Function at 0x1005b590
Capabilities:
Allocate or change rwx memory
Create thread
Encode data using xor
Execute shellcode via indirect call
Get file size
Link many functions at runtime
Read file on windows
Spawn thread to rwx shellcode
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1011a7ed
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x450
mov eax, dword [0x10139040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp byte [0x1014e33d], 0
jne 0x1005f72f
push 0
push 0x20
push 3
push 0
push 1
push closesocket
push str.Data__Settings__KnoX.emu
mov byte [0x1014e33d], 1
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x1005f72f
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, 0x548
jne 0x1005f728
push 0
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0
push eax
push 0x548
push 0x1014998c
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1005f728
xor ecx, ecx
mov eax, ecx
shr eax, 8
xor al, 0xe4
add al, byte [ecx + 0x1014998c]
xor al, cl
xor al, 0x9d
mov byte [ecx + 0x1014998c], al
inc ecx
cmp ecx, 0x548
jb 0x1005b646
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x10149c54], 0
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
je 0x1005b6d5
lea ecx, [ebp - 0x428]
call fcn.10006520
push ecx
lea eax, [ebp - 0x1c]
push eax
push 0x101499fe
lea ecx, [ebp - 0x428]
call fcn.10006650
test al, al
je 0x1005cb9f
mov eax, dword [0x10149c54]
cmp eax, dword [ebp - 0x1c]
jne 0x1005cb9f
push 0x101499fe
call esi
test eax, eax
je 0x1005cb9f
push 0x10149a1e
push eax
call edi
test eax, eax
je 0x1005b6d5
call eax
cmp dword [0x10149c5c], 0
je 0x1005b731
lea ecx, [ebp - 0x428]
call fcn.10006520
push ecx
lea eax, [ebp - 0x1c]
push eax
push 0x10149b3e
lea ecx, [ebp - 0x428]
call fcn.10006650
test al, al
je 0x1005cb9f
mov eax, dword [0x10149c5c]
cmp eax, dword [ebp - 0x1c]
jne 0x1005cb9f
push 0x10149b3e
call esi
test eax, eax
je 0x1005cb9f
push 0x10149b5e
push eax
call edi
test eax, eax
je 0x1005b731
call eax
cmp dword [0x10149c60], 0
je 0x1005b78d
lea ecx, [ebp - 0x428]
call fcn.10006520
push ecx
lea eax, [ebp - 0x1c]
push eax
push 0x10149b7e
lea ecx, [ebp - 0x428]
call fcn.10006650
test al, al
je 0x1005cb9f
mov eax, dword [0x10149c60]
cmp eax, dword [ebp - 0x1c]
jne 0x1005cb9f
push 0x10149b7e
call esi
test eax, eax
je 0x1005cb9f
push 0x10149b9e
push eax
call edi
test eax, eax
je 0x1005b78d
call eax
cmp dword [0x10149c64], 0
je 0x1005b7e9
lea ecx, [ebp - 0x428]
call fcn.10006520
push ecx
lea eax, [ebp - 0x1c]
push eax
push 0x10149bbe
lea ecx, [ebp - 0x428]
call fcn.10006650
test al, al
je 0x1005cb9f
mov eax, dword [0x10149c64]
cmp eax, dword [ebp - 0x1c]
jne 0x1005cb9f
push 0x10149bbe
call esi
test eax, eax
je 0x1005cb9f
push 0x10149bde
push eax
call edi
test eax, eax
je 0x1005b7e9
call eax
cmp dword [0x10149c68], 0
je 0x1005b845
lea ecx, [ebp - 0x428]
call fcn.10006520
push ecx
lea eax, [ebp - 0x1c]
push eax
push 0x10149bfe
lea ecx, [ebp - 0x428]
call fcn.10006650
test al, al
je 0x1005cb9f
mov eax, dword [0x10149c68]
cmp eax, dword [ebp - 0x1c]
jne 0x1005cb9f
push 0x10149bfe
call esi
test eax, eax
je 0x1005cb9f
push 0x10149c1e
push eax
call edi
test eax, eax
je 0x1005b845
call eax
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x82ac07
call edi
mov eax, 0x82ac07
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x82ac07
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x82b03d
call edi
mov eax, 0x82b03d
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x82b03d
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x82b0a7
call edi
mov eax, 0x82b0a7
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x82b0a7
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x82b18b
call edi
mov eax, 0x82b18b
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x82b18b
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x82b1fa
call edi
mov eax, 0x82b1fa
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x82b1fa
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x82b21b
call edi
mov eax, 0x82b21b
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x82b21b
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x82b2cb
call edi
mov eax, 0x82b2cb
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x82b2cb
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x82b339
call edi
mov eax, 0x82b339
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x82b339
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x82b3b7
call edi
mov eax, 0x82b3b7
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x82b3b7
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x82b3ca
call edi
mov eax, 0x82b3ca
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x82b3ca
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x82b772
call edi
mov eax, 0x82b772
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x82b772
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0xe61144
call edi
lea eax, [ebp - 0x18]
mov byte [0xe61144], 0xa0
push eax
push dword [ebp - 0x18]
push 1
push 0xe61144
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x4d1e69
call edi
lea eax, [ebp - 0x18]
mov byte [0x4d1e69], 0xeb
push eax
push dword [ebp - 0x18]
push 1
push 0x4d1e69
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x4d228d
call edi
lea eax, [ebp - 0x18]
mov byte [0x4d228d], 0xe9
push eax
push dword [ebp - 0x18]
push 1
push 0x4d228d
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x4d228e
call edi
lea eax, [ebp - 0x18]
mov byte [0x4d228e], 0x8b
push eax
push dword [ebp - 0x18]
push 1
push 0x4d228e
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x4d228f
call edi
lea eax, [ebp - 0x18]
mov byte [0x4d228f], 0
push eax
push dword [ebp - 0x18]
push 1
push 0x4d228f
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x4d2290
call edi
lea eax, [ebp - 0x18]
mov byte [0x4d2290], 0
push eax
push dword [ebp - 0x18]
push 1
push 0x4d2290
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x4d2291
call edi
lea eax, [ebp - 0x18]
mov byte [0x4d2291], 0
push eax
push dword [ebp - 0x18]
push 1
push 0x4d2291
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x4d559c
call edi
lea eax, [ebp - 0x18]
mov byte [0x4d559c], 0xeb
push eax
push dword [ebp - 0x18]
push 1
push 0x4d559c
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x633f7a
call edi
lea eax, [ebp - 0x18]
mov byte [0x633f7a], 0xeb
push eax
push dword [ebp - 0x18]
push 1
push 0x633f7a
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x634403
call edi
lea eax, [ebp - 0x18]
mov byte [0x634403], 0xeb
push eax
push dword [ebp - 0x18]
push 1
push 0x634403
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x63e6c4
call edi
lea eax, [ebp - 0x18]
mov byte [0x63e6c4], 0xeb
push eax
push dword [ebp - 0x18]
push 1
push 0x63e6c4
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x4d2246
call edi
lea eax, [ebp - 0x18]
mov byte [0x4d2246], 0xeb
push eax
push dword [ebp - 0x18]
push 1
push 0x4d2246
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x501163
call edi
lea eax, [ebp - 0x18]
mov byte [0x501163], 0xeb
push eax
push dword [ebp - 0x18]
push 1
push 0x501163
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x40af0a
call edi
lea eax, [ebp - 0x18]
mov byte [0x40af0a], 0
push eax
push dword [ebp - 0x18]
push 1
push 0x40af0a
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x40b4bc
call edi
lea eax, [ebp - 0x18]
mov byte [0x40b4bc], 0x50
push eax
push dword [ebp - 0x18]
push 1
push 0x40b4bc
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x40b4c5
call edi
lea eax, [ebp - 0x18]
mov byte [0x40b4c5], 0x50
push eax
push dword [ebp - 0x18]
push 1
push 0x40b4c5
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x40b4cf
call edi
lea eax, [ebp - 0x18]
mov byte [0x40b4cf], 0x18
push eax
push dword [ebp - 0x18]
push 1
push 0x40b4cf
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x40af0a
call edi
lea eax, [ebp - 0x18]
mov byte [0x40af0a], 0
push eax
push dword [ebp - 0x18]
push 1
push 0x40af0a
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x40afd5
call edi
lea eax, [ebp - 0x18]
mov byte [0x40afd5], 0xeb
push eax
push dword [ebp - 0x18]
push 1
push 0x40afd5
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x777fd6
call edi
lea eax, [ebp - 0x18]
mov byte [0x777fd6], 0x70
push eax
push dword [ebp - 0x18]
push 1
push 0x777fd6
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x777fd7
call edi
lea eax, [ebp - 0x18]
mov byte [0x777fd7], 0x17
push eax
push dword [ebp - 0x18]
push 1
push 0x777fd7
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x4ebec7
