Function at 0x5ff3ac
Capabilities:
Accept command line arguments

Disassembly:
push ebp
push eax
push ecx
mov dword [esp], 0x33c72abd
pop eax
mov dword [esp + 4], eax
pop eax
mov dword [esp], eax
push edx
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
push ecx
mov dword [esp], 0x709b1818
mov dword [esp], eax
mov dword [esp], edx
pop dword [0x4c3034]
jmp 0x5ff336
push 0x62f5be3f
mov dword [esp], esi
push ebp
push 0x4921df5e
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
mov ebx, dword [esp]
push eax
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
jmp 0x6a3437
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push ebx
push esp
mov ebx, dword [esp]
add esp, 4
add ebx, 4
sub ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov dword [esp], edx
push edi
mov dword [esp], eax
mov dword [esp], ecx
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop edx
push edx
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x5f948c
push ecx
mov dword [esp], edx
push edx
push 0x7a70b2e1
pop edx
mov dword [esp + 4], edx
pop edx
mov dword [esp], ebx
push edi
mov dword [esp], 0x6e3d7495
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
pop ebx
push edi
mov edi, esp
add edi, 4
push ebx
mov ebx, 4
add edi, ebx
pop ebx
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
push eax
push ebp
mov ebp, 0x709fed13
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ebp
mov dword [esp], eax
pop dword [0x4c6bf4]
push 0x18880910
mov dword [esp], ecx
push edx
push 0x2a90088a
pop edx
mov dword [esp + 4], edx
pop edx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], esi
mov dword [esp], edx
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 4
add eax, ecx
pop ecx
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x4181ca
je 0x625a5c
jmp 0x5ff3fb
je 0x5e8da4
jmp 0x607b6a
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 4
sub ecx, edx
pop edx
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ecx
push edx
mov edx, 0x7fff953c
sub ecx, 0x2febc652
sub ecx, edx
push edi
mov edi, 0x7ae5c6c4
xor edi, 0x6fed226f
xor edi, 0x7fe3d5f7
or edi, 0x6dd318b9
xor edi, 0x5fbbdf20
add edi, 0x5def83f4
xor edi, 0xa1dbac83
add ecx, edi
pop edi
pop edx
sub ecx, 0x57bae0d4
add ecx, eax
add ecx, 0x57bae0d4
add ecx, 0x7fff953c
mov ecx, dword [esp]
push ebp
mov ebp, esp
push edi
mov edi, 0x7bff0247
push edx
mov edx, 0x5b9d351f
xor edi, edx
pop edx
push edi
inc dword [esp]
pop edi
sub edi, 0x20623755
add ebp, edi
pop edi
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [ebp - 0x10]
push dword [esp]
push dword [esp]
pop eax
add esp, 4
add esp, 4
jmp 0x67e744
call fcn.00417e60
jmp 0x73e4c1
jmp 0x620c32
push dword [ebp - 0x10]
push dword [esp]
pop edx
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ebp
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop ebp
add ebp, 4
push ecx
mov ecx, 0x6fff55e7
or ecx, 0x77fc19e5
sub ecx, 0x7fff5de3
sub ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push 0x49c7959f
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
mov ebx, dword [esp]
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
jmp 0x625c82
push edi
mov edi, 0x3fbe1ab5
add edx, edi
pop edi
sub edx, ecx
push 0x398a416d
mov dword [esp], ebp
mov ebp, 0x3fbe1ab5
sub edx, 0x5fe96444
sub edx, ebp
add edx, 0x5fe96444
pop ebp
jmp 0x6452f5
push dword [0x4c74b8]
mov edx, dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
push ebp
mov ebp, 4
add edx, ebp
pop ebp
xchg dword [esp], edx
pop esp
jmp 0x6aa60c
jmp 0x620c32
jmp 0x6eb733
mov byte [0x4c684a], al
sub esp, 4
mov dword [esp], ebp
push ecx
mov ecx, 0x7cda722d
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], edx
mov dword [esp], ecx
add ecx, 0x77ba30ed
push edi
