Function at 0x407d90
Capabilities:
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45e753
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x948
mov eax, dword [0x46d040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x634], 0
push 0x30
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
je 0x407e14
movzx ecx, byte [0x506734]
test ecx, ecx
jne 0x407dfe
mov dword [ebp - 0x434], 1
jmp 0x407e08
mov dword [ebp - 0x434], 0
mov dl, byte [ebp - 0x434]
mov byte [0x506734], dl
push 0x2d
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
je 0x407e4f
movzx ecx, byte [0x506734]
test ecx, ecx
jne 0x407e39
mov dword [ebp - 0x438], 1
jmp 0x407e43
mov dword [ebp - 0x438], 0
mov dl, byte [ebp - 0x438]
mov byte [0x506734], dl
mov dl, 1
mov ecx, 0x209
call fcn.004272a0
movzx eax, al
test eax, eax
je 0x407e8f
movzx ecx, byte [0x506734]
test ecx, ecx
jne 0x407e79
mov dword [ebp - 0x43c], 1
jmp 0x407e83
mov dword [ebp - 0x43c], 0
mov dl, byte [ebp - 0x43c]
mov byte [0x506734], dl
call fcn.00441380
call fcn.00441cf0
call fcn.0041d6d0
mov al, byte [0x506734]
mov byte [ebp - 0x3fa], al
call fcn.0041c2c0
mov cl, byte [ebp - 0x3fa]
mov byte [eax + 0x58], cl
mov byte [ebp - 0x412], 0
push 0x460c64
push 0x460c88
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x440], 0
je 0x407edf
jmp 0x407f0b
push str.Error:_hwnd_AC_is_FALSE
mov edx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
push edx
call fcn.00412760
add esp, 8
mov dword [ebp - 0x55c], eax
push 0x412bb0
mov ecx, dword [ebp - 0x55c]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_______cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t_____]
nop
mov dword [ebp - 0x3e0], 0
lea eax, [ebp - 0x3e0]
push eax
mov ecx, dword [ebp - 0x440]
push ecx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov dword [ebp - 0x3d4], 0
mov edx, dword [ebp - 0x3e0]
push edx
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x3d4], eax
mov eax, dword [str.DCGAME.EXE]
mov dword [ebp - 0x4c], eax
mov ecx, dword [0x460ca8]
mov dword [ebp - 0x48], ecx
mov edx, dword [0x460cac]
mov dword [ebp - 0x44], edx
mov eax, dword [0x460cb0]
mov dword [ebp - 0x40], eax
mov ecx, dword [0x460cb4]
mov dword [ebp - 0x3c], ecx
mov dx, word [0x460cb8]
mov word [ebp - 0x38], dx
mov edx, dword [ebp - 0x3e0]
lea ecx, [ebp - 0x4c]
call fcn.004023b0
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x448], 0x1bb
movzx eax, byte [0x506734]
test eax, eax
je 0x40ade2
movzx ecx, byte [0x508bd1]
test ecx, ecx
jne 0x40817a
mov dword [ebp - 4], 0
lea edx, [ebp - 0xd0]
mov dword [ebp - 0x560], edx
mov ecx, dword [ebp - 0x560]
call fcn.00414fa0
nop
lea ecx, [ebp - 0xd0]
call fcn.00410eb0
nop
mov dword [ebp - 4], 1
lea eax, [ebp - 0xd0]
push eax
push str.key.txt
call fcn.00407080
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x4080c2
push 0x100
lea ecx, [ebp - 0xd0]
call fcn.0040ee10
push eax
push 0x508c58
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
add esp, 0xc
mov edx, 1
imul eax, edx, 0xff
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 0x100
jae 0x40804b
jmp 0x408051
call fcn.0045cbde
nop
mov ecx, dword [ebp - 0x444]
mov byte [ecx + 0x508c58], 0
push 0x508c58
lea ecx, [ebp - 0x850]
call fcn.0040f150
mov byte [ebp - 4], 2
lea edx, [ebp - 0x850]
push edx
call fcn.00406bc0
add esp, 4
mov byte [ebp - 0x3fb], al
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x850]
call fcn.004105a0
nop
movzx eax, byte [ebp - 0x3fb]
test eax, eax
je 0x4080ab
mov byte [0x508bd1], 1
jmp 0x4080c0
push 0x10
push str.Error
push str.Login_Failed__Invalid_Key.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
nop
jmp 0x4080d7
push 0x10
push str.Error
push str.Failed_to_load_your_key_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
nop
push ecx
movss xmm0, dword [0x46720c]
movss dword [esp], xmm0
movss xmm3, dword [0x4671d4]
movss xmm2, dword [0x4671d4]
movss xmm1, dword [0x4671d4]
lea ecx, [ebp - 0x940]
call fcn.004021f0
mov edx, eax
mov ecx, 2
call fcn.0041a500
nop
mov ecx, dword [ebp - 0x448]
push ecx
xor edx, edx
mov ecx, str.Login
call fcn.00423e70
add esp, 4
push str.Welcome
call fcn.00444730
add esp, 4
push 0
push 0
push 0x4000
push 0x100
mov edx, 0x508c58
mov ecx, 0x460db8
call fcn.0044bab0
add esp, 0x10
call fcn.00426560
mov ecx, 1
call fcn.0041a550
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd0]
call fcn.004105a0
nop
movzx edx, byte [0x508bd1]
test edx, edx
je 0x40a2a7
call fcn.00402e80
call fcn.00407890
nop
movss xmm2, dword [0x467408]
movss xmm1, dword [0x46741c]
lea ecx, [ebp - 0x820]
call fcn.004021e0
xor edx, edx
mov ecx, eax
call fcn.00426de0
nop
mov eax, dword [ebp - 0x448]
push eax
xor edx, edx
mov ecx, str.DC_UNIVERSE_OXY_MultiHack
call fcn.00423e70
add esp, 4
lea ecx, [ebp - 0x3dc]
call fcn.00426b70
call fcn.00426e20
mov dword [ebp - 0x400], eax
call fcn.00426e20
mov dword [ebp - 0x3e4], eax
lea ecx, [ebp - 0x3e4]
mov dword [ebp - 0x3f8], ecx
mov edx, dword [0x508adc]
mov ecx, dword [ebp - 0x400]
call fcn.0045c610
nop
push 0xb4
push 9
push 9
push 9
lea ecx, [ebp - 0x930]
call fcn.00402220
mov ecx, eax
call fcn.00402280
mov dword [ebp - 0x564], eax
movss xmm2, dword [0x467408]
addss xmm2, dword [ebp - 0x3d8]
movss xmm1, dword [0x46741c]
addss xmm1, dword [ebp - 0x3dc]
lea ecx, [ebp - 0x838]
call fcn.004021e0
mov dword [ebp - 0x568], eax
xorps xmm2, xmm2
addss xmm2, dword [ebp - 0x3d8]
xorps xmm1, xmm1
addss xmm1, dword [ebp - 0x3dc]
lea ecx, [ebp - 0x898]
call fcn.004021e0
mov dword [ebp - 0x56c], eax
push 0
push ecx
movss xmm0, dword [0x4672e8]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x564]
push edx
mov eax, dword [ebp - 0x568]
push eax
mov ecx, dword [ebp - 0x56c]
push ecx
mov ecx, dword [ebp - 0x400]
call fcn.0043a620
nop
push 0xb4
push 0x19
push 0x19
push 0x19
lea ecx, [ebp - 0x8c0]
call fcn.00402220
mov ecx, eax
call fcn.00402280
mov dword [ebp - 0x5f4], eax
movss xmm2, dword [0x467364]
addss xmm2, dword [ebp - 0x3d8]
movss xmm1, dword [0x467418]
addss xmm1, dword [ebp - 0x3dc]
lea ecx, [ebp - 0x808]
call fcn.004021e0
mov dword [ebp - 0x5f8], eax
movss xmm2, dword [0x467360]
addss xmm2, dword [ebp - 0x3d8]
movss xmm1, dword [0x4673a0]
addss xmm1, dword [ebp - 0x3dc]
lea ecx, [ebp - 0x810]
call fcn.004021e0
mov dword [ebp - 0x5fc], eax
push 0
push ecx
movss xmm0, dword [0x4672e8]
movss dword [esp], xmm0
mov edx, dword [ebp - 0x5f4]
push edx
mov eax, dword [ebp - 0x5f8]
push eax
mov ecx, dword [ebp - 0x5fc]
push ecx
mov ecx, dword [ebp - 0x400]
call fcn.0043a620
nop
movss xmm2, dword [0x46730c]
movss xmm1, dword [0x467410]
lea ecx, [ebp - 0x818]
call fcn.004021e0
mov ecx, eax
call fcn.00427e40
nop
push 0
movss xmm2, dword [0x467320]
movss xmm1, dword [0x467320]
lea ecx, [ebp - 0x828]
call fcn.004021e0
mov edx, eax
mov ecx, 0x460dd8
call fcn.004460b0
add esp, 4
movss xmm1, dword [0x46745c]
movss xmm0, dword [0x467414]
call fcn.00427d90
nop
push 1
movss xmm2, dword [0x467320]
movss xmm1, dword [0x467320]
lea ecx, [ebp - 0x888]
call fcn.004021e0
mov edx, eax
mov ecx, 0x460570
call fcn.004460b0
add esp, 4
movss xmm1, dword [0x467240]
mov ecx, 3
call fcn.0041a250
mov dword [ebp - 0x600], eax
movss xmm2, dword [0x467408]
addss xmm2, dword [ebp - 0x3d8]
movss xmm1, dword [0x4673a4]
addss xmm1, dword [ebp - 0x3dc]
lea ecx, [ebp - 0x890]
call fcn.004021e0
mov dword [ebp - 0x604], eax
