Function at 0x4057a3
Capabilities:
Log keystrokes via polling
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push 0x7a4
push 0
push 0x4a4e34
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x4a4e38], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x4a4e34], eax
mov eax, 0x493d9d
mov dword [0x4a4e3c], eax
call fcn.004160d0
call fcn.00415560
call fcn.00415432
call fcn.004149c0
call fcn.00413dc3
call fcn.00413b60
call fcn.00413953
call fcn.00412e10
call fcn.004129d0
call fcn.0041280f
call fcn.00410f0e
call fcn.0040f7d9
call fcn.0040f2b1
call fcn.0040eaad
call fcn.0040e8af
call fcn.0040d4c9
call fcn.0040f750
call fcn.0040dac0
call fcn.00416120
push eax
push eax
call fcn.00412ae4
push 0x4a4e40
call fcn.00416160
call fcn.00416120
push eax
mov edx, dword [0x4a4e40]
call fcn.00416120
push eax
call fcn.004161f0
mov edx, str.0.ogg
call fcn.004161f0
call fcn.00416250
push 0
call fcn.00416292
add dword [esp + 4], edx
call fcn.00412fb0
call fcn.004162b0
mov ebp, 0x4543a6
mov ebx, ebp
mov ebp, 0x451810
sub ebx, ebp
push ebx
mov ebp, 0x451810
push ebp
push 0
call fcn.004131e0
push 0
call fcn.00412d90
call fcn.00416120
push eax
mov edx, dword [0x4a4e40]
call fcn.00416120
push eax
call fcn.004161f0
mov edx, str.1.ogg
call fcn.004161f0
call fcn.00416250
push 0
call fcn.00416292
add dword [esp + 4], edx
call fcn.00412fb0
call fcn.004162b0
mov ebp, 0x457317
mov ebx, ebp
mov ebp, 0x4543a6
sub ebx, ebp
push ebx
mov ebp, 0x4543a6
push ebp
push 0
call fcn.004131e0
push 0
call fcn.00412d90
call fcn.00416120
push eax
mov edx, dword [0x4a4e40]
call fcn.00416120
push eax
call fcn.004161f0
mov edx, str.3.ogg
call fcn.004161f0
call fcn.00416250
push 0
call fcn.00416292
add dword [esp + 4], edx
call fcn.00412fb0
call fcn.004162b0
mov ebp, 0x45a94c
mov ebx, ebp
mov ebp, 0x457317
sub ebx, ebp
push ebx
mov ebp, 0x457317
push ebp
push 0
call fcn.004131e0
push 0
call fcn.00412d90
call fcn.00416120
push eax
mov edx, dword [0x4a4e40]
call fcn.00416120
push eax
call fcn.004161f0
mov edx, str.4.ogg
call fcn.004161f0
call fcn.00416250
push 0
call fcn.00416292
add dword [esp + 4], edx
call fcn.00412fb0
call fcn.004162b0
mov ebp, 0x45f31d
mov ebx, ebp
mov ebp, 0x45a94c
sub ebx, ebp
push ebx
mov ebp, 0x45a94c
push ebp
push 0
call fcn.004131e0
call fcn.00416120
push eax
mov edx, dword [0x4a4e40]
call fcn.00416120
push eax
call fcn.004161f0
mov edx, str.5.ogg
call fcn.004161f0
call fcn.00416250
push 0
call fcn.00416292
add dword [esp + 4], edx
call fcn.00412fb0
call fcn.004162b0
mov ebp, 0x461f2a
mov ebx, ebp
mov ebp, 0x45f31d
sub ebx, ebp
push ebx
mov ebp, 0x45f31d
push ebp
push 0
call fcn.004131e0
call fcn.00416120
push eax
mov edx, dword [0x4a4e40]
call fcn.00416120
push eax
call fcn.004161f0
mov edx, str.6.ogg
call fcn.004161f0
call fcn.00416250
push 0
call fcn.00416292
add dword [esp + 4], edx
call fcn.00412fb0
call fcn.004162b0
mov ebp, 0x463dd1
mov ebx, ebp
mov ebp, 0x461f2a
sub ebx, ebp
push ebx
mov ebp, 0x461f2a
push ebp
push 0
call fcn.004131e0
call fcn.00416120
push eax
mov edx, dword [0x4a4e40]
call fcn.00416120
push eax
call fcn.004161f0
mov edx, str.7.ogg
call fcn.004161f0
call fcn.00416250
push 0
call fcn.00416292
add dword [esp + 4], edx
call fcn.00412fb0
call fcn.004162b0
mov ebp, 0x466339
mov ebx, ebp
mov ebp, 0x463dd1
sub ebx, ebp
push ebx
mov ebp, 0x463dd1
push ebp
push 0
call fcn.004131e0
push 0
call fcn.00412d90
call fcn.0040db50
call fcn.00416120
push eax
mov edx, dword [0x4a4e40]
call fcn.00416120
push eax
call fcn.004161f0
mov edx, str.0.ogg
call fcn.004161f0
call fcn.00416250
push 0
call fcn.00416292
add dword [esp + 4], edx
call fcn.0040dd48
call fcn.004162b0
mov dword [0x4a4e44], eax
call fcn.00416120
push eax
mov edx, dword [0x4a4e40]
call fcn.00416120
push eax
call fcn.004161f0
mov edx, str.1.ogg
call fcn.004161f0
call fcn.00416250
push 1
call fcn.00416292
add dword [esp + 4], edx
call fcn.0040dd48
call fcn.004162b0
mov dword [0x4a4e44], eax
call fcn.00416120
push eax
mov edx, dword [0x4a4e40]
call fcn.00416120
push eax
call fcn.004161f0
mov edx, str.3.ogg
call fcn.004161f0
call fcn.00416250
push 3
call fcn.00416292
add dword [esp + 4], edx
call fcn.0040dd48
call fcn.004162b0
mov dword [0x4a4e44], eax
call fcn.00416120
push eax
mov edx, dword [0x4a4e40]
call fcn.00416120
push eax
call fcn.004161f0
mov edx, str.4.ogg
call fcn.004161f0
call fcn.00416250
push 4
call fcn.00416292
add dword [esp + 4], edx
call fcn.0040dd48
call fcn.004162b0
mov dword [0x4a4e44], eax
call fcn.00416120
push eax
mov edx, dword [0x4a4e40]
call fcn.00416120
push eax
call fcn.004161f0
mov edx, str.5.ogg
call fcn.004161f0
call fcn.00416250
push 5
call fcn.00416292
add dword [esp + 4], edx
call fcn.0040dd48
call fcn.004162b0
mov dword [0x4a4e44], eax
call fcn.00416120
push eax
mov edx, dword [0x4a4e40]
call fcn.00416120
push eax
call fcn.004161f0
mov edx, str.6.ogg
call fcn.004161f0
call fcn.00416250
push 6
call fcn.00416292
add dword [esp + 4], edx
call fcn.0040dd48
call fcn.004162b0
mov dword [0x4a4e44], eax
call fcn.00416120
push eax
mov edx, dword [0x4a4e40]
call fcn.00416120
push eax
call fcn.004161f0
mov edx, str.7.ogg
call fcn.004161f0
call fcn.00416250
push 7
call fcn.00416292
add dword [esp + 4], edx
call fcn.0040dd48
call fcn.004162b0
mov dword [0x4a4e44], eax
call fcn.0040f750
call fcn.00416120
push eax
push 0
push 0x40
call fcn.00416120
push eax
push eax
call fcn.0040eadc
call fcn.00416292
add dword [esp], edx
call fcn.0040a9df
push 0x4a4e5c
call fcn.00416160
mov ebp, 0x466339
push ebp
push 0
call fcn.00414000
and eax, eax
je 0x402148
mov ebp, 0x477af0
push ebp
push 2
call fcn.00414000
push 0
call fcn.00414094
push eax
call fcn.00413b94
push 0x41
push 0x133
push 2
call fcn.004141ca
push eax
call fcn.00413be0
call fcn.00413c27
push 0x100
push 0x18
push 0x45123a
push 1
call fcn.004129e4
and eax, eax
je 0x4015f2
push 0x100
push 0x30
push 0x45123a
push 2
call fcn.004129e4
and eax, eax
je 0x40160f
push 0x120
push 0xfa
push 0x1f4
push 1
call fcn.004141e6
and eax, eax
je 0x4016f3
push 1
call fcn.00414094
push eax
call fcn.00413b94
push 1
call fcn.00412ac8
push eax
call fcn.00413c70
push 0x11
call fcn.00413c87
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040efd0
push eax
push str.Badpig1068
push 0
push 0
call fcn.00413c9e
call fcn.00413c27
push 0
push 0x64
push 0xc8
push 1
call fcn.004142fc
push 0
call fcn.00414094
push eax
call fcn.00413b94
push 0x11
call fcn.00413c87
push 0x64
push 0xc8
push 0x12
push 0x133
push 1
call fcn.004141ca
push eax
call fcn.00413cf0
call fcn.00413c27
push 1
call fcn.00413d5f
push 0x4a5570
push 0x451808
push 8
push 0x65
push 4
call fcn.00413854
call fcn.00416120
push eax
push eax
call fcn.00412ae4
push 0x4a4e60
call fcn.00416160
call fcn.00416120
push eax
mov edx, dword [0x4a4e60]
call fcn.00416120
push eax
call fcn.004161f0
mov edx, str.Options
call fcn.004161f0
call fcn.00416250
push 0xa
call fcn.00416292
add dword [esp + 4], edx
call fcn.00412fb0
call fcn.004162b0
and eax, eax
je 0x401794
mov ebp, 0x492887
mov ebx, ebp
mov ebp, str.TRAINER_r_nVer._1.52_r_n_r_nNumpad_1:_Unlimited_Gold_r_nNumpad_2:_Build_Recruit_in_1_Turn_r_nNumpad_3:_Maximum_Recruits_r_nNumpad_4:_Maximum_Mercenary_r_nNumpad_5:_Unlimited_Movement_r_nNumpad_6:_Maximum_Skills
sub ebx, ebp
push ebx
mov ebp, str.TRAINER_r_nVer._1.52_r_n_r_nNumpad_1:_Unlimited_Gold_r_nNumpad_2:_Build_Recruit_in_1_Turn_r_nNumpad_3:_Maximum_Recruits_r_nNumpad_4:_Maximum_Mercenary_r_nNumpad_5:_Unlimited_Movement_r_nNumpad_6:_Maximum_Skills
push ebp
push 0xa
call fcn.004131e0
push 0xa
call fcn.00412d90
jmp 0x4017a8
push str.Could_not_install_the_file___Installtion_failed
push str.Error
call fcn.0040e915
jmp 0x409ab8
call fcn.00416120
push eax
mov edx, dword [0x4a4e60]
call fcn.00416120
push eax
call fcn.004161f0
mov edx, str.help.txt
call fcn.004161f0
call fcn.00416250
push 0
call fcn.00416292
add dword [esp + 4], edx
call fcn.00412fb0
call fcn.004162b0
and eax, eax
je 0x401815
mov ebp, 0x4931da
mov ebx, ebp
mov ebp, 0x492887
sub ebx, ebp
push ebx
mov ebp, 0x492887
push ebp
push 0
call fcn.004131e0
push 0
call fcn.00412d90
jmp 0x401824
push str.Could_not_create_HELP.TXT_file.
