Function at 0x1006dd60
Capabilities:
Check for foreground window switch
Check if file exists
Encode data using xor
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100b7b14
mov eax, dword fs:[0]
push eax
sub esp, 0x21c
mov eax, dword [0x100e41c4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [ebp - 0x124], ebx
cmp dword [0x10232e14], ebx
jne 0x1006de33
mov dword [0x10232e14], 1
cmp byte [0x101e70b6], bl
jne 0x1006ddc0
cmp byte [0x101e70b8], bl
je 0x1006de40
call fcn.10068910
cmp byte [0x101e70b8], bl
je 0x1006de33
call fcn.10067960
call fcn.10068e50
mov edx, 0x5e
xor ecx, ecx
nop
mov al, byte [ecx + 0x100d4e1c]
xor al, dl
mov byte [ebp + ecx - 0x120], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xc
jb 0x1006dde0
lea eax, [ebp - 0x120]
mov byte [ebp - 0x114], bl
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x118], ebx
xorps xmm0, xmm0
movq qword [ebp - 0x120], xmm0
mov byte [ebp - 0x114], bl
test eax, eax
je 0x1006de33
call fcn.10068dc0
call fcn.10067830
cmp dword [0x10232e14], 1
jne 0x10070488
mov esi, dword [0x101eec48]
cmp dword [esi + 0x3fd8], ebx
jg 0x1006de65
push 0x709
push str.f:3_supper_tools_bandicam_bdcam_2024_srcclientiantihackd3dhook_imguiimguiimgui.h
push str.i___0__i___Size
call fcn.1009dd6d
add esp, 0xc
mov eax, dword [esi + 0x3fe0]
xor edx, edx
push str.Background
mov ecx, dword [eax]
call fcn.1000ae50
add esp, 4
mov dword [0x101eeefc], eax
call fcn.100698a0
mov byte [0x101e7586], bl
cmp byte [0x10232de4], bl
je 0x1006df03
mov eax, dword [0x10232060]
inc eax
mov dword [0x10232060], eax
cmp eax, 0x96
jl 0x1006df42
push 0x532ccccc
lea ecx, [ebp - 0x19c]
call fcn.1007cde0
push 0
push eax
call dword [sym.imp.USER32.dll_FindWindowA]
lea ecx, [ebp - 0x121]
mov dword [ebp - 0x194], ebx
push ecx
xorps xmm0, xmm0
mov word [ebp - 0x190], bx
push eax
movq qword [ebp - 0x19c], xmm0
mov byte [ebp - 0x121], bl
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov byte [0x10232de4], bl
mov dword [0x10232060], ebx
mov byte [0x101ef914], bl
jmp 0x1006df42
push 0x532ccccc
lea ecx, [ebp - 0x138]
mov word [ebp - 0x124], 0x20
call fcn.1007cde0
lea ecx, [ebp - 0x124]
push ecx
push eax
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
je 0x1006df42
mov byte [0x101ef914], 1
mov byte [0x101e70c0], bl
mov byte [0x10232de4], 1
cmp byte [0x101e7180], bl
jne 0x1006df5d
mov al, byte [0x101e717f]
test al, al
je 0x1006df5d
mov byte [0x101e7180], al
call fcn.10059c40
add byte [0x101e6f00], 2
add byte [0x101e6f01], 3
add byte [0x101e6f02], 4
mov esi, dword [sym.imp.USER32.dll_GetForegroundWindow]
call esi
cmp eax, dword [0x101e70a8]
jne 0x1006dfce
push dword [0x101e7fe8]
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1006dfc8
cmp byte [0x101e7fec], bl
jne 0x1006dfce
cmp byte [0x101e70b4], bl
mov byte [0x101e7fec], 1
sete al
mov byte [0x101e70b4], al
test al, al
je 0x1006dfbd
mov byte [0x101e70c0], 1
jmp 0x1006dfd3
mov dword [0x10232dc0], ebx
jmp 0x10070436
mov byte [0x101e7fec], bl
mov al, byte [0x101e70b4]
test al, al
je 0x10070436
call esi
cmp eax, dword [0x101e70a8]
jne 0x10070436
mov eax, str.BZC5UXVMHTP
lea ecx, [ebp - 0x19c]
sub eax, 0x53588f90
push eax
call fcn.1007d560
push 0xbb
mov ecx, eax
mov dword [ebp - 4], 0
call fcn.10011050
add esp, 4
mov dword [ebp - 4], 0xffffffff
test al, al
je 0x1006e17a
movss xmm0, dword [0x101ef148]
lea ecx, [ebp - 0x1f4]
subss xmm0, dword [0x100d6850]
mov dword [ebp - 0x1f0], 0
movss dword [ebp - 0x1f4], xmm0
call fcn.10013d30
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1f4], 0x42c80000
mov dword [ebp - 0x1f0], 0x42c80000
call fcn.10013e20
mov edx, dword [0x101e6ef8]
xorps xmm1, xmm1
mov ecx, dword [0x101ef144]
movss xmm0, dword [0x100d67f0]
mov dword [ebp - 0x124], 0x441e8000
push dword [ebp - 0x124]
mov dword [ebp - 0x128], 0x42a40000
push dword [ebp - 0x128]
mov dword [ebp - 0x1f8], 0x441a0000
push dword [ebp - 0x1f8]
mov dword [ebp - 0x1fc], 0x40400000
push dword [ebp - 0x1fc]
push dword [0x101e6efc]
call fcn.1004d4e0
add esp, 0x14
xor ecx, ecx
call fcn.1000aa90
test al, al
je 0x1006e105
mov ecx, 0x101e76e4
mov byte [0x101e7586], 1
call fcn.1003fc90
test al, al
je 0x1006e123
cmp byte [0x101e70c0], 0
sete byte [0x101e70c0]
jmp 0x1006e123
mov ecx, 0x101e7ff8
call fcn.1003fc90
movzx ecx, byte [0x101e70c0]
xor edx, edx
test al, al
cmovne ecx, edx
mov byte [0x101e70c0], cl
mov ecx, dword [0x101eef94]
call fcn.10013820
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1f4], 0x41200000
mov dword [ebp - 0x1f0], 0x3f800000
call fcn.10015490
movaps xmm0, xmmword [0x100d6d80]
movups xmmword [ebp - 0x13c], xmm0
call fcn.100860d0
push eax
lea eax, [ebp - 0x13c]
push eax
call fcn.10031180
add esp, 8
call fcn.10013910
call fcn.10012eb0
cmp byte [0x101e70c0], 0
je 0x1007042c
mov eax, str._P__4XSYM
lea ecx, [ebp - 0x120]
sub eax, 0x257db478
push eax
call fcn.1007d5a0
push 0xbb
mov ecx, eax
mov dword [ebp - 4], 1
call fcn.10011050
mov dword [ebp - 4], 0xffffffff
add esp, 4
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
xorps xmm0, xmm0
movq qword [ebp - 0x120], xmm0
mov ecx, str.DKMZY
mov word [ebp - 0x118], 0
test al, al
je 0x1006fc89
mov eax, dword [0x101eec48]
movss xmm0, dword [0x100d684c]
mov byte [0x101e7586], 1
mov ecx, dword [eax + 0x3e30]
mov eax, dword [ecx + 0x10]
mov dword [0x10232044], eax
mov eax, dword [ecx + 0x14]
mov dword [0x10232048], eax
call fcn.100155e0
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1f4], 0x43c48000
mov dword [ebp - 0x1f0], 0x43eb0000
call fcn.10013e20
mov edx, dword [0x101e6ef8]
mov ecx, dword [0x101ef144]
movss xmm1, dword [0x100d6860]
