Function at 0x404990
Capabilities:
Create thread
Enumerate gui resources
Execute command
Get disk information
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4434ab
mov eax, dword fs:[0]
push eax
push ecx
push ebx
sub esp, 0x2c0
mov eax, dword [0x45c080]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, 0x46310d
call fcn.00442efd
push 0x4e3
call dword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
push str.title_Umaru_Helper
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movss xmm0, dword [0x44ef8c]
lea ecx, [ebp - 0xa8]
add esp, 4
movss dword [ebp - 0x248], xmm0
push str.config.cfg
call fcn.004079e0
push 0xb8
lea eax, [ebp - 0x228]
mov dword [ebp - 4], 0
push 0
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x228]
call fcn.004074f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x228]
mov eax, dword [ebp - 0x228]
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::operator__void_const]
test al, al
je 0x404a6c
lea ecx, [ebp - 0xa8]
call fcn.00401f10
xorps xmm0, xmm0
lea ecx, [ebp - 0x244]
push str.config.cfg
movlpd qword [ebp - 0x34], xmm0
call fcn.004079e0
lea edx, [ebp - 0x244]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x34]
call fcn.004019e0
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x230]
cmp ecx, 0xf
jbe 0x404ad6
mov edx, dword [ebp - 0x244]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404acc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x404acc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00441d49
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x58], 0
movups xmmword [ebp - 0x68], xmm0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
push str.license
lea ecx, [ebp - 0x244]
mov byte [ebp - 4], 5
call fcn.004079e0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x34]
call fcn.0040a0f0
mov esi, dword [ebp - 0x254]
cmp byte [esi + 0xd], 0
jne 0x404b41
lea eax, [esi + 0x10]
push eax
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x34]
call fcn.0040a400
test al, al
jne 0x404b41
mov eax, dword [ebp - 0x34]
jmp 0x404b46
mov eax, dword [ebp - 0x34]
mov esi, eax
mov ecx, dword [ebp - 0x230]
cmp esi, eax
setne al
mov byte [ebp - 0x229], al
cmp ecx, 0xf
jbe 0x404b91
mov edx, dword [ebp - 0x244]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404b81
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405067
push ecx
push edx
call fcn.00441d49
mov al, byte [ebp - 0x229]
add esp, 8
test al, al
je 0x404d0b
push str.license
lea ecx, [ebp - 0x244]
call fcn.004079e0
lea eax, [ebp - 0x244]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x34]
call fcn.00407740
lea ecx, [ebp - 0x68]
cmp ecx, eax
je 0x404bd8
cmp dword [eax + 0x14], 0xf
mov ecx, dword [eax + 0x10]
jbe 0x404bce
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x68]
call fcn.00407f60
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x230]
cmp ecx, 0xf
jbe 0x404c18
mov edx, dword [ebp - 0x244]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404c0e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x404c0e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00441d49
add esp, 8
push str.clsuw23wg0015ns01aahs2e14
lea ecx, [ebp - 0x244]
call fcn.004079e0
lea eax, [ebp - 0x244]
mov byte [ebp - 4], 7
push eax
call fcn.00423c3d
mov byte [ebp - 4], 5
add esp, 4
mov ecx, dword [ebp - 0x230]
cmp ecx, 0xf
jbe 0x404c7b
mov edx, dword [ebp - 0x244]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404c71
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x404c71
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00441d49
add esp, 8
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x170]
push eax
push 0
push 0
push 0x44eaf4
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
je 0x405d8f
mov edx, dword [ebp - 0x170]
lea ecx, [ebp - 0x244]
call fcn.004085e0
lea eax, [ebp - 0x244]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.0041d215
mov byte [ebp - 4], 5
add esp, 8
mov ecx, dword [ebp - 0x230]
cmp ecx, 0xf
jbe 0x404d2c
mov edx, dword [ebp - 0x244]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404cff
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x404cff
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00441d49