mov edi, 0x5beaacc3
dec edi
shl edi, 7
inc edi
xor edi, 0x8eabab0b
add ecx, edi
mov edi, dword [esp]
add esp, 4
add ecx, eax
push esi
mov esi, 0x7bfdca0a
sub ecx, esi
pop esi
sub ecx, 0x77ba30ed
push dword [esp]
pop ecx
push esi
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x6a05b7
push esi
push esi
push 0xfcd6f90
pop esi
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push ecx
mov ecx, esp
push edi
mov edi, 0x77fba442
or edi, 0x45ff69fc
inc edi
sub edi, 0x7d1f007f
add edi, 0x51f1284
add ecx, 0x5f530589
add ecx, edi
sub ecx, 0x5f530589
pop edi
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
push ecx
mov ecx, 4
add edi, ecx
mov ecx, dword [esp]
add esp, 4
xchg dword [esp], edi
pop esp
push ecx
mov cx, 0x40ad
add cx, 0x9977
push dx
push 0x9240
pop dx
add cx, 0xf986
add cx, dx
sub cx, 0xf986
pop dx
push cx
pop word [0x4c6848]
pop ecx
jmp 0x75b731
push esi
push esp
push dword [esp]
pop esi
add esp, 4
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ecx
mov ecx, esp
push edx
mov edx, 4
add ecx, edx
pop edx
add ecx, 4
xchg dword [esp], ecx
pop esp
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push ecx
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push esi
mov esi, 0x5bfd072e
shl esi, 3
not esi
shl esi, 7
shr esi, 8
xor esi, 0xbe343
sub ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
mov dword [esp], esi
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 4
add eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
jmp 0x6cb5f0
push dword [0x4c3038]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x6d75c1
push ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
push ecx
push dword [esp + 4]
mov ecx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], eax
push 0x2b6b9038
mov dword [esp], eax
mov dword [esp], 0x43048d2
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
push eax
mov eax, 4
add edx, 0x77b38bf3
add edx, eax
sub edx, 0x77b38bf3
pop eax
xchg dword [esp], edx
pop esp
push edi
mov dword [esp], edx
mov dword [esp], 0x37dccd86
mov dword [esp], ebp
push ebx
mov ebx, 0x4c6a20
mov dword [esp + 4], ebx
pop ebx
jmp 0x62e2ee
push eax
push ecx
mov ecx, 0x77fd7876
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
mov dword [esp], esi
mov dword [esp], eax
push 0x3ba0a7a5
mov dword [esp], ecx
mov dword [esp], ebx
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop eax
push ecx
push esp
pop ecx
add ecx, 4
push eax
mov eax, 4
add ecx, eax
pop eax
xchg dword [esp], ecx
pop esp
push dword [ebp - 0x18]
mov eax, dword [esp]
push ebx
push esp
pop ebx
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
add ebx, 4
xchg dword [esp], ebx
pop esp
push 0x249fc235
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
push 0x3bb90de3
mov dword [esp], edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edi
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
pop ebx
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
jmp 0x63794b
cmp dword [ebp - 0x10], 0x1000000
jmp 0x729334
push edx
mov edx, esp
push ebx
mov ebx, 0x7dfdd7f0
sub ebx, 0x767e23fa
add ebx, 0xf8804c0e
add edx, ebx
pop ebx
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
mov dword [esp], ebp
mov dword [esp], edx
push ecx
push edx
mov edx, 0x6ea2ab17
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
push dword [ebp - 0x10]
push dword [esp]
pop ecx
push ecx
mov ecx, esp
add ecx, 4
push eax
mov eax, 4
add ecx, eax
pop eax
xchg dword [esp], ecx
pop esp
push ecx
mov dword [esp], ebp
push eax
mov eax, 0x41aa511a
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 4
add ecx, edx
pop edx
xchg dword [esp], ecx
pop esp
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x6833eb
push dword [ebp - 0x18]
push dword [esp]
