Function at 0x401930
Capabilities:
Enumerate processes
Execute command

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x407e0f
mov eax, dword fs:[0]
push eax
sub esp, 0xaf0
mov eax, dword [0x40d008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Waiting_for_roblox..._n
call fcn.00405970
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [eax]
nop word [eax + eax]
push 0x16
xorps xmm0, xmm0
mov dword [ebp - 0xabc], 0
push 0x40938c
lea ecx, [ebp - 0xacc]
mov dword [ebp - 0xab8], 0
movups xmmword [ebp - 0xacc], xmm0
call fcn.00406230
push 0
push 2
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov edx, dword [ebp - 0xacc]
mov edi, eax
mov dword [ebp - 0xaac], edx
cmp edi, 0xffffffff
je 0x401aa7
lea eax, [ebp - 0x85c]
mov dword [ebp - 0x85c], 0x22c
push eax
push edi
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x401a9e
cmp dword [ebp - 0xab8], 8
mov esi, dword [ebp - 0xabc]
setae byte [ebp - 0xaa5]
nop word [eax + eax]
lea eax, [ebp - 0x838]
lea edx, [eax + 2]
nop dword [eax]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x401a20
sub eax, edx
lea ecx, [ebp - 0xacc]
sar eax, 1
cmp byte [ebp - 0xaa5], 0
cmovne ecx, dword [ebp - 0xaac]
cmp esi, eax
jne 0x401a82
lea edx, [ebp - 0x838]
test esi, esi
je 0x401a64
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x401a7c
add ecx, 2
add edx, 2
sub esi, 1
jne 0x401a51
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call esi
mov edx, dword [ebp - 0xaac]
mov byte [ebp - 0xaa5], 1
jmp 0x401aae
mov esi, dword [ebp - 0xabc]
lea eax, [ebp - 0x85c]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x401a10
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call esi
mov edx, dword [ebp - 0xaac]
mov byte [ebp - 0xaa5], 0
mov eax, dword [ebp - 0xab8]
cmp eax, 8
jb 0x401ae8
lea ecx, [eax*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x401ade
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402155
push ecx
push edx
call fcn.00406f0e
add esp, 8
cmp byte [ebp - 0xaa5], 0
jne 0x401afe
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x401980
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Roblox_Detected._n
call fcn.00405970
push 0x5dc
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x43
xorps xmm0, xmm0
mov dword [ebp - 0x30c], 0
push str.https:__raw.githubusercontent.com_Cesare0328_Lx0hTx_main_AndroidRbx
lea ecx, [ebp - 0x31c]
mov dword [ebp - 0x308], 0
movups xmmword [ebp - 0x31c], xmm0
call fcn.00406230
push 0x409356
lea ecx, [ebp - 0x268]
mov dword [ebp - 4], 0
call fcn.00404b40
push 0x409356
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 1
call fcn.00404b40
push str.https:__client_telemetry.roblox.com
lea ecx, [ebp - 0x304]
mov byte [ebp - 4], 2
call fcn.00404b40
push str.https:__jester_telemetry.jester.com
lea ecx, [ebp - 0x2a4]
mov byte [ebp - 4], 3
call fcn.00404b40
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2bc]
push 0x16
xorps xmm0, xmm0
mov dword [ebp - 0x2ac], 0
push 0x40938c
movups xmmword [ebp - 0x2bc], xmm0
mov dword [ebp - 0x2a8], 0
call fcn.00406230
mov byte [ebp - 4], 5
movups xmm0, xmmword [0x40938c]
mov eax, dword [0x4093b4]
mov dword [ebp - 0xad4], eax
mov ax, word [0x4093b8]
movups xmmword [ebp - 0xafc], xmm0
push 0
movups xmm0, xmmword [0x40939c]
push 2
mov word [ebp - 0xad0], ax
movups xmmword [ebp - 0xaec], xmm0
mov dword [ebp - 0x630], 0x22c
movq xmm0, qword [0x4093ac]
movq qword [ebp - 0xadc], xmm0
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov dword [ebp - 0xaac], eax
cmp eax, 0xffffffff
je 0x401d82
lea ecx, [ebp - 0x630]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
lea ecx, [ebp - 0x60c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x401c52
mov esi, dword [ebp - 0x2ac]
lea edi, [ebp - 0x60c]
sub ecx, edx
mov eax, esi
sar ecx, 1
lea edx, [ebp - 0x2bc]
cmp dword [ebp - 0x2a8], 8
cmovae edx, dword [ebp - 0x2bc]
setae byte [ebp - 0xaa5]
cmp ecx, esi
cmovb eax, ecx
mov dword [ebp - 0x860], eax