push str.Error
call fcn.0040e915
push 0x4a5570
push 0x451808
push 8
push 0x65
push 4
call fcn.00413854
call fcn.00416120
push eax
mov edx, dword [0x4a4e60]
call fcn.00416120
push eax
call fcn.004161f0
mov edx, str.Options
call fcn.004161f0
call fcn.00416250
push 0xa
call fcn.00416292
add dword [esp + 4], edx
call fcn.00413080
call fcn.004162b0
call fcn.00416120
push eax
push eax
push 0xa
call fcn.00413240
mov edx, 0x45109e
call fcn.004161f0
push 0x4a4e64
call fcn.00416160
call fcn.00416120
push eax
push eax
push 0xa
call fcn.00413240
push 0x4a4e68
call fcn.00416160
call fcn.00416120
push eax
push eax
push 0xa
call fcn.00413240
mov ebx, dword [0x4a4e6c]
inc ebx
mov ebp, dword [0x4a5570]
shl ebx, 2
lea eax, [ebp + ebx]
push eax
call fcn.00416160
inc dword [0x4a4e6c]
push 0xa
call fcn.00413380
mov ebx, eax
cmp ebx, 1
jne 0x4018c0
push 0xa
call fcn.00412d90
fild dword [0x4a4e6c]
fmul dword [0x4517e8]
fstp dword [0x4a4e70]
fld dword [0x4a4e70]
fmul dword [0x4517ec]
fstp dword [0x4a4e74]
fld dword [0x4a4e70]
fild dword [0x4a4e6c]
fdiv dword [0x4517f0]
fdivp st(1)
fstp dword [0x4a4e78]
fld dword [0x4a4e74]
fild dword [0x4a4e6c]
fdiv dword [0x4517f0]
fdivp st(1)
fstp dword [0x4a4e7c]
fld dword [0x4a4e70]
fcomp dword [0x4517f4]
fnstsw ax
test ah, 1
jne 0x401984
mov ebx, dword [0x4a4e6c]
cmp ebx, 0x15
jl 0x401984
jmp 0x40198b
mov eax, 1
jmp 0x40198d
xor eax, eax
and eax, eax
je 0x4019c9
mov dword [0x4a4e70], 0x44480000
mov dword [0x4a4e74], 0x44c80000
fld dword [0x4a4e70]
fdiv dword [0x4517ec]
fstp dword [0x4a4e78]
fld dword [0x4a4e74]
fdiv dword [0x4517ec]
fstp dword [0x4a4e7c]
push 0x120
fld dword [0x4a4e74]
push eax
fistp dword [esp]
fld dword [0x4a4e70]
push eax
fistp dword [esp]
push 1
call fcn.004141e6
and eax, eax
je 0x401b63
push 1
call fcn.00414094
push eax
call fcn.00413b94
push 1
call fcn.00412ac8
push eax
call fcn.00413c70
push 0x11
call fcn.00413c87
mov dword [0x4a4e80], 1
mov eax, dword [0x4a4e6c]
cmp eax, dword [0x4a4e80]
jl 0x401a81
push 0xff
push 0
push 0
mov eax, 0
call fcn.0040efd0
push eax
mov ebx, dword [0x4a4e80]
mov ebp, dword [0x4a5570]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4e80]
imul ebx, ebx, 0x1a
add ebx, 0xffffffe8
push ebx
push 2
call fcn.00413c9e
inc dword [0x4a4e80]
jno 0x401a28
mov dword [0x4a4e80], 1
mov eax, dword [0x4a4e6c]
cmp eax, dword [0x4a4e80]
jl 0x401ae4
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040efd0
push eax
mov ebx, dword [0x4a4e80]
mov ebp, dword [0x4a5570]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4e80]
imul ebx, ebx, 0x1a
add ebx, 0xffffffe6
push ebx
push 0
call fcn.00413c9e
inc dword [0x4a4e80]
jno 0x401a8b
call fcn.00413c27
push 0
fld dword [0x4a4e7c]
push eax
fistp dword [esp]
fld dword [0x4a4e78]
push eax
fistp dword [esp]
push 1
call fcn.004142fc
push 0
call fcn.00414094
push eax
call fcn.00413b94
push 0x11
call fcn.00413c87
fld dword [0x4a4e7c]
push eax
fistp dword [esp]
fld dword [0x4a4e78]
push eax
fistp dword [esp]
push 0x43
push 7
push 1
call fcn.004141ca
push eax
call fcn.00413cf0
call fcn.00413c27
push 1
call fcn.00413d5f
push 0x120
push 0x190
push 0x640
push 1
call fcn.004141e6
and eax, eax
je 0x401c77
push 1
call fcn.00414094
push eax
call fcn.00413b94
push 2
call fcn.00412ac8
push eax
call fcn.00413c70
push 0x11
call fcn.00413c87
call fcn.00416120
push eax
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040efd0
push eax
mov edx, dword [0x4a4e64]
call fcn.00416120
push eax
call fcn.004161f0
mov edx, dword [0x4a4e68]
call fcn.004161f0
call fcn.00416250
push 0
push 0
call fcn.00416292
add dword [esp + 8], edx
call fcn.00413c9e
call fcn.004162b0
call fcn.00413c27
push 0
push 0x64
push 0x190
push 1
call fcn.004142fc
push 0
call fcn.00414094
push eax
call fcn.00413b94
push 0x11
call fcn.00413c87
push 0x64
push 0x190
push 0x28
push 5
push 1
call fcn.004141ca
push eax
call fcn.00413cf0
call fcn.00413c27
push 1
call fcn.00413d5f
push 0x90000001
push 0x45102a
push 0
call fcn.00414481
push eax
push 0
call fcn.0041449f
push eax
push 0
push 0
push 0
call fcn.00411270
and eax, eax
je 0x402148
push str.CLOSEBUTTON
push 0x13
push 0x13
push 6
push 0x1e4
push 1
call fcn.0040f963
mov dword [0x4a4e44], eax
push str.READMEBUTTON
push 0x20
push 0x11e
push 0x17e
push 0xa
push 3
call fcn.0040f963
mov dword [0x4a4e44], eax
push str.TROUBLEBUTTON
push 0x20
push 0x11e
push 0x19c
push 0xa
push 4
call fcn.0040f963
mov dword [0x4a4e44], eax
push str.CHBUTTON
push 0x23
push 0xf5
push 1
push 0x23
push 5
call fcn.0040f963
mov dword [0x4a4e44], eax
push str.BOXARTBUTTON
push 0x118
push 0xc8
push 0x2d
push 0x132
push 6
call fcn.0040f963
mov dword [0x4a4e44], eax
push 0x4511fc
push 0x10e
push 0x122
push 0x41
push 0
push 7
call fcn.0040f963
mov dword [0x4a4e44], eax
push 0
call fcn.00411293
push eax
push 0x80000000
push str.Test
push 0x6b
push 0xc8
push 0
push 0xfffffc18
push 1
call fcn.00410f6a
push 0
call fcn.00411293
push eax
call fcn.0040b0df
push 0xff
push 0
call fcn.004141ca
push eax
push 0
call fcn.00411293
push eax
call fcn.00409bca
push 0
push 0
call fcn.00411341
call fcn.00416120
push eax
push eax
mov edx, str.http:__www.cheathappens.com_trnflash.asp_id
call fcn.004161f0
mov edx, dword [0x4a4e5c]
call fcn.004161f0
call fcn.00416250
push 0xc8
push 0x12c
push 0
push 0
push 2
call fcn.00416292
add dword [esp + 0x14], edx
call fcn.00410a63
call fcn.004162b0
mov dword [0x4a4e44], eax
push 0
push 0
call sub.WININET.DLL_InternetGetConnectedState
mov ebx, eax
and ebx, ebx
jne 0x401e8b
push 1
push 1
call fcn.00411341
mov dword [0x4a4e80], 1
mov eax, 4
cmp eax, dword [0x4a4e80]
jl 0x402148
push 0x120
push 0xfa
push 0x1f4
push 1
call fcn.004141e6
and eax, eax
je 0x401fe7
push 1
call fcn.00414094
push eax
call fcn.00413b94
push 1
call fcn.00412ac8
push eax
call fcn.00413c70
push 0x11
call fcn.00413c87
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040efd0
push eax
push str.Badpig1068
push 0
push 0
call fcn.00413c9e
call fcn.00413c27
push 0
push 0x64
push 0xc8
push 1
call fcn.004142fc
push 0
call fcn.00414094
push eax
call fcn.00413b94
push 0
call fcn.00413c87
push 0xff
push 0x44
push 0x44
mov eax, 0x44
call fcn.0040efd0
push eax
push 0xe
push 0xaf
push 0x12
push 0x133
call fcn.00413d22
push 0x21
call fcn.00413c87
push 0x64
push 0xc8
push 0x12
push 0x133
push 1
call fcn.004141ca
push eax
call fcn.00413cf0
call fcn.00413c27
push 1
call fcn.00413d5f
push 0xff
push 0
call fcn.004141ca
push eax
push 0
call fcn.00411293
push eax
call fcn.00409bca
push 0x32
call fcn.0040efe9
push 0x120
push 0xfa
push 0x1f4
push 1
call fcn.004141e6
and eax, eax
je 0x402132
push 1
call fcn.00414094
push eax
call fcn.00413b94
push 1
call fcn.00412ac8
push eax
call fcn.00413c70
push 0x11
call fcn.00413c87
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040efd0
push eax
push str.Badpig1068
push 0
push 0
call fcn.00413c9e
call fcn.00413c27
push 0
push 0x64
push 0xc8
push 1
call fcn.004142fc
push 0
call fcn.00414094
push eax
call fcn.00413b94
push 0
call fcn.00413c87
push 0xff
push 0x44
push 0x44
mov eax, 0x44
call fcn.0040efd0
push eax
push 0xe
push 0xaf
push 0x12
push 0x133
call fcn.00413d22
push 0x21
call fcn.00413c87
push 0x64
push 0xc8
push 0x12
push 0x133
push 1
call fcn.004141ca
push eax
call fcn.00413cf0
call fcn.00413c27
push 1
call fcn.00413d5f
push 0xff
push 0
call fcn.004141ca
push eax
push 0
call fcn.00411293
push eax
call fcn.00409bca
push 0x32
call fcn.0040efe9
inc dword [0x4a4e80]
jno 0x401e95
push 0x4a5578
push 0x451808
push 8
push 0x100
push 4
call fcn.00413854
mov eax, 0x4931da
mov dword [0x4a4e3c], eax
lea ecx, [0x4a4e84]
mov edx, dword [0x4a4e3c]
call fcn.0040c008
add dword [0x4a4e3c], eax
mov dword [0x4a4e80], 1
mov eax, 0xfe
cmp eax, dword [0x4a4e80]
jl 0x402207
call fcn.00416120
push eax
push eax
push 0x45103e
push dword [0x4a4e80]
push dword [0x4a4e84]
call fcn.0040c0c0
push 0x4a4e88
call fcn.00416160
call fcn.00416120
push eax
push eax
push dword [0x4a4e88]
call fcn.0040c1d0
mov ebx, eax
dec ebx
push ebx
push dword [0x4a4e88]
call fcn.0040c200
mov ebx, dword [0x4a4e80]
mov ebp, dword [0x4a5578]
shl ebx, 2
lea eax, [ebp + ebx]
push eax
call fcn.00416160
inc dword [0x4a4e80]
jno 0x402191
call sub.KERNEL32.dll_IsDebuggerPresent
and eax, eax
je 0x402217
push 0x75009553
inc ecx
ret
push 0x12c
call fcn.0040efe9
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004141e6
and eax, eax
je 0x402362
push 1
call fcn.00414094
push eax
call fcn.00413b94
push 1
call fcn.00412ac8
push eax
call fcn.00413c70
push 0x11
call fcn.00413c87
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040efd0
push eax
push str.Authenticating_Trainer......
