Function at 0xbb0913
Capabilities:
Accept command line arguments

Disassembly:
je 0xc71bcd
jmp 0xc1a550
je 0xc53e5e
jmp 0xc0664f
push esi
mov dword [esp], edi
mov dword [esp], 0x7e62ba11
mov dword [esp], esi
mov dword [esp], edx
pop dword [0x64e024]
jmp 0xbbe2fb
push 0x36dd169d
mov dword [esp], edx
mov edx, esp
push edi
mov edi, 4
add edx, edi
pop edi
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], eax
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push esi
mov dword [esp], ebp
push ebx
push ecx
mov dword [esp], 0x64ee48
pop ebx
mov dword [esp + 4], ebx
pop ebx
jmp 0xbb7fa0
and al, 0x55
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
mov esp, dword [esp]
mov ebx, dword [esp]
push edx
push esp
pop edx
push ebp
mov ebp, 0x3f0fc2c8
add ebp, 0xffffffff
shl ebp, 8
not ebp
neg ebp
and ebp, 0x3ffe3b23
xor ebp, 0xfc20305
add edx, ebp
pop ebp
add edx, 4
xchg dword [esp], edx
pop esp
push dword [0x64e020]
mov edx, dword [esp]
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
push 0xda5b795
mov dword [esp], edx
push edx
push ebp
mov ebp, 0x27fe0823
and ebp, 0x7eb5cb6c
xor ebp, 0x6d6f8e1a
mov edx, ebp
pop ebp
mov dword [esp + 4], edx
pop edx
mov dword [esp], edx
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], ecx
pop edx
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xc68ebf
push ecx
mov ecx, esp
add ecx, 4
push edx
push 4
pop edx
sub ecx, edx
pop edx
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ecx
add ecx, 0x3fff4a48
add ecx, 0x7bdb3a9d
add ecx, eax
push esi
mov esi, 0x7bdb3a9d
sub ecx, esi
pop esi
sub esp, 4
mov dword [esp], esi
mov esi, 0x3fff4a48
sub ecx, esi
pop esi
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
push ebx
mov ebx, 4
add edx, ebx
pop ebx
xchg dword [esp], edx
pop esp
push dword [0x64ef0c]
push dword [esp]
pop esi
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push esi
mov dword [esp], 0x4fac2737
mov dword [esp], eax
push ebx
mov ebx, 0x7a348423
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
push ecx
push dword [esp]
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
push dword [esp]
pop edx
push 0x200620b4
mov dword [esp], edi
mov edi, esp
add edi, 4
push edx
mov edx, 4
add edi, edx
pop edx
xchg dword [esp], edi
pop esp
jmp 0xbc2648
push ebx
mov ebx, esp
push edx
mov edx, 4
add ebx, edx
pop edx
sub ebx, 4
push ebx
push dword [esp + 4]
mov ebx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], ebx
push esi
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push 0xde966f4
mov dword [esp], ecx
mov ecx, esp
push ebx
mov ebx, 0x7d6f743e
xor ebx, 0x7d6f743a
add ecx, ebx
pop ebx
add ecx, 4
xchg dword [esp], ecx
pop esp
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0xc18eb9
push ebx
sub esp, 4
mov dword [esp], eax
mov eax, 0x2c436237
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebp
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ebx
mov dword [esp], eax
mov eax, esp
push ecx
mov ecx, 4
add eax, ecx
pop ecx
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop edx
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
push edx
mov edx, esp
add edx, 4
push eax
push ebp
mov ebp, 0x7ffaaa3c
inc ebp
sub ebp, 0x3febaf0d
and ebp, 0x67fdbb24
neg ebp
add ebp, 0x400cbb24
mov eax, ebp
pop ebp
sub edx, eax
pop eax
xchg dword [esp], edx
pop esp
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0xc4872b
push edx
sub esp, 4
mov dword [esp], ebp
push ebp
mov dword [esp], 0x64ee48
pop ebp
mov dword [esp + 4], ebp
pop ebp
push ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 4
sub ebx, ebp
pop ebp
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
push eax
mov dword [esp], 0x37f749c4
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push dword [esp]
pop edx
push ebx
push esp
pop ebx
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0xc3689d
sub esp, 4
mov dword [esp], eax
mov dword [esp], 0x3f3c5de5
mov dword [esp], edx
mov dword [esp], 0x53391a2a
mov dword [esp], ecx
push eax
mov eax, 0x3b4b2592
add ecx, eax
mov eax, dword [esp]
add esp, 4
add ecx, eax
push edi
mov edi, 0x3b4b2592
sub ecx, edi
mov edi, dword [esp]
add esp, 4
push dword [esp]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
