Function at 0x401000
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x4d8
push 0
push 0x47f2f8
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x47f2fc], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x47f2f8], eax
push 0x47ca60
pop dword [0x47f300]
call fcn.0040b990
call fcn.0040b89b
call fcn.0040af40
call fcn.00409c98
call fcn.00409452
call fcn.0040932a
call fcn.00408d6f
call fcn.00408840
call fcn.004086a0
call fcn.00407a89
call fcn.0040794d
call fcn.00407828
push 5
push 0x47f788
push 0
mov edx, dword [0x47f788]
call fcn.00407000
mov eax, 0x1a0b
push 4
call fcn.00407020
mov dword [0x47f304], 1
mov eax, 0x258
cmp eax, dword [0x47f304]
jl 0x4010ec
mov eax, 8
call fcn.00408509
push eax
mov ebx, dword [0x47f304]
mov ebp, dword [0x47f788]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x47f304]
jmp 0x4010b9
mov dword [0x47f304], 1
mov eax, 0x1f4
cmp eax, dword [0x47f304]
jl 0x401129
mov eax, 4
call fcn.00408509
push eax
mov ebx, dword [0x47f304]
mov ebp, dword [0x47f788]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x47f304]
jmp 0x4010f6
mov dword [0x47f304], 1
mov eax, 0x190
cmp eax, dword [0x47f304]
jl 0x401166
mov eax, 4
call fcn.00408509
push eax
mov ebx, dword [0x47f304]
mov ebp, dword [0x47f788]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x47f304]
jmp 0x401133
mov dword [0x47f304], 1
mov eax, 0x12c
cmp eax, dword [0x47f304]
jl 0x4011a3
mov eax, 4
call fcn.00408509
push eax
mov ebx, dword [0x47f304]
mov ebp, dword [0x47f788]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x47f304]
jmp 0x401170
mov dword [0x47f304], 1
mov eax, 0x190
cmp eax, dword [0x47f304]
jl 0x4011e0
mov eax, 4
call fcn.00408509
push eax
mov ebx, dword [0x47f304]
mov ebp, dword [0x47f788]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x47f304]
jmp 0x4011ad
mov dword [0x47f304], 1
mov eax, 0x1f4
cmp eax, dword [0x47f304]
jl 0x40121d
mov eax, 4
call fcn.00408509
push eax
mov ebx, dword [0x47f304]
mov ebp, dword [0x47f788]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x47f304]
jmp 0x4011ea
mov dword [0x47f304], 1
mov eax, 0x258
cmp eax, dword [0x47f304]
jl 0x40125a
mov eax, 4
call fcn.00408509
push eax
mov ebx, dword [0x47f304]
mov ebp, dword [0x47f788]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x47f304]
jmp 0x401227
mov dword [0x47f304], 1
mov eax, 0x258
cmp eax, dword [0x47f304]
jl 0x401297
mov eax, 4
call fcn.00408509
push eax
mov ebx, dword [0x47f304]
mov ebp, dword [0x47f788]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x47f304]
jmp 0x401264
mov dword [0x47f304], 1
mov eax, 0x1f4
cmp eax, dword [0x47f304]
jl 0x4012d4
mov eax, 4
call fcn.00408509
push eax
mov ebx, dword [0x47f304]
mov ebp, dword [0x47f788]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x47f304]
jmp 0x4012a1
mov dword [0x47f304], 1
mov eax, 0x190
cmp eax, dword [0x47f304]
jl 0x401311
mov eax, 4
call fcn.00408509
push eax
mov ebx, dword [0x47f304]
mov ebp, dword [0x47f788]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x47f304]
jmp 0x4012de
mov dword [0x47f304], 1
mov eax, 0x12c
cmp eax, dword [0x47f304]
jl 0x40134e
mov eax, 4
call fcn.00408509
push eax
mov ebx, dword [0x47f304]
mov ebp, dword [0x47f788]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x47f304]
jmp 0x40131b
mov dword [0x47f304], 1
mov eax, 0xc8
cmp eax, dword [0x47f304]
jl 0x40138b
mov eax, 4
call fcn.00408509
push eax
mov ebx, dword [0x47f304]
mov ebp, dword [0x47f788]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x47f304]
jmp 0x401358
call fcn.00408cb0
mov eax, dword [0x47f99c]
push eax
push eax
call fcn.0040aded
lea ecx, [0x47f308]
pop edx
call fcn.00407070
push dword [0x47f99c]
mov edx, dword [0x47f308]
push dword [0x47f99c]
call fcn.0040b9e0
mov edx, str.0.mp3
call fcn.0040b9e0
inc dword [0x47f99c]
push 0
mov edx, dword [0x47e0e0]
add dword [esp + 4], edx
call fcn.0040b070
pop dword [0x47f99c]
mov ebp, 0x471500
mov ebx, ebp
mov ebp, 0x46f860
sub ebx, ebp
push ebx
mov ebp, 0x46f860
push ebp
push 0
call fcn.0040b150
push 0
call fcn.0040aed0
push dword [0x47f99c]
mov edx, dword [0x47f308]
push dword [0x47f99c]
call fcn.0040b9e0
mov edx, str.1.mp3
call fcn.0040b9e0
inc dword [0x47f99c]
push 0
mov edx, dword [0x47e0e0]
add dword [esp + 4], edx
call fcn.0040b070
pop dword [0x47f99c]
mov ebp, 0x473020
mov ebx, ebp
mov ebp, 0x471500
sub ebx, ebp
push ebx
mov ebp, 0x471500
push ebp
push 0
call fcn.0040b150
push 0
call fcn.0040aed0
push dword [0x47f99c]
mov edx, dword [0x47f308]
push dword [0x47f99c]
call fcn.0040b9e0
mov edx, str.3.mp3
call fcn.0040b9e0
inc dword [0x47f99c]
push 0
mov edx, dword [0x47e0e0]
add dword [esp + 4], edx
call fcn.0040b070
pop dword [0x47f99c]
mov ebp, 0x476040
mov ebx, ebp
mov ebp, 0x473020
sub ebx, ebp
push ebx
mov ebp, 0x473020
push ebp
push 0
call fcn.0040b150
push 0
call fcn.0040aed0
push dword [0x47f99c]
mov edx, dword [0x47f308]
push dword [0x47f99c]
call fcn.0040b9e0
mov edx, str.4.mp3
call fcn.0040b9e0
inc dword [0x47f99c]
push 0
mov edx, dword [0x47e0e0]
add dword [esp + 4], edx
call fcn.0040b070
pop dword [0x47f99c]
mov ebp, 0x47a260
mov ebx, ebp
mov ebp, 0x476040
sub ebx, ebp
push ebx
mov ebp, 0x476040
push ebp
push 0
call fcn.0040b150
push 0
call fcn.0040aed0
push dword [0x47f99c]
mov edx, dword [0x47f308]
push dword [0x47f99c]
call fcn.0040b9e0
mov edx, str.5.mp3
call fcn.0040b9e0
inc dword [0x47f99c]
push 0
mov edx, dword [0x47e0e0]
add dword [esp + 4], edx
call fcn.0040b070
pop dword [0x47f99c]
mov ebp, 0x47b600
