Function at 0x401000
Capabilities:
Authenticate hmac
Log keystrokes via polling
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push 0x248
push 0
push 0x431a6c
call sub.CRTDLL.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x431a70], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x431a6c], eax
call fcn.004132f8
call fcn.00412b3b
call fcn.00411496
call fcn.00410ba7
call fcn.00410b44
call fcn.00410437
call fcn.00407aa2
call fcn.00407990
call fcn.00407360
call fcn.00407200
call fcn.0040677f
call fcn.00413370
call fcn.004068e0
mov dword [0x431c40], eax
call fcn.004080c9
mov ebp, 0x4152f4
push ebp
push 0
call fcn.00410808
mov dword [0x431b78], eax
mov ebp, 0x426872
push ebp
push 1
call fcn.00410808
mov dword [0x431b7c], eax
mov ebp, 0x427689
push ebp
push 2
call fcn.00410808
mov dword [0x431b80], eax
mov ebp, 0x42829c
push ebp
push 3
call fcn.00410808
mov dword [0x431b84], eax
mov ebp, str.RIFF
push ebp
push 0
call fcn.00406d70
mov ebp, str.RIFF__
push ebp
push 1
call fcn.00406d70
push dword [0x432344]
call fcn.00407380
sub esp, 4
lea ecx, [0x431b18]
pop edx
call fcn.00406000
push dword [0x432344]
push dword [0x431b18]
call fcn.00407920
sub esp, 4
lea ecx, [0x431b18]
pop edx
call fcn.00406000
mov edx, 0x415073
lea ecx, [0x431a84]
call fcn.00406010
mov edx, 0x415073
lea ecx, [0x431aec]
call fcn.00406010
mov edx, 0x415073
lea ecx, [0x431b08]
call fcn.00406010
mov dword [0x431bf8], 0
push dword [0x431b18]
push 0
call fcn.00412c8c
mov ebx, eax
and ebx, ebx
jle 0x401521
mov dword [0x431b74], 1
mov eax, 0x3b8
cmp eax, dword [0x431b74]
jl 0x4011ba
push 0
call fcn.00412cc0
mov dword [0x431a80], eax
inc dword [0x431b74]
jmp 0x401196
mov dword [0x431b74], 0x3b9
mov eax, 0x3c0
cmp eax, dword [0x431b74]
jl 0x401261
push 0
call fcn.00412cc0
mov dword [0x431a80], eax
push dword [0x432344]
push dword [0x432344]
push 0
mov eax, dword [0x431a80]
cdq
push edx
push eax
call fcn.004064d0
sub esp, 4
inc dword [0x432344]
mov edx, dword [0x42ef98]
add dword [esp], edx
call fcn.004060c0
pop dword [0x432344]
mov dword [0x431a80], eax
mov edx, dword [0x431a84]
push dword [0x432344]
call fcn.004133c0
push dword [0x432344]
push dword [0x431a80]
call fcn.00406130
sub esp, 4
pop eax
lea ecx, [0x431a84]
pop edx
call fcn.00406000
inc dword [0x431b74]
jmp 0x4011c4
push dword [0x431a84]
call fcn.004059ed
mov dword [0x431a80], eax
mov ebx, dword [0x431a80]
xor ebx, 0x98989898
mov dword [0x431a80], ebx
push dword [0x431a80]
pop dword [0x431c60]
push dword [0x432344]
push 0xa
push dword [0x432344]
mov edx, str.0000000000
call fcn.004133c0
push dword [0x432344]
push dword [0x431a80]
call fcn.00406150
sub esp, 4
pop eax
inc dword [0x432344]
mov edx, dword [0x42ef98]
add dword [esp], edx
call fcn.00406240
sub esp, 4
lea ecx, [0x431a84]
pop edx
call fcn.00406000
mov dword [0x431b74], 0x3c1
mov eax, 0x3c8
cmp eax, dword [0x431b74]
jl 0x401389
push 0
call fcn.00412cc0
mov dword [0x431a80], eax
push dword [0x432344]
push dword [0x432344]
push 0
mov eax, dword [0x431a80]
cdq
push edx
push eax
call fcn.004064d0
sub esp, 4
inc dword [0x432344]
mov edx, dword [0x42ef98]
add dword [esp], edx
call fcn.004060c0
pop dword [0x432344]
mov dword [0x431a80], eax
mov edx, dword [0x431aec]
push dword [0x432344]
call fcn.004133c0
push dword [0x432344]
push dword [0x431a80]
call fcn.00406130
sub esp, 4
pop eax
lea ecx, [0x431aec]
pop edx
call fcn.00406000
inc dword [0x431b74]
jmp 0x4012ec
push dword [0x431aec]
call fcn.004059ed
mov dword [0x431c00], eax
mov dword [0x431b74], 0x3c9
mov eax, 0x3d0
cmp eax, dword [0x431b74]
jl 0x401440
push 0
call fcn.00412cc0
mov dword [0x431a80], eax
push dword [0x432344]
push dword [0x432344]
push 0
mov eax, dword [0x431a80]
cdq
push edx
push eax
call fcn.004064d0
sub esp, 4
inc dword [0x432344]
mov edx, dword [0x42ef98]
add dword [esp], edx
call fcn.004060c0
pop dword [0x432344]
mov dword [0x431a80], eax
mov edx, dword [0x431b08]
push dword [0x432344]
call fcn.004133c0
push dword [0x432344]
push dword [0x431a80]
call fcn.00406130
sub esp, 4
pop eax
lea ecx, [0x431b08]
pop edx
call fcn.00406000
inc dword [0x431b74]
jmp 0x4013a3
push dword [0x431b08]
call fcn.004059ed
mov dword [0x431a80], eax
push dword [0x431a80]
pop dword [0x431bfc]
mov dword [0x431b74], 0x3d1
mov ebx, dword [0x431bfc]
dec ebx
cmp ebx, dword [0x431b74]