test eax, eax
je 0x401cb7
nop dword [eax]
mov ax, word [edx]
cmp ax, word [edi]
jne 0x401cd5
add edx, 2
add edi, 2
sub dword [ebp - 0x860], 1
jne 0x401ca0
cmp esi, ecx
jb 0x401cd5
ja 0x401cd5
push dword [ebp - 0xaac]
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
mov eax, dword [ebp - 0x628]
jmp 0x401d84
mov edi, dword [ebp - 0xaac]
lea eax, [ebp - 0x630]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
je 0x401d7a
lea ecx, [ebp - 0x60c]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x401d00
sub ecx, edx
mov edi, esi
sar ecx, 1
lea edx, [ebp - 0x2bc]
cmp byte [ebp - 0xaa5], al
cmovne edx, dword [ebp - 0x2bc]
cmp ecx, esi
lea esi, [ebp - 0x60c]
cmovb edi, ecx
test edi, edi
je 0x401d46
mov ax, word [edx]
cmp ax, word [esi]
jne 0x401d58
add edx, 2
add esi, 2
sub edi, 1
jne 0x401d33
mov esi, dword [ebp - 0x2ac]
cmp esi, ecx
jb 0x401d5e
jbe 0x401cbd
jmp 0x401d5e
mov esi, dword [ebp - 0x2ac]
mov edi, dword [ebp - 0xaac]
lea eax, [ebp - 0x630]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x401cf1
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call eax
xor eax, eax
mov edx, eax
mov dword [ebp - 0xaac], eax
lea ecx, [ebp - 0xafc]
call fcn.00401320
push 4
mov esi, eax
mov dword [ebp - 0xab4], 0
call fcn.00406ede
mov ecx, dword [ebp - 0xab4]
mov edi, eax
add esp, 4
mov dword [ebp - 0x224], edi
lea eax, [edi + 4]
mov dword [edi], ecx
mov dword [ebp - 0x220], eax
push dword [ebp - 0xaac]
mov byte [ebp - 4], 6
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push 0
push 4
lea ecx, [ebp - 0x26c]
mov dword [ebp - 0x26c], 0
push ecx
lea ecx, [esi + 0x7166e8]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x864], eax
add eax, dword [edi]
mov dword [ebp - 0xab0], eax
mov dword [ebp - 0x864], eax
mov byte [ebp - 4], 5
test edi, edi
je 0x401e59
lea eax, [edi + 4]
sub eax, edi
sar eax, 2
lea ecx, [eax*4]
cmp ecx, 0x1000
jb 0x401e4f
mov edx, dword [edi - 4]
add ecx, 0x23
sub edi, edx
lea eax, [edi - 4]
cmp eax, 0x1f
ja 0x402155
mov edi, edx
push ecx
push edi
call fcn.00406f0e
add esp, 8
lea edx, [ebp - 0x31c]
lea ecx, [ebp - 0x2ec]
call fcn.004014f0
xorps xmm0, xmm0
movlpd qword [ebp - 0x28c], xmm0
push 1
mov byte [ebp - 4], 8
call dword [sym.imp.MSVCP140.dll_private:_static_class_std::locale::_Locimp____cdecl_std::locale::_Init_bool_]
add esp, 4
mov dword [ebp - 0x288], eax
push 0
lea ecx, [ebp - 0x238]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::_Lockit::constructor_int_]
mov byte [ebp - 4], 0xa
mov eax, dword [0x40d758]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::locale::id_std::codecvt_wchar_t__char__struct__Mbstatet_::id]
mov dword [ebp - 0x860], eax
call dword [sym.imp.MSVCP140.dll_public:_unsigned_int___thiscall_std::locale::id::operator_unsigned_int_void_]
mov edx, dword [ebp - 0x288]
mov dword [ebp - 0x234], eax
lea edi, [eax*4]
cmp eax, dword [edx + 0xc]
jae 0x401edb
mov ecx, dword [edx + 8]
mov esi, dword [edi + ecx]
test esi, esi
jne 0x401f56
jmp 0x401edd
xor esi, esi
cmp byte [edx + 0x14], 0
je 0x401efc
call dword [sym.imp.MSVCP140.dll_private:_static_class_std::locale::_Locimp____cdecl_std::locale::_Getgloballocale_void_]
mov ecx, eax
mov eax, dword [ebp - 0x234]
cmp eax, dword [ecx + 0xc]
jae 0x401f00
mov eax, dword [ecx + 8]
mov esi, dword [edi + eax]
test esi, esi
jne 0x401f56
mov esi, dword [ebp - 0x860]
test esi, esi
jne 0x401f56
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x860]
push eax
call dword [sym.imp.MSVCP140.dll_public:_static_unsigned_int___cdecl_std::codecvt_wchar_t__char__struct__Mbstatet_::_Getcat_class_std::locale::facet_const____class_std::locale_const__]
add esp, 8
cmp eax, 0xffffffff
je 0x4031a1
mov esi, dword [ebp - 0x860]
mov dword [ebp - 0x234], esi
push esi
mov byte [ebp - 4], 0xb
call fcn.00406e6e
mov eax, dword [esi]
add esp, 4
mov ecx, esi
call dword [eax + 4]
mov esi, dword [ebp - 0x860]
mov dword [0x40d758], esi
