Function at 0x438fc0
Capabilities:
Contain obfuscated stackstrings
Execute command
Log keystrokes via polling
Manipulate console buffer

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x460883
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x2f700
call fcn.0045dfc0
mov eax, dword [0x48f040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
xor eax, eax
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x2f410], eax
xor edi, edi
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], eax
xor al, al
mov byte [ebp - 0x2f452], al
mov byte [ebp - 0x2f411], al
mov byte [ebp - 0x2f5d8], al
xor eax, eax
mov dword [ebp - 0x2f674], eax
mov dword [ebp - 0x2f4a4], eax
mov dword [ebp - 0x2f4c8], eax
mov dword [ebp - 0x2f4e8], eax
mov dword [ebp - 0x2f640], eax
mov dword [ebp - 0x2f634], eax
mov dword [ebp - 0x2f4d8], eax
mov eax, 1
mov dword [ebp - 0x2f630], eax
mov dword [ebp - 0x2f610], eax
xor eax, eax
mov dword [ebp - 0x2f518], eax
mov dword [ebp - 0x2f468], eax
xor al, al
mov dword [ebp - 0x2f514], eax
mov byte [ebp - 0x2f604], al
mov byte [ebp - 0x2f490], al
xor eax, eax
push 0xc
mov dword [ebp - 0x2f428], edi
mov dword [ebp - 0x2f4ec], edi
mov dword [ebp - 0x174], edi
mov dword [ebp - 0x2f4b8], eax
mov dword [ebp - 0x2f494], eax
mov dword [ebp - 0x2f498], eax
mov dword [ebp - 0x2f49c], eax
mov dword [ebp - 0x2f4a0], eax
call fcn.0042d5b0
lea ecx, [ebp - 0x148]
call fcn.0042eeb0
xor eax, eax
mov dword [ebp - 4], edi
mov dword [ebp - 0x2f5a8], eax
mov dword [ebp - 0x2f62c], eax
mov dword [ebp - 0x2f628], eax
mov dword [ebp - 0x2f670], eax
or eax, 0xffffffff
mov dword [ebp - 0x2f508], eax
mov dword [ebp - 0x2f5c4], eax
or eax, eax
mov dword [ebp - 0x2f4d4], eax
mov dword [ebp - 0x2f5bc], eax
or eax, 0xffffffff
mov dword [ebp - 0x2f50c], eax
mov dword [ebp - 0x2f5b8], eax
or eax, eax
mov dword [ebp - 0x2f510], eax
mov dword [ebp - 0x2f5cc], eax
or eax, 0xffffffff
mov dword [ebp - 0x2f528], eax
mov dword [ebp - 0x2f5a4], eax
or eax, eax
mov dword [ebp - 0x2f5c0], eax
mov dword [ebp - 0x2f5a0], eax
or eax, 0xffffffff
mov dword [ebp - 0x2f588], eax
mov dword [ebp - 0x2f5c8], eax
or eax, eax
mov dword [ebp - 0x2f5b4], eax
mov dword [ebp - 0x2f5b0], eax
mov eax, 2
mov dword [ebp - 0x2f4ac], eax
mov dword [ebp - 0x2f59c], eax
or eax, 0xffffffff
mov dword [ebp - 0x2f5d0], eax
mov dword [ebp - 0x2f548], eax
xor eax, eax
mov dword [ebp - 0x2f4e4], eax
mov dword [ebp - 0x2f654], eax
mov dword [ebp - 0x2f63c], eax
xorps xmm0, xmm0
mov dword [ebp - 0x2f644], eax
mov dword [ebp - 0x2f624], eax
mov dword [ebp - 0x2f65c], eax
mov dword [ebp - 0x2f658], eax
mov dword [ebp - 0x2f664], eax
mov dword [ebp - 0x2f660], eax
mov dword [ebp - 0x2f420], eax
mov dword [ebp - 0x2f424], eax
mov eax, 0x2710
mov dword [ebp - 0x2f524], eax
mov dword [ebp - 0x2f578], eax
mov eax, 0x2c88
mov dword [ebp - 0x2f4e0], eax
mov dword [ebp - 0x2f57c], eax
xor eax, eax
mov dword [ebp - 0x2f51c], eax
mov eax, 0xe
mov dword [ebp - 0x2f4cc], eax
mov dword [ebp - 0x2f504], eax
or eax, 0xffffffff
mov dword [ebp - 0x2f48c], eax
mov dword [ebp - 0x2f4dc], eax
or eax, eax
mov dword [ebp - 0x2f4b4], eax
mov dword [ebp - 0x2f4f0], eax
xor eax, eax
mov dword [ebp - 0x2f594], eax
mov dword [ebp - 0x2f590], eax
mov dword [ebp - 0x2f58c], eax
mov eax, 1
mov dword [ebp - 0x2f41c], eax
mov dword [ebp - 0x2f4c0], eax
xor eax, eax
mov dword [ebp - 0x2f668], eax
xor al, al
mov dword [ebp - 0x2f520], eax
mov byte [ebp - 0x2f64c], al
mov eax, 0xffffc000
mov dword [ebp - 0x2f4b0], eax
mov dword [ebp - 0x2f4a8], eax
mov eax, 0x4000
mov dword [ebp - 0x2f478], eax
mov dword [ebp - 0x2f434], eax
mov eax, 0xffff8e00
mov dword [ebp - 0x2f47c], eax
mov dword [ebp - 0x2f484], eax
mov eax, 0x7200
mov dword [ebp - 0x2f488], eax
mov dword [ebp - 0x2f46c], eax
xor eax, eax
mov dword [ebp - 0x2f648], eax
xor al, al
mov byte [ebp - 0x2f42e], al
mov byte [ebp - 0x2f42d], al
mov byte [ebp - 0x2f404], al
xor eax, eax
mov byte [ebp - 0x2f60c], 1
mov byte [ebp - 0x2f5e0], 0
mov byte [ebp - 0x2f5dc], 0
mov dword [ebp - 0x2f40c], 1
mov dword [ebp - 0x2f408], 0x155130
movups xmmword [ebp - 0x2f400], xmm0
mov dword [ebp - 0x2f3f0], edi
mov dword [ebp - 0x2f3ec], edi
movups xmmword [ebp - 0x2f3e8], xmm0
mov dword [ebp - 0x2f3d8], edi
mov dword [ebp - 0x2f3d4], edi
mov dword [ebp - 0x2f3d0], eax
mov dword [ebp - 0x2f3cc], eax
mov dword [ebp - 0x2f3c8], eax
mov dword [ebp - 0x2f3c4], eax
mov word [ebp - 0x2f3c0], ax
mov dword [ebp - 0x2f3bc], eax
mov byte [ebp - 0x2f3b8], al
mov dword [ebp - 0x2f3b4], eax
mov dword [ebp - 0x2f3b0], eax
mov word [ebp - 0x2f3ac], ax
mov byte [ebp - 0x2f3aa], al
mov dword [ebp - 0x2f3a8], eax
push fcn.0042d200
mov edx, 0x190
mov dword [ebp - 0x2f3a4], eax
lea ecx, [ebp - 0x2f38c]
mov dword [ebp - 0x2f3a0], eax
mov dword [ebp - 0x2f39c], eax
mov dword [ebp - 0x2f398], eax
mov byte [ebp - 0x2f394], al
mov dword [ebp - 0x2f390], eax
call fcn.00444da0
push fcn.0042d200
mov edx, 0x190
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2ce0c]
call fcn.00444da0
push fcn.0042d200
mov edx, 0x190
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2a88c]
call fcn.00444da0
push fcn.0042d200
mov edx, 0x190
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2830c]
call fcn.00444da0
push fcn.0042d200
mov edx, 0x190
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x25d8c]
call fcn.00444da0
add esp, 0x14
push dword [ebp - 0x2f418]
lea ecx, [ebp - 0x2380c]
mov byte [ebp - 4], 5
call fcn.0042d0e0
lea ecx, [ebp - 0x2380c]
call fcn.004366d0
push dword [ebp - 0x2f418]
lea ecx, [ebp - 0x237f4]
mov byte [ebp - 4], 6
call fcn.0042d0e0
lea ecx, [ebp - 0x237f4]
call fcn.004366d0
push dword [ebp - 0x2f418]
lea ecx, [ebp - 0x237dc]
mov byte [ebp - 4], 7
call fcn.0042d0e0
lea ecx, [ebp - 0x237dc]
call fcn.004366d0
push dword [ebp - 0x2f418]
lea ecx, [ebp - 0x237c4]
mov byte [ebp - 4], 8
call fcn.0042d0e0
lea ecx, [ebp - 0x237c4]
call fcn.004366d0
push dword [ebp - 0x2f418]
lea ecx, [ebp - 0x237ac]
mov byte [ebp - 4], 9
call fcn.0042d0e0
lea ecx, [ebp - 0x237ac]
call fcn.004366d0
xorps xmm0, xmm0
mov byte [ebp - 0x23784], 0
movups xmmword [ebp - 0x23794], xmm0
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x17af4], 2
mov dword [ebp - 0x17af0], 0x155c2c
mov byte [ebp - 0x17aec], 0
movups xmmword [ebp - 0x17ae8], xmm0
mov dword [ebp - 0x17ad8], edi
mov dword [ebp - 0x17ad4], edi
xor eax, eax
mov dword [ebp - 0x17ac0], edi
push fcn.0042d200
mov edx, 0x190
mov dword [ebp - 0x17abc], edi
lea ecx, [ebp - 0x17a74]
mov dword [ebp - 0x17ab8], eax
movups xmmword [ebp - 0x17ad0], xmm0
mov dword [ebp - 0x17ab4], eax
mov dword [ebp - 0x17ab0], eax
mov dword [ebp - 0x17aac], eax
mov word [ebp - 0x17aa8], ax
mov dword [ebp - 0x17aa4], eax
mov byte [ebp - 0x17aa0], al
mov dword [ebp - 0x17a9c], eax
mov dword [ebp - 0x17a98], eax
mov word [ebp - 0x17a94], ax
mov byte [ebp - 0x17a92], al
mov dword [ebp - 0x17a90], eax
mov dword [ebp - 0x17a8c], eax
mov dword [ebp - 0x17a88], eax
mov dword [ebp - 0x17a84], eax
mov dword [ebp - 0x17a80], eax
mov byte [ebp - 0x17a7c], al
mov dword [ebp - 0x17a78], eax
call fcn.00444da0
push fcn.0042d200
mov edx, 0x190
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x154f4]
call fcn.00444da0
push fcn.0042d200
mov edx, 0x190
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x12f74]
call fcn.00444da0
push fcn.0042d200
mov edx, 0x190
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x109f4]
call fcn.00444da0
push fcn.0042d200
mov edx, 0x190
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xe474]
call fcn.00444da0
add esp, 0x14
push dword [ebp - 0x2f418]
lea ecx, [ebp - 0xbef4]
mov byte [ebp - 4], 0xf
call fcn.0042d0e0
lea ecx, [ebp - 0xbef4]
call fcn.004366d0
push dword [ebp - 0x2f418]
lea ecx, [ebp - 0xbedc]
mov byte [ebp - 4], 0x10
call fcn.0042d0e0
lea ecx, [ebp - 0xbedc]
call fcn.004366d0
push dword [ebp - 0x2f418]
lea ecx, [ebp - 0xbec4]
mov byte [ebp - 4], 0x11
call fcn.0042d0e0
lea ecx, [ebp - 0xbec4]
call fcn.004366d0
push dword [ebp - 0x2f418]
lea ecx, [ebp - 0xbeac]
mov byte [ebp - 4], 0x12
call fcn.0042d0e0
lea ecx, [ebp - 0xbeac]
call fcn.004366d0
mov byte [ebp - 4], 0x13
push dword [ebp - 0x2f418]
lea ecx, [ebp - 0xbe94]
call fcn.0042d0e0
lea ecx, [ebp - 0xbe94]
call fcn.004366d0
xorps xmm0, xmm0
mov byte [ebp - 0xbe6c], 0
movups xmmword [ebp - 0xbe7c], xmm0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xbde8]
xor eax, eax
mov dword [ebp - 0xbe68], 3
push fcn.0042d200
mov edx, 0x190
mov dword [ebp - 0xbe64], 0x156728
mov byte [ebp - 0xbe60], 0
movups xmmword [ebp - 0xbe5c], xmm0
mov dword [ebp - 0xbe4c], edi
mov dword [ebp - 0xbe48], edi
movups xmmword [ebp - 0xbe44], xmm0
mov dword [ebp - 0xbe34], edi
mov dword [ebp - 0xbe30], edi
mov dword [ebp - 0xbe2c], eax
mov dword [ebp - 0xbe28], eax
mov dword [ebp - 0xbe24], eax
mov dword [ebp - 0xbe20], eax
mov word [ebp - 0xbe1c], ax
mov dword [ebp - 0xbe18], eax
mov byte [ebp - 0xbe14], al
mov dword [ebp - 0xbe10], eax
mov dword [ebp - 0xbe0c], eax
mov word [ebp - 0xbe08], ax
mov byte [ebp - 0xbe06], al
mov dword [ebp - 0xbe04], eax
mov dword [ebp - 0xbe00], eax
mov dword [ebp - 0xbdfc], eax
mov dword [ebp - 0xbdf8], eax
mov dword [ebp - 0xbdf4], eax
mov byte [ebp - 0xbdf0], al
mov dword [ebp - 0xbdec], eax
call fcn.00444da0
push fcn.0042d200
mov edx, 0x190
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x9868]
call fcn.00444da0
push fcn.0042d200
mov edx, 0x190
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x72e8]
call fcn.00444da0
push fcn.0042d200
mov edx, 0x190
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x4d68]
call fcn.00444da0
push fcn.0042d200
mov edx, 0x190
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x27e8]
call fcn.00444da0
add esp, 0x14
push dword [ebp - 0x2f418]
lea ecx, [ebp - 0x268]
mov byte [ebp - 4], 0x19
call fcn.0042d0e0
lea ecx, [ebp - 0x268]
call fcn.004366d0
push dword [ebp - 0x2f418]
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 0x1a
call fcn.0042d0e0
lea ecx, [ebp - 0x250]
call fcn.004366d0
push dword [ebp - 0x2f418]
lea ecx, [ebp - 0x238]
mov byte [ebp - 4], 0x1b
call fcn.0042d0e0
lea ecx, [ebp - 0x238]
call fcn.004366d0
push dword [ebp - 0x2f418]
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x1c
call fcn.0042d0e0
lea ecx, [ebp - 0x220]
call fcn.004366d0
push dword [ebp - 0x2f418]
lea ecx, [ebp - 0x208]
mov byte [ebp - 4], 0x1d
call fcn.0042d0e0
lea ecx, [ebp - 0x208]
