Function at 0x401000
Capabilities:
Log keystrokes via polling
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push 0x178
push 0
push 0x42a7f0
call sub.CRTDLL.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x42a7f4], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x42a7f0], eax
call fcn.00413068
call fcn.004128ab
call fcn.00411206
call fcn.00410917
call fcn.004108b4
call fcn.004101a7
call fcn.00407812
call fcn.00407710
call fcn.00407120
call fcn.00406fc0
call fcn.0040653f
call fcn.004130e0
call fcn.004066a0
mov dword [0x42a914], eax
call fcn.00407e39
mov ebp, 0x414324
push ebp
push 0
call fcn.00410578
mov dword [0x42a884], eax
mov ebp, 0x41fe1a
push ebp
push 1
call fcn.00410578
mov dword [0x42a888], eax
mov ebp, 0x420c31
push ebp
push 2
call fcn.00410578
mov dword [0x42a88c], eax
mov ebp, 0x421844
push ebp
push 3
call fcn.00410578
mov dword [0x42a890], eax
mov ebp, str.RIFF
push ebp
push 0
call fcn.00406b30
mov ebp, str.RIFF__
push ebp
push 1
call fcn.00406b30
push 5
push 0x42a930
push 0
mov edx, dword [0x42a930]
call fcn.00406000
mov eax, 0xd
push 4
call fcn.0042e000
push 5
push 0x42a938
push 0
mov edx, dword [0x42a938]
call fcn.00406000
mov eax, 0xd
push 4
call fcn.0042e000
push 5
push 0x42a940
push 0
mov edx, dword [0x42a940]
call fcn.00406000
mov eax, 0xd
push 4
call fcn.0042e000
push 5
push 0x42a948
push 0
mov edx, dword [0x42a948]
call fcn.00406000
mov eax, 0xd
push 4
call fcn.0042e000
push 5
push 0x42a950
push 0
mov edx, dword [0x42a950]
call fcn.00406000
mov eax, 0xd
push 4
call fcn.0042e000
mov dword [0x42a880], 1
mov eax, 0xc
cmp eax, dword [0x42a880]
jl 0x40122f
mov ebx, dword [0x42a880]
mov ebp, dword [0x42a938]
sal ebx, 2
mov dword [ebp + ebx], 1
mov ebx, dword [0x42a880]
mov ebp, dword [0x42a940]
sal ebx, 2
mov dword [ebp + ebx], 1
mov ebx, dword [0x42a880]
mov ebp, dword [0x42a948]
sal ebx, 2
mov dword [ebp + ebx], 1
inc dword [0x42a880]
jmp 0x4011d5
mov edx, str.Timeshift
lea ecx, [0x42a864]
call fcn.00406024
push dword [0x42aff4]
call fcn.00412760
sub esp, 4
lea ecx, [0x42a850]
pop edx
call fcn.0040602c
push dword [0x42aff4]
mov edx, dword [0x42a850]
push dword [0x42aff4]
call fcn.00413130
mov edx, str.CH.dll
call fcn.00413130
inc dword [0x42aff4]
push 0
mov edx, dword [0x427d5c]
add dword [esp + 4], edx
call fcn.004129ce
pop dword [0x42aff4]
and eax, eax
je 0x4012c9
mov ebp, 0x42775d
mov ebx, ebp
mov ebp, 0x426b5d
sub ebx, ebp
push ebx
mov ebp, 0x426b5d
push ebp
push 0
call fcn.00412a30
push 0
call fcn.00412827
jmp 0x4012d8
push str.Could_not_install_the_file___Installtion_failed
push str.Error
call fcn.00407001
push dword [0x42aff4]
mov edx, dword [0x42a850]
push dword [0x42aff4]
call fcn.00413130
mov edx, str.help.txt
call fcn.00413130
inc dword [0x42aff4]
push 0
mov edx, dword [0x427d5c]
add dword [esp + 4], edx
call fcn.004129ce
pop dword [0x42aff4]
and eax, eax
je 0x401348
mov ebp, 0x427d59
mov ebx, ebp
mov ebp, 0x42775d
sub ebx, ebp
push ebx
mov ebp, 0x42775d
push ebp
push 0
call fcn.00412a30
push 0
call fcn.00412827
jmp 0x401357
push str.Could_not_create_HELP.TXT_file.
push str.Error
call fcn.00407001
push str.CH_Trainer_Keys.dat
push 0
call fcn.004129fc
mov dword [0x42a914], eax
mov ebx, dword [0x42a914]
and ebx, ebx
jle 0x401389
mov dword [0x42a84c], 1
push 2
call fcn.00412827
call fcn.0040519b
call fcn.00411260
mov dword [0x42a85c], eax
mov ebx, dword [0x42a85c]
cmp ebx, 0x10
jne 0x4013a8
jmp 0x404ef8
call fcn.00411270
push eax
mov ebx, 1
cmp ebx, dword [esp]
jne 0x4013dc
call fcn.00411290
mov ebx, eax
and ebx, ebx
jne 0x4013d7
push 0x4140f7
push str.http:__www.cheathappens.com
push str.iexplore
call fcn.00407667
jmp 0x40148e
mov ebx, 2
cmp ebx, dword [esp]
jne 0x40140a
call fcn.00411290
mov ebx, eax
and ebx, ebx
jne 0x401405
push 0x4140f7
push str.www.cheathappens.com_trainer_troubleshooting.asp
push str.iexplore
call fcn.00407667
jmp 0x40148e
mov ebx, 3
cmp ebx, dword [esp]
jne 0x40148e
call fcn.00411290
mov ebx, eax
and ebx, ebx
jne 0x40148e
push dword [0x42aff4]
push 0
push 0x4140f7
mov edx, dword [0x42a850]
push dword [0x42aff4]
call fcn.00413130
mov edx, str.help.txt
call fcn.00413130
inc dword [0x42aff4]
push str.notepad.exe
mov edx, dword [0x427d5c]
add dword [esp + 4], edx
call fcn.0040764d
pop dword [0x42aff4]
mov ebx, dword [0x42a84c]
cmp ebx, 1
jne 0x40148e
push 0
push 0x4140f7
push str.Custom_Key_List.txt
push str.notepad.exe
call fcn.0040764d
pop eax
push dword [0x42a888]
push 1
call fcn.00410980
mov eax, 0xa
call fcn.0042e050
push str.Run_Game_and_then_press_F1_at_Main_Menu.
