Function at 0x100827f0
Capabilities:
Execute shellcode via indirect call
Get file size
Read .ini file
Read file on windows
Spawn thread to rwx shellcode

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10128350
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x5e8
mov eax, dword [0x1014200c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x5e0], 0
cmp byte [0x102c1b92], 0
jne 0x10082923
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x5f4]
push eax
push 0x40
push 0xd21fff
push 0x401000
mov byte [0x102c1b92], 1
call edi
test eax, eax
je 0x10082923
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push str.._Settings.ini
push 1
push str.WideScreen
push str.Interface
call esi
push str.._Settings.ini
push 1
push str.WideScreenScale
push str.Interface
mov dword [0x102bbb70], eax
call esi
lea ecx, [ebp - 0x5d8]
mov dword [0x102bbb6c], eax
call fcn.10007ae0
push ecx
push 0x102b9f54
push str..DataKGDataLocalServerGame.info
lea ecx, [ebp - 0x5d8]
call fcn.10007c10
test al, al
je 0x10082905
push 0
push 0x20
push 3
push 0
push 1
push connect
push str..DataKGDataLocalServerGame.info
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x10082905
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, 0x903d8
je 0x10082941
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x10
push str.Error
push str.ServerGame.info_no_funciona_o_es_invalida_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x102c7728
call fcn.1000b410
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100d9dfe
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0
lea eax, [ebp - 0x5dc]
mov dword [ebp - 0x5dc], 0
push eax
push 0x903d8
push 0x101eec34
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x100828fe
xor ecx, ecx
nop dword [eax + eax]
mov eax, ecx
shr eax, 8
xor al, 0x95
add al, byte [ecx + 0x101eec34]
xor al, cl
xor al, 0xda
mov byte [ecx + 0x101eec34], al
inc ecx
cmp ecx, 0x903d8
jb 0x10082970
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x5d8]
call fcn.10007ae0
push ecx
push 0x102b9f58
push str..DataKGDataLocalEffectGame.info
lea ecx, [ebp - 0x5d8]
call fcn.10007c10
test al, al
je 0x100829f5
push 0
push 0x20
push 3
push 0
push 1
push connect
push str..DataKGDataLocalEffectGame.info
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x100829f5
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, 0x3af48
je 0x10082a06
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call eax
push 0x10
push str.Error
push str.EffectGame.info_no_funciona_o_es_invalida_
jmp 0x10082911
push 0
lea eax, [ebp - 0x5ec]
mov dword [ebp - 0x5ec], 0
push eax
push 0x3af48
push 0x1027f00c
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x100829ed
xor ecx, ecx
mov eax, ecx
shr eax, 8
xor al, 0x6e
add al, byte [ecx + 0x1027f00c]
xor al, cl
xor al, 0xe6
mov byte [ecx + 0x1027f00c], al
inc ecx
cmp ecx, 0x3af48
jb 0x10082a30
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call eax
call fcn.100b65d0
cmp dword [0x101ef06c], 1
jne 0x10082aba
push 0x1000b6c0
push 0x57d278
push 0xe9
call fcn.100caf90
push 0x1000b6f0
push 0x74cd50
push 0xe9
call fcn.100caf90
push 0x1000b720
push 0x771328
push 0xe9
call fcn.100caf90
add esp, 0x24
push 0
push 0
push 0
push 0x100827b0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp dword [0x101eee04], 1
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
jne 0x10082b20
push str.Main.exe
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x5dc], eax
test eax, eax
jne 0x10082aed
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x10082b20
call esi
cmp eax, 0xb7
jne 0x10082b20
push dword [ebp - 0x5dc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x10
push str.Error
push str.You_already_have_a_main_open__you_cant_open_any_more.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x102c7728
call fcn.1000b410
call fcn.1002b310
mov eax, 0x100ca110
mov byte [ebp - 0x5e8], 0xe9
sub eax, 0x5509d3
mov dword [ebp - 0x5dc], 0
mov dword [ebp - 0x5e7], eax
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x5509ce
call edi
test eax, eax
je 0x10082b92
mov eax, dword [ebp - 0x5e8]
mov ecx, 0x5509ce
mov dword [ecx], eax
mov al, byte [ebp - 0x5e4]
mov byte [ecx + 4], al
lea eax, [ebp - 0x5ec]
push eax
push dword [ebp - 0x5dc]
mov dword [ebp - 0x5ec], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10082b94
call esi
mov eax, 0x100ca5f0
mov byte [ebp - 0x5e8], 0xe9
sub eax, 0x551578
mov dword [ebp - 0x5dc], 0
mov dword [ebp - 0x5e7], eax
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x551573
call edi
test eax, eax
je 0x10082c01
mov eax, dword [ebp - 0x5e8]
mov ecx, 0x551573
mov dword [ecx], eax
mov al, byte [ebp - 0x5e4]
mov byte [ecx + 4], al
lea eax, [ebp - 0x5ec]
push eax
push dword [ebp - 0x5dc]
mov dword [ebp - 0x5ec], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10082c03
call esi
push 0xa0
push 0xe61144
call fcn.10098660
push 0xeb
push 0x4d1e69
call fcn.10098660
push 0xe9
push 0x4d228d
call fcn.10098660
push 0x8b
push 0x4d228e
call fcn.10098660
push 0
push 0x4d228f
call fcn.10098660
push 0
push 0x4d2290
call fcn.10098660
push 0
push 0x4d2291
call fcn.10098660
push 0xeb
push 0x4d559c
call fcn.10098660
add esp, 0x40
push 0xeb
push 0x633f7a
call fcn.10098660
push 0xeb
push 0x634403
call fcn.10098660
push 0xeb
push 0x63e6c4
call fcn.10098660
push 0xeb
push 0x4d2246
call fcn.10098660
push 0xeb
push 0x501163
call fcn.10098660
push 0
push 0x40af0a
call fcn.10098660
push 0x50
push 0x40b4bc
call fcn.10098660
push 0x50
push 0x40b4c5
call fcn.10098660
add esp, 0x40
push 0x18
push 0x40b4cf
call fcn.10098660
push 0
push 0x40af0a
call fcn.10098660
push 0xeb
push 0x40afd5
call fcn.10098660
push 0x70
push 0x777fd6
call fcn.10098660
push 0x17
push 0x777fd7
call fcn.10098660
push 0x3c
push 0x4ebec7
call fcn.10098660
push 0x3c
push 0x5c4004
call fcn.10098660
push 0x3c
push 0x7e40bb
call fcn.10098660
add esp, 0x40
push 0x3c
push 0x81b546
call fcn.10098660
push 0x3c
push 0x81b58d
call fcn.10098660
push 0x3c
push 0x86e284
call fcn.10098660
push 0x3c
push 0x86e44c
