Function at 0x5b901e
Capabilities:
Accept command line arguments

Disassembly:
push edx
mov dword [esp], edi
push ebp
mov dword [esp], edx
mov edx, 0x4c6aa8
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
push 0x2ea9a1a6
mov dword [esp], edx
mov edx, 4
add ecx, 0x3f8b3146
sub ecx, edx
sub ecx, 0x3f8b3146
pop edx
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
push ebx
mov dword [esp], eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 4
sub eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
pop eax
push dword [esp]
mov eax, dword [esp]
push edi
mov edi, esp
push edx
mov edx, 4
add edi, edx
pop edx
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
jmp 0x602a5f
je 0x5d0165
jmp 0x5d6304
je 0x603b62
jmp 0x5d630e
push dword [0x4c6b6c]
push dword [esp]
mov esi, dword [esp]
add esp, 4
add esp, 4
push esi
push esp
pop esi
add esi, 4
push ecx
mov ecx, 0x37cf5a19
dec ecx
push esi
mov esi, 0x37cf5a14
sub ecx, esi
pop esi
sub esi, ecx
pop ecx
xchg dword [esp], esi
pop esp
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
mov esp, dword [esp]
push dword [esp]
pop edx
sub esp, 4
mov dword [esp], edi
mov edi, esp
push ebx
mov ebx, 4
add edi, ebx
pop ebx
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x5e065a
push ecx
mov dword [esp], esi
mov dword [esp], 0x7339bb98
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], eax
push 0x1e87188c
mov dword [esp], ebp
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
xor ecx, ecx
jmp 0x5bd581
jmp 0x41817a
push edx
mov dword [esp], ebx
mov ebx, 0x3c
add ebx, edx
add eax, dword [ebx]
mov ebx, dword [esp]
push ebp
mov ebp, esp
push edi
mov edi, 4
add ebp, edi
pop edi
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x5c0230
push eax
push 0x2429bbf6
mov dword [esp], eax
mov eax, 0x1f32b63c
mov dword [esp + 4], eax
pop eax
mov dword [esp], esi
mov dword [esp], edx
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
push esi
mov esi, 4
add edi, esi
pop esi
xchg dword [esp], edi
pop esp
add esp, 4
push esi
mov esi, 0x706d6f63
mov dword [0x4c68ca], esi
push dword [esp]
mov esi, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x6a1dff
add esp, 4
jmp 0x60ee44
mov cx, word [eax]
jmp 0x5fc338
push ebp
push 0x78707061
pop ebp
push esi
mov dword [esp], ebp
pop dword [0x4c68c8]
mov ebp, dword [esp]
add esp, 4
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ecx
mov dword [esp], edx
push esi
mov dword [esp], ecx
mov edx, dword [esp]
push eax
mov eax, esp
push ebx
mov ebx, 0x7fff7e56
neg ebx
xor ebx, 0x800081ae
add eax, ebx
pop ebx
add eax, 4
xchg dword [esp], eax
pop esp
mov edx, dword [esp]
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
push esi
mov esi, 4
add eax, esi
pop esi
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x63121c
sub esp, 4
mov dword [esp], edx
push eax
push 0x12ce1efc
pop eax
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
sub ecx, 0x77bbbd52
sub ecx, 0x7c48e0f7
add ecx, eax
push eax
mov eax, 0x7c48e0f7
add ecx, eax
mov eax, dword [esp]
add esp, 4
push edi
mov edi, 0x77bbbd52
add ecx, edi
pop edi
mov ecx, dword [esp]
push esi
mov esi, esp
push ebp
mov ebp, 0x368ff96c
xor ebp, 0x77be9404
or ebp, 0x7db3e7c0
and ebp, 0x735dda69
push ecx
mov ecx, 0x5ffff550
shr ecx, 4
sub ecx, 0x767b6e7e
shr ecx, 1
shl ecx, 4
xor ecx, 0x5dd346bb
sub ecx, 0xb0e5f5a7
sub ebp, ecx
pop ecx
add esi, ebp
pop ebp
push edi
mov edi, 4
add esi, edi
pop edi
xchg dword [esp], esi
pop esp
mov byte [0x4c68d2], al
