Function at 0x401000
Capabilities:
Log keystrokes via polling
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push 0x19c
push 0
push 0x42d730
call sub.CRTDLL.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x42d734], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x42d730], eax
call fcn.00414068
call fcn.004138ab
call fcn.00412206
call fcn.00411917
call fcn.004118b4
call fcn.004111a7
call fcn.00408812
call fcn.00408710
call fcn.00408120
call fcn.00407fc0
call fcn.0040753f
call fcn.004140e0
call fcn.004076a0
mov dword [0x42d870], eax
call fcn.00408e39
mov ebp, 0x415290
push ebp
push 0
call fcn.00411578
mov dword [0x42d7cc], eax
mov ebp, 0x422811
push ebp
push 1
call fcn.00411578
mov dword [0x42d7d0], eax
mov ebp, 0x423628
push ebp
push 2
call fcn.00411578
mov dword [0x42d7d4], eax
mov ebp, 0x42423b
push ebp
push 3
call fcn.00411578
mov dword [0x42d7d8], eax
mov ebp, str.RIFF
push ebp
push 0
call fcn.00407b30
mov ebp, str.RIFF__
push ebp
push 1
call fcn.00407b30
push 5
push 0x42d894
push 0
mov edx, dword [0x42d894]
call fcn.00407000
mov eax, 0xd
push 4
call fcn.00435000
push 5
push 0x42d89c
push 0
mov edx, dword [0x42d89c]
call fcn.00407000
mov eax, 0xd
push 4
call fcn.00435000
push 5
push 0x42d8a4
push 0
mov edx, dword [0x42d8a4]
call fcn.00407000
mov eax, 0xd
push 4
call fcn.00435000
push 5
push 0x42d8ac
push 0
mov edx, dword [0x42d8ac]
call fcn.00407000
mov eax, 0xd
push 4
call fcn.00435000
push 5
push 0x42d8b4
push 0
mov edx, dword [0x42d8b4]
call fcn.00407000
mov eax, 0xd
push 4
call fcn.00435000
mov dword [0x42d7c8], 1
mov eax, 0xc
cmp eax, dword [0x42d7c8]
jl 0x40122f
mov ebx, dword [0x42d7c8]
mov ebp, dword [0x42d89c]
sal ebx, 2
mov dword [ebp + ebx], 1
mov ebx, dword [0x42d7c8]
mov ebp, dword [0x42d8a4]
sal ebx, 2
mov dword [ebp + ebx], 1
mov ebx, dword [0x42d7c8]
mov ebp, dword [0x42d8ac]
sal ebx, 2
mov dword [ebp + ebx], 1
inc dword [0x42d7c8]
jmp 0x4011d5
mov edx, str.Bioshock
lea ecx, [0x42d7b8]
call fcn.00407024
push dword [0x42df54]
call fcn.00413760
sub esp, 4
lea ecx, [0x42d79c]
pop edx
call fcn.0040702c
push dword [0x42df54]
mov edx, dword [0x42d79c]
push dword [0x42df54]
call fcn.00414130
mov edx, str.CH.dll
call fcn.00414130
inc dword [0x42df54]
push 0
mov edx, dword [0x42ac9c]
add dword [esp + 4], edx
call fcn.004139ce
pop dword [0x42df54]
and eax, eax
je 0x4012c9
mov ebp, 0x42a154
mov ebx, ebp
mov ebp, 0x429554
sub ebx, ebp
push ebx
mov ebp, 0x429554
push ebp
push 0
call fcn.00413a30
push 0
call fcn.00413827
jmp 0x4012d8
push str.Could_not_install_the_file___Installtion_failed
push str.Error
call fcn.00408001
push dword [0x42df54]
mov edx, dword [0x42d79c]
push dword [0x42df54]
call fcn.00414130
mov edx, str.help.txt
call fcn.00414130
inc dword [0x42df54]
push 0
mov edx, dword [0x42ac9c]
add dword [esp + 4], edx
call fcn.004139ce
pop dword [0x42df54]
and eax, eax
je 0x401348
mov ebp, 0x42ac99
mov ebx, ebp
mov ebp, 0x42a154
sub ebx, ebp
push ebx
mov ebp, 0x42a154
push ebp
push 0
call fcn.00413a30
push 0
call fcn.00413827
jmp 0x401357
push str.Could_not_create_HELP.TXT_file.