call edi
lea eax, [ebp - 0x18]
mov byte [0x4ebec7], 0x3c
push eax
push dword [ebp - 0x18]
push 1
push 0x4ebec7
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x5c4004
call edi
lea eax, [ebp - 0x18]
mov byte [0x5c4004], 0x3c
push eax
push dword [ebp - 0x18]
push 1
push 0x5c4004
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x7e40bb
call edi
lea eax, [ebp - 0x18]
mov byte [0x7e40bb], 0x3c
push eax
push dword [ebp - 0x18]
push 1
push 0x7e40bb
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x81b546
call edi
mov byte [0x81b546], 0x3c
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 1
push 0x81b546
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x81b58d
call edi
lea eax, [ebp - 0x18]
mov byte [0x81b58d], 0x3c
push eax
push dword [ebp - 0x18]
push 1
push 0x81b58d
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x86e284
call edi
lea eax, [ebp - 0x18]
mov byte [0x86e284], 0x3c
push eax
push dword [ebp - 0x18]
push 1
push 0x86e284
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x86e44c
call edi
lea eax, [ebp - 0x18]
mov byte [0x86e44c], 0x3c
push eax
push dword [ebp - 0x18]
push 1
push 0x86e44c
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x86e573
call edi
lea eax, [ebp - 0x18]
mov byte [0x86e573], 0x3c
push eax
push dword [ebp - 0x18]
push 1
push 0x86e573
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x86f8fc
call edi
lea eax, [ebp - 0x18]
mov byte [0x86f8fc], 0x3c
push eax
push dword [ebp - 0x18]
push 1
push 0x86f8fc
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x7da373
call edi
lea eax, [ebp - 0x18]
mov byte [0x7da373], 0xb7
push eax
push dword [ebp - 0x18]
push 1
push 0x7da373
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x7e1c44
call edi
lea eax, [ebp - 0x18]
mov byte [0x7e1c44], 0xb7
push eax
push dword [ebp - 0x18]
push 1
push 0x7e1c44
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x52101b
call edi
lea eax, [ebp - 0x18]
mov byte [0x52101b], 2
push eax
push dword [ebp - 0x18]
push 1
push 0x52101b
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x52100d
call edi
lea eax, [ebp - 0x18]
mov byte [0x52100d], 0xeb
push eax
push dword [ebp - 0x18]
push 1
push 0x52100d
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x9543c4
call edi
lea eax, [ebp - 0x18]
mov byte [0x9543c4], 0
push eax
push dword [ebp - 0x18]
push 1
push 0x9543c4
call edi
cmp dword [0x10149cfc], 0
mov ecx, 0xeb
mov eax, 0x75
cmove eax, ecx
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x64cbd1
call edi
mov eax, dword [ebp - 0x1c]
mov byte [0x64cbd1], al
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 1
push 0x64cbd1
call edi
mov al, byte [0x10149d00]
mov byte [ebp - 0x429], al
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x64cbd0
call edi
mov al, byte [ebp - 0x429]
mov byte [0x64cbd0], al
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 1
push 0x64cbd0
call edi
mov al, byte [0x10149d00]
mov byte [ebp - 0x429], al
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x95ceef
call edi
mov al, byte [ebp - 0x429]
mov byte [0x95ceef], al
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 1
push 0x95ceef
call edi
mov al, byte [0x10149d00]
mov byte [ebp - 0x429], al
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x95cf14
call edi
mov al, byte [ebp - 0x429]
mov byte [0x95cf14], al
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 1
push 0x95cf14
call edi
mov al, byte [0x10149c3e]
inc al
mov byte [ebp - 0x429], al
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0xe61f68
call edi
mov al, byte [ebp - 0x429]
mov byte [0xe61f68], al
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 1
push 0xe61f68
call edi
mov al, byte [0x10149c40]
add al, 2
mov byte [ebp - 0x429], al
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0xe61f69
call edi
mov al, byte [ebp - 0x429]
mov byte [0xe61f69], al
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 1
push 0xe61f69
call edi
mov al, byte [0x10149c41]
add al, 3
mov byte [ebp - 0x429], al
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0xe61f6a
call edi
mov al, byte [ebp - 0x429]
mov byte [0xe61f6a], al
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 1
push 0xe61f6a
call edi
mov al, byte [0x10149c43]
add al, 4
mov byte [ebp - 0x429], al
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0xe61f6b
call edi
mov al, byte [ebp - 0x429]
mov byte [0xe61f6b], al
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 1
push 0xe61f6b
call edi
mov al, byte [0x10149c44]
add al, 5
mov byte [ebp - 0x429], al
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0xe61f6c
call edi
mov al, byte [ebp - 0x429]
mov byte [0xe61f6c], al
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 1
push 0xe61f6c
call edi
movzx esi, word [0x10149c46]
lea eax, [ebp - 0x18]
push eax
push 0x40
push 2
push 0xe609e4
call edi
lea eax, [ebp - 0x18]
mov word [0xe609e4], si
push eax
push dword [ebp - 0x18]
push 2
push 0xe609e4
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4d0e09
call edi
lea eax, [ebp - 0x18]
mov dword [0x4d0e09], 0x10149a3e
push eax
push dword [ebp - 0x18]
push 4
push 0x4d0e09
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4d9f55
call edi
lea eax, [ebp - 0x18]
mov dword [0x4d9f55], 0x101499bd
push eax
push dword [ebp - 0x18]
push 4
push 0x4d9f55
call edi
cmp dword [0x10149d48], 1
jne 0x1005c453
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x958d4f
call edi
lea eax, [ebp - 0x18]
mov byte [0x958d4f], 0xa8
push eax
push dword [ebp - 0x18]
push 1
push 0x958d4f
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x958d50
call edi
lea eax, [ebp - 0x18]
mov byte [0x958d50], 3
push eax
push dword [ebp - 0x18]
push 1
push 0x958d50
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x958d88
call edi
lea eax, [ebp - 0x18]
mov byte [0x958d88], 0xa8
push eax
push dword [ebp - 0x18]
push 1
push 0x958d88
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x958d89
call edi
lea eax, [ebp - 0x18]
mov byte [0x958d89], 3
push eax
push dword [ebp - 0x18]
push 1
push 0x958d89
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x958dbe
call edi
lea eax, [ebp - 0x18]
mov byte [0x958dbe], 0xa8
push eax
push dword [ebp - 0x18]
push 1
push 0x958dbe
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x958dbf
call edi
lea eax, [ebp - 0x18]
mov byte [0x958dbf], 3
push eax
push dword [ebp - 0x18]
push 1
push 0x958dbf
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x958dda
call edi
lea eax, [ebp - 0x18]
mov byte [0x958dda], 0xa8
push eax
push dword [ebp - 0x18]
push 1
push 0x958dda
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x958ddb
call edi
lea eax, [ebp - 0x18]
mov byte [0x958ddb], 3
push eax
push dword [ebp - 0x18]
push 1
push 0x958ddb
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x4215a7
call edi
lea eax, [ebp - 0x18]
mov byte [0x4215a7], 0xeb
push eax
push dword [ebp - 0x18]
push 1
push 0x4215a7
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x507afd
call edi
lea eax, [ebp - 0x18]
mov byte [0x507afd], 0xeb
push eax
push dword [ebp - 0x18]
push 1
push 0x507afd
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x507aeb
call edi
lea eax, [ebp - 0x18]
mov byte [0x507aeb], 0x72
push eax
push dword [ebp - 0x18]
push 1
push 0x507aeb
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x4d6b49
call edi
lea eax, [ebp - 0x18]
mov byte [0x4d6b49], 0xeb
push eax
push dword [ebp - 0x18]
push 1
push 0x4d6b49
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x4d6a84
call edi
lea eax, [ebp - 0x18]
mov byte [0x4d6a84], 0xe9
push eax
push dword [ebp - 0x18]
push 1
push 0x4d6a84
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x4d6a85
call edi
lea eax, [ebp - 0x18]
mov byte [0x4d6a85], 0x8d
push eax
push dword [ebp - 0x18]
push 1
push 0x4d6a85
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x4d6a86
call edi
lea eax, [ebp - 0x18]
mov byte [0x4d6a86], 0
push eax
push dword [ebp - 0x18]
push 1
push 0x4d6a86
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x4d6a89
call edi
lea eax, [ebp - 0x18]
mov byte [0x4d6a89], 0x90
push eax
push dword [ebp - 0x18]
push 1
push 0x4d6a89
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x14
push 0x63e908
call edi
mov eax, 0x63e908
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x14
push 0x63e908
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x20
push 0xe611b2
call edi
movups xmm0, xmmword [0x1014999d]
mov eax, 0xe611b2
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x101499ad]
movups xmmword [eax + 0x10], xmm0
