Function at 0x433ff0
Capabilities:
Create thread
Delete file
Enumerate gui resources
Get common file path
Inject thread
Set console window title
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48ac47
mov eax, dword fs:[0]
push eax
sub esp, 0x79c
mov eax, dword [0x4a4080]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, 0x4a4aa0
call fcn.004222b0
mov ecx, 0x4a485c
call fcn.004222b0
mov ecx, 0x4a4ab8
call fcn.004222b0
mov ecx, 0x4a482c
call fcn.004222b0
mov ecx, 0x4a488c
call fcn.004222b0
mov ecx, 0x4a48a8
call fcn.00428e80
nop
xor eax, eax
mov byte [ebp - 0x27f], al
lea ecx, [ebp - 0x514]
push ecx
lea ecx, [ebp - 0x27f]
call fcn.004317a0
mov ecx, eax
call fcn.00431330
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
nop
push str.onepiece.dll
lea ecx, [ebp - 0x48c]
call fcn.00419040
mov dword [ebp - 4], 0
push 0x66
lea edx, [ebp - 0x48c]
push edx
call fcn.004322f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48c]
call fcn.0041b200
nop
push 0x48f3fc
lea ecx, [ebp - 0x444]
call fcn.004189e0
mov dword [ebp - 4], 1
lea eax, [ebp - 0x444]
push eax
call fcn.004321e0
add esp, 4
movzx ecx, al
test ecx, ecx
jne 0x4340f5
mov dword [ebp - 0x2ac], 1
jmp 0x4340ff
mov dword [ebp - 0x2ac], 0
mov dl, byte [ebp - 0x2ac]
mov byte [ebp - 0x280], dl
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x444]
call fcn.0041b1e0
movzx eax, byte [ebp - 0x280]
test eax, eax
je 0x434163
push str.C:System.sys
lea ecx, [ebp - 0x45c]
call fcn.00419040
mov dword [ebp - 4], 2
push 0x67
lea ecx, [ebp - 0x45c]
push ecx
call fcn.004322f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x45c]
call fcn.0041b200
nop
mov ecx, 0x4a4814
call fcn.00421e80
mov dword [ebp - 0x3dc], eax
mov ecx, 0x4a4874
call fcn.00421e80
mov dword [ebp - 0x3e0], eax
mov edx, dword [ebp - 0x3dc]
push edx
mov eax, dword [ebp - 0x3e0]
push eax
call fcn.004014a0
add esp, 8
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0x431f20
call dword [sym.imp.USER32.dll_EnumWindows]
push 0x4a47d4
mov ecx, dword [0x4a47d0]
push ecx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [0x4a47d4]
push edx
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [0x4a47d8], eax
cmp dword [0x4a47d8], 0
jne 0x434257
mov eax, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov dword [ebp - 0x404], eax
xor ecx, ecx
mov byte [ebp - 0x281], cl
lea edx, [ebp - 0x588]
push edx
lea ecx, [ebp - 0x281]
call fcn.00431b10
mov ecx, eax
call fcn.004313b0
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp - 0x3f0]
push eax
mov ecx, dword [ebp - 0x404]
push ecx
call fcn.00430850
add esp, 8
mov dword [ebp - 0x408], eax
push 0x430d10
mov ecx, dword [ebp - 0x408]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
nop
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 1
jmp 0x4353cb
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
nop
mov edx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [ebp - 0x414], edx
xor eax, eax
mov byte [ebp - 0x282], al
lea ecx, [ebp - 0x500]
push ecx
lea ecx, [ebp - 0x282]
call fcn.00431ba0
mov ecx, eax
call fcn.00433160
mov dword [ebp - 0x410], eax
mov edx, dword [ebp - 0x410]
push edx
mov eax, dword [ebp - 0x414]
push eax
call fcn.00430850
add esp, 8
mov dword [ebp - 0x2c8], eax
push 0x430d10
mov ecx, dword [ebp - 0x2c8]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
nop
