Function at 0x500cd2
Capabilities:
Accept command line arguments

Disassembly:
cmp dword [ebp - 0x10], 0x1000000
jmp 0x540a8b
lea edx, [ecx + eax + 0x4bab08]
jmp 0x587d6b
push 0x1661051b
mov dword [esp], eax
mov eax, esp
add eax, 4
push 0x4e4329f5
mov dword [esp], edi
mov edi, 4
sub eax, edi
pop edi
xchg dword [esp], eax
pop esp
mov dword [esp], eax
push edi
mov edi, esp
add edi, 4
push ecx
mov ecx, 4
add edi, 0x3ff76e0e
sub edi, ecx
sub edi, 0x3ff76e0e
pop ecx
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
pop eax
push dword [esp]
push dword [esp]
pop eax
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
push 0x66e88f77
mov dword [esp], ecx
mov ecx, 0x1b57b168
shl ecx, 4
neg ecx
shl ecx, 6
shr ecx, 8
push edx
mov edx, 0x7bbf41e7
add edx, 0x56718f06
sub ecx, edx
pop edx
mov dword [0x4bab1c], ecx
mov ecx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov dword [esp], ebx
mov dword [esp], edx
mov dword [esp], eax
push ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
jmp 0x53da1a
mov byte [0x4bab22], cl
push ebx
push esp
mov ebx, dword [esp]
add esp, 4
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], edx
push eax
mov eax, esp
add eax, 4
sub eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
jmp 0x53263c
push 0x448725b5
mov dword [esp], edi
push esi
push 0x795d0116
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
push ebp
mov ebp, 0x1db77d24
add ecx, ebp
mov ebp, dword [esp]
add esp, 4
add ecx, eax
push edi
push 0x1db77d24
pop edi
sub ecx, edi
pop edi
push dword [esp]
pop ecx
push ecx
mov ecx, esp
add ecx, 4
push 0x4a00dffa
mov dword [esp], ebp
mov ebp, 4
add ecx, ebp
pop ebp
xchg dword [esp], ecx
pop esp
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
mov dword [esp], esi
mov dword [esp], eax
pop dword [0x4baecc]
jmp 0x53c966
push edx
push esp
pop edx
push ebp
mov ebp, 0x77dc0c67
not ebp
or ebp, 0x4cfbabcd
push edi
mov edi, 0xccfbfbd9
sub ebp, edi
pop edi
add edx, ebp
pop ebp
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
push 0x76bfb10b
mov dword [esp], ebx
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push dword [esp]
pop eax
push 0x70517edb
mov dword [esp], edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push 0x40d477d0
mov dword [esp], eax
mov eax, 0x7ffb6eea
add eax, 0xe97a0589
mov dword [0x4bab1e], eax
push dword [esp]
pop eax
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push esi
mov dword [esp], eax
mov dword [esp], 0x5237b69
mov dword [esp], ebp
mov dword [esp], edx
push edx
mov dword [esp], ebp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
push edi
mov edi, 4
add eax, edi
pop edi
push eax
push dword [esp + 4]
mov eax, dword [esp]
add esp, 4
pop dword [esp]
pop esp
jmp 0x585973
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
sub esp, 4
mov dword [esp], esi
mov esi, esp
push ebx
mov ebx, 4
add esi, ebx
pop ebx
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebp
mov dword [esp], ecx
sub ecx, 0x5fdf4488
push edx
mov edx, 0x7fbf40ac
or edx, 0x2eddd6a2
neg edx
xor edx, 0x37fe6043
sub edx, 0x3a2617cf
sub ecx, edx
pop edx
add ecx, eax
add ecx, 0x7dd83142
push edi
push 0x7fe7b874
pop edi
xor edi, 0x2038fcfc
add ecx, edi
pop edi
push dword [esp]
push dword [esp]
pop ecx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
jmp 0x4f1997
push eax
mov eax, esp
push ecx
mov ecx, 0x6ffb7a23
sub ecx, 0x6ffb7a1f
add eax, ecx
pop ecx
push edi
mov edi, 4
sub eax, edi
pop edi
xchg dword [esp], eax
pop esp
mov dword [esp], edi
mov dword [esp], ebx
push 0x688f09ed
mov dword [esp], edi
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
sub esp, 4
mov dword [esp], eax
mov eax, 4
add esi, eax
mov eax, dword [esp]
add esp, 4
xchg dword [esp], esi
pop esp
push dword [0x4bb7b0]
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push 0x50cd245e
mov dword [esp], ebx
push ebp
mov ebp, 0x62e60b74
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], eax
push esi
mov esi, esp
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
mov dword [esp], ebp
mov dword [esp], ebx
pop eax
push dword [esp]
