Function at 0x4a97e3
Capabilities:
Accept command line arguments
Check for time delay via gettickcount

Disassembly:
jmp 0x4182ba
les eax, [ecx + eax]
rcl dword [ebx - 0x45], 0xd3
xchg ebp, eax
not dword [ebp + 1]
fstp dword [ebx - 0x7f]
rcr dword [edi - 0xb4082e], 0x34
and al, 0x59
push edi
mov edi, esp
add edi, 4
push ecx
mov ecx, 0x579e9fab
xor ecx, 0x579e9faf
add edi, ecx
pop ecx
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
and edx, eax
jmp 0x4b242e
dec edx
mov ebp, esp
sub al, 0x7b
jno 0x4a9865
and byte [esi], dh
and eax, 0x3c5a0022
nop
cmpsd dword [esi], dword es:[edi]
cmpsd dword [esi], dword es:[edi]
xor edi, ecx
je 0x4a979b
sub cl, cl
je 0x4a9806
mov fs, word [ecx]
ror ah, cl
mov esi, 0
mov edi, ebp
out dx, eax
add edi, 0x45
mov edi, dword [edi]
mov ecx, 0x1b15c196
mov eax, ebp
add eax, 0xaa
add edi, 6
mov si, word [edi]
add esi, ebp
mov ecx, 0
mov eax, ebp
add eax, 0x45
mov eax, dword [eax]
add eax, 0xc
mov cx, word [eax]
add ecx, ebp
push dword [esi]
push dword [ecx]
pop dword [esi]
pop dword [ecx]
mov esi, ebp
add esi, 0x45
mov esi, dword [esi]
add esi, 8
movzx eax, word [esi]
add eax, ebp
mov eax, dword [eax]
mov esi, ebp
add ebx, eax
pushfd
xor eax, 0x5e720ab0
jb 0x4a98c5
mov ecx, 0
mov edi, ebp
add esi, 0x45
add edi, 0x45
mov esi, dword [esi]
mov edi, dword [edi]
add edi, 0xa
add esi, 0xe
mov cx, word [edi]
add ecx, ebp
pop ebx
movzx edx, word [esi]
mov esi, ebp
add esi, 0xba
sub edx, dword [esi]
mov esi, ebp
add esi, 0x32
mov edi, ebp
add edi, 0xba
mov eax, ebp
add eax, 0xaa
xor dword [eax], 0x5e720ab0
mov ebx, ebp
add ebx, 0x91
mov al, byte [ebx]
cmp al, 0x64
jbe 0x4a98d2
jbe 0x4a98d2
add edx, 0x339bf28a
mov ebx, ebp
add ebx, 5
add word [ebx], dx
or eax, 0x800
mov esi, ebp
add esi, 5
movzx esi, word [esi]
sub edi, ebx
xor si, 0xd382
add ebx, edi
movzx esi, si
add esi, ebp
mov eax, eax
or edi, eax
neg word [esi]
or edi, esi
mov al, 0x77
mov esi, ebp
add esi, 0x91
mov edi, edi
xor byte [esi], al
mov edi, esi
mov eax, ebp
mov esi, ebp
add eax, 0x6a
mov eax, dword [eax]
and edi, 0x800
add esi, 0x45
mov ecx, 0
sub ecx, edi
mov esi, dword [esi]
or ecx, eax
add esi, 4
and edi, 0x7fffffff
mov ebx, 1
movzx esi, word [esi]
sub edi, 0x20
mov edx, ebp
add edx, 0xba
xor esi, dword [edx]
and ecx, 0x80
sub edi, 0x400
add esi, 0x6edc8661
mov edx, ebp
add edx, 0xba
add dword [edx], esi
xor ebx, 0xffff
and esi, 0xffff
xor edi, 0x20
and ecx, ecx
shl esi, 2
add eax, esi
mov esi, dword [eax]
xor ebx, 0x20
mov edi, ebp
xor ecx, 0x1c
mov ecx, eax
add edi, 0x45
xor ebx, ecx
mov edi, dword [edi]
add edi, 0
mov eax, dword [edi]
mov edi, ebp
sub ecx, ecx
add edi, 0x45
add dword [edi], eax
jmp esi
jmp dword [eax + 0x605ce0]
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x533406
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x54bb98
push dword [ebp - 0x18]
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push ebx
push edx
mov edx, 0xa566115
mov dword [esp + 4], edx
push dword [esp]
pop edx
add esp, 4
mov dword [esp], edx
push edx
mov dword [esp], ecx
mov edx, dword [esp]
push ebx
mov ebx, esp
push ecx
mov ecx, 0x3defb7d8
shl ecx, 6
and ecx, 0x2f9b10b8
shl ecx, 3
shl ecx, 4
sub ecx, 0xc487fffc
add ebx, ecx
pop ecx
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x5051d8
sub esp, 4
mov dword [esp], edi
mov dword [esp], edx
pop dword [0x5fe034]
jmp 0x507ab2
push ebp
mov ebp, 0x7eef3b7c
add ebp, 0x1fde95dc
shl ebp, 7
dec ebp
not ebp
add ebp, 0x66e8bc00
push esi
mov esi, 0x7ffb1bce
dec esi
or esi, 0x7ffb76ed
xor esi, 0xe36bfa
add eax, esi
pop esi
sub eax, 0x2f629434
sub eax, ebp
add eax, 0x2f629434
sub eax, 0x7f181417
pop ebp
jmp 0x543deb
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x4cebd2
jne 0x527a02
jmp 0x4a9cca
push dword [ebp - 0x18]
mov edx, dword [esp]
