Function at 0x10078ede
Capabilities:
Allocate or change rwx memory
Connect socket
Create thread
Encode data using xor
Execute shellcode via indirect call
Initialize winsock library
Link many functions at runtime
Log keystrokes via application hook
Query or enumerate registry value
Resolve dns
Spawn thread to rwx shellcode
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1015fae9
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x5e0
mov eax, dword [0x1018b06c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp byte [0x102fbe7a], 0
jne 0x10078c8c
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x40]
push eax
push 0x40
push 0xd21fff
push 0x401000
mov byte [0x102fbe7a], 1
call edi
test eax, eax
je 0x10078c8c
lea ecx, [ebp - 0x5d0]
call fcn.10007540
push ecx
push 0x102f8b14
push str..DataKGDataLocalServerGame.info
lea ecx, [ebp - 0x5d0]
call fcn.10007670
test al, al
je 0x10078c6e
push 0
push 0x20
push 3
push 0
push 1
push connect
push str..DataKGDataLocalServerGame.info
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x10078c6e
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, 0x8ef78
je 0x10078caa
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x10
push str.Error
push str.ServerGame.info_no_funciona_o_es_invalida_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x103073d0
call fcn.10008650
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100d52b0
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push eax
push 0x8ef78
push 0x101ee514
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x10078c67
xor ecx, ecx
nop
mov eax, ecx
shr eax, 8
xor al, 0x95
add al, byte [ecx + 0x101ee514]
xor al, cl
xor al, 0xda
mov byte [ecx + 0x101ee514], al
inc ecx
cmp ecx, 0x8ef78
jb 0x10078cd0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x5d0]
call fcn.10007540
push ecx
push 0x102f8b18
push str..DataKGDataLocalEffectGame.info
lea ecx, [ebp - 0x5d0]
call fcn.10007670
test al, al
je 0x10078d55
push 0
push 0x20
push 3
push 0
push 1
push connect
push str..DataKGDataLocalEffectGame.info
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x10078d55
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, 0x7b688
je 0x10078d66
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call eax
push 0x10
push str.Error
push str.EffectGame.info_no_funciona_o_es_invalida_
jmp 0x10078c7a
push 0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push eax
push 0x7b688
push 0x1027d48c
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x10078d4d
xor ecx, ecx
nop word [eax + eax]
mov eax, ecx
shr eax, 8
xor al, 0x6e
add al, byte [ecx + 0x1027d48c]
xor al, cl
xor al, 0xe6
mov byte [ecx + 0x1027d48c], al
inc ecx
cmp ecx, 0x7b688
jb 0x10078d90
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call eax
cmp dword [0x101ee950], 1
jne 0x10078e15
push 0x10008750
push 0x57d278
push 0xe9
call fcn.100b1680
push 0x10008780
push 0x74cd50
push 0xe9
call fcn.100b1680
push 0x100087b0
push 0x771328
push 0xe9
call fcn.100b1680
add esp, 0x24
push 0
push 0
push 0
push 0x10078b30
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp dword [0x101ee6e4], 1
mov esi, dword [sym.imp.USER32.dll_MessageBoxA]
jne 0x10078e75
push str.Main.exe
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x10078e45
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x10078e75
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x10078e75
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x10
push str.Error
push str.You_already_have_a_main_open__you_cant_open_any_more.
push 0
call esi
mov ecx, 0x103073d0
call fcn.10008650
call fcn.10023360
push 0xe9
mov edx, 0x100b0880
mov ecx, 0x5509ce
call fcn.100b0f00
push 0xe9
mov edx, 0x100b0d60
mov ecx, 0x551573
call fcn.100b0f00
push 0xa0
push 0xe61144
call fcn.1008d180
push 0xeb
push 0x4d1e69
call fcn.1008d180
push 0xe9
push 0x4d228d
call fcn.1008d180
push 0x8b
push 0x4d228e
call fcn.1008d180
push 0
push 0x4d228f
call fcn.1008d180
push 0
push 0x4d2290
call fcn.1008d180
push 0
push 0x4d2291
call fcn.1008d180
add esp, 0x40
push 0xeb
push 0x4d559c
call fcn.1008d180
push 0xeb
push 0x633f7a
call fcn.1008d180
push 0xeb
push 0x634403
call fcn.1008d180
push 0xeb
push 0x63e6c4
call fcn.1008d180
push 0xeb
push 0x4d2246
call fcn.1008d180
push 0xeb
push 0x501163
call fcn.1008d180
push 0
push 0x40af0a
call fcn.1008d180
push 0x50
push 0x40b4bc
call fcn.1008d180
add esp, 0x40
push 0x50
push 0x40b4c5
call fcn.1008d180
push 0x18
push 0x40b4cf
call fcn.1008d180
push 0
push 0x40af0a
call fcn.1008d180
push 0xeb
push 0x40afd5
call fcn.1008d180
push 0x70
push 0x777fd6
call fcn.1008d180
push 0x17
push 0x777fd7
call fcn.1008d180
push 0x3c
push 0x4ebec7
call fcn.1008d180
push 0x3c
push 0x5c4004
call fcn.1008d180
add esp, 0x40
push 0x3c
push 0x7e40bb
call fcn.1008d180
push 0x3c
push 0x81b546
call fcn.1008d180
push 0x3c
push 0x81b58d
call fcn.1008d180
push 0x3c
push 0x86e284
call fcn.1008d180
push 0x3c
push 0x86e44c
call fcn.1008d180
push 0x3c
push 0x86e573
call fcn.1008d180
push 0x3c
push 0x86f8fc
call fcn.1008d180
push 0xb7
push 0x7da373
call fcn.1008d180
add esp, 0x40