jl 0x40148c
push 0
call fcn.00412cc0
mov dword [0x431a80], eax
inc dword [0x431b74]
jmp 0x401466
push dword [0x431bfc]
pop dword [0x431b74]
mov ebx, dword [0x431bfc]
add ebx, 0x12
cmp ebx, dword [0x431b74]
jl 0x4014d2
push 0
call fcn.00412cc0
mov dword [0x431a80], eax
mov ebx, dword [0x431bf8]
add ebx, dword [0x431a80]
mov dword [0x431bf8], ebx
inc dword [0x431b74]
jmp 0x401498
mov ebx, dword [0x431c00]
xor ebx, dword [0x431bf8]
mov dword [0x431c64], ebx
mov ebx, dword [0x431c64]
and ebx, ebx
jne 0x4014f8
mov dword [0x431c64], 0x63
mov ebx, dword [0x431c64]
xor ebx, 0x98989898
mov dword [0x431c64], ebx
mov ebx, dword [0x431c60]
cmp ebx, dword [0x431c64]
jne 0x40151a
jmp 0x40151f
jmp 0x405654
jmp 0x401526
jmp 0x405654
push 5
push 0x431c7c
push 0
mov edx, dword [0x431c7c]
call fcn.00406018
mov eax, 0xd
push 4
call fcn.00435000
push 5
push 0x431c84
push 0
mov edx, dword [0x431c84]
call fcn.00406018
mov eax, 0xd
push 4
call fcn.00435000
push 5
push 0x431c8c
push 0
mov edx, dword [0x431c8c]
call fcn.00406018
mov eax, 0xd
push 4
call fcn.00435000
push 5
push 0x431c94
push 0
mov edx, dword [0x431c94]
call fcn.00406018
mov eax, 0xd
push 4
call fcn.00435000
push 5
push 0x431c9c
push 0
mov edx, dword [0x431c9c]
call fcn.00406018
mov eax, 0xd
push 4
call fcn.00435000
mov dword [0x431b74], 1
mov eax, 0xc
cmp eax, dword [0x431b74]
jl 0x401657
mov ebx, dword [0x431b74]
mov ebp, dword [0x431c84]
sal ebx, 2
mov dword [ebp + ebx], 1
mov ebx, dword [0x431b74]
mov ebp, dword [0x431c8c]
sal ebx, 2
mov dword [ebp + ebx], 1
mov ebx, dword [0x431b74]
mov ebp, dword [0x431c94]
sal ebx, 2
mov dword [ebp + ebx], 1
inc dword [0x431b74]
jmp 0x4015fd
mov edx, str.Overlord_Raising_Hell
lea ecx, [0x431b5c]
call fcn.00406010
push dword [0x432344]
call fcn.004129f0
sub esp, 4
lea ecx, [0x431b38]
pop edx
call fcn.00406000
push dword [0x432344]
mov edx, dword [0x431b38]
push dword [0x432344]
call fcn.004133c0
mov edx, str.CH.dll
call fcn.004133c0
inc dword [0x432344]
push 0
mov edx, dword [0x42ef98]
add dword [esp + 4], edx
call fcn.00412c5e
pop dword [0x432344]
and eax, eax
je 0x4016f1
mov ebp, 0x42e1b5
mov ebx, ebp
mov ebp, 0x42d5b5
sub ebx, ebp
push ebx
mov ebp, 0x42d5b5
push ebp
push 0
call fcn.00412d10
push 0
call fcn.00412ab7
jmp 0x401700
push str.Could_not_install_the_file___Installtion_failed
push str.Error
call fcn.00407241
push dword [0x432344]
mov edx, dword [0x431b38]
push dword [0x432344]
call fcn.004133c0
mov edx, str.help.txt
call fcn.004133c0
inc dword [0x432344]
push 0
mov edx, dword [0x42ef98]
add dword [esp + 4], edx
call fcn.00412c5e
pop dword [0x432344]
and eax, eax
je 0x401770
mov ebp, 0x42ef97
mov ebx, ebp
mov ebp, 0x42e1b5
sub ebx, ebp
push ebx
mov ebp, 0x42e1b5
push ebp
push 0
call fcn.00412d10
push 0
call fcn.00412ab7
jmp 0x40177f
push str.Could_not_create_HELP.TXT_file.
push str.Error
call fcn.00407241
push str.CH_Trainer_Keys.dat
push 0
call fcn.00412c8c
mov dword [0x431c40], eax
mov ebx, dword [0x431c40]
and ebx, ebx
jle 0x4017b1
mov dword [0x431b34], 1
push 2
call fcn.00412ab7
call fcn.004058f7
call fcn.004114f0
mov dword [0x431b48], eax
mov ebx, dword [0x431b48]
cmp ebx, 0x10
jne 0x4017d0
jmp 0x405654
call fcn.00411500
push eax
mov ebx, 1
cmp ebx, dword [esp]
jne 0x401804
call fcn.00411520
mov ebx, eax
and ebx, ebx
jne 0x4017ff
push 0x415073
push str.http:__www.cheathappens.com
push str.iexplore
call fcn.004078e7
jmp 0x4018b6
mov ebx, 2
cmp ebx, dword [esp]
jne 0x401832
call fcn.00411520
mov ebx, eax
and ebx, ebx
jne 0x40182d
push 0x415073
push str.www.cheathappens.com_trainer_troubleshooting.asp
push str.iexplore
call fcn.004078e7
jmp 0x4018b6
mov ebx, 3
cmp ebx, dword [esp]
jne 0x4018b6
call fcn.00411520
mov ebx, eax
and ebx, ebx
jne 0x4018b6
push dword [0x432344]
push 0
push 0x415073
mov edx, dword [0x431b38]
push dword [0x432344]
call fcn.004133c0
mov edx, str.help.txt
call fcn.004133c0
inc dword [0x432344]
push str.notepad.exe
mov edx, dword [0x42ef98]
add dword [esp + 4], edx
call fcn.004078cd
pop dword [0x432344]
mov ebx, dword [0x431b34]
cmp ebx, 1
jne 0x4018b6
push 0
push 0x415073
push str.Custom_Key_List.txt
push str.notepad.exe
call fcn.004078cd
pop eax
push dword [0x431b7c]
push 1
call fcn.00410c10
mov eax, 0xa
call fcn.00435050
push str.Run_Game_and_then_press_F1_at_Main_Menu.