add esp, 8
jmp 0x404d2c
push str.Enter_your_license:
push dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00408770
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea edx, [ebp - 0x68]
add esp, 8
call fcn.00408c30
push str.activeKey
lea ecx, [ebp - 0x244]
call fcn.004079e0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x34]
call fcn.0040a0f0
mov esi, dword [ebp - 0x254]
cmp byte [esi + 0xd], 0
jne 0x404d7a
lea eax, [esi + 0x10]
push eax
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x34]
call fcn.0040a400
test al, al
jne 0x404d7a
mov eax, dword [ebp - 0x34]
jmp 0x404d7f
mov eax, dword [ebp - 0x34]
mov esi, eax
mov ecx, dword [ebp - 0x230]
cmp esi, eax
setne al
mov byte [ebp - 0x229], al
cmp ecx, 0xf
jbe 0x404dca
mov edx, dword [ebp - 0x244]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404dba
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405067
push ecx
push edx
call fcn.00441d49
mov al, byte [ebp - 0x229]
add esp, 8
test al, al
je 0x404e52
push str.activeKey
lea ecx, [ebp - 0x244]
call fcn.004079e0
lea eax, [ebp - 0x244]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x34]
call fcn.00407740
cmp dword [eax + 0x14], 0xf
jbe 0x404dfd
mov eax, dword [eax]
movsx eax, byte [eax]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov byte [ebp - 4], 5
add esp, 4
mov ecx, dword [ebp - 0x230]
mov byte [ebp - 0x229], al
cmp ecx, 0xf
jbe 0x404e5e
mov edx, dword [ebp - 0x244]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404e46
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x404e46
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00441d49
add esp, 8
jmp 0x404e5e
mov al, byte [ebp - 0x22a]
mov byte [ebp - 0x229], al
push str.speedMultiplier
lea ecx, [ebp - 0x244]
call fcn.004079e0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x34]
call fcn.0040a0f0
mov esi, dword [ebp - 0x254]
cmp byte [esi + 0xd], 0
jne 0x404eac
lea eax, [esi + 0x10]
push eax
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x34]
call fcn.0040a400
test al, al
jne 0x404eac
mov eax, dword [ebp - 0x34]
jmp 0x404eb1
mov eax, dword [ebp - 0x34]
mov esi, eax
mov ecx, dword [ebp - 0x230]
cmp esi, eax
setne al
mov byte [ebp - 0x22a], al
cmp ecx, 0xf
jbe 0x404efc
mov edx, dword [ebp - 0x244]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404eec
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405067
push ecx
push edx
call fcn.00441d49
mov al, byte [ebp - 0x22a]
add esp, 8
test al, al
je 0x404fd7
push str.speedMultiplier
lea ecx, [ebp - 0x244]
call fcn.004079e0
lea eax, [ebp - 0x244]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x34]
call fcn.00407740
mov edi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov esi, eax
call edi
cmp dword [esi + 0x14], 0xf
mov dword [ebp - 0x16c], eax
jbe 0x404f3f
mov esi, dword [esi]
mov dword [eax], 0
lea eax, [ebp - 0x170]
push eax
push esi
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtof]
add esp, 8
fstp dword [ebp - 0x250]
cmp esi, dword [ebp - 0x170]
jne 0x404f6f
push str.invalid_stof_argument
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xinvalid_argument_char_const__]
mov eax, dword [ebp - 0x16c]
cmp dword [eax], 0x22
jne 0x404f85
push str.stof_argument_out_of_range
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const__]
movss xmm0, dword [ebp - 0x250]
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x230]
movss dword [ebp - 0x248], xmm0
cmp ecx, 0xf
jbe 0x404fdd
mov edx, dword [ebp - 0x244]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404fcb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x404fcb
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00441d49
add esp, 8
jmp 0x404fdd
mov edi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
push str.scanDelay
lea ecx, [ebp - 0x244]
call fcn.004079e0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x34]
call fcn.0040a0f0
mov esi, dword [ebp - 0x254]
cmp byte [esi + 0xd], 0
jne 0x40502b
lea eax, [esi + 0x10]
push eax
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x34]
call fcn.0040a400
test al, al
jne 0x40502b
mov eax, dword [ebp - 0x34]
jmp 0x405030
mov eax, dword [ebp - 0x34]
mov esi, eax
mov ecx, dword [ebp - 0x230]