xorps xmm2, xmm2
addss xmm2, dword [ebp - 0x3d8]
xorps xmm1, xmm1
addss xmm1, dword [ebp - 0x3dc]
lea ecx, [ebp - 0x678]
call fcn.004021e0
mov dword [ebp - 0x608], eax
push 0x50
push ecx
movss xmm0, dword [0x4672e8]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x600]
push ecx
mov edx, dword [ebp - 0x604]
push edx
mov eax, dword [ebp - 0x608]
push eax
mov ecx, dword [ebp - 0x400]
call fcn.0043a620
nop
push ecx
movss xmm0, dword [0x46722c]
movss dword [esp], xmm0
movss xmm3, dword [0x467240]
movss xmm2, dword [0x467240]
movss xmm1, dword [0x467240]
lea ecx, [ebp - 0x8d0]
call fcn.004021f0
mov ecx, eax
call fcn.00402280
mov dword [ebp - 0x60c], eax
movss xmm2, dword [0x4672f8]
addss xmm2, dword [ebp - 0x3d8]
movss xmm1, dword [0x46732c]
addss xmm1, dword [ebp - 0x3dc]
lea ecx, [ebp - 0x680]
call fcn.004021e0
mov dword [ebp - 0x610], eax
mov ecx, dword [0x508b20]
mov dword [ebp - 0x614], ecx
push 0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push 0
push str.MultiHack_1.5
mov edx, dword [ebp - 0x60c]
push edx
mov eax, dword [ebp - 0x610]
push eax
mov ecx, dword [ebp - 0x614]
push ecx
movss xmm2, dword [0x467320]
mov ecx, dword [ebp - 0x400]
call fcn.0043ab50
nop
mov edx, dword [ebp - 0x3f8]
mov eax, dword [edx]
mov dword [ebp - 0x45c], eax
push ecx
movss xmm0, dword [0x46720c]
movss dword [esp], xmm0
movss xmm3, dword [0x467200]
movss xmm2, dword [0x467200]
movss xmm1, dword [0x467200]
lea ecx, [ebp - 0x8e0]
call fcn.004021f0
mov ecx, eax
call fcn.00402280
mov dword [ebp - 0x450], eax
movss xmm2, dword [0x46734c]
addss xmm2, dword [ebp - 0x3d8]
movss xmm1, dword [0x467398]
addss xmm1, dword [ebp - 0x3dc]
lea ecx, [ebp - 0x688]
call fcn.004021e0
mov dword [ebp - 0x454], eax
movss xmm2, dword [0x467348]
addss xmm2, dword [ebp - 0x3d8]
movss xmm1, dword [0x467330]
addss xmm1, dword [ebp - 0x3dc]
lea ecx, [ebp - 0x690]
call fcn.004021e0
mov dword [ebp - 0x458], eax
push 0
push ecx
movss xmm0, dword [0x4672e8]
movss dword [esp], xmm0
mov ecx, dword [ebp - 0x450]
push ecx
mov edx, dword [ebp - 0x454]
push edx
mov eax, dword [ebp - 0x458]
push eax
mov ecx, dword [ebp - 0x45c]
call fcn.0043a620
nop
mov ecx, dword [ebp - 0x3f8]
mov edx, dword [ecx]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x468], eax
mov ecx, dword [ebp - 0x3f8]
mov edx, dword [ecx]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x46c], eax
movss xmm2, dword [0x467308]
addss xmm2, dword [ebp - 0x3d8]
movss xmm1, dword [0x4673a8]
addss xmm1, dword [ebp - 0x3dc]
lea ecx, [ebp - 0x698]
call fcn.004021e0
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x578], ecx
mov dword [ebp - 0x574], edx
mov eax, dword [ebp - 0x578]
mov ecx, dword [ebp - 0x574]
mov dword [ebp - 0x580], eax
mov dword [ebp - 0x57c], ecx
mov edx, dword [ebp - 0x580]
mov eax, dword [ebp - 0x57c]
mov dword [ebp - 0x588], edx
mov dword [ebp - 0x584], eax
mov ecx, dword [ebp - 0x588]
mov edx, dword [ebp - 0x584]
mov dword [ebp - 0x5a8], ecx
mov dword [ebp - 0x5a4], edx
xorps xmm2, xmm2
addss xmm2, dword [ebp - 0x3d8]
xorps xmm1, xmm1
addss xmm1, dword [ebp - 0x3dc]
lea ecx, [ebp - 0x6a0]
call fcn.004021e0
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x590], ecx
mov dword [ebp - 0x58c], edx
mov eax, dword [ebp - 0x590]
mov ecx, dword [ebp - 0x58c]
mov dword [ebp - 0x598], eax
mov dword [ebp - 0x594], ecx
mov edx, dword [ebp - 0x598]
mov eax, dword [ebp - 0x594]
mov dword [ebp - 0x5a0], edx
mov dword [ebp - 0x59c], eax
mov ecx, dword [ebp - 0x5a0]
mov edx, dword [ebp - 0x59c]
mov dword [ebp - 0x5b0], ecx
mov dword [ebp - 0x5ac], edx
push ecx
movss xmm0, dword [0x467240]
movss dword [esp], xmm0
movss xmm3, dword [0x467200]
movss xmm2, dword [0x467200]
movss xmm1, dword [0x467200]
lea ecx, [ebp - 0x8f0]
call fcn.004021f0
mov ecx, eax
call fcn.00402280
mov dword [ebp - 0x460], eax
push ecx
movss xmm0, dword [0x4671fc]
movss dword [esp], xmm0
movss xmm3, dword [0x4671e4]
movss xmm2, dword [0x4671e4]
movss xmm1, dword [0x4671e4]
lea ecx, [ebp - 0x900]
call fcn.004021f0
mov ecx, eax
call fcn.00402280
mov dword [ebp - 0x464], eax
mov eax, dword [ebp - 0x3f8]
mov ecx, dword [eax]
mov dword [ebp - 0x470], ecx
mov edx, dword [ebp - 0x5a4]
push edx
mov eax, dword [ebp - 0x5a8]
push eax
mov ecx, dword [ebp - 0x5ac]
push ecx
mov edx, dword [ebp - 0x5b0]
push edx
mov eax, dword [ebp - 0x460]
push eax
mov ecx, dword [ebp - 0x464]
push ecx
mov edx, dword [ebp - 0x468]
push edx
mov edx, dword [ebp - 0x46c]
mov ecx, dword [ebp - 0x470]
call fcn.0043b6a0
add esp, 0x1c
movss xmm0, dword [0x467368]
call fcn.00427ed0
nop
movss xmm2, dword [0x467334]
movss xmm1, dword [0x4673a4]
lea ecx, [ebp - 0x6a8]
call fcn.004021e0
push eax
mov edx, str.LegitBot
mov ecx, 0x460df8
call fcn.00445890
add esp, 4
movzx eax, al
test eax, eax
je 0x408883
cmp dword [0x508b08], 0
je 0x408883
mov dword [0x508b08], 0
mov byte [0x508b0c], 1
movss xmm2, dword [0x467334]
movss xmm1, dword [0x4673a4]
lea ecx, [ebp - 0x6b0]
call fcn.004021e0
push eax
mov edx, str.RageBot
mov ecx, 0x460e04
call fcn.00445890
add esp, 4
movzx ecx, al
test ecx, ecx
je 0x4088d2
cmp dword [0x508b08], 1
je 0x4088d2
mov dword [0x508b08], 1
mov byte [0x508b0c], 1
movss xmm2, dword [0x467334]
movss xmm1, dword [0x4673a4]
lea ecx, [ebp - 0x6b8]
call fcn.004021e0
push eax
mov edx, str.Movements
mov ecx, 0x460e14
call fcn.00445890
add esp, 4
movzx edx, al
test edx, edx
je 0x408921
cmp dword [0x508b08], 2
je 0x408921
mov dword [0x508b08], 2
mov byte [0x508b0c], 1
movss xmm2, dword [0x467334]
movss xmm1, dword [0x4673a4]
lea ecx, [ebp - 0x6c0]
call fcn.004021e0
push eax
mov edx, str.Misc
mov ecx, 0x460e20
call fcn.00445890
add esp, 4
movzx eax, al
test eax, eax
je 0x408970
cmp dword [0x508b08], 3
je 0x408970
mov dword [0x508b08], 3
mov byte [0x508b0c], 1
movss xmm2, dword [0x467334]
movss xmm1, dword [0x4673a4]
lea ecx, [ebp - 0x6c8]
call fcn.004021e0
push eax
mov edx, str.Teleport
mov ecx, 0x460e30
call fcn.00445890
add esp, 4
movzx ecx, al
test ecx, ecx
je 0x4089bf
cmp dword [0x508b08], 4
je 0x4089bf
mov dword [0x508b08], 4
mov byte [0x508b0c], 1
movss xmm2, dword [0x467334]
movss xmm1, dword [0x4673a4]
lea ecx, [ebp - 0x6d0]
call fcn.004021e0
push eax
mov edx, str.Extra
mov ecx, 0x460e30
call fcn.00445890
add esp, 4
movzx edx, al
test edx, edx
je 0x408a0e
cmp dword [0x508b08], 5
je 0x408a0e
mov dword [0x508b08], 5
mov byte [0x508b0c], 1
movzx eax, byte [0x508b0c]
test eax, eax
je 0x408a8e
movss xmm0, dword [0x4672e8]
comiss xmm0, dword [0x508b28]
jb 0x408a79
call fcn.0041c2c0
movss xmm0, dword [0x467240]
divss xmm0, dword [eax + 0x94]
mulss xmm0, dword [0x467354]
movss dword [ebp - 0x478], xmm0
movss xmm0, dword [0x508b28]
movss dword [ebp - 0x474], xmm0
movss xmm0, dword [ebp - 0x474]
addss xmm0, dword [ebp - 0x478]
movss dword [0x508b28], xmm0
jmp 0x408a8c
mov byte [0x508b0c], 0
mov ecx, dword [0x508b08]
mov dword [0x508a7c], ecx
jmp 0x408aec
movss xmm0, dword [0x508b28]
comiss xmm0, dword [0x467198]
jb 0x408aec
call fcn.0041c2c0
movss xmm0, dword [0x467240]
divss xmm0, dword [eax + 0x94]
mulss xmm0, dword [0x467354]
movss dword [ebp - 0x480], xmm0
movss xmm0, dword [0x508b28]
movss dword [ebp - 0x47c], xmm0
movss xmm0, dword [ebp - 0x47c]
subss xmm0, dword [ebp - 0x480]
movss dword [0x508b28], xmm0
mov edx, dword [ebp - 0x3f8]