lea ecx, [ebp - 0x238]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::_Lockit::destructor_void_]
push 0x50
lea eax, [ebp - 0x36c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov dword [ebp - method.std::wstring_convert_class_std::codecvt_wchar_t__char__struct__Mbstatet___wchar_t__class_std::allocator_wchar_t___class_std::allocator_char__.virtual_0], vtable.std::wstring_convert_class_std::codecvt_wchar_t__char__struct__Mbstatet___wchar_t__class_std::allocator_wchar_t___class_std::allocator_char__.0
push 1
mov byte [ebp - 4], 0xc
call dword [sym.imp.MSVCP140.dll_private:_static_class_std::locale::_Locimp____cdecl_std::locale::_Init_bool_]
mov dword [ebp - 0x360], eax
xorps xmm0, xmm0
mov dword [ebp - 0x34c], 0
movups xmmword [ebp - 0x35c], xmm0
mov dword [ebp - 0x348], 0xf
mov byte [ebp - 0x35c], 0
xor ecx, ecx
mov dword [ebp - 0x334], 0
movups xmmword [ebp - 0x344], xmm0
mov dword [ebp - 0x330], 7
mov word [ebp - 0x344], cx
mov byte [ebp - 4], 0xf
push eax
mov word [ebp - 0x324], cx
mov byte [ebp - 0x322], cl
movlpd qword [ebp - 0x32c], xmm0
mov dword [ebp - 0x368], esi
call dword [sym.imp.MSVCP140.dll_private:_static_class_std::locale::_Locimp____cdecl_std::locale::_Locimp::_New_Locimp_class_std::locale::_Locimp_const__]
add esp, 0x14
mov edi, eax
test esi, esi
je 0x402031
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::locale::id_std::codecvt_wchar_t__char__struct__Mbstatet_::id]
call dword [sym.imp.MSVCP140.dll_public:_unsigned_int___thiscall_std::locale::id::operator_unsigned_int_void_]
push eax
push esi
mov ecx, edi
call dword [sym.imp.MSVCP140.dll_private:_void___thiscall_std::locale::_Locimp::_Addfac_class_std::locale::facet___unsigned_int_]
push 0x409354
lea ecx, [edi + 0x18]
mov dword [edi + 0x10], 0
call dword [sym.imp.MSVCP140.dll_public:_class_std::_Yarn_char_____thiscall_std::_Yarn_char_::operator_char_const__]
mov ecx, dword [ebp - 0x360]
cmp ecx, edi
je 0x40205b
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
test eax, eax
je 0x40204e
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx]
mov dword [ebp - 0x360], edi
mov ecx, edi
mov eax, dword [edi]
call dword [eax + 4]
test edi, edi
je 0x402074
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 8]
call eax
test eax, eax
je 0x402074
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx]
mov dword [ebp - 0x320], 0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x2ec]
cmp dword [ebp - 0x2d8], 8
mov eax, dword [ebp - 0x2dc]
cmovae ecx, dword [ebp - 0x2ec]
lea eax, [ecx + eax*2]
push eax
push ecx
lea eax, [ebp - 0xae8]
push eax
lea ecx, [ebp - 0x36c]
call fcn.004050b0
lea edx, [ebp - 0xae8]
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x284]
call fcn.00401400
push eax
lea ecx, [ebp - 0x250]
call fcn.00404ac0
mov ecx, dword [ebp - 0x270]
cmp ecx, 0x10
jb 0x40210a
mov edx, dword [ebp - 0x284]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402100
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402155
push ecx
push edx
call fcn.00406f0e
add esp, 8
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0xad4]
mov dword [ebp - 0x274], 0
mov dword [ebp - 0x270], 0xf
mov byte [ebp - 0x284], 0
cmp ecx, 0x10
jb 0x402165
mov edx, dword [ebp - 0xae8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40215b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40215b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00406f0e
add esp, 8
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov edx, str.Obtained_Latest_Version_Successfully.
call fcn.00405b90
mov ecx, eax
call fcn.00405dc0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov edx, str.Getting_Current_Version..._n
call fcn.00405b90
push 0x5dc
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [ebp - 0xaac]
push edi
push 0
push 0x18
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x234], eax
test eax, eax
jne 0x4021ca
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Failed_to_open_process_n
call fcn.00405970
