Function at 0xb6d8a8
Capabilities:
Accept command line arguments

Disassembly:
push edx
push 0xf7e336d
mov dword [esp], ebp
push 0x706d6f63
mov ebp, dword [esp]
add esp, 4
mov edx, ebp
pop ebp
mov dword [0x65dafa], edx
pop edx
push edx
mov dword [esp], eax
push esi
push 0x18253f4b
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov edx, dword [esp]
push ebx
push edi
mov edi, 0x2c36e851
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xb9544e
ja 0xc1ad8b
jmp 0xbd4129
jae 0xbc8d18
jmp 0xc07525
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0xbaf98d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xbe8e95
je 0xb9ec4c
jmp 0xb6c9b2
push dword [ebp - 8]
push dword [esp]
pop edx
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push ecx
mov ecx, esp
push esi
push ebx
mov ebx, 4
mov esi, ebx
pop ebx
add ecx, esi
pop esi
sub ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], edx
push edi
mov dword [esp], 0x75086a12
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
push ebx
mov ebx, 4
sub esi, 0x6abb1a0c
add esi, ebx
add esi, 0x6abb1a0c
pop ebx
xchg dword [esp], esi
pop esp
jmp 0xc43c3a
mov dx, word [ecx]
jmp 0xb65f85
cmp edx, dword [ebp - 0xc]
jmp 0xba8594
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edi
push edi
mov edi, 0x89a9afe
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [0x65dd9c]
push dword [esp]
pop esi
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push ebp
mov ebp, esp
add ebp, 4
push 0x23f4b2ee
mov dword [esp], eax
mov eax, 0x3ff901c8
shl eax, 1
shl eax, 8
sub eax, 0xf2038ffc
sub ebp, eax
pop eax
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], ebx
push 0xb7a7554
mov dword [esp], edi
mov dword [esp], ecx
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0xbbeb85
push dword [ebp - 0x18]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xbec665
push 0x6297aa3a
mov dword [esp], ebx
mov ebx, esp
push esi
mov esi, 4
add ebx, esi
pop esi
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ecx
add ecx, 0x57bfb072
push esi
mov esi, 0x6ff73fc2
sub ecx, esi
pop esi
add ecx, eax
add ecx, 0x6ff73fc2
push edx
push 0x17defce7
pop edx
xor edx, 0x40614c95
sub ecx, edx
pop edx
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push ebp
push ebx
push esi
mov esi, 0x1000
mov dword [esp + 4], esi
pop esi
pop ebp
add eax, 0x56e10a39
sub eax, ebp
sub eax, 0x56e10a39
pop ebp
push eax
push ebx
mov dword [esp], esi
mov esi, 0x5d5d9715
mov dword [esp + 4], esi
pop esi
mov dword [esp], eax
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push 0x61b2ae92
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0xc1c065
call fcn.0044baa0
jmp 0xb8677a
jmp 0xb9ec4c
push edi
push 8
pop edi
push eax
mov dword [esp], edi
pop dword [ebp - 8]
mov edi, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], edx
push edi
push 0x43765421
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
add ecx, 0x7ff35d77
push edi
mov edi, 0x3fff177f
and edi, 0x5d2ef5fb
dec edi
sub edi, 0x57df7804
and edi, 0x3b7d87e2
sub edi, 0xe96ea804
add ecx, edi
mov edi, dword [esp]
add esp, 4
add ecx, eax
sub ecx, 0x17dddd5e
push ebp
mov ebp, 0x6ffe6330
sub ebp, 0xf00b05b9
sub ecx, ebp
pop ebp
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xbc7b69
push dword [ebp - 0x18]
mov eax, dword [esp]
push 0x152d6cc0
mov dword [esp], edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
sub esp, 4