cmp esi, eax
setne al
mov byte [ebp - 0x22a], al
cmp ecx, 0xf
jbe 0x40507d
mov edx, dword [ebp - 0x244]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40506d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40506d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00441d49
mov al, byte [ebp - 0x22a]
add esp, 8
test al, al
je 0x40513a
push str.scanDelay
lea ecx, [ebp - 0x244]
call fcn.004079e0
lea eax, [ebp - 0x244]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x34]
call fcn.00407740
mov esi, eax
call edi
cmp dword [esi + 0x14], 0xf
mov edi, eax
jbe 0x4050b6
mov esi, dword [esi]
push 0xa
lea eax, [ebp - 0x16c]
mov dword [edi], 0
push eax
push esi
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
add esp, 0xc
mov dword [ebp - 0x170], eax
cmp esi, dword [ebp - 0x16c]
jne 0x4050e8
push str.invalid_stoi_argument
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xinvalid_argument_char_const__]
cmp dword [edi], 0x22
jne 0x4050f8
push str.stoi_argument_out_of_range
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const__]
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x230]
cmp ecx, 0xf
jbe 0x405143
mov edx, dword [ebp - 0x244]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40512e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40512e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00441d49
add esp, 8
jmp 0x405143
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x170], eax
push str.clsuw23wg0015ns01aahs2e14
lea ecx, [ebp - 0x244]
mov byte [ebp - 4], 0xc
call fcn.004079e0
lea eax, [ebp - 0x244]
mov byte [ebp - 4], 0xd
push eax
call fcn.00423c3d
mov byte [ebp - 4], 0xc
add esp, 4
mov ecx, dword [ebp - 0x230]
cmp ecx, 0xf
jbe 0x4051aa
mov edx, dword [ebp - 0x244]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4051a0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4051a0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00441d49
add esp, 8
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x16c]
push eax
push 0
push 0
push 0x44eaf4
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
je 0x405db0
mov edx, dword [ebp - 0x16c]
lea ecx, [ebp - 0x244]
call fcn.004085e0
lea eax, [ebp - 0x244]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.0041d215
mov byte [ebp - 4], 0xc
add esp, 8
mov ecx, dword [ebp - 0x230]
cmp ecx, 0xf
jbe 0x405238
mov edx, dword [ebp - 0x244]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40522e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40522e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00441d49
add esp, 8
push str.Authenticated_successfully
push dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00408770
add esp, 8
mov ecx, eax
push 0x408bf0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push str.license
lea ecx, [ebp - 0x244]
call fcn.004079e0
lea eax, [ebp - 0x244]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x34]
call fcn.00407740
mov ecx, eax
lea eax, [ebp - 0x68]
cmp ecx, eax
je 0x405295
cmp dword [ebp - 0x54], 0xf
push dword [ebp - 0x58]
cmova eax, dword [ebp - 0x68]
push eax
call fcn.00407f60
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x230]
cmp ecx, 0xf
jbe 0x4052d5
mov edx, dword [ebp - 0x244]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4052cb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4052cb
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00441d49
add esp, 8
push str.config.cfg
lea ecx, [ebp - 0x244]
call fcn.004079e0
push 0xb0
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0x10
push 0
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x168]
call fcn.00405f80
mov byte [ebp - 4], 0x11
mov esi, dword [ebp - 0x34]
mov esi, dword [esi]
nop word [eax + eax]
cmp byte [esi + 0xd], 0
jne 0x4053c4
cmp dword [esi + 0x24], 0xf
lea eax, [esi + 0x10]
mov ecx, dword [eax + 0x10]
lea edi, [eax + 0x18]
jbe 0x40533b
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0x168]
push eax
call fcn.00409ba0
add esp, 0xc
push 0x44eab0
push eax
call fcn.00408770
mov ecx, dword [edi + 0x10]
add esp, 8
cmp dword [edi + 0x14], 0xf
jbe 0x405365
mov edi, dword [edi]
push ecx
push edi
push eax
call fcn.00409ba0
add esp, 0xc
push 0x44eaac
push eax
call fcn.00408770
