Function at 0x431610
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46300d
mov eax, dword fs:[0]
push eax
sub esp, 0x130
push ebx
push esi
push edi
mov eax, dword [0x5732dc]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], ecx
mov esi, dword [0x46a8f8]
push 4
push 0x46d6c8
call esi
add esp, 8
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x74]
mov edi, dword [0x46a818]
push eax
lea eax, [ebp - 0xcc]
mov dword [ebp - 4], 0
push eax
call edi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
push ecx
mov ecx, eax
call dword [0x46a820]
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 3
call dword [0x46a830]
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 4
call dword [0x46a91c]
push 5
push 0x46ef10
call esi
add esp, 8
mov dword [ebp - 0x78], eax
lea ecx, [ebp - 0x7c]
call dword [0x46a924]
mov esi, eax
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0xac]
mov byte [ebp - 4], 6
push eax
call edi
push esi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 7
push ecx
mov ecx, eax
call dword [0x46a658]
mov edi, dword [0x46a830]
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 9
call edi
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xa
call dword [0x46a91c]
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0xb
call dword [0x46a91c]
mov esi, dword [ebp + 8]
mov ecx, esi
push str.anticheatCheck
call dword [0x46a688]
test al, al
je 0x431d0a
push 0xe
push str.checkCheckSumm
call dword [0x46a8f8]
add esp, 8
mov dword [ebp + 0xc], eax
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x44]
call dword [0x46a890]
mov edi, dword [0x46a81c]
lea ecx, [ebp - 0x60]
push ecx
mov ecx, eax
call edi
mov esi, dword [0x46a7a4]
mov ecx, eax
push 0
mov byte [ebp - 4], 0xd
call esi
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0xc
mov bl, al
call dword [0x46a830]
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xb
call dword [0x46a91c]
push 0xf
push str.checkModuleList
call dword [0x46a8f8]
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x44]
call dword [0x46a890]
lea ecx, [ebp - 0x60]
push ecx
mov ecx, eax
call edi
push 0
mov ecx, eax
mov byte [ebp - 4], 0xf
call esi
lea ecx, [ebp - 0x60]
mov byte [ebp + 0xf], al
mov byte [ebp - 4], 0xe
call dword [0x46a830]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xb
call dword [0x46a91c]
push 0x10
push str.checkProcessList
call dword [0x46a8f8]
add esp, 8
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x44]
call dword [0x46a890]
lea ecx, [ebp - 0x60]
push ecx
mov ecx, eax
call edi
mov byte [ebp - 4], 0x11
mov ecx, eax
push 0
call esi
lea ecx, [ebp - 0x60]
mov byte [ebp + 0xb], al
mov byte [ebp - 4], 0x10
call dword [0x46a830]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xb
call dword [0x46a91c]
lea ecx, [ebp - 0x50]
call dword [0x46a6f4]
mov esi, dword [ebp - 0x1c]
add esi, 8
mov byte [ebp - 4], 0x12
mov ecx, esi
call fcn.0042fbb0
mov edi, dword [0x46a664]
lea ecx, [ebp - 0x3c]
movzx eax, al
push eax
call edi
push 9
push str.isRunning
mov byte [ebp - 4], 0x13
call dword [0x46a8f8]
add esp, 8
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x50]
call dword [0x46a890]
mov ecx, eax
call dword [0x46a6f8]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x13
call dword [0x46a91c]
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x12
call dword [0x46a830]
mov ecx, esi
call fcn.0042f9a0
lea ecx, [ebp - 0x3c]
mov al, byte [eax]
mov byte [ebp - 0x14], al
push dword [ebp - 0x14]
call edi
push 0x16
push str.isCapturingGameScreens
mov byte [ebp - 4], 0x15
call dword [0x46a8f8]
add esp, 8
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x50]
call dword [0x46a890]
mov ecx, eax
call dword [0x46a6f8]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x15
call dword [0x46a91c]
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x12
call dword [0x46a830]
mov ecx, esi
call fcn.0042f9a0
mov al, byte [eax + 1]
mov byte [ebp - 0x14], al
lea ecx, [ebp - 0x3c]
push dword [ebp - 0x14]
call edi
mov esi, dword [0x46a8f8]
push 0x19
push str.isCapturingDesktopScreens
mov byte [ebp - 4], 0x17
call esi
add esp, 8
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x50]