push dword [0x64e028]
mov ecx, dword [esp]
push edx
push esp
pop edx
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
push edx
push ecx
push 0x47942d46
pop ecx
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ecx
mov dword [esp], eax
push 0x650919cf
mov dword [esp], ebx
mov eax, dword [esp]
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
add esp, 4
jmp 0xc5f17d
push dword [ebp - 0x10]
push dword [esp]
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
jmp 0xbc0289
push ebp
push eax
mov dword [esp], 0x1000
pop ebp
sub eax, 0x3fde5e54
sub eax, ebp
push edx
mov edx, 0x3fde5e54
add eax, edx
pop edx
pop ebp
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], edx
push 0x613efb6b
mov dword [esp], edi
mov dword [esp], 0x2cc2aef3
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
push ecx
push esp
pop ecx
push eax
mov eax, 4
add ecx, eax
pop eax
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
jmp 0xbc5326
push ecx
mov dword [esp], edi
mov dword [esp], 0x98c92df
mov dword [esp], esi
mov dword [esp], ecx
sub esp, 4
mov dword [esp], esi
push 0x71fbd63f
pop esi
inc esi
push ebp
mov ebp, 0x1be8e139
sub esi, ebp
pop ebp
add esi, 0x294c1364
sub ecx, esi
pop esi
add ecx, eax
add ecx, 0x7f5f086b
push dword [esp]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
push eax
mov eax, 5
sub eax, 0x4fae0a06
add eax, 0x57ff3949
sub eax, 0x797e3b93
add eax, edx
add eax, 0x797e3b93
sub eax, 0x57ff3949
add eax, 0x4fae0a06
push ebx
mov ebx, 0
add ebx, eax
xor esi, dword [ebx]
pop ebx
pop eax
jmp 0xc00e62
push dword [ebp - 0x18]
mov eax, dword [esp]
push ecx
mov ecx, esp
push eax
push 4
pop eax
add ecx, eax
pop eax
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xc4dcd8
xor eax, eax
jmp 0xbe0a84
and edx, eax
jmp 0xbafbf1
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], eax
pop dword [ebp - 0x10]
push ebp
mov dword [esp], 0x13cbbf84
mov dword [esp], esi
push edx
mov edx, 0x502bdd27
mov dword [esp + 4], edx
pop edx
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push edi
mov edi, 4
add ecx, edi
mov edi, dword [esp]
add esp, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
pop edx
push 0x7a9bb52c
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xc31335
push ebx
push ebp
mov ebp, 0x1cbaec34
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], ebp
mov dword [esp], ecx
sub ecx, 0x77fb94b4
sub ecx, 0x3ffa23b5
add ecx, eax
add ecx, 0x3ffa23b5
push ebx
mov ebx, 0x37f3ab3d
xor ebx, 0x7ef9b1dd
not ebx
push esi
mov esi, 0x5ff73717
shl esi, 3
xor esi, 0x3d9db3e0
neg esi
sub esi, 0x7e7fcea0
push eax
mov eax, 0x81a67663
xor esi, eax
pop eax
sub ebx, esi
pop esi
add ecx, ebx
pop ebx
push dword [esp]
pop ecx
push esi
mov esi, esp
push ebp
mov ebp, 0x5f9b3c59
xor ebp, 0x47fb23f4
sub ebp, 0x775fd283
not ebp
xor ebp, 0x5effb2d1
add esi, ebp
pop ebp
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push edx
mov dword [esp], ebx
mov bx, 0x679
shr bx, 5
neg bx
neg bx
push ebp
push 0x21cd
pop bp
inc bp
dec bp
add bp, 0xbbde
sub bx, bp
mov ebp, dword [esp]
add esp, 4
inc bx
add bx, 0x49db
mov word [0x64ec70], bx
pop ebx
push ebx
mov dword [esp], 0x7ec496aa
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebp
mov dword [esp], ecx
sub ecx, 0x3fef2d89
push esi
push 0x20cfa838
pop esi
and esi, 0x663f4a2b
sub esi, 0xab91d3c5
add ecx, esi
pop esi
sub ecx, 0x7fca1e55
add ecx, eax
add ecx, 0x7fca1e55
sub ecx, 0x747d3463
add ecx, 0x3fef2d89
mov ecx, dword [esp]
push edi
push esp
pop edi
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
jmp 0xc65fd1
jmp dword [eax + 0xa4eff8]
push ebx
mov dword [esp], ecx
push ebp
mov dword [esp], esp
add dword [esp], 4
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
push eax
push ecx
mov ecx, 0x1e6fdd95
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], edx
mov dword [esp], ecx
pop ebx
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
imul eax, ecx
jmp 0xbe224e
push ecx
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push ebx
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
mov eax, dword [esp]
push 0x6b242f6
mov dword [esp], edi
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push esi
mov dword [esp], 0x767221ff
