Function at 0x5a802b
Capabilities:
Accept command line arguments

Disassembly:
cmp edx, dword [ebp - 0xc]
jmp 0x5b7fbb
push ebx
mov ebx, esp
add ebx, 4
push eax
mov eax, 0x7e5711ac
xor eax, 0x77f706e9
xor eax, 0x3d67ac32
dec eax
sub eax, 0x7abf4eec
sub eax, 0xba086c86
sub ebx, eax
pop eax
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], edi
mov dword [esp], edx
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
mov edx, dword [esp]
push edx
mov edx, esp
push eax
mov eax, 0x2f7e80a2
or eax, 0x76ffba40
add eax, 0x80004522
add edx, eax
pop eax
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
xor ecx, ecx
push 0x2de69444
mov dword [esp], edi
mov edi, esp
push ebp
mov ebp, 0x33ef2f83
add ebp, 0xcc10d081
add edi, ebp
pop ebp
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], edx
push ebp
push edi
mov edi, 0x7d0d689a
mov dword [esp + 4], edi
pop edi
mov dword [esp], edi
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
push ebp
mov ebp, 4
sub ebx, 0x57dff795
add ebx, ebp
add ebx, 0x57dff795
pop ebp
xchg dword [esp], ebx
pop esp
jmp 0x5d7f87
push ecx
mov ecx, esp
push esi
push 0x64f6565f
pop esi
or esi, 0x3f5b3906
add esi, 0x800080a5
add ecx, esi
pop esi
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
mov dword [esp], eax
push edi
push ecx
mov ecx, 0x489d51c1
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [0x4c6038]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
jmp 0x61c36d
jmp dword [eax + 0x4cacd8]
cmp dword [0x4cacd8], 0x23f0
jmp 0x614b87
push ebp
push esp
pop ebp
push edx
mov edx, 4
add ebp, edx
pop edx
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], edx
jmp 0x5d1dcf
push ecx
mov dword [esp], 0x2053291a
mov dword [esp], eax
sub esp, 4
mov dword [esp], esi
mov esi, 0x4c9848
mov dword [esp + 4], esi
pop esi
jmp 0x62e891
push edi
mov dword [esp], eax
push edx
mov dword [esp], 0x50e58227
mov dword [esp], edi
mov edi, 0x4c9a28
mov dword [esp + 4], edi
pop edi
jmp 0x6dbbda
push eax
mov dword [esp], edx
mov edx, esp
push eax
mov eax, 4
add edx, eax
pop eax
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], edx
push ecx
mov dword [esp], ebp
push ebp
mov ebp, 0x75483d1c
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push eax
push esp
pop eax
add eax, 4
push edi
mov edi, 4
add eax, edi
pop edi
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push eax
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], eax
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ebp
push ecx
mov ecx, 0x75f2a726
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
pop ebx
mov ebx, dword [esp]
push edi
push esp
pop edi
add edi, 4
push 0x55b80259
mov dword [esp], esi
mov esi, 0x7bbd1ce9
shl esi, 5
neg esi
inc esi
sub esi, 0x885c62dd
add edi, esi
pop esi
xchg dword [esp], edi
pop esp
jmp 0x596182
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x6966ff
jne 0x5f3b5e
jmp 0x6ccddb
jmp 0x4181ea
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
mov dword [esp], ecx
mov dword [esp], edx
mov dword [esp], ecx
sub ecx, 0x7f7d599b
sub ecx, 0x37f529aa
add ecx, 0x2e7f75b1
add ecx, eax
sub ecx, 0x2e7f75b1
push edi
push 0x37f529aa
pop edi
add ecx, edi
pop edi
add ecx, 0x7f7d599b
mov ecx, dword [esp]
push 0x651bc3e2
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
lea ecx, [eax + edx + 0x4c9838]
sub esp, 4
mov dword [esp], edx
mov dword [esp], eax
push edx
mov edx, 0x2a7d1081
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
push 0x384c69a2
mov dword [esp], esi
mov dword [esp], 0x6f86aa16
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
push 0x609d67a9
mov dword [esp], esi
mov esi, esp
push eax
mov eax, 0x1bf3bd9a
dec eax
shl eax, 1
inc eax
shl eax, 8
add eax, 0x1884cd04
add esi, eax
pop eax
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x5dc037
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebp
mov dword [esp], edx
mov dword [esp], 0xb90b61a
mov dword [esp], edx
