Function at 0x43e0a0
Capabilities:
Execute command
Get session user name
Hide graphical window
Log keystrokes via polling
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b0f50
mov eax, dword fs:[0]
push eax
sub esp, 0x26c
mov eax, dword [0x4bd040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x35
xorps xmm0, xmm0
mov dword [ebp - 0x1cc], 0
push str.Debugging_is_disabled_after_compilation_is_completed.
lea ecx, [ebp - 0x1e8]
mov dword [ebp - 0x1d8], 0
movups xmmword [ebp - 0x1e8], xmm0
mov dword [ebp - 0x1d4], 0
call fcn.004ae170
mov dword [ebp - 4], 0
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
je 0x43e181
mov edx, 0x4b25ae
lea ecx, [ebp - 0x1e8]
call fcn.00441e80
test al, al
je 0x43e160
push str._n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n
lea edx, [ebp - 0x1e8]
lea ecx, [ebp - 0x200]
call fcn.00441c50
add esp, 4
mov ecx, eax
call fcn.00440b00
push eax
call fcn.00401330
add esp, 4
lea ecx, [ebp - 0x200]
call fcn.00440c10
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x64
push 0x64
call dword [sym.imp.KERNEL32.dll_Beep]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov esi, dword [sym.imp.KERNEL32.dll_GetStdHandle]
lea eax, [ebp - 0x114]
push eax
push 0xfffffffffffffff6
call esi
push eax
call dword [sym.imp.KERNEL32.dll_GetConsoleMode]
mov eax, dword [ebp - 0x114]
and eax, 0xffffffbf
push eax
push 0xfffffffffffffff6
mov dword [ebp - 0x114], eax
call esi
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleMode]
mov ecx, dword [ebp - 0x1d4]
cmp ecx, 0xf
jbe 0x43e1ee
mov edx, dword [ebp - 0x1e8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43e1e4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43e7e8
push ecx
push edx
call fcn.004af678
add esp, 8
push str.Rensen___Menu
push 0
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.USER32.dll_FindWindowW]
sub esp, 0x18
mov ecx, esp
test eax, eax
je 0x43e239
push str.The_program_is_already_running.
call fcn.00440ce0
sub esp, 0x18
mov ecx, esp
push str.Rensen_Error
call fcn.00440ce0
mov ecx, 0x10
call fcn.00402710
add esp, 0x30
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
xorps xmm0, xmm0
push 0xc
movups xmmword [ecx], xmm0
push str.Cache_UserID
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.004ae170
lea ecx, [ebp - 0x144]
call fcn.00406d30
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 0x4c
movups xmmword [ecx], xmm0
push str.https:__github.com_Coslly_Rensen_blob_main_Cloud_20Files_UserID.uid_rawtrue
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.004ae170
lea ecx, [ebp - 0x144]
call fcn.00406de0
test eax, eax
je 0x43e4ee
mov eax, dword [ebp - 0x1cc]
xor edi, edi
nop dword [eax]
nop dword [eax + eax]
or eax, 3
mov dword [ebp - 0x1cc], eax
lea eax, [ebp - 0x114]
mov dword [ebp - 4], 1
push eax
lea eax, [ebp - 0x110]
mov dword [ebp - 0x114], 0x100
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
xorps xmm0, xmm0
mov dword [ebp - 0x1f0], 0
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x1ec], 0
movups xmmword [ebp - 0x200], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43e305
sub ecx, edx
lea eax, [ebp - 0x110]
push ecx
push eax
lea ecx, [ebp - 0x200]
call fcn.004ae170
movsx eax, di
lea ecx, [ebp - 0x144]
mov dword [ebp - 4], 0xffffffff
push eax
mov dword [ebp - 0x114], eax
lea eax, [ebp - 0x12c]
push eax
call fcn.00406f60