push 0
push 0
call fcn.00406683
push 0x70
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
and ebx, ebx
je 0x40138e
mov edx, str.TimeShift.exe
lea ecx, [0x42a900]
call fcn.00406024
call fcn.004045b7
mov edx, str.CH.dll
lea ecx, [0x42a830]
call fcn.00406024
mov edx, dword [0x42a850]
push dword [0x42aff4]
call fcn.00413130
mov edx, dword [0x42a830]
call fcn.00413130
lea ecx, [0x42a860]
pop edx
call fcn.0040602c
call fcn.004047bb
call fcn.004045b7
call fcn.00411260
mov dword [0x42a85c], eax
call fcn.00404e6d
mov ebx, dword [0x42a85c]
cmp ebx, 0x10
jne 0x401547
jmp 0x404ef8
mov eax, 0x3e8
call fcn.0042e050
mov ebx, dword [0x42a8fc]
and ebx, ebx
je 0x4014e6
mov ebx, dword [0x42a82c]
and ebx, ebx
je 0x4014e6
push dword [0x42aff4]
mov edx, dword [0x42a900]
push dword [0x42aff4]
call fcn.00413130
mov edx, str._trainer_ready_
call fcn.00413130
inc dword [0x42aff4]
push 0
push 0
mov edx, dword [0x427d5c]
add dword [esp + 8], edx
call fcn.00406683
pop dword [0x42aff4]
push 0
push 0
call fcn.00406b50
mov eax, 0x12c
call fcn.0042e050
mov ebp, dword [0x42a930]
mov dword [ebp + 4], 0x61
mov dword [ebp + 8], 0x62
mov dword [ebp + 0xc], 0x63
mov dword [ebp + 0x10], 0x64
mov dword [ebp + 0x14], 0x65
mov dword [ebp + 0x18], 0
mov dword [ebp + 0x1c], 0
mov dword [ebp + 0x20], 0
mov dword [ebp + 0x24], 0
mov dword [ebp + 0x28], 0
mov dword [ebp + 0x2c], 0
mov dword [ebp + 0x30], 0
push str.CH_Trainer_Keys.dat
push 0
call fcn.004129fc
mov dword [0x42a914], eax
mov ebx, dword [0x42a914]
and ebx, ebx
jle 0x4017a9
mov dword [0x42a84c], 1
push 0
call fcn.00412a90
mov dword [0x42a8dc], eax
mov dword [0x42a880], 1
mov eax, dword [0x42a8dc]
cmp eax, dword [0x42a880]
jl 0x40178b
push dword [0x42aff4]
push 0
call fcn.00412ae0
sub esp, 4
lea ecx, [0x42a918]
pop edx
call fcn.0040602c
push dword [0x42a918]
mov edx, str.SHIFT
pop ecx
call fcn.0042e090
je 0x4016bd
mov ebx, dword [0x42a880]
mov ebp, dword [0x42a938]
sal ebx, 2
mov dword [ebp + ebx], 0
push dword [0x42a918]
mov edx, str.CTRL
pop ecx
call fcn.0042e090
je 0x4016e7
mov ebx, dword [0x42a880]
mov ebp, dword [0x42a940]
sal ebx, 2
mov dword [ebp + ebx], 0
push dword [0x42a918]
mov edx, 0x4141c0
pop ecx
call fcn.0042e090
je 0x401711
mov ebx, dword [0x42a880]
mov ebp, dword [0x42a948]
sal ebx, 2
mov dword [ebp + ebx], 0
push 0
call fcn.00412a90
push eax
mov ebx, dword [0x42a880]
mov ebp, dword [0x42a930]
sal ebx, 2
pop dword [ebp + ebx]
push dword [0x42aff4]
push dword [0x42aff4]
push 0
mov ebx, dword [0x42a880]
sal ebx, 2
mov eax, dword [ebp + ebx]
cdq
push edx
push eax
call fcn.00406290
sub esp, 4
inc dword [0x42aff4]
mov edx, dword [0x427d5c]
add dword [esp], edx
call fcn.004060a0
pop dword [0x42aff4]
push eax
mov ebx, dword [0x42a880]
sal ebx, 2
pop dword [ebp + ebx]
inc dword [0x42a880]
jmp 0x401663
push 0
call fcn.00412827
push str.Custom_Keys_Loaded
push 0
push 0
call fcn.00406683
push 0x83
mov ebx, dword [0x42a818]
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x3d
mov ebx, dword [0x42a818]
inc ebx
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 2
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x3f
mov ebx, dword [0x42a818]
add ebx, 3
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x84
mov ebx, dword [0x42a818]
add ebx, 4
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xf
mov ebx, dword [0x42a818]
add ebx, 5
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 1
mov ebx, dword [0x42a818]
add ebx, 6
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x75
mov ebx, dword [0x42a818]
add ebx, 7
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xa
mov ebx, dword [0x42a818]
add ebx, 8
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xc7
mov ebx, dword [0x42a818]
add ebx, 9
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x81
mov ebx, dword [0x42a818]
add ebx, 0xa
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x34
mov ebx, dword [0x42a818]
add ebx, 0xb
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 2
mov ebx, dword [0x42a818]
add ebx, 0xc
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xd
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xe
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xf
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x10
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x7a
mov ebx, dword [0x42a818]
add ebx, 0x11
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x44
mov ebx, dword [0x42a818]
add ebx, 0x12
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x83
mov ebx, dword [0x42a818]
add ebx, 0x13
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x3d
mov ebx, dword [0x42a818]
add ebx, 0x14
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 4
mov ebx, dword [0x42a818]
add ebx, 0x15
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x3f
mov ebx, dword [0x42a818]
add ebx, 0x16
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x84
mov ebx, dword [0x42a818]
add ebx, 0x17
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xf
mov ebx, dword [0x42a818]
add ebx, 0x18
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 1
mov ebx, dword [0x42a818]
add ebx, 0x19
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x75
mov ebx, dword [0x42a818]
add ebx, 0x1a
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xa
mov ebx, dword [0x42a818]
add ebx, 0x1b
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xc7
mov ebx, dword [0x42a818]
add ebx, 0x1c
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x81
mov ebx, dword [0x42a818]
add ebx, 0x1d
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xac
mov ebx, dword [0x42a818]
add ebx, 0x1e
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 2
mov ebx, dword [0x42a818]
add ebx, 0x1f
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x20
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x21
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x22
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x23
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push pe_nt_image_headers32