push 0xb7
push 0x7e1c44
call fcn.1008d180
push 0xeb
push 0x52100d
call fcn.1008d180
push 0
push 0x9543c4
call fcn.1008d180
push 0x4d1dc2
push 0x4d1cf0
push 0xe9
call fcn.100b1680
push 0x1b
mov edx, 0x90
mov ecx, 0xd20170
call fcn.100b1740
cmp dword [0x101ee790], 0
mov ecx, 0xeb
mov eax, 0x75
cmove eax, ecx
movzx eax, al
push eax
push 0x64cbd1
call fcn.1008d180
movzx eax, byte [0x101ee794]
push eax
push 0x64cbd0
call fcn.1008d180
movzx eax, byte [0x101ee794]
push eax
push 0x95ceef
call fcn.1008d180
movzx eax, byte [0x101ee794]
add esp, 0x40
push eax
push 0x95cf14
call fcn.1008d180
mov al, byte [0x101ee578]
inc al
movzx eax, al
push eax
push 0xe61f68
call fcn.1008d180
mov al, byte [0x101ee57a]
add al, 2
movzx eax, al
push eax
push 0xe61f69
call fcn.1008d180
mov al, byte [0x101ee57b]
add al, 3
movzx eax, al
push eax
push 0xe61f6a
call fcn.1008d180
mov al, byte [0x101ee57d]
add al, 4
movzx eax, al
push eax
push 0xe61f6b
call fcn.1008d180
mov al, byte [0x101ee57e]
add al, 5
movzx eax, al
push eax
push 0xe61f6c
call fcn.1008d180
mov dx, word [0x101ee576]
add esp, 0x30
mov ecx, 0xe609e4
call fcn.100b1540
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4d9d3b
call edi
lea eax, [ebp - 0x18]
mov dword [0x4d9d3b], 0x102fbe74
push eax
push dword [ebp - 0x18]
push 4
push 0x4d9d3b
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4dac60
call edi
lea eax, [ebp - 0x18]
mov dword [0x4dac60], 0x102fbe74
push eax
push dword [ebp - 0x18]
push 4
push 0x4dac60
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x7b55338
call edi
lea eax, [ebp - 0x18]
mov dword [0x7b55338], 0xa
push eax
push dword [ebp - 0x18]
push 4
push 0x7b55338
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4d597b
call edi
lea eax, [ebp - 0x18]
mov dword [0x4d597b], 0x102fbe70
push eax
push dword [ebp - 0x18]
push 4
push 0x4d597b
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4da289
call edi
lea eax, [ebp - 0x18]
mov dword [0x4da289], 0x102fbe70
push eax
push dword [ebp - 0x18]
push 4
push 0x4da289
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4da297
call edi
lea eax, [ebp - 0x18]
mov dword [0x4da297], 0x102fbe70
push eax
push dword [ebp - 0x18]
push 4
push 0x4da297
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4da3a2
call edi
lea eax, [ebp - 0x18]
mov dword [0x4da3a2], 0x102fbe70
push eax
push dword [ebp - 0x18]
push 4
push 0x4da3a2
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4da3ce
call edi
lea eax, [ebp - 0x18]
mov dword [0x4da3ce], 0x102fbe70
push eax
push dword [ebp - 0x18]
push 4
push 0x4da3ce
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4da3d9
call edi
lea eax, [ebp - 0x18]
mov dword [0x4da3d9], 0x102fbe70
push eax
push dword [ebp - 0x18]
push 4
push 0x4da3d9
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x63d326
call edi
lea eax, [ebp - 0x18]
mov dword [0x63d326], 0x102fbe70
push eax
push dword [ebp - 0x18]
push 4
push 0x63d326
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x642112
call edi
lea eax, [ebp - 0x18]
mov dword [0x642112], 0x102fbe70
push eax
push dword [ebp - 0x18]
push 4
push 0x642112
call edi
push 0x10068820
push 0x4da280
push 0xe9
call fcn.100b1680
push 0x10068850
push 0x4da3a1
push 0xe9
call fcn.100b1680
add esp, 0x18
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4d0e09
call edi
lea eax, [ebp - 0x18]
mov dword [0x4d0e09], 0x101ee591
push eax
push dword [ebp - 0x18]
push 4
push 0x4d0e09
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4d9f55
call edi
lea eax, [ebp - 0x18]
mov dword [0x4d9f55], 0x101ee5b1
push eax
push dword [ebp - 0x18]
push 4
push 0x4d9f55
call edi
push 0
push 0x5c914e
call fcn.1008d180
push 0x14
mov edx, 0x90
mov ecx, 0x63e908
call fcn.100b1740
push 0x20
push 0x101ee555
push 0xe611b2
call fcn.100b16e0
push 0x11
push 0x101ee580
push 0xe61f70
call fcn.100b16e0
push fcn.100a9ee0
push 0x65fd79
push 0xff
call fcn.100b1680
mov edx, 0xc
mov ecx, 0x4d9d39
call fcn.100b17a0
mov edx, 7
mov ecx, 0x4d9d45
call fcn.100b17a0
mov edx, 0xf
mov ecx, 0x4d9efc
call fcn.100b17a0
mov edx, 8
mov ecx, 0x4dac5c
call fcn.100b17a0
mov edx, 5
mov ecx, 0x5451f7
call fcn.100b17a0
mov edx, 8
mov ecx, 0x545230
call fcn.100b17a0
mov edx, 8
mov ecx, 0x5a52e9
call fcn.100b17a0
push 0x10305b50
mov edx, 0x6a
call fcn.100b18a0
push 0x10305a60
mov edx, 0x6b
call fcn.100b18a0
push 0x10305c40
mov edx, 0x6c
call fcn.100b18a0
add esp, 0x3c
call fcn.10021290
push 0x10026bc0
push 0x597691
push 0xe9
call fcn.100b1680
add esp, 0xc
cmp dword [0x101ee994], 1
jne 0x100794d5
push 0x10026bd0
push 0x4d5ec3
push 0xe8
call fcn.100b1680
add esp, 0xc
push dword [0x1018c61c]
call fcn.10088be0
push str.DataKGDataLuaConfigsNameColor.lua
mov ecx, 0x1018c618
call fcn.100a4330
push 0x10026a30
push 0x598ca7
push 0xe8
call fcn.100b1680
push 0x10026a30
push 0x77f8c2
push 0xe8
call fcn.100b1680
push 0x10026a60
push 0x57f920
push 0xe9
call fcn.100b1680
add esp, 0x24
call fcn.1003b090
cmp dword [0x101ee97c], 1
jne 0x100796dc
mov eax, 1
mov dword [0x1033a6b0], 0
mov word [0x1033a5e4], ax
lea eax, [ebp - 0x1d0]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