mov dword [esp], esi
mov dword [esp], ebx
push eax
mov eax, 0x48f2e7fd
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
sub ecx, 0x4fff75a4
sub ecx, 0x76ee5caa
add ecx, eax
push eax
mov eax, 0x76ee5caa
sub ecx, 0x7fdb6d6a
add ecx, eax
add ecx, 0x7fdb6d6a
pop eax
push ebp
mov ebp, 0x4fff75a4
add ecx, ebp
pop ebp
push dword [esp]
pop ecx
push edx
mov edx, esp
push edi
mov edi, 4
add edx, edi
pop edi
push esi
mov esi, 4
add edx, esi
pop esi
xchg dword [esp], edx
pop esp
jmp 0xbe98bd
add esp, 4
jmp 0xbe8e8e
jmp 0xb9ec4c
jmp 0xbd4129
push ecx
push ebx
push 0x427148ae
pop ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov ebx, dword [esp]
push eax
mov eax, esp
push edx
push 4
mov edx, dword [esp]
add esp, 4
add eax, edx
pop edx
add eax, 4
xchg dword [esp], eax
pop esp
push dword [0x85ef70]
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
jmp 0xb6a228
push ebp
mov dword [esp], eax
push esi
mov esi, 0x58c22b6b
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
push dword [esp]
mov eax, dword [esp]
push esi
mov esi, esp
push edx
mov edx, 0x77a7a136
dec edx
add edx, 0x88585ecf
add esi, edx
pop edx
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
push dword [0x85ef70]
mov ecx, dword [esp]
push ebp
mov ebp, esp
push esi
push 4
pop esi
add ebp, esi
pop esi
add ebp, 4
xchg dword [esp], ebp
pop esp
push esi
mov dword [esp], 0x1443f08a
mov dword [esp], ebp
push edx
mov edx, 0x4ebad862
mov dword [esp + 4], edx
pop edx
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push eax
mov eax, esp
push edx
mov edx, 4
add eax, edx
pop edx
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 4
sub ebx, 0x6cfaad3c
add ebx, ebp
add ebx, 0x6cfaad3c
pop ebp
xchg dword [esp], ebx
pop esp
jmp 0xbfe270
xor edx, edx
sub esp, 4
mov dword [esp], edi
mov dword [esp], edx
mov dword [esp], ecx
push eax
push 0x767c75ae
pop eax
shl eax, 3
or eax, 0x6fe02f50
add eax, 0x4ffc1fd0
add ecx, eax
pop eax
add ecx, eax
push ebx
mov ebx, 0x77fd2333
shl ebx, 5
neg ebx
sub ebx, 0xb07bca60
sub ecx, ebx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ecx
push eax
mov eax, esp
push ecx
mov ecx, 0x36bc1961
shl ecx, 5
shl ecx, 1
and ecx, 0x5b6addfe
shl ecx, 3
and ecx, 0x77ef88fa
xor ecx, 0x50028004
add eax, ecx
pop ecx
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0xb65f7d
push ebp
mov dword [esp], 0x2e9f91ea
mov dword [esp], edi
push edx
mov edx, 0x3767d9c6
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
push esi
push edx
mov edx, 0x76167285
shr edx, 2
dec edx
and edx, 0x7d3e790d
xor edx, 0x4ae55848
push edx
pop esi
pop edx
sub esi, 0x57fd5092
xor esi, 0x2fbdd6ed
not esi
sub esi, 0xcfa3b3b2
sub ecx, esi
mov esi, dword [esp]
add esp, 4
add ecx, eax
add ecx, 0x5ffe12f2
mov ecx, dword [esp]
push edi
push esp
pop edi
add edi, 4
push edi
mov dword [esp], eax
mov eax, 4
add edi, eax
pop eax
xchg dword [esp], edi
pop esp
push edi
push ebp
mov ebp, 0x6fff078a
neg ebp
push edi
mov edi, 0x4fbdba61
xor edi, 0x21d3d552
sub ebp, edi
pop edi
push eax
mov dword [esp], ebp
not dword [esp]
pop ebp
add ebp, 0x8b07fdb7
mov edi, ebp
pop ebp
mov dword [0x65dafe], edi
pop edi
jmp 0xbf36d7
push dword [ebp - 0x18]
push dword [esp]
pop edx
push edi
mov edi, esp
push ebx
mov ebx, 0x3bcffd8b
sub ebx, 0x3bcffd87
add edi, ebx
pop ebx
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xc094b8
sub esp, 4
mov dword [esp], eax
mov eax, esp
push edi
mov edi, 4