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [ebp - 0x2d0], ecx
xor edx, edx
mov byte [ebp - 0x283], dl
lea eax, [ebp - 0x4ec]
push eax
lea ecx, [ebp - 0x283]
call fcn.00431c80
mov ecx, eax
call fcn.00431350
mov dword [ebp - 0x2cc], eax
mov ecx, dword [ebp - 0x2cc]
push ecx
mov edx, dword [ebp - 0x2d0]
push edx
call fcn.00430850
add esp, 8
mov dword [ebp - 0x2d4], eax
push 0x430d10
mov ecx, dword [ebp - 0x2d4]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
nop
lea eax, [ebp - 0x218]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
lea ecx, [ebp - 0x218]
push ecx
lea ecx, [ebp - 0x238]
call fcn.00419040
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x2a1]
call fcn.00418040
mov dword [ebp - 0x2e0], eax
lea edx, [ebp - 0x418]
push edx
lea ecx, [ebp - 0x238]
call fcn.00426f80
mov eax, dword [eax]
mov dword [ebp - 0x2d8], eax
mov ecx, dword [ebp - 0x2d8]
mov dword [ebp - 0x2e4], ecx
lea edx, [ebp - 0x41c]
push edx
lea ecx, [ebp - 0x238]
call fcn.00421c30
mov eax, dword [eax]
mov dword [ebp - 0x2dc], eax
mov ecx, dword [ebp - 0x2dc]
mov dword [ebp - 0x2e8], ecx
mov edx, dword [ebp - 0x2e0]
push edx
mov eax, dword [ebp - 0x2e4]
push eax
mov ecx, dword [ebp - 0x2e8]
push ecx
lea ecx, [ebp - 0x250]
call fcn.00408550
mov byte [ebp - 4], 4
lea edx, [ebp - 0x250]
push edx
mov ecx, 0x4a4844
call fcn.00421520
nop
xor eax, eax
mov byte [ebp - 0x284], al
lea ecx, [ebp - 0x4dc]
push ecx
lea ecx, [ebp - 0x284]
call fcn.00431ce0
mov ecx, eax
call fcn.00431530
push eax
mov ecx, 0x4a4844
call fcn.00421600
nop
mov dword [0x4a47dc], 0
mov ecx, 0x4a4844
call fcn.00421e80
push eax
call fcn.004325f0
add esp, 4
mov dword [0x4a47e0], eax
mov edx, dword [0x4a47e0]
mov dword [ebp - 0x2b0], edx
cvtsi2sd xmm0, dword [ebp - 0x2b0]
mov eax, dword [ebp - 0x2b0]
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x48f8e0]
sub esp, 8
movsd qword [esp], xmm0
mov ecx, dword [0x4a47dc]
mov dword [ebp - 0x2b4], ecx
cvtsi2sd xmm0, dword [ebp - 0x2b4]
mov edx, dword [ebp - 0x2b4]
shr edx, 0x1f
addsd xmm0, qword [edx*8 + 0x48f8e0]
sub esp, 8
movsd qword [esp], xmm0
call fcn.00433510
add esp, 0x10
movzx eax, al
test eax, eax
je 0x4344fe
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [ebp - 0x2f0], ecx
xor edx, edx
mov byte [ebp - 0x285], dl
lea eax, [ebp - 0x540]
push eax
lea ecx, [ebp - 0x285]
call fcn.00431d50
mov ecx, eax
call fcn.00431390
mov dword [ebp - 0x2ec], eax
mov ecx, dword [ebp - 0x2ec]
push ecx
mov edx, dword [ebp - 0x2f0]
push edx
call fcn.00430850
add esp, 8
mov dword [ebp - 0x2f4], eax
push 0x430d10
mov ecx, dword [ebp - 0x2f4]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
nop
mov ecx, 0x4a4814
call fcn.00421e80
mov dword [ebp - 0x2f8], eax
mov ecx, 0x4a4874
call fcn.00421e80
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x2f8]
push eax
mov ecx, dword [ebp - 0x2fc]
push ecx
call fcn.004014a0
add esp, 8
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0x431f20
call dword [sym.imp.USER32.dll_EnumWindows]
push 0x4a47d4
mov edx, dword [0x4a47d0]
push edx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov eax, dword [0x4a47d4]
push eax
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [0x4a47d8], eax
cmp dword [0x4a47d8], 0
jne 0x434623
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov dword [ebp - 0x304], ecx
xor edx, edx
mov byte [ebp - 0x286], dl
