Function at 0x444cd0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x40
mov eax, dword [0x4f8f48]
xor eax, esp
mov dword [esp + 0x3c], eax
push esi
mov esi, dword [0x971734]
mov eax, ecx
push edi
push str.Wall
lea ecx, [esp + 0x2c]
mov dword [esp + 0xc], eax
imul edi, eax, 0x94
call fcn.00449da0
mov edx, dword [0x971734]
lea eax, [esp + 0x28]
push eax
mov ecx, 0x9717f8
lea edx, [edx + edi]
call fcn.00442f10
mov ecx, dword [esp + 0x40]
xor al, 1
add esp, 4
mov byte [esi + edi + 0x50], al
cmp ecx, 0x10
jb 0x444d5d
mov edx, dword [esp + 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x444d53
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44574c
push ecx
push edx
call fcn.004b5153
add esp, 8
cmp byte [0x4f8ff9], 0
je 0x444d99
mov ecx, dword [0x971734]
mov dword [0x4f8fa0], 0x168
mov byte [0x4f8fb3], 1
mov dword [0x4f8fac], 1
mov dword [0x4f8fa8], 0
mov al, byte [ecx + edi + 0x50]
mov byte [ecx + edi + 0x66], al
movss xmm5, dword [0x4f9000]
xorps xmm1, xmm1
cvtsi2ss xmm1, dword [0x4fc40c]
xorps xmm4, xmm4
xorps xmm3, xmm3
cvtsi2ss xmm4, dword [0x97061c]
divss xmm1, xmm5
mulss xmm4, dword [0x4cc8c0]
cvtsi2ss xmm3, dword [0x970620]
movaps xmm0, xmm4
divss xmm0, xmm5
mulss xmm3, dword [0x4cc8c0]
subss xmm1, xmm0
movaps xmm0, xmm3
divss xmm0, xmm5
addss xmm1, dword [0x971818]
cvttss2si eax, xmm1
xorps xmm1, xmm1
cvtsi2ss xmm1, dword [0x4fc410]
mov dword [0x97170c], eax
divss xmm1, xmm5
subss xmm1, xmm0
addss xmm1, dword [0x97181c]
cvttss2si eax, xmm1
mov dword [0x4fc400], eax
mov eax, dword [0x971734]
movss xmm2, dword [eax + edi + 0x20]
subss xmm2, dword [0x971818]
movss xmm1, dword [eax + edi + 0x24]
subss xmm1, dword [0x97181c]
movaps xmm0, xmm2
movss dword [esp + 0x1c], xmm2
mulss xmm0, xmm5
movss dword [esp + 0x10], xmm1
addss xmm0, xmm4
cvttss2si esi, xmm0
movaps xmm0, xmm1
mulss xmm0, xmm5
mov dword [esp + 0x20], esi
addss xmm0, xmm3
cvttss2si eax, xmm0
movaps xmm0, xmm1
mulss xmm0, xmm1
movaps xmm1, xmm2
mov dword [esp + 0xc], eax
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.004013e0
movss dword [esp + 0x24], xmm0
movss xmm0, dword [esp + 0x10]
divss xmm0, dword [esp + 0x1c]
call fcn.0044c380
movss xmm4, dword [0x4cc9f0]
xorps xmm1, xmm1
mulss xmm0, xmm4
xorps xmm3, xmm3
comiss xmm3, dword [esp + 0x1c]
cvtss2sd xmm1, xmm0
movss xmm2, dword [0x4cc9f8]
divsd xmm1, qword [0x4cc958]
addsd xmm1, qword [0x4cc970]
cvtpd2ps xmm0, xmm1
movss dword [esp + 0x18], xmm0
jbe 0x444ef8
comiss xmm3, dword [esp + 0x10]
addss xmm0, xmm4
movss dword [esp + 0x18], xmm0
jbe 0x444ef8
subss xmm0, xmm2
movss dword [esp + 0x18], xmm0
xorps xmm0, xmm0
xorps xmm1, xmm1
cvtsi2ss xmm0, dword [0x4fc400]
cvtsi2ss xmm1, dword [0x97170c]
subss xmm0, dword [0x97181c]
subss xmm1, dword [0x971818]
movss dword [esp + 0x1c], xmm0
divss xmm0, xmm1
movss dword [esp + 0x10], xmm1
call fcn.0044c380
