Function at 0x401000
Capabilities:
Authenticate hmac
Check for time delay via gettickcount
Check internet connectivity via wininet
Download url
Log keystrokes via polling
Parse pe header
Receive data
Resolve function by parsing pe exports

Disassembly:
push 0x364
push 0
push 0x53fca0
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x53fca4], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x53fca0], eax
call fcn.00410250
call fcn.004101d4
call fcn.0040f870
call fcn.0040e5f8
call fcn.0040ddb2
call fcn.0040dc8a
call fcn.0040d6cf
call fcn.0040d0b5
call fcn.0040cfb0
call fcn.0040c903
call fcn.0040c7c7
call fcn.0040bb8b
call fcn.0040d610
call fcn.0040bcb0
mov dword [0x53fcac], eax
mov ebp, str.RIFFp
push ebp
push 0
call fcn.0040c122
mov ebp, 0x48e032
push ebp
push 1
call fcn.0040c122
mov ebp, str.RIFF
push ebp
push 3
call fcn.0040c122
mov ebp, str.RIFF__f
push ebp
push 4
call fcn.0040c122
mov ebp, str.RIFF__
push ebp
push 5
call fcn.0040c122
mov ebp, str.RIFF_f_
push ebp
push 6
call fcn.0040c122
call sub.KERNEL32.dll_IsDebuggerPresent
and eax, eax
je 0x4010fa
push 0x75009553
inc ecx
ret
call sub.KERNEL32.dll_GetTickCount
mov dword [0x53fcc4], eax
mov eax, dword [0x540424]
push eax
push eax
call fcn.0040c91f
lea ecx, [0x53fcc8]
pop edx
call fcn.0040b000
mov eax, dword [0x540424]
push eax
push eax
push dword [0x53fcc8]
call fcn.0040cee7
lea ecx, [0x53fcc8]
pop edx
call fcn.0040b000
mov edx, 0x41b01c
lea ecx, [0x53fccc]
call fcn.0040b018
mov edx, 0x41b01c
lea ecx, [0x53fcd0]
call fcn.0040b018
mov edx, 0x41b01c
lea ecx, [0x53fcd4]
call fcn.0040b018
mov dword [0x53fcd8], 0
mov eax, dword [0x540424]
push eax
push eax
push dword [0x540424]
call fcn.0040c91f
inc dword [0x540424]
push 0
mov edx, dword [0x53eb78]
add dword [esp + 4], edx
call fcn.0040fa60
pop dword [0x540424]
push 0
call fcn.0040fa80
mov dword [0x53fcdc], eax
mov dword [0x53fce0], 1
mov ebx, dword [0x53fcdc]
add ebx, 0xfffffff8
cmp ebx, dword [0x53fce0]
jl 0x4011fc
push 0
call fcn.0040faf0
mov byte [0x53fec8], al
mov ebx, dword [0x53fce4]
movzx eax, byte [0x53fec8]
add ebx, eax
mov dword [0x53fce4], ebx
inc dword [0x53fce0]
jmp 0x4011bf
push 0
call fcn.0040fb50
mov dword [0x53fce8], eax
push 0
call fcn.0040fb50
mov dword [0x53fcec], eax
push 0
call fcn.0040f800
mov eax, dword [0x53fce4]
mov dword [0x53fcf0], eax
push dword [0x53fcc8]
push 0
call fcn.0040fa60
mov ebx, eax
and ebx, ebx
jle 0x4015d3
mov dword [0x53fce0], 1
mov eax, 0x3b8
cmp eax, dword [0x53fce0]
jl 0x401276
push 0
call fcn.0040fbb0
mov dword [0x53fcf4], eax
inc dword [0x53fce0]
jmp 0x401252
mov dword [0x53fce0], 0x3b9
mov eax, 0x3c0
cmp eax, dword [0x53fce0]
jl 0x401319
push 0
call fcn.0040fbb0
mov dword [0x53fcf4], eax
mov eax, dword [0x540424]
push eax
push eax
push dword [0x540424]
push 0
mov eax, dword [0x53fcf4]
cdq
push edx
push eax
call fcn.0040b630
inc dword [0x540424]
mov edx, dword [0x53eb78]
add dword [esp], edx
call fcn.0040b130
pop dword [0x540424]
mov dword [0x53fcf4], eax
mov edx, dword [0x53fccc]
push dword [0x540424]
call fcn.004102a0
mov eax, dword [0x540424]
push eax
push eax
push dword [0x53fcf4]
call fcn.0040b220
pop eax
lea ecx, [0x53fccc]
pop edx
call fcn.0040b000
inc dword [0x53fce0]
jmp 0x401280
push dword [0x53fccc]
call fcn.0040abf7
mov dword [0x53fcf4], eax
mov ebx, dword [0x53fcf4]
xor ebx, 0x98989898
mov dword [0x53fcf4], ebx
mov eax, dword [0x53fcf4]
mov dword [0x53fcf8], eax
mov eax, dword [0x540424]
push eax
push eax
push 0xa
push dword [0x540424]
mov edx, str.0000000000
call fcn.004102a0
mov eax, dword [0x540424]
push eax
push eax
push dword [0x53fcf4]
call fcn.0040b240
pop eax
inc dword [0x540424]
mov edx, dword [0x53eb78]
add dword [esp], edx
call fcn.0040b310
lea ecx, [0x53fccc]
pop edx
call fcn.0040b000
mov dword [0x53fce0], 0x3c1
mov eax, 0x3c8
cmp eax, dword [0x53fce0]
jl 0x401437
push 0
call fcn.0040fbb0
mov dword [0x53fcf4], eax
mov eax, dword [0x540424]
push eax
push eax
push dword [0x540424]
push 0
mov eax, dword [0x53fcf4]
cdq
push edx
push eax
call fcn.0040b630
inc dword [0x540424]
mov edx, dword [0x53eb78]
add dword [esp], edx
call fcn.0040b130
pop dword [0x540424]
mov dword [0x53fcf4], eax
mov edx, dword [0x53fcd0]
push dword [0x540424]
call fcn.004102a0
mov eax, dword [0x540424]
push eax
push eax
push dword [0x53fcf4]
call fcn.0040b220
pop eax
lea ecx, [0x53fcd0]
pop edx
call fcn.0040b000
inc dword [0x53fce0]
jmp 0x40139e
push dword [0x53fcd0]
call fcn.0040abf7
mov dword [0x53fcfc], eax
mov dword [0x53fce0], 0x3c9
mov eax, 0x3d0
cmp eax, dword [0x53fce0]
jl 0x4014ea
push 0
call fcn.0040fbb0
mov dword [0x53fcf4], eax
mov eax, dword [0x540424]
push eax
push eax
push dword [0x540424]
push 0
mov eax, dword [0x53fcf4]
cdq
push edx
push eax
call fcn.0040b630
inc dword [0x540424]
mov edx, dword [0x53eb78]
add dword [esp], edx
call fcn.0040b130
pop dword [0x540424]
mov dword [0x53fcf4], eax
mov edx, dword [0x53fcd4]
push dword [0x540424]
call fcn.004102a0
mov eax, dword [0x540424]
push eax
push eax
push dword [0x53fcf4]
call fcn.0040b220
pop eax
lea ecx, [0x53fcd4]
pop edx
call fcn.0040b000
inc dword [0x53fce0]
jmp 0x401451
push dword [0x53fcd4]
call fcn.0040abf7
mov dword [0x53fcf4], eax
mov eax, dword [0x53fcf4]
mov dword [0x53fd00], eax
mov dword [0x53fce0], 0x3d1
mov ebx, dword [0x53fd00]
dec ebx
cmp ebx, dword [0x53fce0]
jl 0x401534
push 0
call fcn.0040fbb0
mov dword [0x53fcf4], eax
inc dword [0x53fce0]
jmp 0x40150e
mov eax, dword [0x53fd00]
mov dword [0x53fce0], eax
mov ebx, dword [0x53fd00]
add ebx, 0x12
cmp ebx, dword [0x53fce0]
jl 0x401578
push 0
call fcn.0040fbb0
mov dword [0x53fcf4], eax
mov ebx, dword [0x53fcd8]
add ebx, dword [0x53fcf4]
mov dword [0x53fcd8], ebx
inc dword [0x53fce0]
jmp 0x40153e
mov ebx, dword [0x53fcfc]
xor ebx, dword [0x53fcd8]
mov dword [0x53fd04], ebx
mov ebx, dword [0x53fd04]
and ebx, ebx
jne 0x40159e
mov dword [0x53fd04], 0x63
mov ebx, dword [0x53fd04]
xor ebx, 0x98989898
mov dword [0x53fd04], ebx
mov eax, dword [0x53fcf8]
mov dword [0x53fd08], eax
mov ebx, dword [0x53fcf8]
cmp ebx, dword [0x53fd04]
jne 0x4015ca
jmp 0x4015d1
push 0x75009553
inc ecx
ret
jmp 0x4015da
push 0x25001876
inc eax
ret
mov ebx, dword [0x53fcec]
cmp ebx, dword [0x53fcdc]
jne 0x4015ea
jmp 0x4015f1
push 0x10047665
inc eax
ret
call sub.KERNEL32.dll_GetTickCount
mov dword [0x53fd0c], eax
mov ebx, dword [0x53fd0c]
sub ebx, dword [0x53fcc4]
cmp ebx, 0x3e8
jle 0x401616
push 0x9099542
inc eax
ret
mov dword [0x53fd10], 0x45a2a5
push 5
push 0x53ffcc
push 0
mov edx, dword [0x53ffcc]
call fcn.0040b020
mov eax, 0x15
push 4
call fcn.0040b040
push 5
push 0x53ffd4
push 0
mov edx, dword [0x53ffd4]
call fcn.0040b020
mov eax, 0x15
push 4
call fcn.0040b040
push 5
push 0x53ffdc
push 0
mov edx, dword [0x53ffdc]
call fcn.0040b020
mov eax, 0x15
push 4
call fcn.0040b040
push 5
push 0x53ffe4
push 0
mov edx, dword [0x53ffe4]
call fcn.0040b020
mov eax, 0x15
push 4
call fcn.0040b040
push 5
push 0x53ffec
push 0
mov edx, dword [0x53ffec]
call fcn.0040b020
mov eax, 0x15
push 4
call fcn.0040b040
push 0x3e8
call fcn.0040cfe0
mov dword [0x53fd14], eax
mov dword [0x53fce0], 1
mov eax, 0x14
cmp eax, dword [0x53fce0]
jl 0x401760
mov ebx, dword [0x53fce0]
mov ebp, dword [0x53ffd4]
shl ebx, 2
mov dword [ebp + ebx], 1
mov ebx, dword [0x53fce0]
mov ebp, dword [0x53ffdc]
shl ebx, 2
mov dword [ebp + ebx], 1
mov ebx, dword [0x53fce0]
mov ebp, dword [0x53ffe4]
shl ebx, 2
mov dword [ebp + ebx], 1
inc dword [0x53fce0]
jmp 0x401706
mov edx, str.Template
lea ecx, [0x53fd30]
call fcn.0040b018
mov eax, dword [0x540424]
push eax
push eax
call fcn.0040f74d
lea ecx, [0x53fd18]
pop edx
call fcn.0040b000
push dword [0x540424]
mov edx, dword [0x53fd18]
push dword [0x540424]
call fcn.004102a0
mov edx, str.CH.dll
call fcn.004102a0
inc dword [0x540424]
push 0
mov edx, dword [0x53eb78]
add dword [esp + 4], edx
call fcn.0040f9a0
pop dword [0x540424]
and eax, eax
je 0x4017f8
mov ebp, 0x53daf2
mov ebx, ebp
mov ebp, 0x53cef2
sub ebx, ebp
push ebx
mov ebp, 0x53cef2
push ebp
push 0
call fcn.0040fc10
push 0
call fcn.0040f800
jmp 0x4017f8
push dword [0x540424]
mov edx, dword [0x53fd18]
push dword [0x540424]
call fcn.004102a0
mov edx, str.help.txt
call fcn.004102a0
inc dword [0x540424]
push 0
mov edx, dword [0x53eb78]
add dword [esp + 4], edx
call fcn.0040f9a0
pop dword [0x540424]
and eax, eax
je 0x401868
mov ebp, 0x53eb77
mov ebx, ebp
mov ebp, 0x53daf2
sub ebx, ebp
push ebx
mov ebp, 0x53daf2
push ebp
push 0
call fcn.0040fc10
push 0
call fcn.0040f800
jmp 0x401877
push str.Could_not_create_HELP.TXT_file.