movss xmm0, dword [0x100d6850]
mov dword [ebp - 0x1f8], 0x44140000
push dword [ebp - 0x1f8]
mov dword [ebp - 0x1fc], 0x43938000
push dword [ebp - 0x1fc]
mov dword [ebp - 0x124], 0x43750000
push dword [ebp - 0x124]
mov dword [ebp - 0x128], 0
push dword [ebp - 0x128]
push dword [0x101e6efc]
call fcn.1004d4e0
mov edx, dword [0x101e6ef8]
add esp, 0x14
mov ecx, dword [0x101ef144]
movss xmm1, dword [0x100d6844]
movss xmm0, dword [0x100d6854]
mov dword [ebp - 0x1f8], 0x436b0000
push dword [ebp - 0x1f8]
mov dword [ebp - 0x1fc], 0x43920000
push dword [ebp - 0x1fc]
mov dword [ebp - 0x124], 0x42920000
push dword [ebp - 0x124]
mov dword [ebp - 0x128], 0x40400000
push dword [ebp - 0x128]
push dword [0x101e6efc]
call fcn.1004d4e0
mov edx, dword [0x101e6ef8]
add esp, 0x14
mov ecx, dword [0x101ef144]
xorps xmm1, xmm1
movss xmm0, dword [0x100d6850]
mov dword [ebp - 0x1f8], 0x428a0000
push dword [ebp - 0x1f8]
mov dword [ebp - 0x1fc], 0x43d78000
push dword [ebp - 0x1fc]
mov dword [ebp - 0x124], 0x40400000
push dword [ebp - 0x124]
mov dword [ebp - 0x128], 0
push dword [ebp - 0x128]
push dword [0x101e6efc]
call fcn.1004d4e0
mov ecx, dword [0x101ef010]
add esp, 0x14
call fcn.10013820
xor edi, edi
mov dword [ebp - 0x1fc], 0x42b60000
mov dword [ebp - 0x1f8], 0x44368000
mov dword [ebp - 0x128], 0x40a00000
mov dword [ebp - 0x124], 0x44318000
mov dword [ebp - 0x11c], 0x40a00000
nop word [eax + eax]
push dword [ebp - 0x1f8]
mov edx, dword [0x101e6ef8]
push dword [ebp - 0x1fc]
mov ecx, dword [0x101ef144]
push dword [ebp - 0x124]
imul esi, edi, 0x19
push dword [ebp - 0x128]
push dword [0x101e6efc]
add esi, 0x47
movd xmm0, esi
cvtdq2ps xmm1, xmm0
movss xmm0, dword [0x100d67f0]
call fcn.1004d4e0
add esp, 0x14
cmp dword [0x101e70bc], edi
jne 0x1006e468
mov edx, dword [0x101e6ef8]
mov ecx, dword [0x101ef144]
movss xmm0, dword [0x100d67f0]
mov dword [ebp - 0x208], 0x44248000
push dword [ebp - 0x208]
mov dword [ebp - 0x20c], 0x42b60000
push dword [ebp - 0x20c]
mov dword [ebp - 0x210], 0x441f8000
push dword [ebp - 0x210]
movd xmm1, esi
mov dword [ebp - 0x214], 0x40a00000
push dword [ebp - 0x214]
cvtdq2ps xmm1, xmm1
push dword [0x101e6efc]
call fcn.1004d4e0
add esp, 0x14
xor ecx, ecx
call fcn.1000aa90
test al, al
je 0x1006e564
mov edx, dword [0x101e6ef8]
mov ecx, dword [0x101ef144]
mov dword [ebp - 0x218], 0x44308000
push dword [ebp - 0x218]
mov dword [ebp - 0x21c], 0x42b60000
push dword [ebp - 0x21c]
movd xmm0, esi
mov dword [ebp - 0x220], 0x442b8000
push dword [ebp - 0x220]
cvtdq2ps xmm1, xmm0
mov dword [ebp - 0x224], 0x40a00000
mov byte [0x101e7586], 1
push dword [ebp - 0x224]
movss xmm0, dword [0x100d67f0]
push dword [0x101e6efc]
call fcn.1004d4e0
add esp, 0x14
mov ecx, 0x101e76e4
call fcn.1003fc90
test al, al
je 0x1006e564
mov edx, dword [0x101e6ef8]
mov ecx, dword [0x101ef144]
mov dword [ebp - 0x200], 0x442a8000
push dword [ebp - 0x200]
mov dword [ebp - 0x204], 0x42b60000
push dword [ebp - 0x204]
movd xmm0, esi
mov dword [ebp - 0x1f0], 0x44258000
push dword [ebp - 0x1f0]
cvtdq2ps xmm1, xmm0
mov dword [ebp - 0x1f4], 0x40a00000
push dword [ebp - 0x1f4]
movss xmm0, dword [0x100d67f0]
push dword [0x101e6efc]
call fcn.1004d4e0
add esp, 0x14
mov dword [0x101e70bc], edi
lea eax, [edi + 3]
imul eax, eax, 0x19
lea ecx, [ebp - 0x11c]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x118], xmm0
call fcn.10015490
cmp edi, dword [0x101e70bc]
jne 0x1006e595
movaps xmm0, xmmword [0x100d6c60]
jmp 0x1006e59c
movaps xmm0, xmmword [0x100d6b40]
test edi, edi
jne 0x1006e5ef
push 0x2bbf6d97
lea ecx, [ebp - 0x1ec]
call fcn.1007d620
push eax
lea eax, [ebp - 0x164]
mov dword [ebp - 4], 2
push eax
movups xmmword [ebp - 0x164], xmm0
call fcn.10031180
mov dword [ebp - 4], 0xffffffff
xorps xmm0, xmm0
movq qword [ebp - 0x1ec], xmm0
mov dword [ebp - 0x1e4], edi
mov word [ebp - 0x1e0], di
jmp 0x1006e811
cmp edi, 1
jne 0x1006e64d
mov eax, str._ABCDEFG___
lea ecx, [ebp - 0x1ac]
sub eax, 0x3516377a
push eax
call fcn.1007d660
push eax
lea eax, [ebp - 0x164]
mov dword [ebp - 4], 3
push eax
movups xmmword [ebp - 0x164], xmm0
call fcn.10031180
mov dword [ebp - 4], 0xffffffff
xorps xmm0, xmm0
movq qword [ebp - 0x1ac], xmm0
mov dword [ebp - 0x1a4], 0
mov byte [ebp - 0x1a0], 0
jmp 0x1006e811
cmp edi, 2
jne 0x1006e6ab
mov eax, 0x100d292c
lea ecx, [ebp - 0x1bc]
sub eax, 0x140316fd
push eax
call fcn.1007d6a0
push eax
lea eax, [ebp - 0x164]
mov dword [ebp - 4], 4
push eax
movups xmmword [ebp - 0x164], xmm0
call fcn.10031180
mov dword [ebp - 4], 0xffffffff
xorps xmm0, xmm0
movq qword [ebp - 0x1bc], xmm0
mov dword [ebp - 0x1b4], 0
mov byte [ebp - 0x1b0], 0
jmp 0x1006e811
cmp edi, 3
jne 0x1006e703
push 0x2a8b6c2d
lea ecx, [ebp - 0x1cc]
call fcn.1007d6e0
push eax
lea eax, [ebp - 0x164]
mov dword [ebp - 4], 5
push eax
movups xmmword [ebp - 0x164], xmm0
call fcn.10031180
mov dword [ebp - 4], 0xffffffff
xorps xmm0, xmm0
movq qword [ebp - 0x1cc], xmm0
mov dword [ebp - 0x1c4], 0
mov byte [ebp - 0x1c0], 0
jmp 0x1006e811
cmp edi, 4
jne 0x1006e75b
push 0x8c975699
lea ecx, [ebp - 0x1dc]
call fcn.1007d720
push eax
lea eax, [ebp - 0x164]
mov dword [ebp - 4], 6
push eax
movups xmmword [ebp - 0x164], xmm0
call fcn.10031180
mov dword [ebp - 4], 0xffffffff
xorps xmm0, xmm0
movq qword [ebp - 0x1dc], xmm0
mov dword [ebp - 0x1d4], 0
mov byte [ebp - 0x1d0], 0
jmp 0x1006e811
cmp edi, 5
jne 0x1006e7b6
mov eax, 0x100d295c
lea ecx, [ebp - 0x19c]
sub eax, 0xdbc9971
push eax
call fcn.1007d760
push eax
lea eax, [ebp - 0x164]
mov dword [ebp - 4], 7
push eax
movups xmmword [ebp - 0x164], xmm0
call fcn.10031180
mov dword [ebp - 4], 0xffffffff
xorps xmm0, xmm0
movq qword [ebp - 0x19c], xmm0