add eax, edi
pop edi
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ebp
mov ebp, esp
push eax
mov dword [esp], ebx
mov ebx, 4
add ebp, ebx
pop ebx
add ebp, 4
xchg dword [esp], ebp
pop esp
mov edx, dword [esp]
push edi
mov edi, esp
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x3ffbab4f
dec ebp
neg ebp
xor ebp, 0xc00454b6
sub edi, 0x3a6f3ebe
add edi, ebp
add edi, 0x3a6f3ebe
pop ebp
add edi, 4
xchg dword [esp], edi
pop esp
jmp dword [eax + 0xa5ff88]
jne 0xb4e79c
jmp 0xb9a1b7
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0xb5e90d
cmp dword [ebp - 0x10], 0x1000000
jmp 0xb56637
push ebp
mov dword [esp], edi
push 0x64634c3a
mov dword [esp], edi
mov edi, 0x27e86f58
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push dword [esp]
pop eax
push ecx
mov ecx, esp
push esi
mov esi, 4
add ecx, esi
pop esi
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xba9cde
jmp 0x4e139a
push ebp
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ecx
add ecx, 0x72eb0d47
push ebx
mov dword [esp], ebp
mov ebp, 0x75dd4077
sub ecx, ebp
pop ebp
add ecx, 0x3e7f3afc
add ecx, eax
sub ecx, 0x3e7f3afc
add ecx, 0x75dd4077
sub ecx, 0x72eb0d47
mov ecx, dword [esp]
push edx
push esp
pop edx
add edx, 4
push ebp
mov ebp, 4
add edx, ebp
pop ebp
xchg dword [esp], edx
mov esp, dword [esp]
push ebx
mov ebx, esp
push ecx
mov ecx, 0x3f4b2236
shr ecx, 6
sub ecx, 0xfd2c84
add ebx, ecx
pop ecx
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], ecx
pop dword [ebp - 0x18]
jmp 0xc0ab9e
je 0xb98cb8
jmp 0xb71a4b
je 0xc04510
jmp 0xb8fd68
push esi
mov dword [esp], edx
push edi
mov edi, 0x55586c58
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
pop dword [0x65deac]
jmp 0xba481c
lea ecx, [eax + edx + 0x65dae8]
sub esp, 4
mov dword [esp], esi
mov dword [esp], ecx
push esi
mov esi, 0x683ac9dc
mov dword [esp + 4], esi
pop esi
mov dword [esp], eax
push ebx
push dword [esp]
push dword [esp]
pop eax
add esp, 4
add esp, 4
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0xbc5a0b
push ebx
push ebp
push 0x51a7adaf
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ebx
mov dword [esp], eax
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
push 0x1d845b07
mov dword [esp], esi
mov dword [esp], edi
push eax
mov dword [esp], ebp
mov ebp, 0x65dcd8
mov dword [esp + 4], ebp
pop ebp
jmp 0xbc2166
push dword [ebp - 0x10]
mov ecx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
push ebp
push esp
pop ebp
push edx
mov edx, 0x6fd1be7c
or edx, 0x76abfb9f
shr edx, 8
add edx, 0xff800405
add ebp, edx
mov edx, dword [esp]
add esp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
push ebx
mov ebx, 4
add eax, ebx
pop ebx
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
push dword [esp]
pop eax
push 0x44772662
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push ebx
mov ebx, 4
add ebp, ebx
pop ebx
xchg dword [esp], ebp
pop esp
jmp 0xba4e57
push ecx
mov ecx, esp
add ecx, 4
push ebx
push 0x454f913a
pop ebx
xor ebx, 0x454f913e
sub ecx, ebx
pop ebx
xchg dword [esp], ecx
pop esp
mov dword [esp], ebp
mov dword [esp], ecx
push ebx
mov ebx, 0x17b92c6e
or ebx, 0x4cefcb31
or ebx, 0x7df2b6e2
or ebx, 0x65fecc2a
sub ebx, 0x16287587
add ecx, ebx
pop ebx
add ecx, eax
push edi
push edx
mov dword [esp], 0x7effde61
pop edi
add edi, 0x6e79368f
add edi, 0x7c5e7588
sub ecx, edi
pop edi
mov ecx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
sub esp, 4