push str.Error
call fcn.0040c804
push str.CH_Trainer_Keys.dat
push 0
call fcn.0040fa60
mov dword [0x53fcac], eax
mov ebx, dword [0x53fcac]
and ebx, ebx
jle 0x4018a9
mov dword [0x53fd48], 1
push 2
call fcn.0040f800
push 0x12c
call sub.KERNEL32.dll_Sleep
call fcn.0040ad6b
push str.Authenticating_Trainer......
push 0
push 8
call fcn.0040bc9a
push 0
push 0
call sub.WININET.dll_InternetGetConnectedState
and eax, eax
je 0x4018e1
jmp 0x40190d
push dword [0x53fd08]
call fcn.0040a5e5
mov ebx, eax
and ebx, ebx
jne 0x40190d
push 0
push str.This_trainer_must_be_authenticated_before_it_can_be_used._Please_connect_this_computer_to_the_Internet_or_obtain_an_offline_key_from_cheathappens.com_then_re_run_the_trainer.
push str.No_Internet_Connection_
call fcn.0040c7d5
push 0x9099542
inc eax
ret
mov eax, dword [0x540424]
push eax
push eax
call fcn.0040f74d
mov edx, str.black.txt
call fcn.004102a0
lea ecx, [0x53fd4c]
pop edx
call fcn.0040b000
push dword [0x540424]
mov edx, str.http:__www.cheathappens.com_unauthorized_
call fcn.004102a0
mov eax, dword [0x540424]
push eax
push eax
mov ebx, dword [0x53fd08]
xor ebx, 0x7b3d89b
push ebx
call fcn.0040b240
pop eax
mov edx, str..zip
call fcn.004102a0
lea ecx, [0x53fd50]
pop edx
call fcn.0040b000
mov edx, str.http:__www.cheathappens.com_unauthorized_0.zip
lea ecx, [0x53fd54]
call fcn.0040b018
mov edx, dword [0x53fd50]
push dword [0x540424]
call fcn.004102a0
lea ecx, [0x53fd58]
pop edx
call fcn.0040b000
mov edx, dword [0x53fd54]
push dword [0x540424]
call fcn.004102a0
lea ecx, [0x53fd5c]
pop edx
call fcn.0040b000
push 0
push 0
mov eax, dword [0x53fd4c]
push eax
mov eax, dword [0x53fd5c]
push eax
push 0
call sub.URLMON.dll_URLDownloadToFileA
mov dword [0x53fd60], eax
mov ebx, dword [0x53fd60]
and ebx, ebx
jne 0x4019ea
jmp 0x401a16
push dword [0x53fd08]
call fcn.0040a5e5
mov ebx, eax
and ebx, ebx
jne 0x401a16
push 0
push str.This_trainer_must_be_authenticated_before_it_can_be_used._Please_connect_this_computer_to_the_Internet_or_obtain_an_offline_key_from_cheathappens.com_then_re_run_the_trainer.
push str.No_Internet_Connection_
call fcn.0040c7d5
push 0x9099542
inc eax
ret
push 0
push 0
mov eax, dword [0x53fd4c]
push eax
mov eax, dword [0x53fd58]
push eax
push 0
call sub.URLMON.dll_URLDownloadToFileA
mov dword [0x53fd64], eax
mov ebx, dword [0x53fd64]
and ebx, ebx
jne 0x401a6f
push 0
push 3
call fcn.0040de22
push str.Invalid_Trainer_User
push 0
push 8
call fcn.0040bc9a
call fcn.0040a20a
jmp 0x401a3b
mov ebx, dword [0x53fd60]
and ebx, ebx
je 0x401a91
push dword [0x53fd08]
call fcn.0040a5e5
mov ebx, eax
and ebx, ebx
jne 0x401a91
mov eax, 1
jmp 0x401a93
xor eax, eax
and eax, eax
je 0x401aa1
mov dword [0x53fd10], 0
lea ebp, [0x53fecc]
lea eax, [ebp]
push eax
call sub.USER32.dll_GetKeyboardState
movsx eax, byte [ebp + 0x90]
push eax
pop dword [0x53fd68]
mov ebx, dword [0x53fd68]
cmp ebx, 1
jne 0x401adb
mov edx, 0x41b074
lea ecx, [0x53fd6c]
call fcn.0040b018
jmp 0x401aeb
mov edx, str.OFF.
lea ecx, [0x53fd6c]
call fcn.0040b018
mov eax, dword [0x540424]
push eax
push eax
mov edx, str.Run_Game_and_then_press_F1_at_Main_Menu._Numlock_is
call fcn.004102a0
mov edx, dword [0x53fd6c]
call fcn.004102a0
inc dword [0x540424]
push 0
push 8
mov edx, dword [0x53eb78]
add dword [esp + 8], edx
call fcn.0040bc9a
pop dword [0x540424]
mov eax, 0x12c
call fcn.0040ce39
mov dword [0x53fd70], eax
mov ebx, dword [0x53fd70]
cmp ebx, 0x63
jne 0x401bf6
mov eax, dword [0x540424]
push eax
push eax
push dword [0x540424]
call fcn.0040c91f
inc dword [0x540424]
push 0
mov edx, dword [0x53eb78]
add dword [esp + 4], edx
call fcn.0040fa60
pop dword [0x540424]
push 0
call fcn.0040fa80
mov dword [0x53fcdc], eax
mov dword [0x53fce0], 1
mov ebx, dword [0x53fcdc]
add ebx, 0xfffffffc
cmp ebx, dword [0x53fce0]
jl 0x401bbd
push 0
call fcn.0040fbb0
mov dword [0x53fcf4], eax
inc dword [0x53fce0]
jmp 0x401b95
push 0
call fcn.0040fb50
mov dword [0x53fcec], eax
push 0
call fcn.0040f800
mov ebx, dword [0x53fcec]
cmp ebx, dword [0x53fcdc]
jne 0x401be6
jmp 0x401be9
inc eax
push esp
ret
mov ebx, dword [0x53fd64]
and ebx, ebx
jne 0x401bf6
inc eax
push esp
ret
call fcn.0040a20a
push 0xa
call sub.KERNEL32.dll_Sleep
push 0x70
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
and ebx, ebx
je 0x401aa1
mov edx, str.Crysis.exe
lea ecx, [0x53fd74]
call fcn.0040b018
call fcn.0040981c
mov ebx, dword [0x53fd78]
and ebx, ebx
jne 0x401c74
push 0
push 4
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
push 0x12c
call sub.KERNEL32.dll_Sleep
push str.Game_not_Found__Run_Game_and_then_press_F1_at_Main_Menu.
