Function at 0x407c60
Capabilities:
Contain obfuscated stackstrings
Create directory
Create thread
Move file
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x420a08
mov eax, dword fs:[0]
push eax
sub esp, 0x1d8
mov eax, dword [0x42c008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call dword [sym.imp.KERNEL32.dll_FreeConsole]
call fcn.00407940
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x407450
push 0
push 0
call esi
call fcn.00408570
mov ecx, eax
call fcn.00409220
push eax
lea ecx, [ebp - 0x94]
call fcn.0040aa10
mov ecx, eax
mov dword [ebp - 4], 0
call fcn.00404020
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0040a940
call fcn.00408650
mov ecx, eax
call fcn.00409210
push eax
lea ecx, [ebp - 0x94]
call fcn.0040aa10
mov ecx, eax
mov dword [ebp - 4], 1
call fcn.00404020
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0040a940
call fcn.00408710
mov ecx, eax
call fcn.00409200
push eax
lea ecx, [ebp - 0x94]
call fcn.0040aa10
mov ecx, eax
mov dword [ebp - 4], 2
call fcn.00404020
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0040a940
push 0
push 0
push 0
push 0x405810
push 0
push 0
call esi
cmp byte [0x42c9d2], 0
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
jne 0x407d88
push 0xfa
call esi
cmp byte [0x42c9d2], 0
je 0x407d78
push 0x34
call fcn.0041e645
mov edi, eax
mov dword [ebp - 0x74], edi
mov ecx, edi
mov dword [ebp - 4], 3
call fcn.00407440
push ecx
push 0x65
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.USER32.dll_LoadIconA]
push eax
sub esp, 8
mov ecx, edi
call fcn.00419210
push 0
push str.The_Cheat_Activation_Process_Is_Launching.
push str.Your_License_Access_Is_Accepted
mov ecx, eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 4], 0xffffffff
call fcn.00419780
sub esp, 0x18
mov ecx, esp
call fcn.00402490
call fcn.00402510
add esp, 0x18
cmp dword [0x42c9d4], 0
jne 0x407e07
push 0xfa
call esi
cmp dword [0x42c9d4], 0
je 0x407df7
push 0
call fcn.004087e0
mov ecx, eax
call fcn.004091f0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
call fcn.004088c0
mov ecx, eax
call fcn.004091e0
mov ecx, eax
call fcn.00401c80
push str..MRC
lea ecx, [ebp - 0xc4]
call fcn.0040aa10
mov dword [ebp - 0x74], eax
mov dword [ebp - 4], 4
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000001f
jns 0x407e5b
dec eax
or eax, 0xffffffe0
inc eax
lea edx, [eax + 1]
lea ecx, [ebp - 0xac]
call fcn.00403110
mov dword [ebp - 0x7c], eax
push 0x424918
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 5
call fcn.0040aa10
mov ebx, eax
push 0x4245e8
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 6
call fcn.0040aa10
mov edi, eax
mov byte [ebp - 4], 7
call fcn.004089a0
mov ecx, eax
call fcn.004091d0
push eax
lea ecx, [ebp - 0xf4]
call fcn.0040aa10
push edi
mov edx, eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xdc]
call fcn.0040d160
push ebx
mov edx, eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x70]
call fcn.0040d160
push dword [ebp - 0x7c]
mov edx, eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x94]
call fcn.0040d160
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x40]
push dword [ebp - 0x74]
mov edx, eax
call fcn.0040d160
add esp, 0x10
lea ecx, [ebp - 0x94]
call fcn.0040a940
lea ecx, [ebp - 0x70]
call fcn.0040a940
lea ecx, [ebp - 0xdc]
call fcn.0040a940
lea ecx, [ebp - 0xf4]
call fcn.0040a940
lea ecx, [ebp - 0x10c]
call fcn.0040a940
lea ecx, [ebp - 0x124]
call fcn.0040a940
lea ecx, [ebp - 0xac]
call fcn.0040a940
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x14
call fcn.0040a940
push str..MRC
lea ecx, [ebp - 0x1e4]
call fcn.0040aa10
mov dword [ebp - 0x7c], eax
mov byte [ebp - 4], 0x15
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000001f
jns 0x407f7f