call dword [0x46a890]
mov ecx, eax
call dword [0x46a6f8]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x17
call dword [0x46a91c]
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x12
call dword [0x46a830]
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx + 0x54]
call fcn.0043fdd0
movzx eax, al
lea ecx, [ebp - 0x3c]
push eax
call edi
push 0x10
push str.isServiceRunning
mov byte [ebp - 4], 0x19
call esi
add esp, 8
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x1a
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x50]
call dword [0x46a890]
mov ecx, eax
call dword [0x46a6f8]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x19
call dword [0x46a91c]
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x12
call dword [0x46a830]
call fcn.0042fb50
movzx eax, al
lea ecx, [ebp - 0x3c]
push eax
call edi
push 0x14
push str.isServiceFunctioning
mov byte [ebp - 4], 0x1b
call esi
add esp, 8
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x1c
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x50]
call dword [0x46a890]
mov ecx, eax
call dword [0x46a6f8]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1b
call dword [0x46a91c]
mov edi, dword [0x46a830]
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x12
call edi
test bl, bl
je 0x431afc
mov eax, dword [0x46a848]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x1d
push eax
call dword [0x46a6a8]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1e
push ecx
push eax
call fcn.0042d860
add esp, 0xc
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x14]
call dword [0x46a91c]
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x2c]
push eax
call dword [0x46a650]
add esp, 8
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x1f
call dword [0x46a6fc]
push 9
push str.checksumm
mov byte [ebp - 4], 0x20
call esi
add esp, 8
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x21
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x50]
call dword [0x46a890]
mov ecx, eax
call dword [0x46a6f8]
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x20
call dword [0x46a91c]
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x1f
call edi
mov ebx, dword [0x46a894]
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1d
call ebx
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x12
call fcn.0042d280
jmp 0x431b02
mov ebx, dword [0x46a894]
cmp byte [ebp + 0xf], 0
je 0x431bd3
mov eax, dword [0x46a6c8]
mov dword [ebp + 0xc], eax
push 8
push str.csgo.exe
mov byte [ebp - 4], 0x22
call esi
mov dword [ebp - 0x20], eax
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 0x23
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0042e5d0
add esp, 0x10
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x20]
call dword [0x46a91c]
lea eax, [ebp + 0xc]
push 1
push eax
call dword [0x46a684]
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x2c]
push eax
call dword [0x46a638]
add esp, 0x10
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x24
call dword [0x46a65c]
push 0xa
push str.moduleList
mov byte [ebp - 4], 0x25
call esi
add esp, 8
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x26
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x50]
call dword [0x46a890]
mov ecx, eax
call dword [0x46a6f8]
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x25
call dword [0x46a91c]
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x24
call edi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x22
call dword [0x46a80c]
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x12
call fcn.00428b80
cmp byte [ebp + 0xb], 0
je 0x431c80
mov eax, dword [0x46a6c8]
mov dword [ebp + 0xc], eax
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 0x27
push eax
call fcn.0042e4c0
lea eax, [ebp + 0xc]
push 1
push eax
call dword [0x46a684]
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x2c]
push eax
call dword [0x46a638]
add esp, 0x14
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x28
call dword [0x46a65c]
push 0xb
push str.processList
mov byte [ebp - 4], 0x29
call esi
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x2a
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x50]