push 0
push 8
call fcn.0040bc9a
jmp 0x401a6f
mov edx, str.CH.dll
lea ecx, [0x53fd7c]
call fcn.0040b018
mov edx, dword [0x53fd18]
push dword [0x540424]
call fcn.004102a0
mov edx, dword [0x53fd7c]
call fcn.004102a0
lea ecx, [0x53fd80]
pop edx
call fcn.0040b000
call fcn.00409861
mov edx, str.CryAISystem.dll
lea ecx, [0x53fd84]
call fcn.0040b018
call fcn.0040981c
call fcn.0040a185
call fcn.0040a20a
mov ebx, dword [0x53fd3c]
and ebx, ebx
jne 0x401d11
mov ebx, dword [0x53fd88]
and ebx, ebx
jne 0x401d11
mov ebx, dword [0x53fd8c]
and ebx, ebx
jne 0x401d11
push str.Game_not_Found__Run_Game_and_then_press_F1_at_Main_Menu.
push 0
push 8
call fcn.0040bc9a
jmp 0x401a6f
push 0
push 3
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
push str.Game_found__Trainer_Activated_
push 0
push 8
call fcn.0040bc9a
mov ebx, dword [0x53fd10]
cmp ebx, 0x45a2a5
jne 0x401de2
mov ebp, dword [0x53ffcc]
mov dword [ebp + 4], 0x61
mov dword [ebp + 8], 0x62
mov dword [ebp + 0xc], 0x63
mov dword [ebp + 0x10], 0x64
mov dword [ebp + 0x14], 0x65
mov dword [ebp + 0x18], 0x66
mov dword [ebp + 0x1c], 0x67
mov dword [ebp + 0x20], 0x68
mov dword [ebp + 0x24], 0x69
mov dword [ebp + 0x28], 0x6e
mov dword [ebp + 0x2c], 0x6b
mov dword [ebp + 0x30], 0x6f
mov dword [ebp + 0x34], 0x6a
mov dword [ebp + 0x38], 0x6d
mov dword [ebp + 0x3c], 0
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0
mov dword [ebp + 0x48], 0
mov dword [ebp + 0x4c], 0
mov dword [ebp + 0x50], 0
push str.CH_Trainer_Keys.dat
push 0
call fcn.0040fa60
mov dword [0x53fcac], eax
mov ebx, dword [0x53fcac]
and ebx, ebx
jle 0x401f55
mov dword [0x53fd48], 1
push 0
call fcn.0040fbb0
mov dword [0x53fd90], eax
mov dword [0x53fce0], 1
mov eax, dword [0x53fd90]
cmp eax, dword [0x53fce0]
jl 0x401f4b
mov eax, dword [0x540424]
push eax
push eax
push 0
call fcn.0040fc70
lea ecx, [0x53fd94]
pop edx
call fcn.0040b000
push dword [0x53fd94]
mov edx, str.SHIFT
pop ecx
call fcn.00410300
je 0x401e7f
mov ebx, dword [0x53fce0]
mov ebp, dword [0x53ffd4]
shl ebx, 2
mov dword [ebp + ebx], 0
push dword [0x53fd94]
mov edx, str.CTRL
pop ecx
call fcn.00410300
je 0x401ea9
mov ebx, dword [0x53fce0]
mov ebp, dword [0x53ffdc]
shl ebx, 2
mov dword [ebp + ebx], 0
push dword [0x53fd94]
mov edx, 0x41b207
pop ecx
call fcn.00410300
je 0x401ed3
mov ebx, dword [0x53fce0]
mov ebp, dword [0x53ffe4]
shl ebx, 2
mov dword [ebp + ebx], 0
push 0
call fcn.0040fbb0
push eax
mov ebx, dword [0x53fce0]
mov ebp, dword [0x53ffcc]
shl ebx, 2
pop dword [ebp + ebx]
mov eax, dword [0x540424]
push eax
push eax
push dword [0x540424]
push 0
mov ebx, dword [0x53fce0]
shl ebx, 2
mov eax, dword [ebp + ebx]
cdq
push edx
push eax
call fcn.0040b630
inc dword [0x540424]
mov edx, dword [0x53eb78]
add dword [esp], edx
call fcn.0040b130
pop dword [0x540424]
push eax
mov ebx, dword [0x53fce0]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x53fce0]
jmp 0x401e27
push 0
call fcn.0040f800
push 0x83
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3d
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3f
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x92
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x17
mov ebx, dword [0x53fd14]
add ebx, 5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 2
mov ebx, dword [0x53fd14]
add ebx, 6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x75
mov ebx, dword [0x53fd14]
add ebx, 7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 7
mov ebx, dword [0x53fd14]
add ebx, 8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc7
mov ebx, dword [0x53fd14]
add ebx, 9
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x47
mov ebx, dword [0x53fd14]
add ebx, 0xa
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x40
mov ebx, dword [0x53fd14]
add ebx, 0xb
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xc
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xd
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x48
mov ebx, dword [0x53fd14]
add ebx, 0xe
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x43
mov ebx, dword [0x53fd14]
add ebx, 0xf
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x83
mov ebx, dword [0x53fd14]
add ebx, 0x10
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3d
mov ebx, dword [0x53fd14]
add ebx, 0x11
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 4
mov ebx, dword [0x53fd14]
add ebx, 0x12
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3f
mov ebx, dword [0x53fd14]
add ebx, 0x13
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x92
mov ebx, dword [0x53fd14]
add ebx, 0x14
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x17
mov ebx, dword [0x53fd14]
add ebx, 0x15
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 1
mov ebx, dword [0x53fd14]
add ebx, 0x16
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x75
mov ebx, dword [0x53fd14]
add ebx, 0x17
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 7
mov ebx, dword [0x53fd14]
add ebx, 0x18
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc7
mov ebx, dword [0x53fd14]
add ebx, 0x19
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x41
mov ebx, dword [0x53fd14]
add ebx, 0x1a
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x34
mov ebx, dword [0x53fd14]
add ebx, 0x1b
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1c
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1d
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x48
mov ebx, dword [0x53fd14]
add ebx, 0x1e
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x43
mov ebx, dword [0x53fd14]
add ebx, 0x1f
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xd9
mov ebx, dword [0x53fd14]
add ebx, 0x20
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x41
mov ebx, dword [0x53fd14]
add ebx, 0x21
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x34
mov ebx, dword [0x53fd14]
add ebx, 0x22
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xd9
mov ebx, dword [0x53fd14]
add ebx, 0x23
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x9d
mov ebx, dword [0x53fd14]
add ebx, 0x24
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xdc
mov ebx, dword [0x53fd14]
add ebx, 0x25
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x26
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x27
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x28
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc3
mov ebx, dword [0x53fd14]
add ebx, 0x29
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x2a
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x2b
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x2c
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x2d
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x2e
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x2f
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x8b
mov ebx, dword [0x53fd14]
add ebx, 0x30
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x44
mov ebx, dword [0x53fd14]
add ebx, 0x31
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x24
mov ebx, dword [0x53fd14]
add ebx, 0x32
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 8
mov ebx, dword [0x53fd14]
add ebx, 0x33
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x83
mov ebx, dword [0x53fd14]
add ebx, 0x34
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3d
mov ebx, dword [0x53fd14]
add ebx, 0x35
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 8
mov ebx, dword [0x53fd14]
add ebx, 0x36
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3f
mov ebx, dword [0x53fd14]
add ebx, 0x37
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x92
mov ebx, dword [0x53fd14]
add ebx, 0x38
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x17
mov ebx, dword [0x53fd14]
add ebx, 0x39
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 1
mov ebx, dword [0x53fd14]
add ebx, 0x3a
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x75
mov ebx, dword [0x53fd14]
add ebx, 0x3b
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 7
mov ebx, dword [0x53fd14]
add ebx, 0x3c
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc7
mov ebx, dword [0x53fd14]
add ebx, 0x3d
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x40
mov ebx, dword [0x53fd14]
add ebx, 0x3e
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x14
mov ebx, dword [0x53fd14]
add ebx, 0x3f
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x64
mov ebx, dword [0x53fd14]
add ebx, 0x40
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x41
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x42
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x43
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3b
mov ebx, dword [0x53fd14]
add ebx, 0x44
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc6
mov ebx, dword [0x53fd14]
add ebx, 0x45
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc3
mov ebx, dword [0x53fd14]
add ebx, 0x46
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 0x47
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x48
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x49
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x4a
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x4b
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x4c
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x4d
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x4e
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x4f
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x83
mov ebx, dword [0x53fd14]
add ebx, 0x50
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3d
mov ebx, dword [0x53fd14]
add ebx, 0x51
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc
mov ebx, dword [0x53fd14]
add ebx, 0x52
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3f
mov ebx, dword [0x53fd14]
add ebx, 0x53
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x92
mov ebx, dword [0x53fd14]
add ebx, 0x54
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x17
mov ebx, dword [0x53fd14]
add ebx, 0x55
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 1
mov ebx, dword [0x53fd14]
add ebx, 0x56
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x75
mov ebx, dword [0x53fd14]
add ebx, 0x57
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xe
mov ebx, dword [0x53fd14]
add ebx, 0x58
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 0x59
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 0x5a
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 0x5b
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 0x5c
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc7
mov ebx, dword [0x53fd14]
add ebx, 0x5d
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x86
mov ebx, dword [0x53fd14]
add ebx, 0x5e
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x6c
mov ebx, dword [0x53fd14]
add ebx, 0x5f
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 1
mov ebx, dword [0x53fd14]
add ebx, 0x60
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x61
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x62
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x63
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x64
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf0
mov ebx, dword [0x53fd14]
add ebx, 0x65
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x41
mov ebx, dword [0x53fd14]
add ebx, 0x66
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf3
mov ebx, dword [0x53fd14]
add ebx, 0x67
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf
mov ebx, dword [0x53fd14]
add ebx, 0x68
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x10
mov ebx, dword [0x53fd14]
add ebx, 0x69
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x86
mov ebx, dword [0x53fd14]
add ebx, 0x6a
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x6c
mov ebx, dword [0x53fd14]
add ebx, 0x6b
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 1
mov ebx, dword [0x53fd14]
add ebx, 0x6c
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x6d
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x6e
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc3
mov ebx, dword [0x53fd14]
add ebx, 0x6f
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x70
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x71
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x72
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x73
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x74
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x75
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x76
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x77
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x78
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x79
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x7a
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x7b
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x7c
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x7d
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x7e
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x7f
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x83
mov ebx, dword [0x53fd14]
add ebx, 0x80
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3d
mov ebx, dword [0x53fd14]
add ebx, 0x81
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x82
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3f
mov ebx, dword [0x53fd14]
add ebx, 0x83
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x92
mov ebx, dword [0x53fd14]
add ebx, 0x84
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x17
mov ebx, dword [0x53fd14]
add ebx, 0x85
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 1