push 0
push 0
call fcn.00413c9e
call fcn.00413c27
push 0
push 0x64
push 0x1f4
push 1
call fcn.004142fc
push 0
call fcn.00414094
push eax
call fcn.00413b94
push 0
call fcn.00413c87
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040efd0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00413d22
push 0x11
call fcn.00413c87
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004141ca
push eax
call fcn.00413cf0
call fcn.00413c27
push 1
call fcn.00413d5f
push 0xff
push 0
call fcn.004141ca
push eax
push 0
call fcn.00411293
push eax
call fcn.00409bca
call fcn.00416120
push eax
push eax
call fcn.00416120
push eax
push eax
call fcn.0040eadc
call fcn.00416292
add dword [esp], edx
call fcn.00412b45
push 0x4a4e8c
call fcn.00416160
mov edx, dword [0x4a4e8c]
call fcn.00416120
push eax
call fcn.004161f0
push 0x4a4e90
call fcn.00416160
call sub.USER32.DLL_GetForegroundWindow
mov dword [0x4a4e94], eax
push 0x4a4e98
push dword [0x4a4e94]
call sub.USER32.DLL_GetWindowThreadProcessId
push dword [0x4a4e98]
push dword [0x4a4ea0]
push 0x1f0fff
call sub.KERNEL32.dll_OpenProcess
mov dword [0x4a4e9c], eax
mov eax, dword [0x4a4e98]
mov dword [0x4a4e94], eax
push 0x3e8
call fcn.00415590
mov dword [0x4a4ea4], eax
mov edx, dword [0x4a4e90]
call fcn.00416120
push eax
call fcn.004161f0
push 0x4a4ea8
call fcn.00416160
mov eax, dword [0x4a4eb0]
mov dword [0x4a4eac], eax
mov ebp, 0x493d9d
mov dword [0x4a4e80], ebp
mov eax, dword [0x4a4e80]
call fcn.004155b0
mov byte [0x4a5244], al
mov ebp, 0x493da0
mov dword [0x4a4e80], ebp
mov ebp, 0x493da0
mov ebx, ebp
add ebx, 0xbb8
cmp ebx, dword [0x4a4e80]
jl 0x4024ce
mov eax, dword [0x4a4e80]
call fcn.004155b0
mov byte [0x4a5245], al
movsx ebx, byte [0x4a5245]
xor bl, byte [0x4a5244]
mov eax, ebx
mov byte [0x4a5246], al
movsx ebx, byte [0x4a5244]
add ebx, 0x37
mov eax, ebx
mov byte [0x4a5244], al
movsx ebx, byte [0x4a5244]
cmp ebx, 0xff
jle 0x4024ab
movsx ebx, byte [0x4a5244]
add ebx, 0xffffff01
mov eax, ebx
mov byte [0x4a5244], al
movsx eax, byte [0x4a5246]
push eax
mov eax, dword [0x4a4e80]
call fcn.004155c0
mov dword [0x4a4e44], eax
inc dword [0x4a4e80]
jno 0x40243f
push 0x4a5580
push 0
push 7
push 1
push 8
call fcn.00413854
call sub.KERNEL32.dll_GetTickCount
mov dword [0x4a4ebc], eax
call fcn.00416120
push eax
push eax
call fcn.0040eadc
push 0x4a4ec0
call fcn.00416160
call fcn.00416120
push eax
push eax
push dword [0x4a4ec0]
call fcn.00412b45
push 0x4a4ec0
call fcn.00416160
mov edx, 0x45102a
lea ecx, [0x4a4e84]
call fcn.0040c008
mov edx, 0x45102a
lea ecx, [0x4a4ec4]
call fcn.0040c008
mov edx, 0x45102a
lea ecx, [0x4a4ec8]
call fcn.0040c008
mov dword [0x4a4ecc], 0
mov dword [0x4a4ed0], 0
call fcn.00416120
push eax
push eax
call fcn.00416120
push eax
call fcn.0040eadc
call fcn.00416250
push 0
call fcn.00416292
add dword [esp + 4], edx
call fcn.00413130
call fcn.004162b0
push 0
call fcn.00413420
mov dword [0x4a4ed4], eax
mov dword [0x4a4e80], 1
mov ebx, dword [0x4a4ed4]
add ebx, 0xfffffff8
cmp ebx, dword [0x4a4e80]
jl 0x4025f1
push 0
call fcn.00413480
mov byte [0x4a5247], al
mov ebx, dword [0x4a4ed0]
movzx eax, byte [0x4a5247]
add ebx, eax
mov dword [0x4a4ed0], ebx
inc dword [0x4a4e80]
jno 0x4025b4
push 0
call fcn.004134e0
mov dword [0x4a4ed8], eax
push 0
call fcn.004134e0
mov dword [0x4a4edc], eax
push 0
call fcn.00412d90
mov eax, dword [0x4a4ed0]
mov dword [0x4a4ee0], eax
push dword [0x4a4ec0]
push 0
call fcn.00413130
mov ebx, eax
and ebx, ebx
jle 0x402996
mov dword [0x4a4e80], 1
mov eax, 0x3b8
cmp eax, dword [0x4a4e80]
jl 0x40266b
push 0
call fcn.00413540
mov dword [0x4a4ee4], eax
inc dword [0x4a4e80]
jno 0x402647
mov dword [0x4a4e80], 0x3b9
mov eax, 0x3c0
cmp eax, dword [0x4a4e80]
jl 0x402701
push 0
call fcn.00413540
mov dword [0x4a4ee4], eax
call fcn.00416120
push eax
push eax
call fcn.00416120
push eax
push 1
mov eax, dword [0x4a4ee4]
cdq
push edx
push eax
call fcn.0040c2e0
call fcn.00416292
add dword [esp], edx
call fcn.0040c390
call fcn.004162b0
mov dword [0x4a4ee4], eax
mov edx, dword [0x4a4e84]
call fcn.00416120
push eax
call fcn.004161f0
call fcn.00416120
push eax
push eax
push dword [0x4a4ee4]
call fcn.0040c4e0
pop eax
push 0x4a4e84
call fcn.00416160
inc dword [0x4a4e80]
jno 0x402675
push dword [0x4a4e84]
call fcn.0040aeaf
mov dword [0x4a4ee4], eax
mov ebx, dword [0x4a4ee4]
xor ebx, 0x98989898
mov dword [0x4a4ee4], ebx
mov eax, dword [0x4a4ee4]
mov dword [0x4a4ee8], eax
call fcn.00416120
push eax
push eax
push 0xa
call fcn.00416120
push eax
mov edx, str.0000000000
call fcn.004161f0
call fcn.00416120
push eax
push eax
mov eax, dword [0x4a4ee4]
cdq
push edx
push eax
call fcn.0040c670
pop eax
call fcn.00416292
add dword [esp], edx
call fcn.0040c700
push 0x4a4e84
call fcn.00416160
mov dword [0x4a4e80], 0x3c1
mov eax, 0x3c8
cmp eax, dword [0x4a4e80]
jl 0x40280b
push 0
call fcn.00413540
mov dword [0x4a4ee4], eax
call fcn.00416120
push eax
push eax
call fcn.00416120
push eax
push 1
mov eax, dword [0x4a4ee4]
cdq
push edx
push eax
call fcn.0040c2e0
call fcn.00416292
add dword [esp], edx
call fcn.0040c390
call fcn.004162b0
mov dword [0x4a4ee4], eax
mov edx, dword [0x4a4ec4]
call fcn.00416120
push eax
call fcn.004161f0
call fcn.00416120
push eax
push eax
push dword [0x4a4ee4]
call fcn.0040c4e0
pop eax
push 0x4a4ec4
call fcn.00416160
inc dword [0x4a4e80]
jno 0x40277f
push dword [0x4a4ec4]
call fcn.0040aeaf
mov dword [0x4a4eec], eax
mov dword [0x4a4e80], 0x3c9
mov eax, 0x3d0
cmp eax, dword [0x4a4e80]
jl 0x4028b1
push 0
call fcn.00413540
mov dword [0x4a4ee4], eax
call fcn.00416120
push eax
push eax
call fcn.00416120
push eax
push 1
mov eax, dword [0x4a4ee4]
cdq
push edx
push eax
call fcn.0040c2e0
call fcn.00416292
add dword [esp], edx
call fcn.0040c390
call fcn.004162b0
mov dword [0x4a4ee4], eax
mov edx, dword [0x4a4ec8]
call fcn.00416120
push eax
call fcn.004161f0
call fcn.00416120
push eax
push eax
push dword [0x4a4ee4]
call fcn.0040c4e0
pop eax
push 0x4a4ec8
call fcn.00416160
inc dword [0x4a4e80]
jno 0x402825
push dword [0x4a4ec8]
call fcn.0040aeaf
mov dword [0x4a4ee4], eax
mov eax, dword [0x4a4ee4]
mov dword [0x4a4ef0], eax
mov dword [0x4a4e80], 0x3d1
mov eax, dword [0x4a4ef0]
cmp eax, dword [0x4a4e80]
jl 0x4028f9
push 0
call fcn.00413540
mov dword [0x4a4ee4], eax
inc dword [0x4a4e80]
jno 0x4028d5
mov eax, dword [0x4a4ef0]
mov dword [0x4a4e80], eax
mov ebx, dword [0x4a4ef0]
add ebx, 0x12
cmp ebx, dword [0x4a4e80]
jl 0x40293d
push 0
call fcn.00413540
mov dword [0x4a4ee4], eax
mov ebx, dword [0x4a4ecc]
add ebx, dword [0x4a4ee4]
mov dword [0x4a4ecc], ebx
inc dword [0x4a4e80]
jno 0x402903
mov ebx, dword [0x4a4eec]
xor ebx, dword [0x4a4ecc]
mov dword [0x4a4ef4], ebx
mov ebx, dword [0x4a4ef4]
and ebx, ebx
jne 0x402963
mov dword [0x4a4ef4], 0x63
mov ebx, dword [0x4a4ef4]
xor ebx, 0x98989898
mov dword [0x4a4ef4], ebx
mov eax, dword [0x4a4ee8]
mov dword [0x4a4ef8], eax
mov ebx, dword [0x4a4ee8]
cmp ebx, dword [0x4a4ef4]
jne 0x40298f
jmp 0x402994
call fcn.004088e6
jmp 0x40299b
call fcn.004088e6
mov ebx, dword [0x4a4edc]
cmp ebx, dword [0x4a4ed4]
jne 0x4029ab
jmp 0x4029b0
call fcn.004088e6
call sub.KERNEL32.dll_GetTickCount
mov dword [0x4a4efc], eax
mov ebx, dword [0x4a4efc]
sub ebx, dword [0x4a4ebc]
cmp ebx, 0x3e8
jle 0x4029d5
push 0x9099542
inc eax
ret
mov dword [0x4a4f00], 0x45a2a5
mov edx, 0x45102a
lea ecx, [0x4a4f04]
call fcn.0040c008
push 0x4a5588
push 0
push 0x15
push 0x15
push 4
call fcn.00413854
push 0x4a5590
push 0
push 0x15
push 0x15
push 4
call fcn.00413854
push 0x4a5598
push 0
push 0x15
push 0x15
push 4
call fcn.00413854
push 0x4a55a0
push 0
push 0x15
push 0x15
push 4
