Function at 0xb6b0dc
Capabilities:
Accept command line arguments

Disassembly:
push dword [0x65dd9c]
push dword [esp]
pop esi
push eax
mov eax, esp
add eax, 4
push ebx
mov ebx, 0x268ff412
sub ebx, 0x268ff40e
add eax, ebx
pop ebx
xchg dword [esp], eax
pop esp
push ebp
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], esi
mov dword [esp], edx
push 0x36b4a3a2
mov dword [esp], eax
mov dword [esp], ecx
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
add esp, 4
jmp 0xb74365
sub esp, 4
mov dword [esp], ebx
mov dword [esp], esi
push esi
mov esi, 0x4119a308
mov dword [esp + 4], esi
pop esi
mov dword [esp], eax
push ebp
mov dword [esp], ebx
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
sub esp, 4
mov dword [esp], eax
mov dword [esp], ebx
mov ebx, 4
add eax, ebx
pop ebx
xchg dword [esp], eax
pop esp
push esi
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x492b2a0e
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], eax
pop dword [0x85ef70]
jmp 0xbef252
push ebp
push ebp
push 0x653b9200
pop ebp
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], ecx
push edx
push 0x4b3b5a0c
pop edx
sub esp, 4
mov dword [esp], eax
mov eax, 0x31402d1c
sub edx, eax
pop eax
add ecx, edx
pop edx
add ecx, eax
sub ecx, 0x19fb2cf0
mov ecx, dword [esp]
push ebx
mov ebx, esp
push eax
mov eax, 0x37fd89ab
or eax, 0x3d9b9df4
xor eax, 0x75df16fc
push ebp
mov ebp, 0x7dfbeda6
xor eax, ebp
pop ebp
add eax, 0xc824995f
add ebx, eax
pop eax
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
push dword [0x65d024]
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push edi
mov edi, esp
add edi, 4
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
mov dword [esp], ecx
sub ecx, 0x6f2e1990
add ecx, eax
push eax
mov eax, 0x6f2e1990
add ecx, 0x5fd3fed9
push ebp
mov ebp, 0x7ff7e244
add ecx, ebp
pop ebp
add ecx, eax
sub ecx, 0x7ff7e244
sub ecx, 0x5fd3fed9
pop eax
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
jmp 0xb8ebdb
push 0x3f63ca74
mov dword [esp], eax
sub esp, 4
mov dword [esp], esi
mov esi, 0xb80681f
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
push edx
push ebx
mov ebx, 0x6f7f9d47
sub ebx, 0x25d76db2
sub ebx, 0xdf884f1
mov edx, ebx
mov ebx, dword [esp]
add esp, 4
not edx
xor edx, 0xab0faa60
sub ecx, edx
pop edx
add ecx, eax
push eax
mov eax, 0x6f5fff3b
add ecx, eax
pop eax
push dword [esp]
mov ecx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
add esp, 4
mov byte [0x65db02], al
jmp 0xb6f148
push 0x5dcb7aa7
mov dword [esp], ebp
push esi
mov esi, 7
mov ebp, esi
pop esi
or ecx, ebp
push dword [esp]
pop ebp
add esp, 4
jmp 0xb9ef95
push esi
mov esi, 0x2e706973
push 0xcc32a7e
mov dword [esp], esi
pop dword [0x65dafc]
push dword [esp]
pop esi
add esp, 4
jmp 0xb8353b
push edx
push ebp
push 0x2331383a
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
pop dword [ebp - 0x10]
sub esp, 4
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], edi
mov dword [esp], edx
mov dword [esp], ecx
push esi
mov esi, 0x7dee026d
dec esi
push eax
mov eax, 0x7e186a8d
and eax, 0x1fdd8066
push edi
mov edi, 0x7b6b7bcb
xor edi, 0x129252c5
xor eax, edi
pop edi
shl eax, 2
xor eax, 0x24865e6
add esi, eax
pop eax
add ecx, esi
pop esi
add ecx, eax
push ebp
mov ebp, 0x5bbac43a
sub ecx, ebp
pop ebp
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 0x7fcdff61
xor ebp, 0x7fcdff65
add ebx, ebp
pop ebp
xchg dword [esp], ebx
pop esp
jmp 0xc0e8aa
push esi
mov esi, 0x2b6ed1b4
sub edx, esi
pop esi
add edx, 0x3ff71611
sub edx, ecx
sub edx, 0x3ff71611
push 0x4273944
mov dword [esp], eax
mov eax, 0x2b6ed1b4
add edx, eax
pop eax
push 0x19b59477
mov dword [esp], esi
mov esi, esp
push edx
mov edx, 4
add esi, edx
pop edx
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edi