push 0x677d167f
mov dword [esp], edi
mov edi, esp
add edi, 4
push edx
mov edx, 0x77baac86
add edx, 0x8845537e
sub edi, edx
pop edx
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push 0x29b59d0e
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push ebx
mov ebx, 3
push ecx
mov ecx, 0x37a34366
add ebx, ecx
pop ecx
add ebx, ecx
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x73ff3a5d
not ebp
shl ebp, 1
not ebp
or ebp, 0x6ff75d06
and ebp, 0x5ff72384
sub ebp, 0x1853de1e
sub ebx, ebp
pop ebp
xor esi, dword [ebx]
pop ebx
push ebp
mov ebp, esp
add ebp, 4
push esi
mov esi, 4
sub ebp, esi
pop esi
xchg dword [esp], ebp
pop esp
mov dword [esp], esi
mov dword [esp], ebp
mov dword [esp], edx
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], ecx
pop edx
push dword [esp]
mov edx, dword [esp]
add esp, 4
push eax
mov eax, esp
push esi
mov esi, 4
add eax, esi
pop esi
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x597991
push esi
mov dword [esp], 0x5a3b2f56
mov dword [esp], esi
mov dword [esp], edx
pop dword [0x4c6034]
push eax
mov dword [esp], ecx
push ecx
mov ecx, 0x266270a1
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
mov dword [esp], ecx
push ebp
mov ebp, 0x6cff2cb3
not ebp
neg ebp
dec ebp
inc ebp
push edx
push 0x76f43bec
pop edx
sub ebp, edx
pop edx
sub ebp, 0xba16c2ef
add ecx, 0x6f7e4f2e
add ecx, ebp
sub ecx, 0x6f7e4f2e
pop ebp
add ecx, eax
sub ecx, 0x3bf42dd9
push dword [esp]
pop ecx
push esi
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x63abe8
imul eax, ecx
jmp 0x5e89c4
push dword [ebp - 4]
push dword [esp]
mov ecx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
jmp 0x5ac8c6
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
mov dword [esp], edi
mov dword [esp], 0x480d326a
mov dword [esp], ecx
push esi
push 0x7bb9d06d
pop esi
shl esi, 6
push ecx
push 0x7f7e6200
pop ecx
xor esi, ecx
pop ecx
xor esi, 0xeefdcd77
sub ecx, esi
pop esi
add ecx, eax
add ecx, 0x7ff7b437
push dword [esp]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
push ebp
push 0x550
pop bp
dec bp
push ebx
mov dword [esp], eax
mov ax, 0xed18
sub ax, 1
xor ax, 0xff1a
shl ax, 8
or ax, 0x3b6f
add ax, 0x597c
sub bp, ax
pop eax
mov word [0x4c9850], bp
pop ebp
jmp 0x6a6987
push dword [ebp - 0x14]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push ebp
mov dword [esp], 0x664b1085
mov dword [esp], ecx
push ebp
mov ebp, 0x37de5f21
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
xchg dword [esp], ebx
pop esp
add esp, 4
jmp 0x59b5d6
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
mov dword [esp], 0x2285ec08
mov dword [esp], edx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edi
mov dword [esp], 0x1d31c41a
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
push eax
mov eax, 0x17faf284
sub eax, 0x17faf280
add ebp, eax
pop eax
add ebp, 4
xchg dword [esp], ebp
pop esp
mov al, byte [0x4c6043]
jmp 0x594eab
cmp dword [ebp - 0x10], 0x1000000
jmp 0x614b7c
push 0x5adc532e
mov dword [esp], edx
push esi
mov esi, 0x732525e2
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], ecx
add ecx, 0x5d77fd0f
add ecx, eax
push esi
mov dword [esp], ebp
mov ebp, 0x55142470
not ebp
dec ebp
sub ebp, 0x4d73de7f
sub ecx, ebp
push dword [esp]
pop ebp
add esp, 4
push dword [esp]
pop ecx
push eax
mov eax, esp
push edx
mov edx, 4
add eax, edx
pop edx
push ebx
mov ebx, 0x7ef9a98b
xor ebx, 0x5db5e803
or ebx, 0x7ffecc0c
and ebx, 0x7fdf01fb
shl ebx, 7
shl ebx, 5
xor ebx, 0xe0188004
add eax, ebx
pop ebx
xchg dword [esp], eax
pop esp
xor edx, edx
jmp 0x6c9a9f
je 0x5ac89e
jmp 0x5c416e
push dword [ebp - 0x18]
push dword [esp]
pop eax
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push ebx
push eax
mov eax, 0x25c37e1d
mov dword [esp + 4], eax
push dword [esp]
pop eax
add esp, 4
mov dword [esp], edx
push esi
mov dword [esp], ecx
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
jmp 0x71017c
je 0x616a8a
jmp 0x5e87f4
je 0x6ee1e6
jmp 0x5e87fe