push dword [esp]
pop edx
add esp, 4
add esp, 4
push ebx
mov dword [esp], ecx
push 0x5d74a333
mov dword [esp], eax
mov eax, 0x309075cd
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebx
push 0x5646c720
mov dword [esp], edi
mov dword [esp], ecx
mov ebx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
mov ebx, dword [esp]
push ebx
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop ebx
add ebx, 4
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
jmp 0x634a28
push eax
push 0x1a163799
mov dword [esp], edx
mov edx, 0x246151ef
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], eax
push ebx
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
mov dword [esp], ebx
pop eax
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
push 0x632690f4
mov dword [esp], ecx
mov ecx, 4
add edi, ecx
pop ecx
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
push ecx
mov dword [esp], esi
push esi
mov esi, 0x2ea538f5
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], edx
push esi
push esp
pop esi
add esi, 4
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push 0x1bc33df7
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov edx, dword [esp]
push ecx
push esp
mov ecx, dword [esp]
add esp, 4
push edx
mov edx, 0x5fcf001a
not edx
add edx, 0x5fcf001f
add ecx, edx
pop edx
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x5ff3f1
xor eax, eax
jmp 0x63d637
push eax
push eax
push 0x6e962247
mov eax, dword [esp]
add esp, 4
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebx
push 0x58f53ba1
mov dword [esp], ecx
push dword [esp]
pop ebx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
push eax
mov eax, 4
sub esi, 0x5fbfb6db
add esi, eax
add esi, 0x5fbfb6db
pop eax
xchg dword [esp], esi
pop esp
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edi
push esi
mov esi, 0x756abd20
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebx
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push ebp
mov ebp, esp
add ebp, 4
push edx
mov edx, 0x5fe50c31
and edx, 0x2d0d04e2
inc edx
shl edx, 8
push esi
mov esi, 0x6d7bf73b
not esi
xor esi, 0xb47bb7f0
or edx, esi
pop esi
add edx, 0xd80040d0
add ebp, edx
pop edx
xchg dword [esp], ebp
pop esp
jmp 0x727a02
push edi
push esp
pop edi
push ebp
mov ebp, 0x45ff83c5
and ebp, 0x7aafa813
add ebp, 0x65df7741
xor ebp, 0xa68ef746
add edi, ebp
mov ebp, dword [esp]
add esp, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
push esi
mov esi, 0x3faf59dd
add ecx, 0x1751c2b1
add ecx, 0x3f3b2481
sub ecx, esi
sub ecx, 0x3f3b2481
sub ecx, 0x1751c2b1
mov esi, dword [esp]
add esp, 4
add ecx, eax
add ecx, 0x3faf59dd
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [ebp - 0x18]
mov eax, dword [esp]
push eax
mov eax, esp
push ecx
mov ecx, 0x7eefb494
push edx
mov edx, 0x74c72a5c
neg edx
inc edx
neg edx
and edx, 0x7eb733f5
add edx, 0xad769ba
add ecx, edx
pop edx
shl ecx, 4
sub ecx, 0x7fde7507
shr ecx, 8
xor ecx, 0x650590
add eax, ecx
pop ecx
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x73cb5d
test eax, eax
jmp 0x6dad66
push edx
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
pop dword [0x4c74b0]
push eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 4
add eax, 0x1fef95ad
sub eax, ecx
sub eax, 0x1fef95ad
pop ecx
xchg dword [esp], eax
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
mov edx, dword [esp]
push esi
push esp
mov esi, dword [esp]
add esp, 4
add esi, 4
push eax
mov eax, 0x47fe8c54
or eax, 0x7ffea56f
xor eax, 0x7ffead7b
add esi, eax
pop eax
xchg dword [esp], esi
pop esp
jmp 0x607b74
mov al, byte [0x4c3043]
push edx
mov dword [esp], 0x2c1efef9
mov dword [esp], edx
push eax
mov eax, 0x36f92087
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
sub esp, 4
