Function at 0xbf1896
Capabilities:
Accept command line arguments

Disassembly:
cmp esi, eax
jmp 0xacf8f9
ja 0xc3e244
jmp 0xb79ec3
jae 0xad01f3
jmp 0xb3798e
push edi
push ebx
mov dword [esp], eax
push ecx
mov dword [esp], 0x64eda8
pop eax
mov dword [esp + 4], eax
pop eax
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], eax
push esi
mov dword [esp], ebx
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov eax, dword [esp]
push edx
mov edx, esp
push ebx
push 4
pop ebx
add edx, ebx
pop ebx
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0xba1588
push dword [ebp - 0x18]
push dword [esp]
pop eax
push 0x6b63973
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push edi
mov edi, esp
add edi, 4
push esi
mov esi, 0x6faf5cbe
xor esi, 0x72bf3d2f
push esi
not dword [esp]
pop esi
sub esi, 0xe2ef9e6a
sub edi, esi
pop esi
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], edx
push 0x5feead5d
mov dword [esp], ebx
push ebp
mov ebp, 0x68bc16a0
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
pop edx
push dword [esp]
pop edx
push edi
mov edi, esp
push eax
mov eax, 0x5f7fa4ce
sub eax, 0x7fbba0f9
xor eax, 0x5ffe4b1b
neg eax
neg eax
shr eax, 7
xor eax, 0x1007495
add edi, eax
pop eax
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
jmp 0xb96b79
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xaca197
jne 0xb76294
jmp 0xb21d5a
push esi
push 0x69757473
pop esi
mov dword [0x64ebce], esi
push dword [esp]
mov esi, dword [esp]
add esp, 4
add esp, 4
jmp 0xc3023e
push esi
push 0x628faf1a
mov dword [esp], ebx
push eax
mov eax, 0x7bfba9c0
not eax
sub eax, 0x7d3fd215
push edx
mov edx, 0x7f77f7b2
or eax, edx
pop edx
not eax
sub eax, 0x7fa31a9d
mov ebx, eax
pop eax
mov dword [esp + 4], ebx
pop ebx
jmp 0xaf0a61
push ebx
push 0xffff0000
mov ebx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
and ecx, ebx
pop ebx
jmp 0xaf1c2c
push 0x7c87061d
mov dword [esp], ebp
mov dword [esp], edx
mov dword [esp], 0xaf951fa
mov dword [esp], ebp
mov dword [esp], eax
push esi
mov dword [esp], 0x4e9cc8cf
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push 0x209f14a
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
lea ecx, [eax + edx + 0x64ebb8]
jmp 0xbd6c3f
push ebp
mov dword [esp], 0x73108ee
mov dword [esp], ecx
mov dword [esp], ebx
mov dword [esp], 0x27d5af29
mov dword [esp], edx
push ebx
mov dword [esp], ecx
mov edx, dword [esp]
push esi
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov edx, dword [esp]
push ecx
mov ecx, esp
push esi
mov esi, 0x7dfb30c
add esi, 0x7eeff4c5
add esi, 0x79305833
add ecx, esi
pop esi
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
push dword [ebp - 0x10]
mov edx, dword [esp]
push ebp
mov dword [esp], 0x3d9dd703
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 4
sub ebx, ebp
pop ebp
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ebx
mov dword [esp], ecx
push edi
mov edi, 0x1e4e4aa6
add ecx, edi
mov edi, dword [esp]
add esp, 4
add ecx, 0x7fc8ee96
add ecx, eax
sub ecx, 0x7fc8ee96
push esi
mov esi, 0x7dbbcfaf
and esi, 0x1fc22866
add esi, 0xcc4280
sub ecx, esi
pop esi
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
push esi
mov esi, 0x33fc24a9
xor esi, 0x33fc24ad
add edx, esi
pop esi
xchg dword [esp], edx
pop esp
jmp 0xaf1c53
push dword [ebp - 0x18]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xacf852
push dword [0x84f040]
push dword [esp]
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
jmp 0xaea5e7
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edi
mov dword [esp], ebp
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push ebx
mov dword [esp], edi
mov edi, esp
push esi
mov esi, 0x71fe4219
and esi, 0x5efcb7e9
neg esi
and esi, 0x7e4ff63c
and esi, 0x5bff8c85
xor esi, 0xa038400
add edi, esi
pop esi
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
sub esp, 4
mov dword [esp], edi
push edi
mov edi, 0x26298321
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
pop dword [ebp - 4]
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ebx
mov dword [esp], edx
push edi
mov dword [esp], 0x5050ff38
mov dword [esp], ecx
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov edx, dword [esp]
push 0x57e26d79
mov dword [esp], edx
mov edx, esp
push eax
mov eax, 4
add edx, eax
pop eax
push ebx
mov ebx, 0x7fd97aa3
sub ebx, 0x57bd9536
add ebx, 0xd7e41a97
add edx, ebx
pop ebx
xchg dword [esp], edx
pop esp
jmp 0xbf84f1
sub esp, 4
mov dword [esp], ecx
push eax
push 0x690b0cbd
pop eax
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
push edi
mov dword [esp], esi
mov esi, 0x7fcf9087
shl esi, 7
sub esi, 0xaa4b2aae
add ecx, esi
mov esi, dword [esp]
add esp, 4
add ecx, eax
push eax
mov eax, 0x3d7d18d2
sub ecx, eax
pop eax
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push eax
mov eax, esp
push esi
mov esi, 4
add eax, esi
pop esi
add eax, 4
xchg dword [esp], eax
pop esp
push dword [0x64e020]
push dword [esp]
pop edx
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push ebx
mov dword [esp], 0x45ed604d
mov dword [esp], edi
mov dword [esp], edx
mov dword [esp], edi
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
pop edx
push ecx
mov dword [esp], eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xc62cc4
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
push ebp
push dword [esp + 4]
mov ebp, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], ebx
mov dword [esp], eax
push 0x6f8a795a
mov dword [esp], ecx
mov dword [esp], 0x7f21ceff