jmp 0x59582a
push ebx
mov ebx, esp
push ebp
mov ebp, 0x7975f91a
shr ebp, 6
xor ebp, 0x6d3fb8bc
push edi
mov edi, 0xffbd4b5
xor ebp, edi
mov edi, dword [esp]
add esp, 4
xor ebp, 0x6321bbe9
add ebx, ebp
pop ebp
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
push edi
mov edi, esp
add edi, 4
sub edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
push esi
mov esi, 4
add ebp, esi
pop esi
xchg dword [esp], ebp
pop esp
push ebx
mov ebx, 5
sub ebx, 0x7b7bb31e
add ebx, edx
add ebx, 0x7b7bb31e
push ecx
mov ecx, 0
add ecx, 0x7ffd9bb5
add ecx, ebx
sub ecx, 0x7ffd9bb5
push edx
mov edx, 0
add edx, ecx
xor esi, dword [edx]
pop edx
pop ecx
pop ebx
jmp 0x614608
push dword [ebp - 0x10]
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0x596162
push dword [ebp - 0x18]
push dword [esp]
pop eax
push eax
mov eax, esp
add eax, 4
push ebx
mov ebx, 4
add eax, ebx
pop ebx
xchg dword [esp], eax
pop esp
jmp 0x594c0a
push dword [ebp - 8]
push dword [esp]
pop edx
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x5a63cc
push ebp
push 0x634924ed
mov dword [esp], esp
add dword [esp], 4
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
pop dword [0x4c9bfc]
jmp 0x4181ea
push edx
mov edx, esp
push eax
mov eax, 0x7f9d4a54
add eax, 0x8062b5b0
add edx, eax
mov eax, dword [esp]
add esp, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edx
mov dword [esp], eax
push edx
mov dword [esp], 0x234a246d
mov dword [esp], ebx
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [0x4c9aec]
push dword [esp]
push dword [esp]
pop esi
add esp, 4
add esp, 4
jmp 0x59ccb1
call fcn.00417e80
jmp 0x5d7f7f
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], esi
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0x5a4e35
add esp, 4
jmp 0x6b8b83
mov cx, word [eax]
jmp 0x6c9a97
push ecx
push ecx
mov ecx, 0x383e7f66
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], edi
mov dword [esp], ecx
push eax
mov eax, esp
sub esp, 4
mov dword [esp], esi
mov esi, 0x57bc5522
xor esi, 0x7aba43ea
xor esi, 0x2d0616cc
add eax, esi
pop esi
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], eax
push eax
mov eax, esp
push esi
mov esi, 4
add eax, esi
mov esi, dword [esp]
add esp, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push edx
mov edx, esp
push ebx
mov ebx, 0x77b9038a
sub ebx, 0x5af08db6
inc ebx
shr ebx, 5
dec ebx
shl ebx, 3
push edi
mov edi, 0x75fddce6
xor edi, 0x3ff7e1bc
and edi, 0x7f3fdf4b
xor edi, 0xb2c7ffd6
add ebx, edi
pop edi
add edx, ebx
pop ebx
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x6d6868
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edx
mov edx, 0x55d8c06d
push eax
mov eax, 0x5bf54f07
add eax, 0x1d076543
add edx, eax
pop eax
add edx, 0x6a7f4ca6
inc edx
or edx, 0x57fe0594
push 0
sub dword [esp], edx
pop edx
sub edx, 0x5190d0af
mov dword [0x4c984c], edx
pop edx
jmp 0x5a52f0
push edi
push esp
pop edi
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edi
mov dword [esp], ecx
push 0x16d64841
mov dword [esp], ebx
push 0x1ee88af8
pop ebx
sub ecx, ebx
pop ebx
add ecx, 0x7b7618cd
add ecx, eax
sub ecx, 0x7b7618cd
add ecx, 0x1ee88af8
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
xchg dword [esp], ebx
pop esp
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebp
mov dword [esp], edi
push ecx
mov ecx, 0x4c9a28
mov dword [esp + 4], ecx
pop ecx
jmp 0x69bf62
jmp 0x5ac89e
jmp 0x5ac89e
push ecx
mov dword [esp], 0x69716d23
mov dword [esp], ecx
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
push ecx
mov ecx, 0x5fe72f77
push ecx
not dword [esp]
pop ecx
xor ecx, 0xa018d08c
add esi, ecx
pop ecx
xchg dword [esp], esi
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ecx
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push eax
mov eax, esp
add eax, 4
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], ebp
mov dword [esp], eax
pop dword [0x4ca4c0]
push ebp
mov ebp, esp
add ebp, 4
push esi
mov esi, 4
