Function at 0x4f215c
Capabilities:
Accept command line arguments

Disassembly:
push edx
push esp
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
push ebp
mov dword [esp], ecx
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
push dword [esp]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
push dword [0x635b2c]
mov esi, dword [esp]
push edx
push esp
mov edx, dword [esp]
add esp, 4
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x531917
push ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
and al, 0x8b
and al, 0x24
mov dword [esp], eax
push edx
push esi
mov esi, 0x705d1784
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop eax
push 0x3bdc66f4
mov dword [esp], ecx
mov ecx, esp
push edx
mov edx, 4
add ecx, edx
pop edx
add ecx, 4
xchg dword [esp], ecx
pop esp
push 0x51bcc295
mov dword [esp], edx
push edi
mov dword [esp], ecx
mov ecx, 0x635a68
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
push 0x7ef3fa1b
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push esi
mov esi, 4
sub ecx, esi
pop esi
xchg dword [esp], ecx
pop esp
mov dword [esp], esi
mov dword [esp], eax
push edx
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
add esp, 4
jmp 0x4f00f9
shr ecx, 2
push edx
mov edx, esp
add edx, 4
push ecx
mov ecx, 4
sub edx, ecx
mov ecx, dword [esp]
add esp, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push eax
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0x56f526
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov dword [esp], ebp
mov dword [esp], edi
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
mov edx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
pop dword [esp]
pop esp
push dword [0x638d18]
mov ecx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push ebx
mov ebx, esp
push eax
mov eax, 0x69ce43d7
shl eax, 8
or eax, 0x5d7feb8f
add eax, 0x20800075
add ebx, eax
pop eax
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edi
mov dword [esp], esi
mov dword [esp], ebx
push ebx
mov ebx, esp
push ecx
mov ecx, 0x3fff2564
sub ecx, 0x3fff2560
add ebx, ecx
pop ecx
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ecx
pop ebx
mov ebx, dword [esp]
push 0x2c7385e0
mov dword [esp], ebx
mov ebx, esp
push esi
mov esi, 4
add ebx, esi
pop esi
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
jmp 0x57a896
add byte [eax], al
push eax
mov eax, 0x7f7fd660
inc eax
push ecx
mov ecx, 0x7f7f35cd
add eax, ecx
pop ecx
add eax, 0x100f3d6
add ecx, eax
pop eax
xchg dword [esp], ecx
pop esp
jmp 0x4f9a5f
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x4a64ee
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x4b2e50
jne 0x538e94
jmp 0x4a7440
jmp dword [eax + 0x63bd30]
push dword [0x632034]
push dword [esp]
push dword [esp]
pop edx
add esp, 4
add esp, 4
jmp 0x4c7904
push ecx
push edx
push 0x635a68
pop edx
mov dword [esp + 4], edx
push dword [esp]
pop edx
add esp, 4
jmp 0x53ae26
jmp 0x4f7b5e
jmp 0x4f7b5e
push ebx
mov ebx, 0x2ffd5d56
dec ebx
push ebp
mov ebp, 0x3dfe4381
and ebx, ebp
pop ebp
shl ebx, 5
push edx
mov edx, 0x6cf6ef3e
push ecx
mov ecx, 0xf08e5c7
add edx, ecx
pop ecx
and ebx, edx
pop edx
shr ebx, 3
add ebx, 0x26ff6973
mov dword [0x63588c], ebx
mov ebx, dword [esp]
add esp, 4
push ecx
mov dword [esp], ebp
mov dword [esp], eax
mov dword [esp], edi
mov dword [esp], esi
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov eax, dword [esp]
push edi
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], esp
add dword [esp], 4
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x534c3a
push dword [ebp - 0x10]
push dword [esp]
push dword [esp]
pop edx
add esp, 4
add esp, 4
push 0x3f4af603
mov dword [esp], esi
mov dword [esp], edi
push eax
mov eax, 0x14840e38
mov dword [esp + 4], eax
pop eax
mov dword [esp], eax
push ebx
mov eax, dword [esp]
push esi
push esp
pop esi
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0x4c3451
test eax, eax
jmp 0x4e5cbf
cmp esi, eax
jmp 0x4a7435
mov byte [0x63204d], al
jmp 0x4e636b
call fcn.00417e80
jmp 0x4de0db
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov dword [esp], eax
mov dword [esp], ecx
push eax
push esp
pop eax
push ebx
mov ebx, 4
add eax, ebx
pop ebx
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov dword [esp], edx
push esi
mov dword [esp], ecx
mov edx, dword [esp]
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x554b62
push ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
pop dword [0x638d10]
push esi
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
push dword [esp]
