Function at 0x10083520
Capabilities:
Allocate or change rwx memory
Check mutex and terminate process on windows
Check mutex on windows
Connect socket
Create thread
Encode data using xor
Execute shellcode via indirect call
Get file size
Initialize winsock library
Link many functions at runtime
Log keystrokes via application hook
Read .ini file
Read file on windows
Resolve dns
Spawn thread to rwx shellcode
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x5e8
mov eax, dword [0x1013e00c]
xor eax, esp
mov dword [esp + 0x5e4], eax
push esi
push edi
push str.._Settings.ini
push 1
push str.WideScreen
mov dword [esp + 0x48], 0
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push str.Interface
call esi
push str.._Settings.ini
push 1
push str.WideScreenScale
push str.Interface
mov dword [0x102b79e0], eax
call esi
lea ecx, [esp + 0x1e8]
mov dword [0x102b79dc], eax
call fcn.10007b70
push ecx
push 0x102b5f54
push str..DataKGDataLocalServerGame.info
lea ecx, [esp + 0x1f4]
call fcn.10007ca0
test al, al
je 0x1008669c
push 0
push 0x20
push 3
push 0
push 1
push connect
push str..DataKGDataLocalServerGame.info
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x1008669c
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, 0x903d8
jne 0x10086695
push 0
lea eax, [esp + 0x3c]
mov dword [esp + 0x3c], 0
push eax
push 0x903d8
push 0x101eac34
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x10086695
xor ecx, ecx
mov eax, ecx
shr eax, 8
xor al, 0x95
add al, byte [ecx + 0x101eac34]
xor al, cl
xor al, 0xda
mov byte [ecx + 0x101eac34], al
inc ecx
cmp ecx, 0x903d8
jb 0x10083608
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call edi
lea ecx, [esp + 0x1e8]
call fcn.10007b70
push ecx
push 0x102b5f58
push str..DataKGDataLocalEffectGame.info
lea ecx, [esp + 0x1f4]
call fcn.10007ca0
test al, al
je 0x10086687
push 0
push 0x20
push 3
push 0
push 1
push connect
push str..DataKGDataLocalEffectGame.info
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x10086687
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, 0x3af48
jne 0x10086684
push 0
lea eax, [esp + 0x3c]
mov dword [esp + 0x3c], 0
push eax
push 0x3af48
push 0x1027b00c
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x10086684
xor ecx, ecx
nop
mov eax, ecx
shr eax, 8
xor al, 0x6e
add al, byte [ecx + 0x1027b00c]
xor al, cl
xor al, 0xe6
mov byte [ecx + 0x1027b00c], al
inc ecx
cmp ecx, 0x3af48
jb 0x100836c0
push esi
call edi
call fcn.100b3e10
cmp dword [0x101eb06c], 1
jne 0x10083745
push 0x1000b7d0
push 0x57d278
push 0xe9
call fcn.100c88d0
push 0x1000b800
push 0x74cd50
push 0xe9
call fcn.100c88d0
push 0x1000b830
push 0x771328
push 0xe9
call fcn.100c88d0
add esp, 0x24
push 0
push 0
push 0
push 0x100834e0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp dword [0x101eae04], 1
jne 0x10083798
push str.Main.exe
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov esi, eax
test esi, esi
jne 0x1008376a
push eax
call edi
jmp 0x10083798
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x10083798
push esi
call edi
push 0x10
push str.Error
push str.You_already_have_a_main_open__you_cant_open_any_more.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x102e587c
call fcn.1000b510
push 0xe9
mov edx, 0x100c7a10
mov ecx, 0x5509ce
call fcn.100c7ff0
push 0xe9
mov edx, 0x100c7ef0
mov ecx, 0x551573
call fcn.100c7ff0
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [esp + 0x40]
add esp, 8
push eax
push 0x40
push 1
push 0xe61144
call esi
lea eax, [esp + 0x38]
mov byte [0xe61144], 0xa0
push eax
push dword [esp + 0x3c]
push 1
push 0xe61144
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x4d1e69
call esi
lea eax, [esp + 0x38]
mov byte [0x4d1e69], 0xeb
push eax
push dword [esp + 0x3c]
push 1
push 0x4d1e69
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x4d228d
call esi
lea eax, [esp + 0x38]
mov byte [0x4d228d], 0xe9
push eax
push dword [esp + 0x3c]
push 1
push 0x4d228d
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x4d228e
call esi
lea eax, [esp + 0x38]
mov byte [0x4d228e], 0x8b
push eax
push dword [esp + 0x3c]
push 1
push 0x4d228e
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x4d228f
call esi
lea eax, [esp + 0x38]
mov byte [0x4d228f], 0
push eax
push dword [esp + 0x3c]
push 1
push 0x4d228f
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x4d2290
call esi
lea eax, [esp + 0x38]
mov byte [0x4d2290], 0
push eax
push dword [esp + 0x3c]
push 1
push 0x4d2290
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x4d2291
call esi
lea eax, [esp + 0x38]
mov byte [0x4d2291], 0
push eax
push dword [esp + 0x3c]
push 1
push 0x4d2291
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x4d559c
call esi
lea eax, [esp + 0x38]
mov byte [0x4d559c], 0xeb
push eax
push dword [esp + 0x3c]
push 1
push 0x4d559c
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x633f7a
call esi
lea eax, [esp + 0x38]
mov byte [0x633f7a], 0xeb
push eax
push dword [esp + 0x3c]
push 1
push 0x633f7a
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x634403
call esi
lea eax, [esp + 0x38]
mov byte [0x634403], 0xeb
push eax
push dword [esp + 0x3c]
push 1
push 0x634403
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x63e6c4
call esi
lea eax, [esp + 0x38]
mov byte [0x63e6c4], 0xeb
push eax
push dword [esp + 0x3c]
push 1
push 0x63e6c4
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x4d2246
call esi
lea eax, [esp + 0x38]
mov byte [0x4d2246], 0xeb
push eax
push dword [esp + 0x3c]
push 1
push 0x4d2246
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x501163
call esi
lea eax, [esp + 0x38]
mov byte [0x501163], 0xeb
push eax
push dword [esp + 0x3c]
push 1
push 0x501163
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x40af0a
call esi
lea eax, [esp + 0x38]
mov byte [0x40af0a], 0
push eax
push dword [esp + 0x3c]
push 1
push 0x40af0a
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x40b4bc
call esi
lea eax, [esp + 0x38]
mov byte [0x40b4bc], 0x50
push eax
push dword [esp + 0x3c]
push 1
push 0x40b4bc
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x40b4c5
call esi
lea eax, [esp + 0x38]
mov byte [0x40b4c5], 0x50
push eax
push dword [esp + 0x3c]
push 1
push 0x40b4c5
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x40b4cf
call esi
lea eax, [esp + 0x38]
mov byte [0x40b4cf], 0x18
push eax
push dword [esp + 0x3c]
push 1
push 0x40b4cf
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x40af0a
call esi
lea eax, [esp + 0x38]
mov byte [0x40af0a], 0
push eax
push dword [esp + 0x3c]
push 1
push 0x40af0a
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x40afd5
call esi
lea eax, [esp + 0x38]
mov byte [0x40afd5], 0xeb