call fcn.00413854
push 0x4a55a8
push 0
push 0x15
push 0x15
push 4
call fcn.00413854
push 0x4a55b0
push 0
push 0x15
push 0x15
push 4
call fcn.00413854
push 0x4a55b8
push 0
push 0x15
push 0xa
push 4
call fcn.00413854
push 0x3e8
call fcn.00415590
mov dword [0x4a4ea4], eax
push 0x3e8
call fcn.00415590
mov dword [0x4a4f08], eax
push 0x4000
call fcn.00415590
mov dword [0x4a4f0c], eax
push 0x4000
call fcn.00415590
mov dword [0x4a4f10], eax
push 0x14
call fcn.00415590
mov dword [0x4a4f14], eax
mov dword [0x4a4e80], 1
mov eax, 0x14
cmp eax, dword [0x4a4e80]
jl 0x402b70
mov ebx, dword [0x4a4e80]
mov ebp, dword [0x4a5590]
shl ebx, 2
mov dword [ebp + ebx], 1
mov ebx, dword [0x4a4e80]
mov ebp, dword [0x4a5598]
shl ebx, 2
mov dword [ebp + ebx], 1
mov ebx, dword [0x4a4e80]
mov ebp, dword [0x4a55a0]
shl ebx, 2
mov dword [ebp + ebx], 1
inc dword [0x4a4e80]
jno 0x402b16
mov ebp, dword [0x4a55b8]
mov dword [ebp], 0xcc
mov dword [ebp + 4], 0xffffff
mov dword [ebp + 8], 0xcc0000
mov dword [ebp + 0xc], 0xaa00
mov dword [ebp + 0x10], 0x55ee
mov dword [ebp + 0x14], 0xccff
mov dword [ebp + 0x18], 0x2255
mov dword [ebp + 0x1c], 0x770044
mov dword [ebp + 0x20], 0
mov dword [ebp + 0x24], 0x6633ff
call fcn.00416120
push eax
push eax
call fcn.00416120
push eax
push 1
push 1
call fcn.00416120
push eax
push eax
mov eax, dword [0x4a4ef4]
cdq
push edx
push eax
call fcn.0040c670
call fcn.00416292
add dword [esp], edx
call fcn.0040c770
call fcn.00416292
add dword [esp], edx
call fcn.0040c390
call fcn.004162b0
mov dword [0x4a4f18], eax
call fcn.00416120
push eax
push eax
call fcn.00416120
push eax
push 1
push 2
call fcn.00416120
push eax
push eax
mov eax, dword [0x4a4ef4]
cdq
push edx
push eax
call fcn.0040c670
call fcn.00416292
add dword [esp], edx
call fcn.0040c770
call fcn.00416292
add dword [esp], edx
call fcn.0040c390
call fcn.004162b0
mov dword [0x4a4f1c], eax
call fcn.00416120
push eax
push eax
call fcn.00416120
push eax
push 1
push 3
call fcn.00416120
push eax
push eax
mov eax, dword [0x4a4ef4]
cdq
push edx
push eax
call fcn.0040c670
call fcn.00416292
add dword [esp], edx
call fcn.0040c770
call fcn.00416292
add dword [esp], edx
call fcn.0040c390
call fcn.004162b0
mov dword [0x4a4f20], eax
call fcn.00416120
push eax
push eax
call fcn.00416120
push eax
push 1
push 4
call fcn.00416120
push eax
push eax
mov eax, dword [0x4a4ef4]
cdq
push edx
push eax
call fcn.0040c670
call fcn.00416292
add dword [esp], edx
call fcn.0040c770
call fcn.00416292
add dword [esp], edx
call fcn.0040c390
call fcn.004162b0
mov dword [0x4a4f24], eax
call fcn.00416120
push eax
push eax
call fcn.00416120
push eax
push 1
push 5
call fcn.00416120
push eax
push eax
mov eax, dword [0x4a4ef4]
cdq
push edx
push eax
call fcn.0040c670
call fcn.00416292
add dword [esp], edx
call fcn.0040c770
call fcn.00416292
add dword [esp], edx
call fcn.0040c390
call fcn.004162b0
mov dword [0x4a4f28], eax
push 0
call fcn.00414094
push eax
call fcn.00413b94
push 0
call fcn.00413c87
mov ebx, dword [0x4a4f18]
shl ebx, 2
push dword [ebp + ebx]
push 2
push 2
push 0x144
push 0x1ea
call fcn.00413d22
mov ebx, dword [0x4a4f1c]
shl ebx, 2
push dword [ebp + ebx]
push 2
push 2
push 0x144
push 0x1ed
call fcn.00413d22
mov ebx, dword [0x4a4f20]
shl ebx, 2
push dword [ebp + ebx]
push 2
push 2
push 0x144
push 0x1f0
call fcn.00413d22
mov ebx, dword [0x4a4f24]
shl ebx, 2
push dword [ebp + ebx]
push 2
push 2
push 0x144
push 0x1f3
call fcn.00413d22
mov ebx, dword [0x4a4f28]
shl ebx, 2
push dword [ebp + ebx]
push 2
push 2
push 0x144
push 0x1f6
call fcn.00413d22
call fcn.00413c27
mov edx, str.Template
lea ecx, [0x4a4f44]
call fcn.0040c008
call fcn.00416120
push eax
push eax
call fcn.00412ae4
push 0x4a4f2c
call fcn.00416160
call fcn.00409b0a
call fcn.00408a5a
call fcn.004095ca
call fcn.00408a5a
call fcn.0040897f
call fcn.00409394
call fcn.0040897f
call fcn.00407c25
call fcn.00416120
push eax
mov edx, dword [0x4a4f2c]
call fcn.00416120
push eax
call fcn.004161f0
mov edx, str.CH.dll
call fcn.004161f0
call fcn.00416250
push 0
call fcn.00416292
add dword [esp + 4], edx
call fcn.00412fb0
call fcn.004162b0
and eax, eax
je 0x402edf
mov ebp, 0x4949a0
mov ebx, ebp
mov ebp, 0x493da0
sub ebx, ebp
push ebx
mov ebp, 0x493da0
push ebp
push 0
call fcn.004131e0
push 0
call fcn.00412d90
jmp 0x402edf
call fcn.00416120
push eax
mov edx, dword [0x4a4f2c]
call fcn.00416120
push eax
call fcn.004161f0
mov edx, str.help.txt
call fcn.004161f0
call fcn.00416250
push 0
call fcn.00416292
add dword [esp + 4], edx
call fcn.00412fb0
call fcn.004162b0
and eax, eax
je 0x402f4c
mov ebp, 0x4931da
mov ebx, ebp
mov ebp, 0x492887
sub ebx, ebp
push ebx
mov ebp, 0x492887
push ebp
push 0
call fcn.004131e0
push 0
call fcn.00412d90
jmp 0x402f5b
push str.Could_not_create_HELP.TXT_file.
push str.Error
call fcn.0040e915
push str.CH_Trainer_Keys.dat
push 0
call fcn.00413130
mov dword [0x4a4e44], eax
mov ebx, dword [0x4a4e44]
and ebx, ebx
jle 0x402f8d
mov dword [0x4a4f5c], 1
push 0
call fcn.00412d90
push 0
push 0
call sub.WININET.DLL_InternetGetConnectedState
and eax, eax
je 0x402fa2
jmp 0x402fd1
push dword [0x4a4ef8]
call fcn.00409f17
mov ebx, eax
and ebx, ebx
jne 0x402fd1
push 0
push str.This_trainer_must_be_authenticated_before_it_can_be_used._Please_connect_this_computer_to_the_Internet_or_obtain_an_offline_key_from_cheathappens.com_then_re_run_the_trainer.
push str.No_Internet_Connection_
call fcn.0040e8e6
jmp 0x409ab8
call fcn.00416120
push eax
push eax
call fcn.00412ae4
mov edx, str.black.txt
call fcn.004161f0
push 0x4a4f60
call fcn.00416160
mov ebx, dword [0x4a4f64]
and ebx, ebx
jle 0x4030b3
call fcn.00416120
push eax
mov edx, str.http:__www.cheathappens.com_unauthorized_
call fcn.004161f0
call fcn.00416120
push eax
push eax
mov eax, dword [0x4a4ef8]
cdq
push edx
push eax
xor dword [esp], 0x7b3d89b
xor dword [esp + 4], 0
pop eax
pop edx
push edx
push eax
call fcn.0040c670
pop eax
mov edx, str..zip
call fcn.004161f0
push 0x4a4f68
call fcn.00416160
mov edx, str.http:__www.cheathappens.com_unauthorized_0.zip
lea ecx, [0x4a4f6c]
call fcn.0040c008
mov edx, dword [0x4a4f68]
call fcn.00416120
push eax
call fcn.004161f0
push 0x4a4f70
call fcn.00416160
mov edx, dword [0x4a4f6c]
call fcn.00416120
push eax
call fcn.004161f0
push 0x4a4f74
call fcn.00416160
push 0
push 0
mov eax, dword [0x4a4f60]
push eax
mov eax, dword [0x4a4f74]
push eax
push 0
call sub.URLMON.DLL_URLDownloadToFileA
mov dword [0x4a4f78], eax
call fcn.00416120
push eax
mov edx, str.http:__www.cheathappens.com_unauthorized_
call fcn.004161f0
call fcn.00416120
push eax
push eax
mov eax, dword [0x4a4ef8]
cdq
push edx
push eax
xor dword [esp], 0x7b3d89b
xor dword [esp + 4], 0
pop eax
pop edx
push edx
push eax
call fcn.0040c670
pop eax
mov edx, str..zip
call fcn.004161f0
push 0x4a4f68
call fcn.00416160
mov edx, str.http:__www.cheathappens.com_unauthorized_0.zip
lea ecx, [0x4a4f6c]
call fcn.0040c008
mov edx, dword [0x4a4f68]
call fcn.00416120
push eax
call fcn.004161f0
push 0x4a4f70
call fcn.00416160
mov edx, dword [0x4a4f6c]
call fcn.00416120
push eax
call fcn.004161f0
push 0x4a4f74
call fcn.00416160
push 0
push 0
mov eax, dword [0x4a4f60]
push eax
mov eax, dword [0x4a4f74]
push eax
push 0
call sub.URLMON.DLL_URLDownloadToFileA
mov dword [0x4a4f78], eax
mov ebx, dword [0x4a4f78]
and ebx, ebx
jne 0x403173
jmp 0x4031a2
push dword [0x4a4ef8]
call fcn.00409f17
mov ebx, eax
and ebx, ebx
jne 0x4031a2
push 0
push str.This_trainer_must_be_authenticated_before_it_can_be_used._Please_connect_this_computer_to_the_Internet_or_obtain_an_offline_key_from_cheathappens.com_then_re_run_the_trainer.