jne 0x1007959b
push eax
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov dword [0x1018c86c], eax
cmp eax, 0xffffffff
je 0x1007959b
call dword [sym.imp.WS2_32.dll_WSACreateEvent]
mov dword [0x1018c870], eax
test eax, eax
je 0x1007959b
mov dword [0x1019087c], 0x10032320
jmp 0x100795b2
push 1
push str.connection
push str.init_failed
push 0
call esi
mov byte [0x1033a5e6], 0
cmp dword [0x1018c86c], 0xffffffff
movzx eax, word [0x101ee576]
je 0x100796c5
mov ecx, 2
push eax
mov word [ebp - 0x34], cx
call dword [sym.imp.WS2_32.dll_htons]
push 0x101ee555
mov word [ebp - 0x32], ax
call dword [sym.imp.WS2_32.dll_inet_addr]
mov dword [ebp - 0x30], eax
cmp eax, 0xffffffff
jne 0x10079612
push 0x101ee555
call dword [sym.imp.WS2_32.dll_gethostbyname]
test eax, eax
je 0x10079612
movsx ecx, word [eax + 0xa]
mov eax, dword [eax + 0xc]
push ecx
push dword [eax]
lea eax, [ebp - 0x30]
push eax
call fcn.101231c0
add esp, 0xc
push 0x10
lea eax, [ebp - 0x34]
push eax
push dword [0x1018c86c]
call dword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x1007963a
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2733
jne 0x100796bb
push 0x23
push dword [0x1018c870]
push dword [0x1018c86c]
call dword [sym.imp.WS2_32.dll_WSAEventSelect]
cmp eax, 0xffffffff
je 0x100796bb
push 0x2000
push 0
push 0x1018c874
call fcn.10123cc0
push 0x2000
push 0
push 0x1018e878
mov dword [0x1018e874], 0
call fcn.10123cc0
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
add esp, 0x18
mov dword [0x10190878], 0
push 0
push 0
push 0x1018c868
push 0x100320b0
push 0
push 0
call esi
mov dword [0x1019089c], eax
mov byte [0x101908a0], 1
mov byte [0x1033a5e6], 1
jmp 0x100796e2
mov ecx, 0x1018c868
call fcn.10031f00
push 1
push str.connection
push str.Connect_failed__CheckIP_ConnectServer__
push 0
call esi
mov byte [0x1033a5e6], 0
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x10068a30
push 0x5b96e8
push 0xe8
call fcn.100b1680
push 0x10008730
push 0x59b566
push 0xe8
call fcn.100b1680
push 0x10008730
push 0x5a0208
push 0xe8
call fcn.100b1680
push 0x10008730
push 0x5ab91c
push 0xe8
call fcn.100b1680
push 0x10008730
push 0x5b087a
push 0xe8
call fcn.100b1680
push 0x10008730
push 0x5b13e4
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10008730
push 0x5b69e3
push 0xe8
call fcn.100b1680
push 0x10008730
push 0x5b6eb4
push 0xe8
call fcn.100b1680
push 0x10008730
push 0x5b7026
push 0xe8
call fcn.100b1680
push 0x10008730
push 0x5b7268
push 0xe8
call fcn.100b1680
push 0x10008730
push 0x5b72d0
push 0xe8
call fcn.100b1680
push 0x10008730
push 0x5b739d
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10008730
push 0x5b7634
push 0xe8
call fcn.100b1680
push 0x10008730
push 0x95f68a
push 0xe8
call fcn.100b1680
push 0x10008730
push 0x95f8b7
push 0xe8
call fcn.100b1680
push 0x10008730
push 0x95fa96
push 0xe8
call fcn.100b1680
push 0x10008730
push 0x96012e
push 0xe8
call fcn.100b1680
add esp, 0x3c
push 0
push 0
push 0x103073d0
push 0x100084d0
push 0
push 0
call esi
mov dword [0x10307404], eax
call fcn.1005b470
call fcn.1005a590
push 0
push ecx
push str.DataEnc1.dat
call fcn.10098a70
push 1
push ecx
push str.DataDec2.dat
call fcn.10098a70
push 2
push 0x1017c434
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0xf
mov byte [ebp - 0x3c], 0
call fcn.1000bb40
lea eax, [ebp - 0x3c]
mov dword [ebp - 4], 0
push eax
push dword [0x101ee22c]
lea ecx, [ebp - 0x5ec]
call fcn.10071bd0
sub esp, 8
mov byte [ebp - 4], 1
mov ecx, eax
call fcn.100a0750
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x5d4]
cmp edx, 0x10
jb 0x10079905
mov ecx, dword [ebp - 0x5e8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100798fb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1007b45b
push edx
push ecx
call fcn.100d5624
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x5d8], 0
mov dword [ebp - 0x5d4], 0xf
mov byte [ebp - 0x5e8], 0
cmp edx, 0x10
jb 0x1007995b
mov ecx, dword [ebp - 0x3c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10079951
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1007b460
push edx
push ecx
call fcn.100d5624
add esp, 8
push str.Data__KGData__Lua__Configs__Font.lua
mov ecx, 0x101ee228
call fcn.100a4330
push 0x100a4960
push 0x7729b3
push 0xe8
call fcn.100b1680
push 0x100a4930
push 0x772960
push 0xe8
call fcn.100b1680
add esp, 0x18
call fcn.100a2dd0
cmp dword [0x101eea6c], 0x191
jl 0x10079a1a
push 0x100a0560
push 0x810711
push 0xe9
call fcn.100b1680
push 0x100a05a0
push 0x810790
push 0xe9
call fcn.100b1680
add esp, 0x18
lea eax, [ebp - 0x18]
push eax
push 0x40
push 7
push 0x811020
call edi
mov eax, 0x811020
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 7
push 0x811020
call edi
push 0x100a05e0
push 0x811020
push 0xe9
call fcn.100b1680
add esp, 0xc
call fcn.100a1b80
push 2
push 0x1017c434
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0xf
mov byte [ebp - 0x3c], 0
call fcn.1000bb40
lea eax, [ebp - 0x3c]
mov dword [ebp - 4], 2
push eax
push dword [0x101ed8b8]
lea ecx, [ebp - 0x5ec]
call fcn.10071bd0
push 0x100a2c50
push str.SetItemFloor
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.1008a940