mov edx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x43e34e
mov edx, dword [eax]
push dword [eax + 0x10]
cmp dword [ebp - 0x1ec], 0xf
lea ecx, [ebp - 0x200]
mov esi, dword [ebp - 0x200]
push edx
mov edx, dword [ebp - 0x1f0]
cmova ecx, esi
call fcn.004aee90
add esp, 8
test al, al
jne 0x43e3cd
or dword [ebp - 0x1cc], 4
lea ecx, [ebp - 0x144]
sub esp, 0x18
mov eax, esp
push dword [ebp - 0x114]
push eax
call fcn.00406f60
lea ecx, [ebp - 0x1e8]
call fcn.00402330
add esp, 0x18
mov ecx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x43e3b0
mov ecx, dword [eax]
mov edx, dword [eax + 0x10]
push 6
push str.BYPASS
call fcn.004aee90
add esp, 8
mov byte [ebp - 0x1c5], 0
test al, al
je 0x43e3d4
mov byte [ebp - 0x1c5], 1
mov eax, dword [ebp - 0x1cc]
test al, 4
je 0x43e442
mov ecx, dword [ebp - 0x1d4]
and eax, 0xfffffffb
mov dword [ebp - 0x1cc], eax
cmp ecx, 0xf
jbe 0x43e427
mov edx, dword [ebp - 0x1e8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43e417
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43e7e8
push ecx
push edx
call fcn.004af678
mov eax, dword [ebp - 0x1cc]
add esp, 8
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x1d4], 0xf
mov byte [ebp - 0x1e8], 0
mov ecx, dword [ebp - 0x1ec]
mov dword [ebp - 0x1cc], eax
cmp ecx, 0xf
jbe 0x43e482
inc ecx
mov eax, esi
cmp ecx, 0x1000
jb 0x43e472
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43e7e8
push ecx
push esi
call fcn.004af678
mov eax, dword [ebp - 0x1cc]
add esp, 8
mov ecx, dword [ebp - 0x118]
and eax, 0xfffffffc
mov dword [ebp - 0x1cc], eax
cmp ecx, 0xf
jbe 0x43e4cb
mov edx, dword [ebp - 0x12c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43e4bb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43e7e8
push ecx
push edx
call fcn.004af678
mov eax, dword [ebp - 0x1cc]
add esp, 8
cmp byte [ebp - 0x1c5], 0
jne 0x43e4e3
inc edi
mov ecx, 0x2710
cmp di, cx
jle 0x43e2b0
lea ecx, [ebp - 0x144]
call fcn.00407170
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 0xc
movups xmmword [ecx], xmm0
push str.Cache_Update
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.004ae170
lea ecx, [ebp - 0x15c]
call fcn.00406d30
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 0x4a
movups xmmword [ecx], xmm0
push str.https:__github.com_Coslly_Rensen_blob_main_Rensen_Rensen_Main.cpp_rawtrue
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.004ae170
lea ecx, [ebp - 0x15c]
call fcn.00406de0
mov edi, 0x7fffffff
test eax, eax
je 0x43e85b
push 3
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0x15c]
call fcn.00406f60
mov esi, dword [ebp - 0x11c]
lea ecx, [ebp - 0x12c]
mov edx, 0x1d
cmp esi, edx
cmovb edx, esi
cmp dword [ebp - 0x118], 0xf
cmova ecx, dword [ebp - 0x12c]
sub esi, edx
lea eax, [esi + 1]
push eax
lea eax, [ecx + edx]
push eax
push ecx
call sub.VCRUNTIME140.dll_memmove
lea edx, [esi - 0xf]
mov dword [ebp - 0x11c], esi
add esp, 0xc
cmp esi, edx
jae 0x43e5b8
call fcn.00441510
cmp dword [ebp - 0x118], 0xf
lea ecx, [ebp - 0x12c]
cmova ecx, dword [ebp - 0x12c]
mov al, byte [ecx + edx + 0xf]
mov byte [ecx + edx], al
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x11c], edx
call fcn.00407170
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0x1e8]
call fcn.00440d20
cmp dword [ebp - 0x1d4], 0xf
lea eax, [ebp - 0x1e8]
cmova eax, dword [ebp - 0x1e8]