lea eax, [ebp - 0x5a0]
push eax
lea ecx, [ebp - 0x286]
call fcn.00431dc0
mov ecx, eax
call fcn.004313b0
mov dword [ebp - 0x300], eax
mov ecx, dword [ebp - 0x300]
push ecx
mov edx, dword [ebp - 0x304]
push edx
call fcn.00430850
add esp, 8
mov dword [ebp - 0x308], eax
push 0x430d10
mov ecx, dword [ebp - 0x308]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
nop
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
nop
mov dword [ebp - 0x30c], 1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
call fcn.0041b1e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x238]
call fcn.0041b200
mov eax, dword [ebp - 0x30c]
jmp 0x4353cb
xor eax, eax
mov byte [ebp - 0x265], al
lea ecx, [ebp - 0x5bc]
push ecx
lea ecx, [ebp - 0x265]
call fcn.00431e50
mov ecx, eax
call fcn.00431510
mov dword [ebp - 0x310], eax
mov edx, dword [0x4a47d4]
mov dword [ebp - 0x314], edx
mov eax, dword [ebp - 0x310]
push eax
mov ecx, dword [ebp - 0x314]
push ecx
call fcn.00432240
add esp, 8
movzx edx, al
test edx, edx
jne 0x435148
mov eax, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [ebp - 0x31c], eax
xor ecx, ecx
mov byte [ebp - 0x266], cl
lea edx, [ebp - 0x69c]
push edx
lea ecx, [ebp - 0x266]
call fcn.00431ec0
mov ecx, eax
call fcn.00431430
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x318]
push eax
mov ecx, dword [ebp - 0x31c]
push ecx
call fcn.00430850
add esp, 8
mov dword [ebp - 0x320], eax
push 0x430d10
mov ecx, dword [ebp - 0x320]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
nop
mov edx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [ebp - 0x328], edx
xor eax, eax
mov byte [ebp - 0x267], al
lea ecx, [ebp - 0x424]
push ecx
lea ecx, [ebp - 0x267]
call fcn.00431550
mov ecx, eax
call fcn.004312d0
mov dword [ebp - 0x324], eax
mov edx, dword [ebp - 0x324]
push edx
mov eax, dword [ebp - 0x328]
push eax
call fcn.00430850
add esp, 8
mov dword [ebp - 0x330], eax
mov ecx, dword [0x4a47d4]
mov dword [ebp - 0x32c], ecx
mov edx, dword [ebp - 0x32c]
push edx
mov ecx, dword [ebp - 0x330]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
mov dword [ebp - 0x334], eax
push 0x430d10
mov ecx, dword [ebp - 0x334]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
nop
push 0
push 0x4a4874
lea ecx, [ebp - 0x474]
call fcn.00408740
mov byte [ebp - 4], 5
lea eax, [ebp - 0x474]
push eax
call fcn.00427ba0
add esp, 4
movzx ecx, al
test ecx, ecx
jne 0x434795
mov dword [ebp - 0x2b8], 1
jmp 0x43479f
mov dword [ebp - 0x2b8], 0
mov dl, byte [ebp - 0x2b8]
mov byte [ebp - 0x268], dl
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x474]
call fcn.0041b9a0
mov ecx, 0x4a4814
call fcn.00421e80
push eax
call fcn.004013f0
add esp, 4
test eax, eax
jne 0x434807
mov ecx, 0x4a4814
call fcn.00421e80
mov dword [ebp - 0x338], eax
mov ecx, 0x4a4874
call fcn.00421e80
mov dword [ebp - 0x33c], eax
mov ecx, dword [ebp - 0x338]
push ecx
mov edx, dword [ebp - 0x33c]
push edx
call fcn.004014a0
add esp, 8
mov eax, dword [0x4a47d4]
push eax
call fcn.00433bc0
add esp, 4
movzx ecx, al
test ecx, ecx
je 0x434e21
mov ecx, 0x4a4844
call fcn.00421e80
mov dword [ebp - 0x28c], eax
mov edx, dword [ebp - 0x28c]
add edx, 1
mov dword [ebp - 0x340], edx
mov eax, dword [ebp - 0x28c]
mov cl, byte [eax]
mov byte [ebp - 0x269], cl
add dword [ebp - 0x28c], 1
cmp byte [ebp - 0x269], 0
jne 0x43483f
mov edx, dword [ebp - 0x28c]