mov dword [esp], ebx
mov ebx, 4
add ebp, ebx
pop ebx
xchg dword [esp], ebp
mov esp, dword [esp]
push edi
mov dword [esp], ecx
push 5
mov ecx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add ecx, edx
xor esi, dword [ecx]
pop ecx
jmp 0xbf9b67
sub esp, 4
mov dword [esp], esi
mov esi, esp
push edi
push 4
pop edi
add esi, edi
pop edi
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
push dword [esp]
pop eax
push ebx
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
push eax
mov eax, esp
push ebp
mov ebp, 0x27d7b31b
shl ebp, 3
push edx
mov edx, 0x77bf4301
sub edx, 0x27cf5e90
and ebp, edx
pop edx
add ebp, 0xf1527fb4
add eax, ebp
pop ebp
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], edx
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], 0x7b5ab648
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push dword [esp]
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
jmp 0xb71a41
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push eax
mov eax, esp
push ebx
mov ebx, 0x75c9c146
sub ebx, 0x75c9c142
add eax, ebx
pop ebx
sub eax, 4
push eax
push dword [esp + 4]
mov eax, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], ebx
push edx
push ebp
mov ebp, 0xa922376
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push edi
push esp
pop edi
push ecx
mov ecx, 4
add edi, ecx
pop ecx
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xb906ee
push edx
push esp
pop edx
push ebx
mov ebx, 0x66dd2442
sub ebx, 0x5bee81d8
add ebx, 0x7ff5269f
xor ebx, 0x8ae3c90d
add edx, ebx
pop ebx
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], eax
push ebp
mov dword [esp], ebx
mov eax, dword [esp]
push 0x36395325
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov eax, dword [esp]
push eax
push esp
pop eax
add eax, 4
push edi
mov edi, 4
add eax, 0x177a50c0
add eax, edi
sub eax, 0x177a50c0
pop edi
xchg dword [esp], eax
pop esp
sub esp, 4
mov dword [esp], ebp
push eax
mov eax, 0x3ef9d326
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
mov dword [esp], ecx
jmp 0xba01e3
push edx
mov edx, esp
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], ecx
add ecx, 0x69f7feaf
add ecx, eax
push edx
push esp
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
mov ebx, 0x69f7feaf
sub ecx, ebx
pop ebx
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push 0x743b69a6
mov dword [esp], eax
push edi
push edi
mov dword [esp], 0x65dcd8
pop edi
mov dword [esp + 4], edi
pop edi
jmp 0xb9d180
push ecx
mov ecx, esp
add ecx, 4
push ebp
mov ebp, 4
sub ecx, ebp
pop ebp
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
mov dword [esp], 0x2653e4a6
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov ebx, dword [esp]
push ebx
mov ebx, esp
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
pop ebx
push edx
push esp
pop edx
push ebp
mov ebp, 0x3bbd18d0
sub ebp, 0x653e73b0
neg ebp
inc ebp
dec ebp
sub ebp, 0x77ff43e3
sub ebp, 0xb18216f9
add edx, ebp
pop ebp
add edx, 4
xchg dword [esp], edx
pop esp
push 0x4c77d6a0
mov dword [esp], eax
push esi
mov dword [esp], 0x45e1da78
mov dword [esp], edx
mov edx, 0x65dcd8
mov dword [esp + 4], edx
pop edx
push 0x290ba789
mov dword [esp], ebp
push ecx
push 0x61a397e4
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
add ecx, 0x6fb76906
push 0x5e6d4e74
mov dword [esp], edx
mov edx, 0x43bf7d7a
push esi
mov esi, 0x7ffe12b9
sub esi, 0x5fe7f3ca
shl esi, 6
shr esi, 4
sub esi, 0x84d8d11c