push 0
push 0
call fcn.004068c3
push 0x70
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
and ebx, ebx
je 0x4017b6
mov edx, str.Overlord.exe
lea ecx, [0x431c2c]
call fcn.00406010
call fcn.00404a75
mov edx, str.CH.dll
lea ecx, [0x431b14]
call fcn.00406010
mov edx, dword [0x431b38]
push dword [0x432344]
call fcn.004133c0
mov edx, dword [0x431b14]
call fcn.004133c0
lea ecx, [0x431b54]
pop edx
call fcn.00406000
call fcn.00404c79
call fcn.00404a75
call fcn.004114f0
mov dword [0x431b48], eax
call fcn.004055c9
mov ebx, dword [0x431b48]
cmp ebx, 0x10
jne 0x40196f
jmp 0x405654
mov eax, 0x3e8
call fcn.00435050
mov ebx, dword [0x431c28]
and ebx, ebx
je 0x40190e
mov ebx, dword [0x431b10]
and ebx, ebx
je 0x40190e
push dword [0x432344]
mov edx, dword [0x431c2c]
push dword [0x432344]
call fcn.004133c0
mov edx, str._trainer_ready_
call fcn.004133c0
inc dword [0x432344]
push 0
push 0
mov edx, dword [0x42ef98]
add dword [esp + 8], edx
call fcn.004068c3
pop dword [0x432344]
push 0
push 0
call fcn.00406d90
mov eax, 0x12c
call fcn.00435050
mov ebp, dword [0x431c7c]
mov dword [ebp + 4], 0x61
mov dword [ebp + 8], 0x62
mov dword [ebp + 0xc], 0x63
mov dword [ebp + 0x10], 0x64
mov dword [ebp + 0x14], 0x65
mov dword [ebp + 0x18], 0x66
mov dword [ebp + 0x1c], 0x67
mov dword [ebp + 0x20], 0x68
mov dword [ebp + 0x24], 0x69
mov dword [ebp + 0x28], 0x6b
mov dword [ebp + 0x2c], 0x6d
mov dword [ebp + 0x30], 0
push str.CH_Trainer_Keys.dat
push 0
call fcn.00412c8c
mov dword [0x431c40], eax
mov ebx, dword [0x431c40]
and ebx, ebx
jle 0x401bd1
mov dword [0x431b34], 1
push 0
call fcn.00412cc0
mov dword [0x431c08], eax
mov dword [0x431b74], 1
mov eax, dword [0x431c08]
cmp eax, dword [0x431b74]
jl 0x401bb3
push dword [0x432344]
push 0
call fcn.00412d70
sub esp, 4
lea ecx, [0x431c4c]
pop edx
call fcn.00406000
push dword [0x431c4c]
mov edx, str.SHIFT
pop ecx
call fcn.004350b0
je 0x401ae5
mov ebx, dword [0x431b74]
mov ebp, dword [0x431c84]
sal ebx, 2
mov dword [ebp + ebx], 0
push dword [0x431c4c]
mov edx, str.CTRL
pop ecx
call fcn.004350b0
je 0x401b0f
mov ebx, dword [0x431b74]
mov ebp, dword [0x431c8c]
sal ebx, 2
mov dword [ebp + ebx], 0
push dword [0x431c4c]
mov edx, 0x4151d6
pop ecx
call fcn.004350b0
je 0x401b39
mov ebx, dword [0x431b74]
mov ebp, dword [0x431c94]
sal ebx, 2
mov dword [ebp + ebx], 0
push 0
call fcn.00412cc0
push eax
mov ebx, dword [0x431b74]
mov ebp, dword [0x431c7c]
sal ebx, 2
pop dword [ebp + ebx]
push dword [0x432344]
push dword [0x432344]
push 0
mov ebx, dword [0x431b74]
sal ebx, 2
mov eax, dword [ebp + ebx]
cdq
push edx
push eax
call fcn.004064d0
sub esp, 4
inc dword [0x432344]
mov edx, dword [0x42ef98]
add dword [esp], edx
call fcn.004060c0
pop dword [0x432344]
push eax
mov ebx, dword [0x431b74]
sal ebx, 2
pop dword [ebp + ebx]
inc dword [0x431b74]
jmp 0x401a8b
push 0
call fcn.00412ab7
push str.Custom_Keys_Loaded
push 0
push 0
call fcn.004068c3
push 0x89
mov ebx, dword [0x431af8]
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x35
mov ebx, dword [0x431af8]
inc ebx
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 2
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x6f
mov ebx, dword [0x431af8]
add ebx, 3
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x99
mov ebx, dword [0x431af8]
add ebx, 4
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 5
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0xd9
mov ebx, dword [0x431af8]
add ebx, 6
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x9b
mov ebx, dword [0x431af8]
add ebx, 7
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x3c
mov ebx, dword [0x431af8]
add ebx, 8
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 1
mov ebx, dword [0x431af8]
add ebx, 9
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0xa
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0xb
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0xc3
mov ebx, dword [0x431af8]
add ebx, 0xc
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
add ebx, 0xd
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0xe
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0xf
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x89
mov ebx, dword [0x431af8]
add ebx, 0x10
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x35
mov ebx, dword [0x431af8]
add ebx, 0x11
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 4
mov ebx, dword [0x431af8]
add ebx, 0x12
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x6f
mov ebx, dword [0x431af8]
add ebx, 0x13
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x99
mov ebx, dword [0x431af8]
add ebx, 0x14
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x15
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x8b
mov ebx, dword [0x431af8]
add ebx, 0x16
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x96
mov ebx, dword [0x431af8]
add ebx, 0x17
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0xf8
mov ebx, dword [0x431af8]
add ebx, 0x18
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 1
mov ebx, dword [0x431af8]
add ebx, 0x19
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x1a
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x1b
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0xc3
mov ebx, dword [0x431af8]
add ebx, 0x1c
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
add ebx, 0x1d
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x1e
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x1f
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x60
mov ebx, dword [0x431af8]
add ebx, 0x20
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x3b
mov ebx, dword [0x431af8]
add ebx, 0x21
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x2d
mov ebx, dword [0x431af8]
add ebx, 0x22
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x23
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x6f
mov ebx, dword [0x431af8]
add ebx, 0x24
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x99
mov ebx, dword [0x431af8]
add ebx, 0x25
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x26
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x75
mov ebx, dword [0x431af8]
add ebx, 0x27
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x12
mov ebx, dword [0x431af8]
add ebx, 0x28
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x8b
mov ebx, dword [0x431af8]
add ebx, 0x29
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0xc6
mov ebx, dword [0x431af8]
add ebx, 0x2a
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x2d
mov ebx, dword [0x431af8]
add ebx, 0x2b
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x48
mov ebx, dword [0x431af8]
add ebx, 0x2c
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 3
mov ebx, dword [0x431af8]
add ebx, 0x2d
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x2e
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x2f
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 5
mov ebx, dword [0x431af8]
add ebx, 0x30
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x2c
mov ebx, dword [0x431af8]
add ebx, 0x31
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 4
mov ebx, dword [0x431af8]
add ebx, 0x32
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x33
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x34
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0xc7
mov ebx, dword [0x431af8]
add ebx, 0x35