mov ebx, dword [0x53fd14]
add ebx, 0x86
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x75
mov ebx, dword [0x53fd14]
add ebx, 0x87
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 7
mov ebx, dword [0x53fd14]
add ebx, 0x88
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc7
mov ebx, dword [0x53fd14]
add ebx, 0x89
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x46
mov ebx, dword [0x53fd14]
add ebx, 0x8a
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x40
mov ebx, dword [0x53fd14]
add ebx, 0x8b
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x8c
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x8d
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x48
mov ebx, dword [0x53fd14]
add ebx, 0x8e
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x43
mov ebx, dword [0x53fd14]
add ebx, 0x8f
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x8b
mov ebx, dword [0x53fd14]
add ebx, 0x90
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x82
mov ebx, dword [0x53fd14]
add ebx, 0x91
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x84
mov ebx, dword [0x53fd14]
add ebx, 0x92
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x93
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x94
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x95
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc3
mov ebx, dword [0x53fd14]
add ebx, 0x96
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 0x97
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x98
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x99
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x9a
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x9b
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x9c
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x9d
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x9e
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x9f
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x8b
mov ebx, dword [0x53fd14]
add ebx, 0xa0
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x44
mov ebx, dword [0x53fd14]
add ebx, 0xa1
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x24
mov ebx, dword [0x53fd14]
add ebx, 0xa2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 8
mov ebx, dword [0x53fd14]
add ebx, 0xa3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x66
mov ebx, dword [0x53fd14]
add ebx, 0xa4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x81
mov ebx, dword [0x53fd14]
add ebx, 0xa5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x7c
mov ebx, dword [0x53fd14]
add ebx, 0xa6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x24
mov ebx, dword [0x53fd14]
add ebx, 0xa7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc
mov ebx, dword [0x53fd14]
add ebx, 0xa8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x84
mov ebx, dword [0x53fd14]
add ebx, 0xa9
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf4
mov ebx, dword [0x53fd14]
add ebx, 0xaa
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x75
mov ebx, dword [0x53fd14]
add ebx, 0xab
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x10
mov ebx, dword [0x53fd14]
add ebx, 0xac
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x83
mov ebx, dword [0x53fd14]
add ebx, 0xad
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3d
mov ebx, dword [0x53fd14]
add ebx, 0xae
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x10
mov ebx, dword [0x53fd14]
add ebx, 0xaf
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3f
mov ebx, dword [0x53fd14]
add ebx, 0xb0
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x92
mov ebx, dword [0x53fd14]
add ebx, 0xb1
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x17
mov ebx, dword [0x53fd14]
add ebx, 0xb2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 1
mov ebx, dword [0x53fd14]
add ebx, 0xb3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x75
mov ebx, dword [0x53fd14]
add ebx, 0xb4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 7
mov ebx, dword [0x53fd14]
add ebx, 0xb5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc7
mov ebx, dword [0x53fd14]
add ebx, 0xb6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x40
mov ebx, dword [0x53fd14]
add ebx, 0xb7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x14
mov ebx, dword [0x53fd14]
add ebx, 0xb8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 5
mov ebx, dword [0x53fd14]
add ebx, 0xb9
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xba
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xbb
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xbc
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3b
mov ebx, dword [0x53fd14]
add ebx, 0xbd
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc6
mov ebx, dword [0x53fd14]
add ebx, 0xbe
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc3
mov ebx, dword [0x53fd14]
add ebx, 0xbf
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xc0
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xc1
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xc2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xc3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xc4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xc5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xc6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xc7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xc8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xc9
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xca
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xcb
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xcc
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xcd
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xce
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xcf
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x83
mov ebx, dword [0x53fd14]
add ebx, 0xd0
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3d
mov ebx, dword [0x53fd14]
add ebx, 0xd1
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xd2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3f
mov ebx, dword [0x53fd14]
add ebx, 0xd3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x92
mov ebx, dword [0x53fd14]
add ebx, 0xd4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x17
mov ebx, dword [0x53fd14]
add ebx, 0xd5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 1
mov ebx, dword [0x53fd14]
add ebx, 0xd6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x75
mov ebx, dword [0x53fd14]
add ebx, 0xd7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xa
mov ebx, dword [0x53fd14]
add ebx, 0xd8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc7
mov ebx, dword [0x53fd14]
add ebx, 0xd9
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push pe_nt_image_headers32
mov ebx, dword [0x53fd14]
add ebx, 0xda
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x44
mov ebx, dword [0x53fd14]
add ebx, 0xdb
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 1
mov ebx, dword [0x53fd14]
add ebx, 0xdc
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xdd
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xde
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 1
mov ebx, dword [0x53fd14]
add ebx, 0xdf
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xe0
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xe1
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xe2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x8b
mov ebx, dword [0x53fd14]
add ebx, 0xe3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xb8
mov ebx, dword [0x53fd14]
add ebx, 0xe4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x44
mov ebx, dword [0x53fd14]
add ebx, 0xe5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 1
mov ebx, dword [0x53fd14]
add ebx, 0xe6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xe7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xe8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc3
mov ebx, dword [0x53fd14]
add ebx, 0xe9
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xea
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xeb
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xec
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xed
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xee
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xef
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf3
mov ebx, dword [0x53fd14]
add ebx, 0xf0
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf
mov ebx, dword [0x53fd14]
add ebx, 0xf1
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x10
mov ebx, dword [0x53fd14]
add ebx, 0xf2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 5
mov ebx, dword [0x53fd14]
add ebx, 0xf3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x14
mov ebx, dword [0x53fd14]
add ebx, 0xf4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3f
mov ebx, dword [0x53fd14]
add ebx, 0xf5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x92
mov ebx, dword [0x53fd14]
add ebx, 0xf6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x17
mov ebx, dword [0x53fd14]
add ebx, 0xf7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc3
mov ebx, dword [0x53fd14]
add ebx, 0xf8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 0xf9
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xfa
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xfb
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xfc
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xfd
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xfe
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0xff
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x60
mov ebx, dword [0x53fd14]
add ebx, 0x100
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x8b
mov ebx, dword [0x53fd14]
add ebx, 0x101
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xd
mov ebx, dword [0x53fd14]
add ebx, 0x102
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x18
mov ebx, dword [0x53fd14]
add ebx, 0x103
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3f
mov ebx, dword [0x53fd14]
add ebx, 0x104
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x92
mov ebx, dword [0x53fd14]
add ebx, 0x105
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x17
mov ebx, dword [0x53fd14]
add ebx, 0x106
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x89
mov ebx, dword [0x53fd14]
add ebx, 0x107
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x48
mov ebx, dword [0x53fd14]
add ebx, 0x108
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x34
mov ebx, dword [0x53fd14]
add ebx, 0x109
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x61
mov ebx, dword [0x53fd14]
add ebx, 0x10a
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf3
mov ebx, dword [0x53fd14]
add ebx, 0x10b
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf
mov ebx, dword [0x53fd14]
add ebx, 0x10c
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x10
mov ebx, dword [0x53fd14]
add ebx, 0x10d
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x40
mov ebx, dword [0x53fd14]
add ebx, 0x10e
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x34
mov ebx, dword [0x53fd14]
add ebx, 0x10f
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc3
mov ebx, dword [0x53fd14]
add ebx, 0x110
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 0x111
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x112
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x113
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x114
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x115
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x116
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x117
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x118
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x119
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x11a
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x11b
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x11c
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x11d
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x11e
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x11f
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf3
mov ebx, dword [0x53fd14]
add ebx, 0x120
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf
mov ebx, dword [0x53fd14]
add ebx, 0x121
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x10
mov ebx, dword [0x53fd14]
add ebx, 0x122
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 5
mov ebx, dword [0x53fd14]
add ebx, 0x123
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x1c
mov ebx, dword [0x53fd14]
add ebx, 0x124
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3f
mov ebx, dword [0x53fd14]
add ebx, 0x125
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x92
mov ebx, dword [0x53fd14]
add ebx, 0x126
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x17
mov ebx, dword [0x53fd14]
add ebx, 0x127
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc3
mov ebx, dword [0x53fd14]
add ebx, 0x128
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 0x129
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x12a
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x12b
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x12c
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x12d
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x12e
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x12f
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xd9
mov ebx, dword [0x53fd14]
add ebx, 0x130
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x5c