call fcn.10098660
push 0x3c
push 0x86e573
call fcn.10098660
push 0x3c
push 0x86f8fc
call fcn.10098660
push 0xb7
push 0x7da373
call fcn.10098660
push 0xb7
push 0x7e1c44
call fcn.10098660
add esp, 0x40
push 0xeb
push 0x52100d
call fcn.10098660
push 0
push 0x9543c4
call fcn.10098660
push 0x4d1dc2
push 0x4d1cf0
push 0xe9
call fcn.100caf90
push 0x1b
mov edx, 0x90
mov ecx, 0xd20170
call fcn.100cb010
cmp dword [0x101eeeb0], 0
mov ecx, 0xeb
mov eax, 0x75
cmove eax, ecx
movzx eax, al
push eax
push 0x64cbd1
call fcn.10098660
movzx eax, byte [0x101eeeb4]
push eax
push 0x64cbd0
call fcn.10098660
movzx eax, byte [0x101eeeb4]
push eax
push 0x95ceef
call fcn.10098660
movzx eax, byte [0x101eeeb4]
push eax
push 0x95cf14
call fcn.10098660
mov al, byte [0x101eec98]
add esp, 0x40
inc al
movzx eax, al
push eax
push 0xe61f68
call fcn.10098660
mov al, byte [0x101eec9a]
add al, 2
movzx eax, al
push eax
push 0xe61f69
call fcn.10098660
mov al, byte [0x101eec9b]
add al, 3
movzx eax, al
push eax
push 0xe61f6a
call fcn.10098660
mov al, byte [0x101eec9d]
add al, 4
movzx eax, al
push eax
push 0xe61f6b
call fcn.10098660
mov al, byte [0x101eec9e]
add al, 5
movzx eax, al
push eax
push 0xe61f6c
call fcn.10098660
mov dx, word [0x101eec96]
add esp, 0x28
mov ecx, 0xe609e4
call fcn.100cae90
cmp dword [0x101eeeac], 0x3c
jb 0x10082f00
mov dword [0x102e9c74], 0
mov dword [0x102e9c78], 0
mov byte [0x102e9c70], 1
call fcn.10017d60
cmp dword [0x101eeeac], 0x3c
jae 0x10082f2d
mov edx, 0x102c1b8c
mov ecx, 0x4d9d3b
call fcn.100caed0
mov edx, 0x102c1b8c
mov ecx, 0x4dac60
call fcn.100caed0
mov edx, 0xa
mov ecx, 0x7b55338
call fcn.100caed0
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0x4d597b
call edi
lea eax, [ebp - 0x5dc]
mov dword [0x4d597b], 0x102c1b88
push eax
push dword [ebp - 0x5dc]
push 4
push 0x4d597b
call edi
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0x4da289
call edi
lea eax, [ebp - 0x5dc]
mov dword [0x4da289], 0x102c1b88
push eax
push dword [ebp - 0x5dc]
push 4
push 0x4da289
call edi
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0x4da297
call edi
lea eax, [ebp - 0x5dc]
mov dword [0x4da297], 0x102c1b88
push eax
push dword [ebp - 0x5dc]
push 4
push 0x4da297
call edi
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0x4da3a2
call edi
lea eax, [ebp - 0x5dc]
mov dword [0x4da3a2], 0x102c1b88
push eax
push dword [ebp - 0x5dc]
push 4
push 0x4da3a2
call edi
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0x4da3ce
call edi
lea eax, [ebp - 0x5dc]
mov dword [0x4da3ce], 0x102c1b88
push eax
push dword [ebp - 0x5dc]
push 4
push 0x4da3ce
call edi
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0x4da3d9
call edi
lea eax, [ebp - 0x5dc]
mov dword [0x4da3d9], 0x102c1b88
push eax
push dword [ebp - 0x5dc]
push 4
push 0x4da3d9
call edi
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0x63d326
call edi
lea eax, [ebp - 0x5dc]
mov dword [0x63d326], 0x102c1b88
push eax
push dword [ebp - 0x5dc]
push 4
push 0x63d326
call edi
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0x642112
call edi
lea eax, [ebp - 0x5dc]
mov dword [0x642112], 0x102c1b88
push eax
push dword [ebp - 0x5dc]
push 4
push 0x642112
call edi
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0x4d0e09
call edi
lea eax, [ebp - 0x5dc]
mov dword [0x4d0e09], 0x101eecb1
push eax
push dword [ebp - 0x5dc]
push 4
push 0x4d0e09
call edi
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0x4d9f55
call edi
lea eax, [ebp - 0x5dc]
mov dword [0x4d9f55], 0x101eecd1
push eax
push dword [ebp - 0x5dc]
push 4
push 0x4d9f55
call edi
push 0
push 0x5c914e
call fcn.10098660
push 0x14
mov edx, 0x90
mov ecx, 0x63e908
call fcn.100cb010
push 0x20
push 0x101eec75
push 0xe611b2
call fcn.100cafd0
push 0x11
push 0x101eeca0
push 0xe61f70
call fcn.100cafd0
push fcn.100c2c20
push 0x65fd79
push 0xff
call fcn.100caf90
push 0x10071d50
push 0x4da280
push 0xe9
call fcn.100caf90
add esp, 0x3c
cmp dword [0x101eeeac], 0x3c
jae 0x1008319b
push 0x10071d80
jmp 0x100831a0
push 0x10071f70
push 0x4da3a1
push 0xe9
call fcn.100caf90
add esp, 0xc
mov edx, 0xc
mov ecx, 0x4d9d39
call fcn.100cb060
mov edx, 7
mov ecx, 0x4d9d45
call fcn.100cb060
mov edx, 0xf
mov ecx, 0x4d9efc
call fcn.100cb060
cmp dword [0x101eeeac], 0x3c
jae 0x100831f7
mov edx, 8
mov ecx, 0x4dac5c
call fcn.100cb060
mov edx, 5
mov ecx, 0x5451f7
call fcn.100cb060
mov edx, 8
mov ecx, 0x545230
call fcn.100cb060
mov edx, 8
mov ecx, 0x5a52e9
call fcn.100cb060
mov edx, 0x102c5eb0
mov ecx, 0x6a
call fcn.100cb0e0
mov edx, 0x102c5dc0
mov ecx, 0x6b
call fcn.100cb0e0
mov edx, 0x102c5fa0
mov ecx, 0x6c
call fcn.100cb0e0
call fcn.10025a40
push 0x1002ec80
push 0x597691
push 0xe9
call fcn.100caf90
add esp, 0xc
cmp dword [0x101ef0b0], 1
jne 0x10083296
cmp byte [0x1052084e], 0
jne 0x10083296
push 0x1002ec90
push 0x4d5ec3
push 0xe8
call fcn.100caf90
add esp, 0xc
cmp byte [0x1052084e], 1
jne 0x100832b6
push 0x1002ee60
push 0x4d5ec3
push 0xe8
call fcn.100caf90
add esp, 0xc
push dword [0x101438bc]
call fcn.10092b40
push str.DataKGDataLuaConfigsNameColor.lua
mov ecx, 0x101438b8
call fcn.100b3030
push 0x1002eaf0
push 0x598ca7
push 0xe8
call fcn.100caf90
push 0x1002eaf0
push 0x77f8c2
push 0xe8
call fcn.100caf90
push 0x1002eb20
push 0x57f920
push 0xe9
call fcn.100caf90
add esp, 0x24
call fcn.10044190
cmp dword [0x101ef098], 1
jne 0x100834bf
mov eax, 1
mov dword [0x102fab10], 0
mov word [0x102faa44], ax
lea eax, [ebp - 0x1d8]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
jne 0x1008337c
push eax
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov dword [0x10143b24], eax
cmp eax, 0xffffffff
je 0x1008337c
call dword [sym.imp.WS2_32.dll_WSACreateEvent]
mov dword [0x10143b28], eax
test eax, eax
je 0x1008337c
mov dword [0x10147b34], 0x1003af60
jmp 0x10083397
push 1
push str.connection
push str.init_failed
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov byte [0x102faa46], 0
cmp dword [0x10143b24], 0xffffffff
movzx eax, word [0x101eec96]
je 0x100834a4
mov ecx, 2
push eax
mov word [ebp - 0x24], cx
call dword [sym.imp.WS2_32.dll_htons]