mov eax, dword [esi + 8]
add esp, 8
cmp byte [eax + 0xd], 0
je 0x4053a7
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x4053a0
cmp esi, dword [eax + 8]
jne 0x4053a0
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x405390
mov esi, eax
jmp 0x405320
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
jne 0x405320
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
je 0x4053b5
jmp 0x405320
mov eax, dword [ebp - 0x168]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x168]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x16c], eax
lea ecx, [ebp - 0x164]
call fcn.00407400
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x230]
cmp ecx, 0xf
jbe 0x40544e
mov edx, dword [ebp - 0x244]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x405444
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x405444
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00441d49
add esp, 8
push 0x44ebd0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push str._____________________________________________________________________n
call fcn.00401320
push 0x44ec20
call fcn.00401320
push str.___________________________________________________________n
call fcn.00401320
push str.________________________________________________n
call fcn.00401320
push str._____________________________________________n
call fcn.00401320
push str.__________________________________.____________n
call fcn.00401320
push 0x44ed88
call fcn.00401320
push str.___________________________________________________________________n
call fcn.00401320
movsx eax, byte [ebp - 0x229]
push eax
push str.Fly_hotkey:__c_n
call fcn.00401320
movss xmm0, dword [ebp - 0x248]
add esp, 0x24
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.Fly_speed:__.2f_n
call fcn.00401320
push str.Range_:_36_n
call fcn.00401320
push 0x44ee48
call fcn.00401320
push str.If_aim_not_work_fast__reduce_scan_delay_in_config_standart:15__n
call fcn.00401320
push str.Enjoy__n
call fcn.00401320
add esp, 0x1c
push 0
push 0x404890
call dword [sym.imp.USER32.dll_EnumWindows]
push dword [0x462588]
movq xmm0, qword [str.Trove.exe]
mov ax, word [0x44eb24]
push 0
push 0x38
movq qword [ebp - 0x28], xmm0
mov word [ebp - 0x20], ax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
mov dword [ebp - 0x250], edi
test edi, edi
jne 0x40565e
push str.Cant_open_Trove.
push dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.00408770
add esp, 8
mov ecx, eax
push 0x408bf0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [ebp - 0x54]
cmp ecx, 0xf
jbe 0x40559b
mov edx, dword [ebp - 0x68]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x405591
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40562b
push ecx
push edx
call fcn.00441d49
add esp, 8
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
call fcn.00407870
mov eax, dword [ebp - 0x228]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ifstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x228]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [ebp + ecx - 0x22c], eax
lea ecx, [ebp - 0x218]
call fcn.00407400
lea ecx, [ebp - 0x210]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_istream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x1b8]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov ecx, dword [ebp - 0x94]
cmp ecx, 0xf
jbe 0x40563b
mov edx, dword [ebp - 0xa8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x405631
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x405631
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00441d49
add esp, 8
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.004419a5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
xorps xmm0, xmm0
mov dword [ebp - 0x48], 0
movq qword [ebp - 0x50], xmm0
lea ecx, [ebp - 0x50]
push 4
mov dword [ebp - 0x270], 0x11d943c
mov dword [ebp - 0x26c], 0x104
mov dword [ebp - 0x268], 0x38
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
call fcn.004097e0
push 0x10
lea eax, [ebp - 0x270]
push eax
push dword [ebp - 0x50]
call sub.VCRUNTIME140.dll_memmove
mov ecx, dword [ebp - 0x50]
lea eax, [ecx + 0x10]
mov dword [ebp - 0x4c], eax
mov byte [ebp - 4], 0x12
mov esi, esp
mov edx, dword [0x462588]
sub eax, ecx