mov ebx, dword [0x42a818]
add ebx, 0x24
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x3f
mov ebx, dword [0x42a818]
add ebx, 0x25
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xf3
mov ebx, dword [0x42a818]
add ebx, 0x26
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xf
mov ebx, dword [0x42a818]
add ebx, 0x27
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x10
mov ebx, dword [0x42a818]
add ebx, 0x28
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x81
mov ebx, dword [0x42a818]
add ebx, 0x29
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x34
mov ebx, dword [0x42a818]
add ebx, 0x2a
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 2
mov ebx, dword [0x42a818]
add ebx, 0x2b
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x2c
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x2d
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xc3
mov ebx, dword [0x42a818]
add ebx, 0x2e
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 0x2f
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x30
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x31
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x32
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x33
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x34
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x35
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x36
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x37
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x38
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x39
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x3a
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x3b
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x3c
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x3d
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x3e
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x3f
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x83
mov ebx, dword [0x42a818]
add ebx, 0x40
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x3d
mov ebx, dword [0x42a818]
add ebx, 0x41
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 8
mov ebx, dword [0x42a818]
add ebx, 0x42
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x3f
mov ebx, dword [0x42a818]
add ebx, 0x43
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x84
mov ebx, dword [0x42a818]
add ebx, 0x44
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xf
mov ebx, dword [0x42a818]
add ebx, 0x45
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 1
mov ebx, dword [0x42a818]
add ebx, 0x46
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x75
mov ebx, dword [0x42a818]
add ebx, 0x47
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xe
mov ebx, dword [0x42a818]
add ebx, 0x48
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xc7
mov ebx, dword [0x42a818]
add ebx, 0x49
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x40
mov ebx, dword [0x42a818]
add ebx, 0x4a
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xc
mov ebx, dword [0x42a818]
add ebx, 0x4b
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 4
mov ebx, dword [0x42a818]
add ebx, 0x4c
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x4d
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x4e
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x4f
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xc7
mov ebx, dword [0x42a818]
add ebx, 0x50
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x40
mov ebx, dword [0x42a818]
add ebx, 0x51
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 8
mov ebx, dword [0x42a818]
add ebx, 0x52
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x53
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x54
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x20
mov ebx, dword [0x42a818]
add ebx, 0x55
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x41
mov ebx, dword [0x42a818]
add ebx, 0x56
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x8b
mov ebx, dword [0x42a818]
add ebx, 0x57
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x48
mov ebx, dword [0x42a818]
add ebx, 0x58
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xc
mov ebx, dword [0x42a818]
add ebx, 0x59
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x89
mov ebx, dword [0x42a818]
add ebx, 0x5a
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x4c
mov ebx, dword [0x42a818]
add ebx, 0x5b
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x24
mov ebx, dword [0x42a818]
add ebx, 0x5c
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x28
mov ebx, dword [0x42a818]
add ebx, 0x5d
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xc3
mov ebx, dword [0x42a818]
add ebx, 0x5e
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 0x5f
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x60
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x61
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x62
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x63
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x64
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x65
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x66
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x67
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x68
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x69
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x6a
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x6b
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x6c
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x6d
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x6e
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x6f
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x83
mov ebx, dword [0x42a818]
add ebx, 0x70
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x3d
mov ebx, dword [0x42a818]
add ebx, 0x71
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x10
mov ebx, dword [0x42a818]
add ebx, 0x72