push eax
push dword [esp + 0x3c]
push 1
push 0x40afd5
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x777fd6
call esi
lea eax, [esp + 0x38]
mov byte [0x777fd6], 0x70
push eax
push dword [esp + 0x3c]
push 1
push 0x777fd6
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x777fd7
call esi
lea eax, [esp + 0x38]
mov byte [0x777fd7], 0x17
push eax
push dword [esp + 0x3c]
push 1
push 0x777fd7
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x4ebec7
call esi
lea eax, [esp + 0x38]
mov byte [0x4ebec7], 0x3c
push eax
push dword [esp + 0x3c]
push 1
push 0x4ebec7
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x5c4004
call esi
lea eax, [esp + 0x38]
mov byte [0x5c4004], 0x3c
push eax
push dword [esp + 0x3c]
push 1
push 0x5c4004
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x7e40bb
call esi
lea eax, [esp + 0x38]
mov byte [0x7e40bb], 0x3c
push eax
push dword [esp + 0x3c]
push 1
push 0x7e40bb
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x81b546
call esi
lea eax, [esp + 0x38]
mov byte [0x81b546], 0x3c
push eax
push dword [esp + 0x3c]
push 1
push 0x81b546
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x81b58d
call esi
lea eax, [esp + 0x38]
mov byte [0x81b58d], 0x3c
push eax
push dword [esp + 0x3c]
push 1
push 0x81b58d
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x86e284
call esi
lea eax, [esp + 0x38]
mov byte [0x86e284], 0x3c
push eax
push dword [esp + 0x3c]
push 1
push 0x86e284
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x86e44c
call esi
lea eax, [esp + 0x38]
mov byte [0x86e44c], 0x3c
push eax
push dword [esp + 0x3c]
push 1
push 0x86e44c
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x86e573
call esi
lea eax, [esp + 0x38]
mov byte [0x86e573], 0x3c
push eax
push dword [esp + 0x3c]
push 1
push 0x86e573
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x86f8fc
call esi
lea eax, [esp + 0x38]
mov byte [0x86f8fc], 0x3c
push eax
push dword [esp + 0x3c]
push 1
push 0x86f8fc
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x7da373
call esi
lea eax, [esp + 0x38]
mov byte [0x7da373], 0xb7
push eax
push dword [esp + 0x3c]
push 1
push 0x7da373
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x7e1c44
call esi
lea eax, [esp + 0x38]
mov byte [0x7e1c44], 0xb7
push eax
push dword [esp + 0x3c]
push 1
push 0x7e1c44
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x52100d
call esi
lea eax, [esp + 0x38]
mov byte [0x52100d], 0xeb
push eax
push dword [esp + 0x3c]
push 1
push 0x52100d
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x9543c4
call esi
lea eax, [esp + 0x38]
mov byte [0x9543c4], 0
push eax
push dword [esp + 0x3c]
push 1
push 0x9543c4
call esi
push 0x4d1dc2
push 0x4d1cf0
push 0xe9
call fcn.100c88d0
add esp, 0xc
lea eax, [esp + 0x38]
push eax
push 0x40
push 0x1b
push 0xd20170
call esi
mov eax, 0xd20170
mov ecx, 0x90909090
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], ecx
mov word [eax + 0x18], cx
mov byte [eax + 0x1a], cl
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x3c]
push 0x1b
push 0xd20170
call esi
cmp dword [0x101eaeb0], 0
mov eax, 0x75
mov ecx, 0xeb
cmove eax, ecx
mov dword [esp + 0x14], eax
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x64cbd1
call esi
mov eax, dword [esp + 0x14]
mov byte [0x64cbd1], al
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x3c]
push 1
push 0x64cbd1
call esi
mov al, byte [0x101eaeb4]
mov byte [esp + 0xf], al
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x64cbd0
call esi
mov al, byte [esp + 0xf]
mov byte [0x64cbd0], al
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x3c]
push 1
push 0x64cbd0
call esi
mov al, byte [0x101eaeb4]
mov byte [esp + 0xf], al
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x95ceef
call esi
mov al, byte [esp + 0xf]
mov byte [0x95ceef], al
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x3c]
push 1
push 0x95ceef
call esi
mov al, byte [0x101eaeb4]
mov byte [esp + 0xf], al
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x95cf14
call esi
mov al, byte [esp + 0xf]
mov byte [0x95cf14], al
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x3c]
push 1
push 0x95cf14
call esi
mov al, byte [0x101eac98]
inc al
mov byte [esp + 0xf], al
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0xe61f68
call esi
mov al, byte [esp + 0xf]
mov byte [0xe61f68], al
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x3c]
push 1
push 0xe61f68
call esi
mov al, byte [0x101eac9a]
add al, 2
mov byte [esp + 0xf], al
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0xe61f69
call esi
mov al, byte [esp + 0xf]
mov byte [0xe61f69], al
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x3c]
push 1
push 0xe61f69
call esi
mov al, byte [0x101eac9b]
add al, 3
mov byte [esp + 0xf], al
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0xe61f6a
call esi
mov al, byte [esp + 0xf]
mov byte [0xe61f6a], al
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x3c]
push 1
push 0xe61f6a
call esi
mov al, byte [0x101eac9d]
add al, 4
mov byte [esp + 0xf], al
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0xe61f6b
call esi
mov al, byte [esp + 0xf]
mov byte [0xe61f6b], al
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x3c]
push 1
push 0xe61f6b
call esi
mov al, byte [0x101eac9e]
add al, 5
mov byte [esp + 0xf], al
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0xe61f6c
call esi
mov al, byte [esp + 0xf]
mov byte [0xe61f6c], al
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x3c]
push 1
push 0xe61f6c
call esi
movzx edi, word [0x101eac96]
lea eax, [esp + 0x38]
push eax
push 0x40
push 2
push 0xe609e4
call esi
lea eax, [esp + 0x38]
mov word [0xe609e4], di
push eax
push dword [esp + 0x3c]
push 2
push 0xe609e4
call esi
cmp dword [0x101eaeac], 0x3c
jb 0x10083fe9
mov dword [0x102e5ad4], 0
mov dword [0x102e5ad8], 0
mov byte [0x102e5ad0], 1
call fcn.10017ed0
cmp dword [0x101eaeac], 0x3c
jae 0x1008406d
lea eax, [esp + 0x38]
push eax
push 0x40
push 4
push 0x4d9d3b
call esi
lea eax, [esp + 0x38]
mov dword [0x4d9d3b], 0x102bd9fc
push eax
push dword [esp + 0x3c]
push 4
push 0x4d9d3b
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 4
push 0x4dac60
call esi
lea eax, [esp + 0x38]
mov dword [0x4dac60], 0x102bd9fc
push eax
push dword [esp + 0x3c]
push 4
push 0x4dac60
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 4
push 0x7b55338
call esi
lea eax, [esp + 0x38]
mov dword [0x7b55338], 0xa
push eax
push dword [esp + 0x3c]
push 4
push 0x7b55338
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 4
push 0x4d597b
call esi
lea eax, [esp + 0x38]
mov dword [0x4d597b], 0x102bd9f8
push eax
push dword [esp + 0x3c]
push 4