mov eax, dword [edx]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x490], ecx
mov edx, dword [ebp - 0x3f8]
mov eax, dword [edx]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x48c], ecx
movss xmm2, dword [0x467400]
addss xmm2, dword [ebp - 0x3d8]
movss xmm1, dword [0x4673a8]
addss xmm1, dword [ebp - 0x3dc]
lea ecx, [ebp - 0x7c8]
call fcn.004021e0
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x5b8], edx
mov dword [ebp - 0x5b4], eax
mov ecx, dword [ebp - 0x5b8]
mov edx, dword [ebp - 0x5b4]
mov dword [ebp - 0x5c0], ecx
mov dword [ebp - 0x5bc], edx
mov eax, dword [ebp - 0x5c0]
mov ecx, dword [ebp - 0x5bc]
mov dword [ebp - 0x5c8], eax
mov dword [ebp - 0x5c4], ecx
mov edx, dword [ebp - 0x5c8]
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x5e8], edx
mov dword [ebp - 0x5e4], eax
movss xmm2, dword [0x4673f8]
addss xmm2, dword [ebp - 0x3d8]
movss xmm1, dword [0x467370]
addss xmm1, dword [ebp - 0x3dc]
lea ecx, [ebp - 0x6d8]
call fcn.004021e0
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x5d0], ecx
mov dword [ebp - 0x5cc], edx
mov eax, dword [ebp - 0x5d0]
mov ecx, dword [ebp - 0x5cc]
mov dword [ebp - 0x5d8], eax
mov dword [ebp - 0x5d4], ecx
mov edx, dword [ebp - 0x5d8]
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0x5e0], edx
mov dword [ebp - 0x5dc], eax
mov ecx, dword [ebp - 0x5e0]
mov edx, dword [ebp - 0x5dc]
mov dword [ebp - 0x5f0], ecx
mov dword [ebp - 0x5ec], edx
push ecx
movss xmm0, dword [0x467240]
movss dword [esp], xmm0
movss xmm3, dword [0x46722c]
movss xmm2, dword [0x46722c]
movss xmm1, dword [0x46722c]
lea ecx, [ebp - 0x910]
call fcn.004021f0
mov ecx, eax
call fcn.00402280
mov dword [ebp - 0x484], eax
push ecx
movss xmm0, dword [0x4671fc]
movss dword [esp], xmm0
movss xmm3, dword [0x4671ec]
movss xmm2, dword [0x4671ec]
movss xmm1, dword [0x4671ec]
lea ecx, [ebp - 0x920]
call fcn.004021f0
mov ecx, eax
call fcn.00402280
mov dword [ebp - 0x488], eax
mov eax, dword [ebp - 0x3f8]
mov ecx, dword [eax]
mov dword [ebp - 0x494], ecx
mov edx, dword [ebp - 0x5e4]
push edx
mov eax, dword [ebp - 0x5e8]
push eax
mov ecx, dword [ebp - 0x5ec]
push ecx
mov edx, dword [ebp - 0x5f0]
push edx
mov eax, dword [ebp - 0x484]
push eax
mov ecx, dword [ebp - 0x488]
push ecx
mov edx, dword [ebp - 0x48c]
push edx
mov edx, dword [ebp - 0x490]
mov ecx, dword [ebp - 0x494]
call fcn.0043b6a0
add esp, 0x1c
movss xmm2, dword [0x46736c]
subss xmm2, dword [0x508b28]
movss xmm1, dword [0x4673ac]
lea ecx, [ebp - 0x6e0]
call fcn.004021e0
mov ecx, eax
call fcn.00427e40
nop
mov eax, dword [0x508a7c]
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 5
ja case.default.0x408d2e
mov ecx, dword [ebp - 0x420]
jmp dword [ecx*4 + 0x40b0f4]
push 0
push 1
movss xmm2, dword [0x4673c0]
movss xmm1, dword [0x4673e8]
lea ecx, [ebp - 0x6e8]
call fcn.004021e0
mov edx, eax
mov ecx, str.Attack
call fcn.00421270
add esp, 8
mov edx, 0x508b6a
mov ecx, str.No_Delay
call fcn.00446f30
mov edx, 0x508b03
mov ecx, str.Left_Attack
call fcn.00446f30
mov edx, 0x508b1c
mov ecx, str.Right_Attack
call fcn.00446f30
push 0
push 0x460e6c
push 0x64
push 1
mov edx, 0x496f30
mov ecx, str.Left_Speed
call fcn.0044af40
add esp, 0x10
push 0
push 0x460e6c
push 0x64
push 1
mov edx, 0x496f0c
mov ecx, str.Right_Speed
call fcn.0044af40
add esp, 0x10
cmp dword [0x496f30], 1
jne 0x408de2
push str.Use_At_Own_Risk_
call fcn.00444730
add esp, 4
jmp 0x408e28
cmp dword [0x496f30], 0x31
jge 0x408dfa
push str.Almost_Legit
call fcn.00444730
add esp, 4
jmp 0x408e28
cmp dword [0x496f30], 0x64
jge 0x408e12
push str.Kinda_Legit
call fcn.00444730
add esp, 4
jmp 0x408e28
cmp dword [0x496f30], 0x64
jne 0x408e28
push str.Legit
call fcn.00444730
add esp, 4
call fcn.00421370
nop
movss xmm2, dword [0x46736c]
subss xmm2, dword [0x508b28]
movss xmm1, dword [0x4673fc]
lea ecx, [ebp - 0x6f0]
call fcn.004021e0
mov ecx, eax
call fcn.00427e40
nop
push 0
push 1
movss xmm2, dword [0x4673b0]
movss xmm1, dword [0x4673e8]
lea ecx, [ebp - 0x6f8]
call fcn.004021e0
mov edx, eax
mov ecx, str.Extra
call fcn.00421270
add esp, 8
mov edx, 0x508b0e
mov ecx, str.Better_Right_Click_Attack_Speed
call fcn.00446f30
push str.More_Extra_:
call fcn.00444730
add esp, 4
push 0x10120
mov edx, 0x496ee4
mov ecx, str.Widget_Color
call fcn.004517c0
add esp, 4
call fcn.00421370
nop
movss xmm2, dword [0x4673ec]
subss xmm2, dword [0x508b28]
movss xmm1, dword [0x4673ac]
lea ecx, [ebp - 0x700]
call fcn.004021e0
mov ecx, eax
call fcn.00427e40
nop
push 0
push 1
movss xmm2, dword [0x4673cc]
movss xmm1, dword [0x4673e8]
lea ecx, [ebp - 0x708]
call fcn.004021e0
mov edx, eax
mov ecx, str.Attack_Mode
call fcn.00421270
add esp, 8
push 5
push 2
push 0x5082c4
mov edx, 0x508c54
mov ecx, str.Mode
call fcn.004491c0
add esp, 0xc
call fcn.00421370
nop
movss xmm2, dword [0x4673e4]
subss xmm2, dword [0x508b28]
movss xmm1, dword [0x4673fc]
lea ecx, [ebp - 0x710]
call fcn.004021e0
mov ecx, eax
call fcn.00427e40
nop
push 0
push 1
movss xmm2, dword [0x4673e0]
movss xmm1, dword [0x4673e8]
lea ecx, [ebp - 0x718]
call fcn.004021e0
mov edx, eax
mov ecx, str.Keybinds
call fcn.00421270
add esp, 8
push 0xffffffffffffffff
push 6
push 0x496f40
mov edx, 0x508be0
mov ecx, str.Left_Attack_Key
call fcn.004491c0
add esp, 0xc
movzx edx, al
test edx, edx
je 0x408fbe
mov byte [0x508b03], 0
jmp 0x408fc5
mov byte [0x508b03], 1
push 0xffffffffffffffff
push 6
push 0x496f10
mov edx, 0x508be4
mov ecx, str.Right_Attack_Key
call fcn.004491c0
add esp, 0xc
movzx eax, al
test eax, eax
je 0x408ff0
mov byte [0x508b1c], 0
jmp 0x408ff7
mov byte [0x508b1c], 1
call fcn.00421370
nop
jmp case.default.0x408d2e
push 0
push 1
movss xmm2, dword [0x4673c0]
movss xmm1, dword [0x4673e8]
lea ecx, [ebp - 0x720]
call fcn.004021e0
mov edx, eax
mov ecx, str.Rage_Attack
call fcn.00421270
add esp, 8
mov edx, 0x508b6b
mov ecx, str.No_Delay
call fcn.00446f30
mov edx, 0x508b03
mov ecx, str.Left_Attack
call fcn.00446f30
mov edx, 0x508b1c
mov ecx, str.Right_Attack
call fcn.00446f30
push 0
push str._.3f
movss xmm3, dword [0x467374]
movss xmm2, dword [0x4671d4]
mov edx, 0x496f28
mov ecx, str.Left_Speed
call fcn.0044aef0
add esp, 8
push 0
push str._.3f
movss xmm3, dword [0x467374]
movss xmm2, dword [0x4671d4]
mov edx, 0x496f34
mov ecx, str.Right_Speed
call fcn.0044aef0
add esp, 8
call fcn.00421370
nop
movss xmm2, dword [0x46736c]
subss xmm2, dword [0x508b28]
movss xmm1, dword [0x4673fc]
lea ecx, [ebp - 0x728]
call fcn.004021e0
mov ecx, eax
call fcn.00427e40
nop
push 0
push 1
movss xmm2, dword [0x4673b0]
movss xmm1, dword [0x4673e8]
lea ecx, [ebp - 0x730]
call fcn.004021e0
mov edx, eax
mov ecx, str.Extra
call fcn.00421270
add esp, 8
mov edx, 0x508b0e
mov ecx, str.Better_Right_Click_Attack_Speed
call fcn.00446f30
push str.More_Extra_:
call fcn.00444730
add esp, 4
push 0x10120
mov edx, 0x496ee4
mov ecx, str.Widget_Color
call fcn.004517c0
add esp, 4
call fcn.00421370
nop
movss xmm2, dword [0x4673ec]
subss xmm2, dword [0x508b28]
movss xmm1, dword [0x4673ac]
lea ecx, [ebp - 0x738]
call fcn.004021e0
mov ecx, eax
call fcn.00427e40
nop
push 0
push 1
movss xmm2, dword [0x4673cc]
movss xmm1, dword [0x4673e8]
lea ecx, [ebp - 0x740]
call fcn.004021e0
mov edx, eax
mov ecx, str.Attack_Mode
call fcn.00421270
add esp, 8
push 5
push 2
push 0x5082d8
mov edx, 0x508d60
mov ecx, str.Mode
call fcn.004491c0
add esp, 0xc
call fcn.00421370
nop