mov dword [ebp - 0x194], 0
mov byte [ebp - 0x190], 0
jmp 0x1006e811
cmp edi, 6
jne 0x1006e814
mov eax, 0x100d296c
lea ecx, [ebp - 0x138]
sub eax, 0x4f93f29b
push eax
call fcn.1007d7a0
push eax
lea eax, [ebp - 0x164]
mov dword [ebp - 4], 8
push eax
movups xmmword [ebp - 0x164], xmm0
call fcn.10031180
mov dword [ebp - 4], 0xffffffff
xorps xmm0, xmm0
movq qword [ebp - 0x138], xmm0
mov dword [ebp - 0x130], 0
mov word [ebp - 0x12c], 0
add esp, 8
inc edi
cmp edi, 6
jle 0x1006e3b0
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x11c], 0x43160000
mov dword [ebp - 0x118], 0x42200000
call fcn.10015490
cmp byte [0x101e70b6], 0
movaps xmm0, xmmword [0x100d6c60]
je 0x1006e88f
mov eax, 0x100d297c
lea ecx, [ebp - 0x148]
sub eax, 0x20aecddc
push eax
call fcn.1007d7e0
push eax
lea eax, [ebp - 0x164]
mov dword [ebp - 4], 9
push eax
movups xmmword [ebp - 0x164], xmm0
call fcn.10031180
mov dword [ebp - 4], 0xffffffff
add esp, 8
movaps xmm0, xmmword [0x100d6c60]
cmp byte [0x101e70b7], 0
je 0x1006e8d3
mov eax, str.._0123Y_6XVUSUYMZarmm
lea ecx, [ebp - 0x144]
sub eax, 0x7a1cd17d
push eax
call fcn.1007d820
push eax
lea eax, [ebp - 0x164]
mov dword [ebp - 4], 0xa
push eax
movups xmmword [ebp - 0x164], xmm0
call fcn.10031180
add esp, 8
mov dword [ebp - 4], 0xffffffff
cmp byte [0x101e70ba], 0
je 0x1006e8f5
push 0x4ffd3c89
lea ecx, [ebp - 0x140]
call fcn.1007d8a0
mov dword [ebp - 4], 0xb
jmp 0x1006e91b
cmp byte [0x101e70b8], 0
je 0x1006e940
mov eax, 0x100d29b8
lea ecx, [ebp - 0x144]
sub eax, 0x30f27cc4
push eax
call fcn.1007d860
mov dword [ebp - 4], 0xc
movaps xmm0, xmmword [0x100d6c60]
push eax
lea eax, [ebp - 0x164]
push eax
movups xmmword [ebp - 0x164], xmm0
call fcn.10031180
mov dword [ebp - 4], 0xffffffff
add esp, 8
cmp byte [0x101e70b5], 0
je 0x1006e98b
mov eax, str._t_n_v_f_r
lea ecx, [ebp - 0x150]
sub eax, 0x39dce3d2
push eax
call fcn.1007ed00
push eax
mov dword [ebp - 4], 0xd
lea eax, [ebp - 0x164]
movaps xmm0, xmmword [0x100d6c60]
push eax
movups xmmword [ebp - 0x164], xmm0
call fcn.10031180
add esp, 8
mov dword [ebp - 4], 0xffffffff
cmp byte [0x101e70b9], 0
je 0x1006e9d6
mov eax, str._ae_ndbagau
lea ecx, [ebp - 0x148]
sub eax, 0x22dc9cfc
push eax
call fcn.1007d920
push eax
mov dword [ebp - 4], 0xe
lea eax, [ebp - 0x164]
movaps xmm0, xmmword [0x100d6c60]
push eax
movups xmmword [ebp - 0x164], xmm0
call fcn.10031180
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x11c], 0x42c80000
mov dword [ebp - 0x118], 0x42700000
call fcn.10015490
movzx eax, byte [0x101e6f00]
movss xmm1, dword [0x100d66d8]
movzx ecx, byte [0x101e6f01]
movzx edx, byte [0x101e6f02]
movd xmm0, eax
lea eax, [ebp - 0x164]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x130], 0x3f800000
push 0x101ef530
push eax
mulss xmm0, xmm1
movss dword [ebp - 0x13c], xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
movss dword [ebp - 0x138], xmm0
movd xmm0, edx
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
movss dword [ebp - 0x134], xmm0
movups xmm0, xmmword [ebp - 0x13c]
movups xmmword [ebp - 0x164], xmm0
call fcn.10031180
add esp, 8
call fcn.10013910
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x11c], 0x42dc0000
mov dword [ebp - 0x118], 0x42960000
call fcn.10015490
call fcn.10015920
cmp dword [0x101e70bc], 0
jne 0x1006f179
mov eax, str.DKMZY
lea ecx, [ebp - 0x120]
sub eax, 0x32634904
push eax
call fcn.1007cd60
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
push eax
call esi
test eax, eax
jne 0x1006eaee
cmp byte [0x101e70ba], 1
je 0x1006eaee
cmp byte [0x101e70b6], al
jne 0x1006eaee
cmp byte [0x101e70bb], 1
je 0x1006eaee
xor al, al
jmp 0x1006eaf0
mov al, 1
xor ebx, ebx
test al, al
je 0x1006f17f
push 0x3683d102
lea ecx, [ebp - 0x168]
call fcn.1007ddf0
mov esi, eax
mov dword [ebp - 4], 0xf
mov eax, 0x92
xor edx, edx
nop word [eax + eax]
mov cl, byte [edx + 0x100d4fd8]
xor cl, al
inc eax
mov byte [ebp + edx - 0x13c], cl
inc edx
movzx eax, al
cmp edx, 0xf
jb 0x1006eb20
mov byte [ebp - 0x12d], 0
push 0
push esi
mov edx, 0x101e7215
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x13c]
call fcn.1004d5d0
add esp, 8
lea ecx, [ebp - 0x178]
push 0x105b6357
call fcn.1007de30
mov ecx, eax
mov dword [ebp - 4], 0x11
call fcn.1004d680
mov dword [ebp - 4], 0xffffffff
xor ecx, ecx
movzx eax, byte [0x101e7254]
xorps xmm0, xmm0
cmp byte [0x101e7215], 1
movss xmm1, dword [0x100d68d0]
cmove eax, ecx
mov byte [0x101e7254], al
call fcn.100153e0
mov eax, dword [0x101eec48]
mov eax, dword [eax + 0x3e30]
movss xmm1, dword [eax + 0xd4]
subss xmm1, dword [eax + 0x10]
movss xmm0, dword [eax + 0x5c]
addss xmm0, xmm1
subss xmm0, dword [0x100d681c]
call fcn.10015540
movaps xmm0, xmmword [0x100d6dd0]
lea eax, [ebp - 0x164]
push 0x100ca68a
push eax
movups xmmword [ebp - 0x164], xmm0
call fcn.10031180
add esp, 8
lea ecx, [ebp - 0x120]
mov eax, 0x100d2d34
sub eax, 0x7c68f775
push eax
call fcn.1007deb0
mov esi, eax
push 0x841dedda
lea ecx, [ebp - 0x168]
mov dword [ebp - 4], 0x12
call fcn.1007de70
push ecx
push esi
sub esp, 8
mov byte [ebp - 4], 0x13
movss xmm2, dword [0x100d67f0]
mov edx, 0x101e721c
mov ecx, eax
call fcn.10034100
mov dword [ebp - 4], 0xffffffff
add esp, 0x10
mov eax, dword [0x101e721c]
mov ecx, 0x1388
cmp eax, 1
jg 0x1006ec68
mov dword [0x101e721c], 1
jmp 0x1006ec75
cmp eax, 0x1388
cmovge eax, ecx
mov dword [0x101e721c], eax
xor ecx, ecx
call fcn.1000aa90
test al, al
je 0x1006ecd6
xor ecx, ecx
call fcn.100164f0
mov eax, dword [0x101eec48]
movss xmm0, dword [eax + 0x3bcc]
mulss xmm0, dword [0x100d682c]
call fcn.10013a00
push 0x82ae8819
lea ecx, [ebp - 0x18c]
call fcn.1007df30
push ecx