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
push eax
mov eax, esp
push edi
mov edi, 0x7cffab12
dec edi
dec edi
not edi
neg edi
xor edi, 0x7cffab15
add eax, edi
pop edi
push esi
mov esi, 4
add eax, esi
pop esi
xchg dword [esp], eax
pop esp
jmp 0xacf6c2
cmp ecx, dword [ebp - 0x1c]
jmp 0xb86d1e
mov dx, word [ecx]
jmp 0xb8f404
push ecx
mov ecx, esp
push esi
mov esi, 0x7fbfe565
sub esi, 0x5ed63a16
or esi, 0x4cfffe05
neg esi
shr esi, 7
dec esi
sub esi, 0x125fffc
add ecx, esi
pop esi
push ebp
mov ebp, 4
sub ecx, ebp
pop ebp
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov dword [esp], edx
push 0x63c2e944
mov dword [esp], ecx
mov edx, dword [esp]
push eax
mov eax, esp
push ebx
mov ebx, 4
add eax, ebx
pop ebx
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
mov byte [0x64ebd2], al
push eax
sub esp, 4
mov dword [esp], eax
mov eax, 0x139997d
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], eax
push ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
pop eax
push esi
push esp
pop esi
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
jmp 0xbcb7ad
push esi
push esi
mov esi, 0x53f66332
mov dword [esp + 4], esi
push dword [esp]
pop esi
add esp, 4
mov dword [esp], edx
push ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
pop edx
push ecx
mov ecx, esp
add ecx, 4
push esi
push eax
mov eax, 4
mov esi, eax
pop eax
add ecx, esi
pop esi
xchg dword [esp], ecx
pop esp
imul eax, ecx
jmp 0xc102c9
push dword [0x64ee6c]
mov esi, dword [esp]
push edx
mov edx, esp
push ebp
mov ebp, 0x2ff38991
or ebp, 0x73ff85db
neg ebp
inc ebp
add ebp, 0x7fff8dde
add edx, ebp
pop ebp
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push edx
mov dword [esp], eax
mov eax, esp
push edi
mov edi, 4
add eax, edi
pop edi
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ebx
push esi
mov dword [esp], 0x7cc4c994
mov dword [esp], ecx
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov ebx, dword [esp]
push 0x2c39d48b
mov dword [esp], eax
mov eax, esp
push ecx
mov ecx, 4
add eax, ecx
pop ecx
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0xb05182
push ecx
sub esp, 4
push esp
pop dword [esp]
add dword [esp], 4
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
push ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push eax
mov eax, 4
push eax
mov eax, 0x6fde9325
add ebp, eax
pop eax
add ebp, eax
sub ebp, 0x6fde9325
pop eax
xchg dword [esp], ebp
pop esp
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
sub esp, 4
mov dword [esp], edi
push edx
mov edx, 0x4710b8f4
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
push ebx
push 0x6def74c9
pop ebx
sub ecx, 0x7ffcf9b9
add ecx, ebx
add ecx, 0x7ffcf9b9
mov ebx, dword [esp]
add esp, 4
add ecx, eax
sub ecx, 0x6def74c9
push dword [esp]
push dword [esp]
pop ecx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
jmp 0xb1524f
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
push esp
pop eax
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edx
push 0x6785b9c8
mov dword [esp], ecx
push dword [esp]
pop edx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x6048b998
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
mov dword [esp], ebx
push ebx
mov dword [esp], 0x5174e626
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
mov ebx, dword [esp]
push edi
push esp
pop edi
push ebp
mov ebp, 4
add edi, ebp
pop ebp
push eax
mov eax, 4
add edi, eax
pop eax
xchg dword [esp], edi
pop esp
jmp 0xad34fa
push 0x511893df
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ecx
pop dword [ebp - 0x10]
jmp 0xbf185c
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
push eax
mov dword [esp], ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov dword [esp], esi
mov dword [esp], edx
jmp 0xbb9996
add al, 0
add byte [eax], al
xchg dword [esp], esi
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], edi
mov dword [esp], ecx
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
pop edx
push ebx
push esp
pop ebx
add ebx, 4
push edx
mov edx, 0x6cd62c7e
dec edx
xor edx, 0x6cd62c79
add ebx, edx
pop edx
xchg dword [esp], ebx
pop esp
push 0x23148b43
mov dword [esp], esi
push 0x8d940d7
mov dword [esp], ebx
mov ebx, 0x5a4d
mov esi, ebx
pop ebx
push esi
pop dword [ebp - 0x1c]
pop esi
jmp 0xbff42c
push eax
mov eax, esp
add eax, 4
push edx
mov edx, 4
sub eax, edx
pop edx
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
push 0x1000
pop ebx
add edx, ebx
pop ebx
push eax
mov eax, esp
push edx
mov edx, 0x73cad7d5
or edx, 0x375acb14
or edx, 0x7d5e6e2b
add edx, 0x80210005
add eax, edx
pop edx
push ebp
mov ebp, 4
sub eax, ebp
pop ebp
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ecx
add ecx, 0x5ff86d59
add ecx, eax
push 0x198b3c0d
mov dword [esp], ebp
push 0x7f3beefd
pop ebp
dec ebp
dec ebp
push edx
mov edx, 0x317f0163
not edx
add edx, 0x7ff51c8b
not edx
shr edx, 4
add edx, 0xd5a3e011
add ebp, edx
pop edx
sub ecx, ebp
pop ebp
push dword [esp]
pop ecx
push ebx
mov dword [esp], 0x62962016
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xbf6015
cmp dword [ebp - 0x10], 0x1000000
jmp 0xace986
add esp, 4
jmp 0xaf6968
mov cx, word [eax]
jmp 0xae4ed8
push esi
push esi
mov dword [esp], esp
add dword [esp], 4
pop esi
push eax
mov eax, 4
add esi, eax
pop eax
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
add ecx, 0x7b6ec9ba
add ecx, 0x7baff1af
add ecx, eax
sub ecx, 0x7baff1af
push edi
mov edi, 0x7fe96461
push ecx
mov ecx, 0
sub ecx, edi
xchg edi, ecx
pop ecx
