Function at 0x4950a0
Capabilities:
Create thread
Encode data using xor
Hide graphical window
Log keystrokes via polling
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5fd4f0
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x318
mov eax, dword [0x686bb0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, 0x6d40c8
call fcn.00488770
push 0xf
push str.C:Godzilla.ini
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x19c], 0xf
call fcn.0049ac20
push 0xb8
lea eax, [ebp - 0x180]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
cmp dword [ebp - 0x19c], 0x10
lea eax, [ebp - 0x1b0]
lea ecx, [ebp - 0x180]
cmovae eax, dword [ebp - 0x1b0]
push eax
call fcn.00497c20
mov eax, dword [ebp - 0x180]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ifstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x180]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [ebp + ecx - 0x184], eax
lea ecx, [ebp - 0x180]
mov eax, dword [ebp - 0x180]
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::operator__void_const]
test al, al
mov eax, dword [ebp - 0x180]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ifstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x180]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [ebp + ecx - 0x184], eax
je 0x495250
mov dword [ebp - 4], 0
cmp dword [ebp - 0x124], 0
mov dword [ebp - method.std::basic_filebuf_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
je 0x495205
lea ecx, [ebp - 0x170]
call dword [sym.imp.MSVCP140.dll_protected:_char____thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const]
lea ecx, [ebp - 0x134]
cmp eax, ecx
jne 0x495205
push dword [ebp - 0x11c]
mov eax, dword [ebp - 0x120]
lea ecx, [ebp - 0x170]
push eax
push eax
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char___char___char__]
cmp byte [ebp - 0x128], 0
je 0x495219
lea ecx, [ebp - 0x170]
call fcn.00499fd0
lea ecx, [ebp - 0x170]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_istream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x110]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov byte [ebp - 0x181], 0
jmp 0x4952e0
mov dword [ebp - 4], 1
cmp dword [ebp - 0x124], 0
mov dword [ebp - method.std::basic_filebuf_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
je 0x49529a
lea ecx, [ebp - 0x170]
call dword [sym.imp.MSVCP140.dll_protected:_char____thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const]
lea ecx, [ebp - 0x134]
cmp eax, ecx
jne 0x49529a
push dword [ebp - 0x11c]
mov eax, dword [ebp - 0x120]
lea ecx, [ebp - 0x170]
push eax
push eax
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char___char___char__]
cmp byte [ebp - 0x128], 0
je 0x4952ae
lea ecx, [ebp - 0x170]
call fcn.00499fd0
lea ecx, [ebp - 0x170]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x168]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_istream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x110]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov byte [ebp - 0x181], 1
mov edx, dword [ebp - 0x19c]
cmp edx, 0x10
jb 0x49531c
mov ecx, dword [ebp - 0x1b0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x495312
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x495312
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005f7cf7
add esp, 8
cmp byte [ebp - 0x181], 0
je 0x4953bf
sub esp, 0x18
mov ecx, esp
push 0xf
push str.C:Godzilla.ini
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.0049ac20
lea ecx, [ebp - 0x58]
call fcn.004927f0
mov esi, dword [ebp - 0x48]
add esp, 0x18
mov edi, dword [ebp - 0x44]
xor ecx, ecx
mov edx, dword [ebp - 0x58]
test esi, esi
je 0x49538d
cmp edi, 0x10
setae byte [ebp - 0x181]
cmp byte [ebp - 0x181], 0
lea eax, [ebp - 0x58]
cmovne eax, edx
mov al, byte [eax + ecx]
mov byte [ecx + 0x6d4268], al
inc ecx
cmp ecx, esi
jb 0x495372
cmp edi, 0x10
jb 0x4953bf
lea ecx, [edi + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x4953b5
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4953b5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005f7cf7
add esp, 8
movaps xmm0, xmmword [0x677370]
push 0