push str.Error
call fcn.00408001
push str.CH_Trainer_Keys.dat
push 0
call fcn.004139fc
mov dword [0x42d870], eax
mov ebx, dword [0x42d870]
and ebx, ebx
jle 0x401389
mov dword [0x42d798], 1
push 2
call fcn.00413827
call fcn.00406488
mov edx, str.Bioshock.exe
lea ecx, [0x42d854]
call fcn.00407024
call fcn.004058a4
mov edx, str.CH.dll
lea ecx, [0x42d77c]
call fcn.00407024
mov edx, dword [0x42d79c]
push dword [0x42df54]
call fcn.00414130
mov edx, dword [0x42d77c]
call fcn.00414130
lea ecx, [0x42d7b4]
pop edx
call fcn.0040702c
call fcn.00405aa8
call fcn.004058a4
call fcn.00412260
mov dword [0x42d7b0], eax
call fcn.0040615a
mov ebx, dword [0x42d7b0]
cmp ebx, 0x10
jne 0x401404
jmp 0x4061e5
mov eax, 0xc8
call fcn.00435050
mov ebx, dword [0x42d850]
and ebx, ebx
je 0x4013a3
mov ebx, dword [0x42d778]
and ebx, ebx
je 0x4013a3
push dword [0x42df54]
mov edx, dword [0x42d854]
push dword [0x42df54]
call fcn.00414130
mov edx, str._trainer_ready_
call fcn.00414130
inc dword [0x42df54]
push 0
push 0
mov edx, dword [0x42ac9c]
add dword [esp + 8], edx
call fcn.00407683
pop dword [0x42df54]
mov ebp, dword [0x42d894]
mov dword [ebp + 4], 0x61
mov dword [ebp + 8], 0x62
mov dword [ebp + 0xc], 0x63
mov dword [ebp + 0x10], 0x64
mov dword [ebp + 0x14], 0x65
mov dword [ebp + 0x18], 0x66
mov dword [ebp + 0x1c], 0x6b
mov dword [ebp + 0x20], 0x6d
mov dword [ebp + 0x24], 0x67
mov dword [ebp + 0x28], 0
mov dword [ebp + 0x2c], 0
mov dword [ebp + 0x30], 0
push str.CH_Trainer_Keys.dat
push 0
call fcn.004139fc
mov dword [0x42d870], eax
mov ebx, dword [0x42d870]
and ebx, ebx
jle 0x40164d
mov dword [0x42d798], 1
push 0
call fcn.00413a90
mov dword [0x42d828], eax
mov dword [0x42d7c8], 1
mov eax, dword [0x42d828]
cmp eax, dword [0x42d7c8]
jl 0x40162f
push dword [0x42df54]
push 0
call fcn.00413ae0
sub esp, 4
lea ecx, [0x42d874]
pop edx
call fcn.0040702c
push dword [0x42d874]
mov edx, str.SHIFT
pop ecx
call fcn.004350b0
je 0x401561
mov ebx, dword [0x42d7c8]
mov ebp, dword [0x42d89c]
sal ebx, 2
mov dword [ebp + ebx], 0
push dword [0x42d874]
mov edx, str.CTRL
pop ecx
call fcn.004350b0
je 0x40158b
mov ebx, dword [0x42d7c8]
mov ebp, dword [0x42d8a4]
sal ebx, 2
mov dword [ebp + ebx], 0
push dword [0x42d874]
mov edx, 0x41510b
pop ecx
call fcn.004350b0
je 0x4015b5
mov ebx, dword [0x42d7c8]
mov ebp, dword [0x42d8ac]
sal ebx, 2
mov dword [ebp + ebx], 0
push 0
call fcn.00413a90
push eax
mov ebx, dword [0x42d7c8]
mov ebp, dword [0x42d894]
sal ebx, 2
pop dword [ebp + ebx]
push dword [0x42df54]
push dword [0x42df54]
push 0
mov ebx, dword [0x42d7c8]
sal ebx, 2
mov eax, dword [ebp + ebx]
cdq
push edx
push eax
call fcn.00407290
sub esp, 4
inc dword [0x42df54]
mov edx, dword [0x42ac9c]
add dword [esp], edx
call fcn.004070a0
pop dword [0x42df54]
push eax
mov ebx, dword [0x42d7c8]
sal ebx, 2
pop dword [ebp + ebx]
inc dword [0x42d7c8]
jmp 0x401507
push 0
call fcn.00413827
push str.Custom_Keys_Loaded
push 0
push 0
call fcn.00407683
push 0xf3
mov ebx, dword [0x42d764]
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xf
mov ebx, dword [0x42d764]
inc ebx
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x10
mov ebx, dword [0x42d764]
add ebx, 2
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x81
mov ebx, dword [0x42d764]
add ebx, 3
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x40
mov ebx, dword [0x42d764]
add ebx, 4
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 5
mov ebx, dword [0x42d764]
add ebx, 5
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 6
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 7
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x66
mov ebx, dword [0x42d764]
add ebx, 8
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x81
mov ebx, dword [0x42d764]
add ebx, 9
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x7c
mov ebx, dword [0x42d764]
add ebx, 0xa
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x24
mov ebx, dword [0x42d764]
add ebx, 0xb
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 4
mov ebx, dword [0x42d764]
add ebx, 0xc
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x9c
mov ebx, dword [0x42d764]
add ebx, 0xd
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x10
mov ebx, dword [0x42d764]
add ebx, 0xe
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x75
mov ebx, dword [0x42d764]
add ebx, 0xf
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x19
mov ebx, dword [0x42d764]
add ebx, 0x10
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x89
mov ebx, dword [0x42d764]
add ebx, 0x11
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xd
mov ebx, dword [0x42d764]
add ebx, 0x12
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x13
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x3f
mov ebx, dword [0x42d764]
add ebx, 0x14
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x92
mov ebx, dword [0x42d764]
add ebx, 0x15
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x19
mov ebx, dword [0x42d764]
add ebx, 0x16
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x83
mov ebx, dword [0x42d764]
add ebx, 0x17
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x3d
mov ebx, dword [0x42d764]
add ebx, 0x18
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 4
mov ebx, dword [0x42d764]
add ebx, 0x19
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x3f
mov ebx, dword [0x42d764]
add ebx, 0x1a
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x92
mov ebx, dword [0x42d764]
add ebx, 0x1b
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x19
mov ebx, dword [0x42d764]
add ebx, 0x1c
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 1
mov ebx, dword [0x42d764]
add ebx, 0x1d
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x75
mov ebx, dword [0x42d764]
add ebx, 0x1e
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xa
mov ebx, dword [0x42d764]
add ebx, 0x1f
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xc7
mov ebx, dword [0x42d764]
add ebx, 0x20
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x81
mov ebx, dword [0x42d764]
add ebx, 0x21
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x40
mov ebx, dword [0x42d764]
add ebx, 0x22
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 5
mov ebx, dword [0x42d764]
add ebx, 0x23
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x24
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x25
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x26
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x40
mov ebx, dword [0x42d764]
add ebx, 0x27
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x1c
mov ebx, dword [0x42d764]
add ebx, 0x28
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x46
mov ebx, dword [0x42d764]
add ebx, 0x29
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xc3
mov ebx, dword [0x42d764]
add ebx, 0x2a
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 0x2b
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x2c
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x2d
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x2e
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x2f
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x30
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x31
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x32
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x33
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x34
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x35
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x36