and edx, esi
pop esi
shr edx, 8
shr edx, 5
add edx, 0x3f750d33
shr edx, 6
add edx, 0x3dff51f6
add ecx, edx
pop edx
add ecx, eax
sub ecx, 0x3efd2e92
sub ecx, 0x6fb76906
mov ecx, dword [esp]
push edi
mov edi, esp
push 0x66777058
mov dword [esp], ebp
push 0x717f735f
pop ebp
add ebp, 0x8e808ca5
add edi, ebp
pop ebp
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xbef9d7
cmp esi, eax
jmp 0xbf9b72
push edi
mov dword [esp], 0x2fbff7bb
mov dword [esp], ecx
mov dword [esp], 0x7bc87cd0
mov dword [esp], ebp
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push eax
mov eax, esp
push ecx
mov ecx, 0x7daf5f19
not ecx
inc ecx
xor ecx, 0x1e96e498
xor ecx, 0x9cc6447b
add eax, ecx
pop ecx
add eax, 4
xchg dword [esp], eax
pop esp
jmp dword [eax + 0xa5ff88]
cmp dword [0xa5ff88], 0x23f0
jmp 0xb56642
push 0x741036da
mov dword [esp], edi
push eax
mov eax, 0x59a5bf62
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], ecx
push eax
mov eax, 0x757ad99f
push eax
not dword [esp]
pop eax
neg eax
not eax
inc eax
add eax, 0xb529878f
add ecx, eax
pop eax
sub ecx, 0x7fd1c572
sar dword [edi + 1], 1
rol dword [ecx - 0x2e3a8d3f], 0x7f
sar dword [edi + 1], 1
rol dword [ecx - 0x2e3a8d3f], 0x7f
sub ecx, 0x3faeadef
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push esi
mov esi, esp
push ebx
mov ebx, 4
add esi, ebx
pop ebx
add esi, 4
xchg dword [esp], esi
pop esp
push esi
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], eax
pop dword [ebp - 4]
push eax
push 0x7f90caf2
mov dword [esp], esi
push 0x6768d337
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebx
push ecx
push edx
push 0x7bbd2fc3
pop edx
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
pop ebx
mov ebx, dword [esp]
push eax
mov eax, esp
push esi
mov esi, 4
add eax, esi
pop esi
push ecx
mov ecx, 4
add eax, ecx
pop ecx
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
jmp 0xc016bb
sub esp, 4
mov dword [esp], edi
push ebp
push 0x65dcd8
mov ebp, dword [esp]
add esp, 4
mov dword [esp + 4], ebp
pop ebp
push ebx
mov ebx, esp
push 0x6741ca52
mov dword [esp], ecx
mov ecx, 0x7b6b6ec0
xor ecx, 0x7b6b6ec4
add ebx, ecx
mov ecx, dword [esp]
add esp, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
sub ecx, 0x7a2ec867
sub ecx, 0x7ffa51f7
sub ecx, 0x7fb72081
add ecx, eax
push eax
mov eax, 0x545f857d
and eax, 0x63ff6318
xor eax, 0x75ae9fb6
add eax, 0x49c581d3
add ecx, eax
pop eax
push esi
mov esi, 0x7ffa51f7
add ecx, esi
pop esi
add ecx, 0x7a2ec867
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
push eax
mov eax, 4
add ecx, eax
pop eax
xchg dword [esp], ecx
pop esp
jmp 0xbec753
push 0x242c99e6
mov dword [esp], ebx
mov dword [esp], ecx
mov ecx, 0x3afb8e7f
shr ecx, 5
sub ecx, 0x7fbbde02
not ecx
inc ecx
sub ecx, 0x573912e
mov dword [0x65daf8], ecx
mov ecx, dword [esp]
add esp, 4
push 0x271c590b
mov dword [esp], esi
push esp
pop esi
push ebx
mov ebx, 0x7ddff5fa
and ebx, 0x39add80b
inc ebx
neg ebx
xor ebx, 0xc6722ff1
add esi, ebx
pop ebx
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
push 0x27b6c24
mov dword [esp], ecx
mov ebx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push ecx
mov ecx, 0x31bd68b5
and ecx, 0x7f886a0f
add ecx, 0x7fe55d14
or ecx, 0x3d7b19c1
or ecx, 0x7b8f031c
shl ecx, 2
add ecx, 0x8090
add ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
mov ebx, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
jmp 0xbea248
push edi