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x5d4]
cmp edx, 0x10
jb 0x10079aaf
mov ecx, dword [ebp - 0x5e8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10079aa5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1007b465
push edx
push ecx
call fcn.100d5624
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x5d8], 0
mov dword [ebp - 0x5d4], 0xf
mov byte [ebp - 0x5e8], 0
cmp edx, 0x10
jb 0x10079b05
mov ecx, dword [ebp - 0x3c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10079afb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1007b46a
push edx
push ecx
call fcn.100d5624
add esp, 8
push str.Data__KGData__Lua__Configs__CustomItemFloor.lua
mov ecx, 0x101ed8b4
call fcn.100a4330
push 0x1017959c
push str.StartLoadItemFloor
push 0x101ed8b4
call fcn.100a44f0
push 0x100a2ce0
push 0x5f820c
push 0xe8
call fcn.100b1680
push 0x100a2ce0
push 0x5f847d
push 0xe8
call fcn.100b1680
add esp, 0x24
mov ecx, 0x101ee2e4
push str.Data__KGData__Lua__EffectSystem__CharacterEffectItens.lua
call fcn.100a4330
push dword [0x101ee2e8]
call fcn.10083a10
push 0x100a0b70
push 0x5711ab
push 0xe8
call fcn.100b1680
push 0x100a0b70
push 0x57126f
push 0xe8
call fcn.100b1680
push 0x100a0b70
push 0x5713d6
push 0xe8
call fcn.100b1680
push 0x100a0b70
push 0x576ddb
push 0xe8
call fcn.100b1680
push 0x100a0b70
push 0x588357
push 0xe8
call fcn.100b1680
push 0x100a0b70
push 0x5883f4
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x100a0b70
push 0x588505
push 0xe8
call fcn.100b1680
push 0x100a0b70
push 0x588617
push 0xe8
call fcn.100b1680
push 0x100a0b70
push 0x588661
push 0xe8
call fcn.100b1680
push 0x100a0b70
push 0x58876e
push 0xe8
call fcn.100b1680
push 0x100a0b70
push 0x5887ad
push 0xe8
call fcn.100b1680
push 0x100a0b70
push 0x609d1e
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x100a0b70
push 0x610691
push 0xe8
call fcn.100b1680
add esp, 0xc
call fcn.100a65a0
push 0x100a60b0
push 0x5fa77b
push 0xe9
call fcn.100b1680
push 0x100a6170
push 0x6083c1
push 0xe9
call fcn.100b1680
push 0x100a6230
push 0x609066
push 0xe9
call fcn.100b1680
add esp, 0x24
push dword [0x101ee484]
call fcn.1008c960
push str.Data__KGData__Lua__CharacterSystem__RenderModel.lua
mov ecx, 0x101ee480
call fcn.100a4330
push dword [0x101ee484]
call fcn.1007bd30
mov ecx, dword [0x101ee484]
call fcn.1008ecd0
mov ecx, dword [0xe61e58]
mov eax, dword [0xe61e5c]
cmp ecx, 0x320
jne 0x10079d0c
test eax, eax
jne 0x10079d0c
mov eax, 0xb
jmp 0x10079d22
cmp ecx, 0x400
jne 0x10079d1d
test eax, eax
mov eax, 0xc
je 0x10079d22
mov eax, 0xd
push str.Tahoma
push 0
push 3
mov esi, dword [sym.imp.GDI32.dll_CreateFontA]
push 0
push 7
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push eax
mov dword [ebp - 0x24], eax
call esi
push str.Tahoma
push 0
push 3
push 0
push 7
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push dword [ebp - 0x24]
mov dword [0x1018c600], eax
call esi
push str.Tahoma
push 0
push 3
push 0
push 7
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push dword [ebp - 0x24]
mov dword [0x1018c604], eax
call esi
push 0x10026470
push 0x942fa7
push 0xe8
mov dword [0x1018c5fc], eax
call fcn.100b1680
push 0x100263e0
push 0x945180
push 0xe8
call fcn.100b1680
push 0x10026390
push 0x942eb6
push 0xe8
call fcn.100b1680
push 0x10026290
push 0x942f09
push 0xe8
call fcn.100b1680
push 0x10026310
push 0x943d7f
push 0xe8
call fcn.100b1680
push 0x10026400
push 0x945114
push 0xe8
call fcn.100b1680
add esp, 0x48
mov edx, 0x1002b130
mov ecx, 0x78b0bc
push 0xe8
call fcn.100b0f00
push 0xe9
mov edx, 0x1002b0d0
mov ecx, 0x789767
call fcn.100b0f00
push 0xe9
mov edx, 0x1002b0f0
mov ecx, 0x789a63
call fcn.100b0f00
push 0xe9
mov edx, 0x1002b110
mov ecx, 0x789dac
call fcn.100b0f00
add esp, 0x10
mov byte [0x1018c7ec], 1
call fcn.1004c750
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0xd
call esi
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push 0xd
mov dword [0x1033d1c0], eax
call esi
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0xf
mov dword [0x1033d1c4], eax
call esi
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0x12
mov dword [0x1033d1c8], eax
call esi
mov dword [0x1033d1cc], eax
call fcn.10053910
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0xf
mov byte [ebp - 0x3c], 0
push 2
push 0x1017c434
lea ecx, [ebp - 0x3c]
call fcn.1000bb40
lea eax, [ebp - 0x3c]
mov dword [ebp - 4], 4
push eax
push dword [0x101ecfc4]
lea ecx, [ebp - 0x5ec]
call fcn.10071bd0
sub esp, 8
mov byte [ebp - 4], 5
mov ecx, eax
call fcn.100772c0
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x5d4]
cmp edx, 0x10
jb 0x10079fb3
mov ecx, dword [ebp - 0x5e8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10079fa9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1007b46f
push edx
push ecx
call fcn.100d5624
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x5d8], 0
mov dword [ebp - 0x5d4], 0xf
mov byte [ebp - 0x5e8], 0
cmp edx, 0x10
jb 0x1007a009
mov ecx, dword [ebp - 0x3c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10079fff
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1007b474
