Function at 0x4246b0
Capabilities:
Act as tcp client
Check http status code
Connect socket
Connect tcp socket
Create process on windows
Create tcp socket
Encode data using base64
Receive data
Receive data on socket
Resolve dns
Resolve function by parsing pe exports
Send data
Send data on socket
Send http request
Set socket configuration

Disassembly:
push 0xffffffffffffffff
push 0x446080
mov eax, dword fs:[0]
push eax
sub esp, 0x404
mov eax, dword [0x44eea4]
xor eax, esp
mov dword [esp + 0x400], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x44eea4]
xor eax, esp
push eax
lea eax, [esp + 0x418]
mov dword fs:[0], eax
mov eax, dword [0x455608]
push eax
call fcn.0043e9f0
push eax
push 0x42
push 0
push eax
call fcn.00401050
call dword [sym.imp.GDI32.dll_DeleteDC]
mov edi, dword [esp + 0x428]
mov ecx, 0x458b00
mov esi, ecx
mov eax, dword [esi]
cmp eax, 1
mov dword [esp + 0x18], esi
mov dword [esp + 0x20], edi
jne 0x42475c
call fcn.00423910
call fcn.00415370
push 0
xor ebx, ebx
push ebx
push ebx
push 0xffffffffffffffff
push ebx
push ebx
call fcn.0043f010
push edi
mov dword [esi], 2
call fcn.004028a0
add esp, 4
call fcn.0043e9d0
nop
nop
nop
nop
nop
nop
jmp 0x4287de
cmp eax, 2
jne 0x424776
push edi
call fcn.0041bc90
mov dword [0x457580], 0
jmp 0x4287de
mov ecx, 1
sub ecx, dword [0x4511f8]
or esi, 0xffffffff
xor ebx, ebx
cmp dword [0x44d068], ebx
mov dword [0x4511f8], ecx
lea ebp, [esi + 0x14]
je 0x42709b
push ebx
push ebx
push str.UILF2_CURSOR.bmp
call fcn.0043ee30
pop eax
mov dword [0x451170], eax
mov word [0x44fcc0], 0x31
mov word [0x44fccb], 0x32
mov word [0x44fcd6], 0x33
mov word [0x44fce1], 0x34
mov word [0x44fcec], 0x35
mov word [0x44fcf7], 0x36
mov word [0x44fd02], 0x37
mov word [0x44fd0d], 0x38
push ebx
push ebx
push str.UIMENU_CLIP.bmp
call fcn.0043ee30
pop eax
mov dword [0x4511a0], eax
push ebx
push ebx
push str.UIMENU_CLIP2.bmp
call fcn.0043ee30
pop eax
mov dword [0x451168], eax
push ebx
push ebx
push str.UIMENU_CLIP3.bmp
call fcn.0043ee30
pop eax
mov dword [0x451178], eax
push ebx
push ebx
push str.UIMENU_CLIP4.bmp
call fcn.0043ee30
pop eax
mov dword [0x45116c], eax
push ebx
push ebx
push str.UIMENU_CLIP5.bmp
call fcn.0043ee30
pop eax
mov dword [0x45117c], eax
push ebx
push ebx
push str.UIMENU_CLIP6.bmp
call fcn.0043ee30
pop eax
mov dword [0x4511a4], eax
push ebx
push ebx
push str.UIMENU_CLIP7.bmp
call fcn.0043ee30
pop eax
mov dword [0x451188], eax
push ebx
push ebx
push str.UIMENU_WAIT.bmp
call fcn.0043ee30
pop eax
mov dword [0x45118c], eax
push ebx
push ebx
push str.UIMENU_WAIT2.bmp
call fcn.0043ee30
pop eax
mov dword [0x44fe40], eax
push ebx
push ebx
push str.UISLOGAN.bmp
call fcn.0043ee30
pop eax
mov dword [0x45119c], eax
push ebx
push ebx
push str.UIENDING.bmp
call fcn.0043ee30
pop eax
mov dword [0x451190], eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [0x45119c]
mov dword [edx + 0x10], ebx
mov eax, dword [0x45119c]
mov dword [eax + 0x7e0], ebx
mov ecx, dword [0x45119c]
mov eax, 0x12a
mov dword [ecx + 0xfb0], eax
mov edx, dword [0x45119c]
mov ecx, 0x84
mov dword [edx + 0x1780], ecx
mov edx, dword [0x45119c]
mov esi, 0x12b
mov dword [edx + 0x14], esi
mov edx, dword [0x45119c]
mov dword [edx + 0x7e4], ebx
mov edx, dword [0x45119c]
mov dword [edx + 0xfb4], eax
mov edx, dword [0x45119c]
mov dword [edx + 0x1784], ecx
mov edx, dword [0x45119c]
mov dword [edx + 0x18], ebx
mov edi, dword [0x45119c]
mov edx, 0x85
mov dword [edi + 0x7e8], edx
mov edi, dword [0x45119c]
mov dword [edi + 0xfb8], eax
mov edi, dword [0x45119c]
mov dword [edi + 0x1788], ecx
mov edi, dword [0x45119c]
mov dword [edi + 0x1c], esi
mov esi, dword [0x45119c]
mov dword [esi + 0x7ec], edx
mov edx, dword [0x45119c]
mov dword [edx + 0xfbc], eax
mov eax, dword [0x45119c]
mov dword [eax + 0x178c], ecx
mov ecx, dword [0x45119c]
mov dword [ecx + 0xc], 4
mov edx, dword [0x451190]
mov dword [edx + 0x10], ebx
mov eax, dword [0x451190]
mov dword [eax + 0x7e0], ebx
mov ecx, dword [0x451190]
mov eax, 0x192
mov dword [ecx + 0xfb0], eax
mov edx, dword [0x451190]
mov dword [edx + 0x1780], 0x42
mov ecx, dword [0x451190]
mov dword [ecx + 0x14], ebx
mov edx, dword [0x451190]
mov dword [edx + 0x7e4], 0x43
mov ecx, dword [0x451190]
mov dword [ecx + 0xfb4], eax
mov edx, dword [0x451190]
mov dword [edx + 0x1784], 0x5b
mov ecx, dword [0x451190]
mov dword [ecx + 0x18], ebx
mov edx, dword [0x451190]
mov dword [edx + 0x7e8], 0x9f
mov ecx, dword [0x451190]
mov dword [ecx + 0xfb8], eax
mov edx, dword [0x451190]
mov dword [edx + 0x1788], 0x9c
mov eax, dword [0x451190]
mov dword [eax + 0x1c], ebx
mov edx, dword [0x451190]
mov ecx, 0x13c
mov dword [edx + 0x7ec], ecx
mov edx, dword [0x451190]
mov eax, 0x1a3
mov dword [edx + 0xfbc], eax
mov edx, dword [0x451190]
mov dword [edx + 0x178c], 0xa9
mov edx, dword [0x451190]
mov dword [edx + 0x20], ebx
mov edx, dword [0x451190]
mov dword [edx + 0x7f0], 0x1e6
mov edx, dword [0x451190]
mov dword [esp + 0x420], 0xffffffff
mov dword [edx + 0xfc0], eax
mov eax, dword [0x451190]
mov dword [eax + 0x1790], 0x41
mov edx, dword [0x451190]
mov dword [edx + 0x24], 0x193
mov eax, dword [0x451190]
mov dword [eax + 0x7f4], 0x35
mov edx, dword [0x451190]
mov dword [edx + 0xfc4], 0xf
mov eax, dword [0x451190]
mov dword [eax + 0x1794], 0xd
mov edx, dword [0x451190]
mov dword [edx + 0xc], 6
mov eax, dword [0x4511a0]
mov dword [eax + 0x10], ebx
mov edx, dword [0x4511a0]
mov dword [edx + 0x7e0], ebx
mov eax, dword [0x4511a0]
mov dword [eax + 0xfb0], 0x31a
mov eax, dword [0x4511a0]
mov edx, 0x25
mov dword [eax + 0x1780], edx
mov eax, dword [0x4511a0]
mov dword [eax + 0x14], ebx
mov eax, dword [0x4511a0]
mov dword [eax + 0x7e4], 0x29
mov eax, dword [0x4511a0]
mov dword [eax + 0xfb4], 0x1f0
mov eax, dword [0x4511a0]
mov dword [eax + 0x1784], 0x50
mov eax, dword [0x4511a0]
mov dword [eax + 0x18], ebx
mov eax, dword [0x4511a0]
mov dword [eax + 0x7e8], 0x7d
mov eax, dword [0x4511a0]
mov dword [eax + 0xfb8], 0x11a
mov eax, dword [0x4511a0]
mov dword [eax + 0x1788], 0x77
mov eax, dword [0x4511a0]
mov dword [eax + 0x1c], ebx
mov eax, dword [0x4511a0]
mov dword [eax + 0x7ec], 0xf7
mov eax, dword [0x4511a0]
mov dword [eax + 0xfbc], 0x130
mov eax, dword [0x4511a0]
mov dword [eax + 0x178c], 0x7e
mov eax, dword [0x4511a0]
mov dword [eax + 0x20], ebx
mov eax, dword [0x4511a0]
mov dword [eax + 0x7f0], 0x178
mov eax, dword [0x4511a0]
mov dword [eax + 0xfc0], 0x16b
mov eax, dword [0x4511a0]
mov dword [eax + 0x1790], 0x7b
mov eax, dword [0x4511a0]
mov dword [eax + 0x24], 0x1f4
mov eax, dword [0x4511a0]
mov dword [eax + 0x7f4], 0x2a
mov eax, dword [0x4511a0]
mov esi, 0x123
mov dword [eax + 0xfc4], esi
mov edi, dword [0x4511a0]
mov eax, 0x1b
mov dword [edi + 0x1794], eax
mov edi, dword [0x4511a0]
mov dword [edi + 0x28], 0x1f4
mov edi, dword [0x4511a0]
mov dword [edi + 0x7f8], 0x48
mov edi, dword [0x4511a0]
mov dword [edi + 0xfc8], esi
mov esi, dword [0x4511a0]
mov dword [esi + 0x1798], eax
mov eax, dword [0x4511a0]
mov dword [eax + 0x2c], 0x217
mov eax, dword [0x4511a0]
mov dword [eax + 0x7fc], 0x69
mov esi, dword [0x4511a0]
mov eax, pe_nt_image_headers32
mov dword [esi + 0xfcc], eax
mov edi, dword [0x4511a0]
mov esi, 0x1a
mov dword [edi + 0x179c], esi
mov edi, dword [0x4511a0]
mov dword [edi + 0x30], 0x217
mov edi, dword [0x4511a0]
mov dword [edi + 0x800], 0x89
mov edi, dword [0x4511a0]
mov dword [edi + 0xfd0], eax
mov edi, dword [0x4511a0]
mov dword [edi + 0x17a0], esi
mov edi, dword [0x4511a0]
mov dword [edi + 0x34], 0x217
mov edi, dword [0x4511a0]
mov dword [edi + 0x804], 0xa8
mov edi, dword [0x4511a0]
mov dword [edi + 0xfd4], eax
mov edi, dword [0x4511a0]
mov eax, 0x1d
mov dword [edi + 0x17a4], eax
mov edi, dword [0x4511a0]
mov dword [edi + 0x38], 0x1cc
mov edi, dword [0x4511a0]
mov dword [edi + 0x808], 0xcb
mov edi, dword [0x4511a0]
mov dword [edi + 0xfd8], 0x14e
mov edi, dword [0x4511a0]
mov dword [edi + 0x17a8], 0x6c
mov edi, dword [0x4511a0]
mov dword [edi + 0x3c], 0x1cc
mov edi, dword [0x4511a0]
mov dword [edi + 0x80c], 0x139
mov edi, dword [0x4511a0]
mov dword [edi + 0xfdc], 0x14e
mov edi, dword [0x4511a0]
mov dword [edi + 0x17ac], 0x6c
mov edi, dword [0x4511a0]
mov dword [edi + 0x40], 0x283
mov edi, dword [0x4511a0]
mov dword [edi + 0x810], 0x1aa
mov edi, dword [0x4511a0]
mov dword [edi + 0xfe0], 0x97
mov edi, dword [0x4511a0]
mov dword [edi + 0x17b0], esi
mov edi, dword [0x4511a0]
mov dword [edi + 0x44], 0x1e9
mov edi, dword [0x4511a0]
mov dword [edi + 0x814], 0x1aa
mov edi, dword [0x4511a0]
mov dword [edi + 0xfe4], 0x97
mov edi, dword [0x4511a0]
mov dword [edi + 0x17b4], esi
mov edi, dword [0x4511a0]
mov dword [edi + 0x48], 0x1ea
mov edi, dword [0x4511a0]
mov dword [edi + 0x818], 0x1ce
mov edi, dword [0x4511a0]
mov dword [edi + 0xfe8], 0x130
mov edi, dword [0x4511a0]
mov dword [edi + 0x17b8], 0x26
mov edi, dword [0x4511a0]
mov dword [edi + 0x4c], ecx
mov edi, dword [0x4511a0]
mov dword [edi + 0x81c], 0x7c
mov edi, dword [0x4511a0]
mov dword [edi + 0xfec], eax
mov edi, dword [0x4511a0]
mov dword [edi + 0x17bc], ebp
mov edi, dword [0x4511a0]
mov dword [edi + 0x50], ecx
mov edi, dword [0x4511a0]
mov dword [edi + 0x820], 0x90
mov edi, dword [0x4511a0]
mov dword [edi + 0xff0], eax
mov edi, dword [0x4511a0]
mov dword [edi + 0x17c0], ebp
mov edi, dword [0x4511a0]
mov dword [edi + 0x54], ecx
mov edi, dword [0x4511a0]
mov dword [edi + 0x824], 0xa4
mov edi, dword [0x4511a0]
mov dword [edi + 0xff4], eax
mov edi, dword [0x4511a0]
mov dword [edi + 0x17c4], ebp
mov edi, dword [0x4511a0]
mov dword [edi + 0x58], ecx
mov edi, dword [0x4511a0]
mov dword [edi + 0x828], 0xb8
mov edi, dword [0x4511a0]
mov dword [edi + 0xff8], edx
mov edi, dword [0x4511a0]
mov dword [edi + 0x17c8], ebp
mov edi, dword [0x4511a0]
mov dword [edi + 0x5c], ecx
mov edi, dword [0x4511a0]
mov dword [edi + 0x82c], 0xcc
mov edi, dword [0x4511a0]
mov dword [edi + 0xffc], 0x46
mov edi, dword [0x4511a0]
mov dword [edi + 0x17cc], ebp
mov edi, dword [0x4511a0]
mov dword [edi + 0x60], ecx
mov edi, dword [0x4511a0]
mov dword [edi + 0x830], 0xe0
mov edi, dword [0x4511a0]
mov dword [edi + 0x1000], 0x46
mov edi, dword [0x4511a0]
mov dword [edi + 0x17d0], ebp
mov edi, dword [0x4511a0]
mov dword [edi + 0x64], ecx
mov edi, dword [0x4511a0]
mov dword [edi + 0x834], 0xf4
mov edi, dword [0x4511a0]
mov dword [edi + 0x1004], 0x6e
mov edi, dword [0x4511a0]
