Function at 0x1000fcd4
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10061f38
mov eax, dword fs:[0]
push eax
sub esp, 0x234
mov eax, dword [0x1007f018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [0x100900b4]
call fcn.1000aaf0
test eax, eax
je 0x10012362
mov ecx, dword [0x1008f3f8]
mov eax, dword [ecx]
mov edx, dword [eax]
push str.GameHack.Weapon.NET_FIRE
call edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x1000f799
call fcn.100094b0
mov ecx, dword [0x100900ac]
push eax
call dword [0x1008e418]
mov edi, dword [0x100900c0]
call fcn.1000a220
test eax, eax
je 0x1000f6d7
mov edi, dword [0x100900c0]
call fcn.1000a220
cmp eax, 1
jne 0x1000f799
mov edi, dword [0x100900c0]
call fcn.1000a0c0
mov edx, dword [0x1008fe74]
mov ecx, eax
call edx
xor edi, edi
mov esi, eax
mov dword [ebp - 0x224], edi
jmp 0x1000f700
mov eax, dword [0x1008e418]
mov ecx, dword [0x100900ac]
push edi
call eax
test al, al
jne 0x1000f789
call fcn.100094b0
cmp eax, edi
je 0x1000f789
call fcn.100094b0
xor eax, edi
test al, 1
je 0x1000f789
call fcn.100094b0
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, 7
call fcn.1000e130
add esp, 4
test al, al
je 0x1000f789
lea edx, [ebp - 0x48]
push edx
mov eax, edi
mov ecx, 7
call fcn.1000e130
add esp, 4
test al, al
je 0x1000f789
push 1
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, esi
call dword [0x1008d4d4]
call fcn.10009c80
push edi
call fcn.1000ec50
add esp, 4
push eax
lea ebx, [ebp - 0x48]
lea edi, [ebp - 0x1c]
call fcn.10009b10
mov edi, dword [ebp - 0x224]
inc edi
mov dword [ebp - 0x224], edi
cmp edi, 0x10
jle 0x1000f700
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Weapon.DemageUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 1
jne 0x1000f81f
push eax
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
shr ecx, 0x10
test ecx, ecx
je 0x1000f942
cmp byte [0x1008eb48], 0
je 0x1000f7f1
cmp dword [0x1008eb4c], 0
je 0x1000f81f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [0x1008eb4c]
add edx, 0x64
cmp edx, eax
ja 0x1000f81f
mov byte [0x1008eb48], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, dword [0x100900c0]
mov dword [0x1008eb4c], eax
call fcn.1000a0c0
mov edx, dword [0x1008fe74]
mov ecx, eax
call edx
mov esi, eax
call fcn.10009c80
mov edi, dword [0x100900b4]
call fcn.1000aaf0
test eax, eax
je 0x1000fd6a
mov edi, dword [0x100900b4]
call fcn.1000aaf0
mov ecx, dword [0x1008f3f8]
mov ebx, eax
mov eax, dword [ecx]
mov edx, dword [eax]
push str.GameHack.Player.Reborn
mov dword [ebp - 0x224], ebx
call edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x1000f889
mov esi, ebx
call fcn.1000a500
push eax
call fcn.1000acf0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.Reborn
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x14]
call eax
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.FreeMove
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x1000f902
mov ecx, dword [0x100900a0]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
push str.GameContext.Base
call eax
mov edi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
lea esi, [eax - 0x28]
push 4
push esi
call edi
test eax, eax
jne 0x1000f902
mov esi, dword [esi]
push 4
add esi, 0x44
push esi
call edi
test eax, eax
jne 0x1000f902
mov esi, dword [esi]
push 4
add esi, 0x18
push esi
call edi
test eax, eax
jne 0x1000f902
mov esi, dword [esi]
push 4
add esi, 0xdc
push esi
call edi
test eax, eax
jne 0x1000f902
cmp dword [esi], 4
je 0x1000f902
mov dword [esi], 4
push 0x23
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
shr ecx, 0x10
test ecx, ecx
je 0x1000f94e
cmp byte [0x1008ec58], 0
je 0x1000f934
cmp dword [0x1008ec5c], 0
je 0x1000f955
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x1008ec5c], eax
ja 0x1000f955
mov byte [0x1008ec58], 1
mov eax, 1
jmp 0x1000f957
mov byte [0x1008eb48], 0
jmp 0x1000f81f
mov byte [0x1008ec58], 0
xor eax, eax
test al, 1
je 0x1000f962
mov esi, ebx
call fcn.1000a440
cmp dword [0x100900c8], 0
je 0x1000f9a8
mov esi, dword [0x1008d4b8]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea edx, [ebp - 0x228]
push edx
push 0x40
push 5
push esi
call edi
mov ecx, dword [ebp - 0x228]
mov eax, 0x1000f4f0
sub eax, esi
sub eax, 5
mov dword [esi + 1], eax
lea eax, [ebp - 0x234]
push eax
push ecx
push 5
push esi
mov byte [esi], 0xe9
call edi
xor esi, esi
mov dword [ebp - 0x22c], esi
call fcn.100094b0
cmp eax, esi
je 0x1000f9e3
mov edi, dword [0x100900b4]
mov ebx, esi
call fcn.1000a920
test eax, eax
je 0x1000f9e3
call fcn.10009610
mov ecx, dword [ebp - 0x22c]
mov dword [ecx*4 + str.None], eax
inc ecx
mov dword [ebp - 0x22c], ecx
add esi, 2
cmp esi, 0xf
jle 0x1000f9b0
mov esi, 1
mov edi, dword [0x100900ac]
mov ecx, 0xc6
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x1007aa44]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0x3c], dl
jns 0x1000fa1d
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x1d
jl 0x1000fa00
mov byte [ebp - 0x1f], 0
mov dword [ebp - 4], 0
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [ebp - 0x3c]
push edx
call eax
mov eax, dword [eax + edi]
xor ecx, ecx
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], ecx
mov word [ebp - 0x20], cx
cmp eax, esi
je 0x1000fa84
mov edi, dword [0x100900b4]
mov ebx, esi
call fcn.1000a920
test eax, eax
je 0x1000fa84
call fcn.10009610
inc dword [ebp - 0x22c]
add esi, 2
cmp esi, 0xf
jle 0x1000f9f0
cmp byte [0x1008e57b], 0
mov ecx, dword [ebp - 0x22c]
mov dword [0x1008ff8c], ecx
je 0x1000fb67
cmp byte [0x10090073], 0
jne 0x1000fb0a
mov ecx, dword [0x1008f3f8]
mov byte [0x10090073], 1
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Misc.KickPlayer
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x18]
call eax
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Misc.KickPlayerSelector
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
mov eax, dword [eax*4 + 0x10089118]
mov edx, 0x10090194
sub edx, eax
lea ebx, [ebx]
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x1000fb00
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Misc.KickPlayer
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x1000fb8a
call fcn.1000a9d0
mov esi, eax
call fcn.1000a500
cmp eax, 0xffffffff
je 0x1000fb70
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
cmp dword [0x10093694], eax
ja 0x1000fb8a
push 0x66
