Function at 0x6ad4bc
Capabilities:
Create thread

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47ab14
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x550
mov eax, dword [0x495040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
push 0x2d
mov dword [ebp - 0x53c], eax
mov dword [ebp - 0x9c], eax
call dword [0x47c218]
test al, 1
je 0x6ad525
cmp byte [0x495b9c], 0
sete byte [0x495b9c]
mov eax, dword [0x497418]
test eax, eax
je 0x6ad533
mov ecx, dword [eax + 0x70]
jmp 0x6ad535
xor ecx, ecx
cmp dword [ecx + 0xc], 0
jne 0x6ad550
test eax, eax
je 0x6ad550
mov eax, dword [eax + 0x70]
test eax, eax
je 0x6ad550
cmp dword [eax], 0
je 0x6ad550
call fcn.00694cbc
call fcn.006956ac
call fcn.0067443c
mov eax, dword [0x497418]
mov cl, byte [0x495b9c]
push str.DC_Universe_Online__DCUOT.571897_
push str.LaunchUnrealUWindowsClient
mov byte [eax + 0x58], cl
call dword [str.__ab]
mov esi, eax
test esi, esi
jne 0x6ad58c
call fcn.006b5f4c
push eax
call fcn.006b621c
add esp, 4
lea eax, [ebp - 0x108]
mov dword [ebp - 0x108], 0
push eax
push esi
call dword [0x47c1e8]
push dword [ebp - 0x108]
push 0
push 0x1fffff
call dword [0x47c030]
movups xmm0, xmmword [str.DCGAME.EXE]
mov dword [ebp - 0x104], eax
mov eax, dword [0x4893cc]
push dword [ebp - 0x108]
mov dword [ebp - 0x550], eax
mov ax, word [0x4893d0]
push 8
movups xmmword [ebp - 0x560], xmm0
mov word [ebp - 0x54c], ax
mov dword [ebp - 0x540], 0
call dword [0x47c034]
push 0x424
mov esi, eax
lea eax, [ebp - 0x52c]
push 0
push eax
call fcn.006c055c
add esp, 0xc
mov dword [ebp - 0x530], 0x428
lea eax, [ebp - 0x530]
push eax
push esi
call dword [0x47c04c]
test eax, eax
je 0x6ad697
mov edi, dword [0x47c05c]
nop dword [eax]
lea ecx, [ebp - 0x560]
lea eax, [ebp - 0x510]
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x6ad672
test dx, dx
je 0x6ad66e
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x6ad672
add eax, 4
add ecx, 4
test dx, dx
jne 0x6ad64c
xor eax, eax
jmp 0x6ad677
sbb eax, eax
or eax, 1
test eax, eax
je 0x6ad68b
lea eax, [ebp - 0x530]
push eax
push esi
call edi
test eax, eax
jne 0x6ad63c
jmp 0x6ad697
mov eax, dword [ebp - 0x51c]
mov dword [ebp - 0x540], eax
push esi
call dword [0x47c048]
cmp byte [0x495b9c], 0
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0xa4], eax
je 0x6af894
cmp byte [0x4974f1], 0
mov edi, dword [0x47c028]
jne 0x6ad906
xorps xmm0, xmm0
mov dword [ebp - 0xcc], 0
movups xmmword [ebp - 0xdc], xmm0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
lea edx, [ebp - 0xdc]
mov dword [ebp - 4], 0
call fcn.006ad18c
mov esi, dword [0x47c224]
test al, al
je 0x6ad73b
cmp dword [ebp - 0xc8], 0xf
lea eax, [ebp - 0xdc]
push pe_nt_image_headers32
cmova eax, dword [ebp - 0xdc]
push eax
push 0x497598
call fcn.006c7d3c
add esp, 0xc
mov byte [0x497697], 0
jmp 0x6ad74b
push 0x10
push str.Error
push str.Failed_to_load_input_text_from_file_
push 0
call esi
push 0x40
xor edx, edx
mov ecx, str.Login
call fcn.00679f0c
add esp, 4
push str.Welcome
call fcn.00697eac
add esp, 4
mov dword [ebp - 0xa0], 0
lea eax, [ebp - 0xa0]
mov dword [ebp - 0x9c], 0
xor edx, edx
mov ecx, str.Enter_Key
push 0
push 0
push 0
push eax
push pe_nt_image_headers32
push 0x497598
call fcn.0069dbfc
push 0
lea edx, [ebp - 0xa0]
mov dword [ebp - 0xa0], 0
mov ecx, str.Login
mov dword [ebp - 0x9c], 0
call fcn.0069857c
add esp, 0x1c
test al, al
je 0x6ad838
mov ecx, 0x497598
mov dword [ebp - 0xe4], 0
xorps xmm0, xmm0
mov dword [ebp - 0xe0], 0
movups xmmword [ebp - 0xf4], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x6ad7f3
sub ecx, edx
push ecx
push 0x497598
lea ecx, [ebp - 0xf4]
call fcn.006b69bc
mov eax, 1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0x53c], eax
mov dword [ebp - 0x9c], eax
call fcn.006ac8fc
mov byte [ebp - 0x95], 1
test al, al
jne 0x6ad83f
mov byte [ebp - 0x95], 0
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x53c]
test al, 1
je 0x6ad893
mov ecx, dword [ebp - 0xe0]
and eax, 0xfffffffe
mov dword [ebp - 0x53c], eax
cmp ecx, 0xf
jbe 0x6ad893
mov edx, dword [ebp - 0xf4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x6ad889
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x6afa0b
push ecx
push edx
call fcn.006bc14e
add esp, 8
cmp byte [ebp - 0x95], 0
je 0x6ad8b3
push 0x40
push str.Success
push str.Login_Successful_
push 0
call esi
mov byte [0x4974f1], 1
call fcn.0067c57c
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc8]
cmp ecx, 0xf
jbe 0x6ad8f9
mov edx, dword [ebp - 0xdc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x6ad8ef
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x6afa0b
push ecx
push edx
call fcn.006bc14e
add esp, 8
cmp byte [0x4974f1], 0
je 0x6aedb5
mov eax, dword [0x497418]
mov esi, dword [0x47c218]
push 1
mov dword [eax + 0xd58], 0
mov byte [eax + 0xd5c], 0
call esi
test ax, ax
mov eax, dword [0x497418]
je 0x6ad937
mov byte [eax + 0xd58], 1
or dword [eax + 0x3f18], 2
xor edx, edx
push 0
mov ecx, str.DC_UNIVERSE_OXY_Trainer_1.7
mov dword [eax + 0x3f38], 0x43af0000
mov dword [eax + 0x3f3c], 0x43960000
mov dword [eax + 0x3f20], 1
call fcn.00679f0c
add esp, 4
call fcn.006a27cc
test al, al
je 0x6aedb0
push ecx
mov ecx, str.Attack
call fcn.006a3ecc
add esp, 4