or esi, 0xffffffff
jmp 0x402f63
push 0
push 0x18
lea ecx, [ebp - 0x268]
push ecx
push dword [ebp - 0xab0]
push eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea edx, [ebp - 0x268]
lea ecx, [ebp - 0xae8]
call fcn.00401400
push eax
lea ecx, [ebp - 0x268]
call fcn.00404ac0
mov ecx, dword [ebp - 0xad4]
cmp ecx, 0x10
jb 0x40223b
mov edx, dword [ebp - 0xae8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402231
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402231
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00406f0e
add esp, 8
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Current_Version_:
call fcn.00405970
cmp dword [ebp - 0x254], 0x10
lea edx, [ebp - 0x268]
push dword [ebp - 0x258]
cmovae edx, dword [ebp - 0x268]
mov ecx, eax
call fcn.00406ad0
mov edx, 0x40953c
mov ecx, eax
call fcn.00405970
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Latest_Version_:
call fcn.00405970
cmp dword [ebp - 0x23c], 0x10
lea edx, [ebp - 0x250]
push dword [ebp - 0x240]
cmovae edx, dword [ebp - 0x250]
mov ecx, eax
call fcn.00406ad0
add esp, 8
mov edx, 0x40953c
mov ecx, eax
call fcn.00405970
cmp dword [ebp - 0x254], 0x10
lea edx, [ebp - 0x268]
mov esi, dword [ebp - 0x258]
cmovae edx, dword [ebp - 0x268]
test esi, esi
jne 0x402334
mov ecx, 0x409356
sub esi, 4
jb 0x4022f1
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x4022f6
add edx, 4
add ecx, 4
sub esi, 4
jae 0x4022e0
cmp esi, 0xfffffffc
je 0x40232a
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x402323
cmp esi, 0xfffffffd
je 0x40232a
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x402323
cmp esi, 0xfffffffe
je 0x40232a
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x402323
cmp esi, 0xffffffff
je 0x40232a
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
je 0x40232a
sbb eax, eax
or eax, 1
jmp 0x40232c
xor eax, eax
test eax, eax
je 0x4023b0
cmp dword [ebp - 0x23c], 0x10
lea ecx, [ebp - 0x250]
mov esi, dword [ebp - 0x240]
cmovae ecx, dword [ebp - 0x250]
test esi, esi
jne 0x4023d0
mov edx, 0x409356
sub esi, 4
jb 0x402371
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x402376
add ecx, 4
add edx, 4
sub esi, 4
jae 0x402360
cmp esi, 0xfffffffc
je 0x4023aa
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4023a3
cmp esi, 0xfffffffd
je 0x4023aa
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4023a3
cmp esi, 0xfffffffe
je 0x4023aa
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4023a3
cmp esi, 0xffffffff
je 0x4023aa
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x4023aa
sbb eax, eax
or eax, 1
jmp 0x4023ac
xor eax, eax
test eax, eax
jne 0x4023d0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Version_not_found__Error_code_992__n
call fcn.00405970
push str.pause
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x402f5e
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x2bc
call esi
push edi
push 0
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov dword [ebp - 0x238], eax
test eax, eax
je 0x402f1e
push 0x104
lea ecx, [ebp - 0x218]
push ecx
push 0
push eax
call dword [sym.imp.KERNEL32.dll_K32GetModuleFileNameExW]
test eax, eax
je 0x402ef3
push 0x3e8
call esi
push str.Windows10Universal.exe
lea ecx, [ebp - 0xae8]
call fcn.00404b40
mov esi, eax
mov byte [ebp - 4], 0x12
mov ecx, dword [esi + 0x14]
mov eax, ecx
mov edx, dword [esi + 0x10]
sub eax, edx
cmp eax, 0x10
jb 0x4024e2
lea eax, [edx + 0x10]
mov edi, esi
mov dword [esi + 0x10], eax
cmp ecx, 0x10
jb 0x40245b
mov edi, dword [esi]
cmp edi, 0x4095bc
jae 0x402490
lea eax, [edi + edx]
cmp eax, str.taskkill__F__IM
jb 0x402490
cmp edi, str.taskkill__F__IM
ja 0x402481
mov dword [ebp - 0x860], 0
jmp 0x40249a
mov eax, edi
sub eax, str.taskkill__F__IM
mov dword [ebp - 0x860], eax
jmp 0x40249a
mov dword [ebp - 0x860], 0x10
lea eax, [edx + 1]
push eax
lea ecx, [edi + 0x10]
push edi
push ecx
call sub.VCRUNTIME140.dll_memmove
push dword [ebp - 0x860]
push str.taskkill__F__IM
push edi