sub edx, dword [ebp - 0x340]
mov dword [ebp - 0x344], edx
push 4
push 0x1000
mov eax, dword [ebp - 0x344]
add eax, 1
push eax
push 0
mov ecx, dword [0x4a47d8]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0
jne 0x434952
mov edx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov dword [ebp - 0x34c], edx
xor eax, eax
mov byte [ebp - 0x26a], al
lea ecx, [ebp - 0x6f4]
push ecx
lea ecx, [ebp - 0x26a]
call fcn.004315b0
mov ecx, eax
call fcn.00431470
mov dword [ebp - 0x348], eax
mov edx, dword [ebp - 0x348]
push edx
mov eax, dword [ebp - 0x34c]
push eax
call fcn.00430850
add esp, 8
mov dword [ebp - 0x350], eax
push 0x430d10
mov ecx, dword [ebp - 0x350]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
nop
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x4a47d8]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov dword [ebp - 0x354], 1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
call fcn.0041b1e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x238]
call fcn.0041b200
mov eax, dword [ebp - 0x354]
jmp 0x4353cb
mov ecx, 0x4a4844
call fcn.00421e80
mov dword [ebp - 0x290], eax
mov edx, dword [ebp - 0x290]
add edx, 1
mov dword [ebp - 0x358], edx
mov eax, dword [ebp - 0x290]
mov cl, byte [eax]
mov byte [ebp - 0x26b], cl
add dword [ebp - 0x290], 1
cmp byte [ebp - 0x26b], 0
jne 0x434971
mov edx, dword [ebp - 0x290]
sub edx, dword [ebp - 0x358]
mov dword [ebp - 0x35c], edx
mov ecx, 0x4a4844
call fcn.00421e80
mov dword [ebp - 0x360], eax
mov eax, dword [0x4a47d8]
mov dword [ebp - 0x364], eax
push 0
mov ecx, dword [ebp - 0x35c]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x360]
push edx
mov eax, dword [ebp - 0x264]
push eax
mov ecx, dword [ebp - 0x364]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x434ab5
mov edx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov dword [ebp - 0x36c], edx
xor eax, eax
mov byte [ebp - 0x26c], al
lea ecx, [ebp - 0x728]
push ecx
lea ecx, [ebp - 0x26c]
call fcn.004315e0
mov ecx, eax
call fcn.00431490
mov dword [ebp - 0x368], eax
mov edx, dword [ebp - 0x368]
push edx
mov eax, dword [ebp - 0x36c]
push eax
call fcn.00430850
add esp, 8
mov dword [ebp - 0x370], eax
push 0x430d10
mov ecx, dword [ebp - 0x370]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
nop
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x8000
push 0
mov ecx, dword [ebp - 0x264]
push ecx
mov edx, dword [0x4a47d8]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov eax, dword [0x4a47d8]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov dword [ebp - 0x374], 1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
call fcn.0041b1e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x238]
call fcn.0041b200
mov eax, dword [ebp - 0x374]
jmp 0x4353cb
xor ecx, ecx
mov byte [ebp - 0x26d], cl
lea edx, [ebp - 0x5d8]
push edx
lea ecx, [ebp - 0x26d]
call fcn.00431610
mov ecx, eax
call fcn.00431510
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0
jne 0x434bb9
mov eax, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov dword [ebp - 0x37c], eax
xor ecx, ecx
mov byte [ebp - 0x26e], cl
lea edx, [ebp - 0x674]
push edx
lea ecx, [ebp - 0x26e]
call fcn.00431640
mov ecx, eax
call fcn.00431410
mov dword [ebp - 0x378], eax
mov eax, dword [ebp - 0x378]
push eax
mov ecx, dword [ebp - 0x37c]
push ecx
call fcn.00430850
add esp, 8
