Function at 0x4a94be
Capabilities:
Accept command line arguments

Disassembly:
mov edx, edx
mov ebp, ebp
mov edi, edi
mov eax, eax
mov edx, edx
mov edi, edi
mov edx, edx
mov ecx, ecx
mov eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x2aa2c20d
mov dword [esp], esi
push esp
pop esi
add esi, 4
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], edx
push edx
mov dword [esp], edi
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
push ecx
mov ecx, esp
push edi
mov edi, 4
add ecx, edi
mov edi, dword [esp]
add esp, 4
push edx
mov edx, 4
add ecx, edx
pop edx
xchg dword [esp], ecx
pop esp
push edi
mov dword [esp], 0x77172bc6
mov dword [esp], ebp
mov ebp, 0x6c6c642e
mov dword [0x633872], ebp
mov ebp, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x4a3605
sub esp, 4
mov dword [esp], edx
mov dword [esp], eax
push esi
mov dword [esp], ecx
mov ecx, 0x633a48
mov dword [esp + 4], ecx
pop ecx
push edi
mov dword [esp], eax
push esi
mov dword [esp], edx
mov edx, 0x664f07e1
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
mov eax, dword [esp]
add esp, 4
pop dword [esp]
pop esp
push dword [esp]
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x4fc843
push eax
push 0xa
pop eax
push eax
pop dword [ebp - 0x14]
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x4e25e7
push dword [ebp - 0x10]
mov eax, dword [esp]
push edi
push esp
pop edi
add edi, 4
push esi
mov esi, 4
add edi, esi
pop esi
xchg dword [esp], edi
pop esp
push 0x537d2fae
mov dword [esp], esi
mov esi, esp
push ebp
mov ebp, 4
add esi, ebp
pop ebp
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov edx, dword [esp]
push ebp
push esp
pop ebp
push edi
mov edi, 4
add ebp, edi
pop edi
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0x5327d0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x51e646
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x54d61f
cmp dword [ebp - 0x10], 0x1000000
jmp 0x529dab
push edx
push esp
pop edx
add edx, 4
push esi
mov esi, 4
sub edx, esi
pop esi
xchg dword [esp], edx
pop esp
mov dword [esp], eax
push ecx
mov dword [esp], 0xe94b00
mov dword [esp], ebp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
mov eax, dword [esp]
sub esp, 4
mov dword [esp], esi
push esp
pop esi
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
push esi
mov esi, esp
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
mov dword [esp], ebx
mov dword [esp], edx
mov dword [esp], 0x633a48
jmp 0x4de40b
push 0x7e1beda2
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
push ebx
mov ebx, 4
sub ebp, ebx
pop ebx
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], ebx
mov dword [esp], 0x6619e742
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
pop edx
push eax
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
push dword [ebp - 8]
mov edx, dword [esp]
push eax
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push edx
mov edx, 0x77936f1f
inc edx
or edx, 0x6fdbe385
shl edx, 2
add edx, 0x770aff91
add edx, 0x898541df
add ebp, edx
pop edx
xchg dword [esp], ebp
pop esp
push esi
push esp
pop esi
add esi, 4
push eax
push 4
pop eax
sub esi, eax
pop eax
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
push 0x5bc99381
mov dword [esp], ecx
push dword [esp]
pop ebx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x55c2e3
sub esp, 4
mov dword [esp], ecx
mov dword [esp], edx
pop dword [0x630030]
push edi
mov edi, esp
add edi, 4
push edx
push 4
pop edx
sub edi, edx
pop edx
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], ecx
sub ecx, 0x7ff316ff
sub ecx, 0x79bec527
add ecx, 0x4dbdae25
sub ecx, 0x777fbd21
add ecx, eax
add ecx, 0x777fbd21
sub ecx, 0x4dbdae25
add ecx, 0x79bec527
push ebx
mov ebx, 0x7ff316ff
add ecx, ebx
pop ebx
push dword [esp]
pop ecx
push edi
mov edi, esp
add edi, 4
push ecx
mov ecx, 4
add edi, ecx
pop ecx
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0x532e06
cmp esi, eax
jmp 0x4f26b2
cmp esi, eax
jmp 0x4e586a
sub esp, 4
mov dword [esp], ebx
push edi
mov edi, 0x41d71e16
mov dword [esp + 4], edi
pop edi
mov dword [esp], edi
mov dword [esp], eax
push 0x7cb49dbe
mov dword [esp], ebp
push edx
mov edx, 0xb811f15
mov dword [esp + 4], edx
pop edx
mov dword [esp], ebx
pop eax
push dword [esp]
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push ebx
mov ebx, 0x49ecd2fc
xor ebx, 0x765b0018
or ebx, 0x7edd8f2d
or ebx, 0x57e39ae0
add ebx, 0x56cec6c7
shl ebx, 2
sub ebx, 0x5b3a9acc
add ecx, ebx
pop ebx
xchg dword [esp], ecx
pop esp
add esp, 4
push edx
push 0x2c8c5eb
mov dword [esp], esp
add dword [esp], 4
pop edx
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], edx
push esi
push ebx
mov ebx, 0xeea93ef
mov dword [esp + 4], ebx
push dword [esp]
pop ebx
add esp, 4
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ebx