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], eax
pop dword [0x84f060]
jmp 0xbe2273
push ecx
push esp
pop ecx
add ecx, 4
push esi
push 4
pop esi
sub ecx, esi
pop esi
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push dword [esp]
pop edx
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push 0x7b25e2c7
mov dword [esp], ebp
push esi
mov dword [esp], ebp
mov ebp, 0x64ee48
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
jmp 0xc26acf
push esi
push 0x78707061
push dword [esp]
mov esi, dword [esp]
add esp, 4
add esp, 4
mov dword [0x64ec68], esi
pop esi
jmp 0xc47bfc
push ecx
push ecx
mov ecx, 0x4d1b51a9
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
mov dword [esp], eax
mov dword [esp], ecx
add ecx, 0x7df79dec
sub ecx, 0x6b5f4fef
add ecx, eax
add ecx, 0x6b5f4fef
push edx
mov edx, 0x7c7e129a
xor edx, 0x1898f76
sub ecx, 0xbf54f5c
sub ecx, edx
add ecx, 0xbf54f5c
mov edx, dword [esp]
add esp, 4
mov ecx, dword [esp]
push 0x57c10b8d
mov dword [esp], ebx
mov ebx, esp
push ecx
mov ecx, 4
add ebx, ecx
mov ecx, dword [esp]
add esp, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
mov al, byte [0x64e033]
jmp 0xbbc482
push dword [0x64e024]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xbc49f6
push dword [ebp - 0x18]
mov eax, dword [esp]
push 0x1bcabe8
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xbe3e00
push dword [ebp - 0x14]
push dword [esp]
pop eax
push edi
mov edi, esp
push eax
mov eax, 4
add edi, eax
pop eax
add edi, 4
xchg dword [esp], edi
pop esp
push eax
push 0x465e668c
mov dword [esp], esp
add dword [esp], 4
pop eax
add eax, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
mov esp, dword [esp]
jmp 0xbf3f7b
push edi
mov edi, esp
add edi, 4
push ecx
push 0x7dff1626
pop ecx
add ecx, 0x8200e9de
add edi, 0x7ebca007
sub edi, ecx
sub edi, 0x7ebca007
pop ecx
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
push ecx
mov ebx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov ebx, dword [esp]
push 0x3b8fa889
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
push edx
mov edx, esp
add edx, 4
sub edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], edi
mov dword [esp], eax
pop dword [0x84f058]
jmp 0xc06659
push esi
mov esi, esp
add esi, 4
sub esi, 4
push 0x750b8a8a
mov dword [esp], esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
mov dword [esp], edx
pop dword [0x64e020]
push 0x7fc0fd0e
mov dword [esp], esi
mov dword [esp], 0x97c38dc
mov dword [esp], ebp
mov dword [esp], 0x43bf287d
mov dword [esp], ecx
push 0x7b81c2cd
mov dword [esp], ebp
mov ebp, 0x7dbdb865
sub ecx, ebp
mov ebp, dword [esp]
add esp, 4
sub ecx, 0x26ef0ccd
add ecx, eax
add ecx, 0x26ef0ccd
add ecx, 0x7dbdb865
push dword [esp]
mov ecx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xbc49ef
cmp dword [ebp - 0x10], 0x1000000
jmp 0xc2115d
sub esp, 4
mov dword [esp], eax
mov eax, 8
push eax
pop dword [ebp - 8]
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xbbb04b
sub esp, 4
mov dword [esp], eax
push eax
mov dword [esp], edx
mov edx, 0x3ee48da6
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push 0x61f847ac
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push edx
mov dword [esp], 0x26b2ec1f
mov dword [esp], edi
push ebx
mov ebx, 0xf344b41
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
push 0x1115ca37
mov dword [esp], ebx
push 0x6f7bcd88
mov dword [esp], esp
add dword [esp], 4
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edx
push eax
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0xc1a546
add esp, 4
jmp 0xc27139
mov cx, word [eax]
jmp 0xbebf67
cmp ecx, dword [ebp - 0x1c]
jmp 0xbaf11f
mov dx, word [ecx]
jmp 0xc71c45
xor edx, edx
push 0x35ad991
mov dword [esp], edx
push 0x5076a94c
mov dword [esp], ecx
mov ecx, 0x7f0b8d37
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
push 0x274a7b80
mov dword [esp], ecx
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edi
mov edi, esp
push eax
mov eax, 0x5df994cc
not eax
inc eax
xor eax, 0xa2066b30
add edi, eax
pop eax
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xbebf6f
je 0xbe5ca7
jmp 0xbc3761
push ecx
push ebx
mov ebx, 0xa8ae8c
mov dword [esp + 4], ebx
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