call dword [0x46a890]
mov ecx, eax
call dword [0x46a6f8]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x29
call dword [0x46a91c]
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x28
call edi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x27
call dword [0x46a80c]
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x12
call fcn.00428b80
push 7
push str.id_game
call esi
mov dword [ebp + 8], eax
push 7
push str.id_game
mov byte [ebp - 4], 0x2b
call esi
add esp, 0x10
mov dword [ebp + 0xc], eax
mov esi, dword [0x46a890]
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [ebp - 0x44]
call esi
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x50]
call esi
mov ecx, eax
call dword [0x46a654]
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x2b
call dword [0x46a91c]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x12
call dword [0x46a91c]
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0xfc]
call fcn.00435c20
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0xb
call ebx
jmp 0x432922
push str.startAntiCheat
mov ecx, esi
call dword [0x46a688]
test al, al
je 0x4326e8
mov ebx, dword [0x46a8f8]
push 6
push str.uniTag
call ebx
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x2d
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x44]
call dword [0x46a890]
mov ecx, eax
call dword [0x46a8a0]
mov esi, dword [ebp - 0x1c]
push eax
lea ecx, [esi + 0x104]
call dword [0x46a914]
lea ecx, [ebp - 0x14]
call dword [0x46a91c]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xb
call dword [0x46a91c]
lea ecx, [esi + 8]
call fcn.0042fbb0
test al, al
je 0x431e71
push 0x2f
push str.AntiCheat_is_already_running__ignoring_request.
call ebx
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x2e
push eax
mov ecx, 0x5742a4
call fcn.0042af50
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xb
call dword [0x46a91c]
lea ecx, [ebp - 0x18]
call dword [0x46a6f4]
push 0
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x2f
call dword [0x46a664]
push 7
push 0x46e338
mov byte [ebp - 4], 0x30
call ebx
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x31
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x18]
call dword [0x46a890]
mov esi, dword [0x46a6f8]
mov ecx, eax
call esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x30
call dword [0x46a91c]
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x2f
call edi
push 5
lea ecx, [ebp - 0x3c]
call dword [0x46a660]
push 5
push 0x46ea80
mov byte [ebp - 4], 0x32
call ebx
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x33
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x18]
call dword [0x46a890]
mov ecx, eax
call esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x32
call dword [0x46a91c]
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x3c]
jmp 0x43204f
mov eax, dword [esi + 0xf8]
test eax, eax
jne 0x431f65
push 0x37
push str.startAntiCheat_ignored__waiting_for_services_to_install
call ebx
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x34
push eax
mov ecx, 0x5742a4
call fcn.0042af50
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xb
call dword [0x46a91c]
lea ecx, [ebp - 0x18]
call dword [0x46a6f4]
push 0
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x35
call dword [0x46a664]
push 7
push 0x46e338
mov byte [ebp - 4], 0x36
call ebx
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x37
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x18]
call dword [0x46a890]
mov esi, dword [0x46a6f8]
mov ecx, eax
call esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x36
call dword [0x46a91c]
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x35
call edi
push 6
lea ecx, [ebp - 0x3c]
call dword [0x46a660]
push 5
push 0x46ea80
mov byte [ebp - 4], 0x38
call ebx
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x39
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x18]
call dword [0x46a890]
mov ecx, eax
call esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x38
call dword [0x46a91c]
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x3c]
jmp 0x43204f
cmp eax, 1
jne 0x43207b
push 0x37
push str.startAntiCheat_ignored__cause_it_is_already_starting...