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
add esp, 4
jmp 0x506387
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
sub esp, 4
mov dword [esp], ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push 0x1ecdc85e
mov dword [esp], edx
mov dword [esp], ebx
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push 0xe5946ab
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ecx
mov ecx, esp
push edx
mov edx, 0x74ae3866
dec edx
or edx, 0x5cbdb6a0
neg edx
sub edx, 0x7fdc490d
add edx, 0xfc9c07f6
add ecx, edx
pop edx
sub ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
jmp 0x4b56c5
push edx
push edi
mov edi, 0x3cd3f834
mov dword [esp + 4], edi
pop edi
mov dword [esp], ebx
push ecx
push ebp
mov ebp, 0x45cc2a63
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
mov ebx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
mov dword [esp], ecx
push edi
mov edi, 0x635a68
mov dword [esp + 4], edi
pop edi
jmp 0x545df5
cmp dword [0x63bd30], 0x23f0
jmp 0x4f00ee
sub esp, 4
mov dword [esp], ebx
mov dword [esp], edi
mov dword [esp], ebp
mov dword [esp], ecx
push eax
mov eax, 0x2fda189
xor eax, 0x2fb6b673
shl eax, 8
not eax
add eax, 0x79d16387
add ecx, eax
mov eax, dword [esp]
add esp, 4
add ecx, 0x5efb0570
add ecx, eax
sub ecx, 0x5efb0570
push ebx
mov ebx, 0x2eb96986
sub ecx, ebx
pop ebx
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
and edx, eax
jmp 0x532603
mov cx, word [eax]
jmp 0x4ccde1
cmp ecx, dword [ebp - 0x1c]
jmp 0x506cef
push dword [0x632038]
push dword [esp]
mov ecx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
push ecx
push esp
pop ecx
add ecx, 4
push edx
mov edx, 4
sub ecx, edx
pop edx
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], ecx
add ecx, 0x7dfffde8
add ecx, 0x3fd39b4c
add ecx, eax
sub ecx, 0x3fd39b4c
sub esp, 4
mov dword [esp], esi
mov esi, 0x4fdd0ef8
or esi, 0x7fbfdd8f
not esi
inc esi
xor esi, 0xfdffdde9
sub ecx, esi
pop esi
mov ecx, dword [esp]
push edi
mov edi, esp
add edi, 4
push ebp
mov ebp, 0x5eccd7d1
xor ebp, 0x7fbf6631
inc ebp
push ecx
mov ecx, 0
sub ecx, ebp
mov ebp, ecx
pop ecx
not ebp
add ebp, 0xde8c4e24
add edi, ebp
pop ebp
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
jmp 0x4d9b6b
push ecx
mov ecx, 0x1000
push edx
mov edx, 0x6e3e4b9a
shr edx, 5
push ebp
mov ebp, 0x7bf9c574
not ebp
and ebp, 0x4f9e5e16
inc ebp
sub ebp, 0x7ff76063
xor ebp, 0x7ff0b8b1
add ebp, 0x6501da21
sub edx, ebp
pop ebp
xor edx, 0x7eeba576
xor edx, 0x934e5d16
sub eax, 0x7fbfb0f4
add eax, edx
add eax, 0x7fbfb0f4
pop edx
sub eax, ecx
sub eax, 0x4fd7ef4a
pop ecx
sub esp, 4
mov dword [esp], edi
push ebp
mov ebp, 0x389a3827
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
pop eax
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov eax, dword [esp]
push eax
push esp
pop eax
add eax, 4
push ebp
mov ebp, 4
add eax, ebp
pop ebp
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x51891a
push edi
mov edi, esp
add edi, 4
push ecx
mov dword [esp], eax
mov eax, 4
sub edi, eax
pop eax
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov edx, dword [esp]
push 0x729dc2e2
mov dword [esp], eax
push esp
mov eax, dword [esp]
add esp, 4
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push edx
mov dword [esp], ebx
push edx
mov edx, 3
mov ebx, edx
pop edx
sub ebx, 0x1a63b17d
sub ebx, 0x7fecd9b2
add ebx, ecx
add ebx, 0x7fecd9b2
add ebx, 0x1a63b17d
xor esi, dword [ebx]
pop ebx
jmp 0x4a742a
xor ecx, ecx
push 0x5aeb11d3
mov dword [esp], ebx
push ebp
mov ebp, 0x64997ff8
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
mov dword [esp], ebx
push esi
mov dword [esp], ecx
mov ebx, dword [esp]
push ebx
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0x4ccdd9
push dword [ebp - 0x18]
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
jmp 0x5168a8
push 0xfad0ff9
mov dword [esp], eax
push edx
mov edx, 0x166240dd
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], eax
push eax
mov eax, esp
add eax, 4
push ebx
mov ebx, 0x7ffb4e8c
shl ebx, 8
or ebx, 0x5cdd1f91
shr ebx, 4
neg ebx
inc ebx
sub ebx, 0xf0020604
sub eax, ebx
pop ebx
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ebx
pop eax
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push ebp
push 4
pop ebp
add ebx, ebp
pop ebp
xchg dword [esp], ebx
mov esp, dword [esp]
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], esi
mov dword [esp], edi
mov dword [esp], ecx
pop dword [ebp - 0x18]
push ebp
sub esp, 4
mov dword [esp], ecx
push 0x533ed120
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
push 0x54ebece8
mov dword [esp], edi