mov ebx, esp
push esi
mov esi, 0x7a3f2cb2
sub esi, 0x7a3f2cae
add ebx, esi
pop esi
push edx
mov edx, 0x61f7d5f9
inc edx
xor edx, 0x61f7d5fe
add ebx, edx
pop edx
xchg dword [esp], ebx
pop esp
push dword [esp]
pop edx
push 0x593a8885
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
jmp 0x515e95
shr ecx, 2
push ecx
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x6a9df93e
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
push 0x230db738
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
mov eax, dword [esp]
sub esp, 4
mov dword [esp], esi
mov esi, esp
push edx
mov edx, 0x7bbf82a1
and edx, 0x7fff3b18
xor edx, 0x7dbb0262
and edx, 0x677f501f
xor edx, 0x6e2f58dc
neg edx
sub edx, 0x97d4a71e
add esi, edx
pop edx
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
jmp 0x52cbf0
push ecx
mov dword [esp], edx
mov edx, esp
add edx, 4
push eax
mov eax, 4
sub edx, eax
pop eax
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], eax
push ebx
push esi
mov esi, 0x5464ef66
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push edx
mov edx, esp
push ebx
mov ebx, 4
add edx, ebx
pop ebx
push ecx
mov ecx, 4
add edx, ecx
pop ecx
xchg dword [esp], edx
pop esp
push 0x2004e738
mov dword [esp], edi
mov dword [esp], 0x32ee931f
mov dword [esp], eax
pop dword [ebp - 4]
push eax
push eax
push 0xedc30a7
pop eax
mov dword [esp + 4], eax
pop eax
mov dword [esp], edi
mov dword [esp], eax
sub esp, 4
mov dword [esp], edi
mov dword [esp], eax
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
push eax
mov eax, esp
push ebx
mov ebx, 0x12bf45d1
shr ebx, 8
sub ebx, 0x37679f15
shl ebx, 3
shr ebx, 6
sub ebx, 0x1156402
add eax, ebx
pop ebx
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x535f08
push ebx
push ebx
push 0x679ea466
mov ebx, dword [esp]
add esp, 4
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
push esi
mov esi, esp
add esi, 4
push edx
mov edx, 0x3fff4a19
xor edx, 0x6ffcf674
shr edx, 4
sub edx, 0x5003bc2
sub esi, edx
pop edx
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push ecx
push esp
pop ecx
push ebp
mov ebp, 0x632fbb94
shr ebp, 2
neg ebp
neg ebp
push ebx
mov ebx, 0x67fff830
shr ebx, 3
or ebx, 0x6dfe24c7
xor ebx, 0xb88bcf0
add ebx, 0xc9085665
sub ebp, ebx
pop ebx
add ebp, 0x16b3aabb
add ecx, ebp
pop ebp
add ecx, 4
xchg dword [esp], ecx
pop esp
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], esi
mov esi, 0x78707061
push 0x7ba24233
mov dword [esp], esi
pop dword [0x633868]
pop esi
push eax
push ebx
push 0x1099a5c3
pop ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], eax
push eax
push esi
mov esi, 0x13c16c17
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
mov eax, dword [esp]
push esi
mov esi, esp
push ebx
mov ebx, 0x5eefc87f
push edx
mov edx, 0x1deb9e0b
neg edx
xor edx, 0xbcfba98e
xor ebx, edx
pop edx
add esi, ebx
mov ebx, dword [esp]
add esp, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x5153ff
jae 0x5094bf
jmp 0x4b6dd3
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x4fcbf5
push eax
push esi
push 0x1aa4da88
pop esi
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], edx
push ebx
mov dword [esp], ecx
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
push edx
mov edx, 4
add edi, edx
pop edx
xchg dword [esp], edi
pop esp
push dword [esp]
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
push ebx
mov ebx, 3
sub ebx, 0x7f6e0c4f
add ebx, ecx
add ebx, 0x7f6e0c4f
push ecx
push 0
pop ecx
add ecx, ebx
xor esi, dword [ecx]
mov ecx, dword [esp]
add esp, 4
pop ebx
jmp 0x4f26a7
push esi
mov esi, esp
push eax
push ebp
mov dword [esp], edx
mov edx, 0x3bedddd6
inc edx
xor edx, 0x7fffc76a
neg edx
inc edx
and edx, 0x37bcd4e1
xor edx, 0x33acc444
mov eax, edx
pop edx
add esi, eax
pop eax
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edx
push esi
mov dword [esp], 0x371e6862
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
push ebp
mov ebp, 4
add eax, 0x76fbcedd
add eax, ebp
sub eax, 0x76fbcedd
mov ebp, dword [esp]
add esp, 4
xchg dword [esp], eax
pop esp
push eax
mov eax, 0x7ff7aa92
not eax
push esi
mov esi, 0x7bf96dc8
xor esi, 0x19f32445
add esi, 0xffffffff
shl esi, 2
sub esi, 0xb2bb2bd
sub eax, esi
mov esi, dword [esp]
add esp, 4
add eax, 0xfcf51e0e
push eax
pop dword [ebp - 8]
pop eax
jmp 0x55ec77
push edi
mov dword [esp], edx
push ebp
mov ebp, 0x53972404
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], ecx
push edx
push 0x7aff9289
pop edx
sub ecx, edx
pop edx
add ecx, eax
push edi
mov edi, 0x7ffb5159
inc edi
add edi, 0x7bf15743
xor edi, 0x81133a14
add ecx, 0x6f7523ba
add ecx, edi
sub ecx, 0x6f7523ba
pop edi
push dword [esp]
pop ecx
push eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
push dword [ebp - 0x18]