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x36
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x37
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x38
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push pe_nt_image_headers32
mov ebx, dword [0x431af8]
add ebx, 0x39
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x3f
mov ebx, dword [0x431af8]
add ebx, 0x3a
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x61
mov ebx, dword [0x431af8]
add ebx, 0x3b
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0xd8
mov ebx, dword [0x431af8]
add ebx, 0x3c
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x96
mov ebx, dword [0x431af8]
add ebx, 0x3d
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0xe4
mov ebx, dword [0x431af8]
add ebx, 0x3e
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x3f
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x40
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x41
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0xc3
mov ebx, dword [0x431af8]
add ebx, 0x42
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
add ebx, 0x43
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x44
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x45
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x46
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x47
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x48
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x49
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x4a
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x4b
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x4c
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x4d
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x4e
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x4f
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x8b
mov ebx, dword [0x431af8]
add ebx, 0x50
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
add ebx, 0x51
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x60
mov ebx, dword [0x431af8]
add ebx, 0x52
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 2
mov ebx, dword [0x431af8]
add ebx, 0x53
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x54
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x55
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x83
mov ebx, dword [0x431af8]
add ebx, 0x56
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x3d
mov ebx, dword [0x431af8]
add ebx, 0x57
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 8
mov ebx, dword [0x431af8]
add ebx, 0x58
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x6f
mov ebx, dword [0x431af8]
add ebx, 0x59
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x99
mov ebx, dword [0x431af8]
add ebx, 0x5a
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x5b
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 1
mov ebx, dword [0x431af8]
add ebx, 0x5c
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x75
mov ebx, dword [0x431af8]
add ebx, 0x5d
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x19
mov ebx, dword [0x431af8]
add ebx, 0x5e
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x83
mov ebx, dword [0x431af8]
add ebx, 0x5f
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0xfb
mov ebx, dword [0x431af8]
add ebx, 0x60
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x61
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x74
mov ebx, dword [0x431af8]
add ebx, 0x62
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x14
mov ebx, dword [0x431af8]
add ebx, 0x63
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0xc7
mov ebx, dword [0x431af8]
add ebx, 0x64
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push pe_nt_image_headers32
mov ebx, dword [0x431af8]
add ebx, 0x65
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x2c
mov ebx, dword [0x431af8]
add ebx, 0x66
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 4
mov ebx, dword [0x431af8]
add ebx, 0x67
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x68
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x69
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x6a
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x40
mov ebx, dword [0x431af8]
add ebx, 0x6b
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x1c
mov ebx, dword [0x431af8]
add ebx, 0x6c
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x46
mov ebx, dword [0x431af8]
add ebx, 0x6d
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0xc7
mov ebx, dword [0x431af8]
add ebx, 0x6e
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push pe_nt_image_headers32
mov ebx, dword [0x431af8]
add ebx, 0x6f
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x30
mov ebx, dword [0x431af8]
add ebx, 0x70
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 4
mov ebx, dword [0x431af8]
add ebx, 0x71
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x72
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x73
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x74
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x40
mov ebx, dword [0x431af8]
add ebx, 0x75
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x1c
mov ebx, dword [0x431af8]
add ebx, 0x76
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x46
mov ebx, dword [0x431af8]
add ebx, 0x77
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0xc3
mov ebx, dword [0x431af8]
add ebx, 0x78
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
add ebx, 0x79
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x7a
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x7b
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x7c
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x7d
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x7e
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x7f
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x89
mov ebx, dword [0x431af8]
add ebx, 0x80
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x35
mov ebx, dword [0x431af8]
add ebx, 0x81
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x82
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x6f
mov ebx, dword [0x431af8]
add ebx, 0x83
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x99
mov ebx, dword [0x431af8]
add ebx, 0x84
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x85
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0xd9
mov ebx, dword [0x431af8]
add ebx, 0x86
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x9b
mov ebx, dword [0x431af8]
add ebx, 0x87
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x44
mov ebx, dword [0x431af8]
add ebx, 0x88
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 1
mov ebx, dword [0x431af8]
add ebx, 0x89
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x8a
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x8b
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x83
mov ebx, dword [0x431af8]
add ebx, 0x8c
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x3d
mov ebx, dword [0x431af8]
add ebx, 0x8d
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x10
mov ebx, dword [0x431af8]
add ebx, 0x8e
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x6f
mov ebx, dword [0x431af8]
add ebx, 0x8f
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x99
mov ebx, dword [0x431af8]
add ebx, 0x90
