Function at 0x404b01
Capabilities:
Log keystrokes via polling

Disassembly:
push 0x748
push 0
push 0x4a89d4
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x4a89d8], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x4a89d4], eax
mov eax, 0x4979aa
mov dword [0x4a89dc], eax
call fcn.004141e0
call fcn.00413991
call fcn.00412f40
call fcn.00412393
call fcn.00412121
call fcn.00412017
call fcn.00411700
call fcn.004112fe
call fcn.0041128c
call fcn.0040fc25
call fcn.0040e52f
call fcn.0040e07e
call fcn.0040ddd0
call fcn.0040d701
call fcn.0040d598
call fcn.0040c1f7
call fcn.0040e4b0
call fcn.0040c7f0
call fcn.00414210
push eax
push eax
call fcn.00411410
push 0x4a89e0
call fcn.00414230
call fcn.00414210
push eax
mov edx, dword [0x4a89e0]
call fcn.00414210
push eax
call fcn.004142c0
mov edx, str.0.ogg
call fcn.004142c0
call fcn.00414320
push 0
call fcn.00414362
add dword [esp + 4], edx
call fcn.00411840
call fcn.00414380
mov ebp, 0x451342
mov ebx, ebp
mov ebp, 0x44e7ac
sub ebx, ebp
push ebx
mov ebp, 0x44e7ac
push ebp
push 0
call fcn.004118a0
push 0
call fcn.00411690
call fcn.00414210
push eax
mov edx, dword [0x4a89e0]
call fcn.00414210
push eax
call fcn.004142c0
mov edx, str.1.ogg
call fcn.004142c0
call fcn.00414320
push 0
call fcn.00414362
add dword [esp + 4], edx
call fcn.00411840
call fcn.00414380
mov ebp, 0x4542b3
mov ebx, ebp
mov ebp, 0x451342
sub ebx, ebp
push ebx
mov ebp, 0x451342
push ebp
push 0
call fcn.004118a0
push 0
call fcn.00411690
call fcn.00414210
push eax
mov edx, dword [0x4a89e0]
call fcn.00414210
push eax
call fcn.004142c0
mov edx, str.3.ogg
call fcn.004142c0
call fcn.00414320
push 0
call fcn.00414362
add dword [esp + 4], edx
call fcn.00411840
call fcn.00414380
mov ebp, 0x4578e8
mov ebx, ebp
mov ebp, 0x4542b3
sub ebx, ebp
push ebx
mov ebp, 0x4542b3
push ebp
push 0
call fcn.004118a0
push 0
call fcn.00411690
call fcn.00414210
push eax
mov edx, dword [0x4a89e0]
call fcn.00414210
push eax
call fcn.004142c0
mov edx, str.4.ogg
call fcn.004142c0
call fcn.00414320
push 0
call fcn.00414362
add dword [esp + 4], edx
call fcn.00411840
call fcn.00414380
mov ebp, 0x45c2b9
mov ebx, ebp
mov ebp, 0x4578e8
sub ebx, ebp
push ebx
mov ebp, 0x4578e8
push ebp
push 0
call fcn.004118a0
push 0
call fcn.00411690
call fcn.0040c880
call fcn.00414210
push eax
mov edx, dword [0x4a89e0]
call fcn.00414210
push eax
call fcn.004142c0
mov edx, str.0.ogg
call fcn.004142c0
call fcn.00414320
push 0
call fcn.00414362
add dword [esp + 4], edx
call fcn.0040ca78
call fcn.00414380
mov dword [0x4a89e4], eax
call fcn.00414210
push eax
mov edx, dword [0x4a89e0]
call fcn.00414210
push eax
call fcn.004142c0
mov edx, str.1.ogg
call fcn.004142c0
call fcn.00414320
push 1
call fcn.00414362
add dword [esp + 4], edx
call fcn.0040ca78
call fcn.00414380
mov dword [0x4a89e4], eax
call fcn.00414210
push eax
mov edx, dword [0x4a89e0]
call fcn.00414210
push eax
call fcn.004142c0
mov edx, str.3.ogg
call fcn.004142c0
call fcn.00414320
push 3
call fcn.00414362
add dword [esp + 4], edx
call fcn.0040ca78
call fcn.00414380
mov dword [0x4a89e4], eax
call fcn.00414210
push eax
mov edx, dword [0x4a89e0]
call fcn.00414210
push eax
call fcn.004142c0
mov edx, str.4.ogg
call fcn.004142c0
call fcn.00414320
push 4
call fcn.00414362
add dword [esp + 4], edx
call fcn.0040ca78
call fcn.00414380
mov dword [0x4a89e4], eax
call fcn.0040e4b0
call fcn.00414210
push eax
push 0
push 0x40
call fcn.00414210
push eax
push eax
call fcn.0040d730
call fcn.00414362
add dword [esp], edx
call fcn.0040a115
push 0x4a89fc
call fcn.00414230
mov ebp, 0x45c2b9
push ebp
push 0
call fcn.0041259c
and eax, eax
je 0x401f40
mov ebp, 0x478729
push ebp
push 2
call fcn.0041259c
push 0
call fcn.00412630
push eax
call fcn.00412155
push 0x41
push 0x133
push 2
call fcn.00412766
push eax
call fcn.004121a1
call fcn.004121e8
push 0x100
push 0x18
push 0x44e207
push 1
call fcn.00411312
and eax, eax
je 0x401412
push 0x100
push 0x30
push 0x44e207
push 2
call fcn.00411312
and eax, eax
je 0x40142f
push 0x120
push 0xfa
push 0x1f4
push 1
call fcn.00412782
and eax, eax
je 0x401513
push 1
call fcn.00412630
push eax
call fcn.00412155
push 1
call fcn.004113f4
push eax
call fcn.00412231
push 0x11
call fcn.00412248
push 0xff
push 0
push 0
mov eax, 0
call fcn.0040dc10
push eax
push str.zhiru
push 0
push 0
call fcn.0041225f
call fcn.004121e8
push 0
push 0x64
push 0xc8
push 1
call fcn.00412897
push 0
call fcn.00412630
push eax
call fcn.00412155
push 0x11
call fcn.00412248
push 0x64
push 0xc8
push 0x12
push 0x133
push 1
call fcn.00412766
push eax
call fcn.004122ad
call fcn.004121e8
push 1
call fcn.0041231a
push 0x4a90d4
push 0x44e7a4
push 8
push 0x65
push 4
call fcn.00411f18
call fcn.00414210
push eax
push eax
call fcn.00411410
push 0x4a8a00
call fcn.00414230
call fcn.00414210
push eax
mov edx, dword [0x4a8a00]
call fcn.00414210
push eax
call fcn.004142c0
mov edx, str.Options
call fcn.004142c0
call fcn.00414320
push 0xa
call fcn.00414362
add dword [esp + 4], edx
call fcn.00411840
call fcn.00414380
and eax, eax
je 0x4015b4
mov ebp, 0x49585a
mov ebx, ebp
mov ebp, str.MEGA_TRAINER_r_nv1.1.0_Build_5918_r_n_r_nNumpad_1:_Unlimited_Movement_r_nNumpad_2:_Massive_Gold_r_nNumpad_3:_Food_Surplus_r_nNumpad_4:_Construction_r_nNumpad_5:_Armies_r_nNumpad_6:_Mastery_of_Arts_r_nNumpad_7:_Skillpoints_r_nNumpad_8:_Fill_XP_r_nNumpad_9:_Unlock_Skills_r_nNumpad_0:_Destroy_Army_r_nNumpad_:_Scupper_Navy_r_nNumpad_:_Rank_Up_r_nNumpad__:_Rank_Down_r_nNumpad__:_Options_Off
sub ebx, ebp
push ebx
mov ebp, str.MEGA_TRAINER_r_nv1.1.0_Build_5918_r_n_r_nNumpad_1:_Unlimited_Movement_r_nNumpad_2:_Massive_Gold_r_nNumpad_3:_Food_Surplus_r_nNumpad_4:_Construction_r_nNumpad_5:_Armies_r_nNumpad_6:_Mastery_of_Arts_r_nNumpad_7:_Skillpoints_r_nNumpad_8:_Fill_XP_r_nNumpad_9:_Unlock_Skills_r_nNumpad_0:_Destroy_Army_r_nNumpad_:_Scupper_Navy_r_nNumpad_:_Rank_Up_r_nNumpad__:_Rank_Down_r_nNumpad__:_Options_Off
push ebp
push 0xa
call fcn.004118a0
push 0xa
call fcn.00411690
jmp 0x4015c8
push str.Could_not_install_the_file___Installtion_failed
push str.Error
call fcn.0040d5d5
jmp 0x4093b8
call fcn.00414210
push eax
mov edx, dword [0x4a8a00]
call fcn.00414210
push eax
call fcn.004142c0
mov edx, str.help.txt
call fcn.004142c0
call fcn.00414320
push 0
call fcn.00414362
add dword [esp + 4], edx
call fcn.00411840
call fcn.00414380
and eax, eax
je 0x401635
mov ebp, 0x4979aa
mov ebx, ebp
mov ebp, 0x49585a
sub ebx, ebp
push ebx
mov ebp, 0x49585a
push ebp
push 0
call fcn.004118a0
push 0
call fcn.00411690
jmp 0x401644
push str.Could_not_create_HELP.TXT_file.
push str.Error
call fcn.0040d5d5
push 0x4a90d4
push 0x44e7a4
push 8
push 0x65
push 4
call fcn.00411f18
call fcn.00414210
push eax
mov edx, dword [0x4a8a00]
call fcn.00414210
push eax
call fcn.004142c0
mov edx, str.Options
call fcn.004142c0
call fcn.00414320
push 0xa
call fcn.00414362
add dword [esp + 4], edx
call fcn.00411860
call fcn.00414380
call fcn.00414210
push eax
push eax
push 0xa
call fcn.00411900
mov edx, 0x44e087
call fcn.004142c0
push 0x4a8a04
call fcn.00414230
call fcn.00414210
push eax
push eax
push 0xa
call fcn.00411900
push 0x4a8a08
call fcn.00414230
call fcn.00414210
push eax
push eax
push 0xa
call fcn.00411900
mov ebx, dword [0x4a8a0c]
inc ebx
mov ebp, dword [0x4a90d4]
shl ebx, 2
lea eax, [ebp + ebx]
push eax
call fcn.00414230
inc dword [0x4a8a0c]
push 0xa
call fcn.00411a40
mov ebx, eax
cmp ebx, 1
jne 0x4016e0
push 0xa
call fcn.00411690
fild dword [0x4a8a0c]
fmul dword [0x44e794]
fstp dword [0x4a8a10]
fld dword [0x4a8a10]
fmul dword [0x44e798]
fstp dword [0x4a8a14]
fld dword [0x4a8a10]
fild dword [0x4a8a0c]
fdiv dword [0x44e79c]
fdivp st(1)
fstp dword [0x4a8a18]
fld dword [0x4a8a14]
fild dword [0x4a8a0c]
fdiv dword [0x44e79c]
fdivp st(1)
fstp dword [0x4a8a1c]
fld dword [0x4a8a10]
fcomp dword [0x44e7a0]
fnstsw ax
test ah, 1
jne 0x4017a4
mov ebx, dword [0x4a8a0c]
cmp ebx, 0x15
jl 0x4017a4
jmp 0x4017ab
mov eax, 1
jmp 0x4017ad
xor eax, eax
and eax, eax
je 0x4017e9
mov dword [0x4a8a10], 0x44480000
mov dword [0x4a8a14], 0x44c80000
fld dword [0x4a8a10]
fdiv dword [0x44e798]
fstp dword [0x4a8a18]
fld dword [0x4a8a14]
fdiv dword [0x44e798]
fstp dword [0x4a8a1c]
push 0x120
fld dword [0x4a8a14]
push eax
fistp dword [esp]
fld dword [0x4a8a10]
push eax
fistp dword [esp]
push 1
call fcn.00412782
and eax, eax
je 0x401983
push 1
call fcn.00412630
push eax
call fcn.00412155
push 1
call fcn.004113f4
push eax
call fcn.00412231
push 0x11
call fcn.00412248
mov dword [0x4a8a20], 1
mov eax, dword [0x4a8a0c]
cmp eax, dword [0x4a8a20]
jl 0x4018a1
push 0xff
push 0
push 0
mov eax, 0
call fcn.0040dc10
push eax
mov ebx, dword [0x4a8a20]
mov ebp, dword [0x4a90d4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8a20]
imul ebx, ebx, 0x1a
add ebx, 0xffffffe8
push ebx
push 2
call fcn.0041225f
inc dword [0x4a8a20]
jno 0x401848
mov dword [0x4a8a20], 1
mov eax, dword [0x4a8a0c]
cmp eax, dword [0x4a8a20]
jl 0x401904
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040dc10
push eax
mov ebx, dword [0x4a8a20]
mov ebp, dword [0x4a90d4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8a20]
imul ebx, ebx, 0x1a
add ebx, 0xffffffe6
push ebx
push 0
call fcn.0041225f
inc dword [0x4a8a20]
jno 0x4018ab
call fcn.004121e8
push 0
fld dword [0x4a8a1c]
push eax
fistp dword [esp]
fld dword [0x4a8a18]
push eax
fistp dword [esp]
push 1
call fcn.00412897
push 0
call fcn.00412630
push eax
call fcn.00412155
push 0x11
call fcn.00412248
fld dword [0x4a8a1c]
push eax
fistp dword [esp]
fld dword [0x4a8a18]
push eax
fistp dword [esp]
push 0x43
push 7
push 1
call fcn.00412766
push eax
call fcn.004122ad
call fcn.004121e8
push 1
call fcn.0041231a
push 0x120
push 0x190
push 0x640
push 1
call fcn.00412782
and eax, eax
je 0x401a97
push 1
call fcn.00412630
push eax
call fcn.00412155
push 2
call fcn.004113f4
push eax
call fcn.00412231
push 0x11
call fcn.00412248
call fcn.00414210
push eax
push 0xff
push 0x2e
push 0xa6
mov eax, 0xec
call fcn.0040dc10
push eax
mov edx, dword [0x4a8a04]
call fcn.00414210
push eax
call fcn.004142c0
mov edx, dword [0x4a8a08]
call fcn.004142c0
call fcn.00414320
push 0
push 0
call fcn.00414362
add dword [esp + 8], edx
call fcn.0041225f
call fcn.00414380
call fcn.004121e8
push 0
push 0x64
push 0x190
push 1
call fcn.00412897
push 0
call fcn.00412630
push eax
call fcn.00412155
push 0x11
call fcn.00412248
push 0x64
push 0x190
push 0x28
push 5
push 1
call fcn.00412766
push eax
call fcn.004122ad
call fcn.004121e8
push 1
call fcn.0041231a
push 0x90000001
push 0x44e01d
push 0
call fcn.00412a06
push eax
push 0
call fcn.00412a24
push eax
push 0
push 0
push 0
call fcn.0040ff75
and eax, eax
je 0x401f40
push str.CLOSEBUTTON
push 0x13
push 0x13
push 6
push 0x1e4
push 1
call fcn.0040e6b9
mov dword [0x4a89e4], eax
push str.READMEBUTTON
push 0x20
push 0x11e
push 0x17e
push 0xa
push 3
call fcn.0040e6b9
mov dword [0x4a89e4], eax
push str.TROUBLEBUTTON
push 0x20
push 0x11e
push 0x19c
push 0xa
push 4
call fcn.0040e6b9
mov dword [0x4a89e4], eax
push str.CHBUTTON
push 0x23
push 0xf5
push 1
push 0x23
push 5
call fcn.0040e6b9
mov dword [0x4a89e4], eax
push str.BOXARTBUTTON
push 0x118
push 0xc8
push 0x2d
push 0x132
push 6
call fcn.0040e6b9
mov dword [0x4a89e4], eax
push 0
call fcn.0040ff98
push eax
push 0x80000000
push str.Test
push 0x6b
push 0xc8
push 0
push 0xfffffc18
push 1
call fcn.0040fc75
push 0
call fcn.0040ff98
push eax
call fcn.0040a6bc
push 0xff
push 0
call fcn.00412766
push eax
push 0
call fcn.0040ff98
push eax
call fcn.00409400
push 0
push 0
call fcn.0040ffb4
call fcn.00414210
push eax
push eax
mov edx, str.http:__www.cheathappens.com_trnflash.asp_id
call fcn.004142c0
mov edx, dword [0x4a89fc]
call fcn.004142c0
call fcn.00414320
push 0xc8
push 0x12c
push 0
push 0
push 2
call fcn.00414362
add dword [esp + 0x14], edx
call fcn.0040f7a1
call fcn.00414380
mov dword [0x4a89e4], eax
push 0
push 0
call sub.WININET.DLL_InternetGetConnectedState
mov ebx, eax
and ebx, ebx
jne 0x401c83
push 1
push 1
call fcn.0040ffb4
mov dword [0x4a8a20], 1
mov eax, 4
cmp eax, dword [0x4a8a20]
jl 0x401f40
push 0x120
push 0xfa
push 0x1f4
push 1
call fcn.00412782
and eax, eax
je 0x401ddf
push 1
call fcn.00412630
push eax
call fcn.00412155
push 1
call fcn.004113f4
push eax
call fcn.00412231
push 0x11
call fcn.00412248
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040dc10
push eax
push str.zhiru
push 0
push 0
call fcn.0041225f
call fcn.004121e8
push 0
push 0x64
push 0xc8
push 1
call fcn.00412897
push 0
call fcn.00412630
push eax
call fcn.00412155
push 0
call fcn.00412248
push 0xff
push 0xe8
push 0xe0
mov eax, 0xe0
call fcn.0040dc10
push eax
push 0xe
push 0xaf
push 0x12
push 0x133
call fcn.004122df
push 0x21
call fcn.00412248
push 0x64
push 0xc8
push 0x12
push 0x133
push 1
call fcn.00412766
push eax
call fcn.004122ad
call fcn.004121e8
push 1
call fcn.0041231a
push 0xff
push 0
call fcn.00412766
push eax
push 0
call fcn.0040ff98
push eax
call fcn.00409400
push 0x32
call fcn.0040dc29
push 0x120
push 0xfa
push 0x1f4
push 1
call fcn.00412782
and eax, eax
je 0x401f2a
push 1
call fcn.00412630
push eax
call fcn.00412155
push 1
call fcn.004113f4
push eax
call fcn.00412231
push 0x11
call fcn.00412248
push 0xff
push 0
push 0
mov eax, 0
call fcn.0040dc10
push eax
push str.zhiru
push 0
push 0
call fcn.0041225f
call fcn.004121e8
push 0
push 0x64
push 0xc8
push 1
call fcn.00412897
push 0
call fcn.00412630
push eax
call fcn.00412155
push 0
call fcn.00412248
push 0xff
push 0xe8
push 0xe0
mov eax, 0xe0
call fcn.0040dc10
push eax
push 0xe
push 0xaf
push 0x12
push 0x133
call fcn.004122df
push 0x21
call fcn.00412248
push 0x64
push 0xc8
push 0x12
push 0x133
push 1
call fcn.00412766
push eax
call fcn.004122ad
call fcn.004121e8
push 1
call fcn.0041231a
push 0xff
push 0
call fcn.00412766
push eax
push 0
call fcn.0040ff98
push eax
call fcn.00409400
push 0x32
call fcn.0040dc29
inc dword [0x4a8a20]
jno 0x401c8d
call sub.KERNEL32.dll_IsDebuggerPresent
and eax, eax
je 0x401f50
push 0x75009553
inc ecx
ret
push 0x12c
call fcn.0040dc29
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.00412782
and eax, eax
je 0x40209b
push 1
call fcn.00412630
push eax
call fcn.00412155
push 1
call fcn.004113f4
push eax
call fcn.00412231
push 0x11
call fcn.00412248
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040dc10
push eax
push str.Authenticating_Trainer......
push 0
push 0
call fcn.0041225f
call fcn.004121e8
push 0
push 0x64
push 0x1f4
push 1
call fcn.00412897
push 0
call fcn.00412630
push eax
call fcn.00412155
push 0
call fcn.00412248
push 0xff
push 0x70
push 0x59
mov eax, 0x57
call fcn.0040dc10
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.004122df
push 0x11
call fcn.00412248
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.00412766
push eax
call fcn.004122ad
call fcn.004121e8
push 1
call fcn.0041231a
push 0xff
push 0
call fcn.00412766
push eax
push 0
call fcn.0040ff98
push eax
call fcn.00409400
call fcn.00414210
push eax
push eax
call fcn.00414210
push eax
push eax
call fcn.0040d730
call fcn.00414362
add dword [esp], edx
call fcn.00411471
push 0x4a8a24
call fcn.00414230
mov edx, dword [0x4a8a24]
call fcn.00414210
push eax
call fcn.004142c0
push 0x4a8a28
call fcn.00414230
call sub.USER32.DLL_GetForegroundWindow
mov dword [0x4a8a2c], eax
push 0x4a8a30
push dword [0x4a8a2c]
call sub.USER32.DLL_GetWindowThreadProcessId
push dword [0x4a8a30]
push dword [0x4a8a38]
push 0x1f0fff
call sub.KERNEL32.dll_OpenProcess
mov dword [0x4a8a34], eax
mov eax, dword [0x4a8a30]
mov dword [0x4a8a2c], eax
push 0x3e8
call fcn.0040de00
mov dword [0x4a8a3c], eax
mov edx, dword [0x4a8a28]
call fcn.00414210
push eax
call fcn.004142c0
push 0x4a8a40
call fcn.00414230
mov eax, dword [0x4a8a48]
mov dword [0x4a8a44], eax
mov ebp, 0x4979aa
mov dword [0x4a8a20], ebp
mov eax, dword [0x4a8a20]
call fcn.0040de20
mov byte [0x4a8da8], al
mov ebp, 0x4979ad
mov dword [0x4a8a20], ebp
mov ebp, 0x4979ad
mov ebx, ebp
add ebx, 0xbb8
cmp ebx, dword [0x4a8a20]
jl 0x402207
mov eax, dword [0x4a8a20]
call fcn.0040de20
mov byte [0x4a8da9], al
movsx ebx, byte [0x4a8da9]
xor bl, byte [0x4a8da8]
mov eax, ebx
mov byte [0x4a8daa], al
movsx ebx, byte [0x4a8da8]
add ebx, 0x37
mov eax, ebx
mov byte [0x4a8da8], al
movsx ebx, byte [0x4a8da8]
cmp ebx, 0xff
jle 0x4021e4
movsx ebx, byte [0x4a8da8]
add ebx, 0xffffff01
mov eax, ebx
mov byte [0x4a8da8], al
movsx eax, byte [0x4a8daa]
push eax
mov eax, dword [0x4a8a20]
call fcn.0040de30
mov dword [0x4a89e4], eax
inc dword [0x4a8a20]
jno 0x402178
call sub.KERNEL32.dll_GetTickCount
mov dword [0x4a8a4c], eax
call fcn.00414210
push eax
push eax
call fcn.0040d730
push 0x4a8a50
call fcn.00414230
call fcn.00414210
push eax
push eax
push dword [0x4a8a50]
call fcn.00411471
push 0x4a8a50
call fcn.00414230
mov edx, 0x44e01d
lea ecx, [0x4a8a54]
call fcn.0040b008
mov edx, 0x44e01d
lea ecx, [0x4a8a58]
call fcn.0040b008
mov edx, 0x44e01d
lea ecx, [0x4a8a5c]
call fcn.0040b008
mov dword [0x4a8a60], 0
mov dword [0x4a8a64], 0
call fcn.00414210
push eax
push eax
call fcn.00414210
push eax
call fcn.0040d730
call fcn.00414320
push 0
call fcn.00414362
add dword [esp + 4], edx
call fcn.00411880
call fcn.00414380
push 0
call fcn.00411ae0
mov dword [0x4a8a68], eax
mov dword [0x4a8a20], 1
mov ebx, dword [0x4a8a68]
add ebx, 0xfffffff8
cmp ebx, dword [0x4a8a20]
jl 0x40230c
push 0
call fcn.00411b40
mov byte [0x4a8dab], al
mov ebx, dword [0x4a8a64]
movzx eax, byte [0x4a8dab]
add ebx, eax
mov dword [0x4a8a64], ebx
inc dword [0x4a8a20]
jno 0x4022cf
push 0
call fcn.00411ba0
mov dword [0x4a8a6c], eax
push 0
call fcn.00411ba0
mov dword [0x4a8a70], eax
push 0
call fcn.00411690
mov eax, dword [0x4a8a64]
mov dword [0x4a8a74], eax
push dword [0x4a8a50]
push 0
call fcn.00411880
mov ebx, eax
and ebx, ebx
jle 0x4026b1
mov dword [0x4a8a20], 1
mov eax, 0x3b8
cmp eax, dword [0x4a8a20]
jl 0x402386
push 0
call fcn.00411c00
mov dword [0x4a8a78], eax
inc dword [0x4a8a20]
jno 0x402362
mov dword [0x4a8a20], 0x3b9
mov eax, 0x3c0
cmp eax, dword [0x4a8a20]
jl 0x40241c
push 0
call fcn.00411c00
mov dword [0x4a8a78], eax
call fcn.00414210
push eax
push eax
call fcn.00414210
push eax
push 0
mov eax, dword [0x4a8a78]
cdq
push edx
push eax
call fcn.0040b120
call fcn.00414362
add dword [esp], edx
call fcn.0040b1d0
call fcn.00414380
mov dword [0x4a8a78], eax
mov edx, dword [0x4a8a54]
call fcn.00414210
push eax
call fcn.004142c0
call fcn.00414210
push eax
push eax
push dword [0x4a8a78]
call fcn.0040b350
pop eax
push 0x4a8a54
call fcn.00414230
inc dword [0x4a8a20]
jno 0x402390
push dword [0x4a8a54]
call fcn.0040a5c7
mov dword [0x4a8a78], eax
mov ebx, dword [0x4a8a78]
xor ebx, 0x98989898
mov dword [0x4a8a78], ebx
mov eax, dword [0x4a8a78]
mov dword [0x4a8a7c], eax
call fcn.00414210
push eax
push eax
push 0xa
call fcn.00414210
push eax
mov edx, str.0000000000
call fcn.004142c0
call fcn.00414210
push eax
push eax
mov eax, dword [0x4a8a78]
cdq
push edx
push eax
call fcn.0040b4e0
pop eax
call fcn.00414362
add dword [esp], edx
call fcn.0040b570
push 0x4a8a54
call fcn.00414230
mov dword [0x4a8a20], 0x3c1
mov eax, 0x3c8
cmp eax, dword [0x4a8a20]
jl 0x402526
push 0
call fcn.00411c00
mov dword [0x4a8a78], eax
call fcn.00414210
push eax
push eax
call fcn.00414210
push eax
push 0
mov eax, dword [0x4a8a78]
cdq
push edx
push eax
call fcn.0040b120
call fcn.00414362
add dword [esp], edx
call fcn.0040b1d0
call fcn.00414380
mov dword [0x4a8a78], eax
mov edx, dword [0x4a8a58]
call fcn.00414210
push eax
call fcn.004142c0
call fcn.00414210
push eax
push eax
push dword [0x4a8a78]
call fcn.0040b350
pop eax
push 0x4a8a58
call fcn.00414230
inc dword [0x4a8a20]
jno 0x40249a
push dword [0x4a8a58]
call fcn.0040a5c7
mov dword [0x4a8a80], eax
mov dword [0x4a8a20], 0x3c9
mov eax, 0x3d0
cmp eax, dword [0x4a8a20]
jl 0x4025cc
push 0
call fcn.00411c00
mov dword [0x4a8a78], eax
call fcn.00414210
push eax
push eax
call fcn.00414210
push eax
push 0
mov eax, dword [0x4a8a78]
cdq
push edx
push eax
call fcn.0040b120
call fcn.00414362
add dword [esp], edx
call fcn.0040b1d0
call fcn.00414380
mov dword [0x4a8a78], eax
mov edx, dword [0x4a8a5c]
call fcn.00414210
push eax
call fcn.004142c0
call fcn.00414210
push eax
push eax
push dword [0x4a8a78]
call fcn.0040b350
pop eax
push 0x4a8a5c
call fcn.00414230
inc dword [0x4a8a20]
jno 0x402540
push dword [0x4a8a5c]
call fcn.0040a5c7
mov dword [0x4a8a78], eax
mov eax, dword [0x4a8a78]
mov dword [0x4a8a84], eax
mov dword [0x4a8a20], 0x3d1
mov eax, dword [0x4a8a84]
cmp eax, dword [0x4a8a20]
jl 0x402614
push 0
call fcn.00411c00
mov dword [0x4a8a78], eax
inc dword [0x4a8a20]
jno 0x4025f0
mov eax, dword [0x4a8a84]
mov dword [0x4a8a20], eax
mov ebx, dword [0x4a8a84]
add ebx, 0x12
cmp ebx, dword [0x4a8a20]
jl 0x402658
push 0
call fcn.00411c00
mov dword [0x4a8a78], eax
mov ebx, dword [0x4a8a60]
add ebx, dword [0x4a8a78]
mov dword [0x4a8a60], ebx
inc dword [0x4a8a20]
jno 0x40261e
mov ebx, dword [0x4a8a80]
xor ebx, dword [0x4a8a60]
mov dword [0x4a8a88], ebx
mov ebx, dword [0x4a8a88]
and ebx, ebx
jne 0x40267e
mov dword [0x4a8a88], 0x63
mov ebx, dword [0x4a8a88]
xor ebx, 0x98989898
mov dword [0x4a8a88], ebx
mov eax, dword [0x4a8a7c]
mov dword [0x4a8a8c], eax
mov ebx, dword [0x4a8a7c]
cmp ebx, dword [0x4a8a88]
jne 0x4026aa
jmp 0x4026af
call fcn.004081e6
jmp 0x4026b6
call fcn.004081e6
mov ebx, dword [0x4a8a70]
cmp ebx, dword [0x4a8a68]
jne 0x4026c6
jmp 0x4026cb
call fcn.004081e6
call sub.KERNEL32.dll_GetTickCount
mov dword [0x4a8a90], eax
mov ebx, dword [0x4a8a90]
sub ebx, dword [0x4a8a4c]
cmp ebx, 0x3e8
jle 0x4026f0
push 0x9099542
inc eax
ret
mov dword [0x4a8a94], 0x45a2a5
push 0x4a90dc
push 0
push 0x15
push 0x15
push 4
call fcn.00411f18
push 0x4a90e4
push 0
push 0x15
push 0x15
push 4
call fcn.00411f18
push 0x4a90ec
push 0
push 0x15
push 0x15
push 4
call fcn.00411f18
push 0x4a90f4
push 0
push 0x15
push 0x15
push 4
call fcn.00411f18
push 0x4a90fc
push 0
push 0x15
push 0x15
push 4
call fcn.00411f18
push 0x3e8
call fcn.0040de00
mov dword [0x4a8a3c], eax
push 0x3e8
call fcn.0040de00
mov dword [0x4a8a98], eax
mov dword [0x4a8a20], 1
mov eax, 0x14
cmp eax, dword [0x4a8a20]
jl 0x402812
mov ebx, dword [0x4a8a20]
mov ebp, dword [0x4a90e4]
shl ebx, 2
mov dword [ebp + ebx], 1
mov ebx, dword [0x4a8a20]
mov ebp, dword [0x4a90ec]
shl ebx, 2
mov dword [ebp + ebx], 1
mov ebx, dword [0x4a8a20]
mov ebp, dword [0x4a90f4]
shl ebx, 2
mov dword [ebp + ebx], 1
inc dword [0x4a8a20]
jno 0x4027b8
mov edx, str.Template
lea ecx, [0x4a8ab4]
call fcn.0040b008
call fcn.00414210
push eax
push eax
call fcn.00411410
push 0x4a8a9c
call fcn.00414230
call fcn.0040835a
call fcn.00408eca
call fcn.0040835a
call fcn.0040827f
call fcn.00408c94
call fcn.0040827f
call fcn.00407ac6
call fcn.00414210
push eax
mov edx, dword [0x4a8a9c]
call fcn.00414210
push eax
call fcn.004142c0
mov edx, str.CH.dll
call fcn.004142c0
call fcn.00414320
push 0
call fcn.00414362
add dword [esp + 4], edx
call fcn.00411840
call fcn.00414380
and eax, eax
je 0x4028c8
mov ebp, 0x4985ad
mov ebx, ebp
mov ebp, 0x4979ad
sub ebx, ebp
push ebx
mov ebp, 0x4979ad
push ebp
push 0
call fcn.004118a0
push 0
call fcn.00411690
jmp 0x4028c8
call fcn.00414210
push eax
mov edx, dword [0x4a8a9c]
call fcn.00414210
push eax
call fcn.004142c0
mov edx, str.help.txt
call fcn.004142c0
call fcn.00414320
push 0
call fcn.00414362
add dword [esp + 4], edx
call fcn.00411840
call fcn.00414380
and eax, eax
je 0x402935
mov ebp, 0x4979aa
mov ebx, ebp
mov ebp, 0x49585a
sub ebx, ebp
push ebx
mov ebp, 0x49585a
push ebp
push 0
call fcn.004118a0
push 0
call fcn.00411690
jmp 0x402944
push str.Could_not_create_HELP.TXT_file.
push str.Error
call fcn.0040d5d5
push str.CH_Trainer_Keys.dat
push 0
call fcn.00411880
mov dword [0x4a89e4], eax
mov ebx, dword [0x4a89e4]
and ebx, ebx
jle 0x402976
mov dword [0x4a8acc], 1
push 0
call fcn.00411690
call fcn.00414210
push eax
push eax
call fcn.00411410
mov edx, str.black.txt
call fcn.004142c0
push 0x4a8ad0
call fcn.00414230
push 0
push 0
call sub.WININET.DLL_InternetGetConnectedState
and eax, eax
je 0x4029ab
jmp 0x4029da
push dword [0x4a8a8c]
call fcn.0040974d
mov ebx, eax
and ebx, ebx
jne 0x4029da
push 0
push str.This_trainer_must_be_authenticated_before_it_can_be_used._Please_connect_this_computer_to_the_Internet_or_obtain_an_offline_key_from_cheathappens.com_then_re_run_the_trainer.
push str.No_Internet_Connection_
call fcn.0040d5a6
jmp 0x4093b8
call fcn.00414210
push eax
push eax
call fcn.00411410
mov edx, str.black.txt
call fcn.004142c0
push 0x4a8ad0
call fcn.00414230
mov ebx, dword [0x4a8ad4]
and ebx, ebx
jle 0x402abc
call fcn.00414210
push eax
mov edx, str.http:__www.cheathappens.com_unauthorized_
call fcn.004142c0
call fcn.00414210
push eax
push eax
mov eax, dword [0x4a8a8c]
cdq
push edx
push eax
xor dword [esp], 0x7b3d89b
xor dword [esp + 4], 0
pop eax
pop edx
push edx
push eax
call fcn.0040b4e0
pop eax
mov edx, str..zip
call fcn.004142c0
push 0x4a8ad8
call fcn.00414230
mov edx, str.http:__www.cheathappens.com_unauthorized_0.zip
lea ecx, [0x4a8adc]
call fcn.0040b008
mov edx, dword [0x4a8ad8]
call fcn.00414210
push eax
call fcn.004142c0
push 0x4a8ae0
call fcn.00414230
mov edx, dword [0x4a8adc]
call fcn.00414210
push eax
call fcn.004142c0
push 0x4a8ae4
call fcn.00414230
push 0
push 0
mov eax, dword [0x4a8ad0]
push eax
mov eax, dword [0x4a8ae4]
push eax
push 0
call sub.URLMON.DLL_URLDownloadToFileA
mov dword [0x4a8ae8], eax
call fcn.00414210
push eax
mov edx, str.http:__www.cheathappens.com_unauthorized_
call fcn.004142c0
call fcn.00414210
push eax
push eax
mov eax, dword [0x4a8a8c]
cdq
push edx
push eax
xor dword [esp], 0x7b3d89b
xor dword [esp + 4], 0
pop eax
pop edx
push edx
push eax
call fcn.0040b4e0
pop eax
mov edx, str..zip
call fcn.004142c0
push 0x4a8ad8
call fcn.00414230
mov edx, str.http:__www.cheathappens.com_unauthorized_0.zip
lea ecx, [0x4a8adc]
call fcn.0040b008
mov edx, dword [0x4a8ad8]
call fcn.00414210
push eax
call fcn.004142c0
push 0x4a8ae0
call fcn.00414230
mov edx, dword [0x4a8adc]
call fcn.00414210
push eax
call fcn.004142c0
push 0x4a8ae4
call fcn.00414230
push 0
push 0
mov eax, dword [0x4a8ad0]
push eax
mov eax, dword [0x4a8ae4]
push eax
push 0
call sub.URLMON.DLL_URLDownloadToFileA
mov dword [0x4a8ae8], eax
mov ebx, dword [0x4a8ae8]
and ebx, ebx
jne 0x402b7c
jmp 0x402bab
push dword [0x4a8a8c]
call fcn.0040974d
mov ebx, eax
and ebx, ebx
jne 0x402bab
push 0
push str.This_trainer_must_be_authenticated_before_it_can_be_used._Please_connect_this_computer_to_the_Internet_or_obtain_an_offline_key_from_cheathappens.com_then_re_run_the_trainer.
push str.No_Internet_Connection_
call fcn.0040d5a6
jmp 0x4093b8
push 0
push 0
mov eax, dword [0x4a8ad0]
push eax
mov eax, dword [0x4a8ae0]
push eax
push 0
call sub.URLMON.DLL_URLDownloadToFileA
mov dword [0x4a8aec], eax
call fcn.00414210
push eax
push eax
push 0x44e09a
push str.IZnvZalZidZ_ZTraiZnerZ_UsZerZ
call fcn.0040b7e0
push 0x4a8af0
call fcn.00414230
mov ebx, dword [0x4a8aec]
and ebx, ebx
jne 0x402bff
call fcn.004081e6
call fcn.00414210
push eax
push eax
push str.ZTA.l
push dword [0x4a8af0]
call fcn.0040b7e0
push 0x4a8af0
call fcn.00414230
mov ebx, dword [0x4a8aec]
and ebx, ebx
jne 0x402d7a
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.00412782
and eax, eax
je 0x402d70
push 1
call fcn.00412630
push eax
call fcn.00412155
push 1
call fcn.004113f4
push eax
call fcn.00412231
push 0x11
call fcn.00412248
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040dc10
push eax
push dword [0x4a8af0]
push 0
push 0
call fcn.0041225f
call fcn.004121e8
push 0
push 0x64
push 0x1f4
push 1
call fcn.00412897
push 0
call fcn.00412630
push eax
call fcn.00412155
push 0
call fcn.00412248
push 0xff
push 0x28
push 0x28
mov eax, 0xff
call fcn.0040dc10
push eax
push 0x24
push 0x1df
push 1
push 0
call fcn.004122df
push 0x11
call fcn.00412248
push 0x64
push 0x1f4
push 0xa
push 0xc8
push 1
call fcn.00412766
push eax
call fcn.004122ad
call fcn.004121e8
push 1
call fcn.0041231a
push 0xff
push 0
call fcn.00412766
push eax
push 0
call fcn.0040ff98
push eax
call fcn.00409400
call fcn.00407ac6
jmp 0x402c20
mov ebx, dword [0x4a8ae8]
and ebx, ebx
je 0x402d9c
push dword [0x4a8a8c]
call fcn.0040974d
mov ebx, eax
and ebx, ebx
jne 0x402d9c
mov eax, 1
jmp 0x402d9e
xor eax, eax
and eax, eax
je 0x402dac
mov dword [0x4a8a94], 0
mov dword [0x4a8af4], 3
lea ebp, [0x4a8db0]
lea eax, [ebp]
push eax
call sub.USER32.DLL_GetKeyboardState
movsx eax, byte [ebp + 0x90]
push eax
pop dword [0x4a8af8]
mov ebx, dword [0x4a8af8]
cmp ebx, 1
jne 0x402df0
mov edx, str.Run_game_and_press_F1_at_main_menu.__Numlock_is_ON.
lea ecx, [0x4a8afc]
call fcn.0040b008
jmp 0x402e00
mov edx, 0x44e20d
lea ecx, [0x4a8afc]
call fcn.0040b008
mov ebx, dword [0x4a8af4]
cmp ebx, dword [0x4a8af8]
je 0x402f5e
mov eax, dword [0x4a8af8]
mov dword [0x4a8af4], eax
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.00412782
and eax, eax
je 0x402f5e
push 1
call fcn.00412630
push eax
call fcn.00412155
push 1
call fcn.004113f4
push eax
call fcn.00412231
push 0x11
call fcn.00412248
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040dc10
push eax
push dword [0x4a8afc]
push 0
push 0
call fcn.0041225f
call fcn.004121e8
push 0
push 0x64
push 0x1f4
push 1
call fcn.00412897
push 0
call fcn.00412630
push eax
call fcn.00412155
push 0
call fcn.00412248
push 0xff
push 0x70
push 0x59
mov eax, 0x57
call fcn.0040dc10
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.004122df
push 0x11
call fcn.00412248
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.00412766
push eax
call fcn.004122ad
call fcn.004121e8
push 1
call fcn.0041231a
push 0xff
push 0
call fcn.00412766
push eax
push 0
call fcn.0040ff98
push eax
call fcn.00409400
call fcn.00407ac6
push 0xa
call fcn.0040dc29
push 0x70
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
and ebx, ebx
je 0x402db6
mov edx, str.Shogun2.exe
lea ecx, [0x4a8a28]
call fcn.0040b008
call fcn.00406ec4
mov ebx, dword [0x4a8a2c]
and ebx, ebx
jne 0x403115
push 4
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
push 0x12c
call fcn.0040dc29
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.00412782
and eax, eax
je 0x403106
push 1
call fcn.00412630
push eax
call fcn.00412155
push 1
call fcn.004113f4
push eax
call fcn.00412231
push 0x11
call fcn.00412248
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040dc10
push eax
push str.Game_not_Found__Run_Game_and_then_press_F1_at_Main_Menu.
push 0
push 0
call fcn.0041225f
call fcn.004121e8
push 0
push 0x64
push 0x1f4
push 1
call fcn.00412897
push 0
call fcn.00412630
push eax
call fcn.00412155
push 0
call fcn.00412248
push 0xff
push 0x70
push 0x59
mov eax, 0x57
call fcn.0040dc10
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.004122df
push 0x11
call fcn.00412248
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.00412766
push eax
call fcn.004122ad
call fcn.004121e8
push 1
call fcn.0041231a
push 0xff
push 0
call fcn.00412766
push eax
push 0
call fcn.0040ff98
push eax
call fcn.00409400
push 0x7d0
call fcn.0040dc29
jmp 0x402d7a
mov edx, str.CH.dll
lea ecx, [0x4a8b00]
call fcn.0040b008
mov edx, dword [0x4a8a9c]
call fcn.00414210
push eax
call fcn.004142c0
mov edx, dword [0x4a8b00]
call fcn.004142c0
push 0x4a8a40
call fcn.00414230
call fcn.00406f09
mov edx, str.Shogun2.dll
lea ecx, [0x4a8aa4]
call fcn.0040b008
mov edx, str.xlive.dll
lea ecx, [0x4a8b04]
call fcn.0040b008
call fcn.00406ec4
call fcn.004079c3
call fcn.00407ac6
mov ebx, dword [0x4a8ac0]
and ebx, ebx
jne 0x4032e1
mov ebx, dword [0x4a8b08]
and ebx, ebx
jne 0x4032e1
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.00412782
and eax, eax
je 0x4032dc
push 1
call fcn.00412630
push eax
call fcn.00412155
push 1
call fcn.004113f4
push eax
call fcn.00412231
push 0x11
call fcn.00412248
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040dc10
push eax
push str.Game_not_Found__Run_Game_and_then_press_F1_at_Main_Menu.
push 0
push 0
call fcn.0041225f
call fcn.004121e8
push 0
push 0x64
push 0x1f4
push 1
call fcn.00412897
push 0
call fcn.00412630
push eax
call fcn.00412155
push 0
call fcn.00412248
push 0xff
push 0x70
push 0x59
mov eax, 0x57
call fcn.0040dc10
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.004122df
push 0x11
call fcn.00412248
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.00412766
push eax
call fcn.004122ad
call fcn.004121e8
push 1
call fcn.0041231a
push 0xff
push 0
call fcn.00412766
push eax
push 0
call fcn.0040ff98
push eax
call fcn.00409400
jmp 0x402d7a
mov ebx, dword [0x4a8a6c]
cmp ebx, dword [0x4a8a74]
jne 0x403305
mov ebx, dword [0x4a8a6c]
and ebx, ebx
je 0x403305
mov ebx, dword [0x4a8a74]
and ebx, ebx
je 0x403305
jmp 0x40330c
mov eax, 1
jmp 0x40330e
xor eax, eax
and eax, eax
je 0x403365
push 0xa
call fcn.0040dce9
mov ebx, eax
add ebx, 0xa
mov dword [0x4a8b0c], ebx
push 0x28
call fcn.0040dce9
mov ebx, eax
add ebx, 0x28
mov dword [0x4a8b10], ebx
mov ebx, dword [0x4a8ac0]
add ebx, dword [0x4a8b0c]
mov dword [0x4a8ac0], ebx
mov ebx, dword [0x4a8b08]
add ebx, dword [0x4a8b10]
mov dword [0x4a8b08], ebx
call fcn.004081e6
push 3
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.00412782
and eax, eax
je 0x4034ba
push 1
call fcn.00412630
push eax
call fcn.00412155
push 1
call fcn.004113f4
push eax
call fcn.00412231
push 0x11
call fcn.00412248
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040dc10
push eax
push str.Game_found__Trainer_Activated_
push 0
push 0
call fcn.0041225f
call fcn.004121e8
push 0
push 0x64
push 0x1f4
push 1
call fcn.00412897
push 0
call fcn.00412630
push eax
call fcn.00412155
push 0
call fcn.00412248
push 0xff
push 0x70
push 0x59
mov eax, 0x57
call fcn.0040dc10
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.004122df
push 0x11
call fcn.00412248
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.00412766
push eax
call fcn.004122ad
call fcn.004121e8
push 1
call fcn.0041231a
push 0xff
push 0
call fcn.00412766
push eax
push 0
call fcn.0040ff98
push eax
call fcn.00409400
mov ebx, dword [0x4a8b14]
and ebx, ebx
je 0x4037c8
push 0x8b
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xff
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x55
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x8b
mov ebx, dword [0x4a8a3c]
add ebx, 3
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xec
mov ebx, dword [0x4a8a3c]
add ebx, 4
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x83
mov ebx, dword [0x4a8a3c]
add ebx, 5
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xec
mov ebx, dword [0x4a8a3c]
add ebx, 6
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x20
mov ebx, dword [0x4a8a3c]
add ebx, 7
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x53
mov ebx, dword [0x4a8a3c]
add ebx, 8
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x56
mov ebx, dword [0x4a8a3c]
add ebx, 9
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x57
mov ebx, dword [0x4a8a3c]
add ebx, 0xa
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x8d
mov ebx, dword [0x4a8a3c]
add ebx, 0xb
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x45
mov ebx, dword [0x4a8a3c]
add ebx, 0xc
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xe0
mov ebx, dword [0x4a8a3c]
add ebx, 0xd
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x33
mov ebx, dword [0x4a8a3c]
add ebx, 0xe
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xf6
mov ebx, dword [0x4a8a3c]
add ebx, 0xf
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x50
mov ebx, dword [0x4a8a3c]
add ebx, 0x10
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xff
mov ebx, dword [0x4a8a3c]
add ebx, 0x11
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x75
mov ebx, dword [0x4a8a3c]
add ebx, 0x12
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xc
mov ebx, dword [0x4a8a3c]
add ebx, 0x13
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
mov ebx, dword [0x4a8b14]
add ebx, 0x1000
mov dword [0x4a8a20], ebx
mov ebx, dword [0x4a8b14]
add ebx, 0x200000
cmp ebx, dword [0x4a8a20]
jl 0x4037c8
push dword [0x4a8a38]
push 0x14
push dword [0x4a8a98]
push dword [0x4a8a20]
push dword [0x4a8b18]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x4a89e4], eax
push 0x14
push dword [0x4a8a98]
push dword [0x4a8a3c]
call fcn.0040de40
mov dword [0x4a89e4], eax
mov ebx, dword [0x4a89e4]
cmp ebx, 1
jne 0x4037bc
mov eax, dword [0x4a8a20]
mov dword [0x4a8b1c], eax
push 0xc2
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xc
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 3
push dword [0x4a8a3c]
push dword [0x4a8b1c]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
inc dword [0x4a8a20]
jno 0x4036dd
mov ebx, dword [0x4a8ad4]
and ebx, ebx
jle 0x4037d7
jmp 0x4045e5
mov ebx, dword [0x4a8a94]
cmp ebx, 0x45a2a5
jne 0x40387b
mov ebp, dword [0x4a90dc]
mov dword [ebp + 4], 0x61
mov dword [ebp + 8], 0x62
mov dword [ebp + 0xc], 0x63
mov dword [ebp + 0x10], 0x64
mov dword [ebp + 0x14], 0x65
mov dword [ebp + 0x18], 0x66
mov dword [ebp + 0x1c], 0x67
mov dword [ebp + 0x20], 0x68
mov dword [ebp + 0x24], 0x69
mov dword [ebp + 0x28], 0x60
mov dword [ebp + 0x2c], 0x6a
mov dword [ebp + 0x30], 0x6b
mov dword [ebp + 0x34], 0x6d
mov dword [ebp + 0x38], 0x6f
mov dword [ebp + 0x3c], 0
mov dword [ebp + 0x40], 0
mov dword [ebp + 0x44], 0
mov dword [ebp + 0x48], 0
mov dword [ebp + 0x4c], 0
mov dword [ebp + 0x50], 0
push str.CH_Trainer_Keys.dat
push 0
call fcn.00411880
mov dword [0x4a89e4], eax
mov ebx, dword [0x4a89e4]
and ebx, ebx
jle 0x4039e5
mov dword [0x4a8acc], 1
push 0
call fcn.00411c00
mov dword [0x4a8b20], eax
mov dword [0x4a8a20], 1
mov eax, dword [0x4a8b20]
cmp eax, dword [0x4a8a20]
jl 0x4039db
call fcn.00414210
push eax
push eax
push 0
call fcn.00411900
push 0x4a8b24
call fcn.00414230
push dword [0x4a8b24]
mov edx, 0x44e1cf
pop ecx
call fcn.004143b0
je 0x403916
mov ebx, dword [0x4a8a20]
mov ebp, dword [0x4a90e4]
shl ebx, 2
mov dword [ebp + ebx], 0
push dword [0x4a8b24]
mov edx, str.CTRL
pop ecx
call fcn.004143b0
je 0x403940
mov ebx, dword [0x4a8a20]
mov ebp, dword [0x4a90ec]
shl ebx, 2
mov dword [ebp + ebx], 0
push dword [0x4a8b24]
mov edx, 0x44e32b
pop ecx
call fcn.004143b0
je 0x40396a
mov ebx, dword [0x4a8a20]
mov ebp, dword [0x4a90f4]
shl ebx, 2
mov dword [ebp + ebx], 0
push 0
call fcn.00411c00
push eax
mov ebx, dword [0x4a8a20]
mov ebp, dword [0x4a90dc]
shl ebx, 2
pop dword [ebp + ebx]
call fcn.00414210
push eax
push eax
call fcn.00414210
push eax
push 0
mov ebx, dword [0x4a8a20]
shl ebx, 2
mov eax, dword [ebp + ebx]
cdq
push edx
push eax
call fcn.0040b120
call fcn.00414362
add dword [esp], edx
call fcn.0040b1d0
call fcn.00414380
push eax
mov ebx, dword [0x4a8a20]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x4a8a20]
jno 0x4038c0
push 0
call fcn.00411690
mov ebx, dword [0x4a8ab8]
add ebx, 0xa3966e
mov dword [0x4a8b28], ebx
mov ebx, dword [0x4a8ab8]
add ebx, 0x427fc7
mov dword [0x4a8b2c], ebx
mov ebx, dword [0x4a8ab8]
add ebx, 0x470c0
mov dword [0x4a8b30], ebx
mov ebx, dword [0x4a8ab8]
add ebx, 0xb24d58
mov dword [0x4a8b34], ebx
mov ebx, dword [0x4a8ab8]
add ebx, 0xb24d63
mov dword [0x4a8b38], ebx
mov ebx, dword [0x4a8ab8]
add ebx, 0xd59041
mov dword [0x4a8b3c], ebx
mov ebx, dword [0x4a8ab8]
add ebx, 0xa7cca1
mov dword [0x4a8b40], ebx
mov ebx, dword [0x4a8ab8]
add ebx, 0x2e0c90
mov dword [0x4a8b44], ebx
mov ebx, dword [0x4a8ab8]
add ebx, 0x2e0ca7
mov dword [0x4a8b48], ebx
mov ebx, dword [0x4a8ab8]
add ebx, 0x775e47
mov dword [0x4a8b4c], ebx
mov ebx, dword [0x4a8ab8]
add ebx, 0xda7141
mov dword [0x4a8b50], ebx
mov ebx, dword [0x4a8ab8]
add ebx, 0xe0f781
mov dword [0x4a8b54], ebx
mov ebx, dword [0x4a8ab8]
add ebx, 0x4a6cef
mov dword [0x4a8b58], ebx
mov ebx, dword [0x4a8ab8]
add ebx, 0x1042bc8
mov dword [0x4a8b5c], ebx
push 0x81
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xc1
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 3
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 4
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 5
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x89
mov ebx, dword [0x4a8a3c]
add ebx, 6
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xd
mov ebx, dword [0x4a8a3c]
add ebx, 7
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 8
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x3f
mov ebx, dword [0x4a8a3c]
add ebx, 9
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x9d
mov ebx, dword [0x4a8a3c]
add ebx, 0xa
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 3
mov ebx, dword [0x4a8a3c]
add ebx, 0xb
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xa3
mov ebx, dword [0x4a8a3c]
add ebx, 0xc
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 4
mov ebx, dword [0x4a8a3c]
add ebx, 0xd
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x3f
mov ebx, dword [0x4a8a3c]
add ebx, 0xe
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x9d
mov ebx, dword [0x4a8a3c]
add ebx, 0xf
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 3
mov ebx, dword [0x4a8a3c]
add ebx, 0x10
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xc3
mov ebx, dword [0x4a8a3c]
add ebx, 0x11
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 0x12
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 0x13
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 0x14
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 0x15
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 0x16
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 0x17
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 0x18
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 0x19
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 0x1a
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 0x1b
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 0x1c
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 0x1d
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 0x1e
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 0x1f
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x89
mov ebx, dword [0x4a8a3c]
add ebx, 0x20
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xd
mov ebx, dword [0x4a8a3c]
add ebx, 0x21
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 8
mov ebx, dword [0x4a8a3c]
add ebx, 0x22
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x3f
mov ebx, dword [0x4a8a3c]
add ebx, 0x23
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x9d
mov ebx, dword [0x4a8a3c]
add ebx, 0x24
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 3
mov ebx, dword [0x4a8a3c]
add ebx, 0x25
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x8b
mov ebx, dword [0x4a8a3c]
add ebx, 0x26
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x81
mov ebx, dword [0x4a8a3c]
add ebx, 0x27
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x1c
mov ebx, dword [0x4a8a3c]
add ebx, 0x28
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 5
mov ebx, dword [0x4a8a3c]
add ebx, 0x29
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 0x2a
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 0x2b
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xc3
mov ebx, dword [0x4a8a3c]
add ebx, 0x2c
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 0x2d
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 0x2e
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 0x2f
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xa3
mov ebx, dword [0x4a8a3c]
add ebx, 0x30
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xc
mov ebx, dword [0x4a8a3c]
add ebx, 0x31
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x3f
mov ebx, dword [0x4a8a3c]
add ebx, 0x32
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x9d
mov ebx, dword [0x4a8a3c]
add ebx, 0x33
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 3
mov ebx, dword [0x4a8a3c]
add ebx, 0x34
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x89
mov ebx, dword [0x4a8a3c]
add ebx, 0x35
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xd
mov ebx, dword [0x4a8a3c]
add ebx, 0x36
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x10
mov ebx, dword [0x4a8a3c]
add ebx, 0x37
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x3f
mov ebx, dword [0x4a8a3c]
add ebx, 0x38
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x9d
mov ebx, dword [0x4a8a3c]
add ebx, 0x39
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 3
mov ebx, dword [0x4a8a3c]
add ebx, 0x3a
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x2b
mov ebx, dword [0x4a8a3c]
add ebx, 0x3b
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x81
mov ebx, dword [0x4a8a3c]
add ebx, 0x3c
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x20
mov ebx, dword [0x4a8a3c]
add ebx, 0x3d
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x1c
mov ebx, dword [0x4a8a3c]
add ebx, 0x3e
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 5
mov ebx, dword [0x4a8a3c]
add ebx, 0x3f
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 0x40
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xc3
mov ebx, dword [0x4a8a3c]
add ebx, 0x41
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 0x2ac
push dword [0x4a8a3c]
mov ebx, dword [0x4a8b08]
add ebx, 0x1091
push ebx
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
mov ebx, dword [0x4a8b08]
add ebx, 0x3f00
push ebx
mov eax, dword [0x4a8a3c]
call fcn.0040ded0
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 4
push dword [0x4a8a3c]
mov ebx, dword [0x4a8b08]
add ebx, 0x1099
push ebx
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
mov ebx, dword [0x4a8b08]
add ebx, 0x3f04
push ebx
mov eax, dword [0x4a8a3c]
call fcn.0040ded0
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 4
push dword [0x4a8a3c]
mov ebx, dword [0x4a8b08]
add ebx, 0x109e
push ebx
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
mov ebx, dword [0x4a8b08]
add ebx, 0x3f08
push ebx
mov eax, dword [0x4a8a3c]
call fcn.0040ded0
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 4
push dword [0x4a8a3c]
mov ebx, dword [0x4a8b08]
add ebx, 0x10b3
push ebx
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
mov ebx, dword [0x4a8b08]
add ebx, 0x3f0c
push ebx
mov eax, dword [0x4a8a3c]
call fcn.0040ded0
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 4
push dword [0x4a8a3c]
mov ebx, dword [0x4a8b08]
add ebx, 0x10c2
push ebx
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
mov ebx, dword [0x4a8b08]
add ebx, 0x3f10
push ebx
mov eax, dword [0x4a8a3c]
call fcn.0040ded0
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 4
push dword [0x4a8a3c]
mov ebx, dword [0x4a8b08]
add ebx, 0x10c8
push ebx
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0xe8
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 3
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 4
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 5
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
mov ebx, dword [0x4a8b08]
add ebx, 0x1091
sub ebx, dword [0x4a8b30]
add ebx, 0xfffffffb
push ebx
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040ded0
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 6
push dword [0x4a8a3c]
push dword [0x4a8b30]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0xe8
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 3
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 4
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 5
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
mov ebx, dword [0x4a8b08]
add ebx, 0x10b1
sub ebx, dword [0x4a8b44]
add ebx, 0xfffffffb
push ebx
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040ded0
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 6
push dword [0x4a8a3c]
push dword [0x4a8b44]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0xe8
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 3
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 4
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 5
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
mov ebx, dword [0x4a8b08]
add ebx, 0x10c1
sub ebx, dword [0x4a8b48]
add ebx, 0xfffffffb
push ebx
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040ded0
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 6
push dword [0x4a8a3c]
push dword [0x4a8b48]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
mov dword [0x4a8b60], 0
mov eax, 0xff
cmp eax, dword [0x4a8b60]
jl 0x40460f
push dword [0x4a8b60]
call sub.USER32.DLL_GetAsyncKeyState
inc dword [0x4a8b60]
jno 0x4045ef
call sub.KERNEL32.dll_IsDebuggerPresent
and eax, eax
je 0x40461e
push 0x55009553
ret
mov ebp, dword [0x4a90dc]
push dword [ebp + 4]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a90fc]
pop dword [ebp + 4]
mov ebp, dword [0x4a90dc]
push dword [ebp + 8]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a90fc]
pop dword [ebp + 8]
mov ebp, dword [0x4a90dc]
push dword [ebp + 0xc]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a90fc]
pop dword [ebp + 0xc]
mov ebp, dword [0x4a90dc]
push dword [ebp + 0x10]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a90fc]
pop dword [ebp + 0x10]
mov ebp, dword [0x4a90dc]
push dword [ebp + 0x14]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a90fc]
pop dword [ebp + 0x14]
mov ebp, dword [0x4a90dc]
push dword [ebp + 0x18]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a90fc]
pop dword [ebp + 0x18]
mov ebp, dword [0x4a90dc]
push dword [ebp + 0x1c]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a90fc]
pop dword [ebp + 0x1c]
mov ebp, dword [0x4a90dc]
push dword [ebp + 0x20]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a90fc]
pop dword [ebp + 0x20]
mov ebp, dword [0x4a90dc]
push dword [ebp + 0x24]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a90fc]
pop dword [ebp + 0x24]
mov ebp, dword [0x4a90dc]
push dword [ebp + 0x28]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a90fc]
pop dword [ebp + 0x28]
mov ebp, dword [0x4a90dc]
push dword [ebp + 0x2c]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a90fc]
pop dword [ebp + 0x2c]
mov ebp, dword [0x4a90dc]
push dword [ebp + 0x30]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a90fc]
pop dword [ebp + 0x30]
mov ebp, dword [0x4a90dc]
push dword [ebp + 0x34]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a90fc]
pop dword [ebp + 0x34]
mov ebp, dword [0x4a90dc]
push dword [ebp + 0x38]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a90fc]
pop dword [ebp + 0x38]
mov ebp, dword [0x4a90dc]
push dword [ebp + 0x3c]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a90fc]
pop dword [ebp + 0x3c]
mov ebp, dword [0x4a90dc]
push dword [ebp + 0x40]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a90fc]
pop dword [ebp + 0x40]
mov ebp, dword [0x4a90dc]
push dword [ebp + 0x44]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a90fc]
pop dword [ebp + 0x44]
mov ebp, dword [0x4a90dc]
push dword [ebp + 0x48]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a90fc]
pop dword [ebp + 0x48]
mov ebp, dword [0x4a90dc]
push dword [ebp + 0x4c]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a90fc]
pop dword [ebp + 0x4c]
mov ebp, dword [0x4a90dc]
push dword [ebp + 0x50]
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
push ebx
mov ebp, dword [0x4a90fc]
pop dword [ebp + 0x50]
push 0x10
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
mov dword [0x4a8b64], ebx
push 0x11
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
mov dword [0x4a8b68], ebx
push 0x12
call sub.USER32.DLL_GetAsyncKeyState
mov ebx, eax
and ebx, 1
mov dword [0x4a8b6c], ebx
push 1
call fcn.0040dc29
push 0x32
call fcn.0040dce9
mov dword [0x4a8b70], eax
mov ebx, dword [0x4a8b70]
cmp ebx, 0x19
jne 0x404966
mov ebx, dword [0x4a8a6c]
cmp ebx, dword [0x4a8a74]
jne 0x4048ed
mov ebx, dword [0x4a8a6c]
and ebx, ebx
je 0x4048ed
mov ebx, dword [0x4a8a74]
and ebx, ebx
je 0x4048ed
jmp 0x4048f4
mov eax, 1
jmp 0x4048f6
xor eax, eax
and eax, eax
je 0x404966
push 0xff
call fcn.0040dce9
mov dword [0x4a8b0c], eax
push 0x190
call fcn.0040dce9
mov dword [0x4a8b10], eax
push dword [0x4a8b0c]
mov eax, dword [0x4a8a3c]
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 1
push dword [0x4a8a3c]
mov ebx, dword [0x4a8b08]
add ebx, dword [0x4a8b10]
add ebx, 0x1091
push ebx
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
call fcn.004081e6
push dword [0x4a8a38]
push 4
push dword [0x4a8a3c]
mov ebx, dword [0x4a8b08]
add ebx, 0x3f00
push ebx
push dword [0x4a8b18]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 4
push dword [0x4a8a3c]
mov ebx, dword [0x4a8b08]
add ebx, 0x3f00
push ebx
push dword [0x4a8b18]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x4a89e4], eax
mov eax, dword [0x4a8a3c]
call fcn.0040dee0
mov ebx, eax
add ebx, 0x46c
mov dword [0x4a8b74], ebx
push dword [0x4a8a38]
push 4
push dword [0x4a8a3c]
mov ebx, dword [0x4a8b08]
add ebx, 0x3f04
push ebx
push dword [0x4a8b18]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x4a89e4], eax
mov eax, dword [0x4a8a3c]
call fcn.0040dee0
mov ebx, eax
add ebx, 0xae8
mov dword [0x4a8b78], ebx
push dword [0x4a8a38]
push 4
push dword [0x4a8a3c]
mov ebx, dword [0x4a8b08]
add ebx, 0x3f08
push ebx
push dword [0x4a8b18]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x4a89e4], eax
mov eax, dword [0x4a8a3c]
call fcn.0040dee0
mov ebx, eax
add ebx, 0x51c
mov dword [0x4a8b7c], ebx
mov eax, dword [0x4a8a3c]
call fcn.0040dee0
mov ebx, eax
add ebx, 0x518
mov dword [0x4a8b80], ebx
push dword [0x4a8a38]
push 4
push dword [0x4a8a3c]
mov ebx, dword [0x4a8b08]
add ebx, 0x3f0c
push ebx
push dword [0x4a8b18]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x4a89e4], eax
mov eax, dword [0x4a8a3c]
call fcn.0040dee0
mov dword [0x4a8b84], eax
push dword [0x4a8a38]
push 4
push dword [0x4a8a3c]
mov ebx, dword [0x4a8b08]
add ebx, 0x3f10
push ebx
push dword [0x4a8b18]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x4a89e4], eax
mov eax, dword [0x4a8a3c]
call fcn.0040dee0
mov ebx, eax
add ebx, 0x520
mov dword [0x4a8b88], ebx
mov dword [0x4a8b8c], 1
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90f4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90ec]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90e4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90dc]
shl ebx, 2
push dword [ebp + ebx]
call fcn.00409af0
mov dword [0x4a8b90], eax
mov ebx, dword [0x4a8b90]
and ebx, ebx
je 0x404d2c
push dword [0x4a8b94]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x404c51
mov dword [0x4a8b94], 1
push 0xeb
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 1
push dword [0x4a8a3c]
push dword [0x4a8b28]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 3
push dword [0x4a8a3c]
push dword [0x4a8b2c]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
jmp 0x404d2b
mov ebx, 1
cmp ebx, dword [esp]
jne 0x404d2b
mov dword [0x4a8b94], 0
push 0x74
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 1
push dword [0x4a8a3c]
push dword [0x4a8b28]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0x89
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x41
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x18
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 3
push dword [0x4a8a3c]
push dword [0x4a8b2c]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 1
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
pop eax
mov dword [0x4a8b8c], 2
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90f4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90ec]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90e4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90dc]
shl ebx, 2
push dword [ebp + ebx]
call fcn.00409af0
mov dword [0x4a8b98], eax
mov ebx, dword [0x4a8b98]
and ebx, ebx
je 0x404e1a
mov ebx, dword [0x4a8b9c]
and ebx, ebx
jne 0x404e1a
push 0xf423f
mov eax, dword [0x4a8a3c]
call fcn.0040ded0
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 4
push dword [0x4a8a3c]
push dword [0x4a8ba0]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 4
push dword [0x4a8a3c]
push dword [0x4a8b74]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
mov dword [0x4a8b8c], 3
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90f4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90ec]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90e4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90dc]
shl ebx, 2
push dword [ebp + ebx]
call fcn.00409af0
mov dword [0x4a8ba4], eax
mov ebx, dword [0x4a8ba4]
and ebx, ebx
je 0x404edd
mov ebx, dword [0x4a8b9c]
and ebx, ebx
jne 0x404edd
push 0xf423f
mov eax, dword [0x4a8a3c]
call fcn.0040ded0
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 4
push dword [0x4a8a3c]
push dword [0x4a8b78]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
mov dword [0x4a8b8c], 4
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90f4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90ec]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90e4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90dc]
shl ebx, 2
push dword [ebp + ebx]
call fcn.00409af0
mov dword [0x4a8ba8], eax
mov ebx, dword [0x4a8ba8]
and ebx, ebx
je 0x40516c
push dword [0x4a8bac]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x40505f
mov dword [0x4a8bac], 1
push 0x33
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xc0
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 3
push dword [0x4a8a3c]
push dword [0x4a8b34]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0xd9
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xee
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 3
push dword [0x4a8a3c]
push dword [0x4a8b38]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
jmp 0x40516b
mov ebx, 1
cmp ebx, dword [esp]
jne 0x40516b
mov dword [0x4a8bac], 0
push 0x8b
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x46
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x20
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 3
push dword [0x4a8a3c]
push dword [0x4a8b34]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0xdb
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x46
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x20
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 3
push dword [0x4a8a3c]
push dword [0x4a8b38]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 1
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
pop eax
mov dword [0x4a8b8c], 5
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90f4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90ec]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90e4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90dc]
shl ebx, 2
push dword [ebp + ebx]
call fcn.00409af0
mov dword [0x4a8bb0], eax
mov ebx, dword [0x4a8bb0]
and ebx, ebx
je 0x40531b
push dword [0x4a8bb4]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x40527e
mov dword [0x4a8bb4], 1
push 0x33
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xc0
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 3
push dword [0x4a8a3c]
push dword [0x4a8b3c]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
jmp 0x40531a
mov ebx, 1
cmp ebx, dword [esp]
jne 0x40531a
mov dword [0x4a8bb4], 0
push 0x8b
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x41
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x34
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 3
push dword [0x4a8a3c]
push dword [0x4a8b3c]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 1
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
pop eax
mov dword [0x4a8b8c], 6
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90f4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90ec]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90e4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90dc]
shl ebx, 2
push dword [ebp + ebx]
call fcn.00409af0
mov dword [0x4a8bb8], eax
mov ebx, dword [0x4a8bb8]
and ebx, ebx
je 0x405636
push dword [0x4a8bbc]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x4054e3
mov dword [0x4a8bbc], 1
push 0xc7
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x41
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 8
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x99
mov ebx, dword [0x4a8a3c]
add ebx, 3
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x99
mov ebx, dword [0x4a8a3c]
add ebx, 4
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x99
mov ebx, dword [0x4a8a3c]
add ebx, 5
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x99
mov ebx, dword [0x4a8a3c]
add ebx, 6
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xeb
mov ebx, dword [0x4a8a3c]
add ebx, 7
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 7
mov ebx, dword [0x4a8a3c]
add ebx, 8
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 9
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 0xa
push dword [0x4a8a3c]
push dword [0x4a8b40]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
jmp 0x405635
mov ebx, 1
cmp ebx, dword [esp]
jne 0x405635
mov dword [0x4a8bbc], 0
push 0x8b
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x41
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 4
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x85
mov ebx, dword [0x4a8a3c]
add ebx, 3
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xc0
mov ebx, dword [0x4a8a3c]
add ebx, 4
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x74
mov ebx, dword [0x4a8a3c]
add ebx, 5
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 9
mov ebx, dword [0x4a8a3c]
add ebx, 6
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x83
mov ebx, dword [0x4a8a3c]
add ebx, 7
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xf8
mov ebx, dword [0x4a8a3c]
add ebx, 8
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 5
mov ebx, dword [0x4a8a3c]
add ebx, 9
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 0xa
push dword [0x4a8a3c]
push dword [0x4a8b40]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 1
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
pop eax
mov dword [0x4a8b8c], 7
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90f4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90ec]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90e4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90dc]
shl ebx, 2
push dword [ebp + ebx]
call fcn.00409af0
mov dword [0x4a8bc0], eax
mov ebx, dword [0x4a8bc0]
and ebx, ebx
je 0x40573e
mov ebx, dword [0x4a8b9c]
and ebx, ebx
jne 0x40573e
push dword [0x4a8a38]
push 4
push dword [0x4a8a3c]
push dword [0x4a8b80]
push dword [0x4a8b18]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x4a89e4], eax
mov eax, dword [0x4a8a3c]
call fcn.0040dee0
mov dword [0x4a8bc4], eax
inc dword [0x4a8bc4]
push dword [0x4a8bc4]
mov eax, dword [0x4a8a3c]
call fcn.0040ded0
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 4
push dword [0x4a8a3c]
push dword [0x4a8b80]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
mov dword [0x4a8b8c], 8
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90f4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90ec]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90e4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90dc]
shl ebx, 2
push dword [ebp + ebx]
call fcn.00409af0
mov dword [0x4a8bc8], eax
mov ebx, dword [0x4a8bc8]
and ebx, ebx
je 0x405804
mov ebx, dword [0x4a8b9c]
and ebx, ebx
jne 0x405804
mov ebx, dword [0x4a8b84]
dec ebx
push ebx
mov eax, dword [0x4a8a3c]
call fcn.0040ded0
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 4
push dword [0x4a8a3c]
push dword [0x4a8b88]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
mov dword [0x4a8b8c], 9
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90f4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90ec]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90e4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90dc]
shl ebx, 2
push dword [ebp + ebx]
call fcn.00409af0
mov dword [0x4a8bcc], eax
mov ebx, dword [0x4a8bcc]
and ebx, ebx
je 0x405ad7
push dword [0x4a8bd0]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x4059a8
mov dword [0x4a8bd0], 1
push 0x90
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 2
push dword [0x4a8a3c]
push dword [0x4a8b4c]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 2
push dword [0x4a8a3c]
push dword [0x4a8b50]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0xeb
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 7
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 2
push dword [0x4a8a3c]
push dword [0x4a8b54]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
jmp 0x405ad6
mov ebx, 1
cmp ebx, dword [esp]
jne 0x405ad6
mov dword [0x4a8bd0], 0
push 0x75
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xa
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 2
push dword [0x4a8a3c]
push dword [0x4a8b4c]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0x75
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 6
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 2
push dword [0x4a8a3c]
push dword [0x4a8b50]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0x74
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 7
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 2
push dword [0x4a8a3c]
push dword [0x4a8b54]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 1
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
pop eax
mov dword [0x4a8b8c], 0xa
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90f4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90ec]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90e4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90dc]
shl ebx, 2
push dword [ebp + ebx]
call fcn.00409af0
mov dword [0x4a8bd4], eax
mov ebx, dword [0x4a8bd4]
and ebx, ebx
je 0x405c47
push dword [0x4a8bd8]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x405bc8
mov dword [0x4a8bd8], 1
push 0xeb
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 9
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 2
push dword [0x4a8a3c]
push dword [0x4a8b58]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
jmp 0x405c46
mov ebx, 1
cmp ebx, dword [esp]
jne 0x405c46
mov dword [0x4a8bd8], 0
push 0x75
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 9
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 2
push dword [0x4a8a3c]
push dword [0x4a8b58]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 1
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
pop eax
mov dword [0x4a8b8c], 0xb
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90f4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90ec]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90e4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90dc]
shl ebx, 2
push dword [ebp + ebx]
call fcn.00409af0
mov dword [0x4a8bdc], eax
mov ebx, dword [0x4a8bdc]
and ebx, ebx
je 0x405db7
push dword [0x4a8be0]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x405d38
mov dword [0x4a8be0], 1
push 0xeb
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x10
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 2
push dword [0x4a8a3c]
push dword [0x4a8b5c]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
jmp 0x405db6
mov ebx, 1
cmp ebx, dword [esp]
jne 0x405db6
mov dword [0x4a8be0], 0
push 0x75
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x10
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 2
push dword [0x4a8a3c]
push dword [0x4a8b5c]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 1
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
pop eax
mov dword [0x4a8b8c], 0xc
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90f4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90ec]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90e4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90dc]
shl ebx, 2
push dword [ebp + ebx]
call fcn.00409af0
mov dword [0x4a8be4], eax
mov ebx, dword [0x4a8be4]
and ebx, ebx
je 0x405ed4
mov ebx, dword [0x4a8b9c]
and ebx, ebx
jne 0x405ed4
push dword [0x4a8a38]
push 4
push dword [0x4a8a3c]
push dword [0x4a8b7c]
push dword [0x4a8b18]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x4a89e4], eax
mov eax, dword [0x4a8a3c]
call fcn.0040dee0
mov dword [0x4a8bc4], eax
inc dword [0x4a8bc4]
mov ebx, dword [0x4a8bc4]
cmp ebx, 4
jle 0x405e84
mov dword [0x4a8bc4], 4
push dword [0x4a8bc4]
mov eax, dword [0x4a8a3c]
call fcn.0040ded0
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 4
push dword [0x4a8a3c]
push dword [0x4a8b7c]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
mov dword [0x4a8b8c], 0xd
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90f4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90ec]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90e4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90dc]
shl ebx, 2
push dword [ebp + ebx]
call fcn.00409af0
mov dword [0x4a8be8], eax
mov ebx, dword [0x4a8be8]
and ebx, ebx
je 0x405ff0
mov ebx, dword [0x4a8b9c]
and ebx, ebx
jne 0x405ff0
push dword [0x4a8a38]
push 4
push dword [0x4a8a3c]
push dword [0x4a8b7c]
push dword [0x4a8b18]
call sub.KERNEL32.dll_ReadProcessMemory
mov dword [0x4a89e4], eax
mov eax, dword [0x4a8a3c]
call fcn.0040dee0
mov dword [0x4a8bc4], eax
dec dword [0x4a8bc4]
mov ebx, dword [0x4a8bc4]
and ebx, ebx
jge 0x405fa0
mov dword [0x4a8bc4], 0
push dword [0x4a8bc4]
mov eax, dword [0x4a8a3c]
call fcn.0040ded0
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 4
push dword [0x4a8a3c]
push dword [0x4a8b7c]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
mov dword [0x4a8b8c], 0xe
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90f4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90ec]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90e4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90dc]
shl ebx, 2
push dword [ebp + ebx]
call fcn.00409af0
mov dword [0x4a8bec], eax
mov ebx, dword [0x4a8bec]
and ebx, ebx
je 0x406ac6
push dword [0x4a8b9c]
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x4067e4
mov dword [0x4a8b9c], 1
push 0x81
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xc1
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 3
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 4
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 5
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 6
push dword [0x4a8a3c]
push dword [0x4a8b30]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0x8b
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x81
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x1c
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 5
mov ebx, dword [0x4a8a3c]
add ebx, 3
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 4
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 5
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 6
push dword [0x4a8a3c]
push dword [0x4a8b44]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0x2b
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x81
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x20
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 5
mov ebx, dword [0x4a8a3c]
add ebx, 3
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 4
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0
mov ebx, dword [0x4a8a3c]
add ebx, 5
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 6
push dword [0x4a8a3c]
push dword [0x4a8b48]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
mov dword [0x4a8b94], 0
push 0x74
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 1
push dword [0x4a8a3c]
push dword [0x4a8b28]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0x89
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x41
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x18
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 3
push dword [0x4a8a3c]
push dword [0x4a8b2c]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
mov dword [0x4a8bac], 0
push 0x8b
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x46
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x20
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 3
push dword [0x4a8a3c]
push dword [0x4a8b34]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0xdb
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x46
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x20
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 3
push dword [0x4a8a3c]
push dword [0x4a8b38]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
mov dword [0x4a8bb4], 0
push 0x8b
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x41
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x34
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 3
push dword [0x4a8a3c]
push dword [0x4a8b3c]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
mov dword [0x4a8bbc], 0
push 0x8b
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x41
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 4
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x85
mov ebx, dword [0x4a8a3c]
add ebx, 3
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xc0
mov ebx, dword [0x4a8a3c]
add ebx, 4
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x74
mov ebx, dword [0x4a8a3c]
add ebx, 5
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 9
mov ebx, dword [0x4a8a3c]
add ebx, 6
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x83
mov ebx, dword [0x4a8a3c]
add ebx, 7
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xf8
mov ebx, dword [0x4a8a3c]
add ebx, 8
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 5
mov ebx, dword [0x4a8a3c]
add ebx, 9
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 0xa
push dword [0x4a8a3c]
push dword [0x4a8b40]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
mov dword [0x4a8bd0], 0
push 0x75
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0xa
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 2
push dword [0x4a8a3c]
push dword [0x4a8b4c]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0x75
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 6
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 2
push dword [0x4a8a3c]
push dword [0x4a8b50]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0x74
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 7
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 2
push dword [0x4a8a3c]
push dword [0x4a8b54]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
mov dword [0x4a8bd8], 0
push 0x75
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 9
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 2
push dword [0x4a8a3c]
push dword [0x4a8b58]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
mov dword [0x4a8be0], 0
push 0x75
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x10
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 2
push dword [0x4a8a3c]
push dword [0x4a8b5c]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 1
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
jmp 0x406ac5
mov ebx, 1
cmp ebx, dword [esp]
jne 0x406ac5
mov dword [0x4a8b9c], 0
push 0xe8
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 3
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 4
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 5
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
mov ebx, dword [0x4a8b08]
add ebx, 0x1091
sub ebx, dword [0x4a8b30]
add ebx, 0xfffffffb
push ebx
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040ded0
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 6
push dword [0x4a8a3c]
push dword [0x4a8b30]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0xe8
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 3
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 4
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 5
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
mov ebx, dword [0x4a8b08]
add ebx, 0x10b1
sub ebx, dword [0x4a8b44]
add ebx, 0xfffffffb
push ebx
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040ded0
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 6
push dword [0x4a8a3c]
push dword [0x4a8b44]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0xe8
mov ebx, dword [0x4a8a3c]
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 2
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 3
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 4
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
push 0x90
mov ebx, dword [0x4a8a3c]
add ebx, 5
mov eax, ebx
call fcn.0040de30
mov dword [0x4a89e4], eax
mov ebx, dword [0x4a8b08]
add ebx, 0x10c1
sub ebx, dword [0x4a8b48]
add ebx, 0xfffffffb
push ebx
mov ebx, dword [0x4a8a3c]
inc ebx
mov eax, ebx
call fcn.0040ded0
mov dword [0x4a89e4], eax
push dword [0x4a8a38]
push 6
push dword [0x4a8a3c]
push dword [0x4a8b48]
push dword [0x4a8b18]
call sub.KERNEL32.dll_WriteProcessMemory
mov dword [0x4a89e4], eax
push 0
call fcn.0040cd32
push 0x12c
call fcn.0040dc29
pop eax
mov dword [0x4a8b8c], 0xf
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90f4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90ec]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90e4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90dc]
shl ebx, 2
push dword [ebp + ebx]
call fcn.00409af0
mov dword [0x4a8bf0], eax
mov ebx, dword [0x4a8bf0]
and ebx, ebx
je 0x406b30
mov dword [0x4a8b8c], 0x10
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90f4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90ec]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90e4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90dc]
shl ebx, 2
push dword [ebp + ebx]
call fcn.00409af0
mov dword [0x4a8bf4], eax
mov ebx, dword [0x4a8bf4]
and ebx, ebx
je 0x406b9a
mov dword [0x4a8b8c], 0x11
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90f4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90ec]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90e4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90dc]
shl ebx, 2
push dword [ebp + ebx]
call fcn.00409af0
mov dword [0x4a8bf8], eax
mov ebx, dword [0x4a8bf8]
and ebx, ebx
je 0x406c04
mov dword [0x4a8b8c], 0x12
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90f4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90ec]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90e4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90dc]
shl ebx, 2
push dword [ebp + ebx]
call fcn.00409af0
mov dword [0x4a8bfc], eax
mov ebx, dword [0x4a8bfc]
and ebx, ebx
je 0x406c6e
mov dword [0x4a8b8c], 0x13
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90f4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90ec]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90e4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90dc]
shl ebx, 2
push dword [ebp + ebx]
call fcn.00409af0
mov dword [0x4a8c00], eax
mov ebx, dword [0x4a8c00]
and ebx, ebx
je 0x406cd8
mov dword [0x4a8b8c], 0x14
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90f4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90ec]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90e4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a8b8c]
mov ebp, dword [0x4a90dc]
shl ebx, 2
push dword [ebp + ebx]
call fcn.00409af0
mov dword [0x4a8c04], eax
mov ebx, dword [0x4a8c04]
and ebx, ebx
je 0x406d42
mov dword [0x4a8b90], 0
mov dword [0x4a8b98], 0
mov dword [0x4a8ba4], 0
mov dword [0x4a8ba8], 0
mov dword [0x4a8bb0], 0
mov dword [0x4a8bb8], 0
mov dword [0x4a8bc0], 0
mov dword [0x4a8bc8], 0
mov dword [0x4a8bcc], 0
mov dword [0x4a8bd4], 0
mov dword [0x4a8bdc], 0
mov dword [0x4a8be4], 0
mov dword [0x4a8be8], 0
mov dword [0x4a8bec], 0
mov dword [0x4a8bf0], 0
mov dword [0x4a8bf4], 0
mov dword [0x4a8bf8], 0
mov dword [0x4a8bfc], 0
mov dword [0x4a8c00], 0
mov dword [0x4a8c04], 0
mov ebx, dword [0x4a8a94]
cmp ebx, 0x45a2a5
je 0x406e27
push 0
push 3
call fcn.0040f7c1
call fcn.00407ac6
push 1
call fcn.0040dc29
mov ebx, dword [0x4a8a6c]
cmp ebx, dword [0x4a8a74]
jne 0x406e5a
mov ebx, dword [0x4a8a6c]
and ebx, ebx
je 0x406e5a
mov ebx, dword [0x4a8a74]
and ebx, ebx
je 0x406e5a
jmp 0x406e61
mov eax, 1
jmp 0x406e63
xor eax, eax
and eax, eax
je 0x406ebf
push 0xa
call fcn.0040dce9
mov ebx, eax
add ebx, 0xa
mov dword [0x4a8b0c], ebx
push 0x28
call fcn.0040dce9
mov ebx, eax
add ebx, 0x28
mov dword [0x4a8b10], ebx
mov ebx, dword [0x4a8ac0]
add ebx, dword [0x4a8b0c]
mov dword [0x4a8ac0], ebx
mov ebx, dword [0x4a8b08]
add ebx, dword [0x4a8b10]
mov dword [0x4a8b08], ebx
call fcn.004081e6
jmp 0x4039e5
jmp 0x4045e5
push 0
call 0x4093d2
push dword [0x4a89d4]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.0040ce2d
call fcn.0040ddf0
call fcn.0040e004
call fcn.0040e59f
call fcn.0040fb85
call fcn.004112d0
call fcn.004116f0
call fcn.00412365
call fcn.00412fce
ret