Function at 0x100834e0
Capabilities:
Allocate or change rwx memory
Check mutex and terminate process on windows
Check mutex on windows
Connect socket
Create thread
Encode data using xor
Execute shellcode via indirect call
Get file size
Initialize winsock library
Link many functions at runtime
Log keystrokes via application hook
Read .ini file
Read file on windows
Resolve dns
Resolve function by parsing pe exports
Spawn thread to rwx shellcode
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x728
mov eax, dword [0x10141040]
xor eax, esp
mov dword [esp + 0x724], eax
push esi
push edi
lea eax, [esp + 0x2c]
mov dword [esp + 0x18], 0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 0xd21fff
push 0x401000
call edi
test eax, eax
je 0x1008692f
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push 0x10134694
push 1
push 0x101346a4
push 0x101346b0
call esi
push 0x101346bc
push 1
push str.WideScreenScale
push 0x101346dc
mov dword [0x102bc21c], eax
call esi
lea ecx, [esp + 0x220]
mov dword [0x102bc218], eax
call fcn.10008cb0
push ecx
push 0x102ba88c
push str..DataKGDataLocalServerGame.info
lea ecx, [esp + 0x22c]
call fcn.10008de0
test al, al
je 0x10086911
push 0
push 0x20
push 3
push 0
push 1
push closesocket
push str..DataKGDataLocalServerGame.info
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x10086911
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, 0x905a0
jne 0x1008690a
push 0
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
push 0x905a0
push 0x101ef3a4
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1008690a
xor ecx, ecx
nop dword [eax]
mov eax, ecx
shr eax, 8
xor al, 0x95
add al, byte [ecx + 0x101ef3a4]
xor al, cl
xor al, 0xda
mov byte [ecx + 0x101ef3a4], al
inc ecx
cmp ecx, 0x905a0
jb 0x100835f0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x220]
call fcn.10008cb0
push ecx
push 0x102ba890
push str..DataKGDataLocalEffectGame.info
lea ecx, [esp + 0x22c]
call fcn.10008de0
test al, al
je 0x100868fc
push 0
push 0x20
push 3
push 0
push 1
push closesocket
push str..DataKGDataLocalEffectGame.info
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x100868fc
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, 0x3af48
jne 0x100868f5
push 0
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
push 0x3af48
push 0x1027f944
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x100868f5
xor ecx, ecx
mov eax, ecx
shr eax, 8
xor al, 0x6e
add al, byte [ecx + 0x1027f944]
xor al, cl
xor al, 0xe6
mov byte [ecx + 0x1027f944], al
inc ecx
cmp ecx, 0x3af48
jb 0x100836a5
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.100b5140
cmp dword [0x101ef574], 1
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
jne 0x10083733
push 0x10134640
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [esp + 8], eax
test eax, eax
jne 0x10083702
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x10083733
call esi
cmp eax, 0xb7
jne 0x10083733
push dword [esp + 8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x10
push 0x10134654
push str.You_already_have_a_main_open__you_cant_open_any_more.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x102ea244
call fcn.1000cfa0
mov eax, 0x100c8d50
mov byte [esp + 0x24], 0xe9
sub eax, 0x5509d3
mov dword [esp + 8], 0
mov dword [esp + 0x25], eax
lea eax, [esp + 8]
push eax
push 0x40
push 5
push 0x5509ce
call edi
test eax, eax
je 0x1008378e
mov eax, dword [esp + 0x24]
mov ecx, 0x5509ce
mov dword [ecx], eax
mov al, byte [esp + 0x28]
mov byte [ecx + 4], al
lea eax, [esp + 0x10]
push eax
push dword [esp + 0xc]
mov dword [esp + 0x18], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10083790
call esi
mov eax, 0x100c9230
mov byte [esp + 0x24], 0xe9
sub eax, 0x551578
mov dword [esp + 8], 0
mov dword [esp + 0x25], eax
lea eax, [esp + 8]
push eax
push 0x40
push 5
push 0x551573
call edi
test eax, eax
je 0x100837eb
mov eax, dword [esp + 0x24]
mov ecx, 0x551573
mov dword [ecx], eax
mov al, byte [esp + 0x28]
mov byte [ecx + 4], al
lea eax, [esp + 0x10]
push eax
push dword [esp + 0xc]
mov dword [esp + 0x18], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100837ed
call esi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0xe61144
call edi
lea eax, [esp + 8]
mov byte [0xe61144], 0xa0
push eax
push dword [esp + 0xc]
push 1
push 0xe61144
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x4d1e69
call edi
lea eax, [esp + 8]
mov byte [0x4d1e69], 0xeb
push eax
push dword [esp + 0xc]
push 1
push 0x4d1e69
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x4d228d
call edi
lea eax, [esp + 8]
mov byte [0x4d228d], 0xe9
push eax
push dword [esp + 0xc]
push 1
push 0x4d228d
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x4d228e
call edi
lea eax, [esp + 8]
mov byte [0x4d228e], 0x8b
push eax
push dword [esp + 0xc]
push 1
push 0x4d228e
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x4d228f
call edi
lea eax, [esp + 8]
mov byte [0x4d228f], 0
push eax
push dword [esp + 0xc]
push 1
push 0x4d228f
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x4d2290
call edi
lea eax, [esp + 8]
mov byte [0x4d2290], 0
push eax
push dword [esp + 0xc]
push 1
push 0x4d2290
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x4d2291
call edi
lea eax, [esp + 8]
mov byte [0x4d2291], 0
push eax
push dword [esp + 0xc]
push 1
push 0x4d2291
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x4d559c
call edi
lea eax, [esp + 8]
mov byte [0x4d559c], 0xeb
push eax
push dword [esp + 0xc]
push 1
push 0x4d559c
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x633f7a
call edi
lea eax, [esp + 8]
mov byte [0x633f7a], 0xeb
push eax
push dword [esp + 0xc]
push 1
push 0x633f7a
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x634403
call edi
lea eax, [esp + 8]
mov byte [0x634403], 0xeb
push eax
push dword [esp + 0xc]
push 1
push 0x634403
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x63e6c4
call edi
lea eax, [esp + 8]
mov byte [0x63e6c4], 0xeb
push eax
push dword [esp + 0xc]
push 1
push 0x63e6c4
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x4d2246
call edi
lea eax, [esp + 8]
mov byte [0x4d2246], 0xeb
push eax
push dword [esp + 0xc]
push 1
push 0x4d2246
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x501163
call edi
lea eax, [esp + 8]
mov byte [0x501163], 0xeb
push eax
push dword [esp + 0xc]
push 1
push 0x501163
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x40af0a
call edi
lea eax, [esp + 8]
mov byte [0x40af0a], 0
push eax
push dword [esp + 0xc]
push 1
push 0x40af0a
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x40b4bc
call edi
lea eax, [esp + 8]
mov byte [0x40b4bc], 0x50
push eax
push dword [esp + 0xc]
push 1
push 0x40b4bc
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x40b4c5
call edi
lea eax, [esp + 8]
mov byte [0x40b4c5], 0x50
push eax
push dword [esp + 0xc]
push 1
push 0x40b4c5