push str.No_Internet_Connection_
call fcn.0040e8e6
jmp 0x409ab8
push 0
push 0
mov eax, dword [0x4a4f60]
push eax
mov eax, dword [0x4a4f70]
push eax
push 0
call sub.URLMON.DLL_URLDownloadToFileA
mov dword [0x4a4f7c], eax
call fcn.00416120
push eax
push eax
push 0x4510b3
push str.IZnvZalZidZ_ZTraiZnerZ_UsZerZ
call fcn.0040c9d0
push 0x4a4f80
call fcn.00416160
mov ebx, dword [0x4a4f7c]
and ebx, ebx
jne 0x4031f6
call fcn.004088e6
call fcn.00416120
push eax
push eax
push str.ZTSA.l
push dword [0x4a4f80]
call fcn.0040c9d0
push 0x4a4f80
call fcn.00416160
mov ebx, dword [0x4a4f7c]
and ebx, ebx
jne 0x403371
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004141e6
and eax, eax
je 0x403367
push 1
call fcn.00414094
push eax
call fcn.00413b94
push 1
call fcn.00412ac8
push eax
call fcn.00413c70
push 0x11
call fcn.00413c87
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040efd0
push eax
push dword [0x4a4f80]
push 0
push 0
call fcn.00413c9e
call fcn.00413c27
push 0
push 0x64
push 0x1f4
push 1
call fcn.004142fc
push 0
call fcn.00414094
push eax
call fcn.00413b94
push 0
call fcn.00413c87
push 0xff
push 0x28
push 0x28
mov eax, 0xff
call fcn.0040efd0
push eax
push 0x24
push 0x1df
push 1
push 0
call fcn.00413d22
push 0x11
call fcn.00413c87
push 0x64
push 0x1f4
push 0xa
push 0xc8
push 1
call fcn.004141ca
push eax
call fcn.00413cf0
call fcn.00413c27
push 1
call fcn.00413d5f
push 0xff
push 0
call fcn.004141ca
push eax
push 0
call fcn.00411293
push eax
call fcn.00409bca
call fcn.00407c25
jmp 0x403217
mov ebx, dword [0x4a4f78]
and ebx, ebx
je 0x403393
push dword [0x4a4ef8]
call fcn.00409f17
mov ebx, eax
and ebx, ebx
jne 0x403393
mov eax, 1
jmp 0x403395
xor eax, eax
and eax, eax
je 0x4033a3
mov dword [0x4a4f00], 0
mov dword [0x4a4f84], 3
lea ebp, [0x4a524c]
lea eax, [ebp]
push eax
call sub.USER32.DLL_GetKeyboardState
movsx eax, byte [ebp + 0x90]
push eax
pop dword [0x4a4f88]
mov ebx, dword [0x4a4f88]
cmp ebx, 1
jne 0x4033e7
mov edx, str.Run_game_and_press_F1_at_main_menu.__Numlock_is_ON.
lea ecx, [0x4a4f8c]
call fcn.0040c008
jmp 0x4033f7
mov edx, 0x451240
lea ecx, [0x4a4f8c]
call fcn.0040c008
mov ebx, dword [0x4a4f84]
cmp ebx, dword [0x4a4f88]
je 0x403555
mov eax, dword [0x4a4f88]
mov dword [0x4a4f84], eax
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004141e6
and eax, eax
je 0x403555
push 1
call fcn.00414094
push eax
call fcn.00413b94
push 1
call fcn.00412ac8
push eax
call fcn.00413c70
push 0x11
call fcn.00413c87
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040efd0
push eax
push dword [0x4a4f8c]
push 0
push 0
call fcn.00413c9e
call fcn.00413c27
push 0
push 0x64
push 0x1f4
push 1
call fcn.004142fc
push 0
call fcn.00414094
push eax
call fcn.00413b94
push 0
call fcn.00413c87
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040efd0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00413d22
push 0x11
call fcn.00413c87
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004141ca
push eax
call fcn.00413cf0
call fcn.00413c27
push 1
call fcn.00413d5f
push 0xff
push 0
call fcn.004141ca
push eax
push 0
call fcn.00411293
push eax
call fcn.00409bca
call fcn.00407c25
push 0xa
call fcn.0040efe9
push 0x70
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 0x8000
and ebx, ebx
je 0x4033ad
mov edx, str.medieval2.exe
lea ecx, [0x4a4e90]
call fcn.0040c008
call fcn.00406ff3
mov ebx, dword [0x4a4e94]
and ebx, ebx
jne 0x40370f
push 4
call fcn.0040e014
push 0x12c
call fcn.0040efe9
push 0x12c
call fcn.0040efe9
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004141e6
and eax, eax
je 0x403700
push 1
call fcn.00414094
push eax
call fcn.00413b94
push 1
call fcn.00412ac8
push eax
call fcn.00413c70
push 0x11
call fcn.00413c87
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040efd0
push eax
push str.Game_not_Found__Run_Game_and_then_press_F1_at_Main_Menu.
push 0
push 0
call fcn.00413c9e
call fcn.00413c27
push 0
push 0x64
push 0x1f4
push 1
call fcn.004142fc
push 0
call fcn.00414094
push eax
call fcn.00413b94
push 0
call fcn.00413c87
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040efd0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00413d22
push 0x11
call fcn.00413c87
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004141ca
push eax
call fcn.00413cf0
call fcn.00413c27
push 1
call fcn.00413d5f
push 0xff
push 0
call fcn.004141ca
push eax
push 0
call fcn.00411293
push eax
call fcn.00409bca
push 0x7d0
call fcn.0040efe9
jmp 0x403371
mov edx, str.CH.dll
lea ecx, [0x4a4f90]
call fcn.0040c008
mov edx, dword [0x4a4f2c]
call fcn.00416120
push eax
call fcn.004161f0
mov edx, dword [0x4a4f90]
call fcn.004161f0
push 0x4a4ea8
call fcn.00416160
call fcn.00407038
mov edx, str.xlive.dll
lea ecx, [0x4a4f94]
call fcn.0040c008
call fcn.00406ff3
call fcn.00407b22
call fcn.00407c25
mov ebx, dword [0x4a4f50]
and ebx, ebx
jne 0x4038cb
mov ebx, dword [0x4a4f98]
and ebx, ebx
jne 0x4038cb
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004141e6
and eax, eax
je 0x4038c6
push 1
call fcn.00414094
push eax
call fcn.00413b94
push 1
call fcn.00412ac8
push eax
call fcn.00413c70
push 0x11
call fcn.00413c87
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040efd0
push eax
push str.Game_not_Found__Run_Game_and_then_press_F1_at_Main_Menu.
push 0
push 0
call fcn.00413c9e
call fcn.00413c27
push 0
push 0x64
push 0x1f4
push 1
call fcn.004142fc
push 0
call fcn.00414094
push eax
call fcn.00413b94
push 0
call fcn.00413c87
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040efd0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00413d22
push 0x11
call fcn.00413c87
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004141ca
push eax
call fcn.00413cf0
call fcn.00413c27
push 1
call fcn.00413d5f
push 0xff
push 0
call fcn.004141ca
push eax
push 0
call fcn.00411293
push eax
call fcn.00409bca
jmp 0x403371
mov ebx, dword [0x4a4ed8]
cmp ebx, dword [0x4a4ee0]
jne 0x4038ef
mov ebx, dword [0x4a4ed8]
and ebx, ebx
je 0x4038ef
mov ebx, dword [0x4a4ee0]
and ebx, ebx
je 0x4038ef
jmp 0x4038f6
mov eax, 1
jmp 0x4038f8
xor eax, eax
and eax, eax
je 0x40394f
push 0xa
call fcn.0040f0a7
mov ebx, eax
add ebx, 0xa
mov dword [0x4a4f9c], ebx
push 0x28
call fcn.0040f0a7
mov ebx, eax
add ebx, 0x28
mov dword [0x4a4fa0], ebx
mov ebx, dword [0x4a4f50]
add ebx, dword [0x4a4f9c]
mov dword [0x4a4f50], ebx
mov ebx, dword [0x4a4f98]
add ebx, dword [0x4a4fa0]
mov dword [0x4a4f98], ebx
call fcn.004088e6
push 3
call fcn.0040e014
push 0x12c
call fcn.0040efe9
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004141e6
and eax, eax
je 0x403aa4
push 1
call fcn.00414094
push eax
call fcn.00413b94
push 1
call fcn.00412ac8
push eax
call fcn.00413c70
push 0x11
call fcn.00413c87
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040efd0
push eax
push str.Game_found__Trainer_Activated_
push 0
push 0
call fcn.00413c9e
call fcn.00413c27
push 0
push 0x64
push 0x1f4
push 1
call fcn.004142fc
push 0
call fcn.00414094
push eax
call fcn.00413b94
push 0
call fcn.00413c87
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040efd0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00413d22
push 0x11
call fcn.00413c87
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004141ca
push eax
call fcn.00413cf0
call fcn.00413c27
push 1
call fcn.00413d5f
push 0xff
push 0
call fcn.004141ca
push eax
push 0
call fcn.00411293
push eax
call fcn.00409bca
mov ebx, dword [0x4a4fa4]
and ebx, ebx
je 0x403db2
push 0x8b
mov ebx, dword [0x4a4ea4]
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xff
mov ebx, dword [0x4a4ea4]
inc ebx
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x55
mov ebx, dword [0x4a4ea4]
add ebx, 2
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x8b
mov ebx, dword [0x4a4ea4]
add ebx, 3
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xec
mov ebx, dword [0x4a4ea4]
add ebx, 4
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x83
mov ebx, dword [0x4a4ea4]
add ebx, 5
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xec
mov ebx, dword [0x4a4ea4]
add ebx, 6
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x20
mov ebx, dword [0x4a4ea4]
add ebx, 7
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x53
mov ebx, dword [0x4a4ea4]
add ebx, 8
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x56
mov ebx, dword [0x4a4ea4]
add ebx, 9
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x57
mov ebx, dword [0x4a4ea4]
add ebx, 0xa
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x8d
mov ebx, dword [0x4a4ea4]
add ebx, 0xb
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x45
mov ebx, dword [0x4a4ea4]
add ebx, 0xc
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xe0
mov ebx, dword [0x4a4ea4]
add ebx, 0xd
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x33
mov ebx, dword [0x4a4ea4]
add ebx, 0xe
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xf6
mov ebx, dword [0x4a4ea4]
add ebx, 0xf
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x50
mov ebx, dword [0x4a4ea4]
add ebx, 0x10
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xff
mov ebx, dword [0x4a4ea4]
add ebx, 0x11
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x75
mov ebx, dword [0x4a4ea4]
add ebx, 0x12
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xc
mov ebx, dword [0x4a4ea4]
add ebx, 0x13
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
mov ebx, dword [0x4a4fa4]
add ebx, 0x1000
mov dword [0x4a4e80], ebx
mov ebx, dword [0x4a4fa4]
add ebx, 0x200000
cmp ebx, dword [0x4a4e80]
jl 0x403db2
push dword [0x4a4ea0]
push 0x14
push dword [0x4a4f08]
push dword [0x4a4e80]
push dword [0x4a4fa8]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x4a4e44], eax
push 0x14
push dword [0x4a4f08]
push dword [0x4a4ea4]
call fcn.004155d0
mov dword [0x4a4e44], eax
mov ebx, dword [0x4a4e44]
cmp ebx, 1
jne 0x403da6
mov eax, dword [0x4a4e80]
mov dword [0x4a4fac], eax
push 0xc2
mov ebx, dword [0x4a4ea4]
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xc
mov ebx, dword [0x4a4ea4]
inc ebx
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 2
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push dword [0x4a4ea0]
push 3
push dword [0x4a4ea4]
push dword [0x4a4fac]
push dword [0x4a4fa8]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a4e44], eax
inc dword [0x4a4e80]
jno 0x403cc7
mov ebx, dword [0x4a4f64]
and ebx, ebx
jle 0x403dc1
jmp 0x4056af
mov ebx, dword [0x4a4f00]
cmp ebx, 0x45a2a5
jne 0x403eaa
mov ebp, dword [0x4a5588]
mov dword [ebp + 4], 0x61
mov dword [ebp + 8], 0x62
mov dword [ebp + 0xc], 0x63
mov dword [ebp + 0x10], 0x64
mov dword [ebp + 0x14], 0x65
mov dword [ebp + 0x18], 0x66
mov dword [ebp + 0x1c], 0
mov dword [ebp + 0x20], 0
mov dword [ebp + 0x24], 0
mov dword [ebp + 0x28], 0
mov dword [ebp + 0x2c], 0
mov dword [ebp + 0x30], 0
mov dword [ebp + 0x34], 0
mov dword [ebp + 0x38], 0
mov dword [ebp + 0x3c], 0
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0
mov dword [ebp + 0x48], 0
mov dword [ebp + 0x4c], 0
mov dword [ebp + 0x50], 0
mov dword [0x4a4e80], 1
mov eax, 0x14
cmp eax, dword [0x4a4e80]
jl 0x403eaa
mov ebx, dword [0x4a4e80]
mov ebp, dword [0x4a5588]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4e80]
mov ebp, dword [0x4a55a8]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x4a4e80]
jno 0x403e6f
push str.CH_Trainer_Keys.dat
push 0
call fcn.00413130
mov dword [0x4a4e44], eax
mov ebx, dword [0x4a4e44]
and ebx, ebx
jle 0x404014
mov dword [0x4a4f5c], 1
push 0
call fcn.00413540
mov dword [0x4a4fb0], eax
mov dword [0x4a4e80], 1
mov eax, dword [0x4a4fb0]
cmp eax, dword [0x4a4e80]
jl 0x40400a
call fcn.00416120
push eax
push eax
push 0
call fcn.00413240
push 0x4a4fb4
call fcn.00416160
push dword [0x4a4fb4]
mov edx, 0x4511f6
pop ecx
call fcn.00416300
je 0x403f45
mov ebx, dword [0x4a4e80]
mov ebp, dword [0x4a5590]
shl ebx, 2
mov dword [ebp + ebx], 0
push dword [0x4a4fb4]
mov edx, str.CTRL
pop ecx
call fcn.00416300
je 0x403f6f
mov ebx, dword [0x4a4e80]
mov ebp, dword [0x4a5598]
shl ebx, 2
mov dword [ebp + ebx], 0
push dword [0x4a4fb4]
mov edx, 0x451362
pop ecx
call fcn.00416300
je 0x403f99
mov ebx, dword [0x4a4e80]
mov ebp, dword [0x4a55a0]
shl ebx, 2
mov dword [ebp + ebx], 0
push 0
call fcn.00413540
push eax
mov ebx, dword [0x4a4e80]
mov ebp, dword [0x4a5588]
shl ebx, 2
pop dword [ebp + ebx]
call fcn.00416120
push eax
push eax
call fcn.00416120
push eax
push 1
mov ebx, dword [0x4a4e80]
shl ebx, 2
mov eax, dword [ebp + ebx]
cdq
push edx
push eax
call fcn.0040c2e0
call fcn.00416292
add dword [esp], edx
call fcn.0040c390
call fcn.004162b0
push eax