call fcn.004366d0
xorps xmm0, xmm0
mov byte [ebp - 0x1e0], 0
movups xmmword [ebp - 0x1f0], xmm0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x23700]
xor eax, eax
mov dword [ebp - 0x23780], 4
push fcn.0042d200
mov edx, 0x190
mov dword [ebp - 0x2377c], 0x157224
mov byte [ebp - 0x23778], 0
movups xmmword [ebp - 0x23774], xmm0
mov dword [ebp - 0x23764], edi
mov dword [ebp - 0x23760], edi
movups xmmword [ebp - 0x2375c], xmm0
mov dword [ebp - 0x2374c], edi
mov dword [ebp - 0x23748], edi
mov dword [ebp - 0x23744], eax
mov dword [ebp - 0x23740], eax
mov dword [ebp - 0x2373c], eax
mov dword [ebp - 0x23738], eax
mov word [ebp - 0x23734], ax
mov dword [ebp - 0x23730], eax
mov byte [ebp - 0x2372c], al
mov dword [ebp - 0x23728], eax
mov dword [ebp - 0x23724], eax
mov word [ebp - 0x23720], ax
mov byte [ebp - 0x2371e], al
mov dword [ebp - 0x2371c], eax
mov dword [ebp - 0x23718], eax
mov dword [ebp - 0x23714], eax
mov dword [ebp - 0x23710], eax
mov dword [ebp - 0x2370c], eax
mov byte [ebp - 0x23708], al
mov dword [ebp - 0x23704], eax
call fcn.00444da0
push fcn.0042d200
mov edx, 0x190
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x21180]
call fcn.00444da0
push fcn.0042d200
mov edx, 0x190
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x1ec00]
call fcn.00444da0
push fcn.0042d200
mov edx, 0x190
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x1c680]
call fcn.00444da0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x1a100]
push fcn.0042d200
mov edx, 0x190
call fcn.00444da0
add esp, 0x14
push dword [ebp - 0x2f418]
lea ecx, [ebp - 0x17b80]
mov byte [ebp - 4], 0x23
call fcn.0042d0e0
lea ecx, [ebp - 0x17b80]
call fcn.004366d0
push dword [ebp - 0x2f418]
lea ecx, [ebp - 0x17b68]
mov byte [ebp - 4], 0x24
call fcn.0042d0e0
lea ecx, [ebp - 0x17b68]
call fcn.004366d0
push dword [ebp - 0x2f418]
lea ecx, [ebp - 0x17b50]
mov byte [ebp - 4], 0x25
call fcn.0042d0e0
lea ecx, [ebp - 0x17b50]
call fcn.004366d0
push dword [ebp - 0x2f418]
lea ecx, [ebp - 0x17b38]
mov byte [ebp - 4], 0x26
call fcn.0042d0e0
lea ecx, [ebp - 0x17b38]
call fcn.004366d0
push dword [ebp - 0x2f418]
lea ecx, [ebp - 0x17b20]
mov byte [ebp - 4], 0x27
call fcn.0042d0e0
lea ecx, [ebp - 0x17b20]
call fcn.004366d0
xorps xmm0, xmm0
mov byte [ebp - 0x17af8], 0
movups xmmword [ebp - 0x17b08], xmm0
mov eax, 0x2710
mov byte [ebp - 0x2f451], 0
mov dword [ebp - 0x2f474], eax
mov dword [ebp - 0x2f460], eax
mov al, 1
mov dword [ebp - 0x2f5ac], eax
mov byte [ebp - 0x2f650], al
xor eax, eax
mov dword [ebp - 0x2f66c], eax
mov dword [ebp - 0x2f638], eax
push dword [ebp - 0x2f418]
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 0x29
call fcn.0042d0e0
lea ecx, [ebp - 0x1a4]
call fcn.004366d0
push edi
mov byte [ebp - 4], 0x2a
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
push eax
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
add esp, 8
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov esi, eax
lea eax, [ebp - 0x1c4]
push eax
push esi
mov dword [ebp - 0x2f5f8], esi
call dword [sym.imp.KERNEL32.dll_GetConsoleCursorInfo]
lea eax, [ebp - 0x1c4]
mov dword [ebp - 0x1c0], edi
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SetConsoleCursorInfo]
push 7
push esi
call dword [sym.imp.KERNEL32.dll_SetConsoleMode]
mov ecx, esi
call fcn.004378e0
call fcn.0042d5d0
lea ecx, [ebp - 0x18c]
mov byte [ebp - 4], 0x2b
call fcn.00435c00
push eax
lea ecx, [ebp - 0x1a4]
call fcn.004419f0
lea ecx, [ebp - 0x18c]
call fcn.0042d200
mov edx, 0x4817fa
lea ecx, [ebp - 0x1a4]
call fcn.00443980
test al, al
jne 0x439b9c
mov edx, str.v1.4b
lea ecx, [ebp - 0x1a4]
call fcn.00444e60
test al, al
jne 0x439b9c
lea eax, [ebp - 0x1a4]
mov byte [ebp - 0x2f451], 1
push eax
mov edx, str.New_version
lea ecx, [ebp - 0x18c]
call fcn.004439a0
add esp, 4
sub esp, 0x18
mov byte [ebp - 4], 0x2c
mov ecx, esp
mov edx, eax
push str._found_online
call fcn.004436f0
add esp, 4
call fcn.00437de0
add esp, 0x18
lea ecx, [ebp - 0x18c]
call fcn.0042d200
mov dword [ebp - 4], 0x2a
jmp 0x439e37
sub esp, 0x18
mov ecx, esp
push str.Latest_version_installed
call fcn.0042d0a0
call fcn.00437de0
add esp, 0x18
mov dword [ebp - 4], 0x2a
jmp 0x439e37
xor eax, eax
mov dword [ebp - 0x2f608], eax
mov esi, eax
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
add esp, 4
mov dword [ebp - 0x2f448], eax
push esi
push dword [ebp - 0x2f5f8]
call dword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x482ce0
call fcn.00444b80
push 0x444ef0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.___Fang_and_gonps_Extended_Training_Mode_Mod
call fcn.00444b80
mov edx, str.v1.4b
mov ecx, eax
call fcn.00443a70
mov edx, str.______________________
mov ecx, eax
call fcn.00444b80
push 0x444ef0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._________________________________________________________________________
call fcn.00444b80
push 0x444ef0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x482dcc
call fcn.00444b80
mov edx, 0x4a3c20
mov ecx, eax
call fcn.00443a70
mov edx, str.___
mov ecx, eax
call fcn.00444b80
push 0x444ef0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
cmp byte [ebp - 0x2f451], 0
je 0x439f4d
mov ecx, dword [ebp - 0x2f448]
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
sub ecx, eax
je 0x439f4d
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.___NEW_VERSION
call fcn.00444b80
lea edx, [ebp - 0x1a4]
mov ecx, eax
call fcn.00443a70
mov edx, str._AVAILABLE_ON_GITHUB_________________________________
mov ecx, eax
jmp 0x439f58
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str._________________________________________________________________________
call fcn.00444b80
push 0x444ef0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x482ce0
call fcn.00444b80
push 0x444ef0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea eax, [ebp - 0x174]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test edi, edi
je 0x43a163
cmp dword [ebp - 0x174], 0x103
je 0x43a323
push dword [ebp - 0x2f668]
lea eax, [ebp - 0x148]
push dword [ebp - 0x2f650]
push dword [ebp - 0x2f474]
push dword [ebp - 0x2f5dc]
push dword [ebp - 0x2f5e0]
push dword [ebp - 0x2f488]
push dword [ebp - 0x2f47c]
push dword [ebp - 0x2f478]
push dword [ebp - 0x2f4b0]
push dword [ebp - 0x2f64c]
push dword [ebp - 0x2f41c]
push dword [ebp - 0x2f58c]
push dword [ebp - 0x2f590]
push dword [ebp - 0x2f594]
push dword [ebp - 0x2f4b4]
push dword [ebp - 0x2f48c]
push dword [ebp - 0x2f4cc]
push dword [ebp - 0x2f60c]
push 0
push dword [ebp - 0x2f51c]
push dword [ebp - 0x2f4e0]
push dword [ebp - 0x2f524]
push dword [ebp - 0x2f424]
push dword [ebp - 0x2f420]
push 0
push 0
push dword [ebp - 0x2f660]
push dword [ebp - 0x2f664]
push dword [ebp - 0x2f658]
push dword [ebp - 0x2f65c]
push dword [ebp - 0x2f624]
push dword [ebp - 0x2f644]
push dword [ebp - 0x2f63c]
push dword [ebp - 0x2f654]
push dword [ebp - 0x2f4e4]
push dword [ebp - 0x2f5d0]
push dword [ebp - 0x2f4ac]
push dword [ebp - 0x2f5b4]
push dword [ebp - 0x2f588]
push dword [ebp - 0x2f5c0]
push dword [ebp - 0x2f528]
push dword [ebp - 0x2f510]
push dword [ebp - 0x2f50c]
push dword [ebp - 0x2f4d4]
push 0xffffffffffffffff
push dword [ebp - 0x2f508]
push dword [ebp - 0x2f670]
push dword [ebp - 0x2f628]
push dword [ebp - 0x2f62c]
push dword [ebp - 0x2f5a8]
sub esp, 0xc
mov ecx, esp
push eax
call fcn.00440b80
push dword [ebp - 0x2f4a0]
mov dl, byte [ebp - 0x2f411]
push dword [ebp - 0x2f49c]
mov cl, byte [ebp - 0x2f452]
push dword [ebp - 0x2f498]
push dword [ebp - 0x2f494]
push dword [ebp - 0x2f4b8]
push dword [ebp - 0x2f490]
push dword [ebp - 0x2f604]
push dword [ebp - 0x2f468]
push dword [ebp - 0x2f518]
push 0
push dword [ebp - 0x2f630]
push dword [ebp - 0x2f4d8]
push 0
push dword [ebp - 0x2f634]
push dword [ebp - 0x2f640]
push dword [ebp - 0x2f4e8]
push dword [ebp - 0x2f4c8]
push dword [ebp - 0x2f4a4]
push dword [ebp - 0x2f674]
push dword [ebp - 0x2f5d8]
push 0
call fcn.004380b0
add esp, 0x128
mov edi, dword [ebp - 0x2f5f8]
mov dword [ebp - 0x2f610], 0x70000
push dword [ebp - 0x2f610]
push edi
call dword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
push dword [ebp - 0x2f418]
lea ecx, [ebp - 0x1dc]
call fcn.0042d0e0
push 0x25
push str.Looking_for_MBAA.exe
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x2e
call fcn.0042d100
mov edx, dword [ebp - 0x2f448]
mov byte [ebp - 4], 0x2f
and edx, 0x80000007
jns 0x43a1be
dec edx
or edx, 0xfffffff8
inc edx
xor ecx, ecx
test edx, edx
jle 0x43a1ee
nop dword [eax]
nop dword [eax + eax]
cmp dword [ebp - 0x1c8], 0xf
lea eax, [ebp - 0x1dc]
cmova eax, dword [ebp - 0x1dc]
mov byte [eax + ecx + 0x14], 0x2e
inc ecx
cmp ecx, edx
jl 0x43a1d0
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea edx, [ebp - 0x1dc]
call fcn.00443a70
mov dword [ebp - 0x2f614], 0x80000
push dword [ebp - 0x2f614]
push edi
call dword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x482e48
call fcn.00444b80
mov ecx, str.MBAA.exe
call fcn.004362a0
mov edi, eax
mov dword [ebp - 0x2f428], edi
test edi, edi
jne 0x43a258
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x2a
call fcn.0042d200
jmp 0x439e41
sub esp, 0x18
mov edi, esp
mov dword [ebp - 0x2f688], edi
mov ecx, edi
push dword [ebp - 0x2f688]
call fcn.0042d0e0
push 0x10
push str.Attached_to_MBAA
mov ecx, edi
mov byte [ebp - 4], 0x30
call fcn.0042d100
mov byte [ebp - 4], 0x2f
call fcn.00437de0
add esp, 0x18
mov dword [ebp - 0x2f618], 0x70000
push dword [ebp - 0x2f618]
push dword [ebp - 0x2f5f8]
call dword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x482e48
call fcn.00444b80
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0x2f428]
mov edx, str.MBAA.exe
call fcn.00435f60
sub esp, 0x18
mov dword [ebp - 0x2f410], eax
mov edi, esp
mov dword [ebp - 0x2f680], edi
mov ecx, edi
push dword [ebp - 0x2f680]
call fcn.0042d0e0
push 0x15
push str.Got_BaseAddressByName
mov ecx, edi
mov byte [ebp - 4], 0x31
call fcn.0042d100
mov byte [ebp - 4], 0x2f
call fcn.00437de0
add esp, 0x18
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x1dc]
call fcn.0042d200
mov edi, dword [ebp - 0x2f428]
push 0
push 4
lea eax, [ebp - 0x130]
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x162a74
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x2f668], eax
cmp eax, 0x1010
je 0x43a385
mov dword [ebp - 0x2f61c], 0x70000
push dword [ebp - 0x2f61c]
push dword [ebp - 0x2f5f8]
call dword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Cannot_attach_to_versus_mode....
