fdd4d59
add ecx, edx
pop edx
mov ecx, dword [esp]
push eax
push esp
pop eax
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
jmp 0x4b9b1f
push 0x3717e21b
mov dword [esp], eax
push eax
push 0x3034bcf2
pop eax
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
push ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov edx, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
push edi
push 4
pop edi
add ebp, edi
pop edi
xchg dword [esp], ebp
pop esp
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x4a56b2
push esi
mov dword [esp], eax
mov dword [esp], ebx
push esi
mov esi, 0x6229f0bc
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
add ecx, 0x3bde67b2
sub ecx, 0x7bef97b5
add ecx, eax
add ecx, 0x7bef97b5
push 0x5f476b40
mov dword [esp], ebp
mov ebp, 0x3bde67b2
sub ecx, ebp
mov ebp, dword [esp]
add esp, 4
push dword [esp]
mov ecx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push esi
mov esi, 0x5df7d39b
sub esi, 0x5df7d397
add ecx, esi
pop esi
xchg dword [esp], ecx
pop esp
add esp, 4
push edi
sub esp, 4
mov dword [esp], edi
mov dword [esp], ecx
push 0x5be5b566
pop ecx
add ecx, 0xd8fbf0d
mov edi, ecx
pop ecx
mov dword [0x63384e], edi
pop edi
push ecx
mov dword [esp], edx
mov dword [esp], ebp
push ebp
mov ebp, 0x6131496c
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
push ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop eax
push ecx
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x4f3f71
push edi
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], eax
push ebp
mov dword [esp], ebx
mov eax, dword [esp]
push edi
mov edi, esp
push edx
mov edx, 4
add edi, edx
pop edx
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov al, byte [0x633851]
push esi
push ebx
mov ebx, 0x7cd1af75
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebx
mov dword [esp], 0x9035cf4
mov dword [esp], eax
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
mov eax, dword [esp]
sub esp, 4
mov dword [esp], edi
push esp
pop edi
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
jmp 0x5359da
jmp dword [eax + 0x639cd8]
push 0x23505507
mov dword [esp], edx
push 0x210e56e3
mov dword [esp], ecx
mov ecx, 0x633a28
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
jmp 0x522355
push ebp
push esp
pop ebp
push esi
mov esi, 0x6fec95c2
neg esi
sub esi, 0x1c9db331
add esi, 0x8c8a48f7
add ebp, esi
pop esi
push ebx
mov ebx, 4
sub ebp, ebx
pop ebx
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
push esi
mov dword [esp], 0x43134dac
mov dword [esp], ebp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebp
mov ebp, 0x6c6c642e
sub esp, 4
mov dword [esp], ebp
pop dword [0x633852]
pop ebp
sub esp, 4
mov dword [esp], eax
push eax
mov eax, 0x7389ea12
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], ecx
sub ecx, 0x3ffe0e98
add ecx, 0x7edd1f89
add ecx, eax
push 0x1dda0a21
mov dword [esp], ecx
mov dword [esp], ebp
mov ebp, 0x7edd1f89
sub ecx, ebp
pop ebp
add ecx, 0x3ffe0e98
mov ecx, dword [esp]
push ecx
mov dword [esp], ebp
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
jmp 0x543896
push edi
mov edi, esp
push esi
mov esi, 0x761bf3b7
sub esi, 0x7b7eb164
push ebp
mov ebp, 0
sub ebp, esi
mov esi, ebp
pop ebp
sub esi, 0x562bda9
add edi, 0x7bf35abb
add edi, esi
sub edi, 0x7bf35abb
pop esi
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], eax
push 0x4cd2248d
mov dword [esp], edi
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
mov eax, dword [esp]
push esi
push esp
pop esi
add esi, 4
push edi
mov edi, 4
add esi, edi
pop edi
xchg dword [esp], esi
mov esp, dword [esp]
push dword [ebp - 0x10]
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
jmp fcn.004f06f4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x4c8e34
jne 0x4d30ae
jmp 0x541435
push dword [0x633aec]
push dword [esp]
mov esi, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
push esi
mov dword [esp], ecx
push ebx
mov ebx, 0x7c7e6914
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], esi
mov dword [esp], ecx
push ebx
mov ebx, 0x479718a1
sub ecx, ebx
pop ebx
add ecx, eax
push esi
push 0x479718a1