sub ebp, 0x7ffd62f1
sub ebp, esi
push eax
mov eax, 0x7ffd62f1
add ebp, eax
pop eax
pop esi
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
add ecx, 0x53df22f7
add ecx, eax
push esi
mov esi, 0x7fbe6de1
neg esi
add esi, 0x7eee72db
push edx
mov edx, 0x756f8c00
neg edx
add edx, 0xf32b1bb1
or esi, edx
pop edx
push ebp
mov ebp, 0x3dffb224
shr ebp, 7
inc ebp
xor ebp, 0x54586d99
add esi, 0x2bed8a38
add esi, ebp
sub esi, 0x2bed8a38
pop ebp
sub ecx, esi
pop esi
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x5b0f2e
push esi
push edx
mov edx, 0x2d05b812
mov dword [esp + 4], edx
pop edx
mov dword [esp], edx
mov dword [esp], ebp
mov dword [esp], edx
push edi
mov dword [esp], esi
mov dword [esp], ecx
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
push dword [0x4c6034]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x682d3b
push ebp
sub esp, 4
mov dword [esp], edi
push edx
mov edx, 0x33b713ce
mov edi, edx
pop edx
mov dword [esp + 4], edi
pop edi
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
mov esp, dword [esp]
mov ebx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
sub esp, 4
mov dword [esp], edx
mov edx, 4
add ebx, 0x3df95e28
add ebx, edx
sub ebx, 0x3df95e28
pop edx
xchg dword [esp], ebx
pop esp
push edi
mov dword [esp], ecx
push 0x6f7e94a
pop ecx
push ecx
inc dword [esp]
pop ecx
xor ecx, 0x7e87992a
push ecx
pop dword [0x4c9848]
pop ecx
push ecx
mov ecx, esp
push esi
mov esi, 0x5be7a6a0
inc esi
add esi, 0x5acb8f6d
add esi, 0x73ddb0e8
not esi
shl esi, 1
add esi, 0x5521cdf2
add ecx, esi
mov esi, dword [esp]
add esp, 4
sub ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
jmp 0x5df3a6
push eax
mov eax, esp
push edi
mov edi, 4
add eax, edi
pop edi
push ebx
mov ebx, 4
sub eax, ebx
pop ebx
xchg dword [esp], eax
pop esp
mov dword [esp], eax
push eax
mov dword [esp], 0x3ad0c31
mov dword [esp], ebx
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov eax, dword [esp]
sub esp, 4
mov dword [esp], eax
mov eax, esp
push edi
push 0x7f77a9ba
pop edi
xor edi, 0x75bd55e6
and edi, 0x534fef6f
sub edi, 0x24aec48
add eax, edi
pop edi
add eax, 4
xchg dword [esp], eax
pop esp
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push edi
mov edi, esp
add edi, 4
sub edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], edx
mov dword [esp], ecx
push 0x1be2dd09
mov dword [esp], edx
mov edx, 0x4ff5637f
neg edx
not edx
sub edx, 0x7cff00a3
or edx, 0x5fda1039
push ebx
mov ebx, 0x3fbf3902
or ebx, 0x7a6d1641
xor ebx, 0x5e7745b8
inc ebx
shr ebx, 4
and ebx, 0x7d7715f4
xor ebx, 0x7178d1a4
sub edx, ebx
pop ebx
add ecx, edx
pop edx
sub ecx, 0x7ebf6fb4
add ecx, eax
add ecx, 0x7ebf6fb4
sub ecx, 0x6e959efb
mov ecx, dword [esp]
push eax
mov eax, esp
push esi
mov esi, 0x4efded47
shr esi, 5
add esi, 0x7befe767
sub esi, 0x7e67d6cd
sub eax, 0x69fe06e5
add eax, esi
add eax, 0x69fe06e5
pop esi
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x6c0bd1
push ebp
mov ebp, esp
add ebp, 4
push 0x69c2543f
mov dword [esp], ecx
mov ecx, 4
sub ebp, ecx
pop ecx
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
push ebp
mov ebp, 0x706d6f63
sub esp, 4
mov dword [esp], ebp
pop dword [0x4c984a]
push dword [esp]
pop ebp
add esp, 4
jmp 0x65290a
push dword [ebp - 0x10]
mov ecx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push eax
mov eax, 4
add ebp, eax
mov eax, dword [esp]
add esp, 4
xchg dword [esp], ebp
pop esp
jmp 0x6cc8a3
add byte [eax], al
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x5a7fe6
push edx
push edx
mov edx, 0x5fccdac1
mov dword [esp + 4], edx
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
add ecx, 0x5f5be4f1
add ecx, eax
push 0x3e3784f
mov dword [esp], eax
push 0x5f5be4f1
pop eax
add ecx, 0x79bf5c72
sub ecx, eax
sub ecx, 0x79bf5c72
pop eax
mov ecx, dword [esp]
push edi
mov edi, esp
add edi, 4
sub esp, 4
mov dword [esp], ebx
mov ebx, 4
add edi, ebx
mov ebx, dword [esp]
add esp, 4
xchg dword [esp], edi
pop esp
push ebp