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0x4f7bad
mov cx, word [eax]
jmp 0x4ba4f4
cmp ecx, dword [ebp - 0x1c]
jmp 0x4ec3ed
push esi
mov esi, esp
sub esp, 4
mov dword [esp], edi
mov edi, 4
add esi, edi
pop edi
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], eax
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
pop eax
push dword [esp]
mov eax, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push 0x401bce11
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edi
mov dword [esp], eax
pop dword [0x603cc8]
jmp 0x4ada0e
push dword [0x601af4]
mov esi, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
sub esp, 4
mov dword [esp], edi
mov dword [esp], 0x544195c7
mov dword [esp], ecx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], esi
push esp
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
pop ebx
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x54f2c1
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], eax
push edx
mov edx, 0x601a30
mov dword [esp + 4], edx
pop edx
jmp 0x4a9cd5
push ecx
mov ecx, 0x5c7bc579
push eax
mov eax, 0xdbe32a5
sub ecx, eax
pop eax
xor ecx, 0x3f5f0dbe
shr ecx, 5
add ecx, 0x65e65f78
mov dword [0x601856], ecx
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push esi
mov esi, esp
add esi, 4
push edx
mov edx, 4
sub esi, edx
pop edx
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
push eax
mov dword [esp], ecx
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebx
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x5603bf
cmp esi, eax
jmp 0x4b6e4b
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ecx
mov dword [esp], ebx
mov dword [esp], eax
push ebx
push edi
mov edi, 0x783f6886
mov dword [esp + 4], edi
pop edi
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebp
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [ebp - 0x18]
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0x55b345
test eax, eax
jmp 0x4ec3e2
call fcn.00417f50
jmp 0x4e8e21
jmp 0x51a4f3
push edx
mov edx, esp
add edx, 4
push esi
push 4
pop esi
sub edx, esi
mov esi, dword [esp]
add esp, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
push 0x709c62c1
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop eax
push edi
push esp
mov edi, dword [esp]
add esp, 4
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
xor edx, edx
jmp 0x51631f
add esp, 4
jmp 0x4d46d7
push edx
push ecx
push eax
mov dword [esp], 0x14a8a342
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], esi
mov dword [esp], eax
mov dword [esp], 0x46e85057
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push eax
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push edx
push 0xa
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push edx
pop dword [ebp - 0x14]
pop edx
push 0x370ae7f0
mov dword [esp], eax
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop ebx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop ebx
push ecx
mov dword [esp], eax
mov eax, esp
push ebp
mov ebp, 4
add eax, ebp
pop ebp
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x4edc59
push dword [ebp - 4]
push dword [esp]
pop ecx
push ebx
mov ebx, esp
push ecx
mov ecx, 0x78cfbca5
shl ecx, 3
inc ecx
or ecx, 0x5feda8fb
xor ecx, 0x4dff720b
add ecx, 0x6dfd6014
add ebx, ecx
pop ecx
add ebx, 4
xchg dword [esp], ebx
pop esp
push ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 0x7ff92d26
push edx
not dword [esp]
pop edx
shr edx, 8
neg edx
not edx
add edx, 0xff7ff933
sub ecx, edx
mov edx, dword [esp]
add esp, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
push ecx
mov dword [esp], edx
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
push edx
push esp
pop edx
push edx
mov dword [esp], esi
mov esi, 4
add edx, esi
pop esi
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x4de020
je 0x51a4f3