mov esi, dword [esp]
add esp, 4
add ecx, esi
pop esi
push dword [esp]
mov ecx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
add esp, 4
jmp 0x54e6d8
push eax
push esp
pop eax
push edx
mov edx, 4
add eax, edx
pop edx
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ebx
push ebx
mov dword [esp], ecx
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
push esi
mov esi, 4
add eax, esi
pop esi
xchg dword [esp], eax
pop esp
mov ebx, dword [esp]
push edi
push esp
pop edi
push ecx
mov ecx, 0x102f7acc
not ecx
add ecx, 0x37caf905
sub ecx, 0x3117e720
xor ecx, 0x3b7de066
add ecx, 0x32018886
add edi, ecx
pop ecx
push ebx
mov ebx, 4
add edi, ebx
pop ebx
xchg dword [esp], edi
pop esp
sub esp, 4
mov dword [esp], ebx
push ecx
mov ecx, 0x633a28
mov dword [esp + 4], ecx
mov ecx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x4b64e2
jne 0x4aa84f
jmp 0x4eb2ac
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x4b746f
cmp dword [0x639cd8], 0x23f0
jmp 0x4b4f08
cmp dword [ebp - 0x10], 0x1000000
jmp 0x4b4efd
push ecx
mov ecx, 0x3c
add ecx, edx
push ebp
mov dword [esp], ebx
push 0
pop ebx
add ebx, ecx
push edx
mov edx, 0
add edx, ebx
add eax, dword [edx]
pop edx
pop ebx
pop ecx
jmp 0x4aaa75
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
push ebp
mov ebp, 0x5c8e9920
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov edx, dword [esp]
push 0xc8ce306
mov dword [esp], eax
mov eax, esp
add eax, 4
push esi
mov esi, 4
add eax, esi
pop esi
xchg dword [esp], eax
mov esp, dword [esp]
xor edx, edx
push edi
push 0x4d0f9ae2
mov dword [esp], ebx
push 0x30c5c51e
pop ebx
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x50e7e6
jmp 0x504fb6
mov dx, word [ecx]
jmp 0x4af3a0
push ecx
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edi
mov dword [esp], ecx
sub ecx, 0x3fa5e57e
sub ecx, 0x7b038225
add ecx, 0x5eef50fc
add ecx, 0x7fff8760
add ecx, eax
sub ecx, 0x7fff8760
push ebx
mov ebx, 0x7ffa2735
not ebx
xor ebx, 0xdeea8836
sub ecx, ebx
pop ebx
add ecx, 0x7b038225
add ecx, 0x3fa5e57e
push dword [esp]
mov ecx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
add esp, 4
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x51f81d
push dword [ebp - 0x10]
mov ecx, dword [esp]
push 0x5032f613
mov dword [esp], ebp
mov ebp, esp
push ebx
mov ebx, 0x653c9a13
and ebx, 0x3fbb5266
neg ebx
shl ebx, 6
dec ebx
shl ebx, 4
xor ebx, 0x1fb7f7f4
add ebp, ebx
pop ebx
add ebp, 4
xchg dword [esp], ebp
pop esp
push 0x209217b8
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push ebx
mov dword [esp], edi
push esp
pop edi
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push esi
mov dword [esp], 0x7fb10d2c
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x4cd8c9
push dword [0x636cc0]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x4a77a5
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ebp
push ebp
mov ebp, 0x633a28
mov dword [esp + 4], ebp
pop ebp
push 0x65e594ae
mov dword [esp], ebp
push edi
mov edi, 0x440d43f1
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], ecx
push esi
push 0x378b41fd
pop esi
shl esi, 7
add esi, 0x7bbdbb8c
inc esi
push eax
mov eax, 0x3c615ff8
xor esi, eax
pop eax
sub ecx, 0x177b1c49
sub ecx, esi
add ecx, 0x177b1c49
pop esi
add ecx, eax
add ecx, 0x7d3fe5f5
mov ecx, dword [esp]
push ebp
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
mov ebx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
jmp 0x500d05
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
sub esp, 4
mov dword [esp], edx
mov dword [esp], ecx
mov dword [esp], 0x6df2f7b8
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov dword [esp], 0x43261d2
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0x5279c9
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x573215
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x4b37ba
push esi
push esp
pop esi
push edi
mov edi, 4
add esi, edi
pop edi
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ebx
push ebp
mov dword [esp], ebx
mov dword [esp], ecx
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
add esp, 4
push dword [ebp - 0x18]
push dword [esp]