add ecx, 0x53bc63f7
add ecx, eax
push esi
mov esi, 0x53bc63f7
push ebx
mov ebx, 0x7f6f3ba7
or ebx, 0x7fea566e
sub ebx, 0x100fece5
sub ecx, ebx
pop ebx
sub ecx, esi
add ecx, 0x6fdf930a
mov esi, dword [esp]
add esp, 4
push dword [esp]
pop ecx
push ecx
mov ecx, esp
add ecx, 4
push ebp
mov ebp, 4
add ecx, ebp
pop ebp
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
push ebx
sub esp, 4
mov dword [esp], esi
push 0x64ec68
pop esi
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
jmp 0xbfc528
push ecx
mov ecx, esp
push ebp
push ebp
mov dword [esp], 0x6bff91c8
pop ebp
xor ebp, 0x6bff91cc
add ecx, ebp
pop ebp
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
push edx
push 4
pop edx
add ebx, edx
pop edx
add ebx, 4
xchg dword [esp], ebx
pop esp
lea ecx, [eax + edx + 0x64ec58]
jmp 0xc46f9d
push ebp
mov dword [esp], 0x6edb69c9
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
push edx
mov edx, 0x7b17aa5e
sub edx, 0x5eb61d15
sub edx, 0x2fedfe13
neg edx
sub edx, 0x138c70c6
add ebp, edx
pop edx
xchg dword [esp], ebp
pop esp
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0xc1c107
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ecx
mov dword [esp], ebx
push 0x23ef4915
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], esi
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push edi
mov edi, esp
push eax
mov eax, 4
add edi, eax
mov eax, dword [esp]
add esp, 4
add edi, 4
xchg dword [esp], edi
pop esp
push edi
push ebx
mov dword [esp], 0x706d6f63
mov edi, dword [esp]
add esp, 4
push edi
pop dword [0x64ec6a]
pop edi
push 0x79bb6c76
mov dword [esp], ebp
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
mov dword [esp], ecx
sub ecx, 0x5cf32a96
add ecx, eax
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x5cf32a96
add ecx, ebx
push dword [esp]
pop ebx
add esp, 4
mov ecx, dword [esp]
push 0x5c01dacb
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push ebp
mov ebp, 4
add ecx, ebp
mov ebp, dword [esp]
add esp, 4
xchg dword [esp], ecx
pop esp
jmp 0xc1e945
push 0x718f0cc0
mov dword [esp], ebx
mov dword [esp], edi
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
mov ebx, dword [esp]
push esi
mov esi, esp
push edx
mov edx, 4
add esi, edx
pop edx
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
push dword [esp]
pop ebx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
push dword [0x84f060]
mov ecx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0xc640b9
push dword [0x84f060]
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
jmp 0xbb10f1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xc6edd5
jne 0xbe03eb
jmp 0xc2e26a
push eax
mov eax, 0x6fca2a3e
or eax, 0x7f6b6c5c
or eax, 0x56ff4958
or eax, 0x3cc6d238
push esi
push 0x5eb73841
pop esi
sub esi, 0xffbcc730
xor eax, esi
pop esi
push eax
not dword [esp]
pop eax
xor eax, 0xdefa719a
push eax
pop dword [ebp - 0x14]
pop eax
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push 0x1477a5a5
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
push dword [esp]
pop eax
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xbe662c
jmp 0xbe5ca7
jmp 0xc383ce
push ecx
mov ecx, esp
push edi
mov edi, 4
add ecx, edi
mov edi, dword [esp]
add esp, 4
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], eax
push esi
push esp
pop esi
add esi, 4
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push 0x63abb7c1
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
mov byte [0x64ec72], al
jmp 0xbd8bae
push esi
mov esi, esp
add esi, 4
push ebx
mov ebx, 4
sub esi, ebx
mov ebx, dword [esp]
add esp, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], eax
push 0x11f6410f
mov dword [esp], ebx
mov eax, dword [esp]
push ecx
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
push eax
mov eax, 4
add ebp, eax
pop eax
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
sub esp, 4
mov dword [esp], ecx
push ebx
push edi
mov edi, 0x64ee48
push edi
pop ebx
pop edi
mov dword [esp + 4], ebx
pop ebx
push 0x7e9b458a
mov dword [esp], edx
mov dword [esp], ebx
mov dword [esp], edx
mov dword [esp], ecx
push ebp
mov ebp, 0x79d75ff0
add ecx, ebp
pop ebp
sub ecx, 0x5ffdd49f
add ecx, eax
push edi
mov edi, 0x5ffdd49f
add ecx, edi
