Function at 0xc14b07
Capabilities:
Accept command line arguments

Disassembly:
sub esp, 4
mov dword [esp], ebp
mov dword [esp], 0x1f1a331c
mov dword [esp], edi
mov dword [esp], edx
mov dword [esp], ebx
push 0x398cfa69
mov dword [esp], ecx
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebp
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ecx
mov ecx, 0x3c
add ecx, 0x3fef72f7
add ecx, edx
sub ecx, 0x3fef72f7
push ebx
push 0
pop ebx
add ebx, ecx
add eax, dword [ebx]
pop ebx
mov ecx, dword [esp]
add esp, 4
jmp 0xc48c51
push dword [ebp - 0x18]
push dword [esp]
pop eax
push esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
push ebx
mov dword [esp], edx
mov edx, esp
add edx, 4
push ebx
mov ebx, 4
sub edx, ebx
mov ebx, dword [esp]
add esp, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
push ecx
mov dword [esp], ebx
mov eax, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov eax, dword [esp]
push edi
mov dword [esp], ebx
mov ebx, esp
push esi
mov esi, 0x3ff0a1c5
not esi
add esi, 0x3ff0a1ca
add ebx, esi
pop esi
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
jmp 0xc0ac8f
push edx
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x7ce000bb
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], eax
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
sub esp, 4
mov dword [esp], edi
mov edi, 0x78ef09f4
push ebx
mov ebx, 0x78f009f4
sub edi, ebx
pop ebx
and ecx, edi
push dword [esp]
pop edi
add esp, 4
jmp 0xc6b028
push eax
push esi
mov dword [esp], ebx
mov ebx, 0x737e4182
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
mov eax, dword [esp]
push eax
push esp
pop eax
push esi
mov esi, 0x7ffe68c0
xor esi, 0x7ffe68c4
add eax, esi
pop esi
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push dword [ebp - 0x18]
push dword [esp]
push dword [esp]
pop edx
add esp, 4
add esp, 4
jmp 0xc0c7e7
push edi
push esp
pop edi
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
mov dword [esp], 0x5336f54a
mov dword [esp], eax
push esi
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop eax
push edi
push esp
pop edi
push edx
mov edx, 4
add edi, edx
pop edx
add edi, 4
xchg dword [esp], edi
pop esp
and edx, eax
push edx
mov edx, esp
push ebx
mov dword [esp], eax
push 0x3765f7b6
pop eax
neg eax
xor eax, 0x739b86f3
add eax, 0x44fe714b
add edx, eax
pop eax
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push dword [esp]
pop eax
push edx
push esp
pop edx
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
jmp 0xcb4158
jmp 0xc524c0
jmp 0xc687ff
call fcn.00449a20
jmp 0xc8a1cc
jmp 0xc524c0
sub esp, 4
mov dword [esp], ebx
push ebp
mov ebp, 0x48019723
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
push edx
mov edx, 0x65d5a318
shr edx, 1
inc edx
sub edx, 0xb36d40a2
push ebp
mov ebp, 0x7fff7101
or ebp, 0x70f3f333
add ebp, 0x5fdf7952
sub ebp, 0x64e1c03f
add ecx, ebp
pop ebp
sub ecx, edx
sub ecx, 0x7afdac46
mov edx, dword [esp]
add esp, 4
add ecx, eax
add ecx, 0x7f7d90eb
push dword [esp]
push dword [esp]
pop ecx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push ebx
mov ebx, esp
add ebx, 4
push ebp
push 4
pop ebp
sub ebx, ebp
pop ebp
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], edx
push ebp
push esp
pop ebp
add ebp, 4
push edx
mov edx, 4
sub ebp, edx
pop edx
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push edi
push esp
pop edi
push esi
mov esi, 4
add edi, esi
pop esi
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0xcca71e
push edx
mov edx, esp
push esi
mov esi, 4
add edx, esi
pop esi
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
mov dword [esp], edx
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ebx
pop eax
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push dword [ebp - 0x18]
mov eax, dword [esp]
push esi
push esp
mov esi, dword [esp]
add esp, 4
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0xc3acfc
test eax, eax
jmp 0xc43b82
xor edx, edx
jmp 0xc3cf10
push dword [ebp - 0x18]
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0xca1e74
push dword [0x64ed2c]
push dword [esp]
mov esi, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
jmp 0xc5e5b9
push ebp
push esp
pop ebp
push eax
push ebp
mov ebp, 0x333f566a
neg ebp
add ebp, 0x333f566e
mov eax, ebp
pop ebp
add ebp, eax
pop eax
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
push 0x2cb635cc
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop edx
push 0x2a4d171b
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
xchg dword [esp], ecx
pop esp
push ebx
mov ebx, 0x7bf9f25a
or ebx, 0x5aff6ce0
shr ebx, 8
or ebx, 0x63ff519a
add ebx, 0x6dff770d
or ebx, 0x7fff530e
sub ebx, 0xd18f0d9c
mov dword [0x64ea8c], ebx
push dword [esp]
pop ebx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
push edi
push ebp
mov dword [esp], esi
push 0x58248c3e
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], edx
push ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
mov edx, dword [esp]
push edx
mov edx, esp
push edi
mov edi, 4
add edx, edi
pop edi
push eax
mov eax, 4
add edx, eax
pop eax
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0xc84d50
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], ebx
push edi
push esp
pop edi
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push ebp
mov ebp, esp
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
mov dword [esp], edi
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov edx, dword [esp]
push esi
push esp
pop esi
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
jmp 0xc328fa
push dword [0x64e024]
push dword [esp]
mov ecx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
push edi
mov dword [esp], ecx
mov ecx, esp
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], eax
push 0x1d654b96
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edx
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
push esi
push ecx
mov ecx, 0x735ff5fb
mov esi, ecx
pop ecx
dec esi
and esi, 0x4fedf438
xor esi, 0x434df43c
add ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