mov ebx, ebp
mov ebp, 0x47a260
sub ebx, ebp
push ebx
mov ebp, 0x47a260
push ebp
push 0
call fcn.0040b150
push 0
call fcn.0040aed0
push dword [0x47f99c]
mov edx, dword [0x47f308]
push dword [0x47f99c]
call fcn.0040b9e0
mov edx, str.6.mp3
call fcn.0040b9e0
inc dword [0x47f99c]
push 0
mov edx, dword [0x47e0e0]
add dword [esp + 4], edx
call fcn.0040b070
pop dword [0x47f99c]
mov ebp, 0x47ca60
mov ebx, ebp
mov ebp, 0x47b600
sub ebx, ebp
push ebx
mov ebp, 0x47b600
push ebp
push 0
call fcn.0040b150
push 0
call fcn.0040aed0
call fcn.00407ff6
push dword [0x47f99c]
mov edx, dword [0x47f308]
push dword [0x47f99c]
call fcn.0040b9e0
mov edx, str.0.mp3
call fcn.0040b9e0
inc dword [0x47f99c]
push 0
mov edx, dword [0x47e0e0]
add dword [esp + 4], edx
call fcn.0040802b
pop dword [0x47f99c]
mov dword [0x47f30c], eax
push dword [0x47f99c]
mov edx, dword [0x47f308]
push dword [0x47f99c]
call fcn.0040b9e0
mov edx, str.1.mp3
call fcn.0040b9e0
inc dword [0x47f99c]
push 1
mov edx, dword [0x47e0e0]
add dword [esp + 4], edx
call fcn.0040802b
pop dword [0x47f99c]
mov dword [0x47f30c], eax
push dword [0x47f99c]
mov edx, dword [0x47f308]
push dword [0x47f99c]
call fcn.0040b9e0
mov edx, str.3.mp3
call fcn.0040b9e0
inc dword [0x47f99c]
push 3
mov edx, dword [0x47e0e0]
add dword [esp + 4], edx
call fcn.0040802b
pop dword [0x47f99c]
mov dword [0x47f30c], eax
push dword [0x47f99c]
mov edx, dword [0x47f308]
push dword [0x47f99c]
call fcn.0040b9e0
mov edx, str.4.mp3
call fcn.0040b9e0
inc dword [0x47f99c]
push 4
mov edx, dword [0x47e0e0]
add dword [esp + 4], edx
call fcn.0040802b
pop dword [0x47f99c]
mov dword [0x47f30c], eax
push dword [0x47f99c]
mov edx, dword [0x47f308]
push dword [0x47f99c]
call fcn.0040b9e0
mov edx, str.5.mp3
call fcn.0040b9e0
inc dword [0x47f99c]
push 5
mov edx, dword [0x47e0e0]
add dword [esp + 4], edx
call fcn.0040802b
pop dword [0x47f99c]
mov dword [0x47f30c], eax
push dword [0x47f99c]
mov edx, dword [0x47f308]
push dword [0x47f99c]
call fcn.0040b9e0
mov edx, str.6.mp3
call fcn.0040b9e0
inc dword [0x47f99c]
push 6
mov edx, dword [0x47e0e0]
add dword [esp + 4], edx
call fcn.0040802b
pop dword [0x47f99c]
mov dword [0x47f30c], eax
call sub.KERNEL32.dll_IsDebuggerPresent
and eax, eax
je 0x4017dd
push 0x75009553
inc ecx
ret
push 0x12c
call sub.KERNEL32.dll_Sleep
call fcn.0040663f
push str.Authenticating_Trainer......
push 0
push 8
call fcn.00407937
mov eax, dword [0x47f99c]
push eax
push eax
mov eax, dword [0x47f99c]
push eax
push eax
call fcn.00407aa5
inc dword [0x47f99c]
mov edx, dword [0x47e0e0]
add dword [esp], edx
call fcn.004085bd
lea ecx, [0x47f324]
pop edx
call fcn.00407070
mov edx, dword [0x47f324]
push dword [0x47f99c]
call fcn.0040b9e0
lea ecx, [0x47f328]
pop edx
call fcn.00407070
call sub.USER32.dll_GetForegroundWindow
mov dword [0x47f32c], eax
push 0x47f330
push dword [0x47f32c]
call sub.USER32.dll_GetWindowThreadProcessId
push dword [0x47f330]
push dword [0x47f338]
push 0x1f0fff
call sub.KERNEL32.dll_OpenProcess
mov dword [0x47f334], eax
mov eax, dword [0x47f330]
mov dword [0x47f32c], eax
push 0x3e8
call fcn.004086d0
mov dword [0x47f33c], eax
mov edx, dword [0x47f328]
push dword [0x47f99c]
call fcn.0040b9e0
lea ecx, [0x47f340]
pop edx
call fcn.00407070
mov eax, dword [0x47f348]
mov dword [0x47f344], eax
mov dword [0x47f34c], 0x45a2a5
push 5
push 0x47f790
push 0
mov edx, dword [0x47f790]
call fcn.00407000
mov eax, 0x15
push 4
call fcn.00407020
push 5
push 0x47f798
push 0
mov edx, dword [0x47f798]
call fcn.00407000
mov eax, 0x15
push 4
call fcn.00407020
push 5
push 0x47f7a0
push 0
mov edx, dword [0x47f7a0]
call fcn.00407000
mov eax, 0x15
push 4
call fcn.00407020
push 5
push 0x47f7a8
push 0
mov edx, dword [0x47f7a8]
call fcn.00407000
mov eax, 0x15
push 4
call fcn.00407020
push 5
push 0x47f7b0
push 0
mov edx, dword [0x47f7b0]
call fcn.00407000
mov eax, 0x15
push 4
call fcn.00407020
push 0x3e8
call fcn.004086d0
mov dword [0x47f33c], eax
push 0x3e8
call fcn.004086d0
mov dword [0x47f350], eax
mov dword [0x47f304], 1
mov eax, 0x14
cmp eax, dword [0x47f304]
jl 0x401a1e
mov ebx, dword [0x47f304]
mov ebp, dword [0x47f798]
shl ebx, 2
mov dword [ebp + ebx], 1
mov ebx, dword [0x47f304]
mov ebp, dword [0x47f7a0]
shl ebx, 2
mov dword [ebp + ebx], 1
mov ebx, dword [0x47f304]
mov ebp, dword [0x47f7a8]
shl ebx, 2
mov dword [ebp + ebx], 1
inc dword [0x47f304]
jmp 0x4019c4
mov edx, str.Template
lea ecx, [0x47f36c]
call fcn.00407088
mov eax, dword [0x47f99c]
push eax
push eax
call fcn.0040aded
lea ecx, [0x47f354]
pop edx
call fcn.00407070
call fcn.00404ce4
push dword [0x47f99c]
mov edx, dword [0x47f354]
push dword [0x47f99c]
call fcn.0040b9e0
mov edx, str.CH.dll
call fcn.0040b9e0
inc dword [0x47f99c]
push 0
mov edx, dword [0x47e0e0]
add dword [esp + 4], edx
call fcn.0040b070
pop dword [0x47f99c]
and eax, eax
je 0x401abb
mov ebp, 0x47d663
mov ebx, ebp
mov ebp, 0x47ca63
sub ebx, ebp
push ebx
mov ebp, 0x47ca63
push ebp
push 0
call fcn.0040b150
push 0
call fcn.0040aed0
jmp 0x401abb
push dword [0x47f99c]
mov edx, dword [0x47f354]
push dword [0x47f99c]
call fcn.0040b9e0
mov edx, str.help.txt
call fcn.0040b9e0
inc dword [0x47f99c]
push 0
mov edx, dword [0x47e0e0]
add dword [esp + 4], edx
call fcn.0040b070
pop dword [0x47f99c]
and eax, eax
je 0x401b2b
mov ebp, 0x47e0df
mov ebx, ebp
mov ebp, 0x47d663
sub ebx, ebp
push ebx
mov ebp, 0x47d663
push ebp
push 0
call fcn.0040b150
push 0
call fcn.0040aed0
jmp 0x401b3a
push str.Could_not_create_HELP.TXT_file.