shr edi, 8
shl edi, 7
sub edi, 0xc49c83c6
sub ecx, edi
mov edi, dword [esp]
add esp, 4
mov ecx, dword [esp]
push eax
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop eax
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
sub esp, 4
mov dword [esp], ebx
push eax
push edi
mov edi, 7
mov dword [esp + 4], edi
pop edi
pop ebx
or ecx, ebx
pop ebx
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
mov dword [esp], ebx
push esi
mov dword [esp], ebp
mov dword [esp], eax
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
mov ebx, dword [esp]
push esi
push esp
pop esi
push ebp
mov ebp, 0x6fd9d382
inc ebp
add ebp, 0x1bfeac8b
shl ebp, 8
push eax
mov eax, 0xd8800e04
xor ebp, eax
pop eax
add esi, ebp
pop ebp
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0xae5eca
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xb2318e
jne 0xbf83e7
jmp 0xc3df80
push 0x43991243
mov dword [esp], esi
mov esi, esp
push eax
push 0x7697eb81
pop eax
shr eax, 5
shr eax, 4
dec eax
sub eax, 0x3b4bf0
add esi, eax
pop eax
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
push ecx
mov dword [esp], ebx
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
push ebp
push 4
pop ebp
sub ecx, ebp
pop ebp
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
pop dword [ebp - 0x10]
jmp 0xb8dd13
test eax, eax
jmp 0xb04965
xor ecx, ecx
jmp 0xaf28cc
push dword [0x64e028]
push dword [esp]
pop ecx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
jmp 0xaf6479
push ecx
sub esp, 4
mov dword [esp], edi
push 0x56ed8aae
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
push ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
mov eax, dword [esp]
push ebx
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
push esi
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], esi
mov dword [esp], eax
pop dword [0x84f038]
push edx
mov edx, esp
add edx, 4
push edi
mov edi, 0x6b7b9cb5
push ecx
mov ecx, 0x7fff596d
xor ecx, 0x377bd087
xor ecx, 0x7d46847d
add edi, ecx
pop ecx
shl edi, 5
sub edi, 0x6eff13fa
or edi, 0x77af8dd5
inc edi
xor edi, 0xffbfbddc
sub edx, edi
pop edi
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ecx
push edx
mov edx, 0x5f4e2bb2
shr edx, 7
neg edx
sub edx, 0xa94281b8
sub ecx, edx
pop edx
add ecx, eax
push edi
mov edi, 0x3e3b984a
xor edi, 0x6ef715af
xor edi, 0x77fc4102
dec edi
or edi, 0x79b8ad9b
add edi, 0xd645f3f2
add ecx, 0x3f7f387f
add ecx, edi
push esi
mov esi, 0x539fadc5
inc esi
not esi
dec esi
and esi, 0x37be0726
sub esi, 0xe4a0c9a1
sub ecx, esi
pop esi
pop edi
mov ecx, dword [esp]
push ebp
mov ebp, esp
push edi
mov edi, 0x6397ba8a
shl edi, 2
sub edi, 0x8e5eea24
add ebp, edi
pop edi
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
mov esp, dword [esp]
jmp 0xb2f9b0
je 0xaf227d
jmp 0xb3f692
push edx
push esi
mov esi, 0x7f6a88b4
mov dword [esp + 4], esi
mov esi, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edx
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edi
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
push ebx
mov ebx, 5
add ebx, 0x7f970a26
add ebx, edx
push esi
mov esi, 0x6f3f44d6
shr esi, 2
or esi, 0x4bbf8337
and esi, 0x4e16230b
dec esi
dec esi
add esi, 0x35810725
sub ebx, esi
pop esi
push ecx
mov ecx, 0
add ecx, ebx
xor esi, dword [ecx]
pop ecx
mov ebx, dword [esp]
add esp, 4
jmp 0xacf8ee
push ebx
mov ebx, esp
push edx
mov edx, 0x414a488c
shl edx, 3
add edx, 0xf5adbba4
add ebx, 0x4fefb255
add ebx, edx
sub ebx, 0x4fefb255
pop edx
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edx
mov dword [esp], ecx
push ebp
mov ebp, 0x7cbfd116
and ebp, 0x7f7db6b8
sub ebp, 0xc45f09c
sub ecx, ebp
mov ebp, dword [esp]
add esp, 4
add ecx, eax
push ebx
push 0x6ff79f74
pop ebx
add ecx, ebx
pop ebx
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
push eax
mov eax, 4
add ebp, eax
pop eax
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ebp
mov dword [esp], eax
pop dword [0x84f040]
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ecx
add ecx, 0x32eb2399
push ebp
mov ebp, 0x7bf37a13
not ebp
xor ebp, 0x7fefbbec
inc ebp
inc ebp
xor ebp, 0x803c89ef
sub ecx, ebp
pop ebp
add ecx, eax
add ecx, 0x7bdfb7ed
push edi
push 0x32eb2399
pop edi
sub ecx, edi
pop edi
push dword [esp]
pop ecx
push esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
jmp 0xb17476
push edx
mov dword [esp], esi
mov dword [esp], eax
push eax
mov eax, 0x5a71fb49
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
push 0x16f7b395
mov dword [esp], esi
mov esi, 0x7bfeb470
or esi, 0x76f7e966
or esi, 0x37f70017
xor esi, 0x68d63b8a
push ebx
mov ebx, 0xd97354f3
sub esi, ebx
pop ebx
sub ecx, 0x7fbc6081
add ecx, esi
add ecx, 0x7fbc6081
pop esi
add ecx, eax
sub ecx, 0x3db6720a
push dword [esp]
mov ecx, dword [esp]
push edi
mov edi, esp
push ebp
mov ebp, 0x7ed78554
add ebp, 0x3d5ce549
and ebp, 0x4dbab497
not ebp
add ebp, 0xc30209a
add edi, ebp
pop ebp
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
push edx
mov dword [esp], esi
mov esi, 0xa
sub esp, 4
mov dword [esp], esi
pop dword [ebp - 0x14]
mov esi, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ebp
mov dword [esp], edi
mov dword [esp], ecx
sub ecx, 0x7b6dfd22
add ecx, 0x71ee32df
add ecx, eax
sub ecx, 0x71ee32df
push 0x62e3146b
mov dword [esp], ebx
push 0x7b6dfd22
pop ebx
add ecx, ebx
pop ebx
push dword [esp]
pop ecx
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0xb4db14
push esi
mov dword [esp], ebx
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], eax