jmp 0x5b41d5
push esi
push edi
mov dword [esp], esp
push ecx
mov ecx, 4
add dword [esp + 4], ecx
pop ecx
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
push ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
mov ebx, dword [esp]
push edx
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
push ebp
mov dword [esp], 0x76354c01
mov dword [esp], edi
mov dword [esp], 0x756ae011
mov dword [esp], eax
pop dword [ebp - 4]
push ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], edi
mov dword [esp], ecx
push edx
mov edx, 0x7fe6b0b9
xor edx, 0x7e95c5c3
add edx, 0xffffffff
not edx
xor edx, 0xbb7250d7
add ecx, edx
mov edx, dword [esp]
add esp, 4
add ecx, eax
push edx
mov edx, 0x45feda51
sub ecx, edx
pop edx
mov ecx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push ebx
mov ebx, 0x52787252
neg ebx
add ebx, 0x3e7fca7d
sub ebx, 0x1ffb42d2
inc ebx
push ebp
mov ebp, 0x7d7faadf
shl ebp, 8
xchg ebp, esi
not esi
xchg ebp, esi
xor ebp, 0x4bd6e694
xor ebp, 0x68bb5253
add ebp, 0x28d3811e
sub ebx, ebp
pop ebp
add ebp, ebx
pop ebx
xchg dword [esp], ebp
pop esp
jmp 0x5da728
sub esp, 4
mov dword [esp], eax
mov eax, esp
push ecx
mov ecx, 0x3effa6cc
add ecx, 0x2ffedacf
shr ecx, 1
dec ecx
and ecx, 0x7efdc537
inc ecx
add ecx, 0xc982bfff
add eax, ecx
pop ecx
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], eax
push edx
push esp
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
push 0x185f52c0
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
sub esp, 4
mov dword [esp], ebx
push eax
push 0x4c6aa8
pop eax
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
jmp 0x5eaf0e
push ecx
mov dword [esp], 0x56be5db8
mov dword [esp], esi
mov dword [esp], 0x768692ab
mov dword [esp], eax
pop dword [0x4c6c7c]
push edx
mov edx, esp
push eax
mov eax, 0x7c3710b0
sub eax, 0x7f3d9c3c
shr eax, 4
not eax
sub eax, 0xf03068b4
add edx, eax
pop eax
push ecx
mov ecx, 0x673fd068
push ebx
mov ebx, 0x77fef913
sub ecx, ebx
pop ebx
dec ecx
inc ecx
dec ecx
add ecx, 0x10bf28b0
sub edx, ecx
pop ecx
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
sub ecx, 0x66efe9fb
sub ecx, 0x7fdd6879
add ecx, eax
push edi
mov edi, 0x7fffa2f0
and edi, 0x7baf37db
xor edi, 0x1feb10b7
or edi, 0x55ead147
add edi, 0x9ee7512
add ecx, edi
pop edi
sub esp, 4
mov dword [esp], esi
mov esi, 0x66efe9fb
add ecx, esi
pop esi
mov ecx, dword [esp]
push edx
push esp
pop edx
add edx, 4
push eax
mov eax, 4
add edx, eax
pop eax
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x5b8af4
push dword [ebp - 0x18]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x6004d0
xor edx, edx
push esi
mov dword [esp], eax
mov dword [esp], 0x5965c7ac
mov dword [esp], eax
mov dword [esp], esi
mov dword [esp], edx
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edi
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
sub esp, 4
mov dword [esp], ebx
mov dword [esp], ecx
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x5fc340
cmp dword [0x4c7d58], 0x23f0
jmp 0x5ecfb9
push 0x7161b57f
mov dword [esp], edx
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], eax
push 0x71f83785
mov dword [esp], ebx
mov dword [esp], 0x3253c84d
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
lea ecx, [eax + edx + 0x4c68b8]
jmp 0x64e9a3
jmp 0x5ed3d0
jmp 0x5ed3d0
mov al, byte [0x4c68d1]
push edx
push 0x4fd8706a
mov dword [esp], ecx
mov ecx, 0x5f1c458f
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], eax
push esi
mov esi, esp
push edx
mov edx, 4