mov edi, str.______________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________
mov esi, 0x10090194
call fcn.100097b0
call ebx
add eax, 0x7d0
mov dword [0x10093694], eax
jmp 0x1000fb8a
mov byte [0x10090073], 0
jmp 0x1000fb0a
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Misc.KickPlayer
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x14]
call eax
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Special.Heavy
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 1
jne 0x1000fcea
mov edi, dword [ebp - 0x224]
call fcn.1000a0c0
mov edx, dword [0x1008fe78]
test edx, edx
je 0x1000fbcd
mov ecx, dword [0x1008fed4]
add ecx, eax
call edx
jmp 0x1000fbd6
mov edx, dword [0x1008fed4]
mov eax, dword [edx + eax]
cmp eax, 6
ja case.default.0x1000fbe2
movzx eax, byte [eax + 0x10012388]
jmp dword [eax*4 + 0x10012380]
cmp dword [ebp - 0x234], 0
je case.0x1000fcaa.4
call fcn.1000a0c0
mov edx, dword [0x1008fe78]
test edx, edx
je 0x1000fc11
mov ecx, dword [0x1008fed4]
add ecx, eax
call edx
jmp 0x1000fc1a
mov edx, dword [0x1008fed4]
mov eax, dword [edx + eax]
cmp eax, 6
ja case.default.0x1000fc26
movzx eax, byte [eax + 0x10012398]
jmp dword [eax*4 + 0x10012390]
cmp dword [ebp - 0x234], 1
je case.0x1000fcaa.4
call fcn.1000a0c0
mov edx, dword [0x1008fe78]
test edx, edx
je 0x1000fc55
mov ecx, dword [0x1008fed4]
add ecx, eax
call edx
jmp 0x1000fc5e
mov edx, dword [0x1008fed4]
mov eax, dword [edx + eax]
cmp eax, 6
ja case.default.0x1000fc6a
movzx eax, byte [eax + 0x100123a8]
jmp dword [eax*4 + 0x100123a0]
cmp dword [ebp - 0x234], 3
je case.0x1000fcaa.4
call fcn.1000a0c0
mov edx, dword [0x1008fe78]
test edx, edx
je 0x1000fc95
mov ecx, dword [0x1008fed4]
add ecx, eax
call edx
jmp 0x1000fc9e
mov edx, dword [0x1008fed4]
mov eax, dword [edx + eax]
cmp eax, 6
ja case.default.0x1000fcaa
movzx eax, byte [eax + 0x100123b8]
jmp dword [eax*4 + 0x100123b0]
cmp dword [ebp - 0x234], 4
je case.0x1000fcaa.4
call fcn.1000a220
cmp eax, 5
je case.0x1000fcaa.4
call fcn.1000a220
cmp eax, 6
jne 0x1000fcea
mov edi, dword [ebp - 0x224]
call fcn.1000a0c0
mov edx, dword [0x1008fe74]
mov ecx, eax
call edx
mov esi, eax
call fcn.10009c80
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Brutal.CiriticalKnfife
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 1
jne case.0x1000fd42.0
mov edi, dword [ebp - 0x224]
call fcn.1000a0c0
mov edx, dword [0x1008fe78]
test edx, edx
je 0x1000fd2d
mov ecx, dword [0x1008fed4]
add ecx, eax
call edx
jmp 0x1000fd36
mov edx, dword [0x1008fed4]
mov eax, dword [edx + eax]
cmp eax, 6
ja case.default.0x1000fd42
movzx eax, byte [eax + 0x100123c8]
jmp dword [eax*4 + 0x100123c0]
cmp dword [ebp - 0x234], 2
jne case.0x1000fd42.0
call fcn.1000a0c0
mov edx, dword [0x1008fe74]
mov ecx, eax
call edx
mov esi, eax
call fcn.10009c80
jmp case.0x1000fd42.0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.FreeMove
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x14]
call eax
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Misc.KickPlayer
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x14]
call eax
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Misc.KickPlayerSelector
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x14]
call eax
mov dword [str.None], 0x10074160
mov edi, dword [0x100900b4]
call fcn.1000aaf0
test eax, eax
je 0x1000fddc
mov edi, dword [0x100900b4]
call fcn.1000aaf0
mov edi, dword [0x100900b4]
call fcn.1000aaf0
test eax, eax
je 0x1000fe67
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Special.HealthAbsorber
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 1
jne 0x1000fe60
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.Invicible
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x10]
call eax
mov edi, dword [0x100900c0]
call fcn.1000a0c0
mov edx, dword [0x1008fe74]
mov ecx, eax
call edx
mov esi, dword [0x100900c0]
mov dword [eax + 0x648], 0x64
call fcn.1000a5c0
test eax, eax
jle 0x1000fee0
mov esi, dword [0x100900c0]
call fcn.1000a440
mov byte [0x10093698], 0
mov edi, dword [0x100900b4]
call fcn.1000aaf0
test eax, eax
je 0x10012362
mov edi, dword [0x100900b4]
call fcn.1000aaf0
test eax, eax
je 0x10012362
mov edi, dword [0x100900b4]
call fcn.1000aaf0
mov esi, eax
call fcn.1000a5c0
test eax, eax
jle 0x10012362
mov edi, dword [0x100900b4]
call fcn.1000aaf0
mov ebx, eax
mov edi, ebx
mov dword [ebp - 0x22c], ebx
call fcn.1000a0c0
mov edx, dword [0x1008fe78]
xor esi, esi
cmp edx, esi
jbe 0x100101f7
mov ecx, dword [0x1008fed4]
add ecx, eax
call edx
jmp 0x10010200
test byte [0x100936e4], 1
jne 0x1000fef0
or dword [0x100936e4], 1
mov esi, dword [0x100900c0]
call fcn.1000a5c0
test eax, eax
jg 0x1000ff87
cmp byte [0x10093698], 0
jne 0x1000ff87
push 0x1a
push 7
call fcn.1000a2a0
mov edi, dword [0x100900c0]
call fcn.1000a010
mov edi, eax
call fcn.10009d50
fld dword [eax + 0x170]
fstp dword [ebp - 0x228]
mov byte [0x10093698], 1
fld dword [eax + 0x174]
fstp dword [ebp - 0x224]
fld dword [eax + 0x178]
fstp dword [ebp - 0x22c]
fld dword [ebp - 0x228]
fstp dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
fld dword [ebp - 0x224]
mov dword [0x100936d8], ecx
fstp dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
fld dword [ebp - 0x22c]
mov dword [0x100936dc], edx
fstp dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [0x100936e0], eax
mov edi, dword [0x100900c0]
call fcn.1000a0c0
mov edx, dword [0x1008fe74]
mov ecx, eax
call edx
mov esi, dword [0x100900c0]
mov dword [ebp - 0x228], eax
call fcn.1000a5c0
test eax, eax
jg 0x1000fe67
xor ebx, ebx
mov dword [ebp - 0x224], ebx
lea ecx, [ecx]
mov edi, dword [0x100900b4]
call fcn.1000a920
mov esi, eax
mov dword [ebp - 0x238], esi
test esi, esi
je 0x100101dc
call fcn.1000a500
and eax, 0x80000001
jns 0x1000ffec
dec eax
or eax, 0xfffffffe
inc eax
sete bl
call fcn.100094b0
and eax, 0x80000001
jns 0x10010000
dec eax
or eax, 0xfffffffe
inc eax
sete al
cmp bl, al
je 0x100101dc
mov ecx, esi
call fcn.1000a670
fcomp dword [0x1007bcf8]
fnstsw ax
test ah, 0x41
jne 0x100101dc
call fcn.1000a5c0
mov dword [ebp - 0x22c], eax
fild dword [ebp - 0x22c]
fcomp dword [0x1007bcf8]
fnstsw ax
test ah, 0x41
jne 0x100101dc
mov ecx, esi
call fcn.1000a670
fcomp dword [0x1007bcf8]
fnstsw ax
test ah, 0x41
jne 0x100101dc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x1009369c], eax