movss xmm1, dword [0x4cc9f0]
xorps xmm3, xmm3
comiss xmm3, dword [esp + 0x10]
mulss xmm0, xmm1
cvtss2sd xmm0, xmm0
divsd xmm0, qword [0x4cc958]
addsd xmm0, qword [0x4cc970]
cvtsd2ss xmm0, xmm0
jbe 0x444f7a
comiss xmm3, dword [esp + 0x1c]
addss xmm0, xmm1
movss xmm1, dword [0x4cc9f8]
jbe 0x444f82
subss xmm0, xmm1
jmp 0x444f82
movss xmm1, dword [0x4cc9f8]
movss xmm2, dword [esp + 0x18]
comiss xmm3, xmm2
jbe 0x444f91
addss xmm2, xmm1
comiss xmm3, xmm0
jbe 0x444f9a
addss xmm0, xmm1
comiss xmm2, xmm0
movaps xmm3, xmm2
subss xmm3, xmm0
movss dword [esp + 0x18], xmm3
jbe 0x444fb2
addss xmm0, xmm1
jmp 0x444fb6
addss xmm2, xmm1
subss xmm2, xmm0
movaps xmm0, xmm3
call fcn.004013c0
movaps xmm1, xmm0
movaps xmm0, xmm2
call fcn.004013c0
comiss xmm0, xmm1
jae 0x444fdb
movaps xmm3, xmm2
movss dword [esp + 0x18], xmm2
inc dword [0x4fc404]
mov edx, dword [esp + 0xc]
test esi, esi
js 0x44503b
test edx, edx
js 0x44503b
mov eax, dword [0x97061c]
inc eax
cmp esi, eax
jge 0x44503b
mov eax, dword [0x970620]
inc eax
cmp edx, eax
jge 0x44503b
movaps xmm0, xmm3
call fcn.004013c0
movss xmm1, dword [0x4cc998]
comiss xmm1, xmm0
jb 0x44503b
push 0xde
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov edx, dword [esp + 0xc]
test al, 1
je 0x44503b
mov ecx, dword [0x971734]
cmp byte [ecx + edi + 0x65], 0
sete al
mov byte [ecx + edi + 0x65], al
mov eax, dword [0x971734]
cmp byte [eax + edi + 0x54], 0
jne 0x44507b
movss xmm0, dword [0x4f8fd4]
movss dword [eax + edi + 0x58], xmm0
mov eax, dword [0x971734]
movss xmm0, dword [0x4f8fd8]
movss dword [eax + edi + 0x5c], xmm0
mov eax, dword [0x971734]
movss xmm0, dword [0x4f8fdc]
movss dword [eax + edi + 0x60], xmm0
mov ecx, dword [0x971734]
cmp byte [ecx + edi + 0x65], 0
je 0x445119
test esi, esi
js 0x4450ca
test edx, edx
js 0x4450ca
mov eax, dword [0x97061c]
inc eax
cmp esi, eax
jge 0x4450ca
mov eax, dword [0x970620]
inc eax
cmp edx, eax
jge 0x4450ca
movups xmm0, xmmword [0x4f8fb8]
movq xmm1, qword [0x4f8fc8]
movups xmmword [ecx + edi + 0x78], xmm0
movq qword [ecx + edi + 0x88], xmm1
jmp 0x44519e
movups xmm0, xmmword [0x4f8fa0]
movq xmm1, qword [0x4f8fb0]
movups xmmword [ecx + edi + 0x78], xmm0
movq qword [ecx + edi + 0x88], xmm1
mov eax, dword [0x971734]
mov dword [eax + edi + 0x84], 3
mov eax, dword [0x971734]
mov dword [eax + edi + 0x80], 4
mov eax, dword [0x971734]
mov dword [eax + edi + 0x78], 4
jmp 0x44519e
test esi, esi
js 0x445154
test edx, edx
js 0x445154
mov eax, dword [0x97061c]
inc eax
cmp esi, eax
jge 0x445154
mov eax, dword [0x970620]
inc eax
cmp edx, eax
jge 0x445154
movups xmm0, xmmword [0x4f8fa0]
movq xmm1, qword [0x4f8fb0]
movups xmmword [ecx + edi + 0x78], xmm0
movq qword [ecx + edi + 0x88], xmm1
jmp 0x44519e
movups xmm0, xmmword [0x4f8fa0]
movq xmm1, qword [0x4f8fb0]
movups xmmword [ecx + edi + 0x78], xmm0
movq qword [ecx + edi + 0x88], xmm1