call fcn.00444b80
jmp 0x439e41
mov dword [ebp - 0x2f620], 0x70000
push dword [ebp - 0x2f620]
push dword [ebp - 0x2f5f8]
call dword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Attached_to_MBAA.exe
call fcn.00444b80
mov edx, 0x482ed8
mov ecx, eax
call fcn.00444b80
mov edx, dword [ebp - 0x2f410]
lea eax, [ebp - 0x23780]
push eax
lea eax, [ebp - 0xbe68]
mov ecx, edi
push eax
lea eax, [ebp - 0x17af4]
push eax
lea eax, [ebp - 0x2f40c]
push eax
call fcn.004357e0
add esp, 0x10
lea eax, [ebp - 0x130]
push 0
push 4
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x155130
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [ebp - 0x130], 0
jne 0x43a455
lea ecx, [ebp - 0x2f6e0]
mov dword [ebp - 0x2f494], 0
mov dword [ebp - 0x2f498], 0
mov dword [ebp - 0x2f49c], 0
call fcn.0042eeb0
push eax
lea ecx, [ebp - 0x148]
call fcn.00440ad0
lea ecx, [ebp - 0x2f6e0]
call fcn.00440a10
jmp 0x439e41
push 0
push 4
lea eax, [ebp - 0x130]
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x371399
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov al, byte [ebp - 0x2f411]
cmp dword [ebp - 0x130], 1
push 0
mov byte [ebp - 0x13b], al
sete byte [ebp - 0x2f411]
push 4
lea eax, [ebp - 0x130]
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x156728
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [ebp - 0x130], 1
lea eax, [ebp - 0x130]
push 0
push 4
push eax
mov eax, dword [ebp - 0x2f410]
sete byte [ebp - 0x2f5e0]
add eax, 0x157224
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [ebp - 0x130], 1
sete byte [ebp - 0x2f5dc]
cmp byte [ebp - 0x2f520], 0
jne 0x43a59a
push 0
push 4
lea eax, [ebp - 0x130]
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x155238
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
push 0
mov dword [ebp - 0x2f4b0], eax
lea eax, [ebp - 0x130]
push 4
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x155d34
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
push 0
mov dword [ebp - 0x2f478], eax
lea eax, [ebp - 0x130]
push 4
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x156830
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
push 0
mov dword [ebp - 0x2f47c], eax
lea eax, [ebp - 0x130]
push 4
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x15732c
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x2f488], eax
push 0
push 4
lea eax, [ebp - 0x130]
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x162a64
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [ebp - 0x130], 1
sete byte [ebp - 0x2f452]
jne 0x43eee7
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
call fcn.00431520
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f440], eax
call fcn.004323d0
mov ecx, dword [ebp - 0x2f410]
mov edi, eax
push 0
push 4
lea eax, [ebp - 0x138]
mov dword [ebp - 0x138], 0
push eax
add ecx, 0x34d7fc
push ecx
push dword [ebp - 0x2f428]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x138]
lea ecx, [ebp - 0x18c]
add eax, 0x84
mov edx, str.EXTENDED_MOD
push str.v1.4b
mov dword [ebp - 0x2f434], eax
call fcn.004439a0
add esp, 4
mov ecx, eax
call fcn.0042d4a0
push eax
lea eax, [ebp - 0x128]
push 0x13
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
add esp, 0xc
lea ecx, [ebp - 0x18c]
call fcn.0042d200
push 0
push 0x12
push str.EXTENDED_SETTINGS
push edi
mov edi, dword [ebp - 0x2f428]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x13
lea eax, [ebp - 0x128]
push eax
push dword [ebp - 0x2f440]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x2f434]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x2f4ac]
mov dword [ebp - 0x2f5d0], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x2f4ac], eax
cmp eax, 2
jne 0x43aa2c
mov eax, dword [ebp - 0x2f644]
push 0
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x12c]
push 4
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x37c1f0
mov dword [ebp - 0x2f508], 0xffffffff
push eax
push edi
mov dword [ebp - 0x2f4d4], 0xffffffff
mov dword [ebp - 0x2f50c], 0xffffffff
mov dword [ebp - 0x2f510], 0xffffffff
mov dword [ebp - 0x2f528], 0xffffffff
mov dword [ebp - 0x2f5c0], 0xffffffff
mov dword [ebp - 0x2f588], 0xffffffff
mov dword [ebp - 0x2f5b4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x2f624]
push 0
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x12c]
push 4
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x37c1f4
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x2f63c]
push 0
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x12c]
push 4
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x37c1ec
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x2f65c]
push 0
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x12c]
push 4
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x37c208
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x2f658]
push 0
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x12c]
push 4
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x37c20c
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x2f664]
push 0
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x12c]
push 4
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x37c214
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x2f660]
push 0
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x12c]
push 4
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x37c218
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
call fcn.00432330
cmp byte [ebp - 0x2f451], 0
mov dword [ebp - 0x2f470], eax
je 0x43a9de
lea eax, [ebp - 0x1a4]
mov edx, str._____________VERSION
push eax
lea ecx, [ebp - 0x2f6c8]
call fcn.004439a0
push str._AVAILABLE_NOW_ON_GITHUB
mov edx, eax
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x1bc]
call fcn.004436f0
add esp, 8
lea ecx, [ebp - 0x2f6c8]
mov byte [ebp - 4], 0x34
call fcn.0042d200
lea ecx, [ebp - 0x1bc]
call fcn.004418c0
mov dword [ebp - 0x2f440], eax
lea ecx, [ebp - 0x2f6a0]
lea eax, [ebp - 0x1bc]
mov edx, str.
push eax
call fcn.004439a0
add esp, 4
push eax
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x35
call fcn.004419b0
lea ecx, [ebp - 0x2f6a0]
mov byte [ebp - 4], 0x34
call fcn.0042d200
cmp dword [ebp - 0x2f638], 0
je 0x43a914
cmp dword [ebp - 0x2f5d0], 2
jne 0x43a914
mov eax, dword [ebp - 0x2f440]
add eax, 0x10
cmp dword [ebp - 0x2f66c], eax
jl 0x43a921
xor ecx, ecx
call fcn.00428570
mov dword [ebp - 0x2f638], eax
xor ecx, ecx
call fcn.00428570
sub eax, dword [ebp - 0x2f638]
lea ecx, [ebp - 0x1bc]
add eax, eax
push 0x10
push eax
mov dword [ebp - 0x2f66c], eax
lea eax, [ebp - 0x2f540]
push eax
call fcn.00441860
push eax
mov edx, 0x482f7c
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x2f6a0]
call fcn.00443a00
push 0x482f78
mov edx, eax
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x18c]
call fcn.004436f0
add esp, 8
lea ecx, [ebp - 0x2f6a0]
call fcn.0042d200
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
lea ecx, [ebp - 0x18c]
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x28]
call fcn.00444f20
push 0
push 0x13
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2f470]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea ecx, [ebp - 0x18c]
call fcn.0042d200
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x2a
call fcn.0042d200
mov eax, dword [ebp - 0x2f4ac]
jmp 0x43aa68
mov edx, 0x4817fa
lea ecx, [ebp - 0x1a4]
call fcn.00443980
push 0
test al, al
jne 0x43aa10
push 0x13
push str.LATEST_VERSION
push dword [ebp - 0x2f470]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x2f4ac]
jmp 0x43aa68
push 8
push str.OFFLINE
push dword [ebp - 0x2f470]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x2f4ac]
jmp 0x43aa68
cmp eax, 0xd
jne 0x43aa5f
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 7
push eax
push dword [ebp - 0x2f434]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [ebp - 0x2f5d8], 1
jmp 0x43ac3d
cmp eax, 7
je 0x43ac30
mov byte [ebp - 0x2f5d8], 0
cmp eax, 7
je 0x43eb07
cmp eax, 6
jne 0x439e41
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
call fcn.00431080
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f440], eax
call fcn.00431140
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f4c4], eax
call fcn.00431210
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
call fcn.004312e0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f4ec], eax
call fcn.004313b0
mov dword [ebp - 0x2f4d0], eax
nop word [eax + eax]
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
call fcn.00431480
push 0
push 4
mov dword [ebp - 0x2f470], eax
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x2f434]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x2f470]
mov ecx, dword [ebp - 0x130]
mov dword [ebp - 0x2f4ac], ecx
cmp eax, 0x58
jne 0x43ab2c
cmp ecx, 6
je 0x43aae0
jmp 0x439e41
cmp ecx, 6
jne 0x439e41
push 0
push 4
lea ecx, [ebp - 0x130]
push ecx
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [ebp - 0x2f5b4]
cmp ecx, 0xffffffff
je 0x43abca
cmp ecx, dword [ebp - 0x130]
jle 0x43ab64
mov byte [ebp - 0x2f60c], 1
jmp 0x43abd3
jge 0x43abca
mov byte [ebp - 0x2f60c], 0
push 0
push 0xb
push str.NO_RECOVER
push dword [ebp - 0x2f4ec]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0xb
push str.NO_RECOVER
push dword [ebp - 0x2f4d0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 4
push eax
push dword [ebp - 0x2f470]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f5b4], 4
jmp 0x439e41
cmp byte [ebp - 0x2f60c], 0
je 0x43ab6d
push 0
push 8
push str.RECOVER
push dword [ebp - 0x2f440]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 8
push str.RECOVER
push dword [ebp - 0x2f4c4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f470]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f5b4], 0
jmp 0x439e41
cmp byte [ebp - 0x2f5d8], 0
je 0x43eb07
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
call fcn.0042ef50
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f678], eax
call fcn.0042f470
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f5bc], eax
call fcn.0042f530
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f4dc], eax
call fcn.0042f600
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f600], eax
call fcn.0042f6d0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x134], eax
call fcn.0042f7a0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f5c4], eax
call fcn.0042f870
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f470], eax
call fcn.0042fe20
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f4f8], eax
call fcn.0042fed0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f4bc], eax
call fcn.0042ffa0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f46c], eax
call fcn.00430070
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f4c0], eax
call fcn.0042f290
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f684], eax
call fcn.0042f940
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f574], eax
call fcn.0042fa10
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f484], eax
call fcn.0042fae0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f598], eax
call fcn.0042fbb0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f544], eax
call fcn.0042fc80
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f584], eax
call fcn.0042fd50
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f580], eax
call fcn.00430400
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f500], eax
call fcn.004304b0
mov edx, dword [ebp - 0x2f410]
mov dword [ebp - 0x2f5b0], eax
mov ecx, edi
call fcn.00430580
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f4f4], eax
call fcn.00430650
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f5e8], eax
call fcn.00430720
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f5ec], eax
call fcn.004307f0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f5c8], eax
call fcn.004308c0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f5a0], eax
call fcn.00430af0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f504], eax
call fcn.00430ba0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f5a4], eax
call fcn.00430c70
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f4f0], eax
call fcn.00430d40
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f5f0], eax
call fcn.00430e10
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f5f4], eax
call fcn.00430ee0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f5cc], eax
call fcn.00430fb0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f5b8], eax
call fcn.004315a0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f4fc], eax
call fcn.004317b0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f564], eax
call fcn.00431880
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f5e4], eax
call fcn.00431950
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f4d0], eax
call fcn.00431a20
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f4ec], eax
call fcn.00431b00
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f418], eax
call fcn.00431be0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f560], eax
call fcn.00431cc0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f55c], eax
call fcn.00431da0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f67c], eax
call fcn.00431f00
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f4c4], eax
call fcn.00431fd0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f448], eax
call fcn.004320a0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f440], eax
call fcn.0042f320
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f57c], eax
call fcn.0042f3c0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f578], eax
call fcn.0042f090
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f59c], eax
call fcn.0042f1e0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
call fcn.004301f0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f554], eax
call fcn.00430350
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f5fc], eax
call fcn.00430a40
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f550], eax
call fcn.00431700
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f570], eax
call fcn.00432170
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f5d4], eax
call fcn.00432220
mov dword [ebp - 0x2f458], eax
nop dword [eax]
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
call fcn.0042eff0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f464], eax
call fcn.0042f130
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f438], eax
call fcn.00430140
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f450], eax
call fcn.004302a0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f45c], eax
call fcn.00430990
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f460], eax
call fcn.00431650
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f4a8], eax
call fcn.00431e50
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f548], eax
call fcn.004322a0
push 0
push 4
mov dword [ebp - 0x2f56c], eax
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x2f434]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [ebp - 0x2f464], 0x58
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x2f4ac], eax
je 0x43b144
cmp dword [ebp - 0x2f438], 0x58
je 0x43b144
cmp dword [ebp - 0x2f450], 0x58
je 0x43b144
cmp dword [ebp - 0x2f45c], 0x58
je 0x43b144
cmp dword [ebp - 0x2f460], 0x58
je 0x43b144
cmp dword [ebp - 0x2f4a8], 0x58
je 0x43b144
cmp dword [ebp - 0x2f548], 0x58
je 0x43b144
cmp dword [ebp - 0x2f56c], 0x58
jne 0x43b152
cmp eax, 7
je 0x43b040
jmp 0x439e41
cmp eax, 7
jne 0x439e41
push 0
push 4
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x2f458]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x2f420]
push 0
mov dword [ebp - 0x2f424], eax
mov eax, dword [ebp - 0x130]
push 4
mov dword [ebp - 0x2f420], eax
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x2f464]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
push 0
push 4
mov dword [ebp - 0x2f444], eax
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x2f438]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
push 0
push 4
mov dword [ebp - 0x2f42c], eax
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x2f450]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
push 0
push 4
mov dword [ebp - 0x2f43c], eax
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x2f45c]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
push 0
push 4
mov dword [ebp - 0x2f44c], eax
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x2f460]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
push 0
push 4
mov dword [ebp - 0x138], eax
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x2f4a8]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
push 0
push 4
mov dword [ebp - 0x2f434], eax
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x2f548]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
push 0
push 4
mov dword [ebp - 0x2f480], eax
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x2f56c]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [ebp - 0x130], 4
mov ecx, 0x2710
mov eax, dword [ebp - 0x2f474]
push 0
push 0x11
push str.training_preset.