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
push ebx
mov ebx, 4
add esi, ebx
pop ebx
xchg dword [esp], esi
pop esp
add esp, 4
jmp 0x570606
push edx
mov edx, 5
add edx, eax
push ebx
mov ebx, 0
sub ebx, 0x69d9816e
add ebx, edx
add ebx, 0x69d9816e
xor esi, dword [ebx]
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
pop edx
jmp 0x567d7f
push esi
push ecx
mov dword [esp], 0x5bc1afc
pop esi
or esi, 0x5fc7d0f1
sub esi, 0xe78f6a9c
mov dword [0x4bab18], esi
push dword [esp]
pop esi
add esp, 4
jmp 0x4e6d62
push dword [ebp - 0x10]
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
sub esp, 4
mov dword [esp], eax
push esp
pop eax
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], eax
mov dword [esp], ebx
push 0x7d04e68f
mov dword [esp], ecx
push dword [esp]
pop ebx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov ebx, dword [esp]
push eax
mov dword [esp], edx
mov edx, esp
push eax
mov eax, 0x6fa32f9b
add eax, 0x6f9f5ee6
sub eax, 0xdf428e7d
add edx, eax
pop eax
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x546762
je 0x4e66d6
jmp 0x500c1c
push ebx
mov ebx, esp
push ebp
push eax
mov eax, 0x498f731e
add eax, 0x77974ae9
add eax, 0xb6fb336
not eax
or eax, 0x37daabd1
sub eax, 0x3cff6e56
add eax, 0x6ffb837c
mov ebp, eax
pop eax
push edx
mov edx, 0x6af7c4fd
xor ebp, edx
pop edx
add ebx, ebp
pop ebp
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
push 0x1b76403a
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push edi
mov edi, esp
add edi, 4
push edx
mov edx, 4
sub edi, edx
pop edx
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
mov dword [esp], edx
push ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
push dword [esp]
pop edx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
jmp 0x53fe24
push eax
mov dword [esp], 0x7c1988d2
mov dword [esp], edx
push edx
mov edx, 0x1f656e76
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
push ecx
mov ecx, esp
add ecx, 4
push esi
mov esi, 0x6df3c84c
add esi, 0x7fbe604d
add esi, 0x124dd76b
sub ecx, esi
pop esi
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
add esp, 4
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x534569
jae 0x507d12
jmp 0x58a7ca
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x51454d
push dword [ebp - 0x18]
mov eax, dword [esp]
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
jmp 0x524436
push dword [ebp - 0x10]
mov eax, dword [esp]
push esi
push esp
pop esi
push ebx
mov ebx, 0x5efd0df5
xor ebx, 0x736c54d9
sub ebx, 0x2d915928
add esi, ebx
pop ebx
add esi, 4
xchg dword [esp], esi
pop esp
push ebp
mov ebp, esp
add ebp, 4
push ecx
mov ecx, 0x7effc821
xor ecx, 0x3e5bc5f4
add ecx, 0xbf5bf22f
sub ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
mov dword [esp], ebp
mov dword [esp], eax
mov dword [esp], ecx
push ebx
mov ebx, 0x5ba7d236
add ebx, 0x203f61e2
sub ecx, ebx
pop ebx
push ebx
mov ebx, 0x54cbe4cf
add ecx, ebx
pop ebx
add ecx, eax
sub ecx, 0x54cbe4cf
push eax
mov eax, 0x7be73418
add ecx, eax
pop eax
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0x5666b7
push dword [0x4badbc]
mov esi, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push esi
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x7a34ada9
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
mov dword [esp], ecx
sub ecx, 0x3fc65bc2
add ecx, 0x73f70f88
sub ecx, 0x7a97c5eb
add ecx, eax
add ecx, 0x7a97c5eb
sub ecx, 0x73f70f88
push ebx
mov ebx, 0x7bfb01b6
shl ebx, 4
xor ebx, 0x807640a2
add ecx, ebx
mov ebx, dword [esp]
add esp, 4
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], ecx
mov dword [esp], esi
mov esi, esp
add esi, 4
push eax
mov eax, 4
add esi, eax
pop eax
xchg dword [esp], esi
pop esp
jmp 0x4f228c
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov dword [esp], ebp
mov dword [esp], edx
push edi
mov edi, esp
push esi
mov esi, 4
add edi, esi
pop esi
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
push ebp
mov ebp, 0x7ffa060b
xor ebp, 0x7ffa060f
add ecx, ebp
pop ebp
xchg dword [esp], ecx
pop esp
sub esp, 4
mov dword [esp], edx
mov dword [esp], 0x3872ed54
mov dword [esp], edi