push 0x4d597b
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 4
push 0x4da289
call esi
lea eax, [esp + 0x38]
mov dword [0x4da289], 0x102bd9f8
push eax
push dword [esp + 0x3c]
push 4
push 0x4da289
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 4
push 0x4da297
call esi
lea eax, [esp + 0x38]
mov dword [0x4da297], 0x102bd9f8
push eax
push dword [esp + 0x3c]
push 4
push 0x4da297
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 4
push 0x4da3a2
call esi
lea eax, [esp + 0x38]
mov dword [0x4da3a2], 0x102bd9f8
push eax
push dword [esp + 0x3c]
push 4
push 0x4da3a2
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 4
push 0x4da3ce
call esi
lea eax, [esp + 0x38]
mov dword [0x4da3ce], 0x102bd9f8
push eax
push dword [esp + 0x3c]
push 4
push 0x4da3ce
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 4
push 0x4da3d9
call esi
lea eax, [esp + 0x38]
mov dword [0x4da3d9], 0x102bd9f8
push eax
push dword [esp + 0x3c]
push 4
push 0x4da3d9
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 4
push 0x63d326
call esi
lea eax, [esp + 0x38]
mov dword [0x63d326], 0x102bd9f8
push eax
push dword [esp + 0x3c]
push 4
push 0x63d326
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 4
push 0x642112
call esi
lea eax, [esp + 0x38]
mov dword [0x642112], 0x102bd9f8
push eax
push dword [esp + 0x3c]
push 4
push 0x642112
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 4
push 0x4d0e09
call esi
lea eax, [esp + 0x38]
mov dword [0x4d0e09], 0x101eacb1
push eax
push dword [esp + 0x3c]
push 4
push 0x4d0e09
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 4
push 0x4d9f55
call esi
lea eax, [esp + 0x38]
mov dword [0x4d9f55], 0x101eacd1
push eax
push dword [esp + 0x3c]
push 4
push 0x4d9f55
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 1
push 0x5c914e
call esi
lea eax, [esp + 0x38]
mov byte [0x5c914e], 0
push eax
push dword [esp + 0x3c]
push 1
push 0x5c914e
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 0x14
push 0x63e908
call esi
mov eax, 0x63e908
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x3c]
push 0x14
push 0x63e908
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 0x20
push 0xe611b2
call esi
push 0x20
push 0x101eac75
push 0xe611b2
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x3c]
push 0x20
push 0xe611b2
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 0x11
push 0xe61f70
call esi
mov eax, dword [0x101eaca0]
mov ecx, 0xe61f70
mov dword [ecx], eax
mov eax, dword [0x101eaca4]
mov dword [ecx + 4], eax
mov eax, dword [0x101eaca8]
mov dword [ecx + 8], eax
mov eax, dword [0x101eacac]
mov dword [ecx + 0xc], eax
mov al, byte [0x101eacb0]
mov byte [ecx + 0x10], al
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x3c]
push 0x11
push ecx
call esi
push fcn.100c0460
push 0x65fd79
push 0xff
call fcn.100c88d0
push 0x100728d0
push 0x4da280
push 0xe9
call fcn.100c88d0
cmp dword [0x101eaeac], 0x3c
mov ecx, 0x10072900
mov eax, 0x10072ae0
cmovb eax, ecx
push eax
push 0x4da3a1
push 0xe9
call fcn.100c88d0
add esp, 0x24
mov edx, 0xc
mov ecx, 0x4d9d39
call fcn.100c89f0
mov edx, 7
mov ecx, 0x4d9d45
call fcn.100c89f0
mov edx, 0xf
mov ecx, 0x4d9efc
call fcn.100c89f0
cmp dword [0x101eaeac], 0x3c
jae 0x100843ab
mov edx, 8
mov ecx, 0x4dac5c
call fcn.100c89f0
mov edx, 5
mov ecx, 0x5451f7
call fcn.100c89f0
mov edx, 8
mov ecx, 0x545230
call fcn.100c89f0
mov edx, 8
mov ecx, 0x5a52e9
call fcn.100c89f0
mov edx, 0x102c1d10
mov ecx, 0x6a
call fcn.100c8a90
mov edx, 0x102c1c20
mov ecx, 0x6b
call fcn.100c8a90
mov edx, 0x102c1e00
mov ecx, 0x6c
call fcn.100c8a90
call fcn.10025b80
push 0x1002eee0
push 0x597691
push 0xe9
call fcn.100c88d0
add esp, 0xc
cmp dword [0x101eb0b0], 1
jne 0x1008444a
cmp byte [0x1053fede], 0
jne 0x1008444a
push 0x1002eef0
push 0x4d5ec3
push 0xe8
call fcn.100c88d0
add esp, 0xc
cmp byte [0x1053fede], 1
jne 0x1008446a
push 0x1002f0c0
push 0x4d5ec3
push 0xe8
call fcn.100c88d0
add esp, 0xc
push dword [0x1013f8bc]
call fcn.10090030
push str.DataKGDataLuaConfigsNameColor.lua
mov ecx, 0x1013f8b8
call fcn.100b07c0
push 0x1002ed50
push 0x598ca7
push 0xe8
call fcn.100c88d0
push 0x1002ed50
push 0x77f8c2
push 0xe8
call fcn.100c88d0
push 0x1002ed80
push 0x57f920
push 0xe9
call fcn.100c88d0
add esp, 0x24
call fcn.10044730
cmp dword [0x101eb098], 1
jne 0x10084618
mov eax, 1
mov dword [0x102f6880], 0
mov word [0x102f67b4], ax
lea eax, [esp + 0x58]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
jne 0x10084534
push eax
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov dword [0x1013fb24], eax
cmp eax, 0xffffffff
je 0x10084534
call dword [sym.imp.WS2_32.dll_WSACreateEvent]
mov dword [0x1013fb28], eax
test eax, eax
je 0x10084534
mov edi, dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [0x10143b34], 0x1003b410
jmp 0x10084551
mov edi, dword [sym.imp.USER32.dll_MessageBoxA]
push 1
push str.connection
push str.init_failed
push 0
call edi
mov byte [0x102f67b6], 0
cmp dword [0x1013fb24], 0xffffffff
movzx eax, word [0x101eac96]
je 0x10084601
mov ecx, 2
push eax
mov word [esp + 0x44], cx
call dword [sym.imp.WS2_32.dll_htons]
push 0x101eac75
mov word [esp + 0x46], ax
call dword [sym.imp.WS2_32.dll_inet_addr]
mov dword [esp + 0x44], eax
cmp eax, 0xffffffff
jne 0x100845b5
push 0x101eac75
call dword [sym.imp.WS2_32.dll_gethostbyname]
test eax, eax
je 0x100845b5
movsx ecx, word [eax + 0xa]
mov eax, dword [eax + 0xc]
push ecx
push dword [eax]
lea eax, [esp + 0x4c]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x10
lea eax, [esp + 0x44]
push eax
push dword [0x1013fb24]
call dword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x100845da
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2733
jne 0x100845f7
push 0x23
push dword [0x1013fb28]
push dword [0x1013fb24]
call dword [sym.imp.WS2_32.dll_WSAEventSelect]
cmp eax, 0xffffffff
jne 0x10084878
mov ecx, 0x1013fb20
call fcn.1003aff0
push 1
push str.connection
push str.Connect_failed__CheckIP_ConnectServer__
push 0
call edi
mov byte [0x102f67b6], 0
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x10072cd0
push 0x5b96e8
push 0xe8
call fcn.100c88d0
push 0x1000b5f0
push 0x59b566
push 0xe8
call fcn.100c88d0
push 0x1000b5f0
push 0x5a0208
push 0xe8
call fcn.100c88d0
push 0x1000b5f0
push 0x5ab91c
push 0xe8
call fcn.100c88d0
push 0x1000b5f0
push 0x5b087a
push 0xe8
call fcn.100c88d0
push 0x1000b5f0
push 0x5b13e4
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x1000b5f0
push 0x5b69e3
push 0xe8
call fcn.100c88d0
push 0x1000b5f0
push 0x5b6eb4
push 0xe8
call fcn.100c88d0
push 0x1000b5f0
push 0x5b7026
push 0xe8
call fcn.100c88d0
push 0x1000b5f0
push 0x5b7268
push 0xe8
call fcn.100c88d0
push 0x1000b5f0
