Function at 0xcef69a
Capabilities:
Accept command line arguments

Disassembly:
push dword [ebp - 4]
mov ecx, dword [esp]
push edi
mov edi, esp
push edx
mov edx, 4
add edi, edx
pop edx
push ecx
mov ecx, 4
add edi, ecx
pop ecx
xchg dword [esp], edi
pop esp
jmp fcn.00d5eeba
cmp dword [ebp - 0x10], 0x1000000
jmp 0xd40020
push edx
push esi
mov esi, 0x3437059b
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
mov dword [esp], edi
mov dword [esp], ecx
add ecx, 0x7765f6d0
push esi
mov esi, 0x77f93d05
inc esi
push ebx
mov ebx, 0
sub ebx, esi
xchg esi, ebx
pop ebx
shl esi, 5
push ebx
mov ebx, 0x77232bfa
add esi, ebx
pop ebx
add ecx, esi
pop esi
add ecx, eax
sub ecx, 0x77fb8b3a
sub ecx, 0x7765f6d0
push dword [esp]
pop ecx
push edx
push esp
pop edx
add edx, 4
push ebx
mov ebx, 4
add edx, ebx
pop ebx
xchg dword [esp], edx
pop esp
mov al, byte [0x64c033]
jmp 0xd138b3
call fcn.00449a70
jmp 0xd47d78
jmp 0xced7c0
and edx, eax
push esi
push ecx
push 0x6b22f0d4
pop ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
push dword [esp]
pop eax
push edi
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0xd12f6d
push dword [0x84cee0]
mov ecx, dword [esp]
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push eax
mov dword [esp], edx
mov dword [esp], ebx
push ebx
mov ebx, 0x63362b34
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov edx, dword [esp]
push ebp
push esp
mov ebp, dword [esp]
add esp, 4
add ebp, 4
push ebx
mov ebx, 4
add ebp, ebx
pop ebx
xchg dword [esp], ebp
pop esp
jmp 0xd30bfa
push ecx
mov ecx, esp
push edx
mov edx, 4
add ecx, edx
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
push edx
mov dword [esp], ecx
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edi
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push edx
mov dword [esp], ebx
push ecx
push 0x7fda2f63
pop ecx
sub ecx, 0x7fda2f5b
mov ebx, ecx
pop ecx
mov dword [ebp - 8], ebx
mov ebx, dword [esp]
add esp, 4
jmp 0xd2b898
push esi
push edx
mov edx, 0x61434047
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], esi
mov dword [esp], ebx
push edi
mov dword [esp], 0x6dfdebf6
mov dword [esp], ecx
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop ebx
push ebp
push esp
pop ebp
add ebp, 4
push ecx
mov ecx, 0x1bd77704
dec ecx
neg ecx
add ecx, 0x1bd77707
add ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
mov al, byte [0x64c03d]
push edi
mov edi, esp
push esi
mov esi, 4
add edi, esi
pop esi
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edi
mov dword [esp], ecx
mov dword [esp], eax
push edi
mov dword [esp], ebx
mov eax, dword [esp]
push eax
mov eax, esp
push ebx
mov ebx, 0x5fff4ff3
dec ebx
sub ebx, 0x56f24892
not ebx
add ebx, 0x5fffdf38
or ebx, 0x53df2e26
add ebx, 0xa800000d
add eax, ebx
pop ebx
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
jmp 0xd0a15a
push esi
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
mov edx, 0x14824055
mov dword [esp + 4], edx
pop edx
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop edx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push esi
mov esi, esp
push ecx
mov ecx, 0x7aefdd74
not ecx
xor ecx, 0x6ffb8b87
xor ecx, 0xeaeba908
add esi, 0x1d7f44ef
add esi, ecx
sub esi, 0x1d7f44ef
pop ecx
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
pop dword [ebp - 0x18]
jmp 0xd5ee4a
push edx
mov edx, esp
add edx, 4
sub edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], esi
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push ebp
mov ebp, esp
push ebx
mov ebx, 4
add ebp, ebx
pop ebx
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push dword [esp]
mov ebx, dword [esp]
push 0x16a07a24
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
push edx
mov dword [esp], 0x11977915
mov dword [esp], edi
mov dword [esp], ebp
mov dword [esp], eax
pop dword [0x64cedc]
push 0x72a7b42e
mov dword [esp], edx
mov edx, esp
push ebx
mov ebx, 0x3f8e4eaf
inc ebx
xor ebx, 0x3f8e4eb4
add edx, ebx
pop ebx
push ebp
mov ebp, 4
sub edx, ebp
pop ebp
xchg dword [esp], edx
pop esp
mov dword [esp], edx
push edx
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
push ebx
mov ebx, 4
add eax, ebx
pop ebx
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
jmp 0xd4c778
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xd02ed6
jne 0xd039d2
jmp 0xd33c3b
push 0x4c4611cc
mov dword [esp], ebx
push edi
mov dword [esp], 0x1000
pop ebx
sub eax, ebx
mov ebx, dword [esp]
add esp, 4
jmp 0xd0ad04
push dword [0x64c024]
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 0x6ef230e5
dec ecx
shr ecx, 4
inc ecx
xor ecx, 0x6ef230b
add eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