push 0x101eec75
mov word [ebp - 0x22], ax
call dword [sym.imp.WS2_32.dll_inet_addr]
mov dword [ebp - 0x20], eax
cmp eax, 0xffffffff
jne 0x100833f7
push 0x101eec75
call dword [sym.imp.WS2_32.dll_gethostbyname]
test eax, eax
je 0x100833f7
movsx ecx, word [eax + 0xa]
mov eax, dword [eax + 0xc]
push ecx
push dword [eax]
lea eax, [ebp - 0x20]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x10
lea eax, [ebp - 0x24]
push eax
push dword [0x10143b24]
call dword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x1008341b
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2733
jne 0x1008349a
push 0x23
push dword [0x10143b28]
push dword [0x10143b24]
call dword [sym.imp.WS2_32.dll_WSAEventSelect]
cmp eax, 0xffffffff
je 0x1008349a
push 0x2000
push 0
push 0x10143b2c
call sub.VCRUNTIME140.dll_memset
push 0x2000
push 0
push 0x10145b30
mov dword [0x10145b2c], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0x18
mov dword [0x10147b30], 0
push 0
push 0
push 0x10143b20
push 0x1003acf0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x10147b54], eax
mov byte [0x10147b58], 1
mov byte [0x102faa46], 1
jmp 0x100834bf
mov ecx, 0x10143b20
call fcn.1003ab40
push 1
push str.connection
push str.Connect_failed__CheckIP_ConnectServer__
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov byte [0x102faa46], 0
push 0x10072160
push 0x5b96e8
push 0xe8
call fcn.100caf90
push 0x1000b4f0
push 0x59b566
push 0xe8
call fcn.100caf90
push 0x1000b4f0
push 0x5a0208
push 0xe8
call fcn.100caf90
push 0x1000b4f0
push 0x5ab91c
push 0xe8
call fcn.100caf90
push 0x1000b4f0
push 0x5b087a
push 0xe8
call fcn.100caf90
push 0x1000b4f0
push 0x5b13e4
push 0xe8
call fcn.100caf90
add esp, 0x48
push 0x1000b4f0
push 0x5b69e3
push 0xe8
call fcn.100caf90
push 0x1000b4f0
push 0x5b6eb4
push 0xe8
call fcn.100caf90
push 0x1000b4f0
push 0x5b7026
push 0xe8
call fcn.100caf90
push 0x1000b4f0
push 0x5b7268
push 0xe8
call fcn.100caf90
push 0x1000b4f0
push 0x5b72d0
push 0xe8
call fcn.100caf90
push 0x1000b4f0
push 0x5b739d
push 0xe8
call fcn.100caf90
add esp, 0x48
push 0x1000b4f0
push 0x5b7634
push 0xe8
call fcn.100caf90
push 0x1000b4f0
push 0x95f68a
push 0xe8
call fcn.100caf90
push 0x1000b4f0
push 0x95f8b7
push 0xe8
call fcn.100caf90
push 0x1000b4f0
push 0x95fa96
push 0xe8
call fcn.100caf90
push 0x1000b4f0
push 0x96012e
push 0xe8
call fcn.100caf90
add esp, 0x3c
push 0
push 0
push 0x102c7728
push 0x1000b290
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x102c775c], eax
call fcn.100627c0
call fcn.10061750
push 0
push ecx
push str.DataEnc1.dat
call fcn.100a2160
push 1
push ecx
push str.DataDec2.dat
call fcn.100a2160
push 2
push 0x101361a4
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.1000b550
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], 0
push eax
push dword [0x101a6154]
lea ecx, [ebp - 0x48]
call fcn.1007b6d0
sub esp, 8
mov byte [ebp - 4], 1
mov ecx, eax
call fcn.100ab190
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x100836df
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100836d5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100836d5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100d9e0f
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp edx, 0x10
jb 0x1008372e
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10083724
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10083724
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100d9e0f
add esp, 8
push str.Data__KGData__Lua__Configs__Font.lua
mov ecx, 0x101a6150
call fcn.100b3030
push 0x100b3890
push 0x7729b3
push 0xe8
call fcn.100caf90
push 0x100b3860
push 0x772960
push 0xe8
call fcn.100caf90
add esp, 0x18
call fcn.100b1840
cmp dword [0x101ef188], 0x191
jl 0x100837f6
push 0x100aafa0
push 0x810711
push 0xe9
call fcn.100caf90
push 0x100aafe0
push 0x810790
push 0xe9
call fcn.100caf90
add esp, 0x18
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 7
push 0x811020
call edi
mov eax, 0x811020
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [ebp - 0x5dc]
push eax
push dword [ebp - 0x5dc]
push 7
push 0x811020
call edi
push 0x100ab020
push 0x811020
push 0xe9
call fcn.100caf90
add esp, 0xc
call fcn.100b1070
push 2
push 0x101361a4
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.1000b550
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], 2
push eax
push dword [0x10147b60]
lea ecx, [ebp - 0x48]
call fcn.1007b6d0
push 0x100b16c0
push str.SetItemFloor
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.10094d30
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x10083884
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1008387a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1008387a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100d9e0f
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp edx, 0x10
jb 0x100838d3
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100838c9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100838c9
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100d9e0f
add esp, 8
push str.Data__KGData__Lua__Configs__CustomItemFloor.lua
mov ecx, 0x10147b5c
call fcn.100b3030
push 0x10134e08
push str.StartLoadItemFloor
push 0x10147b5c
call fcn.100b31e0
push 0x100b1750
push 0x5f820c
push 0xe8
call fcn.100caf90
push 0x100b1750
push 0x5f847d
push 0xe8
call fcn.100caf90
add esp, 0x24
mov ecx, 0x101aa44c
push str.Data__KGData__Lua__EffectSystem__CharacterEffectItens.lua
call fcn.100b3030
push dword [0x101aa450]
call fcn.1008d750
push 0x100accc0
push 0x5711ab
push 0xe8
call fcn.100caf90
push 0x100accc0
push 0x57126f
push 0xe8
call fcn.100caf90
push 0x100accc0
push 0x5713d6
push 0xe8
call fcn.100caf90
push 0x100accc0
push 0x576ddb
push 0xe8
call fcn.100caf90
push 0x100accc0
push 0x588357
push 0xe8
call fcn.100caf90
push 0x100accc0
push 0x5883f4
push 0xe8
call fcn.100caf90
add esp, 0x48
push 0x100accc0
push 0x588505
push 0xe8
call fcn.100caf90
push 0x100accc0
push 0x588617
push 0xe8
call fcn.100caf90
push 0x100accc0
push 0x588661
push 0xe8
call fcn.100caf90