mov dword [esp], esi
mov dword [esp], 0x773075bc
mov dword [esp], esi
mov dword [esp], eax
pop dword [ebp - 0x10]
jmp 0x5ff5bd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x696706
jne 0x5f199e
jmp 0x59580c
ja 0x63abe8
jmp 0x59582a
jae 0x596fe0
jmp 0x5e2196
push edi
push eax
mov eax, 0x34fd3d05
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], esi
mov dword [esp], ecx
push edi
mov edi, 0x7ddbc24a
push ebx
mov ebx, 0x3cffab49
neg ebx
add ebx, 0x426b51cf
sub ebx, 0x1db5529e
neg ebx
sub ebx, 0x9acbd442
and edi, ebx
pop ebx
sub edi, 0x7fef39f4
add edi, 0x826896bd
sub ecx, edi
pop edi
push esi
mov esi, 0x5ecfe630
not esi
and esi, 0x7bb69154
shl esi, 3
dec esi
add esi, 0x767eaad5
sub ecx, esi
pop esi
add ecx, eax
add ecx, 0x7fff34f4
add ecx, 0x7fd31f0b
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebp
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [ebp - 0x18]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x6cbed1
push 0x58f3e61a
mov dword [esp], ecx
push esi
mov dword [esp], ebx
mov ebx, 0x164f4daf
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
push ecx
mov ecx, 4
add esi, ecx
pop ecx
xchg dword [esp], esi
pop esp
push dword [esp]
mov ebx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov byte [0x4c9852], al
jmp 0x6eeaf5
push ebp
push ebx
mov ebx, 0x74ffdfa2
sub ebx, 0x64fd9adc
xor ebx, 0x100244c1
mov ebp, ebx
pop ebx
or ecx, ebp
mov ebp, dword [esp]
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push 0x62b6cf5
mov dword [esp], ebp
mov ebp, esp
push ecx
mov ecx, 0x7dfbe2ac
not ecx
shl ecx, 1
sub ecx, 0x7ef345f9
sub ecx, 0x8514f4a9
add ebp, ecx
pop ecx
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], ecx
push edi
mov edi, 0x5f623d17
dec edi
not edi
add edi, 0x9ea09940
add ecx, edi
pop edi
add ecx, 0x1ffb1f91
add ecx, eax
push esi
mov esi, 0x1ffb1f91
sub ecx, esi
pop esi
sub ecx, 0x3f3e5c29
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
push esi
mov esi, 0x727b87bf
sub esi, 0x727b87bb
add ebx, esi
pop esi
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x5a45fc
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], ebx
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push edi
mov edi, esp
push edx
mov edx, 4
add edi, 0x7f7f6480
add edi, edx
sub edi, 0x7f7f6480
pop edx
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x5c6dbe
push dword [ebp - 0x10]
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push 0x4b9a8b5f
mov dword [esp], ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
sub esp, 4
mov dword [esp], ebx
push edi
push 0x4921aa6d
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
push edi
push eax
mov eax, 0xd053756
mov dword [esp + 4], eax
pop eax
mov dword [esp], esi
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push ebp
mov dword [esp], edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0x677106
push esi
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], esi
mov esi, 0x6dfcc3c6
mov dword [esp + 4], esi
pop esi
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
push ebp
mov ebp, 4
add esi, ebp
pop ebp
xchg dword [esp], esi
pop esp
push dword [esp]
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push ebx
mov ebx, 0x69757473
push eax
mov dword [esp], ebx
pop dword [0x4c984e]
push dword [esp]
pop ebx
add esp, 4
jmp 0x688e88
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], esi
mov dword [esp], edx
push edi
push ebp
mov ebp, 0x40127b97
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 4
add eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
push dword [0x4c9aec]
push dword [esp]
pop esi
push ebx
mov ebx, esp
add ebx, 4
push eax
mov eax, 4
add ebx, eax
pop eax
xchg dword [esp], ebx
pop esp
jmp 0x5b994a
push ebx
push esp
pop ebx
push edi
mov edi, 4
add ebx, edi
pop edi
sub ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov dword [esp], eax
push esi
mov dword [esp], 0x186d4c55