push str.Error
call fcn.0040798a
push str.CH_Trainer_Keys.dat
push 0
call fcn.0040b130
mov dword [0x47f30c], eax
mov ebx, dword [0x47f30c]
and ebx, ebx
jle 0x401b6c
mov dword [0x47f384], 1
push 0
call fcn.0040aed0
lea ebp, [0x47f688]
lea eax, [ebp]
push eax
call sub.USER32.dll_GetKeyboardState
movsx eax, byte [ebp + 0x90]
push eax
pop dword [0x47f388]
mov ebx, dword [0x47f388]
cmp ebx, 1
jne 0x401ba6
mov edx, 0x422077
lea ecx, [0x47f38c]
call fcn.00407088
jmp 0x401bb6
mov edx, str.OFF.
lea ecx, [0x47f38c]
call fcn.00407088
mov eax, dword [0x47f99c]
push eax
push eax
mov edx, str.Run_Game_and_then_press_F1_at_Main_Menu._Numlock_is
call fcn.0040b9e0
mov edx, dword [0x47f38c]
call fcn.0040b9e0
inc dword [0x47f99c]
push 0
push 8
mov edx, dword [0x47e0e0]
add dword [esp + 8], edx
call fcn.00407937
pop dword [0x47f99c]
call fcn.00404ce4
push 0xa
call sub.KERNEL32.dll_Sleep
push 0x70
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
and ebx, ebx
je 0x401b6c
mov edx, str.Amnesia.exe
lea ecx, [0x47f328]
call fcn.00407088
call fcn.00403f85
mov ebx, dword [0x47f32c]
and ebx, ebx
jne 0x401c75
push 0
push 4
call fcn.0040819f
push 0x12c
call sub.KERNEL32.dll_Sleep
push 0x12c
call sub.KERNEL32.dll_Sleep
push str.Game_not_Found__Run_Game_and_then_press_F1_at_Main_Menu.
push 0
push 8
call fcn.00407937
jmp 0x401b6c
mov edx, str.CH.dll
lea ecx, [0x47f390]
call fcn.00407088
mov edx, dword [0x47f354]
push dword [0x47f99c]
call fcn.0040b9e0
mov edx, dword [0x47f390]
call fcn.0040b9e0
lea ecx, [0x47f340]
pop edx
call fcn.00407070
call fcn.00403fca
mov edx, str.xlive.dll
lea ecx, [0x47f394]
call fcn.00407088
call fcn.00403f85
call fcn.00404c33
call fcn.00404ce4
mov ebx, dword [0x47f378]
and ebx, ebx
jne 0x401cfe
mov ebx, dword [0x47f398]
and ebx, ebx
jne 0x401cfe
push str.Game_not_Found__Run_Game_and_then_press_F1_at_Main_Menu.
push 0
push 8
call fcn.00407937
jmp 0x401b6c
push 0
push 3
call fcn.0040819f
push 0x12c
call sub.KERNEL32.dll_Sleep
push str.Game_found__Trainer_Activated_
push 0
push 8
call fcn.00407937
mov ebx, dword [0x47f39c]
and ebx, ebx
je 0x402038
push 0x8b
mov ebx, dword [0x47f33c]
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0xff
mov ebx, dword [0x47f33c]
inc ebx
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x55
mov ebx, dword [0x47f33c]
add ebx, 2
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x8b
mov ebx, dword [0x47f33c]
add ebx, 3
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0xec
mov ebx, dword [0x47f33c]
add ebx, 4
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x83
mov ebx, dword [0x47f33c]
add ebx, 5
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0xec
mov ebx, dword [0x47f33c]
add ebx, 6
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x20
mov ebx, dword [0x47f33c]
add ebx, 7
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x53
mov ebx, dword [0x47f33c]
add ebx, 8
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x56
mov ebx, dword [0x47f33c]
add ebx, 9
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x57
mov ebx, dword [0x47f33c]
add ebx, 0xa
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x8d
mov ebx, dword [0x47f33c]
add ebx, 0xb
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x45
mov ebx, dword [0x47f33c]
add ebx, 0xc
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0xe0
mov ebx, dword [0x47f33c]
add ebx, 0xd
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x33
mov ebx, dword [0x47f33c]
add ebx, 0xe
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0xf6
mov ebx, dword [0x47f33c]
add ebx, 0xf
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x50
mov ebx, dword [0x47f33c]
add ebx, 0x10
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0xff
mov ebx, dword [0x47f33c]
add ebx, 0x11
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x75
mov ebx, dword [0x47f33c]
add ebx, 0x12
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0xc
mov ebx, dword [0x47f33c]
add ebx, 0x13
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
mov ebx, dword [0x47f39c]
add ebx, 0x1000
mov dword [0x47f304], ebx
mov ebx, dword [0x47f39c]
add ebx, 0x200000
cmp ebx, dword [0x47f304]
jl 0x402038
push dword [0x47f338]
push 0x14
push dword [0x47f350]
push dword [0x47f304]
push dword [0x47f3a0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x47f30c], eax
push 0x14
push dword [0x47f350]
push dword [0x47f33c]
call fcn.004086f0
mov dword [0x47f30c], eax
mov ebx, dword [0x47f30c]
cmp ebx, 1
jne 0x40202d
mov eax, dword [0x47f304]
mov dword [0x47f3a4], eax
push 0xc2
mov ebx, dword [0x47f33c]
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0xc
mov ebx, dword [0x47f33c]
inc ebx
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0
mov ebx, dword [0x47f33c]
add ebx, 2
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push dword [0x47f338]
push 3
push dword [0x47f33c]
push dword [0x47f3a4]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
inc dword [0x47f304]
jmp 0x401f4e
mov ebx, dword [0x47f3a8]
and ebx, ebx
jle 0x402047
jmp 0x40283d
mov ebx, dword [0x47f34c]
cmp ebx, 0x45a2a5
jne 0x4020eb
mov ebp, dword [0x47f790]
mov dword [ebp + 4], 0x61
mov dword [ebp + 8], 0x62
mov dword [ebp + 0xc], 0x63
mov dword [ebp + 0x10], 0x64
mov dword [ebp + 0x14], 0x65
mov dword [ebp + 0x18], 0x66
mov dword [ebp + 0x1c], 0x67
mov dword [ebp + 0x20], 0x68
mov dword [ebp + 0x24], 0x6b
mov dword [ebp + 0x28], 0x6d
mov dword [ebp + 0x2c], 0x21
mov dword [ebp + 0x30], 0x22
mov dword [ebp + 0x34], 0x24
mov dword [ebp + 0x38], 0x23
mov dword [ebp + 0x3c], 0
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0
mov dword [ebp + 0x48], 0
mov dword [ebp + 0x4c], 0
mov dword [ebp + 0x50], 0
push str.CH_Trainer_Keys.dat
push 0
call fcn.0040b130
mov dword [0x47f30c], eax
mov ebx, dword [0x47f30c]
and ebx, ebx
jle 0x40225e
mov dword [0x47f384], 1
push 0
call fcn.0040b1b0
mov dword [0x47f3ac], eax
mov dword [0x47f304], 1
mov eax, dword [0x47f3ac]
cmp eax, dword [0x47f304]
jl 0x402254
mov eax, dword [0x47f99c]
push eax
push eax
push 0
call fcn.0040b210
lea ecx, [0x47f3b0]
pop edx
call fcn.00407070
push dword [0x47f3b0]
mov edx, str.SHIFT
pop ecx
call fcn.0040ba40
je 0x402188
mov ebx, dword [0x47f304]
mov ebp, dword [0x47f798]
shl ebx, 2
mov dword [ebp + ebx], 0
