Function at 0x10085600
Capabilities:
Check mutex and terminate process on windows
Check mutex on windows
Execute shellcode via indirect call
Get file size
Initialize winsock library
Link many functions at runtime
Read .ini file
Read file on windows
Resolve dns
Spawn thread to rwx shellcode
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10178c59
mov eax, dword fs:[0]
push eax
sub esp, 0x5e4
mov eax, dword [0x101a506c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
cmp byte [0x103273e0], 0
jne 0x1008571a
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x40]
push eax
push 0x40
push 0xd21fff
push 0x401000
mov byte [0x103273e0], 1
call edi
test eax, eax
je 0x1008571a
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push str.._Settings.ini
push 1
push str.WideScreen
push str.Interface
call esi
push str.._Settings.ini
push 1
push str.WideScreenScale
push str.Interface
mov dword [0x10320a48], eax
call esi
lea ecx, [ebp - 0x5d0]
mov dword [0x10320a44], eax
call fcn.10007a00
push ecx
push 0x1031d84c
push str..DataKGDataLocalServerGame.info
lea ecx, [ebp - 0x5d0]
call fcn.10007b30
test al, al
je 0x100856fc
push 0
push 0x20
push 3
push 0
push 1
push connect
push str..DataKGDataLocalServerGame.info
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x100856fc
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, 0x903d0
je 0x10085736
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x10
push str.Error
push str.ServerGame.info_no_funciona_o_es_invalida_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x1034e8e4
call fcn.1000b9c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100ee3f1
mov esp, ebp
pop ebp
ret
push 0
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push 0x903d0
push 0x10252534
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x100856f5
xor ecx, ecx
nop word [eax + eax]
mov eax, ecx
shr eax, 8
xor al, 0x95
add al, byte [ecx + 0x10252534]
xor al, cl
xor al, 0xda
mov byte [ecx + 0x10252534], al
inc ecx
cmp ecx, 0x903d0
jb 0x10085760
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call ebx
lea ecx, [ebp - 0x5d0]
call fcn.10007a00
push ecx
push 0x1031d850
push str..DataKGDataLocalEffectGame.info
lea ecx, [ebp - 0x5d0]
call fcn.10007b30
test al, al
je 0x100857e2
push 0
push 0x20
push 3
push 0
push 1
push connect
push str..DataKGDataLocalEffectGame.info
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x100857e2
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, 0x3af48
je 0x100857f3
push esi
call ebx
push 0x10
push str.Error
push str.EffectGame.info_no_funciona_o_es_invalida_
jmp 0x10085708
push 0
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], 0
push eax
push 0x3af48
push 0x102e2904
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x100857df
xor ecx, ecx
mov eax, ecx
shr eax, 8
xor al, 0x6e
add al, byte [ecx + 0x102e2904]
xor al, cl
xor al, 0xe6
mov byte [ecx + 0x102e2904], al
inc ecx
cmp ecx, 0x3af48
jb 0x10085817
push esi
call ebx
call fcn.100b5f70
cmp dword [0x1025296c], 1
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
jne 0x1008589e
push 0x1000bcc0
push 0x57d278
push 0xe9
call fcn.100ca7d0
push 0x1000bcf0
push 0x74cd50
push 0xe9
call fcn.100ca7d0
push 0x1000bd20
push 0x771328
push 0xe9
call fcn.100ca7d0
add esp, 0x24
push 0
push 0
push 0
push 0x100855c0
push 0
push 0
call esi
cmp dword [0x10252704], 1
mov ebx, dword [sym.imp.USER32.dll_MessageBoxA]
jne 0x10085900
push str.Main.exe
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x14], eax
test eax, eax
jne 0x100858cf
push eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
jmp 0x10085900
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x10085900
push dword [ebp - 0x14]
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
push 0x10
push str.Error
push str.You_already_have_a_main_open__you_cant_open_any_more.
push 0
call ebx
mov ecx, 0x1034e8e4
call fcn.1000b9c0
push 0xe9
mov edx, 0x100c9a10
mov ecx, 0x5509ce
call fcn.100ca050
push 0xe9
mov edx, 0x100c9ef0
mov ecx, 0x551573
call fcn.100ca050
push 0xa0
push 0xe61144
call fcn.10096d80
push 0xeb
push 0x4d1e69
call fcn.10096d80
push 0xe9
push 0x4d228d
call fcn.10096d80
push 0x8b
push 0x4d228e
call fcn.10096d80
push 0
push 0x4d228f
call fcn.10096d80
push 0
push 0x4d2290
call fcn.10096d80
push 0
push 0x4d2291
call fcn.10096d80
add esp, 0x40
push 0xeb
push 0x4d559c
call fcn.10096d80
push 0xeb
push 0x633f7a
call fcn.10096d80
push 0xeb
push 0x634403
call fcn.10096d80
push 0xeb
push 0x63e6c4
call fcn.10096d80
push 0xeb
push 0x4d2246
call fcn.10096d80
push 0xeb
push 0x501163
call fcn.10096d80
push 0
push 0x40af0a
call fcn.10096d80
push 0x50
push 0x40b4bc
call fcn.10096d80
add esp, 0x40
push 0x50
push 0x40b4c5
call fcn.10096d80
push 0x18
push 0x40b4cf
call fcn.10096d80
push 0
push 0x40af0a
call fcn.10096d80
push 0xeb
push 0x40afd5
call fcn.10096d80
push 0x70
push 0x777fd6
call fcn.10096d80
push 0x17
push 0x777fd7
call fcn.10096d80
push 0x3c
push 0x4ebec7
call fcn.10096d80
push 0x3c
push 0x5c4004
call fcn.10096d80
add esp, 0x40
push 0x3c
push 0x7e40bb
call fcn.10096d80
push 0x3c
push 0x81b546
call fcn.10096d80
push 0x3c
push 0x81b58d
call fcn.10096d80
