Function at 0x449061
Capabilities:
Accept command line arguments

Disassembly:
push esi
rol dword [ecx], cl
lea eax, [esi + 8]
mov dword [esi], 0xf908
push eax
call dword [0x12a968c]
mov ecx, esi
pop esi
jmp 0x5657d2
push ebp
push 0x5ef78db7
pop ebp
xor ebp, 0x6bded290
inc ebp
add ebp, 0x6bed6bdf
dec ebp
push edi
mov dword [esp], ecx
mov ecx, 0x7bfec37b
shr ecx, 6
shr ecx, 7
dec ecx
sub ecx, 0x5eed24ef
sub ebp, ecx
pop ecx
sub eax, ebp
mov ebp, dword [esp]
add esp, 4
jmp 0x4c2815
mov dx, word [ecx]
jmp 0x4a7864
cmp edx, dword [ebp - 0xc]
jmp 0x4c1822
call fcn.00417d50
jmp 0x4b62af
jmp 0x528211
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
mov dword [esp], edx
mov dword [esp], ebx
push edx
push ecx
mov dword [esp], eax
mov eax, 0x141e37f5
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push ecx
mov ecx, esp
push edi
mov edi, 0x6fdf3cfb
dec edi
add edi, 0x65e2efd5
xor edi, 0xd5c22ccb
add ecx, edi
pop edi
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [0x630034]
mov edx, dword [esp]
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x5073aa
push edx
mov edx, esp
push edi
mov edi, 4
add edx, edi
pop edi
sub edx, 4
sub esp, 4
mov dword [esp], edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], edx
push 0x3dd3918c
mov dword [esp], eax
mov dword [esp], ecx
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
xor ecx, ecx
push eax
mov dword [esp], ecx
push ecx
mov ecx, 0x48737bba
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebp
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push edi
mov edi, esp
push esi
mov esi, 0x7be1a737
not esi
add esi, 0x7be1a73c
add edi, esi
pop esi
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0x4ad69f
mov cx, word [eax]
jmp 0x4ad6a7
cmp ecx, dword [ebp - 0x1c]
jmp 0x531045
jne 0x4bb3dc
jmp 0x55ad43
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x546901
push edi
mov dword [esp], ebx
mov dword [esp], ebp
mov dword [esp], eax
mov dword [esp], ecx
jmp 0x568d08
push esi
push 0x6c6c642e
pop esi
push 0x64750a7e
mov dword [esp], esi
pop dword [0x633842]
mov esi, dword [esp]
add esp, 4
jmp 0x581bf1
push esi
mov dword [esp], ebx
mov dword [esp], 0x7aeefe3f
mov dword [esp], ebp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [0x636cb0]
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
jmp 0x56399a
push dword [ebp - 0x18]
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
push eax
mov eax, 4
add edx, eax
pop eax
xchg dword [esp], edx
pop esp
push edi
mov edi, esp
push ebp
mov ebp, 0x6c7f8d24
shr ebp, 4
sub ebp, 0x7c5f005b
inc ebp
dec ebp
inc ebp
xor ebp, 0x8a68f87c
add edi, ebp
pop ebp
push 0x2da2cdb3
mov dword [esp], ebx
mov ebx, 0x6fdf33a8
neg ebx
dec ebx
add ebx, 0x6fdf33ad
sub edi, ebx
pop ebx
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
push edx
mov edx, 0x19ff4f9d
not edx
sub edx, 0x7ff1ab6f
push ebp
mov ebp, 0x660f04f7
xor edx, ebp
pop ebp
add esi, edx
pop edx
xchg dword [esp], esi
pop esp
jmp 0x4c8079
add esp, 4
jmp 0x4ecc7f
jmp 0x528211
jmp 0x4bf4a5
push dword [ebp - 0x18]
push dword [esp]
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
push eax
mov eax, esp
push esi
mov esi, 0x4ee785a7
not esi
inc esi
add esi, 0x5f7d1c57
sub esi, 0x109596ac
add eax, esi
pop esi
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], edx
push eax
mov dword [esp], edx
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
push edi
push esp
pop edi
add edi, 4
sub esp, 4
mov dword [esp], ecx
mov ecx, 4
add edi, ecx
pop ecx
xchg dword [esp], edi
pop esp