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x37
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x38
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x39
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x3a
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x3b
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x3c
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x3d
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x3e
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x3f
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x40
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x41
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x42
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x43
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x44
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x45
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x46
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x47
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x48
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x49
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x4a
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x4b
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x4c
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x4d
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x4e
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x4f
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x50
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x51
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x52
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x53
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x54
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x55
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x56
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x57
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x58
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x59
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x5a
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x5b
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x5c
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x5d
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x5e
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x5f
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x60
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x61
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x62
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x63
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x64
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x65
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x66
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x67
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x68
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x69
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x6a
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x6b
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x6c
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x6d
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x6e
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x6f
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x70
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x71
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x72
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x73
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x74
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x75
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x76
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x77
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x78
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x79
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x7a
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x7b
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x7c
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x7d
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x7e
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x7f
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x80
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x81
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x82
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x83
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x84
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x85
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x86
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x87
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x88
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x89
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x8a
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x8b
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x8c
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x8d
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x8e
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x8f
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x90
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x91
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x92
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x93
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x94
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x95
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x96
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x97
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x98
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x99
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x9a
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x9b
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x9c
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x9d
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x9e
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x9f
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xa0
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xa1
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xa2
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xa3
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xa4
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xa5
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xa6
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xa7
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xa8
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xa9
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xaa
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xab
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xac
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xad
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xae
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xaf
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xb0
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xb1
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xb2
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xb3
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xb4
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xb5
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xb6
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xb7
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xb8
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xb9