push edx
push ecx
call fcn.100d5624
add esp, 8
push str.Data__KGData__Lua__Configs__CustomItemPosition.lua
mov ecx, 0x101ecfc0
call fcn.100a4330
push 0x10178bcf
push str.StartLoadItemPosition
push 0x101ecfc0
call fcn.100a44f0
push 0x10072120
push 0x5d0b94
push 0xe8
call fcn.100b1680
add esp, 0x18
mov dword [0x101d549c], 1
cmp dword [0x101ee928], 2
jne 0x1007a05b
call fcn.1004aa40
call fcn.100a97e0
push 0x1002aa90
push 0x7d2b3d
push 0xe8
call fcn.100b1680
push 0x1002a920
push 0x841e49
push 0xe8
call fcn.100b1680
push 0x1002aa50
push 0x78b0f0
push 0xe9
call fcn.100b1680
add esp, 0x24
cmp dword [0x101ee928], 1
jne 0x1007a0fc
mov eax, dword [0x101ee9d8]
dec eax
cmp eax, 1
ja 0x1007a0fc
push 0x10029380
push 0x84bc0f
push 0xe8
mov dword [0x102fba9c], 0
call fcn.100b1680
push 0x100293a0
push 0x84bd1d
push 0xe8
call fcn.100b1680
push 0x10028350
push 0x84bdb0
push 0xe9
call fcn.100b1680
add esp, 0x24
push 0x1002a100
push 0x5bb0b0
push 0xe9
call fcn.100b1680
add esp, 0xc
mov dword [0x101d5494], 0
cmp dword [0x101ee930], 1
jne 0x1007a13d
push method.std::codecvt_wchar_t__char__struct__Mbstatet_.virtual_12
push 0x82b772
push 0xe8
call fcn.100b1680
add esp, 0xc
cmp dword [0x101ee92c], 0
je 0x1007a15d
push 0x10095fd0
push 0x62f870
push 0xe9
call fcn.100b1680
add esp, 0xc
push 0x10094190
push 0x82aba0
push 0xe9
call fcn.100b1680
add esp, 0xc
cmp dword [0x101ee944], 1
jne 0x1007a1c2
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x7f6834
call edi
mov eax, 0x7f6834
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x7f6834
call edi
push 0x10045af0
push 0x7f67b7
push 0xe8
call fcn.100b1680
add esp, 0xc
cmp dword [0x101ee978], 0
jne 0x1007a254
mov byte [0x102fbd60], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x10044990
sub eax, 0x1388
mov byte [0x102fbd68], 0
push 0x7d2bc0
push 0xe9
mov dword [0x102fbd64], eax
call fcn.100b1680
push 0x10045cd0
push 0x7d26b5
push 0xe9
call fcn.100b1680
push 0x10045d20
push 0x7d2751
push 0xe9
call fcn.100b1680
push 0x10045d70
push 0x7d27fc
push 0xe9
call fcn.100b1680
push 0x10045dc0
push 0x80b8e0
push 0xe9
call fcn.100b1680
add esp, 0x3c
cmp dword [0x101ee864], 1
jne 0x1007a382
push 0x10041cf0
push 0x5012d0
push 0xe9
call fcn.100b1680
push 0x10041d80
push 0x80f250
push 0xe8
call fcn.100b1680
push 0x10041eb0
push 0x7df740
push 0xe9
call fcn.100b1680
push 0x10043490
push 0x7df34c
push 0xe8
call fcn.100b1680
push 0x100434c0
push 0x66424b
push 0xe8
call fcn.100b1680
push 0x10041de0
push 0x833731
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10041f10
push 0x7df846
push 0xe8
call fcn.100b1680
push 0x10043920
push 0x7df83e
push 0xe8
call fcn.100b1680
push 0x100435f0
push 0x83469c
push 0xe8
call fcn.100b1680
push 0x10067b00
push 0x420814
push 0xe8
call fcn.100b1680
push 0x10040d20
push 0x924c8b
push 0xe8
call fcn.100b1680
push 0x10040430
push 0x7e5cb6
push 0xe8
call fcn.100b1680
add esp, 0x48
push 0x10041270
push 0x7e5b70
push 0xe8
call fcn.100b1680
push 0x10041000
push 0x7e348f
push 0xe8
call fcn.100b1680
add esp, 0x18
cmp dword [0x101ee9cc], 1
jne 0x1007a3e4
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x401f56
call edi
mov eax, 0x401f56
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x401f56
call edi
push 0x10009af0
push 0x401ef1
push 0xe8
call fcn.100b1680
push 0x10009a90
push 0x401fc4
push 0xe8
call fcn.100b1680
add esp, 0x18
cmp dword [0x101ee910], 1
jne 0x1007a499
push 7
call fcn.100d591e
mov ecx, 0x90909090
mov edx, eax
push 7
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
mov ecx, 0x608cac
call fcn.100b0de0
push 0xe9
mov edx, 0x10044340
mov ecx, 0x608cac
call fcn.100b0f00
push 7
call fcn.100d591e
mov ecx, 0x90909090
mov edx, eax
push 7
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
mov ecx, 0x60954d
call fcn.100b0de0
push 0xe9
mov edx, 0x100443d0
mov ecx, 0x60954d
call fcn.100b0f00
push 7
call fcn.100d591e
mov ecx, 0x90909090
mov edx, eax
push 7
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
mov ecx, 0x60f04c
call fcn.100b0de0
push 0xe9
mov edx, 0x10044460
mov ecx, 0x60f04c
call fcn.100b0f00
add esp, 0x24
cmp dword [0x101ee914], 1
jne 0x1007a4cd
push 0x10055650
push 0x61041c
push 0xe8
call fcn.100b1680
push 0x10055650
push 0x5666c1
push 0xe8
call fcn.100b1680
add esp, 0x18
cmp dword [0x101ee954], 1
jne 0x1007a5f7
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0
push 0xf003f
push 0
push 0
push 0
push str.SOFTWAREWebzenMuConfig
push connect
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x1007a5a4
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea eax, [ebp - 0x24]
push eax
push 0x105718dc
push 0
push 0
push 0x1017c2b0
push dword [ebp - 0x1c]
mov dword [ebp - 0x24], 0xb
call esi
test eax, eax
je 0x1007a540
xorps xmm0, xmm0
movups xmmword [0x105718dc], xmm0
movups xmmword [0x105718ec], xmm0
lea eax, [ebp - 0x24]
mov dword [ebp - 0x24], 0xb
push eax
push 0x105718fc
push 0
push 0
push 0x1017c2b4
push dword [ebp - 0x1c]
call esi
test eax, eax
je 0x1007a573
xorps xmm0, xmm0
movups xmmword [0x105718fc], xmm0
movups xmmword [0x1057190c], xmm0
lea eax, [ebp - 0x24]