mov dword [edi + 0x17d4], ebp
mov edi, dword [0x4511a0]
mov dword [edi + 0x68], ecx
mov edi, dword [0x4511a0]
mov dword [edi + 0x838], 0x108
mov edi, dword [0x4511a0]
mov dword [edi + 0x1008], 0x66
mov edi, dword [0x4511a0]
mov dword [edi + 0x17d8], ebp
mov edi, dword [0x4511a0]
mov dword [edi + 0x6c], ecx
mov edi, dword [0x4511a0]
mov dword [edi + 0x83c], 0x11c
mov edi, dword [0x4511a0]
mov dword [edi + 0x100c], 0x2d
mov edi, dword [0x4511a0]
mov dword [edi + 0x17dc], ebp
mov edi, dword [0x4511a0]
mov dword [edi + 0x70], ecx
mov ecx, dword [0x4511a0]
mov dword [ecx + 0x840], 0x130
mov ecx, dword [0x4511a0]
mov dword [ecx + 0x1010], edx
mov edx, dword [0x4511a0]
mov dword [edx + 0x17e0], ebp
mov ecx, dword [0x4511a0]
mov dword [ecx + 0xc], 0x19
mov edx, dword [0x451168]
mov dword [edx + 0x10], ebx
mov ecx, dword [0x451168]
mov dword [ecx + 0x7e0], ebx
mov edx, dword [0x451168]
mov dword [edx + 0xfb0], 0x2c0
mov ecx, dword [0x451168]
mov dword [ecx + 0x1780], 0x161
mov edx, dword [0x451168]
mov dword [edx + 0x14], ebx
mov ecx, dword [0x451168]
mov dword [ecx + 0x7e4], 0x162
mov edx, dword [0x451168]
mov ecx, 0x1ee
mov dword [edx + 0xfb4], ecx
mov edi, dword [0x451168]
mov edx, 0x17
mov dword [edi + 0x1784], edx
mov edi, dword [0x451168]
mov dword [edi + 0x18], ebx
mov edi, dword [0x451168]
mov dword [edi + 0x7e8], 0x17b
mov edi, dword [0x451168]
mov dword [edi + 0xfb8], ecx
mov ecx, dword [0x451168]
mov dword [ecx + 0x1788], edx
mov ecx, dword [0x451168]
mov dword [ecx + 0x1c], ebx
mov ecx, dword [0x451168]
mov dword [ecx + 0x7ec], 0x193
mov edi, dword [0x451168]
mov ecx, 0x1d5
mov dword [edi + 0xfbc], ecx
mov edi, dword [0x451168]
mov dword [edi + 0x178c], 0x29
mov edi, dword [0x451168]
mov dword [edi + 0xc], 4
mov edi, dword [0x451178]
mov dword [edi + 0x10], ebx
mov edi, dword [0x451178]
mov dword [edi + 0x7e0], ebx
mov edi, dword [0x451178]
mov dword [edi + 0xfb0], 0x14e
mov edi, dword [0x451178]
mov dword [edi + 0x1780], 0x6c
mov edi, dword [0x451178]
mov dword [edi + 0x14], ebx
mov edi, dword [0x451178]
mov dword [edi + 0x7e4], 0x74
mov edi, dword [0x451178]
mov dword [edi + 0xfb4], 0x131
mov edi, dword [0x451178]
mov dword [edi + 0x1784], 0xd5
mov edi, dword [0x451178]
mov dword [edi + 0x18], 0x20
mov edi, dword [0x451178]
mov dword [edi + 0x7e8], 0x14b
mov edi, dword [0x451178]
mov dword [edi + 0xfb8], 0xd2
mov edi, dword [0x451178]
mov dword [edi + 0x1788], 0x16
mov edi, dword [0x451178]
mov dword [edi + 0x1c], 0x12
mov edi, dword [0x451178]
mov dword [edi + 0x7ec], 0x166
mov edi, dword [0x451178]
mov dword [edi + 0xfbc], 0xee
mov edi, dword [0x451178]
mov dword [edi + 0x178c], 0x18
mov edi, dword [0x451178]
mov dword [edi + 0x20], ebx
mov edi, dword [0x451178]
mov dword [edi + 0x7f0], 0x181
mov edi, dword [0x451178]
mov dword [edi + 0xfc0], 0x113
mov edi, dword [0x451178]
mov dword [edi + 0x1790], edx
mov edi, dword [0x451178]
mov dword [edi + 0x24], ebx
mov edi, dword [0x451178]
mov dword [edi + 0x7f4], 0x19c
mov edi, dword [0x451178]
mov dword [edi + 0xfc4], 0x113
mov edi, dword [0x451178]
mov dword [edi + 0x1794], 0x18
mov edi, dword [0x451178]
mov dword [edi + 0x28], 0x2a
mov edi, dword [0x451178]
mov dword [edi + 0x7f8], 0x1d2
mov edi, dword [0x451178]
mov dword [edi + 0xfc8], 0xbc
mov edi, dword [0x451178]
mov dword [edi + 0x1798], edx
mov edi, dword [0x451178]
mov dword [edi + 0x2c], 0x37
mov edi, dword [0x451178]
mov dword [edi + 0x7fc], 0x209
mov edi, dword [0x451178]
mov dword [edi + 0xfcc], 0xa5
mov edi, dword [0x451178]
mov dword [edi + 0x179c], edx
mov edx, dword [0x451178]
mov dword [edx + 0x30], 0x15c
mov edx, dword [0x451178]
mov dword [edx + 0x800], ebx
mov edi, dword [0x451178]
mov edx, 0x130
mov dword [edi + 0xfd0], edx
mov edi, dword [0x451178]
mov dword [edi + 0x17a0], 0x9c
mov edi, dword [0x451178]
mov dword [edi + 0x34], 0x197
mov edi, dword [0x451178]
mov dword [edi + 0x804], 0xb7
mov edi, dword [0x451178]
mov dword [edi + 0xfd4], 0x7e
mov edi, dword [0x451178]
mov dword [edi + 0x17a4], 0x15
mov edi, dword [0x451178]
mov dword [edi + 0x38], 0x17b
mov edi, dword [0x451178]
mov dword [edi + 0x808], 0xce
mov edi, dword [0x451178]
mov dword [edi + 0xfd8], 0xba
mov edi, dword [0x451178]
mov dword [edi + 0x17a8], 0x15
mov edi, dword [0x451178]
mov dword [edi + 0x3c], 0x163
mov edi, dword [0x451178]
mov dword [edi + 0x80c], 0xe7
mov edi, dword [0x451178]
mov dword [edi + 0xfdc], 0xeb
mov edi, dword [0x451178]
mov dword [edi + 0x17ac], 0x15
mov edi, dword [0x451178]
mov dword [edi + 0x40], 0x14a
mov edi, dword [0x451178]
mov dword [edi + 0x810], 0xfe
mov edi, dword [0x451178]
mov dword [edi + 0xfe0], 0x117
mov edi, dword [0x451178]
mov dword [edi + 0x17b0], 0x16
mov edi, dword [0x451178]
mov dword [edi + 0x44], 0x160
mov edi, dword [0x451178]
mov dword [edi + 0x814], 0x116
mov edi, dword [0x451178]
mov dword [edi + 0xfe4], 0xe4
mov edi, dword [0x451178]
mov dword [edi + 0x17b4], 0x16
mov edi, dword [0x451178]
mov dword [edi + 0x48], 0x1a0
mov edi, dword [0x451178]
mov dword [edi + 0x818], edx
mov edi, dword [0x451178]
mov dword [edi + 0xfe8], 0x6f
mov edi, dword [0x451178]
mov dword [edi + 0x17b8], ebp
mov edi, dword [0x451178]
mov dword [edi + 0x4c], 0x15c
mov edi, dword [0x451178]
mov dword [edi + 0x81c], 0x9c
mov edi, dword [0x451178]
mov dword [edi + 0xfec], edx
mov edx, dword [0x451178]
mov dword [edx + 0x17bc], 0xa
mov edx, dword [0x451178]
mov dword [edx + 0x50], 0x16c
mov edx, dword [0x451178]
mov dword [edx + 0x820], 0x1c7
mov edx, dword [0x451178]
mov dword [edx + 0xff0], 0x1ad
mov edx, dword [0x451178]
mov dword [edx + 0x17c0], 6
mov edx, dword [0x451178]
mov dword [edx + 0x54], 0x16f
mov edx, dword [0x451178]
mov dword [edx + 0x824], ecx
mov edi, dword [0x451178]
mov edx, 0x3f
mov dword [edi + 0xff4], edx
mov edi, dword [0x451178]
mov dword [edi + 0x17c4], esi
mov edi, dword [0x451178]
mov dword [edi + 0x58], 0x1e7
mov edi, dword [0x451178]
mov dword [edi + 0x828], ecx
mov edi, dword [0x451178]
mov dword [edi + 0xff8], edx
mov edi, dword [0x451178]
mov dword [edi + 0x17c8], esi
mov edi, dword [0x451178]
mov dword [edi + 0x5c], 0x25f
mov edi, dword [0x451178]
mov dword [edi + 0x82c], ecx
mov edi, dword [0x451178]
mov dword [edi + 0xffc], edx
mov edi, dword [0x451178]
mov dword [edi + 0x17cc], esi
mov edi, dword [0x451178]
mov dword [edi + 0x60], 0x2d7
mov edi, dword [0x451178]
mov dword [edi + 0x830], ecx
mov ecx, dword [0x451178]
mov dword [ecx + 0x1000], edx
mov ecx, dword [0x451178]
mov dword [ecx + 0x17d0], esi
mov ecx, dword [0x451178]
mov dword [ecx + 0x64], 0x11d
mov ecx, dword [0x451178]
mov dword [ecx + 0x834], 0x1ca
mov ecx, dword [0x451178]
mov dword [ecx + 0x1004], edx
mov edx, dword [0x451178]
mov dword [edx + 0x17d4], 0x15
mov edx, dword [0x451178]
mov ecx, 0x14a
mov dword [edx + 0x68], ecx
mov edx, dword [0x451178]
mov dword [edx + 0x838], 0x14c
mov edi, dword [0x451178]
mov edx, 0x117
mov dword [edi + 0x1008], edx
mov edi, dword [0x451178]
mov dword [edi + 0x17d8], 0x16
mov edi, dword [0x451178]
mov dword [edi + 0x6c], ecx
mov ecx, dword [0x451178]
mov dword [ecx + 0x83c], 0x16b
mov ecx, dword [0x451178]
mov dword [ecx + 0x100c], edx
mov edx, dword [0x451178]
mov dword [edx + 0x17dc], 0x16
mov ecx, dword [0x451178]
mov dword [ecx + 0x70], 0x148
mov edx, dword [0x451178]
mov dword [edx + 0x840], 0x191
mov ecx, dword [0x451178]
mov dword [ecx + 0x1010], 0x84
mov edx, dword [0x451178]
mov ecx, 0x29
mov dword [edx + 0x17e0], ecx
mov edx, dword [0x451178]
mov dword [edx + 0x74], 0x1e8
mov edx, dword [0x451178]
mov dword [edx + 0x844], 0x190
mov edx, dword [0x451178]
mov dword [edx + 0x1014], 0xb0
mov edx, dword [0x451178]
mov dword [edx + 0x17e4], ecx
mov ecx, dword [0x451178]
mov dword [ecx + 0x78], 0x2b4
mov edx, dword [0x451178]
mov dword [edx + 0x848], 0x7c
mov ecx, dword [0x451178]
mov dword [ecx + 0x1018], eax
mov edx, dword [0x451178]
mov ecx, 0x28
mov dword [edx + 0x17e8], ecx
mov edx, dword [0x451178]
mov dword [edx + 0x7c], 0x296
mov edi, dword [0x451178]
mov edx, 9
mov dword [edi + 0x84c], edx
mov edi, dword [0x451178]
mov dword [edi + 0x101c], eax
mov edi, dword [0x451178]
mov dword [edi + 0x17ec], ecx
mov edi, dword [0x451178]
mov dword [edi + 0x80], 0x2b4
mov edi, dword [0x451178]
mov dword [edi + 0x850], edx
mov edi, dword [0x451178]
mov dword [edi + 0x1020], eax
mov edi, dword [0x451178]
mov dword [edi + 0x17f0], ecx
mov edi, dword [0x451178]
mov dword [edi + 0x84], 0x2d2
mov edi, dword [0x451178]
mov dword [edi + 0x854], edx
mov edi, dword [0x451178]
mov dword [edi + 0x1024], eax
mov edi, dword [0x451178]
mov dword [edi + 0x17f4], ecx
mov edi, dword [0x451178]
mov dword [edi + 0x88], 0x2f0
mov edi, dword [0x451178]
mov dword [edi + 0x858], edx
mov edx, dword [0x451178]
mov dword [edx + 0x1028], eax
mov edx, dword [0x451178]
mov dword [edx + 0x17f8], ecx
mov edx, dword [0x451178]
mov dword [edx + 0x8c], 0x296
mov edi, dword [0x451178]
mov edx, 0x42
mov dword [edi + 0x85c], edx
mov edi, dword [0x451178]
mov dword [edi + 0x102c], eax
mov edi, dword [0x451178]
mov dword [edi + 0x17fc], ecx
mov edi, dword [0x451178]
mov dword [edi + 0x90], 0x2b4
mov edi, dword [0x451178]
mov dword [edi + 0x860], edx
mov edi, dword [0x451178]
mov dword [edi + 0x1030], eax
mov edi, dword [0x451178]
mov dword [edi + 0x1800], ecx
mov edi, dword [0x451178]
mov dword [edi + 0x94], 0x2d2
mov edi, dword [0x451178]
mov dword [edi + 0x864], edx
mov edi, dword [0x451178]
mov dword [edi + 0x1034], eax
mov edi, dword [0x451178]
mov dword [edi + 0x1804], ecx
mov edi, dword [0x451178]
mov dword [edi + 0x98], 0x2f0
mov edi, dword [0x451178]
mov dword [edi + 0x868], edx
mov edx, dword [0x451178]
mov dword [edx + 0x1038], eax
mov edx, dword [0x451178]
mov dword [edx + 0x1808], ecx
mov edx, dword [0x451178]
mov dword [edx + 0x9c], 0x296
mov edi, dword [0x451178]
mov edx, 0x7c
mov dword [edi + 0x86c], edx
mov edi, dword [0x451178]
mov dword [edi + 0x103c], eax
mov edi, dword [0x451178]
mov dword [edi + 0x180c], ecx
mov edi, dword [0x451178]
mov dword [edi + 0xa0], 0x2d2
mov edi, dword [0x451178]
mov dword [edi + 0x870], edx
mov edx, dword [0x451178]
mov dword [edx + 0x1040], eax
mov edx, dword [0x451178]
mov dword [edx + 0x1810], ecx
mov edx, dword [0x451178]
mov dword [edx + 0xa4], 0xc
mov edx, dword [0x451178]