push 0x5b72d0
push 0xe8
call fcn.100c88d0
push 0x1000b5f0
push 0x5b739d
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x1000b5f0
push 0x5b7634
push 0xe8
call fcn.100c88d0
push 0x1000b5f0
push 0x95f68a
push 0xe8
call fcn.100c88d0
push 0x1000b5f0
push 0x95f8b7
push 0xe8
call fcn.100c88d0
push 0x1000b5f0
push 0x95fa96
push 0xe8
call fcn.100c88d0
push 0x1000b5f0
push 0x96012e
push 0xe8
call fcn.100c88d0
add esp, 0x3c
push 0
push 0
push 0x102e587c
push 0x1000b390
push 0
push 0
call edi
mov dword [0x102e58b0], eax
call fcn.100631b0
call fcn.100620d0
push 0
push ecx
push str.DataEnc1.dat
call fcn.1009f360
push 1
push ecx
push str.DataDec2.dat
call fcn.1009f360
push 2
push 0x1013309c
lea ecx, [esp + 0x48]
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0xf
mov byte [esp + 0x48], 0
call fcn.1000b650
lea eax, [esp + 0x40]
push eax
push dword [0x101a2154]
lea ecx, [esp + 0x24]
call fcn.1007c3d0
sub esp, 8
mov ecx, eax
call fcn.100a8580
mov edx, dword [esp + 0x34]
cmp edx, 0x10
jb 0x1008482d
mov ecx, dword [esp + 0x20]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10084823
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10084872
push edx
push ecx
call fcn.100d7723
add esp, 8
mov edx, dword [esp + 0x54]
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0xf
mov byte [esp + 0x20], 0
cmp edx, 0x10
jb 0x100848ed
mov ecx, dword [esp + 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100848e3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100848e3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push 0x2000
push 0
push 0x1013fb2c
call sub.VCRUNTIME140.dll_memset
push 0x2000
push 0
push 0x10141b30
mov dword [0x10141b2c], 0
call sub.VCRUNTIME140.dll_memset
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
add esp, 0x18
mov dword [0x10143b30], 0
push 0
push 0
push 0x1013fb20
push 0x1003b1a0
push 0
push 0
call edi
mov dword [0x10143b54], eax
mov byte [0x10143b58], 1
mov byte [0x102f67b6], 1
jmp 0x1008461e
push edx
push ecx
call fcn.100d7723
add esp, 8
push str.Data__KGData__Lua__Configs__Font.lua
mov ecx, 0x101a2150
call fcn.100b07c0
push 0x100b1060
push 0x7729b3
push 0xe8
call fcn.100c88d0
push 0x100b1030
push 0x772960
push 0xe8
call fcn.100c88d0
add esp, 0x18
call fcn.100aefb0
cmp dword [0x101eb188], 0x191
jl 0x100849af
push 0x100a8390
push 0x810711
push 0xe9
call fcn.100c88d0
push 0x100a83d0
push 0x810790
push 0xe9
call fcn.100c88d0
add esp, 0x18
lea eax, [esp + 0x38]
push eax
push 0x40
push 7
push 0x811020
call esi
mov eax, 0x811020
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x3c]
push 7
push 0x811020
call esi
push 0x100a8410
push 0x811020
push 0xe9
call fcn.100c88d0
add esp, 0xc
call fcn.100ae7e0
push 2
push 0x1013309c
lea ecx, [esp + 0x48]
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0xf
mov byte [esp + 0x48], 0
call fcn.1000b650
lea eax, [esp + 0x40]
push eax
push dword [0x10143b60]
lea ecx, [esp + 0x24]
call fcn.1007c3d0
push 0x100aee30
push str.SetItemFloor
mov ecx, eax
call fcn.10092220
mov edx, dword [esp + 0x34]
cmp edx, 0x10
jb 0x10084a30
mov ecx, dword [esp + 0x20]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10084a26
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10084a6d
push edx
push ecx
call fcn.100d7723
add esp, 8
mov edx, dword [esp + 0x54]
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0xf
mov byte [esp + 0x20], 0
cmp edx, 0x10
jb 0x10084a7d
mov ecx, dword [esp + 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10084a73
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10084a73
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100d7723
add esp, 8
push str.Data__KGData__Lua__Configs__CustomItemFloor.lua
mov ecx, 0x10143b5c
call fcn.100b07c0
push 0x10131d00
push str.StartLoadItemFloor
push 0x10143b5c
call fcn.100b0970
push 0x100aeec0
push 0x5f820c
push 0xe8
call fcn.100c88d0
push 0x100aeec0
push 0x5f847d
push 0xe8
call fcn.100c88d0
add esp, 0x24
mov ecx, 0x101a644c
push str.Data__KGData__Lua__EffectSystem__CharacterEffectItens.lua
call fcn.100b07c0
push dword [0x101a6450]
call fcn.1008acc0
push 0x100aa090
push 0x5711ab
push 0xe8
call fcn.100c88d0
push 0x100aa090
push 0x57126f
push 0xe8
call fcn.100c88d0
push 0x100aa090
push 0x5713d6
push 0xe8
call fcn.100c88d0
push 0x100aa090
push 0x576ddb
push 0xe8
call fcn.100c88d0
push 0x100aa090
push 0x588357
push 0xe8
call fcn.100c88d0
push 0x100aa090
push 0x5883f4
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100aa090
push 0x588505
push 0xe8
call fcn.100c88d0
push 0x100aa090
push 0x588617
push 0xe8
call fcn.100c88d0
push 0x100aa090
push 0x588661
push 0xe8
call fcn.100c88d0
push 0x100aa090
push 0x58876e
push 0xe8
call fcn.100c88d0
push 0x100aa090
push 0x5887ad
push 0xe8
call fcn.100c88d0
push 0x100aa090
push 0x609d1e
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x100aa090
push 0x610691
push 0xe8
call fcn.100c88d0
add esp, 0xc
call fcn.100b4c10
mov ecx, dword [0xe61e58]
mov eax, dword [0xe61e5c]
cmp ecx, 0x320
jne 0x10084c15
test eax, eax
jne 0x10084c15
mov eax, 0xb
jmp 0x10084c2b
cmp ecx, 0x400
jne 0x10084c26
test eax, eax
mov eax, 0xc
je 0x10084c2b
mov eax, 0xd
push str.Tahoma
push 0
push 3
mov edi, dword [sym.imp.GDI32.dll_CreateFontA]
push 0
push 7
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push eax
mov dword [esp + 0x48], eax
call edi
push str.Tahoma
push 0
push 3
push 0
push 7
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push dword [esp + 0x44]
mov dword [0x1013f8a0], eax
call edi
push str.Tahoma
push 0
push 3
push 0
push 7
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push dword [esp + 0x44]
mov dword [0x1013f8a4], eax
call edi
mov ecx, 0x101eadc3
mov dword [0x1013f89c], eax
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10084cc0
sub ecx, edx
je 0x10084d38
push ecx
push 0x101eadc3
lea ecx, [esp + 0x48]
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0xf
mov byte [esp + 0x48], al
call fcn.1000b650
cmp dword [esp + 0x54], 0x10
lea edx, [esp + 0x40]
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x50]
cmovae edx, ecx
test eax, eax
je 0x10084d20
add eax, edx
mov dword [esp + 0x38], eax
mov eax, edx
cmp edx, dword [esp + 0x38]
jae 0x10084d20
cmp byte [eax], 0x20
jne 0x10084d34
inc eax
cmp eax, dword [esp + 0x38]
jb 0x10084d14
or eax, 0xffffffff
mov edx, 1
cmp eax, 0xffffffff
je 0x10084d40
mov byte [esp + 0xf], 0
jmp 0x10084d45
sub eax, edx
jmp 0x10084d23
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
mov byte [esp + 0xf], 1
test dl, 1
je 0x10084d80
mov eax, dword [esp + 0x54]
cmp eax, 0x10
jb 0x10084d80
lea edx, [eax + 1]
mov eax, ecx
cmp edx, 0x1000
jb 0x10084d76