mov dword [0x6d4250], 0x675610
movups xmmword [0x6d4254], xmm0
mov dword [ebp - 0xb4], 0x30
mov dword [ebp - 0xb0], 0x40
mov dword [ebp - 0xac], 0x4970a0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xa0], eax
xorps xmm0, xmm0
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x8c], str.HACK_LOADER
push eax
movups xmmword [ebp - 0x9c], xmm0
mov dword [ebp - 0x88], 0
call dword [sym.imp.USER32.dll_RegisterClassExA]
push 0
push dword [ebp - 0xa0]
push 0
push 0
push 5
push 5
push 0
push 0
push accept
push str.Hack_Loader
push dword [ebp - 0x8c]
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov esi, eax
push 0x20
mov dword [ebp - 0x1c4], esi
call dword [sym.imp.d3d9.dll_Direct3DCreate9]
mov ecx, eax
mov dword [0x6d40ac], ecx
test ecx, ecx
je 0x496fc6
push 0x6d40a4
push 0x6d4068
push 0x40
xorps xmm0, xmm0
mov dword [0x6d407c], 0
push esi
push 1
movlpd qword [0x6d4068], xmm0
movlpd qword [0x6d4074], xmm0
mov dword [0x6d4084], 0
movlpd qword [0x6d4094], xmm0
mov dword [0x6d4088], 1
mov dword [0x6d4080], 1
mov dword [0x6d4070], 0
mov dword [0x6d408c], 1
mov dword [0x6d4090], 0x50
mov dword [0x6d409c], 1
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x40]
test eax, eax
js 0x496fc0
push 0
push esi
call dword [sym.imp.USER32.dll_ShowWindow]
push esi
call dword [sym.imp.USER32.dll_UpdateWindow]
mov eax, dword [0x6d4050]
test eax, eax
je 0x495537
inc dword [eax + 0x374]
push dword [0x6d4048]
push 0x3c40
call fcn.004490d0
add esp, 8
test eax, eax
je 0x49555b
push 0
mov ecx, eax
call fcn.00447bd0
mov ecx, eax
jmp 0x49555d
xor ecx, ecx
mov eax, dword [0x6d4050]
test eax, eax
cmove eax, ecx
mov dword [0x6d4050], eax
call fcn.0044e600
mov eax, dword [0x6d4050]
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x18c], eax
or dword [eax + 8], 0x400
mov edx, dword [eax + 0x98]
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 0
call fcn.00470640
mov esi, eax
lea edi, [ebp - 0x2e0]
mov ecx, 0x1e
lea eax, [ebp - 0x2e0]
rep movsd dword es:[edi], dword [esi]
push eax
mov ecx, edx
mov dword [ebp - 0x2e0], 0x6bd458
mov dword [ebp - 0x2dc], 0xca64
mov dword [ebp - 0x2d0], 0x41a00000
call fcn.004708f0
lea ecx, [ebp - 0x140]
call fcn.00470640
mov esi, dword [ebp - 0x18c]
lea ecx, [ebp - 0x140]
mov dword [esi + 0x20], 0
mov dword [esi + 0x24], 0
call fcn.00470640
push ecx
mov ecx, dword [esi + 0x98]
call fcn.00470a90
test dword [esi + 8], 0x400
mov eax, dword [0x6d4050]
je 0x495635
mov dword [eax + 0x15a8], 0
mov dword [eax + 0x1684], 0x3f800000
xor ecx, ecx
call fcn.0046d520
mov eax, dword [0x6d4050]
movaps xmm0, xmmword [0x677250]
movups xmmword [eax + 0x1678], xmm0
movaps xmm0, xmmword [0x6773c0]
movups xmmword [eax + 0x16c8], xmm0
movaps xmm0, xmmword [0x6773c0]
movups xmmword [eax + 0x16d8], xmm0
movaps xmm0, xmmword [0x6773c0]
movups xmmword [eax + 0x16e8], xmm0
movaps xmm0, xmmword [0x677340]
movups xmmword [eax + 0x16f8], xmm0
movaps xmm0, xmmword [0x677340]
movups xmmword [eax + 0x1708], xmm0
movaps xmm0, xmmword [0x677340]
movups xmmword [eax + 0x1718], xmm0
movaps xmm0, xmmword [0x677340]
movups xmmword [eax + 0x1778], xmm0
movaps xmm0, xmmword [0x677340]
movups xmmword [eax + 0x17a8], xmm0
movaps xmm0, xmmword [0x677340]
movups xmmword [eax + 0x17b8], xmm0
movaps xmm0, xmmword [0x677340]
movups xmmword [eax + 0x17c8], xmm0
movaps xmm0, xmmword [0x677340]
movups xmmword [eax + 0x1868], xmm0
movaps xmm0, xmmword [0x6773a0]
movups xmmword [eax + 0x1878], xmm0
movaps xmm0, xmmword [0x677390]
movups xmmword [eax + 0x1888], xmm0
movaps xmm0, xmmword [0x677340]
movups xmmword [eax + 0x16a8], xmm0
mov dword [eax + 0x15a8], 0x40a00000
mov dword [eax + 0x15dc], 0x40c00000
mov dword [eax + 0x15ac], 0x40000000
mov dword [eax + 0x15b8], 0x3f000000
lea eax, [ebp - 0x84]
push eax
push 0x367f9
push 0x686c58
push dword [0x6d40a4]
mov dword [ebp - 0x84], 0
call dword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory]
mov ecx, dword [ebp - 0x1c4]
call fcn.004760b0
mov ecx, dword [0x6d40a4]
mov esi, dword [0x6d4050]
push ecx
mov dword [0x6d422c], ecx
or dword [esi + 0xc], 0x1008
