Function at 0x401000
Capabilities:
Allocate thread local storage
Check for time delay via gettickcount
Check internet connectivity via wininet
Download url
Log keystrokes via polling
Receive data

Disassembly:
push 0x730
push 0
push 0x4a59d0
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x4a59d4], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x4a59d0], eax
mov eax, 0x49497f
mov dword [0x4a59d8], eax
call fcn.00412cb0
call fcn.00412140
call fcn.0041201b
call fcn.004115a9
call fcn.004109ac
call fcn.00410749
call fcn.00410603
call fcn.0040fac0
call fcn.0040f680
call fcn.0040f4bf
call fcn.0040dbbe
call fcn.0040c489
call fcn.0040bf61
call fcn.0040b7ed
call fcn.0040b5ef
call fcn.0040a209
call fcn.0040c400
call fcn.0040a800
call fcn.00412d00
push eax
push eax
call fcn.0040f794
push 0x4a59dc
call fcn.00412d40
call fcn.00412d00
push eax
mov edx, dword [0x4a59dc]
call fcn.00412d00
push eax
call fcn.00412dd0
mov edx, str.0.ogg
call fcn.00412dd0
call fcn.00412e30
push 0
call fcn.00412e72
add dword [esp + 4], edx
call fcn.0040fc60
call fcn.00412e90
mov ebp, 0x450352
mov ebx, ebp
mov ebp, 0x44d7bc
sub ebx, ebp
push ebx
mov ebp, 0x44d7bc
push ebp
push 0
call fcn.0040fe90
push 0
call fcn.0040fa40
call fcn.00412d00
push eax
mov edx, dword [0x4a59dc]
call fcn.00412d00
push eax
call fcn.00412dd0
mov edx, str.1.ogg
call fcn.00412dd0
call fcn.00412e30
push 0
call fcn.00412e72
add dword [esp + 4], edx
call fcn.0040fc60
call fcn.00412e90
mov ebp, 0x4532c3
mov ebx, ebp
mov ebp, 0x450352
sub ebx, ebp
push ebx
mov ebp, 0x450352
push ebp
push 0
call fcn.0040fe90
push 0
call fcn.0040fa40
call fcn.00412d00
push eax
mov edx, dword [0x4a59dc]
call fcn.00412d00
push eax
call fcn.00412dd0
mov edx, str.3.ogg
call fcn.00412dd0
call fcn.00412e30
push 0
call fcn.00412e72
add dword [esp + 4], edx
call fcn.0040fc60
call fcn.00412e90
mov ebp, 0x4568f8
mov ebx, ebp
mov ebp, 0x4532c3
sub ebx, ebp
push ebx
mov ebp, 0x4532c3
push ebp
push 0
call fcn.0040fe90
push 0
call fcn.0040fa40
call fcn.00412d00
push eax
mov edx, dword [0x4a59dc]
call fcn.00412d00
push eax
call fcn.00412dd0
mov edx, str.4.ogg
call fcn.00412dd0
call fcn.00412e30
push 0
call fcn.00412e72
add dword [esp + 4], edx
call fcn.0040fc60
call fcn.00412e90
mov ebp, 0x45b2c9
mov ebx, ebp
mov ebp, 0x4568f8
sub ebx, ebp
push ebx
mov ebp, 0x4568f8
push ebp
push 0
call fcn.0040fe90
push 0
call fcn.0040fa40
call fcn.0040a890
call fcn.00412d00
push eax
mov edx, dword [0x4a59dc]
call fcn.00412d00
push eax
call fcn.00412dd0
mov edx, str.0.ogg
call fcn.00412dd0
call fcn.00412e30
push 0
call fcn.00412e72
add dword [esp + 4], edx
call fcn.0040aa88
call fcn.00412e90
mov dword [0x4a59e0], eax
call fcn.00412d00
push eax
mov edx, dword [0x4a59dc]
call fcn.00412d00
push eax
call fcn.00412dd0
mov edx, str.1.ogg
call fcn.00412dd0
call fcn.00412e30
push 1
call fcn.00412e72
add dword [esp + 4], edx
call fcn.0040aa88
call fcn.00412e90
mov dword [0x4a59e0], eax
call fcn.00412d00
push eax
mov edx, dword [0x4a59dc]
call fcn.00412d00
push eax
call fcn.00412dd0
mov edx, str.3.ogg
call fcn.00412dd0
call fcn.00412e30
push 3
call fcn.00412e72
add dword [esp + 4], edx
call fcn.0040aa88
call fcn.00412e90
mov dword [0x4a59e0], eax
call fcn.00412d00
push eax
mov edx, dword [0x4a59dc]
call fcn.00412d00
push eax
call fcn.00412dd0
mov edx, str.4.ogg
call fcn.00412dd0
call fcn.00412e30
push 4
call fcn.00412e72
add dword [esp + 4], edx
call fcn.0040aa88
call fcn.00412e90
mov dword [0x4a59e0], eax
call fcn.0040c400
call fcn.00412d00
push eax
push 0
push 0x40
call fcn.00412d00
push eax
push eax
call fcn.0040b81c
call fcn.00412e72
add dword [esp], edx
call fcn.004088d0
push 0x4a59f8
call fcn.00412d40
mov ebp, 0x45b2c9
push ebp
push 0
call fcn.00410be9
and eax, eax
je 0x401f40
mov ebp, 0x477739
push ebp
push 2
call fcn.00410be9
push 0
call fcn.00410c7d
push eax
call fcn.0041077d
push 0x41
push 0x133
push 2
call fcn.00410db3
push eax
call fcn.004107c9
call fcn.00410810
push 0x100
push 0x18
push 0x44d22d
push 1
call fcn.0040f694
and eax, eax
je 0x401412
push 0x100
push 0x30
push 0x44d22d
push 2
call fcn.0040f694
and eax, eax
je 0x40142f
push 0x120
push 0xfa
push 0x1f4
push 1
call fcn.00410dcf
and eax, eax
je 0x401513
push 1
call fcn.00410c7d
push eax
call fcn.0041077d
push 1
call fcn.0040f778
push eax
call fcn.00410859
push 0x11
call fcn.00410870
push 0xff
push 0
push 0
mov eax, 0
call fcn.0040bd10
push eax
push str.mercsam
push 0
push 0
call fcn.00410887
call fcn.00410810
push 0
push 0x64
push 0xc8
push 1
call fcn.00410ee5
push 0
call fcn.00410c7d
push eax
call fcn.0041077d
push 0x11
call fcn.00410870
push 0x64
push 0xc8
push 0x12
push 0x133
push 1
call fcn.00410db3
push eax
call fcn.004108d9
call fcn.00410810
push 1
call fcn.00410948
push 0x4a60b8
push 0x44d7b4
push 8
push 0x65
push 4
call fcn.00410504
call fcn.00412d00
push eax
push eax
call fcn.0040f794
push 0x4a59fc
call fcn.00412d40
call fcn.00412d00
push eax
mov edx, dword [0x4a59fc]
call fcn.00412d00
push eax
call fcn.00412dd0
mov edx, str.Options
call fcn.00412dd0
call fcn.00412e30
push 0xa
call fcn.00412e72
add dword [esp + 4], edx
call fcn.0040fc60
call fcn.00412e90
and eax, eax
je 0x4015b4
mov ebp, 0x493d3a
mov ebx, ebp
mov ebp, str.TRAINER_r_n1.0.0.1_r_n_r_nNumpad_1:_Instant_Heal_r_nNumpad_2:_Super_LifePoints_r_nNumpad_3:_Increase_Level_r_nNumpad_4:_Decrease_Level_r_nNumpad_5:_Add_Skill_Points_r_nNumpad_6:_Add_Experience_r_nNumpad_7:_5_Heavy_Healing_Potions_r_n
sub ebx, ebp
push ebx
mov ebp, str.TRAINER_r_n1.0.0.1_r_n_r_nNumpad_1:_Instant_Heal_r_nNumpad_2:_Super_LifePoints_r_nNumpad_3:_Increase_Level_r_nNumpad_4:_Decrease_Level_r_nNumpad_5:_Add_Skill_Points_r_nNumpad_6:_Add_Experience_r_nNumpad_7:_5_Heavy_Healing_Potions_r_n
push ebp
push 0xa
call fcn.0040fe90
push 0xa
call fcn.0040fa40
jmp 0x4015c8
push str.Could_not_install_the_file___Installtion_failed
push str.Error
call fcn.0040b655
jmp 0x407b69
call fcn.00412d00
push eax
mov edx, dword [0x4a59fc]
call fcn.00412d00
push eax
call fcn.00412dd0
mov edx, str.help.txt
call fcn.00412dd0
call fcn.00412e30
push 0
call fcn.00412e72
add dword [esp + 4], edx
call fcn.0040fc60
call fcn.00412e90
and eax, eax
je 0x401635
mov ebp, 0x49497f
mov ebx, ebp
mov ebp, 0x493d3a
sub ebx, ebp
push ebx
mov ebp, 0x493d3a
push ebp
push 0
call fcn.0040fe90
push 0
call fcn.0040fa40
jmp 0x401644
push str.Could_not_create_HELP.TXT_file.