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xba
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xbb
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xbc
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xbd
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xbe
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xbf
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x83
mov ebx, dword [0x42d764]
add ebx, 0xc0
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x3d
mov ebx, dword [0x42d764]
add ebx, 0xc1
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 8
mov ebx, dword [0x42d764]
add ebx, 0xc2
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x3f
mov ebx, dword [0x42d764]
add ebx, 0xc3
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x92
mov ebx, dword [0x42d764]
add ebx, 0xc4
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x19
mov ebx, dword [0x42d764]
add ebx, 0xc5
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 1
mov ebx, dword [0x42d764]
add ebx, 0xc6
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x75
mov ebx, dword [0x42d764]
add ebx, 0xc7
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xb
mov ebx, dword [0x42d764]
add ebx, 0xc8
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xc7
mov ebx, dword [0x42d764]
add ebx, 0xc9
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x86
mov ebx, dword [0x42d764]
add ebx, 0xca
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xb4
mov ebx, dword [0x42d764]
add ebx, 0xcb
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xa
mov ebx, dword [0x42d764]
add ebx, 0xcc
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xcd
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xce
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xcf
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xd0
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x7a
mov ebx, dword [0x42d764]
add ebx, 0xd1
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x44
mov ebx, dword [0x42d764]
add ebx, 0xd2
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xc3
mov ebx, dword [0x42d764]
add ebx, 0xd3
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xf3
mov ebx, dword [0x42d764]
add ebx, 0xd4
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xf
mov ebx, dword [0x42d764]
add ebx, 0xd5
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x11
mov ebx, dword [0x42d764]
add ebx, 0xd6
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x86
mov ebx, dword [0x42d764]
add ebx, 0xd7
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xb4
mov ebx, dword [0x42d764]
add ebx, 0xd8
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xa
mov ebx, dword [0x42d764]
add ebx, 0xd9
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xda
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xdb
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xc3
mov ebx, dword [0x42d764]
add ebx, 0xdc
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 0xdd
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xde
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xdf
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xe0
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xe1
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xe2
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xe3
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xe4
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xe5
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xe6
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xe7
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xe8
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xe9
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xea
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xeb
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xec
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xed
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xee
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xef
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x83
mov ebx, dword [0x42d764]
add ebx, 0xf0
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x3d
mov ebx, dword [0x42d764]
add ebx, 0xf1
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x10
mov ebx, dword [0x42d764]
add ebx, 0xf2
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x3f
mov ebx, dword [0x42d764]
add ebx, 0xf3
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x92
mov ebx, dword [0x42d764]
add ebx, 0xf4
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x19
mov ebx, dword [0x42d764]
add ebx, 0xf5
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 1
mov ebx, dword [0x42d764]
add ebx, 0xf6
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x75
mov ebx, dword [0x42d764]
add ebx, 0xf7
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xa
mov ebx, dword [0x42d764]
add ebx, 0xf8
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xc7
mov ebx, dword [0x42d764]
add ebx, 0xf9
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x40
mov ebx, dword [0x42d764]
add ebx, 0xfa
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x4c
mov ebx, dword [0x42d764]
add ebx, 0xfb
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x64
mov ebx, dword [0x42d764]
add ebx, 0xfc
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xfd
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xfe
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0xff
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x2b
mov ebx, dword [0x42d764]
add ebx, 0x100
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xd9
mov ebx, dword [0x42d764]
add ebx, 0x101
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xc3
mov ebx, dword [0x42d764]
add ebx, 0x102
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x29
mov ebx, dword [0x42d764]
add ebx, 0x103
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x48
mov ebx, dword [0x42d764]
add ebx, 0x104
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x4c
mov ebx, dword [0x42d764]
add ebx, 0x105
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x2b
mov ebx, dword [0x42d764]
add ebx, 0x106
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xd9
mov ebx, dword [0x42d764]
add ebx, 0x107
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xc3
mov ebx, dword [0x42d764]
add ebx, 0x108
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 0x109
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x10a
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x10b
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x10c
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x10d
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x10e
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x10f
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x83
mov ebx, dword [0x42d764]
add ebx, 0x110
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x3d
mov ebx, dword [0x42d764]
add ebx, 0x111
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x14
mov ebx, dword [0x42d764]
add ebx, 0x112
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x3f
mov ebx, dword [0x42d764]
add ebx, 0x113
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x92
mov ebx, dword [0x42d764]
add ebx, 0x114
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x19
mov ebx, dword [0x42d764]
add ebx, 0x115
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 1
mov ebx, dword [0x42d764]
add ebx, 0x116
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x75
mov ebx, dword [0x42d764]