jmp 0x4d347d
je 0x4b8c33
jmp 0x4d59ce
push ecx
mov dword [esp], ebx
mov dword [esp], 0x32f2f40a
mov dword [esp], edi
mov edi, 8
mov dword [ebp - 8], edi
mov edi, dword [esp]
add esp, 4
push ebx
mov ebx, esp
push edx
mov edx, 4
add ebx, edx
pop edx
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push eax
mov dword [esp], esi
mov esi, esp
add esi, 4
push edi
mov edi, 0x7f75239b
add edi, 0x808adc69
add esi, edi
pop edi
xchg dword [esp], esi
pop esp
push dword [esp]
pop eax
push edx
mov edx, esp
add edx, 4
push edi
mov edi, 4
add edx, edi
pop edi
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x52a612
push dword [ebp - 0x18]
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
push edx
mov edx, 4
add esi, edx
pop edx
xchg dword [esp], esi
mov esp, dword [esp]
push 0x6118d400
mov dword [esp], eax
push edi
mov edi, 0x3443e26
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], ecx
push eax
mov eax, 0x1bf7f052
add ecx, eax
pop eax
push esi
mov esi, 0x65ffb784
sub ecx, esi
pop esi
sub ecx, 0x6eeffa22
add ecx, eax
add ecx, 0x6eeffa22
add ecx, 0x65ffb784
sub ecx, 0x1bf7f052
push dword [esp]
pop ecx
push edi
push esp
pop edi
add edi, 4
push edx
mov edx, 4
add edi, edx
pop edx
xchg dword [esp], edi
pop esp
jmp 0x504498
push ecx
mov ecx, esp
add ecx, 4
push esi
mov esi, 0x5ffc25b6
and esi, 0x3dff3a76
not esi
not esi
xor esi, 0x1dfc2032
sub ecx, esi
pop esi
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
pop dword [ebp - 0x18]
jmp 0x56039b
push dword [0x603cc8]
mov ecx, dword [esp]
push ecx
mov dword [esp], esi
mov esi, esp
add esi, 4
push ebx
mov ebx, 0x6fd9c763
add ebx, 0x902638a1
add esi, ebx
pop ebx
xchg dword [esp], esi
pop esp
push 0x3e531757
mov dword [esp], ecx
push edx
mov edx, 0x2416e9a5
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], ecx
sub ecx, 0x7ffb12e3
add ecx, 0x1df7a45c
add ecx, 0x6dffd14d
add ecx, eax
sub ecx, 0x6dffd14d
push esi
mov esi, 0x7f4a9120
neg esi
and esi, 0x75ffc837
or esi, 0x777a6f87
or esi, 0x79eb0d96
sub esi, 0x6207cb5b
sub ecx, esi
mov esi, dword [esp]
add esp, 4
add ecx, 0x7ffb12e3
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0x4c4938
cmp dword [0x605ce0], 0x23f0
jmp 0x53cb3d
je 0x50218a
jmp 0x5603e3
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
jmp 0x4c1689
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], esi
mov dword [esp], edi
mov dword [esp], ebx
push edx
push esp
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
push ebx
push 0x3c
pop ebx
add ebx, edx
push edx
mov edx, 0
push ebp
mov ebp, 0x779d3d68
shr ebp, 4
shl ebp, 6
dec ebp
xor ebp, 0xe18b1ea7
sub edx, ebp
pop ebp
add edx, ebx
add edx, 0x3fffebd8
add eax, dword [edx]
pop edx
pop ebx
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebp
mov dword [esp], ecx
push esi
push edx
push 0x2e7b4b56
pop edx
mov esi, edx
pop edx
shl esi, 3
and esi, 0x7e5f51b9
sub esi, 0x6daeae14
or esi, 0x767fac64
and esi, 0x77b7bd0f
xor esi, 0x49e8da04
sub ecx, esi
mov esi, dword [esp]
add esp, 4
add ecx, eax
add ecx, 0x3f5f7608
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x537ac6
push ebp
push ecx
mov ecx, 0x181cb493
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], eax
pop dword [0x603cc0]
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebp
mov dword [esp], edi
mov dword [esp], ebx
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop edx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop edx
push 0x198f613
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x5603ed
sub esp, 4
mov dword [esp], edi
push eax
push 0x601a30
pop eax
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
jmp 0x533978
push dword [ebp - 0x10]
mov eax, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
push ebx
push 0x25268ca9
mov dword [esp], esi
mov dword [esp], esp
add dword [esp], 4