add esi, edx
pop edx
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
mov dword [esp], ebx
pop eax
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
jmp 0x5bf0a8
push dword [ebp - 4]
push dword [esp]
pop ecx
push eax
mov eax, esp
push ecx
mov ecx, 4
add eax, ecx
pop ecx
add eax, 4
xchg dword [esp], eax
pop esp
sub esp, 4
mov dword [esp], edx
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x5d0ee3
push ecx
mov ecx, esp
add ecx, 4
push 0x7e85ab2e
mov dword [esp], edx
mov edx, 4
sub ecx, edx
pop edx
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
mov dword [esp], 0x4c6aa8
jmp 0x5e998c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x60ee4b
jne 0x5bc8f0
jmp 0x60cd89
push eax
mov eax, 5
add eax, edx
push ebx
mov ebx, 0
add ebx, eax
xor esi, dword [ebx]
pop ebx
mov eax, dword [esp]
push ebp
mov ebp, esp
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
add ebp, 4
xchg dword [esp], ebp
pop esp
push 0x5ac94aab
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
push edx
push 0x6bae9ec9
pop edx
add ecx, edx
mov edx, dword [esp]
add esp, 4
add ecx, eax
push esi
mov esi, 0x77cfbf0b
dec esi
inc esi
shl esi, 7
shr esi, 6
xor esi, 0x6831e0df
sub ecx, esi
pop esi
push dword [esp]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0x627b37
push eax
mov eax, esp
add eax, 4
sub esp, 4
mov dword [esp], edx
push 4
pop edx
sub eax, edx
pop edx
xchg dword [esp], eax
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
pop edx
push esi
mov dword [esp], ecx
mov ecx, esp
push edi
mov edi, 0x3feb889f
sub edi, 0x3feb889b
add ecx, edi
pop edi
add ecx, 4
xchg dword [esp], ecx
pop esp
push esi
mov esi, esp
push eax
mov eax, 4
add esi, eax
pop eax
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], esi
mov dword [esp], ecx
pop dword [ebp - 0x18]
push esi
push ebp
mov dword [esp], ecx
push 0x37c76884
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
push ebx
mov ebx, esp
add ebx, 4
push eax
mov eax, 0x15c9c32a
shr eax, 8
neg eax
neg eax
not eax
xor eax, 0xffea3638
sub ebx, eax
pop eax
xchg dword [esp], ebx
pop esp
mov dword [esp], esi
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push edx
mov edx, esp
push edi
mov dword [esp], eax
mov eax, 4
add edx, eax
pop eax
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x6749d9
push eax
mov eax, 3
add eax, ecx
sub esp, 4
mov dword [esp], ebx
push eax
mov eax, 0x6efefbbc
and eax, 0x57fcc37d
xor eax, 0x7dfd88b4
sub eax, 0x3b014b88
mov ebx, eax
pop eax
add ebx, eax
xor esi, dword [ebx]
pop ebx
mov eax, dword [esp]
add esp, 4
jmp 0x5df289
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x632909
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x668d30
push edx
mov edx, esp
push esi
mov esi, 4
add edx, esi
pop esi
push edi
mov edi, 4
add edx, 0xf6f6893
sub edx, edi
sub edx, 0xf6f6893
pop edi
xchg dword [esp], edx
pop esp
mov dword [esp], edx
push edi
mov dword [esp], ecx
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
push ecx
mov ecx, 4
add edi, ecx
pop ecx
xchg dword [esp], edi
pop esp
push dword [esp]
pop edx
push esi
push esp
pop esi
push edx
mov edx, 4
add esi, edx
pop edx
add esi, 4
xchg dword [esp], esi
pop esp
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x5c11af
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], 0x7a346ba
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push esi
mov esi, esp
push ecx
mov ecx, 0x5b8f7115
add ecx, 0xa4708eef
add esi, ecx
mov ecx, dword [esp]