push 0x3c
push 0x86e284
call fcn.10096d80
push 0x3c
push 0x86e44c
call fcn.10096d80
push 0x3c
push 0x86e573
call fcn.10096d80
push 0x3c
push 0x86f8fc
call fcn.10096d80
push 0xb7
push 0x7da373
call fcn.10096d80
add esp, 0x40
push 0xb7
push 0x7e1c44
call fcn.10096d80
push 0xeb
push 0x52100d
call fcn.10096d80
push 0
push 0x9543c4
call fcn.10096d80
push 0x4d1dc2
push 0x4d1cf0
push 0xe9
call fcn.100ca7d0
push 0x1b
mov edx, 0x90
mov ecx, 0xd20170
call fcn.100ca890
cmp dword [0x102527b0], 0
mov ecx, 0xeb
mov eax, 0x75
cmove eax, ecx
movzx eax, al
push eax
push 0x64cbd1
call fcn.10096d80
movzx eax, byte [0x102527b4]
push eax
push 0x64cbd0
call fcn.10096d80
movzx eax, byte [0x102527b4]
push eax
push 0x95ceef
call fcn.10096d80
movzx eax, byte [0x102527b4]
add esp, 0x40
push eax
push 0x95cf14
call fcn.10096d80
mov al, byte [0x10252598]
inc al
movzx eax, al
push eax
push 0xe61f68
call fcn.10096d80
mov al, byte [0x1025259a]
add al, 2
movzx eax, al
push eax
push 0xe61f69
call fcn.10096d80
mov al, byte [0x1025259b]
add al, 3
movzx eax, al
push eax
push 0xe61f6a
call fcn.10096d80
mov al, byte [0x1025259d]
add al, 4
movzx eax, al
push eax
push 0xe61f6b
call fcn.10096d80
mov al, byte [0x1025259e]
add al, 5
movzx eax, al
push eax
push 0xe61f6c
call fcn.10096d80
mov dx, word [0x10252596]
add esp, 0x30
mov ecx, 0xe609e4
call fcn.100ca690
cmp dword [0x102527ac], 0x3c
jb 0x10085c25
mov dword [0x1034eb34], 0
mov dword [0x1034eb38], 0
mov byte [0x1034eb30], 1
call fcn.1001c100
cmp dword [0x102527ac], 0x3c
jae 0x10085c52
mov edx, 0x10326a64
mov ecx, 0x4d9d3b
call fcn.100ca6e0
mov edx, 0x10326a64
mov ecx, 0x4dac60
call fcn.100ca6e0
mov edx, 0xa
mov ecx, 0x7b55338
call fcn.100ca6e0
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x4d597b
call edi
lea eax, [ebp - 0x14]
mov dword [0x4d597b], 0x10326a60
push eax
push dword [ebp - 0x14]
push 4
push 0x4d597b
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x4da289
call edi
lea eax, [ebp - 0x14]
mov dword [0x4da289], 0x10326a60
push eax
push dword [ebp - 0x14]
push 4
push 0x4da289
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x4da297
call edi
lea eax, [ebp - 0x14]
mov dword [0x4da297], 0x10326a60
push eax
push dword [ebp - 0x14]
push 4
push 0x4da297
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x4da3a2
call edi
lea eax, [ebp - 0x14]
mov dword [0x4da3a2], 0x10326a60
push eax
push dword [ebp - 0x14]
push 4
push 0x4da3a2
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x4da3ce
call edi
lea eax, [ebp - 0x14]
mov dword [0x4da3ce], 0x10326a60
push eax
push dword [ebp - 0x14]
push 4
push 0x4da3ce
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x4da3d9
call edi
lea eax, [ebp - 0x14]
mov dword [0x4da3d9], 0x10326a60
push eax
push dword [ebp - 0x14]
push 4
push 0x4da3d9
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x63d326
call edi
lea eax, [ebp - 0x14]
mov dword [0x63d326], 0x10326a60
push eax
push dword [ebp - 0x14]
push 4
push 0x63d326
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x642112
call edi
lea eax, [ebp - 0x14]
mov dword [0x642112], 0x10326a60
push eax
push dword [ebp - 0x14]
push 4
push 0x642112
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x4d0e09
call edi
lea eax, [ebp - 0x14]
mov dword [0x4d0e09], 0x102525b1
push eax
push dword [ebp - 0x14]
push 4
push 0x4d0e09
call edi
lea eax, [ebp - 0x14]
push eax
push 0x40
push 4
push 0x4d9f55
call edi
lea eax, [ebp - 0x14]
mov dword [0x4d9f55], 0x102525d1
push eax
push dword [ebp - 0x14]
push 4
push 0x4d9f55
call edi
push 0
push 0x5c914e
call fcn.10096d80
push 0x14
mov edx, 0x90
mov ecx, 0x63e908
call fcn.100ca890
push 0x20
push 0x10252575
push 0xe611b2
call fcn.100ca830
push 0x11
push 0x102525a0
push 0xe61f70
call fcn.100ca830
push fcn.100c2380
push 0x65fd79
push 0xff
call fcn.100ca7d0
push 0x10075180
push 0x4da280
push 0xe9
call fcn.100ca7d0
add esp, 0x3c
cmp dword [0x102527ac], 0x3c
jae 0x10085e66
push 0x100751b0
jmp 0x10085e6b
push 0x10075390
push 0x4da3a1
push 0xe9
call fcn.100ca7d0
add esp, 0xc
mov edx, 0xc
mov ecx, 0x4d9d39
call fcn.100ca8f0
mov edx, 7
mov ecx, 0x4d9d45
call fcn.100ca8f0
mov edx, 0xf
mov ecx, 0x4d9efc
call fcn.100ca8f0
cmp dword [0x102527ac], 0x3c
jae 0x10085ec2
mov edx, 8
mov ecx, 0x4dac5c
call fcn.100ca8f0
mov edx, 5
mov ecx, 0x5451f7
call fcn.100ca8f0
mov edx, 8
mov ecx, 0x545230
call fcn.100ca8f0
mov edx, 8
mov ecx, 0x5a52e9
call fcn.100ca8f0
push 0x1032ad70
mov edx, 0x6a
call fcn.100ca990
push 0x1032ac80
mov edx, 0x6b
call fcn.100ca990
push 0x1032ae60
mov edx, 0x6c
call fcn.100ca990
add esp, 0xc
call fcn.10029be0
push 0x10032fc0
push 0x597691
push 0xe9
call fcn.100ca7d0
add esp, 0xc
cmp dword [0x102529b0], 1
jne 0x10085f64
cmp byte [0x105a8f0f], 0
jne 0x10085f64
push 0x10032fd0
push 0x4d5ec3
push 0xe8
call fcn.100ca7d0
add esp, 0xc
cmp byte [0x105a8f0f], 1
jne 0x10085f84
push 0x100331a0
push 0x4d5ec3
push 0xe8
call fcn.100ca7d0
add esp, 0xc
push dword [0x101a7238]
call fcn.10091aa0
push str.DataKGDataLuaConfigsNameColor.lua
mov ecx, 0x101a7234
call fcn.100b2ad0
push 0x10032e30
push 0x598ca7
push 0xe8
call fcn.100ca7d0
push 0x10032e30
push 0x77f8c2
push 0xe8
call fcn.100ca7d0