test al, al
je 0x6adb70
mov edx, 0x4974e7
mov ecx, str.NoDelay_Type_1
call fcn.0069978c
mov edx, 0x497416
mov ecx, str.NoDelay_Type_2
call fcn.0069978c
mov edx, 0x49742d
mov ecx, str.NoDelay_Type_3
call fcn.0069978c
mov edx, 0x4974f0
mov ecx, str.NoDelay_Type_4
call fcn.0069978c
mov edx, 0x49748e
mov ecx, str.NoDelay_Type_5
call fcn.0069978c
mov edx, 0x49749c
mov ecx, str.Hold_Left_Fast_Attack
call fcn.0069978c
mov eax, dword [0x497418]
sub esp, 8
mov edx, 0x497524
or dword [eax + 0x3ec8], 1
push 0x495b84
push ecx
mov ecx, str.Left_Attack_Key
mov dword [eax + 0x3ecc], 0x43160000
call fcn.0069a87c
mov edx, 0x4974a6
mov ecx, str.Hold_Right_Fast_Attack
call fcn.0069978c
mov eax, dword [0x497418]
add esp, 8
mov edx, 0x497528
or dword [eax + 0x3ec8], 1
push 0x495b64
push ecx
mov ecx, str.Right_Attack_Key
mov dword [eax + 0x3ecc], 0x43160000
call fcn.0069a87c
mov eax, dword [0x497418]
add esp, 0xc
mov edx, 4
mov dword [ebp - 0x9c], 0x64
mov ecx, str.Left_Attack_Speed
mov dword [ebp - 0x18], 1
or dword [eax + 0x3ec8], 1
mov dword [eax + 0x3ecc], 0x43160000
lea eax, [ebp - 0x9c]
push str.Speed:__d__
push eax
lea eax, [ebp - 0x18]
push eax
push 0x495b7c
call fcn.0069b0bc
mov eax, dword [0x497418]
add esp, 0x10
mov edx, 4
mov dword [ebp - 0x9c], 0x64
mov ecx, str.Right_Attack_Speed
mov dword [ebp - 0x18], 1
or dword [eax + 0x3ec8], 1
mov dword [eax + 0x3ecc], 0x43160000
lea eax, [ebp - 0x9c]
push str.Speed:__d__
push eax
lea eax, [ebp - 0x18]
push eax
push 0x495b60
call fcn.0069b0bc
mov eax, dword [0x495b7c]
add esp, 0x14
cmp eax, 1
jne 0x6adb05
push str.Use_At_Own_Risk_
jmp 0x6adb24
cmp eax, 0x31
jge 0x6adb11
push str.Almost_Legit
jmp 0x6adb24
cmp eax, 0x64
jge 0x6adb1d
push str.Kinda_Legit
jmp 0x6adb24
jne 0x6adb2c
push str.Legit
call fcn.00697eac
add esp, 4
mov edx, 0x4974a1
mov ecx, str.Left_Attack_Long_Distance
call fcn.0069978c
mov ecx, dword [0x497418]
mov edx, dword [ecx + 0x3e30]
cmp byte [edx + 0x93], 0
jne 0x6adb70
mov ecx, dword [ecx + 0x4244]
test ecx, ecx
je 0x6adb70
movsx eax, word [ecx + 0x6c]
imul eax, eax, 0x2c
add eax, dword [ecx + 8]
test byte [eax + 4], 8
jne 0x6adb70
dec dword [edx + 0xc8]
push ecx
mov ecx, str.Speed
call fcn.006a3ecc
add esp, 4
test al, al
je 0x6add91
mov edx, 0x4974e4
mov ecx, str.Speed_Force__No_SlowDown
call fcn.0069978c
mov eax, dword [0x497418]
mov edx, 8
push ecx
push str._.1f
mov ecx, str.Speed_Force_Value
mov dword [ebp - 0x18], 0
or dword [eax + 0x3ec8], 1
mov dword [eax + 0x3ecc], 0x43160000
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x9c], 0x42c80000
push eax
push 0x495ba4
call fcn.0069b0bc
add esp, 0x14
mov edx, 0x4974a0
mov ecx, str.Acrobat_Speed
call fcn.0069978c
mov eax, dword [0x497418]
mov edx, 8
push ecx
push str._.1f
mov ecx, str.Acrobat_Speed_Value
mov dword [ebp - 0x18], 0
or dword [eax + 0x3ec8], 1
mov dword [eax + 0x3ecc], 0x43160000
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x9c], 0x42c80000
push eax
push 0x495b80
call fcn.0069b0bc
add esp, 0x14
mov edx, 0x497415
mov ecx, str.Edit_Height
call fcn.0069978c
mov eax, dword [0x497418]
mov edx, 8
push ecx
push str._.3f
mov ecx, str.Height__Amount
mov dword [ebp - 0x18], 0x40a00000
or dword [eax + 0x3ec8], 1
mov dword [eax + 0x3ecc], 0x43160000
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x9c], 0x447a0000
push eax
push 0x495b40
call fcn.0069b0bc
add esp, 0x14
mov edx, 0x4974a3
mov ecx, str.Edit_Fly_Up____Down
call fcn.0069978c
mov eax, dword [0x497418]
mov edx, 8
push ecx
push str._.3f
mov ecx, str.Fly__Amount
mov dword [ebp - 0x18], 0xc1200000
or dword [eax + 0x3ec8], 1
mov dword [eax + 0x3ecc], 0x43160000
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x9c], 0x42c80000
push eax
push 0x495ba0
call fcn.0069b0bc
add esp, 0x14
mov edx, 0x4974a4
mov ecx, str.Flight_Speed
call fcn.0069978c
mov eax, dword [0x497418]
or dword [eax + 0x3ec8], 1
push ecx
mov dword [eax + 0x3ecc], 0x43160000
mov edx, 8
push str._.3f
lea eax, [ebp - 0x9c]
mov dword [ebp - 0x18], 0xc1200000
push eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x9c], 0x42c80000
push eax
push 0x495b44
mov ecx, str.Fly_Faster___Amount__
call fcn.0069b0bc
mov ecx, dword [0x497418]
add esp, 0x14
mov edx, dword [ecx + 0x3e30]
cmp byte [edx + 0x93], 0
jne 0x6add91
mov ecx, dword [ecx + 0x4244]
test ecx, ecx
je 0x6add91
movsx eax, word [ecx + 0x6c]
imul eax, eax, 0x2c
add eax, dword [ecx + 8]
test byte [eax + 4], 8
jne 0x6add91
dec dword [edx + 0xc8]
push ecx
mov ecx, str.Misc
call fcn.006a3ecc
add esp, 4
test al, al
je 0x6ade9f
mov edx, 0x497426
mov ecx, str.Auto_Soder_Cola
call fcn.0069978c
mov edx, 0x497496
mov ecx, str.Bunny_Hop
call fcn.0069978c
mov edx, 0x4974e5
mov ecx, str.Infinite_Jump
call fcn.0069978c
mov edx, 0x4974a5
mov ecx, str.No_Player_Animation
call fcn.0069978c
mov edx, 0x49742e
mov ecx, str.No_Clip
call fcn.0069978c
mov edx, 0x49749f
mov ecx, str.Weird_Movement
call fcn.0069978c
mov edx, 0x497425
mov ecx, str.Walk_On_Water
call fcn.0069978c
mov edx, 0x49749d
mov ecx, str.Invisible___Not_Stable__
call fcn.0069978c
mov edx, 0x49742c
mov ecx, str.Always_Boom
call fcn.0069978c
mov edx, 0x497494
mov ecx, str.Go_Mutant
call fcn.0069978c
mov edx, 0x49748f