jmp 0xcc3328
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0xc7d310
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xccb4aa
push edx
push 0x4f922cb0
mov dword [esp], esi
push 0x43def9de
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebx
push ecx
push dword [esp]
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
push ecx
mov ecx, 4
sub edx, 0x73d5d660
add edx, ecx
push esi
mov esi, 0x63ff4beb
neg esi
add esi, 0xd7d5224b
add edx, esi
pop esi
pop ecx
xchg dword [esp], edx
pop esp
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push edi
mov edi, esp
add edi, 4
push ebp
mov ebp, 4
sub edi, ebp
pop ebp
xchg dword [esp], edi
pop esp
mov dword [esp], eax
mov dword [esp], ecx
push 0x7654fa5
mov dword [esp], edi
mov edi, 0x13cfdfad
push ecx
push 0x73498291
pop ecx
xor ecx, 0x550b7920
xor edi, ecx
pop ecx
sub ecx, edi
pop edi
add ecx, eax
add ecx, 0x358d241c
mov ecx, dword [esp]
push 0x526be055
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push eax
mov eax, 4
add ecx, eax
pop eax
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
jmp 0xc2c26e
push dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
mov eax, dword [esp]
push eax
mov eax, esp
push edx
mov edx, 0x35efd04f
shl edx, 4
shr edx, 2
dec edx
xor edx, 0x17bf413f
add eax, edx
pop edx
push ecx
mov ecx, 4
add eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
jmp 0xc6a964
push edi
push ecx
mov ecx, 0x7156df93
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
mov dword [esp], 0x3a2b4c42
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push edx
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop ebx
push 0x691d94e1
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
push dword [0x64e028]
push dword [esp]
pop ecx
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
push 0x5c248217
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push eax
mov eax, 4
add ebx, eax
pop eax
xchg dword [esp], ebx
mov esp, dword [esp]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0xc9620d
push ecx
push esp
pop ecx
push eax
mov eax, 4
add ecx, eax
pop eax
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ecx
add ecx, 0x59eb054f
sub ecx, 0x76dc0ba3
add ecx, eax
add ecx, 0x76dc0ba3
push edx
mov edx, 0x777bac40
add edx, 0xe26f590f
push edi
mov edi, 0x779d5d38
add ecx, edi
pop edi
sub ecx, edx
sub ecx, 0x779d5d38
pop edx
push dword [esp]
pop ecx
push edi
mov edi, esp
add edi, 4
push ecx
mov ecx, 4
add edi, ecx
pop ecx
xchg dword [esp], edi
mov esp, dword [esp]
push ebx
mov dword [esp], edx
push 0x39e032de
mov dword [esp], ebp
mov ebp, 0x64ea88
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
jmp 0xc1d0e7
push ebx
mov dword [esp], edx
push esi
mov esi, 0x7dbede14
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], ecx
push ebx
mov ebx, 0x7daf6b03
xor ebx, 0x67b0884
sub ecx, ebx
pop ebx
add ecx, eax
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], esi
mov esi, 0x7bd46387
add ecx, esi
pop esi
push dword [esp]
pop ecx
push ebp
mov ebp, esp
push ebx
mov ebx, 0x7cddc359
sub ebx, 0x7cddc355
add ebp, ebx
pop ebx
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
mov al, byte [0x64e033]
push ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 0x6ffeb53f
inc edx
shl edx, 1
add edx, 0x37fd73a4
shl edx, 5
inc edx
sub edx, 0xff5bc47d
sub ebx, edx
pop edx
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ebp
mov dword [esp], ecx
push edx
mov edx, 0x67bebf2c
add ecx, edx
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
sub ecx, 0x7733651e
add ecx, eax
add ecx, 0x7733651e
sub ecx, 0x67bebf2c
mov ecx, dword [esp]
push edx
push esp
mov edx, dword [esp]
add esp, 4
add edx, 4
push ecx
mov ecx, 0x7dff909d
shr ecx, 4
dec ecx
sub ecx, 0xf6d4743
or ecx, 0x75bfad45
sub ecx, 0xfdffbdc1
add edx, ecx
pop ecx
xchg dword [esp], edx
pop esp
jmp 0xc2aa4a
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
jmp 0xc4c61c
ja 0xcaf0d7
jmp 0xc687ff
push edi
mov edi, esp
push esi
mov esi, 0x42ef9964
xchg esi, edx
not edx
xchg esi, edx
not esi
add esi, 0xbd1066a0
add edi, 0x7ecf03a9
add edi, esi
sub edi, 0x7ecf03a9
pop esi
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edx
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
mov dword [esp], ecx
pop edx
push dword [esp]
pop edx
push edi
push esp
pop edi
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
sub esp, 4
mov dword [esp], edx
push edi
push esi
mov dword [esp], 0x64ec68
pop edi
mov dword [esp + 4], edi
pop edi
jmp 0xc26356
sub esp, 4
mov dword [esp], edi
push edx
mov edx, 0x655e0fbc
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
pop dword [ebp - 0x10]
push eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 4
sub eax, ecx
pop ecx
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], ecx
mov dword [esp], eax
push 0x2f68f888
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
push esi
mov esi, 0x7fb739bb
or esi, 0x7dc7dd73
shl esi, 4
neg esi
sub esi, 0x80204c
add ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
jmp 0xcb7cf0
push edx
mov dword [esp], ebx
push eax
push 0x64ec68
pop eax
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
jmp 0xc5a56e
push edx
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
push edi
mov edi, 0x7dbf655f
inc edi
neg edi
or edi, 0x78efc13e
sub edi, 0xfaefdbba
add ebx, edi
pop edi
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov eax, dword [esp]
push eax
push esi
mov dword [esp], esp
push ecx
mov ecx, 4
add dword [esp + 4], ecx
pop ecx
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push esi
sub esp, 4
mov dword [esp], eax
push ebx
push 0xd7f4562
pop ebx
xor ebx, 0x7fbca41f
and ebx, 0x31ff7e48
dec ebx
neg ebx
add ebx, 0x31284caf
mov eax, ebx
pop ebx
mov dword [esp + 4], eax
pop eax
push eax
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], ebx
push ecx
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
add esp, 4
mov ebx, dword [esp]
push esi
push esp
mov esi, dword [esp]
add esp, 4
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0xc28a35