push ecx
mov ecx, 0x4bacf8
mov dword [esp + 4], ecx
pop ecx
push edx
mov edx, esp
add edx, 4
push ebx
mov ebx, 4
sub edx, ebx
pop ebx
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], edi
mov dword [esp], edx
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
pop edx
push 0x22a6bebc
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
jmp 0x4ff2aa
push 0x7063d5c
mov dword [esp], esi
mov dword [esp], edi
mov dword [esp], eax
mov dword [esp], ecx
pop dword [0x4bb7a8]
push edx
mov edx, esp
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], ecx
add ecx, 0x73307da4
add ecx, eax
push edx
mov edx, 0x3effa1dc
inc edx
push 0x62effc65
mov dword [esp], ebp
mov ebp, 0xcbcf2439
sub edx, ebp
mov ebp, dword [esp]
add esp, 4
sub ecx, edx
pop edx
push dword [esp]
push dword [esp]
pop ecx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
jmp 0x529f76
test eax, eax
jmp 0x4f9dfd
cmp esi, eax
jmp 0x533abf
cmp dword [0x4bbfe8], 0x23f0
jmp 0x5007ed
push ebx
push ecx
mov dword [esp], esi
mov esi, 0x4ef311dd
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], edx
push eax
mov eax, esp
push ecx
mov ecx, 0x7fffe510
dec ecx
dec ecx
not ecx
xor ecx, 0x7ffa0692
xor ecx, 0xfffa1c67
add eax, ecx
pop ecx
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
sub esp, 4
mov dword [esp], esi
push esp
pop esi
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
xor ecx, ecx
push edx
mov dword [esp], eax
push ecx
push 0x7217a62d
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
push 0x52716983
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push ecx
mov ecx, 0x7babb230
not ecx
or ecx, 0x6c7b4019
add ecx, 0x1380b225
sub ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
pop eax
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
push eax
mov dword [esp], edi
push dword [esp + 4]
mov edi, dword [esp]
add esp, 4
pop dword [esp]
pop esp
jmp 0x52a8a3
push ebp
mov dword [esp], 0x3cabacba
mov dword [esp], edx
mov dword [esp], ecx
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
add esp, 4
push edi
mov edi, esp
push edx
mov edx, 4
add edi, edx
pop edx
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
mov dword [esp], eax
pop dword [ebp - 0x10]
jmp 0x5a4197
push edi
mov edi, esp
push ebx
mov ebx, 4
add edi, ebx
pop ebx
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push edi
mov edi, esp
add edi, 4
sub edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x4e74d9
push esi
mov esi, esp
push ebp
mov ebp, 0x5ffda3b1
or ebp, 0x7adffb24
and ebp, 0x767f61ce
inc ebp
push eax
mov eax, 0
sub eax, ebp
mov ebp, eax
pop eax
xor ebp, 0x89809e7f
add esi, 0x7f7fa533
add esi, ebp
sub esi, 0x7f7fa533
pop ebp
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
push esi
push 0x19ef0042
pop esi
add ecx, esi
pop esi
add ecx, eax
push edx
mov edx, 0x779fc292
sub edx, 1
xor edx, 0x3ffee8ff
add edx, 0x7dffd545
shl edx, 8
add edx, 0x7bed9b8a
add edx, 0x3d01b1b8
sub ecx, edx
pop edx
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [ebp - 0x18]
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
sub esp, 4
mov dword [esp], ecx
mov ecx, 4
add ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
jmp 0x52e9e9
call sub.IMM32.dll_ImmGetContext
jmp 0x53b3b2
jmp 0x51d8ab
add esp, 4
jmp 0x514546
mov cx, word [eax]
jmp 0x56c0d8
push ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], esi
mov dword [esp], 0x27076a49
mov dword [esp], ecx
push eax
mov eax, 0x33ffc8a6
shl eax, 8
not eax
xor eax, 0x7d89d55a
add ecx, eax
mov eax, dword [esp]
add esp, 4
add ecx, 0x7fbdb678
add ecx, eax
push eax
mov eax, 0x7fbdb678
sub ecx, eax
pop eax
sub ecx, 0x7dbe8ca5
mov ecx, dword [esp]
push eax
mov eax, esp
push ecx
mov dword [esp], edx
mov edx, 0x3efdfe2f
or edx, 0x2f6cf503
push eax
mov eax, 0xc00200d5
add edx, eax
pop eax
add eax, edx
pop edx
add eax, 4
xchg dword [esp], eax
pop esp
push dword [ebp - 0x18]
mov eax, dword [esp]
push ebp
mov ebp, esp
push edx
mov edx, 4
add ebp, edx
pop edx
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
push 0x3b454c21
mov dword [esp], esi
push ebp
push 0x21168e64