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
push eax
mov dword [esp], ecx
mov dword [esp], edx
push eax
mov eax, 0x38a2cb0
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
push ecx
push dword [esp]
push dword [esp]
pop edx
add esp, 4
add esp, 4
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
push edx
mov edx, 4
add edi, edx
pop edx
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0x51f7a1
jmp 0x56fa33
push ebp
push esp
pop ebp
add ebp, 4
push ecx
mov ecx, 0x572db71f
dec ecx
xor ecx, 0x572db71a
sub ebp, ecx
pop ecx
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], eax
push 0x67cc603c
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
push edi
mov edi, 4
add ebx, edi
pop edi
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov al, byte [0x630043]
jmp 0x52b0a8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x4ceeab
jne 0x4dcc94
jmp 0x526168
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
push edi
mov edi, 4
sub eax, edi
pop edi
xchg dword [esp], eax
pop esp
mov dword [esp], esi
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ebp
push esp
mov ebp, dword [esp]
add esp, 4
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
push ebx
mov ebx, 5
sub ebx, 0x3df781fc
add ebx, edx
push edx
mov edx, 0x3df781fc
add ebx, edx
pop edx
push ecx
mov ecx, 0
add ecx, ebx
xor esi, dword [ecx]
pop ecx
mov ebx, dword [esp]
add esp, 4
jmp 0x4e585f
mov cx, word [eax]
jmp 0x4eb1a9
cmp ecx, dword [ebp - 0x1c]
jmp 0x504ca2
test eax, eax
jmp 0x504c97
xor ecx, ecx
jmp 0x4eb1a1
push ebx
push ebp
mov ebp, 0x4a8f49e9
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], eax
pop dword [0x633c34]
jmp 0x417e2a
push eax
mov dword [esp], 0x1d635137
mov dword [esp], esi
mov dword [esp], 0x1ba5db6a
mov dword [esp], esi
mov dword [esp], edx
sub esp, 4
mov dword [esp], ebx
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
push eax
mov dword [esp], edx
push esp
pop edx
push ebp
mov ebp, 4
add edx, ebp
pop ebp
add edx, 4
xchg dword [esp], edx
pop esp
mov byte [0x633872], al
jmp 0x4a1ce3
push ebx
mov ebx, esp
push ecx
sub esp, 4
mov dword [esp], eax
mov eax, 0x57efef4f
xor eax, 0x39485500
mov ecx, eax
pop eax
sub ecx, 0x6ea7ba4b
add ebx, ecx
pop ecx
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
push ebp
mov dword [esp], 0x150c2abb
mov dword [esp], eax
mov dword [esp], esi
mov dword [esp], ecx
pop ebx
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push ebx
mov ebx, 0x76b72367
shr ebx, 3
shl ebx, 1
add ebx, 0x7ff2dbf1
xor ebx, 0x9da0a4cd
add ecx, ebx
pop ebx
push ecx
push dword [esp + 4]
mov ecx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
xor edx, edx
push edx
mov dword [esp], edi
push esp
pop edi
add edi, 4
sub edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
push eax
mov eax, 0x3ff54a56
xor eax, 0x4f0b03fc
add eax, 0x7fc566f8
xor eax, 0xf0c3b0a6
add ebp, eax
pop eax
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0x5046a8
jmp 0x417e2a
push 0x3246559d
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push edx
mov edx, 0x2fcfc4f5
neg edx
xor edx, 0x75ff898a
inc edx
shl edx, 4
sub edx, 0x1f3eace7
xor edx, 0x3dbc7b3d
sub ebp, edx
pop edx
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
mov dword [esp], ebx
push eax
mov dword [esp], 0x4394c276
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
mov ebx, dword [esp]
push esi
mov esi, esp
push ebx
push 4
pop ebx
add esi, ebx
pop ebx
push eax
mov eax, 4
add esi, eax
pop eax
xchg dword [esp], esi
pop esp
push edi
mov edi, esp
add edi, 4
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
pop dword [ebp - 0x18]
jmp 0x516170
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x4ceea4
jne 0x56785a
jmp 0x5061a9
add esp, 4
jmp 0x4edfbf
push edi
mov edi, 0x3ef575d2
add edi, 0x74fd7a34
or edi, 0x3ed1e9fc
push ebx
push 0x3dff64dc
pop ebx
shl ebx, 4
neg ebx
xor ebx, 0x7de295d2
and edi, ebx
mov ebx, dword [esp]
add esp, 4
sub edi, 0xce08d9b9
add edx, edi
pop edi
sub edx, ecx
sub edx, 0x4fda47d9
push ebp
mov dword [esp], edx
push ebp
mov ebp, 0x5e502e25
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], eax
push ecx
mov ecx, esp
add ecx, 4
push edi
mov edi, 4
sub ecx, edi
pop edi
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
push edi
mov edi, 4
add ebx, edi
pop edi
xchg dword [esp], ebx
pop esp
jmp 0x4c6489
push edx
mov dword [esp], edi
mov dword [esp], esi
mov dword [esp], ebp
mov dword [esp], 0x768d8ca8
mov dword [esp], edx
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
push ebx
push esp
pop ebx
push edi
mov edi, 4
add ebx, edi
pop edi
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x500845
push ebx
push edi
push 0x666abf73
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
pop dword [ebp - 0x10]
jmp 0x5068b2
push ecx