push 0x100accc0
push 0x58876e
push 0xe8
call fcn.100caf90
push 0x100accc0
push 0x5887ad
push 0xe8
call fcn.100caf90
push 0x100accc0
push 0x609d1e
push 0xe8
call fcn.100caf90
add esp, 0x48
push 0x100accc0
push 0x610691
push 0xe8
call fcn.100caf90
add esp, 0xc
call fcn.100b73b0
mov ecx, dword [0xe61e58]
mov eax, dword [0xe61e5c]
cmp ecx, 0x320
jne 0x10083a6b
test eax, eax
jne 0x10083a6b
mov eax, 0xb
jmp 0x10083a81
cmp ecx, 0x400
jne 0x10083a7c
test eax, eax
mov eax, 0xc
je 0x10083a81
mov eax, 0xd
push str.Tahoma
push 0
push 3
push 0
push 7
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push eax
mov dword [ebp - 0x5ec], eax
call dword [sym.imp.GDI32.dll_CreateFontA]
push str.Tahoma
push 0
push 3
push 0
push 7
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push dword [ebp - 0x5ec]
mov dword [0x101438a0], eax
call dword [sym.imp.GDI32.dll_CreateFontA]
push str.Tahoma
push 0
push 3
push 0
push 7
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push dword [ebp - 0x5ec]
mov dword [0x101438a4], eax
call dword [sym.imp.GDI32.dll_CreateFontA]
mov ecx, 0x101eedc3
mov dword [0x1014389c], eax
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10083b20
sub ecx, edx
je 0x10083ba0
push ecx
push 0x101eedc3
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], al
call fcn.1000b550
mov dword [ebp - 0x5e0], 1
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0x10
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
cmovae edx, ecx
test eax, eax
je 0x10083ba3
add eax, edx
mov dword [ebp - 0x5dc], eax
mov eax, edx
cmp edx, dword [ebp - 0x5dc]
jae 0x10083ba3
nop word [eax + eax]
cmp byte [eax], 0x20
jne 0x10083b90
inc eax
cmp eax, dword [ebp - 0x5dc]
jb 0x10083b80
jmp 0x10083ba3
sub eax, edx
cmp eax, 0xffffffff
je 0x10083ba3
mov byte [ebp - 0x5ed], 0
jmp 0x10083baa
mov ecx, dword [ebp - 0x2c]
mov byte [ebp - 0x5ed], 1
test byte [ebp - 0x5e0], 1
je 0x10083be8
mov eax, dword [ebp - 0x18]
cmp eax, 0x10
jb 0x10083be8
lea edx, [eax + 1]
mov eax, ecx
cmp edx, 0x1000
jb 0x10083bde
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10083bde
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100d9e0f
add esp, 8
cmp byte [ebp - 0x5ed], 0
je 0x10083c4b
push 0xe8
mov edx, 0x10033470
mov ecx, 0x78b0bc
call fcn.100ca660
push 0xe9
mov edx, 0x10033410
mov ecx, 0x789767
call fcn.100ca660
push 0xe9
mov edx, 0x10033430
mov ecx, 0x789a63
call fcn.100ca660
push 0xe9
mov edx, 0x10033450
mov ecx, 0x789dac
call fcn.100ca660
add esp, 0x10
mov byte [0x10143aa4], 1
cmp dword [0x101eef88], 1
jne 0x10083c7b
push ecx
mov edx, 5
mov ecx, 0x57fccf
call fcn.100ca6d0
push 0xe9
mov edx, 0x100575a0
mov ecx, 0x57fccf
call fcn.100ca660
add esp, 8
cmp dword [0x101eef9c], 1
jne 0x10083cab
push ecx
mov edx, 5
mov ecx, 0x5842b1
call fcn.100ca6d0
push 0xe9
mov edx, 0x10057720
mov ecx, 0x5842b1
call fcn.100ca660
add esp, 8
cmp dword [0x101eefb0], 1
jne 0x10083cdb
push ecx
mov edx, 5
mov ecx, 0x5852e4
call fcn.100ca6d0
push 0xe9
mov edx, 0x100578b0
mov ecx, 0x5852e4
call fcn.100ca660
add esp, 8
cmp dword [0x101eefc4], 1
jne 0x10083d0b
push ecx
mov edx, 5
mov ecx, 0x584a4e
call fcn.100ca6d0
push 0xe9
mov edx, 0x10057a40
mov ecx, 0x584a4e
call fcn.100ca660
add esp, 8
cmp dword [0x101eefd8], 1
jne 0x10083d3b
push ecx
mov edx, 5
mov ecx, 0x584b82
call fcn.100ca6d0
push 0xe9
mov edx, 0x10057b80
mov ecx, 0x584b82
call fcn.100ca660
add esp, 8
cmp dword [0x101eefe8], 1
jne 0x10083d6b
push ecx
mov edx, 5
mov ecx, 0x582fe6
call fcn.100ca6d0
push 0xe9
mov edx, 0x10057c90
mov ecx, 0x582fe6
call fcn.100ca660
add esp, 8
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0xd
call dword [sym.imp.GDI32.dll_CreateFontA]
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push 0xd
mov dword [0x102fd630], eax
call dword [sym.imp.GDI32.dll_CreateFontA]
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0xf
mov dword [0x102fd634], eax
call dword [sym.imp.GDI32.dll_CreateFontA]
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0x12
mov dword [0x102fd638], eax
call dword [sym.imp.GDI32.dll_CreateFontA]
mov dword [0x102fd63c], eax
call fcn.1005e4e0
push 2
push 0x101361a4
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.1000b550
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], 4
push eax
push dword [0x1017d16c]
lea ecx, [ebp - 0x48]
call fcn.1007b6d0
mov byte [ebp - 4], 5
sub esp, 8
mov ecx, eax
call fcn.10080da0
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x10083ea6
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10083e9c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10083e9c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100d9e0f
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp edx, 0x10
jb 0x10083ef5
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10083eeb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10083eeb
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100d9e0f
add esp, 8
push str.Data__KGData__Lua__Configs__CustomItemPosition.lua
mov ecx, 0x1017d168
call fcn.100b3030
push 0x101324e7
push str.StartLoadItemPosition
push 0x1017d168
call fcn.100b31e0
push 0x1007bbd0
push 0x5d0b94
push 0xe8
call fcn.100caf90
add esp, 0x18
mov dword [0x1018c58c], 1
cmp dword [0x101ef044], 2
jne 0x10083f47
call fcn.100557c0
cmp dword [0x102bbb70], 0
je 0x10083f5c
call fcn.10033390
mov ecx, eax
call fcn.100c0eb0
push 0x10032cb0
push 0x7d2b3d
push 0xe8
call fcn.100caf90
push 0x10032b50
push 0x841e49
push 0xe8
call fcn.100caf90
add esp, 0x18
cmp dword [0x101ef0b0], 1
jne 0x10083fbd
push 0x10033400
push 0x78b0f0
push 0xe9
call fcn.100caf90
push 0x100333f0
push 0x787ba0
push 0xe9
call fcn.100caf90
add esp, 0x18
jmp 0x10083fd4
push 0x10032c80
push 0x78b0f0
push 0xe9
call fcn.100caf90
add esp, 0xc
cmp dword [0x101ef044], 1
jne 0x10084031
mov eax, dword [0x101ef0f4]
dec eax
cmp eax, 1
ja 0x10084031
push 0x10031590
push 0x84bc0f
push 0xe8
mov dword [0x102bb9d4], 0
call fcn.100caf90
push 0x100315b0
push 0x84bd1d
push 0xe8
call fcn.100caf90
push 0x10030560
push 0x84bdb0
push 0xe9