mov dword [edx + 0x874], 0x228
mov edx, dword [0x451178]
mov dword [edx + 0x1044], 0x182
mov edx, dword [0x451178]
mov dword [edx + 0x1814], ecx
mov edx, dword [0x451178]
mov dword [edx + 0xa8], 0x21
mov edx, dword [0x451178]
mov dword [edx + 0x878], 0x1b6
mov edx, dword [0x451178]
mov dword [edx + 0x1048], 0xce
mov edx, dword [0x451178]
mov dword [edx + 0x1818], 0x18
mov edi, dword [0x451178]
mov edx, 0x276
mov dword [edi + 0xac], edx
mov edi, dword [0x451178]
mov dword [edi + 0x87c], 0xb4
mov edi, dword [0x451178]
mov dword [edi + 0x104c], eax
mov edi, dword [0x451178]
mov dword [edi + 0x181c], ebp
mov edi, dword [0x451178]
mov dword [edi + 0xb0], edx
mov edi, dword [0x451178]
mov dword [edi + 0x880], 0xc8
mov edi, dword [0x451178]
mov dword [edi + 0x1050], eax
mov edi, dword [0x451178]
mov dword [edi + 0x1820], ebp
mov edi, dword [0x451178]
mov dword [edi + 0xb4], edx
mov edi, dword [0x451178]
mov dword [edi + 0x884], 0xdc
mov edi, dword [0x451178]
mov dword [edi + 0x1054], eax
mov edi, dword [0x451178]
mov dword [edi + 0x1824], ebp
mov edi, dword [0x451178]
mov dword [edi + 0xb8], edx
mov edi, dword [0x451178]
mov dword [edi + 0x888], 0xf0
mov edi, dword [0x451178]
mov dword [edi + 0x1058], 0x25
mov edi, dword [0x451178]
mov dword [edi + 0x1828], ebp
mov edi, dword [0x451178]
mov dword [edi + 0xbc], edx
mov edi, dword [0x451178]
mov dword [edi + 0x88c], 0x104
mov edi, dword [0x451178]
mov dword [edi + 0x105c], 0x46
mov edi, dword [0x451178]
mov dword [edi + 0x182c], ebp
mov edi, dword [0x451178]
mov dword [edi + 0xc0], edx
mov edi, dword [0x451178]
mov dword [edi + 0x890], 0x118
mov edi, dword [0x451178]
mov dword [edi + 0x1060], 0x46
mov edi, dword [0x451178]
mov dword [edi + 0x1830], ebp
mov edi, dword [0x451178]
mov dword [edi + 0xc4], edx
mov edi, dword [0x451178]
mov dword [edi + 0x894], 0x12c
mov edi, dword [0x451178]
mov dword [edi + 0x1064], 0x6e
mov edi, dword [0x451178]
mov dword [edi + 0x1834], ebp
mov edi, dword [0x451178]
mov dword [edi + 0xc8], edx
mov edi, dword [0x451178]
mov dword [edi + 0x898], 0x140
mov edi, dword [0x451178]
mov dword [edi + 0x1068], 0x66
mov edi, dword [0x451178]
mov dword [edi + 0x1838], ebp
mov edi, dword [0x451178]
mov dword [edi + 0xcc], edx
mov edi, dword [0x451178]
mov dword [edi + 0x89c], 0x154
mov edi, dword [0x451178]
mov dword [edi + 0x106c], 0x2d
mov edi, dword [0x451178]
mov dword [edi + 0x183c], ebp
mov edi, dword [0x451178]
mov dword [edi + 0xd0], edx
mov edx, dword [0x451178]
mov dword [edx + 0x8a0], 0x168
mov edx, dword [0x451178]
mov dword [edx + 0x1070], 0x25
mov edx, dword [0x451178]
mov dword [edx + 0x1840], ebp
mov edx, dword [0x451178]
mov dword [edx + 0xd4], ebx
mov edx, dword [0x451178]
mov dword [edx + 0x8a4], 0x1ed
mov edi, dword [0x451178]
mov edx, 0x115
mov dword [edi + 0x1074], edx
mov edi, dword [0x451178]
mov dword [edi + 0x1844], 0x19
mov edi, dword [0x451178]
mov dword [edi + 0xd8], 0x125
mov edi, dword [0x451178]
mov dword [edi + 0x8a8], 0x1f8
mov edi, dword [0x451178]
mov dword [edi + 0x1078], edx
mov edi, dword [0x451178]
mov dword [edi + 0x1848], 0x19
mov edi, dword [0x451178]
mov dword [edi + 0xdc], 0x195
mov edi, dword [0x451178]
mov dword [edi + 0x8ac], 0x214
mov edi, dword [0x451178]
mov dword [edi + 0x107c], edx
mov edx, dword [0x451178]
mov dword [edx + 0x184c], 0x19
mov edx, dword [0x451178]
mov dword [edx + 0xc], 0x34
mov edx, dword [0x45116c]
mov dword [edx + 0x10], ebx
mov edx, dword [0x45116c]
mov dword [edx + 0x7e0], ebx
mov edx, dword [0x45116c]
mov dword [edx + 0xfb0], 0x2c9
mov edx, dword [0x45116c]
mov dword [edx + 0x1780], 0x14c
mov edx, dword [0x45116c]
mov dword [edx + 0x14], ebx
mov edi, dword [0x45116c]
mov edx, 0x14f
mov dword [edi + 0x7e4], edx
mov edi, dword [0x45116c]
mov dword [edi + 0xfb4], ecx
mov edi, dword [0x45116c]
mov dword [edi + 0x1784], 0x2d
mov edi, dword [0x45116c]
mov dword [edi + 0x18], 0x2e
mov edi, dword [0x45116c]
mov dword [edi + 0x7e8], edx
mov edi, dword [0x45116c]
mov dword [edi + 0xfb8], 0xeb
mov edi, dword [0x45116c]
mov dword [edi + 0x1788], 0x6f
mov edi, dword [0x45116c]
mov dword [edi + 0x1c], ebx
mov edi, dword [0x45116c]
mov dword [edi + 0x7ec], 0x1cd
mov edi, dword [0x45116c]
mov dword [edi + 0xfbc], 0xab
mov edi, dword [0x45116c]
mov dword [edi + 0x178c], 0x26
mov edi, dword [0x45116c]
mov dword [edi + 0x20], 0xb7
mov edi, dword [0x45116c]
mov dword [edi + 0x7f0], 0x1cd
mov edi, dword [0x45116c]
mov dword [edi + 0xfc0], 0xad
mov edi, dword [0x45116c]
mov dword [edi + 0x1790], 0x26
mov edi, dword [0x45116c]
mov dword [edi + 0x24], 0x11c
mov edi, dword [0x45116c]
mov dword [edi + 0x7f4], edx
mov edx, dword [0x45116c]
mov dword [edx + 0xfc4], 0x34
mov edx, dword [0x45116c]
mov dword [edx + 0x1794], ebp
mov edx, dword [0x45116c]
mov dword [edx + 0x28], 0x156
mov edx, dword [0x45116c]
mov dword [edx + 0x7f8], 0x14e
mov edx, dword [0x45116c]
mov dword [edx + 0xfc8], 0x2f
mov edx, dword [0x45116c]
mov dword [edx + 0x1798], 0x14
mov edx, dword [0x45116c]
mov dword [edx + 0x2c], 0x11c
mov edx, dword [0x45116c]
mov dword [edx + 0x7fc], 0x164
mov edi, dword [0x45116c]
mov edx, 0x3b
mov dword [edi + 0xfcc], edx
mov edi, dword [0x45116c]
mov dword [edi + 0x179c], 0x18
mov edi, dword [0x45116c]
mov dword [edi + 0x30], 0x159
mov edi, dword [0x45116c]
mov dword [edi + 0x800], 0x164
mov edi, dword [0x45116c]
mov dword [edi + 0xfd0], edx
mov edx, dword [0x45116c]
mov dword [edx + 0x17a0], 0x18
mov edx, dword [0x45116c]
mov dword [edx + 0x34], 0xaa
mov edx, dword [0x45116c]
mov dword [edx + 0x804], ebx
mov edx, dword [0x45116c]
mov dword [edx + 0xfd4], 0x21f
mov edx, dword [0x45116c]
mov dword [edx + 0x17a4], 0x14c
mov edx, dword [0x45116c]
mov dword [edx + 0x38], 0x19e
mov edx, dword [0x45116c]
mov dword [edx + 0x808], 0x154
mov edx, dword [0x45116c]
mov dword [edx + 0xfd8], 0x11a
mov edx, dword [0x45116c]
mov dword [edx + 0x17a8], 0xef
mov edx, dword [0x45116c]
mov dword [edx + 0x3c], 0x2cd
mov edx, dword [0x45116c]
mov dword [edx + 0x80c], ebx
mov edx, dword [0x45116c]
mov edi, 0xf
mov dword [edx + 0xfdc], edi
mov edx, dword [0x45116c]
mov dword [edx + 0x17ac], ebp
mov edx, dword [0x45116c]
mov dword [edx + 0x40], 0x2cd
mov edx, dword [0x45116c]
mov dword [edx + 0x810], 0x15
mov edx, dword [0x45116c]
mov dword [edx + 0xfe0], edi
mov edx, dword [0x45116c]
mov dword [edx + 0x17b0], ebp
mov edx, dword [0x45116c]
mov dword [edx + 0x44], 0x2cd
mov edx, dword [0x45116c]
mov dword [edx + 0x814], 0x2a
mov edx, dword [0x45116c]
mov dword [edx + 0xfe4], edi
mov edx, dword [0x45116c]
mov dword [edx + 0x17b4], ebp
mov edx, dword [0x45116c]
mov dword [edx + 0x48], 0x2cd
mov edx, dword [0x45116c]
mov dword [edx + 0x818], 0x3f
mov edx, dword [0x45116c]
mov dword [edx + 0xfe8], edi
mov edx, dword [0x45116c]
mov dword [edx + 0x17b8], ebp
mov edx, dword [0x45116c]
mov dword [edx + 0x4c], 0x2cd
mov edx, dword [0x45116c]
mov dword [edx + 0x81c], 0x54
mov edx, dword [0x45116c]
mov dword [edx + 0xfec], edi
mov edx, dword [0x45116c]
mov dword [edx + 0x17bc], ebp
mov edx, dword [0x45116c]
mov dword [edx + 0x50], 0x2cd
mov edx, dword [0x45116c]
mov dword [edx + 0x820], 0x69
mov edx, dword [0x45116c]
mov dword [edx + 0xff0], edi
mov edx, dword [0x45116c]
mov dword [edx + 0x17c0], ebp
mov edx, dword [0x45116c]
mov dword [edx + 0x54], 0x2cd
mov edx, dword [0x45116c]
mov dword [edx + 0x824], 0x7e
mov edx, dword [0x45116c]
mov dword [edx + 0xff4], edi
mov edx, dword [0x45116c]
mov dword [edx + 0x17c4], ebp
mov edx, dword [0x45116c]
mov dword [edx + 0x58], 0x2cd
mov edx, dword [0x45116c]
mov dword [edx + 0x828], 0x93
mov edx, dword [0x45116c]
mov dword [edx + 0xff8], edi
mov edx, dword [0x45116c]
mov dword [edx + 0x17c8], ebp
mov edx, dword [0x45116c]
mov dword [edx + 0x5c], 0x8e
mov edx, dword [0x45116c]
mov dword [edx + 0x82c], 0x1fc
mov edx, dword [0x45116c]
mov dword [edx + 0xffc], 0x102
mov edx, dword [0x45116c]
mov dword [edx + 0x17cc], 0x3a
mov edx, dword [0x45116c]
mov dword [edx + 0x60], 0x120
mov edx, dword [0x45116c]
mov dword [edx + 0x830], 0x182
mov edx, dword [0x45116c]
mov dword [edx + 0x1000], 0x75
mov edx, dword [0x45116c]
mov dword [edx + 0x17d0], 0x19
mov edx, dword [0x45116c]
mov dword [edx + 0x64], 0x120
mov edx, dword [0x45116c]
mov dword [edx + 0x834], 0x1a0
mov edx, dword [0x45116c]
mov dword [edx + 0x1004], 0x3c
mov edx, dword [0x45116c]
mov dword [edx + 0x17d4], 0x18
mov edx, dword [0x45116c]
mov dword [edx + 0x68], ebx
mov edx, dword [0x45116c]
mov dword [edx + 0x838], 0x17f
mov edx, dword [0x45116c]
mov dword [edx + 0x1008], ecx
mov edx, dword [0x45116c]
mov dword [edx + 0x17d8], 0x2d
mov edx, dword [0x45116c]
mov dword [edx + 0x6c], ebx
mov edx, dword [0x45116c]
mov dword [edx + 0x83c], 0x1f9
mov edx, dword [0x45116c]
mov dword [edx + 0x100c], ecx
mov ecx, dword [0x45116c]
mov dword [ecx + 0x17dc], 0x2d
mov edx, dword [0x45116c]
mov dword [edx + 0x70], 2
mov ecx, dword [0x45116c]
mov dword [ecx + 0x840], 0x24a
mov edx, dword [0x45116c]
mov dword [edx + 0x1010], 0x2d5
mov ecx, dword [0x45116c]
mov dword [ecx + 0x17e0], 0xc
mov edx, dword [0x45116c]
mov dword [edx + 0xc], 0x19
mov ecx, dword [0x45117c]
mov dword [ecx + 0x10], ebx
mov edx, dword [0x45117c]
mov dword [edx + 0x7e0], ebx
mov ecx, dword [0x45117c]
mov dword [ecx + 0xfb0], 0x11a
mov edx, dword [0x45117c]
mov dword [edx + 0x1780], 0xb5
mov ecx, dword [0x45117c]
mov dword [ecx + 0x14], 0x11d
mov edx, dword [0x45117c]
mov dword [edx + 0x7e4], ebx
mov edx, dword [0x45117c]
mov ecx, 0xf0
mov dword [edx + 0xfb4], ecx
mov edx, dword [0x45117c]
mov dword [edx + 0x1784], 0x1b
mov edx, dword [0x45117c]
mov dword [edx + 0x18], 0x11d
mov edx, dword [0x45117c]
mov dword [edx + 0x7e8], 0x20
mov edx, dword [0x45117c]
mov dword [edx + 0xfb8], ecx
mov ecx, dword [0x45117c]
mov dword [ecx + 0x1788], 0x1b
mov edx, dword [0x45117c]
mov dword [edx + 0x1c], ebx
mov ecx, dword [0x45117c]
mov dword [ecx + 0x7ec], 0xcc
mov edx, dword [0x45117c]
mov ecx, 0x1a6
mov dword [edx + 0xfbc], ecx
mov edx, dword [0x45117c]
mov dword [edx + 0x178c], 0x58
mov edx, dword [0x45117c]
mov dword [edx + 0x20], ebx
mov edx, dword [0x45117c]
mov dword [edx + 0x7f0], 0x129
mov edx, dword [0x45117c]
mov dword [edx + 0xfc0], ecx
mov ecx, dword [0x45117c]
mov dword [ecx + 0x1790], 0x58
mov edx, dword [0x45117c]