dec eax
or eax, 0xffffffe0
inc eax
lea edx, [eax + 1]
lea ecx, [ebp - 0x1cc]
call fcn.00403110
mov dword [ebp - 0x74], eax
push 0x424918
lea ecx, [ebp - 0x1b4]
mov byte [ebp - 4], 0x16
call fcn.0040aa10
mov ebx, eax
push 0x4245e8
lea ecx, [ebp - 0x19c]
mov byte [ebp - 4], 0x17
call fcn.0040aa10
mov edi, eax
mov byte [ebp - 4], 0x18
call fcn.00408a80
mov ecx, eax
call fcn.004091c0
push eax
lea ecx, [ebp - 0x184]
call fcn.0040aa10
push edi
mov edx, eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x16c]
call fcn.0040d160
push ebx
mov edx, eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x154]
call fcn.0040d160
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x13c]
push dword [ebp - 0x74]
mov edx, eax
call fcn.0040d160
push dword [ebp - 0x7c]
mov edx, eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x70]
call fcn.0040d160
add esp, 0x10
lea ecx, [ebp - 0x13c]
call fcn.0040a940
lea ecx, [ebp - 0x154]
call fcn.0040a940
lea ecx, [ebp - 0x16c]
call fcn.0040a940
lea ecx, [ebp - 0x184]
call fcn.0040a940
lea ecx, [ebp - 0x19c]
call fcn.0040a940
lea ecx, [ebp - 0x1b4]
call fcn.0040a940
lea ecx, [ebp - 0x1cc]
call fcn.0040a940
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 4], 0x25
call fcn.0040a940
mov eax, dword [0x42c9d4]
cmp eax, 1
jne 0x4080ae
lea ecx, [ebp - 0x40]
call fcn.0040a8c0
mov edi, eax
call fcn.00408b60
mov ecx, eax
call fcn.004091b0
mov edx, edi
mov ecx, eax
call fcn.00401a20
mov eax, dword [0x42c9d4]
cmp eax, 2
jne 0x4080d2
lea ecx, [ebp - 0x40]
call fcn.0040a8c0
mov edi, eax
call fcn.00408c40
mov ecx, eax
call fcn.004091a0
mov edx, edi
mov ecx, eax
call fcn.00401a20
push 0x96
call esi
call fcn.00407830
test al, al
je 0x408111
mov ecx, dword [ebp - 0x78]
push 0
push str.Lets_play__Cheat_Already_Activated
push str.Start_PointBlank_Now__
call fcn.00419780
push 0x40040
push str.PBZepetto__Mr.Cheats_
push str.Cheat_Activated__Start_PointBlank_Now____nCheat_Menu_Appears_in_the_Lobby.
push dword [0x42c9d8]
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call fcn.00408d20
mov ecx, eax
call fcn.00409190
mov edi, dword [sym.imp.USER32.dll_FindWindowA]
push eax
call edi
test eax, eax
jne 0x408149
nop dword [eax]
push 0x64
call esi
push 0
call fcn.00408d20
mov ecx, eax
call fcn.00409190
push eax
call edi
test eax, eax
je 0x408130
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x8000001f
jns 0x40815b
dec eax
or eax, 0xffffffe0
inc eax
lea edx, [eax + 1]
lea ecx, [ebp - 0x10c]
call fcn.00402ea0
mov ebx, eax
push 0x4245e8
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x26
call fcn.0040aa10
mov edi, eax
mov byte [ebp - 4], 0x27
call fcn.00408df0
mov ecx, eax
call fcn.00409180
push eax
lea ecx, [ebp - 0xac]
call fcn.0040aa10
push edi
mov edx, eax
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xc4]
call fcn.0040d160
push ebx
mov edx, eax
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x58]
call fcn.0040d160
add esp, 8
lea ecx, [ebp - 0xc4]
call fcn.0040a940
lea ecx, [ebp - 0xac]
call fcn.0040a940
lea ecx, [ebp - 0x124]
call fcn.0040a940
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x2e
call fcn.0040a940
push 0
lea ecx, [ebp - 0x58]
call fcn.0040a8c0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov edi, dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
call edi
and eax, 0x80000001
jns 0x408216
dec eax
or eax, 0xfffffffe
inc eax
lea edx, [eax + 1]
lea ecx, [ebp - 0xdc]
call fcn.00403360
mov dword [ebp - 0x74], eax
mov byte [ebp - 4], 0x2f
call edi
and eax, 0x80000001
jns 0x408239
dec eax
or eax, 0xfffffffe
inc eax
lea edx, [eax + 1]
lea ecx, [ebp - 0xf4]
call fcn.00403360
mov ebx, eax
mov byte [ebp - 4], 0x30
call edi
and eax, 0x80000001
jns 0x40825b
dec eax
or eax, 0xfffffffe