mov dword [ebp - 0x16c], eax
sar eax, 2
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x24c], esi
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [ebp - 0x260], eax
test eax, eax
je 0x405748
cmp eax, 0x3fffffff
ja 0x405dd1
push eax
mov ecx, esi
call fcn.004097e0
push dword [ebp - 0x16c]
mov esi, dword [esi]
push dword [ebp - 0x50]
push esi
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x260]
add esp, 0xc
mov ecx, dword [ebp - 0x24c]
mov edx, dword [ebp - 0x2c]
lea eax, [esi + eax*4]
mov dword [ecx + 4], eax
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
call fcn.00402430
push 0x18
mov esi, eax
call fcn.004419b3
mov ecx, eax
add esp, 0x14
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x38], ecx
mov dword [ecx], eax
lea eax, [ebp - 0x28]
mov dword [ecx + 4], esi
mov dword [ecx + 8], eax
mov eax, dword [0x462588]
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], edi
mov dword [ecx + 0x14], 0x403830
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x13
mov esi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
push eax
push 0
push ecx
push 0x40a4e0
push 0
push 0
call esi
add esp, 0x18
mov dword [ebp - 0x90], eax
test eax, eax
je 0x405d2e
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x14
push eax
push ecx
lea eax, [ebp - 0x250]
push eax
push 0x403720
lea ecx, [ebp - 0xb0]
call fcn.00408e30
push 0x14
mov byte [ebp - 4], 0x15
call fcn.004419b3
movss xmm0, dword [ebp - 0x248]
mov ecx, eax
mov al, byte [ebp - 0x229]
add esp, 4
mov dword [ebp - 0x38], ecx
movss dword [ecx], xmm0
mov byte [ecx + 4], al
mov eax, dword [0x462588]
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], edi
mov dword [ecx + 0x10], 0x403b80
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 0x16
push eax
push 0
push ecx
push 0x40a5d0
push 0
push 0
call esi
add esp, 0x18
mov dword [ebp - 0x88], eax
test eax, eax
je 0x405d1c
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x17
push eax
push ecx
lea eax, [ebp - 0x250]
push eax
push 0x403a70
lea ecx, [ebp - 0xb8]
call fcn.00408e30
nop dword [eax + eax]
xorps xmm0, xmm0
mov dword [ebp - 0x6c], 0
movq qword [ebp - 0x74], xmm0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
movq qword [ebp - 0x44], xmm0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
mov byte [ebp - 4], 0x1a
push 0x462598
mov dword [ebp - 0x38], 0x462598
call dword [sym.imp.MSVCP140.dll__Mtx_lock]
add esp, 4
test eax, eax
je 0x4058ca
push 5
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
cmp dword [0x4625c4], 0x7fffffff
jne 0x4058e8
push 6
mov dword [0x4625c4], 0x7ffffffe
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x74]
mov eax, dword [0x4625d0]
push eax
push dword [eax]
call fcn.00408ef0
mov eax, dword [0x4625c8]
lea ecx, [ebp - 0x44]
push eax
push dword [eax]
call fcn.00408ef0
push 0x462598
mov byte [ebp - 4], 0x1a
call dword [sym.imp.MSVCP140.dll__Mtx_unlock]
lea eax, [ebp - 0x74]
mov ecx, edi
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.00403450
mov esi, eax
add esp, 0xc
test esi, esi
je 0x405c7b
mov edx, dword [0x462588]
lea eax, [ebp - 0x2d0]
push eax
mov ecx, edi
call fcn.00403190
add esp, 4
mov edx, esi
mov ecx, edi
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x254], eax
lea eax, [ebp - 0x270]
push eax
movq qword [ebp - 0x25c], xmm0
call fcn.004032f0
add esp, 4
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
movq qword [ebp - 0x80], xmm0
movss xmm0, dword [ebp - 0x80]
subss xmm0, dword [ebp - 0x25c]
movss xmm2, dword [ebp - 0x7c]
subss xmm2, dword [ebp - 0x258]
mov dword [ebp - 0x78], eax
movss xmm3, dword [ebp - 0x78]
subss xmm3, dword [ebp - 0x254]
movaps xmm1, xmm0
movss dword [ebp - 0x248], xmm0
mulss xmm1, xmm0
movaps xmm0, xmm2
mulss xmm0, xmm2
movss dword [ebp - 0x16c], xmm2
movss dword [ebp - 0x170], xmm3
addss xmm1, xmm0
movaps xmm0, xmm3
mulss xmm0, xmm3
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x4059f3
sqrtsd xmm0, xmm0
jmp 0x4059f8
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jnp 0x405a47
movss xmm0, dword [ebp - 0x248]
divss xmm0, xmm1
movss dword [ebp - 0x248], xmm0
movss xmm0, dword [ebp - 0x16c]
divss xmm0, xmm1
movss dword [ebp - 0x16c], xmm0