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ebx
push edx
mov dword [esp], 0x6a1d99b3
mov dword [esp], edx
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push edi
mov edi, esp
push esi
mov esi, 0x7fecb7d3
push ecx
mov ecx, 0x3fbb3481
or esi, ecx
pop ecx
sub esi, 0x7fffb7cf
add edi, esi
pop esi
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x564545
push esi
push esp
mov esi, dword [esp]
add esp, 4
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ecx
push esi
mov dword [esp], ebp
mov ebp, 0x7e97b40a
shl ebp, 5
push ebx
mov ebx, 0x3fbfc96d
and ebp, ebx
pop ebx
and ebp, 0x77efa364
sub ebp, 0x57b32c59
sub ebp, 0x51b49223
sub ecx, ebp
mov ebp, dword [esp]
add esp, 4
add ecx, eax
add ecx, 0x693ec2c4
push dword [esp]
pop ecx
push esi
push esp
pop esi
push ebx
mov ebx, 0x5fdf524e
and ebx, 0x7bb62c05
xor ebx, 0x5d7a9e59
add ebx, 0x53fb43fd
xor ebx, 0x5ae7e25e
add esi, ebx
pop ebx
add esi, 4
xchg dword [esp], esi
pop esp
push ebx
mov dword [esp], 0x6cb41805
mov dword [esp], ebp
push edi
push 0x4bacf8
pop edi
mov dword [esp + 4], edi
pop edi
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
mov dword [esp], ebp
mov dword [esp], 0x4f6fb84b
mov dword [esp], eax
push 0x6aa6bb86
mov dword [esp], ebx
push dword [esp]
pop eax
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
add esp, 4
jmp 0x4fc97e
jne 0x552748
jmp 0x533aca
jmp dword [eax + 0x4bbfe8]
push ecx
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push edi
mov edi, 4
sub ebp, edi
pop edi
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
mov dword [esp], 0x4bacf8
sub esp, 4
mov dword [esp], eax
push edi
mov edi, 0x6768e7b9
mov dword [esp + 4], edi
pop edi
mov dword [esp], ebx
mov dword [esp], ecx
sub ecx, 0x35bf87d0
push ebx
push edx
mov edx, 0x5f1e712f
dec edx
dec edx
and edx, 0x7befeb25
xor edx, 0x61b28a3e
mov ebx, edx
pop edx
dec ebx
inc ebx
dec ebx
not ebx
shr ebx, 8
xor ebx, 0x7f78a271
sub ecx, ebx
pop ebx
add ecx, eax
add ecx, 0x7fbde165
push eax
mov eax, 0x3fba9713
add eax, 0xf604f0bd
add ecx, eax
pop eax
push dword [esp]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0x5dfecd
push 0x514516be
mov dword [esp], ebp
mov dword [esp], esi
mov dword [esp], edx
mov dword [esp], ecx
add ecx, 0x7fdf1935
sub ecx, 0x6c76d224
add ecx, 0x7f6f5b8f
add ecx, eax
sub ecx, 0x7f6f5b8f
push edi
push 0x6c76d224
pop edi
add ecx, edi
pop edi
sub ecx, 0x7fdf1935
mov ecx, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
sub esp, 4
mov dword [esp], ebp
mov dword [esp], 0x70910864
mov dword [esp], eax
pop dword [0x4badbc]
jmp 0x540a80
push esi
mov dword [esp], ecx
push eax
mov eax, 0x24ee61d5
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebx
mov ebx, 3
add ebx, edx
xor esi, dword [ebx]
pop ebx
push esi
push 0x695a92fb
mov dword [esp], esp
add dword [esp], 4
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], eax
push eax
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
push eax
push esp
pop eax
push ebp
mov ebp, 4
add eax, ebp
pop ebp
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x5007f8
jmp 0x417a5c
push edi
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ecx
mov dword [esp], eax
push ecx
push ebx
mov ebx, 0x7fce1e3e
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
mov ebx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
sub esp, 4
mov dword [esp], edx
mov dx, 0x5752
sub esp, 4
mov dword [esp], ebp
mov bp, 0xd655
neg bp
or bp, 0x4c97
inc bp
neg bp
shl bp, 1
sub bp, 0xe94a
xor dx, bp
pop ebp
push dx
pop word [0x4bab20]
pop edx
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebp
mov dword [esp], ebx
mov dword [esp], 0x50011112
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
push dword [esp]
pop eax
push edi
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0x59d1dc
push esi
push 0x6bef2416
pop esi
push eax
mov eax, 0x3efbb98b
sub eax, 0x5bdc00d4
dec eax
xor eax, 0x27fffc2a
xor eax, 0x77f5f96c
not eax
xor eax, 0x17352e07
xor esi, eax
pop eax
not esi
sub esi, 0x2eefbdb3
or esi, 0x7ffd0af9
xor esi, 0x7ffeef20
push ebx
mov ebx, 0x800115d5
sub esi, ebx
pop ebx