mov ebx, dword [0x4a4e80]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x4a4e80]
jno 0x403eef
push 0
call fcn.00412d90
mov dword [0x4a4fb8], 0x400000
push 5
mov ebx, dword [0x4a4ea4]
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xe8
mov ebx, dword [0x4a4ea4]
inc ebx
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xa
mov ebx, dword [0x4a4ea4]
add ebx, 2
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 3
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 4
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xc7
mov ebx, dword [0x4a4ea4]
add ebx, 5
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x40
mov ebx, dword [0x4a4ea4]
add ebx, 6
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 4
mov ebx, dword [0x4a4ea4]
add ebx, 7
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push pe_nt_image_headers32
mov ebx, dword [0x4a4ea4]
add ebx, 8
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x96
mov ebx, dword [0x4a4ea4]
add ebx, 9
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x98
mov ebx, dword [0x4a4ea4]
add ebx, 0xa
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0xb
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xc3
mov ebx, dword [0x4a4ea4]
add ebx, 0xc
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
add ebx, 0xd
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0xe
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0xf
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x10
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x11
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x12
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x13
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x14
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x15
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x16
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x17
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x18
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x19
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x1a
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x1b
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x1c
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x1d
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x1e
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x1f
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xc6
mov ebx, dword [0x4a4ea4]
add ebx, 0x20
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x47
mov ebx, dword [0x4a4ea4]
add ebx, 0x21
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x1b
mov ebx, dword [0x4a4ea4]
add ebx, 0x22
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 1
mov ebx, dword [0x4a4ea4]
add ebx, 0x23
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xf
mov ebx, dword [0x4a4ea4]
add ebx, 0x24
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xb6
mov ebx, dword [0x4a4ea4]
add ebx, 0x25
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x57
mov ebx, dword [0x4a4ea4]
add ebx, 0x26
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x1b
mov ebx, dword [0x4a4ea4]
add ebx, 0x27
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x89
mov ebx, dword [0x4a4ea4]
add ebx, 0x28
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x56
mov ebx, dword [0x4a4ea4]
add ebx, 0x29
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x20
mov ebx, dword [0x4a4ea4]
add ebx, 0x2a
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xc3
mov ebx, dword [0x4a4ea4]
add ebx, 0x2b
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x2c
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x2d
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x2e
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x2f
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x66
mov ebx, dword [0x4a4ea4]
add ebx, 0x30
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x81
mov ebx, dword [0x4a4ea4]
add ebx, 0x31
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xbc
mov ebx, dword [0x4a4ea4]
add ebx, 0x32
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x24
mov ebx, dword [0x4a4ea4]
add ebx, 0x33
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xd4
mov ebx, dword [0x4a4ea4]
add ebx, 0x34
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 8
mov ebx, dword [0x4a4ea4]
add ebx, 0x35
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x36
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x37
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x71
mov ebx, dword [0x4a4ea4]
add ebx, 0x38
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x98
mov ebx, dword [0x4a4ea4]
add ebx, 0x39
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x75
mov ebx, dword [0x4a4ea4]
add ebx, 0x3a
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 8
mov ebx, dword [0x4a4ea4]
add ebx, 0x3b
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xc7
mov ebx, dword [0x4a4ea4]
add ebx, 0x3c
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x44
mov ebx, dword [0x4a4ea4]
add ebx, 0x3d
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xca
mov ebx, dword [0x4a4ea4]
add ebx, 0x3e
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 4
mov ebx, dword [0x4a4ea4]
add ebx, 0x3f
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x40
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x41
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x42
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x42
mov ebx, dword [0x4a4ea4]
add ebx, 0x43
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x8b
mov ebx, dword [0x4a4ea4]
add ebx, 0x44
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x4c
mov ebx, dword [0x4a4ea4]
add ebx, 0x45
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xca
mov ebx, dword [0x4a4ea4]
add ebx, 0x46
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 4
mov ebx, dword [0x4a4ea4]
add ebx, 0x47
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x89
mov ebx, dword [0x4a4ea4]
add ebx, 0x48
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x48
mov ebx, dword [0x4a4ea4]
add ebx, 0x49
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 4
mov ebx, dword [0x4a4ea4]
add ebx, 0x4a
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xc3
mov ebx, dword [0x4a4ea4]
add ebx, 0x4b
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x4c
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x4d
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x4e
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x4f
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x50
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x51
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x52
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x53
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x54
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x55
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x56
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x57
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x58
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x59
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x5a
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x5b
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x5c
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x5d
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x5e
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x5f
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xc7
mov ebx, dword [0x4a4ea4]
add ebx, 0x60
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x41
mov ebx, dword [0x4a4ea4]
add ebx, 0x61
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x18
mov ebx, dword [0x4a4ea4]
add ebx, 0x62
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x63
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x64
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x65
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x45
mov ebx, dword [0x4a4ea4]
add ebx, 0x66
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xf3
mov ebx, dword [0x4a4ea4]
add ebx, 0x67
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xf
mov ebx, dword [0x4a4ea4]
add ebx, 0x68
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x10
mov ebx, dword [0x4a4ea4]
add ebx, 0x69
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x49
mov ebx, dword [0x4a4ea4]
add ebx, 0x6a
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x18
mov ebx, dword [0x4a4ea4]
add ebx, 0x6b
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xc3
mov ebx, dword [0x4a4ea4]
add ebx, 0x6c
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
add ebx, 0x6d
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x6e
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x6f
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x70
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x71
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x72
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x73
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x74
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x75
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x76
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x77
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x78
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x79
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x7a
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x7b
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x7c
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x7d
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x7e
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x7f
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x8b
mov ebx, dword [0x4a4ea4]
add ebx, 0x80
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x7c
mov ebx, dword [0x4a4ea4]
add ebx, 0x81
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x24
mov ebx, dword [0x4a4ea4]
add ebx, 0x82
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x38
mov ebx, dword [0x4a4ea4]
add ebx, 0x83
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x8b
mov ebx, dword [0x4a4ea4]
add ebx, 0x84
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 7
mov ebx, dword [0x4a4ea4]
add ebx, 0x85
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x60
mov ebx, dword [0x4a4ea4]
add ebx, 0x86
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x83
mov ebx, dword [0x4a4ea4]
add ebx, 0x87
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x3d
mov ebx, dword [0x4a4ea4]
add ebx, 0x88
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x89
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xbf
mov ebx, dword [0x4a4ea4]
add ebx, 0x8a
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xda
mov ebx, dword [0x4a4ea4]
add ebx, 0x8b
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 2
mov ebx, dword [0x4a4ea4]
add ebx, 0x8c
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 1
mov ebx, dword [0x4a4ea4]
add ebx, 0x8d
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x75
mov ebx, dword [0x4a4ea4]
add ebx, 0x8e
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x14
mov ebx, dword [0x4a4ea4]
add ebx, 0x8f
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xc7
mov ebx, dword [0x4a4ea4]
add ebx, 0x90
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x87
mov ebx, dword [0x4a4ea4]
add ebx, 0x91
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xec
mov ebx, dword [0x4a4ea4]
add ebx, 0x92
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 1
mov ebx, dword [0x4a4ea4]
add ebx, 0x93
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x94
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x95
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x96
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x97
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x98
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x45
mov ebx, dword [0x4a4ea4]
add ebx, 0x99
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xc7
mov ebx, dword [0x4a4ea4]
add ebx, 0x9a
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x87
mov ebx, dword [0x4a4ea4]
add ebx, 0x9b
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xc8
mov ebx, dword [0x4a4ea4]
add ebx, 0x9c
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x9d
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x9e
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0x9f
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0xa0
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0xa1
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0xa2