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x20
push 0xe611b2
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x11
push 0xe61f70
call edi
movups xmm0, xmmword [0x1014998c]
mov ecx, 0xe61f70
movups xmmword [ecx], xmm0
mov al, byte [0x1014999c]
mov byte [ecx + 0x10], al
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x11
push ecx
call edi
push fcn.10067c00
push 0x65fd79
push 0xff
call fcn.1006c3c0
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x95d010
call edi
lea eax, [ebp - 0x18]
mov byte [0x95d010], 0xeb
push eax
push dword [ebp - 0x18]
push 1
push 0x95d010
call edi
push 0x95dfd3
push 0x95dfbe
push 0xe9
call fcn.1006c3c0
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
push 0x40
push 6
push 0x4da290
call edi
mov eax, 0x4da290
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 6
push 0x4da290
call edi
push dword [sym.imp.WINMM.dll_timeGetTime]
push 0x4da290
push 0xe8
call fcn.1006c3c0
add esp, 0xc
cmp dword [0x10149c7c], 1
jne 0x1005c5bf
push 0x1002cfa0
push 0x4da3a1
push 0xe9
call fcn.1006c3c0
add esp, 0xc
cmp dword [0x10149c78], 1
jne 0x1005c7e2
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x5b89c6
call edi
lea eax, [ebp - 0x18]
mov byte [0x5b89c6], 0
push eax
push dword [ebp - 0x18]
push 1
push 0x5b89c6
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x5b89cc
call edi
lea eax, [ebp - 0x18]
mov byte [0x5b89cc], 0
push eax
push dword [ebp - 0x18]
push 1
push 0x5b89cc
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x5b89d2
call edi
lea eax, [ebp - 0x18]
mov byte [0x5b89d2], 0
push eax
push dword [ebp - 0x18]
push 1
push 0x5b89d2
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x5b89d8
call edi
lea eax, [ebp - 0x18]
mov byte [0x5b89d8], 0
push eax
push dword [ebp - 0x18]
push 1
push 0x5b89d8
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x5b89de
call edi
lea eax, [ebp - 0x18]
mov byte [0x5b89de], 0
push eax
push dword [ebp - 0x18]
push 1
push 0x5b89de
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x5b89e4
call edi
lea eax, [ebp - 0x18]
mov byte [0x5b89e4], 0
push eax
push dword [ebp - 0x18]
push 1
push 0x5b89e4
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 2
push 0x5b89ea
call edi
xor eax, eax
mov word [0x5b89ea], ax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 2
push 0x5b89ea
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x5c6316
call edi
lea eax, [ebp - 0x18]
mov byte [0x5c6316], 0
push eax
push dword [ebp - 0x18]
push 1
push 0x5c6316
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x5c6329
call edi
lea eax, [ebp - 0x18]
mov byte [0x5c6329], 0
push eax
push dword [ebp - 0x18]
push 1
push 0x5c6329
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x5c633c
call edi
lea eax, [ebp - 0x18]
mov byte [0x5c633c], 0
push eax
push dword [ebp - 0x18]
push 1
push 0x5c633c
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x5c634f
call edi
lea eax, [ebp - 0x18]
mov byte [0x5c634f], 0
push eax
push dword [ebp - 0x18]
push 1
push 0x5c634f
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x5c6362
call edi
lea eax, [ebp - 0x18]
mov byte [0x5c6362], 0
push eax
push dword [ebp - 0x18]
push 1
push 0x5c6362
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x5c6375
call edi
lea eax, [ebp - 0x18]
mov byte [0x5c6375], 0
push eax
push dword [ebp - 0x18]
push 1
push 0x5c6375
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 2
push 0x5c6388
call edi
xor eax, eax
mov word [0x5c6388], ax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 2
push 0x5c6388
call edi
push 0x1002d080
push 0x5b96e8
push 0xe8
call fcn.1006c3c0
add esp, 0xc
call fcn.1001eeb0
mov edx, 0xc
mov ecx, 0x4d9d39
call fcn.1006c480
mov edx, 7
mov ecx, 0x4d9d45
call fcn.1006c480
mov edx, 0xf
mov ecx, 0x4d9efc
call fcn.1006c480
mov edx, 8
mov ecx, 0x4dac5c
call fcn.1006c480
mov edx, 5
mov ecx, 0x5451f7
call fcn.1006c480
mov edx, 8
mov ecx, 0x545230
call fcn.1006c480
mov edx, 8
mov ecx, 0x5a52e9
call fcn.1006c480
push 0x1014f338
mov edx, 0x6a
call fcn.1006c520
push 0x1014f248
mov edx, 0x6b
call fcn.1006c520
push 0x1014f428
mov edx, 0x6c
call fcn.1006c520
add esp, 0xc
mov ecx, 0x1014002c
push str.Data__Settings__Lua__Configs__CustomMessage.lua
call fcn.10041570
push 0
push 0x1001f1a0
push dword [0x10140030]
call fcn.1008b1e0
push str.SetEngMsg
push 0xffffd8ee
push dword [0x10140030]
call fcn.1008b7e0
push 0x1012b3c0
push str.LoadEngMessage
push 0x1014002c
call fcn.10041730
push 0
push 0x1001f230
push dword [0x10140030]
call fcn.1008b1e0
push str.SetPorMsg
push 0xffffd8ee
push dword [0x10140030]
call fcn.1008b7e0
push 0x1012b3c0
push str.LoadPorMessage
push 0x1014002c
call fcn.10041730
add esp, 0x48
push 0
push 0x1001f2c0
push dword [0x10140030]
call fcn.1008b1e0
push str.SetSpnMsg
push 0xffffd8ee
push dword [0x10140030]
call fcn.1008b7e0
push 0x1012b3c0
push str.LoadSpnMessage
push 0x1014002c
call fcn.10041730
add esp, 0x24
push 0
push 0x20
push 3
push 0
push 1
push closesocket
push str.Data__Settings__KnoX.Jewel
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x1005f72f
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, 0xac8
jne 0x1005f71e
push 0
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0
push eax
push 0xac8
push 0x10149ed4
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1005f71e
xor ecx, ecx
nop
mov eax, ecx
shr eax, 8
xor al, 0xfc
add al, byte [ecx + 0x10149ed4]
xor al, cl
xor al, 0xca
mov byte [ecx + 0x10149ed4], al
inc ecx
cmp ecx, 0xac8
jb 0x1005c9c0
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call eax
cmp dword [0x10149c4c], 0
je 0x1005ca17
mov dword [0x103082e8], 0
mov dword [0x103082ec], 0
mov byte [0x103082f0], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [0x103082f4], eax
mov eax, 0x10149ed4
nop dword [eax]
mov ecx, 0x2e
lea edi, [ebp - 0xe0]
mov esi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xe0]
cmp ecx, 0xe
ja 0x1005ca4f
imul edi, ecx, 0xb8
mov esi, eax
mov ecx, 0x2e
add edi, 0x1013a71c
rep movsd dword es:[edi], dword [esi]
add eax, 0xb8
cmp eax, 0x1014a99c
jl 0x1005ca20
push 0
push 0x10025b00
push dword [0x10140b50]
call fcn.1008b1e0
push str.LoadWing
push 0xffffd8ee
push dword [0x10140b50]
call fcn.1008b7e0
add esp, 0x18
mov ecx, 0x10140b4c
push str.Data__Settings__Lua__Configs__CustomWings.lua
call fcn.10041570
push 0x1012b1e6
push str.StartLoadWings
push 0x10140b4c
call fcn.10041730
add esp, 0xc
call fcn.100158c0
push 2
xorps xmm0, xmm0
mov dword [ebp - 0x434], 0
push 0x1012b240
lea ecx, [ebp - 0x444]
mov dword [ebp - 0x430], 0
movups xmmword [ebp - 0x444], xmm0
call fcn.10009540
lea eax, [ebp - 0x444]
mov dword [ebp - 4], 0
push eax
push dword [0x1013a5e8]
lea ecx, [ebp - 0x460]
call fcn.10009d90
sub esp, 8
mov byte [ebp - 4], 1
mov ecx, eax
call fcn.10019180
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x448]
cmp ecx, 0xf
jbe 0x1005cb4b
mov edx, dword [ebp - 0x45c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005cb41
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f74d
push ecx
push edx
call fcn.10089407
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x430]
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x448], 0xf
mov byte [ebp - 0x45c], 0
cmp ecx, 0xf
jbe 0x1005cbb1
mov edx, dword [ebp - 0x444]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005cba7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f74d
jmp 0x1005cba7
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push ecx
push edx
call fcn.10089407
add esp, 8
push str.Data__Settings__Lua__Configs__CustomItem.lua
mov ecx, 0x1013a5e4
call fcn.10041570
push 0x1012b1e6
push str.LoadCustomItem
push 0x1013a5e4
call fcn.10041730
push fcn.1005fab0
push 0x48fb8c
push 0xe8
call fcn.1006c3c0
push fcn.1005fab0
push 0x63d2d8
push 0xe8
call fcn.1006c3c0
push fcn.1005fab0
push 0x641189
push 0xe8
call fcn.1006c3c0
push fcn.1005fab0
push 0x641f42
push 0xe8
call fcn.1006c3c0
push fcn.1005fab0
push 0x642598
push 0xe8
call fcn.1006c3c0
add esp, 0x48
push fcn.1005fab0
push 0x65ea2d
push 0xe8
call fcn.1006c3c0
push 0x10060b30
push 0x664267
push 0xe8
call fcn.1006c3c0
push 0x10061680
push 0x57f920
push 0xe9
call fcn.1006c3c0
add esp, 0x24
mov ecx, 0x1013a5a8
push str.Data__Settings__Lua__EffectSystem__CharacterEffectItens.lua
call fcn.10041570
push dword [0x1013a5ac]
call fcn.1004a3d0
push 0x10018af0
push 0x5711ab
push 0xe8
call fcn.1006c3c0
push 0x10018af0
push 0x57126f
push 0xe8
call fcn.1006c3c0
push 0x10018af0
push 0x5713d6
push 0xe8
call fcn.1006c3c0
push 0x10018af0
push 0x576ddb
push 0xe8