mov eax, 0x64eda8
mov dword [esp + 4], eax
pop eax
push 0x76f24648
mov dword [esp], ebp
push ecx
push 0x48377e04
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
add ecx, 0x7ceebea0
push edi
mov edi, 0x73b8aab7
dec edi
add edi, 0x5b73a9b6
xor edi, 0xa0d3761f
add ecx, 0x7739b993
sub ecx, edi
sub ecx, 0x7739b993
pop edi
add ecx, eax
add ecx, 0x6fff2273
push ebx
mov ebx, 0x7ceebea0
sub ecx, ebx
pop ebx
mov ecx, dword [esp]
push ecx
mov dword [esp], edi
mov edi, esp
add edi, 4
push eax
mov eax, 4
add edi, eax
pop eax
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0xaf15da
push dword [0x64e024]
push dword [esp]
pop ecx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xbd72b0
push dword [ebp - 0x18]
push dword [esp]
pop eax
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xaf763c
push ebp
sub esp, 4
mov dword [esp], edx
push edi
mov edi, 0x37cd8c21
shr edi, 5
xor edi, 0x59ff8bc7
dec edi
dec edi
xor edi, 0x2e2c932b
mov edx, edi
pop edi
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop eax
push edx
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push edx
mov dword [esp], esi
mov dword [esp], 0x64597341
mov dword [esp], ebp
mov dword [esp], eax
pop dword [ebp - 0x10]
sub esp, 4
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], ecx
push ebx
mov ebx, 0xdf54ef1
shl ebx, 3
xor ebx, 0x7ff4c8cc
sub ebx, 0xb73f7cb4
sub ecx, ebx
pop ebx
sub ecx, 0x3f9d849f
sub ecx, 0x35f739c6
add ecx, eax
add ecx, 0x35f739c6
add ecx, 0x3f9d849f
push edx
mov edx, 0x3cebabe3
and edx, 0x6dff50e9
dec edx
xor edx, 0x75f44270
add ecx, edx
pop edx
push dword [esp]
pop ecx
push ebp
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0xbd300d
push 0x2e99473d
mov dword [esp], edx
push esp
pop edx
push ebp
mov ebp, 0x5ffbca02
sub ebp, 0x5ffbc9fe
add edx, ebp
pop ebp
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
add ecx, 0x6fdca1e3
add ecx, eax
sub esp, 4
mov dword [esp], ebp
push edi
mov edi, 0x5bef7ba1
add edi, 0x5cd3d47a
dec edi
inc edi
xor edi, 0xd71ff1f8
push edi
pop ebp
pop edi
sub ecx, ebp
pop ebp
mov ecx, dword [esp]
push ecx
mov dword [esp], edx
mov edx, esp
add edx, 4
push ebp
mov ebp, 4
add edx, ebp
pop ebp
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
jmp dword [eax + 0xa4f058]
xor edx, edx
jmp 0xae4ee0
cmp esi, eax
jmp 0xaf67ed
push edi
mov dword [esp], esi
mov dword [esp], edx
push esp
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
push 0x1cc61039
mov dword [esp], ebx
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
push dword [esp]
mov eax, dword [esp]
push eax
mov eax, esp
push ebx
mov ebx, 0x4faf719a
xor ebx, 0x6ffb39df
sub ebx, 0xc6e91d4
not ebx
and ebx, 0x271d2834
not ebx
add ebx, 0x24180809
add eax, ebx
pop ebx
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
push edx
push 0xf7fe09e
pop edx
shr edx, 1
push 0
sub dword [esp], edx
pop edx
push ebx
push 0xf83fffb1
pop ebx
sub edx, ebx
pop ebx
sub eax, edx
pop edx
push ebp
mov dword [esp], edi
push edx
push edi
mov edi, 0x5fdff004
shl edi, 5
add edi, 0x7f4eaa21
xor edi, 0x519f1ea
mov edx, edi
pop edi
mov dword [esp + 4], edx
pop edx
mov dword [esp], ebx
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
pop ebx
push 0x5ee97ed5
mov dword [esp], ebp
mov ebp, esp
push ecx
mov ecx, 0x6f6e1af4
xor ecx, 0x6f6e1af0
add ebp, ecx
pop ecx
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xb18c42
jmp 0xb79ec3
push ecx
push eax
mov dword [esp], esp
add dword [esp], 4
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
pop dword [0x64ef7c]
push ebx
mov ebx, esp
add ebx, 4
push edi
mov edi, 4
sub ebx, edi
pop edi
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov dword [esp], edi
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0xb85b6b
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], esi
push 0x32980c01
mov dword [esp], ecx
mov ecx, 0x64eda8
mov dword [esp + 4], ecx
pop ecx
jmp 0xade085
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
sub esp, 4
mov dword [esp], ebx
push ebx
mov ebx, 0x25f3c54d
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebp
mov dword [esp], eax
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
mov eax, dword [esp]
push esi
push edi
mov dword [esp], esp
add dword [esp], 4
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0xba9268
push dword [ebp - 0x18]
push dword [esp]
push dword [esp]
pop eax
add esp, 4
add esp, 4
jmp 0xaf696f
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edi
mov dword [esp], ebx
push 8
pop ebx
mov dword [ebp - 8], ebx
pop ebx
push 0x6e612771
mov dword [esp], edi
push esi
mov esi, 0x2839c552
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebp
mov dword [esp], edx
push ebp
mov dword [esp], edx
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
push ebx
mov ebx, esp
push ecx
mov ecx, 0x7fff4661
shl ecx, 2
xor ecx, 0x7f5f56d5
inc ecx
push esi
mov esi, 0x7c7e18ce
and esi, 0x7f9ff802
add esi, 0x7fb9b7cc
xor esi, 0x7b758098
xor ecx, esi
pop esi
sub ebx, 0x4feff0b7
add ebx, ecx
add ebx, 0x4feff0b7
pop ecx
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0xc36770
push eax
push 0x291bfd3
mov dword [esp], edi
mov edi, 0xe607710
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], ebx
push esi
mov dword [esp], ecx
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
push edx
mov edx, 4
add edi, edx
pop edx
xchg dword [esp], edi
pop esp
push dword [0x84f040]
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, esp
push ecx
mov ecx, 0x51df4ee8