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x45
mov ebx, dword [0x4a4ea4]
add ebx, 0xa3
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x83
mov ebx, dword [0x4a4ea4]
add ebx, 0xa4
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x3d
mov ebx, dword [0x4a4ea4]
add ebx, 0xa5
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 4
mov ebx, dword [0x4a4ea4]
add ebx, 0xa6
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xbf
mov ebx, dword [0x4a4ea4]
add ebx, 0xa7
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xda
mov ebx, dword [0x4a4ea4]
add ebx, 0xa8
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 2
mov ebx, dword [0x4a4ea4]
add ebx, 0xa9
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 1
mov ebx, dword [0x4a4ea4]
add ebx, 0xaa
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x75
mov ebx, dword [0x4a4ea4]
add ebx, 0xab
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x15
mov ebx, dword [0x4a4ea4]
add ebx, 0xac
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x8b
mov ebx, dword [0x4a4ea4]
add ebx, 0xad
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xbf
mov ebx, dword [0x4a4ea4]
add ebx, 0xae
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push pe_nt_image_headers32
mov ebx, dword [0x4a4ea4]
add ebx, 0xaf
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0xb0
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0xb1
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0xb2
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x83
mov ebx, dword [0x4a4ea4]
add ebx, 0xb3
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xc7
mov ebx, dword [0x4a4ea4]
add ebx, 0xb4
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x44
mov ebx, dword [0x4a4ea4]
add ebx, 0xb5
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xb8
mov ebx, dword [0x4a4ea4]
add ebx, 0xb6
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x10
mov ebx, dword [0x4a4ea4]
add ebx, 0xb7
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0xb8
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0xb9
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0xba
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xb9
mov ebx, dword [0x4a4ea4]
add ebx, 0xbb
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x40
mov ebx, dword [0x4a4ea4]
add ebx, 0xbc
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0xbd
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0xbe
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 0xbf
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xf3
mov ebx, dword [0x4a4ea4]
add ebx, 0xc0
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xab
mov ebx, dword [0x4a4ea4]
add ebx, 0xc1
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x61
mov ebx, dword [0x4a4ea4]
add ebx, 0xc2
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xc3
mov ebx, dword [0x4a4ea4]
add ebx, 0xc3
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push dword [0x4a4ea0]
push 0xc4
push dword [0x4a4ea4]
mov ebx, dword [0x4a4f98]
add ebx, 0x1091
push ebx
push dword [0x4a4fa8]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a4e44], eax
mov ebx, dword [0x4a4f98]
add ebx, 0x3f00
push ebx
mov eax, dword [0x4a4ea4]
call fcn.00415650
mov dword [0x4a4e44], eax
push dword [0x4a4ea0]
push 4
push dword [0x4a4ea4]
mov ebx, dword [0x4a4f98]
add ebx, 0x111a
push ebx
push dword [0x4a4fa8]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a4e44], eax
mov ebx, dword [0x4a4f98]
add ebx, 0x3f04
push ebx
mov eax, dword [0x4a4ea4]
call fcn.00415650
mov dword [0x4a4e44], eax
push dword [0x4a4ea0]
push 4
push dword [0x4a4ea4]
mov ebx, dword [0x4a4f98]
add ebx, 0x1137
push ebx
push dword [0x4a4fa8]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a4e44], eax
push 0xe8
mov ebx, dword [0x4a4ea4]
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
inc ebx
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
add ebx, 2
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
add ebx, 3
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
add ebx, 4
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
add ebx, 5
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push dword [0x4a4ea0]
push 6
push dword [0x4a4ea4]
mov ebx, dword [0x4a4f50]
add ebx, 0x8379fa
push ebx
push dword [0x4a4fa8]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a4e44], eax
mov ebx, dword [0x4a4f98]
add ebx, 0x1111
mov edi, dword [0x4a4f50]
add edi, 0x8379fa
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x4a4ea4]
call fcn.00415650
mov dword [0x4a4e44], eax
push dword [0x4a4ea0]
push 4
push dword [0x4a4ea4]
mov ebx, dword [0x4a4f50]
add ebx, 0x8379fb
push ebx
push dword [0x4a4fa8]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a4e44], eax
mov dword [0x4a4fbc], 0
mov eax, 0xff
cmp eax, dword [0x4a4fbc]
jl 0x4056d9
push dword [0x4a4fbc]
call sub.USER32.DLL_GetAsyncKeyState
inc dword [0x4a4fbc]
jno 0x4056b9
call sub.KERNEL32.dll_IsDebuggerPresent
and eax, eax
je 0x4056e8
push 0x55009553
ret
push 0x32
call fcn.0040f0a7
mov dword [0x4a4fc0], eax
mov ebx, dword [0x4a4fc0]
cmp ebx, 0x19
jne 0x4057a3
mov ebx, dword [0x4a4ed8]
cmp ebx, dword [0x4a4ee0]
jne 0x40572a
mov ebx, dword [0x4a4ed8]
and ebx, ebx
je 0x40572a
mov ebx, dword [0x4a4ee0]
and ebx, ebx
je 0x40572a
jmp 0x405731
mov eax, 1
jmp 0x405733
xor eax, eax
and eax, eax
je 0x4057a3
push 0xff
call fcn.0040f0a7
mov dword [0x4a4f9c], eax
push 0x190
call fcn.0040f0a7
mov dword [0x4a4fa0], eax
push dword [0x4a4f9c]
mov eax, dword [0x4a4ea4]
call fcn.004155c0
mov dword [0x4a4e44], eax
push dword [0x4a4ea0]
push 1
push dword [0x4a4ea4]
mov ebx, dword [0x4a4f98]
add ebx, dword [0x4a4fa0]
add ebx, 0x1091
push ebx
push dword [0x4a4fa8]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a4e44], eax
call fcn.004088e6
mov dword [0x4a4fc4], 1
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a55a0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5598]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5590]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5588]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a2ba
mov dword [0x4a4fc8], eax
mov ebx, dword [0x4a4fc8]
and ebx, ebx
je 0x405a23
push dword [0x4a4fcc]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x40594b
mov dword [0x4a4fcc], 1
push 0xe8
mov ebx, dword [0x4a4ea4]
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
inc ebx
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
add ebx, 2
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
add ebx, 3
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
add ebx, 4
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push dword [0x4a4ea0]
push 5
push dword [0x4a4ea4]
mov ebx, dword [0x4a4f50]
add ebx, 0x83783c
push ebx
push dword [0x4a4fa8]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a4e44], eax
mov ebx, dword [0x4a4f98]
add ebx, 0x1091
mov edi, dword [0x4a4f50]
add edi, 0x83783c
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x4a4ea4]
call fcn.00415650
mov dword [0x4a4e44], eax
push dword [0x4a4ea0]
push 4
push dword [0x4a4ea4]
mov ebx, dword [0x4a4f50]
add ebx, 0x83783d
push ebx
push dword [0x4a4fa8]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a4e44], eax
push 0
call fcn.0040e014
push 0x12c
call fcn.0040efe9
jmp 0x405a22
mov ebx, 1
cmp ebx, dword [esp]
jne 0x405a22
mov dword [0x4a4fcc], 0
push 5
mov ebx, dword [0x4a4ea4]
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
inc ebx
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xa
mov ebx, dword [0x4a4ea4]
add ebx, 2
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 3
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0
mov ebx, dword [0x4a4ea4]
add ebx, 4
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push dword [0x4a4ea0]
push 5
push dword [0x4a4ea4]
mov ebx, dword [0x4a4f50]
add ebx, 0x83783c
push ebx
push dword [0x4a4fa8]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a4e44], eax
push 1
call fcn.0040e014
push 0x12c
call fcn.0040efe9
pop eax
mov dword [0x4a4fc4], 2
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a55a0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5598]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5590]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5588]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a2ba
mov dword [0x4a4fd0], eax
mov ebx, dword [0x4a4fd0]
and ebx, ebx
je 0x405d0b
push dword [0x4a4fd4]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x405bff
mov dword [0x4a4fd4], 1
push 0xe8
mov ebx, dword [0x4a4ea4]
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
inc ebx
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
add ebx, 2
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
add ebx, 3
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
add ebx, 4
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
add ebx, 5
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
add ebx, 6
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push dword [0x4a4ea0]
push 7
push dword [0x4a4ea4]
mov ebx, dword [0x4a4f50]
add ebx, 0x1fa894
push ebx
push dword [0x4a4fa8]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a4e44], eax
mov ebx, dword [0x4a4f98]
add ebx, 0x10b1
mov edi, dword [0x4a4f50]
add edi, 0x1fa894
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x4a4ea4]
call fcn.00415650
mov dword [0x4a4e44], eax
push dword [0x4a4ea0]
push 4
push dword [0x4a4ea4]
mov ebx, dword [0x4a4f50]
add ebx, 0x1fa895
push ebx
push dword [0x4a4fa8]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a4e44], eax
push 0
call fcn.0040e014
push 0x12c
call fcn.0040efe9
jmp 0x405d0a
mov ebx, 1
cmp ebx, dword [esp]
jne 0x405d0a
mov dword [0x4a4fd4], 0
push 0xf
mov ebx, dword [0x4a4ea4]
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xb6
mov ebx, dword [0x4a4ea4]
inc ebx
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x57
mov ebx, dword [0x4a4ea4]
add ebx, 2
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x1b
mov ebx, dword [0x4a4ea4]
add ebx, 3
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x89
mov ebx, dword [0x4a4ea4]
add ebx, 4
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x56
mov ebx, dword [0x4a4ea4]
add ebx, 5
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x20
mov ebx, dword [0x4a4ea4]
add ebx, 6
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push dword [0x4a4ea0]
push 7
push dword [0x4a4ea4]
mov ebx, dword [0x4a4f50]
add ebx, 0x1fa894
push ebx
push dword [0x4a4fa8]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a4e44], eax
push 1
call fcn.0040e014
push 0x12c
call fcn.0040efe9
pop eax
mov dword [0x4a4fc4], 3
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a55a0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5598]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5590]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5588]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a2ba
mov dword [0x4a4fd8], eax
mov ebx, dword [0x4a4fd8]
and ebx, ebx
je 0x405ff3
push dword [0x4a4fdc]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x405ee7
mov dword [0x4a4fdc], 1
push 0xe8
mov ebx, dword [0x4a4ea4]
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
inc ebx
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
add ebx, 2
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
add ebx, 3
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
add ebx, 4
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
add ebx, 5
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
add ebx, 6
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push dword [0x4a4ea0]
push 7
push dword [0x4a4ea4]
mov ebx, dword [0x4a4f50]
add ebx, 0x20e141
push ebx
push dword [0x4a4fa8]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a4e44], eax
mov ebx, dword [0x4a4f98]
add ebx, 0x10c1
mov edi, dword [0x4a4f50]
add edi, 0x20e141
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x4a4ea4]
call fcn.00415650
mov dword [0x4a4e44], eax
push dword [0x4a4ea0]
push 4
push dword [0x4a4ea4]
mov ebx, dword [0x4a4f50]
add ebx, 0x20e142
push ebx
push dword [0x4a4fa8]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a4e44], eax
push 0
call fcn.0040e014
push 0x12c
call fcn.0040efe9
jmp 0x405ff2
mov ebx, 1
cmp ebx, dword [esp]
jne 0x405ff2
mov dword [0x4a4fdc], 0
push 0x8b
mov ebx, dword [0x4a4ea4]
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x4c
mov ebx, dword [0x4a4ea4]
inc ebx
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xca
mov ebx, dword [0x4a4ea4]
add ebx, 2