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x40b4cf
call edi
lea eax, [esp + 8]
mov byte [0x40b4cf], 0x18
push eax
push dword [esp + 0xc]
push 1
push 0x40b4cf
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x40af0a
call edi
lea eax, [esp + 8]
mov byte [0x40af0a], 0
push eax
push dword [esp + 0xc]
push 1
push 0x40af0a
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x40afd5
call edi
lea eax, [esp + 8]
mov byte [0x40afd5], 0xeb
push eax
push dword [esp + 0xc]
push 1
push 0x40afd5
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x777fd6
call edi
lea eax, [esp + 8]
mov byte [0x777fd6], 0x70
push eax
push dword [esp + 0xc]
push 1
push 0x777fd6
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x777fd7
call edi
lea eax, [esp + 8]
mov byte [0x777fd7], 0x17
push eax
push dword [esp + 0xc]
push 1
push 0x777fd7
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x4ebec7
call edi
lea eax, [esp + 8]
mov byte [0x4ebec7], 0x3c
push eax
push dword [esp + 0xc]
push 1
push 0x4ebec7
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x5c4004
call edi
lea eax, [esp + 8]
mov byte [0x5c4004], 0x3c
push eax
push dword [esp + 0xc]
push 1
push 0x5c4004
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x7e40bb
call edi
lea eax, [esp + 8]
mov byte [0x7e40bb], 0x3c
push eax
push dword [esp + 0xc]
push 1
push 0x7e40bb
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x81b546
call edi
lea eax, [esp + 8]
mov byte [0x81b546], 0x3c
push eax
push dword [esp + 0xc]
push 1
push 0x81b546
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x81b58d
call edi
lea eax, [esp + 8]
mov byte [0x81b58d], 0x3c
push eax
push dword [esp + 0xc]
push 1
push 0x81b58d
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x86e284
call edi
lea eax, [esp + 8]
mov byte [0x86e284], 0x3c
push eax
push dword [esp + 0xc]
push 1
push 0x86e284
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x86e44c
call edi
lea eax, [esp + 8]
mov byte [0x86e44c], 0x3c
push eax
push dword [esp + 0xc]
push 1
push 0x86e44c
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x86e573
call edi
lea eax, [esp + 8]
mov byte [0x86e573], 0x3c
push eax
push dword [esp + 0xc]
push 1
push 0x86e573
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x86f8fc
call edi
lea eax, [esp + 8]
mov byte [0x86f8fc], 0x3c
push eax
push dword [esp + 0xc]
push 1
push 0x86f8fc
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x7da373
call edi
lea eax, [esp + 8]
mov byte [0x7da373], 0xb7
push eax
push dword [esp + 0xc]
push 1
push 0x7da373
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x7e1c44
call edi
lea eax, [esp + 8]
mov byte [0x7e1c44], 0xb7
push eax
push dword [esp + 0xc]
push 1
push 0x7e1c44
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x52100d
call edi
lea eax, [esp + 8]
mov byte [0x52100d], 0xeb
push eax
push dword [esp + 0xc]
push 1
push 0x52100d
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x9543c4
call edi
lea eax, [esp + 8]
mov byte [0x9543c4], 0
push eax
push dword [esp + 0xc]
push 1
push 0x9543c4
call edi
push 0x4d1dc2
push 0x4d1cf0
push 0xe9
call fcn.100c9bf0
add esp, 0xc
lea eax, [esp + 8]
push eax
push 0x40
push 0x1b
push 0xd20170
call edi
mov eax, 0xd20170
mov ecx, 0x90909090
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], ecx
mov word [eax + 0x18], cx
mov byte [eax + 0x1a], cl
lea eax, [esp + 8]
push eax
push dword [esp + 0xc]
push 0x1b
push 0xd20170
call edi
cmp dword [0x101ef620], 0
mov ecx, 0xeb
mov eax, 0x75
cmove eax, ecx
mov dword [esp + 0x10], eax
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x64cbd1
call edi
mov eax, dword [esp + 0x10]
mov byte [0x64cbd1], al
lea eax, [esp + 8]
push eax
push dword [esp + 0xc]
push 1
push 0x64cbd1
call edi
mov al, byte [0x101ef624]
mov byte [esp + 0xf], al
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x64cbd0
call edi
mov al, byte [esp + 0xf]
mov byte [0x64cbd0], al
lea eax, [esp + 8]
push eax
push dword [esp + 0xc]
push 1
push 0x64cbd0
call edi
mov al, byte [0x101ef624]
mov byte [esp + 0xf], al
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x95ceef
call edi
mov al, byte [esp + 0xf]
mov byte [0x95ceef], al
lea eax, [esp + 8]
push eax
push dword [esp + 0xc]
push 1
push 0x95ceef
call edi
mov al, byte [0x101ef624]
mov byte [esp + 0xf], al
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x95cf14
call edi
mov al, byte [esp + 0xf]
mov byte [0x95cf14], al
lea eax, [esp + 8]
push eax
push dword [esp + 0xc]
push 1
push 0x95cf14
call edi
mov al, byte [0x101ef408]
inc al
mov byte [esp + 0xf], al
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0xe61f68
call edi
mov al, byte [esp + 0xf]
mov byte [0xe61f68], al
lea eax, [esp + 8]
push eax
push dword [esp + 0xc]
push 1
push 0xe61f68
call edi
mov al, byte [0x101ef40a]
add al, 2
mov byte [esp + 0xf], al
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0xe61f69
call edi
mov al, byte [esp + 0xf]
mov byte [0xe61f69], al
lea eax, [esp + 8]
push eax
push dword [esp + 0xc]
push 1
push 0xe61f69
call edi
mov al, byte [0x101ef40b]
add al, 3
mov byte [esp + 0xf], al
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0xe61f6a
call edi
mov al, byte [esp + 0xf]
mov byte [0xe61f6a], al
lea eax, [esp + 8]
push eax
push dword [esp + 0xc]
push 1
push 0xe61f6a
call edi
mov al, byte [0x101ef40d]
add al, 4
mov byte [esp + 0xf], al
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0xe61f6b
call edi
mov al, byte [esp + 0xf]
mov byte [0xe61f6b], al
lea eax, [esp + 8]
push eax
push dword [esp + 0xc]
push 1
push 0xe61f6b
call edi
mov al, byte [0x101ef40e]
add al, 5
mov byte [esp + 0xf], al
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0xe61f6c
call edi
mov al, byte [esp + 0xf]
mov byte [0xe61f6c], al
lea eax, [esp + 8]
push eax
push dword [esp + 0xc]
push 1
push 0xe61f6c
call edi
movzx esi, word [0x101ef406]
lea eax, [esp + 8]
push eax
push 0x40
push 2
push 0xe609e4
call edi
lea eax, [esp + 8]
mov word [0xe609e4], si
push eax
push dword [esp + 0xc]
push 2
push 0xe609e4
call edi
cmp dword [0x101ef61c], 0x3c
jb 0x1008400d
mov dword [0x102ea494], 0
mov dword [0x102ea498], 0
mov byte [0x102ea490], 1
call fcn.100192c0
cmp dword [0x101ef61c], 0x3c
jae 0x10084091
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0x4d9d3b
call edi
lea eax, [esp + 8]
mov dword [0x4d9d3b], 0x102c239c
push eax
push dword [esp + 0xc]
push 4
push 0x4d9d3b
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0x4dac60
call edi
lea eax, [esp + 8]
mov dword [0x4dac60], 0x102c239c
push eax
push dword [esp + 0xc]
push 4
push 0x4dac60
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0x7b55338
call edi
lea eax, [esp + 8]
mov dword [0x7b55338], 0xa
push eax
push dword [esp + 0xc]
push 4
push 0x7b55338
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0x4d597b
call edi
lea eax, [esp + 8]
mov dword [0x4d597b], 0x102c2398
push eax
