Function at 0x10048af0
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Spawn thread to rwx shellcode

Disassembly:
sub esp, 0x18
cmp byte [esp + 0x1c], 0
push ebx
push ebp
push esi
push edi
jne 0x10048b41
cmp byte [ecx + 0xc], 0
lea edx, [ecx + 0xc]
je 0x10049ed4
mov eax, dword [0x101023d4]
mov ecx, str.Misc
push 0x3a
or dword [eax + 0x1af0], 2
mov dword [eax + 0x1b10], 0x44110000
mov dword [eax + 0x1b14], 0
mov dword [eax + 0x1af8], 1
call fcn.10061270
mov ecx, dword [0x101023d4]
mov eax, dword [ecx + 0x1a6c]
mov byte [eax + 0x84], 1
mov eax, dword [ecx + 0x1a6c]
mov eax, dword [eax + 0x194]
test eax, eax
je 0x10048b75
cmp dword [eax + 0x10], 2
jne 0x10048b70
cmp dword [eax + 4], 1
je 0x10048b83
call fcn.1003cf40
push 1
mov edx, 2
xor ecx, ecx
call fcn.1003c5d0
movss xmm0, dword [0x100f6354]
mov ecx, 1
call fcn.1003c2b0
push 1
xor edx, edx
mov ecx, str.Menu_key
call fcn.1007b480
movss xmm1, dword [0x100f63e4]
xorps xmm0, xmm0
call fcn.10064090
mov esi, dword [0x100ffbf8]
mov ecx, 0x40
cmp dword [esi + 0x281c], 0x65
cmovb ecx, dword [esi + 0x281c]
lea eax, [ecx + ecx*2]
push dword [eax*4 + 0x100ee560]
push str.___s__
call fcn.1007bb80
add esp, 8
xor ecx, ecx
call fcn.1005b220
test al, al
je 0x10048c06
push str.Press_any_key_to_change_keybind
call fcn.10064e50
add esp, 4
lea ecx, [esi + 0x281c]
call fcn.1003d770
mov edx, dword [0x100ffbf8]
mov ecx, str.Anti_AFK_kick
lea edx, [edx + 0x2820]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Auto_strafe
lea edx, [edx + 0x2821]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Bunny_hop
lea edx, [edx + 0x2822]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Fast_duck
lea edx, [edx + 0x2826]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Moonwalk
lea edx, [edx + 0x2827]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Edge_Jump
lea edx, [edx + 0x2828]
call fcn.1007d620
movss xmm1, dword [0x100f63e4]
xorps xmm0, xmm0
call fcn.10064090
mov ecx, dword [0x100ffbf8]
lea ecx, [ecx + 0x2854]
call fcn.10040700
mov edx, dword [0x100ffbf8]
mov ecx, str.Slowwalk
lea edx, [edx + 0x2829]
call fcn.1007d620
movss xmm1, dword [0x100f63e4]
xorps xmm0, xmm0
call fcn.10064090
mov ecx, dword [0x100ffbf8]
lea ecx, [ecx + 0x2858]
call fcn.10040700
mov edx, dword [0x100ffbf8]
mov ecx, str.Noscope_crosshair
add edx, 0x285c
push 0
lea eax, [edx + 0x18]
push eax
lea eax, [edx + 0x15]
push eax
lea eax, [edx + 0x10]
push eax
lea eax, [edx + 0x14]
push eax
call fcn.10039c00
mov edx, dword [0x100ffbf8]
mov ecx, str.Recoil_crosshair
add edx, 0x2878
push 0
lea eax, [edx + 0x18]
push eax
lea eax, [edx + 0x15]
push eax
lea eax, [edx + 0x10]
push eax
lea eax, [edx + 0x14]
push eax
call fcn.10039c00
mov edx, dword [0x100ffbf8]
mov ecx, str.Auto_pistol
lea edx, [edx + 0x282a]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Auto_reload
lea edx, [edx + 0x282b]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Auto_accept
lea edx, [edx + 0x282c]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Radar_hack