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x3f
mov ebx, dword [0x42a818]
add ebx, 0x73
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x84
mov ebx, dword [0x42a818]
add ebx, 0x74
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xf
mov ebx, dword [0x42a818]
add ebx, 0x75
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 1
mov ebx, dword [0x42a818]
add ebx, 0x76
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x75
mov ebx, dword [0x42a818]
add ebx, 0x77
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xf
mov ebx, dword [0x42a818]
add ebx, 0x78
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 0x79
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xc7
mov ebx, dword [0x42a818]
add ebx, 0x7a
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x40
mov ebx, dword [0x42a818]
add ebx, 0x7b
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xc
mov ebx, dword [0x42a818]
add ebx, 0x7c
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 2
mov ebx, dword [0x42a818]
add ebx, 0x7d
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x7e
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x7f
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x80
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xc7
mov ebx, dword [0x42a818]
add ebx, 0x81
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x40
mov ebx, dword [0x42a818]
add ebx, 0x82
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 8
mov ebx, dword [0x42a818]
add ebx, 0x83
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x84
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x85
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x10
mov ebx, dword [0x42a818]
add ebx, 0x86
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x41
mov ebx, dword [0x42a818]
add ebx, 0x87
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x8b
mov ebx, dword [0x42a818]
add ebx, 0x88
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x48
mov ebx, dword [0x42a818]
add ebx, 0x89
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xc
mov ebx, dword [0x42a818]
add ebx, 0x8a
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x89
mov ebx, dword [0x42a818]
add ebx, 0x8b
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x4c
mov ebx, dword [0x42a818]
add ebx, 0x8c
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x24
mov ebx, dword [0x42a818]
add ebx, 0x8d
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x24
mov ebx, dword [0x42a818]
add ebx, 0x8e
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xc3
mov ebx, dword [0x42a818]
add ebx, 0x8f
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x90
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x91
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x92
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x93
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x94
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x95
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x96
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x97
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x98
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x99
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x9a
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x9b
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x9c
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x9d
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x9e
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0x9f
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x83
mov ebx, dword [0x42a818]
add ebx, 0xa0
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x3d
mov ebx, dword [0x42a818]
add ebx, 0xa1
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x14
mov ebx, dword [0x42a818]
add ebx, 0xa2
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x3f
mov ebx, dword [0x42a818]
add ebx, 0xa3
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x84
mov ebx, dword [0x42a818]
add ebx, 0xa4
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xf
mov ebx, dword [0x42a818]
add ebx, 0xa5
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 1
mov ebx, dword [0x42a818]
add ebx, 0xa6
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x75
mov ebx, dword [0x42a818]
add ebx, 0xa7
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 6
mov ebx, dword [0x42a818]
add ebx, 0xa8
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xc7
mov ebx, dword [0x42a818]
add ebx, 0xa9
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xaa
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 9
mov ebx, dword [0x42a818]
add ebx, 0xab
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xac
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xad
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xae
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x8b
mov ebx, dword [0x42a818]
add ebx, 0xaf
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x10
mov ebx, dword [0x42a818]
add ebx, 0xb0
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x89
mov ebx, dword [0x42a818]
add ebx, 0xb1
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x54
mov ebx, dword [0x42a818]
add ebx, 0xb2
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x24
mov ebx, dword [0x42a818]
add ebx, 0xb3
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x1c
mov ebx, dword [0x42a818]
add ebx, 0xb4
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xc3
mov ebx, dword [0x42a818]
add ebx, 0xb5
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xb6
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xb7
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xb8
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xb9
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xba
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xbb
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xbc
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xbd
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xbe