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atof]
mov ecx, dword [ebp - 0x1d4]
add esp, 4
fstp dword [ebp - 0x114]
cmp ecx, 0xf
jbe 0x43e654
mov edx, dword [ebp - 0x1e8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43e64a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43e7e8
push ecx
push edx
call fcn.004af678
add esp, 8
movss xmm0, dword [ebp - 0x114]
comiss xmm0, dword [0x4b4c04]
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x1d4], 0xf
mov byte [ebp - 0x1e8], 0
jbe 0x43e7ac
mov ecx, dword [ebp - 0x11c]
mov eax, edi
or dword [ebp - 0x1cc], 8
sub eax, ecx
cmp eax, 0x3c
jae 0x43e69f
call fcn.00401630
cmp dword [ebp - 0x118], 0xf
lea eax, [ebp - 0x12c]
push ecx
cmova eax, dword [ebp - 0x12c]
push eax
push 0x3c
push str.A_new_version_has_been_released._nYou_will_be_updated_to_Ver_
push ecx
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0x200]
call fcn.004ae690
mov edx, dword [ebp - 0x1ec]
sub esp, 0x18
mov ecx, dword [ebp - 0x1f0]
mov eax, edx
mov edi, esp
sub eax, ecx
push 0x3b
push str.__n_nDo_you_want_to_update_now__nIt_may_take_tens_of_seconds._n
cmp eax, 0x3b
jb 0x43e71f
cmp edx, 0xf
lea esi, [ebp - 0x200]
lea eax, [ecx + 0x3b]
cmova esi, dword [ebp - 0x200]
add esi, ecx
mov dword [ebp - 0x1f0], eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + 0x3b], 0
lea eax, [ebp - 0x200]
jmp 0x43e739
mov byte [ebp - 0x114], 0
lea ecx, [ebp - 0x200]
push dword [ebp - 0x114]
push 0x3b
call fcn.004ae2c0
xorps xmm0, xmm0
sub esp, 0x18
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov ecx, esp
mov dword [edi + 0x14], 0
movups xmm0, xmmword [eax]
push 0xd
push str.Rensen_Update
movups xmmword [edi], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [edi + 0x10], xmm0
xorps xmm0, xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.004ae170
mov ecx, 0x44
call fcn.00402710
add esp, 0x30
mov byte [ebp - 0x1c5], 1
cmp eax, 6
je 0x43e7b3
mov byte [ebp - 0x1c5], 0
test byte [ebp - 0x1cc], 8
je 0x43e7f8
mov ecx, dword [ebp - 0x1ec]
cmp ecx, 0xf
jbe 0x43e7f8
mov edx, dword [ebp - 0x200]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43e7ee
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43e7ee
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004af678
add esp, 8
cmp byte [ebp - 0x1c5], 0
je 0x43e820
sub esp, 0x18
mov ecx, esp
push str.https:__github.com_Coslly_Rensen_releases_download_Release_Rensen.exe
call fcn.00440ce0
call fcn.00404c80
add esp, 0x18
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov ecx, dword [ebp - 0x118]
cmp ecx, 0xf
jbe 0x43e856
mov edx, dword [ebp - 0x12c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43e84c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43e7e8
push ecx
push edx
call fcn.004af678
add esp, 8
mov edi, 0x7fffffff
mov esi, dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
push 0
call esi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x80
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
push 0x4b25c0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
push 1
push 0x190
push 0x258
push 0xa
push 0xa
call esi
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
push str.Welcome_to_Rensen_for_Counter_Strike_2_cheat._nThe_Rensen_project_is_a_version_converted_from_FreeCS._nNo_team_author_By:_https:__github.com_Coslly_nThe_following_information_returned_is_debugging_information._n