mov dword [edx + 0x24], 0x1d5
mov edx, dword [0x45117c]
mov ecx, 0x3e
mov dword [edx + 0x7f4], ecx
mov edx, dword [0x45117c]
mov dword [edx + 0xfc4], 0x144
mov edx, dword [0x45117c]
mov dword [edx + 0x1794], 0x9b
mov edx, dword [0x45117c]
mov dword [edx + 0x28], 0x1d5
mov edx, dword [0x45117c]
mov dword [edx + 0x7f8], 0xdc
mov edx, dword [0x45117c]
mov dword [edx + 0xfc8], 0x97
mov edx, dword [0x45117c]
mov dword [edx + 0x1798], esi
mov edx, dword [0x45117c]
mov dword [edx + 0x2c], ebx
mov edx, dword [0x45117c]
mov dword [edx + 0x7fc], 0x185
mov edx, dword [0x45117c]
mov dword [edx + 0xfcc], 0x212
mov edx, dword [0x45117c]
mov dword [edx + 0x179c], 0xc8
mov edx, dword [0x45117c]
mov dword [edx + 0x30], 0x11c
mov edx, dword [0x45117c]
mov dword [edx + 0x800], 0x3d
mov edx, dword [0x45117c]
mov dword [edx + 0xfd0], ebp
mov esi, dword [0x45117c]
mov edx, 0xe
mov dword [esi + 0x17a0], edx
mov esi, dword [0x45117c]
mov dword [esi + 0x34], 0x12f
mov esi, dword [0x45117c]
mov dword [esi + 0x804], 0x3d
mov esi, dword [0x45117c]
mov dword [esi + 0xfd4], ebp
mov esi, dword [0x45117c]
mov dword [esi + 0x17a4], edx
mov esi, dword [0x45117c]
mov dword [esi + 0x38], 0x11c
mov esi, dword [0x45117c]
mov dword [esi + 0x808], 0x4c
mov esi, dword [0x45117c]
mov dword [esi + 0xfd8], ebp
mov esi, dword [0x45117c]
mov dword [esi + 0x17a8], edx
mov esi, dword [0x45117c]
mov dword [esi + 0x3c], 0x12f
mov esi, dword [0x45117c]
mov dword [esi + 0x80c], 0x4c
mov esi, dword [0x45117c]
mov dword [esi + 0xfdc], ebp
mov esi, dword [0x45117c]
mov dword [esi + 0x17ac], edx
mov edx, dword [0x45117c]
mov dword [edx + 0xc], 0xc
mov edx, dword [0x4511a4]
mov dword [edx + 0x10], ebx
mov edx, dword [0x4511a4]
mov dword [edx + 0x7e0], ebx
mov esi, dword [0x4511a4]
mov edx, 0x2c0
mov dword [esi + 0xfb0], edx
mov esi, dword [0x4511a4]
mov dword [esi + 0x1780], 0x138
mov esi, dword [0x4511a4]
mov dword [esi + 0x14], ebx
mov esi, dword [0x4511a4]
mov dword [esi + 0x7e4], 0x168
mov esi, dword [0x4511a4]
mov dword [esi + 0xfb4], 0x1b7
mov esi, dword [0x4511a4]
mov dword [esi + 0x1784], 0x17
mov esi, dword [0x4511a4]
mov dword [esi + 0x18], ebx
mov esi, dword [0x4511a4]
mov dword [esi + 0x7e8], 0x181
mov esi, dword [0x4511a4]
mov dword [esi + 0xfb8], 0x1b7
mov esi, dword [0x4511a4]
mov dword [esi + 0x1788], 0x17
mov esi, dword [0x4511a4]
mov dword [esi + 0x1c], ebx
mov esi, dword [0x4511a4]
mov dword [esi + 0x7ec], 0x19b
mov esi, dword [0x4511a4]
mov dword [esi + 0xfbc], edx
mov edx, dword [0x4511a4]
mov dword [edx + 0x178c], 0x102
mov edx, dword [0x4511a4]
mov dword [edx + 0x20], ebx
mov edx, dword [0x4511a4]
mov dword [edx + 0x7f0], 0x2a1
mov edx, dword [0x4511a4]
mov dword [edx + 0xfc0], 0x21f
mov edx, dword [0x4511a4]
mov dword [edx + 0x1790], 0x18
mov edx, dword [0x4511a4]
mov dword [edx + 0x24], 0x224
mov esi, dword [0x4511a4]
mov edx, 0x16b
mov dword [esi + 0x7f4], edx
mov esi, dword [0x4511a4]
mov dword [esi + 0xfc4], ebp
mov esi, dword [0x4511a4]
mov dword [esi + 0x1794], ebp
mov esi, dword [0x4511a4]
mov dword [esi + 0x28], 0x23c
mov dword [esi + 0x7f8], edx
mov edx, dword [0x4511a4]
mov dword [edx + 0xfc8], ebp
mov dword [edx + 0x1798], ebp
mov dword [edx + 0x2c], 0x1bb
mov dword [edx + 0x7fc], 0x184
mov dword [edx + 0xfcc], 0x157
mov dword [edx + 0x179c], 0x16
mov dword [edx + 0x30], 0xf3
mov dword [edx + 0x800], 0xf2
mov dword [edx + 0xfd0], 0x13
mov dword [edx + 0x17a0], 0x13
nop
nop
nop
nop
nop
mov dword [edx + 0xc], 9
mov edx, dword [0x451188]
mov dword [edx + 0x10], ebx
mov edx, dword [0x451188]
mov dword [edx + 0x7e0], ebx
mov esi, dword [0x451188]
mov edx, 0x283
mov dword [esi + 0xfb0], edx
mov esi, dword [0x451188]
mov dword [esi + 0x1780], 0xa2
mov esi, dword [0x451188]
mov dword [esi + 0x14], ebx
mov esi, dword [0x451188]
mov dword [esi + 0x7e4], 0xa3
mov esi, dword [0x451188]
mov dword [esi + 0xfb4], edx
mov esi, dword [0x451188]
mov dword [esi + 0x1784], 0x22
mov esi, dword [0x451188]
mov dword [esi + 0x18], ebx
mov esi, dword [0x451188]
mov dword [esi + 0x7e8], 0xc6
mov esi, dword [0x451188]
mov dword [esi + 0xfb8], edx
mov edx, dword [0x451188]
mov dword [edx + 0x1788], 0x118
mov edx, dword [0x451188]
mov dword [edx + 0x1c], ebx
mov esi, dword [0x451188]
mov edx, 0x1e2
mov dword [esi + 0x7ec], edx
mov esi, dword [0x451188]
mov dword [esi + 0xfbc], 0xea
mov esi, dword [0x451188]
mov dword [esi + 0x178c], eax
mov esi, dword [0x451188]
mov dword [esi + 0x20], pe_nt_image_headers32
mov esi, dword [0x451188]
mov dword [esi + 0x7f0], edx
mov edx, dword [0x451188]
mov dword [edx + 0xfc0], 0x58
mov edx, dword [0x451188]
mov dword [edx + 0x1790], eax
mov eax, dword [0x451188]
mov dword [eax + 0x24], ebx
mov edx, dword [0x451188]
mov dword [edx + 0x7f4], 0x204
mov eax, dword [0x451188]
mov dword [eax + 0xfc4], 0x168
mov edx, dword [0x451188]
mov dword [edx + 0x1794], 0x16
mov edx, dword [0x451188]
mov eax, 0x288
mov dword [edx + 0x28], eax
mov edx, dword [0x451188]
mov dword [edx + 0x7f8], 5
mov edx, dword [0x451188]
mov dword [edx + 0xfc8], ecx
mov edx, dword [0x451188]
mov esi, 0xd
mov dword [edx + 0x1798], esi
mov edx, dword [0x451188]
mov dword [edx + 0x2c], eax
mov edx, dword [0x451188]
mov dword [edx + 0x7fc], 0x1b
mov edx, dword [0x451188]
mov dword [edx + 0xfcc], ecx
mov edx, dword [0x451188]
mov dword [edx + 0x179c], esi
mov edx, dword [0x451188]
mov dword [edx + 0x30], eax
mov edx, dword [0x451188]
mov dword [edx + 0x800], 0x31
mov edx, dword [0x451188]
mov dword [edx + 0xfd0], ecx
mov edx, dword [0x451188]
mov dword [edx + 0x17a0], esi
mov edx, dword [0x451188]
mov dword [edx + 0x34], eax
mov edx, dword [0x451188]
mov dword [edx + 0x804], 0x47
mov edx, dword [0x451188]
mov dword [edx + 0xfd4], ecx
mov edx, dword [0x451188]
mov dword [edx + 0x17a4], esi
mov edx, dword [0x451188]
mov dword [edx + 0x38], 0x167
mov edx, dword [0x451188]
mov dword [edx + 0x808], 0x1e3
mov edx, dword [0x451188]
mov dword [edx + 0xfd8], 0x6c
mov edx, dword [0x451188]
mov dword [edx + 0x17a8], 0x12
mov edx, dword [0x451188]
mov dword [edx + 0x3c], eax
mov eax, dword [0x451188]
mov dword [eax + 0x80c], 0x5d
mov edx, dword [0x451188]
mov dword [edx + 0xfdc], ecx
mov eax, dword [0x451188]
mov dword [eax + 0x17ac], esi
mov ecx, dword [0x451188]
mov dword [ecx + 0x40], 0x174
mov edx, dword [0x451188]
mov dword [edx + 0x810], 0x1f7
mov eax, dword [0x451188]
mov dword [eax + 0xfe0], 0x47
mov ecx, dword [0x451188]
mov dword [ecx + 0x17b0], 9
mov edx, dword [0x451188]
mov eax, 0x173
mov dword [edx + 0x44], eax
mov ecx, dword [0x451188]
mov dword [ecx + 0x814], 0x202
mov edx, dword [0x451188]
mov ecx, 0x93
mov dword [edx + 0xfe4], ecx
mov edx, dword [0x451188]
mov dword [edx + 0x17b4], 0xa
mov edx, dword [0x451188]
mov dword [edx + 0x48], eax
mov eax, dword [0x451188]
mov dword [eax + 0x818], 0x20d
mov edx, dword [0x451188]
mov dword [edx + 0xfe8], ecx
mov eax, dword [0x451188]
mov dword [eax + 0x17b8], 0xa
mov ecx, dword [0x451188]
mov dword [ecx + 0xc], edi
push ebx
push ebx
push str.UICS2.bmp
call fcn.0043ee30
pop eax
mov dword [0x451174], eax
push ebx
push ebx
push str.UICS3.bmp
call fcn.0043ee30
pop eax
mov dword [0x451164], eax
push ebx
push ebx
push str.UICS4.bmp
call fcn.0043ee30
pop eax
mov dword [0x451184], eax
push ebx
push ebx
push str.UICS5.bmp
call fcn.0043ee30
pop eax
mov dword [0x451194], eax
push ebx
push ebx
push str.UICS6.bmp
call fcn.0043ee30
pop eax
mov dword [0x451180], eax
push ebx
push ebx
push str.UIFRAME.bmp
call fcn.0043ee30
pop eax
mov dword [0x4511a8], eax
push ebx
push ebx
push str.UIWORDS0.bmp
call fcn.0043ee30
pop eax
mov dword [0x44faf4], eax
push ebx
push ebx
push str.UIWORDS1.bmp
call fcn.0043ee30
pop eax
mov dword [0x44f888], eax
push ebx
push ebx
push str.UIWORDS2.bmp
call fcn.0043ee30
pop eax
mov dword [0x44fcbc], eax
push ebx
push ebx
push str.UIWORDS3.bmp
call fcn.0043ee30
pop eax
mov dword [0x44fb68], eax
push ebx
push ebx
push str.UIWORDS4.bmp
call fcn.0043ee30
pop eax
mov dword [0x44faf8], eax
push ebx
push ebx
push str.UIWORDS5.bmp
call fcn.0043ee30
pop eax
mov dword [0x44fd80], eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [0x44faf4]
mov eax, pe_nt_image_headers32
mov dword [edx + 0xc], eax
mov ecx, dword [0x44f888]
mov dword [ecx + 0xc], eax
mov edx, dword [0x44fcbc]
mov dword [edx + 0xc], eax
mov ecx, dword [0x44fb68]
mov dword [ecx + 0xc], eax
mov edx, dword [0x44faf8]
mov dword [edx + 0xc], eax
mov ecx, dword [0x44fd80]
xor edx, edx
mov dword [ecx + 0xc], eax
mov dword [esp + 0x420], esi
mov dword [esp + 0x1c], edx
mov eax, 0x7e0
mov esi, dword [0x44faf4]
mov ecx, edx
shr edx, 4
and ecx, edi
shl ecx, 4
mov dword [eax + esi - 0x7d0], ecx
shl edx, 4
inc edx
mov dword [eax + esi], edx
mov dword [eax + esi + 0x7d0], 8
mov dword [eax + esi + 0xfa0], 0x10
mov esi, dword [0x44f888]
mov dword [eax + esi - 0x7d0], ecx
mov dword [eax + esi], edx
mov dword [eax + esi + 0x7d0], 8
mov dword [eax + esi + 0xfa0], 0x10
mov esi, dword [0x44fcbc]
mov dword [eax + esi - 0x7d0], ecx
mov dword [eax + esi], edx
mov dword [eax + esi + 0x7d0], 8
mov dword [eax + esi + 0xfa0], 0x10
mov esi, dword [0x44fb68]
mov dword [eax + esi - 0x7d0], ecx
mov dword [eax + esi], edx
mov dword [eax + esi + 0x7d0], 8
mov dword [eax + esi + 0xfa0], 0x10
mov esi, dword [0x44faf8]
mov dword [eax + esi - 0x7d0], ecx
mov dword [eax + esi], edx
mov dword [eax + esi + 0x7d0], 8
mov dword [eax + esi + 0xfa0], 0x10
mov esi, dword [0x44fd80]
mov dword [eax + esi - 0x7d0], ecx
mov dword [eax + esi], edx
mov dword [eax + esi + 0x7d0], 8
mov edx, dword [esp + 0x1c]
mov dword [eax + esi + 0xfa0], 0x10
inc edx
add eax, 4
mov dword [esp + 0x1c], edx
cmp eax, 0xbe0
jl 0x426f06
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
call fcn.00423480
mov edi, 1
mov dword [0x44d068], ebx
or esi, 0xffffffff
cmp dword [0x44d064], 0xfffffffe
jne 0x4270c9
mov eax, dword [0x450be8]
cmp eax, esi
jne 0x4270b9
mov dword [0x44d064], 0xfffffffd
jmp 0x4270c9
cmp eax, 1
mov dword [0x44d064], ebx
jne 0x4270c9
call fcn.004237e0
push ebx
push 0x10206c
push dword [0x44d790]
push dword [0x44d78c]
push ebx
push ebx
call fcn.00415160
mov ecx, dword [0x4511ac]
cmp ecx, ebx
jne 0x4270f7
call fcn.00423840
mov ecx, dword [0x4511ac]
cmp dword [0x44d064], ebx
push 4
push ebx
push 1
push esi
jne 0x42710d
push dword [0x453da4]
jmp 0x42710e