ja 0x100101dc
mov ebx, dword [ebp - 0x224]
mov edi, dword [0x100900b4]
call fcn.1000a920
mov ebx, eax
mov dword [ebp - 0x230], ebx
test ebx, ebx
je 0x100101dc
mov esi, ebx
call fcn.1000a5c0
test eax, eax
jle 0x100101dc
call fcn.1000a820
test al, al
je 0x100101dc
mov eax, ebx
call fcn.1000a800
cmp al, 1
je 0x100101dc
fldz
push ecx
mov edi, ebx
fstp dword [esp]
call fcn.1000a700
mov dword [ebp - 0x22c], 2
call fcn.1000a010
mov edi, eax
mov eax, 5
lea esi, [ebp - 0x48]
call fcn.10009e40
mov esi, ebx
call fcn.1000a500
and eax, 0x80000001
jns 0x100100f9
dec eax
or eax, 0xfffffffe
inc eax
jne 0x10010105
mov dword [ebp - 0x22c], 1
lea ecx, [ebp - 0x220]
call dword [0x1008f340]
mov edi, dword [0x100900c0]
call fcn.1000a010
mov edi, eax
mov eax, 5
lea esi, [ebp - 0x1c]
call fcn.10009e40
push eax
lea ecx, [ebp - 0x220]
call dword [0x1008d500]
mov edi, ebx
call fcn.1000a010
mov edi, eax
mov eax, 5
lea esi, [ebp - 0x2c]
call fcn.10009e40
push eax
lea ecx, [ebp - 0x220]
call dword [0x1008f3e0]
mov esi, dword [ebp - 0x238]
mov ecx, esi
call fcn.1000a670
fcomp qword [0x1007bd50]
fnstsw ax
test ah, 0x41
jne 0x100101d0
call fcn.1000a5c0
cmp eax, 0x19
jle 0x100101d0
mov ecx, esi
call fcn.1000a670
fcomp qword [0x1007bd50]
fnstsw ax
test ah, 0x41
jne 0x100101d0
mov ecx, dword [ebp - 0x22c]
mov esi, dword [ebp - 0x228]
push ecx
mov ebx, 0x100936d8
lea edi, [ebp - 0x48]
call fcn.10009b10
mov ecx, esi
mov edx, dword [ecx]
mov eax, dword [edx + 0x10c]
lea edx, [ebp - 0x1a4]
push edx
lea edx, [ebp - 0x18c]
push edx
mov edx, dword [ebp - 0x230]
push 0x22
push edx
call eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
inc eax
mov dword [0x1009369c], eax
mov ebx, dword [ebp - 0x224]
inc ebx
mov dword [ebp - 0x224], ebx
cmp ebx, 0x10
jle 0x1000ffc0
jmp 0x1000fe67
mov edx, dword [0x1008fed4]
mov eax, dword [eax + edx]
mov ecx, dword [0x1008f3f8]
mov dword [0x1008ff94], eax
mov eax, dword [ecx]
mov edx, dword [eax]
push str.GameHack.Weapon.QuickChange
call edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x10010243
mov edi, ebx
call fcn.1000a170
cmp eax, esi
jbe 0x10010243
push eax
call fcn.10009a80
xor ecx, ecx
cmp ecx, eax
sbb edx, edx
and edx, eax
mov dword [0x100931d0], edx
jmp 0x10010249
mov dword [0x100931d0], esi
mov ecx, dword [0x1008f3f8]
mov eax, dword [ecx]
mov edx, dword [eax]
push str.GameHack.Weapon.NoRecoil
call edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 1
jne 0x100102b7
cmp byte [0x1008dd08], 0
jne 0x10010280
mov edx, dword [0x1008d4c0]
mov ecx, 0xff
call fcn.1000ed70
mov edx, dword [0x1008d4c4]
mov ecx, 0xff
call fcn.1000ed70
mov edx, dword [0x1008d4c8]
mov ecx, 0xff
call fcn.1000ed70
mov edx, dword [0x1008d4cc]
mov ecx, 0xff
call fcn.1000ed70
mov byte [0x1008dd08], 1
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Weapon.NoRecoil
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
jne 0x10010324
cmp byte [0x1008dd08], 1
jne 0x100102ed
mov edx, dword [0x1008d4c0]
mov ecx, 0xfc
call fcn.1000ed70
mov edx, dword [0x1008d4c4]
mov ecx, 0xfc
call fcn.1000ed70
mov edx, dword [0x1008d4c8]
mov ecx, 0xfc
call fcn.1000ed70
mov edx, dword [0x1008d4cc]
mov ecx, 0xfc
call fcn.1000ed70
mov byte [0x1008dd08], 0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Weapon.Accuracy
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x100103a5
mov edi, ebx
call fcn.1000a010
cmp eax, esi
jbe 0x100103a5
add eax, 0x74
cmp eax, esi
jbe 0x100103a5
mov esi, dword [0x100936d4]
xor edi, edi
cmp esi, edi
jne 0x10010368
mov esi, dword [eax + 8]
mov dword [0x100936d4], esi
mov edx, dword [0x100936d0]
cmp edx, edi
jne 0x1001037b
mov edx, dword [eax + 0xc]
mov dword [0x100936d0], edx
mov ecx, dword [0x100936a0]
cmp ecx, edi
jne 0x1001038e
mov ecx, dword [eax + 0x10]
mov dword [0x100936a0], ecx
mov dword [eax], edi
mov dword [eax + 4], edi
mov dword [eax + 8], esi
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x34], edi
mov dword [eax + 0x38], edi
mov dword [eax + 0x3c], edi
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.Plant
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x100103e1
call fcn.100094b0
and eax, 0x80000001
jns 0x100103d3
dec eax
or eax, 0xfffffffe
inc eax
je 0x100103e1
call fcn.10009400
mov edi, eax
call fcn.100092a0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.Defuse
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x10010434
call fcn.100094b0
and eax, 0x80000001
jns 0x1001040f
dec eax
or eax, 0xfffffffe
inc eax
je 0x10010434
cmp byte [0x1008e4ba], 0
je 0x10010428
call fcn.10009400
mov edi, eax
call fcn.100092a0
jmp 0x10010434
call fcn.10009400
mov edi, eax
call fcn.10009350
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.SpamChat
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x10010480
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x100936a4], eax
ja 0x10010480
push 0x1fd
xor edi, edi
mov esi, str.Chess_System__Anime_Lovers
call fcn.100097b0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
add eax, 0xbb8
mov dword [0x100936a4], eax
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.AutoHeadshot
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x10010543
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Assist.Mode
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x14]
call eax
mov edi, ebx
call fcn.10009f60
mov edi, eax
call fcn.10009e70
test eax, eax
je 0x10010539
mov esi, dword [str._addd]
mov edi, eax
call fcn.1000a010
mov edi, eax
call fcn.10009d50
shl esi, 6
fld dword [eax + esi + 0x30]
fstp dword [ebp - 0x230]
fld dword [eax + esi + 0x34]
fstp dword [ebp - 0x238]
fld dword [eax + esi + 0x38]
mov eax, dword [0x1008ff90]
fstp dword [ebp - 0x228]
mov byte [eax + 0xc], 1
fld dword [ebp - 0x230]
fstp dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
fld dword [ebp - 0x238]
mov dword [eax], ecx
fstp dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
fld dword [ebp - 0x228]
mov dword [eax + 4], edx
fstp dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov dword [eax + 8], ecx
jmp 0x10010543
mov edx, dword [0x1008ff90]
mov byte [edx + 0xc], 0
mov ecx, dword [0x1008f3f8]
mov eax, dword [ecx]
mov edx, dword [eax]
push str.GameHack.Weapon.AutoFillSubAmmo
call edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x100105c6
mov edi, ebx
call fcn.1000a0c0