call fcn.1006c3c0
push 0x10018af0
push 0x588357
push 0xe8
call fcn.1006c3c0
push 0x10018af0
push 0x5883f4
push 0xe8
call fcn.1006c3c0
add esp, 0x48
push 0x10018af0
push 0x588505
push 0xe8
call fcn.1006c3c0
push 0x10018af0
push 0x588617
push 0xe8
call fcn.1006c3c0
push 0x10018af0
push 0x588661
push 0xe8
call fcn.1006c3c0
push 0x10018af0
push 0x58876e
push 0xe8
call fcn.1006c3c0
push 0x10018af0
push 0x5887ad
push 0xe8
call fcn.1006c3c0
push 0x10018af0
push 0x609d1e
push 0xe8
call fcn.1006c3c0
add esp, 0x48
push 0x10018af0
push 0x610691
push 0xe8
call fcn.1006c3c0
add esp, 0xc
push 0
push ecx
push str.DataEnc1.dat
call fcn.100635f0
push 1
push ecx
push str.DataDec2.dat
call fcn.100635f0
push 0x1006ac90
push 0x56f476
push 0xe8
call fcn.1006c3c0
push 0x1006ac90
push 0x5ebbe6
push 0xe8
call fcn.1006c3c0
push 0x100069a0
push 0x59b566
push 0xe8
call fcn.1006c3c0
push 0x100069a0
push 0x5a0208
push 0xe8
call fcn.1006c3c0
push 0x100069a0
push 0x5ab91c
push 0xe8
call fcn.1006c3c0
push 0x100069a0
push 0x5b087a
push 0xe8
call fcn.1006c3c0
add esp, 0x48
push 0x100069a0
push 0x5b13e4
push 0xe8
call fcn.1006c3c0
push 0x100069a0
push 0x5b69e3
push 0xe8
call fcn.1006c3c0
push 0x100069a0
push 0x5b6eb4
push 0xe8
call fcn.1006c3c0
push 0x100069a0
push 0x5b7026
push 0xe8
call fcn.1006c3c0
push 0x100069a0
push 0x5b7268
push 0xe8
call fcn.1006c3c0
push 0x100069a0
push 0x5b72d0
push 0xe8
call fcn.1006c3c0
add esp, 0x48
push 0x100069a0
push 0x5b739d
push 0xe8
call fcn.1006c3c0
push 0x100069a0
push 0x5b7634
push 0xe8
call fcn.1006c3c0
push 0x100069a0
push 0x95f68a
push 0xe8
call fcn.1006c3c0
push 0x100069a0
push 0x95f8b7
push 0xe8
call fcn.1006c3c0
push 0x100069a0
push 0x95fa96
push 0xe8
call fcn.1006c3c0
push 0x100069a0
push 0x96012e
push 0xe8
call fcn.1006c3c0
add esp, 0x48
push 0
push 0
push 0x1013a230
push 0x100067b0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x1013a290], eax
call fcn.100105a0
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 0x1002c8e0
sub eax, 0x5509d3
mov byte [ebp - 0x24], 0xe9
mov dword [ebp - 0x23], eax
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x5509ce
mov dword [ebp - 0x18], 0
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x1005cfac
mov eax, dword [ebp - 0x24]
mov ecx, 0x5509ce
mov dword [ecx], eax
mov al, byte [ebp - 0x20]
mov byte [ecx + 4], al
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1005cfae
call edi
mov eax, 0x1002cdc0
mov byte [ebp - 0x24], 0xe9
sub eax, 0x551578
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x23], eax
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x551573
call esi
test eax, eax
je 0x1005d000
mov eax, dword [ebp - 0x24]
mov ecx, 0x551573
mov dword [ecx], eax
mov al, byte [ebp - 0x20]
mov byte [ecx + 4], al
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1005d002
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x69d
push 0x6097b0
call esi
push 0x69d
push 0x90
push 0x6097b0
call fcn.100d71f0
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x69d
push 0x6097b0
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x57bf78
call esi
mov eax, 0x57bf78
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x57bf78
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x57c125
call esi
mov eax, 0x57c125
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x57c125
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x57be80
call esi
mov eax, 0x57be80
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x57be80
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x57c057
call esi
mov eax, 0x57c057
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x57c057
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x57bf0e
call esi
mov eax, 0x57bf0e
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x57bf0e
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x57c0bb
call esi
mov eax, 0x57c0bb
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x57c0bb
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x57aba9
call esi
mov eax, 0x57aba9
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x57aba9
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x57acbf
call esi
mov eax, 0x57acbf
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x57acbf
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x57ad03
call esi
mov eax, 0x57ad03
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x57ad03
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x57ad47
call esi
mov eax, 0x57ad47
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x57ad47
call esi
push 0x5db408
push 0x5db322
push 0xe9
call fcn.1006c3c0
push 0x4d1dc2
push 0x4d1cf0
push 0xe9
call fcn.1006c3c0
add esp, 0x18
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x1b
push 0xd20170
call esi
mov eax, 0xd20170
mov ecx, 0x90909090
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], ecx
mov word [eax + 0x18], cx
mov byte [eax + 0x1a], cl
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x1b
push 0xd20170
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x4030d4
call esi
lea eax, [ebp - 0x18]
mov byte [0x4030d4], 6
push eax
push dword [ebp - 0x18]
push 1
push 0x4030d4
call esi
push 0x836a23
push 0x8369fa
push 0xe9
call fcn.1006c3c0
push 0x7d36bf
push 0x7d36b8
push 0xe9
call fcn.1006c3c0
push 0x7d3fa3
push 0x7d3f9c
push 0xe9
call fcn.1006c3c0
push 0x856fd2
push 0x856faa
push 0xe9
call fcn.1006c3c0
push 0x7d3725
push 0x7d371e
push 0xe9
call fcn.1006c3c0
push 0x832897
push 0x832862
push 0xe9
call fcn.1006c3c0
add esp, 0x48
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x832cf2
call esi
mov eax, 0x832cf2
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x832cf2
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x830c79
call esi
lea eax, [ebp - 0x18]
mov byte [0x830c79], 0x22
push eax
push dword [ebp - 0x18]
push 1
push 0x830c79
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x830c88
call esi
lea eax, [ebp - 0x18]
mov byte [0x830c88], 0x5e
push eax
push dword [ebp - 0x18]
push 1
push 0x830c88
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x830c9a
call esi
lea eax, [ebp - 0x18]
mov byte [0x830c9a], 0x8b
push eax
push dword [ebp - 0x18]
push 1
push 0x830c9a
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x830c6d
call esi
lea eax, [ebp - 0x18]
mov byte [0x830c6d], 0xa0
push eax
push dword [ebp - 0x18]
push 1
push 0x830c6d
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x830cb8
call esi
lea eax, [ebp - 0x18]
mov byte [0x830cb8], 0x1d
push eax
push dword [ebp - 0x18]
push 1
push 0x830cb8
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x830cc7
call esi
mov byte [0x830cc7], 0x54
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 1
push 0x830cc7
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x830cd6
call esi
lea eax, [ebp - 0x18]
mov byte [0x830cd6], 0x7c
push eax
push dword [ebp - 0x18]
push 1
push 0x830cd6
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x830cac
call esi
lea eax, [ebp - 0x18]
mov byte [0x830cac], 0x8c
push eax
push dword [ebp - 0x18]
push 1
push 0x830cac
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x830c33
call esi
lea eax, [ebp - 0x18]
mov byte [0x830c33], 0x1e
push eax
push dword [ebp - 0x18]
push 1
push 0x830c33
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x830cf4
call esi
lea eax, [ebp - 0x18]
mov byte [0x830cf4], 0x19
push eax
push dword [ebp - 0x18]
push 1
push 0x830cf4
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x830d03
call esi
lea eax, [ebp - 0x18]
mov byte [0x830d03], 0x45
push eax
push dword [ebp - 0x18]
push 1
push 0x830d03
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x830d11
call esi
lea eax, [ebp - 0x18]
mov byte [0x830d11], 0x68
push eax
push dword [ebp - 0x18]
push 1
push 0x830d11
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x830ce8
call esi
lea eax, [ebp - 0x18]
mov byte [0x830ce8], 0x78
push eax
push dword [ebp - 0x18]
push 1
push 0x830ce8
call esi
push 0x59b00e
push 0x59affa
push 0xe8
call fcn.1006c3c0
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x30
push 0x62f876
call esi
push 0x30
push 0x90
push 0x62f876
call fcn.100d71f0
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x30
push 0x62f876
call esi
push ecx
mov edx, 0x59
mov ecx, 0x8429cb
call fcn.1006c2b0
add esp, 4
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x7c5ad2
call esi
mov eax, 0x7c5ad2
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x7c5ad2
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x25
push 0x7c5a68
call esi
mov eax, 0x7c5a68