call ebx
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x3a
push eax
mov ecx, 0x5742a4
call fcn.0042af50
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xb
call dword [0x46a91c]
lea ecx, [ebp - 0x18]
call dword [0x46a6f4]
push 0
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x3b
call dword [0x46a664]
push 7
push 0x46e338
mov byte [ebp - 4], 0x3c
call ebx
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x3d
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x18]
call dword [0x46a890]
mov esi, dword [0x46a6f8]
mov ecx, eax
call esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x3c
call dword [0x46a91c]
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x3b
call edi
push 4
lea ecx, [ebp - 0x70]
call dword [0x46a660]
push 5
push 0x46ea80
mov byte [ebp - 4], 0x3e
call ebx
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x3f
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x18]
call dword [0x46a890]
mov ecx, eax
call esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x3e
call dword [0x46a91c]
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x70]
call edi
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0xfc]
call fcn.00435c20
mov ebx, dword [0x46a894]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xb
call ebx
jmp 0x432922
push 8
push str.interval
call ebx
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x40
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x44]
call dword [0x46a890]
mov edi, dword [0x46a81c]
lea ecx, [ebp - 0x70]
push ecx
mov ecx, eax
call edi
sub esp, 8
mov byte [ebp - 4], 0x41
xorps xmm0, xmm0
mov ecx, eax
movsd qword [esp], xmm0
call dword [0x46a828]
mov esi, dword [0x46a830]
lea ecx, [ebp - 0x70]
fstp qword [ebp - 0x18]
mov byte [ebp - 4], 0x40
call esi
movsd xmm0, qword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
cvtpd2ps xmm0, xmm0
mov byte [ebp - 4], 0xb
movss dword [ecx + 0xe0], xmm0
lea ecx, [ebp + 8]
call dword [0x46a91c]
push 6
push str.during
call ebx
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x42
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x44]
call dword [0x46a890]
lea ecx, [ebp - 0x10c]
push ecx
mov ecx, eax
call edi
sub esp, 8
mov byte [ebp - 4], 0x43
xorps xmm0, xmm0
mov ecx, eax
movsd qword [esp], xmm0
call dword [0x46a828]
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x42
fstp qword [ebp - 0x18]
call esi
movsd xmm0, qword [ebp - 0x18]
lea ecx, [ebp + 8]
mov eax, dword [ebp - 0x1c]
cvtpd2ps xmm0, xmm0
mov byte [ebp - 4], 0xb
movss dword [eax + 0xe4], xmm0
call dword [0x46a91c]
push 0xb
push str.captureGame
call ebx
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x44
push eax
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x44]
call dword [0x46a890]
lea ecx, [ebp - 0xec]
push ecx
mov ecx, eax
call edi
mov esi, dword [0x46a7a4]
mov ecx, eax
push 0
mov byte [ebp - 4], 0x45
call esi
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x44
mov bl, al
call dword [0x46a830]
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xb
mov byte [eax + 0xe8], bl
call dword [0x46a91c]
push 0xe
push str.captureDesktop
call dword [0x46a8f8]
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x46
push eax
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x44]
call dword [0x46a890]
lea ecx, [ebp - 0x12c]
push ecx
mov ecx, eax
call edi
push 0
mov ecx, eax
mov byte [ebp - 4], 0x47
call esi
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0x46
mov bl, al
call dword [0x46a830]
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xb
mov byte [eax + 0xe9], bl
call dword [0x46a91c]
push 0xb
push str.antiService
call dword [0x46a8f8]
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x48
push eax
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x44]
call dword [0x46a890]
lea ecx, [ebp - 0xbc]
push ecx
mov ecx, eax
call edi
push 0
mov ecx, eax
mov byte [ebp - 4], 0x49
call esi
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x48
mov bl, al
call dword [0x46a830]
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp + 8]
mov byte [eax + 0xf4], bl
mov byte [ebp - 4], 0xb
call dword [0x46a91c]
mov ebx, dword [0x46a8f8]
push 0x11
push str.gameScreenQuality
mov dword [ebp - 0x14], 0x64
call ebx
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x4a
push eax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x44]
call dword [0x46a890]
lea ecx, [ebp - 0xdc]
push ecx
mov ecx, eax
call edi