push dword [esp + 0xc]
push 4
push 0x4d597b
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0x4da289
call edi
lea eax, [esp + 8]
mov dword [0x4da289], 0x102c2398
push eax
push dword [esp + 0xc]
push 4
push 0x4da289
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0x4da297
call edi
lea eax, [esp + 8]
mov dword [0x4da297], 0x102c2398
push eax
push dword [esp + 0xc]
push 4
push 0x4da297
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0x4da3a2
call edi
lea eax, [esp + 8]
mov dword [0x4da3a2], 0x102c2398
push eax
push dword [esp + 0xc]
push 4
push 0x4da3a2
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0x4da3ce
call edi
lea eax, [esp + 8]
mov dword [0x4da3ce], 0x102c2398
push eax
push dword [esp + 0xc]
push 4
push 0x4da3ce
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0x4da3d9
call edi
lea eax, [esp + 8]
mov dword [0x4da3d9], 0x102c2398
push eax
push dword [esp + 0xc]
push 4
push 0x4da3d9
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0x63d326
call edi
lea eax, [esp + 8]
mov dword [0x63d326], 0x102c2398
push eax
push dword [esp + 0xc]
push 4
push 0x63d326
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0x642112
call edi
lea eax, [esp + 8]
mov dword [0x642112], 0x102c2398
push eax
push dword [esp + 0xc]
push 4
push 0x642112
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0x4d0e09
call edi
lea eax, [esp + 8]
mov dword [0x4d0e09], 0x101ef421
push eax
push dword [esp + 0xc]
push 4
push 0x4d0e09
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0x4d9f55
call edi
lea eax, [esp + 8]
mov dword [0x4d9f55], 0x101ef441
push eax
push dword [esp + 0xc]
push 4
push 0x4d9f55
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 1
push 0x5c914e
call edi
lea eax, [esp + 8]
mov byte [0x5c914e], 0
push eax
push dword [esp + 0xc]
push 1
push 0x5c914e
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 0x14
push 0x63e908
call edi
mov eax, 0x63e908
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
lea eax, [esp + 8]
push eax
push dword [esp + 0xc]
push 0x14
push 0x63e908
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 0x20
push 0xe611b2
call edi
movups xmm0, xmmword [0x101ef3e5]
mov eax, 0xe611b2
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x101ef3f5]
movups xmmword [eax + 0x10], xmm0
lea eax, [esp + 8]
push eax
push dword [esp + 0xc]
push 0x20
push 0xe611b2
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 0x11
push 0xe61f70
call edi
movups xmm0, xmmword [0x101ef410]
mov ecx, 0xe61f70
movups xmmword [ecx], xmm0
mov al, byte [0x101ef420]
mov byte [ecx + 0x10], al
lea eax, [esp + 8]
push eax
push dword [esp + 0xc]
push 0x11
push ecx
call edi
push fcn.100c1810
push 0x65fd79
push 0xff
call fcn.100c9bf0
push 0x10071cf0
push 0x4da280
push 0xe9
call fcn.100c9bf0
cmp dword [0x101ef61c], 0x3c
mov ecx, 0x10071d20
mov eax, 0x10071f20
cmovb eax, ecx
push eax
push 0x4da3a1
push 0xe9
call fcn.100c9bf0
add esp, 0x24
mov edx, 0xc
mov ecx, 0x4d9d39
call fcn.100c9cc0
mov edx, 7
mov ecx, 0x4d9d45
call fcn.100c9cc0
mov edx, 0xf
mov ecx, 0x4d9efc
call fcn.100c9cc0
cmp dword [0x101ef61c], 0x3c
jae 0x100843c0
mov edx, 8
mov ecx, 0x4dac5c
call fcn.100c9cc0
mov edx, 5
mov ecx, 0x5451f7
call fcn.100c9cc0
mov edx, 8
mov ecx, 0x545230
call fcn.100c9cc0
mov edx, 8
mov ecx, 0x5a52e9
call fcn.100c9cc0
push 0x102c66c0
mov edx, 0x6a
call fcn.100c9d40
push 0x102c65d0
mov edx, 0x6b
call fcn.100c9d40
push 0x102c67b0
mov edx, 0x6c
call fcn.100c9d40
add esp, 0xc
mov ecx, 0x1014130c
call fcn.10027120
push 0x1002fa90
push 0x597691
push 0xe9
call fcn.100c9bf0
add esp, 0xc
cmp dword [0x101ef820], 1
jne 0x10084467
cmp byte [0x102fb12b], 0
jne 0x10084467
push 0x1002faa0
push 0x4d5ec3
push 0xe8
call fcn.100c9bf0
add esp, 0xc
cmp byte [0x102fb12b], 1
jne 0x10084487
push 0x1002fc70
push 0x4d5ec3
push 0xe8
call fcn.100c9bf0
add esp, 0xc
push dword [0x1014292c]
mov ecx, 0x10142954
call fcn.1008fde0
push str.DataKGDataLuaConfigsNameColor.lua
mov ecx, 0x10142928
call fcn.100b06a0
push 0x1002f900
push 0x598ca7
push 0xe8
call fcn.100c9bf0
push 0x1002f900
push 0x77f8c2
push 0xe8
call fcn.100c9bf0
push 0x1002f930
push 0x57f920
push 0xe9
call fcn.100c9bf0
add esp, 0x24
call fcn.10044170
cmp dword [0x101ef808], 1
jne 0x1008463d
mov eax, 1
mov dword [0x102fb240], 0
mov word [0x102fb174], ax
lea eax, [esp + 0x90]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
jne 0x10084559
push eax
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov dword [0x10142b84], eax
cmp eax, 0xffffffff
je 0x10084559
call dword [sym.imp.WS2_32.dll_WSACreateEvent]
mov dword [0x10142b88], eax
test eax, eax
je 0x10084559
mov esi, dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [0x10146b94], 0x1003bd80
jmp 0x10084576
mov esi, dword [sym.imp.USER32.dll_MessageBoxA]
push 1
push 0x10132898
push str.init_failed
push 0
call esi
mov byte [0x102fb176], 0
cmp dword [0x10142b84], 0xffffffff
movzx eax, word [0x101ef406]
je 0x10084626
mov ecx, 2
push eax
mov word [esp + 0x34], cx
call dword [sym.imp.WS2_32.dll_htons]
push 0x101ef3e5
mov word [esp + 0x36], ax
call dword [sym.imp.WS2_32.dll_inet_addr]
mov dword [esp + 0x34], eax
cmp eax, 0xffffffff
jne 0x100845da
push 0x101ef3e5
call dword [sym.imp.WS2_32.dll_gethostbyname]
test eax, eax
je 0x100845da
movsx ecx, word [eax + 0xa]
mov eax, dword [eax + 0xc]
push ecx
push dword [eax]
lea eax, [esp + 0x3c]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x10
lea eax, [esp + 0x34]
push eax
push dword [0x10142b84]
call dword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x100845ff
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2733
jne 0x1008461c
push 0x23
push dword [0x10142b88]
push dword [0x10142b84]
call dword [sym.imp.WS2_32.dll_WSAEventSelect]
cmp eax, 0xffffffff
jne 0x1008489f
mov ecx, 0x10142b80
call fcn.1003b960
push 1
push str.connection
push str.Connect_failed__CheckIP_ConnectServer__
push 0
call esi
mov byte [0x102fb176], 0
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x10072110
push 0x5b96e8
push 0xe8
call fcn.100c9bf0
push 0x1000d080
push 0x59b566
push 0xe8
call fcn.100c9bf0
push 0x1000d080
push 0x5a0208
push 0xe8
call fcn.100c9bf0
push 0x1000d080
push 0x5ab91c
push 0xe8
call fcn.100c9bf0
push 0x1000d080
push 0x5b087a
push 0xe8
call fcn.100c9bf0
push 0x1000d080
push 0x5b13e4
push 0xe8
call fcn.100c9bf0
add esp, 0x48
push 0x1000d080
push 0x5b69e3
push 0xe8
call fcn.100c9bf0
push 0x1000d080
push 0x5b6eb4
push 0xe8
call fcn.100c9bf0
push 0x1000d080
push 0x5b7026
push 0xe8
call fcn.100c9bf0
push 0x1000d080
push 0x5b7268
push 0xe8
call fcn.100c9bf0
push 0x1000d080
push 0x5b72d0
push 0xe8
call fcn.100c9bf0
push 0x1000d080
push 0x5b739d
push 0xe8
call fcn.100c9bf0
add esp, 0x48
push 0x1000d080
push 0x5b7634
push 0xe8
call fcn.100c9bf0
push 0x1000d080
push 0x95f68a
push 0xe8
call fcn.100c9bf0
push 0x1000d080
push 0x95f8b7
push 0xe8
call fcn.100c9bf0