mov dword [esi + 0xc8], str.imgui_impl_dx9
mov eax, dword [ecx]
call dword [eax + 4]
test dword [esi + 8], 0x400
je 0x4957d6
mov eax, dword [0x6d4050]
mov dword [eax + 0x156c], 0x475df0
mov dword [eax + 0x1570], 0x475ec0
mov dword [eax + 0x1574], 0x475f20
mov dword [eax + 0x1578], 0x475f70
mov dword [eax + 0x157c], 0x476090
xorps xmm0, xmm0
mov dword [ebp - 0x64], 0
movups xmmword [ebp - 0x7c], xmm0
movq qword [ebp - 0x6c], xmm0
nop dword [eax]
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x49581a
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [0x6d4224], 0
jne 0x495871
cmp dword [0x6d422c], 0
je 0x495871
call fcn.00475b70
test al, al
je 0x495871
mov edi, dword [0x6d4050]
mov esi, 1
cmp dword [edi + 0x1590], esi
jle 0x495871
nop dword [eax + eax]
mov eax, dword [edi + 0x1598]
mov eax, dword [eax + esi*4]
cmp dword [eax + 0x34], 0
jne 0x495868
push eax
call fcn.00475df0
add esp, 4
inc esi
cmp esi, dword [edi + 0x1590]
jl 0x495850
mov esi, dword [0x6d4050]
lea eax, [ebp - 0xc4]
push eax
push dword [0x6d4238]
mov dword [ebp - 0x188], esi
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [ebp - 0xbc]
sub eax, dword [ebp - 0xc4]
movd xmm1, eax
mov eax, dword [ebp - 0xb8]
sub eax, dword [ebp - 0xc0]
cmp byte [0x6cd6e3], 0
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esi + 0x10], xmm1
movss dword [esi + 0x14], xmm0
je 0x495917
mov esi, dword [0x6d4050]
mov ecx, dword [esi + 0x1584]
test ecx, ecx
jns 0x4958f5
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [esi + 0x1580]
call fcn.00465920
push 0
push 0x476920
push 0
push 0
mov dword [esi + 0x1580], 0
call dword [sym.imp.USER32.dll_EnumDisplayMonitors]
mov byte [0x6cd6e3], 0
lea eax, [ebp - 0x60]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edi, dword [ebp - 0x60]
mov ecx, edi
sub ecx, dword [0x6d4240]
mov esi, dword [ebp - 0x5c]
mov edx, esi
sbb edx, dword [0x6d4244]
call fcn.005f8c30
mov edx, dword [0x6d424c]
mov ecx, dword [0x6d4248]
cvtsd2ss xmm0, xmm0
movss dword [ebp - 0x190], xmm0
call fcn.005f8c30
movss xmm1, dword [ebp - 0x190]
cvtsd2ss xmm0, xmm0
mov eax, dword [ebp - 0x188]
push 0x11
divss xmm1, xmm0
movss dword [eax + 0x18], xmm1
mov dword [0x6d4240], edi
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
mov dword [0x6d4244], esi
call edi
mov esi, dword [ebp - 0x188]
shr eax, 0xf
and al, 1
push 0x10
mov byte [esi + 0x100], al
call edi
shr eax, 0xf
and al, 1
push 0x12
mov byte [esi + 0x101], al
call edi
shr eax, 0xf
and al, 1
mov byte [esi + 0x103], 0
mov byte [esi + 0x102], al
call fcn.004764e0
cmp byte [esi + 0xb8], 0
je 0x4959d3
or eax, 0xffffffff
jmp 0x4959de
mov eax, dword [0x6d4050]
mov eax, dword [eax + 0x1d88]
cmp dword [0x6cd894], eax
je 0x4959f0
mov dword [0x6cd894], eax
call fcn.004763b0
call fcn.004766a0
call fcn.0044d860
mov eax, dword [0x6d4050]
xor edx, edx
push 3
or dword [eax + 0x1b50], 2
mov dword [eax + 0x1b74], 0x43da8000
mov dword [eax + 0x1b78], 0x43b68000
mov dword [eax + 0x1b58], 1
cmp byte [0x6d404d], dl
je 0x49656d
mov ecx, str.GDZLOADER
call fcn.00453020
add esp, 4
test al, al
je 0x496c33
mov ecx, dword [0x6d4050]
mov eax, dword [ecx + 0x1ac4]
cmp dword [eax + 0x1cc], 0
movss xmm0, dword [eax + 0x40]
movss xmm1, dword [eax + 0x290]
subss xmm1, xmm0
je 0x495a7b
movss xmm1, dword [eax + 0x260]
subss xmm1, xmm0
mulss xmm1, dword [0x676fa8]
lea edx, [ebp - 0x238]
mov byte [eax + 0xb9], 1
mov eax, dword [ecx + 0x1ac4]
mov dword [ebp - 0x260], 0x3f800000
subss xmm1, dword [0x67706c]
mov dword [ebp - 0x25c], 0x3f800000
movss xmm0, dword [eax + 0x44]
subss xmm0, dword [eax + 0x88]
movss xmm2, dword [eax + 0x40]
subss xmm2, dword [eax + 0x84]
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x254], 0
addss xmm0, dword [0x67703c]
mov dword [ebp - 0x238], 0x43020000
addss xmm2, xmm1
mov dword [ebp - 0x234], 0x42c60000
movss dword [eax + 0x10c], xmm0
movss dword [eax + 0x108], xmm2
movss xmm1, dword [eax + 0x124]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x120]
maxss xmm0, xmm2
movss dword [eax + 0x124], xmm1
movss dword [eax + 0x120], xmm0
lea eax, [ebp - 0x1dc]