mov edi, dword [0x46a82c]
mov ecx, eax
push 0x4b
mov byte [ebp - 4], 0x4b
call edi
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x4a
mov esi, eax
call dword [0x46a830]
cmp esi, 0x64
mov dword [ebp - 0x20], esi
lea eax, [ebp - 0x20]
mov dword [ebp - 0x10], 0xffffffff
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xb
cmovle ecx, eax
lea eax, [ebp - 0x10]
cmp dword [ecx], 0xffffffff
cmovg eax, ecx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ecx + 0x118], eax
lea ecx, [ebp + 8]
call dword [0x46a91c]
push 0x14
push str.desktopScreenQuality
mov dword [ebp - 0x14], 0x64
call ebx
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x4c
push eax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x44]
call dword [0x46a890]
mov ebx, dword [0x46a81c]
lea ecx, [ebp - 0xfc]
push ecx
mov ecx, eax
call ebx
push 0x37
mov ecx, eax
mov byte [ebp - 4], 0x4d
call edi
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0x4c
mov esi, eax
call dword [0x46a830]
mov dword [ebp - 0x20], esi
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x10], 0xffffffff
lea eax, [ebp - 0x20]
cmp esi, 0x64
cmovle ecx, eax
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x10]
cmp dword [ecx], 0xffffffff
cmovg eax, ecx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ecx + 0x11c], eax
lea ecx, [ebp + 8]
call dword [0x46a91c]
push 0x14
push str.desktopScreenMaxSkip
call dword [0x46a8f8]
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x4e
push eax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x44]
call dword [0x46a890]
lea ecx, [ebp - 0x11c]
push ecx
mov ecx, eax
call ebx
push 0
mov ecx, eax
mov byte [ebp - 4], 0x4f
call edi
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x4e
mov esi, eax
call dword [0x46a830]
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xb
mov dword [eax + 0xec], esi
call dword [0x46a91c]
push 0x11
push str.gameScreenMaxSkip
call dword [0x46a8f8]
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x50
push eax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x44]
call dword [0x46a890]
lea ecx, [ebp - 0x13c]
push ecx
mov ecx, eax
call ebx
push 0
mov ecx, eax
mov byte [ebp - 4], 0x51
call edi
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x50
mov esi, eax
call dword [0x46a830]
mov ebx, dword [ebp - 0x1c]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xb
mov dword [ebx + 0xf0], esi
call dword [0x46a91c]
mov eax, dword [0x46a6c8]
mov dword [ebp + 0xc], eax
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 0x52
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebx + 0xe0]
mov ecx, ebx
push eax
call fcn.004337e0
lea ecx, [ebp - 0x2c]
mov byte [ebp + 8], al
call dword [0x46a6f4]
push dword [ebp + 8]
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x53
call dword [0x46a664]
mov ebx, dword [0x46a8f8]
push 7
push 0x46e338
mov byte [ebp - 4], 0x54
call ebx
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x55
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x2c]
call dword [0x46a890]
mov edi, dword [0x46a6f8]
mov ecx, eax
call edi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x54
call dword [0x46a91c]
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x53
call dword [0x46a830]
mov esi, dword [0x46a660]
lea ecx, [ebp - 0x9c]
push 0
call esi
push 5
push 0x46ea80
mov byte [ebp - 4], 0x56
call ebx
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x57
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x2c]
call dword [0x46a890]
mov ecx, eax
call edi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x56
call dword [0x46a91c]
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x53
call dword [0x46a830]
push dword [ebp - 0x20]
lea ecx, [ebp - 0x8c]
call esi
push 7
push str.acError
mov byte [ebp - 4], 0x58
call ebx
add esp, 8
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x59
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x2c]
call dword [0x46a890]
mov ecx, eax
call edi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x58
call dword [0x46a91c]
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x53
call dword [0x46a830]
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x60]
call esi
push 0xc
push str.captureError
mov byte [ebp - 4], 0x5a
call ebx
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 0x5b
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x2c]
call dword [0x46a890]
mov ecx, eax
call edi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x5a