push str.Error
call fcn.0040b655
push 0x4a60b8
push 0x44d7b4
push 8
push 0x65
push 4
call fcn.00410504
call fcn.00412d00
push eax
mov edx, dword [0x4a59fc]
call fcn.00412d00
push eax
call fcn.00412dd0
mov edx, str.Options
call fcn.00412dd0
call fcn.00412e30
push 0xa
call fcn.00412e72
add dword [esp + 4], edx
call fcn.0040fd30
call fcn.00412e90
call fcn.00412d00
push eax
push eax
push 0xa
call fcn.0040fef0
mov edx, 0x44d094
call fcn.00412dd0
push 0x4a5a00
call fcn.00412d40
call fcn.00412d00
push eax
push eax
push 0xa
call fcn.0040fef0
push 0x4a5a04
call fcn.00412d40
call fcn.00412d00
push eax
push eax
push 0xa
call fcn.0040fef0
mov ebx, dword [0x4a5a08]
inc ebx
mov ebp, dword [0x4a60b8]
shl ebx, 2
lea eax, [ebp + ebx]
push eax
call fcn.00412d40
inc dword [0x4a5a08]
push 0xa
call fcn.00410030
mov ebx, eax
cmp ebx, 1
jne 0x4016e0
push 0xa
call fcn.0040fa40
fild dword [0x4a5a08]
fmul dword [0x44d7a4]
fstp dword [0x4a5a0c]
fld dword [0x4a5a0c]
fmul dword [0x44d7a8]
fstp dword [0x4a5a10]
fld dword [0x4a5a0c]
fild dword [0x4a5a08]
fdiv dword [0x44d7ac]
fdivp st(1)
fstp dword [0x4a5a14]
fld dword [0x4a5a10]
fild dword [0x4a5a08]
fdiv dword [0x44d7ac]
fdivp st(1)
fstp dword [0x4a5a18]
fld dword [0x4a5a0c]
fcomp dword [0x44d7b0]
fnstsw ax
test ah, 1
jne 0x4017a4
mov ebx, dword [0x4a5a08]
cmp ebx, 0x15
jl 0x4017a4
jmp 0x4017ab
mov eax, 1
jmp 0x4017ad
xor eax, eax
and eax, eax
je 0x4017e9
mov dword [0x4a5a0c], 0x44480000
mov dword [0x4a5a10], 0x44c80000
fld dword [0x4a5a0c]
fdiv dword [0x44d7a8]
fstp dword [0x4a5a14]
fld dword [0x4a5a10]
fdiv dword [0x44d7a8]
fstp dword [0x4a5a18]
push 0x120
fld dword [0x4a5a10]
push eax
fistp dword [esp]
fld dword [0x4a5a0c]
push eax
fistp dword [esp]
push 1
call fcn.00410dcf
and eax, eax
je 0x401983
push 1
call fcn.00410c7d
push eax
call fcn.0041077d
push 1
call fcn.0040f778
push eax
call fcn.00410859
push 0x11
call fcn.00410870
mov dword [0x4a5a1c], 1
mov eax, dword [0x4a5a08]
cmp eax, dword [0x4a5a1c]
jl 0x4018a1
push 0xff
push 0
push 0
mov eax, 0
call fcn.0040bd10
push eax
mov ebx, dword [0x4a5a1c]
mov ebp, dword [0x4a60b8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5a1c]
imul ebx, ebx, 0x1a
add ebx, 0xffffffe8
push ebx
push 2
call fcn.00410887
inc dword [0x4a5a1c]
jno 0x401848
mov dword [0x4a5a1c], 1
mov eax, dword [0x4a5a08]
cmp eax, dword [0x4a5a1c]
jl 0x401904
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040bd10
push eax
mov ebx, dword [0x4a5a1c]
mov ebp, dword [0x4a60b8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5a1c]
imul ebx, ebx, 0x1a
add ebx, 0xffffffe6
push ebx
push 0
call fcn.00410887
inc dword [0x4a5a1c]
jno 0x4018ab
call fcn.00410810
push 0
fld dword [0x4a5a18]
push eax
fistp dword [esp]
fld dword [0x4a5a14]
push eax
fistp dword [esp]
push 1
call fcn.00410ee5
push 0
call fcn.00410c7d
push eax
call fcn.0041077d
push 0x11
call fcn.00410870
fld dword [0x4a5a18]
push eax
fistp dword [esp]
fld dword [0x4a5a14]
push eax
fistp dword [esp]
push 0x43
push 7
push 1
call fcn.00410db3
push eax
call fcn.004108d9
call fcn.00410810
push 1
call fcn.00410948
push 0x120
push 0x190
push 0x640
push 1
call fcn.00410dcf
and eax, eax
je 0x401a97
push 1
call fcn.00410c7d
push eax
call fcn.0041077d
push 2
call fcn.0040f778
push eax
call fcn.00410859
push 0x11
call fcn.00410870
call fcn.00412d00
push eax
push 0xff
push 0x2e
push 0xa6
mov eax, 0xec
call fcn.0040bd10
push eax
mov edx, dword [0x4a5a00]
call fcn.00412d00
push eax
call fcn.00412dd0
mov edx, dword [0x4a5a04]
call fcn.00412dd0
call fcn.00412e30
push 0
push 0
call fcn.00412e72
add dword [esp + 8], edx
call fcn.00410887
call fcn.00412e90
call fcn.00410810
push 0
push 0x64
push 0x190
push 1
call fcn.00410ee5
push 0
call fcn.00410c7d
push eax
call fcn.0041077d
push 0x11
call fcn.00410870
push 0x64
push 0x190
push 0x28
push 5
push 1
call fcn.00410db3
push eax
call fcn.004108d9
call fcn.00410810
push 1
call fcn.00410948
push 0x90000001
push 0x44d02a
push 0
call fcn.0041106a
push eax
push 0
call fcn.00411088
push eax
push 0
push 0
push 0
call fcn.0040df20
and eax, eax
je 0x401f40
push str.CLOSEBUTTON
push 0x13
push 0x13
push 6
push 0x1e4
push 1
call fcn.0040c613
mov dword [0x4a59e0], eax
push str.READMEBUTTON
push 0x20
push 0x11e
push 0x17e
push 0xa
push 3
call fcn.0040c613
mov dword [0x4a59e0], eax
push str.TROUBLEBUTTON
push 0x20
push 0x11e
push 0x19c
push 0xa
push 4
call fcn.0040c613
mov dword [0x4a59e0], eax
push str.CHBUTTON
push 0x23
push 0xf5
push 1
push 0x23
push 5
call fcn.0040c613
mov dword [0x4a59e0], eax
push str.BOXARTBUTTON
push 0x118
push 0xc8
push 0x2d
push 0x132
push 6
call fcn.0040c613
mov dword [0x4a59e0], eax
push 0
call fcn.0040df43
push eax
push 0x80000000
push str.Test
push 0x6b
push 0xc8
push 0
push 0xfffffc18
push 1
call fcn.0040dc1a
push 0
call fcn.0040df43
push eax
call fcn.00408e95
push 0xff
push 0
call fcn.00410db3
push eax
push 0
call fcn.0040df43
push eax
call fcn.00407bbb
push 0
push 0
call fcn.0040dff1
call fcn.00412d00
push eax
push eax
mov edx, str.http:__www.cheathappens.com_trnflash.asp_id
call fcn.00412dd0
mov edx, dword [0x4a59f8]
call fcn.00412dd0
call fcn.00412e30
push 0xc8
push 0x12c
push 0
push 0
push 2
call fcn.00412e72
add dword [esp + 0x14], edx
call fcn.0040d713
call fcn.00412e90
mov dword [0x4a59e0], eax
push 0
push 0
call sub.WININET.DLL_InternetGetConnectedState
mov ebx, eax
and ebx, ebx
jne 0x401c83
push 1
push 1
call fcn.0040dff1
mov dword [0x4a5a1c], 1
mov eax, 4
cmp eax, dword [0x4a5a1c]
jl 0x401f40
push 0x120
push 0xfa
push 0x1f4
push 1
call fcn.00410dcf
and eax, eax
je 0x401ddf
push 1
call fcn.00410c7d
push eax
call fcn.0041077d
push 1
call fcn.0040f778
push eax
call fcn.00410859
push 0x11
call fcn.00410870
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040bd10
push eax
push str.mercsam
push 0
push 0
call fcn.00410887
call fcn.00410810
push 0
push 0x64
push 0xc8
push 1
call fcn.00410ee5
push 0
call fcn.00410c7d
push eax
call fcn.0041077d
push 0
call fcn.00410870
push 0xff
push 0xe8
push 0xe0
mov eax, 0xe0
call fcn.0040bd10
push eax
push 0xe
push 0xaf
push 0x12
push 0x133
call fcn.0041090b
push 0x21
call fcn.00410870
push 0x64
push 0xc8
push 0x12
push 0x133
push 1
call fcn.00410db3
push eax
call fcn.004108d9
call fcn.00410810
push 1
call fcn.00410948
push 0xff
push 0
call fcn.00410db3
push eax
push 0
call fcn.0040df43
push eax
call fcn.00407bbb
push 0x32
call fcn.0040bd29
push 0x120
push 0xfa
push 0x1f4
push 1
call fcn.00410dcf
and eax, eax
je 0x401f2a
push 1
call fcn.00410c7d
push eax
call fcn.0041077d
push 1
call fcn.0040f778
push eax
call fcn.00410859
push 0x11
call fcn.00410870
push 0xff
push 0
push 0
mov eax, 0
call fcn.0040bd10
push eax
push str.mercsam
push 0
push 0
call fcn.00410887
call fcn.00410810
push 0
push 0x64
push 0xc8
push 1
call fcn.00410ee5
push 0
call fcn.00410c7d
push eax
call fcn.0041077d
push 0
call fcn.00410870
push 0xff
push 0xe8
push 0xe0
mov eax, 0xe0
call fcn.0040bd10
push eax
push 0xe
push 0xaf
push 0x12
push 0x133
call fcn.0041090b
push 0x21
call fcn.00410870
push 0x64
push 0xc8
push 0x12
push 0x133
push 1
call fcn.00410db3
push eax
call fcn.004108d9
call fcn.00410810
push 1
call fcn.00410948
push 0xff
push 0
call fcn.00410db3
push eax
push 0
call fcn.0040df43
push eax
call fcn.00407bbb
push 0x32
call fcn.0040bd29
inc dword [0x4a5a1c]
jno 0x401c8d
call sub.KERNEL32.dll_IsDebuggerPresent
and eax, eax
je 0x401f50
push 0x75009553
inc ecx
ret
push 0x12c
call fcn.0040bd29
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.00410dcf
and eax, eax
je 0x40209b
push 1
call fcn.00410c7d
push eax
call fcn.0041077d
push 1
call fcn.0040f778
push eax
call fcn.00410859
push 0x11
call fcn.00410870
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040bd10
push eax
push str.Authenticating_Trainer......