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push esi
push 4
pop esi
sub ecx, 0x7ffc9684
add ecx, esi
add ecx, 0x7ffc9684
pop esi
xchg dword [esp], ecx
pop esp
jmp 0x4b34e2
push dword [ebp - 0x10]
mov ecx, dword [esp]
push 0x50427041
mov dword [esp], ebx
mov ebx, esp
push edx
mov edx, 0x6fa7e5c4
sub edx, 0x6fa7e5c0
add ebx, edx
pop edx
add ebx, 4
xchg dword [esp], ebx
pop esp
push eax
mov dword [esp], edi
mov dword [esp], esi
mov dword [esp], edi
mov dword [esp], eax
push 0x64340f15
mov dword [esp], ebx
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x4f9607
mov dx, word [ecx]
jmp 0x516327
cmp edx, dword [ebp - 0xc]
jmp 0x50217f
push edi
mov edi, esp
push eax
mov eax, 0x5fff7f49
dec eax
not eax
push edx
mov edx, 0xa00080b3
xor eax, edx
pop edx
add edi, eax
pop eax
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edx
push 0x436527f7
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ecx
pop edx
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
push edi
mov edi, 4
add eax, edi
pop edi
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x551bec
cmp dword [ebp - 0x10], 0x1000000
jmp 0x53cb32
lea ecx, [eax + edx + 0x601840]
jmp 0x54e552
push 0xdc96a
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edi
mov dword [esp], edx
mov dword [esp], ebx
push edx
mov dword [esp], 0x27a2e8dd
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
push ebx
mov ebx, 0x4deae248
dec ebx
push ebx
not dword [esp]
pop ebx
xor ebx, 0x75735233
add ebx, 0x56c5ebea
add ebx, 0xe1d3c48f
add esi, ebx
pop ebx
xchg dword [esp], esi
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push edx
mov dword [esp], esi
mov dword [esp], 0x55312e96
mov dword [esp], ecx
mov dword [esp], 0x1999768a
mov dword [esp], ebx
push eax
mov dword [esp], ecx
mov ebx, dword [esp]
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
push ebp
mov ebp, 0x3bfd1526
not ebp
or ebp, 0x65f4a243
inc ebp
sub ebp, 0xe5f6ead8
add ecx, ebp
pop ebp
xchg dword [esp], ecx
pop esp
jmp 0x4fa81a
push edx
push 0x139776fe
mov edx, dword [esp]
add esp, 4
add edx, 0x5cd5f865
push edx
pop dword [0x601852]
mov edx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ecx
push eax
mov dword [esp], ecx
mov ecx, 0x78840aec
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
push ebp
mov ebp, 0x7f79c3f7
sub ecx, ebp
mov ebp, dword [esp]
add esp, 4
add ecx, eax
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x7f79c3f7
add ecx, ebx
pop ebx
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
push esi
mov esi, 4
add ecx, esi
pop esi
xchg dword [esp], ecx
pop esp
jmp 0x4cb613
push 0x5c2bed7b
mov dword [esp], esi
mov dword [esp], edi
mov dword [esp], ebx
push ecx
mov ecx, 0x601a30
mov dword [esp + 4], ecx
pop ecx
push ebx
push esp
mov ebx, dword [esp]
add esp, 4
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
mov dword [esp], edx
push 0x8ef31ed
mov dword [esp], ebp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
push edi
mov edi, esp
push ebx
mov dword [esp], edx
mov edx, 4
add edi, edx
pop edx
push ebx
mov ebx, 4
add edi, ebx
pop ebx
xchg dword [esp], edi
pop esp
jmp 0x520826
push esi
push edi
mov edi, 0x601a30
mov dword [esp + 4], edi
mov edi, dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push ebx
mov dword [esp], edx
mov dword [esp], ebx
mov dword [esp], 0x15245c09
mov dword [esp], edx
push 0x16be2816
mov dword [esp], ecx
push dword [esp]
pop edx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
push edi
mov edi, 4
add eax, 0x7c5fbe0c
add eax, edi
sub eax, 0x7c5fbe0c
mov edi, dword [esp]
add esp, 4
xchg dword [esp], eax
pop esp
jmp 0x5189b9
push eax
mov dword [esp], ecx
mov dword [esp], 0x4bfc1176
mov dword [esp], ecx
mov dword [esp], edi
mov dword [esp], ecx
push esi
mov esi, 0x7b77bb4d
add esi, 0x63ff3106
shl esi, 5