push ecx
mov ecx, esp
add ecx, 4
push eax
mov eax, 4
sub ecx, eax
mov eax, dword [esp]
add esp, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov dword [esp], ecx
push ebx
mov ebx, 0x73ffcf99
add ebx, 0xa1af0d7
sub ecx, ebx
pop ebx
add ecx, eax
push 0xe72f53a
mov dword [esp], edx
mov edx, 0x7e1ac070
add ecx, 0x4bdb7cfa
add ecx, edx
sub ecx, 0x4bdb7cfa
pop edx
push dword [esp]
mov ecx, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add esp, 4
push dword [ebp - 0x10]
push dword [esp]
pop ecx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xc14ae8
push esi
mov esi, esp
push edi
mov edi, 4
add esi, 0x476f8723
add esi, edi
sub esi, 0x476f8723
pop edi
push edi
mov edi, 4
sub esi, edi
pop edi
xchg dword [esp], esi
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], ebx
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov al, byte [0x64e03c]
jmp 0xcbddbe
push 0x5f6c0795
mov dword [esp], edx
mov edx, esp
add edx, 4
push eax
mov eax, 4
sub edx, eax
pop eax
xchg dword [esp], edx
pop esp
mov dword [esp], eax
pop dword [0x84ee38]
push ecx
mov ecx, esp
push ebp
mov ebp, 0x37fb8102
xor ebp, 0x5fcdbeb0
shl ebp, 3
sub ebp, 0x1156068b
add ebp, 0xcfa408ff
add ecx, ebp
pop ebp
sub ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
push ebp
mov dword [esp], 0x25fb6486
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
push ecx
push esp
push dword [esp]
pop ecx
add esp, 4
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xc1b12f
push dword [ebp - 0x10]
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
push 0x5c7a425
mov dword [esp], edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
push esi
mov dword [esp], ebx
push edx
mov edx, 0x5e6c3d98
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], edx
push ecx
mov dword [esp], 0x2f749c82
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
sub esp, 4
mov dword [esp], eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
jmp 0xc942b4
cmp ecx, dword [ebp - 0x1c]
jmp 0xc5ec8d
mov dx, word [ecx]
jmp 0xc62467
push ebx
mov dword [esp], edi
push ebp
push edi
mov edi, 0x2bbb5e2d
sub edi, 0x77fb483c
shr edi, 6
shr edi, 5
not edi
neg edi
xor edi, 0x13627bf3
mov ebp, edi
pop edi
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push 0x6529f
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
mov eax, dword [esp]
push 0x7b0e43e6
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
mov byte [0x64e03c], al
push ecx
mov ecx, esp
push edi
push ebx
push 0x3dbfd712
pop ebx
shr ebx, 5
xor ebx, 0x7a1a3aef
mov edi, ebx
pop ebx
neg edi
add edi, 0x7bf7c45b
add ecx, edi
pop edi
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
sub ecx, 0x26f584ec
sub ecx, 0x4adfa91d
add ecx, eax
add ecx, 0x4adfa91d
sub esp, 4
mov dword [esp], edx
mov edx, 0x26f584ec
sub ecx, 0x3fea7c9e
add ecx, edx
add ecx, 0x3fea7c9e
pop edx
push dword [esp]
push dword [esp]
pop ecx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
jmp 0xc2786f
je 0xc524c0
jmp 0xc1f4ba
push eax
push esi
mov dword [esp], ebp
push 0xf337952
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
push 0x6bb139a3
mov dword [esp], ecx
mov edx, dword [esp]
push edi
mov edi, esp
push ecx
mov ecx, 0x7555eaae
xor ecx, 0x578f2c59
not ecx
dec ecx
inc ecx
shl ecx, 7
xor ecx, 0x929c8404
add edi, ecx
pop ecx
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
push eax
mov eax, 4
add ebp, eax
pop eax
xchg dword [esp], ebp
pop esp
push ebp
mov dword [esp], esi
push esp
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edx
pop dword [ebp - 0x10]
jmp 0xc3715a
push ebp
mov dword [esp], 0x4afd5593
mov dword [esp], edx
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0xcb5650
push esi
mov esi, esp
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
mov esi, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
pop dword [esp]
pop esp
mov dword [esp], ecx
push ebp
mov dword [esp], edi
mov edi, 0x75f619a9
sub ecx, edi
mov edi, dword [esp]
add esp, 4
add ecx, 0x5bef1e25
add ecx, eax
sub ecx, 0x5bef1e25
add ecx, 0x75f619a9
mov ecx, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
push ecx
mov ecx, 0x7d7f3ed5
dec ecx
sub ecx, 0x767f1dc1
xor ecx, 0x7002117
add ebp, ecx
pop ecx
xchg dword [esp], ebp
mov esp, dword [esp]
push edx
mov dword [esp], ebp
mov dword [esp], ecx
mov dword [esp], edx
mov dword [esp], eax
pop dword [0x84ee40]
push 0x54bf7528
mov dword [esp], ecx
push edi
mov edi, 0x55828f7f
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push edi
mov edi, esp
push eax
mov eax, 0x337faa97
sub eax, 0x7f9be9d7
or eax, 0x7beb5918
neg eax
shl eax, 3
add eax, 0xdf5ecec4
add edi, eax
pop eax
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xc1d808
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], esi
mov dword [esp], edx
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
push edi
mov edi, 0x5fff02db
and edi, 0xd6b84f5
inc edi
and edi, 0x7dec2796
and edi, 0x7dfff54e
sub edi, 0x7bbd2dd2
sub edi, 0x91aad22c
add ebx, edi
pop edi
xchg dword [esp], ebx
pop esp
push ecx
sub esp, 4
mov dword [esp], esi
push ebx
mov dword [esp], 0x64ec68
pop esi
mov dword [esp + 4], esi
pop esi
sub esp, 4
mov dword [esp], eax
push edi
mov edi, 0xd371f5d
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], edx
push 0x3fd2e78f
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
mov esp, dword [esp]
jmp 0xcce1e0
cmp dword [ebp - 0x10], 0x1000000
jmp 0xc31a9c
lea ecx, [eax + edx + 0x64ea78]
jmp 0xcdb089
sub edx, 0x7bdf900d
add edx, 0x7ffe92ac
push ebx
mov ebx, 0x7b738b9d
sub ebx, 0xfc96cfe3
sub edx, ebx
pop ebx
sub edx, ecx
add edx, 0x7edcbbba
push ebp
mov ebp, 0x7ffe92ac
sub edx, ebp
pop ebp
add edx, 0x7bdf900d
jmp 0xc7d78a
jae 0xcce56e
jmp 0xc31b1a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xccb4a3
push edx
push esi
push 0x51c021e5
mov esi, dword [esp]
add esp, 4
mov dword [esp + 4], esi
pop esi
mov dword [esp], edx
push ecx
push dword [esp]
push dword [esp]
pop edx
add esp, 4
add esp, 4
push dword [esp]
pop edx