mov ecx, str.Remove_Effects
call fcn.0069978c
mov edx, 0x49748d
mov ecx, str.No_Boom_Effect
call fcn.0069978c
mov edx, 0x49749e
mov ecx, str.No_Black_And_White
call fcn.0069978c
mov ecx, dword [0x497418]
mov edx, dword [ecx + 0x3e30]
cmp byte [edx + 0x93], 0
jne 0x6ade9f
mov ecx, dword [ecx + 0x4244]
test ecx, ecx
je 0x6ade9f
movsx eax, word [ecx + 0x6c]
imul eax, eax, 0x2c
add eax, dword [ecx + 8]
test byte [eax + 4], 8
jne 0x6ade9f
dec dword [edx + 0xc8]
push ecx
mov ecx, str.Tele
call fcn.006a3ecc
add esp, 4
test al, al
je 0x6aedab
push 0x26
call esi
shr eax, 0xf
and al, 1
push 0x28
mov byte [0x4974a9], al
call esi
shr eax, 0xf
and al, 1
push 0x25
mov byte [0x4974ab], al
call esi
shr eax, 0xf
and al, 1
push 0x27
mov byte [0x4974e6], al
call esi
shr eax, 0xf
lea ecx, [ebp - 0xdc]
xorps xmm0, xmm0
mov dword [ebp - 0xa8], 0
push 0xa
and al, 1
movq qword [ebp - 0xb0], xmm0
push 0x48914c
mov byte [0x49749b], al
movups xmmword [ebp - 0xc0], xmm0
mov dword [ebp - 0xcc], 0
movups xmmword [ebp - 0xdc], xmm0
mov dword [ebp - 0xc8], 0
call fcn.006b69bc
push ecx
lea eax, [ebp - 0xdc]
mov dword [ebp - 4], 2
push eax
lea ecx, [ebp - 0xc0]
call fcn.006ac12c
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0xc8]
cmp ecx, 0xf
jbe 0x6adf8e
mov edx, dword [ebp - 0xdc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x6adf84
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x6afa10
push ecx
push edx
call fcn.006bc14e
add esp, 8
push 0
lea edx, [ebp - 0xa0]
mov dword [ebp - 0xcc], 0
mov ecx, str.Save_Current_Position
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0
call fcn.0069857c
add esp, 4
test al, al
je 0x6adfe1
lea ecx, [ebp - 0xc0]
call fcn.006ac5cc
mov esi, dword [0x47c058]
lea eax, [ebp - 0xf8]
push 0
push 4
push eax
push dword [ebp - 0xac]
mov dword [ebp - 0xf8], 0
push dword [ebp - 0xb4]
call esi
mov eax, dword [ebp - 0xac]
lea ecx, [ebp - 0xfc]
movss xmm0, dword [ebp - 0xf8]
add eax, 0xfffffffc
push 0
push 4
push ecx
push eax
push dword [ebp - 0xb4]
movss dword [ebp - 0x9c], xmm0
mov dword [ebp - 0xfc], 0
call esi
mov eax, dword [ebp - 0xac]
lea ecx, [ebp - 0x100]
movss xmm0, dword [ebp - 0xfc]
add eax, 0xfffffff8
push 0
push 4
push ecx
push eax
push dword [ebp - 0xb4]
movss dword [ebp - 0x18], xmm0
mov dword [ebp - 0x100], 0
call esi
movss xmm0, dword [ebp - 0x9c]
lea eax, [ebp - 0x88]
cvtps2pd xmm0, xmm0
sub esp, 0x18
movsd qword [esp + 0x10], xmm0
movss xmm0, dword [ebp - 0x18]
cvtps2pd xmm0, xmm0
movsd qword [esp + 8], xmm0
movss xmm0, dword [ebp - 0x100]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.X:__.2f__Y:__.2f__Z:__.2f
push 0x64
push eax
call fcn.006a859c
xorps xmm0, xmm0
mov dword [ebp - 0xe4], 0
lea ecx, [ebp - 0x88]
mov dword [ebp - 0xe0], 0
add esp, 0x24
lea edx, [ecx + 1]
movups xmmword [ebp - 0xf4], xmm0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x6ae0e4
sub ecx, edx
lea eax, [ebp - 0x88]
push ecx
push eax
lea ecx, [ebp - 0xf4]
call fcn.006b69bc
or dword [ebp - 0x53c], 8
xor ecx, ecx
mov byte [ebp - 4], 5
mov esi, dword [ebp - 0xc0]
mov eax, 0x38e38e39
mov dword [ebp - 0x540], ecx
mov ecx, dword [ebp - 0xbc]
sub ecx, esi
mov dword [ebp - 0x9c], esi
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x6ae3b3
xor eax, eax
mov dword [ebp - 0xc4], eax
nop word [eax + eax]
mov edx, dword [esi + eax + 0x10]
lea ecx, [esi + eax]
mov eax, 0x7fffffff
mov dword [ebp - 0x18], edx
sub eax, edx
cmp eax, 0xc
jb 0x6afa1a
cmp dword [ecx + 0x14], 0xf
mov dword [ebp - 0x548], ecx
jbe 0x6ae17a
mov eax, dword [ecx]
mov dword [ebp - 0x548], eax
add edx, 0xc
mov dword [ebp - 0xcc], 0
mov eax, 0xf
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0x544], edx
xorps xmm0, xmm0
lea esi, [ebp - 0xdc]
movups xmmword [ebp - 0xdc], xmm0
cmp edx, eax
jbe 0x6ae248
mov eax, edx
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x6ae1d4
mov eax, 0x80000000
mov dword [ebp - 0x98], 0x7fffffff
add eax, 0x23
jmp 0x6ae1fb
cmp eax, 0x16
mov ecx, 0x16
cmovb eax, ecx
mov dword [ebp - 0x98], eax
lea ecx, [eax + 1]
cmp ecx, 0x1000
jb 0x6ae223
lea eax, [ecx + 0x23]
cmp eax, ecx
jbe 0x6afa15
push eax
call fcn.006bc623
add esp, 4
test eax, eax
je 0x6afa0b
mov edx, dword [ebp - 0x544]
lea esi, [eax + 0x23]
and esi, 0xffffffe0
mov dword [esi - 4], eax
mov eax, dword [ebp - 0x98]
jmp 0x6ae242
test ecx, ecx
je 0x6ae240
push ecx
call fcn.006bc623
mov edx, dword [ebp - 0x544]
mov esi, eax
mov eax, dword [ebp - 0x98]
add esp, 4
jmp 0x6ae242
xor esi, esi
mov dword [ebp - 0xdc], esi
movq xmm0, qword [str.Teleport_to]
push dword [ebp - 0x18]
mov dword [ebp - 0xc8], eax
push dword [ebp - 0x548]
mov dword [ebp - 0xcc], edx
movq qword [esi], xmm0
mov eax, dword [0x489754]
mov dword [esi + 8], eax
lea eax, [esi + 0xc]
push eax
call fcn.006c081c
mov eax, dword [ebp - 0x18]
add esp, 0xc
or dword [ebp - 0x53c], 2
mov byte [esi + eax + 0xc], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xdc]
cmp dword [ebp - 0xc8], 0xf
lea edx, [ebp - 0x538]
push 0
cmova ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x538], 0
mov dword [ebp - 0x534], 0
call fcn.0069857c
mov byte [ebp - 4], 5
add esp, 4
mov ecx, dword [ebp - 0xc8]
mov byte [ebp - 0x95], al
cmp ecx, 0xf
jbe 0x6ae312