mov eax, dword [0x971734]
mov dword [eax + edi + 0x84], 8
mov eax, dword [0x971734]
mov dword [eax + edi + 0x80], 5
mov eax, dword [0x971734]
mov dword [eax + edi + 0x78], 3
mov eax, dword [0x971734]
cmp byte [eax + edi + 0x8b], 0
je 0x4452ee
cmp byte [eax + edi + 0x8a], 0
jne 0x4451f7
test esi, esi
js 0x4452ee
test edx, edx
js 0x4452ee
mov eax, dword [0x97061c]
inc eax
cmp esi, eax
jge 0x4452ee
mov eax, dword [0x970620]
inc eax
cmp edx, eax
jge 0x4452ee
cmp dword [0x971844], 0x428c99ac
jg 0x4452ee
push 0xa0
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x4452ee
mov edx, dword [0x971734]
cmp byte [edx + edi + 0x50], al
je 0x4452ee
movss xmm0, dword [esp + 0x18]
call fcn.004013c0
mov eax, dword [0x971740]
movaps xmm1, xmm0
cvttss2si ecx, xmm0
cvttss2si eax, dword [eax]
cmp ecx, eax
jg 0x4452ee
mov eax, dword [0x971834]
cmp eax, 1
jl 0x44524d
cmp eax, 5
jle 0x445269
cmp eax, 0x22
je 0x445269
cmp eax, 0x23
je 0x445269
cmp eax, 0x2d
je 0x445269
cmp byte [0x4f8ff9], 0
je 0x4452ee
cmp byte [edx + edi + 0x51], 1
jne 0x4452ee
movss xmm0, dword [0x4cc948]
comiss xmm0, xmm1
jb 0x4452ee
mov esi, dword [sym.imp.USER32.dll_SendInput]
lea eax, [esp + 0x28]
push 0x1c
xorps xmm0, xmm0
mov dword [esp + 0x38], 0
push eax
push 1
movlpd qword [esp + 0x38], xmm0
movlpd qword [esp + 0x48], xmm0
mov dword [esp + 0x34], 0
mov dword [esp + 0x44], 2
call esi
push 0x1c
lea eax, [esp + 0x2c]
mov dword [esp + 0x38], 0
xorps xmm0, xmm0
mov dword [esp + 0x2c], 0
push eax
push 1
movlpd qword [esp + 0x38], xmm0
movlpd qword [esp + 0x48], xmm0
mov dword [esp + 0x44], 4
call esi
mov byte [0x4fc30e], 1
cmp byte [0x4f8f9a], 0
mov esi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
je 0x4454b2
mov edx, dword [0x971744]
mov eax, edx
mov ecx, dword [0x971740]
sub eax, ecx
mov byte [esp + 0x10], 0
push dword [esp + 0x10]
sar eax, 2
push eax
call fcn.0044bbe0
mov eax, dword [0x971744]
add esp, 8
mov edx, dword [0x971740]
sub eax, edx
sar eax, 2
test eax, eax
je 0x4454b2
movss xmm0, dword [esp + 0x18]
call fcn.004013c0
cvttss2si eax, dword [edx]
cvttss2si ecx, xmm0
movaps xmm1, xmm0
cmp ecx, eax
jg 0x4454b2
mov eax, dword [0x971734]
cmp byte [eax + edi + 0x51], 1
jne 0x4454b2
movd xmm0, dword [eax + edi + 0x78]
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm1
jb 0x4454b2
push 1
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x971834]
test ax, ax
jne 0x4453c6
mov eax, dword [0x971734]
cmp byte [eax + edi + 0x8b], 0
je 0x4453b9
cmp ecx, 1
jl 0x4453aa
cmp ecx, 5
jle 0x4453c6
cmp ecx, 0x22
je 0x4453c6
cmp ecx, 0x23
je 0x4453c6
cmp ecx, 0x2d
je 0x4453c6
cmp byte [0x4f8ff9], 1
jne 0x4454b2
mov eax, dword [0x971734]
add eax, edi
mov dword [esp + 0x10], eax
cmp byte [eax + 0x8a], 0
jne 0x445413
mov edx, dword [esp + 0x20]
test edx, edx
js 0x44549a
cmp dword [esp + 0xc], 0
jl 0x44549a
mov eax, dword [0x97061c]