jmp 0x4ac25a
sub esp, 4
mov dword [esp], ebx
push edi
mov dword [esp], 0x706d6f63
pop ebx
push ebx
pop dword [0x63383a]
pop ebx
jmp 0x53d513
jne 0x558f19
jmp 0x4d65ce
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
push esi
mov dword [esp], ebx
mov ebx, 4
sub eax, ebx
pop ebx
xchg dword [esp], eax
pop esp
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 4
add ebx, edx
pop edx
xchg dword [esp], ebx
pop esp
push dword [esp]
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x51d0d4
sub esp, 4
mov dword [esp], edx
mov dword [esp], ecx
mov dword [esp], eax
pop dword [0x633bec]
jmp 0x4c7329
cmp dword [0x639cc8], 0x23f0
jmp 0x55f5c7
cmp esi, eax
jmp 0x4bb41a
je 0x4bd44f
jmp 0x4b8c6a
ja 0x4c5227
jmp 0x4bf4a5
push esi
mov dword [esp], eax
mov eax, esp
push esi
mov esi, 4
add eax, esi
pop esi
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov dword [esp], eax
push 0x13c48584
mov dword [esp], ebx
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push edx
push ebp
mov ebp, 0x48f69e40
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
pop dword [ebp - 0x10]
push ecx
mov ecx, esp
push eax
mov eax, 0x7c76ceb1
sub eax, 0x3dff2837
shr eax, 3
shl eax, 4
and eax, 0x37ff4eb1
sub eax, 0x34ef4cac
add ecx, eax
pop eax
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], edx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
mov ebx, dword [esp]
push edi
push esp
pop edi
add edi, 4
push esi
mov esi, 4
add edi, esi
pop esi
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
jmp 0x4e6a42
sub esp, 4
mov dword [esp], edi
push ecx
mov dword [esp], 0x2e706973
pop edi
push edi
pop dword [0x63383c]
pop edi
push ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], edx
push edi
mov edi, esp
add edi, 4
push ecx
mov ecx, 0x3be7fdc1
and ecx, 0x5fb95eda
sub ecx, 0x1ba15cbc
sub edi, ecx
pop ecx
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ecx
pop edx
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp fcn.005093be
push ebx
push ebp
mov ebp, 0x71f49f68
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], esi
mov dword [esp], edx
push eax
mov dword [esp], ecx
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
push dword [esp]
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
push dword [ebp - 4]
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
add esp, 4
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
push edx
mov edx, 4
sub esi, edx
pop edx
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], edx
push edi
mov dword [esp], edx
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
pop edx
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
jmp 0x4ea422
push 0x693ecc9f
mov dword [esp], edx
mov edx, esp
push edi
mov edi, 4
add edx, edi
mov edi, dword [esp]
add esp, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edx
push 0x4becc26f
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
sub esp, 4
mov dword [esp], edx
mov edx, 3
push ecx
mov ecx, 0x737f2858
sub edx, ecx
pop ecx
add edx, ecx
add edx, 0x737f2858
xor esi, dword [edx]
mov edx, dword [esp]
add esp, 4
push edi
mov dword [esp], 0x7f274e05
mov dword [esp], edi
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop ebx
push 0x408bd813
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
jmp 0x55f5d2
push eax
mov dword [esp], edi
push edx
mov edx, 0x1092079
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], ecx
add ecx, 0x37f0c25
add ecx, eax
push edx
mov dword [esp], esi
push 0x37f0c25
pop esi
sub ecx, esi
mov esi, dword [esp]
add esp, 4