add ebx, 0x117
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xa
mov ebx, dword [0x42d764]
add ebx, 0x118
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xc7
mov ebx, dword [0x42d764]
add ebx, 0x119
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x81
mov ebx, dword [0x42d764]
add ebx, 0x11a
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xa8
mov ebx, dword [0x42d764]
add ebx, 0x11b
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xa
mov ebx, dword [0x42d764]
add ebx, 0x11c
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x11d
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x11e
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x10
mov ebx, dword [0x42d764]
add ebx, 0x11f
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x27
mov ebx, dword [0x42d764]
add ebx, 0x120
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x121
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x122
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x8b
mov ebx, dword [0x42d764]
add ebx, 0x123
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x81
mov ebx, dword [0x42d764]
add ebx, 0x124
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xa8
mov ebx, dword [0x42d764]
add ebx, 0x125
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xa
mov ebx, dword [0x42d764]
add ebx, 0x126
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x127
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x128
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xc3
mov ebx, dword [0x42d764]
add ebx, 0x129
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x12a
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x12b
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x12c
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x12d
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x12e
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x12f
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x83
mov ebx, dword [0x42d764]
add ebx, 0x130
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x3d
mov ebx, dword [0x42d764]
add ebx, 0x131
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x18
mov ebx, dword [0x42d764]
add ebx, 0x132
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x3f
mov ebx, dword [0x42d764]
add ebx, 0x133
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x92
mov ebx, dword [0x42d764]
add ebx, 0x134
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x19
mov ebx, dword [0x42d764]
add ebx, 0x135
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 1
mov ebx, dword [0x42d764]
add ebx, 0x136
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x75
mov ebx, dword [0x42d764]
add ebx, 0x137
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xa
mov ebx, dword [0x42d764]
add ebx, 0x138
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xc7
mov ebx, dword [0x42d764]
add ebx, 0x139
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x81
mov ebx, dword [0x42d764]
add ebx, 0x13a
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xb0
mov ebx, dword [0x42d764]
add ebx, 0x13b
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xa
mov ebx, dword [0x42d764]
add ebx, 0x13c
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x13d
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x13e
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x10
mov ebx, dword [0x42d764]
add ebx, 0x13f
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x27
mov ebx, dword [0x42d764]
add ebx, 0x140
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x141
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x142
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x8b
mov ebx, dword [0x42d764]
add ebx, 0x143
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x81
mov ebx, dword [0x42d764]
add ebx, 0x144
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xb0
mov ebx, dword [0x42d764]
add ebx, 0x145
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xa
mov ebx, dword [0x42d764]
add ebx, 0x146
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x147
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x148
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xc3
mov ebx, dword [0x42d764]
add ebx, 0x149
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x14a
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x14b
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x14c
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x14d
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x14e
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x14f
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x83
mov ebx, dword [0x42d764]
add ebx, 0x150
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x3d
mov ebx, dword [0x42d764]
add ebx, 0x151
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x1c
mov ebx, dword [0x42d764]
add ebx, 0x152
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x3f
mov ebx, dword [0x42d764]
add ebx, 0x153
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x92
mov ebx, dword [0x42d764]
add ebx, 0x154
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x19
mov ebx, dword [0x42d764]
add ebx, 0x155
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 1
mov ebx, dword [0x42d764]
add ebx, 0x156
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x75
mov ebx, dword [0x42d764]
add ebx, 0x157
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x15
mov ebx, dword [0x42d764]
add ebx, 0x158
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x39
mov ebx, dword [0x42d764]
add ebx, 0x159
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x35
mov ebx, dword [0x42d764]
add ebx, 0x15a
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x15b
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x3f
mov ebx, dword [0x42d764]
add ebx, 0x15c
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x92
mov ebx, dword [0x42d764]
add ebx, 0x15d
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x19
mov ebx, dword [0x42d764]
add ebx, 0x15e
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x74
mov ebx, dword [0x42d764]
add ebx, 0x15f
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xd
mov ebx, dword [0x42d764]
add ebx, 0x160
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xc7
mov ebx, dword [0x42d764]
add ebx, 0x161
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x86
mov ebx, dword [0x42d764]
add ebx, 0x162
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x40
mov ebx, dword [0x42d764]
add ebx, 0x163
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 5
mov ebx, dword [0x42d764]
add ebx, 0x164
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x165
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x166
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x167
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x168
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x169
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x16a
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xdd
mov ebx, dword [0x42d764]
add ebx, 0x16b
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xd8
mov ebx, dword [0x42d764]
add ebx, 0x16c
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xc3
mov ebx, dword [0x42d764]
add ebx, 0x16d
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xd9
mov ebx, dword [0x42d764]
add ebx, 0x16e
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x9e
mov ebx, dword [0x42d764]
add ebx, 0x16f
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x40