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10084d76
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100d7723
add esp, 8
cmp byte [esp + 0xf], 0
je 0x10084de1
push 0xe8
mov edx, 0x10033700
mov ecx, 0x78b0bc
call fcn.100c7ff0
push 0xe9
mov edx, 0x100336a0
mov ecx, 0x789767
call fcn.100c7ff0
push 0xe9
mov edx, 0x100336c0
mov ecx, 0x789a63
call fcn.100c7ff0
push 0xe9
mov edx, 0x100336e0
mov ecx, 0x789dac
call fcn.100c7ff0
add esp, 0x10
mov byte [0x1013faa4], 1
call fcn.10057bb0
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0xd
call edi
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push 0xd
mov dword [0x102f9490], eax
call edi
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0xf
mov dword [0x102f9494], eax
call edi
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0x12
mov dword [0x102f9498], eax
call edi
mov dword [0x102f949c], eax
call fcn.1005ed20
push 2
push 0x1013309c
lea ecx, [esp + 0x48]
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0xf
mov byte [esp + 0x48], 0
call fcn.1000b650
lea eax, [esp + 0x40]
push eax
push dword [0x1017916c]
lea ecx, [esp + 0x24]
call fcn.1007c3d0
sub esp, 8
mov ecx, eax
call fcn.10081ae0
mov edx, dword [esp + 0x34]
cmp edx, 0x10
jb 0x10084f04
mov ecx, dword [esp + 0x20]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10084efa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10084f41
push edx
push ecx
call fcn.100d7723
add esp, 8
mov edx, dword [esp + 0x54]
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0xf
mov byte [esp + 0x20], 0
cmp edx, 0x10
jb 0x10084f51
mov ecx, dword [esp + 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10084f47
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10084f47
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100d7723
add esp, 8
push str.Data__KGData__Lua__Configs__CustomItemPosition.lua
mov ecx, 0x10179168
call fcn.100b07c0
push 0x1012f457
push str.StartLoadItemPosition
push 0x10179168
call fcn.100b0970
push 0x1007c920
push 0x5d0b94
push 0xe8
call fcn.100c88d0
add esp, 0x18
mov dword [0x1018858c], 1
cmp dword [0x101eb044], 2
jne 0x10084fa3
call fcn.10055e60
cmp dword [0x102b79e0], 0
je 0x10084fb8
call fcn.10033620
mov ecx, eax
call fcn.100be6e0
push 0x10032f40
push 0x7d2b3d
push 0xe8
call fcn.100c88d0
push 0x10032de0
push 0x841e49
push 0xe8
call fcn.100c88d0
add esp, 0x18
cmp dword [0x101eb0b0], 1
jne 0x1008500f
push 0x10033690
push 0x78b0f0
push 0xe9
call fcn.100c88d0
add esp, 0xc
mov eax, 0x787ba0
mov ecx, 0x10033680
jmp 0x10085019
mov eax, 0x78b0f0
mov ecx, 0x10032f10
push ecx
push eax
push 0xe9
call fcn.100c88d0
add esp, 0xc
cmp dword [0x101eb044], 1
jne 0x10085085
mov eax, dword [0x101eb0f4]
dec eax
cmp eax, 1
ja 0x10085085
push 0x10031800
push 0x84bc0f
push 0xe8
mov dword [0x102b7844], 0
call fcn.100c88d0
push 0x10031820
push 0x84bd1d
push 0xe8
call fcn.100c88d0
push 0x100307d0
push 0x84bdb0
push 0xe9
call fcn.100c88d0
add esp, 0x24
push 0x10032580
push 0x5bb0b0
push 0xe9
call fcn.100c88d0
add esp, 0xc
mov dword [0x10188584], 0
cmp dword [0x101eb04c], 1
jne 0x100850c6
push 0x1000f760
push 0x82b772
push 0xe8
call fcn.100c88d0
add esp, 0xc
cmp dword [0x101eb048], 0
je 0x100850e6
push 0x1009d0b0
push 0x62f870
push 0xe9
call fcn.100c88d0
add esp, 0xc
push 0x1009af60
push 0x82aba0
push 0xe9
call fcn.100c88d0
add esp, 0xc
cmp dword [0x101eb060], 1
jne 0x1008514e
lea eax, [esp + 0x38]
push eax
push 0x40
push 5
push 0x7f6834
call esi
mov eax, 0x7f6834
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x3c]
push 5
push 0x7f6834
call esi
push 0x100517d0
push 0x7f67b7
push 0xe8
call fcn.100c88d0
add esp, 0xc
cmp dword [0x101eb094], 0
jne 0x100851e0
mov byte [0x102bd8f8], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x10050650
sub eax, 0x1388
mov byte [0x102bd900], 0
push 0x7d2bc0
push 0xe9
mov dword [0x102bd8fc], eax
call fcn.100c88d0
push 0x100519c0
push 0x7d26b5
push 0xe9
call fcn.100c88d0
push 0x10051a10
push 0x7d2751
push 0xe9
call fcn.100c88d0
push 0x10051a60
push 0x7d27fc
push 0xe9
call fcn.100c88d0
push 0x10051ab0
push 0x80b8e0
push 0xe9
call fcn.100c88d0
add esp, 0x3c
cmp dword [0x101eaf84], 1
jne 0x1008530e
push 0x1004d560
push 0x5012d0
push 0xe9
call fcn.100c88d0
push 0x1004d5f0
push 0x80f250
push 0xe8
call fcn.100c88d0
push 0x1004d740
push 0x7df740
push 0xe9
call fcn.100c88d0
push 0x1004f320
push 0x7df34c
push 0xe8
call fcn.100c88d0
push 0x1004f350
push 0x66424b
push 0xe8
call fcn.100c88d0
push 0x1004d670
push 0x833731
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x1004d7a0
push 0x7df846
push 0xe8
call fcn.100c88d0
push 0x1004f7a0
push 0x7df83e
push 0xe8
call fcn.100c88d0
push 0x1004f460
push 0x83469c
push 0xe8
call fcn.100c88d0
push 0x10071e10
push 0x420814
push 0xe8
call fcn.100c88d0
push 0x1004c510
push 0x924c8b
push 0xe8
call fcn.100c88d0
push 0x1004bbc0
push 0x7e5cb6
push 0xe8
call fcn.100c88d0
add esp, 0x48
push 0x1004ca60
push 0x7e5b70
push 0xe8
call fcn.100c88d0
push 0x1004c7f0
push 0x7e348f
push 0xe8
call fcn.100c88d0
add esp, 0x18
cmp dword [0x101eb0e8], 1
jne 0x10085373
lea eax, [esp + 0x38]
push eax
push 0x40
push 5
push 0x401f56
call esi
mov eax, 0x401f56
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x3c]
push 5
push 0x401f56
call esi
push 0x1000bdd0
push 0x401ef1
push 0xe8
call fcn.100c88d0
push 0x1000bd70
push 0x401fc4
push 0xe8
call fcn.100c88d0
add esp, 0x18
cmp dword [0x101eb02c], 1
jne 0x10085506
push 7
call fcn.100d7d9e
mov edi, eax
mov dword [esp + 0x3c], 0
mov eax, 0x90909090
add esp, 4
mov dword [edi], eax
mov word [edi + 4], ax
mov byte [edi + 6], al
lea eax, [esp + 0x38]
push eax
push 0x40
push 7
push 0x608cac
call esi
test eax, eax
je 0x100853e7
mov eax, dword [edi]
mov ecx, 0x608cac
mov dword [ecx], eax
mov ax, word [edi + 4]
mov word [ecx + 4], ax
mov al, byte [edi + 6]
mov byte [ecx + 6], al
lea eax, [esp + 0x3c]
push eax
push dword [esp + 0x3c]
mov dword [esp + 0x44], 0
push 7
push ecx
call esi
test eax, eax
jne 0x100853ed
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xe9
mov edx, 0x1004fe60
mov ecx, 0x608cac
call fcn.100c7ff0
push 7
call fcn.100d7d9e
mov edi, eax
mov dword [esp + 0x40], 0
mov eax, 0x90909090
add esp, 8
mov dword [edi], eax
mov word [edi + 4], ax
mov byte [edi + 6], al
lea eax, [esp + 0x38]
push eax
push 0x40
push 7
push 0x60954d
call esi
test eax, eax
je 0x10085468
mov eax, dword [edi]
mov ecx, 0x60954d
mov dword [ecx], eax
mov ax, word [edi + 4]
mov word [ecx + 4], ax
mov al, byte [edi + 6]
mov byte [ecx + 6], al
lea eax, [esp + 0x3c]
push eax
push dword [esp + 0x3c]
mov dword [esp + 0x44], 0
push 7
push ecx
call esi
test eax, eax