push 0x13256378
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], esi
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov ebx, dword [esp]
push esi
mov esi, esp
push ebx
mov ebx, 4
add esi, ebx
pop ebx
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
jmp 0xced8be
push dword [0x64cdcc]
push dword [esp]
pop esi
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xd47dff
push edx
mov dword [esp], 0x5b5a26c4
mov dword [esp], ebp
mov dword [esp], esi
mov dword [esp], eax
mov dword [esp], ecx
sub ecx, 0x7ebf5d8f
add ecx, 0x3bbf129f
add ecx, 0x6fdee9d1
sub ecx, 0x791f5fa5
add ecx, eax
add ecx, 0x791f5fa5
sub ecx, 0x6fdee9d1
push eax
mov eax, 0x77f7c835
neg eax
and eax, 0x3bf30ff7
inc eax
xor eax, 0x68e75181
neg eax
add eax, 0x9ca668e4
sub ecx, eax
pop eax
add ecx, 0x7ebf5d8f
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov byte [0x64c03d], al
push edx
mov edx, esp
add edx, 4
push esi
mov esi, 0x7fefc70e
dec esi
sub esi, 0x5f119f6b
not esi
neg esi
sub esi, 0x20de279f
sub edx, esi
pop esi
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
push eax
mov dword [esp], ebx
mov dword [esp], ecx
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
push edx
mov edx, 4
add esi, edx
pop edx
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
jmp 0xd0029b
test eax, eax
jmp 0xcfd88f
je 0xced7c0
jmp 0xd30c6c
je 0xd016cf
jmp 0xced876
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0xd4bf3a
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xcffce5
push dword [ebp - 0x18]
mov eax, dword [esp]
push 0x2be87774
mov dword [esp], eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push edi
push esp
pop edi
push ecx
mov ecx, 4
add edi, ecx
pop ecx
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], eax
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
push edx
mov edx, 4
add ebp, edx
pop edx
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0xd6e302
push edi
push ebx
mov ebx, 0x64cd08
mov dword [esp + 4], ebx
mov ebx, dword [esp]
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xd4c714
sub esp, 4
mov dword [esp], edi
mov dword [esp], ebx
mov dword [esp], ecx
push ebp
mov ebp, 0x7f5fcb6a
add ecx, 0x5e3ffd02
sub ecx, 0x73b2f048
sub ecx, ebp
add ecx, 0x73b2f048
sub ecx, 0x5e3ffd02
pop ebp
add ecx, 0x7eff73b0
add ecx, eax
sub ecx, 0x7eff73b0
add ecx, 0x7f5fcb6a
mov ecx, dword [esp]
push eax
mov eax, esp
push ecx
mov ecx, 0x7fff0b06
push ebp
mov ebp, 0
sub ebp, ecx
xchg ecx, ebp
pop ebp
shr ecx, 2
shl ecx, 6
shr ecx, 1
shr ecx, 2
sub ecx, 0x1e9ec
add eax, ecx
pop ecx
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push ebp
mov dword [esp], esi
push edx
mov edx, 0x6c6c642e
mov esi, edx
pop edx
push esi
pop dword [0x64cb32]
mov esi, dword [esp]
add esp, 4
jmp 0xd0d4b0
push ecx
push edi
mov dword [esp], esi
mov esi, 0xfe62e7a
mov dword [esp + 4], esi
pop esi
mov dword [esp], eax
pop dword [0x64cedc]
jmp 0x4db2ba
push ecx
mov ecx, esp
add ecx, 4
push eax
push 4
pop eax
sub ecx, eax
pop eax
xchg dword [esp], ecx
pop esp
mov dword [esp], ebp
mov dword [esp], ecx
push ebx
mov ebx, 0x15efcdc9
sub ebx, 0xb6b087b4
add ecx, 0x7bfca5a0
add ecx, ebx
push ebx
mov ebx, 0x1af44771
inc ebx
dec ebx
add ebx, 0x61085e2f
sub ecx, ebx
pop ebx
mov ebx, dword [esp]
add esp, 4
add ecx, eax
sub ecx, 0x5f3f4615
push dword [esp]
pop ecx
push ecx
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [0x64c024]
mov ecx, dword [esp]
push edi
mov dword [esp], 0x5ab907bc
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push esi
mov esi, esp
add esi, 4
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], ecx
mov dword [esp], edx
mov dword [esp], ecx
push edi
push 0x7be9950e
mov edi, dword [esp]
add esp, 4
sub ecx, 0x7d3e9b6f
add ecx, edi
add ecx, 0x7d3e9b6f
pop edi
add ecx, eax
sub ecx, 0x7be9950e
mov ecx, dword [esp]
push 0x23ea64d6
mov dword [esp], esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0xd2b2cc
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
push edi
mov edi, 0x6a737fad
inc edi
xor edi, 0x31ffe892
shr edi, 8
xor edi, 0x5b8c93
add ebx, edi
pop edi
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebp
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
sub esp, 4
mov dword [esp], eax
mov eax, 3
add eax, ecx
push ecx
mov ecx, 0
add ecx, eax
xor esi, dword [ecx]
mov ecx, dword [esp]
add esp, 4
mov eax, dword [esp]
add esp, 4
jmp 0xd4000a
push ebx
push esp
pop ebx
add ebx, 4
push esi
mov esi, 4
sub ebx, 0x7af7f3d5
sub ebx, esi
add ebx, 0x7af7f3d5
pop esi
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
push ebp
mov dword [esp], 0x7b7a65c4