mov edx, dword [ebp - 0xdc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x6ae302
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x6afa0b
push ecx
push edx
call fcn.006bc14e
mov al, byte [ebp - 0x95]
add esp, 8
test al, al
je 0x6ae36e
mov eax, dword [ebp - 0x9c]
mov esi, dword [ebp - 0xc4]
add eax, 0x18
add esi, eax
push 0
push 4
lea eax, [esi + 8]
push eax
push dword [ebp - 0xac]
push dword [ebp - 0xb4]
call edi
mov ecx, dword [ebp - 0xac]
lea eax, [esi + 4]
push 0
push 4
push eax
add ecx, 0xfffffffc
push ecx
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push esi
add eax, 0xfffffff8
push eax
push dword [ebp - 0xb4]
call edi
mov ecx, dword [ebp - 0xbc]
mov eax, 0x38e38e39
mov esi, dword [ebp - 0xc0]
sub ecx, esi
inc dword [ebp - 0x540]
add dword [ebp - 0xc4], 0x24
imul ecx
mov dword [ebp - 0x9c], esi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x540], eax
jae 0x6ae3b3
mov eax, dword [ebp - 0xc4]
jmp 0x6ae14c
lea edx, [ebp - 0x94]
lea ecx, [ebp - 0xf4]
call fcn.006aba4c
test al, al
je 0x6ae3e5
movq xmm0, qword [ebp - 0x94]
mov eax, dword [ebp - 0x8c]
movq qword [0x497550], xmm0
mov dword [0x497558], eax
jmp 0x6ae3f2
push str.Error_parsing_current_position.
call fcn.00697eac
add esp, 4
sub esp, 8
mov dword [ebp - 0x18], 0x3c23d70a
lea eax, [ebp - 0x9c]
mov dword [ebp - 0x9c], 0x3f800000
mov ecx, 0x48447c
push eax
lea eax, [ebp - 0x18]
push eax
push 0x497550
call fcn.0069bc6c
add esp, 0xc
mov dword [ebp - 0x18], 0x3c23d70a
lea eax, [ebp - 0x9c]
mov dword [ebp - 0x9c], 0x3f800000
mov ecx, 0x484480
push eax
lea eax, [ebp - 0x18]
push eax
push 0x497554
call fcn.0069bc6c
add esp, 0xc
mov dword [ebp - 0x18], 0x3c23d70a
lea eax, [ebp - 0x9c]
mov dword [ebp - 0x9c], 0x3f800000
mov ecx, 0x484484
push eax
lea eax, [ebp - 0x18]
push eax
push 0x497558
call fcn.0069bc6c
add esp, 0x14
xor edx, edx
mov ecx, str.Hero_Clubs_Teleportation
push 1
call fcn.006977ec
add esp, 4
mov dword [ebp - 0x538], 0
lea edx, [ebp - 0x538]
mov dword [ebp - 0x534], 0
mov ecx, str.Teleport_To_Midtown_MPD_Station
push 0
call fcn.0069857c
add esp, 4
test al, al
je 0x6ae50a
push 0
push 4
push 0x495bd4
push dword [ebp - 0xac]
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x495bd0
add eax, 0xfffffffc
push eax
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x495bcc
add eax, 0xfffffff8
push eax
push dword [ebp - 0xb4]
call edi
push 0
lea edx, [ebp - 0x538]
mov dword [ebp - 0x538], 0
mov ecx, str.Teleport_To_Chinatown_MPD_Station
mov dword [ebp - 0x534], 0
call fcn.0069857c
add esp, 4
test al, al
je 0x6ae584
push 0
push 4
push 0x495c2c
push dword [ebp - 0xac]
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x495c28
add eax, 0xfffffffc
push eax
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x495c24
add eax, 0xfffffff8
push eax
push dword [ebp - 0xb4]
call edi
push 0
lea edx, [ebp - 0x538]
mov dword [ebp - 0x538], 0
mov ecx, str.Teleport_To_Little_Bohemia_MPD_Station
mov dword [ebp - 0x534], 0
call fcn.0069857c
add esp, 4
test al, al
je 0x6ae5fe
push 0
push 4
push 0x495b38
push dword [ebp - 0xac]
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x495b34
add eax, 0xfffffffc
push eax
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x495b30
add eax, 0xfffffff8
push eax
push dword [ebp - 0xb4]
call edi
push 0
lea edx, [ebp - 0x538]
mov dword [ebp - 0x538], 0
mov ecx, str.Teleport_To_East_End_GCPD_Station
mov dword [ebp - 0x534], 0
call fcn.0069857c
add esp, 4
test al, al
je 0x6ae678
push 0
push 4
push 0x495c20
push dword [ebp - 0xac]
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x495c1c
add eax, 0xfffffffc
push eax
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x495c18
add eax, 0xfffffff8
push eax
push dword [ebp - 0xb4]
call edi
push 0
lea edx, [ebp - 0x538]
mov dword [ebp - 0x538], 0
mov ecx, str.Teleport_To_Diamond_Dist._GCPD_Station
mov dword [ebp - 0x534], 0
call fcn.0069857c
add esp, 4
test al, al
je 0x6ae6f2
push 0
push 4
push 0x495bb0
push dword [ebp - 0xac]
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x495bac
add eax, 0xfffffffc
push eax
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x495ba8
add eax, 0xfffffff8
push eax
push dword [ebp - 0xb4]
call edi
push 1
xor edx, edx
mov ecx, str.Villian_Clubs_Teleportation
call fcn.006977ec
add esp, 4
mov dword [ebp - 0x538], 0
lea edx, [ebp - 0x538]
mov dword [ebp - 0x534], 0
mov ecx, str.Teleport_To_Chinatown_Nightclub
push 0
call fcn.0069857c
add esp, 4
test al, al
je 0x6ae77d
push 0
push 4
push 0x495bec
push dword [ebp - 0xac]
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x495be8
add eax, 0xfffffffc
push eax
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x495be4
add eax, 0xfffffff8
push eax
push dword [ebp - 0xb4]
call edi
push 0
lea edx, [ebp - 0x538]
mov dword [ebp - 0x538], 0
mov ecx, str.Teleport_To_Little_Bohemia_NightClub
mov dword [ebp - 0x534], 0
call fcn.0069857c
add esp, 4
test al, al
je 0x6ae7f7
push 0
push 4
push 0x495bc8
push dword [ebp - 0xac]
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x495bc4
add eax, 0xfffffffc
push eax
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x495bc0
add eax, 0xfffffff8
push eax
push dword [ebp - 0xb4]
call edi