mov ecx, dword [ebp - 0x84]
xorps xmm0, xmm0
push eax
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x260]
push eax
movups xmmword [ebp - 0x1dc], xmm0
lea eax, [ebp - 0x258]
movaps xmm0, xmmword [0x6774a0]
push eax
movups xmmword [ebp - 0x1a8], xmm0
call fcn.004799b0
mov ecx, dword [0x6d4050]
push str.Emulator_:
mov eax, dword [ecx + 0x1ac4]
mov byte [eax + 0xb9], 1
mov eax, dword [ecx + 0x1ac4]
movss xmm0, dword [eax + 0x44]
movss xmm2, dword [eax + 0x40]
subss xmm0, dword [eax + 0x88]
subss xmm2, dword [eax + 0x84]
addss xmm0, dword [0x677074]
addss xmm2, dword [0x67704c]
movss dword [eax + 0x10c], xmm0
movss dword [eax + 0x108], xmm2
movss xmm1, dword [eax + 0x124]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x120]
maxss xmm0, xmm2
movss dword [eax + 0x124], xmm1
movss dword [eax + 0x120], xmm0
call fcn.00477f80
mov esi, dword [0x6d4050]
add esp, 0x14
mov eax, dword [esi + 0x1ac4]
mov byte [eax + 0xb9], 1
mov eax, dword [esi + 0x1ac4]
movss xmm1, dword [eax + 0x40]
subss xmm1, dword [eax + 0x84]
movss xmm0, dword [eax + 0x120]
addss xmm1, dword [0x67704c]
maxss xmm0, xmm1
movss dword [eax + 0x108], xmm1
movss dword [eax + 0x120], xmm0
mov eax, dword [esi + 0x1ac4]
cmp dword [eax + 0x1cc], 0
movss xmm1, dword [eax + 0x40]
movss xmm0, dword [eax + 0x290]
subss xmm0, xmm1
je 0x495c75
movss xmm0, dword [eax + 0x260]
subss xmm0, xmm1
subss xmm0, dword [0x677058]
xorps xmm1, xmm1
mov ecx, eax
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x495c93
movss xmm0, dword [ecx + 0x2ac]
lea eax, [ecx + 0x1e4]
add ecx, 0x1f8
movss dword [eax], xmm0
push eax
call fcn.00464ff0
and dword [esi + 0x1bd8], 0xfffffffe
lea eax, [ebp - 0x30]
push ecx
push 3
push eax
push ecx
mov edx, 0x6d4060
mov dword [ebp - 0x30], str.AndroidEmulatorEn
mov ecx, str.EmuType
mov dword [ebp - 0x2c], str.AndroidEmulatorEx
mov dword [ebp - 0x28], 0x675670
call fcn.0047ac40
mov ecx, dword [0x6d4050]
push str.Game_Version_:
mov eax, dword [ecx + 0x1ac4]
mov byte [eax + 0xb9], 1
mov eax, dword [ecx + 0x1ac4]
movss xmm1, dword [eax + 0x40]
subss xmm1, dword [eax + 0x84]
movss xmm0, dword [eax + 0x120]
addss xmm1, dword [0x67704c]
maxss xmm0, xmm1
movss dword [eax + 0x108], xmm1
movss dword [eax + 0x120], xmm0
call fcn.00477f80
mov esi, dword [0x6d4050]
add esp, 0x14
mov eax, dword [esi + 0x1ac4]
mov byte [eax + 0xb9], 1
mov eax, dword [esi + 0x1ac4]
movss xmm1, dword [eax + 0x40]
subss xmm1, dword [eax + 0x84]
movss xmm0, dword [eax + 0x120]
addss xmm1, dword [0x67704c]
maxss xmm0, xmm1
movss dword [eax + 0x108], xmm1
movss dword [eax + 0x120], xmm0
mov eax, dword [esi + 0x1ac4]
cmp dword [eax + 0x1cc], 0
movss xmm1, dword [eax + 0x40]
movss xmm0, dword [eax + 0x290]
subss xmm0, xmm1
je 0x495da9
movss xmm0, dword [eax + 0x260]
subss xmm0, xmm1
subss xmm0, dword [0x677058]
xorps xmm1, xmm1
mov ecx, eax
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x495dc7
movss xmm0, dword [ecx + 0x2ac]
lea eax, [ecx + 0x1e4]
add ecx, 0x1f8
movss dword [eax], xmm0
push eax
call fcn.00464ff0
and dword [esi + 0x1bd8], 0xfffffffe
lea eax, [ebp - 0x40]
push ecx
push 4
push eax
push ecx
mov edx, 0x6d4054
mov dword [ebp - 0x40], str.Global
mov ecx, str.Game_Ver
mov dword [ebp - 0x3c], str.Korean
mov dword [ebp - 0x38], str.Taiwan
mov dword [ebp - 0x34], str.Vietnam
call fcn.0047ac40
mov ecx, dword [0x6d4050]
push str.Hack_Mode_:
mov eax, dword [ecx + 0x1ac4]
mov byte [eax + 0xb9], 1
mov eax, dword [ecx + 0x1ac4]
movss xmm1, dword [eax + 0x40]
subss xmm1, dword [eax + 0x84]
movss xmm0, dword [eax + 0x120]
addss xmm1, dword [0x67704c]
maxss xmm0, xmm1
movss dword [eax + 0x108], xmm1
movss dword [eax + 0x120], xmm0
call fcn.00477f80
mov esi, dword [0x6d4050]
add esp, 0x14
mov eax, dword [esi + 0x1ac4]
mov byte [eax + 0xb9], 1
mov eax, dword [esi + 0x1ac4]
movss xmm1, dword [eax + 0x40]
subss xmm1, dword [eax + 0x84]
movss xmm0, dword [eax + 0x120]
addss xmm1, dword [0x67704c]
maxss xmm0, xmm1
movss dword [eax + 0x108], xmm1
movss dword [eax + 0x120], xmm0
mov eax, dword [esi + 0x1ac4]
cmp dword [eax + 0x1cc], 0