mov edi, dword [esp]
add esp, 4
sub ecx, 0x79d75ff0
push dword [esp]
pop ecx
push esi
mov esi, esp
push edi
mov edi, 0x57aa74da
shl edi, 8
or edi, 0x7fe7d584
shl edi, 7
xor edi, 0xfbefc204
add esi, edi
pop edi
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
jmp 0xc4e770
call fcn.00449fc0
jmp 0xbebf57
jmp 0xbe5ca7
push edx
mov edx, esp
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], eax
pop dword [0x64f01c]
jmp 0x4dc0ea
push ebp
push ebx
mov dword [esp], 0x69757473
mov ebp, dword [esp]
add esp, 4
mov dword [0x64ec6e], ebp
mov ebp, dword [esp]
add esp, 4
jmp 0xc28d9c
ja 0xbbe2fb
jmp 0xc383ce
jae 0xc6b231
jmp 0xbafc29
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x717c3d4e
mov dword [esp], edx
push 0x3250dbd4
mov dword [esp], esp
add dword [esp], 4
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [esp]
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
jmp 0xc54a74
push esi
mov esi, esp
push ecx
mov ecx, 4
add esi, ecx
pop ecx
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
mov dword [esp], ecx
pop dword [ebp - 0x18]
jmp 0xc2d6ca
jmp 0x4dc0ea
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0xbf3a3c
test eax, eax
jmp 0xbf15a2
cmp esi, eax
jmp 0xc38a40
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
mov eax, 0x7bcf6786
or eax, 0x7bff6a55
not eax
xor eax, 0x4fb7267a
add eax, 0xa0b4addc
mov dword [0x64ec72], eax
mov eax, dword [esp]
add esp, 4
jmp 0xc00f43
push esi
push esi
mov esi, 0x4207c091
mov dword [esp + 4], esi
push dword [esp]
pop esi
add esp, 4
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
push dword [esp]
pop eax
push esi
mov esi, esp
add esi, 4
push ebp
mov ebp, 4
sub esi, 0x5eaf1e4c
add esi, ebp
add esi, 0x5eaf1e4c
pop ebp
xchg dword [esp], esi
pop esp
push dword [ebp - 0x10]
mov edx, dword [esp]
push esi
push esp
pop esi
add esi, 4
push ecx
mov ecx, 4
add esi, ecx
pop ecx
xchg dword [esp], esi
pop esp
push 0x7a74d46b
mov dword [esp], ebp
mov dword [esp], 0x98779ff
mov dword [esp], edx
mov dword [esp], ecx
push ebx
mov ebx, 0x7439395d
or ebx, 0x7bad7858
neg ebx
push ecx
mov ecx, 0xd7f743d
inc ecx
add ecx, 0xf23fdb11
xor ebx, ecx
pop ecx
add ecx, 0x57df40b4
sub ecx, ebx
sub ecx, 0x57df40b4
mov ebx, dword [esp]
add esp, 4
add ecx, eax
add ecx, 0x7ffdc9ec
push dword [esp]
push dword [esp]
pop ecx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
jmp 0xbe7668
jmp dword [eax + 0xa4eff8]
push dword [ebp - 0x10]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ebx
push esp
pop ebx
push edx
mov edx, 4
add ebx, edx
pop edx
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov ebx, dword [esp]
push edx
push esp
pop edx
push ecx
mov ecx, 0x7df75cd8
shl ecx, 5
add ecx, 0x3ef6320c
or ecx, 0x775faecd
shl ecx, 3
sub ecx, 0xffff7e64
add edx, ecx
pop ecx
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0xc2244d
push esi
push ebp
push 0x1cfbdce
pop ebp
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], ebx
push edi
mov dword [esp], ebp
mov dword [esp], 0x4b330408
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push ecx
mov ecx, esp
add ecx, 4
push ebp
mov ebp, 4
add ecx, ebp
pop ebp
xchg dword [esp], ecx
mov esp, dword [esp]
push esi
push esi
mov esi, 0x64ee48
mov dword [esp + 4], esi
mov esi, dword [esp]
push edx
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
sub esp, 4
mov dword [esp], edi
mov dword [esp], ebx
push ebx
mov ebx, 0x14f17859
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ebp
mov dword [esp], ebx
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
add esp, 4
jmp 0xc65ec6
sub esp, 4
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], 0x21403f07
mov dword [esp], edx
mov dword [esp], ecx
sub ecx, 0x5f57e50e
sub ecx, 0x5fdb9076
add ecx, 0x5a7b8d38
add ecx, eax
sub ecx, 0x5a7b8d38
push esi
mov esi, 0x5fdb9076
add ecx, esi
mov esi, dword [esp]
add esp, 4
add ecx, 0x5f57e50e
push dword [esp]
pop ecx
push ebx
push esp
pop ebx
add ebx, 4
push eax
mov eax, 4
add ebx, eax
pop eax
xchg dword [esp], ebx
pop esp
push dword [ebp - 8]
mov edx, dword [esp]
push ebx
mov ebx, esp
push edx
mov edx, 0x39ed1cfd
neg edx
neg edx
sub edx, 0x39ed1cf9
add ebx, edx
pop edx
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push edx