mov dword [esp], ecx
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
mov eax, dword [esp]
push ebp
mov dword [esp], edx
mov edx, esp
add edx, 4
push eax
mov eax, 4
add edx, eax
pop eax
xchg dword [esp], edx
mov esp, dword [esp]
sub esp, 4
mov dword [esp], esi
mov dword [esp], 0x5b0786ed
mov dword [esp], ebx
mov dword [esp], edx
pop dword [ebp - 0x10]
jmp 0xcef672
push dword [ebp - 0x18]
push dword [esp]
pop edx
push edx
mov edx, esp
add edx, 4
push esi
mov esi, 4
add edx, esi
pop esi
xchg dword [esp], edx
pop esp
push ecx
push ecx
push ebx
mov ebx, 0x5adc985b
neg ebx
add ebx, 0x990ab5b5
mov ecx, ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
push eax
mov dword [esp], 0x1e60974c
mov dword [esp], ecx
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
add esp, 4
jmp 0xcfe698
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push esi
push eax
mov eax, 0x3802be6d
mov dword [esp + 4], eax
push dword [esp]
pop eax
add esp, 4
mov dword [esp], edx
push 0x215312cd
mov dword [esp], ecx
mov edx, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov edx, dword [esp]
push esi
mov dword [esp], edx
mov edx, esp
add edx, 4
push edi
mov edi, 0x6b7ea296
inc edi
not edi
sub edi, 0x7dff829d
sub edi, 0x1681dac7
add edx, edi
pop edi
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0xd359c9
cmp esi, eax
jmp 0xd03cd4
cmp esi, eax
jmp 0xcf04fd
push edx
push esp
pop edx
add edx, 4
push eax
mov eax, 4
sub edx, eax
mov eax, dword [esp]
add esp, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
sub ecx, 0x5bf37684
add ecx, eax
sub esp, 4
mov dword [esp], ebp
push 0x5bf37684
pop ebp
sub ecx, 0x5dcfa442
add ecx, ebp
add ecx, 0x5dcfa442
pop ebp
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push edx
mov edx, 0x7feae5f7
not edx
not edx
sub esp, 4
mov dword [esp], eax
mov dword [esp], ecx
mov ecx, 0x77a7596
sub edx, 0x76fb397c
sub edx, ecx
add edx, 0x76fb397c
pop ecx
mov dword [0x64cb28], edx
pop edx
push ecx
mov ecx, esp
push esi
mov esi, 0x72eccc6b
shr esi, 8
xor esi, 0x72ecc8
sub ecx, 0x7f7f9a0f
add ecx, esi
add ecx, 0x7f7f9a0f
pop esi
sub ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov dword [esp], edx
push 0x136b34b0
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xd49122
jne 0xd3526f
jmp 0xd03cdf
jmp dword [eax + 0xa4ce38]
cmp dword [0xa4ce38], 0x23f0
jmp 0xd3ffff
sub esp, 4
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov ebx, dword [esp]
push 0xbc83821
mov dword [esp], edi
mov edi, esp
add edi, 4
sub esp, 4
mov dword [esp], ebp
mov ebp, 4
add edi, ebp
pop ebp
xchg dword [esp], edi
pop esp
push edi
mov edi, esp
push ebx
mov ebx, 0xfed4f5f
add ebx, 0xf012b0a5
add edi, ebx
pop ebx
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edi
mov dword [esp], eax
pop dword [ebp - 4]
push edi
mov edi, esp
add edi, 4
push edx
mov edx, 4
sub edi, edx
pop edx
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
mov dword [esp], 0x2976eb68
mov dword [esp], ebx
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0xce9860
push ebp
push esi
push 0x3939f7a4
pop esi
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], eax
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edi
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
and al, byte [0x64c03a]
push ebp
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x4932caa
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 4
add ebx, edx
pop edx
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
push esi
push 4
pop esi
add ebp, esi
pop esi
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xcf7e42
push esi
push ebp
mov ebp, 0xe44d759
mov dword [esp + 4], ebp
push dword [esp]
pop ebp
add esp, 4
mov dword [esp], ecx
add ecx, 0x1f9ded3e
sub ecx, 0x27bd082
add ecx, 0x49fdc0be
add ecx, 0x5fefefdd
add ecx, eax
sub ecx, 0x5fefefdd
sub ecx, 0x49fdc0be
add ecx, 0x27bd082
push ebx
mov ebx, 0x1f9ded3e
sub ecx, ebx
pop ebx
mov ecx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push edi
mov edi, 4
add ebp, 0x7f37aacd
add ebp, edi
sub ebp, 0x7f37aacd
mov edi, dword [esp]
add esp, 4
xchg dword [esp], ebp
pop esp
sub esp, 4
mov dword [esp], esi
push ecx
push ecx
mov dword [esp], 0x64cd08
pop ecx
mov dword [esp + 4], ecx
pop ecx
push esi
mov dword [esp], edi
push edi
mov dword [esp], eax
mov eax, 0x5bef83a
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
push 0x2969a1c8
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
pop edx
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0xd35ca8
push eax
mov dword [esp], edx
push ebp
push 0x156b2d1a
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
push esi