push 0
lea edx, [ebp - 0x538]
mov dword [ebp - 0x538], 0
mov ecx, str.Teleport_To_Midtown_Nightclub
mov dword [ebp - 0x534], 0
call fcn.0069857c
add esp, 4
test al, al
je 0x6ae871
push 0
push 4
push 0x495c58
push dword [ebp - 0xac]
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x495c54
add eax, 0xfffffffc
push eax
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x495c50
add eax, 0xfffffff8
push eax
push dword [ebp - 0xb4]
call edi
push 0
lea edx, [ebp - 0x538]
mov dword [ebp - 0x538], 0
mov ecx, str.Teleport_To_Burnley_Nightclub
mov dword [ebp - 0x534], 0
call fcn.0069857c
add esp, 4
test al, al
je 0x6ae8eb
push 0
push 4
push 0x495be0
push dword [ebp - 0xac]
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x495bdc
add eax, 0xfffffffc
push eax
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x495bd8
add eax, 0xfffffff8
push eax
push dword [ebp - 0xb4]
call edi
push 0
lea edx, [ebp - 0x538]
mov dword [ebp - 0x538], 0
mov ecx, str.Teleport_To_North_Burnley_Night_Club
mov dword [ebp - 0x534], 0
call fcn.0069857c
add esp, 4
test al, al
je 0x6ae965
push 0
push 4
push 0x495bbc
push dword [ebp - 0xac]
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x495bb8
add eax, 0xfffffffc
push eax
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x495bb4
add eax, 0xfffffff8
push eax
push dword [ebp - 0xb4]
call edi
push 0
lea edx, [ebp - 0x538]
mov dword [ebp - 0x538], 0
mov ecx, str.House_Of_Legends
mov dword [ebp - 0x534], 0
call fcn.0069857c
add esp, 4
test al, al
je 0x6ae9df
push 0
push 4
push 0x495bf8
push dword [ebp - 0xac]
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x495bf4
add eax, 0xfffffffc
push eax
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x495bf0
add eax, 0xfffffff8
push eax
push dword [ebp - 0xb4]
call edi
cmp dword [ebp - 0xe0], 0xf
lea eax, [ebp - 0xf4]
cmova eax, dword [ebp - 0xf4]
push eax
push str.Current_Position:__s
call fcn.00697eac
mov eax, dword [0x497418]
mov edx, 0x497417
mov ecx, str.Move_Straight
or dword [eax + 0x3ec8], 1
mov dword [eax + 0x3ecc], 0x43480000
call fcn.0069978c
add esp, 4
mov dword [ebp - 0x18], 0x3f800000
lea eax, [ebp - 0x9c]
mov dword [ebp - 0x9c], 0x41700000
mov edx, 8
mov ecx, str.Move_Straight_Amount
push str._.3f
push eax
lea eax, [ebp - 0x18]
push eax
push 0x495b3c
call fcn.0069b0bc
add esp, 0x14
mov edx, 0x497495
mov ecx, str.Move_Left
call fcn.0069978c
mov eax, dword [0x497418]
mov edx, 8
push ecx
push str._.3f
mov ecx, str.Move_Left_Amount
mov dword [ebp - 0x18], 0x3f800000
or dword [eax + 0x3ec8], 1
mov dword [eax + 0x3ecc], 0x43480000
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x9c], 0x41700000
push eax
push 0x495b4c
call fcn.0069b0bc
add esp, 0x14
mov edx, 0x497424
mov ecx, str.Move_Right
call fcn.0069978c
mov eax, dword [0x497418]
mov edx, 8
push ecx
push str._.3f
mov ecx, str.Move_Right_Amount
mov dword [ebp - 0x18], 0x3f800000
or dword [eax + 0x3ec8], 1
mov dword [eax + 0x3ecc], 0x43480000
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x9c], 0x41700000
push eax
push 0x495b48
call fcn.0069b0bc
mov al, byte [0x497417]
add esp, 0x14
test al, al
je 0x6aec0c
cmp byte [0x4974a9], 0
je 0x6aeb9a
movss xmm0, dword [0x497550]
addss xmm0, dword [0x495b3c]
push 0
push 4
push 0x497558
push dword [ebp - 0xac]
movss dword [0x497550], xmm0
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x497554
add eax, 0xfffffffc
push eax
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x497550
add eax, 0xfffffff8
push eax
push dword [ebp - 0xb4]
call edi
mov al, byte [0x497417]
test al, al
je 0x6aec0c
cmp byte [0x4974ab], 0
je 0x6aec0c
movss xmm0, dword [0x497550]
subss xmm0, dword [0x495b3c]
push 0
push 4
push 0x497558
push dword [ebp - 0xac]
movss dword [0x497550], xmm0
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x497554
add eax, 0xfffffffc
push eax
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x497550
add eax, 0xfffffff8
push eax
push dword [ebp - 0xb4]
call edi
cmp byte [0x497495], 0
je 0x6aec83
cmp byte [0x4974e6], 0
je 0x6aec83
movss xmm0, dword [0x497554]
subss xmm0, dword [0x495b4c]
push 0
push 4
push 0x497558
push dword [ebp - 0xac]
movss dword [0x497554], xmm0
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x497554
add eax, 0xfffffffc
push eax
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x497550
add eax, 0xfffffff8
push eax
push dword [ebp - 0xb4]
call edi
cmp byte [0x497424], 0
je 0x6aecfa
cmp byte [0x49749b], 0
je 0x6aecfa
movss xmm0, dword [0x497554]
addss xmm0, dword [0x495b48]
push 0
push 4
push 0x497558
push dword [ebp - 0xac]
movss dword [0x497554], xmm0
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x497554
add eax, 0xfffffffc
push eax
push dword [ebp - 0xb4]
call edi
mov eax, dword [ebp - 0xac]
push 0
push 4
push 0x497550
add eax, 0xfffffff8
push eax
push dword [ebp - 0xb4]
call edi
mov ecx, dword [0x497418]
mov edx, dword [ecx + 0x3e30]
cmp byte [edx + 0x93], 0
jne 0x6aed2f
mov ecx, dword [ecx + 0x4244]
test ecx, ecx
je 0x6aed2f
movsx eax, word [ecx + 0x6c]
imul eax, eax, 0x2c
add eax, dword [ecx + 8]
test byte [eax + 4], 8
jne 0x6aed2f
dec dword [edx + 0xc8]
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0xe0]