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xbf
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x83
mov ebx, dword [0x42a818]
add ebx, 0xc0
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x3d
mov ebx, dword [0x42a818]
add ebx, 0xc1
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xc2
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x3f
mov ebx, dword [0x42a818]
add ebx, 0xc3
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x84
mov ebx, dword [0x42a818]
add ebx, 0xc4
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xf
mov ebx, dword [0x42a818]
add ebx, 0xc5
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 1
mov ebx, dword [0x42a818]
add ebx, 0xc6
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x75
mov ebx, dword [0x42a818]
add ebx, 0xc7
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xa
mov ebx, dword [0x42a818]
add ebx, 0xc8
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xc7
mov ebx, dword [0x42a818]
add ebx, 0xc9
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x81
mov ebx, dword [0x42a818]
add ebx, 0xca
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x34
mov ebx, dword [0x42a818]
add ebx, 0xcb
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 2
mov ebx, dword [0x42a818]
add ebx, 0xcc
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xcd
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xce
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xcf
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xd0
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x7a
mov ebx, dword [0x42a818]
add ebx, 0xd1
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x44
mov ebx, dword [0x42a818]
add ebx, 0xd2
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x83
mov ebx, dword [0x42a818]
add ebx, 0xd3
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x3d
mov ebx, dword [0x42a818]
add ebx, 0xd4
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 4
mov ebx, dword [0x42a818]
add ebx, 0xd5
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x3f
mov ebx, dword [0x42a818]
add ebx, 0xd6
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x84
mov ebx, dword [0x42a818]
add ebx, 0xd7
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xf
mov ebx, dword [0x42a818]
add ebx, 0xd8
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 1
mov ebx, dword [0x42a818]
add ebx, 0xd9
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x75
mov ebx, dword [0x42a818]
add ebx, 0xda
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xa
mov ebx, dword [0x42a818]
add ebx, 0xdb
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xc7
mov ebx, dword [0x42a818]
add ebx, 0xdc
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x81
mov ebx, dword [0x42a818]
add ebx, 0xdd
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xac
mov ebx, dword [0x42a818]
add ebx, 0xde
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 2
mov ebx, dword [0x42a818]
add ebx, 0xdf
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xe0
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xe1
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xe2
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xe3
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push pe_nt_image_headers32
mov ebx, dword [0x42a818]
add ebx, 0xe4
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x3f
mov ebx, dword [0x42a818]
add ebx, 0xe5
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xf3
mov ebx, dword [0x42a818]
add ebx, 0xe6
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xf
mov ebx, dword [0x42a818]
add ebx, 0xe7
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x10
mov ebx, dword [0x42a818]
add ebx, 0xe8
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x81
mov ebx, dword [0x42a818]
add ebx, 0xe9
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xac
mov ebx, dword [0x42a818]
add ebx, 0xea
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 2
mov ebx, dword [0x42a818]
add ebx, 0xeb
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xec
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0
mov ebx, dword [0x42a818]
add ebx, 0xed
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0xc3
mov ebx, dword [0x42a818]
add ebx, 0xee
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 0xef
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 0xf0
push dword [0x42a818]
mov ebx, dword [0x42a82c]
add ebx, 0x1091
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
mov ebx, dword [0x42a82c]
add ebx, 0x3f00
push ebx
mov eax, dword [0x42a818]
call fcn.0042e070
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 4
push dword [0x42a818]
mov ebx, dword [0x42a82c]
add ebx, 0x1093
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 4
push dword [0x42a818]
mov ebx, dword [0x42a82c]
add ebx, 0x1153
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
mov ebx, dword [0x42a82c]
add ebx, 0x3f04
push ebx
mov eax, dword [0x42a818]
call fcn.0042e070
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 4
push dword [0x42a818]
mov ebx, dword [0x42a82c]
add ebx, 0x10a6
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 4
push dword [0x42a818]
mov ebx, dword [0x42a82c]
add ebx, 0x1166
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
mov ebx, dword [0x42a82c]
add ebx, 0x3f08
push ebx
mov eax, dword [0x42a818]
call fcn.0042e070
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 4
push dword [0x42a818]
mov ebx, dword [0x42a82c]
add ebx, 0x10d3
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
mov ebx, dword [0x42a82c]
add ebx, 0x3f10
push ebx
mov eax, dword [0x42a818]
call fcn.0042e070
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 4
push dword [0x42a818]
mov ebx, dword [0x42a82c]
add ebx, 0x1103
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
mov ebx, dword [0x42a82c]
add ebx, 0x3f14
push ebx
mov eax, dword [0x42a818]
call fcn.0042e070
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 4
push dword [0x42a818]
mov ebx, dword [0x42a82c]
add ebx, 0x1133