push 0
push 0
call fcn.00410887
call fcn.00410810
push 0
push 0x64
push 0x1f4
push 1
call fcn.00410ee5
push 0
call fcn.00410c7d
push eax
call fcn.0041077d
push 0
call fcn.00410870
push 0xff
push 0x70
push 0x59
mov eax, 0x57
call fcn.0040bd10
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.0041090b
push 0x11
call fcn.00410870
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.00410db3
push eax
call fcn.004108d9
call fcn.00410810
push 1
call fcn.00410948
push 0xff
push 0
call fcn.00410db3
push eax
push 0
call fcn.0040df43
push eax
call fcn.00407bbb
call fcn.00412d00
push eax
push eax
call fcn.00412d00
push eax
push eax
call fcn.0040b81c
call fcn.00412e72
add dword [esp], edx
call fcn.0040f7f5
push 0x4a5a20
call fcn.00412d40
mov edx, dword [0x4a5a20]
call fcn.00412d00
push eax
call fcn.00412dd0
push 0x4a5a24
call fcn.00412d40
call sub.USER32.DLL_GetForegroundWindow
mov dword [0x4a5a28], eax
push 0x4a5a2c
push dword [0x4a5a28]
call sub.USER32.DLL_GetWindowThreadProcessId
push dword [0x4a5a2c]
push dword [0x4a5a34]
push 0x1f0fff
call sub.KERNEL32.dll_OpenProcess
mov dword [0x4a5a30], eax
mov eax, dword [0x4a5a2c]
mov dword [0x4a5a28], eax
push 0x3e8
call fcn.00412170
mov dword [0x4a5a38], eax
mov edx, dword [0x4a5a24]
call fcn.00412d00
push eax
call fcn.00412dd0
push 0x4a5a3c
call fcn.00412d40
mov eax, dword [0x4a5a44]
mov dword [0x4a5a40], eax
mov ebp, 0x49497f
mov dword [0x4a5a1c], ebp
mov eax, dword [0x4a5a1c]
call fcn.00412190
mov byte [0x4a5d8c], al
mov ebp, 0x494982
mov dword [0x4a5a1c], ebp
mov ebp, 0x494982
mov ebx, ebp
add ebx, 0xbb8
cmp ebx, dword [0x4a5a1c]
jl 0x402207
mov eax, dword [0x4a5a1c]
call fcn.00412190
mov byte [0x4a5d8d], al
movsx ebx, byte [0x4a5d8d]
xor bl, byte [0x4a5d8c]
mov eax, ebx
mov byte [0x4a5d8e], al
movsx ebx, byte [0x4a5d8c]
add ebx, 0x37
mov eax, ebx
mov byte [0x4a5d8c], al
movsx ebx, byte [0x4a5d8c]
cmp ebx, 0xff
jle 0x4021e4
movsx ebx, byte [0x4a5d8c]
add ebx, 0xffffff01
mov eax, ebx
mov byte [0x4a5d8c], al
movsx eax, byte [0x4a5d8e]
push eax
mov eax, dword [0x4a5a1c]
call fcn.004121a0
mov dword [0x4a59e0], eax
inc dword [0x4a5a1c]
jno 0x402178
call sub.KERNEL32.dll_GetTickCount
mov dword [0x4a5a48], eax
call fcn.00412d00
push eax
push eax
call fcn.0040b81c
push 0x4a5a4c
call fcn.00412d40
call fcn.00412d00
push eax
push eax
push dword [0x4a5a4c]
call fcn.0040f7f5
push 0x4a5a4c
call fcn.00412d40
mov edx, 0x44d02a
lea ecx, [0x4a5a50]
call fcn.00409008
mov edx, 0x44d02a
lea ecx, [0x4a5a54]
call fcn.00409008
mov edx, 0x44d02a
lea ecx, [0x4a5a58]
call fcn.00409008
mov dword [0x4a5a5c], 0
mov dword [0x4a5a60], 0
call fcn.00412d00
push eax
push eax
call fcn.00412d00
push eax
call fcn.0040b81c
call fcn.00412e30
push 0
call fcn.00412e72
add dword [esp + 4], edx
call fcn.0040fde0
call fcn.00412e90
push 0
call fcn.004100d0
mov dword [0x4a5a64], eax
mov dword [0x4a5a1c], 1
mov ebx, dword [0x4a5a64]
add ebx, 0xfffffff8
cmp ebx, dword [0x4a5a1c]
jl 0x40230c
push 0
call fcn.00410130
mov byte [0x4a5d8f], al
mov ebx, dword [0x4a5a60]
movzx eax, byte [0x4a5d8f]
add ebx, eax
mov dword [0x4a5a60], ebx
inc dword [0x4a5a1c]
jno 0x4022cf
push 0
call fcn.00410190
mov dword [0x4a5a68], eax
push 0
call fcn.00410190
mov dword [0x4a5a6c], eax
push 0
call fcn.0040fa40
mov eax, dword [0x4a5a60]
mov dword [0x4a5a70], eax
push dword [0x4a5a4c]
push 0
call fcn.0040fde0
mov ebx, eax
and ebx, ebx
jle 0x4026b1
mov dword [0x4a5a1c], 1
mov eax, 0x3b8
cmp eax, dword [0x4a5a1c]
jl 0x402386
push 0
call fcn.004101f0
mov dword [0x4a5a74], eax
inc dword [0x4a5a1c]
jno 0x402362
mov dword [0x4a5a1c], 0x3b9
mov eax, 0x3c0
cmp eax, dword [0x4a5a1c]
jl 0x40241c
push 0
call fcn.004101f0
mov dword [0x4a5a74], eax
call fcn.00412d00
push eax
push eax
call fcn.00412d00
push eax
push 1
mov eax, dword [0x4a5a74]
cdq
push edx
push eax
call fcn.00409130
call fcn.00412e72
add dword [esp], edx
call fcn.004091e0
call fcn.00412e90
mov dword [0x4a5a74], eax
mov edx, dword [0x4a5a50]
call fcn.00412d00
push eax
call fcn.00412dd0
call fcn.00412d00
push eax
push eax
push dword [0x4a5a74]
call fcn.00409330
pop eax
push 0x4a5a50
call fcn.00412d40
inc dword [0x4a5a1c]
jno 0x402390
push dword [0x4a5a50]
call fcn.00408da0
mov dword [0x4a5a74], eax
mov ebx, dword [0x4a5a74]
xor ebx, 0x98989898
mov dword [0x4a5a74], ebx
mov eax, dword [0x4a5a74]
mov dword [0x4a5a78], eax
call fcn.00412d00
push eax
push eax
push 0xa
call fcn.00412d00
push eax
mov edx, str.0000000000
call fcn.00412dd0
call fcn.00412d00
push eax
push eax
mov eax, dword [0x4a5a74]
cdq
push edx
push eax
call fcn.004094c0
pop eax
call fcn.00412e72
add dword [esp], edx
call fcn.00409550
push 0x4a5a50
call fcn.00412d40
mov dword [0x4a5a1c], 0x3c1
mov eax, 0x3c8
cmp eax, dword [0x4a5a1c]
jl 0x402526
push 0
call fcn.004101f0
mov dword [0x4a5a74], eax
call fcn.00412d00
push eax
push eax
call fcn.00412d00
push eax
push 1
mov eax, dword [0x4a5a74]
cdq
push edx
push eax
call fcn.00409130
call fcn.00412e72
add dword [esp], edx
call fcn.004091e0
call fcn.00412e90
mov dword [0x4a5a74], eax
mov edx, dword [0x4a5a54]
call fcn.00412d00
push eax
call fcn.00412dd0
call fcn.00412d00
push eax
push eax
push dword [0x4a5a74]
call fcn.00409330
pop eax
push 0x4a5a54
call fcn.00412d40
inc dword [0x4a5a1c]
jno 0x40249a
push dword [0x4a5a54]
call fcn.00408da0
mov dword [0x4a5a7c], eax
mov dword [0x4a5a1c], 0x3c9
mov eax, 0x3d0
cmp eax, dword [0x4a5a1c]
jl 0x4025cc
push 0
call fcn.004101f0
mov dword [0x4a5a74], eax
call fcn.00412d00
push eax
push eax
call fcn.00412d00
push eax
push 1
mov eax, dword [0x4a5a74]
cdq
push edx
push eax
call fcn.00409130
call fcn.00412e72
add dword [esp], edx
call fcn.004091e0
call fcn.00412e90
mov dword [0x4a5a74], eax
mov edx, dword [0x4a5a58]
call fcn.00412d00
push eax
call fcn.00412dd0
call fcn.00412d00
push eax
push eax
push dword [0x4a5a74]
call fcn.00409330
pop eax
push 0x4a5a58
call fcn.00412d40
inc dword [0x4a5a1c]
jno 0x402540
push dword [0x4a5a58]
call fcn.00408da0
mov dword [0x4a5a74], eax
mov eax, dword [0x4a5a74]
mov dword [0x4a5a80], eax
mov dword [0x4a5a1c], 0x3d1
mov eax, dword [0x4a5a80]
cmp eax, dword [0x4a5a1c]
jl 0x402614
push 0
call fcn.004101f0
mov dword [0x4a5a74], eax
inc dword [0x4a5a1c]
jno 0x4025f0
mov eax, dword [0x4a5a80]
mov dword [0x4a5a1c], eax
mov ebx, dword [0x4a5a80]
add ebx, 0x12
cmp ebx, dword [0x4a5a1c]
jl 0x402658
push 0
call fcn.004101f0
mov dword [0x4a5a74], eax
mov ebx, dword [0x4a5a5c]
add ebx, dword [0x4a5a74]
mov dword [0x4a5a5c], ebx
inc dword [0x4a5a1c]
jno 0x40261e
mov ebx, dword [0x4a5a7c]
xor ebx, dword [0x4a5a5c]
mov dword [0x4a5a84], ebx
mov ebx, dword [0x4a5a84]
and ebx, ebx
jne 0x40267e
mov dword [0x4a5a84], 0x63
mov ebx, dword [0x4a5a84]
xor ebx, 0x98989898
mov dword [0x4a5a84], ebx
mov eax, dword [0x4a5a78]
mov dword [0x4a5a88], eax
mov ebx, dword [0x4a5a78]
cmp ebx, dword [0x4a5a84]
jne 0x4026aa
jmp 0x4026af
call fcn.00406997
jmp 0x4026b6
call fcn.00406997
mov ebx, dword [0x4a5a6c]
cmp ebx, dword [0x4a5a64]
jne 0x4026c6
jmp 0x4026cb
call fcn.00406997