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x91
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 1
mov ebx, dword [0x431af8]
add ebx, 0x92
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x75
mov ebx, dword [0x431af8]
add ebx, 0x93
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x14
mov ebx, dword [0x431af8]
add ebx, 0x94
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0xc7
mov ebx, dword [0x431af8]
add ebx, 0x95
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x86
mov ebx, dword [0x431af8]
add ebx, 0x96
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x2c
mov ebx, dword [0x431af8]
add ebx, 0x97
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 4
mov ebx, dword [0x431af8]
add ebx, 0x98
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x99
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x9a
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0x9b
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x40
mov ebx, dword [0x431af8]
add ebx, 0x9c
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x1c
mov ebx, dword [0x431af8]
add ebx, 0x9d
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x46
mov ebx, dword [0x431af8]
add ebx, 0x9e
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0xc7
mov ebx, dword [0x431af8]
add ebx, 0x9f
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x86
mov ebx, dword [0x431af8]
add ebx, 0xa0
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x30
mov ebx, dword [0x431af8]
add ebx, 0xa1
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 4
mov ebx, dword [0x431af8]
add ebx, 0xa2
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0xa3
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0xa4
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0xa5
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x40
mov ebx, dword [0x431af8]
add ebx, 0xa6
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x1c
mov ebx, dword [0x431af8]
add ebx, 0xa7
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x46
mov ebx, dword [0x431af8]
add ebx, 0xa8
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x83
mov ebx, dword [0x431af8]
add ebx, 0xa9
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x3d
mov ebx, dword [0x431af8]
add ebx, 0xaa
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x14
mov ebx, dword [0x431af8]
add ebx, 0xab
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x6f
mov ebx, dword [0x431af8]
add ebx, 0xac
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x99
mov ebx, dword [0x431af8]
add ebx, 0xad
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0xae
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 1
mov ebx, dword [0x431af8]
add ebx, 0xaf
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x75
mov ebx, dword [0x431af8]
add ebx, 0xb0
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x14
mov ebx, dword [0x431af8]
add ebx, 0xb1
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0xc7
mov ebx, dword [0x431af8]
add ebx, 0xb2
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x86
mov ebx, dword [0x431af8]
add ebx, 0xb3
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x70
mov ebx, dword [0x431af8]
add ebx, 0xb4
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 4
mov ebx, dword [0x431af8]
add ebx, 0xb5
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0xb6
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0xb7
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0xb8
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x40
mov ebx, dword [0x431af8]
add ebx, 0xb9
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x1c
mov ebx, dword [0x431af8]
add ebx, 0xba
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x46
mov ebx, dword [0x431af8]
add ebx, 0xbb
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0xc7
mov ebx, dword [0x431af8]
add ebx, 0xbc
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x86
mov ebx, dword [0x431af8]
add ebx, 0xbd
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x74
mov ebx, dword [0x431af8]
add ebx, 0xbe
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 4
mov ebx, dword [0x431af8]
add ebx, 0xbf
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0xc0
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0xc1
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 0xc2
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x40
mov ebx, dword [0x431af8]
add ebx, 0xc3
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x1c
mov ebx, dword [0x431af8]
add ebx, 0xc4
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x46
mov ebx, dword [0x431af8]
add ebx, 0xc5
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0xc3
mov ebx, dword [0x431af8]
add ebx, 0xc6
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
add ebx, 0xc7
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push dword [0x431c04]
push 0xc8
push dword [0x431af8]
mov ebx, dword [0x431b10]
add ebx, 0x1091
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
mov ebx, dword [0x431b10]
add ebx, 0x3f00
push ebx
mov eax, dword [0x431af8]
call fcn.00435070
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
mov ebx, dword [0x431b10]
add ebx, 0x1093
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
mov ebx, dword [0x431b10]
add ebx, 0x10b4
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
mov ebx, dword [0x431b10]
add ebx, 0x1113
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
mov ebx, dword [0x431b10]
add ebx, 0x3f04
push ebx
mov eax, dword [0x431af8]
call fcn.00435070
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
mov ebx, dword [0x431b10]
add ebx, 0x10a3
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
mov ebx, dword [0x431b10]
add ebx, 0x3f08
push ebx
mov eax, dword [0x431af8]
call fcn.00435070
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
mov ebx, dword [0x431b10]
add ebx, 0x10e9
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
mov ebx, dword [0x431b10]
add ebx, 0x3f10
push ebx
mov eax, dword [0x431af8]
call fcn.00435070
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
mov ebx, dword [0x431b10]
add ebx, 0x111f
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
mov ebx, dword [0x431b10]
add ebx, 0x3f14
push ebx
mov eax, dword [0x431af8]
call fcn.00435070
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
mov ebx, dword [0x431b10]
add ebx, 0x113c
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push 0xe8
mov ebx, dword [0x431af8]
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
inc ebx
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
add ebx, 2
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
add ebx, 3
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
add ebx, 4
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
add ebx, 5
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push dword [0x431c04]
push 6
push dword [0x431af8]
mov ebx, dword [0x431c28]
add ebx, 0x201901
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
mov ebx, dword [0x431b10]
add ebx, 0x1111
mov edi, dword [0x431c28]
add edi, 0x201901
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x431af8]
call fcn.00435070
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
mov ebx, dword [0x431c28]
add ebx, 0x201902
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push 0xe8
mov ebx, dword [0x431af8]