mov dword [esp], eax
mov eax, 0x7f9f4763
sub ecx, eax
pop eax
push ebx
mov ebx, 0x7fbe2909
sub ecx, ebx
pop ebx
add ecx, eax
add ecx, 0x7fbe2909
add ecx, 0x7f9f4763
push dword [esp]
pop ecx
push ebp
mov ebp, esp
add ebp, 4
push eax
mov eax, 4
add ebp, eax
pop eax
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0x61d4f2
push ebx
push esp
pop ebx
push esi
mov esi, 4
add ebx, 0x3ddd5394
add ebx, esi
sub ebx, 0x3ddd5394
pop esi
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
add ecx, 0x77e753a2
add ecx, eax
push edi
mov edi, 0x7efd7880
not edi
not edi
neg edi
or edi, 0x7f6f6777
add edi, 0x3fd91b85
push ecx
push 0x389e5026
mov ecx, dword [esp]
add esp, 4
add edi, ecx
pop ecx
sub ecx, edi
pop edi
push dword [esp]
mov ecx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push esi
mov dword [esp], eax
push ecx
mov dword [esp], 0x7f259031
mov dword [esp], edi
mov edi, 0x4c6a20
mov dword [esp + 4], edi
pop edi
jmp 0x743b9e
push edx
mov dword [esp], ebp
mov dword [esp], eax
mov dword [esp], 0x796699c4
mov dword [esp], edx
pop dword [0x4c3030]
jmp 0x62af54
push esi
push 0x38aecfac
mov dword [esp], edi
mov dword [esp], edx
push 0x4c6a20
pop edx
mov dword [esp + 4], edx
pop edx
jmp 0x7020ad
push dword [esp]
push dword [esp]
pop eax
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x73e4b9
sub esp, 4
mov dword [esp], ebp
mov dword [esp], 0x2a7b47a8
mov dword [esp], esi
mov esi, 0x7beffafe
shl esi, 6
shr esi, 6
and esi, 0x5eff723d
push ebx
mov ebx, 0x7befff54
xor ebx, 0x75ffb008
dec ebx
shr ebx, 4
sub ebx, 0x2c61fc2c
sub esi, ebx
pop ebx
mov dword [0x4c6844], esi
pop esi
push ebx
mov dword [esp], edi
push ebp
push esi
mov esi, 0x7e74b34f
shl esi, 8
add esi, 0x5abadf2d
or esi, 0x776f7492
neg esi
xor esi, 0x1fdfcafb
xor esi, 0x51e1bf61
mov ebp, esi
pop esi
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
sub esp, 4
mov dword [esp], ebx
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
sub esp, 4
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x613fc1
push edi
mov dword [esp], ecx
push esi
push 0x16a5b0be
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
push ebx
push 0x56f5d7cc
pop ebx
neg ebx
sub ebx, 0x73efb03c
not ebx
or ebx, 0x74f30a70
push esi
mov esi, 0x843841aa
sub ebx, 0x5f5fb9a2
sub ebx, esi
add ebx, 0x5f5fb9a2
pop esi
add ecx, ebx
pop ebx
add ecx, eax
sub ecx, 0x7abf48cd
mov ecx, dword [esp]
push eax
mov eax, esp
add eax, 4
sub esp, 4
mov dword [esp], esi
mov esi, 4
add eax, esi
pop esi
xchg dword [esp], eax
mov esp, dword [esp]
and edx, eax
push esi
mov esi, esp
push edx
mov edx, 0x6db647bd
add edx, 0x63e5dd38
inc edx
push eax
mov eax, 0x7ebd3c8c
shr eax, 4
add eax, 0xc9b0512a
sub edx, eax
pop eax
add esi, 0x7fdb246f
add esi, edx
sub esi, 0x7fdb246f
pop edx
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
add ecx, 0x5fb9fe60
add ecx, 0x7fffd162
add ecx, eax
sub ecx, 0x7fffd162
push ecx
mov dword [esp], eax
mov eax, 0x3fff94e2
xor eax, 0x69ffcfa6
sub eax, 0x7fafd3ea
push eax
dec dword [esp]
pop eax
sub eax, 0x769688f9
sub ecx, eax
pop eax
push dword [esp]
pop ecx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push 0x6dc0e63b
mov dword [esp], ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0x5e5936
push edx
push esp
pop edx
push ebp
mov ebp, 4
add edx, ebp
pop ebp
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push 0x6ab9716b
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push edi
mov edi, 0x687b742f
shl edi, 4
sub edi, 0x7ffbc1b4
add edi, 0xf8447ec8
add ecx, edi
pop edi
xchg dword [esp], ecx
pop esp
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
xor edx, edx
jmp 0x69f9ad
push edi
mov dword [esp], esi
mov dword [esp], eax
mov dword [esp], edi