push ebx
push ebx
call fcn.0043f010
mov eax, dword [0x44d064]
cmp eax, ebx
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
jne 0x4275cb
call fcn.004236d0
mov ecx, 7
mov esi, str.bz_Pasvl_Xqqg__Vtbtvkz_Zooi
lea edi, [esp + 0x48]
rep movsd dword es:[edi], dword [esi]
mov ecx, 7
mov esi, str.1:___3238__dlm_uihjws_thsftyee
lea edi, [esp + 0x84]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x45757c]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 7
mov esi, str.huvs:01zwx0OiuvoeGkjhugu.dqp
lea edi, [esp + 0x64]
rep movsd dword es:[edi], dword [esi]
add eax, 0x1eb
movsb byte es:[edi], byte [esi]
lea esi, [esp + 0x48]
mov dword [esp + 0x14], eax
xor ecx, ecx
lea edx, [esi + 1]
lea ebx, [ebx]
mov al, byte [esi]
add esi, 1
cmp al, bl
jne 0x427180
sub esi, edx
je 0x4271b2
lea ecx, [ecx]
mov dl, cl
and dl, 3
sub byte [esp + ecx + 0x48], dl
lea eax, [esp + 0x48]
add ecx, 1
lea esi, [eax + 1]
mov dl, byte [eax]
add eax, 1
cmp dl, bl
jne 0x4271a3
sub eax, esi
cmp ecx, eax
jb 0x427190
lea esi, [esp + 0x84]
xor ecx, ecx
lea edx, [esi + 1]
mov edi, edi
mov al, byte [esi]
add esi, 1
cmp al, bl
jne 0x4271c0
sub esi, edx
je 0x4271f7
lea ecx, [ecx]
mov al, cl
and al, 3
sub byte [esp + ecx + 0x84], al
lea eax, [esp + 0x84]
add ecx, 1
lea esi, [eax + 1]
mov dl, byte [eax]
add eax, 1
cmp dl, bl
jne 0x4271e8
sub eax, esi
cmp ecx, eax
jb 0x4271d0
lea esi, [esp + 0x64]
xor ecx, ecx
lea edx, [esi + 1]
mov al, byte [esi]
add esi, 1
cmp al, bl
jne 0x427200
sub esi, edx
je 0x427232
lea ecx, [ecx]
mov dl, cl
and dl, 3
sub byte [esp + ecx + 0x64], dl
lea eax, [esp + 0x64]
add ecx, 1
lea esi, [eax + 1]
mov dl, byte [eax]
add eax, 1
cmp dl, bl
jne 0x427223
sub eax, esi
cmp ecx, eax
jb 0x427210
mov edi, dword [esp + 0x14]
mov ecx, 2
nop
push edi
push 0x24f
push 0xd07750
push 0x602010
lea eax, [esp + 0x58]
push eax
push ecx
call fcn.00401290
lea eax, [edi + 0x14]
push eax
mov eax, 2
push 0x24f
push 0xd07750
push 0x602010
lea edx, [esp + 0xac]
push edx
push eax
call fcn.00401290
mov edx, 2
nop
lea esi, [edi + 0x28]
push esi
push 0x24f
push 0xd07750
push 0x602010
lea ecx, [esp + 0xa4]
push ecx
push edx
call fcn.00401290
add esp, 0x48
push 2
call fcn.004155c0
cmp edx, 0x24f
jle 0x427338
mov eax, ecx
lea ecx, [edi + 0x1e]
cmp eax, ecx
jle 0x427338
lea edx, [edi + 0x3c]
cmp eax, edx
jl 0x4272d2
cmp dword [0x45757c], ebx
jne 0x427338
mov ecx, 2
nop
push esi
push 0x24f
push 0xffffff
push 0x602010
lea eax, [esp + 0x74]
push eax
push ecx
call fcn.00401290
add esp, 0x18
cmp dword [0x44d060], ebx
jne 0x427338
cmp dword [0x457580], 1
jne 0x427338
push ebx
mov ecx, 0x455610
mov dword [0x457580], ebx
call fcn.00401a30
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
push ebx
push ebx
push str.http:__littlefighter.com
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 2
call fcn.004155c0
nop
nop
mov eax, edx
cmp eax, 0x263
jle 0x4273f1
cmp eax, 0x2ae
jge 0x4273f1
cmp ecx, edi
jle 0x4273f1
lea eax, [edi + 0x14]
cmp ecx, eax
jge 0x4273f1
xor eax, eax
mov edi, edi
mov cl, byte [esp + eax + 0x4b]
mov byte [esp + eax + 0xa4], cl
add eax, 1
cmp cl, bl
jne 0x427370
mov eax, 2
push edi
push 0x263
push 0xffffff
push 0x602010
lea edx, [esp + 0xb4]
push edx
push eax
mov byte [esp + 0xc6], bl
call fcn.00401290
add esp, 0x18
cmp dword [0x44d060], ebx
jne 0x4273f1
cmp dword [0x457580], 1
jne 0x4273f1
push ebx
mov ecx, 0x455610
mov dword [0x457580], ebx
call fcn.00401a30
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
push ebx
push ebx
push str.http:__martiwong.com
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 2
call fcn.004155c0
cmp edx, 0x2b4
jle 0x4274a2
nop
nop
nop
cmp ecx, edi
jle 0x4274a2
lea eax, [edi + 0x14]
cmp ecx, eax
jge 0x4274a2
xor eax, eax
nop
nop
nop
nop
mov cl, byte [esp + eax + 0x57]
mov byte [esp + eax + 0xa4], cl
add eax, 1
cmp cl, bl
jne 0x427420
mov edx, 2
nop
push edi
push 0x2b6
push 0xffffff
push 0x602010
lea ecx, [esp + 0xb4]
push ecx
push edx
mov byte [esp + 0xc8], bl
call fcn.00401290
add esp, 0x18
cmp dword [0x44d060], ebx
jne 0x4274a2
cmp dword [0x457580], 1
jne 0x4274a2
push ebx
mov ecx, 0x455610
mov dword [0x457580], ebx
call fcn.00401a30
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
push ebx
push ebx
push str.http:__lf2.net_starsky
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0x4554a4
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov esi, dword [0x458424]
push 0x4554a4
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor edi, edi
inc edi
cmp esi, edi
je 0x427582
cmp esi, 2
je 0x427582
cmp dword [0x450be8], ebx
mov esi, 5
nop
mov ecx, dword [0x451188]
push esi
push ebx
push edi
jne 0x427558
push 6
push 5
push 0x2d5
call fcn.0043f010
push 5
call fcn.004155c0
nop
cmp edx, 0x2d5
jl 0x42759a
cmp ecx, 0x12
jge 0x42759a
push esi
push ebx
push edi
push 7
mov ecx, dword [0x451188]
push 5
push 0x2d5
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x42759a
cmp dword [0x457580], edi
jne 0x42759a
push ebx
mov ecx, 0x455610
mov dword [0x457580], ebx
mov dword [0x44d064], 0xfffffffd
call fcn.00401a30
jmp 0x42759a
push 8
push 5
push 0x2d5
call fcn.0043f010
push 5
call fcn.004155c0
nop
cmp edx, 0x2d5
jl 0x42759a
cmp ecx, 0x12
jge 0x42759a
push esi
push ebx
push edi
push 9
jmp 0x427519
mov ecx, dword [0x451188]
push 5
push ebx
push edi
push 0xb
push 5
push 0x2d5
call fcn.0043f010
nop
nop
mov eax, dword [0x453da4]
mov ecx, dword [0x4511a0]
push 1
push ebx
push 1
push 1
add eax, 0x60
push eax
push 0x9b
call fcn.0043f010
mov eax, dword [0x44d064]
mov edi, dword [esp + 0x20]
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
cmp eax, 0xfffffffd
jne 0x4277f3
mov ebp, dword [0x4511f4]
cmp ebp, ebx
jne 0x4275e3
lea ebp, [eax + 0x63]
jmp 0x4275fc
lea ecx, [ebp + 0x5a]
mov eax, 0xd5555555
imul ecx
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
add ebp, ecx
mov dword [0x4511f4], ebp
mov ecx, dword [0x4511a0]
mov esi, 1
push esi
push ebx
push esi
push esi
push ebp
push 0x9b
call fcn.0043f010
mov ecx, dword [0x451188]
push esi
push ebx
push esi
push ebx
lea edx, [ebp + 0x64]
push edx
push 0x4b
call fcn.0043f010
push 1
call fcn.004155c0
nop
nop
sub edx, 0xd1
cmp edx, 0xe9
ja 0x4276a9
lea eax, [ebp + 0xae]
cmp ecx, eax
jle 0x4276a9
lea edx, [ebp + 0xcb]
cmp ecx, edx
jge 0x4276a9
mov ecx, dword [0x451188]
push esi
push ebx
push esi
push 3
push eax
push 0xd1
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x4276a9
cmp dword [0x457580], esi
jne 0x4276a9
mov dword [0x457580], ebx
mov dword [0x450be8], esi
call fcn.00423230
push ebx
mov ecx, 0x455610
mov dword [0x44d064], ebx
mov dword [0x4511f4], ebx
call fcn.00401a30
call fcn.004237e0
push 1
call fcn.004155c0
nop
nop
nop
sub edx, 0x1d1
cmp edx, 0x57
ja 0x427720
lea eax, [ebp + 0xae]
cmp ecx, eax
jle 0x427720
lea edx, [ebp + 0xcb]
cmp ecx, edx
jge 0x427720
mov ecx, dword [0x451188]
push esi
push ebx
push esi
push 4
push eax
push 0x1d1
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x427720
cmp dword [0x457580], esi
jne 0x427720
mov dword [0x457580], ebx
mov dword [0x450be8], ebx
call fcn.00423230
push ebx
mov ecx, 0x455614
mov dword [0x44d064], ebx
mov dword [0x4511f4], ebx
call fcn.00401a30
cmp dword [0x4511f4], ebx
jne 0x4277bd
push 1
call fcn.004155c0
nop
nop
sub edx, 0xcb
cmp edx, 0x166
ja 0x4277a0
lea eax, [ebp + 0xf0]
cmp ecx, eax
jle 0x4277a0
lea edx, [ebp + 0x106]
cmp ecx, edx
jge 0x4277a0
mov ecx, dword [0x451188]
push esi
push ebx
push esi
push 5
push eax
push 0xca
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x427798
cmp dword [0x457580], esi
jne 0x427798
push ebx
mov ecx, 0x455614
mov dword [0x457580], ebx
mov dword [0x4511f4], 0xffffffef
call fcn.00401a30
cmp dword [0x4511f4], ebx
jne 0x4277bd
mov ecx, dword [0x451188]
push esi
push ebx
push esi
push esi
add ebp, 0x105
push ebp
push 0x4b
call fcn.0043f010
jmp 0x42873e
mov ecx, dword [0x451188]
push esi
push ebx
push esi
push 2
lea eax, [ebp + 0x106]
push eax
push 0x4b
call fcn.0043f010
mov ecx, dword [0x451188]
push esi
push ebx
push esi
push esi
add ebp, 0x21e
push ebp
push 0x4b
call fcn.0043f010
jmp 0x42873e
cmp eax, 0xffffffff
jne 0x42790d
mov ecx, dword [0x45117c]
push 1
push ebx
push 1
push 5
push 0xcd
push 0x102
call fcn.0043f010
test byte [0x4511f0], 1
mov ebp, dword [sym.imp.WINMM.dll_timeGetTime]
jne 0x427835
or dword [0x4511f0], 1
call ebp
mov dword [0x4511ec], eax
call ebp
sub eax, dword [0x4511ec]
cmp eax, 0x96
jbe 0x42785f
mov eax, dword [0x4511e8]
inc eax
cdq
mov ecx, 0xe
idiv ecx
mov dword [0x4511e8], edx
call ebp
mov dword [0x4511ec], eax
xor esi, esi
cmp dword [0x4511e8], ebx
jle 0x427890
mov ebp, 0x11c
push 1
push 0x577fd7
push 0xc
push 5
push 0x122
push ebp
call fcn.00415160
inc esi
add ebp, 0x14
cmp esi, dword [0x4511e8]
jl 0x42786e
mov esi, 1
push 1
call fcn.004155c0
mov eax, ecx
nop
nop
cmp edx, 0x14b
jl 0x427901
cmp eax, 0x140
jl 0x427901
cmp edx, 0x1e2
jge 0x427901
cmp eax, 0x15a
jge 0x427901
mov ecx, dword [0x45117c]
push esi
push ebx
push 1
push 6
push 0x140
push 0x14b
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x427901
cmp dword [0x457580], 1
jne 0x427901
push ebx
mov ecx, 0x455614
call fcn.00401a30
mov dword [0x457580], ebx
mov dword [0x44d064], ebx
add dword [0x4511e4], 1
jmp 0x42873e
cmp eax, ebx
jne 0x427ca7
mov ebp, dword [0x453da4]
mov ecx, dword [0x45117c]
push 1
push ebx
push 1
push ebx
add ebp, 0xca
push ebp
push 0x107
call fcn.0043f010
push 1
call fcn.004155c0
xor eax, eax
cmp edx, 0x114
mov dword [0x4511e0], ebx
jl 0x427c94
cmp edx, 0x208
jg 0x427c94
lea edx, [ebp + 0xf]
cmp ecx, edx
jl 0x427972
lea edx, [ebp + 0x27]
cmp ecx, edx
jg 0x427972
mov eax, 1
lea edx, [ebp + 0x2d]
cmp ecx, edx
mov dword [esp + 0x14], edx
jl 0x427989
lea edx, [ebp + 0x46]
cmp ecx, edx
jg 0x427989
mov eax, 2
lea edx, [ebp + 0x4d]
cmp ecx, edx
jl 0x42799c
lea edx, [ebp + 0x66]
cmp ecx, edx
jg 0x42799c
mov eax, 3
lea edx, [ebp + 0x6b]
cmp ecx, edx
jl 0x4279b2
lea esi, [ebp + 0x84]
cmp ecx, esi
jg 0x4279b2
mov eax, 4
lea esi, [ebp + 0x89]
cmp ecx, esi
jl 0x4279ca
lea esi, [ebp + 0xa2]
cmp ecx, esi
jle 0x427c3a
mov esi, 1
cmp eax, esi
jne 0x427a68
mov ecx, dword [0x4511a0]
push esi
push ebx
push esi
push 7
add ebp, 0xd
push ebp
push 0x115
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x427c94
cmp dword [0x457580], esi
jne 0x427c94
push ebx
mov ecx, 0x455610
mov dword [0x457580], ebx