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
push 0xe8
mov ebx, dword [0x42a818]
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
inc ebx
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 2
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 3
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 4
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 5
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 6
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 7
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 8
push dword [0x42a818]
mov ebx, dword [0x42a8fc]
add ebx, 0x1b87c1
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
mov ebx, dword [0x42a82c]
add ebx, 0x1151
mov edi, dword [0x42a8fc]
add edi, 0x1b87c1
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x42a818]
call fcn.0042e070
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 4
push dword [0x42a818]
mov ebx, dword [0x42a8fc]
add ebx, 0x1b87c2
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
push 0xe8
mov ebx, dword [0x42a818]
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
inc ebx
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 2
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 3
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 4
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 5
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 6
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 7
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 8
push dword [0x42a818]
mov ebx, dword [0x42a8fc]
add ebx, 0x1b1b69
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
mov ebx, dword [0x42a82c]
add ebx, 0x1091
mov edi, dword [0x42a8fc]
add edi, 0x1b1b69
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x42a818]
call fcn.0042e070
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 4
push dword [0x42a818]
mov ebx, dword [0x42a8fc]
add ebx, 0x1b1b6a
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
push 0xe8
mov ebx, dword [0x42a818]
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
inc ebx
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 2
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 3
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 4
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 5
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 6
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 7
push dword [0x42a818]
mov ebx, dword [0x42a8fc]
add ebx, 0x1bbe16
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
mov ebx, dword [0x42a82c]
add ebx, 0x10d1
mov edi, dword [0x42a8fc]
add edi, 0x1bbe16
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x42a818]
call fcn.0042e070
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 4
push dword [0x42a818]
mov ebx, dword [0x42a8fc]
add ebx, 0x1bbe17
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
push 0xe8
mov ebx, dword [0x42a818]
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
inc ebx
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 2
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 3
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 4
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 5
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 6
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 7
push dword [0x42a818]
mov ebx, dword [0x42a8fc]
add ebx, 0x1bbe4b
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
mov ebx, dword [0x42a82c]
add ebx, 0x1101
mov edi, dword [0x42a8fc]
add edi, 0x1bbe4b
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x42a818]
call fcn.0042e070
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 4
push dword [0x42a818]
mov ebx, dword [0x42a8fc]
add ebx, 0x1bbe4c
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
push 0xe8
mov ebx, dword [0x42a818]
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
inc ebx
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 2
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 3
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 4
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push 0x90
mov ebx, dword [0x42a818]
add ebx, 5
mov eax, ebx
call fcn.0042e060
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 6
push dword [0x42a818]
mov ebx, dword [0x42a8fc]
add ebx, 0x1bbec5
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
mov ebx, dword [0x42a82c]
add ebx, 0x1131
mov edi, dword [0x42a8fc]
add edi, 0x1bbec5
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x42a818]
call fcn.0042e070
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 4
push dword [0x42a818]
mov ebx, dword [0x42a8fc]
add ebx, 0x1bbec6
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
mov dword [0x42a904], 0
mov eax, 0xff
cmp eax, dword [0x42a904]
jl 0x4039b6
push dword [0x42a904]
call sub.USER32.dll_GetAsyncKeyState
inc dword [0x42a904]
jmp 0x403996
call fcn.00411260
mov dword [0x42a85c], eax
mov ebp, dword [0x42a930]
push dword [ebp + 4]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42a950]
pop dword [ebp + 4]
mov ebp, dword [0x42a930]
push dword [ebp + 8]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42a950]
pop dword [ebp + 8]
mov ebp, dword [0x42a930]
push dword [ebp + 0xc]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42a950]
pop dword [ebp + 0xc]
mov ebp, dword [0x42a930]
push dword [ebp + 0x10]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42a950]
pop dword [ebp + 0x10]
mov ebp, dword [0x42a930]
push dword [ebp + 0x14]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42a950]
pop dword [ebp + 0x14]
mov ebp, dword [0x42a930]
push dword [ebp + 0x18]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42a950]
pop dword [ebp + 0x18]
mov ebp, dword [0x42a930]
push dword [ebp + 0x1c]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42a950]
pop dword [ebp + 0x1c]
mov ebp, dword [0x42a930]
push dword [ebp + 0x20]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42a950]
pop dword [ebp + 0x20]
mov ebp, dword [0x42a930]