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
inc ebx
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
add ebx, 2
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
add ebx, 3
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
add ebx, 4
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
add ebx, 5
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push dword [0x431c04]
push 6
push dword [0x431af8]
mov ebx, dword [0x431c28]
add ebx, 0x2015ba
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
mov ebx, dword [0x431b10]
add ebx, 0x10a1
mov edi, dword [0x431c28]
add edi, 0x2015ba
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x431af8]
call fcn.00435070
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
mov ebx, dword [0x431c28]
add ebx, 0x2015bb
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push 0xe8
mov ebx, dword [0x431af8]
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
inc ebx
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
add ebx, 2
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
add ebx, 3
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
add ebx, 4
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
add ebx, 5
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push dword [0x431c04]
push 6
push dword [0x431af8]
mov ebx, dword [0x431c28]
add ebx, 0x212c14
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
mov ebx, dword [0x431b10]
add ebx, 0x10e1
mov edi, dword [0x431c28]
add edi, 0x212c14
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x431af8]
call fcn.00435070
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
mov ebx, dword [0x431c28]
add ebx, 0x212c15
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
mov dword [0x431c30], 0
mov eax, 0xff
cmp eax, dword [0x431c30]
jl 0x40367a
push dword [0x431c30]
call sub.USER32.dll_GetAsyncKeyState
inc dword [0x431c30]
jmp 0x40365a
call fcn.004114f0
mov dword [0x431b48], eax
push 0x41
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x431a88], eax
push 0x42
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x431a8c], eax
push 0x43
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x431a90], eax
push 0x44
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x431a94], eax
push 0x45
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x431a98], eax
push 0x46
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x431a9c], eax
push 0x47
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x431aa0], eax
push 0x52
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x431ae8], eax
push 0x48
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x431aa4], eax
push 0x70
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x431ab0], eax
push 0x71
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x431ac0], eax
push 0x72
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x431ac4], eax
push 0x73
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x431ac8], eax
push 0x74
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x431acc], eax
push 0x75
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x431ad0], eax
push 0x76
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x431ad4], eax
push 0x77
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x431ad8], eax
push 0x78
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x431adc], eax
push 0x79
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x431ab4], eax
push 0x7a
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x431ab8], eax
push 0x7b
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x431abc], eax
push 0x10
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x431aa8], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
mov ebx, dword [0x431b10]
add ebx, 0x3f00
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x431c40], eax
mov eax, dword [0x431af8]
call fcn.00435080
mov dword [0x431bec], eax
mov ebx, dword [0x431bec]
add ebx, 0x42c
mov dword [0x431bc8], ebx
mov ebx, dword [0x431bec]
add ebx, 0x470
mov dword [0x431b58], ebx
mov ebx, dword [0x431bec]
add ebx, 0x88
mov dword [0x431c70], ebx
mov ebx, dword [0x431bec]
add ebx, 0x8c
mov dword [0x431c78], ebx
mov ebx, dword [0x431bec]
add ebx, 0x90
mov dword [0x431c74], ebx
push dword [0x431c04]
push 4
push dword [0x431af8]
mov ebx, dword [0x431b10]
add ebx, 0x3f04
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x431c40], eax
mov eax, dword [0x431af8]
call fcn.00435080
mov dword [0x431bf0], eax
mov ebx, dword [0x431bf0]
add ebx, 0x1f8
mov dword [0x431b60], ebx
mov ebx, dword [0x431bf0]
add ebx, 0x204
mov dword [0x431c58], ebx
mov ebx, dword [0x431bf0]
add ebx, 0x200
mov dword [0x431b50], ebx
mov ebp, dword [0x431c7c]
push dword [ebp + 4]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x431c84]
mov edi, dword [ebp + 4]
add edi, dword [0x431bc0]
imul ebx, edi
mov ebp, dword [0x431c8c]
mov edi, dword [ebp + 4]
add edi, dword [0x431b8c]
imul ebx, edi
mov ebp, dword [0x431c94]
mov edi, dword [ebp + 4]
add edi, dword [0x431b88]
imul ebx, edi
mov dword [0x431b90], ebx
mov ebx, dword [0x431b90]
and ebx, ebx
je 0x403a41
push dword [0x431bc4]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x4039bd
push 1
mov eax, dword [0x431af8]
call fcn.00435070
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
mov ebx, dword [0x431b10]
add ebx, 0x3f10
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push 0x12003
push 0
push str.SystemAsterisk
call sub.WINMM.dll_PlaySoundA
mov eax, 0x12c
call fcn.00435050
push 0
push 0
call fcn.00406d90
mov dword [0x431bc4], 1
jmp 0x403a40
mov ebx, 1
cmp ebx, dword [esp]
jne 0x403a40
push 0
mov eax, dword [0x431af8]
call fcn.00435070
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
mov ebx, dword [0x431b10]
add ebx, 0x3f10
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push 0x12003
push 0
push str.SystemAsterisk
call sub.WINMM.dll_PlaySoundA
mov eax, 0x12c
call fcn.00435050
push 0
push 1
call fcn.00406d90
mov dword [0x431bc4], 0
pop eax
mov ebp, dword [0x431c7c]
push dword [ebp + 8]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x431c84]
mov edi, dword [ebp + 8]
add edi, dword [0x431bc0]
imul ebx, edi
mov ebp, dword [0x431c8c]
mov edi, dword [ebp + 8]
add edi, dword [0x431b8c]
imul ebx, edi
mov ebp, dword [0x431c94]
mov edi, dword [ebp + 8]
add edi, dword [0x431b88]
imul ebx, edi
mov dword [0x431ba0], ebx
mov ebx, dword [0x431ba0]
and ebx, ebx
je 0x403baa
push dword [0x431b44]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x403b26
push 1
mov eax, dword [0x431af8]
call fcn.00435070
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
mov ebx, dword [0x431b10]
add ebx, 0x3f14
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push 0x12003
push 0
push str.SystemAsterisk
call sub.WINMM.dll_PlaySoundA
mov eax, 0x12c
call fcn.00435050
push 0
push 0
call fcn.00406d90
mov dword [0x431b44], 1
jmp 0x403ba9
mov ebx, 1
cmp ebx, dword [esp]
jne 0x403ba9
push 0
mov eax, dword [0x431af8]
call fcn.00435070
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
mov ebx, dword [0x431b10]
add ebx, 0x3f14
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push 0x12003
push 0
push str.SystemAsterisk
call sub.WINMM.dll_PlaySoundA
mov eax, 0x12c
call fcn.00435050
push 0
push 1
call fcn.00406d90
mov dword [0x431b44], 0
pop eax
mov ebp, dword [0x431c7c]