push dword [0x47f3b0]
mov edx, str.CTRL
pop ecx
call fcn.0040ba40
je 0x4021b2
mov ebx, dword [0x47f304]
mov ebp, dword [0x47f7a0]
shl ebx, 2
mov dword [ebp + ebx], 0
push dword [0x47f3b0]
mov edx, 0x4221f1
pop ecx
call fcn.0040ba40
je 0x4021dc
mov ebx, dword [0x47f304]
mov ebp, dword [0x47f7a8]
shl ebx, 2
mov dword [ebp + ebx], 0
push 0
call fcn.0040b1b0
push eax
mov ebx, dword [0x47f304]
mov ebp, dword [0x47f790]
shl ebx, 2
pop dword [ebp + ebx]
mov eax, dword [0x47f99c]
push eax
push eax
push dword [0x47f99c]
push 0
mov ebx, dword [0x47f304]
shl ebx, 2
mov eax, dword [ebp + ebx]
cdq
push edx
push eax
call fcn.004075b0
inc dword [0x47f99c]
mov edx, dword [0x47e0e0]
add dword [esp], edx
call fcn.00407130
pop dword [0x47f99c]
push eax
mov ebx, dword [0x47f304]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x47f304]
jmp 0x402130
push 0
call fcn.0040aed0
mov ebx, dword [0x47f378]
add ebx, 0x65da1
mov dword [0x47f3b4], ebx
mov ebx, dword [0x47f378]
add ebx, 0x12dfa8
mov dword [0x47f3b8], ebx
mov ebx, dword [0x47f378]
add ebx, 0x1308c6
mov dword [0x47f3bc], ebx
mov ebx, dword [0x47f378]
add ebx, 0x130740
mov dword [0x47f3c0], ebx
push 0x8b
mov ebx, dword [0x47f33c]
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x4e
mov ebx, dword [0x47f33c]
inc ebx
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x38
mov ebx, dword [0x47f33c]
add ebx, 2
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x89
mov ebx, dword [0x47f33c]
add ebx, 3
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0xd
mov ebx, dword [0x47f33c]
add ebx, 4
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0
mov ebx, dword [0x47f33c]
add ebx, 5
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x3f
mov ebx, dword [0x47f33c]
add ebx, 6
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x13
mov ebx, dword [0x47f33c]
add ebx, 7
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 8
mov ebx, dword [0x47f33c]
add ebx, 8
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0xd9
mov ebx, dword [0x47f33c]
add ebx, 9
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x41
mov ebx, dword [0x47f33c]
add ebx, 0xa
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x64
mov ebx, dword [0x47f33c]
add ebx, 0xb
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0xc3
mov ebx, dword [0x47f33c]
add ebx, 0xc
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x90
mov ebx, dword [0x47f33c]
add ebx, 0xd
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0
mov ebx, dword [0x47f33c]
add ebx, 0xe
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0
mov ebx, dword [0x47f33c]
add ebx, 0xf
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x89
mov ebx, dword [0x47f33c]
add ebx, 0x10
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0xd
mov ebx, dword [0x47f33c]
add ebx, 0x11
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 4
mov ebx, dword [0x47f33c]
add ebx, 0x12
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x3f
mov ebx, dword [0x47f33c]
add ebx, 0x13
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x13
mov ebx, dword [0x47f33c]
add ebx, 0x14
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 8
mov ebx, dword [0x47f33c]
add ebx, 0x15
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0xd9
mov ebx, dword [0x47f33c]
add ebx, 0x16
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x41
mov ebx, dword [0x47f33c]
add ebx, 0x17
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x48
mov ebx, dword [0x47f33c]
add ebx, 0x18
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0xd8
mov ebx, dword [0x47f33c]
add ebx, 0x19
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x61
mov ebx, dword [0x47f33c]
add ebx, 0x1a
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x54
mov ebx, dword [0x47f33c]
add ebx, 0x1b
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0xc3
mov ebx, dword [0x47f33c]
add ebx, 0x1c
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x90
mov ebx, dword [0x47f33c]
add ebx, 0x1d
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push dword [0x47f338]
push 0x2ac
push dword [0x47f33c]
mov ebx, dword [0x47f398]
add ebx, 0x1091
push ebx
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
mov ebx, dword [0x47f398]
add ebx, 0x3f00
push ebx
mov eax, dword [0x47f33c]
call fcn.00408650
mov dword [0x47f30c], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
mov ebx, dword [0x47f398]
add ebx, 0x1096
push ebx
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
mov ebx, dword [0x47f398]
add ebx, 0x3f04
push ebx
mov eax, dword [0x47f33c]
call fcn.00408650
mov dword [0x47f30c], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
mov ebx, dword [0x47f398]
add ebx, 0x10a3
push ebx
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push 0xe8
mov ebx, dword [0x47f33c]
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x90
mov ebx, dword [0x47f33c]
inc ebx
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x90
mov ebx, dword [0x47f33c]
add ebx, 2
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x90
mov ebx, dword [0x47f33c]
add ebx, 3
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x90
mov ebx, dword [0x47f33c]
add ebx, 4
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x90
mov ebx, dword [0x47f33c]
add ebx, 5
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
mov ebx, dword [0x47f398]
add ebx, 0x1091
sub ebx, dword [0x47f3b4]
add ebx, 0xfffffffb
push ebx
mov ebx, dword [0x47f33c]
inc ebx
mov eax, ebx
call fcn.00408650
mov dword [0x47f30c], eax
push dword [0x47f338]
push 6
push dword [0x47f33c]
push dword [0x47f3b4]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push 0xe8
mov ebx, dword [0x47f33c]
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x90
mov ebx, dword [0x47f33c]
inc ebx
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x90
mov ebx, dword [0x47f33c]
add ebx, 2
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x90
mov ebx, dword [0x47f33c]
add ebx, 3
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x90
mov ebx, dword [0x47f33c]
add ebx, 4
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x90
mov ebx, dword [0x47f33c]
add ebx, 5
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
mov ebx, dword [0x47f398]
add ebx, 0x10a1
sub ebx, dword [0x47f3b8]
add ebx, 0xfffffffb