push 0x1000d080
push 0x95fa96
push 0xe8
call fcn.100c9bf0
push 0x1000d080
push 0x96012e
push 0xe8
call fcn.100c9bf0
add esp, 0x3c
push 0
push 0
push 0x102ea244
push 0x1000ce20
push 0
push 0
call esi
mov dword [0x102ea278], eax
call fcn.10062060
call fcn.100611d0
push 0
push ecx
push str.DataEnc1.dat
call fcn.1009efc0
push 1
push ecx
push str.DataDec2.dat
call fcn.1009efc0
lea eax, [esp + 0x30]
mov dword [esp + 0x40], 2
push eax
push dword [0x101a6784]
xorps xmm0, xmm0
mov dword [esp + 0x4c], 0xf
movaps xmmword [esp + 0x38], xmm0
lea ecx, [esp + 0x5c]
mov esi, 0x475f
mov byte [esp + 0x3a], 0
mov word [esp + 0x38], si
call fcn.1007b660
sub esp, 8
mov ecx, eax
call fcn.100a8190
mov ecx, dword [esp + 0x6c]
cmp ecx, 0xf
jbe 0x10084854
mov edx, dword [esp + 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1008484a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10084899
push ecx
push edx
call fcn.100d84b0
add esp, 8
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0xf
mov byte [esp + 0x58], 0
cmp ecx, 0xf
jbe 0x10084914
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1008490a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1008490a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push 0x2000
push 0
push 0x10142b8c
call sub.VCRUNTIME140.dll_memset
push 0x2000
push 0
push 0x10144b90
mov dword [0x10144b8c], 0
call sub.VCRUNTIME140.dll_memset
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
add esp, 0x18
mov dword [0x10146b90], 0
push 0
push 0
push 0x10142b80
push 0x1003bb10
push 0
push 0
call esi
mov dword [0x10146bb4], eax
mov byte [0x10146bb8], 1
mov byte [0x102fb176], 1
jmp 0x10084643
push ecx
push edx
call fcn.100d84b0
add esp, 8
push str.Data__KGData__Lua__Configs__Font.lua
mov ecx, 0x101a6780
call fcn.100b06a0
push 0x100b2710
push 0x7729b3
push 0xe8
call fcn.100c9bf0
push 0x100b26e0
push 0x772960
push 0xe8
call fcn.100c9bf0
add esp, 0x18
mov dword [esp + 0x40], 2
lea eax, [esp + 0x30]
mov dword [esp + 0x44], 0xf
xorps xmm0, xmm0
lea ecx, [esp + 0x54]
movaps xmmword [esp + 0x30], xmm0
push eax
push dword [0x101aabb8]
mov word [esp + 0x38], si
mov byte [esp + 0x3a], 0
call fcn.1007b660
sub esp, 8
mov ecx, eax
call fcn.100af8b0
mov ecx, dword [esp + 0x6c]
cmp ecx, 0xf
jbe 0x100849c0
mov edx, dword [esp + 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100849b6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100849fd
push ecx
push edx
call fcn.100d84b0
add esp, 8
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0xf
mov byte [esp + 0x58], 0
cmp ecx, 0xf
jbe 0x10084a0d
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10084a03
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10084a03
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100d84b0
add esp, 8
push str.Data__KGData__Lua__Configs__CustomItemForce.lua
mov ecx, 0x101aabb4
call fcn.100b06a0
push 0x1012f47a
push str.StartCustomItemForce
push 0x101aabb4
call fcn.100b0890
push fcn.100af150
push 0x58b77e
push 0xe8
call fcn.100c9bf0
push fcn.100af150
push 0x5c7833
push 0xe8
call fcn.100c9bf0
push fcn.100af150
push 0x5c7d71
push 0xe8
call fcn.100c9bf0
push fcn.100af150
push 0x5c7f1b
push 0xe8
call fcn.100c9bf0
push fcn.100af150
push 0x5c80be
push 0xe8
call fcn.100c9bf0
add esp, 0x48
push fcn.100af150
push 0x7e22ba
push 0xe8
call fcn.100c9bf0
add esp, 0xc
cmp dword [0x101ef8f8], 0x191
jl 0x10084b31
push 0x100a7fa0
push 0x810711
push 0xe9
call fcn.100c9bf0
push 0x100a7fe0
push 0x810790
push 0xe9
call fcn.100c9bf0
add esp, 0x18
lea eax, [esp + 8]
push eax
push 0x40
push 7
push 0x811020
call edi
mov eax, 0x811020
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [esp + 8]
push eax
push dword [esp + 0xc]
push 7
push 0x811020
call edi
push 0x100a8020
push 0x811020
push 0xe9
call fcn.100c9bf0
add esp, 0xc
call fcn.100ae830
lea eax, [esp + 0x30]
mov dword [esp + 0x40], 2
push eax
push dword [0x101aab84]
xorps xmm0, xmm0
mov dword [esp + 0x4c], 0xf
movaps xmmword [esp + 0x38], xmm0
lea ecx, [esp + 0x5c]
mov word [esp + 0x38], si
mov byte [esp + 0x3a], 0
call fcn.1007b660
push 0x100aee60
push str.SetItemFloor
mov ecx, eax
call fcn.10091de0
mov ecx, dword [esp + 0x6c]
cmp ecx, 0xf
jbe 0x10084baf
mov edx, dword [esp + 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10084ba5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10084bec
push ecx
push edx
call fcn.100d84b0
add esp, 8
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0xf
mov byte [esp + 0x58], 0
cmp ecx, 0xf
jbe 0x10084bfc
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10084bf2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10084bf2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100d84b0
add esp, 8
push str.Data__KGData__Lua__Configs__CustomItemFloor.lua
mov ecx, 0x101aab80
call fcn.100b06a0
push 0x1013623c
push str.StartLoadItemFloor
push 0x101aab80
call fcn.100b0890
push 0x100aefa0
push 0x5f820c
push 0xe8
call fcn.100c9bf0
push 0x100aefa0
push 0x5f847d
push 0xe8
call fcn.100c9bf0
add esp, 0x24
mov ecx, 0x101aaa7c
push str.Data__KGData__Lua__EffectSystem__CharacterEffectItens.lua
call fcn.100b06a0
push dword [0x101aaa80]
call fcn.1008acb0
push 0x100a9cd0
push 0x5711ab
push 0xe8
call fcn.100c9bf0
push 0x100a9cd0
push 0x57126f
push 0xe8
call fcn.100c9bf0
push 0x100a9cd0
push 0x5713d6
push 0xe8
call fcn.100c9bf0
push 0x100a9cd0
push 0x576ddb
push 0xe8
call fcn.100c9bf0
push 0x100a9cd0
push 0x588357
push 0xe8
call fcn.100c9bf0
push 0x100a9cd0
push 0x5883f4
push 0xe8
call fcn.100c9bf0
add esp, 0x48
push 0x100a9cd0
push 0x588505
push 0xe8
call fcn.100c9bf0
push 0x100a9cd0
push 0x588617
push 0xe8
call fcn.100c9bf0
push 0x100a9cd0
push 0x588661
push 0xe8
call fcn.100c9bf0
push 0x100a9cd0
push 0x58876e
push 0xe8
call fcn.100c9bf0
push 0x100a9cd0
push 0x5887ad
push 0xe8
call fcn.100c9bf0
push 0x100a9cd0
push 0x609d1e
push 0xe8
call fcn.100c9bf0
add esp, 0x48
push 0x100a9cd0
push 0x610691
push 0xe8
call fcn.100c9bf0
add esp, 0xc
call fcn.100b5e00
mov ecx, dword [0xe61e58]
mov eax, dword [0xe61e5c]
cmp ecx, 0x320
jne 0x10084d94
test eax, eax
jne 0x10084d94
mov eax, 0xb
jmp 0x10084daa
cmp ecx, 0x400
jne 0x10084da5
test eax, eax
mov eax, 0xc
je 0x10084daa
mov eax, 0xd
push 0x10130004
push 0
push 3
mov esi, dword [sym.imp.GDI32.dll_CreateFontA]
push 0
push 7
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push eax
mov dword [esp + 0x5c], eax
call esi
push 0x1013000c
push 0
push 3
push 0
push 7
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push dword [esp + 0x58]
mov dword [0x10142910], eax
call esi
push 0x10130014
push 0
push 3
push 0
push 7
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push dword [esp + 0x58]
mov dword [0x10142914], eax
call esi
mov ecx, 0x101ef533
mov dword [0x1014290c], eax
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10084e40
sub ecx, edx
je 0x10084ece