lea edx, [edx + 0x282d]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Reveal_ranks
lea edx, [edx + 0x282e]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Reveal_money
lea edx, [edx + 0x282f]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Reveal_suspect
lea edx, [edx + 0x2830]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Spectator_list
add edx, 0x2894
lea eax, [edx + 0x10]
push eax
lea eax, [edx + 0xc]
push eax
lea eax, [edx + 0x14]
push eax
call fcn.1003a090
mov edx, dword [0x100ffbf8]
mov ecx, str.Watermark
add edx, 0x28ac
lea eax, [edx + 0x10]
push eax
lea eax, [edx + 0xc]
push eax
lea eax, [edx + 0x14]
push eax
call fcn.1003a090
mov eax, dword [0x100ffbf8]
mov ecx, str.Offscreen_Enemies
push 0
push 0
lea edx, [eax + 0x297d]
add eax, 0x297c
push eax
lea eax, [edx + 0x10]
push eax
lea eax, [edx + 0x14]
push eax
call fcn.10039c00
mov edx, dword [0x100ffbf8]
mov ecx, str.Fix_animation_LOD
lea edx, [edx + 0x2831]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Fix_bone_matrix
lea edx, [edx + 0x2832]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Fix_movement
lea edx, [edx + 0x2833]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Disable_model_occlusion
lea edx, [edx + 0x2834]
call fcn.1007d620
push 0
push str._.2f
lea eax, [esp + 0x18]
mov dword [esp + 0x1c], 0
push eax
lea eax, [esp + 0x20]
mov dword [esp + 0x1c], 0x40a00000
push eax
mov eax, dword [0x100ffbf8]
mov edx, 8
add eax, 0x28c4
mov ecx, str.Aspect_Ratio
push eax
call fcn.10080f40
call fcn.1003cbd0
mov edx, dword [0x100ffbf8]
mov ecx, str.Disable_HUD_blur
lea edx, [edx + 0x2836]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
lea edx, [edx + 0x2825]
mov ecx, str.Animated_clan_tag
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Clock_tag
lea edx, [edx + 0x2824]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Custom_clantag
lea edx, [edx + 0x2823]
call fcn.1007d620
movss xmm1, dword [0x100f63e4]
xorps xmm0, xmm0
call fcn.10064090
mov ebx, dword [0x101023d4]
mov edx, 0x42f00000
mov ebp, dword [ebx + 0x1a6c]
lea esi, [ebp + 0x1b8]
mov dword [ebp + 0x1b0], 0x42f00000
mov ecx, dword [esi]
mov edi, dword [esi + 4]
cmp ecx, edi
jne 0x10048f8b
inc ecx
test edi, edi
je 0x10048f71
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x10048f76
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.10039ad0
mov ecx, dword [esi]
mov edx, dword [ebp + 0x1b0]
mov eax, dword [esi + 8]
mov dword [eax + ecx*4], edx
xor ecx, ecx
inc dword [esi]
and dword [ebx + 0x1b50], 0xfffffffe
call fcn.10063d10
mov eax, dword [0x100ffbf8]
lea ecx, [esp + 0x14]
push 0
push 0
push 0
push ecx
add eax, 0x2842
mov dword [esp + 0x24], 0
push 0x10
push eax
xor edx, edx
mov dword [esp + 0x30], 0
mov ecx, 0x100e9dfb
call fcn.10083c80
test al, al
je 0x10048fe0
mov cl, 1
call fcn.1004be60
mov eax, dword [0x101023d4]
mov ecx, str.Kill_message
mov eax, dword [eax + 0x1a6c]
dec dword [eax + 0xc4]
mov edx, dword [0x100ffbf8]
lea edx, [edx + 0x2837]
call fcn.1007d620
movss xmm1, dword [0x100f63e4]
xorps xmm0, xmm0
call fcn.10064090
mov ebp, dword [0x101023d4]
mov edx, 0x42f00000
mov ebx, dword [ebp + 0x1a6c]
lea esi, [ebx + 0x1b8]
mov dword [ebx + 0x1b0], 0x42f00000
mov ecx, dword [esi]
mov edi, dword [esi + 4]
cmp ecx, edi
jne 0x1004906b
inc ecx
test edi, edi
je 0x10049051
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x10049056
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.10039ad0
mov ecx, dword [esi]
mov edx, dword [ebx + 0x1b0]
mov eax, dword [esi + 8]
mov dword [eax + ecx*4], edx
mov ecx, 1
inc dword [esi]
and dword [ebp + 0x1b50], 0xfffffffe
call fcn.10063d10
mov ecx, dword [0x100ffbf8]
add ecx, 0x28c8
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x24], 0
mov eax, dword [ecx + 0x14]
lea edx, [eax + 1]
cmp eax, 0x10
jb 0x100490b1
mov ecx, dword [ecx]
lea eax, [esp + 0x1c]
mov dword [esp + 0x14], 0
push eax
push 0x1003b0a0
push 0x40000
lea eax, [esp + 0x20]
mov dword [esp + 0x24], 0
push eax
push edx
push ecx
xor edx, edx
mov ecx, 0x100e9dfb
call fcn.10083c80
mov eax, dword [0x101023d4]
mov ecx, str.Name_stealer
mov eax, dword [eax + 0x1a6c]
dec dword [eax + 0xc4]
mov edx, dword [0x100ffbf8]
lea edx, [edx + 0x2835]
call fcn.1007d620
mov ecx, 3
call fcn.10063d10
mov eax, dword [0x101023d4]
mov esi, str.White
or dword [eax + 0x1b50], 1
xor edi, edi
mov dword [eax + 0x1b54], 0x42c80000
mov ebx, dword [0x100ffbf8]
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10049140
sub ecx, edx
inc esi
add esi, ecx
inc edi
cmp byte [esi], al
jne 0x10049137
push 0xffffffffffffffff
push edi
push str.White
push 0x1007f0d0
lea edx, [ebx + 0x28e0]
mov ecx, 0x100e9dfb
call fcn.1007f130
mov eax, dword [0x101023d4]
xorps xmm0, xmm0
movss xmm1, dword [0x100f63e4]
mov eax, dword [eax + 0x1a6c]
dec dword [eax + 0xc4]
call fcn.10064090
mov ecx, 4
call fcn.10063d10
mov ecx, dword [0x100ffbf8]
add ecx, 0x28e4
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x24], 0
mov eax, dword [ecx + 0x14]
lea edx, [eax + 1]
cmp eax, 0x10
jb 0x100491c6
mov ecx, dword [ecx]
lea eax, [esp + 0x1c]
mov dword [esp + 0x14], 0
push eax
push 0x1003b0a0
push 0x40000
lea eax, [esp + 0x20]
mov dword [esp + 0x24], 0
push eax
push edx
push ecx
xor edx, edx
mov ecx, 0x100e9dfb
call fcn.10083c80
mov eax, dword [0x101023d4]
xorps xmm0, xmm0
movss xmm1, dword [0x100f63e4]
mov eax, dword [eax + 0x1a6c]
dec dword [eax + 0xc4]
call fcn.10064090
push 0
lea edx, [esp + 0x18]
mov dword [esp + 0x18], 0
mov ecx, str.Setup_fake_ban
mov dword [esp + 0x1c], 0
call fcn.1007c400
test al, al
je 0x10049244
mov cl, 1
call fcn.1004de00
mov edx, dword [0x100ffbf8]
mov ecx, str.Fast_plant
lea edx, [edx + 0x283b]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Fast_Stop
lea edx, [edx + 0x283c]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Bomb_timer
add edx, 0x28fc
lea eax, [edx + 0x10]
push eax
lea eax, [edx + 0xc]
push eax
lea eax, [edx + 0x14]
push eax
call fcn.1003a090
mov edx, dword [0x100ffbf8]
mov ecx, str.Quick_reload
lea edx, [edx + 0x283d]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Prepare_revolver
lea edx, [edx + 0x283e]
call fcn.1007d620
movss xmm1, dword [0x100f63e4]
xorps xmm0, xmm0
call fcn.10064090
mov ecx, dword [0x100ffbf8]
lea ecx, [ecx + 0x2914]
call fcn.10040700
mov ebx, dword [0x100ffbf8]
xor edi, edi
mov esi, str.None
nop dword [eax]
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100492f5
sub ecx, edx
inc esi
add esi, ecx
inc edi
cmp byte [esi], al
jne 0x100492f0
push 0xffffffffffffffff
push edi
push str.None
push 0x1007f0d0
lea edx, [ebx + 0x2918]
mov ecx, str.Hit_Sound
call fcn.1007f130
mov eax, dword [0x100ffbf8]
cmp dword [eax + 0x2918], 5
jne 0x100493a2
lea ecx, [eax + 0x2948]
mov dword [esp + 0x20], 0
mov eax, dword [ecx + 0x14]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x24], 0
lea edx, [eax + 1]
cmp eax, 0x10
jb 0x10049358
mov ecx, dword [ecx]
lea eax, [esp + 0x1c]
mov dword [esp + 0x14], 0
push eax
push 0x1003b0a0
push 0x40000
lea eax, [esp + 0x20]
mov dword [esp + 0x24], 0
push eax
push edx
push ecx
xor edx, edx
mov ecx, str.Hit_Sound_filename
call fcn.10083c80
xor ecx, ecx
call fcn.1005b220
test al, al
je 0x100493a2
push str.audio_file_must_be_put_in_csgo_sound__directory
call fcn.10064e50
add esp, 4
mov ecx, 5
call fcn.10063d10
mov ebx, dword [0x100ffbf8]
xor edi, edi
mov esi, str.None
nop dword [eax]
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100493c5
sub ecx, edx
inc esi
add esi, ecx
inc edi
cmp byte [esi], al
jne 0x100493c0
push 0xffffffffffffffff
push edi
push str.None
push 0x1007f0d0
lea edx, [ebx + 0x292c]
mov ecx, str.Kill_Sound
call fcn.1007f130
mov eax, dword [0x100ffbf8]
cmp dword [eax + 0x292c], 5
jne 0x10049472
lea ecx, [eax + 0x2930]
mov dword [esp + 0x20], 0
mov eax, dword [ecx + 0x14]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x24], 0
lea edx, [eax + 1]
cmp eax, 0x10
jb 0x10049428
mov ecx, dword [ecx]
lea eax, [esp + 0x1c]
mov dword [esp + 0x14], 0
push eax
push 0x1003b0a0
push 0x40000
lea eax, [esp + 0x20]
mov dword [esp + 0x24], 0
push eax
push edx
push ecx
xor edx, edx
mov ecx, str.Kill_Sound_filename
call fcn.10083c80
xor ecx, ecx
call fcn.1005b220
test al, al
je 0x10049472
push str.audio_file_must_be_put_in_csgo_sound__directory
call fcn.10064e50
add esp, 4
mov ecx, dword [0x101023d4]
mov edx, 4
push 0
push 0x100ee1f8
mov dword [esp + 0x1c], 5
mov eax, dword [ecx + 0x1a6c]
mov dword [esp + 0x18], 1
dec dword [eax + 0xc4]
lea eax, [esp + 0x1c]
or dword [ecx + 0x1b50], 1
push eax
lea eax, [esp + 0x1c]
mov dword [ecx + 0x1b54], 0x42b40000
push eax
mov eax, dword [0x100ffbf8]
mov ecx, str.Choked_packets
add eax, 0x291c
push eax
call fcn.10081e90
mov ecx, dword [0x100ffbf8]
mov eax, dword [ecx + 0x291c]
cmp eax, 0x40
jle 0x100494e8
mov eax, 0x40
jmp 0x100494ef
xor edx, edx
test eax, eax
cmovs eax, edx
movss xmm1, dword [0x100f63e4]
xorps xmm0, xmm0
mov dword [ecx + 0x291c], eax
call fcn.10064090
mov ecx, dword [0x100ffbf8]
lea ecx, [ecx + 0x2920]
call fcn.10040700
push str.Quick_healthshot
call fcn.1007bb80
movss xmm1, dword [0x100f63e4]
add esp, 4
xorps xmm0, xmm0
call fcn.10064090
mov ecx, dword [0x100ffbf8]
lea ecx, [ecx + 0x2924]
call fcn.10040700
mov edx, dword [0x100ffbf8]
mov ecx, str.Grenade_Prediction
lea edx, [edx + 0x2838]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Fix_tablet_signal
lea edx, [edx + 0x2839]
call fcn.1007d620
mov eax, dword [0x101023d4]
mov edx, 8
push 0
push str._.2f
mov ecx, str.Max_angle_delta
mov dword [esp + 0x18], 0
or dword [eax + 0x1b50], 1
mov dword [eax + 0x1b54], 0x42f00000
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x20], 0x437f0000
push eax
mov eax, dword [0x100ffbf8]
add eax, 0x2928
push eax
call fcn.10080f40
mov edx, dword [0x100ffbf8]
mov ecx, str.Fake_prime
lea edx, [edx + 0x283a]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Opposite_Hand_Knife
lea edx, [edx + 0x283f]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Preserve_Killfeed
lea edx, [edx + 0x2840]
call fcn.1007d620
movss xmm1, dword [0x100f63e4]
xorps xmm0, xmm0
call fcn.10064090
mov ecx, str.Preserve_Killfeed
call fcn.10063c90
push 0
lea edx, [esp + 0x18]
mov dword [esp + 0x18], 0
mov ecx, 0x100eedbc
mov dword [esp + 0x1c], 0
call fcn.1007c400
test al, al
je 0x1004968f
mov esi, dword [0x101023d4]
xor edx, edx
mov eax, dword [esi + 0x1a6c]
mov ecx, dword [eax + 0xc4]
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, 0x100e9dfb
call fcn.100586d0
cmp dword [esi + 0x1aa4], eax
jne 0x10049677
mov dword [esi + 0x1aa8], eax
cmp dword [esi + 0x1adc], eax
jne 0x10049686
mov byte [esi + 0x1ae0], 1
xor edx, edx
mov ecx, eax
call fcn.10064ec0
mov esi, dword [0x101023d4]
mov eax, dword [esi + 0x1bac]
cmp eax, dword [esi + 0x1bb8]
jg 0x100496b2
mov dword [esi + 0x1af0], 0
jmp 0x10049757
mov eax, dword [esi + 0x1a6c]
xor edx, edx
mov ecx, dword [eax + 0xc4]
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, 0x100e9dfb
call fcn.100586d0
cmp dword [esi + 0x1aa4], eax
jne 0x100496e2
mov dword [esi + 0x1aa8], eax
cmp dword [esi + 0x1adc], eax
jne 0x100496f1
mov byte [esi + 0x1ae0], 1
mov edx, 0x141
mov ecx, eax
call fcn.10065200
test al, al
je 0x10049757
mov edx, dword [0x100ffbf8]
mov ecx, str.Only_Headshots
lea edx, [edx + 0x2841]
call fcn.1007d620
mov esi, dword [0x101023d4]
mov eax, dword [esi + 0x1a6c]
cmp dword [esi + 0x1bc4], eax
jne 0x1004973b
mov dword [esi + 0x1cc4], eax
mov dword [esi + 0x1cc8], 2
test dword [eax + 8], 0x1000000
je 0x1004974b
mov byte [esi + 0x1a1e], 1
call fcn.100634d0
mov byte [esi + 0x1a1e], 0
mov eax, dword [0x101023d4]
mov ecx, str.Purchase_List
mov eax, dword [eax + 0x1a6c]
dec dword [eax + 0xc4]
mov edx, dword [0x100ffbf8]
lea edx, [edx + 0x2960]
call fcn.1007d620
movss xmm1, dword [0x100f63e4]
xorps xmm0, xmm0
call fcn.10064090
mov ecx, str.Purchase_List
call fcn.10063c90
push 0
lea edx, [esp + 0x18]
mov dword [esp + 0x18], 0
mov ecx, 0x100eedbc
mov dword [esp + 0x1c], 0
call fcn.1007c400
test al, al
je 0x1004980a
mov esi, dword [0x101023d4]
xor edx, edx
mov eax, dword [esi + 0x1a6c]
mov ecx, dword [eax + 0xc4]
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, 0x100e9dfb
call fcn.100586d0
cmp dword [esi + 0x1aa4], eax
jne 0x100497f2
mov dword [esi + 0x1aa8], eax
cmp dword [esi + 0x1adc], eax
jne 0x10049801
mov byte [esi + 0x1ae0], 1
xor edx, edx
mov ecx, eax
call fcn.10064ec0
mov esi, dword [0x101023d4]
mov eax, dword [esi + 0x1bac]
cmp eax, dword [esi + 0x1bb8]
jg 0x1004982d
mov dword [esi + 0x1af0], 0
jmp 0x10049958
mov eax, dword [esi + 0x1a6c]
xor edx, edx
mov ecx, dword [eax + 0xc4]
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, 0x100e9dfb
call fcn.100586d0
cmp dword [esi + 0x1aa4], eax
jne 0x1004985d
mov dword [esi + 0x1aa8], eax
cmp dword [esi + 0x1adc], eax
jne 0x1004986c
mov byte [esi + 0x1ae0], 1
mov edx, 0x141
mov ecx, eax
call fcn.10065200
test al, al
je 0x10049958
mov eax, dword [0x101023d4]
mov esi, str.Details
or dword [eax + 0x1b50], 1
xor edi, edi
mov dword [eax + 0x1b54], 0x42960000
mov ebx, dword [0x100ffbf8]
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100498a8
sub ecx, edx
inc esi
add esi, ecx
inc edi
cmp byte [esi], al
jne 0x100498a3
push 0xffffffffffffffff
push edi
push str.Details
push 0x1007f0d0
lea edx, [ebx + 0x2964]
mov ecx, str.Mode
call fcn.1007f130
mov edx, dword [0x100ffbf8]
mov ecx, str.Only_During_Freeze_Time
lea edx, [edx + 0x2961]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Show_Prices
lea edx, [edx + 0x2962]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.No_Title_Bar
lea edx, [edx + 0x2963]
call fcn.1007d620
mov esi, dword [0x101023d4]
mov eax, dword [esi + 0x1a6c]
cmp dword [esi + 0x1bc4], eax
jne 0x1004993c
mov dword [esi + 0x1cc4], eax
mov dword [esi + 0x1cc8], 2
test dword [eax + 8], 0x1000000
je 0x1004994c
mov byte [esi + 0x1a1e], 1
call fcn.100634d0
mov byte [esi + 0x1a1e], 0
mov eax, dword [0x101023d4]
mov ecx, str.Reportbot
mov eax, dword [eax + 0x1a6c]
dec dword [eax + 0xc4]
mov edx, dword [0x100ffbf8]
lea edx, [edx + 0x2968]
call fcn.1007d620
movss xmm1, dword [0x100f63e4]
xorps xmm0, xmm0
call fcn.10064090
mov ecx, str.Reportbot
call fcn.10063c90
push 0
lea edx, [esp + 0x18]
mov dword [esp + 0x18], 0
mov ecx, 0x100eedbc
mov dword [esp + 0x1c], 0
call fcn.1007c400
test al, al
je 0x10049a0b
mov esi, dword [0x101023d4]
xor edx, edx
mov eax, dword [esi + 0x1a6c]
mov ecx, dword [eax + 0xc4]
mov eax, dword [eax + 0xcc]
push dword [eax + ecx*4 - 4]
mov ecx, 0x100e9dfb
call fcn.100586d0
cmp dword [esi + 0x1aa4], eax
jne 0x100499f3
mov dword [esi + 0x1aa8], eax
cmp dword [esi + 0x1adc], eax
jne 0x10049a02
mov byte [esi + 0x1ae0], 1
xor edx, edx
mov ecx, eax
call fcn.10064ec0
mov esi, dword [0x101023d4]
mov eax, dword [esi + 0x1bac]
cmp eax, dword [esi + 0x1bb8]
jg 0x10049a2e
mov dword [esi + 0x1af0], 0
jmp 0x10049cf3