call fcn.100caf90
add esp, 0x24
push 0x10032310
push 0x5bb0b0
push 0xe9
call fcn.100caf90
add esp, 0xc
mov dword [0x1018c584], 0
cmp dword [0x101ef04c], 1
jne 0x10084072
push 0x1000f6f0
push 0x82b772
push 0xe8
call fcn.100caf90
add esp, 0xc
cmp dword [0x101ef048], 0
je 0x10084092
push 0x1009fb60
push 0x62f870
push 0xe9
call fcn.100caf90
add esp, 0xc
push 0x1009da10
push 0x82aba0
push 0xe9
call fcn.100caf90
add esp, 0xc
cmp dword [0x101ef060], 1
jne 0x10084100
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x7f6834
call edi
mov eax, 0x7f6834
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x5dc]
push eax
push dword [ebp - 0x5dc]
push 5
push 0x7f6834
call edi
push 0x100510d0
push 0x7f67b7
push 0xe8
call fcn.100caf90
add esp, 0xc
cmp dword [0x101ef094], 0
jne 0x10084192
mov byte [0x102c1a88], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x1004ffc0
sub eax, 0x1388
mov byte [0x102c1a90], 0
push 0x7d2bc0
push 0xe9
mov dword [0x102c1a8c], eax
call fcn.100caf90
push 0x100512c0
push 0x7d26b5
push 0xe9
call fcn.100caf90
push 0x10051310
push 0x7d2751
push 0xe9
call fcn.100caf90
push 0x10051360
push 0x7d27fc
push 0xe9
call fcn.100caf90
push 0x100513b0
push 0x80b8e0
push 0xe9
call fcn.100caf90
add esp, 0x3c
cmp dword [0x101eef84], 1
jne 0x100842c0
push 0x1004cf30
push 0x5012d0
push 0xe9
call fcn.100caf90
push 0x1004cfc0
push 0x80f250
push 0xe8
call fcn.100caf90
push 0x1004d110
push 0x7df740
push 0xe9
call fcn.100caf90
push 0x1004ec90
push 0x7df34c
push 0xe8
call fcn.100caf90
push 0x1004ecc0
push 0x66424b
push 0xe8
call fcn.100caf90
push 0x1004d040
push 0x833731
push 0xe8
call fcn.100caf90
add esp, 0x48
push 0x1004d170
push 0x7df846
push 0xe8
call fcn.100caf90
push 0x1004f100
push 0x7df83e
push 0xe8
call fcn.100caf90
push 0x1004edd0
push 0x83469c
push 0xe8
call fcn.100caf90
push 0x10071290
push 0x420814
push 0xe8
call fcn.100caf90
push 0x1004bf70
push 0x924c8b
push 0xe8
call fcn.100caf90
push 0x1004b630
push 0x7e5cb6
push 0xe8
call fcn.100caf90
add esp, 0x48
push 0x1004c4c0
push 0x7e5b70
push 0xe8
call fcn.100caf90
push 0x1004c250
push 0x7e348f
push 0xe8
call fcn.100caf90
add esp, 0x18
cmp dword [0x101ef0e8], 1
jne 0x1008432b
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x401f56
call edi
mov eax, 0x401f56
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x5dc]
push eax
push dword [ebp - 0x5dc]
push 5
push 0x401f56
call edi
push 0x1000bcc0
push 0x401ef1
push 0xe8
call fcn.100caf90
push 0x1000bc60
push 0x401fc4
push 0xe8
call fcn.100caf90
add esp, 0x18
cmp dword [0x101ef02c], 1
jne 0x100844be
push ecx
mov edx, 7
mov ecx, 0x608cac
call fcn.100ca6d0
add esp, 4
mov byte [ebp - 0x5e8], 0xe9
mov eax, 0x1004f7d0
mov dword [ebp - 0x5dc], 0
sub eax, 0x608cb1
mov dword [ebp - 0x5e7], eax
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x608cac
call edi
test eax, eax
je 0x100843b8
mov eax, dword [ebp - 0x5e8]
mov ecx, 0x608cac
mov dword [ecx], eax
mov al, byte [ebp - 0x5e4]
mov byte [ecx + 4], al
lea eax, [ebp - 0x5e0]
push eax
push dword [ebp - 0x5dc]
mov dword [ebp - 0x5e0], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100843ba
call esi
push ecx
mov edx, 7
mov ecx, 0x60954d
call fcn.100ca6d0
add esp, 4
mov byte [ebp - 0x5e8], 0xe9
mov eax, 0x1004f860
mov dword [ebp - 0x5dc], 0
sub eax, 0x609552
mov dword [ebp - 0x5e7], eax
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x60954d
call edi
test eax, eax
je 0x1008443a
mov eax, dword [ebp - 0x5e8]
mov ecx, 0x60954d
mov dword [ecx], eax
mov al, byte [ebp - 0x5e4]
mov byte [ecx + 4], al
lea eax, [ebp - 0x5e0]
push eax
push dword [ebp - 0x5dc]
mov dword [ebp - 0x5e0], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1008443c
call esi
push ecx
mov edx, 7
mov ecx, 0x60f04c
call fcn.100ca6d0
add esp, 4
mov byte [ebp - 0x5e8], 0xe9
mov eax, 0x1004f8f0
mov dword [ebp - 0x5dc], 0
sub eax, 0x60f051
mov dword [ebp - 0x5e7], eax
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x60f04c
call edi
test eax, eax
je 0x100844bc
mov eax, dword [ebp - 0x5e8]
mov ecx, 0x60f04c
mov dword [ecx], eax
mov al, byte [ebp - 0x5e4]
mov byte [ecx + 4], al
lea eax, [ebp - 0x5e0]
push eax
push dword [ebp - 0x5dc]
mov dword [ebp - 0x5e0], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100844be
call esi
cmp dword [0x101ef030], 1
jne 0x100844f2
push 0x100273f0
push 0x61041c
push 0xe8
call fcn.100caf90
push 0x100273f0
push 0x5666c1
push 0xe8
call fcn.100caf90
add esp, 0x18
cmp dword [0x101ef028], 1
jne 0x10084549
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x502a95
call edi
mov eax, 0x502a95
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x5dc]
push eax
push dword [ebp - 0x5dc]
push 5
push 0x502a95
call edi
push 0x100086e0
push 0x502a95
push 0xe8
call fcn.100caf90
add esp, 0xc
cmp dword [0x101ef018], 1
jne 0x10084557
call fcn.1007ae90
cmp dword [0x101ef020], 1
jne 0x10084565
call fcn.1002df80
cmp dword [0x101ef000], 1
jne 0x10084573
call fcn.100a0750
cmp dword [0x101ef004], 1
jne 0x100846ae
push 0x10009870
push 0x900de9
push 0xe8
call fcn.100caf90
push 0x10008b40
push 0x8c5bb5
push 0xe8
call fcn.100caf90
add esp, 0x14
mov edx, 0xa
mov ecx, 0x56fc5e
call fcn.100ca6d0
add esp, 4
mov byte [ebp - 0x5e8], 0xe9
mov eax, 0x10009750
mov dword [ebp - 0x5dc], 0
sub eax, 0x56fc63
mov dword [ebp - 0x5e7], eax
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x56fc5e
call edi
test eax, eax
je 0x1008462a
mov eax, dword [ebp - 0x5e8]
mov ecx, 0x56fc5e
mov dword [ecx], eax
mov al, byte [ebp - 0x5e4]
mov byte [ecx + 4], al
lea eax, [ebp - 0x5e0]
push eax
push dword [ebp - 0x5dc]
mov dword [ebp - 0x5e0], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1008462c
call esi
push ecx
mov edx, 0xa
mov ecx, 0x56fd1a
call fcn.100ca6d0
add esp, 4
mov byte [ebp - 0x5e8], 0xe9
mov eax, 0x100097f0
mov dword [ebp - 0x5dc], 0
sub eax, 0x56fd1f
mov dword [ebp - 0x5e7], eax
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x56fd1a
call edi
test eax, eax
je 0x100846ac
mov eax, dword [ebp - 0x5e8]
mov ecx, 0x56fd1a
mov dword [ecx], eax