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [ebp - 0x10]
mov eax, dword [esp]
push ecx
mov dword [esp], ebx
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push ebx
push edi
mov edi, 0x4fc018dc
mov dword [esp + 4], edi
push dword [esp]
pop edi
add esp, 4
mov dword [esp], edx
push edx
mov dword [esp], ecx
mov edx, dword [esp]
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov edx, dword [esp]
push edx
mov dword [esp], ebx
mov ebx, esp
push edx
mov edx, 4
add ebx, edx
mov edx, dword [esp]
add esp, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x4a364c
push edx
push esp
pop edx
add edx, 4
push ebp
mov ebp, 4
sub edx, ebp
mov ebp, dword [esp]
add esp, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
push ebx
mov ebx, 4
add eax, ebx
pop ebx
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
sub esp, 4
mov dword [esp], esi
mov dword [esp], edi
push ecx
mov dword [esp], ebp
mov ebp, 0x633a18
mov dword [esp + 4], ebp
pop ebp
push 0x5aa46d0d
mov dword [esp], esi
mov dword [esp], 0x48796dc3
mov dword [esp], edi
mov dword [esp], esi
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push edi
mov edi, esp
push esi
mov esi, 0x3f5cb85e
sub esi, 0x3f5cb85a
add edi, esi
pop esi
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ecx
mov ecx, esp
push ebp
mov ebp, 4
add ecx, ebp
pop ebp
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x4d0382
push dword [ebp - 0x18]
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
mov esp, dword [esp]
jmp 0x4b4309
jmp 0x4180ba
push 0x1ec397f9
mov dword [esp], ecx
mov dword [esp], ebx
mov ebx, 0x3c
add ebx, edx
add eax, dword [ebx]
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edx
mov dword [esp], ebp
mov dword [esp], 0x33126bf4
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push 0xf802af5
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x4e999d
push 0x643f3475
mov dword [esp], eax
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], esi
mov dword [esp], edx
push 0x4528e226
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebp
mov dword [esp], esi
mov dword [esp], ebp
mov dword [esp], ebx
push edx
mov dword [esp], 0x2ccce424
mov dword [esp], ebx
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
jmp 0x4c5f97
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push ebp
push ecx
push 0x60a820d3
mov dword [esp], ebx
mov ebx, 0x4cc376c0
mov ecx, ebx
pop ebx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ebx
mov dword [esp], ecx
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x3febc835
inc ebp
shl ebp, 2
sub ebp, 0xffaf20d4
add eax, ebp
pop ebp
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x53f5b4
push eax
mov dword [esp], esi
mov esi, esp
push ebx
mov ebx, 0x33fb5aa9
sub ebx, 0x2e7e0bcd
shl ebx, 4
add ebx, 0xa82b1244
add esi, ebx
pop ebx
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
push 0x7e6e5af0
mov dword [esp], ebx
mov eax, dword [esp]
push ebp
mov ebp, esp
push ebx
mov ebx, 0x5eefd49e
not ebx
and ebx, 0x6df7b20a
xor ebx, 0x776fafb0
or ebx, 0x7fb9156c
xor ebx, 0x7fff9df8
add ebp, ebx
pop ebx
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop eax
push ebp
mov ebp, esp
push esi
mov esi, 4
add ebp, 0x7fd912e1
add ebp, esi
sub ebp, 0x7fd912e1
pop esi
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp dword [eax + 0x639cc8]
push edi
mov dword [esp], ebx
push esi
push 0x1395c50c
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], edx
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push 0xa7ddf35