mov dword [esp], edx
push ebx
mov dword [esp], esi
push 0x633a48
pop esi
mov dword [esp + 4], esi
pop esi
jmp 0x570749
sub esp, 4
mov dword [esp], esi
push edi
mov edi, 0x2768338c
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], edx
push 0x7185c5cc
mov dword [esp], eax
mov dword [esp], 0x471ee656
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
pop edx
push ebp
mov dword [esp], eax
mov eax, esp
push ecx
mov ecx, 4
add eax, ecx
pop ecx
add eax, 4
xchg dword [esp], eax
pop esp
push ebx
push 0x588a91a2
mov dword [esp], ebx
push edi
mov edi, 0x633868
mov ebx, edi
pop edi
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
push eax
mov eax, 0x5dfdc516
sub eax, 0x73cc8c62
xor eax, 0xea3138b0
add ebp, eax
pop eax
push eax
mov eax, 4
sub ebp, eax
pop eax
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop edx
push eax
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0x534aea
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push edi
mov edi, esp
push esi
mov esi, 4
add edi, esi
pop esi
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], ebx
push 0x79a94b4d
mov dword [esp], ecx
mov ebx, dword [esp]
push 0x1a3ddbd
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop ebx
push esi
mov esi, esp
push edx
mov edx, 0x79e3a8d2
xchg edx, ecx
not ecx
xchg edx, ecx
shl edx, 4
dec edx
add edx, 0x7e7f3288
sub edx, 0xe044a553
add esi, edx
pop edx
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x4b8985
push ebx
sub esp, 4
mov dword [esp], eax
push 0x18a09dea
pop eax
mov dword [esp + 4], eax
pop eax
mov dword [esp], eax
push eax
push ebp
mov ebp, 0x52f7ee76
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], esi
mov dword [esp], ebx
pop eax
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
push ebp
mov ebp, esp
push ebx
mov ebx, 0x65bedfe8
push ebp
mov ebp, 0x7dfc8131
and ebp, 0x6db61b4a
or ebp, 0x779deb20
dec ebp
sub ebp, 0x3f6be4a7
xor ebp, 0xda132664
add ebx, ebp
pop ebp
add ebp, ebx
pop ebx
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
pop dword [0x633c34]
push edi
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x33a48fc6
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], ecx
push esi
push 0x7fdf0e66
pop esi
sub ecx, esi
pop esi
add ecx, eax
push edi
mov edi, 0x7fdf0e66
add ecx, edi
mov edi, dword [esp]
add esp, 4
push dword [esp]
mov ecx, dword [esp]
push edx
mov edx, esp
add edx, 4
push ecx
mov ecx, 4
add edx, ecx
pop ecx
xchg dword [esp], edx
pop esp
add esp, 4
jmp 0x4f202d
push edx
mov dword [esp], ebp
mov dword [esp], esi
mov dword [esp], ecx
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 4
add ebx, 0x3f682e82
sub ebx, ebp
sub ebx, 0x3f682e82
pop ebp
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov eax, dword [esp]
push edx
mov edx, esp
push esi
push 0x7dfe7f87
pop esi
xor esi, 0x7dfe7f83
add edx, esi
pop esi
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x53a80f
mov al, byte [0x633871]
push edx
mov edx, esp
add edx, 4
sub esp, 4
mov dword [esp], ecx
push 4
pop ecx
sub edx, ecx
pop ecx
xchg dword [esp], edx
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0x4ee27f
mov dx, word [ecx]
jmp 0x5046b0
cmp edx, dword [ebp - 0xc]
jmp 0x529da0
je 0x4b31ec
jmp 0x50c0e3
je 0x560947
jmp 0x50ae70
sub esp, 4
mov dword [esp], esi
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
mov dword [esp], eax
push ebx
mov ebx, esp
push esi
mov esi, 4
add ebx, esi
pop esi
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
jmp dword [eax + 0x638d10]
sub esp, 4
mov dword [esp], ebp
push esi
mov esi, 0x7e49332e
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], ebx
push 0x1c0f6955
mov dword [esp], ecx
push edx
mov edx, 0x137ec182
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push dword [ebp - 0x10]
mov ecx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 0x7dbf61c0
add ebp, 0x7574a80e
inc ebp
shl ebp, 7
sub ebp, 0x7fddbc10
not ebp
add ebp, 0x1a272b75
add ebx, ebp
pop ebp
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
mov dword [esp], 0x32be4255
mov dword [esp], ebx
mov dword [esp], eax
push ebx
push dword [esp]
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x4f2169
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x3c
add ebx, 0x3665848d
add ebx, edx
push edi
mov edi, 0x3665848d
sub ebx, edi
pop edi
push edx
mov edx, 0
add edx, ebx
add eax, dword [edx]
pop edx
pop ebx
jmp 0x4d8c70
push ecx
push 0x15a5d3e3
mov dword [esp], eax
mov eax, 0x7df382a2
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebp
mov dword [esp], ebx
push ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push eax
mov dword [esp], edx
push 0x13c8a3cd
mov dword [esp], ebx
push 0x633a48
pop ebx
mov dword [esp + 4], ebx
pop ebx
push esi
mov dword [esp], ecx