push 0x10032e60
push 0x57f920
push 0xe9
call fcn.100ca7d0
add esp, 0x24
call fcn.100480b0
cmp dword [0x10252998], 1
jne 0x10086181
mov eax, 1
mov dword [0x1035f8d0], 0
mov word [0x1035f804], ax
lea eax, [ebp - 0x1d0]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
jne 0x1008604a
push eax
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov dword [0x101a7494], eax
cmp eax, 0xffffffff
je 0x1008604a
call dword [sym.imp.WS2_32.dll_WSACreateEvent]
mov dword [0x101a7498], eax
test eax, eax
je 0x1008604a
mov dword [0x101ab4a4], 0x1003f1e0
jmp 0x10086061
push 1
push str.connection
push str.init_failed
push 0
call ebx
mov byte [0x1035f806], 0
cmp dword [0x101a7494], 0xffffffff
movzx eax, word [0x10252596]
je 0x1008616a
mov ecx, 2
push eax
mov word [ebp - 0x30], cx
call dword [sym.imp.WS2_32.dll_htons]
push 0x10252575
mov word [ebp - 0x2e], ax
call dword [sym.imp.WS2_32.dll_inet_addr]
mov dword [ebp - 0x2c], eax
cmp eax, 0xffffffff
jne 0x100860c1
push 0x10252575
call dword [sym.imp.WS2_32.dll_gethostbyname]
test eax, eax
je 0x100860c1
movsx ecx, word [eax + 0xa]
mov eax, dword [eax + 0xc]
push ecx
push dword [eax]
lea eax, [ebp - 0x2c]
push eax
call fcn.1013c070
add esp, 0xc
push 0x10
lea eax, [ebp - 0x30]
push eax
push dword [0x101a7494]
call dword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x100860e5
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2733
jne 0x10086160
push 0x23
push dword [0x101a7498]
push dword [0x101a7494]
call dword [sym.imp.WS2_32.dll_WSAEventSelect]
cmp eax, 0xffffffff
je 0x10086160
push 0x2000
push 0
push 0x101a749c
call fcn.1013cb70
push 0x2000
push 0
push 0x101a94a0
mov dword [0x101a949c], 0
call fcn.1013cb70
add esp, 0x18
mov dword [0x101ab4a0], 0
push 0
push 0
push 0x101a7490
push 0x1003ef70
push 0
push 0
call esi
mov dword [0x101ab4c4], eax
mov byte [0x101ab4c8], 1
mov byte [0x1035f806], 1
jmp 0x10086181
mov ecx, 0x101a7490
call fcn.1003edc0
push 1
push str.connection
push str.Connect_failed__CheckIP_ConnectServer__
push 0
call ebx
mov byte [0x1035f806], 0
push 0x10075580
push 0x5b96e8
push 0xe8
call fcn.100ca7d0
push 0x1000baa0
push 0x59b566
push 0xe8
call fcn.100ca7d0
push 0x1000baa0
push 0x5a0208
push 0xe8
call fcn.100ca7d0
push 0x1000baa0
push 0x5ab91c
push 0xe8
call fcn.100ca7d0
push 0x1000baa0
push 0x5b087a
push 0xe8
call fcn.100ca7d0
push 0x1000baa0
push 0x5b13e4
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1000baa0
push 0x5b69e3
push 0xe8
call fcn.100ca7d0
push 0x1000baa0
push 0x5b6eb4
push 0xe8
call fcn.100ca7d0
push 0x1000baa0
push 0x5b7026
push 0xe8
call fcn.100ca7d0
push 0x1000baa0
push 0x5b7268
push 0xe8
call fcn.100ca7d0
push 0x1000baa0
push 0x5b72d0
push 0xe8
call fcn.100ca7d0
push 0x1000baa0
push 0x5b739d
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x1000baa0
push 0x5b7634
push 0xe8
call fcn.100ca7d0
push 0x1000baa0
push 0x95f68a
push 0xe8
call fcn.100ca7d0
push 0x1000baa0
push 0x95f8b7
push 0xe8
call fcn.100ca7d0
push 0x1000baa0
push 0x95fa96
push 0xe8
call fcn.100ca7d0
push 0x1000baa0
push 0x96012e
push 0xe8
call fcn.100ca7d0
add esp, 0x3c
push 0
push 0
push 0x1034e8e4
push 0x1000b840
push 0
push 0
call esi
mov dword [0x1034e918], eax
call fcn.10065ef0
call fcn.10064f70
push 0
push ecx
push str.DataEnc1.dat
call fcn.100a0240
push 1
push ecx
push str.DataDec2.dat
call fcn.100a0240
push 2
push 0x101959d4
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0xf
mov byte [ebp - 0x38], 0
call fcn.1000bb40
lea eax, [ebp - 0x38]
mov dword [ebp - 4], 0
push eax
push dword [0x102099ac]
lea ecx, [ebp - 0x5f0]
call fcn.1007e690
sub esp, 8
mov byte [ebp - 4], 1
mov ecx, eax
call fcn.100a95a0
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x5d8]
cmp edx, 0x10
jb 0x100863a4
mov ecx, dword [ebp - 0x5ec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1008639a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10087ed5
push edx
push ecx
call fcn.100ee402
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x5dc], 0
mov dword [ebp - 0x5d8], 0xf
mov byte [ebp - 0x5ec], 0
cmp edx, 0x10
jb 0x100863fa
mov ecx, dword [ebp - 0x38]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100863f0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10087eda
push edx
push ecx
call fcn.100ee402
add esp, 8
push str.Data__KGData__Lua__Configs__Font.lua
mov ecx, 0x102099a8
call fcn.100b2ad0
push 0x100b30f0
push 0x7729b3
push 0xe8
call fcn.100ca7d0
push 0x100b30c0
push 0x772960
push 0xe8
call fcn.100ca7d0
add esp, 0x18
call fcn.100b0420
cmp dword [0x10252a88], 0x191
jl 0x100864b9
push 0x100a93b0
push 0x810711
push 0xe9
call fcn.100ca7d0
push 0x100a93f0
push 0x810790
push 0xe9
call fcn.100ca7d0
add esp, 0x18
lea eax, [ebp - 0x14]
push eax
push 0x40
push 7
push 0x811020
call edi
mov eax, 0x811020
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push 7
push 0x811020
call edi
push 0x100a9430
push 0x811020
push 0xe9
call fcn.100ca7d0
add esp, 0xc
call fcn.100af860
push 2
push 0x101959d4
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0xf
mov byte [ebp - 0x38], 0
call fcn.1000bb40
lea eax, [ebp - 0x38]
mov dword [ebp - 4], 2
push eax
push dword [0x10207a10]
lea ecx, [ebp - 0x5f0]