push dword [ebp - 0x2f684]
cmovne eax, ecx
push edi
mov dword [ebp - 0x2f474], eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x12
push str.EXTENDED_SETTINGS
push dword [ebp - 0x2f678]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 1
push 0x484464
push dword [ebp - 0x2f67c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 1
push 0x484464
push dword [ebp - 0x2f5d4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x2f41c]
cmp eax, 1
jne 0x43b399
push 0
push 0xe
push str.REVERSAL_TYPE
push dword [ebp - 0x2f57c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x10
push str.REVERSAL_SLOT_1
push dword [ebp - 0x2f578]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x10
push str.REVERSAL_SLOT_2
push dword [ebp - 0x2f4f8]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x10
push str.REVERSAL_SLOT_3
push dword [ebp - 0x2f500]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x10
push str.REVERSAL_SLOT_4
push dword [ebp - 0x2f504]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0xf
push str.REVERSAL_DELAY
jmp 0x43b5bd
cmp eax, 2
jne 0x43b41a
push 0
push 1
push 0x484464
push dword [ebp - 0x2f57c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 9
push str.EX_GUARD
push dword [ebp - 0x2f578]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0xa
push str.GUARD_BAR
push dword [ebp - 0x2f4f8]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x12
push str.METER__A___SLOWER
push dword [ebp - 0x2f500]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x13
push str.HEALTH__A___SLOWER
push dword [ebp - 0x2f504]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x11
push str.HITS_UNTIL_BURST
jmp 0x43b5bd
cmp eax, 3
jne 0x43b4c3
push 0
push 0xc
push str._A___SLOWER
push dword [ebp - 0x2f57c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0xb
push str.P1_X_LOC
push dword [ebp - 0x2f578]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [ebp - 0x2f5e0], 0
push 0
je 0x43b463
push 0xd
push str.ASSIST_X_LOC
jmp 0x43b46a
push 1
push 0x484464
push dword [ebp - 0x2f4f8]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0xb
push str.P2_X_LOC
push dword [ebp - 0x2f500]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [ebp - 0x2f5dc], 0
push 0
je 0x43b4a1
push 0xd
push str.ASSIST_X_LOC
jmp 0x43b4a8
push 1
push 0x484464
push dword [ebp - 0x2f504]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 7
push str.INVERT
jmp 0x43b5bd
cmp eax, 4
jne 0x43b53d
push 0
push 0xb
push str.FRAME_DATA
push dword [ebp - 0x2f57c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0xc
push str.SAVE_STATES
push dword [ebp - 0x2f578]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x4a3c64], 0
push 0
je 0x43b508
push 0x12
push str.CLEAR_SAVE_STATES
jmp 0x43b50f
push 0xf
push str.NO_SAVE_STATES
push dword [ebp - 0x2f4f8]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x10
push str.IGNORE_EX_FLASH
push dword [ebp - 0x2f500]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0xf
push str.DISPLAY_INPUTS
jmp 0x43b5a7
cmp eax, 5
jne 0x43b5ca
push 0
push 0xd
push str.SION_BULLETS
push dword [ebp - 0x2f57c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x13
push str.ROA_VISIBLE_CHARGE
push dword [ebp - 0x2f578]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x13
push str.ROA_HIDDEN_CHARGE
push dword [ebp - 0x2f4f8]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 1
push 0x484464
push dword [ebp - 0x2f500]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 1
push 0x484464
push dword [ebp - 0x2f504]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 1
push 0x484464
push dword [ebp - 0x2f4fc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov edx, dword [ebp - 0x2f424]
mov ecx, dword [ebp - 0x2f420]
cmp edx, 0xa
jne 0x43b609
cmp ecx, 0xc
jne 0x43b648
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0xe
push eax
push dword [ebp - 0x2f458]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, 0xe
jmp 0x43b63a
cmp edx, 0xe
jne 0x43b648
cmp ecx, 0xc
jne 0x43b648
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0xa
push eax
push dword [ebp - 0x2f458]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, 0xa
mov edx, ecx
mov dword [ebp - 0x2f420], ecx
mov dword [ebp - 0x2f424], edx
cmp dword [ebp - 0x2f41c], 1
mov eax, edx
je 0x43c069
cmp dword [ebp - 0x2f41c], 2
jne 0x43b8ea
cmp edx, 0xe
jne 0x43b6a4
test ecx, ecx
jne 0x43b6e2
push ecx
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 2
push eax
push dword [ebp - 0x2f458]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f420], 2
mov dword [ebp - 0x2f424], 2
jmp 0x43b6e2
cmp edx, 2
jne 0x43b6e2
test ecx, ecx
jne 0x43b6e2
push ecx
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0xe
push eax
push dword [ebp - 0x2f458]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f420], 0xe
mov dword [ebp - 0x2f424], 0xe
mov ecx, dword [ebp - 0x2f4d4]
cmp ecx, 0xffffffff
je 0x43b724
cmp ecx, dword [ebp - 0x2f42c]
jle 0x43b70b
mov eax, dword [ebp - 0x2f4d8]
xor edx, edx
add eax, 0xffffffff
cmovns edx, eax
mov dword [ebp - 0x2f4d8], edx
jmp 0x43b724
jge 0x43b724
mov eax, dword [ebp - 0x2f4d8]
mov ecx, 2
inc eax
cmp eax, ecx
cmovl ecx, eax
mov dword [ebp - 0x2f4d8], ecx
mov ecx, dword [ebp - 0x2f50c]
cmp ecx, 0xffffffff
je 0x43b76f
mov eax, dword [ebp - 0x2f43c]
cmp ecx, eax
jle 0x43b749
mov al, 1
mov dword [ebp - 0x2f5ac], eax
mov byte [ebp - 0x2f650], al
jmp 0x43b76f
mov edx, dword [ebp - 0x2f5ac]
movzx edx, dl
mov dword [ebp - 0x2f5d4], 0
cmovl edx, dword [ebp - 0x2f5d4]
mov dword [ebp - 0x2f5ac], edx
mov byte [ebp - 0x2f650], dl
mov ecx, dword [ebp - 0x2f510]
cmp ecx, 0xffffffff
je 0x43b7f1
cmp ecx, dword [ebp - 0x2f44c]
jle 0x43b7a8
cmp byte [ebp - 0x2f411], 0
mov eax, 0xa
mov ecx, 0x3e8
cmovne ecx, eax
mov eax, dword [ebp - 0x2f524]
sub eax, ecx
mov ecx, 0
cmovns ecx, eax
jmp 0x43b7ce
jge 0x43b7f1
cmp byte [ebp - 0x2f411], 0
mov ecx, 0xa
mov eax, 0x3e8
cmovne eax, ecx
mov ecx, 0x7530
add eax, dword [ebp - 0x2f524]
cmp eax, ecx
cmovl ecx, eax
push dword [ebp - 0x2f4e8]
mov edx, dword [ebp - 0x2f410]
push dword [ebp - 0x2f4c8]
mov dword [ebp - 0x2f524], ecx
push ecx
mov ecx, edi
call fcn.00436400
add esp, 0xc
mov ecx, dword [ebp - 0x2f528]
cmp ecx, 0xffffffff
je 0x43b867
cmp ecx, dword [ebp - 0x138]
jle 0x43b82a
cmp byte [ebp - 0x2f411], 0
mov eax, 1
mov ecx, 0x64
cmovne ecx, eax
mov eax, dword [ebp - 0x2f4e0]
sub eax, ecx
mov ecx, 0
cmovns ecx, eax
jmp 0x43b850
jge 0x43b867
cmp byte [ebp - 0x2f411], 0
mov ecx, 1
mov eax, 0x64
cmovne eax, ecx
mov ecx, 0x2c88
add eax, dword [ebp - 0x2f4e0]
cmp eax, ecx
cmovl ecx, eax
mov edx, dword [ebp - 0x2f410]
mov dword [ebp - 0x2f4e0], ecx
push ecx
mov ecx, edi
call fcn.004363a0
add esp, 4
mov ecx, dword [ebp - 0x2f5c0]
cmp ecx, 0xffffffff
je 0x43c255
cmp ecx, dword [ebp - 0x2f434]
jle 0x43b8af
mov eax, dword [ebp - 0x2f474]
xor ecx, ecx
add eax, 0xffffffff
cmovns ecx, eax
mov eax, dword [ebp - 0x2f41c]
mov dword [ebp - 0x2f474], ecx
test ecx, ecx
jne 0x43c25b
mov dword [ebp - 0x2f474], 0x2710
jmp 0x43c25b
jge 0x43c255
mov eax, dword [ebp - 0x2f474]
cmp eax, 0x2710
jne 0x43b8d1
mov dword [ebp - 0x2f474], 1
jmp 0x43c255
inc eax
mov ecx, eax
cmp eax, 0x63
mov eax, 0x63
cmovg ecx, eax
mov dword [ebp - 0x2f474], ecx
jmp 0x43c255
cmp dword [ebp - 0x2f41c], 3
jne 0x43bd24
cmp byte [ebp - 0x2f520], 0
je 0x43b9a1
test edx, edx
jne 0x43b947
cmp ecx, 2
jne 0x43b9a1
push edx
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0xa
push eax
push dword [ebp - 0x2f458]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, 0xa
mov edx, eax
mov dword [ebp - 0x2f420], eax
mov dword [ebp - 0x2f424], edx
jmp 0x43b9a7
mov dword [ebp - 0x2f420], ecx
mov edx, eax
mov dword [ebp - 0x2f424], edx
cmp eax, 0xa
jne 0x43b9a1
mov dword [ebp - 0x2f424], edx
mov eax, ecx
mov dword [ebp - 0x2f420], eax
cmp ecx, 8
jne 0x43b9a7
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f458]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xor eax, eax
xor edx, edx
mov dword [ebp - 0x2f420], eax
mov dword [ebp - 0x2f424], edx
jmp 0x43b9a7
mov eax, dword [ebp - 0x2f420]
cmp byte [ebp - 0x2f5e0], 0
jne 0x43ba36
cmp edx, 2
jne 0x43b9f5
cmp eax, 3
jne 0x43ba36
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 5
push eax
push dword [ebp - 0x2f458]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, 5
mov ecx, eax
mov dword [ebp - 0x2f420], eax
mov dword [ebp - 0x2f424], ecx
jmp 0x43ba42
cmp edx, 5
jne 0x43ba36
cmp eax, 3
jne 0x43ba36
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 2
push eax
push dword [ebp - 0x2f458]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, 2
mov ecx, eax
mov dword [ebp - 0x2f420], eax
mov dword [ebp - 0x2f424], ecx
jmp 0x43ba42
mov ecx, dword [ebp - 0x2f424]
mov eax, dword [ebp - 0x2f420]
cmp byte [ebp - 0x2f5dc], 0
jne 0x43bad1
cmp ecx, 5
jne 0x43ba91
cmp eax, 6
jne 0x43bad1
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 8
push eax
push dword [ebp - 0x2f458]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f420], 8
mov dword [ebp - 0x2f424], 8
jmp 0x43bad1
cmp ecx, 8
jne 0x43bad1
cmp eax, 6
jne 0x43bad1
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 5
push eax
push dword [ebp - 0x2f458]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f420], 5
mov dword [ebp - 0x2f424], 5
mov ecx, dword [ebp - 0x2f508]
cmp ecx, 0xffffffff
je 0x43bb13
mov eax, dword [ebp - 0x2f444]
cmp ecx, eax
jle 0x43baf6
xor al, al
mov dword [ebp - 0x2f520], eax
mov byte [ebp - 0x2f64c], al
jmp 0x43bb13
mov edx, dword [ebp - 0x2f520]
mov eax, 1
movzx edx, dl
cmovl edx, eax
mov dword [ebp - 0x2f520], edx
mov byte [ebp - 0x2f64c], dl
mov ecx, dword [ebp - 0x2f4d4]
cmp ecx, 0xffffffff
je 0x43bb94
cmp ecx, dword [ebp - 0x2f42c]
jle 0x43bb52
cmp byte [ebp - 0x2f411], 0
mov ecx, 1
mov eax, 0x3e8
cmovne eax, ecx
mov ecx, dword [ebp - 0x2f4b0]
sub ecx, eax
mov eax, 0xffff0000
cmp ecx, 0xffff0000
cmovl ecx, eax
jmp 0x43bb7d
jge 0x43bb94
cmp byte [ebp - 0x2f411], 0
mov ecx, 1
mov eax, 0x3e8
cmovne eax, ecx
add eax, dword [ebp - 0x2f4b0]
mov ecx, eax
cmp eax, 0x10000
mov eax, 0x10000
cmovg ecx, eax
mov edx, dword [ebp - 0x2f410]
mov dword [ebp - 0x2f4b0], ecx
push ecx
mov ecx, edi
call fcn.00436630
add esp, 4
mov ecx, dword [ebp - 0x2f50c]
cmp ecx, 0xffffffff
je 0x43bc15
cmp ecx, dword [ebp - 0x2f43c]
jle 0x43bbd3
cmp byte [ebp - 0x2f411], 0
mov ecx, 1
mov eax, 0x3e8
cmovne eax, ecx
mov ecx, dword [ebp - 0x2f47c]
sub ecx, eax
mov eax, 0xffff0000
cmp ecx, 0xffff0000
cmovl ecx, eax
jmp 0x43bbfe
jge 0x43bc15
cmp byte [ebp - 0x2f411], 0
mov ecx, 1
mov eax, 0x3e8
cmovne eax, ecx
add eax, dword [ebp - 0x2f47c]
mov ecx, eax
cmp eax, 0x10000
mov eax, 0x10000
cmovg ecx, eax
mov edx, dword [ebp - 0x2f410]
mov dword [ebp - 0x2f47c], ecx
push ecx
mov ecx, edi
call fcn.00436670
add esp, 4
mov ecx, dword [ebp - 0x2f510]
cmp ecx, 0xffffffff
je 0x43bc96
cmp ecx, dword [ebp - 0x2f44c]
jle 0x43bc54
cmp byte [ebp - 0x2f411], 0
mov ecx, 1
mov eax, 0x3e8
cmovne eax, ecx
mov ecx, dword [ebp - 0x2f478]
sub ecx, eax
mov eax, 0xffff0000
cmp ecx, 0xffff0000
cmovl ecx, eax
jmp 0x43bc7f
jge 0x43bc96
cmp byte [ebp - 0x2f411], 0
mov ecx, 1
mov eax, 0x3e8
cmovne eax, ecx
add eax, dword [ebp - 0x2f478]
mov ecx, eax
cmp eax, 0x10000
mov eax, 0x10000
cmovg ecx, eax
mov edx, dword [ebp - 0x2f410]
mov dword [ebp - 0x2f478], ecx
push ecx
mov ecx, edi
call fcn.00436650
add esp, 4
mov ecx, dword [ebp - 0x2f528]
cmp ecx, 0xffffffff
je 0x43c255
cmp ecx, dword [ebp - 0x138]
jle 0x43bcf3
cmp byte [ebp - 0x2f411], 0
mov ecx, 1
mov eax, 0x3e8
cmovne eax, ecx
mov ecx, dword [ebp - 0x2f488]
sub ecx, eax
mov eax, 0xffff0000
cmp ecx, 0xffff0000
cmovl ecx, eax
mov edx, dword [ebp - 0x2f410]
mov dword [ebp - 0x2f488], ecx
push ecx
mov ecx, edi
call fcn.00436690
add esp, 4
jmp 0x43c255
jge 0x43c255
cmp byte [ebp - 0x2f411], 0
mov ecx, 1
mov eax, 0x3e8
cmovne eax, ecx
add eax, dword [ebp - 0x2f488]
mov ecx, eax
cmp eax, 0x10000
mov eax, 0x10000
cmovg ecx, eax
jmp 0x43bcd7
mov eax, dword [ebp - 0x2f41c]
cmp eax, 4
jne 0x43bee2
cmp edx, 0xa
jne 0x43bd74
cmp ecx, 8
jne 0x43bdb4
push 0
push eax
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 6
push eax
push dword [ebp - 0x2f458]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f420], 6
mov dword [ebp - 0x2f424], 6
jmp 0x43bdb4
cmp edx, 6
jne 0x43bdb4
cmp ecx, 8
jne 0x43bdb4
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0xa
push eax
push dword [ebp - 0x2f458]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f420], 0xa
mov dword [ebp - 0x2f424], 0xa
mov ecx, dword [ebp - 0x2f508]
cmp ecx, 0xffffffff
je 0x43be17
cmp ecx, dword [ebp - 0x2f444]
jle 0x43bdf6
push 0x482f80
mov dword [ebp - 0x2f648], 0
mov byte [0x4a3c60], 0
mov byte [0x4a3c61], 0
mov byte [0x4a3c65], 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
jmp 0x43be17
jge 0x43be17
mov dword [ebp - 0x2f648], 1
mov byte [0x4a3c60], 1
mov byte [0x4a3c61], 1
mov byte [0x4a3c65], 1
mov ecx, dword [ebp - 0x2f4d4]
cmp ecx, 0xffffffff
je 0x43be58
cmp ecx, dword [ebp - 0x2f42c]
jle 0x43be41
mov byte [ebp - 0x2f42e], 0
mov byte [0x4a3c67], 0
mov byte [0x4a3c66], 0
jmp 0x43be58
jge 0x43be58
mov byte [ebp - 0x2f42e], 1
mov byte [0x4a3c67], 1
mov byte [0x4a3c66], 1
mov ecx, dword [ebp - 0x2f510]
cmp ecx, 0xffffffff
je 0x43be7d
cmp ecx, dword [ebp - 0x2f44c]
jle 0x43be74
mov byte [0x48f0a8], 1
jmp 0x43be7d
jge 0x43be7d
mov byte [0x48f0a8], 0
mov ecx, dword [ebp - 0x2f528]
cmp ecx, 0xffffffff
je 0x43c255
cmp ecx, dword [ebp - 0x138]
jle 0x43bebc
push 0x482f80
mov byte [ebp - 0x2f42d], 0
mov byte [0x4a3c62], 0
mov byte [0x4a3c63], 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
jmp 0x43c255
mov eax, dword [ebp - 0x2f41c]
jge 0x43c25b
mov byte [ebp - 0x2f42d], 1
mov byte [0x4a3c62], 1
mov byte [0x4a3c63], 1
jmp 0x43c25b
cmp eax, 5
jne 0x43c25b
cmp edx, 3
jne 0x43bf2c
cmp ecx, eax
jne 0x43bf6c
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0xa
push eax
push dword [ebp - 0x2f458]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f420], 0xa
mov dword [ebp - 0x2f424], 0xa
jmp 0x43bf6c
cmp edx, 0xa
jne 0x43bf6c
cmp ecx, 8
jne 0x43bf6c
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 3
push eax
push dword [ebp - 0x2f458]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f420], 3
mov dword [ebp - 0x2f424], 3
mov ecx, dword [ebp - 0x2f508]
cmp ecx, 0xffffffff
je 0x43bfbc
cmp ecx, dword [ebp - 0x2f444]
jle 0x43bf92
mov eax, dword [ebp - 0x2f4cc]
mov ecx, 0xf
inc eax
cmp eax, ecx
cmovl ecx, eax
jmp 0x43bfa5
jge 0x43bfbc
mov eax, dword [ebp - 0x2f4cc]
mov ecx, 1
dec eax
cmp eax, ecx
cmovge ecx, eax
mov edx, dword [ebp - 0x2f410]
mov dword [ebp - 0x2f4cc], ecx
push ecx
mov ecx, edi
call fcn.00436520
add esp, 4
mov ecx, dword [ebp - 0x2f4d4]
cmp ecx, 0xffffffff
je 0x43c00c
cmp ecx, dword [ebp - 0x2f42c]
jle 0x43bfe2
mov eax, dword [ebp - 0x2f48c]
dec eax
mov ecx, eax
cmp eax, 0xfffffffe
mov eax, 0xfffffffe
jmp 0x43bff2
jge 0x43c00c
mov eax, dword [ebp - 0x2f48c]
mov ecx, 9
inc eax
cmp eax, ecx
mov edx, dword [ebp - 0x2f410]
cmovl ecx, eax
mov dword [ebp - 0x2f48c], ecx
push ecx
mov ecx, edi
call fcn.00436590
add esp, 4
mov ecx, dword [ebp - 0x2f50c]
cmp ecx, 0xffffffff
je 0x43c255
cmp ecx, dword [ebp - 0x2f43c]
jle 0x43c053