mov dword [esp], ebp
mov dword [esp], ecx
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push eax
mov eax, esp
push ebx
mov ebx, 0x3e7dc48c
not ebx
add ebx, 0x7bdd9854
or ebx, 0x7bfe9472
add ebx, 0x73ff348b
or ebx, 0x5ba3bfb6
xor ebx, 0xfbffbfb2
add eax, ebx
pop ebx
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop ebx
sub esp, 4
mov dword [esp], eax
mov eax, esp
push esi
mov esi, 4
add eax, esi
pop esi
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x4aceb6
jmp 0x4b31ec
jmp 0x4b31ec
push 0x29e4613b
mov dword [esp], edi
push eax
mov dword [esp], ebx
mov ebx, 0x5b4af96
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [ebp - 0x18]
mov eax, dword [esp]
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push ecx
mov ecx, esp
push eax
mov eax, 4
add ecx, eax
pop eax
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ecx
add ecx, 0x5eedbd58
sub ecx, 0x5fedac71
add ecx, eax
add ecx, 0x5fedac71
push eax
push 0x7c75f122
pop eax
dec eax
neg eax
not eax
shl eax, 3
add eax, 0x7b3e3458
sub ecx, eax
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
push edi
mov edi, 0x7fe23241
neg edi
xor edi, 0x28ffd29a
and edi, 0x4a7fd8ba
shl edi, 8
inc edi
sub edi, 0x62181ffd
add ecx, edi
pop edi
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x4edfc6
push edx
mov edx, 0x7ffb7cf7
sub edx, 1
shl edx, 2
sub edx, 0x77ede64b
xor edx, 0xa67064fe
push ebp
mov dword [esp], edx
pop dword [0x63386c]
mov edx, dword [esp]
add esp, 4
push 0x1d77794e
mov dword [esp], eax
mov eax, esp
push ebp
mov ebp, 0x7ff7a0b4
add ebp, 1
or ebp, 0x5ff6178a
xor ebp, 0x4f99d90f
not ebp
xor ebp, 0x5fcdf3a1
sub ebp, 0x905c62ea
add eax, ebp
pop ebp
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edx
push esi
mov dword [esp], 0x2acb63f9
mov dword [esp], ecx
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov edx, dword [esp]
push ebp
mov ebp, esp
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
jmp 0x558fc5
call fcn.00417ac0
jmp 0x4f329e
push dword [ebp - 0x10]
mov edx, dword [esp]
push edx
push esp
pop edx
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
jmp 0x4d19c6
push eax
push 0x69757473
mov eax, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], eax
pop dword [0x63386e]
pop eax
jmp 0x4a159e
push dword [0x633b0c]
push dword [esp]
pop esi
push esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push edi
mov edi, 4
sub ecx, edi
pop edi
xchg dword [esp], ecx
pop esp
mov dword [esp], ebp
mov dword [esp], ecx
push eax
mov eax, 0x3f7d5b33
not eax
push ecx
mov ecx, 0x6fad8e0b
neg ecx
xor ecx, 0x4fbce334
add ecx, 0x7810c7be
xor eax, ecx
pop ecx
sub eax, 0x1ba1c22c
add ecx, eax
pop eax
add ecx, eax
push edi
mov edi, 0x7bdc3c87
add ecx, 0x59fb3fb4
sub ecx, edi
sub ecx, 0x59fb3fb4
pop edi
mov ecx, dword [esp]
push ebp
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop ebp
add ebp, 4
push edi
mov edi, 4
add ebp, edi
pop edi
xchg dword [esp], ebp
pop esp
jmp 0x4e5cf4
push eax
mov eax, 7
or ecx, eax
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0x52296f
push edi
push esi
push esp
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edi
mov edi, 0x633a48
mov dword [esp + 4], edi
pop edi
jmp 0x4acec1
push edi
push 0x25d098f1
mov dword [esp], ecx
mov ecx, 0x49ad9ba2
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
push ebx
mov dword [esp], 0x42b4402d
mov dword [esp], ecx
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov ebx, dword [esp]
push edi
push esp
pop edi
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
mov esp, dword [esp]
push 0x190c6490
mov dword [esp], edx
mov dword [esp], 0x16885510
mov dword [esp], esi
mov dword [esp], eax
pop dword [0x6364f0]
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
mov dword [esp], edi
mov dword [esp], eax
push esi
mov dword [esp], ebx
mov eax, dword [esp]
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
jmp 0x4e44d8
push esi
mov esi, esp
add esi, 4
push edi
mov edi, 0x37d7b7ad
add edi, 0xc8284857
sub esi, 0x3bfd3626
sub esi, edi
add esi, 0x3bfd3626
pop edi
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov eax, dword [esp]
push ebp
mov ebp, esp
push eax
mov eax, 0x3ff2c155
shl eax, 2
shl eax, 6
add eax, 0xd3eab04
push ebx
mov ebx, 0x63ffd873
xor ebx, 0x4fe9ea2a
or ebx, 0x7f3e47bf
xor ebx, 0x56dc6106
inc ebx
or ebx, 0x39fb2a54
sub ebx, 0x26dbb38c
sub ebp, ebx
pop ebx
add ebp, eax
add ebp, 0x131f8b72
pop eax
add ebp, 4
xchg dword [esp], ebp
pop esp
imul eax, ecx
push 0x5749a643
mov dword [esp], edi
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
mov dword [esp], ecx
sub ecx, 0x3ee267b5
add ecx, 0x1dbf0436
add ecx, eax
sub ecx, 0x1dbf0436
push ebx
push 0x3ee267b5
pop ebx
add ecx, 0x3de81bb3
add ecx, ebx
sub ecx, 0x3de81bb3
pop ebx
mov ecx, dword [esp]