shr esi, 3
dec esi
push ecx
mov ecx, 0x7bf1147a
shl ecx, 2
xor ecx, 0xf0bed190
add esi, ecx
pop ecx
add ecx, esi
mov esi, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add ecx, eax
sub ecx, 0x3d5631c3
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], esi
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [ebp - 0x14]
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push eax
mov eax, esp
add eax, 4
push edx
mov edx, 0x6bf7dbc4
dec edx
or edx, 0x64fd259b
shl edx, 1
xor edx, 0xdfffffb2
sub eax, 0x7dc79f1f
add eax, 0x5677f00f
sub eax, edx
sub eax, 0x5677f00f
add eax, 0x7dc79f1f
pop edx
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
push edi
mov dword [esp], 0x5767994b
mov dword [esp], ecx
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov ebx, dword [esp]
push ebx
mov dword [esp], eax
mov eax, esp
add eax, 4
push 0x4a46d8d8
mov dword [esp], ebp
mov ebp, 4
add eax, ebp
pop ebp
xchg dword [esp], eax
pop esp
jmp 0x51a4ff
push edx
push ebp
mov dword [esp], edi
mov edi, 0x30059a43
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
pop dword [0x601c04]
push ecx
push 0x3af5a84f
mov dword [esp], ebx
push 0x28eceede
pop ebx
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ecx
push edx
mov edx, 0x4b466340
sub ecx, edx
pop edx
sub ecx, 0x57a524e8
add ecx, eax
push eax
mov eax, 0x7f7f6fc6
add eax, 0xd825b522
add ecx, 0x1fffc544
add ecx, eax
sub ecx, 0x1fffc544
pop eax
add ecx, 0x4b466340
mov ecx, dword [esp]
push eax
push esp
pop eax
push esi
mov esi, 0x5fcb2816
and esi, 0x33bf5803
shl esi, 8
xchg esi, ecx
dec ecx
xchg esi, ecx
dec esi
inc esi
sub esi, 0x8b0801fb
add eax, esi
pop esi
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x4a721b
push edx
mov edx, esp
add edx, 4
push eax
mov eax, 4
sub edx, eax
pop eax
xchg dword [esp], edx
pop esp
mov dword [esp], ebp
mov dword [esp], ecx
mov dword [esp], ebx
push eax
mov dword [esp], edx
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
mov ebx, dword [esp]
push ebp
mov ebp, esp
push eax
mov eax, 0x7efc1c01
push ecx
mov ecx, 0x3fff452b
add ecx, 0x6e6d8726
and ecx, 0x3ef73da3
dec ecx
sub ecx, 0xaf67effb
xor eax, ecx
pop ecx
add ebp, eax
pop eax
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
push 0x296a04c2
mov dword [esp], ebp
mov dword [esp], edx
push esi
mov esi, 0x601a30
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], eax
push esp
pop eax
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov ebx, dword [esp]
push ebx
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], esp
add dword [esp], 4
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x4acbad
push ecx
mov dword [esp], esi
mov esi, esp
push ebp
mov ebp, 0x59ff7620
shl ebp, 6
xor ebp, 0x7fdd8804
add esi, ebp
pop ebp
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push dword [esp]
mov edx, dword [esp]
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], esi
mov dword [esp], ecx
push edx
push esi
mov esi, 0x57df895d
and esi, 0x2edf9c02
or esi, 0x7fefa0e6
add esi, 0x5d1b672d
sub esi, 0x8daba07f
mov edx, esi
pop esi
add edx, 0xe0506e58
add ecx, 0x7ff58490
add ecx, edx
push eax
mov eax, 0x7bd3239f
not eax
shl eax, 6
not eax
xor eax, 0x8b3d636f
sub ecx, eax
pop eax
pop edx
add ecx, eax
sub ecx, 0x2fbfddec
push dword [esp]
pop ecx
push esi
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x52a3ad
push ebp
push eax
mov eax, 0x56664c7e
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0x4eb7e5
ja 0x507ab2
jmp 0x4fef6c
jae 0x4cb246
jmp 0x5066a6
push ecx
push ebx
mov ebx, 0x27660c56
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], eax
pop dword [ebp - 0x10]
push edi
mov dword [esp], ecx
push edi
mov edi, 0x2cc34ce6
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
sub ecx, 0x3ef7e92c
add ecx, eax
push edx
mov edx, 0x76fd5a63