jne 0x1008546e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xe9
mov edx, 0x1004fef0
mov ecx, 0x60954d
call fcn.100c7ff0
push 7
call fcn.100d7d9e
mov edi, eax
mov dword [esp + 0x40], 0
mov eax, 0x90909090
add esp, 8
mov dword [edi], eax
mov word [edi + 4], ax
mov byte [edi + 6], al
lea eax, [esp + 0x38]
push eax
push 0x40
push 7
push 0x60f04c
call esi
test eax, eax
je 0x100854e9
mov eax, dword [edi]
mov ecx, 0x60f04c
mov dword [ecx], eax
mov ax, word [edi + 4]
mov word [ecx + 4], ax
mov al, byte [edi + 6]
mov byte [ecx + 6], al
lea eax, [esp + 0x3c]
push eax
push dword [esp + 0x3c]
mov dword [esp + 0x44], 0
push 7
push ecx
call esi
test eax, eax
jne 0x100854ef
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xe9
mov edx, 0x1004ff80
mov ecx, 0x60f04c
call fcn.100c7ff0
add esp, 4
cmp dword [0x101eb030], 1
jne 0x1008553a
push 0x10027560
push 0x61041c
push 0xe8
call fcn.100c88d0
push 0x10027560
push 0x5666c1
push 0xe8
call fcn.100c88d0
add esp, 0x18
cmp dword [0x101eb028], 1
jne 0x1008558b
lea eax, [esp + 0x38]
push eax
push 0x40
push 5
push 0x502a95
call esi
mov eax, 0x502a95
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x3c]
push 5
push 0x502a95
call esi
push 0x100087b0
push 0x502a95
push 0xe8
call fcn.100c88d0
add esp, 0xc
cmp dword [0x101eb018], 1
jne 0x10085599
call fcn.1007bb70
cmp dword [0x101eb020], 1
jne 0x100855a7
call fcn.1002e210
cmp dword [0x101eb000], 1
jne 0x100855b5
call fcn.1009dcb0
cmp dword [0x101eb004], 1
jne 0x100856ef
push 0x10009990
push 0x900de9
push 0xe8
call fcn.100c88d0
push 0x10008c70
push 0x8c5bb5
push 0xe8
call fcn.100c88d0
push 0xa
call fcn.100d7d9e
mov edi, eax
mov dword [esp + 0x54], 0
mov eax, 0x90909090
add esp, 0x1c
mov dword [edi], eax
mov dword [edi + 4], eax
mov word [edi + 8], ax
lea eax, [esp + 0x38]
push eax
push 0x40
push 0xa
push 0x56fc5e
call esi
test eax, eax
je 0x10085651
mov eax, dword [edi]
mov ecx, 0x56fc5e
mov dword [ecx], eax
mov eax, dword [edi + 4]
mov dword [ecx + 4], eax
mov ax, word [edi + 8]
mov word [ecx + 8], ax
lea eax, [esp + 0x3c]
push eax
push dword [esp + 0x3c]
mov dword [esp + 0x44], 0
push 0xa
push ecx
call esi
test eax, eax
jne 0x10085657
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xe9
mov edx, 0x10009870
mov ecx, 0x56fc5e
call fcn.100c7ff0
push 0xa
call fcn.100d7d9e
mov edi, eax
mov dword [esp + 0x40], 0
mov eax, 0x90909090
add esp, 8
mov dword [edi], eax
mov dword [edi + 4], eax
mov word [edi + 8], ax
lea eax, [esp + 0x38]
push eax
push 0x40
push 0xa
push 0x56fd1a
call esi
test eax, eax
je 0x100856d2
mov eax, dword [edi]
mov ecx, 0x56fd1a
mov dword [ecx], eax
mov eax, dword [edi + 4]
mov dword [ecx + 4], eax
mov ax, word [edi + 8]
mov word [ecx + 8], ax
lea eax, [esp + 0x3c]
push eax
push dword [esp + 0x3c]
mov dword [esp + 0x44], 0
push 0xa
push ecx
call esi
test eax, eax
jne 0x100856d8
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xe9
mov edx, 0x10009910
mov ecx, 0x56fd1a
call fcn.100c7ff0
add esp, 4
cmp dword [0x101eb00c], 1
jne 0x1008571e
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
push eax
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
push 0x100c5040
push 0x4d70d4
push 0xe8
call fcn.100c88d0
add esp, 0x14
call fcn.1003a940
mov edi, 2
mov dword [esp + 0x10], 0
xor esi, esi
mov dword [esp + 0x38], 1
mov dword [esp + 0x14], edi
nop
lea ecx, [edi + 1]
mov eax, 0xf0f0f0f1
mul ecx
mov eax, esi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + 0x101eaca3]
xor al, byte [edi + 0x101eac56]
movzx edi, al
mov eax, 0xf0f0f0f1
mul dword [esp + 0x14]
mov eax, esi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov ecx, dword [esp + 0x38]
add dword [esp + 0x38], 4
mov al, byte [eax + 0x101eaca2]
xor al, byte [ecx + 0x101eac56]
movzx eax, al
add di, ax
mov eax, 0xf0f0f0f1
mul ecx
mov eax, esi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + 0x101eaca1]
xor al, byte [esi + 0x101eac56]
movzx eax, al
add di, ax
mov eax, 0xf0f0f0f1
mul esi
mov eax, esi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + 0x101eaca0]
xor al, byte [esi + 0x101eac55]
add esi, 4
movzx eax, al
add di, ax
add word [esp + 0x10], di
mov edi, dword [esp + 0x14]
add edi, 4
mov dword [esp + 0x14], edi
cmp edi, 0x22
jb 0x10085740
mov al, byte [esp + 0x10]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub al, 0x1e
mov byte [0x102bda00], al
mov eax, dword [esp + 0x10]
shr eax, 8
sub al, 0x31
mov byte [0x102bd8f7], al
mov eax, dword [0xd227b0]
mov dword [0x102bda08], eax
mov eax, dword [0xd227f8]
mov dword [0x102bda04], eax
lea eax, [esp + 0x38]
push eax
push 0x40
push 4
push 0xd227b0
call esi
lea eax, [esp + 0x38]
mov dword [0xd227b0], 0x100726a0
push eax
push dword [esp + 0x3c]
push 4
push 0xd227b0
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 4
push 0xd227f8
call esi
lea eax, [esp + 0x38]
mov dword [0xd227f8], 0x100727c0
push eax
push dword [esp + 0x3c]
push 4
push 0xd227f8
call esi
push 0x10079a90
push 0x633fcb
push 0xff
call fcn.100c88d0
push 0x10079f50
push 0x633fe3
push 0xff
call fcn.100c88d0
push 0x1007a330
push 0x57ac07
push 0xff
call fcn.100c88d0
push 0x1007a330
push 0x6083b9
push 0xff
call fcn.100c88d0
push 0x1007a400
push 0x777ff2
push 0xff
call fcn.100c88d0
push 0x1007a400
push 0x778003
push 0xff
call fcn.100c88d0
add esp, 0x48
push 0x1007a410
push 0x5f7c2f
push 0xe9
call fcn.100c88d0
push 0x1007a440
push 0x968137
push 0xe9
call fcn.100c88d0
push 0x1007a460
push 0x968157
push 0xe9
call fcn.100c88d0
push 0x10079940
push 0x57ad82
push 0xe9
call fcn.100c88d0
push 0x10079990
push 0x57adc8
push 0xe9
call fcn.100c88d0
add esp, 0x3c
cmp byte [0x101eb19d], 1
jne 0x10085a05
lea eax, [esp + 0x38]
push eax
push 0x40
push 7
push 0x54c2d5
call esi
mov eax, 0x54c2d5
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x3c]
push 7
push 0x54c2d5
call esi
push 0x10079660
push 0x54c2d5
push 0xe9
call fcn.100c88d0
push 0x100794c0
push 0x4fc6c7
push 0xe8
call fcn.100c88d0
push 0x100794c0
push 0x4fcc3e
push 0xe8
call fcn.100c88d0
push 0x100794c0
push 0x54c21d
push 0xe8
call fcn.100c88d0
add esp, 0x30
push 0x1007a480
push 0x58e650
push 0xe9
call fcn.100c88d0
push 0x1007a4d0
push 0x8386b5
push 0xe9
call fcn.100c88d0
push 0x1007a550
push 0x5c4025
push 0xe9
call fcn.100c88d0
push 0x1007a580
push 0x5f7c3b
push 0xe9
call fcn.100c88d0
push 0x1007a5b0
push 0x64b701
push 0xe9
call fcn.100c88d0
push 0x1007a5e0
push 0x8383a0
push 0xe9
call fcn.100c88d0
add esp, 0x48
push 0x1007a610
push 0x5f3f7e
push 0xe9
call fcn.100c88d0
push 0x1007a650
push 0x5f4a60
push 0xe9
call fcn.100c88d0
add esp, 0x18
call fcn.100a4e10
cmp dword [0x101eaed4], 0
je 0x10085b77
push 0x100c4550