push ecx
mov ecx, 0x3b37c041
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], edx
mov dword [esp], esi
mov dword [esp], ecx
add ecx, 0x63a7be22
add ecx, 0x4f79dc54
sub ecx, 0x7fb6c07a
add ecx, eax
add ecx, 0x7fb6c07a
push esi
mov esi, 0x4f79dc54
sub ecx, esi
pop esi
push ebp
mov ebp, 0x7f6b4481
and ebp, 0x5e27f23f
dec ebp
shl ebp, 2
and ebp, 0x57cd611d
not ebp
xor ebp, 0xccd541dd
sub ecx, ebp
pop ebp
mov ecx, dword [esp]
push ebp
mov ebp, esp
push ecx
mov ecx, 0x70fd0e60
sub ecx, 0x2fff6670
sub ecx, 0x7c65b650
or ecx, 0x2e9f0b87
not ecx
sub ecx, 0x11600454
add ebp, ecx
mov ecx, dword [esp]
add esp, 4
push eax
mov eax, 4
add ebp, eax
pop eax
xchg dword [esp], ebp
pop esp
jmp 0xbe368a
push edx
mov dword [esp], ebp
push ecx
mov ecx, 0x7a1c7af8
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], eax
push ebx
push dword [esp]
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
mov eax, dword [esp]
push edx
mov edx, esp
push esi
mov esi, 0x3aab3705
xor esi, 0x3aab3701
add edx, esi
pop esi
push ecx
mov ecx, 4
sub edx, 0x4dfeac7a
add edx, ecx
add edx, 0x4dfeac7a
pop ecx
xchg dword [esp], edx
pop esp
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push ebx
push ecx
mov ecx, 0xaa779d
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
mov dword [esp], edi
mov dword [esp], eax
push 0xea9a2f9
mov dword [esp], ebx
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push dword [esp]
pop eax
push edx
mov edx, esp
push ecx
mov ecx, 0x6bdfad70
or ecx, 0x61ff31b6
not ecx
add ecx, 0x6fbfbc00
neg ecx
xor ecx, 0xfc4001f3
add edx, ecx
pop ecx
push ebp
mov ebp, 4
add edx, ebp
pop ebp
xchg dword [esp], edx
pop esp
jmp 0xc33018
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], 0x37486c3c
mov dword [esp], ecx
add ecx, 0x3dff312b
add ecx, 0x6feeb2c3
sub ecx, 0x77cb75ad
add ecx, eax
add ecx, 0x77cb75ad
sub ecx, 0x6feeb2c3
push 0x291fd8b3
mov dword [esp], ebp
mov ebp, 0x7ffbcb2e
shr ebp, 7
xor ebp, 0x35ef2e71
dec ebp
dec ebp
add ebp, 0x8ee5746
sub ecx, ebp
pop ebp
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [ebp - 0x18]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xc6839a
cmp dword [0xa4eff8], 0x23f0
jmp 0xc21168
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0xc27140
jne 0xbfca92
jmp 0xbc904e
push edi
push esp
pop edi
push ebx
mov ebx, 0x2f6f5908
neg ebx
dec ebx
sub ebx, 0xd090a6f3
add edi, ebx
pop ebx
push esi
mov esi, 0x6b7f8e0c
dec esi
and esi, 0x35f727b0
neg esi
xor esi, 0xde88fa04
sub edi, esi
pop esi
xchg dword [esp], edi
pop esp
mov dword [esp], edx
push eax
push esp
pop eax
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
sub esp, 4
mov dword [esp], edx
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
jmp 0xc326fe
push esi
sub esp, 4
mov dword [esp], eax
push 0x68598cf9
pop eax
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
push edi
mov dword [esp], ecx
mov edx, dword [esp]
push edx
mov edx, esp
push ebx
mov ebx, 0x7b3d1b18
shr ebx, 2
neg ebx
add ebx, 0x1ecf46ca
add edx, ebx
pop ebx
add edx, 4
xchg dword [esp], edx
pop esp
mov edx, dword [esp]
push edi
mov edi, esp
push ebx
mov ebx, 0x5fcc0624
sub ebx, 0x7fcf957a
sub ebx, 0x59be3094
xor ebx, 0x863e4012
add edi, ebx
pop ebx
push esi
mov esi, 4
add edi, esi
pop esi
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
push edx
push esp
mov edx, dword [esp]
add esp, 4
add edx, 4
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ecx
jmp 0xc22387
push ecx
push ecx
mov ecx, 0x1782f425
mov dword [esp + 4], ecx
push dword [esp]
pop ecx
add esp, 4
mov dword [esp], edx
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
push ebx
push esp
pop ebx
push edx
mov edx, 0x53bf0f0f
xor edx, 0x7b6e0d9c
push ebp
mov ebp, 0x4cedf013
or ebp, 0x5ffdad8e
and ebp, 0x7abf9777
shr ebp, 8
and ebp, 0x7ebdce53
add ebp, 0xd7167160
add edx, ebp
pop ebp
add ebx, edx
pop edx
add ebx, 4
xchg dword [esp], ebx
pop esp
push eax
mov dword [esp], ecx
push edi
push ebp
mov dword [esp], 0x7fb22329
pop edi
mov ecx, edi
pop edi
dec ecx
add ecx, 0x7dbe34c1
not ecx
or ecx, 0x6df22a18
xor ecx, 0x418fc36d
mov dword [0x64ec6c], ecx
pop ecx
jmp 0xbc5e8d
push edi
push esp
mov edi, dword [esp]
add esp, 4
add edi, 4