push 0x1abba5bb
pop esi
not esi
push ecx
mov ecx, 0x3e7b9077
not ecx
neg ecx
sub ecx, 0x5affcfc3
sub ecx, 0xc37ca2b9
and esi, ecx
pop ecx
xor esi, 0x57b6912a
xor esi, 0x311f83c3
sub ecx, 0x37fbab40
add ecx, esi
add ecx, 0x37fbab40
pop esi
add ecx, eax
sub ecx, 0x63ed0aad
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
push ebx
mov ebx, 4
add ebp, ebx
pop ebx
add ebp, 4
xchg dword [esp], ebp
pop esp
push edx
mov edx, esp
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], eax
pop dword [ebp - 0x10]
push edi
mov edi, esp
push ebx
mov ebx, 4
add edi, ebx
pop ebx
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edi
mov dword [esp], 0x52e80e8e
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push ebp
mov ebp, esp
add ebp, 4
push eax
mov eax, 0x77deadc1
not eax
xor eax, 0x1def4106
and eax, 0x6fdd08e8
not eax
not eax
add eax, 0xfa33ffdc
add ebp, eax
pop eax
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0xd4c7aa
push edi
push edi
mov dword [esp], ebp
push 0x12cdc9b7
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov eax, dword [esp]
push ebp
push ebp
mov ebp, 0x2fdfffed
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov al, byte [0x64cb31]
push 0x7c20d95a
mov dword [esp], ebx
mov dword [esp], edi
mov dword [esp], 0x550e7877
mov dword [esp], ebp
mov dword [esp], ecx
add ecx, 0x2ff7e7bc
add ecx, eax
push edi
mov edi, 0x3abf07bb
sub edi, 1
xor edi, 0x3e5fcad7
push 0x13f92cce
mov dword [esp], eax
mov eax, 0x55bf5df7
xor edi, eax
pop eax
and edi, 0x5ff53608
xor edi, 0x7ea2f7b4
sub ecx, edi
pop edi
push dword [esp]
pop ecx
push 0x3ca64e7c
mov dword [esp], edx
mov edx, esp
add edx, 4
push edi
mov edi, 0x7fffab97
dec edi
or edi, 0x6fff0f08
add edi, 0x7fbbea41
add edi, 0x59e3f7f9
sub edi, 0x599f91d4
add edx, edi
pop edi
xchg dword [esp], edx
pop esp
jmp 0xd49198
imul eax, ecx
push edx
mov edx, esp
add edx, 4
push esi
mov esi, 0x5ddc2187
push esi
not dword [esp]
pop esi
shl esi, 6
and esi, 0x6f3ec725
add esi, 0xf7c97a04
add edx, 0x19ee99fa
sub edx, esi
sub edx, 0x19ee99fa
pop esi
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
push ebp
push 0x7bbf7334
pop ebp
dec ebp
shl ebp, 5
xor ebp, 0x30113eeb
sub ecx, ebp
pop ebp
add ecx, eax
sub esp, 4
mov dword [esp], esi
mov esi, 0x5fffb29e
neg esi
shr esi, 6
add esi, 0x47ffd774
shl esi, 5
sub esi, 0x7fbbc95
add ecx, esi
pop esi
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
jmp 0xcf1e92
push 0x68afd289
mov dword [esp], esi
push eax
push esi
mov dword [esp], 0x64cd08
pop eax
mov dword [esp + 4], eax
pop eax
jmp 0xd36bc6
push dword [ebp - 0x10]
mov eax, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
push edx
mov edx, 4
add ebp, edx
pop edx
xchg dword [esp], ebp
pop esp
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], ebx
mov dword [esp], eax
push 0x4e2edb7b
mov dword [esp], ebx
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
mov ecx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
jmp 0xcf1e07
sub esp, 4
mov dword [esp], eax
push ebp
mov dword [esp], edx
mov dword [esp], 0xa
pop eax
mov dword [ebp - 0x14], eax
pop eax
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
push ebp
mov ebp, 0x77ad0310
and ebp, 0x7fbaebed
or ebp, 0x7afe199c
shr ebp, 7
shl ebp, 5
push edi
mov edi, 0x6fe31287
xor edi, 0x701c945b
sub ebp, edi
pop edi
sub eax, ebp
pop ebp
xchg dword [esp], eax
pop esp
mov dword [esp], eax
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
mov eax, dword [esp]
push esi
mov esi, esp
push edi
mov edi, 0x37f1267f
add edi, 0xc80ed985
add esi, edi
pop edi
push eax
mov eax, 4
add esi, eax
pop eax
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0xcee3aa
push ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 4
sub ecx, edx
mov edx, dword [esp]
add esp, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ebx
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
mov ebx, dword [esp]
push 0xcdf78ef
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
xor ecx, ecx
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], 0x6c51291c
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push ecx
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push dword [esp]
pop eax
push esi
push esp
pop esi
add esi, 4
push ebp
mov ebp, 4
add esi, ebp
pop ebp
xchg dword [esp], esi
pop esp
jmp 0xd0f1df
add byte [eax], al
sub edx, 0x80
add edx, esi
mov ebx, dword [ebx]
add ebx, 0xb
sub edx, 0x8a
mov esi, dword [ebx]
add edx, 0x1c
add edx, edi
mov ebx, ebp
xor edx, 0xab
xor edx, ebx
add ebx, 0x14
add dword [ebx], esi
jmp edi
cld
jo 0xd0f139
or al, 0x24
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop edx