pop eax
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x5051ee
je 0x4c27d9
jmp 0x50ca11
mov byte [0x633852], al
sub esp, 4
mov dword [esp], edx
push ecx
mov ecx, 0x4234765d
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop ebx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push 0xe1f911d
mov dword [esp], edi
mov edi, 4
add ebp, edi
pop edi
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0x4c5aa5
jmp dword [eax + 0x639cd8]
push ebx
mov ebx, 0x7bbf6dd4
not ebx
push ebp
mov ebp, 0x6ffd6040
xor ebx, ebp
mov ebp, dword [esp]
add esp, 4
and ebx, 0x5efd1bb7
inc ebx
push esi
mov esi, 0x75d408f1
add ebx, esi
pop esi
sub ebx, 0xc0911b0b
mov dword [ebp - 0x14], ebx
mov ebx, dword [esp]
add esp, 4
jmp 0x581d3b
push dword [ebp - 0x18]
mov eax, dword [esp]
push ecx
push esp
mov ecx, dword [esp]
add esp, 4
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ebx
push esp
pop ebx
push ebp
mov ebp, 0x7fda09a6
not ebp
not ebp
dec ebp
xor ebp, 0x7ff68263
add ebp, 0xffd3743e
add ebx, ebp
pop ebp
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
xchg dword [esp], ebx
pop esp
jmp 0x4d3eb4
sub esp, 4
mov dword [esp], ecx
mov dword [esp], edx
mov dword [esp], 0x3c696f3c
mov dword [esp], eax
mov dword [esp], edx
push ebp
mov dword [esp], ecx
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov edx, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
push eax
mov dword [esp], ecx
push ecx
mov ecx, 0x2c5a7cae
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
pop dword [0x633bfc]
jmp 0x417dea
push ebx
push eax
mov eax, 0x6c98374d
mov dword [esp + 4], eax
pop eax
mov dword [esp], eax
mov dword [esp], 0x481d83e5
mov dword [esp], eax
push 0x4e594f40
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push ecx
push esi
mov esi, 0x7dfd723a
dec esi
sub esi, 0x2fff31c2
inc esi
or esi, 0x39e6c5c9
and esi, 0x6ebea5c0
sub esi, 0x6cbe85bb
mov ecx, esi
mov esi, dword [esp]
add esp, 4
add ecx, edx
push eax
push 0
pop eax
add eax, ecx
xor esi, dword [eax]
pop eax
pop ecx
push edx
mov edx, esp
add edx, 4
push edx
mov dword [esp], ecx
mov ecx, 4
sub edx, ecx
pop ecx
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ebx
push esi
mov dword [esp], 0xebc0c4
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x4fbffc
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x54e5f6
push esi
push esp
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ebp
mov dword [esp], ebx
push ecx
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
add esp, 4
mov ebx, dword [esp]
push 0x60a11553
mov dword [esp], eax
mov eax, esp
add eax, 4
push edx
mov edx, 0x76d3f836
neg edx
push eax
mov eax, 0x6cdf3a8f
sub eax, 0xd1fcae0
or edx, eax
pop eax
shr edx, 8
sub edx, 0xdfbf6b
add eax, edx
pop edx
xchg dword [esp], eax
pop esp
push ebx
mov dword [esp], ecx
push 0x740fe576
mov dword [esp], edx
push 0x633a28
pop edx
mov dword [esp + 4], edx
pop edx
push edi
push eax
mov dword [esp], edi
mov dword [esp], esi
mov esi, 0x42566e9e
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x7cef5883
add ebx, 0x3f7a6b66
add ebx, 0x7f2d1d05
xor ebx, 0x3dfd73de
inc ebx
not ebx
add ebx, 0x7e0a9cb0
sub ecx, ebx
pop ebx
sub ecx, 0x3b2b7555
add ecx, eax
add ecx, 0x3b2b7555
push edx
mov edx, 0x3fdf20dc
add edx, 0x37bfe8a2
add ecx, edx
pop edx
mov ecx, dword [esp]
push 0x64ea19b8
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push 0x772fc22a
mov dword [esp], ebp
mov ebp, 4
add ebx, ebp
pop ebp
xchg dword [esp], ebx
pop esp
jmp 0x512b5a
push 0x388425d6
mov dword [esp], esi
mov dword [esp], edi
push ebp
mov ebp, 0x2d50f1a7
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
push 0x243a7690
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
push edi
push 8
pop edi
push edi
pop dword [ebp - 8]
mov edi, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], esi
mov dword [esp], 0x62ba4fbd
mov dword [esp], ebx
mov dword [esp], ecx
add ecx, 0x7ffd372b
add ecx, 0x7feff993
add ecx, eax
sub ecx, 0x7feff993
push 0x32f22449
mov dword [esp], ebx
mov ebx, 0x7ffd372b
sub ecx, ebx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0x4a5379