call sub.KERNEL32.dll_GetTickCount
mov dword [0x4a5a8c], eax
mov ebx, dword [0x4a5a8c]
sub ebx, dword [0x4a5a48]
cmp ebx, 0x3e8
jle 0x4026f0
push 0x9099542
inc eax
ret
mov dword [0x4a5a90], 0x45a2a5
push 0x4a60c0
push 0
push 0x15
push 0x15
push 4
call fcn.00410504
push 0x4a60c8
push 0
push 0x15
push 0x15
push 4
call fcn.00410504
push 0x4a60d0
push 0
push 0x15
push 0x15
push 4
call fcn.00410504
push 0x4a60d8
push 0
push 0x15
push 0x15
push 4
call fcn.00410504
push 0x4a60e0
push 0
push 0x15
push 0x15
push 4
call fcn.00410504
push 0x3e8
call fcn.00412170
mov dword [0x4a5a38], eax
push 0x3e8
call fcn.00412170
mov dword [0x4a5a94], eax
mov dword [0x4a5a1c], 1
mov eax, 0x14
cmp eax, dword [0x4a5a1c]
jl 0x402812
mov ebx, dword [0x4a5a1c]
mov ebp, dword [0x4a60c8]
shl ebx, 2
mov dword [ebp + ebx], 1
mov ebx, dword [0x4a5a1c]
mov ebp, dword [0x4a60d0]
shl ebx, 2
mov dword [ebp + ebx], 1
mov ebx, dword [0x4a5a1c]
mov ebp, dword [0x4a60d8]
shl ebx, 2
mov dword [ebp + ebx], 1
inc dword [0x4a5a1c]
jno 0x4027b8
mov edx, str.Template
lea ecx, [0x4a5ab0]
call fcn.00409008
call fcn.00412d00
push eax
push eax
call fcn.0040f794
push 0x4a5a98
call fcn.00412d40
call fcn.00406b0b
call int.0040767b
call fcn.00406b0b
call fcn.00406a30
call fcn.00407445
call fcn.00406a30
call fcn.00406277
call fcn.00412d00
push eax
mov edx, dword [0x4a5a98]
call fcn.00412d00
push eax
call fcn.00412dd0
mov edx, str.CH.dll
call fcn.00412dd0
call fcn.00412e30
push 0
call fcn.00412e72
add dword [esp + 4], edx
call fcn.0040fc60
call fcn.00412e90
and eax, eax
je 0x4028c8
mov ebp, 0x495582
mov ebx, ebp
mov ebp, 0x494982
sub ebx, ebp
push ebx
mov ebp, 0x494982
push ebp
push 0
call fcn.0040fe90
push 0
call fcn.0040fa40
jmp 0x4028c8
call fcn.00412d00
push eax
mov edx, dword [0x4a5a98]
call fcn.00412d00
push eax
call fcn.00412dd0
mov edx, str.help.txt
call fcn.00412dd0
call fcn.00412e30
push 0
call fcn.00412e72
add dword [esp + 4], edx
call fcn.0040fc60
call fcn.00412e90
and eax, eax
je 0x402935
mov ebp, 0x49497f
mov ebx, ebp
mov ebp, 0x493d3a
sub ebx, ebp
push ebx
mov ebp, 0x493d3a
push ebp
push 0
call fcn.0040fe90
push 0
call fcn.0040fa40
jmp 0x402944
push str.Could_not_create_HELP.TXT_file.
push str.Error
call fcn.0040b655
push str.CH_Trainer_Keys.dat
push 0
call fcn.0040fde0
mov dword [0x4a59e0], eax
mov ebx, dword [0x4a59e0]
and ebx, ebx
jle 0x402976
mov dword [0x4a5ac8], 1
push 0
call fcn.0040fa40
push 0
push 0
call sub.WININET.DLL_InternetGetConnectedState
and eax, eax
je 0x40298b
jmp 0x4029ba
push dword [0x4a5a88]
call fcn.00407f08
mov ebx, eax
and ebx, ebx
jne 0x4029ba
push 0
push str.This_trainer_must_be_authenticated_before_it_can_be_used._Please_connect_this_computer_to_the_Internet_or_obtain_an_offline_key_from_cheathappens.com_then_re_run_the_trainer.
push str.No_Internet_Connection_
call fcn.0040b626
jmp 0x407b69
call fcn.00412d00
push eax
push eax
call fcn.0040f794
mov edx, str.black.txt
call fcn.00412dd0
push 0x4a5acc
call fcn.00412d40
mov ebx, dword [0x4a5ad0]
and ebx, ebx
jle 0x402a9c
call fcn.00412d00
push eax
mov edx, str.http:__www.cheathappens.com_unauthorized_
call fcn.00412dd0
call fcn.00412d00
push eax
push eax
mov eax, dword [0x4a5a88]
cdq
push edx
push eax
xor dword [esp], 0x7b3d89b
xor dword [esp + 4], 0
pop eax
pop edx
push edx
push eax
call fcn.004094c0
pop eax
mov edx, str..zip
call fcn.00412dd0
push 0x4a5ad4
call fcn.00412d40
mov edx, str.http:__www.cheathappens.com_unauthorized_0.zip
lea ecx, [0x4a5ad8]
call fcn.00409008
mov edx, dword [0x4a5ad4]
call fcn.00412d00
push eax
call fcn.00412dd0
push 0x4a5adc
call fcn.00412d40
mov edx, dword [0x4a5ad8]
call fcn.00412d00
push eax
call fcn.00412dd0
push 0x4a5ae0
call fcn.00412d40
push 0
push 0
mov eax, dword [0x4a5acc]
push eax
mov eax, dword [0x4a5ae0]
push eax
push 0
call sub.URLMON.DLL_URLDownloadToFileA
mov dword [0x4a5ae4], eax
call fcn.00412d00
push eax
mov edx, str.http:__www.cheathappens.com_unauthorized_
call fcn.00412dd0
call fcn.00412d00
push eax
push eax
mov eax, dword [0x4a5a88]
cdq
push edx
push eax
xor dword [esp], 0x7b3d89b
xor dword [esp + 4], 0
pop eax
pop edx
push edx
push eax
call fcn.004094c0
pop eax
mov edx, str..zip
call fcn.00412dd0
push 0x4a5ad4
call fcn.00412d40
mov edx, str.http:__www.cheathappens.com_unauthorized_0.zip
lea ecx, [0x4a5ad8]
call fcn.00409008
mov edx, dword [0x4a5ad4]
call fcn.00412d00
push eax
call fcn.00412dd0
push 0x4a5adc
call fcn.00412d40
mov edx, dword [0x4a5ad8]
call fcn.00412d00
push eax
call fcn.00412dd0
push 0x4a5ae0
call fcn.00412d40
push 0
push 0
mov eax, dword [0x4a5acc]
push eax
mov eax, dword [0x4a5ae0]
push eax
push 0
call sub.URLMON.DLL_URLDownloadToFileA
mov dword [0x4a5ae4], eax
mov ebx, dword [0x4a5ae4]
and ebx, ebx
jne 0x402b5c
jmp 0x402b8b
push dword [0x4a5a88]
call fcn.00407f08
mov ebx, eax
and ebx, ebx
jne 0x402b8b
push 0
push str.This_trainer_must_be_authenticated_before_it_can_be_used._Please_connect_this_computer_to_the_Internet_or_obtain_an_offline_key_from_cheathappens.com_then_re_run_the_trainer.
push str.No_Internet_Connection_
call fcn.0040b626
jmp 0x407b69
push 0
push 0
mov eax, dword [0x4a5acc]
push eax
mov eax, dword [0x4a5adc]
push eax
push 0
call sub.URLMON.DLL_URLDownloadToFileA
mov dword [0x4a5ae8], eax
call fcn.00412d00
push eax
push eax
push 0x44d0a7
push str.IZnvZalZidZ_ZTraiZnerZ_UsZerZ
call fcn.004097a0
push 0x4a5aec
call fcn.00412d40
mov ebx, dword [0x4a5ae8]
and ebx, ebx
jne 0x402bdf
call fcn.00406997
call fcn.00412d00
push eax
push eax
push str.ZTA.l
push dword [0x4a5aec]
call fcn.004097a0
push 0x4a5aec
call fcn.00412d40
mov ebx, dword [0x4a5ae8]
and ebx, ebx
jne 0x402d5a
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.00410dcf
and eax, eax
je 0x402d50
push 1
call fcn.00410c7d
push eax
call fcn.0041077d
push 1
call fcn.0040f778
push eax
call fcn.00410859
push 0x11
call fcn.00410870
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040bd10
push eax
push dword [0x4a5aec]
push 0
push 0
call fcn.00410887
call fcn.00410810
push 0
push 0x64
push 0x1f4
push 1
call fcn.00410ee5
push 0
call fcn.00410c7d
push eax
call fcn.0041077d
push 0
call fcn.00410870
push 0xff
push 0x28
push 0x28
mov eax, 0xff
call fcn.0040bd10
push eax
push 0x24
push 0x1df
push 1
push 0
call fcn.0041090b
push 0x11
call fcn.00410870
push 0x64
push 0x1f4
push 0xa
push 0xc8
push 1
call fcn.00410db3
push eax
call fcn.004108d9
call fcn.00410810
push 1
call fcn.00410948
push 0xff
push 0
call fcn.00410db3
push eax
push 0
call fcn.0040df43
push eax
call fcn.00407bbb
call fcn.00406277
jmp 0x402c00
mov ebx, dword [0x4a5ae4]
and ebx, ebx
je 0x402d7c
push dword [0x4a5a88]
call fcn.00407f08
mov ebx, eax
and ebx, ebx
jne 0x402d7c
mov eax, 1
jmp 0x402d7e
xor eax, eax
and eax, eax
je 0x402d8c
mov dword [0x4a5a90], 0
mov dword [0x4a5af0], 3
lea ebp, [0x4a5d94]
lea eax, [ebp]
push eax
call sub.USER32.DLL_GetKeyboardState
movsx eax, byte [ebp + 0x90]
push eax
pop dword [0x4a5af4]
mov ebx, dword [0x4a5af4]
cmp ebx, 1
jne 0x402dd0
mov edx, str.Run_game_and_press_F1_at_main_menu.__Numlock_is_ON.