movss xmm1, dword [eax + 0x40]
movss xmm0, dword [eax + 0x290]
subss xmm0, xmm1
je 0x495ee4
movss xmm0, dword [eax + 0x260]
subss xmm0, xmm1
subss xmm0, dword [0x677058]
xorps xmm1, xmm1
mov ecx, eax
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x495f02
movss xmm0, dword [ecx + 0x2ac]
lea eax, [ecx + 0x1e4]
add ecx, 0x1f8
movss dword [eax], xmm0
push eax
call fcn.00464ff0
and dword [esi + 0x1bd8], 0xfffffffe
lea eax, [ebp - 0x1c]
push ecx
push 2
push eax
push ecx
mov edx, 0x6d40a0
mov dword [ebp - 0x1c], str.Internal_Hack
mov ecx, str.Hack_Mode
mov dword [ebp - 0x18], str.External_Hack
call fcn.0047ac40
mov ecx, dword [0x6d4050]
push str.Loader_System_:
mov eax, dword [ecx + 0x1ac4]
mov byte [eax + 0xb9], 1
mov eax, dword [ecx + 0x1ac4]
movss xmm1, dword [eax + 0x40]
subss xmm1, dword [eax + 0x84]
movss xmm0, dword [eax + 0x120]
addss xmm1, dword [0x67704c]
maxss xmm0, xmm1
movss dword [eax + 0x108], xmm1
movss dword [eax + 0x120], xmm0
call fcn.00477f80
mov esi, dword [0x6d4050]
add esp, 0x14
mov eax, dword [esi + 0x1ac4]
mov byte [eax + 0xb9], 1
mov eax, dword [esi + 0x1ac4]
movss xmm1, dword [eax + 0x40]
subss xmm1, dword [eax + 0x84]
movss xmm0, dword [eax + 0x120]
addss xmm1, dword [0x67704c]
maxss xmm0, xmm1
movss dword [eax + 0x108], xmm1
movss dword [eax + 0x120], xmm0
mov eax, dword [esi + 0x1ac4]
cmp dword [eax + 0x1cc], 0
movss xmm1, dword [eax + 0x40]
movss xmm0, dword [eax + 0x290]
subss xmm0, xmm1
je 0x496011
movss xmm0, dword [eax + 0x260]
subss xmm0, xmm1
subss xmm0, dword [0x677058]
xorps xmm1, xmm1
mov ecx, eax
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x49602f
movss xmm0, dword [ecx + 0x2ac]
lea eax, [ecx + 0x1e4]
add ecx, 0x1f8
movss dword [eax], xmm0
push eax
call fcn.00464ff0
and dword [esi + 0x1bd8], 0xfffffffe
cmp byte [0x6d404f], 0
je 0x49606b
push ecx
mov dword [ebp - 0x24], str.Only_Hack
lea eax, [ebp - 0x24]
mov dword [ebp - 0x20], str.Hack_and_Bypass_Emulator
push 2
jmp 0x496081
cmp byte [0x6d404e], 0
je 0x496095
push ecx
mov dword [ebp - 0x80], str.Only_Hack
lea eax, [ebp - 0x80]
push 1
push eax
push ecx
mov edx, 0x6d4064
mov ecx, str.Loader_Sys
call fcn.0047ac40
add esp, 0x10
mov ecx, dword [0x6d4050]
mov eax, dword [ecx + 0x1ac4]
mov byte [eax + 0xb9], 1
mov eax, dword [ecx + 0x1ac4]
movss xmm0, dword [eax + 0x44]
subss xmm0, dword [eax + 0x88]
movss xmm2, dword [eax + 0x40]
subss xmm2, dword [eax + 0x84]
addss xmm0, dword [0x67709c]
addss xmm2, dword [0x67704c]
movss dword [eax + 0x10c], xmm0
movss dword [eax + 0x108], xmm2
movss xmm1, dword [eax + 0x124]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x120]
maxss xmm0, xmm2
movss dword [eax + 0x124], xmm1
movss dword [eax + 0x120], xmm0
mov eax, dword [ecx + 0x1ac4]
cmp dword [eax + 0x1cc], 0
movss xmm1, dword [eax + 0x40]
movss xmm0, dword [eax + 0x290]
subss xmm0, xmm1
je 0x49613c
movss xmm0, dword [eax + 0x260]
subss xmm0, xmm1
subss xmm0, dword [0x677058]
push ecx
lea edx, [ebp - 0x230]
mov dword [ebp - 0x22c], 0x420c0000
mov ecx, str.LETS_START
movss dword [ebp - 0x230], xmm0
call fcn.004787a0
add esp, 4
test al, al
je 0x4961e3
sub esp, 8
call fcn.0048f610
push 8
call fcn.005f83f1
add esp, 0xc
lea ecx, [ebp - 0x1c8]
mov dword [eax], 0x6d4268
push ecx
push 0
push eax
push 0x4a57c0
push 0
push 0
mov dword [eax + 4], 0x494850
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
add esp, 0x18
mov dword [ebp - 0x1cc], eax
test eax, eax
je 0x496d4a
mov ecx, dword [ebp - 0x1c8]
test ecx, ecx
je 0x496d42
push ecx
push eax
call dword [sym.imp.MSVCP140.dll__Thrd_detach]
add esp, 8
test eax, eax
jne 0x496d3b
xorps xmm0, xmm0
movlpd qword [ebp - 0x1cc], xmm0
cmp byte [0x6d40a8], 0
je 0x4963e8
cvttsd2si edx, qword [0x6d4058]
lea ecx, [ebp - 0x250]
call fcn.00482910
push 0x18
push str.Downloading_New_Update__
push 0
mov ecx, eax
call fcn.0049ab20
push 0x67575c
lea ecx, [ebp - 0x58]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x58], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x48], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
call fcn.00499370
push str.100_.