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0x7054b6
push esi
mov esi, esp
add esi, 4
push eax
mov eax, 4
sub esi, eax
pop eax
xchg dword [esp], esi
pop esp
mov dword [esp], ebp
mov ebp, 0x1000
sub eax, 0x1ddb4607
sub eax, ebp
add eax, 0x1ddb4607
pop ebp
jmp 0x6b3b8a
push ecx
push esp
pop ecx
push eax
mov eax, 4
add ecx, eax
pop eax
push edi
mov edi, 4
sub ecx, edi
pop edi
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ecx
push ebx
mov ebx, 0x1464372c
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebx
pop eax
mov eax, dword [esp]
push edx
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop edx
push esi
mov esi, 4
add edx, esi
pop esi
add edx, 4
xchg dword [esp], edx
pop esp
push 0x3ae930d3
mov dword [esp], esi
mov dword [esp], edx
mov dword [esp], 0x513e2ced
mov dword [esp], ecx
pop dword [ebp - 0x18]
jmp 0x5ff782
push dword [0x4c3034]
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0x64c9d8
cmp esi, eax
jmp 0x7132b3
mov dx, word [ecx]
jmp 0x69f9b5
cmp edx, dword [ebp - 0xc]
jmp 0x5ff233
push esi
mov esi, esp
push ecx
mov ecx, 0x2d6f2407
push edx
mov edx, 0x5fffeef8
or ecx, edx
pop edx
neg ecx
not ecx
inc ecx
sub ecx, 0x7fffeefb
add esi, ecx
pop ecx
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ecx
sub ecx, 0x3bf7664b
push eax
mov eax, 0x6bffc996
sub eax, 0x3fe730a2
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x37e55e6f
and eax, ebp
pop ebp
sub eax, 0x14016540
add ecx, eax
pop eax
add ecx, eax
sub ecx, 0xffeb324
add ecx, 0x3bf7664b
mov ecx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push esi
push 0x7fb5295
pop esi
sub esi, 0x3fee05ad
or esi, 0x6fd36a7d
neg esi
sub esi, 0x102090ff
add ebx, esi
mov esi, dword [esp]
add esp, 4
xchg dword [esp], ebx
pop esp
push edx
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x4c6a20
mov dword [esp + 4], ecx
push dword [esp]
pop ecx
add esp, 4
jmp 0x617ea6
push edx
push esp
pop edx
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push 0x3133f07
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
pop eax
mov eax, dword [esp]
push esi
push esp
pop esi
push ebp
mov ebp, 4
add esi, ebp
pop ebp
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
push edi
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], ebx
mov dword [esp], eax
pop dword [0x4c74b8]
jmp 0x61e254
push dword [0x4c6ae4]
push dword [esp]
push dword [esp]
pop esi
add esp, 4
add esp, 4
jmp 0x765332
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov dword [esp], esi
mov dword [esp], ebx
mov dword [esp], ecx
sub ecx, 0x1ecb2cfb
add ecx, eax
push ebp
push 0x1ecb2cfb
pop ebp
add ecx, 0x2df584a8
add ecx, ebp
sub ecx, 0x2df584a8
mov ebp, dword [esp]
add esp, 4
push dword [esp]
mov ecx, dword [esp]
push ebp
mov ebp, esp
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
push 0x34f5b301
mov dword [esp], esi
mov dword [esp], edi
mov dword [esp], 0x42216b46
mov dword [esp], eax
pop dword [ebp - 0x10]
push eax
push esp
pop eax
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edx
mov dword [esp], 0x6f3b504e
mov dword [esp], ebx
push esi
mov esi, esp
push edx
mov edx, 0x2d9b2cda
inc edx
xor edx, 0x2d9b2cdf
add esi, edx
pop edx
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push esi
push esp
pop esi
add esi, 4
push eax
mov eax, 4
add esi, eax
pop eax
xchg dword [esp], esi
pop esp
jmp 0x621192
push dword [0x4c3030]
mov edx, dword [esp]
push esi
mov esi, esp
push ebp
mov ebp, 0x7fdd9169
add ebp, 0x80226e9b
add esi, ebp
pop ebp
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push ecx
push ebp
mov ebp, 0x178ce0a6
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edi
mov dword [esp], edx
mov dword [esp], eax
push ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov eax, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