inc eax
cmp edx, eax
jge 0x44549a
mov eax, dword [0x970620]
inc eax
cmp dword [esp + 0xc], eax
jge 0x44549a
mov eax, dword [esp + 0x10]
cmp dword [0x971844], 0x428c99ac
jg 0x44549a
cmp ecx, 0x32
je 0x44549a
cmp ecx, 0x45
je 0x44549a
cmp ecx, 0x55
je 0x44549a
cmp ecx, 0x58
je 0x44549a
cmp ecx, 0x4a
je 0x44549a
cmp ecx, 0x4e
je 0x44549a
cmp ecx, 0x4d
je 0x44549a
cmp ecx, 0x57
je 0x44549a
cmp ecx, 0x56
je 0x44549a
cmp ecx, 0x59
je 0x44549a
cmp ecx, 0x33
jl 0x44545b
cmp ecx, 0x36
jle 0x44549a
cmp ecx, 0x48
jl 0x445465
cmp ecx, 0x4c
jle 0x44549a
cmp byte [eax + 0x50], 0
je 0x4454b2
cmp dword [0x4f8f9c], 0
je 0x44547d
cmp byte [0x970611], 0
jne 0x445491
push eax
mov ecx, 0x971758
call fcn.00443790
mov eax, dword [esp + 8]
mov dword [0x9705f8], eax
mov byte [0x970612], 1
jmp 0x4454bf
mov byte [0x970612], 0
pop edi
pop esi
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.004b50b5
mov esp, ebp
pop ebp
ret
cmp byte [0x970612], 0
je 0x445648
cmp byte [0x4f8fb1], 0
je 0x4454f8
cmp byte [0x971709], 0
jne 0x4454f8
mov eax, dword [0x4f9154]
push 0
push 4
mov dword [esp + 0x28], eax
lea eax, [esp + 0x28]
push eax
push dword [0x4f90f4]
push dword [0x971718]
call esi
mov byte [0x971709], 1
movzx eax, byte [0x970611]
mov ecx, 1
cmp dword [0x4f8f9c], 0
push 0xa0
cmovne eax, ecx
mov byte [0x970611], al
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx ecx, byte [0x970612]
xor edx, edx
test ax, ax
mov esi, dword [0x971734]
cmovne ecx, edx
movzx eax, cl
xor ecx, ecx
cmp byte [0x9717a8], cl
cmovne eax, ecx
cmp dword [0x971790], ecx
movzx eax, al
cmove eax, ecx
mov byte [0x970612], al
mov eax, dword [0x971740]
cvttss2si eax, dword [eax]
cmp eax, dword [esi + edi + 0x78]
jle 0x445575
mov eax, dword [esi + edi + 0x7c]
cmp eax, 1
je 0x44556f
cmp eax, 2
jne 0x445575
mov byte [0x970612], cl
movss xmm1, dword [0x971778]
movss xmm0, dword [0x97177c]
subss xmm0, dword [0x97181c]
subss xmm1, dword [0x971818]
movss dword [esp + 8], xmm0
divss xmm0, xmm1
movss dword [esp + 0x20], xmm1
call fcn.0044c380
movss xmm2, dword [0x4cc9f0]
xorps xmm1, xmm1
mulss xmm0, xmm2
xorps xmm3, xmm3
comiss xmm3, dword [esp + 0x20]
cvtss2sd xmm0, xmm0
divsd xmm0, qword [0x4cc958]
addsd xmm0, qword [0x4cc970]
cvtsd2ss xmm1, xmm0
movss dword [esp + 0xc], xmm1
jbe 0x445600
comiss xmm3, dword [esp + 8]
addss xmm1, xmm2
movss dword [esp + 0xc], xmm1
jbe 0x445600
subss xmm1, dword [0x4cc9f8]
movss dword [esp + 0xc], xmm1
cmp dword [esi + edi + 0x7c], 2
jne 0x445618
movss xmm0, dword [0x971828]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x445678
mov esi, dword [0x9705f8]
sub esp, 0x94
mov ecx, esp
push 0x9717f8
call fcn.00443650
movss xmm2, dword [esp + 0xa0]
mov ecx, esi
call fcn.00444770
add esp, 0x94
jmp 0x445678
cmp byte [0x971709], 0
je 0x445678
mov eax, dword [0x4f9180]
push 0
push 4
mov dword [esp + 0x28], eax