push dword [ebp + 0xc]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x431c84]
mov edi, dword [ebp + 0xc]
add edi, dword [0x431bc0]
imul ebx, edi
mov ebp, dword [0x431c8c]
mov edi, dword [ebp + 0xc]
add edi, dword [0x431b8c]
imul ebx, edi
mov ebp, dword [0x431c94]
mov edi, dword [ebp + 0xc]
add edi, dword [0x431b88]
imul ebx, edi
mov dword [0x431ba4], ebx
mov ebx, dword [0x431ba4]
and ebx, ebx
je 0x403c68
push 0xf4240
mov eax, dword [0x431af8]
call fcn.00435070
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
push dword [0x431b60]
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push 0x12003
push 0
push str.SystemAsterisk
call sub.WINMM.dll_PlaySoundA
mov eax, 0x12c
call fcn.00435050
push 0
push 0
call fcn.00406d90
mov ebp, dword [0x431c7c]
push dword [ebp + 0x10]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x431c84]
mov edi, dword [ebp + 0x10]
add edi, dword [0x431bc0]
imul ebx, edi
mov ebp, dword [0x431c8c]
mov edi, dword [ebp + 0x10]
add edi, dword [0x431b8c]
imul ebx, edi
mov ebp, dword [0x431c94]
mov edi, dword [ebp + 0x10]
add edi, dword [0x431b88]
imul ebx, edi
mov dword [0x431ba8], ebx
mov ebx, dword [0x431ba8]
and ebx, ebx
je 0x403d26
push 0x2710
mov eax, dword [0x431af8]
call fcn.00435070
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
push dword [0x431c58]
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push 0x12003
push 0
push str.SystemAsterisk
call sub.WINMM.dll_PlaySoundA
mov eax, 0x12c
call fcn.00435050
push 0
push 0
call fcn.00406d90
mov ebp, dword [0x431c7c]
push dword [ebp + 0x14]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x431c84]
mov edi, dword [ebp + 0x14]
add edi, dword [0x431bc0]
imul ebx, edi
mov ebp, dword [0x431c8c]
mov edi, dword [ebp + 0x14]
add edi, dword [0x431b8c]
imul ebx, edi
mov ebp, dword [0x431c94]
mov edi, dword [ebp + 0x14]
add edi, dword [0x431b88]
imul ebx, edi
mov dword [0x431bac], ebx
mov ebx, dword [0x431bac]
and ebx, ebx
je 0x403ff8
push dword [0x431b64]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x403eed
mov dword [0x431b64], 1
push 0xe8
mov ebx, dword [0x431af8]
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
inc ebx
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
add ebx, 2
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
add ebx, 3
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
add ebx, 4
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x90
mov ebx, dword [0x431af8]
add ebx, 5
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push dword [0x431c04]
push 6
push dword [0x431af8]
mov ebx, dword [0x431c28]
add ebx, 0x2cd1fe
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
mov ebx, dword [0x431b10]
add ebx, 0x10b1
mov edi, dword [0x431c28]
add edi, 0x2cd1fe
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x431af8]
call fcn.00435070
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
mov ebx, dword [0x431c28]
add ebx, 0x2cd1ff
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push 0x12003
push 0
push str.SystemAsterisk
call sub.WINMM.dll_PlaySoundA
mov eax, 0x12c
call fcn.00435050
push 0
push 0
call fcn.00406d90
jmp 0x403ff7
mov ebx, 1
cmp ebx, dword [esp]
jne 0x403ff7
mov dword [0x431b64], 0
push 0xd8
mov ebx, dword [0x431af8]
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0x96
mov ebx, dword [0x431af8]
inc ebx
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0xe4
mov ebx, dword [0x431af8]
add ebx, 2
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 3
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 4
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push 0
mov ebx, dword [0x431af8]
add ebx, 5
mov eax, ebx
call fcn.00435060
mov dword [0x431c40], eax
push dword [0x431c04]
push 6
push dword [0x431af8]
mov ebx, dword [0x431c28]
add ebx, 0x2cd1fe
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push 0x12003
push 0
push str.SystemAsterisk
call sub.WINMM.dll_PlaySoundA
mov eax, 0x12c
call fcn.00435050
push 0
push 1
call fcn.00406d90
pop eax
mov ebp, dword [0x431c7c]
push dword [ebp + 0x18]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x431c84]
mov edi, dword [ebp + 0x18]
add edi, dword [0x431bc0]
imul ebx, edi
mov ebp, dword [0x431c8c]
mov edi, dword [ebp + 0x18]
add edi, dword [0x431b8c]
imul ebx, edi
mov ebp, dword [0x431c94]
mov edi, dword [ebp + 0x18]
add edi, dword [0x431b88]
imul ebx, edi
mov dword [0x431bb0], ebx
mov ebx, dword [0x431bb0]
and ebx, ebx
je 0x404150
push dword [0x431b4c]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x4040d3
mov dword [0x431b4c], 1
push 0x64
mov eax, dword [0x431af8]
call fcn.00435070
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
push dword [0x431b50]
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push 0x12003
push 0
push str.SystemAsterisk
call sub.WINMM.dll_PlaySoundA
mov eax, 0x12c
call fcn.00435050
push 0
push 0
call fcn.00406d90
jmp 0x40414f
mov ebx, 1
cmp ebx, dword [esp]
jne 0x40414f
mov dword [0x431b4c], 0
push 0
mov eax, dword [0x431af8]
call fcn.00435070
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
push dword [0x431b50]
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push 0x12003
push 0
push str.SystemAsterisk
call sub.WINMM.dll_PlaySoundA
mov eax, 0x12c
call fcn.00435050
push 0
push 1
call fcn.00406d90
pop eax
mov ebp, dword [0x431c7c]
push dword [ebp + 0x1c]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x431c84]
mov edi, dword [ebp + 0x1c]
add edi, dword [0x431bc0]
imul ebx, edi
mov ebp, dword [0x431c8c]
mov edi, dword [ebp + 0x1c]
add edi, dword [0x431b8c]
imul ebx, edi
mov ebp, dword [0x431c94]
mov edi, dword [ebp + 0x1c]
add edi, dword [0x431b88]
imul ebx, edi
mov dword [0x431bb4], ebx
mov ebx, dword [0x431bb4]
and ebx, ebx
je 0x40427c
push dword [0x431c04]
push 4
push dword [0x431af8]
push dword [0x431c70]
push dword [0x431ae0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x431c40], eax
mov eax, dword [0x431af8]
call fcn.00435090
fistp dword [0x431bd0]
push dword [0x431c04]
push 4
push dword [0x431af8]
push dword [0x431c74]
push dword [0x431ae0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x431c40], eax
mov eax, dword [0x431af8]
call fcn.00435090
fistp dword [0x431bd8]
push dword [0x431c04]
push 4
push dword [0x431af8]
push dword [0x431c78]
push dword [0x431ae0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x431c40], eax
mov eax, dword [0x431af8]
call fcn.00435090
fistp dword [0x431be0]
push 0x12003
push 0
push str.SystemAsterisk
call sub.WINMM.dll_PlaySoundA
mov eax, 0x12c
call fcn.00435050
push 0
push 0
call fcn.00406d90
mov ebp, dword [0x431c7c]
push dword [ebp + 0x20]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x431c84]
mov edi, dword [ebp + 0x20]
add edi, dword [0x431bc0]
imul ebx, edi
mov ebp, dword [0x431c8c]
mov edi, dword [ebp + 0x20]
add edi, dword [0x431b8c]
imul ebx, edi
mov ebp, dword [0x431c94]
mov edi, dword [ebp + 0x20]
add edi, dword [0x431b88]
imul ebx, edi
mov dword [0x431bb8], ebx
mov ebx, dword [0x431bb8]
and ebx, ebx
je 0x40447c
mov ebx, dword [0x431bd0]
and ebx, ebx
je 0x40447c
push dword [0x431c04]
push 4
push dword [0x431af8]
push dword [0x431c70]
push dword [0x431ae0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x431c40], eax
mov eax, dword [0x431af8]
call fcn.00435090
fistp dword [0x431bd4]
push dword [0x431c04]
push 4
push dword [0x431af8]
push dword [0x431c74]