mov ebx, dword [0x53fd14]
add ebx, 0x131
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x24
mov ebx, dword [0x53fd14]
add ebx, 0x132
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x34
mov ebx, dword [0x53fd14]
add ebx, 0x133
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x83
mov ebx, dword [0x53fd14]
add ebx, 0x134
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3d
mov ebx, dword [0x53fd14]
add ebx, 0x135
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x20
mov ebx, dword [0x53fd14]
add ebx, 0x136
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3f
mov ebx, dword [0x53fd14]
add ebx, 0x137
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x92
mov ebx, dword [0x53fd14]
add ebx, 0x138
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x17
mov ebx, dword [0x53fd14]
add ebx, 0x139
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 1
mov ebx, dword [0x53fd14]
add ebx, 0x13a
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x75
mov ebx, dword [0x53fd14]
add ebx, 0x13b
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 8
mov ebx, dword [0x53fd14]
add ebx, 0x13c
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc7
mov ebx, dword [0x53fd14]
add ebx, 0x13d
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x44
mov ebx, dword [0x53fd14]
add ebx, 0x13e
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x24
mov ebx, dword [0x53fd14]
add ebx, 0x13f
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x34
mov ebx, dword [0x53fd14]
add ebx, 0x140
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x141
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x142
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc8
mov ebx, dword [0x53fd14]
add ebx, 0x143
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc2
mov ebx, dword [0x53fd14]
add ebx, 0x144
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf3
mov ebx, dword [0x53fd14]
add ebx, 0x145
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf
mov ebx, dword [0x53fd14]
add ebx, 0x146
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x10
mov ebx, dword [0x53fd14]
add ebx, 0x147
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xd
mov ebx, dword [0x53fd14]
add ebx, 0x148
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xfc
mov ebx, dword [0x53fd14]
add ebx, 0x149
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xe3
mov ebx, dword [0x53fd14]
add ebx, 0x14a
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x19
mov ebx, dword [0x53fd14]
add ebx, 0x14b
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x31
mov ebx, dword [0x53fd14]
add ebx, 0x14c
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc3
mov ebx, dword [0x53fd14]
add ebx, 0x14d
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x14e
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x14f
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x150
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x151
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x152
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x153
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x154
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x155
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x156
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x157
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x158
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x159
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x15a
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x15b
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x15c
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x15d
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x15e
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x15f
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x8b
mov ebx, dword [0x53fd14]
add ebx, 0x160
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x16
mov ebx, dword [0x53fd14]
add ebx, 0x161
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x8b
mov ebx, dword [0x53fd14]
add ebx, 0x162
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x42
mov ebx, dword [0x53fd14]
add ebx, 0x163
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x2c
mov ebx, dword [0x53fd14]
add ebx, 0x164
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x9c
mov ebx, dword [0x53fd14]
add ebx, 0x165
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x60
mov ebx, dword [0x53fd14]
add ebx, 0x166
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x83
mov ebx, dword [0x53fd14]
add ebx, 0x167
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3d
mov ebx, dword [0x53fd14]
add ebx, 0x168
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x24
mov ebx, dword [0x53fd14]
add ebx, 0x169
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3f
mov ebx, dword [0x53fd14]
add ebx, 0x16a
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x92
mov ebx, dword [0x53fd14]
add ebx, 0x16b
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x17
mov ebx, dword [0x53fd14]
add ebx, 0x16c
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 1
mov ebx, dword [0x53fd14]
add ebx, 0x16d
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x75
mov ebx, dword [0x53fd14]
add ebx, 0x16e
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x64
mov ebx, dword [0x53fd14]
add ebx, 0x16f
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc7
mov ebx, dword [0x53fd14]
add ebx, 0x170
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x86
mov ebx, dword [0x53fd14]
add ebx, 0x171
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x34
mov ebx, dword [0x53fd14]
add ebx, 0x172
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 4
mov ebx, dword [0x53fd14]
add ebx, 0x173
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x174
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x175
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x176
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x177
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x178
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x179
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc7
mov ebx, dword [0x53fd14]
add ebx, 0x17a
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x86
mov ebx, dword [0x53fd14]
add ebx, 0x17b
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x38
mov ebx, dword [0x53fd14]
add ebx, 0x17c
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 4
mov ebx, dword [0x53fd14]
add ebx, 0x17d
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x17e
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x17f
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x180
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x181
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x182
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x183
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc7
mov ebx, dword [0x53fd14]
add ebx, 0x184
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x86
mov ebx, dword [0x53fd14]
add ebx, 0x185
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3c
mov ebx, dword [0x53fd14]
add ebx, 0x186
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 4
mov ebx, dword [0x53fd14]
add ebx, 0x187
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x188
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x189
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x18a
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x18b
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x18c
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x18d
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc7
mov ebx, dword [0x53fd14]
add ebx, 0x18e
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x86
mov ebx, dword [0x53fd14]
add ebx, 0x18f
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x40
mov ebx, dword [0x53fd14]
add ebx, 0x190
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 4
mov ebx, dword [0x53fd14]
add ebx, 0x191
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x192
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x193
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x194
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x195
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x196
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x197
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc7
mov ebx, dword [0x53fd14]
add ebx, 0x198
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x86
mov ebx, dword [0x53fd14]
add ebx, 0x199
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x44
mov ebx, dword [0x53fd14]
add ebx, 0x19a
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 4
mov ebx, dword [0x53fd14]
add ebx, 0x19b
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x19c
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x19d
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x19e
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x19f
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1a0
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1a1
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc7
mov ebx, dword [0x53fd14]
add ebx, 0x1a2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x86
mov ebx, dword [0x53fd14]
add ebx, 0x1a3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x48
mov ebx, dword [0x53fd14]
add ebx, 0x1a4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 4
mov ebx, dword [0x53fd14]
add ebx, 0x1a5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1a6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1a7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1a8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1a9
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1aa
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1ab
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc7
mov ebx, dword [0x53fd14]
add ebx, 0x1ac
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x86
mov ebx, dword [0x53fd14]
add ebx, 0x1ad
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x4c
mov ebx, dword [0x53fd14]
add ebx, 0x1ae
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 4
mov ebx, dword [0x53fd14]
add ebx, 0x1af
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1b0
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1b1
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1b2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1b3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1b4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1b5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc7
mov ebx, dword [0x53fd14]
add ebx, 0x1b6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x86
mov ebx, dword [0x53fd14]
add ebx, 0x1b7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x50
mov ebx, dword [0x53fd14]
add ebx, 0x1b8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 4
mov ebx, dword [0x53fd14]
add ebx, 0x1b9
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1ba
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1bb
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1bc
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1bd
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1be
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1bf
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc7
mov ebx, dword [0x53fd14]
add ebx, 0x1c0
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x86
mov ebx, dword [0x53fd14]
add ebx, 0x1c1
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x54
mov ebx, dword [0x53fd14]
add ebx, 0x1c2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 4
mov ebx, dword [0x53fd14]
add ebx, 0x1c3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1c4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1c5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1c6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1c7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1c8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1c9
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc7
mov ebx, dword [0x53fd14]
add ebx, 0x1ca
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x86
mov ebx, dword [0x53fd14]
add ebx, 0x1cb
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x58
mov ebx, dword [0x53fd14]
add ebx, 0x1cc
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 4
mov ebx, dword [0x53fd14]
add ebx, 0x1cd
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1ce
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1cf
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1d0
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1d1
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1d2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1d3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x83
mov ebx, dword [0x53fd14]
add ebx, 0x1d4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3d
mov ebx, dword [0x53fd14]
add ebx, 0x1d5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x2c
mov ebx, dword [0x53fd14]
add ebx, 0x1d6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3f
mov ebx, dword [0x53fd14]
add ebx, 0x1d7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x92
mov ebx, dword [0x53fd14]
add ebx, 0x1d8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x17
mov ebx, dword [0x53fd14]
add ebx, 0x1d9
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 1
mov ebx, dword [0x53fd14]
add ebx, 0x1da
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x75
mov ebx, dword [0x53fd14]
add ebx, 0x1db
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 7
mov ebx, dword [0x53fd14]
add ebx, 0x1dc