add esp, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push eax
mov eax, 4
add ecx, eax
pop eax
xchg dword [esp], ecx
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x641c70
push esi
push ebx
push 0x4c6aa8
pop ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push edi
mov edi, esp
add edi, 4
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push eax
push esp
pop eax
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
push dword [esp]
pop eax
push ecx
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
jmp 0x5e9311
ja 0x661da8
jmp 0x5d4d97
jae 0x5ec3e5
jmp 0x5deb48
cmp dword [ebp - 0x10], 0x1000000
jmp 0x5ecfae
push dword [ebp - 0x14]
mov eax, dword [esp]
push ebx
mov ebx, esp
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
add ebx, 4
xchg dword [esp], ebx
pop esp
push 0x5d7c177a
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push eax
push 4
pop eax
sub ecx, eax
pop eax
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
add ecx, 0x4ef702b0
add ecx, 0x2dc5047f
add ecx, eax
push eax
mov eax, 0x2dc5047f
sub ecx, eax
push dword [esp]
pop eax
add esp, 4
sub ecx, 0x4ef702b0
push dword [esp]
mov ecx, dword [esp]
push esi
mov esi, esp
add esi, 4
push ebp
mov ebp, 4
add esi, ebp
pop ebp
xchg dword [esp], esi
pop esp
add esp, 4
jmp 0x5d5509
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
mov dword [esp], eax
pop dword [0x4c6c7c]
push ebp
push esp
pop ebp
add ebp, 4
push eax
mov eax, 0x79f67651
not eax
add eax, 0x7cd309dd
or eax, 0x67ab22d6
add eax, 0x98004c25
sub ebp, 0x4fdfe6e5
sub ebp, eax
add ebp, 0x4fdfe6e5
pop eax
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
push edx
mov dword [esp], 0x6492e694
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
mov eax, dword [esp]
push 0x30f318cd
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
jmp 0x41817a
sub esp, 4
mov dword [esp], eax
mov eax, esp
push ebx
mov ebx, 4
add eax, ebx
pop ebx
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push esi
push esp
pop esi
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
push dword [esp]
pop ebx
push esi
push esp
pop esi
add esi, 4
push eax
mov eax, 0x767bffe5
shr eax, 4
sub eax, 0x767bffa
add esi, eax
pop eax
xchg dword [esp], esi
pop esp
push 0x31a7ce5c
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
jmp 0x6263c3
cmp ecx, dword [ebp - 0x1c]
jmp 0x5b4f91
mov dx, word [ecx]
jmp 0x61d48d
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push ebp
push eax
mov eax, 0xc42ab29
mov dword [esp + 4], eax
pop eax
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edx
push ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
jmp 0x657b96
jmp dword [eax + 0x4c7d58]
push eax
push ecx
mov ecx, 0x5e743a2c
mov dword [esp + 4], ecx
push dword [esp]
pop ecx
add esp, 4
mov dword [esp], ecx
push edx
mov edx, 0x5bffea58
dec edx
dec edx
inc edx
sub edx, 0xe8823588
add ecx, edx
pop edx
sub ecx, 0x7edb2fec
add ecx, eax
add ecx, 0x7edb2fec
push edx
push 0x737db4cf
pop edx
sub ecx, edx
pop edx
push dword [esp]
push dword [esp]
pop ecx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
push dword [ebp - 0x18]
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
jmp 0x5b900e
push 0x55ed7de7
mov dword [esp], ebp
push esi
mov esi, 0x3faa06bd
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], ecx
add ecx, 0x5d7f95cc
add ecx, 0x7fffcf29
push esi
mov esi, 0x7fb514e1
add esi, 0x523f6c80
and esi, 0x7ebf27d9
shr esi, 7
xor esi, 0x74f73267
not esi
add esi, 0xdf95b46a