call fcn.1007e690
push 0x100b02a0
push str.SetItemFloor
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.10093c30
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x5d8]
cmp edx, 0x10
jb 0x1008654e
mov ecx, dword [ebp - 0x5ec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10086544
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10087edf
push edx
push ecx
call fcn.100ee402
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x5dc], 0
mov dword [ebp - 0x5d8], 0xf
mov byte [ebp - 0x5ec], 0
cmp edx, 0x10
jb 0x100865a4
mov ecx, dword [ebp - 0x38]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1008659a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10087ee4
push edx
push ecx
call fcn.100ee402
add esp, 8
push str.Data__KGData__Lua__Configs__CustomItemFloor.lua
mov ecx, 0x10207a0c
call fcn.100b2ad0
push 0x10194638
push str.StartLoadItemFloor
push 0x10207a0c
call fcn.100b2c80
push 0x100b0330
push 0x5f820c
push 0xe8
call fcn.100ca7d0
push 0x100b0330
push 0x5f847d
push 0xe8
call fcn.100ca7d0
add esp, 0x24
mov ecx, 0x1020dcd4
push str.Data__KGData__Lua__EffectSystem__CharacterEffectItens.lua
call fcn.100b2ad0
push dword [0x1020dcd8]
call fcn.1008c810
push 0x100ab050
push 0x5711ab
push 0xe8
call fcn.100ca7d0
push 0x100ab050
push 0x57126f
push 0xe8
call fcn.100ca7d0
push 0x100ab050
push 0x5713d6
push 0xe8
call fcn.100ca7d0
push 0x100ab050
push 0x576ddb
push 0xe8
call fcn.100ca7d0
push 0x100ab050
push 0x588357
push 0xe8
call fcn.100ca7d0
push 0x100ab050
push 0x5883f4
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x100ab050
push 0x588505
push 0xe8
call fcn.100ca7d0
push 0x100ab050
push 0x588617
push 0xe8
call fcn.100ca7d0
push 0x100ab050
push 0x588661
push 0xe8
call fcn.100ca7d0
push 0x100ab050
push 0x58876e
push 0xe8
call fcn.100ca7d0
push 0x100ab050
push 0x5887ad
push 0xe8
call fcn.100ca7d0
push 0x100ab050
push 0x609d1e
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x100ab050
push 0x610691
push 0xe8
call fcn.100ca7d0
add esp, 0xc
call fcn.100b6d70
mov ecx, dword [0xe61e58]
mov eax, dword [0xe61e5c]
cmp ecx, 0x320
jne 0x1008673c
test eax, eax
jne 0x1008673c
mov eax, 0xb
jmp 0x10086752
cmp ecx, 0x400
jne 0x1008674d
test eax, eax
mov eax, 0xc
je 0x10086752
mov eax, 0xd
push str.Tahoma
push 0
push 3
mov esi, dword [sym.imp.GDI32.dll_CreateFontA]
push 0
push 7
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push eax
mov dword [ebp - 0x20], eax
call esi
push str.Tahoma
push 0
push 3
push 0
push 7
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push dword [ebp - 0x20]
mov dword [0x101a721c], eax
call esi
push str.Tahoma
push 0
push 3
push 0
push 7
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push dword [ebp - 0x20]
mov dword [0x101a7220], eax
call esi
cmp dword [0x10320a48], 0
mov dword [0x101a7218], eax
je 0x1008685b
push 0x10032710
push 0x942fa7
push 0xe8
call fcn.100ca7d0
push 0x10032680
push 0x945180
push 0xe8
call fcn.100ca7d0
push 0x10032630
push 0x942eb6
push 0xe8
call fcn.100ca7d0
push 0x10032530
push 0x942f09
push 0xe8
call fcn.100ca7d0
push 0x100325b0
push 0x943d7f
push 0xe8
call fcn.100ca7d0
push 0x100326a0
push 0x945114
push 0xe8
call fcn.100ca7d0
add esp, 0x48
mov ecx, 0x102526c3
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10086863
sub ecx, edx
je 0x100868d1
push ecx
push 0x102526c3
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0xf
mov byte [ebp - 0x38], al
call fcn.1000bb40
mov dword [ebp - 0x1c], 1
lea edx, [ebp - 0x38]
cmp dword [ebp - 0x24], 0x10
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
cmovae edx, ecx
test eax, eax
je 0x100868d4
add eax, edx
mov dword [ebp - 0x14], eax
mov eax, edx
cmp edx, dword [ebp - 0x14]
jae 0x100868d4
cmp byte [eax], 0x20
jne 0x100868c1
inc eax
cmp eax, dword [ebp - 0x14]
jb 0x100868b4
jmp 0x100868d4
sub eax, edx
cmp eax, 0xffffffff
je 0x100868d4
mov byte [ebp - 0x5d1], 0
jmp 0x100868db
mov ecx, dword [ebp - 0x38]
mov byte [ebp - 0x5d1], 1
test byte [ebp - 0x1c], 1
je 0x10086914
mov eax, dword [ebp - 0x24]
cmp eax, 0x10
jb 0x10086914
lea edx, [eax + 1]
mov eax, ecx
cmp edx, 0x1000
jb 0x1008690a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10087ee9
push edx
push ecx
call fcn.100ee402
add esp, 8
cmp byte [ebp - 0x5d1], 0
je 0x10086977
push 0xe8
mov edx, 0x10037770
mov ecx, 0x78b0bc
call fcn.100ca050
push 0xe9
mov edx, 0x10037710
mov ecx, 0x789767
call fcn.100ca050
push 0xe9
mov edx, 0x10037730
mov ecx, 0x789a63
call fcn.100ca050
push 0xe9
mov edx, 0x10037750
mov ecx, 0x789dac
call fcn.100ca050
add esp, 0x10
mov byte [0x101a7424], 1
call fcn.1005afe0
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0xd
call esi
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push 0xd
mov dword [0x103623e8], eax
call esi
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0xf
mov dword [0x103623ec], eax
call esi
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0x12
mov dword [0x103623f0], eax
call esi
mov dword [0x103623f4], eax
call fcn.10061d70
push 2
push 0x101959d4
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0xf
mov byte [ebp - 0x38], 0
call fcn.1000bb40
lea eax, [ebp - 0x38]
mov dword [ebp - 4], 4