push esi
mov esi, esp
push edx
mov edx, 4
add esi, edx
pop edx
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
jmp 0x540fd4
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edx
mov dword [esp], edi
mov dword [esp], eax
push 0x1335f9bf
mov dword [esp], ebp
mov dword [esp], ebx
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
push dword [esp]
pop eax
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp dword [eax + 0x638d10]
push dword [0x633b0c]
push dword [esp]
mov esi, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
push ebx
sub esp, 4
mov dword [esp], eax
push 0x480eb23d
pop eax
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edx
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
pop ebx
push ebx
mov ebx, esp
add ebx, 4
push esi
mov esi, 4
add ebx, esi
pop esi
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
jmp 0x4dfdd3
je 0x53b506
jmp 0x50ae7a
ja 0x4a9479
jmp 0x56fa33
push edx
push esi
push 0x7af63a35
pop esi
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], ecx
push ebp
mov ebp, 0x7e4d48ba
add ebp, 1
and ebp, 0x6f7a55c0
push ebx
mov ebx, 0x7cdef904
or ebp, ebx
pop ebx
push esi
mov esi, 0x7fb75f16
and ebp, esi
pop esi
xor ebp, 0x7ffb1ae3
add ebp, 0x6e8e17a8
sub ecx, ebp
pop ebp
add ecx, eax
add ecx, 0x6ffb5b8f
mov ecx, dword [esp]
push ebx
mov ebx, esp
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
push ebx
mov dword [esp], edi
mov edi, 4
add ebx, edi
pop edi
xchg dword [esp], ebx
pop esp
push dword [0x630038]
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ecx
push edx
mov edx, 0x11112acb
mov dword [esp + 4], edx
pop edx
mov dword [esp], edx
mov dword [esp], 0x40491da9
mov dword [esp], ecx
sub ecx, 0x6de3d036
add ecx, eax
push edi
push ebx
mov dword [esp], 0x35d92113
pop edi
inc edi
xor edi, 0x3f355fce
push ecx
mov ecx, 0x53ff2ec4
or ecx, 0x77b7b619
dec ecx
add ecx, 0x2508efc8
sub edi, ecx
pop ecx
add ecx, edi
pop edi
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0x51b363
push dword [0x630030]
push dword [esp]
pop edx
push 0x7f50c5b0
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x4f9d03
push 0x34c8c2f3
mov dword [esp], esi
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], edx
mov dword [esp], eax
push ebx
push dword [esp]
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add esp, 4
push dword [esp]
pop eax
push eax
mov eax, esp
add eax, 4
push ebp
mov ebp, 4
add eax, ebp
pop ebp
xchg dword [esp], eax
mov esp, dword [esp]
push dword [0x630034]
mov ecx, dword [esp]
push esi
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
push edi
mov edi, esp
add edi, 4
push eax
mov eax, 4
sub edi, 0x3cfb4a3e
sub edi, eax
push ebp
mov ebp, 0x77bf0216
sub ebp, 0x3ac3b7d8
add edi, ebp
pop ebp
pop eax
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
push eax
mov dword [esp], ecx
mov ebx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push dword [esp]
pop ebx
push 0x76ddaa55
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push esi
mov esi, 4
add ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
jmp 0x4d682e
push edx
push esp
mov edx, dword [esp]
add esp, 4
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
mov dword [esp], ebx
push eax
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
mov ebx, dword [esp]
push ecx
mov ecx, esp
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x5cb51190
xchg ebx, esi
inc esi
xchg ebx, esi
inc ebx
dec ebx
shr ebx, 6
sub ebx, 0x172d442
add ecx, ebx
pop ebx
add ecx, 4
xchg dword [esp], ecx
pop esp
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edx
mov dword [esp], edi
mov dword [esp], edx
pop dword [0x630034]
jmp 0x4a9479
push edx
mov dword [esp], edi
mov edi, esp
add edi, 4
sub esp, 4
mov dword [esp], ebp
mov ebp, 4
sub edi, ebp
pop ebp
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov ebx, dword [esp]
push edi
push esp
mov edi, dword [esp]
add esp, 4
add edi, 4
push ebp
mov ebp, 4
add edi, ebp
pop ebp
xchg dword [esp], edi
pop esp
push esi
mov esi, 0x7d1bbd58
sub esi, 1
push edi
mov edi, 0x7c374b32
dec edi
inc edi
sub edi, 0x487b51a9
add esi, edi
pop edi
push edi
mov edi, 0xb0d7a6e0
sub esi, edi
pop edi
sub eax, esi
mov esi, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
push eax
mov eax, 0x33bbc5b8
sub eax, 0x7b7e3518
not eax
and eax, 0x6efcda58
neg eax
add eax, 0x5df73818
push esi
mov esi, 0x1736edbc
sub eax, esi
pop esi
sub ebp, eax
pop eax
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
push edi
mov edi, 0x7bfe02c0
xor edi, 0x37efebe6
sub edi, 0x27fb078a
add edi, 0x5fdee174
dec edi
add edi, 0x7c0a3cf5
add ebx, edi
pop edi
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x4fcbdd
sub esp, 4
mov dword [esp], ebp
mov dword [esp], ecx
push ebx
mov ebx, 0x9ec3074