mov al, byte [ebp - 0x5e4]
mov byte [ecx + 4], al
lea eax, [ebp - 0x5e0]
push eax
push dword [ebp - 0x5dc]
mov dword [ebp - 0x5e0], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100846ae
call esi
cmp dword [0x101ef00c], 1
jne 0x100846dd
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
push eax
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
push 0x100c77d0
push 0x4d70d4
push 0xe8
call fcn.100caf90
add esp, 0x14
call fcn.1003a4a0
mov esi, 2
mov dword [ebp - 0x5ec], 0
xor edi, edi
mov dword [ebp - 0x5dc], 1
mov dword [ebp - 0x5e0], esi
lea ecx, [esi + 1]
mov eax, 0xf0f0f0f1
mul ecx
mov eax, edi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + 0x101eeca3]
xor al, byte [esi + 0x101eec56]
movzx esi, al
mov eax, 0xf0f0f0f1
mul dword [ebp - 0x5e0]
mov eax, edi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x5dc]
add dword [ebp - 0x5dc], 4
mov al, byte [eax + 0x101eeca2]
xor al, byte [ecx + 0x101eec56]
movzx eax, al
add si, ax
mov eax, 0xf0f0f0f1
mul ecx
mov eax, edi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + 0x101eeca1]
xor al, byte [edi + 0x101eec56]
movzx eax, al
add si, ax
mov eax, 0xf0f0f0f1
mul edi
mov eax, edi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + 0x101eeca0]
xor al, byte [edi + 0x101eec55]
add edi, 4
movzx eax, al
add si, ax
add word [ebp - 0x5ec], si
mov esi, dword [ebp - 0x5e0]
add esi, 4
mov dword [ebp - 0x5e0], esi
cmp esi, 0x22
jb 0x10084703
mov al, byte [ebp - 0x5ec]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub al, 0x1e
mov byte [0x102c1b90], al
mov eax, dword [ebp - 0x5ec]
shr eax, 8
sub al, 0x31
mov byte [0x102c1a87], al
mov eax, dword [0xd227b0]
mov dword [0x102c1b98], eax
mov eax, dword [0xd227f8]
mov dword [0x102c1b94], eax
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0xd227b0
call edi
lea eax, [ebp - 0x5dc]
mov dword [0xd227b0], 0x10071b20
push eax
push dword [ebp - 0x5dc]
push 4
push 0xd227b0
call edi
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0xd227f8
call edi
lea eax, [ebp - 0x5dc]
mov dword [0xd227f8], 0x10071c40
push eax
push dword [ebp - 0x5dc]
push 4
push 0xd227f8
call edi
push 0x10078db0
push 0x633fcb
push 0xff
call fcn.100caf90
push 0x10079270
push 0x633fe3
push 0xff
call fcn.100caf90
push 0x10079650
push 0x57ac07
push 0xff
call fcn.100caf90
push 0x10079650
push 0x6083b9
push 0xff
call fcn.100caf90
push 0x10079720
push 0x777ff2
push 0xff
call fcn.100caf90
push 0x10079720
push 0x778003
push 0xff
call fcn.100caf90
add esp, 0x48
push 0x10079730
push 0x5f7c2f
push 0xe9
call fcn.100caf90
push 0x10079760
push 0x968137
push 0xe9
call fcn.100caf90
push 0x10079780
push 0x968157
push 0xe9
call fcn.100caf90
push 0x10078c60
push 0x57ad82
push 0xe9
call fcn.100caf90
push 0x10078cb0
push 0x57adc8
push 0xe9
call fcn.100caf90
add esp, 0x3c
cmp byte [0x101ef19d], 1
jne 0x100849ea
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 7
push 0x54c2d5
call edi
mov eax, 0x54c2d5
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [ebp - 0x5dc]
push eax
push dword [ebp - 0x5dc]
push 7
push 0x54c2d5
call edi
push 0x10078980
push 0x54c2d5
push 0xe9
call fcn.100caf90
push 0x100787f0
push 0x4fc6c7
push 0xe8
call fcn.100caf90
push 0x100787f0
push 0x4fcc3e
push 0xe8
call fcn.100caf90
push 0x100787f0
push 0x54c21d
push 0xe8
call fcn.100caf90
add esp, 0x30
push 0x100797a0
push 0x58e650
push 0xe9
call fcn.100caf90
push 0x100797f0
push 0x8386b5
push 0xe9
call fcn.100caf90
push 0x10079870
push 0x5c4025
push 0xe9
call fcn.100caf90
push 0x100798a0
push 0x5f7c3b
push 0xe9
call fcn.100caf90
push 0x100798d0
push 0x64b701
push 0xe9
call fcn.100caf90
push 0x10079900
push 0x8383a0
push 0xe9
call fcn.100caf90
add esp, 0x48
push 0x10079930
push 0x5f3f7e
push 0xe9
call fcn.100caf90
push 0x10079970
push 0x5f4a60
push 0xe9
call fcn.100caf90
add esp, 0x18
call fcn.100a7a60
cmp dword [0x101eeed4], 0
je 0x10084b5c
push 0x100c6d00
push 0x40b903
push 0xe9
call fcn.100caf90
push 0x100c6d40
push 0x4da416
push 0xe9
call fcn.100caf90
push 0x100c6d60
push 0x63a192
push 0xe9
call fcn.100caf90
push 0x100c6da0
push 0x7a89eb
push 0xe9
call fcn.100caf90
push fcn.100c6c60
push 0x40bc24
push 0xe8
call fcn.100caf90
push fcn.100c6c60
push 0x4d762c
push 0xe8
call fcn.100caf90
add esp, 0x48
push fcn.100c6c60
push 0x4ef622
push 0xe8
call fcn.100caf90
push fcn.100c6c60
push 0x63cd3a
push 0xe8
call fcn.100caf90
push fcn.100c6590
push 0x80f7fe
push 0xe8
call fcn.100caf90
add esp, 0x24
call fcn.100c8e90
cmp dword [0x101ef01c], 1
jne 0x10084ba9
push 0x10041cf0
push 0x50d905
push 0xe8
call fcn.100caf90
push 0x10041e60
push 0x5cd10f
push 0xe9
call fcn.100caf90
push 0x10041ec0
push 0x5cefe7
push 0xe9
call fcn.100caf90
add esp, 0x24
push 0x100c6ef0
push 0x4d13c2
push 0xe9
call fcn.100caf90
push 0x100c70a0
push 0x4d2782
push 0xe9
call fcn.100caf90
push 0x100c7170
push 0x830c3a
push 0xe9
call fcn.100caf90
push 0x100c6dd0
push 0x4da2f9
push 0xe8
call fcn.100caf90
mov esi, dword [sym.imp.USER32.dll_SetWindowsHookExA]
add esp, 0x30
cmp dword [0x102bbb84], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
jne 0x10084c2c
call eax
push eax
push dword [0x102bbb74]
push 0x1003b110
push 7
call esi
mov dword [0x102bbb84], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x102bbb88], 0
jne 0x10084c4c
call eax
push eax
push dword [0x102bbb74]
push 0x1003c3d0
push 2
call esi
mov dword [0x102bbb88], eax
cmp byte [0x101ef19e], 1
jne 0x10084c87
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0x4d0e17
call edi
lea eax, [ebp - 0x5dc]
mov dword [0x4d0e17], 0x1003b080
push eax
push dword [ebp - 0x5dc]
push 4
push 0x4d0e17
call edi
push 0x1003b020
push 0x4d0e2f
push 0xe9
call fcn.100caf90
add esp, 0xc
call fcn.100789b0
cmp dword [0x101ef198], 0
mov dword [0x102c4ac4], 0
mov byte [0x102c4ab0], 0
mov dword [0x102c4ab8], 0xffffffff
mov dword [0x102c4ac0], 0xffffffff
mov dword [0x102c4ab4], 0xffffffff
je 0x10084cf2
push 0xe8
mov edx, 0x100cacc0
mov ecx, 0x588511
call fcn.100ca660
add esp, 4
mov ecx, 0x1018c580
call fcn.10072fa0
cmp dword [0x101ef0a8], 2