add ecx, 0x7fff54f2
add ecx, esi
sub ecx, 0x7fff54f2
pop esi
add ecx, eax
sub ecx, 0x6b3f5a04
sub ecx, 0x7fffcf29
sub ecx, 0x5d7f95cc
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push edi
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ebp
mov dword [esp], edi
mov dword [esp], esi
push ebp
mov ebp, 0x4c68c8
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
jmp 0x675466
push 0x497c8634
mov dword [esp], edi
push 0x70039bc
mov dword [esp], ebp
mov ebp, 0xb205502
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
push ecx
mov ecx, esp
push edx
mov edx, 4
add ecx, edx
pop edx
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
push ebp
mov ebp, 4
add ebx, ebp
mov ebp, dword [esp]
add esp, 4
xchg dword [esp], ebx
pop esp
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x60262b
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], edi
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop edx
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
jmp 0x668ffb
push dword [ebp - 0x18]
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
push eax
mov eax, 4
add edx, eax
pop eax
xchg dword [esp], edx
pop esp
jmp 0x5b834a
push edx
mov edx, esp
add edx, 4
sub edx, 4
push edx
push dword [esp + 4]
mov edx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], edx
mov dword [esp], ecx
push 0x162c79c6
mov dword [esp], eax
mov eax, 0x67fa0df0
push ebp
mov ebp, 0x3f5e7ef2
add ecx, ebp
pop ebp
add ecx, eax
sub ecx, 0x3f5e7ef2
pop eax
add ecx, eax
sub ecx, 0x67fa0df0
mov ecx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push eax
mov eax, 0x1bd980bf
sub eax, 0x1bd980bb
add ecx, eax
pop eax
push 0x17815111
mov dword [esp], ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x5c293a
cmp esi, eax
jmp 0x627b42
jmp 0x5d4d97
push 0x2702de6d
mov dword [esp], esi
mov dword [esp], edi
mov dword [esp], eax
mov dword [esp], ecx
mov dword [esp], eax
push ebp
mov dword [esp], 0x352cdbb2
mov dword [esp], ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add esp, 4
jmp dword [eax + 0x4c7d58]
test eax, eax
jmp 0x620e71
cmp esi, eax
jmp 0x5df294
push ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 0x74ff0bf4
add edx, 0x8b00f410
sub ecx, 0x2f275bf9
sub ecx, edx
add ecx, 0x2f275bf9
pop edx
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
pop dword [0x4c753c]
jmp 0x60bfd8
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edi
mov dword [esp], eax
push ebx
mov ebx, esp
add ebx, 4
push edi
mov edi, 4
sub ebx, edi
pop edi
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov eax, dword [esp]
push ebp
mov ebp, esp
push esi
mov esi, 0x1bfe06f5
shr esi, 8
sub esi, 0x6b3fad01
sub esi, 0x67ff659f
add esi, 0xd323149e
add ebp, esi
pop esi
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
push edx
mov edx, 0x5797e89f
push 0x40d63453
mov dword [esp], ebp
mov ebp, 0x4d7b08d7
and ebp, 0x7feac2d7
push ebx
mov ebx, 0x7df64b6d
or ebp, ebx
pop ebx
shl ebp, 6
shr ebp, 2
xor ebp, 0x241f3341
xor edx, ebp
pop ebp
push edx
pop dword [0x4c68d2]
pop edx
jmp 0x6a1e23
cmp edx, dword [ebp - 0xc]
jmp 0x5b4f9c
je 0x5ed3d0
jmp 0x609f4a
call fcn.00417e70
jmp 0x5bd579
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x60badc
jne 0x5bdcb0
jmp 0x5fe7c2
push ebx
mov ebx, esp
add ebx, 4
push ecx
push 4
pop ecx
sub ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
mov dword [esp], esi
mov dword [esp], ecx
push ebp
mov ebp, 0x7bdf44cc
sub ecx, 0x5ffb32fb
sub ecx, ebp
add ecx, 0x5ffb32fb