mov dword [esp], ebp
push esp
pop ebp
push edi
mov edi, 0x7e3846e0
add edi, 0x7fa76918
sub edi, 0xfddfaff4
add ebp, edi
pop edi
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [ebp - 0x18]
push dword [esp]
pop eax
push ecx
mov ecx, esp
push edx
mov edx, 4
add ecx, edx
pop edx
add ecx, 4
xchg dword [esp], ecx
pop esp
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov dword [esp], edi
mov dword [esp], eax
push eax
mov dword [esp], ebx
push dword [esp]
pop eax
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
push edi
mov edi, 4
add ebx, edi
pop edi
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x55f4e9
push dword [ebp - 0x10]
push dword [esp]
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
jmp 0x563589
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
push edx
mov edx, 4
add ecx, edx
pop edx
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ecx
sub ecx, 0x7dde40ff
add ecx, 0x279f2e39
add ecx, eax
push eax
mov eax, 0x279f2e39
add ecx, 0x6715e76b
sub ecx, eax
sub ecx, 0x6715e76b
pop eax
push eax
mov eax, 0x5eff1255
sub eax, 0xe120d156
add ecx, eax
pop eax
push dword [esp]
pop ecx
push ebp
mov ebp, esp
push eax
push 4
pop eax
add ebp, eax
pop eax
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [ebp - 0x10]
push dword [esp]
pop ecx
push ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 0x7eff921a
and edx, 0xddd55db
not edx
neg edx
shl edx, 8
xor edx, 0xdd101b04
add ecx, edx
pop edx
xchg dword [esp], ecx
pop esp
jmp 0x50b8fc
push ecx
mov ecx, esp
push ebp
push 0x3fa4ab33
pop ebp
and ebp, 0x7ffbcf40
add ebp, 0x7e676ad9
shl ebp, 8
xor ebp, 0x4f594677
sub ebp, 0x48ac9f73
sub ecx, 0x3fbf582c
add ecx, ebp
add ecx, 0x3fbf582c
pop ebp
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
add ecx, 0x3fffa0ec
add ecx, eax
sub esp, 4
mov dword [esp], eax
mov eax, 0x3fffa0ec
add ecx, 0x7def974f
sub ecx, 0x3ddf8154
sub ecx, eax
add ecx, 0x3ddf8154
sub ecx, 0x7def974f
pop eax
push dword [esp]
pop ecx
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
sub esp, 4
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
pop dword [ebp - 4]
push eax
mov eax, esp
add eax, 4
push edi
mov edi, 4
sub eax, edi
pop edi
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ebx
mov dword [esp], ecx
sub ecx, 0x37fe3cbb
sub ecx, 0x55f38de9
add ecx, eax
push eax
mov eax, 0x55f38de9
add ecx, eax
pop eax
push ebp
mov ebp, 0x37fe3cbb
add ecx, ebp
mov ebp, dword [esp]
add esp, 4
push dword [esp]
pop ecx
push edi
mov edi, esp
add edi, 4
push ebp
mov ebp, 4
add edi, ebp
pop ebp
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
jmp 0x4c3b69
xor edx, edx
push edx
mov edx, esp
push ebp
mov ebp, 4
add edx, ebp
pop ebp
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
push edi
mov edi, 4
add esi, edi
pop edi
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
jmp 0x4a785c
push ecx
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], ebp
mov dword [esp], ecx
sub esp, 4
mov dword [esp], eax
mov eax, 0x7fdb64f0
push ecx
mov ecx, 0x3149b86
sub eax, ecx
pop ecx
add ecx, eax
pop eax
add ecx, 0x67fe2a21
add ecx, eax
sub ecx, 0x67fe2a21
sub ecx, 0x7cc6c96a
mov ecx, dword [esp]
push ebx
mov ebx, esp
push ecx
mov ecx, 0x6ef5e46d
push ebx
mov ebx, 0x59ff848e
not ebx
sub ebx, 0x5e84aebc
or ecx, ebx
pop ebx
add ecx, 0x90001307
add ebx, ecx
pop ecx
push edx
mov edx, 4
add ebx, edx
pop edx
xchg dword [esp], ebx
pop esp
push eax
mov dword [esp], 0x37de9a9f
mov dword [esp], esi
mov dword [esp], edi
push 8
pop edi
mov dword [ebp - 8], edi
pop edi