lea ecx, [ebp - 0x1e4]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1e4], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1d4], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
call fcn.00499370
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1b0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1a0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x1b0]
mov edx, dword [ebp - 0x19c]
cmp edx, 0x10
mov ecx, dword [ebp - 0x1b0]
cmovae eax, ecx
mov dword [0x6d4250], eax
jb 0x4962ea
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4962e0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49530c
push edx
push ecx
call fcn.005f7cf7
add esp, 8
mov edx, dword [ebp - 0x1d0]
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x19c], 0xf
mov byte [ebp - 0x1b0], 0
cmp edx, 0x10
jb 0x49633f
mov ecx, dword [ebp - 0x1e4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x496335
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49530c
push edx
push ecx
call fcn.005f7cf7
add esp, 8
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d0], 0xf
mov byte [ebp - 0x1e4], 0
cmp edx, 0x10
jb 0x49638e
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x496384
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49530c
push edx
push ecx
call fcn.005f7cf7
add esp, 8
mov edx, dword [ebp - 0x23c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp edx, 0x10
jb 0x4963da
mov ecx, dword [ebp - 0x250]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4963d0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x49530c
push edx
push ecx
call fcn.005f7cf7
add esp, 8
movaps xmm0, xmmword [0x677490]
movups xmmword [0x6d4254], xmm0
push str.STATE:
call fcn.00477f80
mov ecx, dword [0x6d4050]
add esp, 4
mov eax, dword [ecx + 0x1ac4]
mov byte [eax + 0xb9], 1
mov edx, dword [ecx + 0x1ac4]
cmp byte [edx + 0xbc], 0
jne 0x49645f
movss xmm0, dword [ecx + 0x15e4]
addss xmm0, dword [edx + 0x110]
mov eax, dword [edx + 0x114]
mov ecx, dword [edx + 0x134]
mov dword [edx + 0x10c], eax
mov eax, dword [edx + 0x130]
mov dword [edx + 0x128], eax
mov eax, dword [edx + 0x13c]
movss dword [edx + 0x108], xmm0
mov dword [edx + 0x12c], ecx
mov dword [edx + 0x138], eax
movups xmm0, xmmword [0x6d4254]
lea eax, [ebp - 0x1a8]
push dword [0x6d4250]
movups xmmword [ebp - 0x1a8], xmm0
push eax
call fcn.00478000
mov ecx, dword [0x6d4050]
lea edx, [ebp - 0x228]
add esp, 4
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x224], 0
mov eax, dword [ecx + 0x1ac4]
mov byte [eax + 0xb9], 1
mov eax, dword [ecx + 0x1ac4]
mov ecx, 0x675784
movss xmm0, dword [eax + 0x40]
subss xmm0, dword [eax + 0x84]
movss xmm2, dword [eax + 0x44]
subss xmm2, dword [eax + 0x88]
addss xmm0, dword [0x6770a0]
addss xmm2, dword [0x67704c]
movss dword [eax + 0x108], xmm0
movss dword [eax + 0x10c], xmm2
movss xmm1, dword [eax + 0x120]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x124]
maxss xmm0, xmm2
movss dword [eax + 0x120], xmm1
movss dword [eax + 0x124], xmm0
call fcn.004787a0
add esp, 4
test al, al
je 0x496c33
sub esp, 0x18
mov ecx, esp
push str.taskkill__t__f__im_AndroidEmulatorEn.exe
call fcn.00499510
call fcn.00494f70
mov ecx, esp
push str.taskkill__t__f__im_AndroidEmulatorEx.exe
call fcn.00499510
call fcn.00494f70
mov ecx, esp
push str.netsh_advfirewall_reset
call fcn.00499510
call fcn.00494f70
add esp, 0x18
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, str.GDZLOADER_Login
call fcn.00453020
add esp, 4
test al, al
je 0x496c33
mov ecx, dword [0x6d4050]
mov eax, dword [ecx + 0x1ac4]
cmp dword [eax + 0x1cc], 0
movss xmm0, dword [eax + 0x40]
movss xmm3, dword [eax + 0x290]
subss xmm3, xmm0
je 0x4965b4
movss xmm3, dword [eax + 0x260]
subss xmm3, xmm0
mulss xmm3, dword [0x676fa8]
lea edx, [ebp - 0x1ec]
mov byte [eax + 0xb9], 1
mov eax, dword [ecx + 0x1ac4]
mov dword [ebp - 0x220], 0x3f800000
subss xmm3, dword [0x677090]
mov dword [ebp - 0x21c], 0x3f800000
movss xmm0, dword [eax + 0x40]
subss xmm0, dword [eax + 0x84]
movss xmm2, dword [eax + 0x44]
subss xmm2, dword [eax + 0x88]
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 0
addss xmm3, xmm0
mov dword [ebp - 0x1ec], 0x43960000
mov dword [ebp - 0x1e8], 0x43650000
addss xmm2, dword [0x67703c]
movss dword [eax + 0x108], xmm3
movss dword [eax + 0x10c], xmm2
movss xmm0, dword [eax + 0x124]
movss xmm1, dword [eax + 0x120]
maxss xmm0, xmm2
maxss xmm1, xmm3
movss dword [eax + 0x124], xmm0
xorps xmm0, xmm0
movss dword [eax + 0x120], xmm1
lea eax, [ebp - 0x1a8]
mov ecx, dword [ebp - 0x84]
push eax
lea eax, [ebp - 0x1dc]
push eax
lea eax, [ebp - 0x220]
push eax
movups xmmword [ebp - 0x1a8], xmm0
lea eax, [ebp - 0x268]
movaps xmm0, xmmword [0x6774a0]
push eax
movups xmmword [ebp - 0x1dc], xmm0
call fcn.004799b0
mov esi, dword [0x6d4050]
add esp, 0x10
mov eax, dword [esi + 0x1ac4]
mov byte [eax + 0xb9], 1
mov eax, dword [esi + 0x1ac4]
movss xmm0, dword [eax + 0x40]