push ecx
xorps xmm0, xmm0
mov dword [esp + 0x84], 0
push 0x101ef533
lea ecx, [esp + 0x78]
movaps xmmword [esp + 0x78], xmm0
mov dword [esp + 0x8c], 0
call fcn.1000d190
cmp dword [esp + 0x84], 0xf
lea ecx, [esp + 0x70]
mov edx, dword [esp + 0x70]
mov eax, dword [esp + 0x80]
cmova ecx, edx
test eax, eax
je 0x10084eb4
add eax, ecx
mov dword [esp + 8], eax
mov eax, ecx
cmp ecx, dword [esp + 8]
jae 0x10084eb4
cmp byte [eax], 0x20
jne 0x10084ebb
inc eax
cmp eax, dword [esp + 8]
jb 0x10084ea8
mov ecx, 1
jmp 0x10084ed6
sub eax, ecx
mov ecx, 1
cmp eax, 0xffffffff
je 0x10084ed6
mov byte [esp + 0xf], 0
jmp 0x10084edb
mov edx, dword [esp + 0x70]
mov ecx, dword [esp + 0x18]
mov byte [esp + 0xf], 1
test cl, 1
je 0x10084f19
mov eax, dword [esp + 0x84]
cmp eax, 0xf
jbe 0x10084f19
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x10084f0f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10084f0f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100d84b0
add esp, 8
cmp byte [esp + 0xf], 0
je 0x10084f7a
push 0xe8
mov edx, 0x10034470
mov ecx, 0x78b0bc
call fcn.100c92d0
push 0xe9
mov edx, 0x10034410
mov ecx, 0x789767
call fcn.100c92d0
push 0xe9
mov edx, 0x10034430
mov ecx, 0x789a63
call fcn.100c92d0
push 0xe9
mov edx, 0x10034450
mov ecx, 0x789dac
call fcn.100c92d0
add esp, 0x10
mov byte [0x10142b04], 1
cmp dword [0x101ef6f8], 1
jne 0x10084faa
push ecx
mov edx, 5
mov ecx, 0x57fccf
call fcn.100c9340
push 0xe9
mov edx, 0x100574c0
mov ecx, 0x57fccf
call fcn.100c92d0
add esp, 8
cmp dword [0x101ef70c], 1
jne 0x10084fda
push ecx
mov edx, 5
mov ecx, 0x5842b1
call fcn.100c9340
push 0xe9
mov edx, 0x10057640
mov ecx, 0x5842b1
call fcn.100c92d0
add esp, 8
cmp dword [0x101ef720], 1
jne 0x1008500a
push ecx
mov edx, 5
mov ecx, 0x5852e4
call fcn.100c9340
push 0xe9
mov edx, 0x100577d0
mov ecx, 0x5852e4
call fcn.100c92d0
add esp, 8
cmp dword [0x101ef734], 1
jne 0x1008503a
push ecx
mov edx, 5
mov ecx, 0x584a4e
call fcn.100c9340
push 0xe9
mov edx, 0x10057960
mov ecx, 0x584a4e
call fcn.100c92d0
add esp, 8
cmp dword [0x101ef748], 1
jne 0x1008506a
push ecx
mov edx, 5
mov ecx, 0x584b82
call fcn.100c9340
push 0xe9
mov edx, 0x10057aa0
mov ecx, 0x584b82
call fcn.100c92d0
add esp, 8
cmp dword [0x101ef758], 1
jne 0x1008509a
push ecx
mov edx, 5
mov ecx, 0x582fe6
call fcn.100c9340
push 0xe9
mov edx, 0x10057bb0
mov ecx, 0x582fe6
call fcn.100c92d0
add esp, 8
push 0x10132b8c
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0xd
call esi
push 0x10132b94
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push 0xd
mov dword [0x102fdd60], eax
call esi
push 0x10132b9c
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0xf
mov dword [0x102fdd64], eax
call esi
push 0x10132ba4
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0x12
mov dword [0x102fdd68], eax
call esi
mov dword [0x102fdd6c], eax
call fcn.1005e640
xorps xmm0, xmm0
mov dword [esp + 0x40], 2
movaps xmmword [esp + 0x30], xmm0
lea ecx, [esp + 0x54]
mov eax, 0x475f
mov dword [esp + 0x44], 0xf
mov word [esp + 0x30], ax
lea eax, [esp + 0x30]
push eax
push dword [0x101a46d4]
mov byte [esp + 0x3a], 0
call fcn.1007b660
sub esp, 8
mov ecx, eax
call fcn.10080870
mov ecx, dword [esp + 0x6c]
cmp ecx, 0xf
jbe 0x100851ba
mov edx, dword [esp + 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100851b0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100851f7
push ecx
push edx
call fcn.100d84b0
add esp, 8
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0xf
mov byte [esp + 0x58], 0
cmp ecx, 0xf
jbe 0x10085207
mov edx, dword [esp + 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100851fd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100851fd
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100d84b0
add esp, 8
push str.Data__KGData__Lua__Configs__CustomItemPosition.lua
mov ecx, 0x101a46d0
call fcn.100b06a0
push 0x1012f46f
push str.StartLoadItemPosition
push 0x101a46d0
call fcn.100b0890
push 0x1007b9e0
push 0x5d0b94
push 0xe8
call fcn.100c9bf0
add esp, 0x18
mov dword [0x1018cbfc], 1
cmp dword [0x101ef7b4], 2
jne 0x10085259
call fcn.100556e0
cmp dword [0x102bc21c], 0
je 0x1008526e
call fcn.10034390
mov ecx, eax
call fcn.100bfaa0
push 0x10033b30
push 0x7d2b3d
push 0xe8
call fcn.100c9bf0
push 0x100339a0
push 0x841e49
push 0xe8
call fcn.100c9bf0
add esp, 0x18
cmp dword [0x101ef820], 1
jne 0x100852c5
push 0x10034400
push 0x78b0f0
push 0xe9
call fcn.100c9bf0
add esp, 0xc
mov eax, 0x787ba0
mov ecx, 0x100343f0
jmp 0x100852cf
mov eax, 0x78b0f0
mov ecx, 0x10033b00
push ecx
push eax
push 0xe9
call fcn.100c9bf0
add esp, 0xc
cmp dword [0x101ef7b4], 1
jne 0x1008533f
mov eax, dword [0x101ef864]
sub eax, 1
je 0x100852f6
sub eax, 1
jne 0x1008533f
push 0x100323e0
push 0x84bc0f
push 0xe8
mov dword [0x102bc1c8], 0
call fcn.100c9bf0
push 0x10032400
push 0x84bd1d
push 0xe8
call fcn.100c9bf0
push 0x100313a0
push 0x84bdb0
push 0xe9
call fcn.100c9bf0
add esp, 0x24
push 0x10033160
push 0x5bb0b0
push 0xe9
call fcn.100c9bf0
add esp, 0xc
mov dword [0x1018cbf4], 0
cmp dword [0x101ef7bc], 1
jne 0x10085380
push 0x100104f0
push 0x82b772
push 0xe8
call fcn.100c9bf0
add esp, 0xc
cmp dword [0x101ef7b8], 0
je 0x100853a0
push 0x1009c650
push 0x62f870
push 0xe9
call fcn.100c9bf0
add esp, 0xc
cmp dword [0x102bc21c], 0
je 0x100853c0
push 0x1009a500
push 0x82aba0
push 0xe9
call fcn.100c9bf0
add esp, 0xc
cmp dword [0x101ef7d0], 1
jne 0x10085411
lea eax, [esp + 8]
push eax
push 0x40
push 5
push 0x7f6834
call edi
mov eax, 0x7f6834
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [esp + 8]
push eax
push dword [esp + 0xc]
push 5
push 0x7f6834
call edi
push 0x10050c40
push 0x7f67b7
push 0xe8
call fcn.100c9bf0
add esp, 0xc
cmp dword [0x101ef804], 0
jne 0x100854a3
mov byte [0x102c2294], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x1004fb30
sub eax, 0x1388
mov byte [0x102c229c], 0
push 0x7d2bc0
push 0xe9
mov dword [0x102c2298], eax
call fcn.100c9bf0
push 0x10050e30
push 0x7d26b5
push 0xe9
call fcn.100c9bf0
push 0x10050e80
push 0x7d2751
push 0xe9
call fcn.100c9bf0
push 0x10050ed0
push 0x7d27fc
push 0xe9
call fcn.100c9bf0
push 0x10050f20
push 0x80b8e0
push 0xe9
call fcn.100c9bf0
add esp, 0x3c
cmp dword [0x101ef6f4], 1
jne 0x100855d1
push 0x1004ca00
push 0x5012d0
push 0xe9
call fcn.100c9bf0
push 0x1004ca80
push 0x80f250
push 0xe8
call fcn.100c9bf0
push 0x1004cbf0
push 0x7df740
push 0xe9
call fcn.100c9bf0
push 0x1004e770
push 0x7df34c
push 0xe8
call fcn.100c9bf0
push 0x1004e7a0
push 0x66424b
push 0xe8
call fcn.100c9bf0
push 0x1004cb00
push 0x833731
push 0xe8
call fcn.100c9bf0
add esp, 0x48
push 0x1004cc50
push 0x7df846
push 0xe8
call fcn.100c9bf0
push 0x1004ec00
push 0x7df83e
push 0xe8
call fcn.100c9bf0
push 0x1004e8b0
push 0x83469c
push 0xe8
call fcn.100c9bf0
push 0x10071250
push 0x420814
push 0xe8
call fcn.100c9bf0
push 0x1004b8f0
push 0x924c8b
push 0xe8
call fcn.100c9bf0