lea eax, [esp + 0x28]
push eax
push dword [0x4f90f4]
push dword [0x971718]
call esi
mov byte [0x971709], 0
mov eax, dword [0x971734]
cmp byte [eax + edi + 0x8c], 0
je 0x445825
push 0xa0
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x445825
mov edx, dword [0x971750]
mov eax, edx
mov ecx, dword [0x97174c]
sub eax, ecx
mov byte [esp + 0x20], 0
push dword [esp + 0x20]
sar eax, 2
push eax
call fcn.0044bbe0
mov eax, dword [0x971750]
add esp, 8
mov edx, dword [0x97174c]
sub eax, edx
sar eax, 2
test eax, eax
je 0x445825
movss xmm0, dword [esp + 0x24]
call fcn.004013c0
cvttss2si eax, dword [edx]
cvttss2si ecx, xmm0
cmp ecx, eax
jne 0x445825
push str.Wall_and_Water
lea ecx, [esp + 0x2c]
call fcn.00449da0
mov esi, dword [0x971734]
lea eax, [esp + 0x28]
push eax
mov ecx, 0x9717f8
lea edx, [esi + edi]
call fcn.00442f10
mov ecx, dword [esp + 0x40]
add esp, 4
mov byte [esp + 0x17], al
cmp ecx, 0x10
jb 0x445766
mov edx, dword [esp + 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x445752
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x445752
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004b5153
mov esi, dword [0x971734]
add esp, 8
mov al, byte [esp + 0x17]
test al, al
jne 0x445825
movss xmm0, dword [esp + 0x24]
comiss xmm0, dword [0x4cc9d4]
mov byte [0x971708], 1
movss xmm3, dword [esi + edi + 0x24]
movss xmm2, dword [esi + edi + 0x20]
movss dword [esp + 8], xmm3
jb 0x4457cc
subss xmm3, dword [0x97181c]
subss xmm2, dword [0x971818]
divss xmm3, dword [0x4cc9c0]
divss xmm2, dword [0x4cc9c0]
addss xmm3, dword [0x97181c]
addss xmm2, dword [0x971818]
movss dword [esp + 8], xmm3
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea eax, [esp + 0x20]
push 0
push 4
push eax
mov eax, dword [0x9717f8]
add eax, dword [0x4f9104]
push eax
push dword [0x971718]
movss dword [esp + 0x34], xmm2
call edi
mov ecx, dword [0x4f9104]
lea eax, [esp + 0x20]
movss xmm0, dword [esp + 8]
add ecx, 4
push 0
push 4
push eax
mov eax, dword [0x9717f8]
add eax, ecx
movss dword [esp + 0x2c], xmm0
push eax
push dword [0x971718]
call edi
jmp 0x44582b
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x9705ff], 0
jne 0x445e8a
cmp byte [0x4f8fe5], 0
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
je 0x4458e2
cmp byte [0x4fc30f], 0
jne 0x445966
mov eax, dword [0x4f9090]
lea ecx, [esp + 0x24]
push ecx
push 0x40
push 7
push eax
push dword [0x971718]
mov dword [esp + 0x1c], eax
call esi
lea eax, [esp + 0x20]
push eax
push 7
push 0x4f912c
push dword [esp + 0x14]
push dword [0x971718]
call edi
test eax, eax
je 0x4458b9
cmp dword [esp + 0x20], 7
jne 0x4458b9
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x28]
push 7
push dword [esp + 0x14]
push dword [0x971718]
call esi
mov byte [0x4fc30f], 1
jmp 0x445966
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Failed_to_write_process_memory.