mov dword [esp], eax
push ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
sub esp, 4
mov dword [esp], edx
push dword [esp + 4]
pop edx
pop dword [esp]
mov esp, dword [esp]
jmp 0xb9273e
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
mov dword [esp], 0x62769141
mov dword [esp], edi
mov dword [esp], ecx
sub ecx, 0x6e8f1833
sub ecx, 0x75f7f03d
add ecx, 0x7fffe3d6
add ecx, eax
push ecx
mov dword [esp], ebp
mov ebp, 0x7b3f7f4a
add ebp, 0x4c0648c
sub ecx, ebp
pop ebp
add ecx, 0x75f7f03d
add ecx, 0x6e8f1833
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], edi
mov edi, esp
push ebx
mov ebx, 0x767f329c
sub ebx, 0x25575308
sub ebx, 0x3fff0822
xor ebx, 0x1128d776
add edi, ebx
pop ebx
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push esi
push ebx
mov ebx, 0x4fa98528
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], eax
pop dword [0x85ef68]
push esi
sub esp, 4
mov dword [esp], esi
mov esi, 0x6eb095b2
mov dword [esp + 4], esi
pop esi
mov dword [esp], edi
mov dword [esp], eax
push edx
mov dword [esp], esi
mov dword [esp], ebx
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0xb7cd31
call fcn.0044baa0
jmp 0xbd9fbe
je 0xb656d8
jmp 0xb76ed8
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
jmp 0xb4efd7
sub esp, 4
mov dword [esp], ebp
push ebp
mov dword [esp], esi
mov esi, 0x4a92b6fa
mov dword [esp + 4], esi
pop esi
mov dword [esp], eax
push edx
mov dword [esp], ebx
mov eax, dword [esp]
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
add esp, 4
push 0x28830f3e
mov dword [esp], edx
push esi
mov esi, 0x65dcd8
mov dword [esp + 4], esi
push dword [esp]
pop esi
add esp, 4
jmp 0xba9f62
push edx
mov edx, esp
add edx, 4
push ecx
push ebx
mov ebx, 0x7dde0642
sub ebx, 0x7dde063e
mov ecx, ebx
pop ebx
sub edx, ecx
pop ecx
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ecx
push edx
mov edx, 0x1ef5247a
or edx, 0x33ffe1ba
xor edx, 0x76fb7a39
shr edx, 4
shl edx, 8
not edx
xor edx, 0xa0a5f34
sub ecx, edx
pop edx
add ecx, eax
push ebp
push 0x5a9781ed
pop ebp
push edx
mov edx, 0x4faede06
add ebp, edx
pop edx
add ebp, 0xbb75fcd8
add ecx, ebp
pop ebp
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
push eax
mov eax, 4
sub edi, eax
pop eax
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], edx
push 0x3a67ba2b
mov dword [esp], edx
mov dword [esp], edi
mov dword [esp], ecx
mov dword [esp], edi
mov dword [esp], eax
push ecx
mov dword [esp], ebx
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop eax
push esi
mov esi, esp
push ebp
mov ebp, 0x7fde6043
xor ebp, 0x7f8b8c38
not ebp
not ebp
xor ebp, 0x7db714e5
dec ebp
xor ebp, 0x7de2f899
add esi, ebp
pop ebp
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0xb63e17
cmp edx, dword [ebp - 0xc]
jmp 0xb656cd
cmp dword [0xa5ff88], 0x23f0
jmp 0xb7178c
push ebp
push ecx
mov dword [esp], eax
mov eax, 0x1198958e
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push ebp
mov ebp, 4
sub ecx, 0x36bf8377
add ecx, ebp
add ecx, 0x36bf8377
pop ebp
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebp
push 0x5b0983f7
mov dword [esp], edi
mov edi, 0x65dcd8
mov dword [esp + 4], edi
pop edi
push esi
push 0x281068a3
mov dword [esp], ebx
mov ebx, 0x4f8b0a0c
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ecx
mov dword [esp], edx
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
pop edx
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
jmp 0xc093aa
push dword [ebp - 0x18]
push dword [esp]
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
jmp 0xbc9aac
ja 0xbb53d4
jmp 0xb6dfa0
jae 0xbd3d39
jmp 0xbdf90e
push edi
push esp
pop edi
add edi, 4
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
push edx
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x1230b05
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