movss xmm2, dword [0x4673e4]
subss xmm2, dword [0x508b28]
movss xmm1, dword [0x4673fc]
lea ecx, [ebp - 0x748]
call fcn.004021e0
mov ecx, eax
call fcn.00427e40
nop
push 0
push 1
movss xmm2, dword [0x4673e0]
movss xmm1, dword [0x4673e8]
lea ecx, [ebp - 0x750]
call fcn.004021e0
mov edx, eax
mov ecx, str.Keybinds
call fcn.00421270
add esp, 8
push 0xffffffffffffffff
push 6
push 0x496f40
mov edx, 0x508be0
mov ecx, str.Left_Attack_Key
call fcn.004491c0
add esp, 0xc
movzx ecx, al
test ecx, ecx
je 0x409245
mov byte [0x508b03], 0
jmp 0x40924c
mov byte [0x508b03], 1
push 0xffffffffffffffff
push 6
push 0x496f10
mov edx, 0x508be4
mov ecx, str.Right_Attack_Key
call fcn.004491c0
add esp, 0xc
movzx edx, al
test edx, edx
je 0x409277
mov byte [0x508b1c], 0
jmp 0x40927e
mov byte [0x508b1c], 1
call fcn.00421370
nop
jmp case.default.0x408d2e
push 0
push 1
movss xmm2, dword [0x4673f0]
movss xmm1, dword [0x4673e8]
lea ecx, [ebp - 0x758]
call fcn.004021e0
mov edx, eax
mov ecx, str.Movements
call fcn.00421270
add esp, 8
push ecx
movss xmm0, dword [0x467240]
movss dword [esp], xmm0
movss xmm3, dword [0x4671f4]
movss xmm2, dword [0x467230]
movss xmm1, dword [0x467228]
lea ecx, [ebp - 0xb0]
call fcn.004021f0
lea edx, [ebp - 0xb0]
xor ecx, ecx
call fcn.0041a500
mov edx, 0x508b27
mov ecx, str.Speed_Force__No_SlowDown
call fcn.00446f30
mov ecx, 1
call fcn.0041a550
push 0
push str._.1f
movss xmm3, dword [0x467374]
xorps xmm2, xmm2
mov edx, 0x508250
mov ecx, str.Force_Value
call fcn.0044aef0
add esp, 8
lea edx, [ebp - 0xb0]
xor ecx, ecx
call fcn.0041a500
mov edx, 0x508b0d
mov ecx, str.Acrobat
call fcn.00446f30
mov ecx, 1
call fcn.0041a550
push 0
push str._.1f
movss xmm3, dword [0x467374]
xorps xmm2, xmm2
mov edx, 0x496f38
mov ecx, str.Acrobat_Value
call fcn.0044aef0
add esp, 8
lea edx, [ebp - 0xb0]
xor ecx, ecx
call fcn.0041a500
mov edx, 0x508a68
mov ecx, str.Edit_Height
call fcn.00446f30
mov ecx, 1
call fcn.0041a550
push 0
push str._.3f
movss xmm3, dword [0x467420]
movss xmm2, dword [0x4671d4]
mov edx, 0x46d0bc
mov ecx, str.Height_Value
call fcn.0044aef0
add esp, 8
lea edx, [ebp - 0xb0]
xor ecx, ecx
call fcn.0041a500
mov edx, 0x508b15
mov ecx, str.Edit_Fly_Up____Down
call fcn.00446f30
mov ecx, 1
call fcn.0041a550
push 0
push str._.3f
movss xmm3, dword [0x467374]
movss xmm2, dword [0x467470]
mov edx, 0x50824c
mov ecx, str.Fly_Value
call fcn.0044aef0
add esp, 8
lea edx, [ebp - 0xb0]
xor ecx, ecx
call fcn.0041a500
mov edx, 0x508b17
mov ecx, str.Flight_Speed
call fcn.00446f30
mov ecx, 1
call fcn.0041a550
push 0
push str._.3f
movss xmm3, dword [0x467374]
movss xmm2, dword [0x467470]
mov edx, 0x496edc
mov ecx, str.Flight_Value
call fcn.0044aef0
add esp, 8
lea edx, [ebp - 0xb0]
xor ecx, ecx
call fcn.0041a500
mov edx, 0x508b16
mov ecx, str.Edit_Jump
call fcn.00446f30
mov ecx, 1
call fcn.0041a550
push 0
push str._.3f
movss xmm3, dword [0x467374]
movss xmm2, dword [0x4671d4]
mov edx, 0x496f2c
mov ecx, str.Jump_Amount
call fcn.0044aef0
add esp, 8
call fcn.00421370
nop
push 0
push 1
movss xmm2, dword [0x4673f0]
movss xmm1, dword [0x4673e8]
lea ecx, [ebp - 0x760]
call fcn.004021e0
mov edx, eax
mov ecx, str.Misc
call fcn.00421270
add esp, 8
mov edx, 0x508a6b
mov ecx, str.Auto_Soder_Cola
call fcn.00446f30
mov edx, 0x508af8
mov ecx, str.Bunny_Hop
call fcn.00446f30
mov edx, 0x508b68
mov ecx, str.Infinite_Jump
call fcn.00446f30
mov edx, 0x508a80
mov ecx, str.No_Clip
call fcn.00446f30
mov edx, 0x508a79
mov ecx, str.Always_Boom
call fcn.00446f30
mov edx, 0x508aea
mov ecx, str.Go_Mutant
call fcn.00446f30
mov edx, 0x508ae9
mov ecx, str.Remove_Effects
call fcn.00446f30
nop
call fcn.00421370
nop
jmp case.default.0x408d2e
push 0
push 1
movss xmm2, dword [0x4673f4]
movss xmm1, dword [0x4673e8]
lea ecx, [ebp - 0x768]
call fcn.004021e0
mov edx, eax
mov ecx, str.Teleport
call fcn.00421270
add esp, 8
call fcn.00406160
nop
xorps xmm2, xmm2
xorps xmm1, xmm1
lea ecx, [ebp - 0x770]
call fcn.004021e0
mov edx, eax
mov ecx, str.Save_Current_Position
call fcn.00445310
movzx eax, al
test eax, eax
je 0x4095c0
mov byte [0x508bd0], 1
movzx ecx, byte [0x508bd0]
test ecx, ecx
je 0x4095dc
mov ecx, 0x508bac
call fcn.00406480
mov byte [0x508bd0], 0
lea edx, [ebp - 0xe8]
push edx
mov ecx, 0x508bac
call fcn.00406680
mov dword [ebp - 4], 3
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xe8]
push ecx
call fcn.00405c60
add esp, 8
movzx edx, al
test edx, edx
je 0x409892
mov eax, 4
imul ecx, eax, 0
movss xmm0, dword [ebp + ecx - 0x58]
ucomiss xmm0, dword [0x467198]
lahf
test ah, 0x44
jp 0x409751
mov edx, 4
shl edx, 0
movss xmm0, dword [ebp + edx - 0x58]
ucomiss xmm0, dword [0x467198]
lahf
test ah, 0x44
jp 0x409751
mov eax, 4
shl eax, 1
movss xmm0, dword [ebp + eax - 0x58]
ucomiss xmm0, dword [0x467198]
lahf
test ah, 0x44
jp 0x409751
mov ecx, dword [0x508adc]
mov dword [ebp - 0x498], ecx
push 0x46068c
lea ecx, [ebp - 0x868]
call fcn.0040f150
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x498]
push edx
lea eax, [ebp - 0x868]
push eax
lea ecx, [ebp - 0x654]
call fcn.00406290
mov dword [ebp - 0x49c], eax
mov ecx, dword [ebp - 0x49c]
mov dword [ebp - 0x4a0], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x4a0]
push edx
mov ecx, 0x508bac
call fcn.0040b3b0
mov byte [ebp - 4], 4
cmp dword [ebp - 0x648], 0
je 0x4096e9
mov eax, dword [ebp - 0x648]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea ecx, [ebp - 0x654]
call fcn.0040fd00
nop
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x868]
call fcn.004105a0
nop
mov ecx, 4
imul edx, ecx, 0
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp + edx - 0x58]
mov dword [ecx + 0x508bd4], edx
mov eax, 4
shl eax, 0
mov ecx, 4
shl ecx, 0
mov edx, dword [ebp + eax - 0x58]
mov dword [ecx + 0x508bd4], edx
mov eax, 4
shl eax, 1
mov ecx, 4
shl ecx, 1
mov edx, dword [ebp + eax - 0x58]
mov dword [ecx + 0x508bd4], edx
mov eax, 4
imul ecx, eax, 0
movss xmm0, dword [ebp + ecx - 0x58]
ucomiss xmm0, dword [0x467240]
lahf
test ah, 0x44
jp 0x409890
mov edx, 4
shl edx, 0
movss xmm0, dword [ebp + edx - 0x58]
ucomiss xmm0, dword [0x467240]
lahf
test ah, 0x44
jp 0x409890
mov eax, 4
shl eax, 1
movss xmm0, dword [ebp + eax - 0x58]
ucomiss xmm0, dword [0x467240]
lahf
test ah, 0x44
jp 0x409890
mov ecx, dword [0x508adc]
mov dword [ebp - 0x4a4], ecx
push 0x46068c
lea ecx, [ebp - 0x880]
call fcn.0040f150
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x4a4]
push edx
lea eax, [ebp - 0x880]
push eax
lea ecx, [ebp - 0x670]
call fcn.00406290
mov dword [ebp - 0x4a8], eax
mov ecx, dword [ebp - 0x4a8]
mov dword [ebp - 0x4ac], ecx
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x4ac]
push edx
mov ecx, 0x508bac
call fcn.0040b3b0
mov byte [ebp - 4], 6
cmp dword [ebp - 0x664], 0
je 0x409828
mov eax, dword [ebp - 0x664]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea ecx, [ebp - 0x670]
call fcn.0040fd00
nop
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x880]
call fcn.004105a0
nop
mov ecx, 4
imul edx, ecx, 0
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp + edx - 0x58]
mov dword [ecx + 0x508bd4], edx
mov eax, 4
shl eax, 0
mov ecx, 4
shl ecx, 0
mov edx, dword [ebp + eax - 0x58]
mov dword [ecx + 0x508bd4], edx
mov eax, 4
shl eax, 1
mov ecx, 4
shl ecx, 1
mov edx, dword [ebp + eax - 0x58]
mov dword [ecx + 0x508bd4], edx
jmp 0x40989f
push str.Error_parsing_current_position.