call fcn.00401330
add esp, 4
xorps xmm0, xmm0
push 0
sub esp, 0x18
mov ecx, esp
push 0x13
movups xmmword [ecx], xmm0
push str.Load_Thread:_main__
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.004ae170
call fcn.00405b30
add esp, 0x1c
lea ecx, [ebp - 0x164]
push 0x425d20
call fcn.004ad890
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x1e
call esi
push 0x4307d0
lea ecx, [ebp - 0x16c]
call fcn.004ad890
push 0x1e
call esi
push 0x434000
lea ecx, [ebp - 0x174]
call fcn.004ad890
push 0x1e
call esi
push 0x4341c0
lea ecx, [ebp - 0x17c]
call fcn.004ad890
push 0x1e
call esi
push 0x434dc0
lea ecx, [ebp - 0x184]
call fcn.004ad890
push 0x1e
call esi
push 0x435450
lea ecx, [ebp - 0x18c]
call fcn.004ad890
push 0x1e
call esi
push 0x4356f0
lea ecx, [ebp - 0x194]
call fcn.004ad890
push 0x1e
call esi
push 0x435d30
lea ecx, [ebp - 0x19c]
call fcn.004ad890
push 0x1e
call esi
push 0x435f70
lea ecx, [ebp - 0x1a4]
call fcn.004ad890
push 0x1e
call esi
push 0x43a060
lea ecx, [ebp - 0x1ac]
call fcn.004ad890
push 0x1e
call esi
push 0x43bbe0
lea ecx, [ebp - 0x1b4]
call fcn.004ad890
push 0x1e
call esi
push 0x43d5e0
lea ecx, [ebp - 0x1bc]
call fcn.004ad890
push 0x1e
call esi
push 0x43d870
lea ecx, [ebp - 0x1c4]
call fcn.004ad890
push 0x1e
call esi
push 0x4bdcb4
lea ecx, [ebp - 0x1e8]
call fcn.00440d20
cmp dword [ebp - 0x1d4], 0xf
lea eax, [ebp - 0x1e8]
push 0
cmova eax, dword [ebp - 0x1e8]
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__access]
mov ecx, dword [ebp - 0x1d4]
add esp, 8
mov esi, eax
cmp ecx, 0xf
jbe 0x43ea59
mov edx, dword [ebp - 0x1e8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43ea4f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43ea4f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004af678
add esp, 8
cmp esi, 0xffffffff
jne 0x43eb55
push 0x4bdcb4
lea ecx, [ebp - 0x1e8]
call fcn.00440d20
mov dword [ebp - 4], 2
mov ecx, dword [ebp - 0x1d8]
sub edi, ecx
cmp edi, 6
jae 0x43ea8b
call fcn.00401630
cmp dword [ebp - 0x1d4], 0xf
lea eax, [ebp - 0x1e8]
push ecx
cmova eax, dword [ebp - 0x1e8]
push eax
push 6
push str.mkdir
push ecx
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0x200]
call fcn.004ae690
cmp dword [ebp - 0x1ec], 0xf
lea eax, [ebp - 0x200]
cmova eax, dword [ebp - 0x200]
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, dword [ebp - 0x1ec]
add esp, 4
cmp ecx, 0xf
jbe 0x43eb14
mov edx, dword [ebp - 0x200]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43eb0a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43eb0a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004af678
add esp, 8
mov ecx, dword [ebp - 0x1d4]
cmp ecx, 0xf
jbe 0x43eb4e
mov edx, dword [ebp - 0x1e8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43eb44
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43e7e8
push ecx
push edx
call fcn.004af678
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
nop dword [eax + eax]
push 0x2d
call edi
test ax, ax
jns 0x43eb76
push 0x2e
call edi
test ax, ax
js 0x43ee9b
movss xmm2, dword [0x4bd15c]
ucomiss xmm2, dword [0x4b4b04]
mov esi, dword [0x4bd158]
lahf
test ah, 0x44
jp 0x43ebbd
cmp dword [0x4bd1c8], 0
je 0x43ebb9
mov eax, 0x88888889
imul esi
add edx, esi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
add ax, word [0x4bd200]
movzx eax, ax
jmp 0x43ec0c
xor eax, eax
jmp 0x43ec0c
cmp dword [0x4bd1c8], 0