pop edx
push dword [esp]
pop edx
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push dword [0x65d028]
push dword [esp]
mov ecx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebp
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
mov edx, dword [esp]
push edx
mov edx, esp
push ebp
mov ebp, 0x57e60700
sub ebp, 0x356eaf1a
xor ebp, 0x297f5920
inc ebp
neg ebp
shl ebp, 7
add ebp, 0x84076384
add edx, ebp
pop ebp
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop edx
push edi
mov edi, esp
push eax
mov eax, 4
add edi, eax
pop eax
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0xb52268
push ecx
mov ecx, 5
add ecx, edx
push edx
mov edx, 0
add edx, ecx
xor esi, dword [edx]
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
pop ecx
jmp 0xbaa8c7
push dword [ebp - 4]
push dword [esp]
pop ecx
push ecx
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edi
mov dword [esp], edx
mov dword [esp], 0x607f2dc9
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push esi
mov esi, esp
push edi
mov edi, 0x27ff8551
xor edi, 0x768ce310
or edi, 0x5b6d6af6
add edi, 0x7eef9e32
add edi, 0x2590f2db
add esi, edi
pop edi
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xbd70c1
jmp 0xbacc2f
jmp 0xbacc2f
mov al, byte [0x65db01]
jmp 0xb50207
jmp 0xb6dfa0
cmp ecx, dword [ebp - 0x1c]
jmp 0xc10900
mov dx, word [ecx]
jmp 0xb6db6e
push edi
mov di, 0x36e2
push dx
mov dx, 0x709
xor di, dx
pop dx
xor di, 0x5d8f
push di
pop word [0x65db00]
mov edi, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xb772e9
push dword [0x85ef70]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push 0x7a0c9f12
mov dword [esp], esi
push 0x1130b851
mov dword [esp], eax
mov eax, 0x379fcf4a
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
push edi
mov dword [esp], 0x7739bfe2
mov dword [esp], esi
mov dword [esp], 0x46443a97
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push eax
mov eax, esp
push ebx
mov ebx, 0x5bbb2e2e
push esi
mov esi, 0x5fb72a2e
shr esi, 5
add esi, 0x2cb94f39
and ebx, esi
pop esi
not ebx
sub ebx, 0xf44cf7f1
add eax, 0x375f598c
add eax, ebx
sub eax, 0x375f598c
pop ebx
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xb4e6f3
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov dword [esp], edx
push edx
mov dword [esp], 0x6fdb37bd
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push 0x320858c5
mov dword [esp], edi
push 0xdf9b78f
mov dword [esp], ebp
push 0x65dcd8
pop ebp
mov dword [esp + 4], ebp
pop ebp
push esi
push edx
mov edx, 0x272b0cf2
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], edx
mov dword [esp], eax
push esi
mov dword [esp], 0x6b7f4deb
mov dword [esp], esi
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
jmp fcn.00c02ec6
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0xb86c5b
and edx, eax
push 0x1206981b
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
mov dword [esp], edi
mov dword [esp], eax
push eax
mov dword [esp], edi
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
mov eax, dword [esp]
push esi
mov dword [esp], edi
mov edi, esp
push edx
mov edx, 4
add edi, edx
pop edx
push esi
mov esi, 4
add edi, esi
pop esi
xchg dword [esp], edi
pop esp
jmp 0xc10870
xor eax, eax
push ecx
mov dword [esp], ebx
mov dword [esp], edx
mov dword [esp], 0xe996158
mov dword [esp], ebx
mov dword [esp], edx
push edi
push edx
mov edx, 0x7beeeaef
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
push 0x368cf7eb
mov dword [esp], ebp
mov ebp, esp
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0xba3129
push eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 4
sub eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov dword [esp], edx
pop dword [0x65d020]
jmp 0xb918bf
sub esp, 4
mov dword [esp], ebx