push 0x1004b010
push 0x7e5cb6
push 0xe8
call fcn.100c9bf0
add esp, 0x48
push 0x1004be70
push 0x7e5b70
push 0xe8
call fcn.100c9bf0
push 0x1004bbe0
push 0x7e348f
push 0xe8
call fcn.100c9bf0
add esp, 0x18
cmp dword [0x101ef858], 1
jne 0x10085636
lea eax, [esp + 8]
push eax
push 0x40
push 5
push 0x401f56
call edi
mov eax, 0x401f56
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [esp + 8]
push eax
push dword [esp + 0xc]
push 5
push 0x401f56
call edi
push 0x1000d860
push 0x401ef1
push 0xe8
call fcn.100c9bf0
push 0x1000d800
push 0x401fc4
push 0xe8
call fcn.100c9bf0
add esp, 0x18
cmp dword [0x101ef79c], 1
jne 0x100856b2
push ecx
mov edx, 7
mov ecx, 0x608cac
call fcn.100c9340
push 0xe9
mov edx, 0x1004f2f0
mov ecx, 0x608cac
call fcn.100c92d0
add esp, 4
mov edx, 7
mov ecx, 0x60954d
call fcn.100c9340
push 0xe9
mov edx, 0x1004f380
mov ecx, 0x60954d
call fcn.100c92d0
add esp, 4
mov edx, 7
mov ecx, 0x60f04c
call fcn.100c9340
push 0xe9
mov edx, 0x1004f410
mov ecx, 0x60f04c
call fcn.100c92d0
add esp, 8
cmp dword [0x101ef7a0], 1
jne 0x100856e6
push 0x10028ab0
push 0x61041c
push 0xe8
call fcn.100c9bf0
push 0x10028ab0
push 0x5666c1
push 0xe8
call fcn.100c9bf0
add esp, 0x18
cmp dword [0x101ef798], 1
jne 0x10085737
lea eax, [esp + 8]
push eax
push 0x40
push 5
push 0x502a95
call edi
mov eax, 0x502a95
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [esp + 8]
push eax
push dword [esp + 0xc]
push 5
push 0x502a95
call edi
push 0x10009ee0
push 0x502a95
push 0xe8
call fcn.100c9bf0
add esp, 0xc
cmp dword [0x101ef788], 1
jne 0x10085745
call fcn.1007ae60
cmp dword [0x101ef790], 1
jne 0x10085753
call fcn.1002ee80
cmp dword [0x101ef770], 1
jne 0x10085761
call fcn.1009d200
cmp dword [0x101ef774], 1
jne 0x10085886
push 0x1000b450
push 0x900de9
push 0xe8
call fcn.100c9bf0
push 0x1000a720
push 0x8c5bb5
push 0xe8
call fcn.100c9bf0
add esp, 0x14
mov edx, 0xa
mov ecx, 0x56fc5e
call fcn.100c9340
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x1000b330
mov dword [esp + 8], 0
sub eax, 0x56fc63
mov dword [esp + 0x11], eax
lea eax, [esp + 8]
push eax
push 0x40
push 5
push 0x56fc5e
call edi
test eax, eax
je 0x10085806
mov eax, dword [esp + 0x10]
mov ecx, 0x56fc5e
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0xc]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10085810
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
jmp 0x10085816
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
push ecx
mov edx, 0xa
mov ecx, 0x56fd1a
call fcn.100c9340
add esp, 4
mov byte [esp + 0x10], 0xe9
mov eax, 0x1000b3d0
mov dword [esp + 8], 0
sub eax, 0x56fd1f
mov dword [esp + 0x11], eax
lea eax, [esp + 8]
push eax
push 0x40
push 5
push 0x56fd1a
call edi
test eax, eax
je 0x10085884
mov eax, dword [esp + 0x10]
mov ecx, 0x56fd1a
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0xc]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10085886
call esi
cmp dword [0x101ef77c], 1
jne 0x100858b9
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
push eax
mov dword [esp + 0x24], edx
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
push 0x100c6460
push 0x4d70d4
push 0xe8
call fcn.100c9bf0
add esp, 0x14
call fcn.1003b2b0
mov esi, 2
mov dword [esp + 0x24], 0
xor edi, edi
mov dword [esp + 8], 1
mov dword [esp + 0x10], esi
nop dword [eax]
lea ecx, [esi + 1]
mov eax, 0xf0f0f0f1
mul ecx
mov eax, edi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + 0x101ef413]
xor al, byte [esi + 0x101ef3c6]
movzx esi, al
mov eax, 0xf0f0f0f1
mul dword [esp + 0x10]
mov eax, edi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov ecx, dword [esp + 8]
add dword [esp + 8], 4
mov al, byte [eax + 0x101ef412]
xor al, byte [ecx + 0x101ef3c6]
movzx eax, al
add si, ax
mov eax, 0xf0f0f0f1
mul ecx
mov eax, edi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + 0x101ef411]
xor al, byte [edi + 0x101ef3c6]
movzx eax, al
add si, ax
mov eax, 0xf0f0f0f1
mul edi
mov eax, edi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + 0x101ef410]
xor al, byte [edi + 0x101ef3c5]
add edi, 4
movzx eax, al
add si, ax
add word [esp + 0x24], si
mov esi, dword [esp + 0x10]
add esi, 4
mov dword [esp + 0x10], esi
cmp esi, 0x22
jb 0x100858e0
mov al, byte [esp + 0x24]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub al, 0x1e
mov byte [0x102bc289], al
mov eax, dword [esp + 0x24]
shr eax, 8
sub al, 0x31
mov byte [0x102bc288], al
mov eax, dword [0xd227b0]
mov dword [0x102c23a4], eax
mov eax, dword [0xd227f8]
mov dword [0x102c23a0], eax
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0xd227b0
call edi
lea eax, [esp + 8]
mov dword [0xd227b0], 0x10071ae0
push eax
push dword [esp + 0xc]
push 4
push 0xd227b0
call edi
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0xd227f8
call edi
lea eax, [esp + 8]
mov dword [0xd227f8], 0x10071c00
push eax
push dword [esp + 0xc]
push 4
push 0xd227f8
call edi
push 0x10078d90
push 0x633fcb
push 0xff
call fcn.100c9bf0
push 0x10079250
push 0x633fe3
push 0xff
call fcn.100c9bf0
push 0x10079630
push 0x57ac07
push 0xff
call fcn.100c9bf0
push 0x10079630
push 0x6083b9
push 0xff
call fcn.100c9bf0
push 0x100796f0
push 0x777ff2
push 0xff
call fcn.100c9bf0
push 0x100796f0
push 0x778003
push 0xff
call fcn.100c9bf0
add esp, 0x48
push 0x10079700
push 0x5f7c2f
push 0xe9
call fcn.100c9bf0
push 0x10079730
push 0x968137
push 0xe9
call fcn.100c9bf0
push 0x10079750
push 0x968157
push 0xe9
call fcn.100c9bf0
push 0x10078c40
push 0x57ad82
push 0xe9
call fcn.100c9bf0
push 0x10078c90
push 0x57adc8
push 0xe9
call fcn.100c9bf0
add esp, 0x3c
cmp byte [0x101ef90d], 1
jne 0x10085ba5
lea eax, [esp + 8]
push eax
push 0x40
push 7
push 0x54c2d5
call edi
mov eax, 0x54c2d5
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [esp + 8]
push eax
push dword [esp + 0xc]
push 7
push 0x54c2d5
call edi
push 0x10078960
push 0x54c2d5
push 0xe9
call fcn.100c9bf0
push 0x100787d0
push 0x4fc6c7
push 0xe8
call fcn.100c9bf0
push 0x100787d0
push 0x4fcc3e
push 0xe8
call fcn.100c9bf0
push 0x100787d0
push 0x54c21d
push 0xe8
call fcn.100c9bf0
add esp, 0x30
push 0x10079770
push 0x58e650
push 0xe9
call fcn.100c9bf0
push 0x100797c0
push 0x8386b5
push 0xe9
call fcn.100c9bf0
push 0x10079840
push 0x5c4025
push 0xe9
call fcn.100c9bf0
push 0x10079870
push 0x5f7c3b
push 0xe9
call fcn.100c9bf0
push 0x100798a0
push 0x64b701
push 0xe9
call fcn.100c9bf0
push 0x100798d0
push 0x8383a0
push 0xe9
call fcn.100c9bf0
add esp, 0x48
push 0x10079900
push 0x5f3f7e
push 0xe9
call fcn.100c9bf0
push 0x10079940
push 0x5f4a60
push 0xe9
call fcn.100c9bf0
add esp, 0x18
call fcn.100a4610
cmp dword [0x101ef644], 0
je 0x10085d17
push 0x100c5970
push 0x40b903
push 0xe9
call fcn.100c9bf0
push 0x100c59b0
push 0x4da416
push 0xe9
call fcn.100c9bf0
push 0x100c59d0
push 0x63a192
push 0xe9
call fcn.100c9bf0
push 0x100c5a10
push 0x7a89eb
push 0xe9
call fcn.100c9bf0
push fcn.100c58d0
push 0x40bc24
push 0xe8