mov dword [esp], 0x393f8b2e
mov dword [esp], ecx
push 0x3c
pop ecx
add ecx, edx
push ebx
mov ebx, 0
add ebx, ecx
add eax, dword [ebx]
pop ebx
pop ecx
jmp 0xbdbe04
push esi
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
pop dword [0x85ef70]
jmp 0xb78416
push ebp
mov dword [esp], 0xb431a20
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebp
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push ecx
push eax
mov dword [esp], esp
add dword [esp], 4
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
push edx
mov edx, 3
add edx, ecx
push ebx
mov ebx, 0
add ebx, edx
push 0x7add70ca
mov dword [esp], eax
mov eax, 0
add eax, ebx
xor esi, dword [eax]
pop eax
mov ebx, dword [esp]
add esp, 4
pop edx
jmp 0xb56658
test eax, eax
jmp 0xb56916
cmp esi, eax
jmp 0xb9d175
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebp
mov dword [esp], ebx
push 0x3e33fe7f
mov dword [esp], ecx
mov ebx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push dword [esp]
pop ebx
push edi
mov edi, esp
push ecx
mov ecx, 4
add edi, ecx
pop ecx
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push edx
push ebp
push 0x217edfa6
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
pop dword [0x85ef68]
jmp 0xb8fd72
push eax
mov dword [esp], edi
push esp
mov edi, dword [esp]
add esp, 4
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
sub esp, 4
mov dword [esp], ecx
mov ecx, 4
add edi, ecx
pop ecx
xchg dword [esp], edi
pop esp
push dword [esp]
pop edx
push esi
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
push edi
mov dword [esp], 0x21435a06
mov dword [esp], ebp
push eax
mov dword [esp], 0x45ff86e7
pop ebp
shr ebp, 2
xor ebp, 0x3f0f88ca
mov dword [0x65dafc], ebp
pop ebp
jmp 0xbf0b65
push eax
mov dword [esp], ecx
push ecx
mov ecx, 0x69d08c73
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], ecx
push ebp
mov ebp, 0x7ffa7aaf
push edx
mov edx, 0x7fffbe97
or ebp, edx
pop edx
shr ebp, 1
add ebp, 0x7bafbc68
shl ebp, 2
add ebp, 0x7df50576
add ebp, 0x134702e2
add ecx, 0x6effd6ce
add ecx, ebp
sub ecx, 0x6effd6ce
pop ebp
add ecx, eax
push edi
mov edi, 0x7ffaf774
sub ecx, edi
pop edi
push dword [esp]
pop ecx
push 0x111fd45b
mov dword [esp], eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
xor ecx, ecx
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebp
push esi
mov esi, 0x5f29553c
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
sub ecx, 0x1fcf9172
add ecx, 0x7fff845e
add ecx, eax
push ebx
mov ebx, 0x73679dce
push edx
mov edx, 1
sub ebx, edx
pop edx
sub ebx, 0x3dd33229
shl ebx, 5
xor ebx, 0xcd72f0de
sub ecx, ebx
pop ebx
add ecx, 0x1fcf9172
push dword [esp]
push dword [esp]
pop ecx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
jmp 0xbf9ad5
push edx
push edi
mov edi, 0x4224585e
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
mov dword [esp], esi
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov dword [esp], 0x11ca034e
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
push ebp
mov ebp, 0x7feb7407
shl ebp, 2
sub ebp, 0x7c5b0d07
dec ebp
xor ebp, 0x8352c310
add esi, ebp
mov ebp, dword [esp]
add esp, 4
xchg dword [esp], esi
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0xb905ab
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0xaa1087e
mov dword [esp], ecx
push esi
push 0x60e5c6f2
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], edx
push ecx
push dword [esp]