not ecx
and ecx, 0x6a7fc096
add ecx, 0xd5df7fee
add edx, ecx
pop ecx
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xb8786c
push edx
mov edx, 0x3f6f0e1c
sub edx, 0x6feec673
push ebx
push eax
mov eax, 1
mov ebx, eax
pop eax
add edx, ebx
pop ebx
shl edx, 8
push ebp
mov ebp, 0xf837da61
xor edx, ebp
pop ebp
mov dword [0x64ebc8], edx
pop edx
push 0x23579184
mov dword [esp], edx
push esp
pop edx
add edx, 4
sub edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push dword [esp]
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0xc3bf45
cmp dword [0xa4f058], 0x23f0
jmp 0xace991
sub esp, 4
mov dword [esp], edx
push esp
pop edx
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push 0x576f5f21
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
push ebx
mov ebx, 4
add esi, ebx
pop ebx
xchg dword [esp], esi
pop esp
add esp, 4
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push ebx
mov ebx, esp
add ebx, 4
push ebp
push 4
pop ebp
sub ebx, ebp
pop ebp
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
push 0x1d65142b
mov dword [esp], ebx
mov ebx, 4
add edi, ebx
pop ebx
xchg dword [esp], edi
pop esp
jmp 0xb320fd
jmp 0x4dc67a
je 0xad34d6
jmp 0xbb439c
je 0xc2b54a
jmp 0xbb43a6
push dword [0x64ee6c]
push dword [esp]
mov esi, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
push ecx
mov ecx, 0x7ddc2615
sub ecx, 1
sub ecx, 0x7ddc2610
sub ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
push eax
push esi
mov esi, 0x66dc7a22
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0xc1fa69
push dword [ebp - 0x14]
mov eax, dword [esp]
push edx
mov edx, esp
push edi
mov edi, 4
add edx, edi
pop edi
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
sub esp, 4
mov dword [esp], eax
push esi
push 0x69923107
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
add ecx, 0x7edf0cca
sub ecx, 0x3f7fd439
add ecx, eax
add ecx, 0x3f7fd439
push esi
mov esi, 0x7edf0cca
sub ecx, esi
mov esi, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
push dword [esp]
pop ecx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
jmp 0xad2f0f
push 0x6a4b3d2d
mov dword [esp], eax
mov eax, esp
push ebx
mov ebx, 0x7dbf5acb
inc ebx
inc ebx
or ebx, 0x5fcb5667
inc ebx
neg ebx
sub ebx, 0x8000a10c
add eax, ebx
pop ebx
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edi
mov dword [esp], ebx
push eax
mov eax, esp
add eax, 4
push ebx
mov ebx, 4
sub eax, ebx
pop ebx
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ecx
pop ebx
mov ebx, dword [esp]
push edx
mov edx, esp
push ecx
mov ecx, 0xc674258
add ecx, 0x7b73d1f4
dec ecx
sub ecx, 0x87db1447
add edx, ecx
pop ecx
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
mov esp, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
pop dword [0x64ef7c]
jmp 0x4dc67a
push 0x6c93ace1
mov dword [esp], edx
mov edx, esp
add edx, 4
push eax
mov eax, 4
sub edx, eax
pop eax
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], ecx
push ebx
mov ebx, 0x5d5805a0
sub ecx, ebx
pop ebx
push eax
mov eax, 0x585fef25
sub ecx, eax
mov eax, dword [esp]
add esp, 4
add ecx, eax
add ecx, 0x585fef25
add ecx, 0x5d5805a0
mov ecx, dword [esp]
push esi
push esp
pop esi
add esi, 4
push ebp
mov ebp, 4
add esi, ebp
pop ebp
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
push dword [ebp - 0x10]
mov ecx, dword [esp]
push esi
push esp
pop esi
add esi, 4
push ebp
mov ebp, 4
add esi, ebp
pop ebp
xchg dword [esp], esi
pop esp
jmp 0xad1520
cmp edx, dword [ebp - 0xc]
jmp 0xb86d29
push 0x7f5d670
mov dword [esp], ecx
push 0x3c
pop ecx
push ebx
mov ebx, 0x7abf8b6a
and ebx, 0x3f740966
shl ebx, 4
shl ebx, 8
sub ebx, 0xfa971221
add ecx, ebx
pop ebx
add ecx, edx
sub ecx, 0x45ff0ddf
add eax, dword [ecx]
pop ecx
push edi
mov edi, esp
push edx
mov edx, 4
add edi, edx
pop edx
push ebp
mov ebp, 4
sub edi, 0x7ed9c20b
sub edi, ebp
add edi, 0x7ed9c20b
pop ebp
xchg dword [esp], edi
pop esp
mov dword [esp], edx
push 0x3d33b77a
mov dword [esp], edx
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xad50ba
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push ebx
mov dword [esp], edi
mov dword [esp], ecx
push edx
mov edx, 0x6c75749a
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
push edi
mov edi, esp
add edi, 4
push eax
mov eax, 4
sub edi, 0x777f902a
sub edi, eax
add edi, 0x777f902a
pop eax
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
pop eax
mov eax, dword [esp]
push ebx
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push ebx
mov ebx, 0x22ae7d4a
inc ebx
push eax
mov eax, 0
sub eax, ebx
mov ebx, eax
pop eax
sub ebx, 0xdd5182b1
add ebp, ebx
pop ebx
xchg dword [esp], ebp
pop esp
jmp 0xb5f5af
push edx
push ebx
mov ebx, 0x64ebc8
mov dword [esp + 4], ebx
push dword [esp]
pop ebx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xbbcf55
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
push ebx
push 4
pop ebx
sub esi, ebx
pop ebx
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
sub esp, 4
mov dword [esp], edx
mov edx, 0x1fec8857
add ecx, edx
mov edx, dword [esp]
add esp, 4
sub ecx, 0x5fdf1fcb
add ecx, eax
add ecx, 0x5fdf1fcb
sub ecx, 0x1fec8857
mov ecx, dword [esp]
push edi
push esp
pop edi
push eax
mov eax, 4
add edi, eax
pop eax
push ebx
mov ebx, 4
add edi, ebx
pop ebx
xchg dword [esp], edi
pop esp
and edx, eax
jmp 0xbe04a5
jmp 0xaf227d
jmp 0xaf227d
mov byte [0x64e03d], al
jmp 0xb17457
call fcn.0044a150
jmp 0xaf28c4
push esi
mov dword [esp], edx
mov edx, esp
add edx, 4
push eax
mov eax, 0x76f7edae