call fcn.00444730
add esp, 4
mov dword [ebp - 0x4b0], 0x508bac
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x44c], eax
mov dword [ebp - 0x408], 0
jmp 0x4098d0
mov ecx, dword [ebp - 0x408]
add ecx, 1
mov dword [ebp - 0x408], ecx
mov edx, dword [ebp - 0x44c]
mov dword [ebp - 0x424], edx
mov eax, dword [ebp - 0x424]
mov ecx, dword [ebp - 0x424]
mov eax, dword [eax + 4]
sub eax, dword [ecx]
cdq
mov ecx, 0x24
idiv ecx
mov dword [ebp - 0x4b4], eax
mov edx, dword [ebp - 0x4b4]
cmp dword [ebp - 0x408], edx
jae 0x4099df
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x4b8], eax
imul ecx, dword [ebp - 0x408], 0x24
mov edx, dword [ebp - 0x4b8]
add ecx, dword [edx]
mov dword [ebp - 0x4bc], ecx
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x428], eax
xorps xmm2, xmm2
xorps xmm1, xmm1
lea ecx, [ebp - 0x778]
call fcn.004021e0
mov dword [ebp - 0x4c8], eax
mov ecx, dword [ebp - 0x428]
push ecx
push str.Teleport_to
lea edx, [ebp - 0x8b0]
push edx
call fcn.00412450
add esp, 0xc
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x4c4], eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x4c4]
call fcn.0040ee10
mov dword [ebp - 0x4cc], eax
mov edx, dword [ebp - 0x4c8]
mov ecx, dword [ebp - 0x4cc]
call fcn.00445310
mov byte [ebp - 0x3f9], al
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x8b0]
call fcn.004105a0
nop
movzx ecx, byte [ebp - 0x3f9]
test ecx, ecx
je 0x4099da
mov edx, dword [ebp - 0x428]
add edx, 0x18
push edx
mov ecx, 0x508bac
call fcn.004065c0
nop
jmp 0x4098c1
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0xe8]
push ecx
call fcn.00405c60
add esp, 8
movzx edx, al
test edx, edx
je 0x409a47
mov eax, 4
imul ecx, eax, 0
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ebp + ecx - 0x64]
mov dword [eax + 0x508bd4], ecx
mov edx, 4
shl edx, 0
mov eax, 4
shl eax, 0
mov ecx, dword [ebp + edx - 0x64]
mov dword [eax + 0x508bd4], ecx
mov edx, 4
shl edx, 1
mov eax, 4
shl eax, 1
mov ecx, dword [ebp + edx - 0x64]
mov dword [eax + 0x508bd4], ecx
jmp 0x409a54
push str.Error_parsing_current_position.
call fcn.00444730
add esp, 4
movss xmm0, dword [0x4672e8]
call fcn.00427e90
movss xmm0, dword [0x46738c]
call fcn.00427f10
push 0
push str._.2f
mov edx, 4
imul edx, edx, 0
add edx, 0x508bd4
movss xmm3, dword [0x467240]
movss xmm2, dword [0x4671c4]
mov ecx, str.XVB
call fcn.0044ba50
add esp, 8
movss xmm0, dword [0x4672e8]
call fcn.00427e90
movss xmm0, dword [0x46738c]
call fcn.00427f10
push 0
push str._.2f
mov edx, 4
shl edx, 0
add edx, 0x508bd4
movss xmm3, dword [0x467240]
movss xmm2, dword [0x4671c4]
mov ecx, 0x4610c0
call fcn.0044ba50
add esp, 8
movss xmm0, dword [0x4672e8]
call fcn.00427e90
movss xmm0, dword [0x46738c]
call fcn.00427f10
push 0
push str._.2f
mov edx, 4
shl edx, 1
add edx, 0x508bd4
movss xmm3, dword [0x467240]
movss xmm2, dword [0x4671c4]
mov ecx, 0x4610c4
call fcn.0044ba50
add esp, 8
lea ecx, [ebp - 0xe8]
call fcn.0040ee10
push eax
push str.Position:__s
call fcn.00444730
add esp, 8
mov edx, 0x508a69
mov ecx, str.Move_Straight
call fcn.00446f30
push 0
push str._.3f
movss xmm3, dword [0x4672f8]
movss xmm2, dword [0x467240]
mov edx, 0x46d0b8
mov ecx, str.Straight
call fcn.0044aef0
add esp, 8
mov edx, 0x508aeb
mov ecx, str.Move_Left
call fcn.00446f30
push 0
push str._.3f
movss xmm3, dword [0x4672f8]
movss xmm2, dword [0x467240]
mov edx, 0x496ef4
mov ecx, str.Left
call fcn.0044aef0
add esp, 8
mov edx, 0x508a6a
mov ecx, str.Move_Right
call fcn.00446f30
push 0
push str._.3f
movss xmm3, dword [0x4672f8]
movss xmm2, dword [0x467240]
mov edx, 0x496ee0
mov ecx, str.Right
call fcn.0044aef0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe8]
call fcn.004105a0
nop
call fcn.00421370
nop
movss xmm2, dword [0x46736c]
subss xmm2, dword [0x508b28]
movss xmm1, dword [0x4673fc]
lea ecx, [ebp - 0x780]
call fcn.004021e0
mov ecx, eax
call fcn.00427e40
nop
push 0
push 1
movss xmm2, dword [0x4673f4]
movss xmm1, dword [0x4673e8]
lea ecx, [ebp - 0x788]
call fcn.004021e0
mov edx, eax
mov ecx, str.Teleport_Locations
call fcn.00421270
add esp, 8
xor edx, edx
mov ecx, str.Hero_Clubs_Teleportation
call fcn.00444720
nop
xorps xmm2, xmm2
xorps xmm1, xmm1
lea ecx, [ebp - 0x790]
call fcn.004021e0
mov edx, eax
mov ecx, str.Teleport_To_Midtown_MPD_Station
call fcn.00445310
movzx eax, al
test eax, eax
je 0x409cab
push 0x5082a4
mov ecx, 0x508bac
call fcn.004065c0
nop
xorps xmm2, xmm2
xorps xmm1, xmm1
lea ecx, [ebp - 0x798]
call fcn.004021e0
mov edx, eax
mov ecx, str.Teleport_To_Chinatown_MPD_Station
call fcn.00445310
movzx ecx, al
test ecx, ecx
je 0x409cdf
push 0x5082e8
mov ecx, 0x508bac
call fcn.004065c0
nop
xorps xmm2, xmm2
xorps xmm1, xmm1
lea ecx, [ebp - 0x7a0]
call fcn.004021e0
mov edx, eax
mov ecx, str.Teleport_To_Little_Bohemia_MPD_Station
call fcn.00445310
movzx edx, al
test edx, edx
je 0x409d13
push 0x508304
mov ecx, 0x508bac
call fcn.004065c0
nop
xor edx, edx
mov ecx, str.Gotham:
call fcn.00444720
nop
xorps xmm2, xmm2
xorps xmm1, xmm1
lea ecx, [ebp - 0x7a8]
call fcn.004021e0
mov edx, eax
mov ecx, str.Teleport_To_East_End_GCPD_Station
call fcn.00445310
movzx eax, al
test eax, eax
je 0x409d54
push 0x508268
mov ecx, 0x508bac
call fcn.004065c0
nop
xorps xmm2, xmm2
xorps xmm1, xmm1
lea ecx, [ebp - 0x7b0]
call fcn.004021e0
mov edx, eax
mov ecx, str.Teleport_To_Diamond_Dist._GCPD_Station
call fcn.00445310
movzx ecx, al
test ecx, ecx
je 0x409d88
push 0x508280
mov ecx, 0x508bac
call fcn.004065c0
nop
xor edx, edx
mov ecx, str.Villian_Clubs_Teleportation
call fcn.00444720
nop
xorps xmm2, xmm2
xorps xmm1, xmm1
lea ecx, [ebp - 0x7b8]
call fcn.004021e0
mov edx, eax
mov ecx, str.Teleport_To_Chinatown_Nightclub
call fcn.00445310
movzx edx, al
test edx, edx
je 0x409dc9
push 0x508298
mov ecx, 0x508bac
call fcn.004065c0
nop
xorps xmm2, xmm2
xorps xmm1, xmm1
lea ecx, [ebp - 0x7c0]
call fcn.004021e0
mov edx, eax
mov ecx, str.Teleport_To_Little_Bohemia_NightClub
call fcn.00445310
movzx eax, al
test eax, eax
je 0x409dfd
push 0x508310
mov ecx, 0x508bac
call fcn.004065c0
nop
xorps xmm2, xmm2
xorps xmm1, xmm1
lea ecx, [ebp - 0x830]
call fcn.004021e0
mov edx, eax
mov ecx, str.Teleport_To_Midtown_Nightclub
call fcn.00445310
movzx ecx, al
test ecx, ecx
je 0x409e31
push 0x46d0a8
mov ecx, 0x508bac
call fcn.004065c0
nop
xor edx, edx
mov ecx, str.Gotham:
call fcn.00444720
nop
xorps xmm2, xmm2
xorps xmm1, xmm1
lea ecx, [ebp - 0x7d0]
call fcn.004021e0
mov edx, eax
mov ecx, str.Teleport_To_Burnley_Nightclub
call fcn.00445310
movzx edx, al
test edx, edx
je 0x409e72
push 0x50825c
mov ecx, 0x508bac
call fcn.004065c0
nop
xorps xmm2, xmm2
xorps xmm1, xmm1
lea ecx, [ebp - 0x7d8]
call fcn.004021e0
mov edx, eax
mov ecx, str.Teleport_To_North_Burnley_Night_Club
call fcn.00445310
movzx eax, al
test eax, eax
je 0x409ea6
push 0x5082cc
mov ecx, 0x508bac
call fcn.004065c0
nop
xorps xmm2, xmm2
xorps xmm1, xmm1
lea ecx, [ebp - 0x7e0]
call fcn.004021e0
mov edx, eax
mov ecx, str.House_Of_Legends
call fcn.00445310
movzx ecx, al
test ecx, ecx
je 0x409eda
push 0x50828c
mov ecx, 0x508bac
call fcn.004065c0
nop
call fcn.00421370
nop
jmp case.default.0x408d2e
push 0
push 1
movss xmm2, dword [0x4673f4]
movss xmm1, dword [0x4673e8]
lea ecx, [ebp - 0x7e8]
call fcn.004021e0
mov edx, eax
mov ecx, str.Tele_Attack
call fcn.00421270
add esp, 8
xorps xmm2, xmm2
xorps xmm1, xmm1
lea ecx, [ebp - 0x7f0]
call fcn.004021e0
mov edx, eax
mov ecx, str.Start
call fcn.00445310