cmp ecx, 0xf
jbe 0x6aed6d
mov edx, dword [ebp - 0xf4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x6aed63
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x6afa1f
push ecx
push edx
call fcn.006bc14e
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 0xf
mov byte [ebp - 0xf4], 0
test eax, eax
je 0x6aeda0
push eax
call dword [0x47c048]
lea ecx, [ebp - 0xc0]
call fcn.006b1ebc
call fcn.006a2bfc
call fcn.0067c57c
call fcn.00676cec
cmp byte [0x4974a1], 0
lea ecx, [ebp - 0x9c]
mov esi, dword [0x47c03c]
mov eax, dword [ebp - 0xa4]
push ecx
push 5
lea ecx, [ebp - 0x1c]
push ecx
je 0x6aede9
mov dword [ebp - 0x1c], 0x90909090
mov byte [ebp - 0x18], 0x90
jmp 0x6aedf4
mov dword [ebp - 0x1c], 0xfffe61e8
mov byte [ebp - 0x18], 0xff
add eax, 0x83126a
push eax
push dword [ebp - 0x104]
call edi
test eax, eax
jne 0x6aee29
call esi
push eax
push ecx
mov edx, str.WriteProcessMemory_failed._Error:
call fcn.006b59ac
add esp, 4
mov ecx, eax
call fcn.006b2c3c
push eax
call fcn.006b5c6c
add esp, 4
jmp 0x6aee32
cmp dword [ebp - 0x9c], 5
je 0x6aee3e
push dword [ebp - 0x104]
call dword [0x47c048]
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x9c]
push ecx
push 5
lea ecx, [ebp - 0x1c]
add eax, 0x50490c
cmp byte [0x49749f], 0
push ecx
push eax
push dword [ebp - 0x104]
je 0x6aee73
mov dword [ebp - 0x1c], 0x90909090
mov byte [ebp - 0x18], 0x90
jmp 0x6aee7e
mov dword [ebp - 0x1c], 0x46110ff3
mov byte [ebp - 0x18], 0x68
call edi
test eax, eax
jne 0x6aeea7
call esi
push eax
push ecx
mov edx, str.WriteProcessMemory_failed._Error:
call fcn.006b59ac
add esp, 4
mov ecx, eax
call fcn.006b2c3c
push eax
call fcn.006b5c6c
add esp, 4
jmp 0x6aeeb0
cmp dword [ebp - 0x9c], 5
je 0x6aeebc
push dword [ebp - 0x104]
call dword [0x47c048]
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x9c]
push ecx
push 3
lea ecx, [ebp - 0x98]
add eax, 0x5048fc
cmp byte [0x49749d], 0
push ecx
push eax
push dword [ebp - 0x104]
je 0x6aeef9
mov word [ebp - 0x98], 0x9090
mov byte [ebp - 0x96], 0x90
jmp 0x6aef09
mov word [ebp - 0x98], 0x5ed9
mov byte [ebp - 0x96], 0x6c
call edi
test eax, eax
jne 0x6aef32
call esi
push eax
push ecx
mov edx, str.WriteProcessMemory_failed._Error:
call fcn.006b59ac
add esp, 4
mov ecx, eax
call fcn.006b2c3c
push eax
call fcn.006b5c6c
add esp, 4
jmp 0x6aef3b
cmp dword [ebp - 0x9c], 3
je 0x6aef47
push dword [ebp - 0x104]
call dword [0x47c048]
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x9c]
push ecx
push 6
lea ecx, [ebp - 0x1c]
add eax, 0x2cbd7c
cmp byte [0x49742c], 0
push ecx
push eax
push dword [ebp - 0x104]
je 0x6aef7e
mov dword [ebp - 0x1c], 0x90909090
mov word [ebp - 0x18], 0x9090
jmp 0x6aef8b
mov dword [ebp - 0x1c], 0x4c100ff3
mov word [ebp - 0x18], 0xc0a
call edi
test eax, eax
jne 0x6aefb4
call esi
push eax
push ecx
mov edx, str.WriteProcessMemory_failed._Error:
call fcn.006b59ac
add esp, 4
mov ecx, eax
call fcn.006b2c3c
push eax
call fcn.006b5c6c
add esp, 4
jmp 0x6aefbd
cmp dword [ebp - 0x9c], 6
je 0x6aefc9
push dword [ebp - 0x104]
call dword [0x47c048]
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x9c]
push ecx
push 4
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0xc4], 0x90909090
add eax, 0x2cbcdf
cmp byte [0x497494], 0
push ecx
push eax
push dword [ebp - 0x104]
jne 0x6af008
mov dword [ebp - 0xc4], 0xc0f5cd9
call edi
test eax, eax
jne 0x6af031
call esi
push eax
push ecx
mov edx, str.WriteProcessMemory_failed._Error:
call fcn.006b59ac
add esp, 4
mov ecx, eax
call fcn.006b2c3c
push eax
call fcn.006b5c6c
add esp, 4
jmp 0x6af03a
cmp dword [ebp - 0x9c], 4
je 0x6af046
push dword [ebp - 0x104]
call dword [0x47c048]
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x9c]
push ecx
push 3
lea ecx, [ebp - 0x98]
add eax, 0x8311fa
cmp byte [0x49748f], 0
push ecx
push eax
push dword [ebp - 0x104]
je 0x6af083
mov word [ebp - 0x98], 0x9090
mov byte [ebp - 0x96], 0x90
jmp 0x6af093
mov word [ebp - 0x98], 0x7e89
mov byte [ebp - 0x96], 0x44
call edi
test eax, eax
jne 0x6af0bc
call esi
push eax
push ecx
mov edx, str.WriteProcessMemory_failed._Error:
call fcn.006b59ac
add esp, 4
mov ecx, eax
call fcn.006b2c3c
push eax
call fcn.006b5c6c
add esp, 4
jmp 0x6af0c5
cmp dword [ebp - 0x9c], 3
je 0x6af0d1
push dword [ebp - 0x104]
call dword [0x47c048]
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x9c]
push ecx
push 5
lea ecx, [ebp - 0x1c]
add eax, 0x2c3425
cmp byte [0x497425], 0
push ecx
push eax
push dword [ebp - 0x104]
je 0x6af106
mov dword [ebp - 0x1c], 0x90909090
mov byte [ebp - 0x18], 0x90
jmp 0x6af111
mov dword [ebp - 0x1c], 0x41110ff3
mov byte [ebp - 0x18], 0x70
call edi
test eax, eax
jne 0x6af13a
call esi
push eax
push ecx
mov edx, str.WriteProcessMemory_failed._Error:
call fcn.006b59ac
add esp, 4
mov ecx, eax
call fcn.006b2c3c
push eax
call fcn.006b5c6c
add esp, 4
jmp 0x6af143
cmp dword [ebp - 0x9c], 5
je 0x6af14f
push dword [ebp - 0x104]
call dword [0x47c048]
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x9c]
push ecx
push 6
lea ecx, [ebp - 0x1c]
add eax, 0x504927
cmp byte [0x49748d], 0
push ecx
push eax
push dword [ebp - 0x104]
je 0x6af186
mov dword [ebp - 0x1c], 0x90909090
mov word [ebp - 0x18], 0x9090
jmp 0x6af193
mov dword [ebp - 0x1c], 0x15c90ff