call fcn.100c9bf0
push fcn.100c58d0
push 0x4d762c
push 0xe8
call fcn.100c9bf0
add esp, 0x48
push fcn.100c58d0
push 0x4ef622
push 0xe8
call fcn.100c9bf0
push fcn.100c58d0
push 0x63cd3a
push 0xe8
call fcn.100c9bf0
push fcn.100c51f0
push 0x80f7fe
push 0xe8
call fcn.100c9bf0
add esp, 0x24
call fcn.100c7de0
cmp dword [0x101ef78c], 1
jne 0x10085d64
push 0x100425f0
push 0x50d905
push 0xe8
call fcn.100c9bf0
push 0x10042760
push 0x5cd10f
push 0xe9
call fcn.100c9bf0
push 0x100427c0
push 0x5cefe7
push 0xe9
call fcn.100c9bf0
add esp, 0x24
push 0x100c5b70
push 0x4d13c2
push 0xe9
call fcn.100c9bf0
push 0x100c5d20
push 0x4d2782
push 0xe9
call fcn.100c9bf0
push 0x100c5df0
push 0x830c3a
push 0xe9
call fcn.100c9bf0
push 0x100c5a40
push 0x4da2f9
push 0xe8
call fcn.100c9bf0
mov esi, dword [sym.imp.USER32.dll_SetWindowsHookExA]
add esp, 0x30
cmp dword [0x102bc398], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
jne 0x10085de7
call eax
push eax
push dword [0x102bc388]
push 0x1003bf30
push 7
call esi
mov dword [0x102bc398], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x102bc39c], 0
jne 0x10085e07
call eax
push eax
push dword [0x102bc388]
push 0x1003d0e0
push 2
call esi
mov dword [0x102bc39c], eax
cmp byte [0x101ef90e], 1
jne 0x10085e3c
lea eax, [esp + 8]
push eax
push 0x40
push 4
push 0x4d0e17
call edi
lea eax, [esp + 8]
mov dword [0x4d0e17], 0x1003bea0
push eax
push dword [esp + 0xc]
push 4
push 0x4d0e17
call edi
push 0x1003be40
push 0x4d0e2f
push 0xe9
call fcn.100c9bf0
add esp, 0xc
call fcn.10078990
cmp dword [0x101ef908], 0
mov dword [0x102c52d4], 0
mov byte [0x102c52c0], 0
mov dword [0x102c52c8], 0xffffffff
mov dword [0x102c52d0], 0xffffffff
mov dword [0x102c52c4], 0xffffffff
je 0x10085ea7
push 0xe8
mov edx, 0x100c9ae0
mov ecx, 0x588511
call fcn.100c92d0
add esp, 4
mov ecx, 0x1018cbf0
call fcn.10073040
cmp dword [0x101ef818], 2
setne byte [0x10520cc0]
call fcn.1005ff10
call fcn.1009e180
call fcn.1000a6c0
mov eax, dword [0x101ef3a4]
test al, 1
je 0x10085f08
push 0x101ef3a5
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
jne 0x10085f03
push eax
push str.Start_Error
push str.Please_start_game_from_Launcher
push eax
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101ef3a4]
test al, 2
je 0x10085f52
push 0x101ef3e5
lea eax, [esp + 0x94]
push str.XTEAM_MAIN_10405__s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [esp + 0x90]
push eax
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
test eax, eax
jne 0x10085efb
lea eax, [esp + 0x90]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
cmp dword [0x101ef5fc], 0
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
je 0x10086065
push 0x104
lea eax, [esp + 0x624]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x620]
push 0x104
push eax
push 0
call esi
test eax, eax
je 0x10085efb
lea ecx, [esp + 0x620]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10085fa0
sub ecx, edx
test ecx, ecx
jle 0x10085fde
nop dword [eax]
cmp byte [esp + ecx + 0x620], 0x5c
je 0x10085fc1
dec ecx
test ecx, ecx
jg 0x10085fb0
jmp 0x10085fde
lea eax, [esp + 0x621]
add eax, ecx
push eax
push 0x104
push 0x10545100
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
add esp, 0xc
push 0x101ef473
push 0x10545100
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
add esp, 8
test eax, eax
jne 0x10085efb
lea ecx, [esp + 0x220]
call fcn.10008cb0
push ecx
lea eax, [esp + 0x1c]
push eax
push 0x101ef473
lea ecx, [esp + 0x22c]
call fcn.10008de0
test al, al
jne 0x1008603d
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
push 0x10
push 0x10136944
push 0x1013694c
push 0
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101ef5fc]
cmp eax, dword [esp + 0x18]
je 0x10086065
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
push 0x10
push 0x10136960
push str.Main.exe_CRC_error_
push 0
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp dword [0x101ef600], 0
je 0x10086132
lea ecx, [esp + 0x220]
call fcn.10008cb0
push ecx
lea eax, [esp + 0xc]
push eax
push 0x101ef493
lea ecx, [esp + 0x22c]
call fcn.10008de0
test al, al
jne 0x100860b6
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
push 0x10
push 0x1013697c
push str.Plugin_1_CRC_error_
push 0
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101ef600]
cmp eax, dword [esp + 8]
jne 0x10085efb
push 0x101ef493
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esp + 0x18], eax
test eax, eax
je 0x10085efb
push 0x104
lea ecx, [esp + 0x94]
push ecx
push eax
call esi
push ecx
lea eax, [esp + 0xc]
push eax
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x22c]
call fcn.10008de0
test al, al
je 0x10085efb
mov eax, dword [0x101ef600]
cmp eax, dword [esp + 8]
jne 0x10085efb
push 0x10136998
push dword [esp + 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10086132
call eax
cmp dword [0x101ef604], 0
je 0x100861ff
lea ecx, [esp + 0x220]
call fcn.10008cb0
push ecx
lea eax, [esp + 0xc]
push eax
push 0x101ef4b3
lea ecx, [esp + 0x22c]
call fcn.10008de0
test al, al
jne 0x10086183
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
push 0x10
push 0x101369a4
push str.Plugin_2_CRC_error_
push 0
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101ef604]
cmp eax, dword [esp + 8]
jne 0x10085efb
push 0x101ef4b3
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esp + 0x18], eax
test eax, eax
je 0x10085efb
push 0x104
lea ecx, [esp + 0x94]
push ecx
push eax
call esi
push ecx
lea eax, [esp + 0xc]
push eax
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x22c]
call fcn.10008de0
test al, al
je 0x10085efb
mov eax, dword [0x101ef604]
cmp eax, dword [esp + 8]
jne 0x10085efb
push 0x101369c0
push dword [esp + 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100861ff
call eax
cmp dword [0x101ef608], 0
je 0x100862cc
lea ecx, [esp + 0x220]
call fcn.10008cb0
push ecx
lea eax, [esp + 0xc]
push eax
push 0x101ef4d3
lea ecx, [esp + 0x22c]
call fcn.10008de0
test al, al
jne 0x10086250
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
push 0x10
push 0x101369cc
push str.Plugin_3_CRC_error_
push 0
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101ef608]
cmp eax, dword [esp + 8]
jne 0x10085efb
push 0x101ef4d3
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esp + 0x18], eax
test eax, eax
je 0x10085efb
push 0x104
lea ecx, [esp + 0x94]
push ecx
push eax
call esi
push ecx
lea eax, [esp + 0xc]
push eax
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x22c]
call fcn.10008de0
test al, al
je 0x10085efb
mov eax, dword [0x101ef608]
cmp eax, dword [esp + 8]
jne 0x10085efb
push 0x101369e8
push dword [esp + 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100862cc
call eax
cmp dword [0x101ef60c], 0
je 0x10086399
lea ecx, [esp + 0x220]
call fcn.10008cb0
push ecx
lea eax, [esp + 0xc]
push eax
push 0x101ef4f3
lea ecx, [esp + 0x22c]
call fcn.10008de0
test al, al
jne 0x1008631d