push edi
mov dword [esp], eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 4
add eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
jmp 0xd30d34
mov cx, word [eax]
jmp 0xd0f1e7
cmp ecx, dword [ebp - 0x1c]
jmp 0xcfd89a
push ebp
mov dword [esp], esi
mov dword [esp], 0x39100277
mov dword [esp], eax
mov dword [esp], edx
pop dword [0x64c024]
push esi
mov esi, esp
push edx
mov edx, 0x77bf7edb
neg edx
add edx, 0x77bf7edf
add esi, edx
pop edx
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ebp
mov dword [esp], ecx
sub ecx, 0x6f597bd6
push esi
mov esi, 0x7eb7a5da
sub ecx, esi
pop esi
sub ecx, 0x32fcd9d7
add ecx, eax
add ecx, 0x32fcd9d7
push edx
mov edx, 0x3bb78384
add edx, 0x5afeb354
shr edx, 1
sub edx, 0xcca37592
add ecx, edx
pop edx
add ecx, 0x6f597bd6
push dword [esp]
pop ecx
push edx
push esp
pop edx
push esi
mov esi, 0x7fd153be
xor esi, 0x7fd153ba
add edx, esi
pop esi
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xd0d435
push dword [0x64c028]
push dword [esp]
pop ecx
push esi
mov esi, esp
push eax
mov eax, 0x77fd2ca4
inc eax
dec eax
shl eax, 1
shl eax, 1
sub eax, 0x3ff2cb83
add eax, 0x5ffe18f7
add esi, eax
pop eax
add esi, 4
xchg dword [esp], esi
pop esp
push ecx
mov dword [esp], ebp
push ecx
push 0x3f8526ff
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
push ecx
push dword [esp + 4]
mov ecx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], ebx
pop eax
mov eax, dword [esp]
push 0x4bc72340
mov dword [esp], ebx
mov ebx, esp
push eax
mov eax, 4
add ebx, eax
pop eax
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
jmp 0xd30a6a
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebp
mov dword [esp], edx
pop dword [str._JmBmBA]
push edx
mov edx, esp
push edi
mov edi, 4
add edx, edi
pop edi
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ecx
push eax
mov eax, 0x7fbeffc0
push esi
mov esi, 0x7fede79a
shr esi, 4
or esi, 0x7bb579fc
or esi, 0x6febe494
not esi
add esi, 0xe6dfbad7
sub eax, esi
pop esi
sub eax, 0xa66c370e
sub ecx, 0x1dded3cf
sub ecx, eax
push ebx
mov ebx, 0x1dded3cf
add ecx, ebx
pop ebx
pop eax
add ecx, eax
add ecx, 0x72730dd9
push dword [esp]
pop ecx
push eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
mov eax, dword [esp]
add esp, 4
pop dword [esp]
pop esp
jmp 0xd4aa84
push esi
mov dword [esp], edx
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x7f3f9b49
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ecx
push edi
mov edi, 0x75fdee64
sub ecx, edi
mov edi, dword [esp]
add esp, 4
add ecx, eax
push ebx
mov ebx, 0x7ee93559
not ebx
dec ebx
neg ebx
or ebx, 0x76928140
dec ebx
xor ebx, 0xb065b3e
sub ecx, 0x3f96f2d7
add ecx, ebx
add ecx, 0x3f96f2d7
pop ebx
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
shr ecx, 2
jmp 0xd2e136
push esi
push ecx
mov ecx, 0x43446f05
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebp
mov dword [esp], edi
mov dword [esp], edx
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
push ecx
push esp
pop ecx
push edx
mov edx, 0x7bea3d13
shr edx, 8
shl edx, 2
shl edx, 8
add edx, 0x10570c04
sub ecx, 0x1ede7724
add ecx, edx
add ecx, 0x1ede7724
pop edx
add ecx, 4
xchg dword [esp], ecx
pop esp
push ecx
mov dword [esp], ebx
push edi
push 0x64cd08
pop edi
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
jmp 0xd02858
push edx
push ebx
push 0x6b476fca
pop ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], edx
push eax
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
push ebx
mov ebx, 0x7bb7936e
and ebx, 0x7faffc94
neg ebx
shr ebx, 2
sub ebx, 0x7ea3a481
and ebx, 0x7755c717
add ebx, 0xddafb8ee
add edi, ebx
pop ebx
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
push dword [str._JmBmBA]
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
push edx
mov edx, 0x7fffbb3d
dec edx
neg edx
dec edx
not edx
sub edx, 0x7fffbb38
add edi, edx
pop edx
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
push edx
mov edx, esp
add edx, 4
push edi
mov dword [esp], eax
mov eax, 0x49fec073
and eax, 0x2b6a2958
sub eax, 0x1cbb3698
sub eax, 0x5fc7f15e
inc eax
shr eax, 8
sub eax, 0x8ce6d4
sub edx, 0x77f20a27
sub edx, eax
add edx, 0x77f20a27
pop eax
xchg dword [esp], edx
pop esp
mov dword [esp], edx
push ebp
mov dword [esp], 0x290a02a7
mov dword [esp], ebx
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xd365e2
push 0x40da6389
mov dword [esp], ebp
push esi
mov esi, 7
mov ebp, esi
mov esi, dword [esp]
add esp, 4
or ecx, ebp
mov ebp, dword [esp]
add esp, 4
push edi
mov edi, esp
push eax
mov eax, 0x47afc8b0
shr eax, 7
or eax, 0x5bbf15ea
dec eax
push edx
mov edx, 0x6d2c82c9
sub edx, 0x35eafc59