push esp
pop ebx
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push edx
mov edx, esp
push ecx
mov ecx, 0x3d278764
add ecx, 0x3fd69dee
or ecx, 0x6b3bb0ad
xor ecx, 0x7fffb5fb
add edx, ecx
pop ecx
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
push ebx
mov ebx, 0x3c
add ebx, edx
push ecx
mov ecx, 0
add ecx, 0x5d769055
add ecx, ebx
sub ecx, 0x5d769055
push edx
mov edx, 0
add edx, ecx
push ecx
mov ecx, 0
add ecx, edx
add eax, dword [ecx]
pop ecx
pop edx
pop ecx
pop ebx
push ebx
push esp
pop ebx
add ebx, 4
push edx
mov edx, 4
sub ebx, edx
pop edx
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push eax
mov eax, esp
push ebx
mov ebx, 4
add eax, ebx
pop ebx
push ebx
mov ebx, 4
add eax, ebx
pop ebx
xchg dword [esp], eax
pop esp
jmp 0xba25a5
imul eax, ecx
jmp 0xb4fb73
push dword [ebp - 0x18]
push dword [esp]
pop eax
push ebp
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0xb94298
push esi
mov dword [esp], edi
push edx
mov edx, 0x7214f2f1
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], ebx
push esi
mov dword [esp], 0x779dbed9
mov dword [esp], ecx
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
mov ebx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
add esp, 4
push esi
push esp
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0xb743f7
push 0x22584e37
mov dword [esp], esi
mov esi, esp
push edi
mov edi, 4
add esi, edi
pop edi
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ecx
sub ecx, 0x6f9720f4
sub ecx, 0x7fcfc2b5
sub ecx, 0x57bfacb1
add ecx, eax
push ebp
mov ebp, 0x57bfacb1
add ecx, ebp
pop ebp
add ecx, 0x7fcfc2b5
push edi
mov edi, 0x37fc917c
or edi, 0x3fffa525
shl edi, 6
neg edi
shl edi, 1
sub edi, 0x5d77823b
sub edi, 0x33169e51
add ecx, edi
pop edi
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov al, byte [0x65d033]
jmp 0xb73804
push ecx
push esp
pop ecx
push eax
mov eax, 0x7f97f598
or eax, 0x67bf091d
xor eax, 0x7dde7fc6
xor eax, 0x261825f
add ecx, 0x1a5f9971
add ecx, eax
sub ecx, 0x1a5f9971
pop eax
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
push 0x76fcb28d
mov dword [esp], ebx
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push dword [esp]
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0xb85baf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xbc5940
jne 0xbf7a67
jmp 0xbfc72b
cmp dword [ebp - 0x10], 0x1000000
jmp 0xb71781
push 0xd565ae0
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x62e05f26
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
push 0x21e962cd
mov dword [esp], edx
mov dword [esp], ebx
mov dword [esp], 0x3b016ae5
mov dword [esp], ecx
pop edx
push dword [esp]
push dword [esp]
pop edx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
push dword [0x65d020]
push dword [esp]
pop edx
push ecx
mov ecx, esp
push edx
mov edx, 4
add ecx, edx
pop edx
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xb5fac4
sub esp, 4
mov dword [esp], ebp
push esi
push 0x282672e4
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], eax
push 0x527f3790
mov dword [esp], ebx
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
push dword [esp]
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
push dword [ebp - 0x10]
push dword [esp]
pop eax
push esi
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push esi
push ebp
mov dword [esp], edi
mov edi, 0x6ee81ab6
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
mov dword [esp], eax
push ebp
mov dword [esp], eax
push ecx
mov ecx, 0xffffd22
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
pop eax
mov eax, dword [esp]
push ecx
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
mov ecx, dword [esp]
add esp, 4
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xc0d53a
push esi
push eax
mov eax, 0x51879ddb