sub eax, 0x76f7edaa
sub edx, eax
pop eax
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov ebx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
push ebx
mov ebx, 0x7aef8819
xor ebx, 0x7aef881d
add ebp, ebx
pop ebx
add ebp, 4
xchg dword [esp], ebp
pop esp
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xb8a7a6
xor eax, eax
jmp 0xc53a57
push ecx
mov dword [esp], 0x362397b0
mov dword [esp], ecx
push ebx
push 0x64eda8
pop ebx
mov dword [esp + 4], ebx
pop ebx
push ecx
push esi
mov esi, 0x7bc4dc8e
mov dword [esp + 4], esi
pop esi
mov dword [esp], edx
mov dword [esp], eax
push 0x475c70ee
mov dword [esp], ebp
push esi
mov esi, 0x11b2d7d9
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push ebx
push esp
pop ebx
push edi
mov edi, 4
add ebx, edi
pop edi
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0xb3d99f
push edi
mov dword [esp], eax
mov dword [esp], ecx
mov dword [esp], 0x599e570b
mov dword [esp], eax
push eax
mov dword [esp], ecx
push edx
mov edx, 0x2eaba119
mov dword [esp + 4], edx
pop edx
mov dword [esp], ebx
pop eax
push dword [esp]
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [ebp - 0x10]
push dword [esp]
pop ecx
push edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
mov dword [esp], edx
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov eax, dword [esp]
sub esp, 4
mov dword [esp], edi
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
jmp 0xbec14f
sub esp, 4
mov dword [esp], edi
mov dword [esp], 0x6f1fa876
mov dword [esp], ebp
mov dword [esp], ebx
mov dword [esp], ecx
push edi
mov edi, 0x7b3ea52e
add ecx, edi
pop edi
add ecx, 0x6bff1e9e
push ebx
mov ebx, 0x1506b4a9
neg ebx
dec ebx
shr ebx, 7
sub ebx, 0x82d8c478
add ecx, ebx
pop ebx
add ecx, eax
sub ecx, 0x7efd2e1e
sub ecx, 0x6bff1e9e
sub ecx, 0x7b3ea52e
push dword [esp]
pop ecx
push edi
push esp
pop edi
push ecx
mov ecx, 4
add edi, ecx
pop ecx
add edi, 4
xchg dword [esp], edi
pop esp
push edx
push 0x59ff995d
mov dword [esp], esp
add dword [esp], 4
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edx
mov dword [esp], ecx
jmp 0xb7bd20
push 0x7ddba9b8
mov dword [esp], ebp
mov dword [esp], edi
mov dword [esp], edx
push esi
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop edx
push esi
mov esi, esp
push ebx
mov ebx, 0x7e7d23b5
not ebx
shr ebx, 7
neg ebx
or ebx, 0x5fff7682
neg ebx
sub ebx, 0x132
add esi, ebx
mov ebx, dword [esp]
add esp, 4
add esi, 4
xchg dword [esp], esi
pop esp
shr ecx, 2
jmp 0xad6860
push ebx
mov dword [esp], 0x19a0686b
mov dword [esp], edx
mov dword [esp], ebx
mov dword [esp], edx
pop dword [0x64e024]
push edx
push 0xd5d9c1c
mov dword [esp], ebp
mov ebp, 0x34554399
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ebp
mov dword [esp], eax
push 0x68c2773c
mov dword [esp], ebp
push ebp
mov ebp, 0x58082992
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push ecx
push esp
pop ecx
push ebx
mov ebx, 0x76bf15f7
xor ebx, 0xf260eec
xor ebx, 0x79991b1f
add ecx, ebx
pop ebx
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xc3e244
sub esp, 4
mov dword [esp], edx
mov dword [esp], edi
mov dword [esp], ecx
pop dword [ebp - 0x18]
jmp 0xad3030
sub esp, 4
mov dword [esp], esi
mov dword [esp], edi
mov dword [esp], 0x139fe3cc
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov ebx, dword [esp]
push 0x461f4fa9
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop ebx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
push dword [ebp - 0x10]
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
xchg dword [esp], ebx
pop esp
jmp 0xaf1d5a
push edx
push 0x4f6f7a3b
mov dword [esp], edx
mov edx, 0x68ccd85f
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], edx
push esi
mov dword [esp], 0x744daa51
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
pop edx
push eax
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push esi
mov esi, 4
add ebp, esi
pop esi
xchg dword [esp], ebp
pop esp
push 0x15b1cb13
mov dword [esp], eax
push ecx
mov ecx, 0x5b485fe4
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], edx
pop dword [ebp - 0x10]
sub esp, 4
mov dword [esp], eax
mov dword [esp], ecx
mov dword [esp], edx
mov dword [esp], 0x3196a054
mov dword [esp], ebx
push ebx
mov dword [esp], ecx
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
pop ebx
push ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
jmp 0xc3e046
push esi
push eax
mov eax, 0x21255b30
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], ecx
mov dword [esp], eax
push edx
push ecx
mov ecx, 0x42baa731
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], ebx
pop eax
push dword [esp]
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
sub esp, 4
mov dword [esp], edi
mov edi, 0x706d6f63
push 0x17563677
mov dword [esp], edi
pop dword [0x64ebca]
mov edi, dword [esp]
add esp, 4
jmp 0xacfa41
push dword [ebp - 4]
mov ecx, dword [esp]
push edi
push esp
mov edi, dword [esp]
add esp, 4
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push eax
mov eax, esp
add eax, 4
push edx
mov edx, 4
sub eax, edx
pop edx
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], esi
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
mov ebx, dword [esp]
push esi
push esi
mov dword [esp], esp
add dword [esp], 4
pop esi
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
jmp 0xb23187
push ecx
mov cx, 0xa1ae
neg cx
add cx, 0xd49
xor cx, 0x3833
push esi
mov si, 0x3c4
push di
mov di, 0xdaf
add si, di
pop di
xor si, 0xd9df
and si, 0x1a08