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [ebp - 0x860]
mov eax, 0x10
sub eax, edx
push eax
lea eax, [edx + 0x4095bc]
lea ecx, [edi + edx]
push eax
push ecx
call sub.VCRUNTIME140.dll_memcpy
mov edi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 0x24
jmp 0x4024ff
push 0x10
sub esp, 8
mov byte [ebp - 0xab0], 0
mov ecx, esi
push dword [ebp - 0xab0]
push 0x10
call fcn.00406cc0
mov esi, eax
mov dword [ebp - 0x274], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x284], xmm0
mov dword [ebp - 0x270], 0
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x284], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x274], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0xad4]
cmp ecx, 0x10
jb 0x402585
mov edx, dword [ebp - 0xae8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40257b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40257b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00406f0e
add esp, 8
cmp dword [ebp - 0x270], 0x10
lea eax, [ebp - 0x284]
mov dword [ebp - 0xad8], 0
cmovae eax, dword [ebp - 0x284]
push eax
mov dword [ebp - 0xad4], 0xf
mov byte [ebp - 0xae8], 0
call edi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
add esp, 4
mov edx, str.Process_Killed__Waiting..._n
push 0x406100
test eax, eax
je 0x4025d3
mov edx, str.Failed_To_Terminate_The_Process._n
call fcn.00405970
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0x5dc
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebp - 0x23c], 0x10
lea ecx, [ebp - 0x250]
mov esi, dword [ebp - 0x258]
lea edx, [ebp - 0x268]
cmovae ecx, dword [ebp - 0x250]
cmp dword [ebp - 0x254], 0x10
cmovae edx, dword [ebp - 0x268]
cmp esi, dword [ebp - 0x240]
jne 0x40267a
sub esi, 4
jb 0x402637
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x40263c
add edx, 4
add ecx, 4
sub esi, 4
jae 0x402626
cmp esi, 0xfffffffc
je 0x402670
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x402669
cmp esi, 0xfffffffd
je 0x402670
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x402669
cmp esi, 0xfffffffe
je 0x402670
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x402669
cmp esi, 0xffffffff
je 0x402670
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
je 0x402670
sbb eax, eax
or eax, 1
jmp 0x402672
xor eax, eax
test eax, eax
jne 0x40267a
xor al, al
jmp 0x40267c
mov al, 1
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
test al, al
je 0x402954
mov edx, str.Version_Not_Spoofed__Waiting..._n
call fcn.00405970
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Retrieving_Files__Keep_The_Window_Open__n
call fcn.00405970
push 0xc0
lea eax, [ebp - 0x924]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x924]
call fcn.004045e0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x924]
mov eax, dword [ebp - 0x924]
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::operator__void_const]
test al, al
je 0x402713
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Unable_to_access_application__Run_the_program_as_admin__n
call fcn.00405970
push str.pause
call edi
add esp, 4
lea ecx, [ebp - 0x924]
jmp 0x402c10
push 0x98
lea eax, [ebp - 0x404]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 8
lea ecx, [ebp - 0x404]
call fcn.00403a30
lea eax, [ebp - 0x90c]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x404]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_streambuf_char__struct_std::char_traits_char____]
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x404]
call fcn.00403940
push ecx
lea eax, [ebp - 0x268]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x230]
call fcn.00404950
mov dword [ebp - 0xab0], eax
lea eax, [ebp - 0x304]
push ecx
push eax
lea ecx, [ebp - 0x230]
call fcn.00404950
mov esi, eax
mov eax, dword [ebp - 0xab0]
cmp eax, 0xffffffff
je 0x402801
cmp dword [ebp - 0x23c], 0x10
lea ecx, [ebp - 0x250]
push dword [ebp - 0x240]
cmovae ecx, dword [ebp - 0x250]
push ecx
push dword [ebp - 0x258]
lea ecx, [ebp - 0x230]