xor edx, edx
mov dword [ebp - 4], 0x14
mov ecx, eax
call fcn.10030ca0
add esp, 4
mov dword [ebp - 4], 0xffffffff
call fcn.10013a80
call fcn.10016660
movss xmm1, dword [0x100d68d0]
xorps xmm0, xmm0
call fcn.100153e0
mov eax, dword [0x101eec48]
mov eax, dword [eax + 0x3e30]
movss xmm0, dword [eax + 0xd4]
subss xmm0, dword [eax + 0x10]
addss xmm0, dword [eax + 0x5c]
subss xmm0, dword [0x100d6828]
call fcn.10015540
movaps xmm0, xmmword [0x100d6dd0]
lea eax, [ebp - 0x164]
push 0x100ca68a
push eax
movups xmmword [ebp - 0x164], xmm0
call fcn.10031180
add esp, 8
lea ecx, [ebp - 0x11c]
mov eax, 0x100d2d90
sub eax, 0x43165410
push eax
call fcn.1007dfb0
mov esi, eax
mov ecx, 0x100d2d98
mov dword [ebp - 4], 0x15
sub ecx, 0x59b9d6c1
push ecx
lea ecx, [ebp - 0x168]
call fcn.1007df70
push ecx
push esi
sub esp, 8
mov byte [ebp - 4], 0x16
movss xmm2, dword [0x100d67f0]
mov edx, 0x101e7220
mov ecx, eax
call fcn.10034100
mov dword [ebp - 4], 0xffffffff
add esp, 0x10
mov eax, dword [0x101e7220]
mov edi, 0x3c
cmp eax, 1
jg 0x1006edaa
mov dword [0x101e7220], 1
jmp 0x1006edb5
cmp eax, 0x3c
cmovge eax, edi
mov dword [0x101e7220], eax
xor ecx, ecx
call fcn.1000aa90
test al, al
je 0x1006ee16
xor ecx, ecx
call fcn.100164f0
mov eax, dword [0x101eec48]
movss xmm0, dword [eax + 0x3bcc]
mulss xmm0, dword [0x100d682c]
call fcn.10013a00
push 0x6d96bfee
lea ecx, [ebp - 0x16c]
call fcn.1007e020
push ecx
xor edx, edx
mov dword [ebp - 4], 0x17
mov ecx, eax
call fcn.10030ca0
add esp, 4
mov dword [ebp - 4], 0xffffffff
call fcn.10013a80
call fcn.10016660
movss xmm1, dword [0x100d68d0]
xorps xmm0, xmm0
call fcn.100153e0
mov eax, dword [0x101eec48]
mov eax, dword [eax + 0x3e30]
movss xmm1, dword [eax + 0xd4]
subss xmm1, dword [eax + 0x10]
movss xmm0, dword [eax + 0x5c]
addss xmm0, xmm1
subss xmm0, dword [0x100d6828]
call fcn.10015540
movaps xmm0, xmmword [0x100d6dd0]
lea eax, [ebp - 0x164]
push 0x100ca68a
push eax
movups xmmword [ebp - 0x164], xmm0
call fcn.10031180
add esp, 8
lea ecx, [ebp - 0x128]
push 0x75c7a57d
call fcn.1007e0a0
mov esi, eax
push 0x7b51f6ec
lea ecx, [ebp - 0x168]
mov dword [ebp - 4], 0x18
call fcn.1007e060
push ecx
push esi
sub esp, 8
mov byte [ebp - 4], 0x19
movss xmm2, dword [0x100d67f0]
mov edx, 0x101e7224
mov ecx, eax
call fcn.10034100
mov dword [ebp - 4], 0xffffffff
add esp, 0x10
mov eax, dword [0x101e7224]
cmp eax, 1
jg 0x1006eedc
mov dword [0x101e7224], 1
jmp 0x1006eeeb
mov ecx, 0x190
cmp eax, ecx
cmovge eax, ecx
mov dword [0x101e7224], eax
xor ecx, ecx
call fcn.1000aa90
test al, al
je 0x1006ef52
xor ecx, ecx
call fcn.100164f0
mov eax, dword [0x101eec48]
movss xmm0, dword [eax + 0x3bcc]
mulss xmm0, dword [0x100d682c]
call fcn.10013a00
mov eax, 0x100d2de8
lea ecx, [ebp - 0x170]
sub eax, 0x5a55c45a
push eax
call fcn.1007e100
push ecx
xor edx, edx
mov dword [ebp - 4], 0x1a
mov ecx, eax
call fcn.10030ca0
add esp, 4
mov dword [ebp - 4], 0xffffffff
call fcn.10013a80
call fcn.10016660
mov eax, str.Ccaj_Se_
lea ecx, [ebp - 0x16c]
sub eax, 0x343cc260
push eax
call fcn.1007e210
mov esi, eax
push 0x85bff20b
lea ecx, [ebp - 0x11c]
mov dword [ebp - 4], 0x1b
call fcn.1007ed40
push 0
push esi
mov edx, 0x101e7200
mov byte [ebp - 4], 0x1c
mov ecx, eax
call fcn.1004d5d0
mov eax, dword [0x101e721c]
add esp, 8
cmp eax, 1
jg 0x1006efad
mov dword [0x101e721c], 1
jmp 0x1006efbf
cmp eax, 0x1388
mov ecx, 0x1388
cmovge eax, ecx
mov dword [0x101e721c], eax
mov eax, dword [0x101e7220]
cmp eax, 1
jg 0x1006efd5
mov dword [0x101e7220], 1
jmp 0x1006efe0
cmp eax, 0x3c
cmovge eax, edi
mov dword [0x101e7220], eax
push 0x301e996c
lea ecx, [ebp - 0x120]
call fcn.1007e290
push 1
push str.Player_Attack._nTn_Cng_Ngi_Chi.
mov edx, 0x101e71c0
mov dword [ebp - 4], 0x1d
mov ecx, eax
call fcn.1004d5d0
add esp, 8
lea ecx, [ebp - 0x120]
mov eax, 0x100d2fd4
sub eax, 0x63e14d53
push eax
call fcn.1007e420
push 1
push str.Monster_Attack._nTn_Cng_Qui_Th
mov edx, 0x101e71bc
mov dword [ebp - 4], 0x1e
mov ecx, eax
call fcn.1004d5d0
add esp, 8
mov edx, 0xb2
xor ecx, ecx
nop word [eax + eax]
mov al, byte [ecx + 0x100d4ff0]
xor al, dl
mov byte [ebp + ecx - 0x138], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xd
jb 0x1006f050
mov byte [ebp - 0x12b], 0
mov edx, 0x101e71cd
mov dword [ebp - 4], 0x1f
lea ecx, [ebp - 0x138]
call fcn.10032b40
movss xmm1, dword [0x100d68d0]
xorps xmm0, xmm0
call fcn.100153e0
mov eax, dword [0x101eec48]
mov eax, dword [eax + 0x3e30]
movss xmm1, dword [eax + 0xd4]
subss xmm1, dword [eax + 0x10]
movss xmm0, dword [eax + 0x5c]
addss xmm0, xmm1
subss xmm0, dword [0x100d6800]
call fcn.10015540
mov edx, 0xc4
xor ecx, ecx
nop
mov al, byte [ecx + 0x100d5000]
xor al, dl
mov byte [ebp + ecx - 0x164], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x11
jb 0x1006f0d0
mov byte [ebp - 0x153], 0
sub esp, 0xc
mov dword [ebp - 4], 0x20
mov edx, 0x101e71ce
lea ecx, [ebp - 0x164]
push 0x32
call fcn.10034ce0
add esp, 0x10
mov dword [ebp - 4], 0xffffffff
xor ecx, ecx
call fcn.1000aa90
test al, al
je 0x1006f179
xor ecx, ecx
call fcn.100164f0
mov eax, dword [0x101eec48]
movss xmm0, dword [eax + 0x3bcc]
mulss xmm0, dword [0x100d682c]
call fcn.10013a00
push 0x5cb003f2
lea ecx, [ebp - 0x174]
call fcn.1007e520
push ecx
xor edx, edx
mov dword [ebp - 4], 0x21
mov ecx, eax
call fcn.10030ca0
add esp, 4
mov dword [ebp - 4], 0xffffffff
call fcn.10013a80
call fcn.10016660
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
cmp dword [0x101e70bc], 1
jne 0x1006f679
push ecx
xor edx, edx
mov ecx, 0x100ca68a
call fcn.10030ca0
add esp, 4
call fcn.1004d8f0
push 1
push str.Dragon_Height_Range_Skill._n_nK_nng_phm_vi_chiu_cao_rng.