lea ecx, [0x4a5af8]
call fcn.00409008
jmp 0x402de0
mov edx, 0x44d233
lea ecx, [0x4a5af8]
call fcn.00409008
mov ebx, dword [0x4a5af0]
cmp ebx, dword [0x4a5af4]
je 0x402f3e
mov eax, dword [0x4a5af4]
mov dword [0x4a5af0], eax
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.00410dcf
and eax, eax
je 0x402f3e
push 1
call fcn.00410c7d
push eax
call fcn.0041077d
push 1
call fcn.0040f778
push eax
call fcn.00410859
push 0x11
call fcn.00410870
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040bd10
push eax
push dword [0x4a5af8]
push 0
push 0
call fcn.00410887
call fcn.00410810
push 0
push 0x64
push 0x1f4
push 1
call fcn.00410ee5
push 0
call fcn.00410c7d
push eax
call fcn.0041077d
push 0
call fcn.00410870
push 0xff
push 0x70
push 0x59
mov eax, 0x57
call fcn.0040bd10
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.0041090b
push 0x11
call fcn.00410870
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.00410db3
push eax
call fcn.004108d9
call fcn.00410810
push 1
call fcn.00410948
push 0xff
push 0
call fcn.00410db3
push eax
push 0
call fcn.0040df43
push eax
call fcn.00407bbb
call fcn.00406277
push 0xa
call fcn.0040bd29
push 0x70
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
and ebx, ebx
je 0x402d96
mov edx, str.Faery.exe
lea ecx, [0x4a5a24]
call fcn.00409008
call fcn.00405645
mov ebx, dword [0x4a5a28]
and ebx, ebx
jne 0x4030f5
push 4
call fcn.0040ad54
push 0x12c
call fcn.0040bd29
push 0x12c
call fcn.0040bd29
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.00410dcf
and eax, eax
je 0x4030e6
push 1
call fcn.00410c7d
push eax
call fcn.0041077d
push 1
call fcn.0040f778
push eax
call fcn.00410859
push 0x11
call fcn.00410870
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040bd10
push eax
push str.Game_not_Found__Run_Game_and_then_press_F1_at_Main_Menu.
push 0
push 0
call fcn.00410887
call fcn.00410810
push 0
push 0x64
push 0x1f4
push 1
call fcn.00410ee5
push 0
call fcn.00410c7d
push eax
call fcn.0041077d
push 0
call fcn.00410870
push 0xff
push 0x70
push 0x59
mov eax, 0x57
call fcn.0040bd10
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.0041090b
push 0x11
call fcn.00410870
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.00410db3
push eax
call fcn.004108d9
call fcn.00410810
push 1
call fcn.00410948
push 0xff
push 0
call fcn.00410db3
push eax
push 0
call fcn.0040df43
push eax
call fcn.00407bbb
push 0x7d0
call fcn.0040bd29
jmp 0x402d5a
mov edx, str.CH.dll
lea ecx, [0x4a5afc]
call fcn.00409008
mov edx, dword [0x4a5a98]
call fcn.00412d00
push eax
call fcn.00412dd0
mov edx, dword [0x4a5afc]
call fcn.00412dd0
push 0x4a5a3c
call fcn.00412d40
call fcn.0040568a
mov edx, str.gameserver.dll
lea ecx, [0x4a5aa0]
call fcn.00409008
mov edx, str.xlive.dll
lea ecx, [0x4a5b00]
call fcn.00409008
call fcn.00405645
call fcn.00406174
call fcn.00406277
mov ebx, dword [0x4a5abc]
and ebx, ebx
jne 0x4032c1
mov ebx, dword [0x4a5b04]
and ebx, ebx
jne 0x4032c1
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.00410dcf
and eax, eax
je 0x4032bc
push 1
call fcn.00410c7d
push eax
call fcn.0041077d
push 1
call fcn.0040f778
push eax
call fcn.00410859
push 0x11
call fcn.00410870
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040bd10
push eax
push str.Game_not_Found__Run_Game_and_then_press_F1_at_Main_Menu.
push 0
push 0
call fcn.00410887
call fcn.00410810
push 0
push 0x64
push 0x1f4
push 1
call fcn.00410ee5
push 0
call fcn.00410c7d
push eax
call fcn.0041077d
push 0
call fcn.00410870
push 0xff
push 0x70
push 0x59
mov eax, 0x57
call fcn.0040bd10
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.0041090b
push 0x11
call fcn.00410870
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.00410db3
push eax
call fcn.004108d9
call fcn.00410810
push 1
call fcn.00410948
push 0xff
push 0
call fcn.00410db3
push eax
push 0
call fcn.0040df43
push eax
call fcn.00407bbb
jmp 0x402d5a
mov ebx, dword [0x4a5a68]
cmp ebx, dword [0x4a5a70]
jne 0x4032e5
mov ebx, dword [0x4a5a68]
and ebx, ebx
je 0x4032e5
mov ebx, dword [0x4a5a70]
and ebx, ebx
je 0x4032e5
jmp 0x4032ec
mov eax, 1
jmp 0x4032ee
xor eax, eax
and eax, eax
je 0x403345
push 0xa
call fcn.0040bde7
mov ebx, eax
add ebx, 0xa
mov dword [0x4a5b08], ebx
push 0x28
call fcn.0040bde7
mov ebx, eax
add ebx, 0x28
mov dword [0x4a5b0c], ebx
mov ebx, dword [0x4a5abc]
add ebx, dword [0x4a5b08]
mov dword [0x4a5abc], ebx
mov ebx, dword [0x4a5b04]
add ebx, dword [0x4a5b0c]
mov dword [0x4a5b04], ebx
call fcn.00406997
push 3
call fcn.0040ad54
push 0x12c
call fcn.0040bd29
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.00410dcf
and eax, eax
je 0x40349a
push 1
call fcn.00410c7d
push eax
call fcn.0041077d
push 1
call fcn.0040f778
push eax
call fcn.00410859
push 0x11
call fcn.00410870
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040bd10
push eax
push str.Game_found__Trainer_Activated_
push 0
push 0
call fcn.00410887
call fcn.00410810
push 0
push 0x64
push 0x1f4
push 1
call fcn.00410ee5
push 0
call fcn.00410c7d
push eax
call fcn.0041077d
push 0
call fcn.00410870
push 0xff
push 0x70
push 0x59
mov eax, 0x57
call fcn.0040bd10
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.0041090b
push 0x11
call fcn.00410870
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.00410db3
push eax
call fcn.004108d9
call fcn.00410810
push 1
call fcn.00410948
push 0xff
push 0
call fcn.00410db3
push eax
push 0
call fcn.0040df43
push eax
call fcn.00407bbb
mov ebx, dword [0x4a5b10]
and ebx, ebx
je 0x4037a8
push 0x8b
mov ebx, dword [0x4a5a38]
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0xff
mov ebx, dword [0x4a5a38]
inc ebx
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x55
mov ebx, dword [0x4a5a38]
add ebx, 2
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x8b
mov ebx, dword [0x4a5a38]
add ebx, 3
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0xec
mov ebx, dword [0x4a5a38]
add ebx, 4
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x83
mov ebx, dword [0x4a5a38]
add ebx, 5
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0xec
mov ebx, dword [0x4a5a38]
add ebx, 6
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x20
mov ebx, dword [0x4a5a38]
add ebx, 7
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x53
mov ebx, dword [0x4a5a38]
add ebx, 8
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x56
mov ebx, dword [0x4a5a38]
add ebx, 9
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x57
mov ebx, dword [0x4a5a38]
add ebx, 0xa
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x8d
mov ebx, dword [0x4a5a38]
add ebx, 0xb
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x45
mov ebx, dword [0x4a5a38]
add ebx, 0xc
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0xe0
mov ebx, dword [0x4a5a38]
add ebx, 0xd
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x33
mov ebx, dword [0x4a5a38]
add ebx, 0xe
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0xf6
mov ebx, dword [0x4a5a38]
add ebx, 0xf
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x50
mov ebx, dword [0x4a5a38]
add ebx, 0x10
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0xff
mov ebx, dword [0x4a5a38]
add ebx, 0x11
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x75
mov ebx, dword [0x4a5a38]
add ebx, 0x12
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0xc
mov ebx, dword [0x4a5a38]
add ebx, 0x13
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
mov ebx, dword [0x4a5b10]
add ebx, 0x1000
mov dword [0x4a5a1c], ebx
mov ebx, dword [0x4a5b10]
add ebx, 0x200000
cmp ebx, dword [0x4a5a1c]
jl 0x4037a8
push dword [0x4a5a34]
push 0x14
push dword [0x4a5a94]
push dword [0x4a5a1c]
push dword [0x4a5b14]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x4a59e0], eax
push 0x14
push dword [0x4a5a94]
push dword [0x4a5a38]
call fcn.004121b0
mov dword [0x4a59e0], eax
mov ebx, dword [0x4a59e0]
cmp ebx, 1
jne 0x40379c
mov eax, dword [0x4a5a1c]
mov dword [0x4a5b18], eax
push 0xc2
mov ebx, dword [0x4a5a38]
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0xc
mov ebx, dword [0x4a5a38]
inc ebx
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 2
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push dword [0x4a5a34]
push 3
push dword [0x4a5a38]
push dword [0x4a5b18]
push dword [0x4a5b14]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a59e0], eax
inc dword [0x4a5a1c]
jno 0x4036bd
mov ebx, dword [0x4a5ad0]
and ebx, ebx
jle 0x4037b7
jmp 0x40430a
mov ebx, dword [0x4a5a90]
cmp ebx, 0x45a2a5
jne 0x40385b
mov ebp, dword [0x4a60c0]
mov dword [ebp + 4], 0x61
mov dword [ebp + 8], 0x62
mov dword [ebp + 0xc], 0x63
mov dword [ebp + 0x10], 0x64
mov dword [ebp + 0x14], 0x65