pop ebp
sub ecx, 0x7fff820d
add ecx, eax
push edi
mov edi, 0x7fff820d
add ecx, edi
pop edi
add ecx, 0x7bdf44cc
push dword [esp]
pop ecx
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push ecx
push ecx
mov dword [esp], 0x1cbbd5d4
pop ecx
and ecx, 0x77bf4e30
and ecx, 0x5fed8afe
push eax
mov eax, 0x19c76963
add ecx, eax
pop eax
push ecx
pop dword [0x4c68cc]
pop ecx
jmp 0x669ef2
push esi
push esp
pop esi
add esi, 4
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x557b0d3f
neg ebp
sub ebp, 0x2fe95f52
sub ebp, 0xe9be4c0
sub ecx, ebp
pop ebp
sub ecx, 0x7fff8a2e
add ecx, 0x7bff51b4
add ecx, eax
sub ecx, 0x7bff51b4
add ecx, 0x7fff8a2e
add ecx, 0x6bffaeaf
push dword [esp]
pop ecx
push eax
push esp
pop eax
add eax, 4
push ebp
mov ebp, 0x4dbd1b21
sub ebp, 0x27bf571a
neg ebp
sub ebp, 0x73fe7c4e
or ebp, 0x7f7cadb1
add ebp, 0x80804049
add eax, ebp
pop ebp
xchg dword [esp], eax
pop esp
push dword [ebp - 8]
push dword [esp]
pop edx
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x5efff8
push dword [0x4c6b6c]
push dword [esp]
mov esi, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push edx
mov dword [esp], 0x41d06a76
mov dword [esp], edx
mov dword [esp], edi
mov dword [esp], esi
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov edx, dword [esp]
push edi
push esp
pop edi
sub esp, 4
mov dword [esp], ecx
mov ecx, 4
add edi, ecx
pop ecx
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x5e8938
push esi
mov esi, esp
push ebx
push 0x5fedd51e
pop ebx
add ebx, 0x7f5bdee5
and ebx, 0x7fdf1687
shl ebx, 2
sub ebx, 0x7d245008
add esi, ebx
pop ebx
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edx
mov dword [esp], eax
push 0x4ca1e12b
mov dword [esp], edi
mov dword [esp], 0x2dde9ee1
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
push edx
sub esp, 4
mov dword [esp], edx
mov edx, 0x4c6aa8
mov dword [esp + 4], edx
push dword [esp]
pop edx
add esp, 4
jmp 0x5e9306
push edi
mov edi, esp
add edi, 4
push ebx
mov ebx, 0x6f7f8448
inc ebx
inc ebx
sub ebx, 0x6f7f8446
add edi, 0x3eefe932
sub edi, ebx
sub edi, 0x3eefe932
pop ebx
xchg dword [esp], edi
pop esp
mov dword [esp], edx
mov dword [esp], ecx
push eax
mov eax, 0x77ff2f30
add eax, 0xe73254ee
add ecx, eax
pop eax
add ecx, 0x3fdffbe8
add ecx, eax
sub ecx, 0x3fdffbe8
push ebx
mov ebx, 0x5f31841e
sub ecx, ebx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
push esi
mov esi, 0x7f9f0daf
neg esi
add esi, 0x7de76af4
dec esi
or esi, 0x5ba3756b
and esi, 0x720f85cd
sub esi, 0x720b0549
add ebx, esi
pop esi
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [0x4c7544]
push dword [esp]
pop ecx
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x635065
sub esp, 4
mov dword [esp], eax
push esp
pop eax
add eax, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], eax
push edx
push esp
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
mov eax, dword [esp]
push edi
mov edi, esp
push edx
mov edx, 0x3faf6ff5
add edx, 0xc050900f
add edi, edx
pop edx
push ecx
mov ecx, 4
add edi, ecx
pop ecx
xchg dword [esp], edi
mov esp, dword [esp]
push ebp
mov ebp, esp
push edx
mov edx, 0x777361e1
sub edx, 0x4befa46c
push ecx
mov ecx, 0x2b83bd71
xor edx, ecx
pop ecx
sub ebp, 0x1bbf35bf
add ebp, edx
add ebp, 0x1bbf35bf
pop edx
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
push edi
mov edi, esp
add edi, 4
push eax
mov eax, 4
add edi, 0x6d3f0cef
sub edi, eax
sub edi, 0x6d3f0cef
pop eax
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], eax