mov ebx, dword [0x42d764]
add ebx, 0x170
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 5
mov ebx, dword [0x42d764]
add ebx, 0x171
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x172
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0
mov ebx, dword [0x42d764]
add ebx, 0x173
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0xc3
mov ebx, dword [0x42d764]
add ebx, 0x174
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 0x175
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push dword [0x42d824]
push 0x176
push dword [0x42d764]
mov ebx, dword [0x42d778]
add ebx, 0x1091
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
mov ebx, dword [0x42d778]
add ebx, 0x3f00
push ebx
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d778]
add ebx, 0x10a4
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d778]
add ebx, 0x11ec
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
mov ebx, dword [0x42d778]
add ebx, 0x3f04
push ebx
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d778]
add ebx, 0x10aa
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
mov ebx, dword [0x42d778]
add ebx, 0x3f08
push ebx
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d778]
add ebx, 0x1153
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
mov ebx, dword [0x42d778]
add ebx, 0x3f10
push ebx
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d778]
add ebx, 0x1183
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
mov ebx, dword [0x42d778]
add ebx, 0x3f14
push ebx
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d778]
add ebx, 0x11a3
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
mov ebx, dword [0x42d778]
add ebx, 0x3f18
push ebx
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d778]
add ebx, 0x11c3
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
mov ebx, dword [0x42d778]
add ebx, 0x3f1c
push ebx
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d778]
add ebx, 0x11e3
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push 0xe8
mov ebx, dword [0x42d764]
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
inc ebx
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 2
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 3
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 4
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 5
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 6
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 7
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push dword [0x42d824]
push 8
push dword [0x42d764]
mov ebx, dword [0x42d850]
add ebx, 0x4fd55
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
mov ebx, dword [0x42d778]
add ebx, 0x1091
mov edi, dword [0x42d850]
add edi, 0x4fd55
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d850]
add ebx, 0x4fd56
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push 0xe8
mov ebx, dword [0x42d764]
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
inc ebx
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 2
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 3
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 4
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 5
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 6
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 7
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push dword [0x42d824]
push 8
push dword [0x42d764]
mov ebx, dword [0x42d850]
add ebx, 0x30c19d
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
mov ebx, dword [0x42d778]
add ebx, 0x1151
mov edi, dword [0x42d850]
add edi, 0x30c19d
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d850]
add ebx, 0x30c19e
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push 0xe8
mov ebx, dword [0x42d764]
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
inc ebx
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 2
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 3
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 4
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push dword [0x42d824]
push 5
push dword [0x42d764]
mov ebx, dword [0x42d850]
add ebx, 0x377556
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
mov ebx, dword [0x42d778]
add ebx, 0x1181
mov edi, dword [0x42d850]
add edi, 0x377556
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d850]
add ebx, 0x377557
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push 0xe8
mov ebx, dword [0x42d764]
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
inc ebx
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 2
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 3
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 4
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 5
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push dword [0x42d824]
push 6
push dword [0x42d764]
mov ebx, dword [0x42d850]
add ebx, 0x307b98
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
mov ebx, dword [0x42d778]
add ebx, 0x11a1
mov edi, dword [0x42d850]
add edi, 0x307b98
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d850]
add ebx, 0x307b99
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push 0xe8
mov ebx, dword [0x42d764]
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
inc ebx
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 2
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 3
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 4
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 5
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push dword [0x42d824]
push 6
push dword [0x42d764]
mov ebx, dword [0x42d850]
add ebx, 0x307bd8
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
mov ebx, dword [0x42d778]
add ebx, 0x11c1
mov edi, dword [0x42d850]
add edi, 0x307bd8
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d850]
add ebx, 0x307bd9
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push 0xe8
mov ebx, dword [0x42d764]
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
inc ebx
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 2
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 3
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 4
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
add ebx, 5
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push dword [0x42d824]
push 6
push dword [0x42d764]
mov ebx, dword [0x42d850]
add ebx, 0x34ecc1
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
mov ebx, dword [0x42d778]
add ebx, 0x11e1
mov edi, dword [0x42d850]
add edi, 0x34ecc1
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d850]
add ebx, 0x34ecc2
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
mov dword [0x42d858], 0
mov eax, 0xff
cmp eax, dword [0x42d858]
jl 0x4048c0
push dword [0x42d858]
call sub.USER32.dll_GetAsyncKeyState
inc dword [0x42d858]
jmp 0x4048a0
call fcn.00412260
mov dword [0x42d7b0], eax
mov ebp, dword [0x42d894]
push dword [ebp + 4]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42d8b4]
pop dword [ebp + 4]
mov ebp, dword [0x42d894]
push dword [ebp + 8]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42d8b4]
pop dword [ebp + 8]
mov ebp, dword [0x42d894]
push dword [ebp + 0xc]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42d8b4]
pop dword [ebp + 0xc]
mov ebp, dword [0x42d894]
push dword [ebp + 0x10]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42d8b4]
pop dword [ebp + 0x10]
mov ebp, dword [0x42d894]
push dword [ebp + 0x14]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42d8b4]
pop dword [ebp + 0x14]