shl si, 5
shl si, 8
sub si, 0x35bb
add cx, si
pop esi
and cx, 0x7e65
add cx, 0x4fff
push cx
pop word [0x64ebd0]
mov ecx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
push edi
mov edi, 0x3bf7dcad
shr edi, 3
add edi, 0x3fefc9ed
sub edi, 0x476ec57e
add ebp, edi
mov edi, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebp
mov dword [esp], 0x10f8ac7c
mov dword [esp], ecx
mov dword [esp], ebx
pop eax
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
push edi
push 4
pop edi
add eax, edi
pop edi
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0xc4a385
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push esi
mov esi, 4
sub ebp, esi
pop esi
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], eax
push ebx
mov dword [esp], ecx
mov dword [esp], ebx
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop eax
push esi
mov esi, esp
add esi, 4
push ecx
mov ecx, 4
add esi, ecx
pop ecx
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
push dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
push ebp
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
mov ecx, 0x5b32df53
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], edx
push ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], ecx
pop edx
push dword [esp]
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0xaf68e1
and al, byte [0x64e03a]
push ebx
sub esp, 4
mov dword [esp], edx
mov edx, 0x78cd9cce
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
push edx
mov dword [esp], 0x17e23258
mov dword [esp], ebx
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
pop eax
push esi
mov esi, esp
add esi, 4
push ebx
mov ebx, 4
add esi, ebx
pop ebx
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0xbb998c
push esi
mov esi, 0x6f7319cf
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x5b7f59df
xor esi, ecx
pop ecx
shl esi, 2
sub esi, 1
sub esi, 0x5334f65c
push esi
not dword [esp]
pop esi
sub esi, 0x8303b0cc
mov dword [ebp - 0xc], esi
pop esi
jmp 0xbfd496
push edx
mov dword [esp], eax
push esi
push ebp
mov ebp, 0x65c6984f
mov esi, ebp
pop ebp
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
push edi
mov dword [esp], ebp
mov ebp, 0x1aff981b
neg ebp
xor ebp, 0x35ff543e
sub ebp, 0x4f3ae64a
add ebp, 1
sub ebp, 0x3bbd3b26
add ebp, 0x2f77ea3b
sub ecx, ebp
mov ebp, dword [esp]
add esp, 4
add ecx, eax
add ecx, 0x757efca7
mov ecx, dword [esp]
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [0x64e024]
mov edx, dword [esp]
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
push edx
mov edx, 4
add edi, edx
pop edx
xchg dword [esp], edi
pop esp
push eax
push ebx
mov ebx, 0x685e8a7d
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebp
mov dword [esp], 0x4b5da18c
mov dword [esp], ebx
push eax
mov dword [esp], ecx
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
push edi
mov edi, 4
add eax, edi
pop edi
xchg dword [esp], eax
pop esp
push dword [esp]
pop ebx
push ebp
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
jmp 0xbb0009
sub esp, 4
mov dword [esp], eax
push ebx
mov ebx, 0x28ba3aa
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push 0x26801e3a
mov dword [esp], ebp
mov ebp, esp
push ecx
mov ecx, 0x7fff3b55
shl ecx, 6
or ecx, 0x75f30961
sub ecx, 0xffffdd5d
add ebp, ecx
pop ecx
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop ebx
push edi
mov edi, esp
add edi, 4
push eax
mov eax, 0x7f3f6f53
not eax
inc eax
inc eax
inc eax
and eax, 0x776eb600
push edi
mov edi, 0xffbf7004
add eax, edi
pop edi
add edi, eax
pop eax
xchg dword [esp], edi
pop esp
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0xc303c4
push ebx
mov ebx, 3
add ebx, ecx
push eax
mov dword [esp], ecx
mov ecx, 0
add ecx, ebx
xor esi, dword [ecx]
pop ecx
push dword [esp]
pop ebx
add esp, 4
jmp 0xaf67e2
push esi
mov esi, esp
add esi, 4
push ebp
mov ebp, 0x25fef7dd
and ebp, 0x7ff749c2
not ebp
shl ebp, 7
dec ebp
xor ebp, 0x4df1f7b
sub esi, ebp
pop ebp
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
mov dword [esp], ecx
mov dword [esp], ebx
push esi
mov dword [esp], ecx
mov dword [esp], 0x526eff4e
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push ecx
push esp
pop ecx
add ecx, 4
push esi
mov esi, 0x32d75d5d
dec esi
or esi, 0x37be80bc
dec esi
add esi, 0xc8002209
add ecx, esi
pop esi
xchg dword [esp], ecx
pop esp
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push 0x5603691f
mov dword [esp], esi
mov esi, esp
push ebp
mov ebp, 4
add esi, ebp
pop ebp
push ebx
mov ebx, 4
sub esi, ebx
pop ebx
xchg dword [esp], esi
pop esp
mov dword [esp], eax
push esi
mov esi, esp
add esi, 4
push edx
mov edx, 4
sub esi, edx
pop edx
xchg dword [esp], esi
pop esp
mov dword [esp], ebp
mov dword [esp], ebx
pop eax
mov eax, dword [esp]
push ecx
mov ecx, esp
push eax
mov eax, 0x5fdd719a
or eax, 0x7eedbf9b
xor eax, 0x7ffdff9f
add ecx, eax
push dword [esp]
pop eax
add esp, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xb0f17c
sub esp, 4
mov dword [esp], ebx
push edi
mov edi, 0x6c6c642e
mov ebx, edi
pop edi
push 0x674b2a30
mov dword [esp], ebx
pop dword [0x64ebd2]
pop ebx
push ebp
mov dword [esp], esi
mov dword [esp], 0x50d1b332
mov dword [esp], edx
mov dword [esp], ecx
sub esp, 4
mov dword [esp], eax
mov eax, 0x5db9e4cc
sub ecx, eax
pop eax
push ebp
mov ebp, 0x6bbe8ee6
or ebp, 0x7fe5b902
shr ebp, 6
neg ebp
shr ebp, 2
xor ebp, 0x447dc8ff
sub ecx, ebp
pop ebp
add ecx, eax
add ecx, 0x7bfdc8bf
add ecx, 0x5db9e4cc
push dword [esp]
pop ecx
push edx
mov edx, esp