call fcn.0044a720
push 0x44a940
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov byte [0x4fc30f], 1
jmp 0x445966
cmp byte [0x4fc30f], 1
jne 0x445966
mov eax, dword [0x4f9090]
lea ecx, [esp + 0x24]
push ecx
push 0x40
push 7
push eax
push dword [0x971718]
mov dword [esp + 0x1c], eax
call esi
lea eax, [esp + 0x20]
push eax
push 7
push 0x4f9158
push dword [esp + 0x14]
push dword [0x971718]
call edi
test eax, eax
je 0x445942
cmp dword [esp + 0x20], 7
jne 0x445942
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x28]
push 7
push dword [esp + 0x14]
push dword [0x971718]
call esi
jmp 0x44595f
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Failed_to_write_process_memory.
call fcn.0044a720
push 0x44a940
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov byte [0x4fc30f], 0
cmp byte [0x4f8fe7], 0
je 0x445b66
cmp byte [0x97170a], 0
jne 0x445d4a
mov eax, dword [0x4f90dc]
lea ecx, [esp + 0x24]
push ecx
push 0x40
push 7
push eax
push dword [0x971718]
mov dword [esp + 0x1c], eax
call esi
lea eax, [esp + 0x20]
push eax
push 7
push 0x4f9136
push dword [esp + 0x14]
push dword [0x971718]
call edi
test eax, eax
je 0x4459d7
cmp dword [esp + 0x20], 7
jne 0x4459d7
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x28]
push 7
push dword [esp + 0x14]
push dword [0x971718]
call esi
jmp 0x4459f4
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Failed_to_write_process_memory.
call fcn.0044a720
push 0x44a940
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov eax, dword [0x4f90e0]
lea ecx, [esp + 0x24]
push ecx
push 0x40
push 7
push eax
push dword [0x971718]
mov dword [esp + 0x1c], eax
call esi
lea eax, [esp + 0x20]
push eax
push 7
push 0x4f913d
push dword [esp + 0x14]
push dword [0x971718]
call edi
test eax, eax
je 0x445a4b
cmp dword [esp + 0x20], 7
jne 0x445a4b
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x28]
push 7
push dword [esp + 0x14]
push dword [0x971718]
call esi
jmp 0x445a68
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Failed_to_write_process_memory.
call fcn.0044a720
push 0x44a940
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov eax, dword [0x4f90e4]
lea ecx, [esp + 0x24]
push ecx
push 0x40
push 5
push eax
push dword [0x971718]
mov dword [esp + 0x1c], eax
call esi
lea eax, [esp + 0x20]
push eax
push 5
push 0x4f9144
push dword [esp + 0x14]
push dword [0x971718]
call edi
test eax, eax
je 0x445abf
cmp dword [esp + 0x20], 5
jne 0x445abf
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x28]
push 5
push dword [esp + 0x14]
push dword [0x971718]
call esi
jmp 0x445adc
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Failed_to_write_process_memory.
call fcn.0044a720
push 0x44a940
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov eax, dword [0x4f90e8]
lea ecx, [esp + 0x24]
push ecx
push 0x40
push 5
push eax
push dword [0x971718]
mov dword [esp + 0x1c], eax
call esi
lea eax, [esp + 0x20]
push eax
push 5
push 0x4f9149
push dword [esp + 0x14]
push dword [0x971718]
call edi
test eax, eax
je 0x445b3d
cmp dword [esp + 0x20], 5
jne 0x445b3d
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x28]
push 5
push dword [esp + 0x14]
push dword [0x971718]
call esi
mov byte [0x97170a], 1
jmp 0x445d4a
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Failed_to_write_process_memory.
call fcn.0044a720
push 0x44a940
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov byte [0x97170a], 1
jmp 0x445d4a
cmp byte [0x97170a], 1
jne 0x445d4a
mov eax, dword [0x4f90dc]
lea ecx, [esp + 0x24]
push ecx
push 0x40
push 7
push eax
push dword [0x971718]
mov dword [esp + 0x1c], eax
call esi
lea eax, [esp + 0x20]
push eax
push 7
push 0x4f9162
push dword [esp + 0x14]
push dword [0x971718]
call edi
test eax, eax
je 0x445bca
cmp dword [esp + 0x20], 7
jne 0x445bca
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x28]
push 7
push dword [esp + 0x14]
push dword [0x971718]
call esi
jmp 0x445be7
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Failed_to_write_process_memory.