mov edx, 0x101e76a0
mov ecx, str.Evil
call fcn.1004d5d0
add esp, 8
lea ecx, [ebp - 0x120]
mov edi, str.DKMZY
sub edi, 0x32634904
push edi
call fcn.1007cd60
push eax
mov ebx, 2
call esi
test eax, eax
jne 0x1006f203
push 0x8da7d125
lea ecx, [ebp - 0x19c]
call fcn.1007ea40
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ebx, 6
push eax
call esi
test eax, eax
jne 0x1006f209
xor al, al
jmp 0x1006f20b
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov al, 1
test bl, 4
je 0x1006f213
and ebx, 0xfffffffb
test bl, 2
je 0x1006f21b
and ebx, 0xfffffffd
test al, al
je 0x1006f245
cmp byte [0x101e76a0], 0
mov edx, 0x100d2368
mov ecx, dword [0x101ef05c]
push 1
lea ecx, [ecx + 0xc]
jne 0x1006f23d
mov edx, 0x100d3778
call fcn.10085f50
add esp, 4
push 0x8da7d125
lea ecx, [ebp - 0x19c]
call fcn.1007ea40
push eax
call esi
test eax, eax
je 0x1006f31d
mov cl, byte [0x101e76a0]
mov al, byte [0x101ed438]
test cl, cl
je 0x1006f2c8
test al, al
je 0x1006f2c4
cmp dword [0x10232148], 0
je 0x1006f2ba
cmp dword [0x1023214c], 0
je 0x1006f2ba
xor esi, esi
cmp dword [0x10232058], esi
jle 0x1006f2ba
nop
mov ecx, dword [esi*4 + 0x10232148]
mov edx, 0x100d2784
push 5
call fcn.10085f50
inc esi
add esp, 4
cmp esi, dword [0x10232058]
jl 0x1006f290
mov cl, byte [0x101e76a0]
mov al, byte [0x101ed438]
test al, al
sete al
mov byte [0x101ed438], al
test cl, cl
jne 0x1006f31d
test al, al
jne 0x1006f31d
cmp dword [0x10232148], 0
je 0x1006f314
cmp dword [0x1023214c], 0
je 0x1006f314
xor esi, esi
cmp dword [0x10232058], esi
jle 0x1006f314
nop dword [eax + eax]
mov ecx, dword [esi*4 + 0x10232148]
mov edx, 0x100d5014
push 5
call fcn.10085f50
inc esi
add esp, 4
cmp esi, dword [0x10232058]
jl 0x1006f2f0
mov al, byte [0x101ed438]
test al, al
sete byte [0x101ed438]
push 1
push str.Magnet_Monster._n_nHt_qui_th.
mov edx, 0x101e76a1
mov ecx, 0x100d3694
call fcn.1004d5d0
push 1
push str.Murder_mode._n_nCh__cung_st.
mov edx, 0x101e76a2
mov ecx, str.Ctrl_All
call fcn.1004d5d0
movzx eax, byte [0x101e6f00]
movss xmm1, dword [0x100d66d8]
movzx ecx, byte [0x101e6f01]
movzx edx, byte [0x101e6f02]
movd xmm0, eax
lea eax, [ebp - 0x164]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x130], 0x3f800000
push 0x100ca68a
push eax
mulss xmm0, xmm1
movss dword [ebp - 0x13c], xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
movss dword [ebp - 0x138], xmm0
movd xmm0, edx
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
movss dword [ebp - 0x134], xmm0
movups xmm0, xmmword [ebp - 0x13c]
movups xmmword [ebp - 0x164], xmm0
call fcn.10031180
add esp, 0x18
lea ecx, [ebp - 0x168]
mov eax, str.Jxyol1Acqpr7Pxyp2
sub eax, 0x6bb0dbc1
push eax
call fcn.1007e690
push 0
push 0xa
mov edx, 0x101e71b0
mov dword [ebp - 4], 0x22
mov ecx, eax
call fcn.1004d7d0
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov eax, dword [0x101e71b0]
cmp eax, 1
jg 0x1006f418
mov dword [0x101e71b0], 1
jmp 0x1006f435
cmp eax, 0xa
jl 0x1006f429
mov dword [0x101e71b0], 0xa
jmp 0x1006f42e
cmp eax, 2
jl 0x1006f435
mov byte [0x101e71a0], 0
push 1
push str.AG_Cheat._n_nAG_v_hn.
mov edx, 0x101e76a3
mov ecx, str.AG_Cheat
call fcn.1004d5d0
movzx eax, byte [0x101e6f00]
movss xmm1, dword [0x100d66d8]
movzx ecx, byte [0x101e6f01]
movzx edx, byte [0x101e6f02]
movd xmm0, eax
lea eax, [ebp - 0x164]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x130], 0x3f800000
push 0x100ca68a
push eax
mulss xmm0, xmm1
movss dword [ebp - 0x13c], xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
movss dword [ebp - 0x138], xmm0
movd xmm0, edx
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
movss dword [ebp - 0x134], xmm0
movups xmm0, xmmword [ebp - 0x13c]
movups xmmword [ebp - 0x164], xmm0
call fcn.10031180
add esp, 0x10
lea ecx, [ebp - 0x164]
push 0x403de5df
call fcn.1007e6d0
push 0
push 0x13
mov edx, 0x101e71ac
mov dword [ebp - 4], 0x23
mov ecx, eax
call fcn.1004d7d0
mov dword [ebp - 4], 0xffffffff
add esp, 8
mov eax, dword [0x101e71ac]
cmp eax, 1
jg 0x1006f514
mov dword [0x101e71ac], 1
jmp 0x1006f523
mov ecx, 0x13
cmp eax, ecx
cmovge eax, ecx
mov dword [0x101e71ac], eax
push 1
push str.Attack_in_City._n_nS_dng_k_nng_trong_thnh.
mov edx, 0x101e76a4
mov ecx, str.Attack_in_City
call fcn.1004d5d0
push 0
push str.Effect_Resistance.._nKhng_Hiu_ng_Xu..
mov edx, 0x101e73d1
mov ecx, str.Effect
call fcn.1004d5d0
push 1
push str.Khng_B_Thng._nKhng_Khng._nAttack_Hack.
mov edx, 0x101e73d5
mov ecx, str.Hit_Hack
call fcn.1004d5d0
add esp, 0x18
lea ecx, [ebp - 0x170]
mov eax, str.eQRFKB_nxY_JB
sub eax, 0x4feb7beb
push eax
call fcn.1007e5e0
mov esi, eax
push 0x26f217ad
lea ecx, [ebp - 0x120]
mov dword [ebp - 4], 0x24
call fcn.1007edb0
push 1
push esi
mov edx, 0x101e73d3
mov byte [ebp - 4], 0x25
mov ecx, eax
call fcn.1004d5d0
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x120]
push edi
call fcn.1007cd60
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
push eax
call esi
test eax, eax
je 0x1006f5e6
push 1
push str.Injury_Resistance.._nKhng_B_Thng..
mov edx, 0x101e73d2
mov ecx, str.Injury
call fcn.1004d5d0
add esp, 8
push 0
push str.Kp_chut_phi.