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc7
mov ebx, dword [0x53fd14]
add ebx, 0x1dd
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x46
mov ebx, dword [0x53fd14]
add ebx, 0x1de
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x74
mov ebx, dword [0x53fd14]
add ebx, 0x1df
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1e0
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1e1
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1e2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x45
mov ebx, dword [0x53fd14]
add ebx, 0x1e3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x61
mov ebx, dword [0x53fd14]
add ebx, 0x1e4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x9d
mov ebx, dword [0x53fd14]
add ebx, 0x1e5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc3
mov ebx, dword [0x53fd14]
add ebx, 0x1e6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 0x1e7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1e8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1e9
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1ea
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1eb
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1ec
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1ed
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1ee
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x1ef
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x9c
mov ebx, dword [0x53fd14]
add ebx, 0x1f0
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x60
mov ebx, dword [0x53fd14]
add ebx, 0x1f1
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x83
mov ebx, dword [0x53fd14]
add ebx, 0x1f2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3d
mov ebx, dword [0x53fd14]
add ebx, 0x1f3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x28
mov ebx, dword [0x53fd14]
add ebx, 0x1f4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x3f
mov ebx, dword [0x53fd14]
add ebx, 0x1f5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x92
mov ebx, dword [0x53fd14]
add ebx, 0x1f6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x17
mov ebx, dword [0x53fd14]
add ebx, 0x1f7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 1
mov ebx, dword [0x53fd14]
add ebx, 0x1f8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x75
mov ebx, dword [0x53fd14]
add ebx, 0x1f9
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xe
mov ebx, dword [0x53fd14]
add ebx, 0x1fa
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 0x1fb
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 0x1fc
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 0x1fd
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 0x1fe
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc7
mov ebx, dword [0x53fd14]
add ebx, 0x1ff
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x86
mov ebx, dword [0x53fd14]
add ebx, 0x200
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xa8
mov ebx, dword [0x53fd14]
add ebx, 0x201
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 3
mov ebx, dword [0x53fd14]
add ebx, 0x202
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x203
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x204
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x205
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x206
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x207
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x208
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x61
mov ebx, dword [0x53fd14]
add ebx, 0x209
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x9d
mov ebx, dword [0x53fd14]
add ebx, 0x20a
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf3
mov ebx, dword [0x53fd14]
add ebx, 0x20b
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf
mov ebx, dword [0x53fd14]
add ebx, 0x20c
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x10
mov ebx, dword [0x53fd14]
add ebx, 0x20d
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x8e
mov ebx, dword [0x53fd14]
add ebx, 0x20e
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xa8
mov ebx, dword [0x53fd14]
add ebx, 0x20f
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 3
mov ebx, dword [0x53fd14]
add ebx, 0x210
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x211
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 0x212
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xc3
mov ebx, dword [0x53fd14]
add ebx, 0x213
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 0x214
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x1091
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x3f00
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x1093
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x1113
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x1163
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x3f04
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x10a3
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x3f08
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x10c7
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x3f0c
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x10e3
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x3f10
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x1140
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x3f14
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x1185
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x3f18
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x1194
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x3f1c
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x11b5
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x3f20
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x11c7
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x3f24
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x11fa
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x3f28
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x1285
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x3f2c
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x1267
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd8c]
add ebx, 0x14a7f4
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x53fcac], eax
mov eax, dword [0x53fd14]
call fcn.0040cf90
mov dword [0x53fda0], eax
mov ebx, dword [0x53fda0]
cmp ebx, 0x90909090
je 0x405e8f
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x11da
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0xe8
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 9
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x3357a2
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x1091
mov edi, dword [0x53fd3c]
add edi, 0x3357a2
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x3357a3
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0xe8
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 6
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x277431
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x1161
mov edi, dword [0x53fd3c]
add edi, 0x277431
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x277432
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0xe8
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 6
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x3f55f8
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x1111
mov edi, dword [0x53fd3c]
add edi, 0x3f55f8
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x3f55f9
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0xe8
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 6
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x3a30a6
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x10c1
mov edi, dword [0x53fd3c]
add edi, 0x3a30a6
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x3a30a7
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0xe8
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 8
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x330087
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x10e1
mov edi, dword [0x53fd3c]
add edi, 0x330087
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x330088
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0xe8
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 6
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x17cf56
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x1131
mov edi, dword [0x53fd3c]
add edi, 0x17cf56
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x17cf57
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0xe8
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 9
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 0xa
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 0xb
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 0xc
push dword [0x53fd14]
mov ebx, dword [0x53fd8c]
add ebx, 0x14a7ec
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x11c1
mov edi, dword [0x53fd8c]
add edi, 0x14a7ec
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd8c]
add ebx, 0x14a7ed
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0xe8
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 5
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x32f239
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x11f1
mov edi, dword [0x53fd3c]
add edi, 0x32f239
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x32f23a
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0xe8
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 8
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x3c7301
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x1281
mov edi, dword [0x53fd3c]
add edi, 0x3c7301
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x3c7302
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov dword [0x53fda4], 0
mov eax, 0xff
cmp eax, dword [0x53fda4]
jl 0x4069f7
push dword [0x53fda4]
call sub.USER32.dll_GetAsyncKeyState
inc dword [0x53fda4]
jmp 0x4069d7
call sub.KERNEL32.dll_IsDebuggerPresent
and eax, eax
je 0x406a06
push 0x55009553
ret
mov ebp, dword [0x53ffcc]
push dword [ebp + 4]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53ffec]
pop dword [ebp + 4]
mov ebp, dword [0x53ffcc]
push dword [ebp + 8]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53ffec]
pop dword [ebp + 8]
mov ebp, dword [0x53ffcc]
push dword [ebp + 0xc]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53ffec]
pop dword [ebp + 0xc]
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x10]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53ffec]
pop dword [ebp + 0x10]
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x14]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53ffec]
pop dword [ebp + 0x14]
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x18]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53ffec]
pop dword [ebp + 0x18]
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x1c]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53ffec]
pop dword [ebp + 0x1c]
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x20]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53ffec]
pop dword [ebp + 0x20]
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x24]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53ffec]
pop dword [ebp + 0x24]
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x28]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53ffec]
pop dword [ebp + 0x28]
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x2c]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53ffec]
pop dword [ebp + 0x2c]
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x30]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53ffec]
pop dword [ebp + 0x30]
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x34]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53ffec]
pop dword [ebp + 0x34]
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x38]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53ffec]
pop dword [ebp + 0x38]
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x3c]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53ffec]
pop dword [ebp + 0x3c]
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x40]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53ffec]
pop dword [ebp + 0x40]
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x44]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53ffec]
pop dword [ebp + 0x44]
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x48]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53ffec]
pop dword [ebp + 0x48]
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x4c]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53ffec]
pop dword [ebp + 0x4c]
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x50]
call sub.USER32.dll_GetAsyncKeyState
push eax
mov ebp, dword [0x53ffec]
pop dword [ebp + 0x50]
push 0x10
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x53fda8], eax
push 0x11
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x53fdac], eax
push 0x12
call sub.USER32.dll_GetAsyncKeyState
mov dword [0x53fdb0], eax
mov eax, 0x32
call fcn.0040ce39
mov dword [0x53fd70], eax
mov ebx, dword [0x53fd70]
cmp ebx, 0x19
jne 0x406cc9
mov ebx, dword [0x53fce8]
cmp ebx, dword [0x53fcf0]
jne 0x406c55
mov ebx, dword [0x53fce8]
and ebx, ebx
je 0x406c55
mov ebx, dword [0x53fcf0]
and ebx, ebx
je 0x406c55
jmp 0x406c5c
mov eax, 1
jmp 0x406c5e
xor eax, eax
and eax, eax
je 0x406cc9
mov eax, 0xff
call fcn.0040ce39
mov dword [0x53fdb4], eax
mov eax, 0x190
call fcn.0040ce39
mov dword [0x53fdb8], eax
push dword [0x53fdb4]
mov eax, dword [0x53fd14]
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 1