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
mov dword [esp], 0xf9b0c02
mov dword [esp], eax
push eax
mov dword [esp], 0x219b8b4a
mov dword [esp], ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop eax
push ebp
mov ebp, esp
push ecx
mov dword [esp], ebx
mov ebx, 4
add ebp, ebx
pop ebx
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [ebp - 0x10]
mov edx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0xb6b020
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xc131bf
cmp esi, eax
jmp 0xbaa8d2
push 0x196e270b
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], ecx
sub ecx, 0x7fff9891
push eax
mov eax, 0x7b7d5804
or eax, 0x7afba03c
inc eax
neg eax
shr eax, 5
dec eax
add eax, 0x685bcfbe
sub ecx, eax
pop eax
add ecx, eax
push ebp
mov ebp, 0x6c7bcffb
add ecx, ebp
mov ebp, dword [esp]
add esp, 4
add ecx, 0x7fff9891
push dword [esp]
mov ecx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
xor ecx, ecx
sub esp, 4
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], ecx
push edx
mov edx, 0x71b7d5f3
add ecx, edx
pop edx
add ecx, 0x6ffdcab8
sub ecx, 0x6fc663d4
add ecx, eax
add ecx, 0x6fc663d4
push ebx
mov ebx, 0x1f7e2ace
xor ebx, 0x3fff36c8
or ebx, 0x65b77072
xor ebx, 0x26f9fab7
xor ebx, 0x2cb34c79
sub ecx, ebx
pop ebx
sub ecx, 0x71b7d5f3
push dword [esp]
pop ecx
push ecx
mov ecx, esp
sub esp, 4
mov dword [esp], ebp
mov ebp, 4
add ecx, ebp
pop ebp
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xbd9fc6
push ebp
push eax
mov eax, 0x65dcd8
mov dword [esp + 4], eax
push dword [esp]
pop eax
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ebp
mov ebp, esp
push edi
mov edi, 0x7eff2666
and edi, 0x73fe2aab
neg edi
inc edi
xor edi, 0x8d01dddb
sub ebp, 0x4efd7f50
sub ebp, 0x7f7eaabb
add ebp, edi
add ebp, 0x7f7eaabb
add ebp, 0x4efd7f50
pop edi
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
sub ecx, 0x55f6d8ac
add ecx, 0x6dbf3c47
add ecx, eax
push ebx
mov ebx, 0x6dbf3c47
sub ecx, 0x577f996b
sub ecx, ebx
add ecx, 0x577f996b
mov ebx, dword [esp]
add esp, 4
add ecx, 0x55f6d8ac
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push ecx
push 4
pop ecx
add ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
jmp 0xbe630e
push ebp
mov dword [esp], 0x79360b8b
mov dword [esp], edx
mov dword [esp], 0x66d04378
mov dword [esp], edx
mov dword [esp], 0x65daf8
push ecx
mov ecx, esp
sub esp, 4
mov dword [esp], ebx
mov ebx, 4
add ecx, 0x55ff9826
add ecx, ebx
sub ecx, 0x55ff9826
pop ebx
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
push eax
mov dword [esp], 0x3fed218a
mov dword [esp], ebx
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov eax, dword [esp]
push 0x361d3409
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
push edx
mov dword [esp], eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
jmp 0xbc1e01
test eax, eax
jmp 0xc108f5
xor edx, edx
jmp 0xb7ffe4
add esp, 4
jmp 0xbd70ba
mov cx, word [eax]
jmp 0xb7ffdc
push ebp
mov dword [esp], ebx
push 0x58f98664
mov dword [esp], esi
mov esi, 0x53fcfd30
mov dword [esp + 4], esi
pop esi
mov dword [esp], edx
push esi
mov dword [esp], ecx
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
push dword [esp]
pop edx
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push edi
push ecx
push 0x65dcd8
pop ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ebx
mov ebx, esp
push esi
mov esi, 4
add ebx, esi
pop esi
sub ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
push edx
mov edx, esp
push ebp
mov ebp, 0x477b5fa3
sub ebp, 0x77d9a34c
inc ebp
add ebp, 0x305e43ac
add edx, ebp
mov ebp, dword [esp]
add esp, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push esi
push esp
pop esi
add esi, 4
push ebx
push 4
pop ebx
add esi, ebx
pop ebx
xchg dword [esp], esi
pop esp
jmp 0xb87717