inc eax
lea edx, [eax + 1]
lea ecx, [ebp - 0x13c]
call fcn.00403360
mov edi, eax
mov byte [ebp - 4], 0x31
call fcn.00408ed0
mov ecx, eax
call fcn.00409170
push eax
lea ecx, [ebp - 0x154]
call fcn.0040aa10
push eax
lea edx, [ebp - 0x58]
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x16c]
call fcn.0040d230
push edi
mov edx, eax
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x184]
call fcn.0040d160
push 0x4249ac
mov edx, eax
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x19c]
call fcn.0040d110
push ebx
mov edx, eax
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x1b4]
call fcn.0040d160
push 0x4249ac
mov edx, eax
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x1cc]
call fcn.0040d110
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x1e4]
push dword [ebp - 0x74]
mov edx, eax
call fcn.0040d160
push str..dll
mov edx, eax
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x28]
call fcn.0040d110
add esp, 0x1c
lea ecx, [ebp - 0x1e4]
call fcn.0040a940
lea ecx, [ebp - 0x1cc]
call fcn.0040a940
lea ecx, [ebp - 0x1b4]
call fcn.0040a940
lea ecx, [ebp - 0x19c]
call fcn.0040a940
lea ecx, [ebp - 0x184]
call fcn.0040a940
lea ecx, [ebp - 0x16c]
call fcn.0040a940
lea ecx, [ebp - 0x154]
call fcn.0040a940
lea ecx, [ebp - 0x13c]
call fcn.0040a940
lea ecx, [ebp - 0xf4]
call fcn.0040a940
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x43
call fcn.0040a940
lea ecx, [ebp - 0x28]
call fcn.0040a8c0
push eax
lea ecx, [ebp - 0x40]
call fcn.0040a8c0
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_rename]
mov edx, 0x3b
add esp, 8
lea ecx, [edx - 0x3a]
call fcn.004029f0
mov edx, 0x17
push eax
lea ecx, [edx - 0x16]
call fcn.004029f0
mov edx, 0x7e4
push eax
lea ecx, [edx - 0x28]
call fcn.004029f0
mov edx, 0xc
push eax
lea ecx, [edx - 0xb]
call fcn.004029f0
mov edx, 0x1f
push eax
lea ecx, [edx - 0x1e]
call fcn.004029f0
lea ecx, [ebp - 0x28]
mov edx, eax
call fcn.0040a8c0
mov ecx, eax
call fcn.00401b20
add esp, 0x10
call fcn.00408fa0
mov ecx, eax
call fcn.00409160
mov ecx, eax
call fcn.00401e10
mov dword [0x42c9dc], eax
test eax, eax
jne 0x40844e
lea ecx, [ebp - 0x28]
call fcn.0040a8c0
push eax
lea ecx, [ebp - 0x94]
call fcn.0040aa10
lea edx, [ebp - 0x94]
mov byte [ebp - 4], 0x44
call fcn.00401ee0
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x43
mov bl, al
call fcn.0040a940
test bl, bl
jne 0x408480
lea ecx, [ebp - 0x28]
call fcn.0040a8c0
push eax
lea ecx, [ebp - 0x94]
call fcn.0040aa10
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x45
call fcn.00407af0
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x43
call fcn.0040a940
mov ecx, dword [ebp - 0x78]
push 0
push str.Successfully_Activated_Cheat__Enjoy_The_Cheat_And_Happy_Playing.
push str.PBZepetto__Mr.Cheats_
call fcn.00419780
push 0x7d0
call esi
sub esp, 0x18
mov ecx, esp
call fcn.00402490
call fcn.00402510
mov ecx, esp
push str._MRC.pf
call fcn.0040aa10
call fcn.00402780
mov ecx, esp
push str.Mr.Cheats.pf
call fcn.0040aa10
call fcn.00402780
lea ecx, [ebp - 0xac]
call fcn.00402c80
push eax
mov edx, 0x4244b8
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0xc4]
call fcn.0040d0a0
add esp, 4
mov byte [ebp - 4], 0x47
mov ecx, esp
mov edx, eax
push str..pf
call fcn.0040d110
add esp, 4
call fcn.00402780
add esp, 0x18
lea ecx, [ebp - 0xc4]
call fcn.0040a940
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x43
call fcn.0040a940
push 0x3e8
call esi
mov ecx, dword [ebp - 0x78]
push 0
mov eax, dword [ecx]
call dword [eax + 8]
sub esp, 0x18
mov bl, 1
mov esi, esp
call fcn.00409070
mov ecx, eax
call fcn.00409150
push eax
mov ecx, esi
call fcn.0040aa10
mov cl, bl
call fcn.00403f10
add esp, 0x18
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]