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, dword [0x53fdb8]
add ebx, 0x1091
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebp, dword [0x53ffcc]
push dword [ebp + 4]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53ffd4]
mov edi, dword [ebp + 4]
add edi, dword [0x53fda8]
imul ebx, edi
mov ebp, dword [0x53ffdc]
mov edi, dword [ebp + 4]
add edi, dword [0x53fdac]
imul ebx, edi
mov ebp, dword [0x53ffe4]
mov edi, dword [ebp + 4]
add edi, dword [0x53fdb0]
imul ebx, edi
mov dword [0x53fdbc], ebx
mov ebx, dword [0x53fdbc]
and ebx, ebx
je 0x406e07
push dword [0x53fdc0]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x406d97
mov dword [0x53fdc0], 1
push 1
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f00
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 0
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x406e06
mov ebx, 1
cmp ebx, dword [esp]
jne 0x406e06
mov dword [0x53fdc0], 0
push 0
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f00
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 1
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x53ffcc]
push dword [ebp + 8]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53ffd4]
mov edi, dword [ebp + 8]
add edi, dword [0x53fda8]
imul ebx, edi
mov ebp, dword [0x53ffdc]
mov edi, dword [ebp + 8]
add edi, dword [0x53fdac]
imul ebx, edi
mov ebp, dword [0x53ffe4]
mov edi, dword [ebp + 8]
add edi, dword [0x53fdb0]
imul ebx, edi
mov dword [0x53fdc4], ebx
mov ebx, dword [0x53fdc4]
and ebx, ebx
je 0x4070b4
push dword [0x53fdc8]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x406f87
mov dword [0x53fdc8], 1
push 1
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f04
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 5
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x2706e8
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 0
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x4070b3
mov ebx, 1
cmp ebx, dword [esp]
jne 0x4070b3
mov dword [0x53fdc8], 0
push 0
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f04
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fdcc]
and ebx, ebx
jne 0x40709a
push 0xf3
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x11
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x46
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x34
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 5
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x2706e8
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 1
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x53ffcc]
push dword [ebp + 0xc]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53ffd4]
mov edi, dword [ebp + 0xc]
add edi, dword [0x53fda8]
imul ebx, edi
mov ebp, dword [0x53ffdc]
mov edi, dword [ebp + 0xc]
add edi, dword [0x53fdac]
imul ebx, edi
mov ebp, dword [0x53ffe4]
mov edi, dword [ebp + 0xc]
add edi, dword [0x53fdb0]
imul ebx, edi
mov dword [0x53fdd0], ebx
mov ebx, dword [0x53fdd0]
and ebx, ebx
je 0x4071f2
push dword [0x53fdd4]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x407182
mov dword [0x53fdd4], 1
push 1
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f08
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 0
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x4071f1
mov ebx, 1
cmp ebx, dword [esp]
jne 0x4071f1
mov dword [0x53fdd4], 0
push 0
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f08
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 1
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x10]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53ffd4]
mov edi, dword [ebp + 0x10]
add edi, dword [0x53fda8]
imul ebx, edi
mov ebp, dword [0x53ffdc]
mov edi, dword [ebp + 0x10]
add edi, dword [0x53fdac]
imul ebx, edi
mov ebp, dword [0x53ffe4]
mov edi, dword [ebp + 0x10]
add edi, dword [0x53fdb0]
imul ebx, edi
mov dword [0x53fdd8], ebx
mov ebx, dword [0x53fdd8]
and ebx, ebx
je 0x407330
push dword [0x53fddc]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x4072c0
mov dword [0x53fddc], 1
push 1
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f0c
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 0
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x40732f
mov ebx, 1
cmp ebx, dword [esp]
jne 0x40732f
mov dword [0x53fddc], 0
push 0
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f0c
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 1
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x14]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53ffd4]
mov edi, dword [ebp + 0x14]
add edi, dword [0x53fda8]
imul ebx, edi
mov ebp, dword [0x53ffdc]
mov edi, dword [ebp + 0x14]
add edi, dword [0x53fdac]
imul ebx, edi
mov ebp, dword [0x53ffe4]
mov edi, dword [ebp + 0x14]
add edi, dword [0x53fdb0]
imul ebx, edi
mov dword [0x53fde0], ebx
mov ebx, dword [0x53fde0]
and ebx, ebx
je 0x40746e
push dword [0x53fde4]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x4073fe
mov dword [0x53fde4], 1
push 1
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f10
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 0
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x40746d
mov ebx, 1
cmp ebx, dword [esp]
jne 0x40746d
mov dword [0x53fde4], 0
push 0
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f10
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 1
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x18]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53ffd4]
mov edi, dword [ebp + 0x18]
add edi, dword [0x53fda8]
imul ebx, edi
mov ebp, dword [0x53ffdc]
mov edi, dword [ebp + 0x18]
add edi, dword [0x53fdac]
imul ebx, edi
mov ebp, dword [0x53ffe4]
mov edi, dword [ebp + 0x18]
add edi, dword [0x53fdb0]
imul ebx, edi
mov dword [0x53fde8], ebx
mov ebx, dword [0x53fde8]
and ebx, ebx
je 0x4076a7
push dword [0x53fdec]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x4075bb
mov dword [0x53fdec], 1
push 0x90
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 2
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x2516b7
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 2
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x25156a
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 0
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x4076a6
mov ebx, 1
cmp ebx, dword [esp]
jne 0x4076a6
mov dword [0x53fdec], 0
push 0x74
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 5
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 2
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x2516b7
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0x74
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 5
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 2
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x25156a
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 1
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x1c]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53ffd4]
mov edi, dword [ebp + 0x1c]
add edi, dword [0x53fda8]
imul ebx, edi
mov ebp, dword [0x53ffdc]
mov edi, dword [ebp + 0x1c]
add edi, dword [0x53fdac]
imul ebx, edi
mov ebp, dword [0x53ffe4]
mov edi, dword [ebp + 0x1c]
add edi, dword [0x53fdb0]
imul ebx, edi
mov dword [0x53fdf0], ebx
mov ebx, dword [0x53fdf0]
and ebx, ebx
je 0x407ce3
push dword [0x53fdf4]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x407941
mov dword [0x53fdf4], 1
push 0x41700000
mov eax, dword [0x53fd14]
call fcn.0040cfa0
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f14
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x297777
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x53fcac], eax
mov eax, dword [0x53fd14]
call fcn.0040cf90
mov dword [0x53fdf8], eax
push 0xe8
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 9
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 0xa
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x297771
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x1181
mov edi, dword [0x53fd3c]
add edi, 0x297771
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x297772
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 0
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x407ce2
mov ebx, 1
cmp ebx, dword [esp]
jne 0x407b41
mov dword [0x53fdf4], 2
push 0x42480000
mov eax, dword [0x53fd14]
call fcn.0040cfa0
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f14
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0xe8
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 9
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 0xa
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x297771
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x1181
mov edi, dword [0x53fd3c]
add edi, 0x297771
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x297772
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 0
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x407ce2
mov ebx, 2
cmp ebx, dword [esp]
jne 0x407ce2
mov dword [0x53fdf4], 0
push 0x75
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xe
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf3
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x10
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 5
mov ebx, dword [0x53fd14]
add ebx, 5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x34
mov ebx, dword [0x53fd14]
add ebx, 6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x6a
mov ebx, dword [0x53fd14]
add ebx, 7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x25
mov ebx, dword [0x53fd14]
add ebx, 8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x39
mov ebx, dword [0x53fd14]
add ebx, 9
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 0xa
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x297771
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push dword [0x53fdf8]
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x297777
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 1
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x20]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53ffd4]
mov edi, dword [ebp + 0x20]
add edi, dword [0x53fda8]
imul ebx, edi
mov ebp, dword [0x53ffdc]
mov edi, dword [ebp + 0x20]
add edi, dword [0x53fdac]
imul ebx, edi
mov ebp, dword [0x53ffe4]
mov edi, dword [ebp + 0x20]
add edi, dword [0x53fdb0]
imul ebx, edi
mov dword [0x53fdfc], ebx
mov ebx, dword [0x53fdfc]
and ebx, ebx
je 0x4083e5
push dword [0x53fdcc]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x40801c
mov dword [0x53fdcc], 1
push 0x44fa0000
mov eax, dword [0x53fd14]
call fcn.0040cfa0
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f18
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f04
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x53fcac], eax
mov eax, dword [0x53fd14]
call fcn.0040cf90
mov dword [0x53fe00], eax
push 0
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f04
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0xe8
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 7
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x281b76
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x1191
mov edi, dword [0x53fd3c]
add edi, 0x281b76
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x281b77
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 5
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x2706e8
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 0
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x4083e4
mov ebx, 1
cmp ebx, dword [esp]
jne 0x4081ce
mov dword [0x53fdcc], 2
push 0x457a0000
mov eax, dword [0x53fd14]
call fcn.0040cfa0
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f18
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0xe8
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 7
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x281b76
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x1191
mov edi, dword [0x53fd3c]
add edi, 0x281b76
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x281b77
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 0
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x4083e4
mov ebx, 2
cmp ebx, dword [esp]
jne 0x4083e4
mov dword [0x53fdcc], 0
push 0x75
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x21
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf3
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x10
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x40
mov ebx, dword [0x53fd14]
add ebx, 5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x34
mov ebx, dword [0x53fd14]
add ebx, 6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 7
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x281b76
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push dword [0x53fe00]
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f04
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov eax, dword [0x53fe00]
mov dword [0x53fdc8], eax
mov ebx, dword [0x53fdc8]
and ebx, ebx
jne 0x4083cb
push 0xf3
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x11
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x46
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x34
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 5
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x2706e8
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 1
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x24]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53ffd4]
mov edi, dword [ebp + 0x24]
add edi, dword [0x53fda8]
imul ebx, edi
mov ebp, dword [0x53ffdc]
mov edi, dword [ebp + 0x24]
add edi, dword [0x53fdac]
imul ebx, edi
mov ebp, dword [0x53ffe4]
mov edi, dword [ebp + 0x24]
add edi, dword [0x53fdb0]