mov eax, dword [ebp - 0x2f4b4]
dec eax
mov ecx, eax
cmp eax, 0xfffffffe
mov eax, 0xfffffffe
mov edx, dword [ebp - 0x2f410]
cmovl ecx, eax
mov dword [ebp - 0x2f4b4], ecx
push ecx
mov ecx, edi
call fcn.004365e0
add esp, 4
jmp 0x43c255
jge 0x43c255
mov eax, dword [ebp - 0x2f4b4]
mov ecx, 9
inc eax
cmp eax, ecx
jmp 0x43c034
mov ecx, dword [ebp - 0x2f508]
cmp ecx, 0xffffffff
je 0x43c0ab
cmp ecx, dword [ebp - 0x2f444]
jle 0x43c092
mov eax, dword [ebp - 0x2f4b8]
xor edx, edx
add eax, 0xffffffff
cmovns edx, eax
mov dword [ebp - 0x2f4b8], edx
jmp 0x43c0ab
jge 0x43c0ab
mov eax, dword [ebp - 0x2f4b8]
mov ecx, 2
inc eax
cmp eax, ecx
cmovl ecx, eax
mov dword [ebp - 0x2f4b8], ecx
mov ecx, dword [ebp - 0x2f4d4]
cmp ecx, 0xffffffff
je 0x43c105
cmp ecx, dword [ebp - 0x2f42c]
jle 0x43c0d4
mov eax, dword [ebp - 0x2f494]
xor edx, edx
add eax, 0xffffffff
cmovns edx, eax
mov dword [ebp - 0x2f494], edx
jmp 0x43c105
jge 0x43c105
mov edi, dword [ebp - 0x2f494]
lea ecx, [ebp - 0x148]
inc edi
mov dword [ebp - 0x2f494], edi
call fcn.00440ab0
dec eax
cmp edi, eax
jb 0x43c105
lea ecx, [ebp - 0x148]
call fcn.00440ab0
dec eax
mov dword [ebp - 0x2f494], eax
mov ecx, dword [ebp - 0x2f50c]
cmp ecx, 0xffffffff
je 0x43c15f
cmp ecx, dword [ebp - 0x2f43c]
jle 0x43c12e
mov eax, dword [ebp - 0x2f498]
xor edx, edx
add eax, 0xffffffff
cmovns edx, eax
mov dword [ebp - 0x2f498], edx
jmp 0x43c15f
jge 0x43c15f
mov edi, dword [ebp - 0x2f498]
lea ecx, [ebp - 0x148]
inc edi
mov dword [ebp - 0x2f498], edi
call fcn.00440ab0
dec eax
cmp edi, eax
jb 0x43c15f
lea ecx, [ebp - 0x148]
call fcn.00440ab0
dec eax
mov dword [ebp - 0x2f498], eax
mov ecx, dword [ebp - 0x2f510]
cmp ecx, 0xffffffff
je 0x43c1b9
cmp ecx, dword [ebp - 0x2f44c]
jle 0x43c188
mov eax, dword [ebp - 0x2f49c]
xor edx, edx
add eax, 0xffffffff
cmovns edx, eax
mov dword [ebp - 0x2f49c], edx
jmp 0x43c1b9
jge 0x43c1b9
mov edi, dword [ebp - 0x2f49c]
lea ecx, [ebp - 0x148]
inc edi
mov dword [ebp - 0x2f49c], edi
call fcn.00440ab0
dec eax
cmp edi, eax
jb 0x43c1b9
lea ecx, [ebp - 0x148]
call fcn.00440ab0
dec eax
mov dword [ebp - 0x2f49c], eax
mov ecx, dword [ebp - 0x2f528]
cmp ecx, 0xffffffff
je 0x43c213
cmp ecx, dword [ebp - 0x138]
jle 0x43c1e2
mov eax, dword [ebp - 0x2f4a0]
xor edx, edx
add eax, 0xffffffff
cmovns edx, eax
mov dword [ebp - 0x2f4a0], edx
jmp 0x43c213
jge 0x43c213
mov edi, dword [ebp - 0x2f4a0]
lea ecx, [ebp - 0x148]
inc edi
mov dword [ebp - 0x2f4a0], edi
call fcn.00440ab0
dec eax
cmp edi, eax
jb 0x43c213
lea ecx, [ebp - 0x148]
call fcn.00440ab0
dec eax
mov dword [ebp - 0x2f4a0], eax
mov ecx, dword [ebp - 0x2f5c0]
mov edi, dword [ebp - 0x2f428]
cmp ecx, 0xffffffff
je 0x43c255
cmp ecx, dword [ebp - 0x2f434]
jle 0x43c23c
mov eax, dword [ebp - 0x2f518]
xor ecx, ecx
add eax, 0xffffffff
cmovns ecx, eax
jmp 0x43c24f
jge 0x43c255
mov eax, dword [ebp - 0x2f518]
mov ecx, 0x63
inc eax
cmp eax, ecx
cmovl ecx, eax
mov dword [ebp - 0x2f518], ecx
mov eax, dword [ebp - 0x2f41c]
cmp byte [ebp - 0x2f411], 0
je 0x43c317
cmp byte [ebp - 0x13b], 0
jne 0x43c317
cmp eax, 3
jne 0x43c302
mov eax, dword [ebp - 0x2f478]
mov ecx, dword [ebp - 0x2f4b0]
neg eax
mov edx, dword [ebp - 0x2f410]
neg ecx
mov dword [ebp - 0x2f478], eax
mov eax, dword [ebp - 0x2f47c]
neg eax
mov dword [ebp - 0x2f4b0], ecx
mov dword [ebp - 0x2f47c], eax
mov eax, dword [ebp - 0x2f488]
neg eax
push ecx
mov ecx, edi
mov dword [ebp - 0x2f488], eax
call fcn.00436630
push dword [ebp - 0x2f478]
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
call fcn.00436650
push dword [ebp - 0x2f47c]
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
call fcn.00436670
push dword [ebp - 0x2f488]
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
call fcn.00436690
add esp, 0x10
jmp 0x43c317
cmp eax, 4
jne 0x43c317
cmp dword [ebp - 0x2f420], 3
jne 0x43c317
mov byte [0x4a3c64], 0
mov ecx, dword [ebp - 0x2f588]
cmp ecx, 0xffffffff
je 0x43c368
cmp ecx, dword [ebp - 0x2f480]
jle 0x43c343
mov eax, dword [ebp - 0x2f41c]
mov ecx, 1
dec eax
cmp eax, ecx
cmovge ecx, eax
mov dword [ebp - 0x2f41c], ecx
jmp 0x43c36e
jge 0x43c368
mov eax, dword [ebp - 0x2f41c]
inc eax
mov ecx, eax
mov dword [ebp - 0x2f41c], ecx
cmp eax, 5
jl 0x43c36e
mov dword [ebp - 0x2f41c], 5
jmp 0x43e485
mov ecx, dword [ebp - 0x2f41c]
cmp ecx, 1
jne 0x43cd90
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0xa0
push eax
push dword [ebp - 0x2f59c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
push eax
push dword [ebp - 0x2f570]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
push eax
push dword [ebp - 0x2f554]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
push eax
push dword [ebp - 0x2f550]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x2f4b8]
test eax, eax
jne 0x43c460
mov eax, dword [0x482f84]
mov dword [ebp - 0x70], eax
mov ax, word [0x482f88]
mov word [ebp - 0x6c], ax
mov al, byte [0x482f8a]
push 0
push 7
mov byte [ebp - 0x6a], al
lea eax, [ebp - 0x70]
push eax
push dword [ebp - 0x2f5bc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 7
lea eax, [ebp - 0x70]
push eax
push dword [ebp - 0x2f4dc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f464]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f444], 0
jmp 0x43c568
cmp eax, 2
jne 0x43c4da
mov eax, dword [str.REPEAT]
mov dword [ebp - 0x68], eax
mov ax, word [0x482f90]
mov word [ebp - 0x64], ax
mov al, byte [0x482f92]
push 0
push 7
mov byte [ebp - 0x62], al
lea eax, [ebp - 0x68]
push eax
push dword [ebp - 0x2f5c4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 7
lea eax, [ebp - 0x68]
push eax
push dword [ebp - 0x2f470]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 8
push eax
push dword [ebp - 0x2f464]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f444], 8
jmp 0x43c568
cmp eax, 1
jne 0x43c568
mov eax, dword [str.RANDOM]
mov dword [ebp - 0x30], eax
mov ax, word [0x482f98]
mov word [ebp - 0x2c], ax
mov al, byte [0x482f9a]
push 0
push 7
mov byte [ebp - 0x2a], al
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x2f4dc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 7
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x2f600]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 7
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x134]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 2
push eax
push dword [ebp - 0x2f464]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f444], 2
cmp dword [ebp - 0x2f494], 0
jne 0x43c5dc
push 0
push 4
lea eax, [ebp - 0x134]
mov dword [ebp - 0x134], 0x46464f
push eax
push dword [ebp - 0x2f574]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x134]
push eax
push dword [ebp - 0x2f484]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f438]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f42c], 0
jmp 0x43c6eb
lea ecx, [ebp - 0x148]
call fcn.00440ab0
mov ecx, dword [ebp - 0x2f494]
dec eax
push ecx
cmp ecx, eax
lea ecx, [ebp - 0x148]
jne 0x43c66a
call fcn.00440a90
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x28]
call fcn.00444f20
push 0
push 0x13
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2f580]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x13
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2f584]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 5
push eax
push dword [ebp - 0x2f438]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f42c], 5
jmp 0x43c6eb
call fcn.00440a90
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x28]
call fcn.00444f20
push 0
push 0x13
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2f484]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x13
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2f598]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x13
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2f544]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 2
push eax
push dword [ebp - 0x2f438]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f42c], 2
cmp dword [ebp - 0x2f498], 0
jne 0x43c75f
push 0
push 4
lea eax, [ebp - 0x134]
mov dword [ebp - 0x134], 0x46464f
push eax
push dword [ebp - 0x2f4bc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x134]
push eax
push dword [ebp - 0x2f46c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f450]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f43c], 0
jmp 0x43c86e
lea ecx, [ebp - 0x148]
call fcn.00440ab0
mov ecx, dword [ebp - 0x2f498]
dec eax
push ecx
cmp ecx, eax
lea ecx, [ebp - 0x148]
jne 0x43c7ed
call fcn.00440a90
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x28]
call fcn.00444f20
push 0
push 0x13
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2f46c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x13
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2f4c0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 2
push eax
push dword [ebp - 0x2f450]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f43c], 2
jmp 0x43c86e
call fcn.00440a90
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x28]
call fcn.00444f20
push 0
push 0x13
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2f4bc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x13
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2f46c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x13
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2f4c0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 1
push eax
push dword [ebp - 0x2f450]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f43c], 1
cmp dword [ebp - 0x2f49c], 0
jne 0x43c8e2
push 0
push 4
lea eax, [ebp - 0x134]
mov dword [ebp - 0x134], 0x46464f
push eax
push dword [ebp - 0x2f5b0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x134]
push eax
push dword [ebp - 0x2f4f4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f45c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f44c], 0
jmp 0x43c9f1
lea ecx, [ebp - 0x148]
call fcn.00440ab0
mov ecx, dword [ebp - 0x2f49c]
dec eax
push ecx
cmp ecx, eax
lea ecx, [ebp - 0x148]
jne 0x43c970
call fcn.00440a90
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x28]
call fcn.00444f20
push 0
push 0x13
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2f5c8]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x13
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2f5a0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 5
push eax
push dword [ebp - 0x2f45c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f44c], 5
jmp 0x43c9f1
call fcn.00440a90
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x28]
call fcn.00444f20
push 0
push 0x13
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2f4f4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x13
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2f5e8]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x13
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2f5ec]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 2
push eax
push dword [ebp - 0x2f45c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f44c], 2
cmp dword [ebp - 0x2f4a0], 0
jne 0x43ca65
push 0
push 4
lea eax, [ebp - 0x134]
mov dword [ebp - 0x134], 0x46464f
push eax
push dword [ebp - 0x2f5a4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x134]
push eax
push dword [ebp - 0x2f4f0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f460]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x138], 0
jmp 0x43cb74
lea ecx, [ebp - 0x148]
call fcn.00440ab0
mov ecx, dword [ebp - 0x2f4a0]
dec eax
push ecx
cmp ecx, eax
lea ecx, [ebp - 0x148]
jne 0x43caf3
call fcn.00440a90
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x28]
call fcn.00444f20
push 0
push 0x13
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2f5cc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x13
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2f5b8]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 5
push eax
push dword [ebp - 0x2f460]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x138], 5
jmp 0x43cb74
call fcn.00440a90
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x28]
call fcn.00444f20
push 0
push 0x13
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2f4f0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x13
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2f5f0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x13
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2f5f4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 2
push eax
push dword [ebp - 0x2f460]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x138], 2
mov eax, dword [ebp - 0x2f518]
test eax, eax
jne 0x43cbeb
push 0
mov eax, 0x30
push 2
mov word [ebp - 0x13c], ax
lea eax, [ebp - 0x13c]
push eax
push dword [ebp - 0x2f564]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 2
lea eax, [ebp - 0x13c]
push eax
push dword [ebp - 0x2f5e4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f4a8]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f434], 0
jmp 0x43cd1b
lea ecx, [ebp - 0x2f540]
cmp eax, 0x63
jne 0x43cc81
mov edx, eax
call fcn.00428ce0
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x164]
call fcn.00444f30
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
push 0
push 3
lea eax, [ebp - 0x164]
push eax
push dword [ebp - 0x2f560]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 3
lea eax, [ebp - 0x164]
push eax
push dword [ebp - 0x2f55c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 6
push eax
push dword [ebp - 0x2f4a8]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f434], 6
jmp 0x43cd1b
mov edx, eax
call fcn.00428ce0
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x160]
call fcn.00444f30
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
push 0
push 3
lea eax, [ebp - 0x160]
push eax
push dword [ebp - 0x2f5e4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 3
lea eax, [ebp - 0x160]
push eax
push dword [ebp - 0x2f4d0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 3
lea eax, [ebp - 0x160]
push eax
push dword [ebp - 0x2f4ec]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 2
push eax
push dword [ebp - 0x2f4a8]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f434], 2
mov eax, dword [str.PAGE_1]
mov dword [ebp - 0x48], eax
mov ax, word [0x482ff0]
mov word [ebp - 0x44], ax
mov al, byte [0x482ff2]
push 0
push 7
mov byte [ebp - 0x42], al
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 0x2f4c4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 7
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 0x2f448]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f548]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f588], 0
jmp 0x43d62f
cmp ecx, 2
jne 0x43d7f8
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0xa0
push eax
push dword [ebp - 0x2f570]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
push eax
push dword [ebp - 0x2f554]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
push eax
push dword [ebp - 0x2f550]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0x10000000
push eax
push dword [ebp - 0x2f59c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x2f4d8]
push 0
test eax, eax
jne 0x43ce82
push 4
lea eax, [ebp - 0x134]
mov dword [ebp - 0x134], 0x46464f
push eax
push dword [ebp - 0x2f574]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x134]