push 0x40b903
push 0xe9
call fcn.100c88d0
push 0x100c4590
push 0x4da416
push 0xe9
call fcn.100c88d0
push 0x100c45b0
push 0x63a192
push 0xe9
call fcn.100c88d0
push 0x100c45f0
push 0x7a89eb
push 0xe9
call fcn.100c88d0
push fcn.100c44b0
push 0x40bc24
push 0xe8
call fcn.100c88d0
push fcn.100c44b0
push 0x4d762c
push 0xe8
call fcn.100c88d0
add esp, 0x48
push fcn.100c44b0
push 0x4ef622
push 0xe8
call fcn.100c88d0
push fcn.100c44b0
push 0x63cd3a
push 0xe8
call fcn.100c88d0
push fcn.100c3de0
push 0x80f7fe
push 0xe8
call fcn.100c88d0
add esp, 0x24
call fcn.100c67a0
cmp dword [0x101eb01c], 1
jne 0x10085bc4
push 0x10042250
push 0x50d905
push 0xe8
call fcn.100c88d0
push 0x100423c0
push 0x5cd10f
push 0xe9
call fcn.100c88d0
push 0x10042420
push 0x5cefe7
push 0xe9
call fcn.100c88d0
add esp, 0x24
push 0x100c4740
push 0x4d13c2
push 0xe9
call fcn.100c88d0
push 0x100c48f0
push 0x4d2782
push 0xe9
call fcn.100c88d0
push 0x100c49c0
push 0x830c3a
push 0xe9
call fcn.100c88d0
push 0x100c4620
push 0x4da2f9
push 0xe8
call fcn.100c88d0
mov edi, dword [sym.imp.USER32.dll_SetWindowsHookExA]
add esp, 0x30
cmp dword [0x102b79f4], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
jne 0x10085c47
call eax
push eax
push dword [0x102b79e4]
push 0x1003b5c0
push 7
call edi
mov dword [0x102b79f4], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x102b79f8], 0
jne 0x10085c67
call eax
push eax
push dword [0x102b79e4]
push 0x1003c870
push 2
call edi
mov dword [0x102b79f8], eax
cmp byte [0x101eb19e], 1
jne 0x10085c9c
lea eax, [esp + 0x38]
push eax
push 0x40
push 4
push 0x4d0e17
call esi
lea eax, [esp + 0x38]
mov dword [0x4d0e17], 0x1003b530
push eax
push dword [esp + 0x3c]
push 4
push 0x4d0e17
call esi
push 0x1003b4d0
push 0x4d0e2f
push 0xe9
call fcn.100c88d0
add esp, 0xc
call fcn.10079690
cmp dword [0x101eb198], 0
mov dword [0x102c0924], 0
mov byte [0x102c0910], 0
mov dword [0x102c0918], 0xffffffff
mov dword [0x102c0920], 0xffffffff
mov dword [0x102c0914], 0xffffffff
je 0x10085d07
push 0xe8
mov edx, 0x100c8610
mov ecx, 0x588511
call fcn.100c7ff0
add esp, 4
mov ecx, 0x10188580
call fcn.10073b10
cmp dword [0x101eb0a8], 2
setne byte [0x1051c3e0]
call fcn.10060610
call fcn.1009e5b0
call fcn.10001400
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.100018e0
call fcn.10001470
mov al, byte [0x101eac34]
test al, 1
je 0x10085d79
push 0x101eac35
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
jne 0x10085d74
push eax
push str.Start_Error
push str.Please_start_game_from_Launcher
push eax
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov al, byte [0x101eac34]
test al, 2
je 0x10085dba
push 0x101eac75
lea eax, [esp + 0x5c]
push str.XTEAM_MAIN_10405__s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [esp + 0x58]
push eax
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
test eax, eax
jne 0x10085d6c
lea eax, [esp + 0x58]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
cmp dword [0x101eae8c], 0
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
je 0x10085ea2
push 0x104
lea eax, [esp + 0x5c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x58]
push 0x104
push eax
push 0
call edi
test eax, eax
je 0x10085d6c
lea ecx, [esp + 0x58]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10085e00
sub ecx, edx
test ecx, ecx
jle 0x10085e38
nop dword [eax]
cmp byte [esp + ecx + 0x58], 0x5c
je 0x10085e1e
dec ecx
test ecx, ecx
jg 0x10085e10
jmp 0x10085e38
lea eax, [esp + 0x59]
add eax, ecx
push eax
push 0x104
push 0x10541b48
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
add esp, 0xc
push 0x101ead03
push 0x10541b48
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
add esp, 8
test eax, eax
jne 0x10085d6c
lea ecx, [esp + 0x1e8]
call fcn.10007b70
push ecx
lea eax, [esp + 0x40]
push eax
push 0x101ead03
lea ecx, [esp + 0x1f4]
call fcn.10007ca0
test al, al
je 0x10085e85
mov eax, dword [0x101eae8c]
cmp eax, dword [esp + 0x3c]
je 0x10085ea2
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
push 0x10
push str.Error
push str.Main.exe_CRC_error_
push 0
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp dword [0x101eae90], 0
je 0x10085f69
lea ecx, [esp + 0x1e8]
call fcn.10007b70
push ecx
lea eax, [esp + 0x3c]
push eax
push 0x101ead23
lea ecx, [esp + 0x1f4]
call fcn.10007ca0
test al, al
jne 0x10085ef3
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
push 0x10
push str.Error
push str.Plugin_1_CRC_error_
push 0
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101eae90]
cmp eax, dword [esp + 0x38]
jne 0x10085d6c
push 0x101ead23
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esp + 0x3c], eax
test eax, eax
je 0x10085d6c
push 0x104
lea ecx, [esp + 0x5c]
push ecx
push eax
call edi
push ecx
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x1f4]
call fcn.10007ca0
test al, al
je 0x10085d6c
mov eax, dword [0x101eae90]
cmp eax, dword [esp + 0x38]
jne 0x10085d6c
push 0x10134bb8
push dword [esp + 0x40]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10085f69
call eax
cmp dword [0x101eae94], 0
je 0x10086030
lea ecx, [esp + 0x1e8]
call fcn.10007b70
push ecx
lea eax, [esp + 0x3c]
push eax
push 0x101ead43
lea ecx, [esp + 0x1f4]
call fcn.10007ca0
test al, al
jne 0x10085fba
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
push 0x10
push str.Error
push str.Plugin_2_CRC_error_
push 0
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101eae94]
cmp eax, dword [esp + 0x38]
jne 0x10085d6c
push 0x101ead43
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esp + 0x3c], eax
test eax, eax
je 0x10085d6c
push 0x104
lea ecx, [esp + 0x5c]
push ecx
push eax
call edi
push ecx
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x1f4]
call fcn.10007ca0
test al, al
je 0x10085d6c
mov eax, dword [0x101eae94]
cmp eax, dword [esp + 0x38]
jne 0x10085d6c
push 0x10134bb8
push dword [esp + 0x40]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10086030
call eax
cmp dword [0x101eae98], 0
je 0x100860f7
lea ecx, [esp + 0x1e8]
call fcn.10007b70
push ecx
lea eax, [esp + 0x3c]
push eax
push 0x101ead63
lea ecx, [esp + 0x1f4]
call fcn.10007ca0
test al, al
jne 0x10086081
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
push 0x10
push str.Error
push str.Plugin_3_CRC_error_
push 0
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101eae98]
cmp eax, dword [esp + 0x38]
jne 0x10085d6c
push 0x101ead63
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esp + 0x3c], eax
test eax, eax
je 0x10085d6c
push 0x104
lea ecx, [esp + 0x5c]
push ecx
push eax
call edi
push ecx
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x1f4]
call fcn.10007ca0
test al, al
je 0x10085d6c
mov eax, dword [0x101eae98]