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
pop eax
push eax
push esp
mov eax, dword [esp]
add esp, 4
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push esi
mov dword [esp], 0x2183d0a5
mov dword [esp], edi
push 0x5a40e26f
mov dword [esp], edx
mov edx, 0x4c9a28
mov dword [esp + 4], edx
pop edx
jmp 0x5f3a40
push 0x6e35d376
mov dword [esp], ebp
push ecx
push 0x4c9a28
pop ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ebx
mov dword [esp], esi
push edi
mov edi, 0x3e5d5a8e
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], esi
mov dword [esp], 0x2bbc083f
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push edi
push esp
pop edi
push ecx
mov ecx, 0x7ffa5f8c
and ecx, 0x6b6d2d7b
shl ecx, 6
xor ecx, 0xda034204
add edi, ecx
pop ecx
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0x711d2e
push dword [0x4ca4c0]
mov edx, dword [esp]
push ebp
mov ebp, esp
push esi
mov esi, 0x2decd56e
not esi
xor esi, 0xd2132a95
add ebp, esi
pop esi
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0x65bb08
push ecx
push 0x37efce66
pop ecx
shl ecx, 6
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x5ebf918a
xor ebp, 0x59446599
sub ecx, ebp
pop ebp
inc ecx
and ecx, 0x79df9ce0
shr ecx, 7
push eax
mov eax, 0x6bf758f4
dec eax
inc eax
sub eax, 0x4daf1f28
add eax, 0xe29b653c
sub ecx, eax
pop eax
sub eax, ecx
pop ecx
push edi
mov edi, esp
push esi
mov esi, 0x7f63551d
shr esi, 4
shr esi, 5
and esi, 0x6f7b63b8
shr esi, 3
not esi
push ebx
mov ebx, 0xfff89bce
xor esi, ebx
pop ebx
add edi, esi
pop esi
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
mov dword [esp], ecx
push edi
push 0x6fc13457
pop edi
add ecx, edi
pop edi
add ecx, eax
sub esp, 4
mov dword [esp], edx
mov edx, 0x6fc13457
sub ecx, edx
pop edx
push dword [esp]
pop ecx
push eax
mov eax, esp
add eax, 4
push edx
mov edx, 4
add eax, edx
pop edx
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x60f574
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 0x772f4c16
add edx, 0x37ef2774
sub edx, 0xaf1e7386
add ebx, 0x5ff78677
sub ebx, edx
sub ebx, 0x5ff78677
pop edx
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
push 0x18cf61a7
mov dword [esp], ecx
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 4
add ecx, edx
pop edx
xchg dword [esp], ecx
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
sub esp, 4
mov dword [esp], edx
push ebp
mov ebp, 0xa
push ebp
pop edx
mov ebp, dword [esp]
add esp, 4
mov dword [ebp - 0x14], edx
pop edx
push 0x79eced84
mov dword [esp], ecx
mov dword [esp], ebp
push edx
mov edx, 0x5cbea63d
mov dword [esp + 4], edx
pop edx
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 4
add eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
push dword [esp]
pop edx
push edx
mov dword [esp], esi
mov esi, esp
push edi
mov edi, 4
add esi, edi
pop edi
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x6e093c
push ebx
push esp
pop ebx
add ebx, 4
push eax
mov eax, 4
sub ebx, eax
mov eax, dword [esp]
add esp, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
push edi
mov edi, 0x5d2f86bc
shr edi, 7
push esi
push 0x7e7ddf6f
pop esi
add edi, esi
mov esi, dword [esp]
add esp, 4
sub edi, 0x5339f028
add ecx, edi
pop edi
add ecx, eax
sub ecx, 0x2bfe4e54
mov ecx, dword [esp]
push ebp
mov ebp, esp
push esi
mov esi, 4
add ebp, 0x7499da0a
add ebp, esi
sub ebp, 0x7499da0a
pop esi
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
and edx, eax
push ecx
push eax
mov dword [esp], ebp
mov ebp, 0x43c139ad
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
push edi
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
push ebx
mov ebx, 4
add edx, ebx
mov ebx, dword [esp]
add esp, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
jmp 0x5a09d2
push 0xea29cf4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], eax
pop dword [0x4c9bfc]
push edx
push ebp
mov ebp, 0x3daa233c
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], edi