push dword [ebp + 0x24]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42a950]
pop dword [ebp + 0x24]
mov ebp, dword [0x42a930]
push dword [ebp + 0x28]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42a950]
pop dword [ebp + 0x28]
mov ebp, dword [0x42a930]
push dword [ebp + 0x2c]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42a950]
pop dword [ebp + 0x2c]
mov ebp, dword [0x42a930]
push dword [ebp + 0x30]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x42a950]
pop dword [ebp + 0x30]
push 0x10
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x42a8cc], eax
push 0x11
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x42a898], eax
push 0x12
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x42a894], eax
mov ebp, dword [0x42a930]
push dword [ebp + 4]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42a938]
mov edi, dword [ebp + 4]
add edi, dword [0x42a8cc]
imul ebx, edi
mov ebp, dword [0x42a940]
mov edi, dword [ebp + 4]
add edi, dword [0x42a898]
imul ebx, edi
mov ebp, dword [0x42a948]
mov edi, dword [ebp + 4]
add edi, dword [0x42a894]
imul ebx, edi
mov dword [0x42a89c], ebx
mov ebx, dword [0x42a89c]
and ebx, ebx
je 0x403c4b
push dword [0x42a870]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x403bdb
mov dword [0x42a870], 1
push 1
mov eax, dword [0x42a818]
call fcn.0042e070
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 1
push dword [0x42a818]
mov ebx, dword [0x42a82c]
add ebx, 0x3f00
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
push 0
push 0
call fcn.00406b50
mov eax, 0x12c
call fcn.0042e050
jmp 0x403c4a
mov ebx, 1
cmp ebx, dword [esp]
jne 0x403c4a
mov dword [0x42a870], 0
push 0
mov eax, dword [0x42a818]
call fcn.0042e070
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 1
push dword [0x42a818]
mov ebx, dword [0x42a82c]
add ebx, 0x3f00
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
push 0
push 1
call fcn.00406b50
mov eax, 0x12c
call fcn.0042e050
pop eax
mov ebp, dword [0x42a930]
push dword [ebp + 8]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42a938]
mov edi, dword [ebp + 8]
add edi, dword [0x42a8cc]
imul ebx, edi
mov ebp, dword [0x42a940]
mov edi, dword [ebp + 8]
add edi, dword [0x42a898]
imul ebx, edi
mov ebp, dword [0x42a948]
mov edi, dword [ebp + 8]
add edi, dword [0x42a894]
imul ebx, edi
mov dword [0x42a8ac], ebx
mov ebx, dword [0x42a8ac]
and ebx, ebx
je 0x403d89
push dword [0x42a924]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x403d19
mov dword [0x42a924], 1
push 1
mov eax, dword [0x42a818]
call fcn.0042e070
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 1
push dword [0x42a818]
mov ebx, dword [0x42a82c]
add ebx, 0x3f04
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
push 0
push 0
call fcn.00406b50
mov eax, 0x12c
call fcn.0042e050
jmp 0x403d88
mov ebx, 1
cmp ebx, dword [esp]
jne 0x403d88
mov dword [0x42a924], 0
push 0
mov eax, dword [0x42a818]
call fcn.0042e070
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 1
push dword [0x42a818]
mov ebx, dword [0x42a82c]
add ebx, 0x3f04
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
push 0
push 1
call fcn.00406b50
mov eax, 0x12c
call fcn.0042e050
pop eax
mov ebp, dword [0x42a930]
push dword [ebp + 0xc]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42a938]
mov edi, dword [ebp + 0xc]
add edi, dword [0x42a8cc]
imul ebx, edi
mov ebp, dword [0x42a940]
mov edi, dword [ebp + 0xc]
add edi, dword [0x42a898]
imul ebx, edi
mov ebp, dword [0x42a948]
mov edi, dword [ebp + 0xc]
add edi, dword [0x42a894]
imul ebx, edi
mov dword [0x42a8b0], ebx
mov ebx, dword [0x42a8b0]
and ebx, ebx
je 0x403ec7
push dword [0x42a808]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x403e57
mov dword [0x42a808], 1
push 1
mov eax, dword [0x42a818]
call fcn.0042e070
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 1
push dword [0x42a818]
mov ebx, dword [0x42a82c]
add ebx, 0x3f08
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
push 0
push 0
call fcn.00406b50
mov eax, 0x12c
call fcn.0042e050
jmp 0x403ec6
mov ebx, 1
cmp ebx, dword [esp]
jne 0x403ec6
mov dword [0x42a808], 0
push 0
mov eax, dword [0x42a818]
call fcn.0042e070
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 1
push dword [0x42a818]
mov ebx, dword [0x42a82c]
add ebx, 0x3f08
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
push 0
push 1
call fcn.00406b50
mov eax, 0x12c
call fcn.0042e050
pop eax
mov ebp, dword [0x42a930]
push dword [ebp + 0x10]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42a938]
mov edi, dword [ebp + 0x10]
add edi, dword [0x42a8cc]
imul ebx, edi
mov ebp, dword [0x42a940]
mov edi, dword [ebp + 0x10]
add edi, dword [0x42a898]
imul ebx, edi
mov ebp, dword [0x42a948]
mov edi, dword [ebp + 0x10]
add edi, dword [0x42a894]
imul ebx, edi
mov dword [0x42a8b4], ebx
mov ebx, dword [0x42a8b4]
and ebx, ebx
je 0x404005
push dword [0x42a86c]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x403f95
mov dword [0x42a86c], 1
push 1
mov eax, dword [0x42a818]
call fcn.0042e070
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 1
push dword [0x42a818]
mov ebx, dword [0x42a82c]
add ebx, 0x3f14
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
push 0
push 0
call fcn.00406b50
mov eax, 0x12c
call fcn.0042e050
jmp 0x404004
mov ebx, 1
cmp ebx, dword [esp]
jne 0x404004
mov dword [0x42a86c], 0
push 0
mov eax, dword [0x42a818]
call fcn.0042e070
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 1
push dword [0x42a818]
mov ebx, dword [0x42a82c]
add ebx, 0x3f14
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
push 0
push 1
call fcn.00406b50
mov eax, 0x12c
call fcn.0042e050
pop eax
mov ebp, dword [0x42a930]
push dword [ebp + 0x14]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42a938]
mov edi, dword [ebp + 0x14]
add edi, dword [0x42a8cc]
imul ebx, edi
mov ebp, dword [0x42a940]
mov edi, dword [ebp + 0x14]
add edi, dword [0x42a898]
imul ebx, edi
mov ebp, dword [0x42a948]
mov edi, dword [ebp + 0x14]
add edi, dword [0x42a894]
imul ebx, edi
mov dword [0x42a8b8], ebx
mov ebx, dword [0x42a8b8]