push eax
push dword [0x102078cc]
lea ecx, [ebp - 0x5f0]
call fcn.1007e690
sub esp, 8
mov byte [ebp - 4], 5
mov ecx, eax
call fcn.10083da0
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x5d8]
cmp edx, 0x10
jb 0x10086aae
mov ecx, dword [ebp - 0x5ec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10086aa4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10087eee
push edx
push ecx
call fcn.100ee402
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x5dc], 0
mov dword [ebp - 0x5d8], 0xf
mov byte [ebp - 0x5ec], 0
cmp edx, 0x10
jb 0x10086b04
mov ecx, dword [ebp - 0x38]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10086afa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10087ef3
push edx
push ecx
call fcn.100ee402
add esp, 8
push str.Data__KGData__Lua__Configs__CustomItemPosition.lua
mov ecx, 0x102078c8
call fcn.100b2ad0
push 0x10191c37
push str.StartLoadItemPosition
push 0x102078c8
call fcn.100b2c80
push 0x1007ebe0
push 0x5d0b94
push 0xe8
call fcn.100ca7d0
add esp, 0x18
mov dword [0x101efde4], 1
cmp dword [0x10252944], 2
jne 0x10086b56
call fcn.100592b0
cmp dword [0x10320a48], 0
je 0x10086b6b
call fcn.10037690
mov ecx, eax
call fcn.100c07b0
push 0x10036fd0
push 0x7d2b3d
push 0xe8
call fcn.100ca7d0
push 0x10036e70
push 0x841e49
push 0xe8
call fcn.100ca7d0
add esp, 0x18
cmp dword [0x102529b0], 1
jne 0x10086bcc
push 0x10037700
push 0x78b0f0
push 0xe9
call fcn.100ca7d0
push 0x100376f0
push 0x787ba0
push 0xe9
call fcn.100ca7d0
add esp, 0x18
jmp 0x10086be3
push 0x10036fa0
push 0x78b0f0
push 0xe9
call fcn.100ca7d0
add esp, 0xc
cmp dword [0x10252944], 1
jne 0x10086c40
mov eax, dword [0x102529f4]
dec eax
cmp eax, 1
ja 0x10086c40
push 0x100358d0
push 0x84bc0f
push 0xe8
mov dword [0x103208ac], 0
call fcn.100ca7d0
push 0x100358f0
push 0x84bd1d
push 0xe8
call fcn.100ca7d0
push 0x100348a0
push 0x84bdb0
push 0xe9
call fcn.100ca7d0
add esp, 0x24
push 0x10036650
push 0x5bb0b0
push 0xe9
call fcn.100ca7d0
add esp, 0xc
mov dword [0x101efddc], 0
cmp dword [0x1025294c], 1
jne 0x10086c81
push method.std::codecvt_wchar_t__char__struct__Mbstatet_.virtual_12
push 0x82b772
push 0xe8
call fcn.100ca7d0
add esp, 0xc
cmp dword [0x10252948], 0
je 0x10086ca1
push 0x1009e0c0
push 0x62f870
push 0xe9
call fcn.100ca7d0
add esp, 0xc
push 0x1009c040
push 0x82aba0
push 0xe9
call fcn.100ca7d0
add esp, 0xc
cmp dword [0x10252960], 1
jne 0x10086d06
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 5
push 0x7f6834
call edi
mov eax, 0x7f6834
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x1c]
push 5
push 0x7f6834
call edi
push 0x10054ca0
push 0x7f67b7
push 0xe8
call fcn.100ca7d0
add esp, 0xc
cmp dword [0x10252994], 0
jne 0x10086d98
mov byte [0x1032695c], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x10053b40
sub eax, 0x1388
mov byte [0x10326964], 0
push 0x7d2bc0
push 0xe9
mov dword [0x10326960], eax
call fcn.100ca7d0
push 0x10054e90
push 0x7d26b5
push 0xe9
call fcn.100ca7d0
push 0x10054ee0
push 0x7d2751
push 0xe9
call fcn.100ca7d0
push 0x10054f30
push 0x7d27fc
push 0xe9
call fcn.100ca7d0
push 0x10054f80
push 0x80b8e0
push 0xe9
call fcn.100ca7d0
add esp, 0x3c
cmp dword [0x10252884], 1
jne 0x10086ec6
push 0x10050b10
push 0x5012d0
push 0xe9
call fcn.100ca7d0
push 0x10050ba0
push 0x80f250
push 0xe8
call fcn.100ca7d0
push 0x10050cf0
push 0x7df740
push 0xe9
call fcn.100ca7d0
push 0x10052660
push 0x7df34c
push 0xe8
call fcn.100ca7d0
push 0x10052690
push 0x66424b
push 0xe8
call fcn.100ca7d0
push 0x10050c20
push 0x833731
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x10050d60
push 0x7df846
push 0xe8
call fcn.100ca7d0
push 0x10052ad0
push 0x7df83e
push 0xe8
call fcn.100ca7d0
push 0x100527a0
push 0x83469c
push 0xe8
call fcn.100ca7d0
push 0x100746c0
push 0x420814
push 0xe8
call fcn.100ca7d0
push 0x1004fb40
push 0x924c8b
push 0xe8
call fcn.100ca7d0
push 0x1004f250
push 0x7e5cb6
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push 0x10050090
push 0x7e5b70
push 0xe8
call fcn.100ca7d0
push 0x1004fe20
push 0x7e348f
push 0xe8
call fcn.100ca7d0
add esp, 0x18
cmp dword [0x102529e8], 1
jne 0x10086f28
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 5
push 0x401f56
call edi
mov eax, 0x401f56
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x1c]
push 5
push 0x401f56
call edi
push 0x1000c2c0
push 0x401ef1
push 0xe8
call fcn.100ca7d0
push 0x1000c260
push 0x401fc4
push 0xe8
call fcn.100ca7d0
add esp, 0x18
cmp dword [0x1025292c], 1
jne 0x10086fdd
push 7
call fcn.100eea5f
mov ecx, 0x90909090
mov edx, eax
push 7
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
mov ecx, 0x608cac
call fcn.100c9f30
push 0xe9
mov edx, 0x100534f0
mov ecx, 0x608cac
call fcn.100ca050
push 7
call fcn.100eea5f
mov ecx, 0x90909090
mov edx, eax
push 7
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
mov ecx, 0x60954d
call fcn.100c9f30
push 0xe9
mov edx, 0x10053580
mov ecx, 0x60954d
call fcn.100ca050
push 7
call fcn.100eea5f
mov ecx, 0x90909090
mov edx, eax
push 7
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
mov ecx, 0x60f04c
call fcn.100c9f30
push 0xe9
mov edx, 0x10053610
mov ecx, 0x60f04c
call fcn.100ca050
add esp, 0x24
cmp dword [0x10252930], 1