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
push 0x10
push 0x101369f4
push str.Plugin_4_CRC_error_
push 0
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101ef60c]
cmp eax, dword [esp + 8]
jne 0x10085efb
push 0x101ef4f3
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esp + 0x18], eax
test eax, eax
je 0x10085efb
push 0x104
lea ecx, [esp + 0x94]
push ecx
push eax
call esi
push ecx
lea eax, [esp + 0xc]
push eax
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x22c]
call fcn.10008de0
test al, al
je 0x10085efb
mov eax, dword [0x101ef60c]
cmp eax, dword [esp + 8]
jne 0x10085efb
push 0x10136a10
push dword [esp + 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10086399
call eax
cmp dword [0x101ef610], 0
je 0x10086466
lea ecx, [esp + 0x220]
call fcn.10008cb0
push ecx
lea eax, [esp + 0xc]
push eax
push 0x101ef513
lea ecx, [esp + 0x22c]
call fcn.10008de0
test al, al
jne 0x100863ea
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
push 0x10
push 0x10136a1c
push str.Plugin_5_CRC_error_
push 0
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101ef610]
cmp eax, dword [esp + 8]
jne 0x10085efb
push 0x101ef513
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esp + 0x18], eax
test eax, eax
je 0x10085efb
push 0x104
lea ecx, [esp + 0x94]
push ecx
push eax
call esi
push ecx
lea eax, [esp + 0xc]
push eax
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x22c]
call fcn.10008de0
test al, al
je 0x10085efb
mov eax, dword [0x101ef610]
cmp eax, dword [esp + 8]
jne 0x10085efb
push 0x10136a38
push dword [esp + 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10086466
call eax
cmp dword [0x101ef614], 0
je 0x10086533
lea ecx, [esp + 0x220]
call fcn.10008cb0
push ecx
lea eax, [esp + 0xc]
push eax
push 0x101ef533
lea ecx, [esp + 0x22c]
call fcn.10008de0
test al, al
jne 0x100864b7
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
push 0x10
push 0x10136a44
push str.Plugin_Camera_CRC_error_
push 0
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101ef614]
cmp eax, dword [esp + 8]
jne 0x10085efb
push 0x101ef533
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esp + 0x18], eax
test eax, eax
je 0x10085efb
push 0x104
lea ecx, [esp + 0x94]
push ecx
push eax
call esi
push ecx
lea eax, [esp + 0xc]
push eax
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x22c]
call fcn.10008de0
test al, al
je 0x10085efb
mov eax, dword [0x101ef614]
cmp eax, dword [esp + 8]
jne 0x10085efb
push 0x10136a68
push dword [esp + 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10086533
call eax
cmp dword [0x101ef618], 0
je 0x10086600
lea ecx, [esp + 0x220]
call fcn.10008cb0
push ecx
lea eax, [esp + 0xc]
push eax
push 0x101ef553
lea ecx, [esp + 0x22c]
call fcn.10008de0
test al, al
jne 0x10086584
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
push 0x10
push str.Error
push str.Plugin_HackDLL_CRC_error_
push 0
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101ef618]
cmp eax, dword [esp + 8]
jne 0x10085efb
push 0x101ef553
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esp + 0x18], eax
test eax, eax
je 0x10085efb
push 0x104
lea ecx, [esp + 0x94]
push ecx
push eax
call esi
push ecx
lea eax, [esp + 0xc]
push eax
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x22c]
call fcn.10008de0
test al, al
je 0x10085efb
mov eax, dword [0x101ef618]
cmp eax, dword [esp + 8]
jne 0x10085efb
push 0x10136a98
push dword [esp + 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10086600
call eax
call fcn.1000df70
call fcn.100a2fe9
mov eax, 0x100a3530
mov byte [esp + 0x10], 0xe8
sub eax, 0x836486
mov dword [esp + 8], 0
mov dword [esp + 0x11], eax
lea eax, [esp + 8]
push eax
push 0x40
push 5
push 0x836481
call edi
test eax, eax
je 0x10086665
mov eax, dword [esp + 0x10]
mov ecx, 0x836481
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0xc]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1008666f
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
jmp 0x10086675
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, 0x100a34a0
mov byte [esp + 0x10], 0xe8
sub eax, 0x7dd309
mov dword [esp + 8], 0
mov dword [esp + 0x11], eax
lea eax, [esp + 8]
push eax
push 0x40
push 5
push 0x7dd304
call edi
test eax, eax
je 0x100866d0
mov eax, dword [esp + 0x10]
mov ecx, 0x7dd304
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0xc]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100866d2
call esi
mov eax, 0x100a34a0
mov byte [esp + 0x10], 0xe8
sub eax, 0x833b0d
mov dword [esp + 8], 0
mov dword [esp + 0x11], eax
lea eax, [esp + 8]
push eax
push 0x40
push 5
push 0x833b08
call edi
test eax, eax
je 0x1008672d
mov eax, dword [esp + 0x10]
mov ecx, 0x833b08
mov dword [ecx], eax
mov al, byte [esp + 0x14]
mov byte [ecx + 4], al
lea eax, [esp + 0x18]
push eax
push dword [esp + 0xc]
mov dword [esp + 0x20], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1008672f
call esi
push 0x10043610
push 0x56f476
push 0xe8
call fcn.100c9bf0
push 0x10043610
push 0x5ebbe6
push 0xe8
call fcn.100c9bf0
push 0x4f9238
push 0x4f921d
push 0xe9
call fcn.100c9bf0
push 0x63f058
push 0x63f040
push 0xe9
call fcn.100c9bf0
push 0x10008fc0
push 0x4f131e
push 0xe8
call fcn.100c9bf0
add esp, 0x3c
cmp dword [0x101ef5f8], 1
jne 0x100867db
mov edx, 0x101ef578
mov ecx, 0x954149
call fcn.100c9b30
mov edx, 0x101ef598
mov ecx, 0x954116
call fcn.100c9b30
mov edx, 0x101ef5b8
mov ecx, 0x9540e3
call fcn.100c9b30
mov edx, 0x101ef5d8
mov ecx, 0x9540ad
call fcn.100c9b30
cmp dword [0x101ef690], 1
jne 0x10086871
mov eax, 0x10194cb4
nop dword [eax]
mov dword [eax], 0xffffffff
add eax, 0x20
cmp eax, 0x101a46b4
jl 0x100867f0
push 0x1007b340
push 0x7e44d3
push 0xff
mov dword [0x101a46b4], 0
mov dword [0x101a46bc], 0
mov dword [0x101a46b8], 0
call fcn.100c9bf0
push 0x1007b4a0
push 0x7e452f
push 0xff
call fcn.100c9bf0
push 0x1007b600
push 0x7e4497
push 0xe8
call fcn.100c9bf0
push 0x1007b600
push 0x7e44ec
push 0xe8
call fcn.100c9bf0
add esp, 0x30
call fcn.100635c0
call fcn.100ac900
call fcn.100a9e70
cmp dword [0x101ef7dc], 1
jne 0x1008692f
push 0x1000d260
push 0x57d278
push 0xe9
call fcn.100c9bf0
push 0x1000d290
push 0x74cd50
push 0xe9
call fcn.100c9bf0
push 0x1000d2c0
push 0x771328
push 0xe9
call fcn.100c9bf0
add esp, 0x24
push 0
push 0
push 0
push 0x100834a0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
pop edi
pop esi
mov ecx, dword [esp + 0x724]
xor ecx, esp
call fcn.100d84a2
mov esp, ebp
pop ebp
ret
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x10
push 0x10134764
push str.EffectGame.info_no_funciona_o_es_invalida_
jmp 0x1008691d
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x10
push 0x1013470c
push str.ServerGame.info_no_funciona_o_es_invalida_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x102ea244
call fcn.1000cfa0
mov ecx, dword [esp + 0x72c]
pop edi
pop esi
xor ecx, esp
call fcn.100d84a2
mov esp, ebp
pop ebp
ret