sub edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
push ebp
mov ebp, 0x1e9f7298
add ebp, 0x7fabb9e9
add ebp, 0x13cb2391
or ebp, 0x4bdf6f6f
xor ebp, 0xfbdf7f7b
add edi, ebp
pop ebp
xchg dword [esp], edi
pop esp
push dword [ebp - 4]
mov ecx, dword [esp]
push ecx
mov ecx, esp
push esi
push eax
mov eax, 0x5dd73ce0
neg eax
and eax, 0x3df1b0ea
xor eax, 0x57dd9803
mov esi, eax
pop eax
and esi, 0x4edf5382
sub esi, 0x4e390b17
and esi, 0x7fef4a3f
shl esi, 3
add esi, 0x3adffeac
add ecx, esi
pop esi
add ecx, 4
xchg dword [esp], ecx
pop esp
push eax
push ebp
push 0x59dbc85d
pop ebp
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], edx
push ecx
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], ecx
pop edx
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xbf0ea5
push edi
mov edi, esp
add edi, 4
push eax
mov eax, 4
sub edi, eax
mov eax, dword [esp]
add esp, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebp
mov dword [esp], edx
push ecx
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
push dword [esp]
mov edx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
xor ecx, ecx
jmp 0xbebf5f
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov dword [esp], ebx
push edx
mov edx, esp
add edx, 4
push ebx
mov ebx, 4
sub edx, ebx
pop ebx
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ecx
pop ebx
push dword [esp]
mov ebx, dword [esp]
push edi
mov edi, esp
add edi, 4
push eax
mov eax, 4
add edi, eax
pop eax
xchg dword [esp], edi
pop esp
add esp, 4
jmp 0xc009b6
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push ecx
mov dword [esp], 0x7574a305
mov dword [esp], eax
push edx
mov edx, 0x383db4c5
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
push 0x40bdf0a9
mov dword [esp], eax
mov dword [esp], ebx
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov eax, dword [esp]
push 0x2052aeac
mov dword [esp], eax
mov eax, esp
add eax, 4
push ebp
mov ebp, 4
add eax, ebp
pop ebp
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
jmp 0xbd8b21
push 0x85bbf94
mov dword [esp], edx
mov edx, 3
push ecx
mov ecx, 0x7b7f1d46
sub ecx, 0x7fe731e1
shr ecx, 3
sub ecx, 0xb3967948
add edx, ecx
pop ecx
add edx, ecx
sub edx, 0x6bdc8424
xor esi, dword [edx]
mov edx, dword [esp]
add esp, 4
jmp 0xc38a35
push ebx
push eax
push 0x4e17b0c6
mov eax, dword [esp]
add esp, 4
mov dword [esp + 4], eax
pop eax
mov dword [esp], eax
push 0x740cc45d
mov dword [esp], ebx
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
push dword [esp]
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
sub esp, 4
mov dword [esp], edx
mov dword [esp], ebx
mov dword [esp], edx
mov dword [esp], eax
pop dword [0x64f01c]
jmp 0xc22b1a
push eax
push esp
mov eax, dword [esp]
add esp, 4
add eax, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ebx
push edx
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push edi
push 7
push dword [esp]
pop edi
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
or ecx, edi
pop edi
jmp 0xbd23e2
push eax
push esp
pop eax
add eax, 4
sub eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
push 0x6cdb292d
mov dword [esp], ecx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop ebx
push edx
mov edx, esp
push ebp
mov ebp, 4
add edx, ebp
pop ebp
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
push dword [0x64ef0c]
mov esi, dword [esp]
push eax
push esp
pop eax
push ecx
mov ecx, 4
add eax, ecx
pop ecx
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xc5480e
push ebx
mov ebx, esp
push edi
mov edi, 0x7dbe1404
shl edi, 2
push ecx
mov ecx, 0x1fb71749
add edi, ecx
pop ecx
not edi
or edi, 0x7fbbfe4f
push eax
mov eax, 0x77ff6cf5
sub eax, 0xfc3020a6
xor edi, eax
pop eax
add edi, 0x7bcb4d64
add ebx, edi
pop edi
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
push ecx
mov dword [esp], 0x77c7be69
mov dword [esp], edx
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ebx
push esi
push esp
pop esi
push edx
mov edx, 0x6a96bc70
add edx, 0x5bf924c4
xor edx, 0xf3f958a
shr edx, 6
shl edx, 5
sub edx, 0x64d83a3c
add esi, edx
pop edx
add esi, 4
xchg dword [esp], esi
pop esp
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push ebp
push esp
pop ebp
push edx
mov edx, 4
add ebp, edx
pop edx
push ecx