call dword [0x46a91c]
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x53
call dword [0x46a830]
mov ebx, dword [ebp - 0x1c]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x48]
push eax
mov ecx, dword [ebx + 0xfc]
call fcn.00435c20
mov eax, dword [ebp - 0x20]
cmp eax, 3
jne 0x43265c
lea eax, [ebp + 0xc]
mov ecx, ebx
push eax
call fcn.00431380
jmp 0x4326c8
cmp eax, 8
jne 0x4326c8
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x14]
push str.Failed_to_start_anticheat__service_failed_to_install_
push eax
call fcn.00433d60
mov esi, eax
push 0xffffffffffffffff
push 0
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x5c
push str.Dizard___Warning
push eax
call fcn.00433d60
add esp, 0x20
push 0
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x5d
push esi
push eax
mov dword [ecx], 0x400
push dword [ebx + 0x100]
call dword [0x46af1c]
add esp, 0x14
mov byte [ebp - 4], 0x5c
lea ecx, [ebp + 8]
call dword [0x46a91c]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x53
call dword [0x46a91c]
mov ebx, dword [0x46a894]
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x52
call ebx
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0xb
call fcn.00428b80
jmp 0x432922
push str.stopAntiCheat
mov ecx, esi
call dword [0x46a688]
test al, al
je 0x432798
mov ebx, dword [ebp - 0x1c]
mov ecx, ebx
call fcn.004339e0
lea ecx, [ebp - 0x2c]
mov byte [ebp + 0xc], al
call dword [0x46a6f4]
push dword [ebp + 0xc]
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x5e
call dword [0x46a664]
push 7
push 0x46e338
mov byte [ebp - 4], 0x5f
call dword [0x46a8f8]
add esp, 8
mov dword [ebp + 0xc], eax
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 0x60
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x2c]
call dword [0x46a890]
mov ecx, eax
call dword [0x46a6f8]
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x5f
call dword [0x46a91c]
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x5e
call edi
mov ecx, dword [ebx + 0xfc]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.00435c20
mov ebx, dword [0x46a894]
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xb
call ebx
jmp 0x432922
push str.CSGOIsConnectedTo
mov ecx, esi
call dword [0x46a688]
test al, al
je 0x43291c
mov ebx, dword [0x46a8f8]
push 8
push str.serverIp
call ebx
add esp, 8
mov dword [ebp + 0xc], eax
mov esi, dword [0x46a890]
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 0x61
push eax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x44]
call esi
mov ecx, eax
call dword [0x46a8a0]
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x63
call dword [0x46a91c]
push 4
push 0x46f1c0
call ebx
add esp, 8
mov dword [ebp + 8], eax
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x64
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x44]
call esi
mov ecx, eax
call dword [0x46a8a0]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x66
call dword [0x46a91c]
lea ecx, [ebp - 0x2c]
call dword [0x46a6f4]
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x67
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00430bf0
add esp, 8
lea ecx, [ebp - 0x60]
test al, al
je 0x43288d
push 1
call dword [0x46a664]
push 0xb
push 0x46f1c8
mov byte [ebp - 4], 0x68
call ebx
add esp, 8
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 0x69
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x2c]
call esi
mov ecx, eax
call dword [0x46a6f8]
mov byte [ebp - 4], 0x68
jmp 0x4328c9
push 0
call dword [0x46a664]
push 0xb
push 0x46f1c8
mov byte [ebp - 4], 0x6a
call ebx
add esp, 8
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 0x6b
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x2c]
call esi
mov ecx, eax
call dword [0x46a6f8]
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0x20]
call dword [0x46a91c]
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x67
call edi
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0xfc]
call fcn.00435c20
mov ebx, dword [0x46a894]
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x66
call ebx
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x63
call dword [0x46a91c]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xb
call dword [0x46a91c]
jmp 0x432922
mov ebx, dword [0x46a894]
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 4
call dword [0x46a91c]
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], 0xffffffff
call ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8