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
mov edx, dword [esp]
push edx
mov edx, esp
push esi
mov esi, 0x7f6a22d4
neg esi
not esi
add esi, 0x8095dd31
add edx, esi
mov esi, dword [esp]
add esp, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0xbdf8c4
push eax
push 0x1811f8d9
mov dword [esp], esi
mov esi, 0x1a289748
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
mov dword [esp], edx
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
push eax
mov eax, 4
add edx, eax
pop eax
xchg dword [esp], edx
pop esp
push ax
mov ax, 0x6c64
push 0x1bf2
mov word [esp], ax
pop word [0x65db00]
mov ax, word [esp]
push esi
mov esi, esp
add esi, 4
add esi, 2
xchg dword [esp], esi
pop esp
jmp fcn.00b75e1e
push ebx
push eax
mov eax, 0x7fff6b8f
neg eax
neg eax
sub eax, 0x173a65a7
and eax, 0x67f70a35
push edi
mov edi, 0x17576214
xor eax, edi
mov edi, dword [esp]
add esp, 4
mov ebx, eax
pop eax
shl ebx, 5
add ebx, 0x37dff2d5
sub ebx, 0x7f7093dc
sub ebx, 0x3e4f414b
push ebx
pop dword [0x65db02]
pop ebx
push ecx
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x4c862a25
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
mov dword [esp], ecx
add ecx, 0x2fbbdbeb
sub ecx, 0x7be7b0bb
add ecx, 0x76efebe6
add ecx, eax
push edi
mov edi, 0x76efebe6
sub ecx, edi
mov edi, dword [esp]
add esp, 4
add ecx, 0x7be7b0bb
sub ecx, 0x2fbbdbeb
push dword [esp]
pop ecx
push edi
mov edi, esp
add edi, 4
add edi, 4
sub esp, 4
mov dword [esp], edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
jmp 0xbf9ae5
mov cx, word [eax]
jmp 0xbf9add
cmp ecx, dword [ebp - 0x1c]
jmp 0xba8589
sub esp, 4
mov dword [esp], eax
push ebx
mov ebx, 0x189cbf19
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], ebx
sub esp, 4
mov dword [esp], esi
mov dword [esp], ecx
mov ebx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov ebx, dword [esp]
push eax
mov eax, esp
push eax
mov dword [esp], ebx
mov ebx, 0x7bdec49d
add ebx, 0x7bfa7897
xor ebx, 0x3bb77597
push eax
mov eax, 0xcc6e489f
sub ebx, eax
pop eax
add eax, ebx
pop ebx
add eax, 4
xchg dword [esp], eax
pop esp
push esi
push edi
mov dword [esp], 0xa
pop esi
push esi
pop dword [ebp - 0x14]
mov esi, dword [esp]
add esp, 4
jmp 0xb7468c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xbcca48
jne 0xbe0bb8
jmp 0xbce126
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
mov dword [esp], edx
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
push edx
mov dword [esp], esi
mov esi, esp
add esi, 4
push edi
mov edi, 4
add esi, 0x6feedf67
add esi, edi
sub esi, 0x6feedf67
pop edi
xchg dword [esp], esi
pop esp
push dword [0x65dd9c]
push dword [esp]
pop esi
push edi
mov edi, esp
add edi, 4
push esi
mov esi, 4
add edi, esi
pop esi
xchg dword [esp], edi
pop esp
push edi
mov edi, esp
add edi, 4
push 0x6085601e
mov dword [esp], ebp
mov ebp, 4
add edi, 0x4effb743
sub edi, ebp
sub edi, 0x4effb743
pop ebp
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
push eax
mov eax, 0x3dd74610
shr eax, 6
sub eax, 0x5bf1a94a
sub eax, 0x258fea93
sub ecx, eax
pop eax
push 0x7b081f74
mov dword [esp], edx
mov edx, 0x76f0b18
sub edx, 0xcf798c7f
sub ecx, edx
pop edx
add ecx, eax
add ecx, 0x37f57e99
add ecx, 0x7f75c93b
push dword [esp]
pop ecx
push 0x1d33bc8
mov dword [esp], edi
mov edi, esp
push esi
mov esi, 0x692129ab
neg esi
not esi
xor esi, 0x5f6f9c0e
sub esi, 0x364eb5a0
add edi, esi
pop esi
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xbe7445