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov ebx, dword [esp]
push eax
mov eax, esp
push edx
mov edx, 4
add eax, edx
pop edx
push ebx
mov ebx, 4
add eax, ebx
pop ebx
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x598d95
push ebx
mov dword [esp], 0x1079dce4
mov dword [esp], esi
mov dword [esp], ebx
mov dword [esp], ebp
mov dword [esp], ecx
push 0x28d4c072
mov dword [esp], esi
mov esi, 0x76d98cd9
shr esi, 7
and esi, 0x7f971706
not esi
inc esi
add esi, 0x7b9de2fd
add esi, 0xfee25798
sub ecx, esi
pop esi
add ecx, eax
push eax
mov eax, 0x3efbb4ba
and eax, 0x7d9f7a24
xor eax, 0x456017b5
add ecx, eax
pop eax
push dword [esp]
mov ecx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
add esp, 4
push eax
mov dword [esp], ebp
push ebx
mov dword [esp], 0x6fbfc87b
pop ebp
add ebp, 1
xor ebp, 0x3d3ac52
mov dword [0x4c9852], ebp
pop ebp
jmp 0x67c620
cmp esi, eax
jmp 0x59799c
cmp esi, eax
jmp 0x614613
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edx
mov dword [esp], 0x2cbfc011
mov dword [esp], ebp
mov dword [esp], ebx
push edi
mov dword [esp], ecx
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop ebx
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x1d2da67b
mov dword [esp], edi
push ecx
mov dword [esp], esp
add dword [esp], 4
pop edi
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edx
push 0x7420a06
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x660701
push 0x1753b520
mov dword [esp], esi
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], ecx
push edi
mov edi, 0x7b9b9cdf
and edi, 0x6b748948
add edi, 0x5d968625
push edx
mov edx, 0x7ffe50d3
and edi, edx
pop edx
add edi, 0xb097c8b
add ecx, edi
pop edi
sub ecx, 0x7be19630
add ecx, eax
add ecx, 0x7be19630
push esi
mov esi, 0x7d9df2ae
inc esi
add esi, 0xd6118a1d
sub ecx, esi
pop esi
push dword [esp]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
mov al, byte [0x4c9851]
jmp 0x617e6e
test eax, eax
jmp 0x5adbe1
push ebp
sub esp, 4
mov dword [esp], ecx
push 0xfd77175
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop eax
push edx
mov edx, esp
push ebx
mov ebx, 0x7f7d0497
xor ebx, 0x7f7d0493
add edx, ebx
pop ebx
push ebp
mov ebp, 4
add edx, ebp
pop ebp
xchg dword [esp], edx
pop esp
push dword [0x4ca4c0]
push dword [esp]
pop ecx
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
push ebx
mov ebx, esp
push esi
push 4
pop esi
add ebx, esi
pop esi
push ebp
mov ebp, 0x6dff1ba6
not ebp
shr ebp, 2
dec ebp
shl ebp, 7
or ebp, 0x7f5bc504
xor ebp, 0x7f5fcf80
sub ebx, ebp
pop ebp
xchg dword [esp], ebx
pop esp
mov dword [esp], edx
push esi
mov dword [esp], ecx
mov edx, dword [esp]
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov edx, dword [esp]
push edx
mov dword [esp], 0x2727b82d
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0x5ca312
cmp ecx, dword [ebp - 0x1c]
jmp 0x5b7fb0
mov dx, word [ecx]
jmp 0x591c94
push dword [ebp - 0x18]
mov eax, dword [esp]
push 0x6582c053
mov dword [esp], esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x744a9d
push ebp
mov dword [esp], edx
push edx
mov edx, 0x6eecd94
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
mov dword [esp], ebx
push edi
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
push dword [esp]
pop ebx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
push esi
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], 0x4898b890
mov dword [esp], ecx
pop dword [ebp - 0x18]
jmp 0x5c414d
push ebp
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
mov dword [esp], ebx
push edx
push ebx
mov ebx, 0x29617e06
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
jmp dword [eax + 0x4cacd8]
push edx
push esp
pop edx
add edx, 4
sub edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
push ebx
mov ebx, 0x3edae1d3
inc ebx
sub ebx, 0xd09f0fa1
add ecx, 0x6fdf1326
add ecx, ebx
sub ecx, 0x6fdf1326
pop ebx
sub ecx, 0x7fbff2bd
sub ecx, 0x3dbfb58f
add ecx, eax
add ecx, 0x3dbfb58f
add ecx, 0x7fbff2bd