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
sub esp, 4
mov dword [esp], ebp
mov ebp, 4
sub edx, 0x6af7665b
add edx, ebp
add edx, 0x6af7665b
pop ebp
xchg dword [esp], edx
pop esp
jmp 0x4ae1f5
push dword [0x638d18]
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push ecx
mov ecx, 4
add ebp, 0x12dca0c7
add ebp, ecx
sub ebp, 0x12dca0c7
pop ecx
xchg dword [esp], ebp
pop esp
push ebp
mov ebp, esp
add ebp, 4
push esi
mov esi, 0x77efdc5a
add esi, 0x72eb4e56
sub esi, 0x5d37157d
dec esi
shl esi, 2
xor esi, 0x369054cc
sub ebp, esi
pop esi
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], esi
mov dword [esp], eax
push eax
mov dword [esp], ebx
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 4
add ebx, edx
pop edx
xchg dword [esp], ebx
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 4
add ecx, edx
pop edx
xchg dword [esp], ecx
pop esp
jmp 0x4a2fdc
push ebp
mov ebp, 7
or ecx, ebp
push dword [esp]
mov ebp, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x537e91
mov byte [0x635892], al
push edx
mov dword [esp], 0x2b43d09b
mov dword [esp], edx
mov dword [esp], ebp
mov dword [esp], edi
mov dword [esp], ebx
push 0xdc8a0b9
mov dword [esp], ecx
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov ebx, dword [esp]
push edx
mov edx, esp
push ebx
mov ebx, 4
sub edx, 0x6fbeaa91
add edx, ebx
add edx, 0x6fbeaa91
pop ebx
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x4f2245
push edi
mov dword [esp], ebx
mov dword [esp], 0x766081d8
mov dword [esp], ebx
mov dword [esp], ecx
sub ecx, 0x77fd70ea
sub ecx, 0x7cef5736
add ecx, eax
add ecx, 0x7cef5736
push ebp
push edi
mov dword [esp], 0x77fd70ea
pop ebp
add ecx, ebp
pop ebp
push dword [esp]
pop ecx
push eax
mov eax, esp
push edi
mov edi, 0x77f19cbf
shr edi, 6
shr edi, 4
sub edi, 0x1dfc63
add eax, edi
pop edi
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
sub esp, 4
mov dword [esp], edi
mov dword [esp], 0x3e6833bd
mov dword [esp], ecx
pop dword [ebp - 0x10]
push ecx
mov ecx, esp
add ecx, 4
push ebx
mov ebx, 4
sub ecx, ebx
pop ebx
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
mov dword [esp], eax
push esi
mov dword [esp], ebx
mov eax, dword [esp]
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
push ecx
push 4
pop ecx
add ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
jmp 0x5382d1
add esp, 4
jmp 0x4b2e49
push 0x1c10b0a4
mov dword [esp], ebx
push 0x51ff3900
pop ebx
add edx, ebx
pop ebx
add edx, 0x7fce0b99
sub edx, ecx
sub edx, 0x7fce0b99
sub edx, 0x51ff3900
push edi
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], esi
mov dword [esp], ecx
add ecx, 0x77efc1f4
add ecx, eax
push 0x2e5a99fb
mov dword [esp], esi
mov esi, 0x7cbbe414
inc esi
push 0
sub dword [esp], esi
mov esi, dword [esp]
add esp, 4
inc esi
neg esi
and esi, 0x7fe750cf
add esi, 0xfb4c81f0
sub ecx, esi
pop esi
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push edi
mov edi, esp
push eax
mov eax, 4
add edi, eax
pop eax
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x50f706
push 0x4a0ad19
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edi
mov dword [esp], 0x1d86ef82
mov dword [esp], edx
push 0x5c0967aa
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
mov edx, dword [esp]
push ebx
mov ebx, esp
push edx
push 4
pop edx
add ebx, edx
pop edx
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push dword [ebp - 0x10]
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push edi
mov edi, esp
add edi, 4
push edx
mov edx, 4
sub edi, edx
pop edx
xchg dword [esp], edi
pop esp
mov dword [esp], edi
mov dword [esp], edx
mov dword [esp], eax
push ebx
push dword [esp]
push dword [esp]
pop eax
add esp, 4
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0x4d19bb
push edx
push ebp
push 0x3d81976a
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edi
mov dword [esp], ebx
push 0x1ca2e26c
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], eax
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push 0x9c339ba
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
push ebx
push 0x2d745a7e
mov dword [esp], ebp
mov dword [esp], 8
pop ebx
push ebx
pop dword [ebp - 8]
pop ebx
jmp 0x4a79bc
and al, byte [0x63204a]
jmp 0x4b56bb
je 0x4f7b5e
jmp 0x5001be
push dword [0x632034]
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
add esp, 4
jmp 0x4a37b0
push edx
push esp
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
mov dword [esp], edi
mov dword [esp], eax
push ebx
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [esp]
pop eax