mov dword [ebp - 0x14], esi
mov esi, dword [esp]
add esp, 4
push edx
sub esp, 4
mov dword [esp], edi
push 0x4000f50
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
push 0x17fbc805
mov dword [esp], ebp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0x5c0b15
push esi
mov dword [esp], 0x37222144
mov dword [esp], ebx
mov dword [esp], esi
push edi
mov edi, 0x4bacf8
mov dword [esp + 4], edi
pop edi
jmp 0x567d74
push 0x2d004ba7
mov dword [esp], ebp
push esi
push ebp
mov dword [esp], 0x4bab18
pop esi
mov dword [esp + 4], esi
pop esi
push edi
mov edi, esp
push esi
mov esi, 4
add edi, esi
pop esi
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ecx
mov dword [esp], edx
push edi
mov dword [esp], eax
mov dword [esp], 0x601676ab
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
pop edx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
jmp 0x559547
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
jmp 0x5dfb84
ja 0x500caa
jmp 0x51d8ab
push 0x4789a17b
mov dword [esp], ecx
push ecx
mov ecx, 0x27ba9a56
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
pop dword [ebp - 0x18]
sub esp, 4
mov dword [esp], ebp
sub esp, 4
mov dword [esp], eax
mov eax, 0x321a55fd
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
mov dword [esp], ecx
pop edx
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x4f59fc
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
mov dword [esp], ebp
mov dword [esp], eax
mov dword [esp], edx
jmp 0x562cf4
cmp edx, dword [ebp - 0xc]
jmp 0x583743
push eax
mov eax, esp
add eax, 4
sub eax, 4
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
mov dword [esp], ecx
add ecx, 0x5d976a4d
sub ecx, 0x737fada0
add ecx, 0x456b4715
add ecx, eax
sub ecx, 0x456b4715
add ecx, 0x737fada0
push edx
push 0x739c66c4
pop edx
add edx, 0x375e3d1a
sub edx, 0x6957aaf5
dec edx
dec edx
xor edx, 0x1c3592aa
sub ecx, edx
pop edx
mov ecx, dword [esp]
push edx
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push 0x608293cf
mov dword [esp], ecx
push 0x706d6f63
pop ecx
push edx
mov dword [esp], ecx
pop dword [0x4bab1a]
pop ecx
push ebx
sub esp, 4
mov dword [esp], ebp
mov dword [esp], esi
mov esi, 0x7338235b
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
push edx
mov dword [esp], esi
mov esi, 0x6df602bf
sub ecx, esi
pop esi
sub ecx, 0x5f7670f4
add ecx, eax
add ecx, 0x5f7670f4
push edi
mov edi, 0x7feb72e6
xor edi, 0x121d7059
add ecx, edi
pop edi
push dword [esp]
push dword [esp]
pop ecx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
jmp 0x4ed62b
push dword [ebp - 8]
mov eax, dword [esp]
push ebp
mov ebp, esp
push esi
mov esi, 4
add ebp, esi
pop esi
push eax
mov eax, 0x231f8766
xor eax, 0x7ee6ae00
neg eax
dec eax
add eax, 0x5df9296b
add ebp, eax
pop eax
xchg dword [esp], ebp
pop esp
jmp 0x56fce8
push ecx
mov ecx, esp
add ecx, 4
push esi
mov esi, 0x36fb2d3a
sub esi, 0x77bda92b
sub esi, 0x3ebeac74
xor esi, 0x6ffe28e9
push ebp
mov ebp, 0x35a712f5
shr ebp, 7
sub ebp, 0x82f006b7
sub esi, ebp
pop ebp
add esi, 0x8dfa4800
add ecx, 0x6dfc21dc
sub ecx, esi
sub ecx, 0x6dfc21dc
pop esi
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
push edi
mov edi, 0x67df3c6f
and edi, 0x7ff68bd3
and edi, 0x1f1fcbcd
sub edi, 0x5d6a6548
add edi, 0x922ff428
add ecx, edi
pop edi
add ecx, eax
push esi
mov dword [esp], eax
mov eax, 0x7e36d1f8
not eax
xor eax, 0x77bccc37
sub eax, 0x77e55b35
inc eax
shr eax, 5
push ebp
mov ebp, 0x3f6f7079
shr ebp, 7
dec ebp
add ebp, 0x5bff7a9d
add ebp, 0x6b9a939a
sub eax, ebp
pop ebp
sub ecx, eax
pop eax
push dword [esp]
pop ecx
push eax
mov eax, esp
add eax, 4
push ebp
mov ebp, 4
add eax, ebp
mov ebp, dword [esp]
add esp, 4
xchg dword [esp], eax
pop esp
push edx
mov dword [esp], ebp
mov dword [esp], ecx
mov dword [esp], 0x3a4e2b15
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0x58d887
jne 0x4f35e4
jmp 0x5911a4
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x582069
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0xae70e5b
mov dword [esp], edi
push ebp
mov ebp, 0x43b2877a
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], esi