mov ecx, 4
sub ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
push ebp
mov ebp, 0x7c4bd47f
and ebp, 0x3fb7c798
xor ebp, 0x31ec698d
and ebp, 0x6fff6b37
neg ebp
shr ebp, 1
xor ebp, 0x42a1d7f8
add ecx, ebp
push dword [esp]
pop ebp
add esp, 4
add ecx, 0x2ffef5e8
add ecx, eax
sub ecx, 0x2ffef5e8
sub ecx, 0x3ba9bc8d
push dword [esp]
pop ecx
push edi
mov edi, esp
push ebp
mov ebp, 4
add edi, ebp
pop ebp
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
jmp 0xc00e18
push edi
push 0x692c1375
mov dword [esp], edx
push 0x75c585f6
pop edx
mov dword [esp + 4], edx
pop edx
mov dword [esp], edx
push ebx
mov dword [esp], 0x25c98a5a
mov dword [esp], edi
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
mov edx, dword [esp]
push ebx
push esp
pop ebx
push edx
push 4
pop edx
add ebx, edx
pop edx
add ebx, 4
xchg dword [esp], ebx
pop esp
mov al, byte [0x64ec71]
push ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], eax
push ebx
push dword [esp]
pop eax
push edx
mov edx, esp
push esi
mov esi, 4
add edx, esi
pop esi
add edx, 4
xchg dword [esp], edx
pop esp
mov eax, dword [esp]
push 0x24bddb14
mov dword [esp], ecx
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
jmp 0xc0806e
push eax
mov dword [esp], edx
push 0x66821ad
mov dword [esp], esp
add dword [esp], 4
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edx
push eax
mov eax, esp
add eax, 4
sub eax, 4
push 0x3f27dcce
mov dword [esp], eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
mov dword [esp], ecx
pop edx
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
push eax
mov eax, 0x3def7dba
or eax, 0x5ad78406
dec eax
push ebx
mov ebx, 0x4b7c1e3c
sub eax, ebx
mov ebx, dword [esp]
add esp, 4
and eax, 0x37fb651c
sub eax, 0x348344fc
add edi, eax
pop eax
xchg dword [esp], edi
pop esp
push ebx
push esi
mov dword [esp], ecx
mov dword [esp], 0x3c
pop ebx
add ebx, edx
add eax, dword [ebx]
mov ebx, dword [esp]
add esp, 4
push ecx
mov dword [esp], edx
mov edx, esp
add edx, 4
push 0x2ac08b05
mov dword [esp], ebx
mov ebx, 4
sub edx, ebx
pop ebx
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
push ecx
push dword [esp]
pop ebx
push ebx
mov ebx, esp
push eax
mov eax, 4
add ebx, eax
pop eax
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
jmp 0xbb80ae
sub esp, 4
mov dword [esp], eax
mov dword [esp], ecx
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], edx
push ecx
push dword [esp]
pop edx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov edx, dword [esp]
push edi
mov edi, esp
push ebx
mov ebx, 0x6faae06f
or ebx, 0x1aff5ecf
shl ebx, 3
dec ebx
not ebx
inc ebx
sub ebx, 0x885
add edi, ebx
pop ebx
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
sub edx, 0x17c734e0
sub edx, ecx
push edx
mov dword [esp], ebx
mov ebx, 0x7afbfebf
xor ebx, 0x5f2f03ba
shr ebx, 5
push ebp
mov ebp, 0
sub ebp, ebx
xchg ebx, ebp
pop ebp
push eax
mov eax, 0x338d8d23
sub ebx, eax
pop eax
not ebx
xor ebx, 0x237b01ea
add edx, ebx
pop ebx
push ebx
mov dword [esp], edx
push esp
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], edx
push edi
mov dword [esp], ecx
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
push edi
mov edi, 4
add eax, edi
pop edi
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
jmp 0xbe5c10
push 0x61d2648d
mov dword [esp], esi
push edx
push 0x64ee48
pop edx
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
push 0x39ef5ab5
mov dword [esp], ebp
mov dword [esp], ebx
mov dword [esp], 0x67f0aa5
mov dword [esp], edx
mov dword [esp], ebx
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], ecx
pop ebx
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
mov esi, dword [esp]
add esp, 4
pop dword [esp]
pop esp
jmp 0xc44e2f
cmp esi, eax
jmp 0xc00e6d
push dword [ebp - 0x18]
mov edx, dword [esp]
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push esi
push esp
pop esi
add esi, 4
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], ecx
push ebx
mov ebx, 0x7fff0422
add ecx, ebx
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
add ecx, eax
sub ecx, 0x7fff0422
push dword [esp]
pop ecx
push edx
push esp
pop edx
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
jmp 0xc36dfb
cmp edx, dword [ebp - 0xc]
jmp 0xbaf12a