and ebx, ebx
je 0x404143
push dword [0x42a868]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x4040d3
mov dword [0x42a868], 1
push 1
mov eax, dword [0x42a818]
call fcn.0042e070
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 1
push dword [0x42a818]
mov ebx, dword [0x42a82c]
add ebx, 0x3f10
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
push 0
push 0
call fcn.00406b50
mov eax, 0x12c
call fcn.0042e050
jmp 0x404142
mov ebx, 1
cmp ebx, dword [esp]
jne 0x404142
mov dword [0x42a868], 0
push 0
mov eax, dword [0x42a818]
call fcn.0042e070
mov dword [0x42a914], eax
push dword [0x42a8d8]
push 1
push dword [0x42a818]
mov ebx, dword [0x42a82c]
add ebx, 0x3f10
push ebx
push dword [0x42a80c]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x42a914], eax
push 0
push 1
call fcn.00406b50
mov eax, 0x12c
call fcn.0042e050
pop eax
mov ebp, dword [0x42a930]
push dword [ebp + 0x18]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42a938]
mov edi, dword [ebp + 0x18]
add edi, dword [0x42a8cc]
imul ebx, edi
mov ebp, dword [0x42a940]
mov edi, dword [ebp + 0x18]
add edi, dword [0x42a898]
imul ebx, edi
mov ebp, dword [0x42a948]
mov edi, dword [ebp + 0x18]
add edi, dword [0x42a894]
imul ebx, edi
mov dword [0x42a8bc], ebx
mov ebx, dword [0x42a8bc]
and ebx, ebx
je 0x4041ad
push str.Key_6_Pressed
push 0
push 0
call fcn.00406683
mov ebp, dword [0x42a930]
push dword [ebp + 0x1c]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42a938]
mov edi, dword [ebp + 0x1c]
add edi, dword [0x42a8cc]
imul ebx, edi
mov ebp, dword [0x42a940]
mov edi, dword [ebp + 0x1c]
add edi, dword [0x42a898]
imul ebx, edi
mov ebp, dword [0x42a948]
mov edi, dword [ebp + 0x1c]
add edi, dword [0x42a894]
imul ebx, edi
mov dword [0x42a8c0], ebx
mov ebx, dword [0x42a8c0]
and ebx, ebx
je 0x404217
push str.Key_7_Pressed
push 0
push 0
call fcn.00406683
mov ebp, dword [0x42a930]
push dword [ebp + 0x20]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42a938]
mov edi, dword [ebp + 0x20]
add edi, dword [0x42a8cc]
imul ebx, edi
mov ebp, dword [0x42a940]
mov edi, dword [ebp + 0x20]
add edi, dword [0x42a898]
imul ebx, edi
mov ebp, dword [0x42a948]
mov edi, dword [ebp + 0x20]
add edi, dword [0x42a894]
imul ebx, edi
mov dword [0x42a8c4], ebx
mov ebx, dword [0x42a8c4]
and ebx, ebx
je 0x404281
push str.Key_8_Pressed
push 0
push 0
call fcn.00406683
mov ebp, dword [0x42a930]
push dword [ebp + 0x24]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42a938]
mov edi, dword [ebp + 0x24]
add edi, dword [0x42a8cc]
imul ebx, edi
mov ebp, dword [0x42a940]
mov edi, dword [ebp + 0x24]
add edi, dword [0x42a898]
imul ebx, edi
mov ebp, dword [0x42a948]
mov edi, dword [ebp + 0x24]
add edi, dword [0x42a894]
imul ebx, edi
mov dword [0x42a8c8], ebx
mov ebx, dword [0x42a8c8]
and ebx, ebx
je 0x4042eb
push str.Key_9_Pressed
push 0
push 0
call fcn.00406683
mov ebp, dword [0x42a930]
push dword [ebp + 0x28]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42a938]
mov edi, dword [ebp + 0x28]
add edi, dword [0x42a8cc]
imul ebx, edi
mov ebp, dword [0x42a940]
mov edi, dword [ebp + 0x28]
add edi, dword [0x42a898]
imul ebx, edi
mov ebp, dword [0x42a948]
mov edi, dword [ebp + 0x28]
add edi, dword [0x42a894]
imul ebx, edi
mov dword [0x42a8a0], ebx
mov ebx, dword [0x42a8a0]
and ebx, ebx
je 0x404355
push str.Key_10_Pressed
push 0
push 0
call fcn.00406683
mov ebp, dword [0x42a930]
push dword [ebp + 0x2c]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42a938]
mov edi, dword [ebp + 0x2c]
add edi, dword [0x42a8cc]
imul ebx, edi
mov ebp, dword [0x42a940]
mov edi, dword [ebp + 0x2c]
add edi, dword [0x42a898]
imul ebx, edi
mov ebp, dword [0x42a948]
mov edi, dword [ebp + 0x2c]
add edi, dword [0x42a894]
imul ebx, edi
mov dword [0x42a8a4], ebx
mov ebx, dword [0x42a8a4]
and ebx, ebx
je 0x4043bf
push str.Key_11_Pressed
push 0
push 0
call fcn.00406683
mov ebp, dword [0x42a930]
push dword [ebp + 0x30]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x42a938]
mov edi, dword [ebp + 0x30]
add edi, dword [0x42a8cc]
imul ebx, edi
mov ebp, dword [0x42a940]
mov edi, dword [ebp + 0x30]
add edi, dword [0x42a898]
imul ebx, edi
mov ebp, dword [0x42a948]
mov edi, dword [ebp + 0x30]
add edi, dword [0x42a894]
imul ebx, edi
mov dword [0x42a8a8], ebx
mov ebx, dword [0x42a8a8]
and ebx, ebx
je 0x404429
push str.Key_12_Pressed
push 0
push 0
call fcn.00406683
mov dword [0x42a89c], 0
mov dword [0x42a8ac], 0
mov dword [0x42a8b0], 0
mov dword [0x42a8b4], 0
mov dword [0x42a8b8], 0
mov dword [0x42a8bc], 0
mov dword [0x42a8c0], 0
mov dword [0x42a8c4], 0
mov dword [0x42a8c8], 0
mov dword [0x42a8a0], 0
mov dword [0x42a8a4], 0
mov dword [0x42a8a8], 0
mov ebx, dword [0x42a85c]
cmp ebx, 0x10
jne 0x4044b1
jmp 0x404ef8
call fcn.00411270
push eax
mov ebx, 1
cmp ebx, dword [esp]
jne 0x4044e5
call fcn.00411290
mov ebx, eax
and ebx, ebx
jne 0x4044e0
push 0x4140f7
push str.http:__www.cheathappens.com
push str.iexplore
call fcn.00407667
jmp 0x404597
mov ebx, 2
cmp ebx, dword [esp]
jne 0x404513
call fcn.00411290
mov ebx, eax
and ebx, ebx
jne 0x40450e
push 0x4140f7
push str.www.cheathappens.com_trainer_troubleshooting.asp
push str.iexplore
call fcn.00407667
jmp 0x404597
mov ebx, 3
cmp ebx, dword [esp]
jne 0x404597
call fcn.00411290
mov ebx, eax
and ebx, ebx
jne 0x404597
push dword [0x42aff4]
push 0
push 0x4140f7
mov edx, dword [0x42a850]
push dword [0x42aff4]
call fcn.00413130
mov edx, str.help.txt
call fcn.00413130
inc dword [0x42aff4]
push str.notepad.exe
mov edx, dword [0x427d5c]
add dword [esp + 4], edx
call fcn.0040764d
pop dword [0x42aff4]
mov ebx, dword [0x42a84c]
cmp ebx, 1
jne 0x404597
push 0
push 0x4140f7
push str.Custom_Key_List.txt
push str.notepad.exe
call fcn.0040764d
pop eax
push dword [0x42a888]
push 1
call fcn.00410980
mov eax, 1
call fcn.0042e050
jmp 0x40398c
push 0
call 0x404f12
push dword [0x42a7f0]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.004068b9
call fcn.00407724
call fcn.004077e4
call fcn.004100df
call fcn.0041115b
call fcn.0041287d
call fcn.0041307c
ret