push edi
mov dword [esp], ebx
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
jmp 0x60a00f
push dword [ebp - 0x10]
push dword [esp]
pop ecx
push edx
mov edx, esp
push ecx
mov ecx, 0x4ff6fcfd
xor ecx, 0x4ff6fcf9
add edx, ecx
pop ecx
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x5e134f
push ebp
mov ebp, 0x6dff82a7
not ebp
shl ebp, 6
xor ebp, 0x6e7c52c5
xor ebp, 0x3bfbccf7
push ebx
push ebp
mov dword [esp], 0x5daf4ec0
pop ebx
xor ebp, ebx
pop ebx
add ebp, 0x77c8890e
sub eax, ebp
mov ebp, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], ebp
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
push ebp
push 0x7efdaa91
pop ebp
and ebp, 0x5f5fd9e6
shl ebp, 7
not ebp
xor ebp, 0xd13bbffb
add eax, ebp
pop ebp
xchg dword [esp], eax
pop esp
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x671368
push dword [0x4c7544]
push dword [esp]
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
jmp 0x5b6e02
push dword [ebp - 0x10]
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
push eax
mov eax, 0x7777671e
neg eax
not eax
shl eax, 4
inc eax
and eax, 0x7bfe5eee
xor eax, 0x737650c4
add ecx, eax
pop eax
xchg dword [esp], ecx
pop esp
push edx
push edx
mov edx, 0xb76a115
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
mov dword [esp], 0x683236e5
mov dword [esp], ecx
push ebp
mov ebp, 0x7fe43e86
add ebp, 0xffffffff
shr ebp, 8
push ecx
mov ecx, 0xf48d09fe
sub ebp, ecx
mov ecx, dword [esp]
add esp, 4
add ecx, ebp
pop ebp
add ecx, eax
sub ecx, 0xbf2da40
push dword [esp]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0x652954
push 0x186d5ca1
mov dword [esp], ecx
mov ecx, esp
push ebx
mov ebx, 0x3fbffb06
add ebx, 0xc04004fe
add ecx, ebx
pop ebx
push ebx
mov ebx, 4
sub ecx, ebx
pop ebx
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
push ebx
mov ebx, esp
push ebp
mov ebp, 0x5ff33872
dec ebp
sub ebp, 0x7d53c9ce
sub ebp, 0xe29f6e9f
add ebx, ebp
pop ebp
push ecx
mov ecx, 4
sub ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push 0x2711412a
mov dword [esp], edi
mov edi, esp
push eax
mov eax, 4
add edi, eax
pop eax
add edi, 4
xchg dword [esp], edi
pop esp
push esi
push esi
mov dword [esp], edx
push 0x4c6aa8
pop edx
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
push ebp
mov dword [esp], 0x1b1d28eb
mov dword [esp], edx
push edi
mov edi, 0x5509a8d1
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push dword [esp]
push dword [esp]
pop edx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add esp, 4
jmp 0x5fe75d
push 0x701c8f46
mov dword [esp], eax
sub esp, 4
mov dword [esp], esi
mov esi, 0x7a02eb7b
mov dword [esp + 4], esi
pop esi
mov dword [esp], eax
push 0x219a4e29
mov dword [esp], ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push dword [esp]
push dword [esp]
pop eax
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push edx
push edx
mov dword [esp], ecx
mov ecx, 0x168f4c92
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
pop dword [0x4c7544]
jmp 0x671bf0
push ecx
mov dword [esp], 0x2c882fc8
mov dword [esp], eax
push eax
mov eax, 0x2e8639f7
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebx
push edi
mov dword [esp], edx
push ebp
mov ebp, 0x2fb8e6ca
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
pop ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
add ebx, 4
xchg dword [esp], ebx
pop esp
push esi
push 0x6b42
mov si, word [esp]
push edi
mov edi, esp
add edi, 4
add edi, 2
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