mov dword [ebp - 0x380], eax
push 0x430d10
mov ecx, dword [ebp - 0x380]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
nop
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x8000
push 0
mov edx, dword [ebp - 0x264]
push edx
mov eax, dword [0x4a47d8]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov ecx, dword [0x4a47d8]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov dword [ebp - 0x384], 1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
call fcn.0041b1e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x238]
call fcn.0041b200
mov eax, dword [ebp - 0x384]
jmp 0x4353cb
xor edx, edx
mov byte [ebp - 0x26f], dl
lea eax, [ebp - 0x49c]
push eax
lea ecx, [ebp - 0x26f]
call fcn.00431670
mov ecx, eax
call fcn.004314f0
push eax
mov ecx, dword [ebp - 0x2bc]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0
jne 0x434cc5
mov edx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov dword [ebp - 0x38c], edx
xor eax, eax
mov byte [ebp - 0x270], al
lea ecx, [ebp - 0x6c4]
push ecx
lea ecx, [ebp - 0x270]
call fcn.004316b0
mov ecx, eax
call fcn.00431430
mov dword [ebp - 0x388], eax
mov edx, dword [ebp - 0x388]
push edx
mov eax, dword [ebp - 0x38c]
push eax
call fcn.00430850
add esp, 8
mov dword [ebp - 0x390], eax
push 0x430d10
mov ecx, dword [ebp - 0x390]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
nop
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x8000
push 0
mov ecx, dword [ebp - 0x264]
push ecx
mov edx, dword [0x4a47d8]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov eax, dword [0x4a47d8]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov dword [ebp - 0x394], 1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
call fcn.0041b1e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x238]
call fcn.0041b200
mov eax, dword [ebp - 0x394]
jmp 0x4353cb
push 0
push 0
mov ecx, dword [ebp - 0x264]
push ecx
mov edx, dword [ebp - 0x2c0]
push edx
push 0
push 0
mov eax, dword [0x4a47d8]
push eax
call dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0
jne 0x434dc5
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov dword [ebp - 0x39c], ecx
xor edx, edx
mov byte [ebp - 0x271], dl
lea eax, [ebp - 0x64c]
push eax
lea ecx, [ebp - 0x271]
call fcn.004316e0
mov ecx, eax
call fcn.004313f0
mov dword [ebp - 0x398], eax
mov ecx, dword [ebp - 0x398]
push ecx
mov edx, dword [ebp - 0x39c]
push edx
call fcn.00430850
add esp, 8
mov dword [ebp - 0x3a0], eax
push 0x430d10
mov ecx, dword [ebp - 0x3a0]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
nop
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x8000
push 0
mov eax, dword [ebp - 0x264]
push eax
mov ecx, dword [0x4a47d8]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov edx, dword [0x4a47d8]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov dword [ebp - 0x3a4], 1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
call fcn.0041b1e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x238]
call fcn.0041b200
mov eax, dword [ebp - 0x3a4]
jmp 0x4353cb
push 0xffffffffffffffff
mov eax, dword [ebp - 0x2a8]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0x8000
push 0
mov ecx, dword [ebp - 0x264]
push ecx
mov edx, dword [0x4a47d8]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov eax, dword [ebp - 0x2a8]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x4a47d8]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x4a4814