subss xmm0, dword [eax + 0x84]
movss xmm2, dword [eax + 0x44]
subss xmm2, dword [eax + 0x88]
addss xmm0, dword [0x67704c]
addss xmm2, dword [0x677094]
movss dword [eax + 0x108], xmm0
movss dword [eax + 0x10c], xmm2
movss xmm1, dword [eax + 0x120]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x124]
maxss xmm0, xmm2
movss dword [eax + 0x120], xmm1
movss dword [eax + 0x124], xmm0
mov eax, dword [esi + 0x1ac4]
cmp dword [eax + 0x1cc], 0
movss xmm1, dword [eax + 0x40]
movss xmm0, dword [eax + 0x290]
subss xmm0, xmm1
je 0x49675a
movss xmm0, dword [eax + 0x260]
subss xmm0, xmm1
subss xmm0, dword [0x677058]
xorps xmm1, xmm1
mov ecx, eax
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x496778
movss xmm0, dword [ecx + 0x2ac]
lea eax, [ecx + 0x1e4]
add ecx, 0x1f8
movss dword [eax], xmm0
push eax
call fcn.00464ff0
and dword [esi + 0x1bd8], 0xfffffffe
push str.Please_Enter_Your_Key_:
call fcn.00477f80
mov ecx, dword [0x6d4050]
add esp, 4
xor edx, edx
mov dword [ebp - 0x1f4], 0
mov dword [ebp - 0x1f0], 0
mov eax, dword [ecx + 0x1ac4]
push 0
push 0
push 0
mov byte [eax + 0xb9], 1
mov eax, dword [ecx + 0x1ac4]
mov ecx, str.key
movss xmm1, dword [eax + 0x40]
subss xmm1, dword [eax + 0x84]
movss xmm0, dword [eax + 0x120]
addss xmm1, dword [0x67704c]
maxss xmm0, xmm1
movss dword [eax + 0x108], xmm1
movss dword [eax + 0x120], xmm0
lea eax, [ebp - 0x1f4]
push eax
push 0xfd
push 0x6d4268
call fcn.0047c5b0
mov ecx, dword [0x6d4050]
add esp, 0x18
mov eax, dword [ecx + 0x1ac4]
mov byte [eax + 0xb9], 1
mov eax, dword [ecx + 0x1ac4]
movss xmm0, dword [eax + 0x40]
subss xmm0, dword [eax + 0x84]
movss xmm2, dword [eax + 0x44]
subss xmm2, dword [eax + 0x88]
addss xmm0, dword [0x67704c]
addss xmm2, dword [0x67709c]
movss dword [eax + 0x108], xmm0
movss dword [eax + 0x10c], xmm2
movss xmm1, dword [eax + 0x120]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0x124]
maxss xmm0, xmm2
movss dword [eax + 0x120], xmm1
movss dword [eax + 0x124], xmm0
mov eax, dword [ecx + 0x1ac4]
cmp dword [eax + 0x1cc], 0
movss xmm1, dword [eax + 0x40]
movss xmm0, dword [eax + 0x290]
subss xmm0, xmm1
je 0x4968cd
movss xmm0, dword [eax + 0x260]
subss xmm0, xmm1
subss xmm0, dword [0x677058]
push ecx
lea edx, [ebp - 0x1fc]
mov dword [ebp - 0x1f8], 0x420c0000
mov ecx, str.LOGIN
movss dword [ebp - 0x1fc], xmm0
call fcn.004787a0
add esp, 4
test al, al
je 0x496be8
sub esp, 0x18
mov ecx, 0x6d4268
mov edx, esp
lea esi, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x496924
sub ecx, esi
push ecx
push 0x6d4268
mov ecx, edx
call fcn.0049ac20
mov ecx, 0x6d40c8
call fcn.0048a690
sub esp, 0x18
mov ecx, esp
push 0x6d4268
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.0049abf0
sub esp, 0x18
mov ecx, esp
push str.C:Godzilla.ini
call fcn.00499510
call fcn.00492af0
mov eax, dword [0x676e64]
add esp, 0x30
cmp byte [0x676e6b], 0
mov ecx, dword [0x676e68]
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1bc], ecx
je 0x496af0
xor edx, edx
cmp dword [0x6d3fec], 2
mov dword [ebp - 0x188], edx
jl 0x496ac0
movaps xmm2, xmmword [0x677150]
mov edx, 5
movaps xmm3, xmmword [0x6774e0]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm1, xmm3
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
movd xmm4, edx
psrad xmm1, xmm4
mov edx, 0x1f
movaps xmm0, xmm1
movd xmm5, edx
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x677180]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x677160]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x6771e0]
packuswb xmm1, xmm1
paddb xmm1, xmmword [str.6666666666666666]
movd xmm0, eax
pxor xmm1, xmm0
movaps xmm0, xmm2
movd dword [ebp - 0x1c0], xmm1
movaps xmm1, xmm2
punpckldq xmm1, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm1, xmm3
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm4
movaps xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x677180]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x6771e0]
packuswb xmm1, xmm1
paddb xmm1, xmmword [str.6666666666666666]
movd xmm0, ecx
pxor xmm1, xmm0
movd dword [ebp - 0x1bc], xmm1
jmp 0x496af0
mov eax, 0x8d3dcb09
mul edx
shr edx, 5
movsx eax, dl
mov edx, dword [ebp - 0x188]
mov cl, dl
imul eax, eax, 0x3a
sub cl, al
add cl, 0x36
xor byte [ebp + edx - 0x1c0], cl
inc edx
mov dword [ebp - 0x188], edx
cmp edx, 8
jl 0x496ac0
lea eax, [ebp - 0x1c0]
push eax
lea ecx, [ebp - 0x250]
call fcn.00499510
mov ecx, eax
call fcn.00499360
mov edx, eax
mov ecx, 0x6d4194
call fcn.0049be40
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x181], al
call fcn.004994c0
cmp byte [ebp - 0x181], 0
je 0x496b3d
mov byte [0x6d404f], 1
xor al, al
jmp 0x496bdc
mov eax, dword [str.eV:]
xor edx, edx
mov dword [ebp - 0x1b8], eax
mov al, byte [0x676b54]
mov byte [ebp - 0x1b4], al
mov dword [ebp - 0x188], edx
nop dword [eax + eax]
mov eax, 0x8d3dcb09
mul edx
shr edx, 5
movsx eax, dl
mov edx, dword [ebp - 0x188]
mov cl, dl