call fcn.00401a30
mov eax, dword [esp + 0x18]
mov byte [0x4553bf], 0x75
mov dword [0x44d064], ebx
mov dword [eax], esi
call fcn.00422ac0
push edi
push 0x44d060
mov dword [0x450b4c], esi
mov dword [0x450b50], 2
mov dword [0x450b54], 3
mov dword [0x450b58], 4
call fcn.00423b00
add esp, 8
jmp 0x42873e
cmp eax, 2
jne 0x427b7e
call fcn.00422ac0
mov ecx, dword [esp + 0x14]
push esi
push ebx
push esi
push 8
push ecx
mov ecx, dword [0x4511a0]
push 0x115
call fcn.0043f010
cmp dword [0x457580], esi
jne 0x427c94
cmp dword [0x44d060], ebx
jne 0x427c94
push ebx
mov ecx, 0x455610
mov dword [0x457580], ebx
call fcn.00401a30
mov edx, dword [0x4546f4]
push edx
mov dword [0x44d064], esi
call fcn.00402b60
add esp, 4
test eax, eax
jne 0x427ae9
push ebx
push str.Error
push str.InitWinSock__
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x4287de
push 0xc8
push ebx
push 0x44f340
call sub.MSVCR80.dll_memset
mov eax, dword [0x44f264]
add esp, 0xc
push eax
call sub.WSOCK32.dll_inet_ntoa
mov edx, 0x44f340
lea esp, [esp]
mov cl, byte [eax]
mov byte [edx], cl
add eax, esi
add edx, esi
cmp cl, bl
jne 0x427b10
mov ecx, dword [0x44f1b4]
push 0x10
push 0x44f58c
push ecx
call sub.WSOCK32.dll_bind
cmp eax, 0xffffffff
jne 0x427b45
mov edx, dword [0x44f1b4]
push edx
call sub.WSOCK32.dll_closesocket
jmp 0x4287de
mov eax, dword [0x44f1b4]
push 5
push eax
call sub.WSOCK32.dll_listen
cmp eax, 0xffffffff
jne 0x427c94
push ebx
push str.Error
push str.Listening___error
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [0x44f1b4]
push ecx
call sub.WSOCK32.dll_closesocket
jmp 0x4287de
cmp eax, 3
jne 0x427bdc
mov ecx, dword [0x4511a0]
push esi
push ebx
push esi
push 9
add ebp, 0x4c
push ebp
push 0x115
call fcn.0043f010
cmp dword [0x457580], esi
jne 0x427c94
cmp dword [0x44d060], ebx
jne 0x427c94
push ebx
mov ecx, 0x455610
call fcn.00401a30
push edi
push 0x44d060
mov dword [0x44d064], 6
call fcn.00423b00
add esp, 8
jmp 0x42873e
cmp eax, 4
jne 0x427c35
mov ecx, dword [0x45117c]
push esi
push ebx
push esi
push esi
push edx
push 0x117
call fcn.0043f010
cmp dword [0x457580], esi
jne 0x427c94
cmp dword [0x44d060], ebx
jne 0x427c94
push ebx
mov ecx, 0x455610
call fcn.00401a30
push edi
push 0x44d060
mov dword [0x44d064], 7
call fcn.00423b00
add esp, 8
jmp 0x427ca2
cmp eax, 5
jne 0x427c94
mov ecx, dword [0x45117c]
push 1
push ebx
push 1
push 2
add ebp, 0x8b
push ebp
push 0x117
call fcn.0043f010
cmp dword [0x457580], 1
jne 0x427c94
cmp dword [0x44d060], ebx
jne 0x427c94
push ebx
mov ecx, 0x455610
call fcn.00401a30
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
push ebx
push ebx
push str.http:__littlefighter.com
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push edi
push 0x44d060
call fcn.00423b00
add esp, 8
jmp 0x42873e
cmp eax, 1
jne 0x427f75
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edi, 1
nop
nop
mov ecx, dword [0x4511a0]
push edi
push ebx
push 1
push 1
push 0x69
push 0x9b
call fcn.0043f010
mov ecx, dword [0x4511a0]
push edi
push ebx
push 1
push 3
push 0xde
push 0xfd
call fcn.0043f010
mov ecx, dword [0x4511a0]
push edi
push ebx
push 1
push 0xe
push 0x14f
push 0xfd
call fcn.0043f010
push 0x44f340
lea edx, [esp + 0x15c]
push str._Your_IP_Address:__s
push edx
call dword [sym.imp.MSVCR80.dll_sprintf]
push 0xfb
push 0x121
push 0xffffff
push 0x501e00
lea eax, [esp + 0x174]
push eax
push 1
call fcn.00401290
add esp, 0x24
push 2
call fcn.004155c0
nop
nop
mov eax, edx
cmp eax, 0x170
jl 0x427dda
cmp eax, 0x316
jg 0x427dda
mov eax, ecx
cmp eax, 0x1c1
jl 0x427dda
cmp eax, 0x219
jge 0x427dda
mov ecx, dword [0x45117c]
push 2
push ebx
push ebx
push 3
push 0x1c1
push 0x170
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x427df5
cmp dword [0x457580], 1
jne 0x427df5
push ebx
mov ecx, 0x455610
call fcn.00401a30
push 0x12c
call esi
push 1
push ebx
push ebx
push str.http:__lf2.net_forum
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x427df5
mov ecx, dword [0x45117c]
push 2
push ebx
push ebx
push 4
push 0x1c1
push 0x170
call fcn.0043f010
push 1
call fcn.004155c0
nop
xor eax, eax
cmp edx, 0x104
jl 0x42873e
cmp edx, 0x223
jg 0x42873e
nop
nop
nop
nop
cmp ecx, 0x112
jl 0x427e30
cmp ecx, 0x12c
jg 0x427e30
mov eax, 1
cmp ecx, 0x131
jl 0x427e45
cmp ecx, 0x14a
jg 0x427e45
mov eax, 2
cmp ecx, 0x150
jl 0x427e59
cmp ecx, 0x169
jle 0x427f17
cmp eax, 1
jne 0x427eab
mov ecx, dword [0x4511a0]
push edi
push ebx
push eax
push 5
push 0x112
push 0x103
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x42873e
cmp dword [0x457580], 1
jne 0x42873e
push ebx
mov ecx, 0x455610
call fcn.00401a30
mov dword [0x44d064], 2
jmp 0x42873e
cmp eax, 2
jne 0x427f0e
mov ecx, dword [0x4511a0]
push edi
push ebx
push 1
push 6
push 0x130
push 0x103
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x42873e
cmp dword [0x457580], 1
jne 0x42873e
push ebx
mov ecx, 0x455610
call fcn.00401a30
mov edx, dword [esp + 0x18]
mov dword [0x44d064], 3
mov dword [0x4511dc], ebx
mov byte [edx + 0x7d8], bl
jmp 0x42873e
cmp eax, 3
jne 0x42873e
mov ecx, dword [0x4511a0]
push edi
push ebx
push 1
push 0xc
push 0x150
push 0x149
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x42873e
cmp dword [0x457580], 1
jne 0x42873e
push ebx
mov ecx, 0x455614
call fcn.00401a30
mov dword [0x44d064], ebx
mov dword [0x44d780], 0xffffffff
call fcn.00423910
call fcn.00402d70
jmp 0x42873e
cmp eax, 2
jne 0x42813f
mov esi, 1
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [0x4511a0]
push esi
push ebx
push esi
push esi
push 0x69
push 0x9b
call fcn.0043f010
mov ecx, dword [0x4511a0]
push esi
push ebx
push esi
push 3
push 0xde
push 0xfd
call fcn.0043f010
mov ecx, dword [0x4511a0]
push esi
push ebx
push esi
push 0xe
push 0x14f
push 0xfd
call fcn.0043f010
push 0x44f340
lea eax, [esp + 0x15c]
push str._Your_IP_Address:__s
push eax
call dword [sym.imp.MSVCR80.dll_sprintf]
nop
nop
nop
nop
nop
nop
push 0xfb
push 0x121
push 0xffffff
push 0x501e00
lea ecx, [esp + 0x174]
push ecx
push esi
call fcn.00401290
mov ecx, dword [0x4511a0]
add esp, 0x24
push esi
push ebx
push esi
push 0xa
push 0x122
push 0xec
call fcn.0043f010
test byte [0x4511f0], 2
mov ebp, dword [sym.imp.WINMM.dll_timeGetTime]
jne 0x428066
or dword [0x4511f0], 2
call ebp
mov dword [0x4511d8], eax
call ebp
sub eax, dword [0x4511d8]
cmp eax, 0x96
jbe 0x428090
mov eax, dword [0x4511d4]
inc eax
cdq
mov ecx, 0xe
idiv ecx
mov dword [0x4511d4], edx
call ebp
mov dword [0x4511d8], eax
cmp byte [0x44f1ae], 1
jne 0x42809f
mov edx, dword [esp + 0x18]
mov dword [edx], esi
push 1
call fcn.004155c0
nop
mov eax, edx
cmp eax, 0x142
jl 0x428103
cmp eax, 0x1d8
jg 0x428103
mov eax, ecx
cmp eax, 0x169
jl 0x428103
cmp eax, 0x182
jg 0x428103
mov ecx, dword [0x4511a0]
push 1
push ebx
push esi
push 0xc
push 0x169
push 0x142
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x428103
cmp dword [0x457580], esi
jne 0x428103
push ebx
mov ecx, 0x455614
call fcn.00401a30
mov dword [0x44d064], esi
xor ebp, ebp
cmp dword [0x4511d4], ebx
jle 0x42873e
mov esi, 0x119
push 1
push 0x577fd7
push 0xc
push 5
push 0x156
push esi
call fcn.00415160
add ebp, 1
add esi, 0x14
cmp ebp, dword [0x4511d4]
jl 0x428116
jmp 0x42873e
cmp eax, 3
jne 0x428808
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edi, 1
nop
mov ecx, dword [0x4511a0]
push edi
push ebx
push 1
push 1
push 0x69
push 0x9b
call fcn.0043f010
mov ecx, dword [0x4511a0]
push edi
push ebx
push 1
push 3
push 0xde
push 0xfd
call fcn.0043f010
mov ecx, dword [0x4511a0]
push edi
push ebx
push 1
push 0xe
push 0x14f
push 0xfd
call fcn.0043f010
mov esi, dword [sym.imp.MSVCR80.dll_sprintf]
push 0x44f340
lea eax, [esp + 0x15c]
push str._Your_IP_Address:__s
push eax
call esi
push 0xfb
push 0x121
push 0xffffff
push 0x501e00
lea ecx, [esp + 0x174]
push ecx
push 1
call fcn.00401290
add esp, 0x24
cmp dword [0x4511b0], ebx
jne 0x428360
push 1
call fcn.004155c0
nop
cmp edx, 0xef
jl 0x42824a
cmp edx, 0x185
jg 0x42824a
nop
nop
nop
cmp ecx, 0x165
jl 0x42824a
cmp ecx, 0x17e
jg 0x42824a
cmp dword [0x44d060], ebx
jne 0x42824a
cmp dword [0x457580], 1
jne 0x42824a
mov byte [0x455385], 0x64
jmp 0x428360
cmp byte [0x455385], 0x64
je 0x428360
mov ecx, dword [0x4511a0]
push edi
push ebx
push 1
push 4
push 0x10c
push 0xdb
call fcn.0043f010
push 1
call fcn.004155c0
nop
mov eax, edx
cmp eax, 0x19b
jl 0x4282db
cmp eax, 0x231
jg 0x4282db
cmp ecx, 0x165
jl 0x4282db
cmp ecx, 0x17e
jg 0x4282db
mov ecx, dword [0x4511a0]
push edi
push ebx
push 1
push 0xc
push 0x165
push 0x19b
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x4282db
cmp dword [0x457580], 1
jne 0x4282db
push ebx
mov ecx, 0x455614
call fcn.00401a30
mov dword [0x44d064], 1
push 1
call fcn.004155c0
mov eax, edx
cmp eax, 0xef
jl 0x42831d
cmp eax, 0x185
jg 0x42831d
mov eax, ecx
cmp eax, 0x165
jl 0x42831d
cmp eax, 0x17e
jg 0x42831d
mov ecx, dword [0x4511a0]
push edi
push ebx
push 1
push 0xd
push 0x165
push 0xef
call fcn.0043f010
mov eax, dword [esp + 0x18]
add eax, 0x7d8
push eax
lea ecx, [esp + 0x2ec]
push 0x4477fc
push ecx
call esi
mov eax, 1
push 0x147
push 0x153
push 0xffffff
push 0x501e00
lea edx, [esp + 0x304]
push edx
push eax
call fcn.00401290
add esp, 0x24
xor esi, esi
cmp byte [esi + 0x455378], 0x64
jne 0x4283d0
push esi
call fcn.00422f60
movsx ecx, al
mov eax, dword [0x4511dc]
add esp, 4
cmp ecx, ebx
je 0x4283ad
cmp esi, 8
je 0x4283b2
cmp eax, 0x32
jge 0x4283ad
cmp esi, 0xd
je 0x4283ad
mov edx, dword [esp + 0x18]
mov byte [edx + eax + 0x7d8], cl
mov byte [edx + eax + 0x7d9], bl
add eax, 1
mov byte [esi + 0x455378], 0x75
jmp 0x4283cb
cmp esi, 8
jne 0x4283d0
cmp eax, ebx
jle 0x4283d0
mov ecx, dword [esp + 0x18]
mov byte [esi + 0x455378], 0x75
mov byte [ecx + eax + 0x7d7], bl
sub eax, 1
mov dword [0x4511dc], eax
add esi, 1
cmp esi, 0x12c
jl 0x428362
cmp byte [0x455385], 0x64
jne 0x428420
push ebx
mov ecx, 0x455610
call fcn.00401a30
mov ecx, dword [0x4511a0]
push edi
push ebx
push 1
push 0xb
push 0x122
push 0xec
mov byte [0x455385], 0x75
mov dword [0x4511b0], 1
call fcn.0043f010
jmp 0x42873e
cmp dword [0x4511b0], 1
jne 0x42873e
mov edx, dword [0x44f46c]
push edx
mov dword [0x4511b0], ebx
call sub.WSOCK32.dll_closesocket
push 6
push 1
push 2
call sub.WSOCK32.dll_socket
cmp eax, 0xffffffff
mov dword [0x44f46c], eax
jne 0x42846b
push ebx
push str.Client_Error
push str.socket__
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x4287de
mov esi, dword [esp + 0x18]