jmp 0x605bdc
jmp dword [eax + 0x4c7cd0]
push ebp
push esp
pop ebp
push ebx
mov ebx, 0x5bbe9cb8
or ebx, 0x3fefe26f
xor ebx, 0x7ffffefb
add ebp, ebx
pop ebx
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], ecx
add ecx, 0x5ebff44d
sub ecx, 0x7bef2201
add ecx, eax
add ecx, 0x7bef2201
push ebp
push 0x5ebff44d
pop ebp
sub ecx, ebp
mov ebp, dword [esp]
add esp, 4
mov ecx, dword [esp]
push ebp
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
sub esp, 4
mov dword [esp], ebp
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x4c6840
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
push edx
mov edx, 0x67e6002e
neg edx
inc edx
add edx, 0x2ffc86f2
add edx, 0x37e9793f
sub ebp, 0x6e7f4c42
add ebp, edx
add ebp, 0x6e7f4c42
pop edx
sub ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
mov dword [esp], eax
push ebp
mov dword [esp], ebx
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push dword [esp]
pop eax
push edi
push esp
mov edi, dword [esp]
add esp, 4
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x5f90bd
push 0x6563ddc2
mov dword [esp], ecx
mov dword [esp], edi
mov edi, 7
or ecx, edi
push dword [esp]
pop edi
add esp, 4
jmp 0x715271
je 0x620c32
jmp 0x6f86c8
cmp dword [0x4c7cd0], 0x23f0
jmp 0x72933f
push 0x1174e09e
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov ebx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push esi
mov esi, 4
add ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
add esp, 4
push dword [ebp - 0x18]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x7483c7
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push eax
mov eax, esp
add eax, 4
sub eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
push esi
mov esi, 0x79bf4487
add ecx, esi
pop esi
add ecx, eax
push eax
push 0x79bf4487
pop eax
sub ecx, 0x5feb7802
sub ecx, eax
add ecx, 0x5feb7802
pop eax
push dword [esp]
pop ecx
push ebx
mov ebx, esp
add ebx, 4
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
jmp 0x644f89
push dword [ebp - 4]
push dword [esp]
pop ecx
push 0x5aff8214
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x655881
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x6978ff
jne 0x7941de
jmp 0x6c9b17
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], ebx
push ecx
mov ecx, esp
push edi
mov edi, 0x7bfd454b
shl edi, 2
inc edi
sub edi, 0xeff51529
add ecx, edi
pop edi
push ebx
mov ebx, 0x7c4f60af
shl ebx, 5
add ebx, 0x61ff3e03
sub ebx, 0xebeb53df
sub ecx, ebx
pop ebx
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
pop ebx
mov ebx, dword [esp]
push edx
mov edx, esp
push esi
mov esi, 4
add edx, 0x7bbd6642
add edx, esi
sub edx, 0x7bbd6642
pop esi
push edi
mov edi, 4
add edx, edi
pop edi
xchg dword [esp], edx
pop esp
imul eax, ecx
push ecx
mov dword [esp], edi
push edx
push 0x5fe7c3be
pop edx
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
sub esp, 4
mov dword [esp], eax
mov eax, 0x5ffde9b
push eax
dec dword [esp]
pop eax
and eax, 0x1f4f7605
sub eax, 0xb66ab03e
sub ecx, eax
mov eax, dword [esp]
add esp, 4
add ecx, eax
add ecx, 0x4ee4a5c2
push dword [esp]
mov ecx, dword [esp]
push ebp
mov ebp, esp
push edi
mov edi, 0x7eabbb24
xor edi, 0x4dfea4c7
xor edi, 0x63f21247
dec edi
not edi
neg edi
add edi, 0xaf58f260
add ebp, edi
pop edi
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
jmp 0x68e73e
mov cx, word [eax]
jmp 0x7205a5
cmp ecx, dword [ebp - 0x1c]
jmp 0x5ff228
push ecx
mov ecx, esp
push ebx
mov ebx, 0x2e7f6692
dec ebx
shr ebx, 4
and ebx, 0x7fbd11c5
add ebx, 0xfd5aefc3
add ecx, ebx
pop ebx
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], edx
mov dword [esp], ebx
push 0x32f689ec
mov dword [esp], eax
mov dword [esp], 0x5161c41