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x398086f4
mov dword [esp], edx
mov dword [esp], ebp
push ebx
mov ebx, 0x17fa0515
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ecx
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x716eb0e2
add ecx, ebx
pop ebx
add ecx, 0x6abeeef3
add ecx, eax
sub ecx, 0x6abeeef3
push eax
mov eax, 0x7a730086
xor eax, 0x697d203e
add eax, 0x6f7bfba8
dec eax
sub eax, 0x111b6b7d
sub ecx, eax
pop eax
mov ecx, dword [esp]
push edi
mov edi, esp
push eax
push edx
mov edx, 0x2f6f3dac
mov eax, edx
pop edx
sub eax, 0x2f6f3da8
add edi, eax
pop eax
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0xb6869f
push dword [ebp - 0x18]
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push 0x775a566
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x2d004c21
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push edx
mov edx, esp
push eax
mov eax, 0x79f72258
sub eax, 0x6f7b7729
inc eax
inc eax
shr eax, 1
add eax, 0x17f3aee0
add eax, 0xe2ce7b8c
add edx, eax
pop eax
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0xb62b11
push ebp
push esi
mov esi, 0x6fc26900
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebp
mov dword [esp], edx
mov dword [esp], eax
push 0x40d3aed0
mov dword [esp], eax
mov dword [esp], ebx
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop eax
push esi
mov esi, esp
add esi, 4
push eax
mov eax, 4
add esi, 0x73ffe396
add esi, eax
sub esi, 0x73ffe396
pop eax
xchg dword [esp], esi
pop esp
push dword [ebp - 0x18]
mov edx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push edi
mov dword [esp], ebp
push esi
push eax
mov eax, 0x7d8b50d9
neg eax
sub eax, 0x57679d6c
mov esi, eax
pop eax
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
push ebp
mov ebp, 0x5dcd1469
neg ebp
dec ebp
xor ebp, 0xe9c9d4f0
sub ecx, ebp
pop ebp
add ecx, 0x6adff911
add ecx, 0x7eadc8af
add ecx, eax
sub ecx, 0x7eadc8af
sub ecx, 0x6adff911
push esi
mov esi, 0x4bfb3f66
add ecx, esi
pop esi
mov ecx, dword [esp]
push esi
push esp
pop esi
push ebx
mov ebx, 4
add esi, ebx
pop ebx
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0xba16f2
push ebx
mov dword [esp], eax
mov dword [esp], edx
push 0x3eeffa5d
pop edx
add edx, 0xffffffff
dec edx
neg edx
sub edx, 0x489f9544
mov dword [0x65daf8], edx
pop edx
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], ebx
push edi
mov dword [esp], 0x6f6f9858
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
pop ebx
push edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
jmp 0xb5621a
push ebp
mov dword [esp], 0x3aa0ea4a
mov dword [esp], edi
mov dword [esp], ecx
pop dword [ebp - 0x18]
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
push esi
mov dword [esp], ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
push edx
push 0x1f9310f7
pop edx
inc edx
or edx, 0x2fcd3c6b
shr edx, 8
xor edx, 0x7fffa5a8
xchg edx, ebp
not ebp
xchg edx, ebp
sub edx, 0x5893db
add ecx, edx
mov edx, dword [esp]
add esp, 4
add ecx, eax
sub ecx, 0x7fe6f190
push dword [esp]
pop ecx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
jmp 0xbb8cd7
push ebx
mov ebx, esp
push edi
mov edi, 0x21d68210
sub edi, 0x21d6820c
add ebx, edi
pop edi
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
mov dword [esp], edx
mov dword [esp], ecx
push ebp
mov ebp, 0x15fbeb36
xor ebp, 0x3dd3b340
or ebp, 0x7efd619e
add ebp, 0x7f9d276a
sub ebp, 0x3bfb5543
xor ebp, 0xa920125b
add ecx, ebp
pop ebp
add ecx, eax
push ebp
mov ebp, 0x7e0e9920
push ecx
mov ecx, 0x1abf8c96
xor ebp, ecx
pop ecx
shl ebp, 8
neg ebp
xor ebp, 0x7dfff68e
and ebp, 0x76f6a4f9
push edi
mov edi, 0x37bf1c5f
shr edi, 6
dec edi
shr edi, 4
and edi, 0x6e7f0777
xor edi, 0xc658414d
sub ebp, edi
pop edi
sub ecx, ebp
pop ebp
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