push eax
push dword [ebp - 0x2f484]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f438]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f42c], 0
jmp 0x43cf84
cmp eax, 2
jne 0x43cefa
mov eax, dword [str.RANDOM]
mov dword [ebp - 0x50], eax
mov ax, word [0x482f98]
mov word [ebp - 0x4c], ax
mov al, byte [0x482f9a]
push 7
mov byte [ebp - 0x4a], al
lea eax, [ebp - 0x50]
push eax
push dword [ebp - 0x2f580]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 7
lea eax, [ebp - 0x50]
push eax
push dword [ebp - 0x2f584]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 5
push eax
push dword [ebp - 0x2f438]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f42c], 5
jmp 0x43cf84
mov ax, word [0x482fa0]
mov word [ebp - 0x14c], ax
mov al, byte [0x482fa2]
push 3
mov byte [ebp - 0x14a], al
lea eax, [ebp - 0x14c]
push eax
push dword [ebp - 0x2f484]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 3
lea eax, [ebp - 0x14c]
push eax
push dword [ebp - 0x2f598]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 3
lea eax, [ebp - 0x14c]
push eax
push dword [ebp - 0x2f544]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 2
push eax
push dword [ebp - 0x2f438]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f42c], 2
cmp byte [ebp - 0x2f5ac], 0
push 0
je 0x43cfe7
push 0xa
push str.INFINITE
push dword [ebp - 0x2f4bc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0xa
push str.INFINITE
push dword [ebp - 0x2f46c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f450]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f43c], 0
jmp 0x43d03d
push 7
push str.NORMAL
push dword [ebp - 0x2f46c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 7
push str.NORMAL
push dword [ebp - 0x2f4c0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 2
push eax
push dword [ebp - 0x2f450]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f43c], 2
mov ecx, dword [ebp - 0x2f524]
test ecx, ecx
jne 0x43d0b1
mov eax, dword [str.0.0_]
mov dword [ebp - 0x38], eax
mov al, byte [0x482fa8]
push ecx
push 5
mov byte [ebp - 0x34], al
lea eax, [ebp - 0x38]
push eax
push dword [ebp - 0x2f5b0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 5
lea eax, [ebp - 0x38]
push eax
push dword [ebp - 0x2f4f4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f45c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f44c], 0
jmp 0x43d289
cmp ecx, 0x7530
jne 0x43d12e
mov eax, dword [str.300.0_]
mov dword [ebp - 0x58], eax
mov ax, word [0x482fb0]
mov word [ebp - 0x54], ax
mov al, byte [0x482fb2]
push 0
push 7
mov byte [ebp - 0x52], al
lea eax, [ebp - 0x58]
push eax
push dword [ebp - 0x2f5c8]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 7
lea eax, [ebp - 0x58]
push eax
push dword [ebp - 0x2f5a0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 5
push eax
push dword [ebp - 0x2f45c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f44c], 5
jmp 0x43d289
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x2f480], eax
imul eax, eax, 0x64
sub ecx, eax
mov eax, 0x66666667
imul ecx
lea ecx, [ebp - 0x1bc]
mov eax, edx
sar eax, 2
mov edx, eax
shr edx, 0x1f
add edx, eax
call fcn.00428ce0
mov edi, eax
mov edx, dword [ebp - 0x2f480]
lea ecx, [ebp - 0x18c]
mov byte [ebp - 4], 0x38
call fcn.00428ce0
push 0x48185c
mov edx, eax
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x2f6c8]
call fcn.004436f0
push edi
mov edx, eax
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x2f6a0]
call fcn.00443750
push 0x482fb4
mov edx, eax
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x2f540]
call fcn.004436f0
add esp, 0xc
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0xa0]
call fcn.00444f40
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
lea ecx, [ebp - 0x2f6a0]
call fcn.0042d200
lea ecx, [ebp - 0x2f6c8]
call fcn.0042d200
lea ecx, [ebp - 0x18c]
call fcn.0042d200
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x2a
call fcn.0042d200
mov edi, dword [ebp - 0x2f428]
lea eax, [ebp - 0xa0]
push 0
push 8
push eax
push dword [ebp - 0x2f4f4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 8
lea eax, [ebp - 0xa0]
push eax
push dword [ebp - 0x2f5e8]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 8
lea eax, [ebp - 0xa0]
push eax
push dword [ebp - 0x2f5ec]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 2
push eax
push dword [ebp - 0x2f45c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f44c], 2
mov eax, dword [ebp - 0x2f4e0]
test eax, eax
jne 0x43d308
mov eax, dword [str.0__0__]
mov dword [ebp - 0x40], eax
mov ax, word [0x482fbc]
mov word [ebp - 0x3c], ax
mov al, byte [0x482fbe]
push 0
push 7
mov byte [ebp - 0x3a], al
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x2f5a4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 7
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x2f4f0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f460]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x138], 0
jmp 0x43d4d5
cmp eax, 0x2c88
jne 0x43d39a
mov eax, dword [0x482fc8]
movq xmm0, qword [str.11400__100__]
mov dword [ebp - 0xbc], eax
mov al, byte [0x482fcc]
push 0
push 0xd
mov byte [ebp - 0xb8], al
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0x2f5cc]
movq qword [ebp - 0xc4], xmm0
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0xd
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0x2f5b8]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 5
push eax
push dword [ebp - 0x2f460]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x138], 5
jmp 0x43d4d5
movd xmm0, eax
lea ecx, [ebp - 0x1bc]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0x487774]
mulss xmm0, dword [0x487760]
cvttss2si edx, xmm0
call fcn.00428ce0
mov edi, eax
mov edx, dword [ebp - 0x2f4e0]
lea ecx, [ebp - 0x18c]
mov byte [ebp - 4], 0x3c
call fcn.00428ce0
push 0x482fd4
mov edx, eax
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x2f6c8]
call fcn.004436f0
push edi
mov edx, eax
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x2f6a0]
call fcn.00443750
push 0x482fd0
mov edx, eax
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x2f540]
call fcn.004436f0
add esp, 0xc
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x28]
call fcn.00444f20
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
lea ecx, [ebp - 0x2f6a0]
call fcn.0042d200
lea ecx, [ebp - 0x2f6c8]
call fcn.0042d200
lea ecx, [ebp - 0x18c]
call fcn.0042d200
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x2a
call fcn.0042d200
mov edi, dword [ebp - 0x2f428]
lea eax, [ebp - 0x28]
push 0
push 0x13
push eax
push dword [ebp - 0x2f4f0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x13
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2f5f0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0x13
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2f5f4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 2
push eax
push dword [ebp - 0x2f460]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x138], 2
mov eax, dword [ebp - 0x2f474]
cmp eax, 0x2710
jne 0x43d67c
push 0
push 4
lea eax, [ebp - 0x134]
mov dword [ebp - 0x134], 0x46464f
push eax
push dword [ebp - 0x2f564]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x134]
push eax
push dword [ebp - 0x2f5e4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f4a8]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x2f434], 0
push eax
push dword [ebp - 0x2f56c]
mov dword [ebp - 0x12c], 0
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, dword [ebp - 0x2f41c]
mov edx, ecx
lea ecx, [ebp - 0x2f6a0]
call fcn.00428ce0
push eax
mov edx, str.PAGE
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x2f540]
call fcn.00443a00
add esp, 4
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x78]
call fcn.00444f50
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
lea ecx, [ebp - 0x2f6a0]
mov byte [ebp - 4], 0x2a
call fcn.0042d200
push 0
push 7
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x2f4c4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 7
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x2f448]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 7
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x2f440]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 1
push eax
push dword [ebp - 0x2f548]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f588], 1
mov eax, dword [ebp - 0x2f444]
mov dword [ebp - 0x2f508], eax
mov eax, dword [ebp - 0x2f42c]
mov dword [ebp - 0x2f4d4], eax
mov eax, dword [ebp - 0x2f43c]
mov dword [ebp - 0x2f50c], eax
mov eax, dword [ebp - 0x2f44c]
mov dword [ebp - 0x2f510], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x2f528], eax
mov eax, dword [ebp - 0x2f434]
mov dword [ebp - 0x2f5c0], eax
jmp 0x439e41
lea ecx, [ebp - 0x2f540]
cmp eax, 0x63
jne 0x43d759
mov edx, dword [ebp - 0x2f4b4]
call fcn.00428ce0
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x170]
call fcn.00444f30
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
push 0
push 3
lea eax, [ebp - 0x170]
push eax
push dword [ebp - 0x2f560]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 3
lea eax, [ebp - 0x170]
push eax
push dword [ebp - 0x2f55c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 6
push eax
push dword [ebp - 0x2f4a8]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f434], 6
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 4
push eax
push dword [ebp - 0x2f56c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 3
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x37c1fc
push eax
jmp 0x43d567
mov edx, eax
call fcn.00428ce0
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x15c]
call fcn.00444f30
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
push 0
push 3
lea eax, [ebp - 0x15c]
push eax
push dword [ebp - 0x2f4d0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 3
lea eax, [ebp - 0x15c]
push eax
push dword [ebp - 0x2f4ec]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 3
lea eax, [ebp - 0x15c]
push eax
push dword [ebp - 0x2f418]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 3
push eax
push dword [ebp - 0x2f4a8]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f434], 3
jmp 0x43d711
cmp ecx, 3
jne 0x43e0fc
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0xa0
push eax
push dword [ebp - 0x2f5fc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
push eax
push dword [ebp - 0x2f59c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [ebp - 0x2f5e0], 0
mov ecx, 0x10000000
push 0
mov eax, 0xa0
cmove eax, ecx
push 4
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x12c]
push eax
push dword [ebp - 0x2f554]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [ebp - 0x2f5dc], 0
mov ecx, 0x10000000
push 0
mov eax, 0xa0
cmove eax, ecx
push 4
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x12c]
push eax
push dword [ebp - 0x2f550]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
push eax
push dword [ebp - 0x2f570]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [ebp - 0x2f520], 0
push 0
jne 0x43d939
mov al, byte [0x482fe0]
movq xmm0, qword [str.UNLOCKED]
push 9
mov byte [ebp - 0xa4], al
lea eax, [ebp - 0xac]
push eax
push dword [ebp - 0x2f5bc]
movq qword [ebp - 0xac], xmm0
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 9
lea eax, [ebp - 0xac]
push eax
push dword [ebp - 0x2f4dc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f464]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f444], 0
jmp 0x43d9a7
mov eax, dword [str.LOCKED]
mov dword [ebp - 0x60], eax
mov ax, word [0x482fe8]
mov word [ebp - 0x5c], ax
mov al, byte [0x482fea]
push 7
mov byte [ebp - 0x5a], al
lea eax, [ebp - 0x60]
push eax
push dword [ebp - 0x2f5c4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 7
lea eax, [ebp - 0x60]
push eax
push dword [ebp - 0x2f470]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 8
push eax
push dword [ebp - 0x2f464]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f444], 8
mov eax, dword [ebp - 0x2f4b0]
lea ecx, [ebp - 0x2f540]
cmp eax, 0xffff0000
jne 0x43da45
mov edx, eax
call fcn.00428ce0
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0xfc]
call fcn.00444f40
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
push 0
push 8
lea eax, [ebp - 0xfc]
push eax
push dword [ebp - 0x2f574]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 8
lea eax, [ebp - 0xfc]
push eax
push dword [ebp - 0x2f484]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f438]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f42c], 0
jmp 0x43db71
cmp eax, 0x10000
jne 0x43dad7
mov edx, eax
call fcn.00428ce0
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x104]
call fcn.00444f40
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
push 0
push 8
lea eax, [ebp - 0x104]
push eax
push dword [ebp - 0x2f580]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 8
lea eax, [ebp - 0x104]
push eax
push dword [ebp - 0x2f584]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 5
push eax
push dword [ebp - 0x2f438]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f42c], 5
jmp 0x43db71
mov edx, eax
call fcn.00428ce0
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.00444f40
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
push 0
push 8
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x2f484]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 8
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x2f598]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 8
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x2f544]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 2
push eax
push dword [ebp - 0x2f438]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f42c], 2
mov eax, dword [ebp - 0x2f478]
lea ecx, [ebp - 0x2f540]
cmp eax, 0xffff0000
jne 0x43dc0f
mov edx, eax
call fcn.00428ce0
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0xf4]
call fcn.00444f40
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
push 0
push 8
lea eax, [ebp - 0xf4]
push eax
push dword [ebp - 0x2f4bc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 8
lea eax, [ebp - 0xf4]
push eax
push dword [ebp - 0x2f46c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f450]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f43c], 0
jmp 0x43dd33
cmp eax, 0x10000
jne 0x43dca1
mov edx, eax
call fcn.00428ce0
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0xcc]
call fcn.00444f40
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
push 0
push 8
lea eax, [ebp - 0xcc]
push eax
push dword [ebp - 0x2f46c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 8
lea eax, [ebp - 0xcc]
push eax
push dword [ebp - 0x2f4c0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 2
push eax
push dword [ebp - 0x2f450]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f43c], 2
jmp 0x43dd33
mov edx, dword [ebp - 0x2f47c]
call fcn.00428ce0
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x80]
call fcn.00444f40
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
push 0
push 8
lea eax, [ebp - 0x80]
push eax
push dword [ebp - 0x2f4bc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 8
lea eax, [ebp - 0x80]
push eax
push dword [ebp - 0x2f46c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 8
lea eax, [ebp - 0x80]