call fcn.0044a720
push 0x44a940
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov eax, dword [0x4f90e0]
lea ecx, [esp + 0x24]
push ecx
push 0x40
push 7
push eax
push dword [0x971718]
mov dword [esp + 0x1c], eax
call esi
lea eax, [esp + 0x20]
push eax
push 7
push 0x4f9169
push dword [esp + 0x14]
push dword [0x971718]
call edi
test eax, eax
je 0x445c3e
cmp dword [esp + 0x20], 7
jne 0x445c3e
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x28]
push 7
push dword [esp + 0x14]
push dword [0x971718]
call esi
jmp 0x445c5b
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Failed_to_write_process_memory.
call fcn.0044a720
push 0x44a940
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov eax, dword [0x4f90e4]
lea ecx, [esp + 0x24]
push ecx
push 0x40
push 5
push eax
push dword [0x971718]
mov dword [esp + 0x1c], eax
call esi
lea eax, [esp + 0x20]
push eax
push 5
push 0x4f9170
push dword [esp + 0x14]
push dword [0x971718]
call edi
test eax, eax
je 0x445cb2
cmp dword [esp + 0x20], 5
jne 0x445cb2
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x28]
push 5
push dword [esp + 0x14]
push dword [0x971718]
call esi
jmp 0x445ccf
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Failed_to_write_process_memory.
call fcn.0044a720
push 0x44a940
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov eax, dword [0x4f90e8]
lea ecx, [esp + 0x24]
push ecx
push 0x40
push 5
push eax
push dword [0x971718]
mov dword [esp + 0x1c], eax
call esi
lea eax, [esp + 0x20]
push eax
push 5
push 0x4f9175
push dword [esp + 0x14]
push dword [0x971718]
call edi
test eax, eax
je 0x445d26
cmp dword [esp + 0x20], 5
jne 0x445d26
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x28]
push 5
push dword [esp + 0x14]
push dword [0x971718]
call esi
jmp 0x445d43
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Failed_to_write_process_memory.
call fcn.0044a720
push 0x44a940
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov byte [0x97170a], 0
cmp byte [0x4f8fe8], 0
je 0x445e06
cmp byte [0x97170b], 0
jne 0x445e8a
mov eax, dword [0x4f90ec]
lea ecx, [esp + 0x24]
push ecx
push 0x40
push 3
push eax
push dword [0x971718]
mov dword [esp + 0x1c], eax
call esi
lea eax, [esp + 0x20]
push eax
push 3
push 0x4f9133
push dword [esp + 0x14]
push dword [0x971718]
call edi
test eax, eax
je 0x445dd1
cmp dword [esp + 0x20], 3
jne 0x445dd1
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x28]
push 3
push dword [esp + 0x14]
push dword [0x971718]
call esi
mov byte [0x97170b], 1
pop edi
pop esi
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.004b50b5
mov esp, ebp
pop ebp
ret
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Failed_to_write_process_memory.
call fcn.0044a720
push 0x44a940
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov byte [0x97170b], 1
pop edi
pop esi
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.004b50b5
mov esp, ebp
pop ebp
ret
cmp byte [0x97170b], 1
jne 0x445e8a
mov eax, dword [0x4f90ec]
lea ecx, [esp + 0x24]
push ecx
push 0x40
push 3
push eax
push dword [0x971718]
mov dword [esp + 0x1c], eax
call esi
lea eax, [esp + 0x20]
push eax
push 3
push 0x4f915f
push dword [esp + 0x14]
push dword [0x971718]
call edi
test eax, eax
je 0x445e66
cmp dword [esp + 0x20], 3
jne 0x445e66
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x28]
push 3
push dword [esp + 0x14]
push dword [0x971718]
call esi
jmp 0x445e83
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Failed_to_write_process_memory.
call fcn.0044a720
push 0x44a940
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov byte [0x97170b], 0
mov ecx, dword [esp + 0x44]
pop edi
pop esi
xor ecx, esp
call fcn.004b50b5
mov esp, ebp
pop ebp
ret