push eax
mov eax, esp
push ebp
mov ebp, 0x1fbdf05a
shr ebp, 1
neg ebp
and ebp, 0x6fe6934a
and ebp, 0x72ef6c83
sub ebp, 0x601ffffe
add eax, ebp
pop ebp
push edi
mov edi, 4
add eax, edi
pop edi
xchg dword [esp], eax
pop esp
push esi
push 0x6fbb7d38
pop esi
push 0
sub dword [esp], esi
pop esi
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x904482c2
xor esi, ebp
pop ebp
mov dword [ebp - 0x14], esi
pop esi
sub esp, 4
mov dword [esp], edi
push eax
mov eax, 0x344b9035
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
mov dword [esp], ecx
sub ecx, 0x3af74d38
push eax
mov dword [esp], ebx
mov ebx, 0x7b3facd3
or ebx, 0x7d5fe413
inc ebx
add ebx, 1
add ebx, 0xddfc725d
add ecx, ebx
pop ebx
add ecx, eax
sub ecx, 0x5d7c5f32
add ecx, 0x3af74d38
push dword [esp]
pop ecx
push esi
mov esi, esp
push edx
mov edx, 4
add esi, edx
pop edx
push ecx
mov ecx, 4
add esi, ecx
pop ecx
xchg dword [esp], esi
pop esp
jmp 0xcaa883
push edi
mov edi, esp
add edi, 4
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
pop dword [ebp - 0x18]
push ebp
push 0x4caeb3a2
mov dword [esp], ebx
mov ebx, 0x30324b9
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], ebx
push 0x39f37f15
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop ebx
push 0x7af69b0f
mov dword [esp], edx
mov edx, esp
push eax
mov eax, 0x5de6d100
dec eax
or eax, 0x6bff34c9
not eax
shl eax, 1
xor eax, 0x5f3b68bd
xor eax, 0x5f3b7eb9
add edx, eax
pop eax
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xccbe76
push ebx
sub esp, 4
mov dword [esp], esi
mov dword [esp], 0x4550
pop ebx
push ebx
pop dword [ebp - 0xc]
pop ebx
push ebx
sub esp, 4
mov dword [esp], eax
push 0x12a31fbe
pop eax
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
push esi
push eax
mov eax, 0x609b7e5
mov dword [esp + 4], eax
pop eax
mov dword [esp], esi
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push esi
push esp
pop esi
add esi, 4
add esi, 4
push 0x2fd3b114
mov dword [esp], esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
jmp 0xc2a9b6
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push edi
mov edi, 4
sub ebx, edi
pop edi
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ecx
add ecx, 0x1d7d82e0
add ecx, eax
push edx
push ebx
mov ebx, 0x7dbb747b
mov edx, ebx
pop ebx
dec edx
sub edx, 0x477f9f4a
sub edx, 0x3f43defb
not edx
add edx, 0x14757916
sub ecx, edx
push dword [esp]
pop edx
add esp, 4
mov ecx, dword [esp]
push ecx
mov ecx, esp
push edi
push 0x757f3356
pop edi
inc edi
xor edi, 0x757f3353
add ecx, edi
pop edi
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
xchg dword [esp], ecx
pop esp
jmp 0xcee806
push ebp
mov dword [esp], ecx
push 0x705255ba
mov dword [esp], ebx
mov ebx, 0x1d8d859e
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
push edx
mov dword [esp], eax
mov dword [esp], ecx
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov edx, dword [esp]
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
push esi
mov esi, 4
add ebp, esi
pop esi
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
push ecx
push 5
pop ecx
add ecx, edx
push edx
push 0
pop edx
add edx, ecx
xor esi, dword [edx]
pop edx
mov ecx, dword [esp]
add esp, 4
push edx
push 0x667096f1
mov dword [esp], esp
add dword [esp], 4
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], edx
push ecx
mov dword [esp], 0x2b32a7d3
mov dword [esp], ecx
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop edx
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0xc28a40
je 0xc17d73
jmp 0xc1ce08
je 0xc31a91
jmp 0xc1b125
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edx
mov edx, 0x6c6c642e
mov dword [0x64ea92], edx
mov edx, dword [esp]
add esp, 4
jmp 0xc567aa
cmp edx, dword [ebp - 0xc]
jmp 0xc5ec98
cmp dword [0xa4ed98], 0x23f0
jmp 0xc5389c
sub esp, 4
mov dword [esp], edi
mov dword [esp], esi
mov dword [esp], eax
pop dword [ebp - 0x10]
push ebx
push edx
mov dword [esp], edi
mov edi, 0x4ce5f141
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], ecx
push edx
push 0x5ff7eb0c
pop edx
inc edx
dec edx
push ecx
mov ecx, 0x3439345e
xor edx, ecx
pop ecx
sub ecx, edx
pop edx
add ecx, eax
push edx
mov edx, 0x5fffc3e9
neg edx
shl edx, 7
and edx, 0x27efbe4d
dec edx
add edx, 0x6bc0d553
add ecx, edx
pop edx
push dword [esp]
pop ecx
push ebx
mov dword [esp], 0x41a06323
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0xc35671
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], ecx
pop dword [ebp - 0x10]
jmp 0xc3c3d9
jne 0xcc1254
jmp 0xc772fe
sub esp, 4
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], edx
push edi
mov dword [esp], ecx
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
push esi
mov esi, 4
add edx, esi
pop esi
xchg dword [esp], edx
pop esp
push dword [esp]
pop edx
sub esp, 4
mov dword [esp], eax
mov eax, esp
push edx
mov edx, 4
add eax, edx
pop edx
add eax, 4
xchg dword [esp], eax
pop esp
jmp dword [eax + 0xa4ed98]
push ecx
mov dword [esp], ebx
push eax
mov eax, 0x4f7e0b77
mov dword [esp + 4], eax
pop eax
mov dword [esp], eax
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [0x84ee40]
mov edx, dword [esp]
push edi
push 0x1136c931
mov dword [esp], esp
add dword [esp], 4
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xc2558d
push esi
mov dword [esp], 0x1b5fcc3c
mov dword [esp], eax
push eax
mov eax, 0x23588199
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebx
push ebx
mov dword [esp], 0x757fa8f1
mov dword [esp], ecx
mov ebx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov ebx, dword [esp]
push ebx
mov dword [esp], eax
push esp
mov eax, dword [esp]
add esp, 4
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
mov dword [esp], 0xb3ff6f6
mov dword [esp], edx
pop dword [0x64e020]
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edi
push esi
mov esi, 0x72ffc22
mov dword [esp + 4], esi
pop esi
mov dword [esp], edx
push 0xb70588d
mov dword [esp], ebp
push esi
mov esi, 0x41a9b55c
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
pop edx
push dword [esp]