shl si, 7
add si, 0xcb64
mov word [0x4c68d0], si
pop esi
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ebx
mov dword [esp], 0xef916e0
mov dword [esp], ecx
push eax
push 0x2fffa16c
pop eax
sub ecx, eax
pop eax
push ebx
mov ebx, 0x777f0a14
sub ecx, ebx
pop ebx
add ecx, eax
add ecx, 0x777f0a14
add ecx, 0x2fffa16c
push dword [esp]
pop ecx
push eax
mov eax, esp
push ecx
mov ecx, 0x2febfff8
push ebp
mov ebp, 0x2febfff4
sub ecx, ebp
pop ebp
add eax, ecx
pop ecx
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x5d8bcc
push eax
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
mov dword [esp], edi
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [esp]
pop edx
push esi
push esp
pop esi
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
sub esp, 4
mov dword [esp], ecx
mov dword [esp], 0x205223b2
mov dword [esp], edi
mov dword [esp], eax
pop dword [ebp - 0x10]
push ebx
mov ebx, esp
push edx
mov edx, 0x1bd538a8
xor edx, 0x3ddf9586
neg edx
push edx
push ebx
pop edx
pop ebx
not ebx
xchg edx, ebx
xor edx, 0x260aad29
add ebx, edx
pop edx
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
push edx
mov edx, esp
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
pop eax
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp fcn.0064fa45
push dword [ebp - 0x18]
mov eax, dword [esp]
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x612a03
push edi
push esp
pop edi
add edi, 4
push ebx
push 4
pop ebx
sub edi, ebx
pop ebx
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
add ecx, 0x7bf3eb55
sub ecx, 0x77ebd962
add ecx, eax
add ecx, 0x77ebd962
push 0x3be9941d
mov dword [esp], esi
push 0x7bf3eb55
pop esi
sub ecx, esi
pop esi
push dword [esp]
mov ecx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [ebp - 0x10]
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
push edi
mov edi, esp
add edi, 4
push ebx
mov ebx, 4
sub edi, ebx
pop ebx
xchg dword [esp], edi
pop esp
mov dword [esp], eax
mov dword [esp], 0x2ad0d8cb
mov dword [esp], ecx
push ebp
mov ebp, 0x4b3fa3f5
sub ecx, ebp
push dword [esp]
pop ebp
add esp, 4
sub ecx, 0x7feb8abc
add ecx, eax
add ecx, 0x7feb8abc
add ecx, 0x4b3fa3f5
push dword [esp]
mov ecx, dword [esp]
push eax
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
jmp 0x5f39e2
push edx
mov dword [esp], edi
push 0x666f46c8
pop edi
sub edi, 0x5efa31fe
and edi, 0x67ff7acd
dec edi
inc edi
push ebp
mov ebp, 0x3da1c2de
add ebp, 0x2fcd28c7
sub ebp, 0x1da7ee92
or ebp, 0x6f377adf
inc ebp
push eax
mov eax, 0x57ff2b29
not eax
inc eax
shl eax, 2
and eax, 0x1ecfff4c
not eax
add eax, 0x978063ed
xor ebp, eax
pop eax
add edi, ebp
pop ebp
mov dword [ebp - 8], edi
pop edi
jmp 0x63c277
push edx
push esp
pop edx
add edx, 4
sub edx, 4
push 0x983f1a9
mov dword [esp], edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], eax
push 0x210eeb1c
mov dword [esp], ebx
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
push dword [esp]
pop eax
push esi
mov dword [esp], ecx
mov ecx, esp
push edi
mov edi, 4
add ecx, edi
pop edi
add ecx, 4
xchg dword [esp], ecx
pop esp
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x5f0e15
push eax
push esi
mov dword [esp], 0x3ff61717
pop eax
push ebx
push 0x52deaa77
pop ebx
add eax, ebx
pop ebx
xor eax, 0xfba1b5fd
mov dword [0x4c68ce], eax
pop eax
jmp 0x61caa2
push 0x617c444e
mov dword [esp], ebx
push 0xa
mov ebx, dword [esp]
add esp, 4
mov dword [ebp - 0x14], ebx
mov ebx, dword [esp]
add esp, 4
jmp 0x674ac9