xor edx, 0x25ff2be4
push ebp
mov ebp, 0x7f7ff17d
xor ebp, 0x6ff78256
shr ebp, 6
sub ebp, 0xec379971
sub edx, ebp
pop ebp
add ecx, 0x5effa71b
add ecx, edx
push esi
mov esi, 0x5effa71b
sub ecx, esi
pop esi
pop edx
mov ecx, dword [esp]
push edi
push 0x4ecf9fd6
mov dword [esp], esp
add dword [esp], 4
pop edi
add edi, 4
push eax
mov eax, 4
add edi, eax
pop eax
xchg dword [esp], edi
pop esp
jmp 0x50e441
push dword [0x603cc8]
push dword [esp]
pop edx
push ecx
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ebp
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], eax
push ecx
mov dword [esp], 0x7b38a985
mov dword [esp], ebx
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
jmp fcn.004e50d1
push ebx
push 0x50559a6a
mov dword [esp], edi
push 0x3a905f20
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
push esi
push ebp
mov ebp, 0x1cd906d8
or ebp, 0x6be9f15b
shl ebp, 1
xor ebp, 0x7fd107e9
add ebp, 0x7ff7cea7
or ebp, 0x5d7f562d
add ebp, 0x87dd982
mov esi, ebp
pop ebp
shr esi, 5
inc esi
sub esi, 0x77fa9980
sub esi, 0x7bf5adc3
sub esi, 0x7ebf38eb
xor esi, 0xea56c1e0
add ecx, esi
mov esi, dword [esp]
add esp, 4
sub ecx, 0x5bcfae1e
add ecx, eax
add ecx, 0x5bcfae1e
sub ecx, 0x7ad6afb8
push dword [esp]
pop ecx
push ecx
mov ecx, esp
push eax
mov eax, 0x7ffe5b7e
inc eax
shr eax, 1
sub eax, 0x3fff2dbb
add ecx, eax
mov eax, dword [esp]
add esp, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ebx
mov dword [esp], esi
mov dword [esp], ebx
mov dword [esp], eax
mov dword [esp], ecx
jmp 0x567531
push ebp
mov dword [esp], edx
mov edx, 3
add edx, ecx
push eax
mov eax, 0
sub eax, 0x57b5c631
add eax, edx
add eax, 0x57b5c631
xor esi, dword [eax]
mov eax, dword [esp]
add esp, 4
pop edx
push 0x17c6a75e
mov dword [esp], edi
mov dword [esp], ecx
push ecx
mov ecx, 0x2effd2b5
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 0x4cf5749b
add ebp, 0x4efd854b
sub ebp, 0x9bf2f9e2
add ebx, ebp
pop ebp
xchg dword [esp], ebx
mov esp, dword [esp]
push dword [esp]
pop ebx
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0x4b6e40
push dword [ebp - 8]
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
sub esp, 4
mov dword [esp], ebx
push eax
mov eax, 0x1422777c
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], eax
push 0x240dc0d7
mov dword [esp], edx
mov dword [esp], ebx
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop eax
push 0x5ce63358
mov dword [esp], ecx
mov ecx, esp
push eax
mov eax, 4
add ecx, eax
pop eax
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x52b9f4
xor ecx, ecx
push edx
mov edx, esp
push esi
mov esi, 0x7fff424e
shl esi, 2
shl esi, 4
shr esi, 8
xor esi, 0x53eda51b
xor esi, 0x5312758c
sub edx, 0x4abb1b2f
add edx, esi
add edx, 0x4abb1b2f
pop esi
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], esi
mov dword [esp], eax
push 0x21fc21c0
mov dword [esp], ebx
push dword [esp]
pop eax
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x4ba4ec
push dword [ebp - 0x10]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x561591
push eax
mov eax, 0x6c6c642e
push eax
pop dword [0x60185a]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
jmp 0x4ea0bd
jmp 0x51a4f3
jmp 0x4fef6c
push 0x287a0aa4
mov dword [esp], edi
mov dword [esp], ebx
push ebx
mov ebx, 0x500b5a87
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
jmp 0x4d59c4
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push ebx
push edx
mov edx, 0x5f39242e
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
mov dword [esp], 0x76dbadc7
mov dword [esp], ecx
push ebp
mov ebp, 0x7fae64e0
sub ecx, ebp
pop ebp
sub ecx, 0x37fdc9ba
sub ecx, 0x79688951
add ecx, eax
add ecx, 0x79688951
add ecx, 0x37fdc9ba
push ebx
mov ebx, 0x7fae64e0
add ecx, ebx
pop ebx
push dword [esp]
pop ecx
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x531f0d