push dword [0x431ae0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x431c40], eax
mov eax, dword [0x431af8]
call fcn.00435090
fistp dword [0x431bdc]
push dword [0x431c04]
push 4
push dword [0x431af8]
push dword [0x431c78]
push dword [0x431ae0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x431c40], eax
mov eax, dword [0x431af8]
call fcn.00435090
fistp dword [0x431be4]
push dword [0x431bd0]
fild dword [esp]
fstp dword [esp]
mov eax, dword [0x431af8]
call fcn.004350a0
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
push dword [0x431c70]
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push dword [0x431bd8]
fild dword [esp]
fstp dword [esp]
mov eax, dword [0x431af8]
call fcn.004350a0
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
push dword [0x431c74]
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push dword [0x431be0]
fild dword [esp]
fstp dword [esp]
mov eax, dword [0x431af8]
call fcn.004350a0
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
push dword [0x431c78]
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push 0x12003
push 0
push str.SystemAsterisk
call sub.WINMM.dll_PlaySoundA
mov eax, 0x12c
call fcn.00435050
push 0
push 0
call fcn.00406d90
mov ebp, dword [0x431c7c]
push dword [ebp + 0x24]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x431c84]
mov edi, dword [ebp + 0x24]
add edi, dword [0x431bc0]
imul ebx, edi
mov ebp, dword [0x431c8c]
mov edi, dword [ebp + 0x24]
add edi, dword [0x431b8c]
imul ebx, edi
mov ebp, dword [0x431c94]
mov edi, dword [ebp + 0x24]
add edi, dword [0x431b88]
imul ebx, edi
mov dword [0x431bbc], ebx
mov ebx, dword [0x431bbc]
and ebx, ebx
je 0x404604
mov ebx, dword [0x431bd4]
and ebx, ebx
je 0x4045d7
push dword [0x431bd4]
fild dword [esp]
fstp dword [esp]
mov eax, dword [0x431af8]
call fcn.004350a0
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
push dword [0x431c70]
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push dword [0x431bdc]
fild dword [esp]
fstp dword [esp]
mov eax, dword [0x431af8]
call fcn.004350a0
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
push dword [0x431c74]
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push dword [0x431be4]
fild dword [esp]
fstp dword [esp]
mov eax, dword [0x431af8]
call fcn.004350a0
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
push dword [0x431c78]
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push 0x12003
push 0
push str.SystemAsterisk
call sub.WINMM.dll_PlaySoundA
mov eax, 0x12c
call fcn.00435050
push 0
push 0
call fcn.00406d90
push 0x12003
push 0
push str.SystemAsterisk
call sub.WINMM.dll_PlaySoundA
mov eax, 0x12c
call fcn.00435050
push 0
push 0
call fcn.00406d90
mov ebp, dword [0x431c7c]
push dword [ebp + 0x28]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x431c84]
mov edi, dword [ebp + 0x28]
add edi, dword [0x431bc0]
imul ebx, edi
mov ebp, dword [0x431c8c]
mov edi, dword [ebp + 0x28]
add edi, dword [0x431b8c]
imul ebx, edi
mov ebp, dword [0x431c94]
mov edi, dword [ebp + 0x28]
add edi, dword [0x431b88]
imul ebx, edi
mov dword [0x431b94], ebx
mov ebx, dword [0x431b94]
and ebx, ebx
je 0x404714
mov ebx, dword [0x431c78]
and ebx, ebx
jle 0x4046e7
push dword [0x431c04]
push 4
push dword [0x431af8]
push dword [0x431c78]
push dword [0x431ae0]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x431c40], eax
mov eax, dword [0x431af8]
call fcn.00435090
fadd dword [0x4152e8]
fistp dword [0x431be8]
push dword [0x431be8]
fild dword [esp]
fstp dword [esp]
mov eax, dword [0x431af8]
call fcn.004350a0
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
push dword [0x431c78]
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push 0x12003
push 0
push str.SystemAsterisk
call sub.WINMM.dll_PlaySoundA
mov eax, 0x12c
call fcn.00435050
push 0
push 0
call fcn.00406d90
mov ebp, dword [0x431c7c]
push dword [ebp + 0x2c]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x431c84]
mov edi, dword [ebp + 0x2c]
add edi, dword [0x431bc0]
imul ebx, edi
mov ebp, dword [0x431c8c]
mov edi, dword [ebp + 0x2c]
add edi, dword [0x431b8c]
imul ebx, edi
mov ebp, dword [0x431c94]
mov edi, dword [ebp + 0x2c]
add edi, dword [0x431b88]
imul ebx, edi
mov dword [0x431b98], ebx
mov ebx, dword [0x431b98]
and ebx, ebx
je 0x40487d
push dword [0x431c5c]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x4047f9
mov dword [0x431c5c], 1
push 1
mov eax, dword [0x431af8]
call fcn.00435070
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
mov ebx, dword [0x431b10]
add ebx, 0x3f08
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push 0x12003
push 0
push str.SystemAsterisk
call sub.WINMM.dll_PlaySoundA
mov eax, 0x12c
call fcn.00435050
push 0
push 0
call fcn.00406d90
jmp 0x40487c
mov ebx, 1
cmp ebx, dword [esp]
jne 0x40487c
mov dword [0x431c5c], 0
push 0
mov eax, dword [0x431af8]
call fcn.00435070
mov dword [0x431c40], eax
push dword [0x431c04]
push 4
push dword [0x431af8]
mov ebx, dword [0x431b10]
add ebx, 0x3f08
push ebx
push dword [0x431ae0]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x431c40], eax
push 0x12003
push 0
push str.SystemAsterisk
call sub.WINMM.dll_PlaySoundA
mov eax, 0x12c
call fcn.00435050
push 0
push 1
call fcn.00406d90
pop eax
mov ebp, dword [0x431c7c]
push dword [ebp + 0x30]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x431c84]
mov edi, dword [ebp + 0x30]
add edi, dword [0x431bc0]
imul ebx, edi
mov ebp, dword [0x431c8c]
mov edi, dword [ebp + 0x30]
add edi, dword [0x431b8c]
imul ebx, edi
mov ebp, dword [0x431c94]
mov edi, dword [ebp + 0x30]
add edi, dword [0x431b88]
imul ebx, edi
mov dword [0x431b9c], ebx
mov ebx, dword [0x431b9c]
and ebx, ebx
je 0x4048e7
push str.Key_12_Pressed
push 0
push 0
call fcn.004068c3
mov dword [0x431b90], 0
mov dword [0x431ba0], 0
mov dword [0x431ba4], 0
mov dword [0x431ba8], 0
mov dword [0x431bac], 0
mov dword [0x431bb0], 0
mov dword [0x431bb4], 0
mov dword [0x431bb8], 0
mov dword [0x431bbc], 0
mov dword [0x431b94], 0
mov dword [0x431b98], 0
mov dword [0x431b9c], 0
mov ebx, dword [0x431b48]
cmp ebx, 0x10
jne 0x40496f
jmp 0x405654
call fcn.00411500
push eax
mov ebx, 1
cmp ebx, dword [esp]
jne 0x4049a3
call fcn.00411520
mov ebx, eax
and ebx, ebx
jne 0x40499e
push 0x415073
push str.http:__www.cheathappens.com
push str.iexplore
call fcn.004078e7
jmp 0x404a55
mov ebx, 2
cmp ebx, dword [esp]
jne 0x4049d1
call fcn.00411520
mov ebx, eax
and ebx, ebx
jne 0x4049cc
push 0x415073
push str.www.cheathappens.com_trainer_troubleshooting.asp
push str.iexplore
call fcn.004078e7
jmp 0x404a55
mov ebx, 3
cmp ebx, dword [esp]
jne 0x404a55
call fcn.00411520
mov ebx, eax
and ebx, ebx
jne 0x404a55
push dword [0x432344]
push 0
push 0x415073
mov edx, dword [0x431b38]
push dword [0x432344]
call fcn.004133c0
mov edx, str.help.txt
call fcn.004133c0
inc dword [0x432344]
push str.notepad.exe
mov edx, dword [0x42ef98]
add dword [esp + 4], edx
call fcn.004078cd
pop dword [0x432344]
mov ebx, dword [0x431b34]
cmp ebx, 1
jne 0x404a55
push 0
push 0x415073
push str.Custom_Key_List.txt
push str.notepad.exe
call fcn.004078cd
pop eax
push dword [0x431b7c]
push 1
call fcn.00410c10
mov eax, 1
call fcn.00435050
jmp 0x403650
push 0
call 0x40566e
push dword [0x431a6c]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.00406af9
call fcn.004079a4
call fcn.00407a74
call fcn.0041036f
call fcn.004113eb
call fcn.00412b0d
call fcn.0041330c
ret