mov dword [ebp + 0x18], 0x66
mov dword [ebp + 0x1c], 0x67
mov dword [ebp + 0x20], 0
mov dword [ebp + 0x24], 0
mov dword [ebp + 0x28], 0
mov dword [ebp + 0x2c], 0
mov dword [ebp + 0x30], 0
mov dword [ebp + 0x34], 0
mov dword [ebp + 0x38], 0
mov dword [ebp + 0x3c], 0
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0
mov dword [ebp + 0x48], 0
mov dword [ebp + 0x4c], 0
mov dword [ebp + 0x50], 0
push str.CH_Trainer_Keys.dat
push 0
call fcn.0040fde0
mov dword [0x4a59e0], eax
mov ebx, dword [0x4a59e0]
and ebx, ebx
jle 0x4039c5
mov dword [0x4a5ac8], 1
push 0
call fcn.004101f0
mov dword [0x4a5b1c], eax
mov dword [0x4a5a1c], 1
mov eax, dword [0x4a5b1c]
cmp eax, dword [0x4a5a1c]
jl 0x4039bb
call fcn.00412d00
push eax
push eax
push 0
call fcn.0040fef0
push 0x4a5b20
call fcn.00412d40
push dword [0x4a5b20]
mov edx, 0x44d1f5
pop ecx
call fcn.00412ee0
je 0x4038f6
mov ebx, dword [0x4a5a1c]
mov ebp, dword [0x4a60c8]
shl ebx, 2
mov dword [ebp + ebx], 0
push dword [0x4a5b20]
mov edx, str.CTRL
pop ecx
call fcn.00412ee0
je 0x403920
mov ebx, dword [0x4a5a1c]
mov ebp, dword [0x4a60d0]
shl ebx, 2
mov dword [ebp + ebx], 0
push dword [0x4a5b20]
mov edx, 0x44d345
pop ecx
call fcn.00412ee0
je 0x40394a
mov ebx, dword [0x4a5a1c]
mov ebp, dword [0x4a60d8]
shl ebx, 2
mov dword [ebp + ebx], 0
push 0
call fcn.004101f0
push eax
mov ebx, dword [0x4a5a1c]
mov ebp, dword [0x4a60c0]
shl ebx, 2
pop dword [ebp + ebx]
call fcn.00412d00
push eax
push eax
call fcn.00412d00
push eax
push 1
mov ebx, dword [0x4a5a1c]
shl ebx, 2
mov eax, dword [ebp + ebx]
cdq
push edx
push eax
call fcn.00409130
call fcn.00412e72
add dword [esp], edx
call fcn.004091e0
call fcn.00412e90
push eax
mov ebx, dword [0x4a5a1c]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x4a5a1c]
jno 0x4038a0
push 0
call fcn.0040fa40
mov ebx, dword [0x4a5ab4]
add ebx, 0xb7d59
mov dword [0x4a5b24], ebx
mov ebx, dword [0x4a5ab4]
add ebx, 0x6b2b3
mov dword [0x4a5b28], ebx
push 0x8b
mov ebx, dword [0x4a5a38]
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0xf1
mov ebx, dword [0x4a5a38]
inc ebx
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x8b
mov ebx, dword [0x4a5a38]
add ebx, 2
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x46
mov ebx, dword [0x4a5a38]
add ebx, 3
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x50
mov ebx, dword [0x4a5a38]
add ebx, 4
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0xa3
mov ebx, dword [0x4a5a38]
add ebx, 5
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 6
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x3f
mov ebx, dword [0x4a5a38]
add ebx, 7
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 8
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x10
mov ebx, dword [0x4a5a38]
add ebx, 9
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x83
mov ebx, dword [0x4a5a38]
add ebx, 0xa
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x3d
mov ebx, dword [0x4a5a38]
add ebx, 0xb
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 4
mov ebx, dword [0x4a5a38]
add ebx, 0xc
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x3f
mov ebx, dword [0x4a5a38]
add ebx, 0xd
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 0xe
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x10
mov ebx, dword [0x4a5a38]
add ebx, 0xf
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 1
mov ebx, dword [0x4a5a38]
add ebx, 0x10
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x75
mov ebx, dword [0x4a5a38]
add ebx, 0x11
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0xe
mov ebx, dword [0x4a5a38]
add ebx, 0x12
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x51
mov ebx, dword [0x4a5a38]
add ebx, 0x13
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x8b
mov ebx, dword [0x4a5a38]
add ebx, 0x14
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x88
mov ebx, dword [0x4a5a38]
add ebx, 0x15
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0xe8
mov ebx, dword [0x4a5a38]
add ebx, 0x16
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 2
mov ebx, dword [0x4a5a38]
add ebx, 0x17
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 0x18
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 0x19
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x89
mov ebx, dword [0x4a5a38]
add ebx, 0x1a
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x88
mov ebx, dword [0x4a5a38]
add ebx, 0x1b
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0xf0
mov ebx, dword [0x4a5a38]
add ebx, 0x1c
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 5
mov ebx, dword [0x4a5a38]
add ebx, 0x1d
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 0x1e
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 0x1f
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x59
mov ebx, dword [0x4a5a38]
add ebx, 0x20
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0xc3
mov ebx, dword [0x4a5a38]
add ebx, 0x21
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 0x22
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 0x23
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 0x24
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 0x25
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 0x26
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 0x27
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 0x28
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 0x29
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 0x2a
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 0x2b
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 0x2c
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 0x2d
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 0x2e
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 0x2f
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x8b
mov ebx, dword [0x4a5a38]
add ebx, 0x30
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x9c
mov ebx, dword [0x4a5a38]
add ebx, 0x31
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x91
mov ebx, dword [0x4a5a38]
add ebx, 0x32
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0xd0
mov ebx, dword [0x4a5a38]
add ebx, 0x33
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 1
mov ebx, dword [0x4a5a38]
add ebx, 0x34
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 0x35
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 0x36
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x89
mov ebx, dword [0x4a5a38]
add ebx, 0x37
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0xd
mov ebx, dword [0x4a5a38]
add ebx, 0x38
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 8
mov ebx, dword [0x4a5a38]
add ebx, 0x39
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x3f
mov ebx, dword [0x4a5a38]
add ebx, 0x3a
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0
mov ebx, dword [0x4a5a38]
add ebx, 0x3b
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x10
mov ebx, dword [0x4a5a38]
add ebx, 0x3c
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0xc3
mov ebx, dword [0x4a5a38]
add ebx, 0x3d
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push dword [0x4a5a34]
push 0x2ac
push dword [0x4a5a38]
mov ebx, dword [0x4a5b04]
add ebx, 0x1091
push ebx
push dword [0x4a5b14]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a59e0], eax
mov ebx, dword [0x4a5b04]
add ebx, 0x3f00
push ebx
mov eax, dword [0x4a5a38]
call fcn.00412230
mov dword [0x4a59e0], eax
push dword [0x4a5a34]
push 4
push dword [0x4a5a38]
mov ebx, dword [0x4a5b04]
add ebx, 0x1097
push ebx
push dword [0x4a5b14]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a59e0], eax
mov ebx, dword [0x4a5b04]
add ebx, 0x3f04
push ebx
mov eax, dword [0x4a5a38]
call fcn.00412230
mov dword [0x4a59e0], eax
push dword [0x4a5a34]
push 4
push dword [0x4a5a38]
mov ebx, dword [0x4a5b04]
add ebx, 0x109d
push ebx
push dword [0x4a5b14]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a59e0], eax
mov ebx, dword [0x4a5b04]
add ebx, 0x3f08
push ebx
mov eax, dword [0x4a5a38]
call fcn.00412230
mov dword [0x4a59e0], eax
push dword [0x4a5a34]
push 4
push dword [0x4a5a38]
mov ebx, dword [0x4a5b04]
add ebx, 0x10ca
push ebx
push dword [0x4a5b14]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a59e0], eax
push 0xe8
mov ebx, dword [0x4a5a38]
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x90
mov ebx, dword [0x4a5a38]
inc ebx
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x90
mov ebx, dword [0x4a5a38]
add ebx, 2
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x90
mov ebx, dword [0x4a5a38]
add ebx, 3
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x90
mov ebx, dword [0x4a5a38]
add ebx, 4