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
jmp 0xc95932
push edx
mov dword [esp], ebp
mov ebp, esp
push esi
mov dword [esp], ebx
mov ebx, 0x79afecf6
neg ebx
shl ebx, 3
shr ebx, 5
sub ebx, 0x19404be
add ebp, ebx
pop ebx
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
push 0x56b532d
mov dword [esp], eax
mov dword [esp], ebx
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop eax
push 0x60a4cf3b
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ecx
mov cx, 0x6974
xor cx, 0x510
push cx
pop word [0x64ea90]
mov ecx, dword [esp]
push ebx
mov ebx, esp
push edi
mov edi, 0x7fff7cd9
sub edi, 0x7fff7cd5
add ebx, edi
pop edi
add ebx, 4
xchg dword [esp], ebx
pop esp
push eax
push 0x16ffec20
mov dword [esp], esp
add dword [esp], 4
pop eax
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push edx
push esp
pop edx
push eax
mov eax, 4
add edx, eax
pop eax
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
push dword [esp]
pop eax
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xca4905
push dword [0x64ed2c]
mov esi, dword [esp]
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push 0x48c3a9f
mov dword [esp], ebx
push edx
mov dword [esp], eax
mov eax, 0x446c68b5
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebx
push 0x55cff9d6
mov dword [esp], ebp
mov dword [esp], ecx
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop ebx
push 0x2effeb3d
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0xcb7b8a
add esp, 4
jmp 0xc1dd7c
mov cx, word [eax]
jmp 0xc3cf08
jne 0xca94c3
jmp 0xcb0a56
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xcb4424
push edx
mov dword [esp], edi
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
pop edx
push edx
push esp
pop edx
add edx, 4
push ebx
mov ebx, 4
add edx, ebx
pop ebx
xchg dword [esp], edx
pop esp
imul eax, ecx
sub esp, 4
mov dword [esp], ebx
mov dword [esp], edx
mov dword [esp], esi
mov dword [esp], edx
push esi
mov esi, esp
add esi, 4
push edx
mov edx, 4
sub esi, edx
pop edx
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ecx
pop edx
push dword [esp]
pop edx
push ecx
mov ecx, esp
push ebp
mov ebp, 4
add ecx, ebp
pop ebp
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
jmp 0xcba158
push edi
push 0x1bbd18b0
mov dword [esp], esi
mov esi, 0x7b1aab23
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], edx
push ecx
push dword [esp]
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push ebp
push 0x7d2f42fb
pop ebp
push esi
mov esi, 0
sub esi, ebp
mov ebp, esi
pop esi
shl ebp, 6
xor ebp, 0xb42f5140
add edx, ebp
push dword [esp]
pop ebp
add esp, 4
jmp 0xc441cd
xor eax, eax
push ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 4
sub ebx, edx
pop edx
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
sub ecx, 0x37bbcc87
add ecx, 0x577c7d6e
add ecx, eax
sub ecx, 0x577c7d6e
push esi
mov esi, 0x2eef7fa4
and esi, 0x69d38df2
neg esi
push ecx
mov ecx, 0x7d6d7849
shr ecx, 3
add ecx, 0x45fc4dc7
or ecx, 0x19cdd91b
xor ecx, 0x7fdf034e
add ecx, 0x7ffaf991
xor ecx, 0xcdd6d166
or esi, ecx
pop ecx
push ebp
mov ebp, 0xc8442ed9
sub esi, ebp
pop ebp
add ecx, esi
pop esi
mov ecx, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
push eax
mov eax, 4
sub ebp, 0x6dfeabf0
add ebp, eax
add ebp, 0x6dfeabf0
pop eax
xchg dword [esp], ebp
pop esp
jmp 0xc2cca7
push edi
push 7
push dword [esp]
pop edi
add esp, 4
or ecx, edi
mov edi, dword [esp]
add esp, 4
jmp 0xc8d9a9
push edi
push edx
push 0x1000
pop edx
push edx
pop edi
mov edx, dword [esp]
add esp, 4
sub eax, edi
pop edi
push esi
push esp
pop esi
add esi, 4
sub esi, 4
push edx
mov dword [esp], esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push dword [esp]
mov ebx, dword [esp]
push ebx
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add esp, 4
jmp 0xc32376
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], esi
mov dword [esp], 0x6b88207a
mov dword [esp], esi
mov dword [esp], eax
push 0xee59aa0
mov dword [esp], ebx
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
push edx
mov edx, 0x7f3eba1e
xor edx, 0x7f3eba1a
add edi, edx
pop edx
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
mov esp, dword [esp]
xor ecx, ecx
push eax
mov eax, esp
push ecx
mov ecx, 0xfade6df
neg ecx
add ecx, 0x7afb1752
xchg ecx, ebx
not ebx
xchg ecx, ebx
sub ecx, 0x5f9f9eac
sub ecx, 0x53fb074c
xor ecx, 0xe1182990
add eax, ecx
pop ecx
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], edx
push 0x4d8d025e
mov dword [esp], ecx
mov edx, dword [esp]
push eax
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
push ebp
mov ebp, 0x39ff118b
sub ebp, 0x7fd9a938
dec ebp
or ebp, 0x7eb01e1a
xor ebp, 0xfeb57e5e
add esi, 0x6d7f0a88
add esi, ebp
sub esi, 0x6d7f0a88
pop ebp
xchg dword [esp], esi
pop esp
jmp 0xc8a1d4
mov al, byte [0x64ea91]
jmp 0xcce296
push ebx
mov ebx, esp
push ecx
mov ecx, 0x7eff91b5
not ecx
push edx
mov edx, 0x7e3f1d55
not edx
xor edx, 0x5cff85e1
shl edx, 7
sub edx, 0x7dcec997
shr edx, 8
xor edx, 0x7f58f679
or ecx, edx
pop edx
sub ecx, 0xff797ee6
add ebx, ecx
pop ecx
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ecx
add ecx, 0x52f73b42
sub ecx, 0x17fd2411
add ecx, eax
add ecx, 0x17fd2411
push ebp
mov dword [esp], esi
mov dword [esp], ebx
mov ebx, 0x3fca0a93
add ebx, 0x7dff685d
sub ebx, 0x6ad237ae
sub ecx, ebx
pop ebx
push dword [esp]
mov ecx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push eax
push edx
mov edx, 0x7e30eaf1
mov dword [esp + 4], edx
pop edx
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], ecx
sub ecx, 0x77ddd064
push ebx
mov ebx, 0x7fffac65
add ecx, ebx
pop ebx
add ecx, eax
sub ecx, 0x7fffac65
push ebx
push edx
mov edx, 0x5df94f4c
add edx, 0x6cf5db49
xor edx, 0x5b77864e
sub edx, 0x19badc77
mov ebx, edx
pop edx
add ecx, ebx
pop ebx
push dword [esp]
mov ecx, dword [esp]
push edx
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
jmp 0xc34ffa
push ecx
push 0x706d6f63
mov ecx, dword [esp]
add esp, 4
push ebp
mov dword [esp], ecx
pop dword [0x64ea8a]
pop ecx
jmp 0xcdd015
push eax
mov eax, 8
push ebx
mov ebx, esp