mov word [ebp - 0x18], 0
call edi
test eax, eax
jne 0x6af1bc
call esi
push eax
push ecx
mov edx, str.WriteProcessMemory_failed._Error:
call fcn.006b59ac
add esp, 4
mov ecx, eax
call fcn.006b2c3c
push eax
call fcn.006b5c6c
add esp, 4
jmp 0x6af1c5
cmp dword [ebp - 0x9c], 6
je 0x6af1d1
push dword [ebp - 0x104]
call dword [0x47c048]
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x9c]
push ecx
push 5
lea ecx, [ebp - 0x1c]
add eax, 0x988e6f
cmp byte [0x49749e], 0
push ecx
push eax
push dword [ebp - 0x104]
je 0x6af206
mov dword [ebp - 0x1c], 0x90909090
mov byte [ebp - 0x18], 0x90
jmp 0x6af211
mov dword [ebp - 0x1c], 0x4d110ff3
mov byte [ebp - 0x18], 0xe8
call edi
test eax, eax
jne 0x6af23a
call esi
push eax
push ecx
mov edx, str.WriteProcessMemory_failed._Error:
call fcn.006b59ac
add esp, 4
mov ecx, eax
call fcn.006b2c3c
push eax
call fcn.006b5c6c
add esp, 4
jmp 0x6af243
cmp dword [ebp - 0x9c], 5
je 0x6af24f
push dword [ebp - 0x104]
call dword [0x47c048]
xorps xmm0, xmm0
movq qword [ebp - 0x538], xmm0
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x9c]
mov eax, dword [ebp - 0xa4]
push ecx
push 5
lea ecx, [ebp - 0x1c]
mov byte [ebp - 0x18], 6
add eax, 0x8312d2
mov dword [ebp - 0x1c], 0x8b909090
cmp byte [0x4974e7], 0
push ecx
push eax
push dword [ebp - 0x104]
jne 0x6af29b
mov dword [ebp - 0x1c], 0x8b3c4689
call edi
test eax, eax
jne 0x6af2c4
call esi
push eax
push ecx
mov edx, str.WriteProcessMemory_failed._Error:
call fcn.006b59ac
add esp, 4
mov ecx, eax
call fcn.006b2c3c
push eax
call fcn.006b5c6c
add esp, 4
jmp 0x6af2cd
cmp dword [ebp - 0x9c], 5
je 0x6af2d9
push dword [ebp - 0x104]
call dword [0x47c048]
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x9c]
push ecx
push 5
lea ecx, [ebp - 0x1c]
add eax, 0x8312c1
cmp byte [0x497416], 0
push ecx
push eax
push dword [ebp - 0x104]
je 0x6af30e
mov dword [ebp - 0x1c], 0x90909090
mov byte [ebp - 0x18], 0x90
jmp 0x6af319
mov dword [ebp - 0x1c], 0x8ba
mov byte [ebp - 0x18], 0
call edi
test eax, eax
jne 0x6af342
call esi
push eax
push ecx
mov edx, str.WriteProcessMemory_failed._Error:
call fcn.006b59ac
add esp, 4
mov ecx, eax
call fcn.006b2c3c
push eax
call fcn.006b5c6c
add esp, 4
jmp 0x6af34b
cmp dword [ebp - 0x9c], 5
je 0x6af357
push dword [ebp - 0x104]
call dword [0x47c048]
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x9c]
push ecx
push 2
lea ecx, [ebp - 0x98]
mov word [ebp - 0x98], 0x9090
add eax, 0x8312c6
cmp byte [0x49742d], 0
push ecx
push eax
push dword [ebp - 0x104]
jne 0x6af394
mov word [ebp - 0x98], 0x2eb
call edi
test eax, eax
jne 0x6af3bd
call esi
push eax
push ecx
mov edx, str.WriteProcessMemory_failed._Error:
call fcn.006b59ac
add esp, 4
mov ecx, eax
call fcn.006b2c3c
push eax
call fcn.006b5c6c
add esp, 4
jmp 0x6af3c6
cmp dword [ebp - 0x9c], 2
je 0x6af3d2
push dword [ebp - 0x104]
call dword [0x47c048]
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x9c]
push ecx
push 2
lea ecx, [ebp - 0x98]
mov word [ebp - 0x98], 0x9090
add eax, 0x8312ab
cmp byte [0x4974f0], 0
push ecx
push eax
push dword [ebp - 0x104]
jne 0x6af40f
mov word [ebp - 0x98], 0x1475
call edi
test eax, eax
jne 0x6af438
call esi
push eax
push ecx
mov edx, str.WriteProcessMemory_failed._Error:
call fcn.006b59ac
add esp, 4
mov ecx, eax
call fcn.006b2c3c
push eax
call fcn.006b5c6c
add esp, 4
jmp 0x6af441
cmp dword [ebp - 0x9c], 2
je 0x6af44d
push dword [ebp - 0x104]
call dword [0x47c048]
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x9c]
push ecx
push 3
lea ecx, [ebp - 0x98]
add eax, 0x83129d
cmp byte [0x49748e], 0
push ecx
push eax
push dword [ebp - 0x104]
je 0x6af48a
mov word [ebp - 0x98], 0x9090
mov byte [ebp - 0x96], 0x90
jmp 0x6af49a
mov word [ebp - 0x98], 0xf883
mov byte [ebp - 0x96], 1
call edi
test eax, eax
jne 0x6af4c3
call esi
push eax
push ecx
mov edx, str.WriteProcessMemory_failed._Error:
call fcn.006b59ac
add esp, 4
mov ecx, eax
call fcn.006b2c3c
push eax
call fcn.006b5c6c
add esp, 4
jmp 0x6af4cc
cmp dword [ebp - 0x9c], 3
je 0x6af4d8
push dword [ebp - 0x104]
call dword [0x47c048]
cmp byte [0x4974a0], 0
mov edx, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x104]
je 0x6af4f1
push 1
jmp 0x6af4f3
push 0
call fcn.006ab13c
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x9c]
add esp, 4
add eax, 0x2c36a4
cmp byte [0x4974a5], 0
push ecx
push 3
lea ecx, [ebp - 0x98]
push ecx
push eax
push dword [ebp - 0x104]
je 0x6af538
mov word [ebp - 0x98], 0x9090
mov byte [ebp - 0x96], 0x90
jmp 0x6af548
mov word [ebp - 0x98], 0x2f0f
mov byte [ebp - 0x96], 0xc3
call edi
test eax, eax
jne 0x6af571
call esi
push eax
push ecx
mov edx, str.WriteProcessMemory_failed._Error:
call fcn.006b59ac
add esp, 4
mov ecx, eax
call fcn.006b2c3c
push eax
call fcn.006b5c6c
add esp, 4
jmp 0x6af57a
cmp dword [ebp - 0x9c], 3
je 0x6af586
push dword [ebp - 0x104]
call dword [0x47c048]
cmp byte [0x497426], 0
je 0x6af5c8
mov edx, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x104]
call fcn.006ab83c
movsd xmm1, qword [0x489b98]
comisd xmm1, xmm0
jbe 0x6af5c8
mov esi, dword [0x47c204]
push 0
push 0
push 0
push 0x37
call esi
push 0
push 2
push 0
push 0x37
call esi
cmp byte [0x4974e5], 0
je 0x6af65b
mov al, byte [0x497427]
test al, al