jmp 0x4fa56f
test eax, eax
jmp 0x53103a
cmp esi, eax
jmp 0x4adfd7
sub esp, 4
mov dword [esp], ebx
push edi
push edx
mov dword [esp], 0x633a18
pop edi
mov dword [esp + 4], edi
pop edi
push ebx
mov ebx, esp
push ecx
mov ecx, 0x365b97a3
or ecx, 0x3d9f7a78
push eax
mov eax, 0x7ff7b232
shr eax, 7
xor eax, 0x7fbc7981
not eax
xor eax, 0xbf6396e5
xor ecx, eax
pop eax
add ebx, ecx
mov ecx, dword [esp]
add esp, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
sub ecx, 0x777f6866
sub ecx, 0x3b7eb803
add ecx, eax
push edi
mov edi, 0x3b7eb803
add ecx, 0x77dc0725
sub ecx, 0x5bfdb659
add ecx, edi
add ecx, 0x5bfdb659
sub ecx, 0x77dc0725
pop edi
add ecx, 0x777f6866
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0x4adfe2
push 0x13ec983a
mov dword [esp], eax
push esp
pop eax
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], esi
mov dword [esp], ebx
push 0x6a34e26
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop ebx
sub esp, 4
mov dword [esp], edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
sub esp, 4
mov dword [esp], eax
push ecx
push 0x633a18
pop ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
jmp 0x4ce95c
and edx, eax
jmp 0x50c8e3
push ebx
mov dword [esp], ebp
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], ecx
pop dword [ebp - 0x18]
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edi
mov dword [esp], edx
mov dword [esp], eax
sub esp, 4
mov dword [esp], edx
mov dword [esp], 0x34243237
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
mov eax, dword [esp]
push 0x1a5cc49e
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
jmp 0x4e6a21
sub esp, 4
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], 0x3cd5378c
mov dword [esp], edx
mov dword [esp], ebx
push edx
mov edx, esp
add edx, 4
sub edx, 4
push 0x5e0cb4
mov dword [esp], edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], ecx
pop ebx
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], esi
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
push edx
mov edx, esp
push eax
mov eax, 4
add edx, eax
pop eax
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
mov dword [esp], edx
pop dword [0x630034]
jmp 0x4c5227
push 0x665d59e1
mov dword [esp], edi
push esi
push edi
mov edi, 0x633a18
mov esi, edi
pop edi
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
push 0x7a2b83e
mov dword [esp], ebp
push ebp
mov ebp, 0x2aee1f46
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], esi
mov dword [esp], ecx
push ebp
push 0x7be70c74
pop ebp
add ecx, 0x376dd6da
add ecx, 0x77de9319
add ecx, ebp
sub ecx, 0x77de9319
sub ecx, 0x376dd6da
pop ebp
add ecx, eax
sub ecx, 0x7be70c74
push dword [esp]
mov ecx, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
jmp 0x59bf21
push dword [0x633adc]
mov esi, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push eax
mov dword [esp], 0x62d0b5a
mov dword [esp], eax
mov dword [esp], edx
push eax
mov dword [esp], ecx
push edi
mov edi, 0x562d99e8
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
pop edx
push dword [esp]
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
add esp, 4
jmp 0x4c4b8c
sub esp, 4
mov dword [esp], ebp
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 4
sub ebx, ebp
pop ebp
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
push esi
mov esi, 0x7fafdfa8
push ebx
mov ebx, 0x3dfdc4a2
add esi, ebx
pop ebx
xor esi, 0x5bacca25
sub esi, 0x6812198e
sub ecx, 0x76fea4d5
sub ecx, esi
add ecx, 0x76fea4d5
pop esi
sub ecx, 0x3be74313
add ecx, eax
add ecx, 0x3be74313
add ecx, 0x7def54e1