push eax
call fcn.00405440
push 0
push 0
push 0
lea ecx, [ebp - 0x914]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::seekp_long_long___int64___int_]
cmp dword [ebp - 0x21c], 0x10
lea edx, [ebp - 0x230]
push dword [ebp - 0x220]
cmovae edx, dword [ebp - 0x230]
lea ecx, [ebp - 0x914]
call fcn.00406ad0
add esp, 4
cmp esi, 0xffffffff
je 0x40286d
cmp dword [ebp - 0x290], 0x10
lea eax, [ebp - 0x2a4]
push dword [ebp - 0x294]
cmovae eax, dword [ebp - 0x2a4]
lea ecx, [ebp - 0x230]
push eax
push dword [ebp - 0x2f4]
push esi
call fcn.00405440
push 0
push 0
push 0
lea ecx, [ebp - 0x914]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::seekp_long_long___int64___int_]
cmp dword [ebp - 0x21c], 0x10
lea edx, [ebp - 0x230]
push dword [ebp - 0x220]
cmovae edx, dword [ebp - 0x230]
lea ecx, [ebp - 0x914]
call fcn.00406ad0
add esp, 4
lea ecx, [ebp - 0x90c]
call fcn.00405020
test eax, eax
jne 0x402894
push eax
mov eax, dword [ebp - 0x924]
lea ecx, [ebp - 0x924]
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Roblox_Instance_Modded__Retrieving_rest_of_the_files_n
call fcn.00405970
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x21c]
cmp ecx, 0x10
jb 0x4028e4
mov edx, dword [ebp - 0x230]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4028da
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4028da
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00406f0e
add esp, 8
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], 0
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.virtual_0], vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov eax, dword [ebp - 0x404]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x50]
mov dword [ebp + ecx - 0x408], eax
lea ecx, [ebp - 0x400]
call fcn.00403890
lea ecx, [ebp - 0x3fc]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x3b4]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x924]
jmp 0x402ea0
mov edx, str.Version_Already_Spoofed__Checking_Rest_of_the_files_n
call fcn.00405970
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xc0
lea eax, [ebp - 0xaa4]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0xaa4]
call fcn.004045e0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xaa4]
mov eax, dword [ebp - 0xaa4]
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::operator__void_const]
test al, al
je 0x4029ca
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Unable_to_access_application2__Run_the_program_as_admin__n
call fcn.00405970
push str.pause
call edi
add esp, 4
jmp 0x402c0a
push 0x98
lea eax, [ebp - 0x404]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 8
lea ecx, [ebp - 0x404]
call fcn.00403a30
lea eax, [ebp - 0xa8c]
mov byte [ebp - 4], 0x19
push eax
lea ecx, [ebp - 0x404]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_streambuf_char__struct_std::char_traits_char____]
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x404]
call fcn.00403940
push ecx
lea eax, [ebp - 0x304]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x230]
call fcn.00404950
mov esi, dword [ebp - 0x2f4]
cmp eax, 0xffffffff
je 0x402a98
cmp dword [ebp - 0x290], 0x10
lea ecx, [ebp - 0x2a4]
push dword [ebp - 0x294]
cmovae ecx, dword [ebp - 0x2a4]
push ecx
push esi
push eax
lea ecx, [ebp - 0x230]
call fcn.00405440
push 0
push 0
push 0
lea ecx, [ebp - 0xa94]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::seekp_long_long___int64___int_]
cmp dword [ebp - 0x21c], 0x10
lea edx, [ebp - 0x230]
push dword [ebp - 0x220]
cmovae edx, dword [ebp - 0x230]
lea ecx, [ebp - 0xa94]
call fcn.00406ad0
add esp, 4
lea ecx, [ebp - 0xa8c]
call fcn.00405020
test eax, eax
jne 0x402abf
push eax
mov eax, dword [ebp - 0xaa4]
lea ecx, [ebp - 0xaa4]
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Telemetry_Removed__Retrieving_last_files._n
call fcn.00405970
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x104
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.api_ms_win_core_path_l1_1_0.dll_PathCchRemoveFileSpec]