setne byte [0x10520580]
call fcn.1005fda0
call fcn.100a1380
call fcn.10001400
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.100018e0
call fcn.10001470
mov al, byte [0x101eec34]
test al, 1
je 0x10084d63
push 0x101eec35
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
jne 0x10084d5e
push eax
push str.Start_Error
push str.Please_start_game_from_Launcher
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov al, byte [0x101eec34]
test al, 2
je 0x10084daa
push 0x101eec75
lea eax, [ebp - 0x148]
push str.XTEAM_MAIN_10405__s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x148]
push eax
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
test eax, eax
jne 0x10084d56
lea eax, [ebp - 0x148]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
cmp dword [0x101eee8c], 0
je 0x10084eba
push 0x104
lea eax, [ebp - 0x150]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x150]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
jne 0x10084dec
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea ecx, [ebp - 0x150]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10084df5
sub ecx, edx
test ecx, ecx
jle 0x10084e2f
cmp byte [ebp + ecx - 0x150], 0x5c
je 0x10084e13
dec ecx
test ecx, ecx
jg 0x10084e02
jmp 0x10084e2f
lea eax, [ebp - 0x14f]
add eax, ecx
push eax
push 0x104
push 0x10545cf8
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
add esp, 0xc
push 0x101eed03
push 0x10545cf8
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
add esp, 8
test eax, eax
je 0x10084e4e
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea ecx, [ebp - 0x5d8]
call fcn.10007ae0
push ecx
lea eax, [ebp - 0x5dc]
push eax
push 0x101eed03
lea ecx, [ebp - 0x5d8]
call fcn.10007c10
test al, al
jne 0x10084e91
push 0x10
push str.Error
push str.Main.exe_CRC_error_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101eee8c]
cmp eax, dword [ebp - 0x5dc]
je 0x10084eba
push 0x10
push str.Error
push str.Main.exe_CRC_error_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp dword [0x101eee90], 0
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
je 0x10084fa2
lea ecx, [ebp - 0x5d8]
call fcn.10007ae0
push ecx
lea eax, [ebp - 0x5dc]
push eax
push 0x101eed23
lea ecx, [ebp - 0x5d8]
call fcn.10007c10
test al, al
jne 0x10084f10
push 0x10
push str.Error
push str.Plugin_1_CRC_error_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101eee90]
cmp eax, dword [ebp - 0x5dc]
je 0x10084f25
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x101eed23
call esi
mov dword [ebp - 0x5e0], eax
test eax, eax
jne 0x10084f3d
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x104
lea ecx, [ebp - 0x150]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ecx
lea eax, [ebp - 0x5dc]
push eax
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x5d8]
call fcn.10007c10
test al, al
jne 0x10084f76
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101eee90]
cmp eax, dword [ebp - 0x5dc]
je 0x10084f8b
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x10137df8
push dword [ebp - 0x5e0]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10084fa2
call eax
cmp dword [0x101eee94], 0
je 0x10085084
lea ecx, [ebp - 0x5d8]
call fcn.10007ae0
push ecx
lea eax, [ebp - 0x5dc]
push eax
push 0x101eed43
lea ecx, [ebp - 0x5d8]
call fcn.10007c10
test al, al
jne 0x10084ff2
push 0x10
push str.Error
push str.Plugin_2_CRC_error_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101eee94]
cmp eax, dword [ebp - 0x5dc]
je 0x10085007
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x101eed43
call esi
mov dword [ebp - 0x5e0], eax
test eax, eax
jne 0x1008501f
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x104
lea ecx, [ebp - 0x150]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ecx
lea eax, [ebp - 0x5dc]
push eax
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x5d8]
call fcn.10007c10
test al, al
jne 0x10085058
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101eee94]
cmp eax, dword [ebp - 0x5dc]
je 0x1008506d
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x10137df8
push dword [ebp - 0x5e0]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10085084
call eax
cmp dword [0x101eee98], 0
je 0x10085166
lea ecx, [ebp - 0x5d8]
call fcn.10007ae0
push ecx
lea eax, [ebp - 0x5dc]
push eax
push 0x101eed63
lea ecx, [ebp - 0x5d8]
call fcn.10007c10
test al, al
jne 0x100850d4
push 0x10
push str.Error
push str.Plugin_3_CRC_error_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101eee98]
cmp eax, dword [ebp - 0x5dc]
je 0x100850e9
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x101eed63
call esi
mov dword [ebp - 0x5e0], eax
test eax, eax
jne 0x10085101
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x104
lea ecx, [ebp - 0x150]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ecx
lea eax, [ebp - 0x5dc]
push eax
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x5d8]
call fcn.10007c10
test al, al
jne 0x1008513a
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101eee98]
cmp eax, dword [ebp - 0x5dc]
je 0x1008514f
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x10137df8
push dword [ebp - 0x5e0]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10085166
call eax
cmp dword [0x101eee9c], 0
je 0x10085248
lea ecx, [ebp - 0x5d8]
call fcn.10007ae0
push ecx
lea eax, [ebp - 0x5dc]
push eax
push 0x101eed83
lea ecx, [ebp - 0x5d8]
call fcn.10007c10
test al, al
jne 0x100851b6
push 0x10
push str.Error
push str.Plugin_4_CRC_error_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101eee9c]
cmp eax, dword [ebp - 0x5dc]
je 0x100851cb
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x101eed83
call esi
mov dword [ebp - 0x5e0], eax
test eax, eax
jne 0x100851e3
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x104
lea ecx, [ebp - 0x150]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ecx
lea eax, [ebp - 0x5dc]
push eax
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x5d8]
call fcn.10007c10
test al, al
jne 0x1008521c
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101eee9c]
cmp eax, dword [ebp - 0x5dc]