mov dword [ebp - 0x24], 4
push eax
push 0x105718d8
push 0
push 0
push str.SavePass
push dword [ebp - 0x1c]
call esi
mov ecx, dword [0x105718d8]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x105718d8], ecx
push 0x100621a0
push 0x40b5a9
push 0xe8
call fcn.100b1680
push 0x10061da0
push 0x40b400
push 0xe8
call fcn.100b1680
push 0x10061da0
push 0x40b44f
push 0xe8
call fcn.100b1680
push 0x10062440
push 0x483711
push 0xe8
call fcn.100b1680
add esp, 0x30
cmp dword [0x101ee90c], 1
jne 0x1007a645
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x502a95
call edi
mov eax, 0x502a95
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x502a95
call edi
push 0x10037e60
push 0x502a95
push 0xe8
call fcn.100b1680
add esp, 0xc
cmp dword [0x101ee8f8], 1
jne 0x1007a653
call fcn.10070de0
cmp dword [0x101ee900], 1
jne 0x1007a661
call fcn.10026060
cmp dword [0x101ee8e0], 1
jne 0x1007a66f
call fcn.10097520
cmp dword [0x101ee8e4], 1
jne 0x1007a715
push 0x100548d0
push 0x900de9
push 0xe8
call fcn.100b1680
push 0x10053bb0
push 0x8c5bb5
push 0xe8
call fcn.100b1680
push 0xa
call fcn.100d591e
mov ecx, 0x90909090
mov edx, eax
push 0xa
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov word [eax + 8], cx
mov ecx, 0x56fc5e
call fcn.100b0de0
push 0xe9
mov edx, 0x100547b0
mov ecx, 0x56fc5e
call fcn.100b0f00
push 0xa
call fcn.100d591e
mov ecx, 0x90909090
mov edx, eax
push 0xa
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov word [eax + 8], cx
mov ecx, 0x56fd1a
call fcn.100b0de0
push 0xe9
mov edx, 0x10054850
mov ecx, 0x56fd1a
call fcn.100b0f00
add esp, 0x30
cmp dword [0x101ee8ec], 1
jne 0x1007a742
push 0
call fcn.10135714
push eax
call fcn.1012c26c
push 0x100ade10
push 0x4d70d4
push 0xe8
call fcn.100b1680
add esp, 0x14
call fcn.10031940
mov esi, 2
mov dword [ebp - 0x24], 0
xor edi, edi
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x1c], esi
nop
lea ecx, [esi + 1]
mov eax, 0xf0f0f0f1
mul ecx
mov eax, edi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + 0x101ee583]
xor al, byte [esi + 0x101ee536]
movzx esi, al
mov eax, 0xf0f0f0f1
mul dword [ebp - 0x1c]
mov eax, edi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x18]
add dword [ebp - 0x18], 4
mov al, byte [eax + 0x101ee582]
xor al, byte [ecx + 0x101ee536]
movzx eax, al
add si, ax
mov eax, 0xf0f0f0f1
mul ecx
mov eax, edi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + 0x101ee581]
xor al, byte [edi + 0x101ee536]
movzx eax, al
add si, ax
mov eax, 0xf0f0f0f1
mul edi
mov eax, edi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + 0x101ee580]
xor al, byte [edi + 0x101ee535]
add edi, 4
movzx eax, al
add si, ax
add word [ebp - 0x24], si
mov esi, dword [ebp - 0x1c]
add esi, 4
mov dword [ebp - 0x1c], esi
cmp esi, 0x22
jb 0x1007a760
mov al, byte [ebp - 0x24]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub al, 0x1e
mov byte [0x102fbe79], al
mov eax, dword [ebp - 0x24]
shr eax, 8
sub al, 0x40
mov byte [0x102fbe78], al
mov eax, dword [0xd227b0]
mov dword [0x102fbe80], eax
mov eax, dword [0xd227f8]
mov dword [0x102fbe7c], eax
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0xd227b0
call edi
lea eax, [ebp - 0x18]
mov dword [0xd227b0], 0x100685f0
push eax
push dword [ebp - 0x18]
push 4
push 0xd227b0
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0xd227f8
call edi
lea eax, [ebp - 0x18]
mov dword [0xd227f8], 0x10068710
push eax
push dword [ebp - 0x18]
push 4
push 0xd227f8
call edi
push 0x1006ecf0
push 0x633fcb
push 0xff
call fcn.100b1680
push 0x1006f120
push 0x633fe3
push 0xff
call fcn.100b1680
push 0x1006f4a0
push 0x57ac07
push 0xff
call fcn.100b1680
push 0x1006f4a0
push 0x6083b9
push 0xff
call fcn.100b1680
push 0x1006f670
push 0x777ff2
push 0xff
call fcn.100b1680
push 0x1006f670
push 0x778003
push 0xff
call fcn.100b1680
add esp, 0x48
push 0x1006f680
push 0x5f7c2f
push 0xe9
call fcn.100b1680
push 0x1006f6b0
push 0x968137
push 0xe9
call fcn.100b1680
push 0x1006f6d0
push 0x968157
push 0xe9
call fcn.100b1680
push 0x1006eba0
push 0x57ad82
push 0xe9
call fcn.100b1680
push 0x1006ebf0
push 0x57adc8
push 0xe9
call fcn.100b1680
push 0x1006f6f0
push 0x58e650
push 0xe9
call fcn.100b1680
add esp, 0x48
push 0x1006f740
push 0x8386b5
push 0xe9
call fcn.100b1680
push 0x1006f7c0
push 0x5c4025
push 0xe9
call fcn.100b1680
push 0x1006f7f0
push 0x5f7c3b
push 0xe9
call fcn.100b1680
push 0x1006f820
push 0x64b701
push 0xe9
call fcn.100b1680
push 0x1006f850
push 0x8383a0
push 0xe9
call fcn.100b1680
push 0x1006f880
push 0x5f3f7e
push 0xe9
call fcn.100b1680
add esp, 0x48
push 0x1006f8c0
push 0x5f4a60
push 0xe9
call fcn.100b1680
add esp, 0xc
call fcn.1009f0d0
cmp dword [0x101ee7b4], 0
je 0x1007aae0
push 0x100ad320
push 0x40b903
push 0xe9
call fcn.100b1680
push 0x100ad360
push 0x4da416
push 0xe9
call fcn.100b1680
push 0x100ad380
push 0x63a192
push 0xe9
call fcn.100b1680
push 0x100ad3c0
push 0x7a89eb
push 0xe9
call fcn.100b1680
push fcn.100ad280
push 0x40bc24
push 0xe8
call fcn.100b1680
push fcn.100ad280
push 0x4d762c
push 0xe8
call fcn.100b1680
add esp, 0x48
push fcn.100ad280
push 0x4ef622
push 0xe8
call fcn.100b1680