add esi, 0x7d8
push esi
call sub.WSOCK32.dll_gethostbyname
cmp eax, ebx
mov dword [0x44f2d4], eax
jne 0x4284c6
push esi
call sub.WSOCK32.dll_inet_addr
push 2
mov dword [esp + 0x18], eax
push 4
lea eax, [esp + 0x1c]
push eax
call sub.WSOCK32.dll_gethostbyaddr
cmp eax, ebx
mov dword [0x44f2d4], eax
jne 0x4284c6
push ebx
push str.Error
push str.Cant_get_the_Server
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [0x44d064], 1
jmp 0x42873e
cmp dword [0x44d064], 1
je 0x42873e
mov word [0x44f58c], 2
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx]
mov eax, dword [edx]
push 0x3039
mov dword [0x44f590], eax
call sub.WSOCK32.dll_htons
mov ecx, dword [0x44f46c]
push 0x10
push 0x44f58c
push ecx
mov word [0x44f58e], ax
call sub.WSOCK32.dll_connect
cmp eax, 0xffffffff
push ebx
jne 0x42853d
push str.Error
push str.Cant_connect_to_server
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [0x44f1b4]
push edx
call sub.WSOCK32.dll_closesocket
mov dword [0x44d064], 1
jmp 0x4287de
mov ecx, dword [0x44f46c]
push 0x64
lea eax, [esp + 0x28c]
push eax
push ecx
call sub.WSOCK32.dll_recv
mov edi, str.u_can_connect
lea esi, [esp + 0x284]
mov ecx, 0xe
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x42873a
mov ecx, ebp
mov esi, str.0000111100000000000000000000000000000000000000000000000000000000000000000000
lea edi, [esp + 0xa4]
rep movsd dword es:[edi], dword [esi]
push 0x2d
lea eax, [esp + 0xc8]
push 0x5f
push eax
mov dword [0x450b5c], 1
mov dword [0x450b60], 2
mov dword [0x450b64], 3
mov dword [0x450b68], 4
movsb byte es:[edi], byte [esi]
call sub.MSVCR80.dll_memset
add esp, 0xc
xor edi, edi
lea ecx, [ecx]
lea eax, [edi + 0x44fcc0]
mov edx, edi
sub edx, eax
mov ecx, eax
lea esi, [edx + 0x44fcec]
mov dl, byte [ecx]
mov byte [ecx + esi], dl
add ecx, 1
cmp dl, bl
jne 0x4285d2
mov ecx, edi
sub ecx, eax
lea edx, [esp + ecx + 0xc4]
lea esp, [esp]
mov cl, byte [eax]
mov byte [eax + edx], cl
add eax, 1
cmp cl, bl
jne 0x4285f0
add edi, 0xb
cmp edi, 0x2c
jl 0x4285c0
xor eax, eax
cmp byte [esp + eax + 0xc4], bl
jne 0x428617
mov byte [esp + eax + 0xc4], 0x5f
add eax, 1
cmp eax, 0x2c
jl 0x428606
mov eax, dword [0x44f46c]
push ebx
push 0x4d
lea edx, [esp + 0xac]
push edx
push eax
mov byte [esp + 0x100], bl
mov byte [0x44f1af], 1
call sub.WSOCK32.dll_send
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x1f4
call esi
mov edx, dword [0x44f46c]
push ebx
push 0x4d
lea ecx, [esp + 0x110]
push ecx
push edx
call sub.WSOCK32.dll_recv
push 0x1f4
call esi
mov eax, dword [0x44f46c]
push ebx
push 0xbb9
push 0x44ff90
push eax
call sub.WSOCK32.dll_recv
or eax, 0xffffffff
cmp byte [esp + 0x108], 0x31
jne 0x428696
mov dword [0x450b4c], eax
cmp byte [esp + 0x109], 0x31
jne 0x4286a5
mov dword [0x450b50], eax
cmp byte [esp + 0x10a], 0x31
jne 0x4286b4
mov dword [0x450b54], eax
cmp byte [esp + 0x10b], 0x31
jne 0x4286c3
mov dword [0x450b58], eax
cmp byte [esp + 0x10c], 0x31
jne 0x4286d2
mov dword [0x450b5c], eax
cmp byte [esp + 0x10d], 0x31
jne 0x4286e1
mov dword [0x450b60], eax
cmp byte [esp + 0x10e], 0x31
jne 0x4286f0
mov dword [0x450b64], eax
cmp byte [esp + 0x10f], 0x31
jne 0x4286ff
mov dword [0x450b68], eax
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov cl, byte [esp + eax + 0x128]
cmp cl, 0x5f
mov byte [eax + 0x44fcc0], cl
jne 0x428728
mov byte [eax + 0x44fcc0], bl
add eax, 1
cmp eax, 0x2c
jl 0x428710
mov dword [0x44d064], 4
mov edi, dword [esp + 0x20]
nop
call fcn.004156f0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push edi
call fcn.004028a0
add esp, 4
call fcn.0043e9d0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [0x457580]
mov dword [0x44d060], edx
mov ecx, dword [esp + 0x418]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x400]
xor ecx, esp
call fcn.004450b2
add esp, 0x410
ret 4
cmp eax, 4
jne 0x4289bc
test byte [0x4511f0], al
mov ebp, dword [sym.imp.WINMM.dll_timeGetTime]
jne 0x42882c
or dword [0x4511f0], eax
call ebp
mov dword [0x4511d0], eax
call ebp
sub eax, dword [0x4511d0]
cmp eax, 0x96
jbe 0x428858
mov eax, dword [0x4511cc]
add eax, 1
cdq
mov ecx, 0xe
idiv ecx
mov dword [0x4511cc], edx
call ebp
mov dword [0x4511d0], eax
mov esi, 1
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [0x4511a0]
push esi
push ebx
push esi
push esi
push 0x69
push 0x9b
call fcn.0043f010
mov ecx, dword [0x4511a0]
push esi
push ebx
push esi
push 3
push 0xde
push 0xfd
call fcn.0043f010
mov ecx, dword [0x4511a0]
push esi
push ebx
push esi
push 0xe
push 0x14f
push 0xfd
call fcn.0043f010
push 0x44f340
lea edx, [esp + 0x2ec]
push str._Your_IP_Address:__s
push edx
call dword [sym.imp.MSVCR80.dll_sprintf]
mov ecx, 1
nop
push 0xfb
push 0x121
push 0xffffff
push 0x501e00
lea eax, [esp + 0x304]
push eax
push ecx
call fcn.00401290
mov ecx, dword [0x4511a0]
add esp, 0x24
push esi
push ebx
push esi
push 0xb
push 0x122
push 0xec
call fcn.0043f010
push esi
call fcn.004155c0
mov eax, edx
cmp eax, 0x142
jl 0x428979
cmp eax, 0x1d8
jg 0x428979
mov eax, ecx
cmp eax, 0x169
jl 0x428979
cmp eax, 0x182
jg 0x428979
mov ecx, dword [0x4511a0]
push esi
push ebx
push esi
push 0xc
push 0x169
push 0x142
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x428979
cmp dword [0x457580], esi
jne 0x428979
mov dword [0x44d064], esi
xor ebp, ebp
cmp dword [0x4511cc], ebx
jle 0x4289ad
mov esi, 0x119
push 0
push 0x577fd7
push 0xc
push 5
push 0x156
push esi
call fcn.00415160
add ebp, 1
nop
add esi, 0x14
cmp ebp, dword [0x4511cc]
jl 0x428988
mov edx, dword [esp + 0x18]
mov dword [edx], 1
jmp 0x42873e
cmp eax, 6
jne 0x4290f3
nop
nop
mov edi, 1
nop
mov ecx, dword [0x4511a0]
push edi
push ebx
push 1
push 1
push 0x23
push 0x9b
call fcn.0043f010
mov ecx, dword [0x451168]
push edi
push ebx
push 1
push ebx
push 0x79
push 0x2e
call fcn.0043f010
push 1
call fcn.004155c0
nop
nop
nop
mov eax, edx
cmp eax, 0x2e
jl 0x428a73
cmp eax, 0x21c
jg 0x428a73
mov eax, ecx
cmp eax, 0x1db
jl 0x428a73
cmp eax, 0x1f2
jg 0x428a73
mov ecx, dword [0x451168]
push edi
push ebx
push 1
push 2
push 0x1db
push 0x2e
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x428a8b
cmp dword [0x457580], 1
jne 0x428a8b
push ebx
mov ecx, 0x455610
call fcn.00401a30
push 0x12c
call esi
push 1
push ebx
push ebx
push str.http:__www.littlefighter.com_control_index.html
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x428a8b
mov ecx, dword [0x451168]
push edi
push ebx
push 1
push 1
push 0x1db
push 0x2e
call fcn.0043f010
mov edi, dword [0x4511e0]
cmp edi, ebx
jle 0x428b0f
mov eax, 0x66666667
imul edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*4]
shl eax, 4
mov ecx, dword [eax + 0x44fb70]
xor eax, eax
cmp ecx, ebx
jne 0x428ade
nop
nop
nop
nop
cmp byte [eax + 0x455378], 0x64
je 0x428ad5
add eax, 1
cmp eax, 0xfa
jl 0x428ac0
jmp 0x428b0f
mov dword [edi*4 + 0x44fb70], eax
jmp 0x428b09
lea ecx, [ecx + ecx*2]
shl ecx, 4
lea ecx, [ecx + 0x453fc4]
nop
nop
nop
nop
nop
nop
cmp byte [ecx], 1
je 0x428b02
add eax, 1
add ecx, 1
cmp eax, 4
jl 0x428af0
jmp 0x428b0f
mov dword [edi*4 + 0x44fb7c], eax
mov dword [0x4511e0], ebx
cmp dword [0x4511c8], ebx
jle 0x428bbf
xor ebp, ebp
lea ecx, [ecx]
cmp byte [ebp + 0x455378], 0x64
jne 0x428bb0
push ebp
call fcn.00422f60
mov edi, dword [0x4511c8]
add esp, 4
imul edi, edi, 0xb
movsx ecx, al
lea edx, [edi + 0x44fcb5]
mov eax, edx
mov dword [esp + 0x1c], ecx
lea esi, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x428b51
sub eax, esi
cmp dword [esp + 0x1c], ebx
mov esi, eax
je 0x428b99
cmp ebp, 8
je 0x428b9e
mov ecx, edx
lea edx, [ecx + 1]
mov edi, edi
mov al, byte [ecx]
add ecx, 1
cmp al, bl
jne 0x428b70
sub ecx, edx
cmp ecx, 0xa
jae 0x428b99
cmp ebp, 0xd
je 0x428b99
mov dl, byte [esp + 0x1c]
mov byte [esi + edi + 0x44fcb5], dl
mov byte [esi + edi + 0x44fcb6], bl
jmp 0x428ba9
cmp ebp, 8
jne 0x428bb0
cmp esi, ebx
jle 0x428bb0
mov byte [esi + edi + 0x44fcb4], bl
mov byte [ebp + 0x455378], 0x75
add ebp, 1
cmp ebp, 0x12c
jl 0x428b20
lea eax, [esp + 0xa4]
sub eax, 0x44fcc0
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x18], 0xc2
mov dword [esp + 0x24], 0x44fb70
mov dword [esp + 0x28], 1
mov dword [esp + 0x30], 0x44fcc0
mov dword [esp + 0x1c], eax
mov ebp, dword [esp + 0x18]
push 1
call fcn.004155c0
mov eax, edx
nop
nop
cmp eax, ebp
jl 0x428c42
lea edx, [ebp + 0x69]
cmp eax, edx
jg 0x428c42
cmp dword [0x44d060], ebx
jne 0x428c42
cmp dword [0x457580], 1
jne 0x428c42
mov edx, ecx
add edx, 0xffffff4a
cmp edx, 0x5a
ja 0x428c42
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx]
inc eax
cdq
mov esi, 3
idiv esi
mov dword [0x4511e0], ebx
mov dword [ecx], edx
mov eax, dword [0x4511c8]
add eax, 0xffffffff
cmp eax, dword [esp + 0x2c]
je 0x428c74
mov ecx, dword [esp + 0x30]
mov edx, 1
nop
push 0x9f
lea esi, [ebp + 0x15]
push esi
push 0xffffff
push 0x2c0900
push ecx
push edx
jmp 0x428cfb
mov eax, dword [esp + 0x30]
mov ecx, eax
lea esi, [ecx + 1]
lea ecx, [ecx]
mov dl, byte [ecx]
add ecx, 1
cmp dl, bl
jne 0x428c80
sub ecx, esi
cmp ecx, 0xa
jb 0x428ca6
push 0x9f
lea esi, [ebp + 0x15]
push esi
push 0xff4619
push 0x2c0900
push eax
jmp 0x428cf5
mov edx, dword [esp + 0x1c]
lea ebx, [ebx]
mov cl, byte [eax]
mov byte [edx + eax], cl
add eax, 1
cmp cl, bl
jne 0x428cb0
lea edi, [esp + 0xa4]
add edi, 0xffffffff
mov al, byte [edi + 1]
add edi, 1
cmp al, bl
jne 0x428cc6
mov cx, word [0x449754]
push 0x9f
lea esi, [ebp + 0x15]
push esi
push 0xff4619
push 0x2c0900
lea edx, [esp + 0xb4]
mov word [edi], cx
push edx
mov eax, 1
push eax
call fcn.00401290
add esp, 0x18
push 1
call fcn.004155c0
mov eax, edx
nop
nop
cmp eax, ebp
jl 0x428d48
add esi, 0x54
cmp eax, esi
jg 0x428d48
lea edx, [ecx - 0x9c]
cmp edx, 0x11
ja 0x428d48
cmp dword [0x44d060], ebx
jne 0x428d48
cmp dword [0x457580], 1
jne 0x428d48
mov edx, dword [esp + 0x2c]
add edx, 1
mov dword [0x4511e0], ebx
mov dword [0x4511c8], edx
mov ebp, dword [esp + 0x18]
xor edi, edi
add ebp, 0xffffff3e
mov esi, 0x11b
nop
nop
nop
nop
nop
nop
nop
push 1
call fcn.004155c0
mov eax, edx
nop
nop
cmp eax, dword [esp + 0x18]
jl 0x428dba
lea edx, [ebp + 0x12b]
cmp eax, edx
jg 0x428dba
cmp dword [0x44d060], ebx
jne 0x428dba
cmp dword [0x457580], 1
jne 0x428dba
lea eax, [esi + 0xf]
lea edx, [eax - 0x12]
cmp ecx, edx
jl 0x428dba
cmp ecx, eax
jg 0x428dba
mov eax, dword [esp + 0x24]
cmp dword [eax], ebx
je 0x428da7
cmp edi, 3
jle 0x428db4
mov ecx, dword [esp + 0x28]
lea edx, [edi + ecx]