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
mov byte [eax + 0x24], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x25
push 0x7c5a68
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x159
push 0x7c4430
call esi
push 0x159
push 0x90
push 0x7c4430
call fcn.100d71f0
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x159
push 0x7c4430
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 0x1d7
push 0x842dd0
call esi
push 0x1d7
push 0x90
push 0x842dd0
call fcn.100d71f0
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 0x1d7
push 0x842dd0
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x868c47
call esi
lea eax, [ebp - 0x18]
mov byte [0x868c47], 5
push eax
push dword [ebp - 0x18]
push 1
push 0x868c47
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x868cf0
call esi
lea eax, [ebp - 0x18]
mov byte [0x868cf0], 0xc3
push eax
push dword [ebp - 0x18]
push 1
push 0x868cf0
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x5b57ed
call esi
lea eax, [ebp - 0x18]
mov dword [0x5b57ed], 0x400
push eax
push dword [ebp - 0x18]
push 4
push 0x5b57ed
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x589dbe
call esi
lea eax, [ebp - 0x18]
mov dword [0x589dbe], 0x400
push eax
push dword [ebp - 0x18]
push 4
push 0x589dbe
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4d2cb2
call esi
lea eax, [ebp - 0x18]
mov dword [0x4d2cb2], 0x3800
push eax
push dword [ebp - 0x18]
push 4
push 0x4d2cb2
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4d2d9c
call esi
lea eax, [ebp - 0x18]
mov dword [0x4d2d9c], 0x3800
push eax
push dword [ebp - 0x18]
push 4
push 0x4d2d9c
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x958d59
call esi
lea eax, [ebp - 0x18]
mov byte [0x958d59], 1
push eax
push dword [ebp - 0x18]
push 1
push 0x958d59
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x958d92
call esi
lea eax, [ebp - 0x18]
mov byte [0x958d92], 1
push eax
push dword [ebp - 0x18]
push 1
push 0x958d92
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x958de4
call esi
lea eax, [ebp - 0x18]
mov byte [0x958de4], 1
push eax
push dword [ebp - 0x18]
push 1
push 0x958de4
call esi
push 0x1005b520
push 0x77ec59
push 0xe9
call fcn.1006c3c0
push 0x1005b530
push 0x77ece2
push 0xe9
call fcn.1006c3c0
push 0x1005b540
push 0x77ebb0
push 0xe9
call fcn.1006c3c0
add esp, 0x24
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4d57c8
call esi
lea eax, [ebp - 0x18]
mov dword [0x4d57c8], 0x1012dc0c
push eax
push dword [ebp - 0x18]
push 4
push 0x4d57c8
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4d57e8
call esi
lea eax, [ebp - 0x18]
mov dword [0x4d57e8], 0x1012dc28
push eax
push dword [ebp - 0x18]
push 4
push 0x4d57e8
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4d5808
call esi
lea eax, [ebp - 0x18]
mov dword [0x4d5808], 0x1012dc44
push eax
push dword [ebp - 0x18]
push 4
push 0x4d5808
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4d5828
call esi
lea eax, [ebp - 0x18]
mov dword [0x4d5828], 0x1012dc60
push eax
push dword [ebp - 0x18]
push 4
push 0x4d5828
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4d5848
call esi
lea eax, [ebp - 0x18]
mov dword [0x4d5848], 0x1012dc7c
push eax
push dword [ebp - 0x18]
push 4
push 0x4d5848
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4d5868
call esi
lea eax, [ebp - 0x18]
mov dword [0x4d5868], 0x1012dc98
push eax
push dword [ebp - 0x18]
push 4
push 0x4d5868
call esi
push 0x5e4a3f
push 0x5e496c
push 0xe9
call fcn.1006c3c0
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x792b7f
call esi
mov eax, 0x792b7f
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x792b7f
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0xd477ac
call esi
lea eax, [ebp - 0x18]
mov dword [0xd477ac], 0
push eax
push dword [ebp - 0x18]
push 4
push 0xd477ac
call esi
call fcn.10071510
call fcn.1003d5a0
push ecx
mov edx, 5
mov ecx, 0x6e899d
call fcn.1006c2b0
mov edx, 5
mov ecx, 0x7126fa
call fcn.1006c2b0
mov edx, 5
mov ecx, 0x5b768f
call fcn.1006c2b0
mov edx, 5
mov ecx, 0x5b770c
call fcn.1006c2b0
mov edx, 5
mov ecx, 0xd46c84
call fcn.1006c2b0
mov edx, 5
mov ecx, 0xd46c8c
call fcn.1006c2b0
push 0x1006a8e0
push 0x835234
push 0xe9
call fcn.1006c3c0
add esp, 0x10
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x5528a0
call esi
lea eax, [ebp - 0x18]
mov byte [0x5528a0], 0xc3
push eax
push dword [ebp - 0x18]
push 1
push 0x5528a0
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x5ad691
call esi
mov eax, 0x5ad691
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x5ad691
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x80b6bb
call esi
lea eax, [ebp - 0x18]
mov dword [0x80b6bb], 0x1012dcb4
push eax
push dword [ebp - 0x18]
push 4
push 0x80b6bb
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x80b6db
call esi
lea eax, [ebp - 0x18]
mov dword [0x80b6db], 0x1012dcb4
push eax
push dword [ebp - 0x18]
push 4
push 0x80b6db
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x80b71b
call esi
lea eax, [ebp - 0x18]
mov dword [0x80b71b], 0x1012dcb4
push eax
push dword [ebp - 0x18]
push 4
push 0x80b71b
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x80b73b
call esi
lea eax, [ebp - 0x18]
mov dword [0x80b73b], 0x1012dcb4
push eax
push dword [ebp - 0x18]
push 4
push 0x80b73b
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4f877b
call esi
lea eax, [ebp - 0x18]
mov dword [0x4f877b], 0x1012dce0
push eax
push dword [ebp - 0x18]
push 4
push 0x4f877b
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4f879b
call esi
lea eax, [ebp - 0x18]
mov dword [0x4f879b], 0x1012dce0
push eax
push dword [ebp - 0x18]
push 4
push 0x4f879b
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4f87bb
call esi
lea eax, [ebp - 0x18]
mov dword [0x4f87bb], 0x1012dce0
push eax
push dword [ebp - 0x18]
push 4
push 0x4f87bb
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4f87db
call esi
lea eax, [ebp - 0x18]
mov dword [0x4f87db], 0x1012dce0
push eax
push dword [ebp - 0x18]
push 4
push 0x4f87db
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4f87fb
call esi
lea eax, [ebp - 0x18]
mov dword [0x4f87fb], 0x1012dce0
push eax
push dword [ebp - 0x18]
push 4
push 0x4f87fb
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x7d2e1b
call esi
lea eax, [ebp - 0x18]
mov byte [0x7d2e1b], 4
push eax
push dword [ebp - 0x18]
push 1
push 0x7d2e1b
call esi
push ecx
mov edx, 0xf
mov ecx, 0x47e1c4
call fcn.1006c2b0
add esp, 4
mov byte [ebp - 0x24], 0xe9
mov eax, 0x10062cd0
mov dword [ebp - 0x18], 0
sub eax, 0x47e1c9
mov dword [ebp - 0x23], eax
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x47e1c4
call esi
test eax, eax
je 0x1005dc6d
mov eax, dword [ebp - 0x24]
mov ecx, 0x47e1c4
mov dword [ecx], eax
mov al, byte [ebp - 0x20]
mov byte [ecx + 4], al
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1005dc6f
call edi
push ecx
mov edx, 0xf
mov ecx, 0x6339e7
call fcn.1006c2b0
add esp, 4
mov byte [ebp - 0x24], 0xe9
mov eax, 0x10062cf0
mov dword [ebp - 0x18], 0
sub eax, 0x6339ec
mov dword [ebp - 0x23], eax
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x6339e7
call esi
test eax, eax
je 0x1005dcd4
mov eax, dword [ebp - 0x24]
mov ecx, 0x6339e7
mov dword [ecx], eax
mov al, byte [ebp - 0x20]
mov byte [ecx + 4], al
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 5
push ecx
call esi
test eax, eax
jne 0x1005dcd6
call edi
push 0x63
push 0
push 0x1014e348
call fcn.100d71f0
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
push 0x40
push 2
push 0x63e7e4
call esi
mov eax, 0x63e7e4
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 2
push 0x63e7e4
call esi
push 0x10062be0
push 0x62eb26
push 0xff
call fcn.1006c3c0
push 0x10062bf0
push 0x888d5f
push 0xe8
call fcn.1006c3c0
push 0x10062ca0
push 0x886cd7
push 0xff
call fcn.1006c3c0
push 0x10062ca0
push 0x7d3cbd
push 0xff
call fcn.1006c3c0
push 0x1006c0c0
push 0x410233
push 0xe9
call fcn.1006c3c0
add esp, 0x3c
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x8385e4
call esi
lea eax, [ebp - 0x18]
mov byte [0x8385e4], 0xeb
push eax
push dword [ebp - 0x18]
push 1
push 0x8385e4
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x838647
call esi
lea eax, [ebp - 0x18]
mov byte [0x838647], 0xeb
push eax
push dword [ebp - 0x18]
push 1
push 0x838647
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x838658
call esi
lea eax, [ebp - 0x18]
mov byte [0x838658], 0xeb
push eax
push dword [ebp - 0x18]
push 1
push 0x838658
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x5bd939
call esi
lea eax, [ebp - 0x18]
mov byte [0x5bd939], 0xeb
push eax