mov ecx, dword [esp]
push edx
push esp
push dword [esp]
pop edx
add esp, 4
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push edx
mov dword [esp], 0x6f19aabd
mov dword [esp], esi
mov dword [esp], eax
pop dword [0x636cb0]
jmp 0x4df15c
push 0x6af4c3ac
mov dword [esp], edx
mov dword [esp], 0x24dfaa54
mov dword [esp], edi
mov dword [esp], ebx
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
mov ebx, dword [esp]
push edi
mov edi, esp
push ecx
push edi
mov edi, 0x7ff554ca
add edi, 0x57ef97d6
sub edi, 0x57eb666e
mov ecx, edi
pop edi
sub ecx, 0x7ff9862e
add edi, ecx
pop ecx
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
imul eax, ecx
sub esp, 4
mov dword [esp], esi
push edx
push 0x77106ae1
pop edx
mov dword [esp + 4], edx
pop edx
mov dword [esp], ebx
push ebx
mov dword [esp], 0x2fb78901
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
pop ebx
push 0x22f0a022
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
jmp 0x4abb3c
cmp dword [ebp - 0x10], 0x1000000
jmp 0x4c182d
lea ecx, [eax + edx + 0x633828]
jmp 0x4b1036
je 0x528211
jmp 0x4b9dc6
je 0x4c6a34
jmp 0x4a995c
sub esp, 4
mov dword [esp], eax
mov eax, 5
add eax, 0x77ad96e7
add eax, edx
sub eax, 0x77ad96e7
push ebx
mov ebx, 0
sub ebx, 0x3fd38fb2
add ebx, eax
add ebx, 0x3fd38fb2
xor esi, dword [ebx]
pop ebx
pop eax
jmp 0x568d13
invalid
push edx
push esp
pop edx
add edx, 4
push eax
mov eax, 0x4bedafbd
shl eax, 2
dec eax
neg eax
push edi
mov edi, 0xd0494109
xor eax, edi
pop edi
sub edx, eax
pop eax
xchg dword [esp], edx
pop esp
mov dword [esp], edx
push ebx
mov dword [esp], ecx
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop edx
push eax
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push ecx
mov ecx, esp
sub esp, 4
mov dword [esp], eax
mov eax, 0x7fff43c4
dec eax
neg eax
xor eax, 0x8000bc39
add ecx, eax
mov eax, dword [esp]
add esp, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
push ebp
mov ebp, 0x7ddd1b9b
add ebp, 0x6bed2574
shr ebp, 1
sub ebp, 0xf8f5251f
sub ecx, ebp
pop ebp
add ecx, eax
sub esp, 4
mov dword [esp], esi
mov esi, 0x7beffb68
add ecx, esi
mov esi, dword [esp]
add esp, 4
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], eax
mov eax, esp
push esi
mov esi, 4
add eax, esi
pop esi
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x5152bc
push eax
mov eax, 0x7f7534f9
neg eax
add eax, 1
xor eax, 0x7ffb761f
inc eax
shl eax, 4
push ebx
mov ebx, 0x5efebf21
add ebx, 0x2ea79dec
sub eax, ebx
pop ebx
mov dword [0x63383e], eax
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x4b387b
push dword [0x636cb0]
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push ebx
push 0x2b13acf9
mov dword [esp], edi
mov edi, 0x66784a60
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ebp
mov ebp, esp
push eax
mov eax, 0x4fbfe83d
sub eax, 0x3fe514a6
shl eax, 8
neg eax
neg eax
or eax, 0x67deb06f
add eax, 0x204895
add ebp, eax
pop eax
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop edx
push eax
mov eax, esp
push esi
mov esi, 0x3fe9c4d6
and esi, 0x7efe8b61
sub esi, 0x3ee8803c
add eax, esi
pop esi
push esi
mov esi, 4
add eax, esi
pop esi
xchg dword [esp], eax
pop esp
jmp 0x51d040
push esi
push eax
push eax
mov dword [esp], 0x474ffb91
pop eax
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
mov edx, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push esi
mov dword [esp], 0x12db228b
mov dword [esp], edx
push esi
push 0x633a18
pop esi
mov dword [esp + 4], esi
pop esi
jmp 0x53c0df
push dword [ebp - 8]
push dword [esp]