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 4
mov ebx, dword [0x4a4ea4]
add ebx, 3
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x89
mov ebx, dword [0x4a4ea4]
add ebx, 4
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x48
mov ebx, dword [0x4a4ea4]
add ebx, 5
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 4
mov ebx, dword [0x4a4ea4]
add ebx, 6
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push dword [0x4a4ea0]
push 7
push dword [0x4a4ea4]
mov ebx, dword [0x4a4f50]
add ebx, 0x20e141
push ebx
push dword [0x4a4fa8]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a4e44], eax
push 1
call fcn.0040e014
push 0x12c
call fcn.0040efe9
pop eax
mov dword [0x4a4fc4], 4
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a55a0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5598]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5590]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5588]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a2ba
mov dword [0x4a4fe0], eax
mov ebx, dword [0x4a4fe0]
and ebx, ebx
je 0x406273
push dword [0x4a4fe4]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x40619b
mov dword [0x4a4fe4], 1
push 0xe8
mov ebx, dword [0x4a4ea4]
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
inc ebx
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
add ebx, 2
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
add ebx, 3
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x90
mov ebx, dword [0x4a4ea4]
add ebx, 4
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push dword [0x4a4ea0]
push 5
push dword [0x4a4ea4]
mov ebx, dword [0x4a4f50]
add ebx, 0x20a117
push ebx
push dword [0x4a4fa8]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a4e44], eax
mov ebx, dword [0x4a4f98]
add ebx, 0x10f1
mov edi, dword [0x4a4f50]
add edi, 0x20a117
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x4a4ea4]
call fcn.00415650
mov dword [0x4a4e44], eax
push dword [0x4a4ea0]
push 4
push dword [0x4a4ea4]
mov ebx, dword [0x4a4f50]
add ebx, 0x20a118
push ebx
push dword [0x4a4fa8]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a4e44], eax
push 0
call fcn.0040e014
push 0x12c
call fcn.0040efe9
jmp 0x406272
mov ebx, 1
cmp ebx, dword [esp]
jne 0x406272
mov dword [0x4a4fe4], 0
push 0xf3
mov ebx, dword [0x4a4ea4]
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0xf
mov ebx, dword [0x4a4ea4]
inc ebx
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x10
mov ebx, dword [0x4a4ea4]
add ebx, 2
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x49
mov ebx, dword [0x4a4ea4]
add ebx, 3
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push 0x18
mov ebx, dword [0x4a4ea4]
add ebx, 4
mov eax, ebx
call fcn.004155c0
mov dword [0x4a4e44], eax
push dword [0x4a4ea0]
push 5
push dword [0x4a4ea4]
mov ebx, dword [0x4a4f50]
add ebx, 0x20a117
push ebx
push dword [0x4a4fa8]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a4e44], eax
push 1
call fcn.0040e014
push 0x12c
call fcn.0040efe9
pop eax
mov dword [0x4a4fc4], 5
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a55a0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5598]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5590]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5588]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a2ba
mov dword [0x4a4fe8], eax
mov ebx, dword [0x4a4fe8]
and ebx, ebx
je 0x4063bb
push dword [0x4a4fec]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x406350
mov dword [0x4a4fec], 1
push 1
mov eax, dword [0x4a4ea4]
call fcn.00415650
mov dword [0x4a4e44], eax
push dword [0x4a4ea0]
push 4
push dword [0x4a4ea4]
mov ebx, dword [0x4a4f98]
add ebx, 0x3f00
push ebx
push dword [0x4a4fa8]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a4e44], eax
push 0
call fcn.0040e014
push 0x12c
call fcn.0040efe9
jmp 0x4063ba
mov ebx, 1
cmp ebx, dword [esp]
jne 0x4063ba
mov dword [0x4a4fec], 0
push 0
mov eax, dword [0x4a4ea4]
call fcn.00415650
mov dword [0x4a4e44], eax
push dword [0x4a4ea0]
push 4
push dword [0x4a4ea4]
mov ebx, dword [0x4a4f98]
add ebx, 0x3f00
push ebx
push dword [0x4a4fa8]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a4e44], eax
push 1
call fcn.0040e014
push 0x12c
call fcn.0040efe9
pop eax
mov dword [0x4a4fc4], 6
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a55a0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5598]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5590]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5588]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a2ba
mov dword [0x4a4ff0], eax
mov ebx, dword [0x4a4ff0]
and ebx, ebx
je 0x406503
push dword [0x4a4ff4]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x406498
mov dword [0x4a4ff4], 1
push 1
mov eax, dword [0x4a4ea4]
call fcn.00415650
mov dword [0x4a4e44], eax
push dword [0x4a4ea0]
push 4
push dword [0x4a4ea4]
mov ebx, dword [0x4a4f98]
add ebx, 0x3f04
push ebx
push dword [0x4a4fa8]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a4e44], eax
push 0
call fcn.0040e014
push 0x12c
call fcn.0040efe9
jmp 0x406502
mov ebx, 1
cmp ebx, dword [esp]
jne 0x406502
mov dword [0x4a4ff4], 0
push 0
mov eax, dword [0x4a4ea4]
call fcn.00415650
mov dword [0x4a4e44], eax
push dword [0x4a4ea0]
push 4
push dword [0x4a4ea4]
mov ebx, dword [0x4a4f98]
add ebx, 0x3f04
push ebx
push dword [0x4a4fa8]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a4e44], eax
push 1
call fcn.0040e014
push 0x12c
call fcn.0040efe9
pop eax
mov dword [0x4a4fc4], 7
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a55a0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5598]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5590]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5588]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a2ba
mov dword [0x4a4ff8], eax
mov ebx, dword [0x4a4ff8]
and ebx, ebx
je 0x40656d
mov dword [0x4a4fc4], 8
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a55a0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5598]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5590]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5588]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a2ba
mov dword [0x4a4ffc], eax
mov ebx, dword [0x4a4ffc]
and ebx, ebx
je 0x4065d7
mov dword [0x4a4fc4], 9
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a55a0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5598]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5590]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5588]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a2ba
mov dword [0x4a5000], eax
mov ebx, dword [0x4a5000]
and ebx, ebx
je 0x406641
mov dword [0x4a4fc4], 0xa
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a55a0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5598]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5590]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5588]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a2ba
mov dword [0x4a5004], eax
mov ebx, dword [0x4a5004]
and ebx, ebx
je 0x4066ab
mov dword [0x4a4fc4], 0xb
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a55a0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5598]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5590]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5588]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a2ba
mov dword [0x4a5008], eax
mov ebx, dword [0x4a5008]
and ebx, ebx
je 0x406715
mov dword [0x4a4fc4], 0xc
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a55a0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5598]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5590]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5588]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a2ba
mov dword [0x4a500c], eax
mov ebx, dword [0x4a500c]
and ebx, ebx
je 0x40677f
mov dword [0x4a4fc4], 0xd
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a55a0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5598]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5590]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5588]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a2ba
mov dword [0x4a5010], eax
mov ebx, dword [0x4a5010]
and ebx, ebx
je 0x4067e9
mov dword [0x4a4fc4], 0xe
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a55a0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5598]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5590]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5588]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a2ba
mov dword [0x4a5014], eax
mov ebx, dword [0x4a5014]
and ebx, ebx
je 0x406853
mov dword [0x4a4fc4], 0xf
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a55a0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5598]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5590]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5588]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a2ba
mov dword [0x4a5018], eax
mov ebx, dword [0x4a5018]
and ebx, ebx
je 0x4068bd
mov dword [0x4a4fc4], 0x10
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a55a0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5598]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5590]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5588]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a2ba
mov dword [0x4a501c], eax
mov ebx, dword [0x4a501c]
and ebx, ebx
je 0x406927
mov dword [0x4a4fc4], 0x11
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a55a0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5598]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5590]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5588]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a2ba
mov dword [0x4a5020], eax
mov ebx, dword [0x4a5020]
and ebx, ebx
je 0x406991
mov dword [0x4a4fc4], 0x12
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a55a0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5598]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5590]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5588]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a2ba
mov dword [0x4a5024], eax
mov ebx, dword [0x4a5024]
and ebx, ebx
je 0x4069fb
mov dword [0x4a4fc4], 0x13
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a55a0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5598]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5590]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5588]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a2ba
mov dword [0x4a5028], eax
mov ebx, dword [0x4a5028]
and ebx, ebx
je 0x406a65
mov dword [0x4a4fc4], 0x14
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a55a0]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5598]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5590]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4fc4]
mov ebp, dword [0x4a5588]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a2ba
mov dword [0x4a502c], eax
mov ebx, dword [0x4a502c]
and ebx, ebx
je 0x406acf
mov dword [0x4a4fc8], 0
mov dword [0x4a4fd0], 0
mov dword [0x4a4fd8], 0
mov dword [0x4a4fe0], 0
mov dword [0x4a4fe8], 0
mov dword [0x4a4ff0], 0
mov dword [0x4a4ff8], 0
mov dword [0x4a4ffc], 0
mov dword [0x4a5000], 0
mov dword [0x4a5004], 0
mov dword [0x4a5008], 0
mov dword [0x4a500c], 0
mov dword [0x4a5010], 0
mov dword [0x4a5014], 0
mov dword [0x4a5018], 0
mov dword [0x4a501c], 0
mov dword [0x4a5020], 0
mov dword [0x4a5024], 0
mov dword [0x4a5028], 0
mov dword [0x4a502c], 0
mov ebx, dword [0x4a4f00]
cmp ebx, 0x45a2a5
je 0x406bb4
push 0
push 3
call fcn.00410a83
call fcn.00407c25
push 1
call fcn.0040efe9
mov ebx, dword [0x4a4ed8]
cmp ebx, dword [0x4a4ee0]
jne 0x406be7
mov ebx, dword [0x4a4ed8]
and ebx, ebx
je 0x406be7
mov ebx, dword [0x4a4ee0]
and ebx, ebx
je 0x406be7
jmp 0x406bee
mov eax, 1
jmp 0x406bf0
xor eax, eax
and eax, eax
je 0x406c4c
push 0xa
call fcn.0040f0a7
mov ebx, eax
add ebx, 0xa
mov dword [0x4a4f9c], ebx
push 0x28
call fcn.0040f0a7
mov ebx, eax
add ebx, 0x28
mov dword [0x4a4fa0], ebx
mov ebx, dword [0x4a4f50]
add ebx, dword [0x4a4f9c]
mov dword [0x4a4f50], ebx
mov ebx, dword [0x4a4f98]
add ebx, dword [0x4a4fa0]
mov dword [0x4a4f98], ebx
call fcn.004088e6
jmp 0x404014
jmp 0x4056af
push 0
call 0x409ad7
call fcn.00416100
push dword [0x4a4e34]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.0040e11b
call fcn.0040f259
call fcn.0040f849
call fcn.00410e90
call fcn.004129c4
call fcn.00412bfb
call fcn.00412e00
call fcn.00413db7
call fcn.00414a4e
call fcn.00415580
ret