mov edx, dword [0x1008fe78]
test edx, edx
je 0x1001057d
mov ecx, dword [0x1008fed4]
add ecx, eax
call edx
jmp 0x10010586
mov edx, dword [0x1008fed4]
mov eax, dword [eax + edx]
cmp eax, 6
ja case.default.0x10010592
movzx eax, byte [eax + 0x100123d8]
jmp dword [eax*4 + 0x100123d0]
cmp dword [ebp - 0x234], 0
je case.0x10010592.0
mov edi, ebx
call fcn.1000a220
cmp eax, 1
jne 0x100105c6
mov edi, ebx
call fcn.1000a0c0
mov edx, dword [0x1008fe74]
mov ecx, eax
call edx
mov esi, eax
call fcn.10009bd0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Weapon.AutoFire
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x1001060d
mov edi, ebx
call fcn.10009f60
mov edi, eax
call fcn.10009e70
test eax, eax
je 0x1001060d
mov edi, ebx
call fcn.1000a0c0
mov edx, dword [0x1008fe74]
mov ecx, eax
call edx
mov esi, eax
call fcn.10009c80
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Weapon.AutoShot
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x1001069f
call fcn.100094b0
mov edx, dword [0x1008e418]
mov ecx, dword [0x100900ac]
push eax
call edx
test al, al
jne 0x1001069f
call fcn.100094b0
mov edi, dword [0x100900b4]
mov ebx, eax
call fcn.1000a920
mov esi, eax
mov edi, esi
call fcn.10009f60
test eax, eax
je 0x1001068f
call fcn.10009f60
mov edi, eax
call fcn.10009e70
test eax, eax
je 0x1001068f
mov edi, esi
call fcn.10009f60
mov edi, eax
call fcn.10009e70
test eax, eax
je 0x1001068f
push 0
push 0
push 0
push 0
push 2
jmp 0x10010699
push 0
push 0
push 0
push 0
push 4
call dword [sym.imp.USER32.dll_mouse_event]
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Weapon.AutoShot_
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x100106ec
mov esi, dword [ebp - 0x22c]
mov edi, esi
call fcn.10009f60
mov edi, eax
call fcn.10009e70
test eax, eax
je 0x100106ec
mov edi, esi
call fcn.1000a0c0
mov edx, dword [0x1008fe74]
mov ecx, eax
call edx
mov esi, eax
call fcn.10009c80
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.BugUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x10010741
mov ecx, dword [0x100934e0]
mov edx, dword [0x1008e278]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x228]
push eax
push 0x40
lea esi, [edx + ecx + 2]
push 1
push esi
call edi
mov cl, byte [0x10074388]
mov eax, dword [ebp - 0x228]
lea edx, [ebp - 0x228]
jmp 0x10010794
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.BugUp
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
jne 0x1001079d
mov ecx, dword [0x100934e0]
mov edx, dword [0x1008e278]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x224]
push eax
push 0x40
lea esi, [edx + ecx + 2]
push 1
push esi
call edi
mov cl, byte [0x10074384]
mov eax, dword [ebp - 0x224]
lea edx, [ebp - 0x224]
push edx
push eax
push 1
push esi
mov byte [esi], cl
call edi
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push str.GameHack.Player.BugDown
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
mov ebx, dword [sym.imp.MSVCR100.dll_memmove]
test eax, eax
jne 0x1001085d
push str.NxCharacter.2.8.1.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea ecx, [ebp - 0x224]
push ecx
push 0x40
lea edi, [eax + 0x1643f]
push 1
push edi
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x224], 0
call esi
push 1
push 0x1007b7fc
push edi
call ebx
mov eax, dword [ebp - 0x224]
add esp, 0xc
lea edx, [ebp - 0x224]
push edx
push eax
push 1
push edi
call esi
mov edi, dword [ebp - 0x230]
lea ecx, [ebp - 0x224]
push ecx
push 0x40
push 1
add edi, 0x191cf
push edi
mov dword [ebp - 0x224], 0
call esi
push 1
push 0x1007b7fc
push edi
call ebx
mov eax, dword [ebp - 0x224]
add esp, 0xc
lea edx, [ebp - 0x224]
push edx
push eax
push 1
push edi
call esi
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.BugDown
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 1
jne 0x10010912
push str.NxCharacter.2.8.1.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea ecx, [ebp - 0x224]
push ecx
push 0x40
lea edi, [eax + 0x1643f]
push 1
push edi
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x224], 0
call esi
push 1
push 0x1007b800
push edi
call ebx
mov eax, dword [ebp - 0x224]
add esp, 0xc
lea edx, [ebp - 0x224]
push edx
push eax
push 1
push edi
call esi
mov edi, dword [ebp - 0x230]
lea ecx, [ebp - 0x224]
push ecx
push 0x40
push 1
add edi, 0x191cf
push edi
mov dword [ebp - 0x224], 0
call esi
push 1
push 0x1007b800
push edi
call ebx
mov eax, dword [ebp - 0x224]
add esp, 0xc
lea edx, [ebp - 0x224]
push edx
push eax
push 1
push edi
call esi
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.BugHorizontal
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x1001095d
mov edi, dword [0x1008e278]
add edi, dword [0x100934e0]
lea eax, [ebp - 0x228]
push eax
push 0x40
push 1
push edi
call esi
mov cl, byte [0x1007b804]
mov eax, dword [ebp - 0x228]
lea edx, [ebp - 0x228]
jmp 0x100109a6
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.BugHorizontal
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
jne 0x100109af
mov edi, dword [0x1008e278]
add edi, dword [0x100934e0]
lea eax, [ebp - 0x224]
push eax
push 0x40
push 1
push edi
call esi
mov cl, byte [0x1007b808]
mov eax, dword [ebp - 0x224]
lea edx, [ebp - 0x224]
push edx
push eax
push 1
push edi
mov byte [edi], cl
call esi
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.BugUnyu
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 1
jne 0x100109f4
mov edi, dword [0x1008e290]
lea ecx, [ebp - 0x228]
push ecx
push 0x40
push eax
push edi
call esi
mov dl, byte [0x1007b80c]
mov ecx, dword [ebp - 0x228]
lea eax, [ebp - 0x228]
jmp 0x10010a37
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.BugUnyu
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
jne 0x10010a40
mov edi, dword [0x1008e290]
lea ecx, [ebp - 0x224]
push ecx
push 0x40
push 1
push edi
call esi
mov dl, byte [0x1007b810]
mov ecx, dword [ebp - 0x224]
lea eax, [ebp - 0x224]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.BugUnyu
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 2
jne 0x10010a86
mov edi, dword [0x1008e290]
lea ecx, [ebp - 0x228]
push ecx
push 0x40
push 1
push edi
call esi
mov dl, byte [0x1007b814]
mov ecx, dword [ebp - 0x228]
lea eax, [ebp - 0x228]
jmp 0x10010ac9
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.BugUnyu
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
jne 0x10010ad2