jne 0x6af652
mov al, 1
mov ecx, 0x497427
xchg byte [ecx], al
push 8
lea esi, [ebp - 0xa4]
call fcn.006bc623
lea ecx, [ebp - 0x104]
mov dword [ebp - 0x9c], eax
add esp, 4
mov dword [eax], esi
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 8
push ecx
push 0
push eax
push 0x44e650
push 0
push 0
call fcn.006ce27d
mov ecx, eax
add esp, 0x18
mov dword [ebp - 0x1c], ecx
test ecx, ecx
je 0x6afa29
mov byte [ebp - 4], 7
cmp dword [0x497508], 0
jne 0x6afa24
mov eax, dword [ebp - 0x18]
mov dword [0x497504], ecx
mov dword [0x497508], eax
jmp 0x6af6ad
cmp byte [0x4974e5], 0
jne 0x6af6ad
mov al, byte [0x497427]
test al, al
je 0x6af6ad
xor al, al
mov ecx, 0x497427
xchg byte [ecx], al
cmp dword [0x497508], 0
je 0x6af6ad
call fcn.006bf57c
mov ecx, dword [0x497508]
cmp ecx, eax
je 0x6afa37
push 0
push ecx
push dword [0x497504]
call fcn.006bf582
add esp, 0xc
test eax, eax
jne 0x6afa3e
xorps xmm0, xmm0
movlpd qword [0x497504], xmm0
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x98]
push 0
push 2
add eax, 0x149dbe4
mov word [ebp - 0x98], 0x9090
cmp byte [0x49742e], 0
push ecx
push eax
push dword [ebp - 0x104]
jne 0x6af6e5
mov word [ebp - 0x98], 0xf631
call edi
cmp byte [0x4974a4], 0
mov edx, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x104]
je 0x6af700
push 1
jmp 0x6af702
push 0
call fcn.006ab4ec
movss xmm3, dword [0x489b90]
add esp, 4
cmp byte [0x497496], 0
mov edx, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x104]
je 0x6af72b
push 1
jmp 0x6af72d
push 0
call fcn.006aadfc
mov edx, dword [ebp - 0xa4]
add esp, 4
cmp byte [0x4974a3], 0
mov ecx, dword [ebp - 0x104]
je 0x6af74e
push 1
jmp 0x6af750
push 0
call fcn.006aaa7c
mov edx, dword [ebp - 0xa4]
add esp, 4
cmp byte [0x497415], 0
mov ecx, dword [ebp - 0x104]
je 0x6af771
push 1
jmp 0x6af773
push 0
call fcn.006aa38c
mov al, byte [0x4974e4]
add esp, 4
cmp al, byte [0x4974a8]
je 0x6af7a4
mov ecx, dword [ebp - 0x104]
movzx eax, al
push eax
call fcn.006aa71c
mov al, byte [0x4974e4]
add esp, 4
mov byte [0x4974a8], al
test al, al
je 0x6af7b8
mov ecx, dword [ebp - 0x104]
push 1
call fcn.006aa71c
add esp, 4
cmp byte [0x49749c], 0
je 0x6af7ca
mov cl, 1
call fcn.006aa12c
jmp 0x6af81c
mov al, 1
mov ecx, 0x49742f
xchg byte [ecx], al
cmp dword [0x4974f8], 0
je 0x6af813
call fcn.006bf57c
mov ecx, dword [0x4974f8]
cmp ecx, eax
je 0x6afa37
push 0
push ecx
push dword [0x4974f4]
call fcn.006bf582
add esp, 0xc
test eax, eax
jne 0x6afa3e
xorps xmm0, xmm0
movlpd qword [0x4974f4], xmm0
xor al, al
mov ecx, 0x497499
xchg byte [ecx], al
cmp byte [0x4974a6], 0
je 0x6af82e
mov cl, 1
call fcn.006a9e0c
jmp 0x6af880
mov al, 1
mov ecx, 0x49749a
xchg byte [ecx], al
cmp dword [0x497500], 0
je 0x6af877
call fcn.006bf57c
mov ecx, dword [0x497500]
cmp ecx, eax
je 0x6afa37
push 0
push ecx
push dword [0x4974fc]
call fcn.006bf582
add esp, 0xc
test eax, eax
jne 0x6afa3e
xorps xmm0, xmm0
movlpd qword [0x4974fc], xmm0
xor al, al
mov ecx, 0x4974aa
xchg byte [ecx], al
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x534], 0
jne 0x6afa45
mov eax, dword [0x497488]
push 0
push 7
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x497488]
push 0
push 0x1b
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x497488]
push 0
push 0xae
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x497488]
push 0
mov ecx, dword [eax]
push ecx
mov dword [esp], 0x3f800000
push 0
push 1
push 0
push 0
push eax
call dword [ecx + 0xac]
mov eax, dword [0x497488]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
js 0x6af92e
call fcn.0067703c
mov eax, dword [0x497418]
mov eax, dword [eax + 0x3fe4]
mov ecx, dword [eax]
xor eax, eax
add ecx, 0x38
cmp byte [ecx], al
cmove ecx, eax
call fcn.0069478c
mov eax, dword [0x497488]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov eax, dword [0x497488]
push 0
push 0
push 0
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x44]
cmp eax, 0x88760868
jne 0x6af9ed
mov eax, dword [0x497488]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
cmp eax, 0x88760869
jne 0x6af9ed
mov esi, dword [0x497418]
test esi, esi
je 0x6af9c3
mov esi, dword [esi + 0x70]
test esi, esi
je 0x6af9c3
cmp dword [esi], 0
je 0x6af9c3
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x6af98c
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [esi + 4], 0
mov ecx, dword [esi + 8]
test ecx, ecx
je 0x6af9a0
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [esi + 8], 0
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x6af9c3
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [0x497418]
mov dword [esi + 0xc], 0
mov eax, dword [eax + 0x40]
mov dword [eax + 4], 0
mov eax, dword [0x497488]
push 0x497430
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov eax, dword [0x497418]
test eax, eax
je 0x6af9ed
mov eax, dword [eax + 0x70]
test eax, eax
je 0x6af9ed
cmp dword [eax], 0
je 0x6af9ed
call fcn.00694cbc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.006bc02b
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.006ceffd
call fcn.006ceffd
call fcn.006a86bc
call fcn.006a875c
call fcn.006ceffd
call fcn.006ce4c2
push 6
mov dword [ebp - 0x18], 0
call fcn.006bd5c2
push 5
call fcn.006bd5c2
push 2
call fcn.006bd5c2
call fcn.006ce4c2
int3