call fcn.00421e80
push eax
call fcn.00401620
add esp, 4
jmp 0x435143
lea edx, [ebp - 0x258]
push edx
call fcn.00433d00
add esp, 4
mov dword [ebp - 0x3a8], 3
lea eax, [ebp - 0x3a8]
push eax
lea ecx, [ebp - 0x21c]
call fcn.00430810
nop
mov byte [ebp - 0x299], 0
xor ecx, ecx
mov byte [ebp - 0x272], cl
lea edx, [ebp - 0x5f4]
push edx
lea ecx, [ebp - 0x272]
call fcn.00431710
mov ecx, eax
call fcn.00431510
mov dword [ebp - 0x3ac], eax
mov eax, dword [0x4a47d4]
mov dword [ebp - 0x3b0], eax
mov ecx, dword [ebp - 0x3ac]
push ecx
mov edx, dword [ebp - 0x3b0]
push edx
call fcn.00432240
add esp, 8
movzx eax, al
test eax, eax
jne 0x435143
mov ecx, 0x4a4814
call fcn.00421e80
push eax
call fcn.004013f0
add esp, 4
test eax, eax
jne 0x434ef4
mov ecx, 0x4a4814
call fcn.00421e80
mov dword [ebp - 0x3b4], eax
mov ecx, 0x4a4874
call fcn.00421e80
mov dword [ebp - 0x3b8], eax
mov ecx, dword [ebp - 0x3b4]
push ecx
mov edx, dword [ebp - 0x3b8]
push edx
call fcn.004014a0
add esp, 8
mov eax, dword [0x4a47d4]
push eax
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [0x4a47d8], eax
mov ecx, 0x4a4844
call fcn.00421e80
mov dword [ebp - 0x294], eax
mov ecx, dword [ebp - 0x294]
add ecx, 1
mov dword [ebp - 0x3bc], ecx
mov edx, dword [ebp - 0x294]
mov al, byte [edx]
mov byte [ebp - 0x273], al
add dword [ebp - 0x294], 1
cmp byte [ebp - 0x273], 0
jne 0x434f2b
mov ecx, dword [ebp - 0x294]
sub ecx, dword [ebp - 0x3bc]
mov dword [ebp - 0x3c0], ecx
push 4
push 0x1000
mov edx, dword [ebp - 0x3c0]
add edx, 1
push edx
push 0
mov eax, dword [0x4a47d8]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x2a0], eax
mov ecx, 0x4a4844
call fcn.00421e80
mov dword [ebp - 0x298], eax
mov ecx, dword [ebp - 0x298]
add ecx, 1
mov dword [ebp - 0x3c4], ecx
mov edx, dword [ebp - 0x298]
mov al, byte [edx]
mov byte [ebp - 0x274], al
add dword [ebp - 0x298], 1
cmp byte [ebp - 0x274], 0
jne 0x434f9f
mov ecx, dword [ebp - 0x298]
sub ecx, dword [ebp - 0x3c4]
mov dword [ebp - 0x3c8], ecx
mov ecx, 0x4a4844
call fcn.00421e80
mov dword [ebp - 0x3cc], eax
mov edx, dword [0x4a47d8]
mov dword [ebp - 0x3d0], edx
push 0
mov eax, dword [ebp - 0x3c8]
add eax, 1
push eax
mov ecx, dword [ebp - 0x3cc]
push ecx
mov edx, dword [ebp - 0x2a0]
push edx
mov eax, dword [ebp - 0x3d0]
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
nop
xor ecx, ecx
mov byte [ebp - 0x275], cl
lea edx, [ebp - 0x610]
push edx
lea ecx, [ebp - 0x275]
call fcn.00431740
mov ecx, eax
call fcn.00431510
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [ebp - 0x3d4], eax
xor eax, eax
mov byte [ebp - 0x276], al
lea ecx, [ebp - 0x4ac]
push ecx
lea ecx, [ebp - 0x276]
call fcn.00431880
mov ecx, eax
call fcn.004314f0
push eax
mov edx, dword [ebp - 0x3d4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3d8], eax
push 0
push 0
mov eax, dword [ebp - 0x2a0]
push eax
mov ecx, dword [ebp - 0x3d8]
push ecx
push 0
push 0
mov edx, dword [0x4a47d8]
push edx
call dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov dword [ebp - 0x2c4], eax
push 0xffffffffffffffff
mov eax, dword [ebp - 0x2c4]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0x8000
push 0
mov ecx, dword [ebp - 0x2a0]
push ecx
mov edx, dword [0x4a47d8]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov eax, dword [ebp - 0x2c4]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x4a47d8]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edx, [ebp - 0x260]