push str.AssetsCrashHandler.exe
push 0x104
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.api_ms_win_core_path_l1_1_0.dll_PathCchAppend]
push 0xc0
lea eax, [ebp - 0x9e4]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x9e4]
call fcn.004045e0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x9e4]
mov eax, dword [ebp - 0x9e4]
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::operator__void_const]
test al, al
je 0x402c58
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Unable_to_access_application3__Run_the_program_as_admin__n
call fcn.00405970
push str.pause
call edi
add esp, 4
lea ecx, [ebp - 0x9e4]
call fcn.004031b0
mov ecx, dword [ebp - 0x21c]
cmp ecx, 0x10
jb 0x402ba5
mov edx, dword [ebp - 0x230]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402b9b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e25
push ecx
push edx
call fcn.00406f0e
add esp, 8
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], 0
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.virtual_0], vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov eax, dword [ebp - 0x404]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x50]
mov dword [ebp + ecx - 0x408], eax
lea ecx, [ebp - 0x400]
call fcn.00403890
lea ecx, [ebp - 0x3fc]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x3b4]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0xaa4]
call fcn.004031b0
mov ecx, dword [ebp - 0x270]
cmp ecx, 0x10
jb 0x402f61
mov edx, dword [ebp - 0x284]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402c49
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e25
push ecx
push edx
call fcn.00406f0e
add esp, 8
jmp 0x402f61
push 0x98
lea eax, [ebp - 0x8fc]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 8
lea ecx, [ebp - 0x8fc]
call fcn.00403a30
lea eax, [ebp - 0x9cc]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0x8fc]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_streambuf_char__struct_std::char_traits_char____]
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x8fc]
call fcn.00403940
push ecx
lea eax, [ebp - 0x304]
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0x2d4]
call fcn.00404950
cmp eax, 0xffffffff
je 0x402d20
cmp dword [ebp - 0x290], 0x10
lea ecx, [ebp - 0x2a4]
push dword [ebp - 0x294]
cmovae ecx, dword [ebp - 0x2a4]
push ecx
push esi
push eax
lea ecx, [ebp - 0x2d4]
call fcn.00405440
push 0
push 0
push 0
lea ecx, [ebp - 0x9d4]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::seekp_long_long___int64___int_]
cmp dword [ebp - 0x2c0], 0x10
lea edx, [ebp - 0x2d4]
push dword [ebp - 0x2c4]
cmovae edx, dword [ebp - 0x2d4]
lea ecx, [ebp - 0x9d4]
call fcn.00406ad0
add esp, 4
lea ecx, [ebp - 0x9cc]
call fcn.00405020
test eax, eax
jne 0x402d47
push eax
mov eax, dword [ebp - 0x9e4]
lea ecx, [ebp - 0x9e4]
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x2c0]
cmp ecx, 0x10
jb 0x402d85
mov edx, dword [ebp - 0x2d4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402d7b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402e25
push ecx
push edx
call fcn.00406f0e
add esp, 8
mov eax, dword [ebp - 0x8fc]
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x2c0], 0xf
mov byte [ebp - 0x2d4], 0
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.virtual_0], vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov eax, dword [ebp - 0x8fc]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x50]
mov dword [ebp + ecx - 0x900], eax
lea ecx, [ebp - 0x8f8]
call fcn.00403890
lea ecx, [ebp - 0x8f4]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x8ac]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x9e4]
call fcn.004031b0
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x21c]
cmp ecx, 0x10
jb 0x402e35
mov edx, dword [ebp - 0x230]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402e2b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402e2b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00406f0e