push edx
mov edx, 4
add ebx, edx
pop edx
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
pop dword [ebp - 8]
pop eax
push ecx
mov dword [esp], eax
push ebx
mov ebx, 0x163d1065
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edi
mov dword [esp], ecx
add ecx, 0x7effd550
add ecx, eax
sub esp, 4
mov dword [esp], edx
mov dword [esp], eax
mov eax, 0x65fd0a57
shr eax, 1
shl eax, 5
add eax, 0x1f2f2ff0
sub ecx, eax
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop ecx
push eax
mov eax, esp
add eax, 4
sub esp, 4
mov dword [esp], edi
mov edi, 4
add eax, edi
pop edi
xchg dword [esp], eax
pop esp
jmp 0xc52159
push ecx
mov ecx, esp
push eax
mov eax, 0x5d5f35b5
add eax, 0x5fe43774
shl eax, 6
dec eax
not eax
neg eax
push ecx
mov ecx, 0xaf24b5c4
add eax, ecx
pop ecx
add ecx, eax
pop eax
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [ebp - 0x10]
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0xc9c862
jmp 0x4db25a
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push eax
mov eax, 0x6f37c9f7
xor eax, 0x5fdfe953
shr eax, 1
and eax, 0x377d80a3
inc eax
inc eax
sub eax, 0x10740000
sub ecx, eax
pop eax
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
mov dword [esp], eax
push edi
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
push 0x44d038ff
mov dword [esp], edx
mov edx, 4
add esi, edx
mov edx, dword [esp]
add esp, 4
xchg dword [esp], esi
pop esp
jmp dword [eax + 0xa4ed98]
push edi
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop edi
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edx
pop dword [0x64e024]
jmp 0xcaf0d7
push 0x23db5424
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
push ebx
push dword [esp + 4]
mov ebx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], ebx
push ecx
push dword [esp]
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], eax
mov eax, esp
push edx
mov edx, 0x4ef62964
xor edx, 0x6df74d22
or edx, 0x73fb2689
xchg edx, esi
not esi
xchg edx, esi
dec edx
add edx, 0x73fb66d5
add eax, edx
pop edx
add eax, 4
xchg dword [esp], eax
pop esp
push 0x525b463a
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
push edx
mov edx, 4
sub ebx, edx
pop edx
xchg dword [esp], ebx
pop esp
mov dword [esp], edx
jmp 0xc1cdfe
push edx
mov edx, esp
add edx, 4
push eax
mov eax, 4
sub edx, eax
pop eax
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], eax
pop dword [0x64ee3c]
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
push 0xef70a99
mov dword [esp], ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], esi
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
mov ebx, dword [esp]
push ecx
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
mov ebp, dword [esp]
add esp, 4
pop dword [esp]
pop esp
jmp 0xcafef6
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebp
mov dword [esp], edi
mov dword [esp], ecx
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], eax
mov eax, 0x56f85617
add eax, 0x1802ef50
sub ecx, eax
pop eax
add ecx, eax
push esi
mov esi, 0x6efb4567
add ecx, esi
pop esi
push dword [esp]
pop ecx
push 0x320d123e
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push dword [ebp - 4]
push dword [esp]
pop ecx
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
mov dword [esp], 0x62b54ebc
mov dword [esp], ecx
add ecx, 0x2ee731bf
add ecx, 0x5be3da81
push esi
push 0xafb1f1b
pop esi
sub ecx, esi
pop esi
add ecx, eax
add ecx, 0xafb1f1b
sub ecx, 0x5be3da81
sub ecx, 0x2ee731bf
mov ecx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push ebx
mov ebx, 0xfc95269
sub ebx, 0x7d573321
and ebx, 0x7ef60669
shl ebx, 3
push esi
mov esi, 0x537d093c
xor ebx, esi
pop esi
shl ebx, 7
sub ebx, 0x769dbdfc
add ecx, ebx
pop ebx
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0xc1dd83
push edx
push esp
pop edx
add edx, 4
push ebx
mov ebx, 4
sub edx, ebx
pop ebx
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], eax
push 0x489291c8
mov dword [esp], ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 0x129f953a
xor edx, 0x129f953e
add ebx, edx
pop edx
xchg dword [esp], ebx
pop esp
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push 0x35123883
mov dword [esp], ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
push ebx
mov ebx, 3
add ebx, 0x76eda284
add ebx, ecx
sub ebx, 0x76eda284
xor esi, dword [ebx]
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 4
add ecx, edx
pop edx
xchg dword [esp], ecx
pop esp
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edi
mov dword [esp], 0x3b88dc26
mov dword [esp], edx
mov dword [esp], ecx
add ecx, 0x1f7f6ed5
sub ecx, 0x5b3c803a
add ecx, eax
push edi
mov edi, 0x7bce3ba1
and edi, 0x5ed7f552
push ebx
mov ebx, 0x77e79bb0
xor edi, ebx
pop ebx
shl edi, 3
push 0
sub dword [esp], edi
pop edi
add edi, 0xc449d5ba
add ecx, edi
pop edi
sub ecx, 0x1f7f6ed5
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
jmp 0xc538a7
push edx
push ebp
push 0x6c2dc622
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
mov dword [esp], ecx
push eax
mov eax, 0x2deb72b8
sub ecx, eax
pop eax
sub ecx, 0x6f7fb971
add ecx, eax
push edx
push 0x6f7fb971
pop edx
add ecx, edx
pop edx
add ecx, 0x2deb72b8
push dword [esp]
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
push dword [ebp - 0x10]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
push ebp
push ebp
mov ebp, 0x75dde473
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], esi
mov dword [esp], edx
push edx
push edi
mov edi, 0x5d96aa55
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
jmp 0xc58327
xor dword [esi], 0xfffffff7
cmpsb byte [esi], byte es:[edi]
mov ah, 7
invalid
js 0xcb9cc3
loopne 0xcb9cc9
sbb dword [eax - 0x14e7c32], edx
cmp bh, byte [ecx + ecx*2 - 0xe]
imul dword [ecx - 0x657c647a]
adc dword [esi], esi
dec edx
inc edi
jb 0xcb9c46
retf
sbb eax, 0x93027c18
adc dword [ecx + 0x6958cb1a], edx
push edi
and esp, dword [esi + esi*2 - 0x5546696d]
movsb byte es:[edi], byte [esi]
jbe 0xcb9c66
xchg esi, eax
mov ecx, 0x2548b7aa
outsb dx, byte [esi]
lea edi, [edi]
cli
xchg ecx, eax