imul ebx, edi
mov dword [0x53fe04], ebx
mov ebx, dword [0x53fe04]
and ebx, ebx
je 0x408dde
push dword [0x53fe08]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x4087ca
mov dword [0x53fe08], 1
push 0x40a00000
mov eax, dword [0x53fd14]
call fcn.0040cfa0
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f1c
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0xe8
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 9
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 0xa
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x3d262a
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x11b1
mov edi, dword [0x53fd3c]
add edi, 0x3d262a
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x3d262b
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0xe8
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 9
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 0xa
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x3d20e3
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x11b1
mov edi, dword [0x53fd3c]
add edi, 0x3d20e3
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x3d20e4
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 0
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x408ddd
mov ebx, 1
cmp ebx, dword [esp]
jne 0x408b52
mov dword [0x53fe08], 2
push 0x41200000
mov eax, dword [0x53fd14]
call fcn.0040cfa0
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f1c
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0xe8
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 9
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 0xa
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x3d262a
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x11b1
mov edi, dword [0x53fd3c]
add edi, 0x3d262a
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x3d262b
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0xe8
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x90
mov ebx, dword [0x53fd14]
add ebx, 9
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 0xa
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x3d20e3
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
mov ebx, dword [0x53fd88]
add ebx, 0x11b1
mov edi, dword [0x53fd3c]
add edi, 0x3d20e3
sub ebx, edi
add ebx, 0xfffffffb
push ebx
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x3d20e4
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 0
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x408ddd
mov ebx, 2
cmp ebx, dword [esp]
jne 0x408ddd
mov dword [0x53fe08], 0
push 0x74
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x12
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf3
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x10
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x86
mov ebx, dword [0x53fd14]
add ebx, 5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x5c
mov ebx, dword [0x53fd14]
add ebx, 6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 5
mov ebx, dword [0x53fd14]
add ebx, 7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 9
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 0xa
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x3d262a
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0x75
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x12
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf3
mov ebx, dword [0x53fd14]
add ebx, 2
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0xf
mov ebx, dword [0x53fd14]
add ebx, 3
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x10
mov ebx, dword [0x53fd14]
add ebx, 4
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x86
mov ebx, dword [0x53fd14]
add ebx, 5
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x5c
mov ebx, dword [0x53fd14]
add ebx, 6
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 5
mov ebx, dword [0x53fd14]
add ebx, 7
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 8
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0
mov ebx, dword [0x53fd14]
add ebx, 9
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 0xa
push dword [0x53fd14]
mov ebx, dword [0x53fd3c]
add ebx, 0x3d20e3
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 1
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x28]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53ffd4]
mov edi, dword [ebp + 0x28]
add edi, dword [0x53fda8]
imul ebx, edi
mov ebp, dword [0x53ffdc]
mov edi, dword [ebp + 0x28]
add edi, dword [0x53fdac]
imul ebx, edi
mov ebp, dword [0x53ffe4]
mov edi, dword [ebp + 0x28]
add edi, dword [0x53fdb0]
imul ebx, edi
mov dword [0x53fe0c], ebx
mov ebx, dword [0x53fe0c]
and ebx, ebx
je 0x408f1c
push dword [0x53fe10]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x408eac
mov dword [0x53fe10], 1
push 1
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f20
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 0
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x408f1b
mov ebx, 1
cmp ebx, dword [esp]
jne 0x408f1b
mov dword [0x53fe10], 0
push 0
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f20
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 1
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x2c]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53ffd4]
mov edi, dword [ebp + 0x2c]
add edi, dword [0x53fda8]
imul ebx, edi
mov ebp, dword [0x53ffdc]
mov edi, dword [ebp + 0x2c]
add edi, dword [0x53fdac]
imul ebx, edi
mov ebp, dword [0x53ffe4]
mov edi, dword [ebp + 0x2c]
add edi, dword [0x53fdb0]
imul ebx, edi
mov dword [0x53fe14], ebx
mov ebx, dword [0x53fe14]
and ebx, ebx
je 0x40909b
push dword [0x53fe18]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x40900c
mov dword [0x53fe18], 1
push 0xeb
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x1a
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 2
push dword [0x53fd14]
mov ebx, dword [0x53fd8c]
add ebx, 0x5f3c
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 0
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x40909a
mov ebx, 1
cmp ebx, dword [esp]
jne 0x40909a
mov dword [0x53fe18], 0
push 0x7e
mov ebx, dword [0x53fd14]
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push 0x25
mov ebx, dword [0x53fd14]
inc ebx
mov eax, ebx
call fcn.0040cf70
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 2
push dword [0x53fd14]
mov ebx, dword [0x53fd8c]
add ebx, 0x5f3c
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 1
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x30]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53ffd4]
mov edi, dword [ebp + 0x30]
add edi, dword [0x53fda8]
imul ebx, edi
mov ebp, dword [0x53ffdc]
mov edi, dword [ebp + 0x30]
add edi, dword [0x53fdac]
imul ebx, edi
mov ebp, dword [0x53ffe4]
mov edi, dword [ebp + 0x30]
add edi, dword [0x53fdb0]
imul ebx, edi
mov dword [0x53fe1c], ebx
mov ebx, dword [0x53fe1c]
and ebx, ebx
je 0x4091d9
push dword [0x53fe20]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x409169
mov dword [0x53fe20], 1
push 1
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f24
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 0
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x4091d8
mov ebx, 1
cmp ebx, dword [esp]
jne 0x4091d8
mov dword [0x53fe20], 0
push 0
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f24
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 1
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x34]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53ffd4]
mov edi, dword [ebp + 0x34]
add edi, dword [0x53fda8]
imul ebx, edi
mov ebp, dword [0x53ffdc]
mov edi, dword [ebp + 0x34]
add edi, dword [0x53fdac]
imul ebx, edi
mov ebp, dword [0x53ffe4]
mov edi, dword [ebp + 0x34]
add edi, dword [0x53fdb0]
imul ebx, edi
mov dword [0x53fe24], ebx
mov ebx, dword [0x53fe24]
and ebx, ebx
je 0x409317
push dword [0x53fe28]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x4092a7
mov dword [0x53fe28], 1
push 1
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f28
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 0
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x409316
mov ebx, 1
cmp ebx, dword [esp]
jne 0x409316
mov dword [0x53fe28], 0
push 0
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f28
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 1
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x38]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53ffd4]
mov edi, dword [ebp + 0x38]
add edi, dword [0x53fda8]
imul ebx, edi
mov ebp, dword [0x53ffdc]
mov edi, dword [ebp + 0x38]
add edi, dword [0x53fdac]
imul ebx, edi
mov ebp, dword [0x53ffe4]
mov edi, dword [ebp + 0x38]
add edi, dword [0x53fdb0]
imul ebx, edi
mov dword [0x53fe2c], ebx
mov ebx, dword [0x53fe2c]
and ebx, ebx
je 0x409455
push dword [0x53fe30]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x4093e5
mov dword [0x53fe30], 1
push 1
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f2c
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 0
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
jmp 0x409454
mov ebx, 1
cmp ebx, dword [esp]
jne 0x409454
mov dword [0x53fe30], 0
push 0
mov eax, dword [0x53fd14]
call fcn.0040cf80
mov dword [0x53fcac], eax
push dword [0x53fd9c]
push 4
push dword [0x53fd14]
mov ebx, dword [0x53fd88]
add ebx, 0x3f2c
push ebx
push dword [0x53fd98]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x53fcac], eax
push 0
push 1
call fcn.0040c257
push 0x12c
call sub.KERNEL32.dll_Sleep
pop eax
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x3c]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53ffd4]
mov edi, dword [ebp + 0x3c]
add edi, dword [0x53fda8]
imul ebx, edi
mov ebp, dword [0x53ffdc]
mov edi, dword [ebp + 0x3c]
add edi, dword [0x53fdac]
imul ebx, edi
mov ebp, dword [0x53ffe4]
mov edi, dword [ebp + 0x3c]
add edi, dword [0x53fdb0]
imul ebx, edi
mov dword [0x53fe34], ebx
mov ebx, dword [0x53fe34]
and ebx, ebx
je 0x4094ab
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x40]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53ffd4]
mov edi, dword [ebp + 0x40]
add edi, dword [0x53fda8]
imul ebx, edi
mov ebp, dword [0x53ffdc]
mov edi, dword [ebp + 0x40]
add edi, dword [0x53fdac]
imul ebx, edi
mov ebp, dword [0x53ffe4]
mov edi, dword [ebp + 0x40]
add edi, dword [0x53fdb0]
imul ebx, edi
mov dword [0x53fe38], ebx
mov ebx, dword [0x53fe38]
and ebx, ebx
je 0x409501
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x44]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53ffd4]
mov edi, dword [ebp + 0x44]
add edi, dword [0x53fda8]
imul ebx, edi
mov ebp, dword [0x53ffdc]
mov edi, dword [ebp + 0x44]
add edi, dword [0x53fdac]
imul ebx, edi
mov ebp, dword [0x53ffe4]
mov edi, dword [ebp + 0x44]
add edi, dword [0x53fdb0]
imul ebx, edi
mov dword [0x53fe3c], ebx
mov ebx, dword [0x53fe3c]
and ebx, ebx
je 0x409557
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x48]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53ffd4]
mov edi, dword [ebp + 0x48]
add edi, dword [0x53fda8]
imul ebx, edi
mov ebp, dword [0x53ffdc]
mov edi, dword [ebp + 0x48]
add edi, dword [0x53fdac]
imul ebx, edi
mov ebp, dword [0x53ffe4]
mov edi, dword [ebp + 0x48]
add edi, dword [0x53fdb0]
imul ebx, edi
mov dword [0x53fe40], ebx
mov ebx, dword [0x53fe40]
and ebx, ebx
je 0x4095ad
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x4c]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53ffd4]
mov edi, dword [ebp + 0x4c]
add edi, dword [0x53fda8]
imul ebx, edi
mov ebp, dword [0x53ffdc]
mov edi, dword [ebp + 0x4c]
add edi, dword [0x53fdac]
imul ebx, edi
mov ebp, dword [0x53ffe4]
mov edi, dword [ebp + 0x4c]
add edi, dword [0x53fdb0]
imul ebx, edi
mov dword [0x53fe44], ebx
mov ebx, dword [0x53fe44]
and ebx, ebx
je 0x409603
mov ebp, dword [0x53ffcc]
push dword [ebp + 0x50]
call sub.USER32.dll_GetAsyncKeyState
mov ebx, eax
mov ebp, dword [0x53ffd4]
mov edi, dword [ebp + 0x50]
add edi, dword [0x53fda8]
imul ebx, edi
mov ebp, dword [0x53ffdc]
mov edi, dword [ebp + 0x50]
add edi, dword [0x53fdac]
imul ebx, edi
mov ebp, dword [0x53ffe4]
mov edi, dword [ebp + 0x50]
add edi, dword [0x53fdb0]
imul ebx, edi
mov dword [0x53fe48], ebx
mov ebx, dword [0x53fe48]
and ebx, ebx
je 0x409659
mov dword [0x53fdbc], 0
mov dword [0x53fdc4], 0
mov dword [0x53fdd0], 0
mov dword [0x53fdd8], 0
mov dword [0x53fde0], 0
mov dword [0x53fde8], 0
mov dword [0x53fdf0], 0
mov dword [0x53fdfc], 0
mov dword [0x53fe04], 0
mov dword [0x53fe0c], 0
mov dword [0x53fe14], 0
mov dword [0x53fe1c], 0
mov dword [0x53fe24], 0
mov dword [0x53fe2c], 0
mov dword [0x53fe34], 0
mov dword [0x53fe38], 0
mov dword [0x53fe3c], 0
mov dword [0x53fe40], 0
mov dword [0x53fe44], 0
mov dword [0x53fe48], 0
mov ebx, dword [0x53fd10]
cmp ebx, 0x45a2a5
je 0x40973e
push 0
push 3
call fcn.0040de22
call fcn.0040a20a
push 1
call sub.KERNEL32.dll_Sleep
mov eax, 0x12c
call fcn.0040ce39
mov dword [0x53fd70], eax
mov ebx, dword [0x53fd70]
cmp ebx, 0x63
jne 0x409817
mov eax, dword [0x540424]
push eax
push eax
push dword [0x540424]
call fcn.0040c91f
inc dword [0x540424]
push 0
mov edx, dword [0x53eb78]
add dword [esp + 4], edx
call fcn.0040fa60
pop dword [0x540424]
push 0
call fcn.0040fa80
mov dword [0x53fcdc], eax
mov dword [0x53fce0], 1
mov ebx, dword [0x53fcdc]
add ebx, 0xfffffffc
cmp ebx, dword [0x53fce0]
jl 0x4097de
push 0
call fcn.0040fbb0
mov dword [0x53fcf4], eax
inc dword [0x53fce0]
jmp 0x4097b6
push 0
call fcn.0040fb50
mov dword [0x53fcec], eax
push 0
call fcn.0040f800
mov ebx, dword [0x53fcec]
cmp ebx, dword [0x53fcdc]
jne 0x409807
jmp 0x40980a
inc eax
push esp
ret
mov ebx, dword [0x53fd64]
and ebx, ebx
jne 0x409817
inc eax
push esp
ret
jmp 0x4069cd