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], eax
push 0x5810cdc7
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push edx
push ebp
push 0x1faba9df
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
pop dword [0x6364f8]
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebp
mov dword [esp], ecx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ebp
mov dword [esp], ecx
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x4e440f
push ebp
push esp
pop ebp
push esi
mov esi, 0x7ad3a037
dec esi
shl esi, 1
shr esi, 4
sub esi, 0xf5a7402
add ebp, esi
mov esi, dword [esp]
add esp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
sub ecx, 0x7eef9e0b
add ecx, eax
push 0x731b9c74
mov dword [esp], eax
mov eax, 0x7eef9e0b
sub ecx, 0x7e5b2a34
add ecx, eax
push ebp
mov ebp, 0x7dfbbc4a
or ebp, 0x2d0e991b
not ebp
sub ebp, 0x3f6fe1f5
or ebp, 0x7ebf9b6a
xor ebp, 0x2bd28302
xor ebp, 0x2b3652d9
add ecx, ebp
pop ebp
pop eax
push dword [esp]
pop ecx
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
xor eax, eax
jmp 0x4e57ff
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x4ee22b
push esi
push eax
push 0x140ee594
pop eax
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebp
mov dword [esp], ecx
push edx
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x75afe3aa
sub ebx, 0xeb91ce6
mov edx, ebx
pop ebx
sub ecx, edx
mov edx, dword [esp]
add esp, 4
add ecx, eax
add ecx, 0x66f6c6c4
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
push dword [ebp - 4]
mov ecx, dword [esp]
push esi
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
push ebp
mov ebp, 0x5e1263b7
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
push ebp
mov ebp, 0x7ffb5cdf
shl ebp, 7
shl ebp, 4
or ebp, 0x5fdb07e9
not ebp
neg ebp
xor ebp, 0xdfffffee
add ebx, ebp
pop ebp
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push esi
mov esi, esp
push ebp
mov ebp, 4
add esi, ebp
pop ebp
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x4f0350
push eax
mov dword [esp], edx
push ebp
push 0x794b2b20
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov edx, dword [esp]
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x502ae1
sub esp, 4
mov dword [esp], edi
mov edi, esp
push ebp
mov ebp, 4
add edi, 0x7fef8089
add edi, ebp
sub edi, 0x7fef8089
pop ebp
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push 0x4c7d9f2c
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop ebx
push edi
mov dword [esp], edx
mov edx, esp
add edx, 4
push ebx
mov ebx, 0x2df9823c
sub ebx, 0x7edc0056
shr ebx, 8
add ebx, 0xff50e283
add edx, ebx
pop ebx
xchg dword [esp], edx
pop esp
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
jmp 0x5328f8
push esi
push esp
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
mov dword [esp], ecx
push 0x6c1234bf
mov dword [esp], esi
push eax
mov eax, 0x7f63b22e
shl eax, 7
shr eax, 3
add eax, 0x66045013
mov esi, eax
pop eax
xor esi, 0x538df5e8
sub ecx, 0x7d8abad6
add ecx, esi
add ecx, 0x7d8abad6
pop esi
add ecx, eax
sub ecx, 0x2fb2871b
mov ecx, dword [esp]
push esi
mov esi, esp
push ebx
mov ebx, 0x5ef739a3
and ebx, 0x7dff02a1
push ebp
mov ebp, 0x287f84ea
and ebx, ebp
pop ebp
inc ebx
shl ebx, 2
xor ebx, 0x21dc0280
add esi, ebx
pop ebx
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push dword [0x6364f8]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x528dd8
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
push edi
mov edi, 0x63fa249a
push ecx
mov dword [esp], ebx
push eax
mov eax, 0x7ddfcdeb
xor eax, 0x2390b4ed
mov ebx, eax
pop eax
shl ebx, 5
not ebx
add ebx, 0x47e8404b
xor edi, ebx
pop ebx
sub edi, 0x32edf8e7
xor edi, 0x94e2d4f3
sub ecx, edi
pop edi
add ecx, eax
add ecx, 0x7ff796da
push dword [esp]
pop ecx
push ecx
mov ecx, esp
push edx
mov edx, 0x53dfe398
or edx, 0x588dd4cf
shr edx, 3
xor edx, 0x7e7fcb82
not edx
push ebx
mov ebx, 0x2ffc9478
inc ebx
inc ebx
xor ebx, 0x5003d2ad
sub edx, ebx
pop ebx
add edx, 0xf5037c55
add ecx, edx
pop edx
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [0x630034]
push dword [esp]
pop edx
push 0x29efbb83
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x59b08f
lea ecx, [eax + edx + 0x633858]
push eax
push edi
push 0x7d36c281
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push 0x3b3fd593
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push edi
mov edi, 4
add ebp, edi
pop edi
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0x504231
push edi
mov dword [esp], 0x22d9cc8a
mov dword [esp], eax
push ecx
mov ecx, 0x7c994bca
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
push eax
mov eax, 0x6bc78e8a
or eax, 0x7d5f3aa7
push eax
not dword [esp]
pop eax
inc eax
xor eax, 0xefcf5de2
sub ecx, eax
mov eax, dword [esp]
add esp, 4
add ecx, 0x57d185dd