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop ebx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
push 0x5e9fdf6a
mov dword [esp], ebx
mov ebx, 0x7f085e6c
or ebx, 0x6ff91a53
or ebx, 0x5f4f9717
xor ebx, 0x5abb566d
or ebx, 0x5afa0da2
dec ebx
add ebx, 0x80017253
add eax, ebx
pop ebx
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x58019e
cmp esi, eax
jmp 0x55953c
push eax
mov dword [esp], edi
mov edi, esp
add edi, 4
push eax
mov eax, 4
sub edi, eax
pop eax
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
mov dword [esp], ecx
sub ecx, 0x6f7f902c
add ecx, 0x7e9deeaf
add ecx, eax
push ebx
mov ebx, 0x75f7d111
not ebx
neg ebx
neg ebx
or ebx, 0x75ffbdc9
shr ebx, 4
push eax
push 0x6e9df2b1
pop eax
add ebx, eax
pop eax
sub ecx, ebx
pop ebx
add ecx, 0x6f7f902c
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push 0x49c2498e
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [0x4badbc]
push dword [esp]
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
push esi
mov esi, esp
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
mov dword [esp], ecx
sub esp, 4
mov dword [esp], edx
push eax
mov eax, 0x1fbf1a57
inc eax
shl eax, 7
dec eax
add eax, 0x7032aee0
mov edx, eax
pop eax
add ecx, edx
pop edx
add ecx, eax
push edi
mov edi, 0x4fbfdadf
sub ecx, edi
pop edi
push dword [esp]
mov ecx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
add esp, 4
jmp 0x59c273
call fcn.004176e0
jmp 0x52a89b
push eax
sub esp, 4
mov dword [esp], edi
mov edi, 0x43972291
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
mov eax, dword [esp]
push ebp
sub esp, 4
mov dword [esp], esp
push esi
mov esi, 4
add dword [esp + 4], esi
pop esi
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push ecx
mov dword [esp], eax
mov dword [esp], ebx
mov ebx, 0x3c
add ebx, edx
push edx
mov edx, 0
add edx, ebx
add eax, dword [edx]
pop edx
mov ebx, dword [esp]
add esp, 4
jmp 0x556dc8
sub esp, 4
mov dword [esp], eax
mov dword [esp], edi
mov edi, 0x1000
sub eax, edi
push dword [esp]
pop edi
add esp, 4
jmp 0x525393
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x554b6e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x56053f
cmp ecx, dword [ebp - 0x1c]
jmp 0x583738
mov dx, word [ecx]
jmp 0x54fe60
push dword [ebp - 0x14]
mov ecx, dword [esp]
push ebx
mov ebx, esp
push edx
mov edx, 4
add ebx, edx
pop edx
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
sub esp, 4
mov dword [esp], ebp
push 0x552221f9
mov dword [esp], eax
mov eax, 0x5f2eae83
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
push edx
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop edx
push edx
push esp
pop edx
add edx, 4
push esi
mov esi, 4
add edx, esi
pop esi
xchg dword [esp], edx
pop esp
jmp 0x4e66e2
sub esp, 4
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], ecx
mov dword [esp], edx
push eax
mov dword [esp], ecx
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push dword [0x4badbc]
push dword [esp]
pop esi
push ebp
mov ebp, esp
add ebp, 4
push eax
mov eax, 4
add ebp, eax
pop eax
xchg dword [esp], ebp
pop esp
jmp 0x53c29c
sub esp, 4
mov dword [esp], ebx
mov dword [esp], ecx
mov dword [esp], 0x312cea1c
mov dword [esp], eax
push eax
mov dword [esp], 0x7505cf72
mov dword [esp], ebx
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop eax
push esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
push dword [0x4bb7b0]
mov eax, dword [esp]
push edi
push esp
pop edi
push esi
mov esi, 0x7bb53044
and esi, 0x7f6f2365
sub esi, 0x7b252040
add edi, esi
pop esi
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x502d7c
xor edx, edx
push ecx
mov dword [esp], 0x392fd4d8
mov dword [esp], ecx
push ebp
mov ebp, 0x335cbf93
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
push ebp
mov ebp, 0x7bff82ef
add ecx, ebp
pop ebp
add ecx, eax
push 0x22b8c3b2
mov dword [esp], ebp
mov ebp, 0x5ff48438
dec ebp
sub ebp, 0xe3f50148
sub ecx, 0x1f454006
sub ecx, ebp
add ecx, 0x1f454006
pop ebp
push dword [esp]
mov ecx, dword [esp]
push esi
mov esi, esp
push edi
mov edi, 0x56de6316
sub edi, 0x2f2fcca4
inc edi
add edi, 0xd8516991