push dword [ebp - 0x18]
push 1
push 0x5bd939
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x7e1de1
call esi
lea eax, [ebp - 0x18]
mov byte [0x7e1de1], 0xeb
push eax
push dword [ebp - 0x18]
push 1
push 0x7e1de1
call esi
push ecx
mov edx, 6
mov ecx, 0x7e5429
call fcn.1006c2b0
mov edx, 0x1c
mov ecx, 0x4d1360
call fcn.1006c2b0
add esp, 4
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x6340ab
call esi
lea eax, [ebp - 0x18]
mov dword [0x6340ab], 0x1012dcf8
push eax
push dword [ebp - 0x18]
push 4
push 0x6340ab
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x6340e4
call esi
lea eax, [ebp - 0x18]
mov dword [0x6340e4], 0x1012dd0c
push eax
push dword [ebp - 0x18]
push 4
push 0x6340e4
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x6345d5
call esi
lea eax, [ebp - 0x18]
mov dword [0x6345d5], 0x1012dd24
push eax
push dword [ebp - 0x18]
push 4
push 0x6345d5
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x6341b8
call esi
lea eax, [ebp - 0x18]
mov dword [0x6341b8], 0x1012dd38
push eax
push dword [ebp - 0x18]
push 4
push 0x6341b8
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x6341f1
call esi
lea eax, [ebp - 0x18]
mov dword [0x6341f1], 0x1012dd50
push eax
push dword [ebp - 0x18]
push 4
push 0x6341f1
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x634072
call esi
lea eax, [ebp - 0x18]
mov dword [0x634072], 0x1012dd6c
push eax
push dword [ebp - 0x18]
push 4
push 0x634072
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x634142
call esi
lea eax, [ebp - 0x18]
mov dword [0x634142], 0x1012dd84
push eax
push dword [ebp - 0x18]
push 4
push 0x634142
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x63417b
call esi
lea eax, [ebp - 0x18]
mov dword [0x63417b], 0x1012dd9c
push eax
push dword [ebp - 0x18]
push 4
push 0x63417b
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4ad7f7
call esi
lea eax, [ebp - 0x18]
mov dword [0x4ad7f7], 0x1012ddb4
push eax
push dword [ebp - 0x18]
push 4
push 0x4ad7f7
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x7e31dd
call esi
lea eax, [ebp - 0x18]
mov dword [0x7e31dd], 0x1012b1e6
push eax
push dword [ebp - 0x18]
push 4
push 0x7e31dd
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4e8786
call esi
lea eax, [ebp - 0x18]
mov dword [0x4e8786], 0x1012b1e6
push eax
push dword [ebp - 0x18]
push 4
push 0x4e8786
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x7e308e
call esi
lea eax, [ebp - 0x18]
mov dword [0x7e308e], 0x1012b1e6
push eax
push dword [ebp - 0x18]
push 4
push 0x7e308e
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x7e333e
call esi
lea eax, [ebp - 0x18]
mov dword [0x7e333e], 0x1012b1e6
push eax
push dword [ebp - 0x18]
push 4
push 0x7e333e
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x47ba7a
call esi
lea eax, [ebp - 0x18]
mov dword [0x47ba7a], 0x1012ddc0
push eax
push dword [ebp - 0x18]
push 4
push 0x47ba7a
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x634272
call esi
lea eax, [ebp - 0x18]
mov dword [0x634272], 0x1012b1e6
push eax
push dword [ebp - 0x18]
push 4
push 0x634272
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x521664
call esi
lea eax, [ebp - 0x18]
mov dword [0x521664], 0x1012ddd8
push eax
push dword [ebp - 0x18]
push 4
push 0x521664
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x521789
call esi
lea eax, [ebp - 0x18]
mov dword [0x521789], 0x1012ddd8
push eax
push dword [ebp - 0x18]
push 4
push 0x521789
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x856132
call esi
lea eax, [ebp - 0x18]
mov dword [0x856132], 0x1012dde4
push eax
push dword [ebp - 0x18]
push 4
push 0x856132
call esi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x82b4cd
call esi
lea eax, [ebp - 0x18]
mov dword [0x82b4cd], 0x1012ddec
push eax
push dword [ebp - 0x18]
push 4
push 0x82b4cd
call esi
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push eax
push 0x40
push 1
push 0x84f587
call esi
test eax, eax
je 0x1005e1a1
lea eax, [ebp - 0x1c]
mov byte [0x84f587], 0xd
push eax
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 1
push 0x84f587
call esi
test eax, eax
jne 0x1005e1a3
call edi
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push eax
push 0x40
push 1
push 0x841fe1
call esi
test eax, eax
je 0x1005e1df
lea eax, [ebp - 0x1c]
mov byte [0x841fe1], 0xd
push eax
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 1
push 0x841fe1
call esi
test eax, eax
jne 0x1005e1e1
call edi
push 0x1003e0c0
push 0x633fcb
push 0xff
call fcn.1006c3c0
push 0x1003e700
push 0x633fe3
push 0xff
call fcn.1006c3c0
push 0x1003ee00
push 0x57ac07
push 0xff
call fcn.1006c3c0
push 0x1003ee00
push 0x6083b9
push 0xff
call fcn.1006c3c0
push 0x1003ef30
push 0x777ff2
push 0xff
call fcn.1006c3c0
push 0x1003ef30
push 0x778003
push 0xff
call fcn.1006c3c0
add esp, 0x48
push 0x1003ef40
push 0x5f7c2f
push 0xe9
call fcn.1006c3c0
push 0x1003ef70
push 0x968137
push 0xe9
call fcn.1006c3c0
push 0x1003ef90
push 0x968157
push 0xe9
call fcn.1006c3c0
push 0x1003dd10
push 0x54c21d
push 0xe8
call fcn.1006c3c0
push 0x1003dd10
push 0x4fc6c7
push 0xe8
call fcn.1006c3c0
push 0x1003dd10
push 0x4fcc3e
push 0xe8
call fcn.1006c3c0
add esp, 0x48
push 0x1003efb0
push 0x58e650
push 0xe9
call fcn.1006c3c0
push 0x1003f000
push 0x8386b5
push 0xe9
call fcn.1006c3c0
push 0x1003f080
push 0x5c4025
push 0xe9
call fcn.1006c3c0
push 0x1003f0b0
push 0x5f7c3b
push 0xe9
call fcn.1006c3c0
push 0x1003f0e0
push 0x64b701
push 0xe9
call fcn.1006c3c0
push 0x1003f110
push 0x8383a0
push 0xe9
call fcn.1006c3c0
add esp, 0x48
push 0x1003f140
push 0x5f3f7e
push 0xe9
call fcn.1006c3c0
push 0x1003f180
push 0x5f4a60
push 0xe9
call fcn.1006c3c0
add esp, 0x18
call fcn.100667c0
call fcn.10064110
cmp word [0x10149c6c], 0
je 0x1005e44f
push 0x1006a810
push 0x40b903
push 0xe9
call fcn.1006c3c0
push 0x1006a850
push 0x4da416
push 0xe9
call fcn.1006c3c0
push 0x1006a870
push 0x63a192
push 0xe9
call fcn.1006c3c0
push 0x1006a8b0
push 0x7a89eb
push 0xe9
call fcn.1006c3c0
push fcn.1006a770
push 0x40bc24
push 0xe8
call fcn.1006c3c0
push fcn.1006a770
push 0x4d762c
push 0xe8
call fcn.1006c3c0
add esp, 0x48
push fcn.1006a770
push 0x4ef622
push 0xe8
call fcn.1006c3c0
push fcn.1006a770
push 0x63cd3a
push 0xe8
call fcn.1006c3c0
push fcn.1006a000
push 0x80f7fe
push 0xe8
call fcn.1006c3c0
add esp, 0x24
push 0x1006ae20
push 0x4d13c2
push 0xe9
call fcn.1006c3c0
push 0x1006af80
push 0x4d2782
push 0xe9
call fcn.1006c3c0
push 0x1006b050
push 0x830c3a
push 0xe9
call fcn.1006c3c0
add esp, 0x24
call fcn.1003de20
call fcn.1000ee70
push dword [0x1014a9a0]
call fcn.10053b00
push str.Data__Settings__Lua__Controller__LoadImages.lua
mov ecx, 0x1014a99c
call fcn.10041570
push 0x10040e70
push 0x7c1d7e
push 0xe8
call fcn.1006c3c0
add esp, 0xc
call fcn.1003a4f0
call fcn.10030190
push 0x100617f0
push 0x7729b3
push 0xe8
call fcn.1006c3c0
push 0x100617c0
push 0x772960
push 0xe8
call fcn.1006c3c0
add esp, 0x18
call fcn.100285d0
call fcn.1000a630
push 0x1006c110
push 0x5dc820
push 0xe9
call fcn.1006c3c0
add esp, 0xc
call fcn.1001f850
call fcn.10013e30
push 2
xorps xmm0, xmm0
mov dword [ebp - 0x434], 0
push 0x1012b240
lea ecx, [ebp - 0x444]
mov dword [ebp - 0x430], 0
movups xmmword [ebp - 0x444], xmm0
call fcn.10009540
lea eax, [ebp - 0x444]
mov dword [ebp - 4], 2
push eax
push dword [0x1013a67c]
lea ecx, [ebp - 0x460]
call fcn.10009d90
sub esp, 8
mov byte [ebp - 4], 3
mov ecx, eax
call fcn.1001b490
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x448]
cmp ecx, 0xf
jbe 0x1005e5c4
mov edx, dword [ebp - 0x45c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005e5ba
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f752
push ecx
push edx
call fcn.10089407
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x430]
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x448], 0xf
mov byte [ebp - 0x45c], 0
cmp ecx, 0xf
jbe 0x1005e620
mov edx, dword [ebp - 0x444]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005e616
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f752
push ecx
push edx
call fcn.10089407
add esp, 8
push str.Data__Settings__Lua__Configs__CustomItemPosition.lua
mov ecx, 0x1013a678
call fcn.10041570
push 0x1012b1e6
push str.StartLoadItemPosition
push 0x1013a678
call fcn.10041730
push 0x1001b300
push 0x5ca16e
push 0xe9
call fcn.1006c3c0
add esp, 0x18
mov dword [ebp - 0x434], 0
xorps xmm0, xmm0
mov dword [ebp - 0x430], 0
lea ecx, [ebp - 0x444]
movups xmmword [ebp - 0x444], xmm0
push 2
push 0x1012b240
call fcn.10009540
lea eax, [ebp - 0x444]
mov dword [ebp - 4], 4
push eax
push dword [0x1013a6b0]