add ecx, eax
sub ecx, 0x57d185dd
add ecx, 0x6fef1cb3
push dword [esp]
push dword [esp]
pop ecx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
push dword [0x6364f8]
mov edx, dword [esp]
push edi
mov edi, esp
push ecx
mov ecx, 4
add edi, ecx
pop ecx
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push esi
mov esi, 4
sub ebx, esi
pop esi
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
jmp 0x518556
push esi
mov esi, esp
add esi, 4
push edx
mov edx, 2
sub esi, edx
pop edx
xchg dword [esp], esi
pop esp
mov word [esp], di
mov di, 0x6c64
push di
pop word [0x633870]
pop di
push ebp
mov ebp, esp
add ebp, 4
push ebx
mov ebx, 4
sub ebp, ebx
pop ebx
push ebp
push dword [esp + 4]
mov ebp, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], ebx
push edx
push edx
mov edx, 0x4da4632d
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push edx
mov edx, esp
add edx, 4
push edi
mov edi, 4
sub edx, 0x5f7a739d
add edx, edi
add edx, 0x5f7a739d
pop edi
xchg dword [esp], edx
pop esp
jmp 0x504399
push dword [ebp - 0x14]
push dword [esp]
pop eax
push ecx
mov ecx, esp
push eax
mov eax, 0x7ebffd33
shl eax, 4
inc eax
inc eax
add eax, 0x7c5ff218
shr eax, 4
xor eax, 0x685fc50
add ecx, eax
pop eax
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x54a401
push esi
mov dword [esp], ebp
push esp
mov ebp, dword [esp]
add esp, 4
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
add ecx, 0x6fbf997a
add ecx, eax
push eax
mov dword [esp], edx
mov edx, 0x7d6d8049
sub edx, 0xffffffff
add edx, 0x2f5fc122
xor edx, 0x7d29efe1
sub edx, 0x62251513
sub ecx, edx
mov edx, dword [esp]
add esp, 4
push dword [esp]
mov ecx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push edx
push eax
push 0x633a48
mov eax, dword [esp]
add esp, 4
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
jmp 0x500f14
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], esi
mov dword [esp], edi
mov dword [esp], edx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov ebx, dword [esp]
push 0x61a40aba
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop ebx
push ebx
mov dword [esp], 0x755fd153
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov byte [0x63004d], al
jmp 0x52dd46
push ecx
push eax
push ebx
mov ebx, 0x2b76e525
mov eax, ebx
pop ebx
mov dword [esp + 4], eax
pop eax
mov dword [esp], edi
mov dword [esp], ebx
push edx
mov dword [esp], ecx
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop ebx
push ecx
mov ecx, esp
push ebp
mov ebp, 0x5eff3b85
add ebp, 0x7bdf0950
push ebx
mov ebx, 0x2521bb2f
add ebp, ebx
pop ebx
add ecx, ebp
pop ebp
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [ebp - 0x18]
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
jmp 0x564034
push 0x7524a9f2
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push edi
mov edi, 0x5a1f2dae
shr edi, 7
add edi, 0x7f5e2055
neg edi
push edx
mov edx, 0x80125eb4
add edi, edx
pop edx
sub ecx, edi
pop edi
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
sub ecx, 0x1f55b7d3
sub ecx, 0x3fff6d01
add ecx, eax
push edi
mov edi, 0x3fff6d01
add ecx, edi
pop edi
push ebx
mov dword [esp], esi
mov esi, 0x1f55b7d3
add ecx, esi
pop esi
mov ecx, dword [esp]
push eax
mov eax, esp
add eax, 4
push edi
mov dword [esp], ebx
mov ebx, 4
add eax, ebx
mov ebx, dword [esp]
add esp, 4
xchg dword [esp], eax
pop esp
push dword [ebp - 0x18]
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push edx
push 4
pop edx
add ecx, edx
pop edx
xchg dword [esp], ecx
pop esp
jmp 0x507258
push ebx
mov dword [esp], ebp
mov dword [esp], edi
push eax
mov eax, 0x47d4899c
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop ebx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push edi
push ebp
mov ebp, 0x706d6f63
mov edi, ebp
mov ebp, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
mov dword [0x63386a], edi
pop edi
jmp 0x516191
cmp dword [0x638d10], 0x23f0
jmp 0x4de400
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push edi
push edx
mov edx, 0x3a96c913
mov dword [esp + 4], edx
pop edx
mov dword [esp], edi
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
mov edx, dword [esp]
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov edx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
push esi
mov esi, 4
add ebx, esi
pop esi
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0x53ef8c
sub esp, 4
mov dword [esp], ebx
mov dword [esp], esi
mov dword [esp], ebp
mov dword [esp], ecx
push eax
mov eax, 0x53fd7a54
and eax, 0x13379ef1
push edx
mov edx, 0x7b7f2321
shr edx, 4
sub edx, 0x9fb16d35
add eax, edx
pop edx
add ecx, eax
mov eax, dword [esp]
add esp, 4
add ecx, eax
push edi
mov edi, 0x7b3b9f4d
sub ecx, edi
pop edi
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
and edx, eax
jmp 0x52e927