push esi
mov esi, 4
add ebp, esi
pop esi
push edx
mov edx, 4
add ebp, edx
pop edx
xchg dword [esp], ebp
pop esp
jmp dword [eax + 0xa5ff88]
push 0x16175470
mov dword [esp], ecx
push edi
push 0x42a620bc
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
push ebx
push dword [esp]
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
mov eax, dword [esp]
push esi
push esp
pop esi
push edi
mov edi, 0x59faa126
shr edi, 7
xor edi, 0xb3f546
add esi, edi
pop edi
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push eax
mov eax, esp
add eax, 4
push ebp
mov ebp, 4
sub eax, ebp
mov ebp, dword [esp]
add esp, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ebx
push esi
mov dword [esp], ecx
mov ebx, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
mov esi, dword [esp]
add esp, 4
pop dword [esp]
pop esp
jmp 0xbd3dee
push ebx
push 0x980ca30
mov dword [esp], esp
add dword [esp], 4
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
pop eax
push ecx
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x6fd5a7f3
dec ecx
xor ecx, 0x6fd5b7f2
sub eax, ecx
mov ecx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
sub esp, 4
mov dword [esp], esi
push edi
push edx
mov edx, 0x43c7a731
neg edx
xor edx, 0xfe65f874
mov edi, edx
pop edx
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
mov eax, dword [esp]
push edx
push esp
pop edx
push ebp
mov ebp, 4
add edx, ebp
pop ebp
push ecx
mov ecx, 4
add edx, ecx
pop ecx
xchg dword [esp], edx
pop esp
jmp 0xb56d30
add al, 0
add byte [eax], al
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
mov esp, dword [esp]
jmp 0xbb4cf9
push edi
mov dword [esp], eax
push esp
mov eax, dword [esp]
add esp, 4
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
sub ecx, 0x7e7b6661
sub ecx, 0x4f99af68
add ecx, eax
push edi
push 0x4f99af68
pop edi
add ecx, edi
mov edi, dword [esp]
add esp, 4
add ecx, 0x7e7b6661
mov ecx, dword [esp]
push esi
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
push edi
mov edi, 0x7ebf8ab5
or edi, 0x3ff8728c
sub edi, 0x7ffffab9
add ebp, edi
pop edi
xchg dword [esp], ebp
pop esp
push dword [ebp - 0x10]
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
add esp, 4
jmp 0xbf896f
push edx
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 4
sub ebx, 0x2abefd67
sub ebx, edx
add ebx, 0x2abefd67
pop edx
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push eax
push esp
mov eax, dword [esp]
add esp, 4
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop eax
push ebp
mov ebp, esp
push esi
mov esi, 0x7fbbad54
add esi, 0x804452b0
add ebp, esi
pop esi
push esi
mov esi, 4
add ebp, esi
pop esi
xchg dword [esp], ebp
pop esp
push ebx
mov dword [esp], 0x1a878714
mov dword [esp], ebp
mov dword [esp], 0x525d0537
mov dword [esp], edx
pop dword [0x65d024]
jmp 0xbb53d4
je 0xbacc2f
jmp 0xb6fc15
je 0xbf2ace
jmp 0xb76ece
push ebx
mov dword [esp], eax
push eax
mov eax, 0xdc6eaf0
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], edx
push edi
mov dword [esp], edx
push esp
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
pop edx
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
sub esp, 4
mov dword [esp], ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
push ebx
push ebp
push 0x6ccf95bf
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
pop dword [0x65deac]
push esi
mov dword [esp], 0x3637f2be
mov dword [esp], ecx
mov dword [esp], ebp
mov dword [esp], edx
mov dword [esp], ebx
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov ebx, dword [esp]
push edi
mov edi, esp
add edi, 4
push eax
mov eax, 0x7fef69fa
inc eax
shr eax, 3
sub eax, 0x7bbebc7e
xor eax, 0x1eefe933
not eax
add eax, 0x8ad0d9f7
add edi, eax
push dword [esp]
pop eax
add esp, 4
xchg dword [esp], edi
pop esp
jmp 0x4e139a