sub edx, 0xb88340d7
sub eax, edx
pop edx
shr eax, 7
add eax, 0xfe45fdd0
add edi, eax
pop eax
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
mov dword [esp], eax
push edx
mov dword [esp], 0x1df98e15
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
push eax
mov eax, 0x57960974
and eax, 0x7bb90052
or eax, 0x3ee6d123
and eax, 0x779fa98a
neg eax
xor eax, 0x88697efa
add edi, eax
mov eax, dword [esp]
add esp, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
jmp 0xd0ca08
push dword [0x64cdcc]
push dword [esp]
pop esi
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push edx
push ebx
push ebp
mov dword [esp], 0x7d49b190
pop ebx
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop ebx
push ebx
mov ebx, esp
push edx
mov edx, 4
add ebx, 0x5ff44a46
add ebx, edx
sub ebx, 0x5ff44a46
pop edx
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0xd0039a
push dword [ebp - 0x18]
mov eax, dword [esp]
push 0x2619485e
mov dword [esp], edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xd0dec6
push ebx
push esi
mov dword [esp], eax
mov eax, 0x7def0bc7
shr eax, 7
neg eax
xor eax, 0xff0431e9
mov ebx, eax
pop eax
add edx, 0x39fe6aa5
add edx, ebx
sub edx, 0x39fe6aa5
mov ebx, dword [esp]
add esp, 4
jmp 0xd0165a
jmp dword [eax + 0xa4ce38]
push ebp
push ebx
mov dword [esp], 0x706d6f63
mov ebp, dword [esp]
add esp, 4
push ebp
pop dword [0x64cb2a]
pop ebp
push edx
mov edx, esp
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
push dword [esp]
pop edx
push esi
mov dword [esp], ecx
mov ecx, esp
push edi
mov edi, 0x7ed9bbb9
xor edi, 0x7ed9bbbd
add ecx, edi
pop edi
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xd36aa7
push ecx
mov dword [esp], esi
push esi
mov esi, 0x6a4474b5
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebp
mov dword [esp], ebx
push 0x68f333b7
mov dword [esp], ecx
push dword [esp]
pop ebx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov ebx, dword [esp]
push ebp
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push dword [ebp - 8]
mov edx, dword [esp]
push eax
mov eax, esp
push edi
mov edi, 4
add eax, edi
pop edi
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
push eax
mov dword [esp], ebp
push eax
mov eax, 0x2398b462
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], edx
push ecx
mov dword [esp], 0x6fc782a8
mov dword [esp], ecx
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop edx
sub esp, 4
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xd36157
sub esp, 4
mov dword [esp], esi
mov dword [esp], 0x25215ae0
mov dword [esp], eax
mov dword [esp], edi
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
add esp, 4
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0xcfea85
push dword [ebp - 0x14]
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
xchg dword [esp], ebx
pop esp
push ebx
mov ebx, esp
push eax
mov eax, 4
add ebx, eax
pop eax
push esi
mov esi, 4
sub ebx, esi
pop esi
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov dword [esp], eax
push 0x6a869b1c
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0xd4ac99
push 0x53b4e431
mov dword [esp], ecx
push ecx
push eax
mov eax, 0x3ff3376e
xor eax, 0x7552d147
mov ecx, eax
pop eax
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
push 0x53514fbf
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push ebp
mov ebp, esp
add ebp, 4
push esi
mov esi, 4
add ebp, esi
pop esi
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
push ecx
push esi
mov esi, 0x677dcc35
mov ecx, esi
pop esi
sub edx, 0x7a7bbfad
sub edx, ecx
add edx, 0x7a7bbfad
mov ecx, dword [esp]
add esp, 4
sub edx, ecx
add edx, 0x677dcc35
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
mov dword [esp], edx
mov dword [esp], ebp
mov dword [esp], eax
push ecx
mov dword [esp], 0x4d226782
mov dword [esp], edi
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov eax, dword [esp]
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
jmp 0xd196b9
push 0x5b3bb542
mov dword [esp], ebp
mov dword [esp], ecx
mov dword [esp], ebp
mov dword [esp], eax
push edi
mov edi, esp
push esi
mov esi, 4
add edi, esi
pop esi
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
sub esp, 4
mov dword [esp], edi
push ebp
mov dword [esp], 0x577f6754
pop edi
and edi, 0x7c4d38b7
or edi, 0x3faf2857
push edx
mov edx, 0x7f77d64f
sub edi, edx
pop edx
or edi, 0x1767d49a
add edi, 0x51fd9dd9
mov dword [0x64cb2e], edi
pop edi
push eax
mov eax, esp
push esi
mov esi, 4
add eax, esi
pop esi
push edx
mov edx, 0x68e43cf4
sub edx, 0x336dc10e
sub edx, 0x5baffc1a
shr edx, 5
not edx
neg edx
xor edx, 0x6ce33fb
add eax, 0x2ffe1b68