mov edi, dword [0x1008e290]
lea ecx, [ebp - 0x224]
push ecx
push 0x40
push 1
push edi
call esi
mov dl, byte [0x1007b810]
mov ecx, dword [ebp - 0x224]
lea eax, [ebp - 0x224]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.BugUnyu
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 3
jne 0x10010b18
mov edi, dword [0x1008e290]
lea ecx, [ebp - 0x228]
push ecx
push 0x40
push 1
push edi
call esi
mov dl, byte [0x1007b818]
mov ecx, dword [ebp - 0x228]
lea eax, [ebp - 0x228]
jmp 0x10010b5b
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.BugUnyu
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
jne 0x10010b64
mov edi, dword [0x1008e290]
lea ecx, [ebp - 0x224]
push ecx
push 0x40
push 1
push edi
call esi
mov dl, byte [0x1007b810]
mov ecx, dword [ebp - 0x224]
lea eax, [ebp - 0x224]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.BugUnyu
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 4
jne 0x10010baa
mov edi, dword [0x1008e290]
lea ecx, [ebp - 0x228]
push ecx
push 0x40
push 1
push edi
call esi
mov dl, byte [0x1007b81c]
mov ecx, dword [ebp - 0x228]
lea eax, [ebp - 0x228]
jmp 0x10010bed
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.BugUnyu
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
jne 0x10010bf6
mov edi, dword [0x1008e290]
lea ecx, [ebp - 0x224]
push ecx
push 0x40
push 1
push edi
call esi
mov dl, byte [0x1007b810]
mov ecx, dword [ebp - 0x224]
lea eax, [ebp - 0x224]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.BugUnyu
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 5
jne 0x10010c3c
mov edi, dword [0x1008e290]
lea ecx, [ebp - 0x228]
push ecx
push 0x40
push 1
push edi
call esi
mov dl, byte [0x1007b820]
mov ecx, dword [ebp - 0x228]
lea eax, [ebp - 0x228]
jmp 0x10010c7f
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.BugUnyu
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
jne 0x10010c88
mov edi, dword [0x1008e290]
lea ecx, [ebp - 0x224]
push ecx
push 0x40
push 1
push edi
call esi
mov dl, byte [0x1007b810]
mov ecx, dword [ebp - 0x224]
lea eax, [ebp - 0x224]
push eax
push ecx
push 1
push edi
mov byte [edi], dl
call esi
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Brutal.AutoKiller
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x10010efa
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Assist.Mode
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x14]
call eax
xor ebx, ebx
mov dword [ebp - 0x224], ebx
jmp 0x10010cd0
mov edi, dword [0x100900b4]
call fcn.1000a920
mov ebx, eax
test ebx, ebx
je 0x10010ee4
mov esi, ebx
call fcn.1000a5c0
test eax, eax
jle 0x10010ee4
call fcn.1000a500
and eax, 0x80000001
jns 0x10010d05
dec eax
or eax, 0xfffffffe
inc eax
sete byte [ebp - 0x239]
call fcn.100094b0
and eax, 0x80000001
jns 0x10010d1d
dec eax
or eax, 0xfffffffe
inc eax
sete al
cmp byte [ebp - 0x239], al
je 0x10010ee4
mov esi, ebx
call fcn.1000a500
mov esi, eax
call fcn.100094b0
cmp esi, eax
je 0x10010ee4
mov ecx, dword [str._addd]
push ecx
mov esi, ebx
call fcn.1000a500
push eax
call fcn.100094b0
push eax
call fcn.1000e220
add esp, 0xc
test al, al
je 0x10010ee4
mov esi, dword [str._addd]
mov edi, ebx
mov dword [ebp - 0x228], 2
call fcn.1000a010
mov edi, eax
call fcn.10009d50
shl esi, 6
fld dword [eax + esi + 0x30]
fstp dword [ebp - 0x230]
fld dword [eax + esi + 0x34]
fstp dword [ebp - 0x234]
fld dword [eax + esi + 0x38]
mov esi, ebx
fstp dword [ebp - 0x238]
fld dword [ebp - 0x230]
fstp dword [ebp - 0x1c]
fld dword [ebp - 0x238]
fstp dword [ebp - 0x14]
fld dword [ebp - 0x234]
fadd qword [0x1007bd00]
fstp dword [ebp - 0x18]
call fcn.1000a500
and eax, 0x80000001
jns 0x10010dda
dec eax
or eax, 0xfffffffe
inc eax
jne 0x10010de6
mov dword [ebp - 0x228], 1
mov esi, dword [ebp - 0x22c]
mov edi, esi
call fcn.1000a0c0
mov edx, dword [0x1008fe78]
test edx, edx
je 0x10010e09
mov ecx, dword [0x1008fed4]
add ecx, eax
call edx
jmp 0x10010e12
mov edx, dword [0x1008fed4]
mov eax, dword [eax + edx]
mov edi, esi
cmp eax, 2
jne 0x10010e58
mov ecx, dword [ebp - 0x1c]
mov eax, dword [0x1008ff90]
mov dword [eax], ecx
mov edx, dword [ebp - 0x18]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x14]
mov dword [eax + 8], ecx
mov byte [eax + 0xc], 1
call fcn.1000a0c0
mov edx, dword [0x1008fe74]
mov ecx, eax
call edx
mov esi, eax
call fcn.10009c80
mov edx, dword [0x1008ff90]
mov byte [edx + 0xc], 0
jmp 0x10010ee4
call fcn.1000a010
mov edi, eax
call fcn.10009d50
fld dword [eax + 0x170]
fstp dword [ebp - 0x234]
mov edi, esi
fld dword [eax + 0x174]
fstp dword [ebp - 0x230]
fld dword [eax + 0x178]
fstp dword [ebp - 0x238]
fld dword [ebp - 0x234]
fstp dword [ebp - 0x48]
fld dword [ebp - 0x230]
fstp dword [ebp - 0x44]
fld dword [ebp - 0x238]
fstp dword [ebp - 0x40]
call fcn.1000a0c0
mov ecx, dword [ebp - 0x228]
mov edx, dword [0x1008fe74]
push ecx
mov ecx, eax
call edx
lea ebx, [ebp - 0x1c]
lea edi, [ebp - 0x48]
mov esi, eax
call fcn.10009b10
mov edi, dword [ebp - 0x22c]
call fcn.1000a0c0
mov edx, dword [0x1008fe74]
mov ecx, eax
call edx
mov esi, eax
call fcn.10009c80
mov ebx, dword [ebp - 0x224]
inc ebx
mov dword [ebp - 0x224], ebx
cmp ebx, 0xf
jle 0x10010cd0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.Teleport
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x1001136d
cmp byte [0x1008e4e5], 0
je 0x100112e8
cmp byte [0x1008ffdd], 0
jne 0x1001136d
mov byte [0x1008ffdd], 1
mov dword [ebp - 0x224], 0
jmp 0x10010f50
mov edi, dword [0x100900b4]
mov ecx, 0x6e
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x1007ae5c]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0x94], dl
jns 0x10010f80
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x2a
jl 0x10010f60
mov byte [ebp - 0x6a], 0
mov dword [ebp - 4], 1
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [ebp - 0x94]
push edx
call eax
push 0x2b
lea ecx, [ebp - 0x94]
push 0
push ecx
mov esi, eax
mov dword [ebp - 4], 0xffffffff
call sub.MSVCR100.dll_memset
mov edx, dword [ebp - 0x224]
add esp, 0xc
push edx
mov ecx, edi
call esi
mov esi, eax
test esi, esi
je 0x10011081
call fcn.1000a5c0
test eax, eax
jle 0x10011081
call fcn.1000a500
and eax, 0x80000001
jns 0x10010ff4
dec eax
or eax, 0xfffffffe
inc eax
sete bl
call fcn.100094b0
and eax, 0x80000001
jns 0x10011008
dec eax
or eax, 0xfffffffe
inc eax
sete al
cmp bl, al
je 0x10011081
call fcn.1000a500
mov edi, eax