cmp eax, dword [esp + 0x38]
jne 0x10085d6c
push 0x10134bb8
push dword [esp + 0x40]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100860f7
call eax
cmp dword [0x101eae9c], 0
je 0x100861be
lea ecx, [esp + 0x1e8]
call fcn.10007b70
push ecx
lea eax, [esp + 0x3c]
push eax
push 0x101ead83
lea ecx, [esp + 0x1f4]
call fcn.10007ca0
test al, al
jne 0x10086148
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
push 0x10
push str.Error
push str.Plugin_4_CRC_error_
push 0
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101eae9c]
cmp eax, dword [esp + 0x38]
jne 0x10085d6c
push 0x101ead83
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esp + 0x3c], eax
test eax, eax
je 0x10085d6c
push 0x104
lea ecx, [esp + 0x5c]
push ecx
push eax
call edi
push ecx
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x1f4]
call fcn.10007ca0
test al, al
je 0x10085d6c
mov eax, dword [0x101eae9c]
cmp eax, dword [esp + 0x38]
jne 0x10085d6c
push 0x10134bb8
push dword [esp + 0x40]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100861be
call eax
cmp dword [0x101eaea0], 0
je 0x10086285
lea ecx, [esp + 0x1e8]
call fcn.10007b70
push ecx
lea eax, [esp + 0x3c]
push eax
push 0x101eada3
lea ecx, [esp + 0x1f4]
call fcn.10007ca0
test al, al
jne 0x1008620f
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
push 0x10
push str.Error
push str.Plugin_5_CRC_error_
push 0
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101eaea0]
cmp eax, dword [esp + 0x38]
jne 0x10085d6c
push 0x101eada3
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esp + 0x3c], eax
test eax, eax
je 0x10085d6c
push 0x104
lea ecx, [esp + 0x5c]
push ecx
push eax
call edi
push ecx
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x1f4]
call fcn.10007ca0
test al, al
je 0x10085d6c
mov eax, dword [0x101eaea0]
cmp eax, dword [esp + 0x38]
jne 0x10085d6c
push 0x10134bb8
push dword [esp + 0x40]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10086285
call eax
cmp dword [0x101eaea4], 0
je 0x1008634c
lea ecx, [esp + 0x1e8]
call fcn.10007b70
push ecx
lea eax, [esp + 0x3c]
push eax
push 0x101eadc3
lea ecx, [esp + 0x1f4]
call fcn.10007ca0
test al, al
jne 0x100862d6
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
push 0x10
push str.Error
push str.Plugin_Camera_CRC_error_
push 0
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101eaea4]
cmp eax, dword [esp + 0x38]
jne 0x10085d6c
push 0x101eadc3
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esp + 0x3c], eax
test eax, eax
je 0x10085d6c
push 0x104
lea ecx, [esp + 0x5c]
push ecx
push eax
call edi
push ecx
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x1f4]
call fcn.10007ca0
test al, al
je 0x10085d6c
mov eax, dword [0x101eaea4]
cmp eax, dword [esp + 0x38]
jne 0x10085d6c
push 0x10134bb8
push dword [esp + 0x40]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1008634c
call eax
cmp dword [0x101eaea8], 0
je 0x10086413
lea ecx, [esp + 0x1e8]
call fcn.10007b70
push ecx
lea eax, [esp + 0x3c]
push eax
push 0x101eade3
lea ecx, [esp + 0x1f4]
call fcn.10007ca0
test al, al
jne 0x1008639d
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
push 0x10
push str.Error
push str.Plugin_HackDLL_CRC_error_
push 0
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101eaea8]
cmp eax, dword [esp + 0x38]
jne 0x10085d6c
push 0x101eade3
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esp + 0x3c], eax
test eax, eax
je 0x10085d6c
push 0x104
lea ecx, [esp + 0x5c]
push ecx
push eax
call edi
push ecx
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x1f4]
call fcn.10007ca0
test al, al
je 0x10085d6c
mov eax, dword [0x101eaea8]
cmp eax, dword [esp + 0x38]
jne 0x10085d6c
push 0x10134bb8
push dword [esp + 0x40]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10086413
call eax
call fcn.1000c460
call fcn.100a36b9
mov eax, 0x100a3c80
mov byte [esp + 0x14], 0xe8
sub eax, 0x836486
mov dword [esp + 0x38], 0
mov dword [esp + 0x15], eax
lea eax, [esp + 0x38]
push eax
push 0x40
push 5
push 0x836481
call esi
test eax, eax
je 0x10086478
mov eax, dword [esp + 0x14]
mov ecx, 0x836481
mov dword [ecx], eax
mov al, byte [esp + 0x18]
mov byte [ecx + 4], al
lea eax, [esp + 0x3c]
push eax
push dword [esp + 0x3c]
mov dword [esp + 0x44], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1008647e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xe8
mov edx, 0x100a3bf0
mov ecx, 0x7dd304
call fcn.100c7ff0
push 0xe8
mov edx, 0x100a3bf0
mov ecx, 0x833b08
call fcn.100c7ff0
push 0x10043bd0
push 0x56f476
push 0xe8
call fcn.100c88d0
push 0x10043bd0
push 0x5ebbe6
push 0xe8
call fcn.100c88d0
push 0x4f9238
push 0x4f921d
push 0xe9
call fcn.100c88d0
push 0x63f058
push 0x63f040
push 0xe9
call fcn.100c88d0
push 0x10007e30
push 0x4f131e
push 0xe8
call fcn.100c88d0
add esp, 0x44
cmp dword [0x101eae88], 1
jne 0x100865ca
lea eax, [esp + 0x38]
push eax
push 0x40
push 4
push 0x954149
call esi
lea eax, [esp + 0x38]
mov dword [0x954149], 0x101eae08
push eax
push dword [esp + 0x3c]
push 4
push 0x954149
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 4
push 0x954116
call esi
lea eax, [esp + 0x38]
mov dword [0x954116], 0x101eae28
push eax
push dword [esp + 0x3c]
push 4
push 0x954116
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 4
push 0x9540e3
call esi
lea eax, [esp + 0x38]
mov dword [0x9540e3], 0x101eae48
push eax
push dword [esp + 0x3c]
push 4
push 0x9540e3
call esi
lea eax, [esp + 0x38]
push eax
push 0x40
push 4
push 0x9540ad
call esi
lea eax, [esp + 0x38]
mov dword [0x9540ad], 0x101eae68
push eax
push dword [esp + 0x3c]
push 4
push 0x9540ad
call esi
cmp dword [0x101eaf20], 1
jne 0x10086661
mov eax, 0x10190644
nop dword [eax]
mov dword [eax], 0xffffffff
add eax, 0x20
cmp eax, 0x101a0044
jl 0x100865e0
push 0x1007c070
push 0x7e44d3
push 0xff
mov dword [0x101a0044], 0
mov dword [0x101a004c], 0
mov dword [0x101a0048], 0
call fcn.100c88d0
push 0x1007c1b0
push 0x7e452f
push 0xff
call fcn.100c88d0
push 0x1007c310
push 0x7e4497
push 0xe8
call fcn.100c88d0
push 0x1007c310
push 0x7e44ec
push 0xe8
call fcn.100c88d0
add esp, 0x30
call fcn.10064540
call fcn.100aca00
call fcn.100aa1f0
pop edi
pop esi
mov ecx, dword [esp + 0x5e4]
xor ecx, esp
call fcn.100d7712
mov esp, ebp
pop ebp
ret
push esi
call edi
push 0x10
push str.Error
push str.EffectGame.info_no_funciona_o_es_invalida_
jmp 0x100866a8
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x10
push str.Error
push str.ServerGame.info_no_funciona_o_es_invalida_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x102e587c
call fcn.1000b510
mov ecx, dword [esp + 0x5ec]
pop edi
pop esi
xor ecx, esp
call fcn.100d7712
mov esp, ebp
pop ebp
ret