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push dword [ebp - 0x10]
mov ecx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
jmp 0x4d6d5b
push ecx
push esp
pop ecx
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], eax
push 0x248b8abf
mov dword [esp], ebx
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
mov edi, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
pop dword [esp]
pop esp
push ebx
push esi
push ecx
mov ecx, 0x3c
mov dword [esp + 4], ecx
pop ecx
mov ebx, dword [esp]
add esp, 4
add ebx, edx
add eax, dword [ebx]
pop ebx
push 0x2885c447
mov dword [esp], ebx
mov dword [esp], 0x46f38349
mov dword [esp], esi
mov dword [esp], ebx
mov dword [esp], ecx
push ebp
mov dword [esp], edi
mov edi, 0x5fdedf2f
shl edi, 5
sub edi, 0x7eff2c91
neg edi
add edi, 0x5efb7635
xor edi, 0x9da22dab
add ecx, edi
push dword [esp]
pop edi
add esp, 4
add ecx, eax
sub ecx, 0x7fbc914d
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
push eax
mov eax, 4
add ecx, eax
pop eax
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x4f34e5
push edx
push eax
mov dword [esp], 0x7e2de2a1
pop edx
push eax
mov eax, 0xf66e350
sub edx, eax
pop eax
xor edx, 0x16b68f30
push edx
pop dword [0x635888]
pop edx
jmp 0x4ac91f
jae 0x569182
jmp 0x4a30c7
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x50ec90
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0x4c355a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x566cc9
push edi
push edi
mov edi, 0x6469027
mov dword [esp + 4], edi
mov edi, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ecx
mov dword [esp], esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov edx, dword [esp]
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
mov al, byte [0x63204d]
jmp 0x4e5cb4
push dword [ebp - 0x10]
push dword [esp]
pop ecx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x4f1fd7
push 0x2779969a
mov dword [esp], edi
mov dword [esp], ebx
mov ebx, 0xffff0000
and ecx, ebx
push dword [esp]
pop ebx
add esp, 4
jmp 0x4dd444
push eax
mov eax, 0x1000
add edx, eax
push dword [esp]
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
push dword [esp]
pop ebx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add esp, 4
jmp 0x51a7c5
push 0x20aa5b77
mov dword [esp], ecx
push ebp
push 0x635a68
pop ebp
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
push esi
push edi
push edi
mov dword [esp], 0x206c384f
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
push edx
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
add esp, 4
jmp 0x5187e8
sub esp, 4
mov dword [esp], ecx
push ebp
mov ebp, 0x2cb8a9f9
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], eax
push 0x4facc311
mov dword [esp], edx
mov dword [esp], ebx
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov eax, dword [esp]
push eax
mov eax, esp
push edi
push 0x607fd73e
pop edi
inc edi
shr edi, 7
xor edi, 0xc0ffaa
add eax, edi
pop edi
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
push eax
push esp
mov eax, dword [esp]
add esp, 4
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], eax
pop dword [ebp - 4]
push ebp
mov ebp, esp
push edi
mov edi, 4
add ebp, edi
pop edi
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edi
mov dword [esp], eax
mov dword [esp], ecx
push edx
mov edx, 0x3b74b764
sub ecx, edx
pop edx
push edx
mov edx, 0x5ddfa62f
or edx, 0x3f37aae8
neg edx
shl edx, 6
inc edx
push edi
mov edi, 0x80b821f3
sub edx, edi
pop edi
add ecx, edx
pop edx
add ecx, eax
sub ecx, 0x7f5c224e
add ecx, 0x3b74b764
push dword [esp]
pop ecx
push edi
mov edi, esp
push esi
mov esi, 4
add edi, esi
pop esi
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
jmp 0x553c77
jne 0x4ee1df
jmp 0x4f63b6
jmp dword [eax + 0x63bd30]
jmp 0x4181ea
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
jmp 0x545ec9
ja 0x4e2a01
jmp 0x4c44d2
cmp dword [ebp - 0x10], 0x1000000
jmp 0x4f661c
push 0x615b78b6
mov dword [esp], edx
mov dword [esp], 0x7590e1b3
mov dword [esp], edx
mov dword [esp], eax
pop dword [ebp - 0x10]
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
push esi
push ebx
mov ebx, 4
mov esi, ebx
pop ebx
sub edx, esi
pop esi
xchg dword [esp], edx
pop esp
mov dword [esp], edx
push ecx
mov dword [esp], 0x1d7db2fd
mov dword [esp], esi
mov dword [esp], eax
mov dword [esp], ecx
pop edx
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
push esi
mov esi, 4
add edi, esi
pop esi
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0x4f1fb9
push eax
mov dword [esp], 0x5ad8ea0f
mov dword [esp], eax
pop dword [0x635c54]
jmp 0x4f65fb