sbb cl, bl
pop eax
imul edx, dword [edi + 0x23], 0x969376a4
movsb byte es:[edi], byte [esi]
jbe 0xcb9c66
xchg esi, eax
mov ecx, 0x2548b7aa
outsb dx, byte [esi]
lea edi, [edi]
cli
or eax, dword [edi + ecx*2 - 0x1ce70ac4]
int1
sahf
sbb esp, dword [esi + 0x3c]
mov es, eax
or cl, byte [ebp + 0x28b607fa]
cli
pop es
mov dh, 0x28
jbe 0xcb9d17
pushal
cmpsd dword [esi], dword es:[edi]
clc
xor dword [ebx - 0x3e6567c4], ebp
loope 0xcb9d05
pop eax
jbe 0xcb9ced
jl 0xcb9d3e
cmp cl, byte [ebx + 0x42]
dec ebx
inc edx
inc esi
fadd st(4), st(0)
pop ss
loopne 0xcb9c91
xchg esi, eax
je 0xcb9d03
pop ds
in al, dx
or byte [ebp - 0x10c6ba39], dl
lodsd eax, dword [esi]
salc
enter 0x75d8, 0xffffffffffffffaa
dec esi
add al, 0x1e
int3
cmp al, 0x24
pop dword [ebp - 0x1c]
push dword [esp]
pop edi
add esp, 4
push 0x72206b85
mov dword [esp], ebp
mov dword [esp], eax
push edi
mov edi, 0x15f2a981
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
push eax
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop edx
push ecx
push ebp
mov dword [esp], esp
add dword [esp], 4
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xc595fe
push edx
push 0x585a1241
mov dword [esp], ecx
push esi
mov esi, 0x26f770a7
mov ecx, esi
pop esi
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
push ebp
mov ebp, esp
push 0x2fcdf1d4
mov dword [esp], esi
mov esi, 0x7f6f7fbc
inc esi
and esi, 0x789b6e8f
and esi, 0x15ce93c4
add esi, 0xeff5fd80
add ebp, esi
pop esi
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
pop ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push eax
mov eax, esp
push edi
mov edi, 0x4f7fe35d
add edi, 0x5bcf0656
dec edi
shr edi, 8
shr edi, 3
neg edi
sub edi, 0xffea961f
add eax, edi
pop edi
add eax, 4
xchg dword [esp], eax
pop esp
push dword [0x64e024]
push dword [esp]
pop edx
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push ebx
mov dword [esp], eax
push esp
pop eax
add eax, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ecx
add ecx, 0x7b8f2294
add ecx, eax
push esi
push 0x2fbdf2e4
pop esi
or esi, 0x7bfded5f
shl esi, 7
push edx
mov edx, 0x6bebb2f7
add edx, 0xe812209b
xor esi, edx
mov edx, dword [esp]
add esp, 4
shl esi, 3
and esi, 0x74cbf7ad
sub esi, 0xe4723dec
sub ecx, esi
pop esi
mov ecx, dword [esp]
push eax
mov eax, esp
push edx
mov edx, 4
add eax, edx
pop edx
push ebx
mov ebx, 4
add eax, ebx
pop ebx
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
jmp 0xc1a360
push ebp
mov dword [esp], esi
push ecx
mov ecx, 0x35656feb
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], edi
mov dword [esp], eax
push ebp
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
push dword [esp]
pop ecx
add esp, 4
pop dword [esp]
pop esp
and al, byte [0x64e03a]
sub esp, 4
mov dword [esp], ebx
mov dword [esp], ebp
mov dword [esp], edx
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push ebp
mov ebp, esp
push esi
mov esi, 0x38df6d5c
sub esi, 0x57bb4a93
and esi, 0x6e9d2d4d
and esi, 0x37fdd534
sub esi, 0x2003fffc
add ebp, esi
pop esi
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
push esi
mov esi, 4
add ebp, esi
pop esi
xchg dword [esp], ebp
pop esp
jmp 0xc42c6c
push esi
mov dword [esp], 0x799a4d5c
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebp
mov dword [esp], edx
push edi
mov dword [esp], 0x6fe91f94
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
push esi
mov esi, esp
push edi
mov edi, 0x48dfdd4e
dec edi
add edi, 0x65fffbab
add edi, 0x5120270c
add esi, edi
pop edi
push eax
mov eax, 4
add esi, eax
pop eax
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
push edx
push 0x7bf350ea
pop edx
push esi
mov esi, 0x5dfad1cd
push ebx
mov ebx, 0x7f0d40d5
sub ebx, 0xd984f217
add esi, ebx
pop ebx
xor edx, esi
mov esi, dword [esp]
add esp, 4
mov dword [0x64ea88], edx
pop edx
jmp 0xc261f2
shr ecx, 2
sub esp, 4
mov dword [esp], edi
mov edi, esp
push esi
mov esi, 0x5f4fa938
push ebp
mov ebp, 0x2f7aba62
add ebp, 0x38fa5e30
add ebp, 0x73ef891a
xor ebp, 0xa30b3bd0
or esi, ebp
pop ebp
xor esi, 0x7f6fbb78
add edi, esi
pop esi
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
add ecx, 0x2bbe3763
sub ecx, 0x6df7e1be
add ecx, eax
push edi
mov edi, 0x37efe300
dec edi
xor edi, 0x7f3f16b8
push edi
not dword [esp]
pop edi
dec edi
sub edi, 0x493729f9
sub ecx, 0x3cff1d8e
add ecx, edi
add ecx, 0x3cff1d8e
pop edi
sub ecx, 0x2bbe3763
push dword [esp]
pop ecx
push esi
mov esi, esp
push ebx
mov ebx, 0x6ef70683
neg ebx
or ebx, 0x6bd3138d
xor ebx, 0x3edf4437
xor ebx, 0xffe1ab7
not ebx
xor ebx, 0x35055a86
add esi, ebx
pop ebx
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
jmp 0xcc3c61
push edi
mov edi, esp
push ebx
mov ebx, 4
add edi, ebx
pop ebx
push esi
mov esi, 4
sub edi, esi
pop esi
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], edi
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
push dword [0x64e020]
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
push esi
mov esi, esp
push edx
mov edx, 0x7f407f5f
neg edx
dec edx
shl edx, 8
xor edx, 0x7fdfcb95
xor edx, 0xc05f6b91
add esi, edx
pop edx
push ebp
mov ebp, 4
sub esi, ebp
pop ebp
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], edx
push ecx
push edx
mov edx, 0x2168d26f
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
add esp, 4
jmp 0xc53865
push dword [ebp - 0x14]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push ebp
push ecx
push 0x265be232
pop ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], edx
push 0x25331e70
mov dword [esp], ecx
mov edx, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push esi
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xc524cc
push 0x770712db
mov dword [esp], eax
mov eax, esp
push ecx
mov ecx, 0x7399b6a6
and ecx, 0x7f3b1efb
add ecx, 0x1fbdcf05
sub ecx, 0x92d6e5a3
add eax, ecx
mov ecx, dword [esp]
add esp, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
mov ebx, dword [esp]
push esi
mov dword [esp], ebx
push 0x56b72697
mov dword [esp], esp
add dword [esp], 4
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push edi