push dword [ebp - 4]
push dword [esp]
pop ecx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ebp
mov dword [esp], ecx
push esi
mov esi, 0x534c3269
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], ebx
push ebx
push ecx
mov ecx, 0x1d4f9b27
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push 0x546a692a
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xb947ba
push ecx
mov ecx, esp
push 0x128fd5b2
mov dword [esp], edx
mov edx, 4
add ecx, edx
pop edx
sub ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
push dword [esp]
pop ebx
push esi
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push 0x6c93d929
mov dword [esp], edx
push edx
mov edx, 0x6aedb86e
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], eax
push edx
mov dword [esp], 0x11a35ed4
mov dword [esp], ebx
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov eax, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
push edx
push 4
pop edx
add ecx, edx
pop edx
xchg dword [esp], ecx
pop esp
jmp 0xbe390d
push ecx
mov ecx, esp
push edi
mov edi, 4
add ecx, edi
pop edi
sub ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], edi
mov dword [esp], ecx
push edi
push 0x3fbe8513
mov edi, dword [esp]
add esp, 4
add ecx, edi
pop edi
add ecx, 0x1eff3faa
add ecx, eax
sub ecx, 0x1eff3faa
sub ecx, 0x3fbe8513
push dword [esp]
pop ecx
push edx
mov edx, esp
push esi
mov esi, 0x5aff3e96
push ecx
mov ecx, 0x5aff3e92
xor esi, ecx
pop ecx
add edx, esi
pop esi
add edx, 4
xchg dword [esp], edx
pop esp
push ebx
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebp
mov dword [esp], esi
mov esi, 0x65dcd8
mov dword [esp + 4], esi
pop esi
jmp 0xb5664d
push dword [ebp - 0x18]
mov eax, dword [esp]
push ebx
mov ebx, esp
push ecx
mov ecx, 0x5b7eb075
sub ecx, 0x3ff798c2
dec ecx
push esi
mov esi, 0x3cd5ad56
sub esi, 0x7fdb332e
add esi, 0x9a5c70b3
add ecx, esi
pop esi
sub ecx, 0x72de0289
add ebx, ecx
pop ecx
add ebx, 4
xchg dword [esp], ebx
pop esp
push esi
push ebx
push 0x5a784ff6
pop ebx
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebp
mov dword [esp], eax
push 0x146fc565
mov dword [esp], ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
xchg dword [esp], ebx
pop esp
push dword [esp]
pop eax
push ebp
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
jmp 0xbe38e9
push dword [ebp - 0x10]
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
mov esp, dword [esp]
jmp 0xbc0e53
push edx
mov edx, esp
add edx, 4
push edi
mov edi, 4
sub edx, 0x777d0a19
sub edx, edi
add edx, 0x777d0a19
pop edi
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], edx
push ebp
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [ebp - 0x10]
mov eax, dword [esp]
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0xb6d7eb
push 0x40248ef4
mov dword [esp], edx
mov dword [esp], esi
mov dword [esp], 0x37b15e22
mov dword [esp], ebp
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push edx
mov edx, esp
push esi
mov esi, 4
add edx, esi
pop esi
push ebx
mov ebx, 4
add edx, ebx
pop ebx
xchg dword [esp], edx
pop esp
push dword [esp]
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
add esp, 4
push edi
mov edi, esp
push esi
mov esi, 4
add edi, esi
pop esi
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
mov dword [esp], eax
pop dword [ebp - 0x10]
jmp 0xbb695e
push dword [ebp - 0x14]
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0xbae312