push dword [ebp - 0x14]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x51a071
sub esp, 4
mov dword [esp], edi
push esi
push 0x635888
mov esi, dword [esp]
add esp, 4
mov dword [esp + 4], esi
pop esi
jmp fcn.0052c093
push ebp
mov ebp, 0x7d5dace0
or ebp, 0x37fe0ab3
push esi
push eax
mov eax, 0x177b2483
xor eax, 0x67d39bb6
shr eax, 8
xor eax, 0x7ebf8e9d
push edi
mov edi, 0x27eea411
and edi, 0x5dff7345
and edi, 0x7f7ddf5a
sub edi, 0x8aecfd18
and eax, edi
pop edi
add eax, 0x5b07e58
mov esi, eax
pop eax
and ebp, esi
pop esi
xor ebp, 0x168af403
push ebp
pop dword [0x63588e]
pop ebp
push ebp
sub esp, 4
mov dword [esp], esi
push 0x376475d0
pop esi
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
push eax
mov eax, 0x77ff9d7f
sub ecx, eax
pop eax
push eax
mov eax, 0x7f5fd58d
add ecx, 0x7feff64e
sub ecx, eax
sub ecx, 0x7feff64e
pop eax
add ecx, eax
add ecx, 0x7f5fd58d
add ecx, 0x77ff9d7f
mov ecx, dword [esp]
push 0x1ea8f9ed
mov dword [esp], edx
push esp
pop edx
add edx, 4
push eax
mov eax, 4
add edx, eax
pop eax
xchg dword [esp], edx
pop esp
jmp 0x5076cc
push dword [ebp - 0x18]
push dword [esp]
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
jmp 0x4d3e76
sub esp, 4
mov dword [esp], edi
mov edi, 0xa
mov dword [ebp - 0x14], edi
push dword [esp]
mov edi, dword [esp]
add esp, 4
add esp, 4
jmp 0x4e45df
mov dx, word [ecx]
jmp 0x505e7c
cmp edx, dword [ebp - 0xc]
jmp 0x506cfa
jmp 0x4c44d2
mov al, byte [0x632043]
push 0x236be3a5
mov dword [esp], ebp
push edx
push 0x4c701c8a
pop edx
mov dword [esp + 4], edx
pop edx
mov dword [esp], edx
push eax
sub esp, 4
mov dword [esp], eax
mov eax, 0x16ae6756
mov dword [esp + 4], eax
pop eax
mov dword [esp], ecx
pop edx
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
push esi
mov esi, 4
add ecx, esi
pop esi
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x4cf553
push esi
mov esi, esp
push edi
mov edi, 0x7dbf9b20
and edi, 0x6212db77
add edi, 0x9fed64e4
add esi, edi
pop edi
push edi
mov edi, 4
sub esi, edi
pop edi
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ebp
mov ebp, esp
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
xor eax, eax
push ecx
mov dword [esp], esi
push esp
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ebx
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0x506ac5
je 0x4d6d0e
jmp 0x4ab3b1
je 0x4f6611
jmp 0x4ab3bb
push edi
mov edi, esp
push ebx
mov ebx, 0x5a5c8147
sub ebx, 1
shr ebx, 8
dec ebx
or ebx, 0x3f7f3fd9
xor ebx, 0x3f7f7fdd
add edi, ebx
pop ebx
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
mov dword [esp], ecx
push esi
mov esi, 0x6b58d24e
sub ecx, esi
mov esi, dword [esp]
add esp, 4
add ecx, 0x7fabbcbd
add ecx, eax
sub ecx, 0x7fabbcbd
push esi
mov esi, 0x57fb3a85
dec esi
sub esi, 0x6de76d51
or esi, 0x7fef2117
dec esi
sub esi, 0x3ffb02d5
add esi, 0xab53e7ed
add ecx, esi
pop esi
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push ecx
push edx
push esi
mov esi, 0x6c6c642e
mov dword [esp + 4], esi
pop esi
pop ecx
push ecx
pop dword [0x635892]
pop ecx
push eax
push esi
mov esi, 0x345fffe9
mov dword [esp + 4], esi
pop esi
mov dword [esp], edi
mov dword [esp], eax
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edi
mov dword [esp], 0x32df997f
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push 0x3affbca6
mov dword [esp], ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
jmp 0x5001e3
push eax
push eax
mov eax, 0x13854f4
mov dword [esp + 4], eax
pop eax
mov dword [esp], esi
mov dword [esp], edx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop ebx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
mov ebx, dword [esp]
push edx
push esp
pop edx
add edx, 4
push ebx
mov ebx, 4
sub edx, 0x69af8efa
add edx, ebx
add edx, 0x69af8efa
pop ebx
xchg dword [esp], edx
pop esp
push dword [ebp - 8]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x4fef53
push edi
mov edi, esp
push eax
mov eax, 4
add edi, eax
pop eax
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebp
mov dword [esp], 0x19cc3fd8
mov dword [esp], ebx
push eax
mov dword [esp], ecx
push edi
mov edi, 0x622d3a5b
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push ecx
mov dword [esp], ebx
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push 0x5accbf5
mov dword [esp], edx
push edx
mov edx, 0x635a68
mov dword [esp + 4], edx
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push edx
push esp
pop edx
push esi
mov esi, 0x4dfa95e7
neg esi
sub esi, 0x5d9da6cb
neg esi
shr esi, 5
neg esi
sub esi, 0xfaa33e17
add edx, esi
pop esi