mov edx, 0x101e73d7
mov ecx, str.Keep_Mouse_Right
call fcn.1004d5d0
push 1
push str.xDamage_Hack
mov edx, 0x101e7322
mov ecx, str.Muti_kill_Hack
call fcn.1004d5d0
add esp, 0x10
lea ecx, [ebp - 0x120]
push edi
call fcn.1007cd60
push eax
call esi
test eax, eax
je 0x1006f672
push 0
push str.Remember_location_after_death._nGhi_nh_v_tr_sau_khi_cht
mov edx, 0x101e73e4
mov ecx, str.Location_Death
call fcn.1004d5d0
push 1
push str.Plug_in_auto_this_location._nCm_auto_v_tr_ny
mov edx, 0x101e73e5
mov ecx, str.Plug_in_auto_this_location
call fcn.1004d5d0
movzx eax, byte [0x101e73e4]
add esp, 0x10
cmp byte [0x101e73e5], 0
mov ecx, 1
cmovne eax, ecx
mov byte [0x101e73e4], al
mov byte [0x101e76a6], 1
cmp dword [0x101e70bc], 2
jne 0x1006fb24
mov eax, str.DKMZY
lea ecx, [ebp - 0x120]
sub eax, 0x32634904
push eax
call fcn.1007cd60
push eax
or ebx, 8
call esi
test eax, eax
jne 0x1006f6ba
cmp byte [0x101e70ba], al
jne 0x1006f6ba
cmp byte [0x101e70b6], al
jne 0x1006f6ba
xor al, al
jmp 0x1006f6bc
mov al, 1
test bl, 8
je 0x1006f6d5
xorps xmm0, xmm0
mov word [ebp - 0x118], 0
movq qword [ebp - 0x120], xmm0
test al, al
je 0x1006fb24
mov ecx, dword [0x101eef94]
call fcn.10013820
movaps xmm0, xmmword [0x100d6f60]
lea eax, [ebp - 0x164]
push str.Timer_Detected_Drop
push eax
movups xmmword [ebp - 0x164], xmm0
call fcn.10031180
call fcn.10013910
movss xmm2, dword [0x100d67f0]
add esp, 4
mov edx, 0x101e7210
mov ecx, str.Timer_Detected_Drop_x
push str.time__d
sub esp, 8
call fcn.10034100
mov eax, dword [0x101e7210]
add esp, 0x10
cmp eax, 1
jg 0x1006f747
mov dword [0x101e7210], 1
jmp 0x1006f756
mov ecx, 0x708
cmp eax, ecx
cmovge eax, ecx
mov dword [0x101e7210], eax
xor ecx, ecx
call fcn.1000aa90
test al, al
je 0x1006f79c
xor ecx, ecx
call fcn.100164f0
mov eax, dword [0x101eec48]
movss xmm0, dword [eax + 0x3bcc]
mulss xmm0, dword [0x100d682c]
call fcn.10013a00
push ecx
xor edx, edx
mov ecx, str.30__1sec__30__1_giy_._nTc__nht_._nSpeed_of_picking_up_items.
call fcn.10030ca0
add esp, 4
call fcn.10013a80
call fcn.10016660
push 0
push str.T_ng_nht_Zen.
mov edx, 0x101e732e
mov ecx, 0x100d3914
call fcn.1004d5d0
push 1
push str.T_ng_Nht_Cc_Loi_Ngc___Qu.
mov edx, 0x101e732f
mov ecx, str.Jewel
call fcn.1004d5d0
push 1
push str.T_ng_Nht_Cc_Loi_Nguyn_Liu_Ch_To_Cnh.
mov edx, 0x101e7332
mov ecx, str.Condor
call fcn.1004d5d0
push 1
push str.Quickly_move_to_position._nDch_chuyn_nhanh_v_gi_tr.
mov edx, 0x101e76a7
mov ecx, str.Tele_Loot_object
call fcn.1004d5d0
mov ecx, dword [0x101eef94]
call fcn.10013820
movaps xmm0, xmmword [0x100d6f60]
lea eax, [ebp - 0x164]
push str.Range_Loot_Item
push eax
movups xmmword [ebp - 0x164], xmm0
call fcn.10031180
call fcn.10013910
movss xmm2, dword [0x100d67f0]
add esp, 0x24
mov edx, 0x101e7328
mov ecx, str.Range_Loot_Item..
push str.range__d
sub esp, 8
call fcn.10034100
mov eax, dword [0x101e7328]
add esp, 0x10
cmp eax, 3
jg 0x1006f85e
mov dword [0x101e7328], 3
jmp 0x1006f86d
mov ecx, 0x1e
cmp eax, ecx
cmovge eax, ecx
mov dword [0x101e7328], eax
xor ecx, ecx
call fcn.1000aa90
test al, al
je 0x1006f8b3
xor ecx, ecx
call fcn.100164f0
mov eax, dword [0x101eec48]
movss xmm0, dword [eax + 0x3bcc]
mulss xmm0, dword [0x100d682c]
call fcn.10013a00
push ecx
xor edx, edx
mov ecx, str.Range_Loot_Item._nPhm_Vi_Nht_.
call fcn.10030ca0
add esp, 4
call fcn.10013a80
call fcn.10016660
mov edx, 0x101e73ca
mov ecx, str.PickUp1
call fcn.10032b40
movss xmm1, dword [0x100d68d0]
xorps xmm0, xmm0
call fcn.100153e0
mov eax, dword [0x101eec48]
mov eax, dword [eax + 0x3e30]
movss xmm1, dword [eax + 0xd4]
subss xmm1, dword [eax + 0x10]
movss xmm0, dword [eax + 0x5c]
addss xmm0, xmm1
subss xmm0, dword [0x100d6810]
call fcn.10015540
sub esp, 0xc
mov edx, 0x101e7334
mov ecx, str.Item_1
push 0x19
call fcn.10034ce0
movss xmm1, dword [0x100d68d0]
xorps xmm0, xmm0
call fcn.100153e0
mov edx, 0x101e73cb
mov ecx, str.PickUp2
call fcn.10032b40
movss xmm1, dword [0x100d68d0]
xorps xmm0, xmm0
call fcn.100153e0
mov eax, dword [0x101eec48]
mov eax, dword [eax + 0x3e30]
movss xmm1, dword [eax + 0xd4]
subss xmm1, dword [eax + 0x10]
movss xmm0, dword [eax + 0x5c]
addss xmm0, xmm1
subss xmm0, dword [0x100d6810]
call fcn.10015540
add esp, 4
mov edx, 0x101e734d
mov ecx, str.Item_2
push 0x19
call fcn.10034ce0
mov edx, 0x101e73cc
mov ecx, str.PickUp3
call fcn.10032b40
movss xmm1, dword [0x100d68d0]
xorps xmm0, xmm0
call fcn.100153e0
mov eax, dword [0x101eec48]
mov eax, dword [eax + 0x3e30]
movss xmm0, dword [eax + 0xd4]
subss xmm0, dword [eax + 0x10]
addss xmm0, dword [eax + 0x5c]
subss xmm0, dword [0x100d6810]
call fcn.10015540
add esp, 4
mov edx, 0x101e7366
mov ecx, str.Item_3
push 0x19
call fcn.10034ce0
movss xmm1, dword [0x100d68d0]
xorps xmm0, xmm0
call fcn.100153e0
mov edx, 0x101e73cd
mov ecx, str.PickUp4
call fcn.10032b40
movss xmm1, dword [0x100d68d0]
xorps xmm0, xmm0
call fcn.100153e0
mov eax, dword [0x101eec48]
mov eax, dword [eax + 0x3e30]
movss xmm0, dword [eax + 0xd4]
subss xmm0, dword [eax + 0x10]
addss xmm0, dword [eax + 0x5c]
subss xmm0, dword [0x100d6810]
call fcn.10015540
add esp, 4
mov edx, 0x101e737f
mov ecx, str.Item_4
push 0x19
call fcn.10034ce0
mov edx, 0x101e73ce
mov ecx, str.PickUp5
call fcn.10032b40
movss xmm1, dword [0x100d68d0]
xorps xmm0, xmm0
call fcn.100153e0
mov eax, dword [0x101eec48]
mov eax, dword [eax + 0x3e30]
movss xmm1, dword [eax + 0xd4]
subss xmm1, dword [eax + 0x10]
movss xmm0, dword [eax + 0x5c]
addss xmm0, xmm1
subss xmm0, dword [0x100d6810]
call fcn.10015540
add esp, 4
mov edx, 0x101e7398
mov ecx, str.Item_5