imul eax, eax, 0x3a
sub cl, al
add cl, 0x36
xor byte [ebp + edx - 0x1b8], cl
inc edx
mov dword [ebp - 0x188], edx
cmp edx, 5
jl 0x496b60
lea eax, [ebp - 0x1b8]
push eax
lea ecx, [ebp - 0x250]
call fcn.00499510
mov ecx, eax
call fcn.00499360
mov edx, eax
mov ecx, 0x6d4194
call fcn.0049be40
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x181], al
call fcn.004994c0
cmp byte [ebp - 0x181], 0
mov byte [0x6d404f], 0
je 0x496d5c
mov al, 1
mov byte [0x6d404e], al
mov byte [0x6d404d], 1
lea ecx, [ebp - 0x204]
mov dword [ebp - 0x204], 0x43c80000
mov dword [ebp - 0x200], 0x41200000
call fcn.00456b70
lea edx, [ebp - 0x20c]
mov dword [ebp - 0x20c], 0
mov ecx, 0x675784
mov dword [ebp - 0x208], 0
call fcn.00478ad0
test al, al
jne 0x496fb1
call fcn.004560a0
call fcn.0044f960
mov eax, dword [0x6d40a4]
push 0
mov ecx, dword [eax]
push ecx
mov dword [esp], 0x3f800000
push 0
push 3
push 0
push 0
push eax
call dword [ecx + 0xac]
mov eax, dword [0x6d40a4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
js 0x496c8e
call fcn.0044fe30
call fcn.0044c3d0
mov ecx, eax
call fcn.00475610
mov eax, dword [0x6d40a4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov eax, dword [ebp - 0x18c]
test dword [eax + 8], 0x400
je 0x496ca7
call fcn.0045d740
call fcn.0045db00
mov ecx, dword [0x6d40a4]
push 0
push 0
push 0
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x44]
cmp eax, 0x88760868
jne 0x496cd9
mov eax, dword [0x6d40a4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
cmp eax, 0x88760869
jne 0x496cd9
call fcn.00494ef0
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x218], 0xf
mov dword [ebp - 0x214], 0
call fcn.0049c490
cmp dword [ebp - 0x78], 0x12
jne 0x4957f0
call fcn.00475b40
call fcn.00476390
call fcn.0044c370
call fcn.00494eb0
push dword [ebp - 0x1c4]
call dword [sym.imp.USER32.dll_DestroyWindow]
push dword [ebp - 0xa0]
push dword [ebp - 0x8c]
call dword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
jmp 0x497011
push eax
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
push 1
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push 6
mov dword [ebp - 0x1c8], 0
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
lea eax, [ebp - 0x1b8]
mov byte [0x6d404e], 0
push eax
call fcn.00497080
mov edi, eax
cmp byte [edi + 5], 0
je 0x496dac
xor ecx, ecx
mov dword [ebp - 0x18c], ecx
nop
mov eax, 0x8d3dcb09
lea esi, [edi + ecx]
mul ecx
shr edx, 5
movsx eax, dl
imul eax, eax, 0x3a
sub cl, al
add cl, 0x36
xor byte [esi], cl
mov ecx, dword [ebp - 0x18c]
inc ecx
mov dword [ebp - 0x18c], ecx
cmp ecx, 6
jl 0x496d80
push edi
lea ecx, [ebp - 0x58]
call fcn.00499510
mov ecx, eax
call fcn.00499360
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x31c]
push eax
call fcn.00497040
mov edi, eax
cmp byte [edi + 0x38], 0
je 0x496f75
xor ecx, ecx
cmp dword [0x6d3fec], 2
mov dword [ebp - 0x188], ecx
jl 0x496f40
movaps xmm0, xmmword [str.6666666666666666]
mov eax, 5
movaps xmm4, xmmword [0x677150]
movaps xmm3, xmmword [0x6774e0]
movaps xmm6, xmmword [0x677180]
movd xmm5, eax
mov eax, 0x1f
movaps xmmword [ebp - 0x1b0], xmm0
mov edx, dword [ebp - 0x1b0]
movd xmm7, eax
lea eax, [ecx + 4]
nop word [eax + eax]
movd xmm0, ecx
add ecx, 8
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x6771e0]
packuswb xmm1, xmm1
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [edi + eax - 4]
pxor xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [edi + eax - 4], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckldq xmm1, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x6771e0]
packuswb xmm1, xmm1
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [edi + eax]
pxor xmm1, xmm0
movd dword [edi + eax], xmm1
add eax, 8
cmp eax, 0x3c
jl 0x496e30
mov dword [ebp - 0x188], ecx
cmp ecx, 0x39
jge 0x496f75
nop dword [eax + eax]
mov eax, 0x8d3dcb09
lea esi, [edi + ecx]
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
movsx eax, al
imul eax, eax, 0x3a
sub cl, al
add cl, 0x36
xor byte [esi], cl
mov ecx, dword [ebp - 0x188]
inc ecx
mov dword [ebp - 0x188], ecx
cmp ecx, 0x39
jl 0x496f40
push edi
lea ecx, [ebp - 0x250]
call fcn.00499510
mov ecx, eax
call fcn.00499360
push 0x10
push dword [ebp - 0x80]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x250]
call fcn.004994c0
lea ecx, [ebp - 0x58]
call fcn.004994c0
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
sub esp, 0x18
mov ecx, esp
push str.taskkill__t__f__im_AndroidEmulatorEn.exe
jmp 0x496558
mov ecx, dword [0x6d40ac]
mov edx, dword [0x6d40a4]
test edx, edx
je 0x496fe6
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x6d40ac]
mov dword [0x6d40a4], 0
test ecx, ecx
je 0x496ffa
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x6d40ac], 0
push dword [ebp - 0xa0]
push dword [ebp - 0x8c]
call dword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005f7bd4
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10