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
jmp 0x56288e
push edx
mov dword [esp], esi
mov esi, esp
push eax
mov eax, 0x7cff25ab
inc eax
inc eax
push edx
mov edx, 0x5f875f49
shl edx, 3
or edx, 0x35ba276f
dec edx
sub edx, 0x5af9f29f
inc edx
xor edx, 0x21c1d687
add eax, edx
pop edx
add esi, eax
pop eax
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push eax
mov eax, esp
push ebx
mov ebx, 0x5bf3b64b
xor ebx, 0x5bf3b64f
add eax, ebx
pop ebx
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
sub esp, 4
mov dword [esp], edi
mov edi, 0x78707061
mov dword [0x633838], edi
push dword [esp]
mov edi, dword [esp]
add esp, 4
add esp, 4
jmp 0x4c2e68
push ecx
mov ecx, esp
push eax
mov eax, 0x4b1b6382
add eax, 0x62f7ef7a
shr eax, 4
shl eax, 4
sub eax, 0xae1352ec
add ecx, eax
pop eax
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
mov dword [esp], ebx
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
mov edx, dword [esp]
push 0x520c8df9
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop edx
push 0xe917528
mov dword [esp], ecx
mov ecx, esp
push edi
mov edi, 4
add ecx, edi
pop edi
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp dword [eax + 0x639cc8]
push edi
push esi
push 0x952618a
pop esi
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], eax
push esi
mov dword [esp], 0x93f938d
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
pop eax
push ebx
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push 0x4f54ad47
mov dword [esp], edi
mov dword [esp], 0x3d5b79ed
mov dword [esp], esi
mov dword [esp], eax
pop dword [0x636ca8]
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edi
push edi
mov edi, 0x19bf1c4e
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push esi
mov esi, esp
push ebp
mov ebp, 4
add esi, ebp
pop ebp
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
push dword [esp]
pop eax
push ebx
mov ebx, esp
push edi
mov edi, 0x7fbfb826
inc edi
inc edi
push ebx
mov ebx, 0x579bc4e9
inc ebx
dec ebx
shr ebx, 5
inc ebx
neg ebx
add ebx, 0x6eba6e74
xor edi, ebx
pop ebx
sub edi, 0x14422860
add ebx, edi
pop edi
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x4b8c74
jae 0x5462fe
jmp 0x502c17
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x4ecc86
push dword [ebp - 0x14]
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
jmp 0x52821d
push ebx
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov dword [esp], ebx
push 0x20b6442e
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push edi
mov edi, 4
add ebp, edi
pop edi
xchg dword [esp], ebp
pop esp
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
mov dword [esp], ebx
mov dword [esp], edx
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], edx
mov dword [esp], ecx
push edx
push 0x74fb5132
pop edx
add edx, 0x3bef6221
sub edx, 0x5f6e13fc
and edx, 0x6bf78c00
or edx, 0x5fff0426
sub edx, 0xfe3084f2
add ecx, edx
pop edx
push ebp
mov ebp, 0x5f7aea33
not ebp
shr ebp, 6
or ebp, 0x55737463
add ebp, 0x5efd2082
add ebp, 0xc5c2b4f8
sub ecx, ebp
pop ebp
add ecx, eax
add ecx, 0x7cb349f1
sub ecx, 0x61cf0734
mov ecx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push ebx
push 4
pop ebx
add ebp, ebx
pop ebx
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0x4a9952
push 0x793da332
mov dword [esp], edx
push edx
mov dword [esp], esi
mov esi, 0x618cb4d9
mov dword [esp + 4], esi
pop esi
mov dword [esp], edx
push esi
mov dword [esp], ecx
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [0x633adc]
mov esi, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push esi