movsx eax, word [0x4bd200]
movd xmm0, esi
cvtdq2ps xmm0, xmm0
divss xmm0, xmm2
je 0x43ebf1
cvtps2pd xmm1, xmm0
movd xmm0, eax
divsd xmm1, qword [0x4b4b80]
cvtdq2pd xmm0, xmm0
addsd xmm1, xmm0
jmp 0x43ec08
cvtps2pd xmm0, xmm0
movd xmm1, eax
divsd xmm0, qword [0x4b4b60]
cvtdq2pd xmm1, xmm1
subsd xmm1, xmm0
cvttsd2si eax, xmm1
movzx ecx, ax
movsx eax, cx
mov word [0x4bd200], cx
cmp eax, esi
jl 0x43ec22
mov cx, si
jmp 0x43ec29
test cx, cx
jg 0x43ec30
xor ecx, ecx
mov word [0x4bd200], cx
movzx esi, cx
mov ecx, 0xff
mov eax, esi
cmp ax, cx
jl 0x43ec43
mov esi, ecx
jmp 0x43ec4b
xor ecx, ecx
test ax, ax
cmovle esi, ecx
push 2
push esi
push 0
push dword [0x4bdd94]
call dword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
cmp dword [0x4bde88], 0
movsx eax, si
mov esi, dword [str._]
mov dword [0x4bdd90], eax
jne 0x43ec90
push esi
call edi
test ax, ax
jns 0x43ec87
mov dword [0x4bde88], 1
jmp 0x43eca2
cmp dword [0x4bde88], 0
je 0x43ecb8
push esi
call edi
test ax, ax
jns 0x43ecaf
mov dword [0x4bde88], 0
push 0
push 2
push 0
push esi
call dword [sym.imp.USER32.dll_keybd_event]
cmp dword [0x4bde88], 0
jne 0x43ecd9
push dword [0x4bdd94]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push 1
push dword [0x4bdd94]
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, 1
jmp 0x43ecf3
cmp word [0x4bd200], 0
jne 0x43ecf1
push 0
push dword [0x4bdd94]
call dword [sym.imp.USER32.dll_ShowWindow]
xor eax, eax
mov dword [0x4bd1c8], eax
lea eax, [ebp - 0x278]
push eax
call fcn.00408a20
push eax
mov ecx, 0x4bdcd0
call fcn.0043eec0
lea ecx, [ebp - 0x278]
call fcn.0040d7f0
cmp dword [0x4bdbf0], 0
jne 0x43ed4c
mov eax, dword [0x4bdd3c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
mov eax, dword [eax + 0xc]
mov dword [0x4bdcf8], eax
mov dword [0x4bdcfc], ecx
mov dword [0x4bdd00], edx
mov dword [0x4bdd04], 0xff
mov eax, dword [0x4bdb70]
mov ecx, 0xd
mov edx, dword [0x4bdde8]
test eax, eax
push 0
cmove eax, ecx
mov ecx, 0x4bddd8
cmp dword [0x4bddec], 0xf
push 0x4b25ae
cmova ecx, dword [0x4bddd8]
mov dword [0x4bdd80], eax
call fcn.004aee90
add esp, 8
test al, al
je 0x43edfb
push 7
xorps xmm0, xmm0
mov dword [ebp - 0x1f0], 0
push str.Verdana
lea ecx, [ebp - 0x200]
mov dword [ebp - 0x1ec], 0
movups xmmword [ebp - 0x200], xmm0
call fcn.004ae170
mov dword [ebp - 4], 3
lea eax, [ebp - 0x200]
cmp dword [ebp - 0x1ec], 0xf
mov ecx, 0x4bdd68
push dword [ebp - 0x1f0]
cmova eax, dword [ebp - 0x200]
push eax
call fcn.00441350
mov ecx, dword [ebp - 0x1ec]
cmp ecx, 0xf
jbe 0x43ee71
mov edx, dword [ebp - 0x200]
jmp 0x43ee48
push 0x4bddd8
lea ecx, [ebp - 0x1e8]
call fcn.00440d20
mov dword [ebp - 4], 4
lea eax, [ebp - 0x1e8]
cmp dword [ebp - 0x1d4], 0xf
mov ecx, 0x4bdd68
push dword [ebp - 0x1d8]
cmova eax, dword [ebp - 0x1e8]
push eax
call fcn.00441350
mov ecx, dword [ebp - 0x1d4]
cmp ecx, 0xf
jbe 0x43ee71
mov edx, dword [ebp - 0x1e8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43ee67
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43e7e8
push ecx
push edx
call fcn.004af678
add esp, 8
mov dword [ebp - 4], 0xffffffff
cmp dword [0x4bdb3c], 0
je 0x43ee8e
push 3
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x43eb60
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x43eb60
push 0x32
push 0x32
call dword [sym.imp.KERNEL32.dll_Beep]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3