movzx edx, al
test edx, edx
je 0x40a20e
mov dword [ebp - 0x638], 0x461300
mov dword [ebp - 0x4d0], str.DCGAME.EXE
mov dword [ebp - 0x418], 0
mov dword [ebp - 0x3d0], 0x22c
push 0
push 2
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov dword [ebp - 0x40c], eax
lea eax, [ebp - 0x3d0]
push eax
mov ecx, dword [ebp - 0x40c]
push ecx
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x409fcc
mov edx, dword [ebp - 0x4d0]
push edx
lea eax, [ebp - 0x3ac]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x409fb4
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp - 0x418], ecx
jmp 0x409fcc
lea edx, [ebp - 0x3d0]
push edx
mov eax, dword [ebp - 0x40c]
push eax
call dword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x409f8b
mov ecx, dword [ebp - 0x40c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov edx, dword [ebp - 0x418]
push edx
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x410], eax
push 0xb8
push 0
lea eax, [ebp - 0x1a0]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 1
push 0x40
push 0x24
push str.DCUNIVERSE.dll
lea ecx, [ebp - 0x1a0]
call fcn.0040d6c0
mov dword [ebp - 4], 9
cmp dword [ebp - 0x144], 0
je 0x40a039
mov byte [ebp - 0x3eb], 1
jmp 0x40a040
mov byte [ebp - 0x3eb], 0
mov cl, byte [ebp - 0x3eb]
mov byte [ebp - 0x3ec], cl
mov dl, byte [ebp - 0x3ec]
mov byte [ebp - 0x3ed], dl
movzx eax, byte [ebp - 0x3ed]
test eax, eax
jne 0x40a071
mov ecx, dword [ebp - 0x410]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea edx, [ebp - 0x958]
push edx
lea ecx, [ebp - 0x1a0]
call dword [sym.imp.MSVCP140.dll_public:_class_std::fpos_struct__Mbstatet____thiscall_std::basic_istream_char__struct_std::char_traits_char__::tellg_void_]
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x42c]
mov ecx, dword [ebp - 0x42c]
mov edx, dword [eax]
add edx, dword [ecx + 8]
mov eax, dword [eax + 4]
adc eax, dword [ecx + 0xc]
mov dword [ebp - 0x620], edx
mov dword [ebp - 0x61c], eax
mov ecx, dword [ebp - 0x620]
mov dword [ebp - 0x41c], ecx
mov edx, dword [ebp - 0x41c]
push edx
call fcn.0045cf4f
add esp, 4
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x404], eax
push 0
push 0
push 0
lea ecx, [ebp - 0x1a0]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::seekg_long_long___int64___int_]
mov ecx, dword [ebp - 0x41c]
xor edx, edx
push edx
push ecx
mov eax, dword [ebp - 0x404]
push eax
lea ecx, [ebp - 0x1a0]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::read_char___long_long___int64__]
lea ecx, [ebp - 0x1a0]
call fcn.0040d620
nop
push 0
push 1
push 1
push 1
push 1
push 1
mov ecx, dword [ebp - 0x41c]
push ecx
mov edx, dword [ebp - 0x404]
mov ecx, dword [ebp - 0x410]
call fcn.004026a0
add esp, 0x1c
movzx edx, al
test edx, edx
je 0x40a170
push str.DLL_injected_successfully.
mov eax, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push eax
call fcn.004118c0
add esp, 8
mov dword [ebp - 0x4d8], eax
push 0x411d00
mov ecx, dword [ebp - 0x4d8]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
nop
jmp 0x40a19c
push str.DLL_injection_failed.
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push ecx
call fcn.004118c0
add esp, 8
mov dword [ebp - 0x4dc], eax
push 0x411d00
mov ecx, dword [ebp - 0x4dc]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
nop
mov edx, dword [ebp - 0x404]
mov dword [ebp - 0x430], edx
mov eax, dword [ebp - 0x430]
push eax
call fcn.0045cab6
add esp, 4
cmp dword [ebp - 0x430], 0
jne 0x40a1cc
mov dword [ebp - 0x4e0], 0
jmp 0x40a1e2
mov dword [ebp - 0x404], 0x8123
mov ecx, dword [ebp - 0x404]
mov dword [ebp - 0x4e0], ecx
mov edx, dword [ebp - 0x410]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x130]
call fcn.0040d660
lea ecx, [ebp - 0x130]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
nop
call fcn.00421370
nop
movss xmm2, dword [0x46736c]
subss xmm2, dword [0x508b28]
movss xmm1, dword [0x4673fc]
lea ecx, [ebp - 0x7f8]
call fcn.004021e0
mov ecx, eax
call fcn.00427e40
nop
push 0
push 1
movss xmm2, dword [0x4673f4]
movss xmm1, dword [0x4673e8]
lea ecx, [ebp - 0x800]
call fcn.004021e0
mov edx, eax
mov ecx, 0x461364
call fcn.00421270
add esp, 8
mov edx, 0x508a7b
mov ecx, str.FOV_120
call fcn.00446f30
mov edx, 0x508a7a
mov ecx, str.FOV_85
call fcn.00446f30
mov edx, 0x508b1e
mov ecx, str.FOV_Normal
call fcn.00446f30
nop
call fcn.00421370
nop
call fcn.00426560
nop
call fcn.004201a0
nop
movzx eax, byte [0x508b16]
test eax, eax
je 0x40a2ea
mov byte [ebp - 0x3e5], 1
push ecx
movss xmm0, dword [0x496f2c]
movss dword [esp], xmm0
movzx ecx, byte [ebp - 0x3e5]
push ecx
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x3d4]
push eax
call fcn.00404ae0
add esp, 0x10
jmp 0x40a31a
mov byte [ebp - 0x3e5], 0
push ecx
movss xmm0, dword [0x496f2c]
movss dword [esp], xmm0
movzx ecx, byte [ebp - 0x3e5]
push ecx
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x3d4]
push eax
call fcn.00404ae0
add esp, 0x10
movzx ecx, byte [0x508a7b]
test ecx, ecx
je 0x40a342
push 0
push 0
push 0
push 0x60
call dword [sym.imp.USER32.dll_keybd_event]
push 0
push 2
push 0
push 0x60
call dword [sym.imp.USER32.dll_keybd_event]
nop
movzx edx, byte [0x508a7a]
test edx, edx
je 0x40a36a
push 0
push 0
push 0
push 0x61
call dword [sym.imp.USER32.dll_keybd_event]
push 0
push 2
push 0
push 0x61
call dword [sym.imp.USER32.dll_keybd_event]
nop
movzx eax, byte [0x508b1e]
test eax, eax
je 0x40a392
push 0
push 0
push 0
push 0x62
call dword [sym.imp.USER32.dll_keybd_event]
push 0
push 2
push 0
push 0x62
call dword [sym.imp.USER32.dll_keybd_event]
nop
movzx ecx, byte [0x508b0e]
test ecx, ecx
je 0x40a3f3
mov edx, dword [ebp - 0x68]
add edx, 0x8316ca
mov dword [ebp - 0x4e4], edx
mov byte [ebp - 0x24], 0x90
mov byte [ebp - 0x23], 0x90
mov byte [ebp - 0x22], 0x90
mov byte [ebp - 0x21], 0x90
mov byte [ebp - 0x20], 0x90
push 5
lea eax, [ebp - 0x24]
push eax
mov ecx, dword [ebp - 0x4e4]
push ecx
mov edx, dword [ebp - 0x3d4]
push edx
call fcn.00405790
add esp, 0x10
movzx eax, al
test eax, eax
jne 0x40a3f1
mov ecx, dword [ebp - 0x3d4]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
jmp 0x40a447
mov edx, dword [ebp - 0x68]
add edx, 0x8316ca
mov dword [ebp - 0x4e8], edx
mov byte [ebp - 0x1c], 0xe8
mov byte [ebp - 0x1b], 0x61
mov byte [ebp - 0x1a], 0xfe
mov byte [ebp - 0x19], 0xff
mov byte [ebp - 0x18], 0xff
push 5
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x4e8]
push ecx
mov edx, dword [ebp - 0x3d4]
push edx
call fcn.00405790
add esp, 0x10
movzx eax, al
test eax, eax
jne 0x40a447
mov ecx, dword [ebp - 0x3d4]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
movzx edx, byte [0x508a79]
test edx, edx
je 0x40a4ab
mov eax, dword [ebp - 0x68]
add eax, 0x2cbfdc
mov dword [ebp - 0x4ec], eax
mov byte [ebp - 0x34], 0x90
mov byte [ebp - 0x33], 0x90
mov byte [ebp - 0x32], 0x90
mov byte [ebp - 0x31], 0x90
mov byte [ebp - 0x30], 0x90
mov byte [ebp - 0x2f], 0x90
push 6
lea ecx, [ebp - 0x34]
push ecx
mov edx, dword [ebp - 0x4ec]
push edx
mov eax, dword [ebp - 0x3d4]
push eax
call fcn.00405790
add esp, 0x10
movzx ecx, al
test ecx, ecx
jne 0x40a4a9
mov edx, dword [ebp - 0x3d4]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
jmp 0x40a502
mov eax, dword [ebp - 0x68]
add eax, 0x2cbfdc
mov dword [ebp - 0x4f0], eax
mov byte [ebp - 0x2c], 0xf3
mov byte [ebp - 0x2b], 0xf
mov byte [ebp - 0x2a], 0x10
mov byte [ebp - 0x29], 0x4c
mov byte [ebp - 0x28], 0xa
mov byte [ebp - 0x27], 0xc
push 6
lea ecx, [ebp - 0x2c]