je 0x10085231
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x10137df8
push dword [ebp - 0x5e0]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10085248
call eax
cmp dword [0x101eeea0], 0
je 0x1008532a
lea ecx, [ebp - 0x5d8]
call fcn.10007ae0
push ecx
lea eax, [ebp - 0x5dc]
push eax
push 0x101eeda3
lea ecx, [ebp - 0x5d8]
call fcn.10007c10
test al, al
jne 0x10085298
push 0x10
push str.Error
push str.Plugin_5_CRC_error_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101eeea0]
cmp eax, dword [ebp - 0x5dc]
je 0x100852ad
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x101eeda3
call esi
mov dword [ebp - 0x5e0], eax
test eax, eax
jne 0x100852c5
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x104
lea ecx, [ebp - 0x150]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ecx
lea eax, [ebp - 0x5dc]
push eax
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x5d8]
call fcn.10007c10
test al, al
jne 0x100852fe
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101eeea0]
cmp eax, dword [ebp - 0x5dc]
je 0x10085313
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x10137df8
push dword [ebp - 0x5e0]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1008532a
call eax
cmp dword [0x101eeea4], 0
je 0x1008540c
lea ecx, [ebp - 0x5d8]
call fcn.10007ae0
push ecx
lea eax, [ebp - 0x5dc]
push eax
push 0x101eedc3
lea ecx, [ebp - 0x5d8]
call fcn.10007c10
test al, al
jne 0x1008537a
push 0x10
push str.Error
push str.Plugin_Camera_CRC_error_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101eeea4]
cmp eax, dword [ebp - 0x5dc]
je 0x1008538f
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x101eedc3
call esi
mov dword [ebp - 0x5e0], eax
test eax, eax
jne 0x100853a7
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x104
lea ecx, [ebp - 0x150]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ecx
lea eax, [ebp - 0x5dc]
push eax
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x5d8]
call fcn.10007c10
test al, al
jne 0x100853e0
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101eeea4]
cmp eax, dword [ebp - 0x5dc]
je 0x100853f5
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x10137df8
push dword [ebp - 0x5e0]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1008540c
call eax
cmp dword [0x101eeea8], 0
je 0x100854e5
lea ecx, [ebp - 0x5d8]
call fcn.10007ae0
push ecx
lea eax, [ebp - 0x5dc]
push eax
push 0x101eede3
lea ecx, [ebp - 0x5d8]
call fcn.10007c10
test al, al
jne 0x1008545c
push 0x10
push str.Error
push str.Plugin_HackDLL_CRC_error_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101eeea8]
cmp eax, dword [ebp - 0x5dc]
je 0x10085471
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x101eede3
call esi
mov esi, eax
test esi, esi
jne 0x10085485
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x104
lea eax, [ebp - 0x150]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ecx
lea eax, [ebp - 0x5dc]
push eax
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x5d8]
call fcn.10007c10
test al, al
jne 0x100854be
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101eeea8]
cmp eax, dword [ebp - 0x5dc]
je 0x100854d3
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x10137df8
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100854e5
call eax
call fcn.1000c330
call fcn.100a6319
mov eax, 0x100a68e0
mov byte [ebp - 0x5e8], 0xe8
sub eax, 0x836486
mov dword [ebp - 0x5dc], 0
mov dword [ebp - 0x5e7], eax
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x836481
call edi
test eax, eax
jne 0x1008552e
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1008556a
mov eax, dword [ebp - 0x5e8]
mov ecx, 0x836481
mov dword [ecx], eax
mov al, byte [ebp - 0x5e4]
mov byte [ecx + 4], al
lea eax, [ebp - 0x5e0]
push eax
push dword [ebp - 0x5dc]
mov dword [ebp - 0x5e0], 0
push 5
push ecx
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1008556c
call esi
mov eax, 0x100a6850
mov byte [ebp - 0x5e8], 0xe8
sub eax, 0x7dd309
mov dword [ebp - 0x5dc], 0
mov dword [ebp - 0x5e7], eax
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x7dd304
call edi
test eax, eax
je 0x100855d9
mov eax, dword [ebp - 0x5e8]
mov ecx, 0x7dd304
mov dword [ecx], eax
mov al, byte [ebp - 0x5e4]
mov byte [ecx + 4], al
lea eax, [ebp - 0x5e0]
push eax
push dword [ebp - 0x5dc]
mov dword [ebp - 0x5e0], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100855db
call esi
mov eax, 0x100a6850
mov byte [ebp - 0x5e8], 0xe8
sub eax, 0x833b0d
mov dword [ebp - 0x5dc], 0
mov dword [ebp - 0x5e7], eax
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x833b08
call edi
test eax, eax
je 0x10085648
mov eax, dword [ebp - 0x5e8]
mov ecx, 0x833b08
mov dword [ecx], eax
mov al, byte [ebp - 0x5e4]
mov byte [ecx + 4], al
lea eax, [ebp - 0x5e0]
push eax
push dword [ebp - 0x5dc]
mov dword [ebp - 0x5e0], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1008564a
call esi
push 0x10043650
push 0x56f476
push 0xe8
call fcn.100caf90
push 0x10043650
push 0x5ebbe6
push 0xe8
call fcn.100caf90
push 0x4f9238
push 0x4f921d
push 0xe9
call fcn.100caf90
push 0x63f058
push 0x63f040
push 0xe9
call fcn.100caf90
push 0x10007d70
push 0x4f131e
push 0xe8
call fcn.100caf90
add esp, 0x3c
cmp dword [0x101eee88], 1
jne 0x100856f6
mov edx, 0x101eee08
mov ecx, 0x954149
call fcn.100caed0
mov edx, 0x101eee28
mov ecx, 0x954116
call fcn.100caed0
mov edx, 0x101eee48
mov ecx, 0x9540e3
call fcn.100caed0
mov edx, 0x101eee68
mov ecx, 0x9540ad
call fcn.100caed0
cmp dword [0x101eef20], 1
jne 0x10085791
mov eax, 0x10194644
nop dword [eax + eax]
mov dword [eax], 0xffffffff
add eax, 0x20
cmp eax, 0x101a4044
jl 0x10085710
push 0x1007b370
push 0x7e44d3
push 0xff
mov dword [0x101a4044], 0
mov dword [0x101a404c], 0
mov dword [0x101a4048], 0
call fcn.100caf90
push 0x1007b4b0
push 0x7e452f
push 0xff
call fcn.100caf90
push 0x1007b610
push 0x7e4497
push 0xe8
call fcn.100caf90
push 0x1007b610
push 0x7e44ec
push 0xe8
call fcn.100caf90
add esp, 0x30
call fcn.10063c00
call fcn.100af5c0
call fcn.100ace10
jmp 0x10082923
jmp 0x100827f0