push esi
mov esi, 0x137d2737
dec esi
xchg esi, ebp
inc ebp
xchg esi, ebp
sub esi, 0x137d2733
add edx, esi
pop esi
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xb10038
push eax
mov dword [esp], edx
sub esp, 4
mov dword [esp], edx
mov edx, 0x62cc0e83
mov dword [esp + 4], edx
pop edx
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
push dword [esp]
pop ebx
push edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
mov edx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
push dword [ebp - 8]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xb89461
push esi
sub esp, 4
mov dword [esp], esi
mov esi, 0x4defc203
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], ecx
push edi
mov edi, 0x6e7fb47f
sub ecx, 0x3fde3f37
sub ecx, edi
add ecx, 0x3fde3f37
pop edi
add ecx, eax
push edi
mov edi, 0x6e7fb47f
sub ecx, 0x7dde054a
add ecx, edi
add ecx, 0x7dde054a
pop edi
push dword [esp]
push dword [esp]
pop ecx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
push 0x55dab633
mov dword [esp], edx
mov dword [esp], ebp
mov dword [esp], eax
mov dword [esp], edx
pop dword [0x64e020]
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
mov dword [esp], edi
mov dword [esp], eax
mov dword [esp], ecx
push ebp
mov ebp, 0x776b83e7
xor ebp, 0x4bdc8814
push 0x709e85f3
mov dword [esp], ebx
mov ebx, 0x6dbfaff5
xor ebx, 0x57f3357d
xor ebx, 0x3ec4e313
sub ebx, 0xc4acff91
add ebp, ebx
pop ebx
shr ebp, 2
add ebp, 0x20d0e243
sub ecx, ebp
pop ebp
add ecx, eax
push edi
mov edi, 0x3ff583c2
add ecx, edi
pop edi
mov ecx, dword [esp]
push edx
push esp
pop edx
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
jmp 0xbc09c2
push ebx
push ebp
push edi
mov dword [esp], 0x774fbea9
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
push edx
push 0x4ff7fca7
mov edx, dword [esp]
add esp, 4
sub ecx, edx
pop edx
add ecx, eax
push edi
mov edi, 0x4ff7fca7
add ecx, edi
pop edi
mov ecx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push edi
mov dword [esp], edx
mov dword [esp], esi
mov esi, 4
add ebp, esi
pop esi
xchg dword [esp], ebp
pop esp
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
push edi
mov dword [esp], ebp
mov ebp, 0x64eda8
mov dword [esp + 4], ebp
pop ebp
jmp 0xc166a6
push eax
push edx
mov dword [esp], ebp
mov dword [esp], 0x2e706973
pop eax
mov dword [0x64ebcc], eax
mov eax, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
sub edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], ecx
mov dword [esp], ebp
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ebp
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
pop edx
push 0x72601bd1
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
jmp 0xbf9e29
jmp dword [eax + 0xa4f058]
push ebx
mov dword [esp], esi
mov esi, esp
push ebp
mov ebp, 0x6e25c3ca
and ebp, 0x776bb968
not ebp
push edi
mov edi, 0x2fef747f
inc edi
sub edi, 0xc1f00686
and ebp, edi
pop edi
neg ebp
neg ebp
xor ebp, 0x9de6cb6
add esi, ebp
pop ebp
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push 0x2d0fc418
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push dword [esp]
pop ebx
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
mov al, byte [0x64e03d]
push edi
mov edi, esp
add edi, 4
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], edx
push ebp
push eax
push ebx
mov ebx, 0x5e0d4e1a
mov eax, ebx
pop ebx
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
pop edx
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
push eax
mov eax, 4
add ebx, eax
pop eax
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0xbfe665
push dword [ebp - 0x10]
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
jmp 0xb28c9a
push 0x783d05c4
mov dword [esp], eax
mov dword [esp], 0x755eff1d
mov dword [esp], eax
mov dword [esp], 0x716de228
mov dword [esp], eax
sub esp, 4
mov dword [esp], esi
push edi
mov edi, 0x70c3b5fe
mov dword [esp + 4], edi
pop edi
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
mov al, byte [0x64ebd1]
jmp 0xae50a4
mov al, byte [0x64e033]
sub esp, 4
mov dword [esp], ecx
push eax
mov eax, 0x104cd53e
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
push edi
mov edi, 0x7cf74b76
sub edi, 0x3faf5916
push ebx
mov ebx, 0x7efc547b
neg ebx
xor ebx, 0x737f3a04
xor ebx, 0xbd8030c4
and edi, ebx
pop ebx
inc edi
push esi
mov esi, 0x75af59cb
and edi, esi
pop esi
xor edi, 0x73fa51cb
add ecx, edi
pop edi
add ecx, 0x7cfdf239
add ecx, eax
sub ecx, 0x7cfdf239
sub ecx, 0x76fe518a
mov ecx, dword [esp]
push 0x9723d1b
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
push esi
mov esi, 4
add ebp, esi
pop esi
xchg dword [esp], ebp
pop esp
jmp 0xaf69d6
push ecx
mov ecx, esp
add ecx, 4
push ebx
push 4
pop ebx
sub ecx, ebx
pop ebx
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], edx
push ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
add edx, 0x75df2a28
sub edx, 0x3eed5b10
sub edx, ecx
push ecx
push 0x3eed5b10
pop ecx
add edx, 0x357559db
add edx, ecx
sub edx, 0x357559db
pop ecx
sub edx, 0x75df2a28
push esi
push esp
pop esi
add esi, 4
push edx
push 4
pop edx
sub esi, edx
pop edx
xchg dword [esp], esi
pop esp
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
push ecx
mov ecx, 4
add edi, ecx
pop ecx
xchg dword [esp], edi
mov esp, dword [esp]
mov edx, dword [esp]
push edi
mov dword [esp], edx
mov edx, esp
push esi
mov esi, 0x63d5b93b
inc esi
dec esi
sub esi, 0x7fffcb7c
xor esi, 0xe3d5edbb
add edx, esi
pop esi
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0xc34b19