mov dword [esp], ebx
mov dword [esp], ecx
pop ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
push ebp
mov ebp, 4
add edi, ebp
pop ebp
xchg dword [esp], edi
pop esp
push 0x3be82110
mov dword [esp], edx
push ebx
mov ebx, 0x4c6a20
mov dword [esp + 4], ebx
push dword [esp]
pop ebx
add esp, 4
jmp fcn.005e5e38
ja 0x5ff336
jmp 0x6eb733
jae 0x645311
jmp 0x61d546
push edx
push esp
pop edx
push eax
push 4
pop eax
add edx, eax
pop eax
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
push ebx
mov dword [esp], ecx
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop ebx
push eax
push 0x8a4a969
mov dword [esp], esp
add dword [esp], 4
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push 0x226f1ca9
mov dword [esp], ecx
push 0x3c
pop ecx
add ecx, edx
add eax, dword [ecx]
push dword [esp]
pop ecx
add esp, 4
jmp 0x66c638
shr ecx, 2
jmp 0x6bef42
add esp, 4
jmp 0x634fe8
push edi
push ecx
mov ecx, 0x62689d47
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
mov dword [esp], 0x2d094e32
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push 0x7feb7eac
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov eax, dword [esp]
push edi
mov edi, esp
push esi
push 4
pop esi
add edi, esi
mov esi, dword [esp]
add esp, 4
add edi, 4
xchg dword [esp], edi
pop esp
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x605c08
push ecx
push esi
mov esi, 0x281b2ab4
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebp
mov dword [esp], esi
mov dword [esp], ecx
add ecx, 0x5a8a0e0a
push esi
mov esi, 0x1fefd3df
add ecx, esi
pop esi
add ecx, eax
sub ecx, 0x1fefd3df
push ebx
mov ebx, 0x1a3f48d7
add ebx, 0x4f7e4aaf
sub ebx, 0xffffffff
add ebx, 0xf0cc7a83
sub ecx, ebx
pop ebx
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
push 0x1929ae2d
mov dword [esp], ebx
mov ebx, 4
add edx, ebx
pop ebx
xchg dword [esp], edx
pop esp
xor ecx, ecx
sub esp, 4
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
push esi
mov esi, 4
sub ecx, esi
pop esi
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
sub ecx, 0x1fd04b4d
sub ecx, 0x5d5ff717
sub ecx, 0x6fcfa2c2
add ecx, eax
add ecx, 0x6fcfa2c2
push ebx
mov ebx, 0x5d5ff717
add ecx, ebx
pop ebx
push esi
mov esi, 0x1fd04b4d
add ecx, esi
pop esi
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x72059d
push edx
mov edx, esp
add edx, 4
push esi
mov esi, 4
sub edx, esi
pop esi
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
push esi
mov dword [esp], ecx
mov edx, dword [esp]
push ebp
mov ebp, esp
push ecx
mov ecx, 0x7e7e7c14
shr ecx, 7
shl ecx, 2
add ecx, 0x7bff91e8
sub ecx, 0x7f5d626b
shr ecx, 4
add ecx, 0xfff69dcf
add ebp, ecx
pop ecx
add ebp, 4
xchg dword [esp], ebp
pop esp
mov edx, dword [esp]
push ebx
mov ebx, esp
push ecx
mov ecx, 0x7df766a1
xchg ecx, esi
not esi
xchg ecx, esi
sub ecx, 0x8208995a
sub ebx, 0x7f73a379
add ebx, ecx
add ebx, 0x7f73a379
pop ecx
add ebx, 4
xchg dword [esp], ebx
pop esp
mov al, byte [0x4c6849]
jmp 0x60f770
push ebx
push 5
pop ebx
add ebx, 0x7fef3e38
add ebx, edx
push edi
mov edi, 0x7fef3e38
sub ebx, edi
pop edi
xor esi, dword [ebx]
mov ebx, dword [esp]
add esp, 4
jmp 0x7132a8
push esi
mov esi, 0x5ab5be1f
not esi
dec esi
xor esi, 0x7fc18942
neg esi
push ebp
mov ebp, 0x57bd32a8
or ebp, 0x6edba032
not ebp
add ebp, 0xdd03f9bd
xor esi, ebp
pop ebp
push 0x4a4b139c
mov dword [esp], esi
pop dword [0x4c6840]
mov esi, dword [esp]
add esp, 4
push 0x1258fe0
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ecx
push ebx
mov ebx, 0x7fe3a72f
sub ecx, ebx
pop ebx
sub ecx, 0x2eef8212
add ecx, eax
push edx
mov edx, 0x2eef8212
add ecx, edx
pop edx
push edx
mov edx, 0x7fe3a72f
add ecx, edx
pop edx
mov ecx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0x64a855