add esi, edi
pop edi
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
jmp 0x56c0e0
push ecx
push ecx
mov dword [esp], edi
mov edi, 0x4bacf8
mov dword [esp + 4], edi
push dword [esp]
pop edi
add esp, 4
push eax
mov eax, esp
push ebx
mov ebx, 0x1f7a312f
and ebx, 0x5bfd3ee3
not ebx
sub ebx, 0xe487cfd8
add eax, ebx
pop ebx
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edx
mov dword [esp], ecx
sub ecx, 0x7f5fe889
push ebx
mov ebx, 0x7cea32b7
xor ebx, 0x3953772
add ecx, ebx
pop ebx
sub ecx, 0x1fefef76
add ecx, eax
push esi
mov esi, 0x1fefef76
add ecx, esi
pop esi
sub ecx, 0x7f7f05c5
add ecx, 0x7f5fe889
mov ecx, dword [esp]
push esi
push esi
mov dword [esp], esp
add dword [esp], 4
pop esi
push eax
mov eax, 4
add esi, eax
pop eax
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x4f04ac
push ebx
mov ebx, esp
push esi
mov esi, 4
add ebx, esi
pop esi
push ecx
push ebx
mov ebx, 0x7cee93e2
dec ebx
shr ebx, 4
add ebx, 0x4c7f7a5d
shr ebx, 2
add ebx, 0xeaec671e
mov ecx, ebx
pop ebx
sub ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
mov edx, dword [esp]
push edi
mov edi, esp
push ebp
mov ebp, 0x77ff27af
add ebp, 0x78b397f5
inc ebp
or ebp, 0x7edfa839
neg ebp
xor ebp, 0x1004047
add edi, ebp
pop ebp
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push edi
mov edi, esp
push ebx
mov ebx, 0x7f4f5b44
sub ebx, 0x3b1d1c39
not ebx
and ebx, 0x3f087cce
neg ebx
add ebx, 0x3b0840c8
add edi, ebx
pop ebx
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
mov dword [esp], eax
pop dword [0x4baecc]
jmp 0x417a5c
je 0x529a5c
jmp 0x586735
je 0x561e74
jmp 0x58673f
push ecx
mov dword [esp], 0x1f0379dc
mov dword [esp], ebx
mov ebx, 0x3fffaaf4
shr ebx, 5
push edi
mov dword [esp], ecx
mov ecx, 0x7c475a46
add ebx, ecx
pop ecx
shl ebx, 1
and ebx, 0x76db77dd
xor ebx, 0x18e64336
mov dword [0x4bab22], ebx
pop ebx
jmp 0x53fb3a
jmp 0x4e66d6
jmp 0x4e66d6
push edi
push esp
pop edi
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], eax
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
push edx
mov edx, 4
add eax, edx
pop edx
xchg dword [esp], eax
pop esp
push dword [esp]
pop ebx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
push 0x6110a17a
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
push edi
push ecx
mov dword [esp], 0x4579422f
mov dword [esp], esi
mov esi, 0x2f50972f
mov dword [esp + 4], esi
pop esi
mov dword [esp], eax
push 0x6f8d904
mov dword [esp], ebx
push dword [esp]
pop eax
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov eax, dword [esp]
push eax
push 0x23ef03a
mov dword [esp], esp
add dword [esp], 4
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x5294a4
push edx
push ecx
mov ecx, 0x2a81f7cd
mov dword [esp + 4], ecx
push dword [esp]
pop ecx
add esp, 4
mov dword [esp], eax
push ecx
push esi
mov esi, 0x25fd9f4b
mov dword [esp + 4], esi
pop esi
mov dword [esp], edi
mov dword [esp], ebx
pop eax
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
push edx
mov edx, 4
sub ebp, edx
pop edx
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], 0x4bacf8
jmp 0x55c2ec
push esi
push esi
mov esi, 0x39bd7497
mov dword [esp + 4], esi
pop esi
mov dword [esp], edi
mov dword [esp], ebp
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push ebx
mov ebx, 0x6f3fb3cd
neg ebx
add ebx, 0x6f3fb3d1
add ebp, ebx
mov ebx, dword [esp]
add esp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop ebx
push edx
mov edx, esp
add edx, 4
push esi
mov esi, 4
sub edx, 0x5ebbcbe7
add edx, esi
add edx, 0x5ebbcbe7
pop esi
xchg dword [esp], edx
pop esp
push dword [ebp - 4]
push dword [esp]
pop ecx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push ebx
push edx
push edi
mov edi, 0x7c37d367
add edi, 0x848360ce
push edi
pop edx
pop edi
mov dword [esp + 4], edx
pop edx
mov dword [esp], edx
push ebx
mov dword [esp], ecx
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
push ebp
mov ebp, 0x77f50674
inc ebp
neg ebp
add ebp, 0x3bde4e05
shl ebp, 6
xor ebp, 0xfa51e404
add edi, ebp
pop ebp
xchg dword [esp], edi
pop esp
push dword [esp]
pop edx
push ebp
mov dword [esp], 0x1608cd7e