push fcn.100ad280
push 0x63cd3a
push 0xe8
call fcn.100b1680
add esp, 0x18
call fcn.100af540
cmp dword [0x101ee8fc], 1
jne 0x1007ab2d
push 0x10038c40
push 0x50d905
push 0xe8
call fcn.100b1680
push 0x10038db0
push 0x5cd10f
push 0xe9
call fcn.100b1680
push 0x10038e10
push 0x5cefe7
push 0xe9
call fcn.100b1680
add esp, 0x24
push 0x100ad510
push 0x4d13c2
push 0xe9
call fcn.100b1680
push 0x100ad6c0
push 0x4d2782
push 0xe9
call fcn.100b1680
push 0x100ad790
push 0x830c3a
push 0xe9
call fcn.100b1680
push 0x100ad3f0
push 0x4da2f9
push 0xe8
call fcn.100b1680
mov esi, dword [0x102fc7f4]
add esp, 0x30
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push esi
mov esi, dword [sym.imp.USER32.dll_SetWindowsHookExA]
push 0x100335a0
push 2
call esi
cmp dword [0x102fbc24], 0
jne 0x1007abc1
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push dword [0x102fbc14]
push 0x10032480
push 7
call esi
mov dword [0x102fbc24], eax
cmp dword [0x102fbc28], 0
jne 0x1007abe0
push 0
push dword [0x102fbc14]
push 0x100335a0
push 0xd
call esi
mov dword [0x102fbc28], eax
push 0xe8
mov edx, 0x100323e0
mov ecx, 0x4d0e2f
call fcn.100b0f00
add esp, 4
call fcn.1006e8f0
mov ecx, 0x101d5490
mov dword [0x1030476c], 0
mov byte [0x10304758], 0
mov dword [0x10304760], 0xffffffff
mov dword [0x10304768], 0xffffffff
mov dword [0x1030475c], 0xffffffff
call fcn.10069850
cmp dword [0x101ee98c], 2
setne byte [0x1054c898]
call fcn.100591f0
call fcn.10097de0
call fcn.10001400
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.100018e0
call fcn.10001470
mov al, byte [0x101ee514]
test al, 1
je 0x1007ac9d
push 0x101ee515
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
jne 0x1007ac98
push eax
push str.Start_Error
push str.Please_start_game_from_Launcher
push eax
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov al, byte [0x101ee514]
test al, 2
je 0x1007ace4
push 0x101ee555
lea eax, [ebp - 0x140]
push str.XTEAM_MAIN_10405__s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x140]
push eax
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
test eax, eax
jne 0x1007ac90
lea eax, [ebp - 0x140]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
cmp dword [0x101ee76c], 0
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
je 0x1007add5
push 0x104
lea eax, [ebp - 0x148]
push 0
push eax
call fcn.10123cc0
add esp, 0xc
lea eax, [ebp - 0x148]
push 0x104
push eax
push 0
call esi
test eax, eax
jne 0x1007ad28
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea ecx, [ebp - 0x148]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1007ad31
sub ecx, edx
test ecx, ecx
jle 0x1007ad6c
nop
cmp byte [ebp + ecx - 0x148], 0x5c
je 0x1007ad51
dec ecx
test ecx, ecx
jg 0x1007ad40
jmp 0x1007ad6c
lea eax, [ebp - 0x147]
add eax, ecx
push eax
push 0x104
push 0x10571ce8
call fcn.10134985
add esp, 0xc
push 0x101ee5e3
push 0x10571ce8
call fcn.101355ac
add esp, 8
test eax, eax
je 0x1007ad8a
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea ecx, [ebp - 0x5d0]
call fcn.10007540
push ecx
lea eax, [ebp - 0x18]
push eax
push 0x101ee5e3
lea ecx, [ebp - 0x5d0]
call fcn.10007670
test al, al
jne 0x1007adcb
push 0x10
push str.Error
push str.Main.exe_CRC_error_
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101ee76c]
cmp eax, dword [ebp - 0x18]
jne 0x1007adae
cmp dword [0x101ee770], 0
je 0x1007ae80
lea ecx, [ebp - 0x5d0]
call fcn.10007540
push ecx
lea eax, [ebp - 0x18]
push eax
push 0x101ee603
lea ecx, [ebp - 0x5d0]
call fcn.10007670
test al, al
jne 0x1007ae14
push 0x10
push str.Error
push str.Plugin_1_CRC_error_
jmp 0x1007adba
mov eax, dword [0x101ee770]
cmp eax, dword [ebp - 0x18]
jne 0x1007adc3
push 0x101ee603
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x1007adc3
push 0x104
lea ecx, [ebp - 0x148]
push ecx
push eax
call esi
push ecx
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.10007670
test al, al
je 0x1007adc3
mov eax, dword [0x101ee770]
cmp eax, dword [ebp - 0x18]
jne 0x1007adc3
push 0x1017dc0c
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1007ae80
call eax
cmp dword [0x101ee774], 0
je 0x1007af36
lea ecx, [ebp - 0x5d0]
call fcn.10007540
push ecx
lea eax, [ebp - 0x18]
push eax
push 0x101ee623
lea ecx, [ebp - 0x5d0]
call fcn.10007670
test al, al
jne 0x1007aec2
push 0x10
push str.Error
push str.Plugin_2_CRC_error_
jmp 0x1007adba
mov eax, dword [0x101ee774]
cmp eax, dword [ebp - 0x18]
jne 0x1007adc3
push 0x101ee623
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x1007adc3
push 0x104
lea ecx, [ebp - 0x148]
push ecx
push eax
call esi
push ecx
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.10007670
test al, al
je 0x1007adc3
mov eax, dword [0x101ee774]
cmp eax, dword [ebp - 0x18]
jne 0x1007adc3
push 0x1017dc0c
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1007af36
call eax
cmp dword [0x101ee778], 0
je 0x1007afec
lea ecx, [ebp - 0x5d0]
call fcn.10007540
push ecx
lea eax, [ebp - 0x18]
push eax
push 0x101ee643
lea ecx, [ebp - 0x5d0]
call fcn.10007670
test al, al
jne 0x1007af78
push 0x10
push str.Error
push str.Plugin_3_CRC_error_
jmp 0x1007adba
mov eax, dword [0x101ee778]