push ecx
mov edx, dword [ebp - 0x4f0]
push edx
mov eax, dword [ebp - 0x3d4]
push eax
call fcn.00405790
add esp, 0x10
movzx ecx, al
test ecx, ecx
jne 0x40a502
mov edx, dword [ebp - 0x3d4]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
movzx eax, byte [0x508aea]
test eax, eax
je 0x40a56e
mov ecx, dword [ebp - 0x68]
add ecx, 0x2cbf3f
mov dword [ebp - 0x4f4], ecx
mov byte [ebp - 0xa0], 0x90
mov byte [ebp - 0x9f], 0x90
mov byte [ebp - 0x9e], 0x90
mov byte [ebp - 0x9d], 0x90
push 4
lea edx, [ebp - 0xa0]
push edx
mov eax, dword [ebp - 0x4f4]
push eax
mov ecx, dword [ebp - 0x3d4]
push ecx
call fcn.00405790
add esp, 0x10
movzx edx, al
test edx, edx
jne 0x40a56c
mov eax, dword [ebp - 0x3d4]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
jmp 0x40a5cd
mov ecx, dword [ebp - 0x68]
add ecx, 0x2cbf3f
mov dword [ebp - 0x4f8], ecx
mov byte [ebp - 0x9c], 0xd9
mov byte [ebp - 0x9b], 0x5c
mov byte [ebp - 0x9a], 0xf
mov byte [ebp - 0x99], 0xc
push 4
lea edx, [ebp - 0x9c]
push edx
mov eax, dword [ebp - 0x4f8]
push eax
mov ecx, dword [ebp - 0x3d4]
push ecx
call fcn.00405790
add esp, 0x10
movzx edx, al
test edx, edx
jne 0x40a5cd
mov eax, dword [ebp - 0x3d4]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
movzx ecx, byte [0x508ae9]
test ecx, ecx
je 0x40a632
mov edx, dword [ebp - 0x68]
add edx, 0x83165a
mov dword [ebp - 0x4fc], edx
mov byte [ebp - 0x88], 0x90
mov byte [ebp - 0x87], 0x90
mov byte [ebp - 0x86], 0x90
push 3
lea eax, [ebp - 0x88]
push eax
mov ecx, dword [ebp - 0x4fc]
push ecx
mov edx, dword [ebp - 0x3d4]
push edx
call fcn.00405790
add esp, 0x10
movzx eax, al
test eax, eax
jne 0x40a630
mov ecx, dword [ebp - 0x3d4]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
jmp 0x40a67e
mov edx, dword [ebp - 0x68]
add edx, 0x83165a
mov dword [ebp - 0x500], edx
mov byte [ebp - 0x80], 0x89
mov byte [ebp - 0x7f], 0x7e
mov byte [ebp - 0x7e], 0x44
push 3
lea eax, [ebp - 0x80]
push eax
mov ecx, dword [ebp - 0x500]
push ecx
mov edx, dword [ebp - 0x3d4]
push edx
call fcn.00405790
add esp, 0x10
movzx eax, al
test eax, eax
jne 0x40a67e
mov ecx, dword [ebp - 0x3d4]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea ecx, [ebp - 0xb8]
call fcn.004025b0
mov dword [ebp - 4], 0xa
movzx edx, byte [0x508b6a]
test edx, edx
je 0x40a708
movzx eax, byte [0x508b6b]
cmp eax, 1
jne 0x40a6ae
mov byte [0x508b6b], 0
mov ecx, dword [ebp - 0x68]
add ecx, 0x831732
mov dword [ebp - 0x504], ecx
mov byte [ebp - 0x84], 0x90
mov byte [ebp - 0x83], 0x90
mov byte [ebp - 0x82], 0x90
push 3
lea edx, [ebp - 0x84]
push edx
mov eax, dword [ebp - 0x504]
push eax
mov ecx, dword [ebp - 0x3d4]
push ecx
call fcn.00405790
add esp, 0x10
movzx edx, al
test edx, edx
jne 0x40a706
mov eax, dword [ebp - 0x3d4]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
jmp 0x40a760
mov ecx, dword [ebp - 0x68]
add ecx, 0x831732
mov dword [ebp - 0x508], ecx
mov byte [ebp - 0x8c], 0x89
mov byte [ebp - 0x8b], 0x46
mov byte [ebp - 0x8a], 0x3c
push 3
lea edx, [ebp - 0x8c]
push edx
mov eax, dword [ebp - 0x508]
push eax
mov ecx, dword [ebp - 0x3d4]
push ecx
call fcn.00405790
add esp, 0x10
movzx edx, al
test edx, edx
jne 0x40a760
mov eax, dword [ebp - 0x3d4]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
movzx ecx, byte [0x508b6b]
test ecx, ecx
je 0x40a7c7
movzx edx, byte [0x508b6a]
cmp edx, 1
jne 0x40a77e
mov byte [0x508b6a], 0
mov eax, dword [ebp - 0x68]
add eax, 0x83170b
mov dword [ebp - 0x50c], eax
mov byte [ebp - 0x78], 0x90
mov byte [ebp - 0x77], 0x90
push 2
lea ecx, [ebp - 0x78]
push ecx
mov edx, dword [ebp - 0x50c]
push edx
mov eax, dword [ebp - 0x3d4]
push eax
call fcn.00405790
add esp, 0x10
movzx ecx, al
test ecx, ecx
jne 0x40a7c5
mov edx, dword [ebp - 0x3d4]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
jmp 0x40a80e
mov eax, dword [ebp - 0x68]
add eax, 0x83170b
mov dword [ebp - 0x510], eax
mov byte [ebp - 0x74], 0x75
mov byte [ebp - 0x73], 0x14
push 2
lea ecx, [ebp - 0x74]
push ecx
mov edx, dword [ebp - 0x510]
push edx
mov eax, dword [ebp - 0x3d4]
push eax
call fcn.00405790
add esp, 0x10
movzx ecx, al
test ecx, ecx
jne 0x40a80e
mov edx, dword [ebp - 0x3d4]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
movzx eax, byte [0x508ae8]
test eax, eax
je 0x40a873
mov ecx, dword [ebp - 0x68]
add ecx, 0x8316fd
mov dword [ebp - 0x514], ecx
mov byte [ebp - 0x90], 0x90
mov byte [ebp - 0x8f], 0x90
mov byte [ebp - 0x8e], 0x90
push 3
lea edx, [ebp - 0x90]
push edx
mov eax, dword [ebp - 0x514]
push eax
mov ecx, dword [ebp - 0x3d4]
push ecx
call fcn.00405790
add esp, 0x10
movzx edx, al
test edx, edx
jne 0x40a871
mov eax, dword [ebp - 0x3d4]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
jmp 0x40a8cb
mov ecx, dword [ebp - 0x68]
add ecx, 0x8316fd
mov dword [ebp - 0x518], ecx
mov byte [ebp - 0x94], 0x83
mov byte [ebp - 0x93], 0xf8
mov byte [ebp - 0x92], 1
push 3
lea edx, [ebp - 0x94]
push edx
mov eax, dword [ebp - 0x518]
push eax
mov ecx, dword [ebp - 0x3d4]
push ecx
call fcn.00405790
add esp, 0x10
movzx edx, al
test edx, edx
jne 0x40a8cb
mov eax, dword [ebp - 0x3d4]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
movzx ecx, byte [0x508b0d]
test ecx, ecx
je 0x40a908
mov byte [ebp - 0x3ea], 1
push ecx
movss xmm0, dword [0x496f38]
movss dword [esp], xmm0
movzx edx, byte [ebp - 0x3ea]
push edx
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x3d4]
push ecx
call fcn.00404f20
add esp, 0x10
jmp 0x40a938
mov byte [ebp - 0x3ea], 0
push ecx
movss xmm0, dword [0x496f38]
movss dword [esp], xmm0
movzx edx, byte [ebp - 0x3ea]
push edx
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x3d4]
push ecx
call fcn.00404f20
add esp, 0x10
mov byte [ebp - 0x411], 0
movzx edx, byte [0x508b68]
test edx, edx
je 0x40aa05
mov ecx, 0x508a78
call fcn.0040e880
movzx eax, al
test eax, eax
jne 0x40aa05
mov byte [ebp - 0x6c], 1
push 0x508a78
call fcn.00413e80
add esp, 4
mov dword [ebp - 0x51c], eax
lea ecx, [ebp - 0x6c]
push ecx
call fcn.00413e90
add esp, 4
mov byte [ebp - 0x3ee], al
mov dl, byte [ebp - 0x3ee]
mov eax, dword [ebp - 0x51c]
xchg byte [eax], dl
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x628], ecx
lea edx, [ebp - 0x3d4]
mov dword [ebp - 0x624], edx
lea eax, [ebp - 0x628]
mov dword [ebp - 0x520], eax
mov ecx, dword [ebp - 0x520]
push ecx
lea ecx, [ebp - 0x630]
call fcn.00416350
nop
lea edx, [ebp - 0x630]
mov dword [ebp - 0x524], edx
mov eax, dword [ebp - 0x524]
mov dword [ebp - 0x528], eax
mov ecx, dword [ebp - 0x528]
push ecx
mov ecx, 0x508ba4
call fcn.004025d0
lea ecx, [ebp - 0x630]
call fcn.004025c0
nop
jmp 0x40aa74
movzx edx, byte [0x508b68]
test edx, edx
jne 0x40aa74
mov ecx, 0x508a78
call fcn.0040e880
movzx eax, al
test eax, eax
je 0x40aa74
mov byte [ebp - 0x70], 0
push 0x508a78
call fcn.00413e80
add esp, 4
mov dword [ebp - 0x52c], eax
lea ecx, [ebp - 0x70]
push ecx
call fcn.00413e90
add esp, 4
mov byte [ebp - 0x3ef], al
mov dl, byte [ebp - 0x3ef]
mov eax, dword [ebp - 0x52c]
xchg byte [eax], dl
mov ecx, 0x508ba4
call fcn.00402610
movzx ecx, al
test ecx, ecx
je 0x40aa74
mov ecx, 0x508ba4
call fcn.00402620
nop
movzx edx, byte [0x508a80]
test edx, edx
je 0x40aac4
mov eax, dword [ebp - 0x68]
add eax, 0x149e62b
mov dword [ebp - 0x530], eax
mov byte [ebp - 0x98], 0x90
mov byte [ebp - 0x97], 0x90
mov byte [ebp - 0x96], 0x90
push 0
push 3
lea ecx, [ebp - 0x98]
push ecx
mov edx, dword [ebp - 0x530]
push edx
mov eax, dword [ebp - 0x3d4]