push ebx
mov ebx, dword [0x47f33c]
inc ebx
mov eax, ebx
call fcn.00408650
mov dword [0x47f30c], eax
push dword [0x47f338]
push 6
push dword [0x47f33c]
push dword [0x47f3b8]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
mov dword [0x47f3c4], 0
mov eax, 0xff
cmp eax, dword [0x47f3c4]
jl 0x402867
push dword [0x47f3c4]
call sub.USER32.dll_GetAsyncKeyState
inc dword [0x47f3c4]
jmp 0x402847
call sub.KERNEL32.dll_IsDebuggerPresent
and eax, eax
je 0x402876
push 0x55009553
ret
mov ebp, dword [0x47f790]
push dword [ebp + 4]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x47f7b0]
pop dword [ebp + 4]
mov ebp, dword [0x47f790]
push dword [ebp + 8]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x47f7b0]
pop dword [ebp + 8]
mov ebp, dword [0x47f790]
push dword [ebp + 0xc]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x47f7b0]
pop dword [ebp + 0xc]
mov ebp, dword [0x47f790]
push dword [ebp + 0x10]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x47f7b0]
pop dword [ebp + 0x10]
mov ebp, dword [0x47f790]
push dword [ebp + 0x14]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x47f7b0]
pop dword [ebp + 0x14]
mov ebp, dword [0x47f790]
push dword [ebp + 0x18]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x47f7b0]
pop dword [ebp + 0x18]
mov ebp, dword [0x47f790]
push dword [ebp + 0x1c]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x47f7b0]
pop dword [ebp + 0x1c]
mov ebp, dword [0x47f790]
push dword [ebp + 0x20]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x47f7b0]
pop dword [ebp + 0x20]
mov ebp, dword [0x47f790]
push dword [ebp + 0x24]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x47f7b0]
pop dword [ebp + 0x24]
mov ebp, dword [0x47f790]
push dword [ebp + 0x28]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x47f7b0]
pop dword [ebp + 0x28]
mov ebp, dword [0x47f790]
push dword [ebp + 0x2c]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x47f7b0]
pop dword [ebp + 0x2c]
mov ebp, dword [0x47f790]
push dword [ebp + 0x30]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x47f7b0]
pop dword [ebp + 0x30]
mov ebp, dword [0x47f790]
push dword [ebp + 0x34]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x47f7b0]
pop dword [ebp + 0x34]
mov ebp, dword [0x47f790]
push dword [ebp + 0x38]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x47f7b0]
pop dword [ebp + 0x38]
mov ebp, dword [0x47f790]
push dword [ebp + 0x3c]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x47f7b0]
pop dword [ebp + 0x3c]
mov ebp, dword [0x47f790]
push dword [ebp + 0x40]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x47f7b0]
pop dword [ebp + 0x40]
mov ebp, dword [0x47f790]
push dword [ebp + 0x44]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x47f7b0]
pop dword [ebp + 0x44]
mov ebp, dword [0x47f790]
push dword [ebp + 0x48]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x47f7b0]
pop dword [ebp + 0x48]
mov ebp, dword [0x47f790]
push dword [ebp + 0x4c]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x47f7b0]
pop dword [ebp + 0x4c]
mov ebp, dword [0x47f790]
push dword [ebp + 0x50]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x47f7b0]
pop dword [ebp + 0x50]
push 0x10
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x47f3c8], eax
push 0x11
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x47f3cc], eax
push 0x12
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x47f3d0], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
mov ebx, dword [0x47f398]
add ebx, 0x3f00
push ebx
push dword [0x47f3a0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x47f30c], eax
mov eax, dword [0x47f33c]
call fcn.00408660
mov dword [0x47f3d4], eax
mov ebx, dword [0x47f3d4]
add ebx, 0x64
mov dword [0x47f3d8], ebx
mov ebx, dword [0x47f3d4]
add ebx, 0x68
mov dword [0x47f3dc], ebx
mov ebx, dword [0x47f3d4]
add ebx, 0x78
mov dword [0x47f3e0], ebx
mov ebx, dword [0x47f3d4]
add ebx, 0x6c
mov dword [0x47f3e4], ebx
push dword [0x47f338]
push 4
push dword [0x47f33c]
mov ebx, dword [0x47f398]
add ebx, 0x3f04
push ebx
push dword [0x47f3a0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x47f30c], eax
mov eax, dword [0x47f33c]
call fcn.00408660
mov dword [0x47f3d4], eax
mov ebx, dword [0x47f3d4]
add ebx, 0x48
mov dword [0x47f3e8], ebx
mov ebx, dword [0x47f3d4]
add ebx, 0x50
mov dword [0x47f3ec], ebx
mov ebx, dword [0x47f3d4]
add ebx, 0x4c
mov dword [0x47f3f0], ebx
mov ebp, dword [0x47f790]
push dword [ebp + 4]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x47f798]
mov edi, dword [ebp + 4]
add edi, dword [0x47f3c8]
imul ebx, edi
mov ebp, dword [0x47f7a0]
mov edi, dword [ebp + 4]
add edi, dword [0x47f3cc]
imul ebx, edi
mov ebp, dword [0x47f7a8]
mov edi, dword [ebp + 4]
add edi, dword [0x47f3d0]
imul ebx, edi
mov dword [0x47f3f4], ebx
mov ebx, dword [0x47f3f4]
and ebx, ebx
je 0x402cb8
push dword [0x47f3f8]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x402c3e
mov dword [0x47f3f8], 1
mov dword [0x47f3fc], 0x98967f
push dword [0x47f3fc]
fild dword [esp]
fstp dword [esp]
mov eax, dword [0x47f33c]
call fcn.00408670
mov dword [0x47f30c], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3d8]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push 0
push 5
call fcn.0040819f
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x402cb7
mov ebx, 1
cmp ebx, dword [esp]
jne 0x402cb7
mov dword [0x47f3f8], 0
mov dword [0x47f3fc], 0x64
push dword [0x47f3fc]
fild dword [esp]
fstp dword [esp]
mov eax, dword [0x47f33c]
call fcn.00408670
mov dword [0x47f30c], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3d8]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push 0
push 6
call fcn.0040819f
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x47f790]
push dword [ebp + 8]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x47f798]
mov edi, dword [ebp + 8]
add edi, dword [0x47f3c8]
imul ebx, edi
mov ebp, dword [0x47f7a0]
mov edi, dword [ebp + 8]
add edi, dword [0x47f3cc]
imul ebx, edi
mov ebp, dword [0x47f7a8]
mov edi, dword [ebp + 8]
add edi, dword [0x47f3d0]
imul ebx, edi
mov dword [0x47f400], ebx
mov ebx, dword [0x47f400]
and ebx, ebx
je 0x402e0a
push dword [0x47f404]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x402d90
mov dword [0x47f404], 1
mov dword [0x47f3fc], 0x98967f