mov dword [0x4511e0], edx
mov dword [0x4511c8], ebx
mov eax, dword [esp + 0x24]
cmp dword [eax], ebx
jne 0x428e40
mov eax, dword [esp + 0x28]
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x38]
push edx
lea ecx, [edi + eax]
mov edx, dword [ecx*4 + 0x44fb70]
push edx
call fcn.00422b00
mov eax, dword [esp + 0x34]
mov edx, ebp
sub edx, dword [esp + 0x20]
add esp, 0xc
lea ecx, [edi + eax]
add edx, 0xeb
cmp dword [0x4511e0], ecx
mov ecx, 1
nop
push esi
lea eax, [esp + 0x38]
push edx
jne 0x428e27
push 0xff4619
push 0x2c0900
push eax
push ecx
call fcn.00401290
add esp, 0x18
jmp 0x428f05
push 0xffffff
push 0x2c0900
push eax
push ecx
call fcn.00401290
add esp, 0x18
jmp 0x428f05
cmp edi, 4
jge 0x428e6f
mov eax, 1
push esi
lea edx, [ebp + 0xf2]
push edx
push 0xffffff
push 0x2c0900
push 0x449750
push eax
call fcn.00401290
add esp, 0x18
jmp 0x428f05
mov ecx, dword [esp + 0x28]
lea edx, [edi + ecx]
cmp dword [0x4511e0], edx
jne 0x428ebd
mov eax, ecx
lea ecx, [edi + eax]
mov edx, dword [ecx*4 + 0x44fb7c]
add edx, 1
push edx
lea eax, [esp + 0x38]
push str.Button:__d
push eax
call dword [sym.imp.MSVCR80.dll_sprintf]
mov eax, 1
push esi
lea ecx, [ebp + 0xe4]
push ecx
push 0xff4619
push 0x2c0900
lea edx, [esp + 0x50]
push edx
push eax
jmp 0x428efd
mov ecx, dword [esp + 0x28]
lea edx, [edi + ecx]
mov eax, dword [edx*4 + 0x44fb7c]
add eax, 1
push eax
lea ecx, [esp + 0x38]
push str.Button:__d
push ecx
call dword [sym.imp.MSVCR80.dll_sprintf]
mov ecx, 1
nop
push esi
lea edx, [ebp + 0xe4]
push edx
push 0xffffff
push 0x2c0900
lea eax, [esp + 0x50]
push eax
push ecx
call fcn.00401290
add esp, 0x24
add esi, 0x16
add edi, 1
cmp esi, 0x1b5
jl 0x428d60
mov edx, dword [esp + 0x24]
cmp dword [edx], ebx
mov esi, dword [esp + 0x20]
jne 0x428f3d
mov ecx, dword [0x451180]
push 1
push ebx
push ebx
push 0xffffffffffffffff
push 0xb6
push dword [esp + 0x2c]
call fcn.0043f010
mov ecx, dword [esp + 0x24]
cmp dword [ecx], 1
jne 0x428f60
mov ecx, dword [0x451174]
push 1
push ebx
push ebx
push 0xffffffffffffffff
push 0xb6
push dword [esp + 0x2c]
call fcn.0043f010
mov eax, dword [esp + 0x24]
cmp dword [eax], 2
jne 0x428f83
mov ecx, dword [0x451164]
push 1
push ebx
push ebx
push 0xffffffffffffffff
push 0xb6
push dword [esp + 0x2c]
call fcn.0043f010
mov edx, dword [esp + 0x24]
cmp dword [edx], 3
jne 0x428fa6
mov ecx, dword [0x451184]
push 1
push ebx
push ebx
push 0xffffffffffffffff
push 0xb6
push dword [esp + 0x2c]
call fcn.0043f010
mov ecx, dword [esp + 0x24]
cmp dword [ecx], 4
jne 0x428fc9
mov ecx, dword [0x451194]
push 1
push ebx
push ebx
push 0xffffffffffffffff
push 0xb6
push dword [esp + 0x2c]
call fcn.0043f010
push 1
call fcn.004155c0
mov eax, ecx
cmp eax, 0x1b9
jl 0x4290bc
cmp eax, 0x1d1
jg 0x429044
mov eax, edx
add eax, 0xfffffdba
cmp eax, 0x9b
ja 0x429044
mov ecx, dword [0x4511a0]
push 1
push ebx
push 1
push 0xc
push 0x1b9
push 0x244
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x429044
cmp dword [0x457580], 1
jne 0x429044
push ebx
mov ecx, 0x455614
call fcn.00401a30
call fcn.00423480
mov dword [0x44d064], ebx
mov dword [0x44d780], 0xffffffff
call fcn.00423910
push 1
call fcn.004155c0
nop
nop
nop
nop
nop
nop
add ecx, 0xfffffe47
cmp ecx, 0x18
ja 0x4290bc
add edx, 0xfffffe6b
cmp edx, 0x9b
ja 0x4290bc
mov ecx, dword [0x4511a0]
push 1
push ebx
push 1
push 0xd
push 0x1b9
push 0x198
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x4290bc
cmp dword [0x457580], 1
jne 0x4290bc
push ebx
mov ecx, 0x455610
call fcn.00401a30
call fcn.00423230
mov dword [0x44d064], ebx
mov dword [0x44d780], 0xffffffff
call fcn.00423910
mov eax, dword [esp + 0x30]
add dword [esp + 0x2c], 1
sub dword [esp + 0x1c], 0xb
add dword [esp + 0x28], 0x14
add dword [esp + 0x24], 0x50
add dword [esp + 0x18], 0x8b
add eax, 0xb
cmp eax, 0x44fcec
mov dword [esp + 0x30], eax
jl 0x428bf3
jmp 0x42873a
cmp eax, 7
jne 0x4295e9
mov ecx, dword [0x4511a0]
push 1
push ebx
push 1
push 1
push 0x37
push 0x9b
call fcn.0043f010
mov ecx, dword [0x4511a4]
push 1
push ebx
push 1
push ebx
push 0x93
push 0x2c
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x4291d7
cmp dword [0x457580], 1
jne 0x4291d7
push 1
call fcn.004155c0
mov eax, edx
nop
nop
nop
nop
cmp eax, 0xd2
jl 0x4291ca
cmp eax, 0x2db
jge 0x4291ca
cmp ecx, 0xcf
jl 0x429182
cmp ecx, 0xe2
jge 0x429182
mov ebp, 0x44fd18
mov dword [0x4511c4], ebp
jmp 0x4291e5
cmp eax, 0x2db
jge 0x4291ca
cmp ecx, 0xe8
jl 0x4291a6
cmp ecx, 0x12f
jge 0x4291a6
mov ebp, 0x44f900
mov dword [0x4511c4], ebp
jmp 0x4291e5
cmp eax, 0x2db
jge 0x4291ca
cmp ecx, 0x135
jl 0x4291ca
cmp ecx, 0x148
jge 0x4291ca
mov ebp, 0x44f890
mov dword [0x4511c4], ebp
jmp 0x4291e5
xor ebp, ebp
mov dword [0x4511c4], ebp
jmp 0x4292cf
mov ebp, dword [0x4511c4]
cmp ebp, ebx
je 0x4292cf
xor esi, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [esi + 0x455378], 0x64
jne 0x4292c0
push esi
call fcn.00422f60
movsx eax, al
add esp, 4
cmp esi, 0xd
mov dword [esp + 0x1c], eax
jne 0x42921c
mov dword [esp + 0x1c], 0xa
jmp 0x429225
cmp eax, ebx
je 0x42927f
cmp esi, 8
je 0x429284
mov ebp, dword [0x4511c4]
mov eax, ebp
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x429230
sub eax, edx
jne 0x429248
cmp dword [esp + 0x1c], 0xa
je 0x4292c0
mov eax, ebp
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x429250
sub eax, edx
mov byte [eax + ebp + 1], bl
mov eax, ebp
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x429264
mov cl, byte [esp + 0x1c]
sub eax, edx
mov byte [eax + ebp], cl
mov byte [esi + 0x455378], 0x75
jmp 0x4292c0
cmp esi, 8
jne 0x4292ba
mov ebp, dword [0x4511c4]
mov eax, ebp
lea edx, [eax + 1]
nop
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x429290
sub eax, edx
je 0x4292c0
mov eax, ebp
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x4292a2
sub eax, edx
mov byte [eax + ebp - 1], bl
mov byte [esi + 0x455378], 0x75
jmp 0x4292c0
mov ebp, dword [0x4511c4]
add esi, 1
cmp esi, 0xfa
jl 0x4291f0
xor eax, eax
cmp ebp, 0x44fd18
sete al
mov esi, 1
push esi
push eax
push eax
push esi
push 0x40
push 0xd1
push 0xd5
push 0x44fd18
call fcn.00423a70
xor eax, eax
cmp dword [0x4511c4], 0x44f900
sete al
push esi
push eax
push eax
push 4
push 0x40
push 0xea
push 0xd5
push 0x44f900
call fcn.00423a70
xor eax, eax
cmp dword [0x4511c4], 0x44f890
sete al
push esi
push eax
push eax
push esi
push 0x40
push 0x137
push 0xd5
push 0x44f890
call fcn.00423a70
cmp dword [0x450be4], ebx
je 0x42936f
mov ecx, dword [0x4511a4]
push 1
push ebx
push esi
push 6
push 0x185
push 0x11f
call fcn.0043f010
nop
push 1
call fcn.004155c0
mov eax, edx
cmp eax, 0x11f
jl 0x4293d0
cmp ecx, 0x186
jl 0x4293d0
cmp eax, 0x132
jg 0x4293d0
cmp ecx, 0x199
jg 0x4293d0
mov ecx, dword [0x4511a4]
push 1
push ebx
push esi
push 5
push 0x185
push 0x11f
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x4293d0
cmp dword [0x457580], esi
jne 0x4293d0
mov edx, esi
sub edx, dword [0x450be4]
mov dword [0x450be4], edx
push 1
call fcn.004155c0
nop
nop
nop
nop
mov eax, edx
cmp eax, 0x185
jl 0x429454
cmp ecx, 0x184
jl 0x429454
nop
nop
nop
nop
cmp eax, 0x2dc
jg 0x429454
cmp ecx, 0x19a
jg 0x429454
mov ecx, dword [0x4511a4]
push 1
push ebx
push esi
push 7
push 0x184
push 0x185
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x429454
cmp dword [0x457580], esi
jne 0x429454
push ebx
mov ecx, 0x455610
call fcn.00401a30
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
push ebx
push ebx
push str.recording
push str.explore
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
call fcn.004155c0
cmp eax, 0x2c
jl 0x4294cb
cmp ecx, 0x1cd
jl 0x4294cb
cmp eax, 0x1e3
jg 0x4294cb
cmp ecx, 0x1e4
jg 0x4294cb
mov ecx, dword [0x4511a4]
push 1
push ebx
push esi
push 2
push 0x1cd
push 0x2c
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x4294e2
cmp dword [0x457580], esi
jne 0x4294e2
push ebx
mov ecx, 0x455610
call fcn.00401a30
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
push ebx
push ebx
push str.http:__www.littlefighter.com_record
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x4294e2
mov ecx, dword [0x4511a4]
push 1
push ebx
push esi
push esi
push 0x1cd
push 0x2c
call fcn.0043f010
push 1
call fcn.004155c0
nop
nop
nop
nop
mov eax, ecx
cmp eax, 0x1a0
jl 0x42873e
cmp eax, 0x1b8
jg 0x429561
mov eax, edx
cmp eax, 0x193
jl 0x429561
cmp eax, 0x22e
jg 0x429561
mov ecx, dword [0x4511a0]
push 1
push ebx
push esi
push 0xc
push 0x1a0
push 0x193
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x429561
cmp dword [0x457580], esi
jne 0x429561
call fcn.00423480
push ebx
mov ecx, 0x455614
call fcn.00401a30
mov dword [0x44d064], ebx
mov dword [0x44d780], 0xffffffff
call fcn.00423910
push 1
call fcn.004155c0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, ecx
cmp eax, 0x1a0
jl 0x4295e4
cmp eax, 0x1b8
jg 0x4295e4
mov eax, edx
cmp eax, 0xe7
jl 0x4295e4
cmp eax, 0x182
jg 0x4295e4
mov ecx, dword [0x4511a0]
push 1
push ebx
push esi
push 0xd
push 0x1a0
push 0xe7
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x42873e
cmp dword [0x457580], 1
jne 0x42873e
call fcn.00423230
push ebx
mov ecx, 0x455610
call fcn.00401a30
mov dword [0x44d064], 8
jmp 0x42873e
cmp eax, 8
jne 0x42873e
mov ecx, dword [0x4511a0]
push 1
push ebx
push 1
push 1
push 0x4b
push 0x9b
call fcn.0043f010
mov ecx, dword [0x4511a4]
push 1
push ebx
push 1
push 3
push 0xa7
push 0x2c
call fcn.0043f010
push 1
call fcn.004155c0
nop
nop
nop
mov eax, edx
cmp eax, 0x60
jl 0x42969d
cmp ecx, 0x15c
jl 0x42969d
cmp eax, 0x27f
jg 0x42969d
cmp ecx, 0x174
jg 0x42969d
mov ecx, dword [0x4511a4]
push 1
push ebx
push 1
push 4
push 0x15c
push 0x60
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x42969d
cmp dword [0x457580], 1
jne 0x42969d
push ebx
mov ecx, 0x455610
call fcn.00401a30
push 0x12c
call esi
push 1
push ebx
push ebx
push str.http:__www.littlefighter.com_challenge
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
call fcn.004155c0
nop
nop
nop
nop
nop
nop
nop
mov eax, ecx
cmp eax, 0x17e
jl 0x429727
cmp eax, 0x196
jg 0x429727
nop
nop
nop
nop
nop
nop
nop
mov eax, edx
cmp eax, 0x13e
jl 0x429727
cmp eax, 0x1d8
jg 0x429727
mov ecx, dword [0x4511a0]
push 1
push ebx
push 1
push 0xd
push 0x17e
push 0x13e
call fcn.0043f010
cmp dword [0x44d060], ebx
jne 0x42873e
cmp dword [0x457580], 1
jne 0x42873e
push ebx
mov ecx, 0x455610
call fcn.00401a30
mov dword [0x44d064], ebx
mov dword [0x44d780], 0xffffffff
call fcn.00423910
jmp 0x42873e