Function at 0x47e180
Capabilities:
Create process on windows
Create process suspended
Create thread
Enumerate processes
Inject thread

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x61735f
mov eax, dword fs:[0]
push eax
push ecx
push ebx
sub esp, 0x4b0
mov eax, dword [0x6ae280]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x3dc], 0
lea ecx, [ebx + 8]
mov dword [ebp - 4], 0
mov eax, dword [0x6b04c0]
push ecx
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x3e0], eax
push ecx
mov ecx, eax
mov dword [ebp - 0x454], eax
call fcn.0047d6c0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x408]
push 8
xorps xmm0, xmm0
mov dword [ebp - 0x3f8], 0
push str.Game.exe
movups xmmword [ebp - 0x408], xmm0
mov dword [ebp - 0x3f4], 0
call fcn.00456e90
lea eax, [ebp - 0x408]
mov byte [ebp - 4], 3
push eax
call fcn.0047f820
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x3f4]
cmp ecx, 7
jbe 0x47e281
mov edx, dword [ebp - 0x408]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x47e277
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47f544
push ecx
push edx
call fcn.0061428a
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x68], 0
movq qword [ebp - 0x70], xmm0
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0
push 0xb0
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 4
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x138], 0x6a0f98
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x128], 0x6a4fa4
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::constructor_void_]
push 0
lea eax, [ebp - 0x120]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x3dc], 3
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char____]
mov dword [ebp - 4], 6
mov eax, dword [ebp - 0x138]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.virtual_0], vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov eax, dword [ebp - 0x138]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x13c], eax
lea eax, [ebp - 0x120]
mov ecx, eax
mov dword [ebp - 0x3e8], eax
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void_]
mov byte [ebp - 4], 7
lea eax, [ebp - 0x150]
mov ecx, dword [ebp - 0x13c]
cmp ecx, 0xf
mov edi, dword [ebp - 0x150]
mov esi, dword [ebp - 0x140]
cmova eax, edi
mov dword [ebp - 0x3e4], eax
xor eax, eax
mov dword [ebp - method.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.virtual_0], vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov dword [ebp - 0x3ec], ecx
mov dword [ebp - 0x3f0], edi
cmp esi, 0x7fffffff
jbe 0x47e392
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xbad_alloc_void_]
test esi, esi
je 0x47e438
cmp esi, 0x1000
jb 0x47e3cb
lea eax, [esi + 0x23]
cmp eax, esi
jbe 0x47f5f3
push eax
call fcn.00614255
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x47f544
lea eax, [ecx + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x47e3d4
push esi
call fcn.00614255
add esp, 4
push esi
push dword [ebp - 0x3e4]
mov dword [ebp - 0x3dc], eax
push eax
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [ebp - 0x3dc]
add esp, 0xc
lea eax, [esi + edx]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0x114]
mov dword [eax], edx
mov eax, dword [ebp - 0x104]
mov dword [eax], edx
mov eax, dword [ebp - 0xf4]
mov dword [eax], esi
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0xe8]
sub ecx, edx
mov dword [eax], edx
mov eax, dword [ebp - 0x100]
mov dword [eax], edx
mov eax, dword [ebp - 0xf0]
mov dword [eax], ecx
mov eax, 1
jmp 0x47e43e
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], eax
xorps xmm0, xmm0
mov dword [ebp - 0x78], 0
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
mov byte [ebp - 4], 9
nop word [eax + eax]
push ecx
lea edx, [ebp - 0x88]
lea ecx, [ebp - 0x138]
call fcn.0047f620
add esp, 4
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
add ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::operator_bool_void_const]
test al, al
je 0x47e4bd
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x88]
push ecx
cmp eax, dword [ebp - 0x68]
je 0x47e4b2
mov ecx, eax
call fcn.0044f130
add dword [ebp - 0x6c], 0x18
jmp 0x47e470
push eax
lea ecx, [ebp - 0x70]
call fcn.00457830
jmp 0x47e470
mov esi, dword [ebp - 0x70]
mov eax, dword [ebp - 0x3e0]
add esi, 0x18
mov ecx, esi
mov dword [ebp - 0x3dc], esi
cmp dword [esi + 0x14], 0xf
mov eax, dword [eax]
mov dword [ebp - 0x3e4], eax
mov eax, dword [esi + 0x10]
jbe 0x47e4ea
mov ecx, dword [esi]
mov dword [ebp - 0x3dc], ecx
test eax, eax
je 0x47e506
push eax
push 0x20
push ecx
call sub.VCRUNTIME140.dll_memchr
add esp, 0xc
test eax, eax
je 0x47e506
sub eax, dword [ebp - 0x3dc]
jmp 0x47e509
or eax, 0xffffffff
cmp dword [esi + 0x10], eax
xorps xmm0, xmm0
movups xmmword [ebp - 0x46c], xmm0
cmovb eax, dword [esi + 0x10]
cmp dword [esi + 0x14], 0xf
mov dword [ebp - 0x45c], 0