movss xmm0, dword [ebp - 0x170]
divss xmm0, xmm1
movss dword [ebp - 0x170], xmm0
mov eax, dword [0x462588]
sub esp, 0xc
mov edi, esp
mov dword [ebp - 0x288], 0x11dbc04
mov dword [ebp - 0x284], 8
mov ecx, edi
mov dword [ebp - 0x280], 0x28
mov dword [ebp - 0x27c], 0xc4
mov dword [ebp - 0x278], 0x54
mov dword [ebp - 0x274], 0x80
push 6
mov dword [ebp - 0x2c], eax
mov dword [edi], 0
mov dword [edi + 4], 0
mov dword [edi + 8], 0
call fcn.004097e0
mov esi, dword [edi]
lea eax, [ebp - 0x288]
push 0x18
push eax
push esi
call sub.VCRUNTIME140.dll_memmove
mov edx, dword [ebp - 0x2c]
lea eax, [esi + 0x18]
add esp, 0xc
mov dword [edi + 4], eax
mov edi, dword [ebp - 0x250]
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
call fcn.00402430
add esp, 4
mov dword [ebp - 0x2a0], 0x11dbc04
mov esi, esp
mov dword [ebp - 0x29c], 8
mov dword [ebp - 0x298], 0x28
mov ecx, esi
mov dword [ebp - 0x294], 0xc4
mov dword [ebp - 0x290], 0x54
mov dword [ebp - 0x28c], 0x84
mov dword [ebp - 0x260], eax
mov eax, dword [0x462588]
push 6
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x2c], esi
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
call fcn.004097e0
mov esi, dword [esi]
lea eax, [ebp - 0x2a0]
push 0x18
push eax
push esi
call sub.VCRUNTIME140.dll_memmove
mov ecx, dword [ebp - 0x2c]
lea eax, [esi + 0x18]
mov edx, dword [ebp - 0x24c]
add esp, 0xc
mov dword [ecx + 4], eax
lea eax, [ebp - 0x28]
push eax
mov ecx, edi
call fcn.00402430
add esp, 4
mov dword [ebp - 0x244], 0x11dbc04
mov esi, esp
mov dword [ebp - 0x240], 8
mov dword [ebp - 0x23c], 0x28
mov ecx, esi
mov dword [ebp - 0x238], 0xc4
mov dword [ebp - 0x234], 0x54
mov dword [ebp - 0x230], 0x88
mov dword [ebp - 0x38], eax
mov eax, dword [0x462588]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x2c], esi
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
push 6
call fcn.004097e0
mov esi, dword [esi]
lea eax, [ebp - 0x244]
push 0x18
push eax
push esi
call sub.VCRUNTIME140.dll_memmove
mov ecx, dword [ebp - 0x2c]
lea eax, [esi + 0x18]
mov edx, dword [ebp - 0x24c]
add esp, 0xc
mov dword [ecx + 4], eax
lea eax, [ebp - 0x28]
push eax
mov ecx, edi
call fcn.00402430
movss xmm0, dword [ebp - 0x248]
add esp, 0x10
mov esi, eax
movss dword [ebp - 0x2c], xmm0
lea eax, [ebp - 0x2c]
push 0
push 4
push eax
push dword [ebp - 0x260]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movss xmm0, dword [ebp - 0x16c]
lea eax, [ebp - 0x2c]
push 0
push 4
push eax
push dword [ebp - 0x38]
movss dword [ebp - 0x2c], xmm0
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movss xmm0, dword [ebp - 0x170]
lea eax, [ebp - 0x38]
push 0
push 4
push eax
push esi
push edi
movss dword [ebp - 0x38], xmm0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x44]
test ecx, ecx
je 0x405cd6
mov eax, dword [ebp - 0x3c]
sub eax, ecx
sar eax, 2
lea edx, [eax*4]
mov eax, ecx
cmp edx, 0x1000
jb 0x405cb7
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405d07
push edx
push ecx
call fcn.00441d49
add esp, 8
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x74]
test edx, edx
je 0x405860
mov ecx, dword [ebp - 0x6c]
mov eax, edx
sub ecx, edx
and ecx, 0xfffffffc
cmp ecx, 0x1000
jb 0x405d0d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x405d0d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00441d49
add esp, 8
jmp 0x405860
push 6
mov dword [ebp - 0x84], 0
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push 6
mov dword [ebp - 0x8c], 0
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
mov ebx, dword [ebp - 0x14]
push str.Failed_to_authenticate:
push dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.00408770
mov ecx, dword [ebp - 0x2a4]
add esp, 8
mov esi, eax
mov edx, dword [ecx]
mov edx, dword [edx + 4]
call edx
push eax
push esi
call fcn.00408770
add esp, 8
mov ecx, eax
push 0x408bf0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push str.failed_to_get_hwid
lea ecx, [ebp - 0x2b0]
call fcn.004015e0
push 0x458dfc
lea eax, [ebp - 0x2b0]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
push str.failed_to_get_hwid
lea ecx, [ebp - 0x2bc]
call fcn.004015e0
push 0x458dfc
lea eax, [ebp - 0x2bc]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
call fcn.004097c0
int3