lea ecx, [ebp - 0x460]
call fcn.10009d90
push 0x1001b9e0
push str.SetItemSize
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.1001bbd0
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x448]
cmp ecx, 0xf
jbe 0x1005e6fc
mov edx, dword [ebp - 0x45c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005e6f2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f757
push ecx
push edx
call fcn.10089407
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x430]
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x448], 0xf
mov byte [ebp - 0x45c], 0
cmp ecx, 0xf
jbe 0x1005e758
mov edx, dword [ebp - 0x444]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005e74e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f757
push ecx
push edx
call fcn.10089407
add esp, 8
push str.Data__Settings__Lua__Configs__CustomItemSize.lua
mov ecx, 0x1013a6ac
call fcn.10041570
push 0x1012b1e6
push str.StartLoadItemSize
push 0x1013a6ac
call fcn.10041730
push 0x1001bb20
push 0x5cd9c6
push 0xe9
call fcn.1006c3c0
add esp, 0x18
mov dword [ebp - 0x434], 0
xorps xmm0, xmm0
mov dword [ebp - 0x430], 0
lea ecx, [ebp - 0x444]
movups xmmword [ebp - 0x444], xmm0
push 2
push 0x1012b240
call fcn.10009540
lea eax, [ebp - 0x444]
mov dword [ebp - 4], 6
push eax
push dword [0x1013a614]
lea ecx, [ebp - 0x460]
call fcn.10009d90
push 0x10019600
push str.SetItemFloor
mov ecx, eax
mov byte [ebp - 4], 7
call fcn.10019850
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x448]
cmp ecx, 0xf
jbe 0x1005e834
mov edx, dword [ebp - 0x45c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005e82a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f75c
push ecx
push edx
call fcn.10089407
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x430]
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x448], 0xf
mov byte [ebp - 0x45c], 0
cmp ecx, 0xf
jbe 0x1005e890
mov edx, dword [ebp - 0x444]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005e886
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f75c
push ecx
push edx
call fcn.10089407
add esp, 8
push str.Data__Settings__Lua__Configs__CustomItemFloor.lua
mov ecx, 0x1013a610
call fcn.10041570
push 0x1012b3c0
push str.StartLoadItemFloor
push 0x1013a610
call fcn.10041730
push 0x10019740
push 0x5f820c
push 0xe8
call fcn.1006c3c0
push 0x10019740
push 0x5f847d
push 0xe8
call fcn.1006c3c0
push 0x1000fd50
push 0x78b0bc
push 0xe9
call fcn.1006c3c0
push 0x1000fe20
push 0x789765
push 0xe9
call fcn.1006c3c0
push 0x1000fe50
push 0x789a61
push 0xe9
call fcn.1006c3c0
add esp, 0x48
push 0x1000fe80
push 0x789daa
push 0xe9
call fcn.1006c3c0
push 0x10063040
push 0x95e1ab
push 0xe9
call fcn.1006c3c0
push 0x100630b0
push 0x95e1c4
push 0xe9
call fcn.1006c3c0
push 0x10063000
push 0x95f9b0
push 0xe9
call fcn.1006c3c0
push 0x10063170
push 0x7d2b0c
push 0xe8
call fcn.1006c3c0
add esp, 0x3c
cmp dword [0x10149c74], 1
jne 0x1005e9fd
push 0x10063360
push 0x7f67a0
push 0xe9
call fcn.1006c3c0
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x7f67f8
call esi
mov eax, 0x7f67f8
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x7f67f8
call esi
lea eax, [ebp - 0x24]
push eax
push 0x40
push 5
push 0x7f6875
call esi
mov eax, 0x7f6875
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x24]
push 5
push 0x7f6875
call esi
push 0x1006aab0
push 0x5fa77b
push 0xe9
call fcn.1006c3c0
push 0x1006ab70
push 0x6083c1
push 0xe9
call fcn.1006c3c0
push 0x1006ac30
push 0x609066
push 0xe9
call fcn.1006c3c0
add esp, 0x24
push dword [0x1014ba94]
call fcn.10053b00
push str.Data__Settings__Lua__CharacterSystem__RenderModel.lua
mov ecx, 0x1014ba90
call fcn.10041570
push dword [0x1014ba94]
call fcn.10042320
mov ecx, dword [0x1014ba94]
call fcn.10056170
push 2
xorps xmm0, xmm0
mov dword [ebp - 0x434], 0
push 0x1012b240
lea ecx, [ebp - 0x444]
mov dword [ebp - 0x430], 0
movups xmmword [ebp - 0x444], xmm0
call fcn.10009540
lea eax, [ebp - 0x444]
mov dword [ebp - 4], 8
push eax
push dword [0x10308304]
lea ecx, [ebp - 0x460]
call fcn.10009d90
sub esp, 8
mov byte [ebp - 4], 9
mov ecx, eax
call fcn.10012590
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x448]
cmp ecx, 0xf
jbe 0x1005eb07
mov edx, dword [ebp - 0x45c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005eafd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f761
push ecx
push edx
call fcn.10089407
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x430]
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x448], 0xf
mov byte [ebp - 0x45c], 0
cmp ecx, 0xf
jbe 0x1005eb63
mov edx, dword [ebp - 0x444]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005eb59
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f761
push ecx
push edx
call fcn.10089407
add esp, 8
push str.Data__Settings__Lua__CharacterSystem__CounterItem.lua
mov ecx, 0x10308300
call fcn.10041570
push 0x1012b1e6
push str.StartLoadCounterItem
push 0x10308300
call fcn.10041730
push 0x10011820
push 0x7e4a72
push 0xe9
call fcn.1006c3c0
add esp, 0x18
call fcn.100243b0
call fcn.10064da0
push 2
xorps xmm0, xmm0
mov dword [ebp - 0x434], 0
push 0x1012b240
lea ecx, [ebp - 0x444]
mov dword [ebp - 0x430], 0
movups xmmword [ebp - 0x444], xmm0
call fcn.10009540
lea eax, [ebp - 0x444]
mov dword [ebp - 4], 0xa
push eax
push dword [0x10308388]
lea ecx, [ebp - 0x460]
call fcn.10009d90
sub esp, 8
mov byte [ebp - 4], 0xb
mov ecx, eax
call fcn.10018580
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x448]
cmp ecx, 0xf
jbe 0x1005ec42
mov edx, dword [ebp - 0x45c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005ec38
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f766
push ecx
push edx
call fcn.10089407
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x430]
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x448], 0xf
mov byte [ebp - 0x45c], 0
cmp ecx, 0xf
jbe 0x1005ec9e
mov edx, dword [ebp - 0x444]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005ec94
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f766
push ecx
push edx
call fcn.10089407
add esp, 8
push str.Data__Settings__Lua__Configs__CustomClaws.lua
mov ecx, 0x10308384
call fcn.10041570
push 0x1012b1e6
push str.StartLoadClaws
push 0x10308384
call fcn.10041730
push 0x10018470
push 0x5d01d0
push 0xe9
call fcn.1006c3c0
push 0x10018190
push 0x50d905
push 0xe8
call fcn.1006c3c0
push 0x10018370
push 0x5f91c2
push 0xe9
call fcn.1006c3c0
add esp, 0x30
mov dword [ebp - 0x434], 0
xorps xmm0, xmm0
mov dword [ebp - 0x430], 0
lea ecx, [ebp - 0x444]
movups xmmword [ebp - 0x444], xmm0
push 2
push 0x1012b240
call fcn.10009540
lea eax, [ebp - 0x444]
mov dword [ebp - 4], 0xc
push eax
push dword [0x1013a6e4]
lea ecx, [ebp - 0x460]
call fcn.10009d90
sub esp, 8
mov byte [ebp - 4], 0xd
mov ecx, eax
call fcn.1001c520
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x448]
cmp ecx, 0xf
jbe 0x1005ed9b
mov edx, dword [ebp - 0x45c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005ed91
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f76b
push ecx
push edx
call fcn.10089407
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x430]
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x448], 0xf
mov byte [ebp - 0x45c], 0
cmp ecx, 0xf
jbe 0x1005edf7
mov edx, dword [ebp - 0x444]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005eded
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f76b
push ecx
push edx
call fcn.10089407
add esp, 8
push str.Data__Settings__Lua__Configs__ItemValue.lua
mov ecx, 0x1013a6e0
call fcn.10041570
push 0x1012b1e6
push str.StartLoadItemValue
push 0x1013a6e0
call fcn.10041730
push 0x1001c3b0
push 0x7e4439
push 0xe9
call fcn.1006c3c0
add esp, 0x18
mov dword [0x1014f240], 0
mov byte [0x1014f22f], 0
mov dword [0x1014f234], 0xffffffff
mov dword [0x1014f23c], 0xffffffff
mov dword [0x1014f230], 0xffffffff
call fcn.10019e70
push 0x10023a30
push 0x954071
push 0xe9
call fcn.1006c3c0
add esp, 0xc
mov dword [ebp - 0x434], 0
xorps xmm0, xmm0
mov dword [ebp - 0x430], 0
lea ecx, [ebp - 0x444]
movups xmmword [ebp - 0x444], xmm0
push 2
push 0x1012b240
call fcn.10009540
lea eax, [ebp - 0x444]
mov dword [ebp - 4], 0xe
push eax
push dword [0x10308484]
lea ecx, [ebp - 0x460]
call fcn.10009d90
sub esp, 8
mov byte [ebp - 4], 0xf
mov ecx, eax
call fcn.10023ca0
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x448]
cmp ecx, 0xf
jbe 0x1005ef17
mov edx, dword [ebp - 0x45c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005ef0d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f770
push ecx
push edx
call fcn.10089407