jne 0x10087011
push 0x1002b5b0
push 0x61041c
push 0xe8
call fcn.100ca7d0
push 0x1002b5b0
push 0x5666c1
push 0xe8
call fcn.100ca7d0
add esp, 0x18
cmp dword [0x10252928], 1
jne 0x1008705f
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 5
push 0x502a95
call edi
mov eax, 0x502a95
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x1c]
push 5
push 0x502a95
call edi
push 0x10008c50
push 0x502a95
push 0xe8
call fcn.100ca7d0
add esp, 0xc
cmp dword [0x10252918], 1
jne 0x1008706d
call fcn.1007df60
cmp dword [0x10252920], 1
jne 0x1008707b
call fcn.10032300
cmp dword [0x10252900], 1
jne 0x10087089
call fcn.1009ecc0
cmp dword [0x10252904], 1
jne 0x1008712f
push 0x10009e30
push 0x900de9
push 0xe8
call fcn.100ca7d0
push 0x10009110
push 0x8c5bb5
push 0xe8
call fcn.100ca7d0
push 0xa
call fcn.100eea5f
mov ecx, 0x90909090
mov edx, eax
push 0xa
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov word [eax + 8], cx
mov ecx, 0x56fc5e
call fcn.100c9f30
push 0xe9
mov edx, 0x10009d10
mov ecx, 0x56fc5e
call fcn.100ca050
push 0xa
call fcn.100eea5f
mov ecx, 0x90909090
mov edx, eax
push 0xa
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov word [eax + 8], cx
mov ecx, 0x56fd1a
call fcn.100c9f30
push 0xe9
mov edx, 0x10009db0
mov ecx, 0x56fd1a
call fcn.100ca050
add esp, 0x30
cmp dword [0x1025290c], 1
jne 0x1008715c
push 0
call fcn.1014e724
push eax
call fcn.1014558b
push 0x100c6fc0
push 0x4d70d4
push 0xe8
call fcn.100ca7d0
add esp, 0x14
call fcn.1003e730
mov dword [ebp - 0x20], 0
xor ebx, ebx
mov dword [ebp - 0x14], 1
mov edi, 2
lea ecx, [edi + 1]
mov eax, 0xf0f0f0f1
mul ecx
mov eax, 0x102525a3
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + ebx]
xor al, byte [edi + 0x10252556]
movzx esi, al
mov eax, 0xf0f0f0f1
mul edi
mov eax, 0x102525a2
add edi, 4
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x14]
add dword [ebp - 0x14], 4
mov al, byte [eax + ebx]
xor al, byte [ecx + 0x10252556]
movzx eax, al
add si, ax
mov eax, 0xf0f0f0f1
mul ecx
mov eax, 0x102525a1
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + ebx]
xor al, byte [ebx + 0x10252556]
movzx eax, al
add si, ax
mov eax, 0xf0f0f0f1
mul ebx
mov eax, ebx
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + 0x102525a0]
xor al, byte [ebx + 0x10252555]
add ebx, 4
movzx eax, al
add si, ax
add word [ebp - 0x20], si
cmp edi, 0x22
jb 0x10087176
mov al, byte [ebp - 0x20]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub al, 0x1e
mov byte [0x10326a37], al
mov eax, dword [ebp - 0x20]
shr eax, 8
sub al, 0x31
mov byte [0x10326a36], al
mov eax, dword [0xd227b0]
mov dword [0x10326a6c], eax
mov eax, dword [0xd227f8]
mov dword [0x10326a68], eax
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 4
push 0xd227b0
call edi
lea eax, [ebp - 0x1c]
mov dword [0xd227b0], 0x10074f50
push eax
push dword [ebp - 0x1c]
push 4
push 0xd227b0
call edi
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 4
push 0xd227f8
call edi
lea eax, [ebp - 0x1c]
mov dword [0xd227f8], 0x10075070
push eax
push dword [ebp - 0x1c]
push 4
push 0xd227f8
call edi
push 0x1007be80
push 0x633fcb
push 0xff
call fcn.100ca7d0
push 0x1007c340
push 0x633fe3
push 0xff
call fcn.100ca7d0
push 0x1007c720
push 0x57ac07
push 0xff
call fcn.100ca7d0
push 0x1007c720
push 0x6083b9
push 0xff
call fcn.100ca7d0
push 0x1007c7f0
push 0x777ff2
push 0xff
call fcn.100ca7d0
push 0x1007c7f0
push 0x778003
push 0xff
call fcn.100ca7d0
add esp, 0x48
push 0x1007c800
push 0x5f7c2f
push 0xe9
call fcn.100ca7d0
push 0x1007c830
push 0x968137
push 0xe9
call fcn.100ca7d0
push 0x1007c850
push 0x968157
push 0xe9
call fcn.100ca7d0
push 0x1007bd30
push 0x57ad82
push 0xe9
call fcn.100ca7d0
push 0x1007bd80
push 0x57adc8
push 0xe9
call fcn.100ca7d0
push 0x1007c870
push 0x58e650
push 0xe9
call fcn.100ca7d0
add esp, 0x48
push 0x1007c8c0
push 0x8386b5
push 0xe9
call fcn.100ca7d0
push 0x1007c940
push 0x5c4025
push 0xe9
call fcn.100ca7d0
push 0x1007c970
push 0x5f7c3b
push 0xe9
call fcn.100ca7d0
push 0x1007c9a0
push 0x64b701
push 0xe9
call fcn.100ca7d0
push 0x1007c9d0
push 0x8383a0
push 0xe9
call fcn.100ca7d0
push 0x1007ca00
push 0x5f3f7e
push 0xe9
call fcn.100ca7d0
add esp, 0x48
push 0x1007ca40
push 0x5f4a60
push 0xe9
call fcn.100ca7d0
add esp, 0xc
call fcn.100a5dc0
cmp dword [0x102527d4], 0
mov ebx, dword [sym.imp.USER32.dll_MessageBoxA]
je 0x100874f5
push 0x100c6530
push 0x40b903
push 0xe9
call fcn.100ca7d0
push 0x100c6570
push 0x4da416
push 0xe9
call fcn.100ca7d0
push 0x100c6590
push 0x63a192
push 0xe9
call fcn.100ca7d0
push 0x100c65d0
push 0x7a89eb
push 0xe9
call fcn.100ca7d0
push fcn.100c6490
push 0x40bc24
push 0xe8
call fcn.100ca7d0
push fcn.100c6490
push 0x4d762c
push 0xe8
call fcn.100ca7d0
add esp, 0x48
push fcn.100c6490
push 0x4ef622
push 0xe8
call fcn.100ca7d0
push fcn.100c6490
push 0x63cd3a
push 0xe8
call fcn.100ca7d0
add esp, 0x18
call fcn.100c86d0
cmp dword [0x1025291c], 1
jne 0x10087542
push 0x10045a60
push 0x50d905
push 0xe8
call fcn.100ca7d0
push 0x10045bd0
push 0x5cd10f
push 0xe9
call fcn.100ca7d0
push 0x10045c30
push 0x5cefe7
push 0xe9
call fcn.100ca7d0
add esp, 0x24
push 0x100c6720
push 0x4d13c2
push 0xe9
call fcn.100ca7d0
push 0x100c68d0