mov ebp, dword [0x42d894]
push dword [ebp + 0x18]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42d8b4]
pop dword [ebp + 0x18]
mov ebp, dword [0x42d894]
push dword [ebp + 0x1c]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42d8b4]
pop dword [ebp + 0x1c]
mov ebp, dword [0x42d894]
push dword [ebp + 0x20]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42d8b4]
pop dword [ebp + 0x20]
mov ebp, dword [0x42d894]
push dword [ebp + 0x24]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42d8b4]
pop dword [ebp + 0x24]
mov ebp, dword [0x42d894]
push dword [ebp + 0x28]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42d8b4]
pop dword [ebp + 0x28]
mov ebp, dword [0x42d894]
push dword [ebp + 0x2c]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42d8b4]
pop dword [ebp + 0x2c]
mov ebp, dword [0x42d894]
push dword [ebp + 0x30]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42d8b4]
pop dword [ebp + 0x30]
push 0x10
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x42d814], eax
push 0x11
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x42d7e0], eax
push 0x12
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x42d7dc], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d778]
add ebx, 0x3f00
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x42d870], eax
mov eax, dword [0x42d764]
call fcn.00435080
mov dword [0x42d838], eax
mov ebx, dword [0x42d838]
add ebx, 0x1c0
mov dword [0x42d888], ebx
mov ebx, dword [0x42d838]
add ebx, 0x1c4
mov dword [0x42d88c], ebx
mov ebx, dword [0x42d838]
add ebx, 0x1c8
mov dword [0x42d890], ebx
mov ebp, dword [0x42d894]
push dword [ebp + 4]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42d89c]
mov edi, dword [ebp + 4]
add edi, dword [0x42d814]
imul ebx, edi
mov ebp, dword [0x42d8a4]
mov edi, dword [ebp + 4]
add edi, dword [0x42d7e0]
imul ebx, edi
mov ebp, dword [0x42d8ac]
mov edi, dword [ebp + 4]
add edi, dword [0x42d7dc]
imul ebx, edi
mov dword [0x42d7e4], ebx
mov ebx, dword [0x42d7e4]
and ebx, ebx
je 0x404bc8
push dword [0x42d818]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x404b58
mov dword [0x42d818], 1
push 1
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d778]
add ebx, 0x3f04
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push 0
push 0
call fcn.00407b50
mov eax, 0x12c
call fcn.00435050
jmp 0x404bc7
mov ebx, 1
cmp ebx, dword [esp]
jne 0x404bc7
mov dword [0x42d818], 0
push 0
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d778]
add ebx, 0x3f04
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push 0
push 1
call fcn.00407b50
mov eax, 0x12c
call fcn.00435050
pop eax
mov ebp, dword [0x42d894]
push dword [ebp + 8]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42d89c]
mov edi, dword [ebp + 8]
add edi, dword [0x42d814]
imul ebx, edi
mov ebp, dword [0x42d8a4]
mov edi, dword [ebp + 8]
add edi, dword [0x42d7e0]
imul ebx, edi
mov ebp, dword [0x42d8ac]
mov edi, dword [ebp + 8]
add edi, dword [0x42d7dc]
imul ebx, edi
mov dword [0x42d7f4], ebx
mov ebx, dword [0x42d7f4]
and ebx, ebx
je 0x404d06
push dword [0x42d7ac]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x404c96
mov dword [0x42d7ac], 1
push 1
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d778]
add ebx, 0x3f08
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push 0
push 0
call fcn.00407b50
mov eax, 0x12c
call fcn.00435050
jmp 0x404d05
mov ebx, 1
cmp ebx, dword [esp]
jne 0x404d05
mov dword [0x42d7ac], 0
push 0
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d778]
add ebx, 0x3f08
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push 0
push 1
call fcn.00407b50
mov eax, 0x12c
call fcn.00435050
pop eax
mov ebp, dword [0x42d894]
push dword [ebp + 0xc]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42d89c]
mov edi, dword [ebp + 0xc]
add edi, dword [0x42d814]
imul ebx, edi
mov ebp, dword [0x42d8a4]
mov edi, dword [ebp + 0xc]
add edi, dword [0x42d7e0]
imul ebx, edi
mov ebp, dword [0x42d8ac]
mov edi, dword [ebp + 0xc]
add edi, dword [0x42d7dc]
imul ebx, edi
mov dword [0x42d7f8], ebx
mov ebx, dword [0x42d7f8]
and ebx, ebx
je 0x404e44
push dword [0x42d85c]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x404dd4
mov dword [0x42d85c], 1
push 1
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d778]
add ebx, 0x3f10
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push 0
push 0
call fcn.00407b50
mov eax, 0x12c
call fcn.00435050
jmp 0x404e43
mov ebx, 1
cmp ebx, dword [esp]
jne 0x404e43
mov dword [0x42d85c], 0
push 0
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d778]
add ebx, 0x3f10
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push 0
push 1
call fcn.00407b50
mov eax, 0x12c
call fcn.00435050
pop eax
mov ebp, dword [0x42d894]
push dword [ebp + 0x10]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42d89c]
mov edi, dword [ebp + 0x10]
add edi, dword [0x42d814]
imul ebx, edi
mov ebp, dword [0x42d8a4]
mov edi, dword [ebp + 0x10]
add edi, dword [0x42d7e0]
imul ebx, edi
mov ebp, dword [0x42d8ac]
mov edi, dword [ebp + 0x10]
add edi, dword [0x42d7dc]
imul ebx, edi
mov dword [0x42d7fc], ebx
mov ebx, dword [0x42d7fc]
and ebx, ebx
je 0x404fc3
push dword [0x42d860]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x404f34
mov dword [0x42d860], 1
push 0x90
mov ebx, dword [0x42d764]
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 0x90
mov ebx, dword [0x42d764]
inc ebx
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push dword [0x42d824]
push 2
push dword [0x42d764]
mov ebx, dword [0x42d850]
add ebx, 0x3d93cc
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push 0
push 0
call fcn.00407b50
mov eax, 0x12c
call fcn.00435050
jmp 0x404fc2
mov ebx, 1
cmp ebx, dword [esp]
jne 0x404fc2
mov dword [0x42d860], 0
push 0x29
mov ebx, dword [0x42d764]
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push 7
mov ebx, dword [0x42d764]
inc ebx
mov eax, ebx
call fcn.00435060
mov dword [0x42d870], eax
push dword [0x42d824]
push 2
push dword [0x42d764]
mov ebx, dword [0x42d850]
add ebx, 0x3d93cc
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push 0
push 1
call fcn.00407b50
mov eax, 0x12c
call fcn.00435050
pop eax
mov ebp, dword [0x42d894]
push dword [ebp + 0x14]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42d89c]
mov edi, dword [ebp + 0x14]
add edi, dword [0x42d814]
imul ebx, edi
mov ebp, dword [0x42d8a4]
mov edi, dword [ebp + 0x14]
add edi, dword [0x42d7e0]
imul ebx, edi
mov ebp, dword [0x42d8ac]
mov edi, dword [ebp + 0x14]
add edi, dword [0x42d7dc]
imul ebx, edi
mov dword [0x42d800], ebx
mov ebx, dword [0x42d800]
and ebx, ebx
je 0x405101
push dword [0x42d7a8]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x405091
mov dword [0x42d7a8], 1
push 1
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d778]
add ebx, 0x3f14
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push 0
push 0
call fcn.00407b50
mov eax, 0x12c
call fcn.00435050
jmp 0x405100
mov ebx, 1
cmp ebx, dword [esp]
jne 0x405100
mov dword [0x42d7a8], 0
push 0
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d778]
add ebx, 0x3f14
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push 0
push 1
call fcn.00407b50
mov eax, 0x12c
call fcn.00435050
pop eax
mov ebp, dword [0x42d894]
push dword [ebp + 0x18]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42d89c]
mov edi, dword [ebp + 0x18]
add edi, dword [0x42d814]
imul ebx, edi
mov ebp, dword [0x42d8a4]
mov edi, dword [ebp + 0x18]
add edi, dword [0x42d7e0]
imul ebx, edi
mov ebp, dword [0x42d8ac]
mov edi, dword [ebp + 0x18]