call fcn.100094b0
cmp edi, eax
je 0x10011081
mov edi, esi
call fcn.1000a010
mov edi, eax
call fcn.10009d50
fld dword [eax + 0x30]
mov ecx, dword [0x100900a0]
fstp dword [ebp - 0x234]
fld dword [eax + 0x34]
push str.GameCharaBase.Function.Cmd_Respawn
fstp dword [ebp - 0x230]
fld dword [eax + 0x38]
fstp dword [ebp - 0x238]
fld dword [ebp - 0x234]
fstp dword [ebp - 0x48]
fld dword [ebp - 0x230]
fstp dword [ebp - 0x44]
fld dword [ebp - 0x238]
fstp dword [ebp - 0x40]
mov eax, dword [ecx]
mov edx, dword [eax + 0x20]
call edx
lea ecx, [ebp - 0x48]
push ecx
mov ecx, dword [ebp - 0x22c]
call eax
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp eax, 0xf
jle 0x10010f50
mov dword [ebp - 0x224], 0
mov edi, dword [0x100900b4]
mov ecx, 0x6e
xor eax, eax
mov edi, edi
mov dl, byte [eax + 0x1007ae5c]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0x114], dl
jns 0x100110d0
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x2a
jl 0x100110b0
mov byte [ebp - 0xea], 0
mov dword [ebp - 4], 2
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [ebp - 0x114]
push edx
call eax
push 0x2b
lea ecx, [ebp - 0x114]
push 0
push ecx
mov esi, eax
mov dword [ebp - 4], 0xffffffff
call sub.MSVCR100.dll_memset
mov edx, dword [ebp - 0x224]
add esp, 0xc
push edx
mov ecx, edi
call esi
mov esi, eax
test esi, esi
je 0x10011357
call fcn.1000a5c0
test eax, eax
jle 0x10011357
call fcn.1000a500
and eax, 0x80000001
jns 0x10011147
dec eax
or eax, 0xfffffffe
inc eax
mov edi, dword [0x100900ac]
sete bl
mov ecx, 0xc6
xor eax, eax
mov dl, byte [eax + 0x1007aa44]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0x3c], dl
jns 0x10011174
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x1d
jl 0x10011157
mov byte [ebp - 0x1f], 0
mov dword [ebp - 4], 3
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [ebp - 0x3c]
push edx
call eax
mov eax, dword [eax + edi]
xor ecx, ecx
and eax, 0x80000001
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], ecx
mov word [ebp - 0x20], cx
jns 0x100111c7
dec eax
or eax, 0xfffffffe
inc eax
sete al
cmp bl, al
je 0x10011357
mov edi, dword [0x100900ac]
mov ecx, 0xc6
xor eax, eax
nop
mov dl, byte [eax + 0x1007aa44]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0x68], dl
jns 0x100111fd
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x1d
jl 0x100111e0
mov byte [ebp - 0x4b], 0
mov dword [ebp - 4], 4
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [ebp - 0x68]
push edx
call eax
mov edi, dword [eax + edi]
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
mov word [ebp - 0x4c], ax
call fcn.1000a500
cmp eax, edi
je 0x10011357
push 0
call fcn.1000a500
push eax
call fcn.100094b0
push eax
call fcn.1000e220
add esp, 0xc
test al, al
je 0x10011357
mov edi, esi
call fcn.1000a010
mov edi, eax
call fcn.10009d50
fld dword [eax + 0x1f0]
fstp dword [ebp - 0x234]
fld dword [eax + 0x1f4]
fstp dword [ebp - 0x238]
fld dword [eax + 0x1f8]
fstp dword [ebp - 0x230]
fld dword [ebp - 0x234]
fstp dword [ebp - 0x1c]
fld dword [ebp - 0x230]
fstp dword [ebp - 0x14]
fld dword [ebp - 0x238]
fadd qword [0x1007bd00]
fstp dword [ebp - 0x18]
call fcn.1000a500
mov edi, dword [ebp - 0x22c]
call fcn.1000a0c0
mov edx, dword [0x1008fe78]
test edx, edx
je 0x100112f1
mov ecx, dword [0x1008fed4]
add ecx, eax
call edx
jmp 0x100112fa
mov byte [0x1008ffdd], 0
jmp 0x1001136d
mov edx, dword [0x1008fed4]
mov eax, dword [eax + edx]
cmp eax, 2
jne 0x10011357
mov ecx, dword [0x1008f3f8]
mov eax, dword [ecx]
mov edx, dword [eax]
push str.GameHack.Player.DemageTeleport
call edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 1
jne 0x10011357
mov eax, dword [0x1008ff90]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x14]
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov byte [eax + 0xc], 1
call fcn.1000a0c0
mov edx, dword [0x1008fe74]
mov ecx, eax
call edx
mov esi, eax
call fcn.10009c80
mov edx, dword [0x1008ff90]
mov byte [edx + 0xc], 0
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp eax, 0xf
jle 0x100110a1
mov ecx, dword [0x1008f3f8]
mov eax, dword [ecx]
mov edx, dword [eax]
push str.GameHack.Player.DemageTeleport
call edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x10011954
cmp byte [0x1008e4e5], 0
je 0x100118ed
cmp byte [0x1008ffdd], 0
jne 0x10011954
mov byte [0x1008ffdd], 1
mov dword [ebp - 0x224], 0
lea esp, [esp]
mov edi, dword [0x100900b4]
mov ecx, 0x6e
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x1007ae5c]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0x140], dl
jns 0x100113f0
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x2a
jl 0x100113d0
mov byte [ebp - 0x116], 0
mov dword [ebp - 4], 5
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [ebp - 0x140]
push edx
call eax
push 0x2b
lea ecx, [ebp - 0x140]
push 0
push ecx
mov esi, eax
mov dword [ebp - 4], 0xffffffff
call sub.MSVCR100.dll_memset
mov edx, dword [ebp - 0x224]
add esp, 0xc
push edx
mov ecx, edi
call esi
mov esi, eax
test esi, esi
je 0x100115cf
call fcn.1000a5c0
test eax, eax
jle 0x100115cf
call fcn.1000a500
and eax, 0x80000001
jns 0x10011467
dec eax
or eax, 0xfffffffe
inc eax
mov edi, dword [0x100900ac]
sete bl
mov ecx, 0xc6
xor eax, eax
mov dl, byte [eax + 0x1007aa44]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0x68], dl
jns 0x10011494
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x1d
jl 0x10011477
mov byte [ebp - 0x4b], 0
mov dword [ebp - 4], 6
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [ebp - 0x68]
push edx
call eax
mov eax, dword [eax + edi]
xor ecx, ecx
and eax, 0x80000001
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x50], ecx
mov word [ebp - 0x4c], cx
jns 0x100114e0
dec eax
or eax, 0xfffffffe
inc eax
sete al
cmp bl, al
je 0x100115cf
mov edi, dword [0x100900ac]
mov ecx, 0xc6
xor eax, eax
jmp 0x10011500
mov dl, byte [eax + 0x1007aa44]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0x3c], dl
jns 0x1001151d
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x1d
jl 0x10011500
mov byte [ebp - 0x1f], 0
mov dword [ebp - 4], 7
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [ebp - 0x3c]
push edx
call eax
mov edi, dword [eax + edi]
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
mov word [ebp - 0x20], ax
call fcn.1000a500
cmp eax, edi
je 0x100115cf
mov edi, esi
call fcn.1000a010
mov edi, eax
call fcn.10009d50