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
nop
jmp 0x40aafc
mov ecx, dword [ebp - 0x68]
add ecx, 0x149e62b
mov dword [ebp - 0x534], ecx
mov byte [ebp - 0x7c], 0xf
mov byte [ebp - 0x7b], 0x57
mov byte [ebp - 0x7a], 0xf1
push 0
push 3
lea edx, [ebp - 0x7c]
push edx
mov eax, dword [ebp - 0x534]
push eax
mov ecx, dword [ebp - 0x3d4]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
nop
movzx edx, byte [0x508b17]
test edx, edx
je 0x40ab39
mov byte [ebp - 0x3e9], 1
push ecx
movss xmm0, dword [0x496edc]
movss dword [esp], xmm0
movzx eax, byte [ebp - 0x3e9]
push eax
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x3d4]
push edx
call fcn.00405370
add esp, 0x10
jmp 0x40ab69
mov byte [ebp - 0x3e9], 0
push ecx
movss xmm0, dword [0x496edc]
movss dword [esp], xmm0
movzx eax, byte [ebp - 0x3e9]
push eax
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x3d4]
push edx
call fcn.00405370
add esp, 0x10
movzx eax, byte [0x508af8]
test eax, eax
je 0x40aba6
mov byte [ebp - 0x3e8], 1
push ecx
movss xmm0, dword [0x467288]
movss dword [esp], xmm0
movzx ecx, byte [ebp - 0x3e8]
push ecx
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x3d4]
push eax
call fcn.004046c0
add esp, 0x10
jmp 0x40abd6
mov byte [ebp - 0x3e8], 0
push ecx
movss xmm0, dword [0x467288]
movss dword [esp], xmm0
movzx ecx, byte [ebp - 0x3e8]
push ecx
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x3d4]
push eax
call fcn.004046c0
add esp, 0x10
movzx ecx, byte [0x508b15]
test ecx, ecx
je 0x40ac13
mov byte [ebp - 0x3e7], 1
push ecx
movss xmm0, dword [0x50824c]
movss dword [esp], xmm0
movzx edx, byte [ebp - 0x3e7]
push edx
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x3d4]
push ecx
call fcn.00404280
add esp, 0x10
jmp 0x40ac43
mov byte [ebp - 0x3e7], 0
push ecx
movss xmm0, dword [0x50824c]
movss dword [esp], xmm0
movzx edx, byte [ebp - 0x3e7]
push edx
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x3d4]
push ecx
call fcn.00404280
add esp, 0x10
movzx edx, byte [0x508a68]
test edx, edx
je 0x40ac80
mov byte [ebp - 0x3e6], 1
push ecx
movss xmm0, dword [0x46d0bc]
movss dword [esp], xmm0
movzx eax, byte [ebp - 0x3e6]
push eax
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x3d4]
push edx
call fcn.00403a00
add esp, 0x10
jmp 0x40acb0
mov byte [ebp - 0x3e6], 0
push ecx
movss xmm0, dword [0x46d0bc]
movss dword [esp], xmm0
movzx eax, byte [ebp - 0x3e6]
push eax
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x3d4]
push edx
call fcn.00403a00
add esp, 0x10
movzx eax, byte [0x508b27]
movzx ecx, byte [0x508b1f]
cmp eax, ecx
je 0x40ad04
mov dword [ebp - 0x538], 0x400000
push ecx
movss xmm0, dword [0x508250]
movss dword [esp], xmm0
movzx edx, byte [0x508b27]
push edx
mov eax, dword [ebp - 0x538]
push eax
mov ecx, dword [ebp - 0x3d4]
push ecx
call fcn.00403e70
add esp, 0x10
mov dl, byte [0x508b27]
mov byte [0x508b1f], dl
movzx eax, byte [0x508b27]
test eax, eax
je 0x40ad3f
mov dword [ebp - 0x53c], 0x400000
push ecx
movss xmm0, dword [0x508250]
movss dword [esp], xmm0
push 1
mov ecx, dword [ebp - 0x53c]
push ecx
mov edx, dword [ebp - 0x3d4]
push edx
call fcn.00403e70
add esp, 0x10
movzx eax, byte [0x508b03]
test eax, eax
je 0x40ad6a
mov byte [ebp - 0x3f0], 1
mov ecx, dword [0x508be0]
push ecx
movzx edx, byte [ebp - 0x3f0]
push edx
call fcn.004038d0
add esp, 8
jmp 0x40ad87
mov byte [ebp - 0x3f1], 0
mov eax, dword [0x508be0]
push eax
movzx ecx, byte [ebp - 0x3f1]
push ecx
call fcn.004038d0
add esp, 8
movzx edx, byte [0x508b1c]
test edx, edx
je 0x40adb1
mov byte [ebp - 0x3f2], 1
mov eax, dword [0x508be4]
push eax
movzx ecx, byte [ebp - 0x3f2]
push ecx
call fcn.004033a0
add esp, 8
jmp 0x40adcf
mov byte [ebp - 0x3f3], 0
mov edx, dword [0x508be4]
push edx
movzx eax, byte [ebp - 0x3f3]
push eax
call fcn.004033a0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb8]
call fcn.004025c0
nop
movzx ecx, byte [0x508a83]
test ecx, ecx
je 0x40ae00
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x3d4]
push eax
call fcn.00407340
add esp, 8
movzx ecx, byte [0x508afb]
test ecx, ecx
je 0x40ae1e
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x3d4]
push eax
call fcn.004075a0
add esp, 8
movzx ecx, byte [0x506734]
test ecx, ecx
jne 0x40af6b
call fcn.00406160
nop
movzx edx, byte [0x508a69]
test edx, edx
je 0x40ae81
movzx eax, byte [0x508b24]
test eax, eax
je 0x40ae81
mov ecx, 4
imul edx, ecx, 0
movss xmm0, dword [edx + 0x508bd4]
addss xmm0, dword [0x46d0b8]
mov eax, 4
imul ecx, eax, 0
movss dword [ecx + 0x508bd4], xmm0
push 0x508bd4
mov ecx, 0x508bac
call fcn.004065c0
nop
movzx edx, byte [0x508a69]
test edx, edx
je 0x40aecf
movzx eax, byte [0x508b26]
test eax, eax
je 0x40aecf
mov ecx, 4
imul edx, ecx, 0
movss xmm0, dword [edx + 0x508bd4]
subss xmm0, dword [0x46d0b8]
mov eax, 4
imul ecx, eax, 0
movss dword [ecx + 0x508bd4], xmm0
push 0x508bd4
mov ecx, 0x508bac
call fcn.004065c0
nop
movzx edx, byte [0x508aeb]
test edx, edx
je 0x40af1d
movzx eax, byte [0x508b69]
test eax, eax
je 0x40af1d
mov ecx, 4
shl ecx, 0
movss xmm0, dword [ecx + 0x508bd4]
subss xmm0, dword [0x496ef4]
mov edx, 4
shl edx, 0
movss dword [edx + 0x508bd4], xmm0
push 0x508bd4
mov ecx, 0x508bac
call fcn.004065c0
nop
movzx eax, byte [0x508a6a]
test eax, eax
je 0x40af6b
movzx ecx, byte [0x508b02]
test ecx, ecx
je 0x40af6b
mov edx, 4
shl edx, 0
movss xmm0, dword [edx + 0x508bd4]
addss xmm0, dword [0x496ee0]
mov eax, 4
shl eax, 0
movss dword [eax + 0x508bd4], xmm0
push 0x508bd4
mov ecx, 0x508bac
call fcn.004065c0
nop
mov ecx, dword [0x508adc]
mov edx, dword [ecx]
mov eax, dword [edx + 0xe4]
mov dword [ebp - 0x540], eax
push 0
push 7
mov ecx, dword [0x508adc]
push ecx
call dword [ebp - 0x540]
mov edx, dword [0x508adc]
mov eax, dword [edx]
mov ecx, dword [eax + 0xe4]
mov dword [ebp - 0x544], ecx
push 0
push 0x1b
mov edx, dword [0x508adc]
push edx
call dword [ebp - 0x544]
mov eax, dword [0x508adc]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xe4]
mov dword [ebp - 0x548], edx
push 0
push 0xae
mov eax, dword [0x508adc]
push eax
call dword [ebp - 0x548]
mov ecx, dword [0x508adc]
mov edx, dword [ecx]
mov eax, dword [edx + 0xac]
mov dword [ebp - 0x54c], eax
push 0
push ecx
movss xmm0, dword [0x467240]
movss dword [esp], xmm0
push 0
push 1
push 0
push 0
mov ecx, dword [0x508adc]
push ecx
call dword [ebp - 0x54c]
nop
mov edx, dword [0x508adc]
mov eax, dword [edx]
mov ecx, dword [0x508adc]
push ecx
mov edx, dword [eax + 0xa4]
call edx
test eax, eax
jl 0x40b058
call fcn.00420470
call fcn.0041c2d0
mov ecx, eax
call fcn.00440b70
mov eax, dword [0x508adc]
mov ecx, dword [eax]
mov edx, dword [0x508adc]
push edx
mov eax, dword [ecx + 0xa8]
call eax
nop
mov ecx, dword [0x508adc]
mov edx, dword [ecx]
mov eax, dword [edx + 0x44]
mov dword [ebp - 0x550], eax
push 0
push 0
push 0
push 0
mov ecx, dword [0x508adc]
push ecx
call dword [ebp - 0x550]
mov dword [ebp - 0x554], eax
cmp dword [ebp - 0x554], 0x88760868
jne 0x40b0d7
mov edx, dword [0x508adc]
mov eax, dword [edx]
mov ecx, dword [0x508adc]
push ecx
mov edx, dword [eax + 0xc]
call edx
cmp eax, 0x88760869
jne 0x40b0d7
call fcn.00441310
mov eax, dword [0x508adc]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x40]
mov dword [ebp - 0x558], edx
push 0x508a84
mov eax, dword [0x508adc]
push eax
call dword [ebp - 0x558]
call fcn.004412e0
nop
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0045caa8
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret