Function at 0x100833a0
Capabilities:
Execute shellcode via indirect call
Get file size
Read .ini file
Read file on windows
Spawn thread to rwx shellcode

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1016ddf9
mov eax, dword fs:[0]
push eax
sub esp, 0x5e4
mov eax, dword [0x1019a06c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1c], 0
cmp byte [0x10314c25], 0
jne 0x100834a0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x3c]
push eax
push 0x40
push 0xd21fff
push 0x401000
mov byte [0x10314c25], 1
call edi
test eax, eax
je 0x100834a0
push str.._Settings.ini
push 1
push str.WideScreen
push str.Interface
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
lea ecx, [ebp - 0x5d0]
mov dword [0x1030ebf0], eax
call fcn.100075e0
push ecx
push 0x1030ba94
push str..DataKGDataLocalServerGame.info
lea ecx, [ebp - 0x5d0]
call fcn.10007710
test al, al
je 0x10083482
push 0
push 0x20
push 3
push 0
push 1
push connect
push str..DataKGDataLocalServerGame.info
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x10083482
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, 0x8ef80
je 0x100834bc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x10
push str.Error
push str.ServerGame.info_no_funciona_o_es_invalida_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x1033c784
call fcn.1000b3f0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100e34d0
mov esp, ebp
pop ebp
ret
push 0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push eax
push 0x8ef80
push 0x10241bcc
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1008347b
xor ecx, ecx
mov eax, ecx
shr eax, 8
xor al, 0x95
add al, byte [ecx + 0x10241bcc]
xor al, cl
xor al, 0xda
mov byte [ecx + 0x10241bcc], al
inc ecx
cmp ecx, 0x8ef80
jb 0x100834e0
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call ebx
lea ecx, [ebp - 0x5d0]
call fcn.100075e0
push ecx
push 0x1030ba98
push str..DataKGDataLocalEffectGame.info
lea ecx, [ebp - 0x5d0]
call fcn.10007710
test al, al
je 0x10083562
push 0
push 0x20
push 3
push 0
push 1
push connect
push str..DataKGDataLocalEffectGame.info
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x10083562
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, 0x3af48
je 0x10083573
push esi
call ebx
push 0x10
push str.Error
push str.EffectGame.info_no_funciona_o_es_invalida_
jmp 0x1008348e
push 0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push eax
push 0x3af48
push 0x102d0b4c
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1008355f
xor ecx, ecx
mov eax, ecx
shr eax, 8
xor al, 0x6e
add al, byte [ecx + 0x102d0b4c]
xor al, cl
xor al, 0xe6
mov byte [ecx + 0x102d0b4c], al
inc ecx
cmp ecx, 0x3af48
jb 0x10083597
push esi
call ebx
mov ecx, 0x105983a8
call fcn.100b3600
cmp byte [0x105983a9], 1
jne 0x100835ed
mov dword [0x1033c9d4], 0
mov dword [0x1033c9d8], 0
mov byte [0x1033c9d0], 1
call fcn.1001b7b0
cmp dword [0x10242004], 1
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
jne 0x1008364c
push 0x1000b4f0
push 0x57d278
push 0xe9
call fcn.100bfb10
push 0x1000b520
push 0x74cd50
push 0xe9
call fcn.100bfb10
push 0x1000b550
push 0x771328
push 0xe9
call fcn.100bfb10
add esp, 0x24
push 0
push 0
push 0
push 0x10083360
push 0
push 0
call esi
cmp dword [0x10241d9c], 1
mov ebx, dword [sym.imp.USER32.dll_MessageBoxA]
jne 0x100836ae
push str.Main.exe
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x1008367d
push eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
jmp 0x100836ae
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x100836ae
push dword [ebp - 0x18]
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
push 0x10
push str.Error
push str.You_already_have_a_main_open__you_cant_open_any_more.
push 0
call ebx
mov ecx, 0x1033c784
call fcn.1000b3f0
call fcn.1002dac0
push 0xe9
mov edx, 0x100bec40
mov ecx, 0x5509ce
call fcn.100bf280
push 0xe9
mov edx, 0x100bf120
mov ecx, 0x551573
call fcn.100bf280
push 0xa0
push 0xe61144
call fcn.10097e20
push 0xeb
push 0x4d1e69
call fcn.10097e20
push 0xe9
push 0x4d228d
call fcn.10097e20
push 0x8b
push 0x4d228e
call fcn.10097e20
push 0
push 0x4d228f
call fcn.10097e20
push 0
push 0x4d2290
call fcn.10097e20
push 0
push 0x4d2291
call fcn.10097e20
add esp, 0x40
push 0xeb
push 0x4d559c
call fcn.10097e20
push 0xeb
push 0x633f7a
call fcn.10097e20
push 0xeb
push 0x634403
call fcn.10097e20
push 0xeb
push 0x63e6c4
call fcn.10097e20
push 0xeb
push 0x4d2246
call fcn.10097e20
push 0xeb
push 0x501163
call fcn.10097e20
push 0
push 0x40af0a
call fcn.10097e20
push 0x50
push 0x40b4bc
call fcn.10097e20
add esp, 0x40
push 0x50
push 0x40b4c5
call fcn.10097e20
push 0x18
push 0x40b4cf
call fcn.10097e20
push 0
push 0x40af0a
call fcn.10097e20
push 0xeb
push 0x40afd5
call fcn.10097e20
push 0x70
push 0x777fd6
call fcn.10097e20
push 0x17
push 0x777fd7
call fcn.10097e20
push 0x3c
push 0x4ebec7
call fcn.10097e20
push 0x3c
push 0x5c4004
call fcn.10097e20
add esp, 0x40
push 0x3c
push 0x7e40bb
call fcn.10097e20
push 0x3c
push 0x81b546
call fcn.10097e20
push 0x3c
push 0x81b58d
call fcn.10097e20
push 0x3c
push 0x86e284
call fcn.10097e20
push 0x3c
push 0x86e44c
call fcn.10097e20
push 0x3c
push 0x86e573
call fcn.10097e20
push 0x3c
push 0x86f8fc
call fcn.10097e20
push 0xb7
push 0x7da373
call fcn.10097e20
add esp, 0x40
push 0xb7
push 0x7e1c44
call fcn.10097e20
push 0xeb
push 0x52100d
call fcn.10097e20
push 0
push 0x9543c4
call fcn.10097e20
push 0x4d1dc2
push 0x4d1cf0
push 0xe9
call fcn.100bfb10
push 0x1b
mov edx, 0x90
mov ecx, 0xd20170
call fcn.100bfbd0
cmp dword [0x10241e48], 0
mov ecx, 0xeb
mov eax, 0x75
cmove eax, ecx
movzx eax, al
push eax
push 0x64cbd1
call fcn.10097e20
movzx eax, byte [0x10241e4c]
push eax
push 0x64cbd0
call fcn.10097e20
movzx eax, byte [0x10241e4c]
push eax
push 0x95ceef
call fcn.10097e20
movzx eax, byte [0x10241e4c]
add esp, 0x40
push eax
push 0x95cf14
call fcn.10097e20
mov al, byte [0x10241c30]
inc al
movzx eax, al
push eax
push 0xe61f68
call fcn.10097e20
mov al, byte [0x10241c32]
add al, 2
movzx eax, al
push eax
push 0xe61f69
call fcn.10097e20
mov al, byte [0x10241c33]
add al, 3
movzx eax, al
push eax
push 0xe61f6a
call fcn.10097e20
mov al, byte [0x10241c35]
add al, 4
movzx eax, al
push eax
push 0xe61f6b
call fcn.10097e20
mov al, byte [0x10241c36]
add al, 5
movzx eax, al
push eax
push 0xe61f6c
call fcn.10097e20
mov dx, word [0x10241c2e]
add esp, 0x30
mov ecx, 0xe609e4
call fcn.100bf9d0
cmp byte [0x105983a9], 0
jne 0x100839dc
mov edx, 0x10314c18
mov ecx, 0x4d9d3b
call fcn.100bfa20
mov edx, 0x10314c18
mov ecx, 0x4dac60
call fcn.100bfa20
mov edx, 0xa
mov ecx, 0x7b55338
call fcn.100bfa20
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4d597b
call edi
lea eax, [ebp - 0x18]
mov dword [0x4d597b], 0x10314c14
push eax
push dword [ebp - 0x18]
push 4
push 0x4d597b
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4da289
call edi
lea eax, [ebp - 0x18]
mov dword [0x4da289], 0x10314c14
push eax
push dword [ebp - 0x18]
push 4
push 0x4da289
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4da297
call edi
lea eax, [ebp - 0x18]
mov dword [0x4da297], 0x10314c14
push eax
push dword [ebp - 0x18]
push 4
push 0x4da297
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4da3a2
call edi
lea eax, [ebp - 0x18]
mov dword [0x4da3a2], 0x10314c14
push eax
push dword [ebp - 0x18]
push 4
push 0x4da3a2
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4da3ce
call edi
lea eax, [ebp - 0x18]
mov dword [0x4da3ce], 0x10314c14
push eax
push dword [ebp - 0x18]
push 4
push 0x4da3ce
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4da3d9
call edi
lea eax, [ebp - 0x18]
mov dword [0x4da3d9], 0x10314c14
push eax
push dword [ebp - 0x18]
push 4
push 0x4da3d9
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x63d326
call edi
lea eax, [ebp - 0x18]
mov dword [0x63d326], 0x10314c14
push eax
push dword [ebp - 0x18]
push 4
push 0x63d326
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x642112
call edi
lea eax, [ebp - 0x18]
mov dword [0x642112], 0x10314c14
push eax
push dword [ebp - 0x18]
push 4
push 0x642112
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4d0e09
call edi
lea eax, [ebp - 0x18]
mov dword [0x4d0e09], 0x10241c49
push eax
push dword [ebp - 0x18]
push 4
push 0x4d0e09
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4d9f55
call edi
lea eax, [ebp - 0x18]
mov dword [0x4d9f55], 0x10241c69
push eax
push dword [ebp - 0x18]
push 4
push 0x4d9f55
call edi
push 0
push 0x5c914e
call fcn.10097e20
push 0x14
mov edx, 0x90
mov ecx, 0x63e908
call fcn.100bfbd0
push 0x20
push 0x10241c0d
push 0xe611b2
call fcn.100bfb70
push 0x11
push 0x10241c38
push 0xe61f70
call fcn.100bfb70
push fcn.100b7ce0
push 0x65fd79
push 0xff
call fcn.100bfb10
push 0x10073240
push 0x4da280
push 0xe9
call fcn.100bfb10
add esp, 0x3c
cmp byte [0x105983a9], 0
jne 0x10083bf0
push 0x10073270
jmp 0x10083bf5
push 0x10073450
push 0x4da3a1
push 0xe9
call fcn.100bfb10
add esp, 0xc
mov edx, 0xc
mov ecx, 0x4d9d39
call fcn.100bfc30
mov edx, 7
mov ecx, 0x4d9d45
call fcn.100bfc30
mov edx, 0xf
mov ecx, 0x4d9efc
call fcn.100bfc30
cmp byte [0x105983a9], 0
jne 0x10083c4c
mov edx, 8
mov ecx, 0x4dac5c
call fcn.100bfc30
mov edx, 5
mov ecx, 0x5451f7
call fcn.100bfc30
mov edx, 8
mov ecx, 0x545230
call fcn.100bfc30
mov edx, 8
mov ecx, 0x5a52e9
call fcn.100bfc30
push 0x10318c18
mov edx, 0x6a
call fcn.100bfcd0
push 0x10318b28
mov edx, 0x6b
call fcn.100bfcd0
push 0x10318d08
mov edx, 0x6c
call fcn.100bfcd0
add esp, 0xc
call fcn.10027ca0
push 0x100313b0
push 0x597691
push 0xe9
call fcn.100bfb10
add esp, 0xc
cmp dword [0x10242048], 1
jne 0x10083cee
cmp byte [0x105983a8], 0
jne 0x10083cee
push 0x100313c0
push 0x4d5ec3
push 0xe8
call fcn.100bfb10
add esp, 0xc
cmp byte [0x105983a8], 1
jne 0x10083d0e
push 0x10031590
push 0x4d5ec3
push 0xe8
call fcn.100bfb10
add esp, 0xc
push dword [0x1019c234]
call fcn.10093770
push str.DataKGDataLuaConfigsNameColor.lua
mov ecx, 0x1019c230
call fcn.100aff20
push 0x10031220
push 0x598ca7
push 0xe8
call fcn.100bfb10
push 0x10031220
push 0x77f8c2
push 0xe8
call fcn.100bfb10
push 0x10031250
push 0x57f920
push 0xe9
call fcn.100bfb10
add esp, 0x24
call fcn.100475c0
cmp dword [0x10242030], 1
jne 0x10083f0b
mov eax, 1
mov dword [0x1034d770], 0
mov word [0x1034d6a4], ax
lea eax, [ebp - 0x1d0]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
jne 0x10083dd4
push eax
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov dword [0x1019c484], eax
cmp eax, 0xffffffff
je 0x10083dd4
call dword [sym.imp.WS2_32.dll_WSACreateEvent]
mov dword [0x1019c488], eax
test eax, eax
je 0x10083dd4
mov dword [0x101a0494], 0x1003e8a0
jmp 0x10083deb
push 1
push str.connection
push str.init_failed
push 0
call ebx
mov byte [0x1034d6a6], 0
cmp dword [0x1019c484], 0xffffffff
movzx eax, word [0x10241c2e]
je 0x10083ef4
mov ecx, 2
push eax
mov word [ebp - 0x2c], cx
call dword [sym.imp.WS2_32.dll_htons]
push 0x10241c0d
mov word [ebp - 0x2a], ax
call dword [sym.imp.WS2_32.dll_inet_addr]
mov dword [ebp - 0x28], eax
cmp eax, 0xffffffff
jne 0x10083e4b
push 0x10241c0d
call dword [sym.imp.WS2_32.dll_gethostbyname]
test eax, eax
je 0x10083e4b
movsx ecx, word [eax + 0xa]
mov eax, dword [eax + 0xc]
push ecx
push dword [eax]
lea eax, [ebp - 0x28]
push eax
call fcn.101313f0
add esp, 0xc
push 0x10
lea eax, [ebp - 0x2c]
push eax
push dword [0x1019c484]
call dword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x10083e6f
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2733
jne 0x10083eea
push 0x23
push dword [0x1019c488]
push dword [0x1019c484]
call dword [sym.imp.WS2_32.dll_WSAEventSelect]
cmp eax, 0xffffffff
je 0x10083eea
push 0x2000
push 0
push 0x1019c48c
call fcn.10131ef0
push 0x2000
push 0
push 0x1019e490
mov dword [0x1019e48c], 0
call fcn.10131ef0
add esp, 0x18
mov dword [0x101a0490], 0
push 0
push 0
push 0x1019c480
push 0x1003e630
push 0
push 0
call esi
mov dword [0x101a04b4], eax
mov byte [0x101a04b8], 1
mov byte [0x1034d6a6], 1
jmp 0x10083f0b
mov ecx, 0x1019c480
call fcn.1003e480
push 1
push str.connection
push str.Connect_failed__CheckIP_ConnectServer__
push 0
call ebx
mov byte [0x1034d6a6], 0
push 0x10073640
push 0x5b96e8
push 0xe8
call fcn.100bfb10
push 0x1000b4d0
push 0x59b566
push 0xe8
call fcn.100bfb10
push 0x1000b4d0
push 0x5a0208
push 0xe8
call fcn.100bfb10
push 0x1000b4d0
push 0x5ab91c
push 0xe8
call fcn.100bfb10
push 0x1000b4d0
push 0x5b087a
push 0xe8
call fcn.100bfb10
push 0x1000b4d0
push 0x5b13e4
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x1000b4d0
push 0x5b69e3
push 0xe8
call fcn.100bfb10
push 0x1000b4d0
push 0x5b6eb4
push 0xe8
call fcn.100bfb10
push 0x1000b4d0
push 0x5b7026
push 0xe8
call fcn.100bfb10
push 0x1000b4d0
push 0x5b7268
push 0xe8
call fcn.100bfb10
push 0x1000b4d0
push 0x5b72d0
push 0xe8
call fcn.100bfb10
push 0x1000b4d0
push 0x5b739d
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x1000b4d0
push 0x5b7634
push 0xe8
call fcn.100bfb10
push 0x1000b4d0
push 0x95f68a
push 0xe8
call fcn.100bfb10
push 0x1000b4d0
push 0x95f8b7
push 0xe8
call fcn.100bfb10
push 0x1000b4d0
push 0x95fa96
push 0xe8
call fcn.100bfb10
push 0x1000b4d0
push 0x96012e
push 0xe8
call fcn.100bfb10
add esp, 0x3c
push 0
push 0
push 0x1033c784
push 0x1000b270
push 0
push 0
call esi
mov dword [0x1033c7b8], eax
call fcn.10064560
call fcn.100635e0
push 0
push ecx
push str.DataEnc1.dat
call fcn.100a2f80
push 1
push ecx
push str.DataDec2.dat
call fcn.100a2f80
push 2
push 0x1018a9ac
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
call fcn.1000db00
lea eax, [ebp - 0x34]
mov dword [ebp - 4], 0
push eax
push dword [0x101fd264]
lea ecx, [ebp - 0x5f0]
call fcn.1007c450
sub esp, 8
mov byte [ebp - 4], 1
mov ecx, eax
call fcn.100ac260
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x5d8]
cmp edx, 0x10
jb 0x1008412e
mov ecx, dword [ebp - 0x5ec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10084124
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085c9c
push edx
push ecx
call fcn.100e3844
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x5dc], 0
mov dword [ebp - 0x5d8], 0xf
mov byte [ebp - 0x5ec], 0
cmp edx, 0x10
jb 0x10084184
mov ecx, dword [ebp - 0x34]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1008417a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085ca1
push edx
push ecx
call fcn.100e3844
add esp, 8
push str.Data__KGData__Lua__Configs__Font.lua
mov ecx, 0x101fd260
call fcn.100aff20
push 0x100b0550
push 0x7729b3
push 0xe8
call fcn.100bfb10
push 0x100b0520
push 0x772960
push 0xe8
call fcn.100bfb10
add esp, 0x18
call fcn.100ae970
cmp dword [0x10242120], 0x191
jl 0x10084243
push 0x100ac070
push 0x810711
push 0xe9
call fcn.100bfb10
push 0x100ac0b0
push 0x810790
push 0xe9
call fcn.100bfb10
add esp, 0x18
lea eax, [ebp - 0x18]
push eax
push 0x40
push 7
push 0x811020
call edi
mov eax, 0x811020
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 7
push 0x811020
call edi
push 0x100ac0f0
push 0x811020
push 0xe9
call fcn.100bfb10
add esp, 0xc
call fcn.100ad720
push 2
push 0x1018a9ac
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
call fcn.1000db00
lea eax, [ebp - 0x34]
mov dword [ebp - 4], 2
push eax
push dword [0x101fc750]
lea ecx, [ebp - 0x5f0]
call fcn.1007c450
push 0x100ae7f0
push str.SetItemFloor
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.100955e0
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x5d8]
cmp edx, 0x10
jb 0x100842d8
mov ecx, dword [ebp - 0x5ec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100842ce
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085ca6
push edx
push ecx
call fcn.100e3844
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x5dc], 0
mov dword [ebp - 0x5d8], 0xf
mov byte [ebp - 0x5ec], 0
cmp edx, 0x10
jb 0x1008432e
mov ecx, dword [ebp - 0x34]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10084324
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085cab
push edx
push ecx
call fcn.100e3844
add esp, 8
push str.Data__KGData__Lua__Configs__CustomItemFloor.lua
mov ecx, 0x101fc74c
call fcn.100aff20
push 0x10189694
push str.StartLoadItemFloor
push 0x101fc74c
call fcn.100b00e0
push 0x100ae880
push 0x5f820c
push 0xe8
call fcn.100bfb10
push 0x100ae880
push 0x5f847d
push 0xe8
call fcn.100bfb10
add esp, 0x24
mov ecx, 0x101fd31c
push str.Data__KGData__Lua__EffectSystem__CharacterEffectItens.lua
call fcn.100aff20
push dword [0x101fd320]
call fcn.1008e560
push 0x100ac6f0
push 0x5711ab
push 0xe8
call fcn.100bfb10
push 0x100ac6f0
push 0x57126f
push 0xe8
call fcn.100bfb10
push 0x100ac6f0
push 0x5713d6
push 0xe8
call fcn.100bfb10
push 0x100ac6f0
push 0x576ddb
push 0xe8
call fcn.100bfb10
push 0x100ac6f0
push 0x588357
push 0xe8
call fcn.100bfb10
push 0x100ac6f0
push 0x5883f4
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x100ac6f0
push 0x588505
push 0xe8
call fcn.100bfb10
push 0x100ac6f0
push 0x588617
push 0xe8
call fcn.100bfb10
push 0x100ac6f0
push 0x588661
push 0xe8
call fcn.100bfb10
push 0x100ac6f0
push 0x58876e
push 0xe8
call fcn.100bfb10
push 0x100ac6f0
push 0x5887ad
push 0xe8
call fcn.100bfb10
push 0x100ac6f0
push 0x609d1e
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x100ac6f0
push 0x610691
push 0xe8
call fcn.100bfb10
add esp, 0xc
call fcn.100b42a0
push 0x100b32f0
push 0x5fa77b
push 0xe9
call fcn.100bfb10
push 0x100b33b0
push 0x6083c1
push 0xe9
call fcn.100bfb10
push 0x100b3470
push 0x609066
push 0xe9
call fcn.100bfb10
add esp, 0x24
push dword [0x10241b68]
call fcn.10097600
push str.Data__KGData__Lua__CharacterSystem__RenderModel.lua
mov ecx, 0x10241b64
call fcn.100aff20
push dword [0x10241b68]
call fcn.10086880
mov ecx, dword [0x10241b68]
call fcn.10099970
mov ecx, dword [0xe61e58]
mov eax, dword [0xe61e5c]
cmp ecx, 0x320
jne 0x10084533
test eax, eax
jne 0x10084533
lea esi, [eax + 0xb]
jmp 0x10084549
cmp ecx, 0x400
jne 0x10084544
mov esi, 0xc
test eax, eax
je 0x10084549
mov esi, 0xd
push str.Tahoma
push 0
push 3
push 0
push 7
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push esi
call dword [sym.imp.GDI32.dll_CreateFontA]
push str.Tahoma
push 0
push 3
push 0
push 7
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push esi
mov dword [0x1019c218], eax
call dword [sym.imp.GDI32.dll_CreateFontA]
push str.Tahoma
push 0
push 3
push 0
push 7
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push esi
mov esi, dword [sym.imp.GDI32.dll_CreateFontA]
mov dword [0x1019c21c], eax
call esi
cmp dword [0x1030ebf0], 0
mov dword [0x1019c214], eax
je 0x10084653
push 0x10030b40
push 0x942fa7
push 0xe8
call fcn.100bfb10
push 0x10030ab0
push 0x945180
push 0xe8
call fcn.100bfb10
push 0x10030a60
push 0x942eb6
push 0xe8
call fcn.100bfb10
push 0x10030960
push 0x942f09
push 0xe8
call fcn.100bfb10
push 0x100309e0
push 0x943d7f
push 0xe8
call fcn.100bfb10
push 0x10030ad0
push 0x945114
push 0xe8
call fcn.100bfb10
add esp, 0x48
mov ecx, 0x10241d5b
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10084660
sub ecx, edx
je 0x100846ce
push ecx
push 0x10241d5b
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], al
call fcn.1000db00
mov dword [ebp - 0x1c], 1
lea edx, [ebp - 0x34]
cmp dword [ebp - 0x20], 0x10
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
cmovae edx, ecx
test eax, eax
je 0x100846d1
add eax, edx
mov dword [ebp - 0x18], eax
mov eax, edx
cmp edx, dword [ebp - 0x18]
jae 0x100846d1
cmp byte [eax], 0x20
jne 0x100846be
inc eax
cmp eax, dword [ebp - 0x18]
jb 0x100846b1
jmp 0x100846d1
sub eax, edx
cmp eax, 0xffffffff
je 0x100846d1
mov byte [ebp - 0x5d1], 0
jmp 0x100846d8
mov ecx, dword [ebp - 0x34]
mov byte [ebp - 0x5d1], 1
test byte [ebp - 0x1c], 1
je 0x10084711
mov eax, dword [ebp - 0x20]
cmp eax, 0x10
jb 0x10084711
lea edx, [eax + 1]
mov eax, ecx
cmp edx, 0x1000
jb 0x10084707
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085cb0
push edx
push ecx
call fcn.100e3844
add esp, 8
cmp byte [ebp - 0x5d1], 0
je 0x10084774
push 0xe8
mov edx, 0x10035bc0
mov ecx, 0x78b0bc
call fcn.100bf280
push 0xe9
mov edx, 0x10035b60
mov ecx, 0x789767
call fcn.100bf280
push 0xe9
mov edx, 0x10035b80
mov ecx, 0x789a63
call fcn.100bf280
push 0xe9
mov edx, 0x10035ba0
mov ecx, 0x789dac
call fcn.100bf280
add esp, 0x10
mov byte [0x1019c404], 1
call fcn.10059a30
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0xd
call esi
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push 0xd
mov dword [0x10350288], eax
call esi
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0xf
mov dword [0x1035028c], eax
call esi
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0x12
mov dword [0x10350290], eax
call esi
mov dword [0x10350294], eax
call fcn.10060770
push 2
push 0x1018a9ac
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
call fcn.1000db00
lea eax, [ebp - 0x34]
mov dword [ebp - 4], 4
push eax
push dword [0x101fc60c]
lea ecx, [ebp - 0x5f0]
call fcn.1007c450
sub esp, 8
mov byte [ebp - 4], 5
mov ecx, eax
call fcn.10081b40
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x5d8]
cmp edx, 0x10
jb 0x100848ab
mov ecx, dword [ebp - 0x5ec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100848a1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085cb5
push edx
push ecx
call fcn.100e3844
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x5dc], 0
mov dword [ebp - 0x5d8], 0xf
mov byte [ebp - 0x5ec], 0
cmp edx, 0x10
jb 0x10084901
mov ecx, dword [ebp - 0x34]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100848f7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10085cba
push edx
push ecx
call fcn.100e3844
add esp, 8
push str.Data__KGData__Lua__Configs__CustomItemPosition.lua
mov ecx, 0x101fc608
call fcn.100aff20
push 0x10186c1f
push str.StartLoadItemPosition
push 0x101fc608
call fcn.100b00e0
push 0x1007c9a0
push 0x5d0b94
push 0xe8
call fcn.100bfb10
add esp, 0x18
mov dword [0x101e4b24], 1
cmp dword [0x10241fdc], 2
jne 0x10084953
call fcn.10057cf0
cmp dword [0x1030ebf0], 0
je 0x10084961
call fcn.100b75f0
push 0x100354a0
push 0x7d2b3d
push 0xe8
call fcn.100bfb10
push 0x10035340
push 0x841e49
push 0xe8
call fcn.100bfb10
add esp, 0x18
cmp dword [0x10242048], 1
jne 0x100849c2
push 0x10035b50
push 0x78b0f0
push 0xe9
call fcn.100bfb10
push 0x10035b40
push 0x787ba0
push 0xe9
call fcn.100bfb10
add esp, 0x18
jmp 0x100849d9
push 0x10035470
push 0x78b0f0
push 0xe9
call fcn.100bfb10
add esp, 0xc
cmp dword [0x10241fdc], 1
jne 0x10084a36
mov eax, dword [0x1024208c]
dec eax
cmp eax, 1
ja 0x10084a36
push 0x10033da0
push 0x84bc0f
push 0xe8
mov dword [0x1030ea7c], 0
call fcn.100bfb10
push 0x10033dc0
push 0x84bd1d
push 0xe8
call fcn.100bfb10
push 0x10032d70
push 0x84bdb0
push 0xe9
call fcn.100bfb10
add esp, 0x24
push 0x10034b20
push 0x5bb0b0
push 0xe9
call fcn.100bfb10
add esp, 0xc
mov dword [0x101e4b1c], 0
cmp dword [0x10241fe4], 1
jne 0x10084a77
push method.std::codecvt_wchar_t__char__struct__Mbstatet_.virtual_12
push 0x82b772
push 0xe8
call fcn.100bfb10
add esp, 0xc
cmp dword [0x10241fe0], 0
je 0x10084a97
push 0x100a0e00
push 0x62f870
push 0xe9
call fcn.100bfb10
add esp, 0xc
push 0x1009ee30
push 0x82aba0
push 0xe9
call fcn.100bfb10
add esp, 0xc
cmp dword [0x10241ff8], 1
jne 0x10084afc
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x7f6834
call edi
mov eax, 0x7f6834
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x7f6834
call edi
push 0x10052d60
push 0x7f67b7
push 0xe8
call fcn.100bfb10
add esp, 0xc
cmp dword [0x1024202c], 0
jne 0x10084b8e
mov byte [0x10314b04], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x10051c00
sub eax, 0x1388
mov byte [0x10314b0c], 0
push 0x7d2bc0
push 0xe9
mov dword [0x10314b08], eax
call fcn.100bfb10
push 0x10052f50
push 0x7d26b5
push 0xe9
call fcn.100bfb10
push 0x10052fa0
push 0x7d2751
push 0xe9
call fcn.100bfb10
push 0x10052ff0
push 0x7d27fc
push 0xe9
call fcn.100bfb10
push 0x10053040
push 0x80b8e0
push 0xe9
call fcn.100bfb10
add esp, 0x3c
cmp dword [0x10241f1c], 1
jne 0x10084cbc
push 0x1004ef70
push 0x5012d0
push 0xe9
call fcn.100bfb10
push 0x1004f000
push 0x80f250
push 0xe8
call fcn.100bfb10
push 0x1004f130
push 0x7df740
push 0xe9
call fcn.100bfb10
push 0x10050700
push 0x7df34c
push 0xe8
call fcn.100bfb10
push 0x10050730
push 0x66424b
push 0xe8
call fcn.100bfb10
push 0x1004f060
push 0x833731
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x1004f190
push 0x7df846
push 0xe8
call fcn.100bfb10
push 0x10050b90
push 0x7df83e
push 0xe8
call fcn.100bfb10
push 0x10050860
push 0x83469c
push 0xe8
call fcn.100bfb10
push 0x10072880
push 0x420814
push 0xe8
call fcn.100bfb10
push 0x1004dfa0
push 0x924c8b
push 0xe8
call fcn.100bfb10
push 0x1004d6b0
push 0x7e5cb6
push 0xe8
call fcn.100bfb10
add esp, 0x48
push 0x1004e4f0
push 0x7e5b70
push 0xe8
call fcn.100bfb10
push 0x1004e280
push 0x7e348f
push 0xe8
call fcn.100bfb10
add esp, 0x18
cmp dword [0x10242080], 1
jne 0x10084d1e
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x401f56
call edi
mov eax, 0x401f56
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x401f56
call edi
push 0x1000baf0
push 0x401ef1
push 0xe8
call fcn.100bfb10
push 0x1000ba90
push 0x401fc4
push 0xe8
call fcn.100bfb10
add esp, 0x18
cmp dword [0x10241fc4], 1
jne 0x10084dd3
push 7
call fcn.100e3b3e
mov ecx, 0x90909090
mov edx, eax
push 7
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
mov ecx, 0x608cac
call fcn.100bf160
push 0xe9
mov edx, 0x100515b0
mov ecx, 0x608cac
call fcn.100bf280
push 7
call fcn.100e3b3e
mov ecx, 0x90909090
mov edx, eax
push 7
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
mov ecx, 0x60954d
call fcn.100bf160
push 0xe9
mov edx, 0x10051640
mov ecx, 0x60954d
call fcn.100bf280
push 7
call fcn.100e3b3e
mov ecx, 0x90909090
mov edx, eax
push 7
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
mov ecx, 0x60f04c
call fcn.100bf160
push 0xe9
mov edx, 0x100516d0
mov ecx, 0x60f04c
call fcn.100bf280
add esp, 0x24
cmp dword [0x10241fc8], 1
jne 0x10084e07
push 0x10029830
push 0x61041c
push 0xe8
call fcn.100bfb10
push 0x10029830
push 0x5666c1
push 0xe8
call fcn.100bfb10
add esp, 0x18
cmp dword [0x10241fc0], 1
jne 0x10084e55
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x502a95
call edi
mov eax, 0x502a95
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x18]
push 5
push 0x502a95
call edi
push 0x10008740
push 0x502a95
push 0xe8
call fcn.100bfb10
add esp, 0xc
cmp dword [0x10241fb0], 1
jne 0x10084e63
call fcn.1007bd40
cmp dword [0x10241fb8], 1
jne 0x10084e71
call fcn.10030730
cmp dword [0x10241f98], 1
jne 0x10084e7f
call fcn.100a1a10
cmp dword [0x10241f9c], 1
jne 0x10084f25
push 0x10009920
push 0x900de9
push 0xe8
call fcn.100bfb10
push 0x10008c00
push 0x8c5bb5
push 0xe8
call fcn.100bfb10
push 0xa
call fcn.100e3b3e
mov ecx, 0x90909090
mov edx, eax
push 0xa
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov word [eax + 8], cx
mov ecx, 0x56fc5e
call fcn.100bf160
push 0xe9
mov edx, 0x10009800
mov ecx, 0x56fc5e
call fcn.100bf280
push 0xa
call fcn.100e3b3e
mov ecx, 0x90909090
mov edx, eax
push 0xa
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov word [eax + 8], cx
mov ecx, 0x56fd1a
call fcn.100bf160
push 0xe9
mov edx, 0x100098a0
mov ecx, 0x56fd1a
call fcn.100bf280
add esp, 0x30
cmp dword [0x10241fa4], 1
jne 0x10084f52
push 0
call fcn.10143944
push eax
call fcn.1013a6ab
push 0x100bc1f0
push 0x4d70d4
push 0xe8
call fcn.100bfb10
add esp, 0x14
call fcn.1003dec0
mov dword [ebp - 0x1c], 0
xor ebx, ebx
mov dword [ebp - 0x18], 1
mov edi, 2
nop dword [eax]
lea ecx, [edi + 1]
mov eax, 0xf0f0f0f1
mul ecx
mov eax, ebx
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + 0x10241c3b]
xor al, byte [edi + 0x10241bee]
movzx esi, al
mov eax, 0xf0f0f0f1
mul edi
mov eax, ebx
add edi, 4
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x18]
add dword [ebp - 0x18], 4
mov al, byte [eax + 0x10241c3a]
xor al, byte [ecx + 0x10241bee]
movzx eax, al
add si, ax
mov eax, 0xf0f0f0f1
mul ecx
mov eax, ebx
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + 0x10241c39]
xor al, byte [ebx + 0x10241bee]
movzx eax, al
add si, ax
mov eax, 0xf0f0f0f1
mul ebx
mov eax, ebx
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + 0x10241c38]
xor al, byte [ebx + 0x10241bed]
add ebx, 4
movzx eax, al
add si, ax
add word [ebp - 0x1c], si
cmp edi, 0x22
jb 0x10084f70
mov al, byte [ebp - 0x1c]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub al, 0x1e
mov byte [0x10314beb], al
mov eax, dword [ebp - 0x1c]
shr eax, 8
sub al, 0x40
mov byte [0x10314bea], al
mov eax, dword [0xd227b0]
mov dword [0x10314c20], eax
mov eax, dword [0xd227f8]
mov dword [0x10314c1c], eax
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0xd227b0
call edi
lea eax, [ebp - 0x18]
mov dword [0xd227b0], 0x10073010
push eax
push dword [ebp - 0x18]
push 4
push 0xd227b0
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0xd227f8
call edi
lea eax, [ebp - 0x18]
mov dword [0xd227f8], 0x10073130
push eax
push dword [ebp - 0x18]
push 4
push 0xd227f8
call edi
push 0x10079c20
push 0x633fcb
push 0xff
call fcn.100bfb10
push 0x1007a080
push 0x633fe3
push 0xff
call fcn.100bfb10
push 0x1007a400
push 0x57ac07
push 0xff
call fcn.100bfb10
push 0x1007a400
push 0x6083b9
push 0xff
call fcn.100bfb10
push 0x1007a5d0
push 0x777ff2
push 0xff
call fcn.100bfb10
push 0x1007a5d0
push 0x778003
push 0xff
call fcn.100bfb10
add esp, 0x48
push 0x1007a5e0
push 0x5f7c2f
push 0xe9
call fcn.100bfb10
push 0x1007a610
push 0x968137
push 0xe9
call fcn.100bfb10
push 0x1007a630
push 0x968157
push 0xe9
call fcn.100bfb10
push 0x10079ad0
push 0x57ad82
push 0xe9
call fcn.100bfb10
push 0x10079b20
push 0x57adc8
push 0xe9
call fcn.100bfb10
push 0x1007a650
push 0x58e650
push 0xe9
call fcn.100bfb10
add esp, 0x48
push 0x1007a6a0
push 0x8386b5
push 0xe9
call fcn.100bfb10
push 0x1007a720
push 0x5c4025
push 0xe9
call fcn.100bfb10
push 0x1007a750
push 0x5f7c3b
push 0xe9
call fcn.100bfb10
push 0x1007a780
push 0x64b701
push 0xe9
call fcn.100bfb10
push 0x1007a7b0
push 0x8383a0
push 0xe9
call fcn.100bfb10
push 0x1007a7e0
push 0x5f3f7e
push 0xe9
call fcn.100bfb10
add esp, 0x48
push 0x1007a820
push 0x5f4a60
push 0xe9
call fcn.100bfb10
add esp, 0xc
call fcn.100a8ab0
cmp dword [0x10241e6c], 0
mov ebx, dword [sym.imp.USER32.dll_MessageBoxA]
je 0x100852ef
push 0x100bb770
push 0x40b903
push 0xe9
call fcn.100bfb10
push 0x100bb7b0
push 0x4da416
push 0xe9
call fcn.100bfb10
push 0x100bb7d0
push 0x63a192
push 0xe9
call fcn.100bfb10
push 0x100bb810
push 0x7a89eb
push 0xe9
call fcn.100bfb10
push fcn.100bb6d0
push 0x40bc24
push 0xe8
call fcn.100bfb10
push fcn.100bb6d0
push 0x4d762c
push 0xe8
call fcn.100bfb10
add esp, 0x48
push fcn.100bb6d0
push 0x4ef622
push 0xe8
call fcn.100bfb10
push fcn.100bb6d0
push 0x63cd3a
push 0xe8
call fcn.100bfb10
add esp, 0x18
call fcn.100bd900
cmp dword [0x10241fb4], 1
jne 0x1008533c
push 0x10045140
push 0x50d905
push 0xe8
call fcn.100bfb10
push 0x100452b0
push 0x5cd10f
push 0xe9
call fcn.100bfb10
push 0x10045310
push 0x5cefe7
push 0xe9
call fcn.100bfb10
add esp, 0x24
push 0x100bb960
push 0x4d13c2
push 0xe9
call fcn.100bfb10
push 0x100bbb10
push 0x4d2782
push 0xe9
call fcn.100bfb10
push 0x100bbbe0
push 0x830c3a
push 0xe9
call fcn.100bfb10
push 0x100bb840
push 0x4da2f9
push 0xe8
call fcn.100bfb10
mov esi, dword [0x10315598]
add esp, 0x30
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push esi
mov esi, dword [sym.imp.USER32.dll_SetWindowsHookExA]
push 0x1003fe60
push 2
call esi
cmp dword [0x1030ec04], 0
jne 0x100853d0
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push dword [0x1030ebf4]
push 0x1003ea50
push 7
call esi
mov dword [0x1030ec04], eax
cmp dword [0x1030ec08], 0
jne 0x100853ef
push 0
push dword [0x1030ebf4]
push 0x1003fe60
push 0xd
call esi
mov dword [0x1030ec08], eax
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push 0x4d0e17
call edi
lea eax, [ebp - 0x18]
mov dword [0x4d0e17], 0x1003e9c0
push eax
push dword [ebp - 0x18]
push 4
push 0x4d0e17
call edi
push 0x1003e960
push 0x4d0e2f
push 0xe9
call fcn.100bfb10
call fcn.10079820
push 0xe8
mov edx, 0x100bf8c0
mov dword [0x10317834], 0
mov ecx, 0x588511
mov byte [0x10317820], 0
mov dword [0x10317828], 0xffffffff
mov dword [0x10317830], 0xffffffff
mov dword [0x10317824], 0xffffffff
call fcn.100bf280
add esp, 0x10
mov ecx, 0x101e4b18
call fcn.10074430
cmp dword [0x10242040], 2
setne byte [0x105731e0]
call fcn.10061c10
call fcn.100a22f0
call fcn.10001400
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.100018e0
call fcn.10001470
mov al, byte [0x10241bcc]
test al, 1
je 0x100854e4
push 0x10241bcd
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
jne 0x100854df
push eax
push str.Start_Error
push str.Please_start_game_from_Launcher
push eax
call ebx
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov al, byte [0x10241bcc]
test al, 2
je 0x1008552b
push 0x10241c0d
lea eax, [ebp - 0x140]
push str.XTEAM_MAIN_10405__s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x140]
push eax
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
test eax, eax
jne 0x100854d7
lea eax, [ebp - 0x140]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
cmp dword [0x10241e24], 0
je 0x10085613
push 0x104
lea eax, [ebp - 0x148]
push 0
push eax
call fcn.10131ef0
add esp, 0xc
lea eax, [ebp - 0x148]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
jne 0x1008556d
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea ecx, [ebp - 0x148]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10085576
sub ecx, edx
test ecx, ecx
jle 0x100855af
cmp byte [ebp + ecx - 0x148], 0x5c
je 0x10085594
dec ecx
test ecx, ecx
jg 0x10085583
jmp 0x100855af
lea eax, [ebp - 0x147]
add eax, ecx
push eax
push 0x104
push 0x10598740
call fcn.10142bb5
add esp, 0xc
push 0x10241c9b
push 0x10598740
call fcn.101437dc
add esp, 8
test eax, eax
je 0x100855cd
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea ecx, [ebp - 0x5d0]
call fcn.100075e0
push ecx
lea eax, [ebp - 0x18]
push eax
push 0x10241c9b
lea ecx, [ebp - 0x5d0]
call fcn.10007710
test al, al
jne 0x10085609
push 0x10
push str.Error
push str.Main.exe_CRC_error_
push 0
call ebx
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x10241e24]
cmp eax, dword [ebp - 0x18]
jne 0x100855f1
cmp dword [0x10241e28], 0
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
je 0x100856c4
lea ecx, [ebp - 0x5d0]
call fcn.100075e0
push ecx
lea eax, [ebp - 0x18]
push eax
push 0x10241cbb
lea ecx, [ebp - 0x5d0]
call fcn.10007710
test al, al
jne 0x10085658
push 0x10
push str.Error
push str.Plugin_1_CRC_error_
jmp 0x100855fd
mov eax, dword [0x10241e28]
cmp eax, dword [ebp - 0x18]
jne 0x10085601
push 0x10241cbb
call esi
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x10085601
push 0x104
lea ecx, [ebp - 0x148]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ecx
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.10007710
test al, al
je 0x10085601
mov eax, dword [0x10241e28]
cmp eax, dword [ebp - 0x18]
jne 0x10085601
push 0x1018c31c
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100856c4
call eax
cmp dword [0x10241e2c], 0
je 0x1008577a
lea ecx, [ebp - 0x5d0]
call fcn.100075e0
push ecx
lea eax, [ebp - 0x18]
push eax
push 0x10241cdb
lea ecx, [ebp - 0x5d0]
call fcn.10007710
test al, al
jne 0x10085706
push 0x10
push str.Error
push str.Plugin_2_CRC_error_
jmp 0x100855fd
mov eax, dword [0x10241e2c]
cmp eax, dword [ebp - 0x18]
jne 0x10085601
push 0x10241cdb
call esi
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x10085601
push 0x104
lea ecx, [ebp - 0x148]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ecx
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.10007710
test al, al
je 0x10085601
mov eax, dword [0x10241e2c]
cmp eax, dword [ebp - 0x18]
jne 0x10085601
push 0x1018c31c
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1008577a
call eax
cmp dword [0x10241e30], 0
je 0x10085830
lea ecx, [ebp - 0x5d0]
call fcn.100075e0
push ecx
lea eax, [ebp - 0x18]
push eax
push 0x10241cfb
lea ecx, [ebp - 0x5d0]
call fcn.10007710
test al, al
jne 0x100857bc
push 0x10
push str.Error
push str.Plugin_3_CRC_error_
jmp 0x100855fd
mov eax, dword [0x10241e30]
cmp eax, dword [ebp - 0x18]
jne 0x10085601
push 0x10241cfb
call esi
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x10085601
push 0x104
lea ecx, [ebp - 0x148]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ecx
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.10007710
test al, al
je 0x10085601
mov eax, dword [0x10241e30]
cmp eax, dword [ebp - 0x18]
jne 0x10085601
push 0x1018c31c
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10085830
call eax
cmp dword [0x10241e34], 0
je 0x100858e6
lea ecx, [ebp - 0x5d0]
call fcn.100075e0
push ecx
lea eax, [ebp - 0x18]
push eax
push 0x10241d1b
lea ecx, [ebp - 0x5d0]
call fcn.10007710
test al, al
jne 0x10085872
push 0x10
push str.Error
push str.Plugin_4_CRC_error_
jmp 0x100855fd
mov eax, dword [0x10241e34]
cmp eax, dword [ebp - 0x18]
jne 0x10085601
push 0x10241d1b
call esi
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x10085601
push 0x104
lea ecx, [ebp - 0x148]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ecx
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.10007710
test al, al
je 0x10085601
mov eax, dword [0x10241e34]
cmp eax, dword [ebp - 0x18]
jne 0x10085601
push 0x1018c31c
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100858e6
call eax
cmp dword [0x10241e38], 0
je 0x1008599c
lea ecx, [ebp - 0x5d0]
call fcn.100075e0
push ecx
lea eax, [ebp - 0x18]
push eax
push 0x10241d3b
lea ecx, [ebp - 0x5d0]
call fcn.10007710
test al, al
jne 0x10085928
push 0x10
push str.Error
push str.Plugin_5_CRC_error_
jmp 0x100855fd
mov eax, dword [0x10241e38]
cmp eax, dword [ebp - 0x18]
jne 0x10085601
push 0x10241d3b
call esi
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x10085601
push 0x104
lea ecx, [ebp - 0x148]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ecx
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.10007710
test al, al
je 0x10085601
mov eax, dword [0x10241e38]
cmp eax, dword [ebp - 0x18]
jne 0x10085601
push 0x1018c31c
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1008599c
call eax
cmp dword [0x10241e3c], 0
je 0x10085a52
lea ecx, [ebp - 0x5d0]
call fcn.100075e0
push ecx
lea eax, [ebp - 0x18]
push eax
push 0x10241d5b
lea ecx, [ebp - 0x5d0]
call fcn.10007710
test al, al
jne 0x100859de
push 0x10
push str.Error
push str.Plugin_Camera_CRC_error_
jmp 0x100855fd
mov eax, dword [0x10241e3c]
cmp eax, dword [ebp - 0x18]
jne 0x10085601
push 0x10241d5b
call esi
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x10085601
push 0x104
lea ecx, [ebp - 0x148]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ecx
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.10007710
test al, al
je 0x10085601
mov eax, dword [0x10241e3c]
cmp eax, dword [ebp - 0x18]
jne 0x10085601
push 0x1018c31c
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10085a52
call eax
cmp dword [0x10241e40], 0
je 0x10085b05
lea ecx, [ebp - 0x5d0]
call fcn.100075e0
push ecx
lea eax, [ebp - 0x18]
push eax
push 0x10241d7b
lea ecx, [ebp - 0x5d0]
call fcn.10007710
test al, al
jne 0x10085a94
push 0x10
push str.Error
push str.Plugin_HackDLL_CRC_error_
jmp 0x100855fd
mov eax, dword [0x10241e40]
cmp eax, dword [ebp - 0x18]
jne 0x10085601
push 0x10241d7b
call esi
mov esi, eax
test esi, esi
je 0x10085601
push 0x104
lea eax, [ebp - 0x148]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ecx
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.10007710
test al, al
je 0x10085601
mov eax, dword [0x10241e40]
cmp eax, dword [ebp - 0x18]
jne 0x10085601
push 0x1018c31c
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10085b05
call eax
call fcn.1000c0b0
call fcn.100a7389
mov eax, 0x100a7940
mov byte [ebp - 0x18], 0xe8
sub eax, 0x836486
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x17], eax
lea eax, [ebp - 0x1c]
push eax
push 0x40
push 5
push 0x836481
call edi
test eax, eax
je 0x10085b61
mov eax, dword [ebp - 0x18]
mov ecx, 0x836481
mov dword [ecx], eax
mov al, byte [ebp - 0x14]
mov byte [ecx + 4], al
lea eax, [ebp - 0x38]
push eax
push dword [ebp - 0x1c]
mov dword [ebp - 0x38], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10085b67
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xe8
mov edx, 0x100a78b0
mov ecx, 0x7dd304
call fcn.100bf280
push 0xe8
mov edx, 0x100a78b0
mov ecx, 0x833b08
call fcn.100bf280
push 0x10046a90
push 0x56f476
push 0xe8
call fcn.100bfb10
push 0x10046a90
push 0x5ebbe6
push 0xe8
call fcn.100bfb10
add esp, 0x20
cmp dword [0x10241e20], 1
jne 0x10085bff
mov edx, 0x10241da0
mov ecx, 0x954149
call fcn.100bfa20
mov edx, 0x10241dc0
mov ecx, 0x954116
call fcn.100bfa20
mov edx, 0x10241de0
mov ecx, 0x9540e3
call fcn.100bfa20
mov edx, 0x10241e00
mov ecx, 0x9540ad
call fcn.100bfa20
cmp dword [0x10241eb8], 1
jne 0x10085c92
mov eax, 0x101ecbec
mov dword [eax], 0xffffffff
add eax, 0x20
cmp eax, 0x101fc5ec
jl 0x10085c11
push 0x1007c110
push 0x7e44d3
push 0xff
mov dword [0x101fc5ec], 0
mov dword [0x101fc5f4], 0
mov dword [0x101fc5f0], 0
call fcn.100bfb10
push 0x1007c240
push 0x7e452f
push 0xff
call fcn.100bfb10
push 0x1007c390
push 0x7e4497
push 0xe8
call fcn.100bfb10
push 0x1007c390
push 0x7e44ec
push 0xe8
call fcn.100bfb10
add esp, 0x30
call fcn.10065890
jmp 0x100834a0
call fcn.1013a639
call fcn.1013a639
call fcn.1013a639
call fcn.1013a639
call fcn.1013a639
call fcn.1013a639
call fcn.1013a639
int3