mov dword [ebp - 0x458], 0
jbe 0x47e536
mov esi, dword [esi]
push eax
push esi
lea ecx, [ebp - 0x46c]
call fcn.004501c0
mov byte [ebp - 4], 0xa
mov eax, bind
mov ecx, dword [ebp - 0x70]
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 0xe
jb 0x47f5f8
cmp dword [ecx + 0x14], 0xf
jbe 0x47e565
mov ecx, dword [ecx]
push edx
push ecx
push 0xe
push str._devmode__uid
push ecx
push dword [ebp - 0x3e8]
lea ecx, [ebp - 0x450]
call fcn.004508b0
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x43c]
mov eax, edx
mov ecx, dword [ebp - 0x440]
sub eax, ecx
push 8
push str.__token
cmp eax, 8
jb 0x47e5d0
cmp edx, 0xf
lea esi, [ebp - 0x450]
lea eax, [ecx + 8]
cmova esi, dword [ebp - 0x450]
add esi, ecx
mov dword [ebp - 0x440], eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + 8], 0
lea eax, [ebp - 0x450]
jmp 0x47e5e3
push dword [ebp - 0x3e8]
lea ecx, [ebp - 0x450]
push 8
call fcn.004506f0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x4b8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x4a8], xmm0
mov dword [eax + 0x10], 0
lea ecx, [ebp - 0x438]
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x46c]
push eax
lea eax, [ebp - 0x4b8]
mov byte [ebp - 4], 0xc
push eax
push dword [ebp - 0x3e8]
call fcn.0045c500
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x424]
mov eax, edx
mov ecx, dword [ebp - 0x428]
sub eax, ecx
push 0x25
push str._cl_useLoginScreen_0_online_server
cmp eax, 0x25
jb 0x47e67e
cmp edx, 0xf
lea esi, [ebp - 0x438]
lea eax, [ecx + 0x25]
cmova esi, dword [ebp - 0x438]
add esi, ecx
mov dword [ebp - 0x428], eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + 0x25], 0
lea eax, [ebp - 0x438]
jmp 0x47e691
push dword [ebp - 0x3e8]
lea ecx, [ebp - 0x438]
push 0x25
call fcn.004506f0
xorps xmm0, xmm0
mov dword [ebp - 0x3f8], 0
movups xmmword [ebp - 0x408], xmm0
mov dword [ebp - 0x3f4], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x408], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x3f8], xmm0
push dword [ebp - 0x3e4]
mov dword [eax + 0x10], 0
lea ecx, [ebp - 0x408]
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xe
call fcn.0044efc0
xorps xmm0, xmm0
mov dword [ebp - 0x410], 0
movups xmmword [ebp - 0x420], xmm0
mov dword [ebp - 0x40c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x420], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x410], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x40c]
mov eax, edx
mov ecx, dword [ebp - 0x410]
sub eax, ecx
push 0x4b
push str._online_server_port_5222_online_check_certificate_0_online_use_protect_0
cmp eax, 0x4b
jb 0x47e782
cmp edx, 0xf
lea esi, [ebp - 0x420]
lea eax, [ecx + 0x4b]
cmova esi, dword [ebp - 0x420]
add esi, ecx
mov dword [ebp - 0x410], eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + 0x4b], 0
lea eax, [ebp - 0x420]
jmp 0x47e795
push dword [ebp - 0x3e8]
lea ecx, [ebp - 0x420]
push 0x4b
call fcn.004506f0
xorps xmm0, xmm0
mov dword [ebp - 0x54], 0
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x50], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x64], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x54], xmm0
mov byte [ebp - 4], 0x11
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ecx, dword [ebp - 0x40c]
cmp ecx, 0xf
jbe 0x47e80a
mov edx, dword [ebp - 0x420]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47e800
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47e99a
push ecx
push edx
call fcn.0061428a
add esp, 8
mov dword [ebp - 0x410], 0
mov dword [ebp - 0x40c], 0xf
mov byte [ebp - 0x420], 0
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x3f4]
cmp ecx, 0xf
jbe 0x47e863
mov edx, dword [ebp - 0x408]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47e859
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47e99a
push ecx
push edx
call fcn.0061428a
add esp, 8
mov dword [ebp - 0x3f8], 0
mov dword [ebp - 0x3f4], 0xf
mov byte [ebp - 0x408], 0
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x424]
cmp ecx, 0xf
jbe 0x47e8bc
mov edx, dword [ebp - 0x438]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47e8b2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47e99a
push ecx
push edx
call fcn.0061428a
add esp, 8
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x424], 0xf
mov byte [ebp - 0x438], 0
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x4a4]
cmp ecx, 0xf
jbe 0x47e915
mov edx, dword [ebp - 0x4b8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47e90b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47e99a
push ecx
push edx
call fcn.0061428a
add esp, 8
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x43c]
cmp ecx, 0xf
jbe 0x47e94f
mov edx, dword [ebp - 0x450]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47e945
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47e99a
push ecx
push edx
call fcn.0061428a
add esp, 8
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x43c], 0xf
mov byte [ebp - 0x450], 0
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x458]
cmp ecx, 0xf
jbe 0x47e9aa
mov edx, dword [ebp - 0x46c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47e9a0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x47e9a0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0061428a
add esp, 8
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 0
movups xmmword [ecx], xmm0
push 0x6a033d
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.004501c0
lea eax, [ebp - 0x488]
push eax
call fcn.00458710
push str.Bin32ReleaseGame.exe
mov ecx, eax
mov byte [ebp - 4], 0x17
call fcn.0044efc0
xorps xmm0, xmm0
mov dword [ebp - 0x3c], 0
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x38], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x4c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x3c], xmm0
mov byte [ebp - 4], 0x19
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ecx, dword [ebp - 0x474]
cmp ecx, 0xf
jbe 0x47ea62
mov edx, dword [ebp - 0x488]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47ea58
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x47ea58
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0061428a
add esp, 8
sub esp, 0x18
mov dword [ebp - 0x478], 0
mov ecx, esp
mov dword [ebp - 0x474], 0xf
xorps xmm0, xmm0
mov byte [ebp - 0x488], 0
push 0
movups xmmword [ecx], xmm0
push 0x6a033d
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.004501c0
lea eax, [ebp - 0x4a0]
push eax
call fcn.00458710
push str.Bin32Releasewsock8.dll
mov ecx, eax
mov byte [ebp - 4], 0x1a
call fcn.0044efc0
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
movups xmmword [ebp - 0x34], xmm0
mov dword [ebp - 0x20], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x34], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x24], xmm0
mov byte [ebp - 4], 0x1c
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ecx, dword [ebp - 0x48c]
cmp ecx, 0xf
jbe 0x47eb35
mov edx, dword [ebp - 0x4a0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47eb2b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x47eb2b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0061428a
add esp, 8
cmp dword [ebp - 0x50], 0xf
lea edx, [ebp - 0x1a8]
push edx
lea edx, [ebp - 0x198]
mov dword [ebp - 0x490], 0
push edx
push 0
push 0
push 4
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x48c], 0xf
push 0
lea ecx, [ebp - 0x64]
mov byte [ebp - 0x4a0], 0
cmova ecx, dword [ebp - 0x64]
lea eax, [ebp - 0x4c]
cmp dword [ebp - 0x38], 0xf
push 0
cmova eax, dword [ebp - 0x4c]
push ecx
push eax
movlpd qword [ebp - 0x194], xmm0
movlpd qword [ebp - 0x18c], xmm0
movlpd qword [ebp - 0x184], xmm0
movlpd qword [ebp - 0x17c], xmm0
movlpd qword [ebp - 0x174], xmm0
movlpd qword [ebp - 0x16c], xmm0
movlpd qword [ebp - 0x164], xmm0
movlpd qword [ebp - 0x15c], xmm0
mov dword [ebp - 0x198], 0x44
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x47ebee
mov eax, dword [ebp - 0x3e0]
cmp byte [eax + 4], 0
jne 0x47f5fd
jmp 0x47f1d8
xor eax, eax
push eax
push 2
mov dword [ebp - 0x3e0], eax
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov esi, eax
cmp esi, 0xffffffff
je 0x47f36d
lea eax, [ebp - 0x3d8]
mov dword [ebp - 0x3d8], 0x22c
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x47ec8f
nop word [eax + eax]
mov ecx, str.Game.exe
lea eax, [ebp - 0x3b4]
nop dword [eax + eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x47ec66
test dx, dx
je 0x47ec62
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x47ec66
add eax, 4
add ecx, 4
test dx, dx
jne 0x47ec40
xor eax, eax
jmp 0x47ec6b
sbb eax, eax
or eax, 1
test eax, eax
je 0x47ec83
lea eax, [ebp - 0x3d8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x47ec30
jmp 0x47ec8f
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x3e0], eax
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x3e0]
test eax, eax
je 0x47f36d
push eax
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x3e0], eax
test eax, eax
jne 0x47ee69
push eax
mov eax, dword [0x6b04b4]
push str.Error
push str.Failed_OpenProcess
push dword [eax + 0x3c]
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x47ed0d
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47ed03
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47f544
push ecx
push edx
call fcn.0061428a
add esp, 8
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
cmp ecx, 0xf
jbe 0x47ed53
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47ed49
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47f544
push ecx
push edx
call fcn.0061428a
add esp, 8
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0xf
mov byte [ebp - 0x4c], 0
cmp ecx, 0xf
jbe 0x47ed99
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47ed8f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47f544
push ecx
push edx
call fcn.0061428a
add esp, 8
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp ecx, 0xf
jbe 0x47ede2
mov edx, dword [ebp - 0x88]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47edd8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47f544
push ecx
push edx
call fcn.0061428a
add esp, 8
mov eax, dword [ebp - 0x138]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.virtual_0], vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov eax, dword [ebp - 0x138]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x13c], eax
lea ecx, [ebp - 0x120]
call fcn.0047d2d0
lea ecx, [ebp - 0x118]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x70]
call fcn.004560c0
mov ecx, dword [ebp - 0x3ec]
cmp ecx, 0xf
jbe 0x47f0af
inc ecx
mov eax, edi
cmp ecx, 0x1000
jb 0x47ee62
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47f544
push ecx
push edi
jmp 0x47f0a7
push str.ntdll.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, eax
push str.NtSuspendProcess
push edi
call esi
push str.NtResumeProcess
push edi
mov dword [ebp - 0x3e4], eax
call esi
mov edi, eax
mov eax, dword [ebp - 0x3e4]
test eax, eax
je 0x47f33e
test edi, edi
je 0x47f33e
mov esi, dword [ebp - 0x3e0]
push esi
call eax
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebp - 0x20], 0xf
lea ecx, [ebp - 0x34]
cmova ecx, dword [ebp - 0x34]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x47eed0
sub ecx, edx
push 4
push 0x1000
lea eax, [ecx + 1]
push eax
push 0
push esi
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x3dc], eax
test eax, eax
jne 0x47f103
push esi
call edi
push 0
push str.Error
push 0x6a5318
mov eax, dword [0x6b04b4]
push dword [eax + 0x3c]
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x47ef4c
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47ef42
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47f544
push ecx
push edx
call fcn.0061428a
add esp, 8
mov ecx, dword [ebp - 0x38]
mov byte [ebp - 0x34], 0
mov dword [ebp - 0x20], 0xf
mov dword [ebp - 0x24], 0
cmp ecx, 0xf
jbe 0x47ef92
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47ef88
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47f544
push ecx
push edx
call fcn.0061428a
add esp, 8
mov ecx, dword [ebp - 0x50]
mov byte [ebp - 0x4c], 0
mov dword [ebp - 0x38], 0xf
mov dword [ebp - 0x3c], 0
cmp ecx, 0xf
jbe 0x47efd8
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47efce
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47f544
push ecx
push edx
call fcn.0061428a
add esp, 8
mov ecx, dword [ebp - 0x74]
mov byte [ebp - 0x64], 0
mov dword [ebp - 0x50], 0xf
mov dword [ebp - 0x54], 0
cmp ecx, 0xf
jbe 0x47f021
mov edx, dword [ebp - 0x88]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47f017
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47f544
push ecx
push edx
call fcn.0061428a
add esp, 8
mov eax, dword [ebp - 0x138]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.virtual_0], vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov eax, dword [ebp - 0x138]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x13c], eax
lea ecx, [ebp - 0x120]
call fcn.0047d2d0
lea ecx, [ebp - 0x118]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x70]
call fcn.004560c0
mov ecx, dword [ebp - 0x3ec]
cmp ecx, 0xf
jbe 0x47f0af
lea edx, [ecx + 1]
mov ecx, dword [ebp - 0x3f0]
mov eax, ecx
cmp edx, 0x1000
jb 0x47f0a5
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47f544
push edx
push ecx
call fcn.0061428a
add esp, 8
mov ecx, dword [ebx + 0x1c]
cmp ecx, 0xf
jbe 0x47f0e3
mov edx, dword [ebx + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47f0d9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47f544
push ecx
push edx
call fcn.0061428a
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.00614242
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x18
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebp - 0x20], 0xf
lea edx, [ebp - 0x34]
cmova edx, dword [ebp - 0x34]
lea ecx, [edx + 1]
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x47f120
sub edx, ecx
lea ecx, [ebp - 0x34]
cmp dword [ebp - 0x20], 0xf
push 0
cmova ecx, dword [ebp - 0x34]
lea eax, [edx + 1]
push eax
push ecx
push dword [ebp - 0x3dc]
push esi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0
push dword [ebp - 0x3dc]
push dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov dword [ebp - 0x3e4], eax
test eax, eax
jne 0x47f181
push esi
call edi
push 0
push str.Error
push 0x6a5348
jmp 0x47ef0a
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0x3e4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x8000
push 0
push dword [ebp - 0x3dc]
push esi
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
call edi
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
call edi
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
call edi
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [ebp - 0x3f0]
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x47f20c
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47f202
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47f544
push ecx
push edx
call fcn.0061428a
add esp, 8
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
cmp ecx, 0xf
jbe 0x47f252
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47f248
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47f544
push ecx
push edx
call fcn.0061428a
add esp, 8
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0xf
mov byte [ebp - 0x4c], 0
cmp ecx, 0xf
jbe 0x47f298
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47f28e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47f544
push ecx
push edx
call fcn.0061428a
add esp, 8
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp ecx, 0xf
jbe 0x47f2e1
mov edx, dword [ebp - 0x88]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47f2d7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47f544
push ecx
push edx
call fcn.0061428a
add esp, 8
mov eax, dword [ebp - 0x138]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.virtual_0], vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov eax, dword [ebp - 0x138]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x13c], eax
lea ecx, [ebp - 0x120]
call fcn.0047d2d0
lea ecx, [ebp - 0x118]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x70]
call fcn.004560c0
mov eax, dword [ebp - 0x3ec]
jmp 0x47f5c0
mov esi, dword [ebp - 0x3e0]
push esi
call edi
mov eax, dword [0x6b04b4]
push 0
push str.Error
push 0x6a52f4
push dword [eax + 0x3c]
call dword [sym.imp.USER32.dll_MessageBoxA]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x47ef18
mov eax, dword [0x6b04b4]
push 0
push str.Error
push str.Failed_Get_Game.exe
push dword [eax + 0x3c]
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x47f3bb
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47f3b1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47f544
push ecx
push edx
call fcn.0061428a
add esp, 8
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
cmp ecx, 0xf
jbe 0x47f401
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47f3f7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47f544
push ecx
push edx
call fcn.0061428a
add esp, 8
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0xf
mov byte [ebp - 0x4c], 0
cmp ecx, 0xf
jbe 0x47f447
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47f43d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47f544
push ecx
push edx
call fcn.0061428a
add esp, 8
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
cmp ecx, 0xf
jbe 0x47f490
mov edx, dword [ebp - 0x88]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47f486
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47f544
push ecx
push edx
call fcn.0061428a
add esp, 8
mov eax, dword [ebp - 0x138]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.virtual_0], vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov eax, dword [ebp - 0x138]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x13c], eax
lea ecx, [ebp - 0x120]
call fcn.0047d2d0
lea ecx, [ebp - 0x118]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x70]
call fcn.004560c0
mov ecx, dword [ebp - 0x3ec]
cmp ecx, 0xf
jbe 0x47f512
inc ecx
mov eax, edi
cmp ecx, 0x1000
jb 0x47f508
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47f544
push ecx
push edi
call fcn.0061428a
add esp, 8
mov ecx, dword [ebx + 0x1c]
cmp ecx, 0xf
jbe 0x47f0e3
mov edx, dword [ebx + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x47f0d9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x47f0d9
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov ebx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x454]
cmp byte [eax + 4], 0
je 0x47f5ab
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, str.Failed_to_start_the_game:_Bin32Release_Game.exe_not_found
call fcn.0044fc70
push 0x44fe50
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov edx, str.Error_message:
call fcn.0044fc70
mov ecx, dword [ebp - 0x470]
mov esi, eax
mov edx, dword [ecx]
mov edx, dword [edx + 4]
call edx
mov edx, eax
mov ecx, esi
call fcn.0044fc70
push 0x44fe50
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov eax, 0x47f5b1
ret
cmp eax, 0xf
jbe 0x47f512
lea ecx, [eax + 1]
mov eax, edi
cmp ecx, 0x1000
jb 0x47f508
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47f544
jmp 0x47f508
call fcn.0044b240
call fcn.0044b2e0
push str.Failed_to_start_the_game
lea ecx, [ebp - 0x4c4]
call fcn.00458150
push 0x6a83d0
lea eax, [ebp - 0x4c4]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
int3