cmp eax, dword [ebp - 0x18]
jne 0x1007adc3
push 0x101ee643
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x1007adc3
push 0x104
lea ecx, [ebp - 0x148]
push ecx
push eax
call esi
push ecx
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.10007670
test al, al
je 0x1007adc3
mov eax, dword [0x101ee778]
cmp eax, dword [ebp - 0x18]
jne 0x1007adc3
push 0x1017dc0c
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1007afec
call eax
cmp dword [0x101ee77c], 0
je 0x1007b0a2
lea ecx, [ebp - 0x5d0]
call fcn.10007540
push ecx
lea eax, [ebp - 0x18]
push eax
push 0x101ee663
lea ecx, [ebp - 0x5d0]
call fcn.10007670
test al, al
jne 0x1007b02e
push 0x10
push str.Error
push str.Plugin_4_CRC_error_
jmp 0x1007adba
mov eax, dword [0x101ee77c]
cmp eax, dword [ebp - 0x18]
jne 0x1007adc3
push 0x101ee663
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x1007adc3
push 0x104
lea ecx, [ebp - 0x148]
push ecx
push eax
call esi
push ecx
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.10007670
test al, al
je 0x1007adc3
mov eax, dword [0x101ee77c]
cmp eax, dword [ebp - 0x18]
jne 0x1007adc3
push 0x1017dc0c
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1007b0a2
call eax
cmp dword [0x101ee780], 0
je 0x1007b158
lea ecx, [ebp - 0x5d0]
call fcn.10007540
push ecx
lea eax, [ebp - 0x18]
push eax
push 0x101ee683
lea ecx, [ebp - 0x5d0]
call fcn.10007670
test al, al
jne 0x1007b0e4
push 0x10
push str.Error
push str.Plugin_5_CRC_error_
jmp 0x1007adba
mov eax, dword [0x101ee780]
cmp eax, dword [ebp - 0x18]
jne 0x1007adc3
push 0x101ee683
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x1007adc3
push 0x104
lea ecx, [ebp - 0x148]
push ecx
push eax
call esi
push ecx
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.10007670
test al, al
je 0x1007adc3
mov eax, dword [0x101ee780]
cmp eax, dword [ebp - 0x18]
jne 0x1007adc3
push 0x1017dc0c
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1007b158
call eax
cmp dword [0x101ee784], 0
je 0x1007b20e
lea ecx, [ebp - 0x5d0]
call fcn.10007540
push ecx
lea eax, [ebp - 0x18]
push eax
push 0x101ee6a3
lea ecx, [ebp - 0x5d0]
call fcn.10007670
test al, al
jne 0x1007b19a
push 0x10
push str.Error
push str.Plugin_Camera_CRC_error_
jmp 0x1007adba
mov eax, dword [0x101ee784]
cmp eax, dword [ebp - 0x18]
jne 0x1007adc3
push 0x101ee6a3
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x1007adc3
push 0x104
lea ecx, [ebp - 0x148]
push ecx
push eax
call esi
push ecx
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.10007670
test al, al
je 0x1007adc3
mov eax, dword [0x101ee784]
cmp eax, dword [ebp - 0x18]
jne 0x1007adc3
push 0x1017dc0c
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1007b20e
call eax
cmp dword [0x101ee788], 0
je 0x1007b2c4
lea ecx, [ebp - 0x5d0]
call fcn.10007540
push ecx
lea eax, [ebp - 0x18]
push eax
push 0x101ee6c3
lea ecx, [ebp - 0x5d0]
call fcn.10007670
test al, al
jne 0x1007b250
push 0x10
push str.Error
push str.Plugin_HackDLL_CRC_error_
jmp 0x1007adba
mov eax, dword [0x101ee788]
cmp eax, dword [ebp - 0x18]
jne 0x1007adc3
push 0x101ee6c3
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x1007adc3
push 0x104
lea ecx, [ebp - 0x148]
push ecx
push eax
call esi
push ecx
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.10007670
test al, al
je 0x1007adc3
mov eax, dword [0x101ee788]
cmp eax, dword [ebp - 0x18]
jne 0x1007adc3
push 0x1017dc0c
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1007b2c4
call eax
call fcn.1000a0b0
call fcn.1009db09
mov eax, 0x1009e0e0
mov byte [ebp - 0x24], 0xe8
sub eax, 0x836486
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x23], eax
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x836481
call edi
test eax, eax
je 0x1007b320
mov eax, dword [ebp - 0x24]
mov ecx, 0x836481
mov dword [ecx], eax
mov al, byte [ebp - 0x20]
mov byte [ecx + 4], al
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1007b326
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xe8
mov edx, 0x1009e050
mov ecx, 0x7dd304
call fcn.100b0f00
push 0xe8
mov edx, 0x1009e050
mov ecx, 0x833b08
call fcn.100b0f00
push 0x1003a590
push 0x56f476
push 0xe8
call fcn.100b1680
push 0x1003a590
push 0x5ebbe6
push 0xe8
call fcn.100b1680
add esp, 0x20
cmp dword [0x101ee768], 1
jne 0x1007b3be
mov edx, 0x101ee6e8
mov ecx, 0x954149
call fcn.100b1590
mov edx, 0x101ee708
mov ecx, 0x954116
call fcn.100b1590
mov edx, 0x101ee728
mov ecx, 0x9540e3
call fcn.100b1590
mov edx, 0x101ee748
mov ecx, 0x9540ad
call fcn.100b1590
cmp dword [0x101ee800], 1
jne 0x1007b451
mov eax, 0x101dd5a4
mov dword [eax], 0xffffffff
add eax, 0x20
cmp eax, 0x101ecfa4
jl 0x1007b3d0
push 0x100711b0
push 0x7e44d3
push 0xff
mov dword [0x101ecfa4], 0
mov dword [0x101ecfac], 0
mov dword [0x101ecfa8], 0
call fcn.100b1680
push 0x100712e0
push 0x7e452f
push 0xff
call fcn.100b1680
push 0x10071430
push 0x7e4497
push 0xe8
call fcn.100b1680
push 0x10071430
push 0x7e44ec
push 0xe8
call fcn.100b1680
add esp, 0x30
call fcn.1005c850
jmp 0x10078c8c
call fcn.1012c43c
call fcn.1012c43c
call fcn.1012c43c
call fcn.1012c43c
call fcn.1012c43c
call fcn.1012c43c
int3
jmp 0x10078ba0