fld dword [eax + 0x30]
mov ecx, dword [0x100900a0]
fstp dword [ebp - 0x234]
fld dword [eax + 0x34]
push str.GameCharaBase.Function.Cmd_Respawn
fstp dword [ebp - 0x230]
fld dword [eax + 0x38]
fstp dword [ebp - 0x238]
fld dword [ebp - 0x234]
fstp dword [ebp - 0x48]
fld dword [ebp - 0x230]
fstp dword [ebp - 0x44]
fld dword [ebp - 0x238]
fstp dword [ebp - 0x40]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
call eax
lea ecx, [ebp - 0x48]
push ecx
mov ecx, dword [ebp - 0x22c]
call eax
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp eax, 0xf
jle 0x100113c0
mov dword [ebp - 0x224], 0
nop
mov edi, dword [0x100900b4]
mov ecx, 0x6e
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x1007ae5c]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0xc4], dl
jns 0x10011620
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x2a
jl 0x10011600
mov byte [ebp - 0x9a], 0
mov dword [ebp - 4], 8
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [ebp - 0xc4]
push edx
call eax
push 0x2b
lea ecx, [ebp - 0xc4]
push 0
push ecx
mov esi, eax
mov dword [ebp - 4], 0xffffffff
call sub.MSVCR100.dll_memset
mov edx, dword [ebp - 0x224]
add esp, 0xc
push edx
mov ecx, edi
call esi
mov esi, eax
test esi, esi
je 0x1001193e
call fcn.1000a5c0
test eax, eax
jle 0x1001193e
call fcn.1000a500
and eax, 0x80000001
jns 0x10011697
dec eax
or eax, 0xfffffffe
inc eax
mov edi, dword [0x100900ac]
sete bl
mov ecx, 0xc6
xor eax, eax
mov dl, byte [eax + 0x1007aa44]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0xe8], dl
jns 0x100116c7
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x1d
jl 0x100116a7
mov byte [ebp - 0xcb], 0
mov dword [ebp - 4], 9
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [ebp - 0xe8]
push edx
call eax
mov eax, dword [eax + edi]
xor ecx, ecx
and eax, 0x80000001
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0xe8], ecx
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0xe0], ecx
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0xd4], ecx
mov dword [ebp - 0xd0], ecx
mov word [ebp - 0xcc], cx
jns 0x10011738
dec eax
or eax, 0xfffffffe
inc eax
sete al
cmp bl, al
je 0x1001193e
mov edi, dword [0x100900ac]
mov ecx, 0xc6
xor eax, eax
mov dl, byte [eax + 0x1007aa44]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0x108], dl
jns 0x10011770
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x1d
jl 0x10011750
mov byte [ebp - 0xeb], 0
mov dword [ebp - 4], 0xa
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [ebp - 0x108]
push edx
call eax
mov edi, dword [eax + edi]
xor eax, eax
or ebx, 0xffffffff
mov dword [ebp - 4], ebx
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf0], eax
mov word [ebp - 0xec], ax
call fcn.1000a500
cmp eax, edi
je 0x1001193e
mov edi, dword [0x100900ac]
mov ecx, 0xc6
xor eax, eax
mov edi, edi
mov dl, byte [eax + 0x1007aa44]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0x88], dl
jns 0x10011810
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x1d
jl 0x100117f0
mov byte [ebp - 0x6b], 0
mov dword [ebp - 4], 0xb
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [ebp - 0x88]
push edx
call eax
mov edi, dword [eax + edi]
xor eax, eax
mov dword [ebp - 4], ebx
push eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
mov word [ebp - 0x6c], ax
call fcn.1000a500
push eax
push edi
call fcn.1000e220
add esp, 0xc
test al, al
je 0x1001193e
mov edi, esi
call fcn.1000a010
mov edi, eax
call fcn.10009d50
fld dword [eax + 0x1f0]
fstp dword [ebp - 0x234]
fld dword [eax + 0x1f4]
fstp dword [ebp - 0x238]
fld dword [eax + 0x1f8]
fstp dword [ebp - 0x230]
fld dword [ebp - 0x234]
fstp dword [ebp - 0x1c]
fld dword [ebp - 0x230]
fstp dword [ebp - 0x14]
fld dword [ebp - 0x238]
fadd qword [0x1007bd00]
fstp dword [ebp - 0x18]
call fcn.1000a500
mov edi, dword [ebp - 0x22c]
call fcn.1000a0c0
mov edx, dword [0x1008fe78]
test edx, edx
je 0x100118f6
mov ecx, dword [0x1008fed4]
add ecx, eax
call edx
jmp 0x100118ff
mov byte [0x1008ffdd], 0
jmp 0x10011954
mov edx, dword [0x1008fed4]
mov eax, dword [eax + edx]
cmp eax, 2
jne 0x1001193e
mov eax, dword [0x1008ff90]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x14]
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov byte [eax + 0xc], 1
call fcn.1000a0c0
mov edx, dword [0x1008fe74]
mov ecx, eax
call edx
mov esi, eax
call fcn.10009c80
mov edx, dword [0x1008ff90]
mov byte [edx + 0xc], 0
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp eax, 0xf
jle 0x100115f0
mov ecx, dword [0x1008f3f8]
mov eax, dword [ecx]
mov edx, dword [eax]
push str.GameHack.Weapon.SkipReload
call edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x10011a7f
mov ecx, 0xbc
xor eax, eax
lea esp, [esp]
mov dl, byte [eax + 0x1007acf4]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0xc8], dl
jns 0x100119a0
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x30
jl 0x10011980
mov byte [ebp - 0x98], 0
mov dword [ebp - 4], 0xc
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [ebp - 0xc8]
push edx
call eax
push 0x31
lea ecx, [ebp - 0xc8]
push 0
push ecx
mov esi, eax
mov dword [ebp - 4], 0xffffffff
call sub.MSVCR100.dll_memset
mov ebx, dword [ebp - 0x22c]
add esp, 0xc
mov ecx, ebx
call esi
test eax, eax
je 0x10011a85
mov edx, dword [0x1008fe74]
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x10011a85
mov ecx, 0x4a
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x1007ab6c]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0x38], dl
jns 0x10011a2d
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x16
jl 0x10011a10
mov byte [ebp - 0x22], 0
mov dword [ebp - 4], 0xd
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [ebp - 0x38]
push edx
call eax
mov eax, dword [eax + esi]
xor ecx, ecx
mov dword [ebp - 4], 0xffffffff
cmp ecx, eax
sbb edx, edx
and edx, eax
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], ecx
mov word [ebp - 0x24], cx
mov byte [ebp - 0x22], cl
mov dword [0x100931d4], edx
jmp 0x10011a8f
mov ebx, dword [ebp - 0x22c]
mov dword [0x100931d4], 0
mov ecx, dword [0x1008f3f8]
mov eax, dword [ecx]
mov edx, dword [eax]
push str.GameHack.Weapon.FireSpeed
call edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x10011b47
mov ecx, 0xb1
xor eax, eax
mov dl, byte [eax + 0x1007b824]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0x38], dl
jns 0x10011ad4