sub eax, edx
sub eax, 0x2ffe1b68
pop edx
xchg dword [esp], eax
pop esp
mov dword [esp], edx
push edx
mov dword [esp], 0x2c81044f
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
push eax
mov eax, esp
sub esp, 4
mov dword [esp], esi
mov esi, 0x77f9f360
shl esi, 2
push ebx
mov ebx, 0x3776ce93
xor esi, ebx
pop ebx
xor esi, 0x3be71845
xor esi, 0x5c748f8b
sub esi, 0x8f0294d9
add eax, esi
pop esi
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xcff5cc
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xcf00ea
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0xd3871e
push 0x25df98ff
mov dword [esp], ecx
push ebx
push ecx
mov ecx, 0x64cd08
mov ebx, ecx
pop ecx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
push eax
sub esp, 4
mov dword [esp], ecx
mov ecx, 0xb40fcb
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
mov dword [esp], edx
push esi
mov esi, esp
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
mov dword [esp], edi
mov dword [esp], ecx
pop edx
push dword [esp]
pop edx
push edx
mov edx, esp
add edx, 4
push eax
mov eax, 0x3ff78789
shl eax, 4
neg eax
not eax
add eax, 0x878775
add edx, eax
pop eax
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0xd4c59f
jae 0xd0d3ba
jmp 0xd0a815
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xd02ecf
ja 0xd0d435
jmp 0xd03d7e
push esi
push edi
push 0x51223be7
pop edi
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], ecx
jmp 0xd36bbb
add esp, 4
jmp 0xcf94d4
push 0x35f18996
mov dword [esp], eax
push ecx
mov ecx, 0x497f9451
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
mov dword [esp], 0x1c89784
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
pop edx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
push eax
mov eax, 5
add eax, edx
push ebp
mov dword [esp], edx
mov edx, 0
add edx, eax
xor esi, dword [edx]
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
pop eax
jmp 0xcf04f2
push dword [0x84cee0]
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], ecx
sub esp, 4
mov dword [esp], ebx
push 0x7ff7abd2
pop ebx
push edx
mov edx, 0x7ded2c71
xor ebx, edx
pop edx
sub ebx, 0xa21b57e5
add ecx, ebx
pop ebx
add ecx, eax
sub ecx, 0x5fff2fbe
push dword [esp]
pop ecx
push eax
mov eax, esp
add eax, 4
push ebx
mov ebx, 0x74bf0c74
or ebx, 0x7bbe3d7a
xor ebx, 0x6fed3020
dec ebx
xor ebx, 0x10520d59
add eax, ebx
mov ebx, dword [esp]
add esp, 4
xchg dword [esp], eax
pop esp
jmp 0xcf77b4
push edi
mov dword [esp], esi
push ebp
mov ebp, 0x26cca1e9
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
mov dword [esp], ecx
push esi
push ebp
mov dword [esp], 0x6f9a8cf2
pop esi
add ecx, esi
mov esi, dword [esp]
add esp, 4
add ecx, eax
sub ecx, 0x6f9a8cf2
push dword [esp]
pop ecx
push eax
push esp
pop eax
add eax, 4
push ecx
mov ecx, 4
add eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
push esi
mov esi, 0x30dbb630
push ebx
mov ebx, 0x26b4cbd
push ecx
mov ecx, 0x2d3901dc
add esi, ecx
pop ecx
sub esi, ebx
sub esi, 0x2d3901dc
pop ebx
push esi
pop dword [0x64cb2c]
pop esi
jmp 0xd7d350
push edi
mov dword [esp], 0x605465
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebp
mov dword [esp], edx
push ecx
push dword [esp]
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
push dword [esp]
pop edx
push ebp
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
mov byte [0x64cb32], al
push esi
push esp
pop esi
add esi, 4
push eax
mov eax, 4
sub esi, eax
pop eax
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
mov dword [esp], edx
push 0x12c6f8bd
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
pop edx
push ebp
push esp
pop ebp
push edx
mov edx, 0x6f9fb71f
shr edx, 1
and edx, 0x7f7ee831
inc edx
sub edx, 0x3a39dc95
sub edx, 0xfd14eb69
add ebp, edx
pop edx
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xd4ab15
xor eax, eax
push ebp
push esp
mov ebp, dword [esp]
add esp, 4
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], ecx
add ecx, 0x6f3d1f7d
push edx
mov edx, 0x7fc6f25b
neg edx
shl edx, 1
or edx, 0x5efdf28f
xor edx, 0x6f26f547
shl edx, 8
push ebp
mov ebp, 0x79dfad65
not ebp
shl ebp, 8
not ebp
add ebp, 0x971bec07
add edx, ebp
pop ebp
sub ecx, edx
pop edx
add ecx, eax
push edx
mov edx, 0x4fd7da06
add ecx, edx
pop edx
sub ecx, 0x6f3d1f7d
mov ecx, dword [esp]
push edx
mov edx, esp
add edx, 4
push eax
mov eax, 4
add edx, eax
mov eax, dword [esp]
add esp, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0xced7fe
push 0x43367659
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
add ecx, 0x7fef5a9a
add ecx, eax
push eax
push 0x7fef5a9a
pop eax
sub ecx, 0x6fff5c9a
sub ecx, eax
add ecx, 0x6fff5c9a