push dword [0x47f3fc]
fild dword [esp]
fstp dword [esp]
mov eax, dword [0x47f33c]
call fcn.00408670
mov dword [0x47f30c], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3dc]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push 0
push 5
call fcn.0040819f
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x402e09
mov ebx, 1
cmp ebx, dword [esp]
jne 0x402e09
mov dword [0x47f404], 0
mov dword [0x47f3fc], 0x64
push dword [0x47f3fc]
fild dword [esp]
fstp dword [esp]
mov eax, dword [0x47f33c]
call fcn.00408670
mov dword [0x47f30c], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3dc]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push 0
push 6
call fcn.0040819f
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x47f790]
push dword [ebp + 0xc]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x47f798]
mov edi, dword [ebp + 0xc]
add edi, dword [0x47f3c8]
imul ebx, edi
mov ebp, dword [0x47f7a0]
mov edi, dword [ebp + 0xc]
add edi, dword [0x47f3cc]
imul ebx, edi
mov ebp, dword [0x47f7a8]
mov edi, dword [ebp + 0xc]
add edi, dword [0x47f3d0]
imul ebx, edi
mov dword [0x47f408], ebx
mov ebx, dword [0x47f408]
and ebx, ebx
je 0x402f5c
push dword [0x47f40c]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x402ee2
mov dword [0x47f40c], 1
mov dword [0x47f3fc], 0x98967f
push dword [0x47f3fc]
fild dword [esp]
fstp dword [esp]
mov eax, dword [0x47f33c]
call fcn.00408670
mov dword [0x47f30c], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3e4]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push 0
push 5
call fcn.0040819f
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x402f5b
mov ebx, 1
cmp ebx, dword [esp]
jne 0x402f5b
mov dword [0x47f40c], 0
mov dword [0x47f3fc], 0x64
push dword [0x47f3fc]
fild dword [esp]
fstp dword [esp]
mov eax, dword [0x47f33c]
call fcn.00408670
mov dword [0x47f30c], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3e4]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push 0
push 6
call fcn.0040819f
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x47f790]
push dword [ebp + 0x10]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x47f798]
mov edi, dword [ebp + 0x10]
add edi, dword [0x47f3c8]
imul ebx, edi
mov ebp, dword [0x47f7a0]
mov edi, dword [ebp + 0x10]
add edi, dword [0x47f3cc]
imul ebx, edi
mov ebp, dword [0x47f7a8]
mov edi, dword [ebp + 0x10]
add edi, dword [0x47f3d0]
imul ebx, edi
mov dword [0x47f410], ebx
mov ebx, dword [0x47f410]
and ebx, ebx
je 0x403011
mov dword [0x47f3fc], 0x63
push dword [0x47f3fc]
mov eax, dword [0x47f33c]
call fcn.00408650
mov dword [0x47f30c], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3e0]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push 0
push 5
call fcn.0040819f
push 0x12c
call sub.KERNEL32.dll_Sleep
mov ebp, dword [0x47f790]
push dword [ebp + 0x14]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x47f798]
mov edi, dword [ebp + 0x14]
add edi, dword [0x47f3c8]
imul ebx, edi
mov ebp, dword [0x47f7a0]
mov edi, dword [ebp + 0x14]
add edi, dword [0x47f3cc]
imul ebx, edi
mov ebp, dword [0x47f7a8]
mov edi, dword [ebp + 0x14]
add edi, dword [0x47f3d0]
imul ebx, edi
mov dword [0x47f414], ebx
mov ebx, dword [0x47f414]
and ebx, ebx
je 0x403129
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3e8]
push dword [0x47f3a0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x47f30c], eax
mov eax, dword [0x47f33c]
call fcn.00408680
fistp dword [0x47f418]
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3ec]
push dword [0x47f3a0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x47f30c], eax
mov eax, dword [0x47f33c]
call fcn.00408680
fistp dword [0x47f41c]
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3f0]
push dword [0x47f3a0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x47f30c], eax
mov eax, dword [0x47f33c]
call fcn.00408680
fistp dword [0x47f420]
push 0
push 0
call fcn.0040819f
push 0x12c
call sub.KERNEL32.dll_Sleep
mov ebp, dword [0x47f790]
push dword [ebp + 0x18]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x47f798]
mov edi, dword [ebp + 0x18]
add edi, dword [0x47f3c8]
imul ebx, edi
mov ebp, dword [0x47f7a0]
mov edi, dword [ebp + 0x18]
add edi, dword [0x47f3cc]
imul ebx, edi
mov ebp, dword [0x47f7a8]
mov edi, dword [ebp + 0x18]
add edi, dword [0x47f3d0]
imul ebx, edi
mov dword [0x47f424], ebx
mov ebx, dword [0x47f424]
and ebx, ebx
je 0x403315
mov ebx, dword [0x47f418]
and ebx, ebx
je 0x403315
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3e8]
push dword [0x47f3a0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x47f30c], eax
mov eax, dword [0x47f33c]
call fcn.00408680
fistp dword [0x47f428]
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3ec]
push dword [0x47f3a0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x47f30c], eax
mov eax, dword [0x47f33c]
call fcn.00408680
fistp dword [0x47f42c]
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3f0]
push dword [0x47f3a0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x47f30c], eax
mov eax, dword [0x47f33c]
call fcn.00408680
fistp dword [0x47f430]
push dword [0x47f418]
fild dword [esp]
fstp dword [esp]
mov eax, dword [0x47f33c]
call fcn.00408670
mov dword [0x47f30c], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3e8]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push dword [0x47f41c]
fild dword [esp]
fstp dword [esp]
mov eax, dword [0x47f33c]
call fcn.00408670
mov dword [0x47f30c], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3ec]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push dword [0x47f420]
fild dword [esp]
fstp dword [esp]
mov eax, dword [0x47f33c]
call fcn.00408670
mov dword [0x47f30c], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3f0]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push 0
push 0
call fcn.0040819f
push 0x12c
call sub.KERNEL32.dll_Sleep
mov ebp, dword [0x47f790]
push dword [ebp + 0x1c]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x47f798]
mov edi, dword [ebp + 0x1c]
add edi, dword [0x47f3c8]
imul ebx, edi
mov ebp, dword [0x47f7a0]
mov edi, dword [ebp + 0x1c]
add edi, dword [0x47f3cc]
imul ebx, edi
mov ebp, dword [0x47f7a8]
mov edi, dword [ebp + 0x1c]
add edi, dword [0x47f3d0]
imul ebx, edi
mov dword [0x47f434], ebx
mov ebx, dword [0x47f434]