mov eax, dword [esi + 0x1a6c]
mov ecx, 0x100e9dfb
mov edx, dword [eax + 0xc4]
mov eax, dword [eax + 0xcc]
push dword [eax + edx*4 - 4]
xor edx, edx
call fcn.100586d0
cmp dword [esi + 0x1aa4], eax
jne 0x10049a5e
mov dword [esi + 0x1aa8], eax
cmp dword [esi + 0x1adc], eax
jne 0x10049a6d
mov byte [esi + 0x1ae0], 1
mov edx, 0x141
mov ecx, eax
call fcn.10065200
test al, al
je 0x10049cf3
mov ebp, dword [0x101023d4]
mov edx, 0x42a00000
mov ebx, dword [ebp + 0x1a6c]
lea esi, [ebx + 0x1b8]
mov dword [ebx + 0x1b0], 0x42a00000
mov ecx, dword [esi]
mov edi, dword [esi + 4]
cmp ecx, edi
jne 0x10049ad5
inc ecx
test edi, edi
je 0x10049abb
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x10049ac0
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.10039ad0
mov ecx, dword [esi]
mov edx, dword [ebx + 0x1b0]
mov eax, dword [esi + 8]
mov dword [eax + ecx*4], edx
inc dword [esi]
mov esi, str.Enemies
and dword [ebp + 0x1b50], 0xfffffffe
xor edi, edi
mov ebx, dword [0x100ffbf8]
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10049af6
sub ecx, edx
inc esi
add esi, ecx
inc edi
cmp byte [esi], al
jne 0x10049af1
push 0xffffffffffffffff
push edi
push str.Enemies
push 0x1007f0d0
lea edx, [ebx + 0x2970]
mov ecx, str.Target
call fcn.1007f130
push 0
push 0x100ee1f8
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x64
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 1
push eax
mov eax, dword [0x100ffbf8]
mov edx, 4
add eax, 0x2974
mov ecx, str.Delay__s_
push eax
call fcn.10081e90
mov ecx, dword [0x100ffbf8]
mov ebx, 1
push 0
push 0x100ee1f8
mov dword [esp + 0x1c], 0x64
mov eax, dword [ecx + 0x2974]
lea edx, [ebx + 3]
cmp eax, 1
mov dword [esp + 0x18], ebx
cmovl eax, ebx
mov dword [ecx + 0x2974], eax
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x1c]
mov ecx, str.Rounds
push eax
mov eax, dword [0x100ffbf8]
add eax, 0x2978
push eax
call fcn.10081e90
mov ecx, dword [0x100ffbf8]
mov eax, dword [ecx + 0x2978]
cmp eax, ebx
cmovl eax, ebx
mov dword [ecx + 0x2978], eax
mov ecx, dword [0x101023d4]
mov eax, dword [ecx + 0x1a6c]
mov byte [eax + 0x84], bl
mov ecx, dword [ecx + 0x1a6c]
mov edx, dword [ecx + 0x1b8]
sub edx, ebx
mov dword [ecx + 0x1b8], edx
jne 0x10049bfa
movss xmm0, dword [ecx + 0x260]
jmp 0x10049c06
mov eax, dword [ecx + 0x1c0]
movss xmm0, dword [eax + edx*4 - 4]
movss dword [ecx + 0x1b0], xmm0
mov ecx, str.Abusive_Communications
mov edx, dword [0x100ffbf8]
lea edx, [edx + 0x2969]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Griefing
lea edx, [edx + 0x296a]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Wall_Hacking
lea edx, [edx + 0x296b]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Aim_Hacking
lea edx, [edx + 0x296c]
call fcn.1007d620
mov edx, dword [0x100ffbf8]
mov ecx, str.Other_Hacking
lea edx, [edx + 0x296d]
call fcn.1007d620
push 0
lea edx, [esp + 0x18]
mov dword [esp + 0x18], 0
mov ecx, str.Reset
mov dword [esp + 0x1c], 0
call fcn.1007c400
test al, al
je 0x10049cb4
mov eax, dword [0x101050e4]