mov esi, 4
add ecx, esi
mov esi, dword [esp]
add esp, 4
xchg dword [esp], ecx
pop esp
push ebx
mov dword [esp], 0x660f8aff
mov dword [esp], ecx
mov dword [esp], ebp
mov dword [esp], ecx
push edx
mov edx, 0x5db9cc74
or edx, 0x536d2123
push ebx
mov ebx, 0x737e0dd9
sub edx, ebx
mov ebx, dword [esp]
add esp, 4
shl edx, 8
shr edx, 6
add edx, 0x3b7f4b7
add ecx, 0x2ffeadb7
sub ecx, edx
sub ecx, 0x2ffeadb7
pop edx
add ecx, eax
add ecx, 0x5b7732f
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push esi
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x533c1c
das
xchg edx, eax
or al, 0xdf
push ecx
imul ecx, dword [ecx - 0x64], 0x23f03df
mov dl, 0x96
not dword [edi + ecx*4 + 5]
xor dh, byte [ecx + 0x66bb6e4b]
out dx, al
xor eax, 0x80a26e02
idiv byte [esi + 0x42]
lea esp, [ebx + 0x2195d749]
ror cl, 1
push es
add al, byte [esp + 0x6048f2d]
enter 0xffffffffffffcc85, 0x38
pop ss
lds eax, [edx + 0x3a]
ror dword [edi - 0x2b], cl
mov edi, 0x477ab0da
push edx
adc al, 0xa3
stosb byte es:[edi], al
sub dword [esi], edx
mov esi, 0xb06e5ade
xchg esi, eax
and eax, 0xe8491366
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], ecx
push ebp
mov ebp, 0x77efcf06
sub ecx, 0x7d93ff93
add ecx, ebp
add ecx, 0x7d93ff93
mov ebp, dword [esp]
add esp, 4
sub ecx, 0x6fff0ffc
add ecx, eax
add ecx, 0x6fff0ffc
sub ecx, 0x77efcf06
mov ecx, dword [esp]
push esi
mov esi, esp
push edi
push 4
pop edi
add esi, 0x7eef68b7
add esi, edi
sub esi, 0x7eef68b7
pop edi
add esi, 4
xchg dword [esp], esi
pop esp
push 0x10409cdd
mov dword [esp], edi
push 7
pop edi
or ecx, edi
mov edi, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push edi
mov dword [esp], ebp
mov dword [esp], esi
push edi
mov edi, 0x4134360f
mov dword [esp + 4], edi
pop edi
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov ebx, dword [esp]
push esi
mov esi, esp
push ebp
mov ebp, 0x4ef71550
shr ebp, 2
push edx
mov edx, 0x69fa250d
add edx, 0xa9c3a043
sub ebp, edx
pop edx
add esi, ebp
pop ebp
push ecx
mov ecx, 4
add esi, ecx
pop ecx
xchg dword [esp], esi
pop esp
jmp 0x5263f6
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x4be8da
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x4c1027
push edi
push esp
pop edi
push eax
mov eax, 0x7fe77c96
inc eax
xor eax, 0x7fe77c93
add edi, eax
pop eax
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
mov dword [esp], eax
push 0x433669d9
mov dword [esp], ebx
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
push dword [esp]
pop eax
push ecx
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push edx
push ebx
mov dword [esp], 0x227a899a
pop edx
xor edx, 0x59dece82
shr edx, 8
sub edx, 0x279e0958
neg edx
push ebp
mov ebp, 0x7fbef077
or ebp, 0x6e5f15ce
inc ebp
xor ebp, 0x79ffaac2
add ebp, 0xd2dd3e37
add edx, ebp
pop ebp
push edx
pop dword [ebp - 0x14]
pop edx
jmp 0x4ea96e
push 0xe1e1366
mov dword [esp], ecx
push edi
mov edi, 0x5e213fa7
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], edx
push edx
mov dword [esp], ebx
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x16f31113
mov dword [esp], esi
push edi
mov edi, 0x7d459b87
mov dword [esp + 4], edi
pop edi
mov dword [esp], esi
mov dword [esp], edx
push eax
mov dword [esp], ecx
mov edx, dword [esp]
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
mov edx, dword [esp]
push ecx
mov ecx, esp
push eax
mov eax, 0x2dcf3485
xor eax, 0x7ffbcbf2
xor eax, 0x65b381f4
xor eax, 0x37877e87
add ecx, eax
pop eax
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
jmp 0x4b38f3