add edi, dword [0x42d7dc]
imul ebx, edi
mov dword [0x42d804], ebx
mov ebx, dword [0x42d804]
and ebx, ebx
je 0x40523f
push dword [0x42d744]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x4051cf
mov dword [0x42d744], 1
push 1
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d778]
add ebx, 0x3f18
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push 0
push 0
call fcn.00407b50
mov eax, 0x12c
call fcn.00435050
jmp 0x40523e
mov ebx, 1
cmp ebx, dword [esp]
jne 0x40523e
mov dword [0x42d744], 0
push 0
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d778]
add ebx, 0x3f18
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push 0
push 1
call fcn.00407b50
mov eax, 0x12c
call fcn.00435050
pop eax
mov ebp, dword [0x42d894]
push dword [ebp + 0x1c]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42d89c]
mov edi, dword [ebp + 0x1c]
add edi, dword [0x42d814]
imul ebx, edi
mov ebp, dword [0x42d8a4]
mov edi, dword [ebp + 0x1c]
add edi, dword [0x42d7e0]
imul ebx, edi
mov ebp, dword [0x42d8ac]
mov edi, dword [ebp + 0x1c]
add edi, dword [0x42d7dc]
imul ebx, edi
mov dword [0x42d808], ebx
mov ebx, dword [0x42d808]
and ebx, ebx
je 0x405369
mov ebx, dword [0x42d88c]
cmp ebx, 0x3e8
jle 0x405369
push dword [0x42d824]
push 4
push dword [0x42d764]
push dword [0x42d888]
push dword [0x42d74c]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x42d870], eax
mov eax, dword [0x42d764]
call fcn.00435090
fistp dword [0x42d758]
push dword [0x42d824]
push 4
push dword [0x42d764]
push dword [0x42d88c]
push dword [0x42d74c]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x42d870], eax
mov eax, dword [0x42d764]
call fcn.00435090
fistp dword [0x42d75c]
push dword [0x42d824]
push 4
push dword [0x42d764]
push dword [0x42d890]
push dword [0x42d74c]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x42d870], eax
mov eax, dword [0x42d764]
call fcn.00435090
fistp dword [0x42d760]
push 0
push 0
call fcn.00407b50
mov eax, 0x12c
call fcn.00435050
mov ebp, dword [0x42d894]
push dword [ebp + 0x20]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42d89c]
mov edi, dword [ebp + 0x20]
add edi, dword [0x42d814]
imul ebx, edi
mov ebp, dword [0x42d8a4]
mov edi, dword [ebp + 0x20]
add edi, dword [0x42d7e0]
imul ebx, edi
mov ebp, dword [0x42d8ac]
mov edi, dword [ebp + 0x20]
add edi, dword [0x42d7dc]
imul ebx, edi
mov dword [0x42d80c], ebx
mov ebx, dword [0x42d80c]
and ebx, ebx
je 0x4054c2
mov ebx, dword [0x42d75c]
and ebx, ebx
je 0x4054c2
mov ebx, dword [0x42d88c]
cmp ebx, 0x3e8
jle 0x4054c2
push dword [0x42d758]
fild dword [esp]
fstp dword [esp]
mov eax, dword [0x42d764]
call fcn.004350a0
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
push dword [0x42d888]
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push dword [0x42d75c]
fild dword [esp]
fstp dword [esp]
mov eax, dword [0x42d764]
call fcn.004350a0
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
push dword [0x42d88c]
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push dword [0x42d760]
fild dword [esp]
fstp dword [esp]
mov eax, dword [0x42d764]
call fcn.004350a0
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
push dword [0x42d890]
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push 0
push 0
call fcn.00407b50
mov eax, 0x12c
call fcn.00435050
mov ebp, dword [0x42d894]
push dword [ebp + 0x24]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42d89c]
mov edi, dword [ebp + 0x24]
add edi, dword [0x42d814]
imul ebx, edi
mov ebp, dword [0x42d8a4]
mov edi, dword [ebp + 0x24]
add edi, dword [0x42d7e0]
imul ebx, edi
mov ebp, dword [0x42d8ac]
mov edi, dword [ebp + 0x24]
add edi, dword [0x42d7dc]
imul ebx, edi
mov dword [0x42d810], ebx
mov ebx, dword [0x42d810]
and ebx, ebx
je 0x405600
push dword [0x42d82c]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x405590
mov dword [0x42d82c], 1
push 1
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d778]
add ebx, 0x3f1c
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push 0
push 0
call fcn.00407b50
mov eax, 0x12c
call fcn.00435050
jmp 0x4055ff
mov ebx, 1
cmp ebx, dword [esp]
jne 0x4055ff
mov dword [0x42d82c], 0
push 0
mov eax, dword [0x42d764]
call fcn.00435070
mov dword [0x42d870], eax
push dword [0x42d824]
push 4
push dword [0x42d764]
mov ebx, dword [0x42d778]
add ebx, 0x3f1c
push ebx
push dword [0x42d74c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42d870], eax
push 0
push 1
call fcn.00407b50
mov eax, 0x12c
call fcn.00435050
pop eax
mov ebp, dword [0x42d894]
push dword [ebp + 0x28]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42d89c]
mov edi, dword [ebp + 0x28]
add edi, dword [0x42d814]
imul ebx, edi
mov ebp, dword [0x42d8a4]
mov edi, dword [ebp + 0x28]
add edi, dword [0x42d7e0]
imul ebx, edi
mov ebp, dword [0x42d8ac]
mov edi, dword [ebp + 0x28]
add edi, dword [0x42d7dc]
imul ebx, edi
mov dword [0x42d7e8], ebx
mov ebx, dword [0x42d7e8]
and ebx, ebx
je 0x40566a
push str.Key_10_Pressed
push 0
push 0
call fcn.00407683
mov ebp, dword [0x42d894]
push dword [ebp + 0x2c]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42d89c]
mov edi, dword [ebp + 0x2c]
add edi, dword [0x42d814]
imul ebx, edi
mov ebp, dword [0x42d8a4]
mov edi, dword [ebp + 0x2c]
add edi, dword [0x42d7e0]
imul ebx, edi
mov ebp, dword [0x42d8ac]
mov edi, dword [ebp + 0x2c]
add edi, dword [0x42d7dc]
imul ebx, edi
mov dword [0x42d7ec], ebx
mov ebx, dword [0x42d7ec]
and ebx, ebx
je 0x4056c0
mov ebp, dword [0x42d894]
push dword [ebp + 0x30]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42d89c]
mov edi, dword [ebp + 0x30]
add edi, dword [0x42d814]
imul ebx, edi
mov ebp, dword [0x42d8a4]
mov edi, dword [ebp + 0x30]
add edi, dword [0x42d7e0]
imul ebx, edi
mov ebp, dword [0x42d8ac]
mov edi, dword [ebp + 0x30]
add edi, dword [0x42d7dc]
imul ebx, edi
mov dword [0x42d7f0], ebx
mov ebx, dword [0x42d7f0]
and ebx, ebx
je 0x405716
mov dword [0x42d7e4], 0
mov dword [0x42d7f4], 0
mov dword [0x42d7f8], 0
mov dword [0x42d7fc], 0
mov dword [0x42d800], 0
mov dword [0x42d804], 0
mov dword [0x42d808], 0
mov dword [0x42d80c], 0
mov dword [0x42d810], 0
mov dword [0x42d7e8], 0
mov dword [0x42d7ec], 0
mov dword [0x42d7f0], 0
mov ebx, dword [0x42d7b0]
cmp ebx, 0x10
jne 0x40579e
jmp 0x4061e5
call fcn.00412270
push eax
mov ebx, 1
cmp ebx, dword [esp]
jne 0x4057d2
call fcn.00412290
mov ebx, eax
and ebx, ebx
jne 0x4057cd
push 0x415131
push str.http:__www.cheathappens.com
push str.iexplore
call fcn.00408667
jmp 0x405884
mov ebx, 2
cmp ebx, dword [esp]
jne 0x405800
call fcn.00412290
mov ebx, eax
and ebx, ebx
jne 0x4057fb
push 0x415131
push str.www.cheathappens.com_trainer_troubleshooting.asp
push str.iexplore
call fcn.00408667
jmp 0x405884
mov ebx, 3
cmp ebx, dword [esp]
jne 0x405884
call fcn.00412290
mov ebx, eax
and ebx, ebx
jne 0x405884
push dword [0x42df54]
push 0
push 0x415131
mov edx, dword [0x42d79c]
push dword [0x42df54]
call fcn.00414130
mov edx, str.help.txt
call fcn.00414130
inc dword [0x42df54]
push str.notepad.exe
mov edx, dword [0x42ac9c]
add dword [esp + 4], edx
call fcn.0040864d
pop dword [0x42df54]
mov ebx, dword [0x42d798]
cmp ebx, 1
jne 0x405884
push 0
push 0x415131
push str.Custom_Key_List.txt
push str.notepad.exe
call fcn.0040864d
pop eax
push dword [0x42d7d0]
push 1
call fcn.00411980
mov eax, 1
call fcn.00435050
jmp 0x404896
push 0
call 0x4061ff
push dword [0x42d730]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.004078b9
call fcn.00408724
call fcn.004087e4
call fcn.004110df
call fcn.0041215b
call fcn.0041387d
call fcn.0041407c
ret