push 0x4d2782
push 0xe9
call fcn.100ca7d0
push 0x100c69a0
push 0x830c3a
push 0xe9
call fcn.100ca7d0
push 0x100c6600
push 0x4da2f9
push 0xe8
call fcn.100ca7d0
mov esi, dword [sym.imp.USER32.dll_SetWindowsHookExA]
add esp, 0x30
cmp dword [0x10320a5c], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
jne 0x100875c5
call eax
push eax
push dword [0x10320a4c]
push 0x1003f390
push 7
call esi
mov dword [0x10320a5c], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x10320a60], 0
jne 0x100875e5
call eax
push eax
push dword [0x10320a4c]
push 0x100407a0
push 2
call esi
mov dword [0x10320a60], eax
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 4
push 0x4d0e17
call edi
lea eax, [ebp - 0x1c]
mov dword [0x4d0e17], 0x1003f300
push eax
push dword [ebp - 0x1c]
push 4
push 0x4d0e17
call edi
push 0x1003f2a0
push 0x4d0e2f
push 0xe9
call fcn.100ca7d0
add esp, 0xc
call fcn.1007ba80
mov ecx, 0x101efdd8
mov dword [0x1032998c], 0
mov byte [0x10329978], 0
mov dword [0x10329980], 0xffffffff
mov dword [0x10329988], 0xffffffff
mov dword [0x1032997c], 0xffffffff
call fcn.10076390
cmp dword [0x102529a8], 2
setne byte [0x10585340]
call fcn.100635a0
call fcn.1009f590
call fcn.10001400
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.100018e0
call fcn.10001470
mov al, byte [0x10252534]
test al, 1
je 0x100876c6
push 0x10252535
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
jne 0x100876c1
push eax
push str.Start_Error
push str.Please_start_game_from_Launcher
push eax
call ebx
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov al, byte [0x10252534]
test al, 2
je 0x1008770d
push 0x10252575
lea eax, [ebp - 0x140]
push str.XTEAM_MAIN_10405__s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x140]
push eax
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
test eax, eax
jne 0x100876b9
lea eax, [ebp - 0x140]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
cmp dword [0x1025278c], 0
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
je 0x10087800
push 0x104
lea eax, [ebp - 0x148]
push 0
push eax
call fcn.1013cb70
add esp, 0xc
lea eax, [ebp - 0x148]
push 0x104
push eax
push 0
call esi
test eax, eax
jne 0x10087751
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea ecx, [ebp - 0x148]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10087760
sub ecx, edx
test ecx, ecx
jle 0x1008779c
nop dword [eax]
cmp byte [ebp + ecx - 0x148], 0x5c
je 0x10087781
dec ecx
test ecx, ecx
jg 0x10087770
jmp 0x1008779c
lea eax, [ebp - 0x147]
add eax, ecx
push eax
push 0x104
push 0x105aab88
call fcn.1014da95
add esp, 0xc
push 0x10252603
push 0x105aab88
call fcn.1014e5bc
add esp, 8
test eax, eax
je 0x100877ba
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea ecx, [ebp - 0x5d0]
call fcn.10007a00
push ecx
lea eax, [ebp - 0x1c]
push eax
push 0x10252603
lea ecx, [ebp - 0x5d0]
call fcn.10007b30
test al, al
jne 0x100877f6
push 0x10
push str.Error
push str.Main.exe_CRC_error_
push 0
call ebx
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x1025278c]
cmp eax, dword [ebp - 0x1c]
jne 0x100877de
cmp dword [0x10252790], 0
je 0x100878ab
lea ecx, [ebp - 0x5d0]
call fcn.10007a00
push ecx
lea eax, [ebp - 0x14]
push eax
push 0x10252623
lea ecx, [ebp - 0x5d0]
call fcn.10007b30
test al, al
jne 0x1008783f
push 0x10
push str.Error
push str.Plugin_1_CRC_error_
jmp 0x100877ea
mov eax, dword [0x10252790]
cmp eax, dword [ebp - 0x14]
jne 0x100877ee
push 0x10252623
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x100877ee
push 0x104
lea ecx, [ebp - 0x148]
push ecx
push eax
call esi
push ecx
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.10007b30
test al, al
je 0x100877ee
mov eax, dword [0x10252790]
cmp eax, dword [ebp - 0x14]
jne 0x100877ee
push 0x101972f0
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100878ab
call eax
cmp dword [0x10252794], 0
je 0x10087961
lea ecx, [ebp - 0x5d0]
call fcn.10007a00
push ecx
lea eax, [ebp - 0x14]
push eax
push 0x10252643
lea ecx, [ebp - 0x5d0]
call fcn.10007b30
test al, al
jne 0x100878ed
push 0x10
push str.Error
push str.Plugin_2_CRC_error_
jmp 0x100877ea
mov eax, dword [0x10252794]
cmp eax, dword [ebp - 0x14]
jne 0x100877ee
push 0x10252643
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x100877ee
push 0x104
lea ecx, [ebp - 0x148]
push ecx
push eax
call esi
push ecx
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.10007b30
test al, al
je 0x100877ee
mov eax, dword [0x10252794]
cmp eax, dword [ebp - 0x14]
jne 0x100877ee
push 0x101972f0
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10087961
call eax
cmp dword [0x10252798], 0
je 0x10087a17
lea ecx, [ebp - 0x5d0]
call fcn.10007a00
push ecx
lea eax, [ebp - 0x14]
push eax
push 0x10252663
lea ecx, [ebp - 0x5d0]
call fcn.10007b30
test al, al
jne 0x100879a3
push 0x10
push str.Error
push str.Plugin_3_CRC_error_
jmp 0x100877ea
mov eax, dword [0x10252798]
cmp eax, dword [ebp - 0x14]
jne 0x100877ee
push 0x10252663
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x100877ee
push 0x104
lea ecx, [ebp - 0x148]
push ecx
push eax
call esi
push ecx
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.10007b30
test al, al
je 0x100877ee