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ebx
push eax
mov dword [esp], 0x3fd5a429
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
pop ebx
push esi
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x4a741f
push ecx
push ebx
mov dword [esp], edx
mov edx, 0x533fb5ec
mov dword [esp + 4], edx
pop edx
mov dword [esp], edx
pop dword [0x632030]
push 0x253e7e63
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
sub ecx, 0x3ffdaaf2
push edi
push 0x7df7e50a
pop edi
add ecx, edi
pop edi
sub ecx, 0x73ff04a5
add ecx, eax
add ecx, 0x73ff04a5
sub ecx, 0x7df7e50a
add ecx, 0x3ffdaaf2
push dword [esp]
pop ecx
push edx
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0x506c41
sub esp, 4
mov dword [esp], eax
push eax
mov eax, 0x69296597
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebx
mov dword [esp], edx
sub esp, 4
mov dword [esp], esi
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [ebp - 0x18]
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
sub esp, 4
mov dword [esp], eax
push ebp
mov ebp, 0x278865e6
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ecx
mov dword [esp], ebx
push ebx
mov dword [esp], 0x391629de
mov dword [esp], ecx
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov ebx, dword [esp]
push edx
mov edx, esp
push ecx
mov ecx, 4
add edx, 0x67facea0
add edx, ecx
sub edx, 0x67facea0
pop ecx
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
jmp 0x4bb07e
push 0x33d292cd
mov dword [esp], ebx
push ecx
mov ecx, 0x5a6ae364
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
mov dword [esp], edx
push eax
mov dword [esp], ecx
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
xchg dword [esp], ecx
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
push edx
mov edx, 0x7ff78182
not edx
xor edx, 0x80087e79
add ebx, edx
pop edx
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [ebp - 0x18]
mov eax, dword [esp]
push eax
mov eax, esp
push edx
mov edx, 0x3fbb7b34
shr edx, 7
xor edx, 0x7f76f2
add eax, edx
pop edx
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x4ed82a
push eax
push esp
pop eax
push ecx
mov ecx, 4
add eax, ecx
pop ecx
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], edx
push ecx
push dword [esp]
push dword [esp]
pop edx
add esp, 4
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebx
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push edx
mov edx, esp
add edx, 4
push eax
mov eax, 0x5ef8df84
and eax, 0x77ffffd8
xor eax, 0x56f8df84
sub edx, eax
pop eax
xchg dword [esp], edx
pop esp
mov dword [esp], esi
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ecx
mov dword [esp], edx
mov edx, esp
add edx, 4
push edi
mov edi, 4
add edx, edi
pop edi
xchg dword [esp], edx
pop esp
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
push edx
mov edx, 4
add eax, edx
pop edx
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x4fef75
push eax
mov eax, esp
add eax, 4
push ebp
mov ebp, 0x4beec3c2
shl ebp, 5
neg ebp
dec ebp
xor ebp, 0x822787bb
sub eax, ebp
pop ebp
xchg dword [esp], eax
pop esp
mov dword [esp], ebp
mov dword [esp], eax
pop dword [ebp - 0x10]
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], eax
mov dword [esp], ebx
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop ebx
push ecx
mov ecx, esp
add ecx, 4
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
jmp 0x4e63f1
push edx
mov edx, esp
push edi
mov edi, 0x57fad1d1
xor edi, 0x57fad1d5
add edx, edi
pop edi
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
mov dword [esp], 0x190d7158
mov dword [esp], eax
sub esp, 4
mov dword [esp], edx
push ebx
mov ebx, 0x61dabd0f
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebx
pop eax
push dword [esp]
push dword [esp]
pop eax
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
lea ecx, [eax + edx + 0x635878]
jmp 0x4b738a
push ebp
mov dword [esp], 0x4014a232
mov dword [esp], esi
mov dword [esp], edx
pop dword [ebp - 0x10]
push edx
mov dword [esp], 0x3dbd5d79
mov dword [esp], ebx
mov dword [esp], ecx
mov dword [esp], edx
mov dword [esp], ecx
add ecx, 0x5ffe2a51
add ecx, eax
push ebx
mov dword [esp], edi
push eax
mov eax, 0x5ffe2a51
mov edi, eax
pop eax
add ecx, 0x7d1b1a14
sub ecx, edi
sub ecx, 0x7d1b1a14
pop edi
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x4f1f23
push 0x6b0f185b
mov dword [esp], edx
mov edx, esp
push ecx
mov ecx, 4
add edx, ecx
pop ecx
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ecx
push edi
mov edi, 0x7efc36bb
sub ecx, edi
mov edi, dword [esp]
add esp, 4
add ecx, eax
push eax
mov eax, 0x7b5f9f28