push esp
mov edi, dword [esp]
add esp, 4
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], eax
pop dword [0x64ee3c]
sub esp, 4
mov dword [esp], esi
push esi
mov esi, 0x5087d4c8
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], ecx
add ecx, 0x7e76e490
add ecx, eax
sub esp, 4
mov dword [esp], eax
push 0x7e76e490
pop eax
sub ecx, eax
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop ecx
push 0xd9018d9
mov dword [esp], edi
mov edi, esp
push esi
mov esi, 0x79bb29e9
shl esi, 2
dec esi
neg esi
dec esi
xor esi, 0x376f9810
add esi, 0xd1833fb8
add edi, esi
pop esi
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x4db25a
cmp esi, eax
jmp 0xc8b9da
cmp esi, eax
jmp 0xc6fe75
push dword [ebp - 0x10]
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push esi
mov esi, 4
add ebx, esi
pop esi
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
jmp 0xcb4386
sub esp, 4
mov dword [esp], eax
push esi
mov esi, 0x224113c6
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov dword [esp], edx
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov eax, dword [esp]
push ebp
mov ebp, esp
push edx
mov edx, 0x6bf62528
and edx, 0x7f67a219
inc edx
xor edx, 0x6b66200d
add ebp, edx
pop edx
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push edi
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 4
sub ebx, ebp
pop ebp
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ebx
push edi
mov dword [esp], ecx
push dword [esp]
pop ebx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
mov ebx, dword [esp]
push edx
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
jmp 0xcced33
mov byte [0x64ea92], al
jmp 0xcdc7da
push edi
mov edi, esp
push edx
push edi
mov edi, 0x136df5bf
and edi, 0x7d7f98e5
not edi
add edi, 0x776ef4ca
sub edi, 0x1ddf24a5
sub edi, 0xcd2683e5
mov edx, edi
mov edi, dword [esp]
add esp, 4
shl edx, 2
inc edx
sub edx, 0xebeeee65
add edi, edx
pop edx
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ecx
push esp
pop ecx
push edx
mov edx, 0x7ddb6cb0
shl edx, 2
dec edx
or edx, 0x3edfdfbc
xor edx, 0xffffffbb
add ecx, edx
pop edx
add ecx, 4
xchg dword [esp], ecx
pop esp
mov edx, dword [esp]
push ebx
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push 0xbb8406c
mov dword [esp], ebx
push 0x32b28913
mov dword [esp], edi
mov edi, 0x64ec68
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ebp
push esp
pop ebp
push esi
mov esi, 0x73bfbd03
shl esi, 3
sub esi, 0x7dffbb12
shr esi, 7
xor esi, 0x3ffc5e
add ebp, esi
pop esi
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop ebx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
add esp, 4
jmp 0xca7d31
push dword [ebp - 8]
mov edx, dword [esp]
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
push ebx
mov ebx, 4
add edi, ebx
pop ebx
xchg dword [esp], edi
pop esp
sub esp, 4
mov dword [esp], esi
push esp
pop esi
push edi
mov edi, 4
add esi, edi
pop edi
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov edx, dword [esp]
push 0x547d3ea8
mov dword [esp], ebx
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
jmp 0xcc61a8
push 0x7f68d203
mov dword [esp], ebx
mov dword [esp], ecx
push ebx
mov ebx, 0x8a41e70
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
push ecx
mov edx, dword [esp]
sub esp, 4
mov dword [esp], edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 4
add eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
sub esp, 4
mov dword [esp], ebp
push eax
mov dword [esp], edx
mov edx, 0x20c0270
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
push ecx
push edi
mov dword [esp], ebp
mov ebp, 0x476807e8
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], eax
push ebx
mov dword [esp], ebp
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
pop eax
push edx
mov edx, esp
push esi
mov esi, 4
add edx, esi
mov esi, dword [esp]
add esp, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xc8b9e5
sub esp, 4
mov dword [esp], ecx
push edi
mov dword [esp], ebx
mov dword [esp], ecx
mov ecx, 0x64ec68
mov dword [esp + 4], ecx
pop ecx
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edi
mov dword [esp], ebp
mov dword [esp], ecx
push eax
mov eax, 0x77ffce60
sub ecx, eax
pop eax
add ecx, eax
push 0x62a342df
mov dword [esp], eax
mov eax, 0x7fddc260
xor eax, 0x8220c00
add ecx, eax
mov eax, dword [esp]
add esp, 4
mov ecx, dword [esp]
push edi
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0xc2a31a
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
add ecx, 0x7afb6347
add ecx, eax
push ebp
mov ebp, 0x7afb6347
push ebp
mov ebp, 0x3fbdcfd1
sub ecx, ebp
mov ebp, dword [esp]
add esp, 4
sub ecx, ebp
add ecx, 0x3fbdcfd1
pop ebp
push dword [esp]
pop ecx
push esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
push 0x61f3ce67
mov dword [esp], ecx
mov dword [esp], esi
mov esi, 0x7fffbfee
shl esi, 2
push edx
mov edx, 0xffffffff
add esi, edx
pop edx
sub esi, 0x96898b44
mov dword [0x64ea8e], esi
pop esi
push 0x2142ed91
mov dword [esp], ebx
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
mov edx, dword [esp]
push edi
mov edi, esp
push ecx
mov ecx, 4
add edi, ecx
pop ecx
add edi, 4
xchg dword [esp], edi
pop esp
mov edx, dword [esp]
push 0x1fbfb791
mov dword [esp], edx
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xc60b94
push dword [0x84ee40]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push edx
mov dword [esp], 0x11bf7d7a
mov dword [esp], eax
mov dword [esp], esi
mov dword [esp], edx
mov dword [esp], ecx
push edx
mov edx, 0x7bfb5538
add edx, 0x3fbd8293
inc edx
and edx, 0x3fbff790
shl edx, 6
neg edx
add edx, 0x5aef8697
add ecx, edx
pop edx
add ecx, 0x6c7e924e
add ecx, eax
sub ecx, 0x6c7e924e
push esi
mov esi, 0x6cb9a697
sub ecx, 0x7bcf6fe8
sub ecx, esi
add ecx, 0x7bcf6fe8
pop esi
mov ecx, dword [esp]
push ecx
mov ecx, esp
sub esp, 4
mov dword [esp], esi
mov esi, 0x7ffe7e53
or esi, 0x2fff76e4
not esi
or esi, 0x6ffee3bc
sub esi, 0x7eff860e
xor esi, 0x70ff5daa
add ecx, esi
pop esi
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0xc88e98