sub ecx, 0x6e3bd233
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
push ecx
mov dword [esp], ebx
mov ebx, 4
add edi, ebx
pop ebx
xchg dword [esp], edi
pop esp
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x68571d
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x6e56f3
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x674ec2
push esi
push esp
pop esi
push ebp
mov ebp, 0x7ec34f66
shl ebp, 7
shl ebp, 7
shr ebp, 4
add ebp, 0xf2c26804
add esi, ebp
pop ebp
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], eax
sub esp, 4
mov dword [esp], edx
mov dword [esp], ebx
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ebx
push ebp
mov dword [esp], 8
pop ebx
sub esp, 4
mov dword [esp], ebx
pop dword [ebp - 8]
pop ebx
push esi
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push edi
mov edi, 4
sub ebp, edi
mov edi, dword [esp]
add esp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push edx
push 0x1ef44c65
mov dword [esp], esp
add dword [esp], 4
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
jmp 0x66251c
push 0x1dde9063
mov dword [esp], esi
push ebx
mov ebx, 0x4c9a28
mov dword [esp + 4], ebx
push dword [esp]
pop ebx
add esp, 4
jmp 0x6dbbe5
push edx
mov edx, esp
push ebp
mov ebp, 4
add edx, 0x7ea9592b
add edx, ebp
sub edx, 0x7ea9592b
pop ebp
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], eax
push eax
mov eax, esp
add eax, 4
push ebx
mov ebx, 4
sub eax, ebx
pop ebx
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
mov edi, dword [esp]
add esp, 4
pop dword [esp]
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edi
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], edx
push edx
mov dword [esp], ebp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0x5e8812
push ebx
push esp
pop ebx
push eax
mov eax, 4
add ebx, eax
pop eax
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebp
mov dword [esp], ecx
push edi
mov edi, 0x7ff4199
push esi
mov esi, 0x7ffb41e8
add esi, 0x6cb981c5
xor esi, 0xa3ca698b
sub ecx, esi
pop esi
add ecx, 0x3df33d49
add ecx, edi
sub ecx, 0x3df33d49
add ecx, 0x4f7eaa26
pop edi
add ecx, eax
sub ecx, 0x7ff4199
push dword [esp]
pop ecx
push ebp
mov dword [esp], 0x7fa939d0
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push ebp
push ecx
push eax
mov eax, 0x7cfe7ac8
add eax, 0x834e1f60
push eax
mov ecx, dword [esp]
add esp, 4
pop eax
mov dword [esp + 4], ecx
pop ecx
push 0x6f11bd4
mov dword [esp], eax
push esp
pop eax
add eax, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], edx
push eax
mov dword [esp], edi
mov dword [esp], 0x36871e24
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
pop edx
push edi
push esp
pop edi
add edi, 4
push esi
mov esi, 4
add edi, esi
pop esi
xchg dword [esp], edi
pop esp
jmp 0x59788d
push 0x77a4b77b
mov dword [esp], eax
push esp
pop eax
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], eax
mov dword [esp], edx
push ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push esi
push ebx
mov ebx, 0x56376278
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], eax
pop dword [0x4ca4b8]
jmp 0x5b992b
push esi
push esp
pop esi
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
mov edx, dword [esp]
push ebx
mov ebx, esp
push edi
mov edi, 0x2bdc2e24
and edi, 0x5c4ab110
shl edi, 1
inc edi
and edi, 0x7eddce9b
or edi, 0x75fd1a1f
xor edi, 0x75fd5a1b
add ebx, edi
pop edi
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
push esi
mov esi, 4
add ebp, esi
pop esi
xchg dword [esp], ebp
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x5c50c5
push ebx
mov ebx, 0x3c
add ebx, edx
push ecx
mov ecx, 0
sub ecx, 0x7ffb9dbf
add ecx, ebx
add ecx, 0x7ffb9dbf
push ebx
mov ebx, 0
add ebx, ecx
add eax, dword [ebx]
pop ebx
mov ecx, dword [esp]
add esp, 4
pop ebx
push esi
push ecx
mov ecx, 0x3a02a289
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
mov dword [esp], eax
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x5d4d23