push edx
call fcn.00433d00
add esp, 4
lea eax, [ebp - 0x258]
push eax
lea ecx, [ebp - 0x260]
push ecx
lea edx, [ebp - 0x42c]
push edx
call fcn.00430ba0
add esp, 0xc
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.00430cd0
add esp, 8
lea ecx, [ebp - 0x21c]
push ecx
lea edx, [ebp - 0x220]
push edx
call fcn.00430c90
add esp, 8
movzx eax, al
test eax, eax
je 0x43513e
jmp 0x435143
jmp 0x434e54
jmp 0x435226
mov ecx, 0x4a4814
call fcn.00421e80
push eax
call fcn.00401620
add esp, 4
xor ecx, ecx
mov byte [ebp - 0x277], cl
lea edx, [ebp - 0x4bc]
push edx
lea ecx, [ebp - 0x277]
call fcn.004318c0
mov ecx, eax
call fcn.004314f0
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
add esp, 4
xor eax, eax
mov byte [ebp - 0x278], al
lea ecx, [ebp - 0x558]
push ecx
lea ecx, [ebp - 0x278]
call fcn.00431900
mov ecx, eax
call fcn.00431390
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
add esp, 4
mov edx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [ebp - 0x3e8], edx
xor eax, eax
mov byte [ebp - 0x279], al
lea ecx, [ebp - 0x768]
push ecx
lea ecx, [ebp - 0x279]
call fcn.00431950
mov ecx, eax
call fcn.004314b0
mov dword [ebp - 0x3e4], eax
mov edx, dword [ebp - 0x3e4]
push edx
mov eax, dword [ebp - 0x3e8]
push eax
call fcn.00430850
add esp, 8
mov dword [ebp - 0x3ec], eax
push 0x430d10
mov ecx, dword [ebp - 0x3ec]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
nop
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
xor ecx, ecx
mov byte [ebp - 0x27a], cl
lea edx, [ebp - 0x528]
push edx
lea ecx, [ebp - 0x27a]
call fcn.00431980
mov ecx, eax
call fcn.00431330
mov dword [ebp - 0x40c], eax
mov eax, dword [0x4a47d4]
mov dword [ebp - 0x3f4], eax
mov ecx, dword [ebp - 0x40c]
push ecx
mov edx, dword [ebp - 0x3f4]
push edx
call fcn.00432240
add esp, 8
movzx eax, al
test eax, eax
jne 0x435357
mov ecx, 0x4a4814
call fcn.00421e80
push eax
call fcn.00401620
add esp, 4
xor ecx, ecx
mov byte [ebp - 0x27b], cl
lea edx, [ebp - 0x4cc]
push edx
lea ecx, [ebp - 0x27b]
call fcn.004319c0
mov ecx, eax
call fcn.004314f0
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
add esp, 4
xor eax, eax
mov byte [ebp - 0x27c], al
lea ecx, [ebp - 0x570]
push ecx
lea ecx, [ebp - 0x27c]
call fcn.00431a00
mov ecx, eax
call fcn.00431390
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
add esp, 4
mov edx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [ebp - 0x3fc], edx
xor eax, eax
mov byte [ebp - 0x27d], al
lea ecx, [ebp - 0x7a8]
push ecx
lea ecx, [ebp - 0x27d]
call fcn.00431a50
mov ecx, eax
call fcn.004314b0
mov dword [ebp - 0x3f8], eax
mov edx, dword [ebp - 0x3f8]
push edx
mov eax, dword [ebp - 0x3fc]
push eax
call fcn.00430850
add esp, 8
mov dword [ebp - 0x400], eax
push 0x430d10
mov ecx, dword [ebp - 0x400]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
nop
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, 0x4a4814
call fcn.00421e80
push eax
call fcn.00401620
add esp, 4
xor ecx, ecx
mov byte [ebp - 0x27e], cl
lea edx, [ebp - 0x62c]
push edx
lea ecx, [ebp - 0x27e]
call fcn.00431a80
mov ecx, eax
call fcn.004313d0
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
add esp, 4
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00486b00
mov esp, ebp
pop ebp
ret