push eax
push dword [ebp - 0x2f4c0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 1
push eax
push dword [ebp - 0x2f450]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f43c], 1
mov eax, dword [ebp - 0x2f47c]
lea ecx, [ebp - 0x2f540]
cmp eax, 0xffff0000
jne 0x43ddd1
mov edx, eax
call fcn.00428ce0
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0xd4]
call fcn.00444f40
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
push 0
push 8
lea eax, [ebp - 0xd4]
push eax
push dword [ebp - 0x2f5b0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 8
lea eax, [ebp - 0xd4]
push eax
push dword [ebp - 0x2f4f4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f45c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f44c], 0
jmp 0x43df01
cmp eax, 0x10000
jne 0x43de63
mov edx, eax
call fcn.00428ce0
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0xdc]
call fcn.00444f40
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
push 0
push 8
lea eax, [ebp - 0xdc]
push eax
push dword [ebp - 0x2f5c8]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 8
lea eax, [ebp - 0xdc]
push eax
push dword [ebp - 0x2f5a0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 5
push eax
push dword [ebp - 0x2f45c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f44c], 5
jmp 0x43df01
mov edx, dword [ebp - 0x2f478]
call fcn.00428ce0
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.00444f40
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
push 0
push 8
lea eax, [ebp - 0x88]
push eax
push dword [ebp - 0x2f4f4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 8
lea eax, [ebp - 0x88]
push eax
push dword [ebp - 0x2f5e8]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 8
lea eax, [ebp - 0x88]
push eax
push dword [ebp - 0x2f5ec]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 2
push eax
push dword [ebp - 0x2f45c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f44c], 2
mov eax, dword [ebp - 0x2f488]
lea ecx, [ebp - 0x2f540]
cmp eax, 0xffff0000
jne 0x43df9f
mov edx, eax
call fcn.00428ce0
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0xe4]
call fcn.00444f40
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
push 0
push 8
lea eax, [ebp - 0xe4]
push eax
push dword [ebp - 0x2f5a4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 8
lea eax, [ebp - 0xe4]
push eax
push dword [ebp - 0x2f4f0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f460]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x138], 0
jmp 0x43e0cb
cmp eax, 0x10000
jne 0x43e031
mov edx, eax
call fcn.00428ce0
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0xec]
call fcn.00444f40
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
push 0
push 8
lea eax, [ebp - 0xec]
push eax
push dword [ebp - 0x2f5cc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 8
lea eax, [ebp - 0xec]
push eax
push dword [ebp - 0x2f5b8]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 5
push eax
push dword [ebp - 0x2f460]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x138], 5
jmp 0x43e0cb
mov edx, eax
call fcn.00428ce0
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x98]
call fcn.00444f40
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
push 0
push 8
lea eax, [ebp - 0x98]
push eax
push dword [ebp - 0x2f4f0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 8
lea eax, [ebp - 0x98]
push eax
push dword [ebp - 0x2f5f0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 8
lea eax, [ebp - 0x98]
push eax
push dword [ebp - 0x2f5f4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 2
push eax
push dword [ebp - 0x2f460]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x138], 2
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f4a8]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f434], 0
jmp 0x43d56e
cmp ecx, 4
jne 0x43e47c
push 0
push ecx
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0xa0
push eax
push dword [ebp - 0x2f5fc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
push eax
push dword [ebp - 0x2f59c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
push eax
push dword [ebp - 0x2f550]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0x10000000
push eax
push dword [ebp - 0x2f570]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
push eax
push dword [ebp - 0x2f554]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp dword [ebp - 0x2f648], 0
push 0
jne 0x43e1f3
push 7
push str.NORMAL
push dword [ebp - 0x2f5bc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 7
push str.NORMAL
push dword [ebp - 0x2f4dc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f464]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f444], 0
jmp 0x43e249
push 9
push str.ADVANCED
push dword [ebp - 0x2f5c4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 9
push str.ADVANCED
push dword [ebp - 0x2f470]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 8
push eax
push dword [ebp - 0x2f464]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f444], 8
cmp byte [ebp - 0x2f42e], 0
push 0
jne 0x43e2ac
push 4
push 0x484594
push dword [ebp - 0x2f574]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
push 0x484594
push dword [ebp - 0x2f484]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f438]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f42c], 0
jmp 0x43e302
push 3
push 0x484468
push dword [ebp - 0x2f580]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 3
push 0x484468
push dword [ebp - 0x2f584]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 5
push eax
push dword [ebp - 0x2f438]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f42c], 5
cmp byte [0x48f0a8], 0
push 0
je 0x43e365
push 3
push 0x484468
push dword [ebp - 0x2f5b0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 3
push 0x484468
push dword [ebp - 0x2f4f4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f45c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f44c], 0
jmp 0x43e3bb
push 4
push 0x484594
push dword [ebp - 0x2f5c8]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
push 0x484594
push dword [ebp - 0x2f5a0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 5
push eax
push dword [ebp - 0x2f45c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f44c], 5
cmp byte [ebp - 0x2f42d], 0
push 0
jne 0x43e421
push 4
push 0x484594
push dword [ebp - 0x2f5a4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
push 0x484594
push dword [ebp - 0x2f4f0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f460]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x138], 0
jmp 0x43d56e
push 3
push 0x484468
push dword [ebp - 0x2f5cc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 3
push 0x484468
push dword [ebp - 0x2f5b8]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 5
push eax
push dword [ebp - 0x2f460]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x138], 5
jmp 0x43d56e
cmp ecx, 5
jne 0x43d574
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0xa0
push eax
push dword [ebp - 0x2f554]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0x10000000
push eax
push dword [ebp - 0x2f5fc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
push eax
push dword [ebp - 0x2f550]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
push eax
push dword [ebp - 0x2f570]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x2f4cc]
cmp eax, 0xf
jne 0x43e561
push 0
push 0xa
push str.INFINITE
push dword [ebp - 0x2f5bc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0xa
push str.INFINITE
push dword [ebp - 0x2f4dc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f464]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f444], 0
jmp 0x43e6a2
cmp eax, 0xe
jne 0x43e5a0
push 0
push 7
push str.NORMAL
push dword [ebp - 0x2f4dc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 7
push str.NORMAL
push dword [ebp - 0x2f600]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 7
push str.NORMAL
jmp 0x43e669
cmp eax, 1
jne 0x43e602
push 0
push 2
push 0x484550
push dword [ebp - 0x2f5c4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 2
push 0x484550
push dword [ebp - 0x2f470]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 8
push eax
push dword [ebp - 0x2f464]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f444], 8
jmp 0x43e6a2
mov edx, eax
lea ecx, [ebp - 0x2f540]
call fcn.00428ce0
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x158]
call fcn.00444f30
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
push 0
push 3
lea eax, [ebp - 0x158]
push eax
push dword [ebp - 0x2f4dc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 3
lea eax, [ebp - 0x158]
push eax
push dword [ebp - 0x2f600]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 3
lea eax, [ebp - 0x158]
push eax
push dword [ebp - 0x134]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 2
push eax
push dword [ebp - 0x2f464]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f444], 2
mov eax, dword [ebp - 0x2f48c]
cmp eax, 0xfffffffe
jne 0x43e70a
push 0
push 0xa
push str.INFINITE
push dword [ebp - 0x2f574]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0xa
push str.INFINITE
push dword [ebp - 0x2f484]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f438]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f42c], 0
jmp 0x43e879
cmp eax, 0xffffffff
jne 0x43e749
push 0
push 7
push str.NORMAL
push dword [ebp - 0x2f484]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 7
push str.NORMAL
push dword [ebp - 0x2f598]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 7
push str.NORMAL
jmp 0x43e840
lea ecx, [ebp - 0x2f540]
cmp eax, 9
jne 0x43e7df
mov edx, eax
call fcn.00428ce0
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x168]
call fcn.00444f30
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
push 0
push 7
lea eax, [ebp - 0x168]
push eax
push dword [ebp - 0x2f580]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 7
lea eax, [ebp - 0x168]
push eax
push dword [ebp - 0x2f584]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 5
push eax
push dword [ebp - 0x2f438]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f42c], 5
jmp 0x43e879
mov edx, eax
call fcn.00428ce0
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x154]
call fcn.00444f30
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
push 0
push 3
lea eax, [ebp - 0x154]
push eax
push dword [ebp - 0x2f484]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 3
lea eax, [ebp - 0x154]
push eax
push dword [ebp - 0x2f598]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 3
lea eax, [ebp - 0x154]
push eax
push dword [ebp - 0x2f544]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 2
push eax
push dword [ebp - 0x2f438]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f42c], 2
mov eax, dword [ebp - 0x2f4b4]
cmp eax, 0xfffffffe
jne 0x43e8e1
push 0
push 0xa
push str.INFINITE
push dword [ebp - 0x2f4bc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0xa
push str.INFINITE
push dword [ebp - 0x2f46c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f450]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f43c], 0
jmp 0x43ea50
cmp eax, 0xffffffff
jne 0x43e920
push 0
push 7
push str.NORMAL
push dword [ebp - 0x2f4bc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 7
push str.NORMAL
push dword [ebp - 0x2f46c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 7
push str.NORMAL
jmp 0x43ea17
lea ecx, [ebp - 0x2f540]
cmp eax, 9
jne 0x43e9b6
mov edx, eax
call fcn.00428ce0
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x16c]
call fcn.00444f30
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
push 0
push 7
lea eax, [ebp - 0x16c]
push eax
push dword [ebp - 0x2f46c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 7
lea eax, [ebp - 0x16c]
push eax
push dword [ebp - 0x2f4c0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 2
push eax
push dword [ebp - 0x2f450]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f43c], 2
jmp 0x43ea50
mov edx, eax
call fcn.00428ce0
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0x150]
call fcn.00444f30
lea ecx, [ebp - 0x2f540]
call fcn.0042d200
push 0
push 3
lea eax, [ebp - 0x150]
push eax
push dword [ebp - 0x2f4bc]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 3
lea eax, [ebp - 0x150]
push eax
push dword [ebp - 0x2f46c]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 3
lea eax, [ebp - 0x150]
push eax
push dword [ebp - 0x2f4c0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 1
push eax
push dword [ebp - 0x2f450]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f43c], 1
mov edx, 5
lea ecx, [ebp - 0x2f710]
call fcn.00428ce0
push eax
mov edx, str.PAGE
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x2f6f8]
call fcn.00443a00
add esp, 4
mov ecx, eax
call fcn.0042d4a0
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.00444f50
lea ecx, [ebp - 0x2f6f8]
call fcn.0042d200
lea ecx, [ebp - 0x2f710]
mov byte [ebp - 4], 0x2a
call fcn.0042d200
push 0
push 7
lea eax, [ebp - 0xb4]
push eax
push dword [ebp - 0x2f448]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 7
lea eax, [ebp - 0xb4]
push eax
push dword [ebp - 0x2f440]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 2
push eax
push dword [ebp - 0x2f548]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f588], 2
jmp 0x43d62f
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
call fcn.0042f530
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
call fcn.0042f600
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
call fcn.0042f6d0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
call fcn.0042f7a0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
call fcn.0042f870
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
call fcn.0042f320
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f480], eax
call fcn.0042f290
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f418], eax
call fcn.00432220
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f448], eax
call fcn.0042f090
mov dword [ebp - 0x2f5d4], eax
nop dword [eax]
nop dword [eax + eax]
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
call fcn.0042eff0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f440], eax
call fcn.0042f130
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f4c4], eax
call fcn.00430140
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f4ec], eax
call fcn.004302a0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f4d0], eax
call fcn.00430990
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f55c], eax
call fcn.00431650
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
mov dword [ebp - 0x2f560], eax
call fcn.00431e50
push 0
push 4
mov dword [ebp - 0x2f564], eax
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x2f434]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [ebp - 0x2f440], 0x58
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x2f4ac], eax
je 0x43ec88
cmp dword [ebp - 0x2f4c4], 0x58
je 0x43ec88
cmp dword [ebp - 0x2f4ec], 0x58
je 0x43ec88
cmp dword [ebp - 0x2f4d0], 0x58
je 0x43ec88
cmp dword [ebp - 0x2f55c], 0x58
je 0x43ec88
cmp dword [ebp - 0x2f560], 0x58
je 0x43ec88
cmp dword [ebp - 0x2f564], 0x58
jne 0x43ec96
cmp eax, 7
je 0x43eba0
jmp 0x439e41
cmp eax, 7
jne 0x439e41
movups xmm0, xmmword [str.enemy_reversal.]