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
mov ebx, dword [0x4a5b04]
add ebx, 0x1091
sub ebx, dword [0x4a5b24]
add ebx, 0xfffffffb
push ebx
mov ebx, dword [0x4a5a38]
inc ebx
mov eax, ebx
call fcn.00412230
mov dword [0x4a59e0], eax
push dword [0x4a5a34]
push 5
push dword [0x4a5a38]
push dword [0x4a5b24]
push dword [0x4a5b14]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a59e0], eax
push 0xe8
mov ebx, dword [0x4a5a38]
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x90
mov ebx, dword [0x4a5a38]
inc ebx
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x90
mov ebx, dword [0x4a5a38]
add ebx, 2
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x90
mov ebx, dword [0x4a5a38]
add ebx, 3
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x90
mov ebx, dword [0x4a5a38]
add ebx, 4
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x90
mov ebx, dword [0x4a5a38]
add ebx, 5
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
push 0x90
mov ebx, dword [0x4a5a38]
add ebx, 6
mov eax, ebx
call fcn.004121a0
mov dword [0x4a59e0], eax
mov ebx, dword [0x4a5b04]
add ebx, 0x10c1
sub ebx, dword [0x4a5b28]
add ebx, 0xfffffffb
push ebx
mov ebx, dword [0x4a5a38]
inc ebx
mov eax, ebx
call fcn.00412230
mov dword [0x4a59e0], eax
push dword [0x4a5a34]
push 7
push dword [0x4a5a38]
push dword [0x4a5b28]
push dword [0x4a5b14]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a59e0], eax
mov dword [0x4a5b2c], 0
mov eax, 0xff
cmp eax, dword [0x4a5b2c]
jl 0x404334
push dword [0x4a5b2c]
call sub.USER32.DLL_GetAsyncKeyState
inc dword [0x4a5b2c]
jno 0x404314
call sub.KERNEL32.dll_IsDebuggerPresent
and eax, eax
je 0x404343
push 0x55009553
ret
mov ebp, dword [0x4a60c0]
push dword [ebp + 4]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a60e0]
pop dword [ebp + 4]
mov ebp, dword [0x4a60c0]
push dword [ebp + 8]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a60e0]
pop dword [ebp + 8]
mov ebp, dword [0x4a60c0]
push dword [ebp + 0xc]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a60e0]
pop dword [ebp + 0xc]
mov ebp, dword [0x4a60c0]
push dword [ebp + 0x10]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a60e0]
pop dword [ebp + 0x10]
mov ebp, dword [0x4a60c0]
push dword [ebp + 0x14]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a60e0]
pop dword [ebp + 0x14]
mov ebp, dword [0x4a60c0]
push dword [ebp + 0x18]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a60e0]
pop dword [ebp + 0x18]
mov ebp, dword [0x4a60c0]
push dword [ebp + 0x1c]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a60e0]
pop dword [ebp + 0x1c]
mov ebp, dword [0x4a60c0]
push dword [ebp + 0x20]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a60e0]
pop dword [ebp + 0x20]
mov ebp, dword [0x4a60c0]
push dword [ebp + 0x24]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a60e0]
pop dword [ebp + 0x24]
mov ebp, dword [0x4a60c0]
push dword [ebp + 0x28]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a60e0]
pop dword [ebp + 0x28]
mov ebp, dword [0x4a60c0]
push dword [ebp + 0x2c]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a60e0]
pop dword [ebp + 0x2c]
mov ebp, dword [0x4a60c0]
push dword [ebp + 0x30]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a60e0]
pop dword [ebp + 0x30]
mov ebp, dword [0x4a60c0]
push dword [ebp + 0x34]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a60e0]
pop dword [ebp + 0x34]
mov ebp, dword [0x4a60c0]
push dword [ebp + 0x38]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a60e0]
pop dword [ebp + 0x38]
mov ebp, dword [0x4a60c0]
push dword [ebp + 0x3c]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a60e0]
pop dword [ebp + 0x3c]
mov ebp, dword [0x4a60c0]
push dword [ebp + 0x40]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a60e0]
pop dword [ebp + 0x40]
mov ebp, dword [0x4a60c0]
push dword [ebp + 0x44]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a60e0]
pop dword [ebp + 0x44]
mov ebp, dword [0x4a60c0]
push dword [ebp + 0x48]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a60e0]
pop dword [ebp + 0x48]
mov ebp, dword [0x4a60c0]
push dword [ebp + 0x4c]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a60e0]
pop dword [ebp + 0x4c]
mov ebp, dword [0x4a60c0]
push dword [ebp + 0x50]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a60e0]
pop dword [ebp + 0x50]
push 0x10
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
mov dword [0x4a5b30], ebx
push 0x11
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
mov dword [0x4a5b34], ebx
push 0x12
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
mov dword [0x4a5b38], ebx
push 1
call fcn.0040bd29
push 0x32
call fcn.0040bde7
mov dword [0x4a5b3c], eax
mov ebx, dword [0x4a5b3c]
cmp ebx, 0x19
jne 0x40468b
mov ebx, dword [0x4a5a68]
cmp ebx, dword [0x4a5a70]
jne 0x404612
mov ebx, dword [0x4a5a68]
and ebx, ebx
je 0x404612
mov ebx, dword [0x4a5a70]
and ebx, ebx
je 0x404612
jmp 0x404619
mov eax, 1
jmp 0x40461b
xor eax, eax
and eax, eax
je 0x40468b
push 0xff
call fcn.0040bde7
mov dword [0x4a5b08], eax
push 0x190
call fcn.0040bde7
mov dword [0x4a5b0c], eax
push dword [0x4a5b08]
mov eax, dword [0x4a5a38]
call fcn.004121a0
mov dword [0x4a59e0], eax
push dword [0x4a5a34]
push 1
push dword [0x4a5a38]
mov ebx, dword [0x4a5b04]
add ebx, dword [0x4a5b0c]
add ebx, 0x1091
push ebx
push dword [0x4a5b14]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a59e0], eax
call fcn.00406997
push dword [0x4a5a34]
push 4
push dword [0x4a5a38]
mov ebx, dword [0x4a5b04]
add ebx, 0x3f00
push ebx
push dword [0x4a5b14]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x4a59e0], eax
mov eax, dword [0x4a5a38]
call fcn.00412240
mov ebx, eax
add ebx, 0x2e8
mov dword [0x4a5b40], ebx
mov eax, dword [0x4a5a38]
call fcn.00412240
mov ebx, eax
add ebx, 0x5f0
mov dword [0x4a5b44], ebx
mov eax, dword [0x4a5a38]
call fcn.00412240
mov ebx, eax
add ebx, 0x5b0
mov dword [0x4a5b48], ebx
mov eax, dword [0x4a5a38]
call fcn.00412240
mov ebx, eax
add ebx, 0x24
mov dword [0x4a5b4c], ebx
mov eax, dword [0x4a5a38]
call fcn.00412240
mov ebx, eax
add ebx, 0x28
mov dword [0x4a5b50], ebx
mov eax, dword [0x4a5a38]
call fcn.00412240
mov ebx, eax
add ebx, 0x2c
mov dword [0x4a5b54], ebx
push dword [0x4a5a34]
push 4
push dword [0x4a5a38]
mov ebx, dword [0x4a5b04]
add ebx, 0x3f08
push ebx
push dword [0x4a5b14]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x4a59e0], eax
mov eax, dword [0x4a5a38]
call fcn.00412240
mov ebx, eax
add ebx, 0x1dc
mov dword [0x4a5b58], ebx
mov dword [0x4a5b5c], 1
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c0]
shl ebx, 2
push dword [ebp + ebx]
call fcn.004082ab
mov dword [0x4a5b60], eax
mov ebx, dword [0x4a5b60]
and ebx, ebx
je 0x4048ce
push dword [0x4a5b64]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x404863
mov dword [0x4a5b64], 1
push 1
mov eax, dword [0x4a5a38]
call fcn.00412230
mov dword [0x4a59e0], eax
push dword [0x4a5a34]
push 4
push dword [0x4a5a38]
mov ebx, dword [0x4a5b04]
add ebx, 0x3f04
push ebx
push dword [0x4a5b14]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a59e0], eax
push 0
call fcn.0040ad54
push 0x12c
call fcn.0040bd29
jmp 0x4048cd
mov ebx, 1
cmp ebx, dword [esp]
jne 0x4048cd
mov dword [0x4a5b64], 0
push 0
mov eax, dword [0x4a5a38]
call fcn.00412230
mov dword [0x4a59e0], eax
push dword [0x4a5a34]
push 4
push dword [0x4a5a38]
mov ebx, dword [0x4a5b04]
add ebx, 0x3f04
push ebx
push dword [0x4a5b14]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a59e0], eax
push 1
call fcn.0040ad54
push 0x12c
call fcn.0040bd29
pop eax
mov dword [0x4a5b5c], 2
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c0]
shl ebx, 2
push dword [ebp + ebx]
call fcn.004082ab
mov dword [0x4a5b68], eax
mov ebx, dword [0x4a5b68]
and ebx, ebx
je 0x404aa9
push dword [0x4a5b6c]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x4049dc
mov dword [0x4a5b6c], 1
push 0x47c34f80
mov eax, dword [0x4a5a38]
call fcn.00412250
mov dword [0x4a59e0], eax
push dword [0x4a5a34]
push 4
push dword [0x4a5a38]
push dword [0x4a5b40]
push dword [0x4a5b14]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a59e0], eax
push 0x12c
call fcn.0040bd29
push dword [0x4a5a34]
push 4
push dword [0x4a5a38]
push dword [0x4a5b44]
push dword [0x4a5b14]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a59e0], eax
push 0
call fcn.0040ad54
push 0x12c
call fcn.0040bd29
jmp 0x404aa8
mov ebx, 1
cmp ebx, dword [esp]
jne 0x404aa8
mov dword [0x4a5b6c], 0
push dword [0x4a5a34]
push 4
push dword [0x4a5a38]
push dword [0x4a5b48]
push dword [0x4a5b14]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x4a59e0], eax
mov eax, dword [0x4a5a38]