push 0x19
call fcn.10034ce0
movss xmm1, dword [0x100d68d0]
xorps xmm0, xmm0
call fcn.100153e0
mov edx, 0x101e73cf
mov ecx, str.PickUp6
call fcn.10032b40
movss xmm1, dword [0x100d68d0]
xorps xmm0, xmm0
call fcn.100153e0
mov eax, dword [0x101eec48]
mov eax, dword [eax + 0x3e30]
movss xmm1, dword [eax + 0xd4]
subss xmm1, dword [eax + 0x10]
movss xmm0, dword [eax + 0x5c]
addss xmm0, xmm1
subss xmm0, dword [0x100d6810]
call fcn.10015540
add esp, 4
mov edx, 0x101e73b1
mov ecx, str.Item_6
push 0x19
call fcn.10034ce0
add esp, 0x10
cmp dword [0x101e70bc], 6
jne 0x1006fc7a
mov eax, str.ox_r_N_T
lea ecx, [ebp - 0x11c]
sub eax, 0x29c0d9a
push eax
call fcn.1007e790
push 0
push 0
mov edx, 0x101e7508
mov dword [ebp - 4], 0x26
mov ecx, eax
call fcn.1004d5d0
add esp, 8
lea ecx, [ebp - 0x120]
mov eax, 0x100d499c
sub eax, 0xdf1ee06
push eax
call fcn.1007e800
push 1
push 0
mov edx, 0x101e7509
mov dword [ebp - 4], 0x27
mov ecx, eax
call fcn.1004d5d0
add esp, 8
mov edx, 0xbd
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ecx + 0x100d52ec]
xor al, dl
mov byte [ebp + ecx - 0x164], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x10
jb 0x1006fba0
mov byte [ebp - 0x154], 0
push 1
push 0
mov edx, 0x101e750a
mov dword [ebp - 4], 0x28
lea ecx, [ebp - 0x164]
call fcn.1004d5d0
add esp, 8
lea ecx, [ebp - 0x120]
mov eax, str._66G
sub eax, 0x64a19d9d
push eax
call fcn.1007e840
push 0
push 0
mov edx, 0x101e750b
mov dword [ebp - 4], 0x29
mov ecx, eax
call fcn.1004d5d0
add esp, 8
mov edx, 0x9d
xor ecx, ecx
nop word [eax + eax]
mov al, byte [ecx + 0x100d5300]
xor al, dl
mov byte [ebp + ecx - 0x13c], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0xf
jb 0x1006fc20
mov byte [ebp - 0x12d], 0
push 1
push 0
mov edx, 0x101e750c
mov dword [ebp - 4], 0x2a
lea ecx, [ebp - 0x13c]
call fcn.1004d5d0
push 0
push 0
mov edx, 0x101e750d
mov dword [ebp - 4], 0xffffffff
mov ecx, str.ESP_index_drop
call fcn.1004d5d0
add esp, 0x10
call fcn.10015aa0
call fcn.10012eb0
mov ecx, str.DKMZY
sub ecx, 0x32634904
push ecx
lea ecx, [ebp - 0x120]
call fcn.1007cd60
push eax
call esi
test eax, eax
je 0x10070436
push 0x1fa794c3
lea ecx, [ebp - 0x128]
call fcn.1007e8d0
push 0xbf
mov ecx, eax
mov dword [ebp - 4], 0x2b
call fcn.10011050
add esp, 4
mov dword [ebp - 4], 0xffffffff
test al, al
je 0x10070436
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x11c], 0x43858000
mov dword [ebp - 0x118], 0x43858000
call fcn.10013e20
movss xmm0, dword [0x10232044]
lea ecx, [ebp - 0x11c]
addss xmm0, dword [0x100d6894]
movss dword [ebp - 0x11c], xmm0
movss xmm0, dword [0x10232048]
addss xmm0, dword [0x100d6840]
movss dword [ebp - 0x118], xmm0
call fcn.10013d30
mov edx, dword [0x101e6ef0]
xorps xmm1, xmm1
mov ecx, dword [0x101eeeec]
movss xmm0, dword [0x100d67f0]
mov dword [ebp - 0x1f0], 0x437f0000
push dword [ebp - 0x1f0]
mov dword [ebp - 0x1f4], 0x437f0000
push dword [ebp - 0x1f4]
mov dword [ebp - 0x200], 0
push dword [ebp - 0x200]
mov dword [ebp - 0x204], 0
push dword [ebp - 0x204]
push dword [0x101e6ef4]
call fcn.1004d4e0
add esp, 0x14
xor ecx, ecx
call fcn.1000aa90
test al, al
je 0x1007014c
mov eax, dword [0x101eef38]
test eax, eax
je 0x1007014c
cmp dword [eax], 5
jne 0x10070341
mov eax, dword [0x101ef154]
mov esi, dword [eax]
call fcn.1000ade0
movss xmm0, dword [0x10232044]
movss xmm5, dword [0x100d6894]
movss xmm3, dword [0x100d67f0]
addss xmm0, xmm5
cvttss2si ecx, dword [eax + 0xd48]
movss xmm1, dword [0x10232048]
movss xmm4, dword [0x100d6874]
addss xmm1, xmm4
movd xmm2, ecx
cvtdq2ps xmm2, xmm2
addss xmm1, dword [0x100d6788]
subss xmm2, xmm0
subss xmm2, xmm3
movss dword [0x10232924], xmm2
cvttss2si eax, dword [eax + 0xd4c]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
cvttss2si eax, xmm1
add eax, 0x3b
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm2
cvttss2si edx, xmm0
movss dword [0x10232928], xmm0
shl edx, 8
add eax, edx
movzx eax, word [eax + eax + 0x8177d64]
test ax, ax
je 0x1006fe6e
cmp eax, 1
jne 0x10070164
mov al, byte [0x1023295d]
test al, al
jne 0x1006feaf
mov ecx, 0x101e76e4
call fcn.1003fc90
test al, al
je 0x100700b0
cvttss2si eax, dword [0x10232924]
mov byte [0x1023295d], 1
mov dword [0x10232d4c], eax
cvttss2si eax, dword [0x10232928]
mov dword [0x10232c2c], eax
jmp 0x100700b0
mov ebx, dword [0x10232d4c]
mov ecx, dword [0x10232c2c]
lea edi, [ebx + edx]
cmp word [edi + edi + 0x8177d66], 0
je 0x1006ffa9
lea eax, [ecx + edx]
cmp word [eax + eax + 0x8177d64], 1
je 0x1006ffa4
cmp word [edi + edi + 0x8177d62], 0
je 0x1006fefd
mov eax, ecx
sub eax, edx
cmp word [eax + eax + 0x8177d64], 1
jne 0x100700b0
cmp byte [0x1023295d], 1
jne 0x100700b0
imul eax, ebx, 0x64
push 0x64
mov byte [esi + 0x8c], bl
mov byte [esi + 0x90], cl
add eax, 0x32
movd xmm1, eax
imul eax, ecx, 0x64
cvtdq2ps xmm1, xmm1
add eax, 0x32
movss dword [esi + 0x3b8], xmm1
movss dword [esi + 0x37c], xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esi + 0x3bc], xmm0
movss dword [esi + 0x380], xmm0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [0x10232d4c]
mov ecx, esi
push dword [0x10232c2c]
lea edx, [edx - 1]
call fcn.1003ff40
mov edx, dword [0x10232d4c]
add esp, 4
mov ecx, esi
mov byte [0x1023295d], 0
push dword [0x10232c2c]
call fcn.1003ff40
mov eax, dword [0x10232d4c]
mov ecx, dword [0x10232c2c]
mov byte [esi + 0x8c], al
imul eax, eax, 0x64
jmp 0x10070071
mov al, byte [0x1023295d]
cmp al, 1
jne 0x100700b0
imul eax, ebx, 0x64
mov dword [0x101e7208], 0
push 0x64
mov dword [0x101eefa8], 0
mov dword [0x101ef1b4], 0
add eax, 0x32