and ebx, ebx
je 0x40345c
mov ebx, dword [0x47f428]
and ebx, ebx
je 0x40345c
push dword [0x47f428]
fild dword [esp]
fstp dword [esp]
mov eax, dword [0x47f33c]
call fcn.00408670
mov dword [0x47f30c], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3e8]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push dword [0x47f42c]
fild dword [esp]
fstp dword [esp]
mov eax, dword [0x47f33c]
call fcn.00408670
mov dword [0x47f30c], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3ec]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push dword [0x47f430]
fild dword [esp]
fstp dword [esp]
mov eax, dword [0x47f33c]
call fcn.00408670
mov dword [0x47f30c], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3f0]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push 0
push 0
call fcn.0040819f
push 0x12c
call sub.KERNEL32.dll_Sleep
mov ebp, dword [0x47f790]
push dword [ebp + 0x20]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x47f798]
mov edi, dword [ebp + 0x20]
add edi, dword [0x47f3c8]
imul ebx, edi
mov ebp, dword [0x47f7a0]
mov edi, dword [ebp + 0x20]
add edi, dword [0x47f3cc]
imul ebx, edi
mov ebp, dword [0x47f7a8]
mov edi, dword [ebp + 0x20]
add edi, dword [0x47f3d0]
imul ebx, edi
mov dword [0x47f438], ebx
mov ebx, dword [0x47f438]
and ebx, ebx
je 0x40375a
push dword [0x47f43c]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x403648
mov dword [0x47f43c], 1
push 0xdd
mov ebx, dword [0x47f33c]
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0xd8
mov ebx, dword [0x47f33c]
inc ebx
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x90
mov ebx, dword [0x47f33c]
add ebx, 2
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push dword [0x47f338]
push 3
push dword [0x47f33c]
push dword [0x47f3bc]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push 0xdd
mov ebx, dword [0x47f33c]
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0xd8
mov ebx, dword [0x47f33c]
inc ebx
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x90
mov ebx, dword [0x47f33c]
add ebx, 2
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push dword [0x47f338]
push 3
push dword [0x47f33c]
push dword [0x47f3c0]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3f0]
push dword [0x47f3a0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x47f30c], eax
mov eax, dword [0x47f33c]
call fcn.00408680
fadd dword [0x422430]
fstp dword [0x47f440]
push dword [0x47f440]
mov eax, dword [0x47f33c]
call fcn.00408670
mov dword [0x47f30c], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3f0]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push 0
push 5
call fcn.0040819f
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x403759
mov ebx, 1
cmp ebx, dword [esp]
jne 0x403759
mov dword [0x47f43c], 0
push 0xd9
mov ebx, dword [0x47f33c]
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x5f
mov ebx, dword [0x47f33c]
inc ebx
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 4
mov ebx, dword [0x47f33c]
add ebx, 2
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push dword [0x47f338]
push 3
push dword [0x47f33c]
push dword [0x47f3bc]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push 0xd9
mov ebx, dword [0x47f33c]
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x5e
mov ebx, dword [0x47f33c]
inc ebx
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push 0x4c
mov ebx, dword [0x47f33c]
add ebx, 2
mov eax, ebx
call fcn.00408640
mov dword [0x47f30c], eax
push dword [0x47f338]
push 3
push dword [0x47f33c]
push dword [0x47f3c0]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push 0
push 6
call fcn.0040819f
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x47f790]
push dword [ebp + 0x24]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x47f798]
mov edi, dword [ebp + 0x24]
add edi, dword [0x47f3c8]
imul ebx, edi
mov ebp, dword [0x47f7a0]
mov edi, dword [ebp + 0x24]
add edi, dword [0x47f3cc]
imul ebx, edi
mov ebp, dword [0x47f7a8]
mov edi, dword [ebp + 0x24]
add edi, dword [0x47f3d0]
imul ebx, edi
mov dword [0x47f444], ebx
mov ebx, dword [0x47f444]
and ebx, ebx
je 0x403837
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3f0]
push dword [0x47f3a0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x47f30c], eax
mov eax, dword [0x47f33c]
call fcn.00408680
fadd dword [0x422430]
fstp dword [0x47f440]
push dword [0x47f440]
mov eax, dword [0x47f33c]
call fcn.00408670
mov dword [0x47f30c], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3f0]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push 0x64
call sub.KERNEL32.dll_Sleep
mov ebp, dword [0x47f790]
push dword [ebp + 0x28]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x47f798]
mov edi, dword [ebp + 0x28]
add edi, dword [0x47f3c8]
imul ebx, edi
mov ebp, dword [0x47f7a0]
mov edi, dword [ebp + 0x28]
add edi, dword [0x47f3cc]
imul ebx, edi
mov ebp, dword [0x47f7a8]
mov edi, dword [ebp + 0x28]
add edi, dword [0x47f3d0]
imul ebx, edi
mov dword [0x47f448], ebx
mov ebx, dword [0x47f448]
and ebx, ebx
je 0x403914
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3f0]
push dword [0x47f3a0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x47f30c], eax
mov eax, dword [0x47f33c]
call fcn.00408680
fadd dword [0x422434]
fstp dword [0x47f440]
push dword [0x47f440]
mov eax, dword [0x47f33c]
call fcn.00408670
mov dword [0x47f30c], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3f0]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push 0x64
call sub.KERNEL32.dll_Sleep
mov ebp, dword [0x47f790]
push dword [ebp + 0x2c]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x47f798]
mov edi, dword [ebp + 0x2c]
add edi, dword [0x47f3c8]
imul ebx, edi
mov ebp, dword [0x47f7a0]
mov edi, dword [ebp + 0x2c]
add edi, dword [0x47f3cc]
imul ebx, edi
mov ebp, dword [0x47f7a8]
mov edi, dword [ebp + 0x2c]
add edi, dword [0x47f3d0]
imul ebx, edi
mov dword [0x47f44c], ebx
mov ebx, dword [0x47f44c]
and ebx, ebx
je 0x4039f1
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3e8]
push dword [0x47f3a0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x47f30c], eax
mov eax, dword [0x47f33c]
call fcn.00408680
fadd dword [0x422430]
fstp dword [0x47f440]
push dword [0x47f440]
mov eax, dword [0x47f33c]
call fcn.00408670