mov dword [0x1010516c], 0
mov dword [0x101050e8], eax
mov esi, dword [0x101023d4]
mov eax, dword [esi + 0x1a6c]
cmp dword [esi + 0x1bc4], eax
jne 0x10049cd8
mov dword [esi + 0x1cc4], eax
mov dword [esi + 0x1cc8], 2
test dword [eax + 8], 0x1000000
je 0x10049ce7
mov byte [esi + 0x1a1e], bl
call fcn.100634d0
mov byte [esi + 0x1a1e], 0
mov eax, dword [0x101023d4]
lea edx, [esp + 0x14]
push 0
mov ecx, str.Unhook
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov eax, dword [eax + 0x1a6c]
dec dword [eax + 0xc4]
call fcn.1007c400
test al, al
je 0x10049e94
mov edi, dword [0x100ffc0c]
xor edx, edx
xor ecx, ecx
call fcn.1003e960
call fcn.1003e670
cmp dword [0x10102344], 0
je 0x10049dcb
xor ecx, ecx
call fcn.1003e5b0
test eax, eax
jne 0x10049dcb
mov eax, dword [0x10105bfc]
mov dword [0x10105bfc], 0
test eax, eax
je 0x10049d83
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualFree]
mov esi, dword [eax]
push 0x8000
push 0
push eax
call ebx
mov eax, esi
test esi, esi
jne 0x10049d71
push dword [0x10105bf0]
push 0
push dword [0x10102344]
call dword [sym.imp.KERNEL32.dll_HeapFree]
push dword [0x10102344]
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
mov dword [0x10102344], 0
mov dword [0x10105bf0], 0
mov dword [0x10105bf4], 0
mov dword [0x10105bf8], 0
xor eax, eax
mov ecx, 0x10102340
xchg dword [ecx], eax
mov ecx, dword [0x1010525c]
mov ebx, dword [0x100ffc08]
mov eax, dword [ecx]
cmp eax, ecx
je 0x10049df4
mov esi, dword [eax + 0x10]
mov edx, dword [eax + 0xc]
mov dword [esi], edx
mov eax, dword [eax]
cmp eax, ecx
jne 0x10049de6
mov ecx, 0x10105258
call fcn.1003f480
mov eax, dword [ebx]
mov dword [ebx + 4], eax
call fcn.1002ec80
push dword [edi]
push 0xfffffffffffffffc
push dword [edi + 0x64]
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov eax, dword [0x100ffbfc]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [eax]
mov ecx, dword [eax]
mov eax, dword [edi + 4]
mov dword [ecx], eax
mov eax, dword [0x100ffbfc]
mov eax, dword [eax + 4]
mov ecx, dword [eax]
mov eax, dword [edi + 8]
mov dword [ecx], eax
lea eax, [esp + 0x14]
push eax
mov eax, dword [0x100ffbfc]
push 0x40
push 4
push dword [eax + 0x54]
call esi
test eax, eax
je 0x10049e73
mov eax, dword [0x100ffbfc]
push 0
mov ecx, dword [eax + 0x54]
mov eax, dword [edi + 0xc]
sub eax, ecx
sub eax, 4
mov dword [ecx], eax
push dword [esp + 0x18]
mov eax, dword [0x100ffbfc]
push 4
push dword [eax + 0x54]
call esi
push 0
push 0
push dword [edi + 0x60]
push 0x10056960
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
je 0x10049e94
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x101023d4]
mov eax, dword [ecx + 0x1a6c]
mov byte [eax + 0x84], 1
mov eax, dword [ecx + 0x1a6c]
mov eax, dword [eax + 0x194]
test eax, eax
je 0x10049ec8
cmp dword [eax + 0x10], 1
jne 0x10049ec3
cmp dword [eax + 4], 0
je 0x10049ec8
call fcn.1003cf40
cmp byte [esp + 0x2c], 0
jne 0x10049ed4
call fcn.100634d0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x18
ret 4