push 0
push 0x10
lea eax, [ebp - 0x114]
push eax
push dword [ebp - 0x2f418]
movups xmmword [ebp - 0x114], xmm0
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 1
push 0x484464
push dword [ebp - 0x2f480]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x2f448]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x2f420]
push 0
mov dword [ebp - 0x2f424], eax
mov eax, dword [ebp - 0x130]
push 4
mov dword [ebp - 0x2f420], eax
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x2f440]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
push 0
push 4
mov dword [ebp - 0x2f63c], eax
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x2f4c4]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
push 0
push 4
mov dword [ebp - 0x2f644], eax
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x2f4ec]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
push 0
push 4
mov dword [ebp - 0x2f624], eax
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x2f4d0]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
push 0
push 4
mov dword [ebp - 0x2f418], eax
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x2f55c]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
push 0
push 4
mov dword [ebp - 0x2f480], eax
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x2f560]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x2f664], eax
push 0
push 4
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x2f564]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x2f660], eax
mov eax, dword [ebp - 0x2f424]
cmp eax, 0xe
jne 0x43ee53
cmp dword [ebp - 0x2f420], 0
jne 0x43ee97
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 2
push eax
push dword [ebp - 0x2f448]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f420], 2
mov dword [ebp - 0x2f424], 2
jmp 0x43ee97
cmp eax, 2
jne 0x43ee97
cmp dword [ebp - 0x2f420], 0
jne 0x43ee97
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0xe
push eax
push dword [ebp - 0x2f448]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x2f420], 0xe
mov dword [ebp - 0x2f424], 0xe
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0x10000000
push eax
push dword [ebp - 0x2f5d4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x2f418]
mov ecx, 6
add eax, 5
cdq
idiv ecx
mov eax, dword [ebp - 0x2f480]
add eax, 5
mov dword [ebp - 0x2f65c], edx
cdq
idiv ecx
mov dword [ebp - 0x2f658], edx
jmp 0x439e41
cmp dword [ebp - 0x2f4d8], 1
mov byte [ebp - 0x2f5d8], 0
mov dword [ebp - 0x2f5d0], 0xffffffff
mov dword [ebp - 0x2f4ac], 2
mov dword [ebp - 0x12c], 1
je 0x43ef28
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
test al, 1
jne 0x43ef32
cmp dword [ebp - 0x2f4d8], 2
jne 0x43ef32
mov dword [ebp - 0x12c], 0xa
push 0
push 4
lea eax, [ebp - 0x12c]
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x155cdc
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 4
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x37c1f8
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x37c1ec
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x130]
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x162a40
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x2f4e4], eax
cmp eax, dword [ebp - 0x2f654]
je 0x439e41
mov dword [ebp - 0x2f654], eax
test eax, eax
je 0x43eff4
lea ecx, [ebp - 0x148]
call fcn.00440ab0
cmp eax, 1
jne 0x43f0ea
push 0
push 4
lea eax, [ebp - 0x130]
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x34d8f8
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
push 0
mov dword [ebp - 0x2f640], eax
lea eax, [ebp - 0x130]
push 4
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x34d91c
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
push 0
mov dword [ebp - 0x2f634], eax
lea eax, [ebp - 0x130]
push 4
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x34d900
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
push 0
mov dword [ebp - 0x2f4c8], eax
lea eax, [ebp - 0x130]
push 4
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x34d924
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x2f640]
mov ecx, dword [ebp - 0x2f4c8]
mov edx, dword [ebp - 0x130]
mov dword [ebp - 0x2f4e8], edx
lea eax, [eax + eax*4]
lea eax, [ecx + eax*2]
mov dword [ebp - 0x2f674], eax
lea ecx, [ebp - 0x2f6d4]
mov eax, dword [ebp - 0x2f634]
lea eax, [eax + eax*4]
lea eax, [edx + eax*2]
mov edx, eax
mov dword [ebp - 0x2f4a4], eax
call fcn.0042ed70
push eax
lea ecx, [ebp - 0x148]
call fcn.00440ad0
lea ecx, [ebp - 0x2f6d4]
call fcn.00440a10
cmp dword [ebp - 0x2f474], 0x2710
je 0x43f257
mov eax, dword [ebp - 0x2f410]
lea ecx, [ebp - 0x130]
push 0
push 4
add eax, 0x157e00
push ecx
push eax
push edi
mov dword [ebp - 0x2f480], eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edi, dword [ebp - 0x130]
lea eax, [ebp - 0x130]
push 0
push 1
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x155dd0
push eax
push dword [ebp - 0x2f428]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
lea ecx, [ebp - 0x130]
push 0
mov dword [ebp - 0x2f418], eax
mov eax, dword [ebp - 0x2f410]
push 4
add eax, 0x155dd8
push ecx
push eax
push dword [ebp - 0x2f428]
mov dword [ebp - 0x2f440], eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp edi, dword [ebp - 0x2f474]
jl 0x43f251
cmp dword [ebp - 0x2f418], 0
jne 0x43f251
cmp dword [ebp - 0x130], 0
mov edi, dword [ebp - 0x2f428]
je 0x43f257
push 0
push 4
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x2f440]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [ebp - 0x130], 0
je 0x43f225
mov eax, dword [ebp - 0x2f410]
mov esi, dword [ebp - 0x2f440]
add eax, 0x3713c9
mov dword [ebp - 0x2f418], eax
push 0
push 1
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x12c], 1
push ecx
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 4
lea eax, [ebp - 0x130]
push eax
push esi
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x2f418]
jne 0x43f1e0
mov esi, dword [ebp - 0x2f608]
push 0x10
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0
push eax
push dword [ebp - 0x2f480]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x43f257
mov edi, dword [ebp - 0x2f428]
push 0
push 4
lea eax, [ebp - 0x130]
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x37c200
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [ebp - 0x2f4e4], 1
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x2f630], eax
jne 0x43f39f
push dword [ebp - 0x2f4e8]
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
push dword [ebp - 0x2f4c8]
push dword [ebp - 0x2f524]
call fcn.00436400
push dword [ebp - 0x2f4e8]
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
push dword [ebp - 0x2f4c8]
push dword [ebp - 0x2f630]
call fcn.00436490
push dword [ebp - 0x2f4e8]
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
push dword [ebp - 0x2f4c8]
push 0
call fcn.00436490
add esp, 0x24
cmp byte [ebp - 0x2f520], 0
je 0x43f39f
mov eax, dword [ebp - 0x2f4b0]
push 0
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x12c]
push 4
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x155238
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x2f478]
push 0
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x12c]
push 4
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x155d34
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x2f47c]
push 0
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x12c]
push 4
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x156830
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x2f488]
push 0
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x12c]
push 4
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x15732c
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [ebp - 0x2f5ac], 0
je 0x43f3c6
push dword [ebp - 0x2f4e8]
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
push dword [ebp - 0x2f4c8]
push 0
call fcn.00436490
add esp, 0xc
mov eax, dword [ebp - 0x2f410]
lea ecx, [ebp - 0x130]
push 0
push 1
add eax, 0x155dd8
push ecx
push eax
push edi
mov dword [ebp - 0x2f418], eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [ebp - 0x130], 0
jne 0x43f4d1
mov eax, dword [ebp - 0x2f51c]
mov ecx, 0x14
inc eax
cmp eax, ecx
push 0
cmovl ecx, eax
mov eax, dword [ebp - 0x2f594]
inc eax
mov dword [ebp - 0x2f51c], ecx
mov ecx, 0x14
cmp eax, ecx
push 4
cmovl ecx, eax
lea eax, [ebp - 0x130]
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x155302
mov dword [ebp - 0x2f594], ecx
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x2f48c]
cmp dword [ebp - 0x130], eax
jge 0x43f46a
mov eax, dword [ebp - 0x2f58c]
mov ecx, 0x14
inc eax
cmp eax, ecx
cmovl ecx, eax
mov dword [ebp - 0x2f58c], ecx
jmp 0x43f474
mov dword [ebp - 0x2f58c], 0
push 0
push 4
lea eax, [ebp - 0x130]
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x155300
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x2f48c]
cmp dword [ebp - 0x130], eax
jge 0x43f4bf
mov eax, dword [ebp - 0x2f590]
mov ecx, 0x14
inc eax
cmp eax, ecx
cmovl ecx, eax
mov eax, dword [ebp - 0x2f51c]
mov dword [ebp - 0x2f590], ecx
jmp 0x43f4df
mov eax, dword [ebp - 0x2f51c]
mov dword [ebp - 0x2f590], 0
jmp 0x43f4df
xor eax, eax
mov dword [ebp - 0x2f51c], eax
mov dword [ebp - 0x2f594], eax
cmp dword [ebp - 0x2f4e4], 1
je 0x43f4f6
cmp eax, 0x14
jne 0x43f51f
cmp byte [ebp - 0x2f60c], 0
je 0x43f51f
push dword [ebp - 0x2f4e0]
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
call fcn.004363a0
add esp, 4
mov dword [ebp - 0x2f51c], 0
cmp dword [ebp - 0x2f4e4], 1
je 0x43f535
cmp dword [ebp - 0x2f594], 0x14
mov eax, dword [ebp - 0x2f4cc]
je 0x43f53b
cmp eax, 0xf
jne 0x43f564
jmp 0x43f53b
mov eax, dword [ebp - 0x2f4cc]
cmp eax, 0xe
je 0x43f55b
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
push eax
call fcn.00436520
add esp, 4
mov dword [ebp - 0x2f594], 0
cmp dword [ebp - 0x2f4e4], 1
je 0x43f57a
cmp dword [ebp - 0x2f590], 0x14
mov eax, dword [ebp - 0x2f4b4]
je 0x43f580
cmp eax, 0xfffffffe
jne 0x43f5a4
jmp 0x43f580
mov eax, dword [ebp - 0x2f4b4]
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
push eax
call fcn.004365e0
add esp, 4
mov dword [ebp - 0x2f590], 0
cmp dword [ebp - 0x2f4e4], 1
je 0x43f5ba
cmp dword [ebp - 0x2f58c], 0x14
mov eax, dword [ebp - 0x2f48c]
je 0x43f5c0
cmp eax, 0xfffffffe
jne 0x43f5e0
jmp 0x43f5c0
mov eax, dword [ebp - 0x2f48c]
cmp eax, 0xffffffff
je 0x43f5e0
mov edx, dword [ebp - 0x2f410]
mov ecx, edi
push eax
call fcn.00436590
add esp, 4
mov dword [ebp - 0x2f58c], 0
push 0xd
call dword [sym.imp.USER32.dll_GetKeyState]
push 0
push 1
lea eax, [ebp - 0x130]
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x155dbe
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
push 0
push 1
mov dword [ebp - 0x2f670], eax
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x2f418]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
push 0
mov dword [ebp - 0x2f418], eax
lea eax, [ebp - 0x130]
push 4
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x155d44
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x130]
push 0
mov dword [ebp - 0x2f628], eax
lea eax, [ebp - 0x130]
push 4
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x1581cc
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x2f5a8]
mov edx, dword [ebp - 0x2f4e4]
mov dword [ebp - 0x2f62c], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x2f5a8], eax
test edx, edx
jne 0x43f6ac
mov byte [ebp - 0x2f490], 1
jmp 0x43f84d
movzx eax, byte [ebp - 0x2f490]
xor ecx, ecx
cmp edx, 2
cmovne ecx, eax
sub esp, 0x18
mov edi, esp
mov dword [ebp - 0x2f448], ecx
lea ecx, [ebp - 0x148]
push dword [ebp - 0x2f494]
call fcn.00440a90
push eax
mov ecx, edi
call fcn.0042d3a0
mov ecx, dword [ebp - 0x2f4a4]
call fcn.0042ec80
add esp, 0x18
test eax, eax
jne 0x43f795
sub esp, 0x18
lea ecx, [ebp - 0x148]
mov edi, esp
push dword [ebp - 0x2f498]
call fcn.00440a90
push eax
mov ecx, edi
call fcn.0042d3a0
mov ecx, dword [ebp - 0x2f4a4]
call fcn.0042ec80
add esp, 0x18
test eax, eax
jne 0x43f795
sub esp, 0x18
lea ecx, [ebp - 0x148]
mov edi, esp
push dword [ebp - 0x2f49c]
call fcn.00440a90
push eax
mov ecx, edi
call fcn.0042d3a0
mov ecx, dword [ebp - 0x2f4a4]
call fcn.0042ec80
add esp, 0x18
test eax, eax
jne 0x43f795
sub esp, 0x18
lea ecx, [ebp - 0x148]
mov edi, esp
push dword [ebp - 0x2f4a0]
call fcn.00440a90
push eax
mov ecx, edi
call fcn.0042d3a0
mov ecx, dword [ebp - 0x2f4a4]
call fcn.0042ec80
mov dl, byte [ebp - 0x2f448]
add esp, 0x18
mov byte [ebp - 0x2f490], dl
test eax, eax
je 0x43f847
mov ecx, dword [ebp - 0x2f514]
mov eax, dword [ebp - 0x2f448]
mov byte [ebp - 0x2f490], al
test cl, cl
jne 0x43f847
mov edx, dword [ebp - 0x2f5a8]
test edx, edx
je 0x43f7c8
cmp dword [ebp - 0x2f418], 0
mov byte [ebp - 0x2f490], al
je 0x43f847
cmp edx, dword [ebp - 0x2f62c]
mov edx, dword [ebp - 0x2f4b8]
jne 0x43f7e1
mov byte [ebp - 0x2f490], al
cmp edx, 2
jne 0x43f847
cmp dword [ebp - 0x2f628], 0
mov byte [ebp - 0x2f490], al
jne 0x43f847
mov edi, dword [ebp - 0x2f428]
test al, al
mov eax, 1
movzx ecx, cl
cmove ecx, eax
mov byte [ebp - 0x2f490], 0
cmp byte [ebp - 0x2f448], 0
mov eax, dword [ebp - 0x2f518]
cmovne eax, dword [ebp - 0x2f468]
mov dword [ebp - 0x2f514], ecx
mov dword [ebp - 0x2f468], eax
cmp edx, 2
jne 0x43f84d
mov edx, eax
mov byte [ebp - 0x2f514], 1
mov dword [ebp - 0x2f468], edx
mov byte [ebp - 0x2f490], 0
jmp 0x43f853
mov edi, dword [ebp - 0x2f428]
mov edx, dword [ebp - 0x2f468]
mov eax, dword [ebp - 0x2f514]
xor ecx, ecx
cmp dword [ebp - 0x2f5a8], ecx
movzx eax, al
cmove ecx, eax
mov al, cl
mov dword [ebp - 0x2f514], eax
mov byte [ebp - 0x2f604], al
test cl, cl
je 0x43f9ce
test edx, edx
jne 0x43f9b9
xor al, al
mov byte [ebp - 0x2f490], 1
cmp dword [ebp - 0x2f4b8], 1
mov dword [ebp - 0x2f514], eax
mov byte [ebp - 0x2f604], al
jne 0x43f8b9
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
test al, 1
je 0x43f8b9
mov byte [ebp - 0x2f490], 0
jmp 0x43f9ce
sub esp, 0x18
lea ecx, [ebp - 0x148]
mov edi, esp
push dword [ebp - 0x2f494]
call fcn.00440a90
push eax
mov ecx, edi
call fcn.0042d3a0
mov ecx, dword [ebp - 0x2f4a4]
call fcn.0042ec80
mov edi, esp
mov dword [ebp - 0x2f6b0], eax
push dword [ebp - 0x2f498]
lea ecx, [ebp - 0x148]
call fcn.00440a90
push eax
mov ecx, edi
call fcn.0042d3a0
mov ecx, dword [ebp - 0x2f4a4]
call fcn.0042ec80
mov edi, esp
mov dword [ebp - 0x2f6ac], eax
push dword [ebp - 0x2f49c]
lea ecx, [ebp - 0x148]
call fcn.00440a90
push eax
mov ecx, edi
call fcn.0042d3a0
mov ecx, dword [ebp - 0x2f4a4]
call fcn.0042ec80
mov edi, esp
mov dword [ebp - 0x2f6a8], eax
push dword [ebp - 0x2f4a0]
lea ecx, [ebp - 0x148]
call fcn.00440a90
push eax
mov ecx, edi
call fcn.0042d3a0
mov ecx, dword [ebp - 0x2f4a4]
call fcn.0042ec80
add esp, 0x18
mov dword [ebp - 0x2f6a4], eax
nop
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x80000003
jns 0x43f982
dec eax
or eax, 0xfffffffc
inc eax
mov eax, dword [ebp + eax*4 - 0x2f6b0]
test eax, eax
je 0x43f970
mov edi, dword [ebp - 0x2f428]
push 0
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x12c]
push 4
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x155f38
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x43f9ce
mov al, cl
dec edx
mov dword [ebp - 0x2f468], edx
mov dword [ebp - 0x2f514], eax
mov byte [ebp - 0x2f604], al
push 0
push 4
lea eax, [ebp - 0x130]
push eax
mov eax, dword [ebp - 0x2f410]
add eax, 0x155c3c
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x439e41