add eax, 0x2f5f63e2
push edx
mov edx, 0x2bc2cc4f
sub eax, edx
pop edx
add ecx, eax
pop eax
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push ebx
mov ebx, 5
add ebx, edx
push eax
mov eax, 0
add eax, 0x79ff0e44
add eax, ebx
sub eax, 0x79ff0e44
xor esi, dword [eax]
pop eax
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push edx
push esi
mov dword [esp], edi
mov edi, 0x775c938a
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], ecx
sub ecx, 0x76f74249
sub ecx, 0x7ff72a4b
add ecx, 0x78fc10a3
add ecx, eax
sub ecx, 0x78fc10a3
push esi
mov esi, 0x7ff72a4b
add ecx, esi
pop esi
push eax
mov eax, 0x7bfd3f06
and eax, 0x65e7d841
add eax, 0x77bfcb46
shl eax, 3
xor eax, 0xbbd05879
add ecx, eax
pop eax
push dword [esp]
mov ecx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x4f1567
push ebp
mov dword [esp], eax
mov dword [esp], 0x47d57abd
mov dword [esp], ecx
mov dword [esp], 0x217f702b
mov dword [esp], ebx
push eax
mov dword [esp], ecx
mov ebx, dword [esp]
push ebp
mov ebp, esp
push eax
mov eax, 4
add ebp, eax
pop eax
add ebp, 4
xchg dword [esp], ebp
pop esp
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
push esi
mov esi, 4
add eax, esi
pop esi
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
push ebx
sub esp, 4
mov dword [esp], edi
mov edi, 0x7b08876f
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
pop dword [0x632034]
jmp 0x4e2a01
push esi
mov si, 0xf156
push edi
mov di, 0x24e1
and di, 0xad09
push bx
mov bx, 1
sub di, bx
pop bx
add di, 0xa494
xor di, 0x5acf
and si, di
pop edi
push cx
mov cx, 0xdc12
add si, cx
pop cx
mov word [0x635890], si
pop esi
push eax
push esp
pop eax
push 0x41cc2ffa
mov dword [esp], esi
mov esi, 0x6df32b83
sub esi, 0x1f97a342
shr esi, 3
shr esi, 8
add esi, 0xfff63493
add eax, esi
pop esi
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
sub esp, 4
mov dword [esp], edx
mov edx, 4
add ecx, edx
pop edx
xchg dword [esp], ecx
pop esp
jmp 0x54f44b
push ebx
mov ebx, esp
push ecx
mov ecx, 0x4f0f343a
xor ecx, 0x4f0f343e
add ebx, ecx
pop ecx
push ebp
mov ebp, 4
sub ebx, ebp
pop ebp
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], ecx
sub esp, 4
mov dword [esp], esi
mov dword [esp], ebp
mov ebp, 0x7bdb0ab8
add ecx, ebp
pop ebp
add ecx, 0x5f6ef627
add ecx, eax
sub ecx, 0x5f6ef627
sub ecx, 0x7bdb0ab8
push dword [esp]
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
imul eax, ecx
jmp 0x4a79a1
push dword [ebp - 0x10]
mov edx, dword [esp]
push eax
mov eax, esp
push ebx
mov ebx, 4
add eax, ebx
pop ebx
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x4f214e
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
push ebp
mov ebp, 4
sub eax, ebp
pop ebp
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], eax
push ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop eax
push ecx
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push eax
mov dword [esp], 0x61df75f3
mov dword [esp], esi
push 0x706d6f63
pop esi
mov dword [0x63588a], esi
mov esi, dword [esp]
add esp, 4
push ebp
push esp
pop ebp
add ebp, 4
push ecx
mov ecx, 0x7fdb8498
and ecx, 0x3e5ecaad
inc ecx
inc ecx
or ecx, 0x6cd50e1c
or ecx, 0x5fa75589
sub ecx, 0x7fffdf9b
sub ebp, ecx
pop ecx
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push edx
mov edx, esp
push eax
mov eax, 4
add edx, eax
pop eax
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
add esp, 4
jmp 0x4fefd5
push ecx
mov dword [esp], 0x1deb1c3a
mov dword [esp], esi
push ecx
mov ecx, 0x4bd4767b
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push edi
mov edi, esp
add edi, 4
push ecx
mov ecx, 4
add edi, ecx
pop ecx
xchg dword [esp], edi
mov esp, dword [esp]
push dword [esp]
pop ebx
push edi
mov edi, esp
add edi, 4
push ebp
mov ebp, 4
add edi, ebp
pop ebp
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x50c6c7
push eax
push esi
mov dword [esp], 0x563f5712
mov dword [esp], edi
mov edi, 0x1f1901db
mov dword [esp + 4], edi
pop edi
mov dword [esp], ecx
push ebp
mov ebp, 0x51df95c0
add ecx, ebp
mov ebp, dword [esp]
push eax
mov eax, esp
add eax, 4
push ebp
mov ebp, 0x59aae5b9
not ebp
add ebp, 0x59aae5be
add eax, ebp
pop ebp
xchg dword [esp], eax
pop esp
add ecx, eax
sub ecx, 0x51df95c0
push dword [esp]
pop ecx
push edi
mov edi, esp
push ebx
mov ebx, 4
add edi, ebx
pop ebx
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x4d92e7
push esi
mov esi, esp
add esi, 4
push ebp
push 0x77ffa1ec
mov ebp, dword [esp]
add esp, 4
inc ebp
shr ebp, 3
shl ebp, 1
or ebp, 0x7ee71050
and ebp, 0x3f73948f
sub ebp, 0x3f739006
sub esi, ebp
pop ebp