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x430]
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x448], 0xf
mov byte [ebp - 0x45c], 0
cmp ecx, 0xf
jbe 0x1005ef73
mov edx, dword [ebp - 0x444]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005ef69
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f770
push ecx
push edx
call fcn.10089407
add esp, 8
push str.Data__Settings__Lua__Configs__CustomServerName.lua
mov ecx, 0x10308480
call fcn.10041570
push 0x1012b1e6
push str.StartLoadCustomServerName
push 0x10308480
call fcn.10041730
add esp, 0xc
call fcn.100622b0
push 0x1002cee0
push 0x4fcb58
push 0xe9
call fcn.1006c3c0
push 0x1002cf00
push 0x4fd0b9
push 0xe9
call fcn.1006c3c0
push 0x1006c000
push 0x842ac7
push 0xe8
call fcn.1006c3c0
add esp, 0x24
call fcn.1001d2a0
call fcn.10029d50
call fcn.1006c9d0
lea eax, [ebp - 0x24]
push eax
push 0x40
push 4
push 0x4d0e17
call esi
lea eax, [ebp - 0x24]
mov dword [0x4d0e17], 0x1002cdd0
push eax
push dword [ebp - 0x24]
push 4
push 0x4d0e17
call esi
cmp dword [0x10149c58], 0
je 0x1005f04f
push 0x1013a2a0
call dword [sym.imp.USER32.dll_GetCursorPos]
cmp dword [0x1013a29c], 0
jne 0x1005f04f
push 0
push 0
push 0x1013a294
push 0x10006aa0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x1013a29c], eax
lea eax, [ebp - 0x24]
push eax
push 0x40
push 5
push 0x60edb8
call esi
mov eax, 0x60edb8
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x24]
push 5
push 0x60edb8
call esi
push 0x100292e0
push 0x60edb8
push 0xe9
call fcn.1006c3c0
add esp, 0xc
mov dword [ebp - 0x434], 0
xorps xmm0, xmm0
mov dword [ebp - 0x430], 0
lea ecx, [ebp - 0x444]
movups xmmword [ebp - 0x444], xmm0
push 2
push 0x1012b240
call fcn.10009540
lea eax, [ebp - 0x444]
mov dword [ebp - 4], 0x10
push eax
push dword [0x10308508]
lea ecx, [ebp - 0x460]
call fcn.10009d90
push 0x100291d0
push str.SetDisableExcellent
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.1000f8b0
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x448]
cmp ecx, 0xf
jbe 0x1005f136
mov edx, dword [ebp - 0x45c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005f12c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f775
push ecx
push edx
call fcn.10089407
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x430]
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x448], 0xf
mov byte [ebp - 0x45c], 0
cmp ecx, 0xf
jbe 0x1005f192
mov edx, dword [ebp - 0x444]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005f188
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f775
push ecx
push edx
call fcn.10089407
add esp, 8
push str.Data__Settings__Lua__Configs__DisableExcellent.lua
mov ecx, 0x10308504
call fcn.10041570
call fcn.10023100
call fcn.10026b80
push 0x100662b0
push 0x847864
push 0xe8
call fcn.1006c3c0
push 0x10065f50
push 0x8471b0
push 0xe9
call fcn.1006c3c0
push 0x100662d0
push 0x837870
push 0xe9
call fcn.1006c3c0
add esp, 0x24
mov dword [ebp - 0x434], 0
xorps xmm0, xmm0
mov dword [ebp - 0x430], 0
lea ecx, [ebp - 0x444]
movups xmmword [ebp - 0x444], xmm0
push 2
push 0x1012b240
call fcn.10009540
lea eax, [ebp - 0x444]
mov dword [ebp - 4], 0x12
push eax
push dword [0x1013a48c]
lea ecx, [ebp - 0x460]
call fcn.10009d90
push 0x10012e90
push str.SetFont
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.10012f50
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x448]
cmp ecx, 0xf
jbe 0x1005f28c
mov edx, dword [ebp - 0x45c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005f282
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f77a
push ecx
push edx
call fcn.10089407
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x430]
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x448], 0xf
mov byte [ebp - 0x45c], 0
cmp ecx, 0xf
jbe 0x1005f2e8
mov edx, dword [ebp - 0x444]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005f2de
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f77a
push ecx
push edx
call fcn.10089407
add esp, 8
push str.Data__Settings__Lua__Configs__Font.lua
mov ecx, 0x1013a488
call fcn.10041570
push 0x1000eb50
push 0x810711
push 0xe9
call fcn.1006c3c0
push 0x1000eb90
push 0x810790
push 0xe9
call fcn.1006c3c0
add esp, 0x18
lea eax, [ebp - 0x24]
push eax
push 0x40
push 7
push 0x811020
call esi
mov eax, 0x811020
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x24]
push 7
push 0x811020
call esi
push 0x1000ebd0
push 0x811020
push 0xe9
call fcn.1006c3c0
add esp, 0xc
mov dword [0x1030b40c], 0
call fcn.100090b0
push 0x100080f0
push 0x40b5a9
push 0xe8
call fcn.1006c3c0
push 0x100079d0
push 0x40b400
push 0xe8
call fcn.1006c3c0
push 0x100079d0
push 0x40b44f
push 0xe8
call fcn.1006c3c0
push 0x10009040
push 0x483711
push 0xe8
call fcn.1006c3c0
add esp, 0x30
mov dword [ebp - 0x434], 0
xorps xmm0, xmm0
mov dword [ebp - 0x430], 0
lea ecx, [ebp - 0x444]
movups xmmword [ebp - 0x444], xmm0
push 2
push 0x1012b240
call fcn.10009540
lea eax, [ebp - 0x444]
mov dword [ebp - 4], 0x14
push eax
push dword [0x1030841c]
lea ecx, [ebp - 0x460]
call fcn.10009d90
sub esp, 8
mov byte [ebp - 4], 0x15
mov ecx, eax
call fcn.100216c0
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x448]
cmp ecx, 0xf
jbe 0x1005f468
mov edx, dword [ebp - 0x45c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005f45e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f77f
push ecx
push edx
call fcn.10089407
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x430]
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x448], 0xf
mov byte [ebp - 0x45c], 0
cmp ecx, 0xf
jbe 0x1005f4c4
mov edx, dword [ebp - 0x444]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005f4ba
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f77f
push ecx
push edx
call fcn.10089407
add esp, 8
push str.Data__Settings__Lua__Monster__CustomMonsterEffect.lua
mov ecx, 0x10308418
call fcn.10041570
push 0x10021540
push 0x56fc61
push 0xe9
call fcn.1006c3c0
add esp, 0xc
mov dword [ebp - 0x434], 0
xorps xmm0, xmm0
mov dword [ebp - 0x430], 0
lea ecx, [ebp - 0x444]
movups xmmword [ebp - 0x444], xmm0
push 2
push 0x1012b240
call fcn.10009540
lea eax, [ebp - 0x444]
mov dword [ebp - 4], 0x16
push eax
push dword [0x10308450]
lea ecx, [ebp - 0x460]
call fcn.10009d90
sub esp, 8
mov byte [ebp - 4], 0x17
mov ecx, eax
call fcn.10022650
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x448]
cmp ecx, 0xf
jbe 0x1005f585
mov edx, dword [ebp - 0x45c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005f57b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f784
push ecx
push edx
call fcn.10089407
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x430]
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x448], 0xf
mov byte [ebp - 0x45c], 0
cmp ecx, 0xf
jbe 0x1005f5e1
mov edx, dword [ebp - 0x444]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1005f5d7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1005f784
push ecx
push edx
call fcn.10089407
add esp, 8
push str.Data__Settings__Lua__Monster__CustomMonsterGlow.lua
mov ecx, 0x1030844c
call fcn.10041570
push 0x10022340
push 0x8c5bb5
push 0xe8
call fcn.1006c3c0
push 0x10013410
push 0x4d5691
push 0xe8
call fcn.1006c3c0
push 0x10013790
push 0x483246
push 0xe8
call fcn.1006c3c0
push 0x10013800
push 0x4833d0
push 0xe9
call fcn.1006c3c0
add esp, 0x30
lea eax, [ebp - 0x24]
push eax
push 0x40
push 4
push 0x4d562d
call esi
lea eax, [ebp - 0x24]
mov dword [0x4d562d], 0x1012b7d8
push eax
push dword [ebp - 0x24]
push 4
push 0x4d562d
call esi
cmp byte [0x10149d42], 1
jne 0x1005f6a0
push 0x1006a8f0
push 0x842ac7
push 0xe8
call fcn.1006c3c0
push 0x1006a8f0
push 0x842b8d
push 0xe8
call fcn.1006c3c0
add esp, 0x18
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 6
push 0x556cc6
call esi
mov eax, 0x556cc6
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x1c]
push 6
push 0x556cc6
call esi
push 0x10025a50
push 0x556cc6
push 0xe9
call fcn.1006c3c0
add esp, 0xc
mov ecx, 0x10140b10
push str.Data__Settings__Lua__CharacterSystem__SkillCroma.lua
call fcn.10041570
push dword [0x10140b14]
call fcn.10053b00
call fcn.1006bb50
push 0x1006eaa0
push 0x62f6c5
push 0xe9
call fcn.1006c3c0
add esp, 0xc
jmp 0x1005f72f
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call eax
jmp 0x1005f72f
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100890df
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.100ec92d
call fcn.100ec92d
call fcn.100ec92d
call fcn.100ec92d
call fcn.100ec92d
call fcn.100ec92d
call fcn.100ec92d
call fcn.100ec92d
call fcn.100ec92d
call fcn.100ec92d
call fcn.100ec92d
call fcn.100ec92d
int3