call fcn.00412260
fistp dword [0x4a5b70]
push dword [0x4a5b70]
fild dword [esp]
fstp dword [esp]
mov eax, dword [0x4a5a38]
call fcn.00412250
mov dword [0x4a59e0], eax
push dword [0x4a5a34]
push 4
push dword [0x4a5a38]
push dword [0x4a5b40]
push dword [0x4a5b14]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a59e0], eax
push dword [0x4a5a34]
push 4
push dword [0x4a5a38]
push dword [0x4a5b44]
push dword [0x4a5b14]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a59e0], eax
push 1
call fcn.0040ad54
push 0x12c
call fcn.0040bd29
pop eax
mov dword [0x4a5b5c], 3
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c0]
shl ebx, 2
push dword [ebp + ebx]
call fcn.004082ab
mov dword [0x4a5b74], eax
mov ebx, dword [0x4a5b74]
and ebx, ebx
je 0x404ba3
push dword [0x4a5a34]
push 4
push dword [0x4a5a38]
push dword [0x4a5b4c]
push dword [0x4a5b14]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x4a59e0], eax
mov eax, dword [0x4a5a38]
call fcn.00412240
mov dword [0x4a5b70], eax
inc dword [0x4a5b70]
push dword [0x4a5b70]
mov eax, dword [0x4a5a38]
call fcn.00412230
mov dword [0x4a59e0], eax
push dword [0x4a5a34]
push 4
push dword [0x4a5a38]
push dword [0x4a5b4c]
push dword [0x4a5b14]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a59e0], eax
push 0
call fcn.0040ad54
push 0x12c
call fcn.0040bd29
mov dword [0x4a5b5c], 4
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c0]
shl ebx, 2
push dword [ebp + ebx]
call fcn.004082ab
mov dword [0x4a5b78], eax
mov ebx, dword [0x4a5b78]
and ebx, ebx
je 0x404cb2
push dword [0x4a5a34]
push 4
push dword [0x4a5a38]
push dword [0x4a5b4c]
push dword [0x4a5b14]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x4a59e0], eax
mov eax, dword [0x4a5a38]
call fcn.00412240
mov dword [0x4a5b70], eax
dec dword [0x4a5b70]
mov ebx, dword [0x4a5b70]
cmp ebx, 1
jge 0x404c62
mov dword [0x4a5b70], 1
push dword [0x4a5b70]
mov eax, dword [0x4a5a38]
call fcn.00412230
mov dword [0x4a59e0], eax
push dword [0x4a5a34]
push 4
push dword [0x4a5a38]
push dword [0x4a5b4c]
push dword [0x4a5b14]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a59e0], eax
push 0
call fcn.0040ad54
push 0x12c
call fcn.0040bd29
mov dword [0x4a5b5c], 5
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c0]
shl ebx, 2
push dword [ebp + ebx]
call fcn.004082ab
mov dword [0x4a5b7c], eax
mov ebx, dword [0x4a5b7c]
and ebx, ebx
je 0x404dad
push dword [0x4a5a34]
push 4
push dword [0x4a5a38]
push dword [0x4a5b50]
push dword [0x4a5b14]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x4a59e0], eax
mov eax, dword [0x4a5a38]
call fcn.00412240
mov dword [0x4a5b70], eax
add dword [0x4a5b70], 0xa
push dword [0x4a5b70]
mov eax, dword [0x4a5a38]
call fcn.00412230
mov dword [0x4a59e0], eax
push dword [0x4a5a34]
push 4
push dword [0x4a5a38]
push dword [0x4a5b50]
push dword [0x4a5b14]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a59e0], eax
push 0
call fcn.0040ad54
push 0x12c
call fcn.0040bd29
mov dword [0x4a5b5c], 6
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c0]
shl ebx, 2
push dword [ebp + ebx]
call fcn.004082ab
mov dword [0x4a5b80], eax
mov ebx, dword [0x4a5b80]
and ebx, ebx
je 0x404ea8
push dword [0x4a5a34]
push 4
push dword [0x4a5a38]
push dword [0x4a5b54]
push dword [0x4a5b14]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x4a59e0], eax
mov eax, dword [0x4a5a38]
call fcn.00412240
mov dword [0x4a5b70], eax
add dword [0x4a5b70], 0x64
push dword [0x4a5b70]
mov eax, dword [0x4a5a38]
call fcn.00412230
mov dword [0x4a59e0], eax
push dword [0x4a5a34]
push 4
push dword [0x4a5a38]
push dword [0x4a5b54]
push dword [0x4a5b14]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a59e0], eax
push 0
call fcn.0040ad54
push 0x12c
call fcn.0040bd29
mov dword [0x4a5b5c], 7
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c0]
shl ebx, 2
push dword [ebp + ebx]
call fcn.004082ab
mov dword [0x4a5b84], eax
mov ebx, dword [0x4a5b84]
and ebx, ebx
je 0x404f61
push 5
mov eax, dword [0x4a5a38]
call fcn.00412230
mov dword [0x4a59e0], eax
push dword [0x4a5a34]
push 4
push dword [0x4a5a38]
push dword [0x4a5b58]
push dword [0x4a5b14]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a59e0], eax
push 0
call fcn.0040ad54
push 0x12c
call fcn.0040bd29
mov dword [0x4a5b5c], 8
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c0]
shl ebx, 2
push dword [ebp + ebx]
call fcn.004082ab
mov dword [0x4a5b88], eax
mov ebx, dword [0x4a5b88]
and ebx, ebx
je 0x404fcb
mov dword [0x4a5b5c], 9
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c0]
shl ebx, 2
push dword [ebp + ebx]
call fcn.004082ab
mov dword [0x4a5b8c], eax
mov ebx, dword [0x4a5b8c]
and ebx, ebx
je 0x405035
mov dword [0x4a5b5c], 0xa
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c0]
shl ebx, 2
push dword [ebp + ebx]
call fcn.004082ab
mov dword [0x4a5b90], eax
mov ebx, dword [0x4a5b90]
and ebx, ebx
je 0x40509f
mov dword [0x4a5b5c], 0xb
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c0]
shl ebx, 2
push dword [ebp + ebx]
call fcn.004082ab
mov dword [0x4a5b94], eax
mov ebx, dword [0x4a5b94]
and ebx, ebx
je 0x405109
mov dword [0x4a5b5c], 0xc
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c0]
shl ebx, 2
push dword [ebp + ebx]
call fcn.004082ab
mov dword [0x4a5b98], eax
mov ebx, dword [0x4a5b98]
and ebx, ebx
je 0x405173
mov dword [0x4a5b5c], 0xd
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c0]
shl ebx, 2
push dword [ebp + ebx]
call fcn.004082ab
mov dword [0x4a5b9c], eax
mov ebx, dword [0x4a5b9c]
and ebx, ebx
je 0x4051dd
mov dword [0x4a5b5c], 0xe
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c0]
shl ebx, 2
push dword [ebp + ebx]
call fcn.004082ab
mov dword [0x4a5ba0], eax
mov ebx, dword [0x4a5ba0]
and ebx, ebx
je 0x405247
mov dword [0x4a5b5c], 0xf
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c0]
shl ebx, 2
push dword [ebp + ebx]
call fcn.004082ab
mov dword [0x4a5ba4], eax
mov ebx, dword [0x4a5ba4]
and ebx, ebx
je 0x4052b1
mov dword [0x4a5b5c], 0x10
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c0]
shl ebx, 2
push dword [ebp + ebx]
call fcn.004082ab
mov dword [0x4a5ba8], eax
mov ebx, dword [0x4a5ba8]
and ebx, ebx
je 0x40531b
mov dword [0x4a5b5c], 0x11
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c0]
shl ebx, 2
push dword [ebp + ebx]
call fcn.004082ab
mov dword [0x4a5bac], eax
mov ebx, dword [0x4a5bac]
and ebx, ebx
je 0x405385
mov dword [0x4a5b5c], 0x12
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c0]
shl ebx, 2
push dword [ebp + ebx]
call fcn.004082ab
mov dword [0x4a5bb0], eax
mov ebx, dword [0x4a5bb0]
and ebx, ebx
je 0x4053ef
mov dword [0x4a5b5c], 0x13
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c0]
shl ebx, 2
push dword [ebp + ebx]
call fcn.004082ab
mov dword [0x4a5bb4], eax
mov ebx, dword [0x4a5bb4]
and ebx, ebx
je 0x405459
mov dword [0x4a5b5c], 0x14
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60d0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a5b5c]
mov ebp, dword [0x4a60c0]
shl ebx, 2
push dword [ebp + ebx]
call fcn.004082ab
mov dword [0x4a5bb8], eax
mov ebx, dword [0x4a5bb8]
and ebx, ebx
je 0x4054c3
mov dword [0x4a5b60], 0
mov dword [0x4a5b68], 0
mov dword [0x4a5b74], 0
mov dword [0x4a5b78], 0
mov dword [0x4a5b7c], 0
mov dword [0x4a5b80], 0
mov dword [0x4a5b84], 0
mov dword [0x4a5b88], 0
mov dword [0x4a5b8c], 0
mov dword [0x4a5b90], 0
mov dword [0x4a5b94], 0
mov dword [0x4a5b98], 0
mov dword [0x4a5b9c], 0
mov dword [0x4a5ba0], 0
mov dword [0x4a5ba4], 0
mov dword [0x4a5ba8], 0
mov dword [0x4a5bac], 0
mov dword [0x4a5bb0], 0
mov dword [0x4a5bb4], 0
mov dword [0x4a5bb8], 0
mov ebx, dword [0x4a5a90]
cmp ebx, 0x45a2a5
je 0x4055a8
push 0
push 3
call fcn.0040d733
call fcn.00406277
push 1
call fcn.0040bd29
mov ebx, dword [0x4a5a68]
cmp ebx, dword [0x4a5a70]
jne 0x4055db
mov ebx, dword [0x4a5a68]
and ebx, ebx
je 0x4055db
mov ebx, dword [0x4a5a70]
and ebx, ebx
je 0x4055db
jmp 0x4055e2
mov eax, 1
jmp 0x4055e4
xor eax, eax
and eax, eax
je 0x405640
push 0xa
call fcn.0040bde7
mov ebx, eax
add ebx, 0xa
mov dword [0x4a5b08], ebx
push 0x28
call fcn.0040bde7
mov ebx, eax
add ebx, 0x28
mov dword [0x4a5b0c], ebx
mov ebx, dword [0x4a5abc]
add ebx, dword [0x4a5b08]
mov dword [0x4a5abc], ebx
mov ebx, dword [0x4a5b04]
add ebx, dword [0x4a5b0c]
mov dword [0x4a5b04], ebx
call fcn.00406997
jmp 0x4039c5
jmp 0x40430a
push 0
call 0x407b88
call fcn.00412ce0
push dword [0x4a59d0]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.0040ae5b
call fcn.0040bf09
call fcn.0040c4f9
call fcn.0040db40
call fcn.0040f674
call fcn.0040f8ab
call fcn.0040fab0
call fcn.004109a0
call fcn.00411637
call fcn.00412160
ret