xchg dword [esp], esi
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
pop eax
push eax
mov eax, esp
add eax, 4
push ebp
mov ebp, 4
sub eax, 0x6d7c9a9a
add eax, ebp
add eax, 0x6d7c9a9a
pop ebp
xchg dword [esp], eax
pop esp
push ecx
mov ecx, esp
push eax
mov eax, 0x7ff731bd
sub eax, 0x7ff731b9
add ecx, eax
pop eax
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], eax
pop dword [0x638d18]
jmp 0x515b7b
push ebp
push ecx
push ebp
mov dword [esp], 0x301c510b
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
push 0x6839725e
mov dword [esp], ecx
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov al, byte [0x635891]
push eax
push 0x3df9d1fd
mov dword [esp], esp
add dword [esp], 4
pop eax
add eax, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ecx
sub ecx, 0x15bfad98
sub ecx, 0x7ff7fef9
push eax
push 0xa55ef46
pop eax
sub ecx, eax
pop eax
add ecx, eax
add ecx, 0xa55ef46
add ecx, 0x7ff7fef9
add ecx, 0x15bfad98
mov ecx, dword [esp]
push ebp
mov ebp, esp
push ebx
mov ebx, 4
add ebp, ebx
pop ebx
push eax
push 4
pop eax
add ebp, eax
pop eax
xchg dword [esp], ebp
pop esp
jmp 0x4dadee
push ebx
mov dword [esp], 0x59c1c945
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
push eax
mov eax, 4
add esi, eax
pop eax
xchg dword [esp], esi
pop esp
mov ebx, dword [esp]
push edx
push ecx
mov dword [esp], esp
add dword [esp], 4
pop edx
push edi
mov edi, 0x7fafd3ee
neg edi
xor edi, 0x80502c16
add edx, edi
pop edi
add edx, 4
xchg dword [esp], edx
pop esp
push dword [ebp - 4]
push dword [esp]
pop ecx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0x56178f
push edx
mov edx, esp
add edx, 4
push esi
push 4
pop esi
sub edx, esi
pop esi
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], edx
push ecx
mov ecx, esp
add ecx, 4
push eax
mov eax, 4
sub ecx, eax
pop eax
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ecx
pop edx
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
mov dword [esp], ebx
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push dword [esp]
pop eax
push ebx
mov ebx, esp
push edi
mov edi, 4
add ebx, edi
mov edi, dword [esp]
add esp, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x4fe9ff
push edx
mov dword [esp], 0x62e086c2
mov dword [esp], ebp
push edx
mov edx, 0x15820dae
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
push esi
mov dword [esp], ebx
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
push ebx
mov ebx, 4
add edx, ebx
pop ebx
xchg dword [esp], edx
pop esp
push dword [esp]
pop eax
push ecx
mov ecx, esp
push esi
mov esi, 4
add ecx, esi
pop esi
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
xor edx, edx
push ebx
mov dword [esp], eax
mov dword [esp], 0x771e9e9c
mov dword [esp], eax
mov dword [esp], 0x7fbc8ea7
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x505e74
cmp esi, eax
jmp 0x4f63ab
push edx
push esp
pop edx
add edx, 4
push ecx
mov ecx, 0x2a1eee00
xor ecx, 0x2a1eee04
sub edx, ecx
pop ecx
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ebx
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebp
mov dword [esp], 0x14464cbe
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push edi
push esp
pop edi
push edx
mov edx, 4
add edi, edx
pop edx
add edi, 4
xchg dword [esp], edi
pop esp
sub esp, 4
mov dword [esp], ebp
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x635a68
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
jmp 0x4f155c
sub esp, 4
mov dword [esp], edi
push esp
pop edi
add edi, 4
push ebp
mov ebp, 4
sub edi, ebp
pop ebp
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
push ebx
mov ebx, 0x7aff1e54
xor ebx, 0x45506912
sub ecx, ebx
push dword [esp]
pop ebx
add esp, 4
sub ecx, 0x77b7cc64
add ecx, eax
add ecx, 0x77b7cc64
add ecx, 0x3faf7746
mov ecx, dword [esp]
push eax
mov dword [esp], ecx
mov ecx, esp
push edx
mov edx, 4
add ecx, edx
pop edx
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [0x632030]
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
push esi
mov esi, 0x76fc8f34
sub esi, 0x76fc8f30
add eax, esi
pop esi
xchg dword [esp], eax
pop esp
jmp 0x4e2696
push dword [0x635b2c]
push dword [esp]
push dword [esp]
pop esi
add esp, 4
add esp, 4
push eax
push esp
push dword [esp]
pop eax
add esp, 4
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], eax
push eax
push edi
push 0x412126e4
pop edi
mov dword [esp + 4], edi
pop edi
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push edi
mov edi, esp
push edx
mov edx, 4
add edi, edx
pop edx
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0x4d1f86