mov eax, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
pop ecx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
push eax
mov dword [esp], edi
push edx
push 0x64cd08
pop edx
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
mov dword [esp], edx
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov eax, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add esp, 4
jmp 0xcfd997
push edi
mov edi, esp
push ebx
mov ebx, 4
add edi, ebx
pop ebx
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
pop eax
push ebx
push 0x6fb932b0
mov dword [esp], esp
add dword [esp], 4
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
lea ecx, [eax + edx + 0x64cb18]
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov dword [esp], esi
mov dword [esp], 0x25d36751
mov dword [esp], edx
push 0x39b01e95
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
jmp 0xd47a1e
push 0x1e6d14d3
mov dword [esp], ecx
sub esp, 4
mov dword [esp], edx
push 0x64cb28
pop edx
mov dword [esp + 4], edx
pop edx
jmp 0xcfd9a2
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
sub esp, 4
mov dword [esp], eax
mov dword [esp], ebp
push edx
mov edx, 0x362959c9
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
add ecx, 0x569f6442
sub ecx, 0x7fd9c81f
add ecx, eax
add ecx, 0x7fd9c81f
push edx
mov edx, 0x569f6442
push eax
mov eax, 0x7fdb9bc7
add ecx, eax
pop eax
sub ecx, edx
sub ecx, 0x7fdb9bc7
pop edx
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
jmp 0xd48bd7
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push ebx
mov dword [esp], eax
push esi
push 0xba0a335
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
push edx
mov edx, 0x6f7f2f78
sub ecx, 0x7d6f01ef
sub ecx, edx
push ecx
mov dword [esp], eax
mov eax, 0x7d6f01ef
add ecx, eax
pop eax
pop edx
add ecx, eax
add ecx, 0x6f7f2f78
push dword [esp]
pop ecx
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0xcedac0
jmp 0x4db2ba
push esi
push esp
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], edx
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
push ebp
mov dword [esp], ecx
push esp
mov ecx, dword [esp]
add esp, 4
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [ebp - 0x10]
push dword [esp]
pop ecx
push esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
jmp 0xcef74a
push esi
mov esi, esp
push edx
push 4
pop edx
add esi, edx
pop edx
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], edx
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ecx
sub ecx, 0x71f67446
add ecx, 0x577f5169
add ecx, eax
push ebx
mov ebx, 0x4fe74079
push ebp
mov ebp, 0x6febd55b
neg ebp
sub ebp, 0x887c19b5
add ebx, ebp
pop ebp
sub ecx, 0x6dffd17f
sub ecx, ebx
add ecx, 0x6dffd17f
pop ebx
add ecx, 0x71f67446
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0xced86c
push 0x2f583dac
mov dword [esp], ecx
push edi
push 0x1e50e241
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
sub esp, 4
mov dword [esp], ebp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
push ecx
push 4
pop ecx
add edx, ecx
pop ecx
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
push dword [ebp - 0x10]
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
jmp 0xd4c822
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ebx
mov ebx, 0x3c
add ebx, 0x6bfeccc9
add ebx, edx
sub ebx, 0x6bfeccc9
add eax, dword [ebx]
pop ebx
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edx
mov dword [esp], 0x177b7d4e
mov dword [esp], edx
push ebp
mov dword [esp], esi
mov dword [esp], 0x6f5e116f
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
add esp, 4
jmp 0xd04630
push ecx
mov dword [esp], ebx
mov dword [esp], edi
mov dword [esp], 0x3f8f6830
mov dword [esp], edx
mov dword [esp], ecx
push edi
push 0xd5e2484
pop edi
shr edi, 3
add edi, 0x751297ba
sub ecx, edi
mov edi, dword [esp]
add esp, 4
sub ecx, 0x5ffb0ce9
add ecx, eax
add ecx, 0x5ffb0ce9
add ecx, 0x76be5c4a
push dword [esp]
pop ecx
push ebp
mov ebp, esp
add ebp, 4
push esi
mov esi, 0x5acf1a66
not esi
xchg esi, edi
neg edi
xchg esi, edi
add esi, 0xa530e59d
add ebp, esi
pop esi
xchg dword [esp], ebp
pop esp
push esi
mov dword [esp], ebx
push 0x3791
pop bx
xor bx, 0x692e
sub bx, 0x4bd1
sub bx, 0x9954
sub bx, 0xffff
push edx
mov dx, 0x5aec
sub dx, 0x6823
add bx, dx
pop edx
mov word [0x64cb30], bx
pop ebx
push edi
push ebx
push ebx
mov dword [esp], 0x3c39145c
pop ebx
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], eax
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], esi
mov dword [esp], ebx
pop eax
push dword [esp]
push dword [esp]
pop eax
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xd0ae04