mov dword [0x47f30c], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3e8]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push 0x64
call sub.KERNEL32.dll_Sleep
mov ebp, dword [0x47f790]
push dword [ebp + 0x30]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x47f798]
mov edi, dword [ebp + 0x30]
add edi, dword [0x47f3c8]
imul ebx, edi
mov ebp, dword [0x47f7a0]
mov edi, dword [ebp + 0x30]
add edi, dword [0x47f3cc]
imul ebx, edi
mov ebp, dword [0x47f7a8]
mov edi, dword [ebp + 0x30]
add edi, dword [0x47f3d0]
imul ebx, edi
mov dword [0x47f450], ebx
mov ebx, dword [0x47f450]
and ebx, ebx
je 0x403ace
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3e8]
push dword [0x47f3a0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x47f30c], eax
mov eax, dword [0x47f33c]
call fcn.00408680
fadd dword [0x422434]
fstp dword [0x47f440]
push dword [0x47f440]
mov eax, dword [0x47f33c]
call fcn.00408670
mov dword [0x47f30c], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3e8]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push 0x64
call sub.KERNEL32.dll_Sleep
mov ebp, dword [0x47f790]
push dword [ebp + 0x34]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x47f798]
mov edi, dword [ebp + 0x34]
add edi, dword [0x47f3c8]
imul ebx, edi
mov ebp, dword [0x47f7a0]
mov edi, dword [ebp + 0x34]
add edi, dword [0x47f3cc]
imul ebx, edi
mov ebp, dword [0x47f7a8]
mov edi, dword [ebp + 0x34]
add edi, dword [0x47f3d0]
imul ebx, edi
mov dword [0x47f454], ebx
mov ebx, dword [0x47f454]
and ebx, ebx
je 0x403bab
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3ec]
push dword [0x47f3a0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x47f30c], eax
mov eax, dword [0x47f33c]
call fcn.00408680
fadd dword [0x422434]
fstp dword [0x47f440]
push dword [0x47f440]
mov eax, dword [0x47f33c]
call fcn.00408670
mov dword [0x47f30c], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3ec]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push 0x64
call sub.KERNEL32.dll_Sleep
mov ebp, dword [0x47f790]
push dword [ebp + 0x38]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x47f798]
mov edi, dword [ebp + 0x38]
add edi, dword [0x47f3c8]
imul ebx, edi
mov ebp, dword [0x47f7a0]
mov edi, dword [ebp + 0x38]
add edi, dword [0x47f3cc]
imul ebx, edi
mov ebp, dword [0x47f7a8]
mov edi, dword [ebp + 0x38]
add edi, dword [0x47f3d0]
imul ebx, edi
mov dword [0x47f458], ebx
mov ebx, dword [0x47f458]
and ebx, ebx
je 0x403c88
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3ec]
push dword [0x47f3a0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x47f30c], eax
mov eax, dword [0x47f33c]
call fcn.00408680
fadd dword [0x422430]
fstp dword [0x47f440]
push dword [0x47f440]
mov eax, dword [0x47f33c]
call fcn.00408670
mov dword [0x47f30c], eax
push dword [0x47f338]
push 4
push dword [0x47f33c]
push dword [0x47f3ec]
push dword [0x47f3a0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x47f30c], eax
push 0x64
call sub.KERNEL32.dll_Sleep
mov ebp, dword [0x47f790]
push dword [ebp + 0x3c]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x47f798]
mov edi, dword [ebp + 0x3c]
add edi, dword [0x47f3c8]
imul ebx, edi
mov ebp, dword [0x47f7a0]
mov edi, dword [ebp + 0x3c]
add edi, dword [0x47f3cc]
imul ebx, edi
mov ebp, dword [0x47f7a8]
mov edi, dword [ebp + 0x3c]
add edi, dword [0x47f3d0]
imul ebx, edi
mov dword [0x47f45c], ebx
mov ebx, dword [0x47f45c]
and ebx, ebx
je 0x403cde
mov ebp, dword [0x47f790]
push dword [ebp + 0x40]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x47f798]
mov edi, dword [ebp + 0x40]
add edi, dword [0x47f3c8]
imul ebx, edi
mov ebp, dword [0x47f7a0]
mov edi, dword [ebp + 0x40]
add edi, dword [0x47f3cc]
imul ebx, edi
mov ebp, dword [0x47f7a8]
mov edi, dword [ebp + 0x40]
add edi, dword [0x47f3d0]
imul ebx, edi
mov dword [0x47f460], ebx
mov ebx, dword [0x47f460]
and ebx, ebx
je 0x403d34
mov ebp, dword [0x47f790]
push dword [ebp + 0x44]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x47f798]
mov edi, dword [ebp + 0x44]
add edi, dword [0x47f3c8]
imul ebx, edi
mov ebp, dword [0x47f7a0]
mov edi, dword [ebp + 0x44]
add edi, dword [0x47f3cc]
imul ebx, edi
mov ebp, dword [0x47f7a8]
mov edi, dword [ebp + 0x44]
add edi, dword [0x47f3d0]
imul ebx, edi
mov dword [0x47f464], ebx
mov ebx, dword [0x47f464]
and ebx, ebx
je 0x403d8a
mov ebp, dword [0x47f790]
push dword [ebp + 0x48]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x47f798]
mov edi, dword [ebp + 0x48]
add edi, dword [0x47f3c8]
imul ebx, edi
mov ebp, dword [0x47f7a0]
mov edi, dword [ebp + 0x48]
add edi, dword [0x47f3cc]
imul ebx, edi
mov ebp, dword [0x47f7a8]
mov edi, dword [ebp + 0x48]
add edi, dword [0x47f3d0]
imul ebx, edi
mov dword [0x47f468], ebx
mov ebx, dword [0x47f468]
and ebx, ebx
je 0x403de0
mov ebp, dword [0x47f790]
push dword [ebp + 0x4c]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x47f798]
mov edi, dword [ebp + 0x4c]
add edi, dword [0x47f3c8]
imul ebx, edi
mov ebp, dword [0x47f7a0]
mov edi, dword [ebp + 0x4c]
add edi, dword [0x47f3cc]
imul ebx, edi
mov ebp, dword [0x47f7a8]
mov edi, dword [ebp + 0x4c]
add edi, dword [0x47f3d0]
imul ebx, edi
mov dword [0x47f46c], ebx
mov ebx, dword [0x47f46c]
and ebx, ebx
je 0x403e36
mov ebp, dword [0x47f790]
push dword [ebp + 0x50]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x47f798]
mov edi, dword [ebp + 0x50]
add edi, dword [0x47f3c8]
imul ebx, edi
mov ebp, dword [0x47f7a0]
mov edi, dword [ebp + 0x50]
add edi, dword [0x47f3cc]
imul ebx, edi
mov ebp, dword [0x47f7a8]
mov edi, dword [ebp + 0x50]
add edi, dword [0x47f3d0]
imul ebx, edi
mov dword [0x47f470], ebx
mov ebx, dword [0x47f470]
and ebx, ebx
je 0x403e8c
mov dword [0x47f3f4], 0
mov dword [0x47f400], 0
mov dword [0x47f408], 0
mov dword [0x47f410], 0
mov dword [0x47f414], 0
mov dword [0x47f424], 0
mov dword [0x47f434], 0
mov dword [0x47f438], 0
mov dword [0x47f444], 0
mov dword [0x47f448], 0
mov dword [0x47f44c], 0
mov dword [0x47f450], 0
mov dword [0x47f454], 0
mov dword [0x47f458], 0
mov dword [0x47f45c], 0
mov dword [0x47f460], 0
mov dword [0x47f464], 0
mov dword [0x47f468], 0
mov dword [0x47f46c], 0
mov dword [0x47f470], 0
mov ebx, dword [0x47f34c]
cmp ebx, 0x45a2a5
je 0x403f71
push 0
push 3
call fcn.004094c2
call fcn.00404ce4
push 1
call sub.KERNEL32.dll_Sleep
jmp 0x40283d