mov byte [esi + 0x8c], bl
mov byte [esi + 0x90], cl
movd xmm1, eax
imul eax, ecx, 0x64
cvtdq2ps xmm1, xmm1
add eax, 0x32
movss dword [esi + 0x3b8], xmm1
movss dword [esi + 0x37c], xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esi + 0x3bc], xmm0
movss dword [esi + 0x380], xmm0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [0x10232d4c]
mov ecx, esi
push dword [0x10232c2c]
lea edx, [edx + 1]
call fcn.1003ff40
mov edx, dword [0x10232d4c]
add esp, 4
mov ecx, esi
mov byte [0x1023295d], 0
push dword [0x10232c2c]
call fcn.1003ff40
mov edx, dword [0x10232d4c]
mov ecx, dword [0x10232c2c]
mov byte [esi + 0x8c], dl
imul eax, edx, 0x64
mov dword [0x100e65bc], edx
mov dword [0x100e65cc], ecx
add eax, 0x32
mov word [esi + 0x58], 0
add esp, 4
mov word [esi + 0x2ce], 0x101
mov byte [esi + 0x90], cl
movd xmm0, eax
imul eax, ecx, 0x64
cvtdq2ps xmm0, xmm0
add eax, 0x32
movss dword [esi + 0x3b8], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esi + 0x3bc], xmm0
xor ecx, ecx
call fcn.100164f0
mov eax, dword [0x101eec48]
movss xmm0, dword [eax + 0x3bcc]
mulss xmm0, dword [0x100d682c]
call fcn.10013a00
push 0xff
lea eax, [ebp - 0x110]
push 0
push eax
call fcn.10090bb0
cvttss2si eax, dword [0x10232928]
add esp, 0xc
push eax
cvttss2si eax, dword [0x10232924]
push eax
push dword [0x101ef00c]
lea eax, [ebp - 0x110]
push str.MAP__i:___i__i_._nPress_R_Mouse_to_get_the_coordinates._nNhn_chut_phi__ly_ta_._n_nLeft_Mouse_to_teleport.
push eax
call fcn.1003a9e0
add esp, 0x14
cmp byte [0x10232920], 0
push ecx
jne 0x10070125
lea ecx, [ebp - 0x110]
jmp 0x10070138
cmp byte [0x101ef917], 1
mov ecx, str.Right_click_to_turn_off_auto_scroll..._nClick_chut_phi__tt_t_ng_di_chuyn...
je 0x10070138
mov ecx, str.Map_check_progress...Please_wait._n_nTin_trnh_kim_tra_bn_..._nXin_vui_lng_ch_i.
xor edx, edx
call fcn.10030ca0
add esp, 4
call fcn.10013a80
call fcn.10016660
movss xmm3, dword [0x100d67f0]
movss xmm4, dword [0x100d6874]
movss xmm5, dword [0x100d6894]
mov eax, dword [0x101eef38]
cmp dword [eax], 5
jne 0x10070341
mov ecx, dword [0x10232dc0]
cmp ecx, 0x64
jg 0x10070265
movzx eax, byte [0x101e6f00]
lea edx, [ebp - 0x13c]
movss xmm1, dword [0x100d66d8]
add ecx, 5
movss xmm2, dword [0x10232048]
addss xmm2, xmm4
mov dword [0x10232dc0], ecx
movd xmm0, eax
movzx eax, byte [0x101e6f01]
cvtdq2ps xmm0, xmm0
push 0
mov dword [ebp - 0x130], 0x3f169697
mulss xmm0, xmm1
movss dword [ebp - 0x13c], xmm0
movd xmm0, eax
movzx eax, byte [0x101e6f02]
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
movss dword [ebp - 0x138], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
movss xmm1, dword [0x10232044]
addss xmm1, xmm5
movss dword [ebp - 0x134], xmm0
movd xmm0, dword [0x100e65bc]
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
movd xmm0, dword [0x100e65cc]
cvtdq2ps xmm0, xmm0
addss xmm1, xmm3
subss xmm2, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
lea ecx, [ebp - 0x11c]
addss xmm2, dword [0x100d6840]
movss dword [ebp - 0x11c], xmm1
movss xmm1, dword [0x100d6858]
subss xmm1, xmm0
movss dword [ebp - 0x118], xmm2
call fcn.1003a900
add esp, 4
movzx eax, byte [0x101e6f00]
lea edx, [ebp - 0x13c]
movss xmm1, dword [0x100d66d8]
lea ecx, [ebp - 0x11c]
movss xmm2, dword [0x10232044]
addss xmm2, dword [0x100d6894]
movd xmm0, eax
movzx eax, byte [0x101e6f01]
cvtdq2ps xmm0, xmm0
push 0x64
mov dword [ebp - 0x130], 0x3f800000
mulss xmm0, xmm1
movss dword [ebp - 0x13c], xmm0
movd xmm0, eax
movzx eax, byte [0x101e6f02]
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
movss dword [ebp - 0x138], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
movss xmm1, dword [0x100d6788]
movss dword [ebp - 0x134], xmm0
movd xmm0, dword [0x100e65bc]
cvtdq2ps xmm0, xmm0
addss xmm2, xmm0
movd xmm0, dword [0x100e65cc]
cvtdq2ps xmm0, xmm0
addss xmm2, dword [0x100d67f0]
movss dword [ebp - 0x11c], xmm2
movss xmm2, dword [0x10232048]
addss xmm2, dword [0x100d6874]
subss xmm2, xmm0
addss xmm2, dword [0x100d6840]
movss dword [ebp - 0x118], xmm2
call fcn.1003a900
add esp, 4
movzx eax, byte [0x101e6f00]
lea edx, [ebp - 0x11c]
movss xmm1, dword [0x100d66d8]
lea ecx, [ebp - 0x1f4]
movss xmm2, dword [0x10232044]
xorps xmm3, xmm3
addss xmm2, dword [0x100d6894]
movd xmm0, eax
movzx eax, byte [0x101e6f01]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x130], 0x3f800000
movss dword [ebp - 0x1f4], xmm2
mulss xmm0, xmm1
movss dword [ebp - 0x13c], xmm0
movd xmm0, eax
movzx eax, byte [0x101e6f02]
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
movss dword [ebp - 0x138], xmm0
movd xmm0, eax
lea eax, [ebp - 0x13c]
cvtdq2ps xmm0, xmm0
push eax
mulss xmm0, xmm1
movss xmm1, dword [0x10232048]
movss dword [ebp - 0x134], xmm0
movaps xmm0, xmm2
addss xmm0, dword [0x100d6874]
addss xmm0, dword [0x100d6804]
movss dword [ebp - 0x11c], xmm0
movaps xmm0, xmm1
addss xmm0, dword [0x100d6874]
addss xmm1, dword [0x100d6840]
addss xmm0, dword [0x100d6840]
movss dword [ebp - 0x1f0], xmm1
movss dword [ebp - 0x118], xmm0
call fcn.1003a950
add esp, 4
call fcn.10012eb0
jmp 0x10070436
mov dword [0x10232dc0], 0
push dword [0x101e76e4]
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
call esi
test ax, ax
je 0x1007045b
cmp byte [0x101e76e8], 0
jne 0x10070462
mov byte [0x101e76e8], 1
jmp 0x10070462
mov byte [0x101e76e8], 0
push dword [0x101e7fb8]
call esi
test ax, ax
je 0x10070481
cmp byte [0x101e7fbc], 0
jne 0x10070488
mov byte [0x101e7fbc], 1
jmp 0x10070488
mov byte [0x101e7fbc], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1008d9f1
mov esp, ebp
pop ebp
ret