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x57f8d0
push eax
mov eax, esp
add eax, 4
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], esi
mov dword [esp], 0x31841d4d
mov dword [esp], ecx
add ecx, 0x4f6d3e35
add ecx, eax
push ebp
mov ebp, 0x7efb5d05
neg ebp
not ebp
dec ebp
push edx
mov edx, 0
sub edx, ebp
mov ebp, edx
mov edx, dword [esp]
add esp, 4
sub ebp, 0x319764c8
sub ecx, ebp
mov ebp, dword [esp]
add esp, 4
push dword [esp]
mov ecx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp dword [eax + 0x4bbfe8]
push dword [ebp - 0x18]
push dword [esp]
pop ecx
push edi
mov edi, esp
push ebx
mov ebx, 0x2dffebf7
xor ebx, 0x2dffebf3
add edi, ebx
pop ebx
add edi, 4
xchg dword [esp], edi
pop esp
sub esp, 4
mov dword [esp], eax
push ebp
push 0x53de0f1c
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
sub ecx, 0x7edfba85
push edi
push eax
mov eax, 0x75cf43ec
mov edi, eax
pop eax
add ecx, 0x6fee07f3
sub ecx, edi
sub ecx, 0x6fee07f3
pop edi
add ecx, eax
add ecx, 0x75cf43ec
add ecx, 0x7edfba85
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0x512b30
push edx
push eax
mov eax, 0x4a892982
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], esi
mov dword [esp], eax
push ecx
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], ebp
mov dword [esp], edx
push 0x2c4fd319
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
jmp 0x529f6c
mov cl, byte [0x4bab21]
push edi
mov dword [esp], eax
push edx
push eax
mov eax, 0x7e779acc
sub eax, 0x69273fad
mov edx, eax
pop eax
mov dword [esp + 4], edx
pop edx
mov dword [esp], edx
push ecx
push dword [esp]
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
mov edx, dword [esp]
push 0x21d56db
mov dword [esp], ebp
mov ebp, esp
push edi
mov edi, 4
add ebp, edi
mov edi, dword [esp]
add esp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x4e6f1e
push esi
mov esi, esp
push eax
mov eax, 4
add esi, eax
pop eax
push edx
mov edx, 0x27ff3140
dec edx
neg edx
push ebp
mov ebp, 0xd800cec5
xor edx, ebp
pop ebp
sub esi, edx
pop edx
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov dword [esp], 0x632c6ad3
mov dword [esp], ecx
pop ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [ebp - 0x10]
mov ecx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
push 0x66f3bbe
mov dword [esp], ebp
mov ebp, esp
push edi
mov edi, 0x6fb84efd
push esi
mov esi, 0x7eff7c2c
sub edi, esi
pop esi
dec edi
neg edi
sub edi, 0xf472d2c
add ebp, edi
pop edi
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
push 0x2459d52a
mov dword [esp], edi
push ecx
mov ecx, 0x39ef1b4e
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push edx
push esp
pop edx
add edx, 4
push esi
mov esi, 4
add edx, esi
pop esi
xchg dword [esp], edx
pop esp
jmp 0x5412c7
push edi
push esp
pop edi
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], eax
mov dword [esp], edi
mov dword [esp], ebx
push 0x5b842515
mov dword [esp], ebp
mov dword [esp], ecx
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
pop ebx
push ecx
mov ecx, esp
push ebx
push 4
pop ebx
add ecx, ebx
pop ebx
add ecx, 4
xchg dword [esp], ecx
pop esp
sub esp, 4
mov dword [esp], eax
push edx
mov edx, 8
push edx
pop eax
pop edx
mov dword [ebp - 8], eax
mov eax, dword [esp]
add esp, 4
jmp 0x53fc44
push edi
mov edi, esp
add edi, 4
push esi
push ebp
mov ebp, 4
mov esi, ebp
pop ebp
sub edi, esi
pop esi
xchg dword [esp], edi
pop esp
mov dword [esp], eax
pop dword [0x4bb7b0]
sub esp, 4
mov dword [esp], edx
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], edx
push edi
mov dword [esp], 0x140ef48d
mov dword [esp], ebx
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 4
add eax, ecx
pop ecx
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
jmp 0x59b776
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], esi
mov esi, esp
push ebp
mov ebp, 0x5e335b24
shl ebp, 2
sub ebp, 0x7ffd6c40
or ebp, 0x3fdfe9e8
not ebp
xor ebp, 0x78573d99
add ebp, 0x8788d466
add esi, ebp
pop ebp
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edx
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
add esp, 4
jmp 0x577dda