mov eax, dword [0x10252798]
cmp eax, dword [ebp - 0x14]
jne 0x100877ee
push 0x101972f0
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10087a17
call eax
cmp dword [0x1025279c], 0
je 0x10087acd
lea ecx, [ebp - 0x5d0]
call fcn.10007a00
push ecx
lea eax, [ebp - 0x14]
push eax
push 0x10252683
lea ecx, [ebp - 0x5d0]
call fcn.10007b30
test al, al
jne 0x10087a59
push 0x10
push str.Error
push str.Plugin_4_CRC_error_
jmp 0x100877ea
mov eax, dword [0x1025279c]
cmp eax, dword [ebp - 0x14]
jne 0x100877ee
push 0x10252683
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x100877ee
push 0x104
lea ecx, [ebp - 0x148]
push ecx
push eax
call esi
push ecx
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.10007b30
test al, al
je 0x100877ee
mov eax, dword [0x1025279c]
cmp eax, dword [ebp - 0x14]
jne 0x100877ee
push 0x101972f0
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10087acd
call eax
cmp dword [0x102527a0], 0
je 0x10087b83
lea ecx, [ebp - 0x5d0]
call fcn.10007a00
push ecx
lea eax, [ebp - 0x14]
push eax
push 0x102526a3
lea ecx, [ebp - 0x5d0]
call fcn.10007b30
test al, al
jne 0x10087b0f
push 0x10
push str.Error
push str.Plugin_5_CRC_error_
jmp 0x100877ea
mov eax, dword [0x102527a0]
cmp eax, dword [ebp - 0x14]
jne 0x100877ee
push 0x102526a3
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x100877ee
push 0x104
lea ecx, [ebp - 0x148]
push ecx
push eax
call esi
push ecx
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.10007b30
test al, al
je 0x100877ee
mov eax, dword [0x102527a0]
cmp eax, dword [ebp - 0x14]
jne 0x100877ee
push 0x101972f0
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10087b83
call eax
cmp dword [0x102527a4], 0
je 0x10087c39
lea ecx, [ebp - 0x5d0]
call fcn.10007a00
push ecx
lea eax, [ebp - 0x14]
push eax
push 0x102526c3
lea ecx, [ebp - 0x5d0]
call fcn.10007b30
test al, al
jne 0x10087bc5
push 0x10
push str.Error
push str.Plugin_Camera_CRC_error_
jmp 0x100877ea
mov eax, dword [0x102527a4]
cmp eax, dword [ebp - 0x14]
jne 0x100877ee
push 0x102526c3
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x100877ee
push 0x104
lea ecx, [ebp - 0x148]
push ecx
push eax
call esi
push ecx
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.10007b30
test al, al
je 0x100877ee
mov eax, dword [0x102527a4]
cmp eax, dword [ebp - 0x14]
jne 0x100877ee
push 0x101972f0
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10087c39
call eax
cmp dword [0x102527a8], 0
je 0x10087cec
lea ecx, [ebp - 0x5d0]
call fcn.10007a00
push ecx
lea eax, [ebp - 0x14]
push eax
push 0x102526e3
lea ecx, [ebp - 0x5d0]
call fcn.10007b30
test al, al
jne 0x10087c7b
push 0x10
push str.Error
push str.Plugin_HackDLL_CRC_error_
jmp 0x100877ea
mov eax, dword [0x102527a8]
cmp eax, dword [ebp - 0x14]
jne 0x100877ee
push 0x102526e3
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, eax
test ebx, ebx
je 0x100877ee
push 0x104
lea eax, [ebp - 0x148]
push eax
push ebx
call esi
push ecx
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.10007b30
test al, al
je 0x100877ee
mov eax, dword [0x102527a8]
cmp eax, dword [ebp - 0x14]
jne 0x100877ee
push 0x101972f0
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10087cec
call eax
call fcn.1000c880
call fcn.100a4699
mov eax, 0x100a4c50
mov byte [ebp - 0x1c], 0xe8
sub eax, 0x836486
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x1b], eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 5
push 0x836481
call edi
test eax, eax
je 0x10087d48
mov eax, dword [ebp - 0x1c]
mov ecx, 0x836481
mov dword [ecx], eax
mov al, byte [ebp - 0x18]
mov byte [ecx + 4], al
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x14]
mov dword [ebp - 0x3c], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10087d4e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xe8
mov edx, 0x100a4bc0
mov ecx, 0x7dd304
call fcn.100ca050
push 0xe8
mov edx, 0x100a4bc0
mov ecx, 0x833b08
call fcn.100ca050
push 0x10047580
push 0x56f476
push 0xe8
call fcn.100ca7d0
push 0x10047580
push 0x5ebbe6
push 0xe8
call fcn.100ca7d0
push 0x4f9238
push 0x4f921d
push 0xe9
call fcn.100ca7d0
push 0x63f058
push 0x63f040
push 0xe9
call fcn.100ca7d0
push 0x10007d00
push 0x4f131e
push 0xe8
call fcn.100ca7d0
add esp, 0x44
cmp dword [0x10252788], 1
jne 0x10087e22
mov edx, 0x10252708
mov ecx, 0x954149
call fcn.100ca6e0
mov edx, 0x10252728
mov ecx, 0x954116
call fcn.100ca6e0
mov edx, 0x10252748
mov ecx, 0x9540e3
call fcn.100ca6e0
mov edx, 0x10252768
mov ecx, 0x9540ad
call fcn.100ca6e0
cmp dword [0x10252820], 1
jne 0x10087ec1
mov eax, 0x101f7eac
nop dword [eax]
nop dword [eax + eax]
mov dword [eax], 0xffffffff
add eax, 0x20
cmp eax, 0x102078ac
jl 0x10087e40
push 0x1007e330
push 0x7e44d3
push 0xff
mov dword [0x102078ac], 0
mov dword [0x102078b4], 0
mov dword [0x102078b0], 0
call fcn.100ca7d0
push 0x1007e470
push 0x7e452f
push 0xff
call fcn.100ca7d0
push 0x1007e5d0
push 0x7e4497
push 0xe8
call fcn.100ca7d0
push 0x1007e5d0
push 0x7e44ec
push 0xe8
call fcn.100ca7d0
add esp, 0x30
call fcn.10067350
call fcn.100adab0
call fcn.100ab1b0
jmp 0x1008571a
call fcn.10145519
call fcn.10145519
call fcn.10145519
call fcn.10145519
call fcn.10145519
call fcn.10145519
call fcn.10145519
int3