add esp, 8
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], 0
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.virtual_0], vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov eax, dword [ebp - 0x404]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x50]
mov dword [ebp + ecx - 0x408], eax
lea ecx, [ebp - 0x400]
call fcn.00403890
lea ecx, [ebp - 0x3fc]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x3b4]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0xaa4]
call fcn.004031b0
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x270]
cmp ecx, 0x10
jb 0x402f10
mov edx, dword [ebp - 0x284]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402edb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402edb
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00406f0e
add esp, 8
push dword [ebp - 0x238]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x402f3b
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.GetModuleFileNameEx_failed.
push 0x406100
call fcn.00405970
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push dword [ebp - 0x238]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x402f3b
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.OpenProcess_failed.
push 0x406100
call fcn.00405970
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Instance_Modded_successfully__You_can_exit_the_window_now._n
call fcn.00405970
push dword [ebp - 0x234]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.pause
call edi
add esp, 4
xor esi, esi
lea ecx, [ebp - 0x36c]
call fcn.004047d0
mov ecx, dword [ebp - 0x288]
test ecx, ecx
je 0x402f8b
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
test eax, eax
je 0x402f8b
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx]
mov ecx, dword [ebp - 0x2d8]
cmp ecx, 8
jb 0x402fcb
mov edx, dword [ebp - 0x2ec]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402fc1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403174
push ecx
push edx
call fcn.00406f0e
add esp, 8
xor eax, eax
mov dword [ebp - 0x2dc], 0
mov word [ebp - 0x2ec], ax
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x2d8], 7
cmp eax, 8
jb 0x403028
mov edx, dword [ebp - 0x2bc]
lea ecx, [eax*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40301e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403174
push ecx
push edx
call fcn.00406f0e
add esp, 8
mov ecx, dword [ebp - 0x290]
cmp ecx, 0x10
jb 0x403062
mov edx, dword [ebp - 0x2a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403058
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403174
push ecx
push edx
call fcn.00406f0e
add esp, 8
mov ecx, dword [ebp - 0x2f0]
cmp ecx, 0x10
jb 0x40309c
mov edx, dword [ebp - 0x304]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403092
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403174
push ecx
push edx
call fcn.00406f0e
add esp, 8
mov ecx, dword [ebp - 0x23c]
cmp ecx, 0x10
jb 0x4030d6
mov edx, dword [ebp - 0x250]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4030cc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403174
push ecx
push edx
call fcn.00406f0e
add esp, 8
mov ecx, dword [ebp - 0x254]
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 0xf
mov byte [ebp - 0x250], 0
cmp ecx, 0x10
jb 0x403127
mov edx, dword [ebp - 0x268]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40311d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403174
push ecx
push edx
call fcn.00406f0e
add esp, 8
mov ecx, dword [ebp - 0x308]
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x254], 0xf
mov byte [ebp - 0x268], 0
cmp ecx, 8
jb 0x403184
mov edx, dword [ebp - 0x31c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40317a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40317a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00406f0e
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00406ed0
mov esp, ebp
pop ebp
ret
call fcn.004012a0
int3