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x17
jl 0x10011ab7
mov byte [ebp - 0x21], 0
mov dword [ebp - 4], 0xe
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [ebp - 0x38]
push edx
call eax
mov ecx, dword [ebp - 0x22c]
mov ebx, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push 4
push ecx
mov edi, eax
call ebx
test eax, eax
jne 0x10011b26
mov edx, dword [ebp - 0x22c]
mov esi, dword [edx]
push 4
add esi, edi
push esi
call ebx
test eax, eax
jne 0x10011b26
cmp dword [esi], eax
je 0x10011b26
mov dword [esi], eax
mov ebx, dword [ebp - 0x22c]
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
mov ecx, dword [0x1008f3f8]
mov eax, dword [ecx]
mov edx, dword [eax]
push str.GameHack.Player.AlwaysInvicible
call edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x10011b93
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x100936a8], eax
ja 0x10011b93
fld dword [0x1007bd48]
push ecx
mov edi, ebx
fstp dword [esp]
call fcn.1000a700
call dword [sym.imp.KERNEL32.dll_GetTickCount]
add eax, 0x7d0
mov dword [0x100936a8], eax
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.Invicible
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x10011bfb
cmp byte [0x1008dd09], 0
jne 0x10011bfb
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea ecx, [ebp - 0x234]
push ecx
push 0x40
push 4
push 0xbfa258
call esi
mov eax, dword [0x1007b83c]
mov edx, 0xbfa258
lea ecx, [ebp - 0x230]
push ecx
mov dword [edx], eax
mov edx, dword [ebp - 0x234]
push edx
push 4
push 0xbfa258
call esi
mov byte [0x1008dd09], 1
mov ecx, dword [0x1008f3f8]
mov eax, dword [ecx]
mov edx, dword [eax]
push str.GameHack.Player.ResetWeapon
call edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x10011d19
cmp byte [0x1008e4d7], 0
je 0x10011ebf
cmp byte [0x1008ffcf], 0
jne 0x10011d19
mov ecx, dword [0x1008f3f8]
mov byte [0x1008ffcf], 1
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.ResetWeapon
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 1
jne 0x10011c77
mov esi, ebx
call fcn.1000a500
mov esi, eax
call fcn.10009550
mov ecx, dword [0x100900b4]
push eax
push ebx
call dword [0x1008f888]
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Player.ResetWeapon
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
cmp eax, 2
jne 0x10011d19
mov ecx, 0xbc
xor eax, eax
mov dl, byte [eax + 0x1007acf4]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0xc8], dl
jns 0x10011cc0
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x30
jl 0x10011ca0
mov byte [ebp - 0x98], 0
mov dword [ebp - 4], 0xf
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [ebp - 0xc8]
push edx
call eax
push 0x31
lea ecx, [ebp - 0xc8]
push 0
push ecx
mov esi, eax
mov dword [ebp - 4], 0xffffffff
call sub.MSVCR100.dll_memset
add esp, 0xc
mov ecx, ebx
call esi
mov edx, dword [0x1008fe74]
mov ecx, eax
call edx
mov esi, eax
call fcn.10009bd0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Weapon.AutoHS
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x10011ed4
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Assist.Mode
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x10]
call eax
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Assist.Mode
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x14]
call eax
mov ecx, 0x22
xor eax, eax
mov dl, byte [eax + 0x1007ac90]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0x148], dl
jns 0x10011d95
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x33
jl 0x10011d75
mov byte [ebp - 0x115], 0
mov dword [ebp - 4], 0x10
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [ebp - 0x148]
push edx
call eax
push 0x34
lea ecx, [ebp - 0x148]
push 0
push ecx
mov esi, eax
mov dword [ebp - 4], 0xffffffff
call sub.MSVCR100.dll_memset
add esp, 0xc
mov ecx, ebx
call esi
mov edi, eax
call fcn.10009e70
mov esi, eax
test esi, esi
je 0x10011ecb
mov ecx, 0x27
xor eax, eax
mov dl, byte [eax + str._IDOhDLNrPAV]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0xc8], dl
jns 0x10011e15
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x2e
jl 0x10011df5
mov byte [ebp - 0x9a], 0
mov dword [ebp - 4], 0x11
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [ebp - 0xc8]
push edx
call eax
push 0x2f
lea ecx, [ebp - 0xc8]
push 0
push ecx
mov edi, eax
mov dword [ebp - 4], 0xffffffff
call sub.MSVCR100.dll_memset
add esp, 0xc
mov ecx, esi
call edi
mov edi, eax
call fcn.10009d50
fld dword [eax + 0x1f0]
fstp dword [ebp - 0x234]
fld dword [eax + 0x1f4]
fstp dword [ebp - 0x230]
fld dword [eax + 0x1f8]
mov eax, dword [0x1008ff90]
fstp dword [ebp - 0x238]
mov byte [eax + 0xc], 1
fld dword [ebp - 0x234]
fstp dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
fld dword [ebp - 0x230]
mov dword [eax], edx
fstp dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
fld dword [ebp - 0x238]
mov dword [eax + 4], ecx
fstp dword [ebp - 0x14]
mov edx, dword [ebp - 0x14]
mov dword [eax + 8], edx
jmp 0x10011ed4
mov byte [0x1008ffcf], 0
jmp 0x10011d19
mov eax, dword [0x1008ff90]
mov byte [eax + 0xc], 0
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Weapon.AutoBody
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x10012083
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Assist.Mode
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x10]
call eax
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Assist.Mode
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x14]
call eax
mov ecx, 0x22
xor eax, eax
mov dl, byte [eax + 0x1007ac90]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0x148], dl
jns 0x10011f50
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x33
jl 0x10011f30
mov byte [ebp - 0x115], 0
mov dword [ebp - 4], 0x12
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [ebp - 0x148]
push edx
call eax
push 0x34
lea ecx, [ebp - 0x148]
push 0
push ecx
mov esi, eax
mov dword [ebp - 4], 0xffffffff
call sub.MSVCR100.dll_memset
add esp, 0xc
mov ecx, ebx
call esi
mov edi, eax
call fcn.10009e70
mov edi, eax
test edi, edi
je 0x1001207a
mov ecx, 0x27
xor eax, eax
mov dl, byte [eax + str._IDOhDLNrPAV]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0xc8], dl
jns 0x10011fd0
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x2e
jl 0x10011fb0
mov byte [ebp - 0x9a], 0
mov dword [ebp - 4], 0x13
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [ebp - 0xc8]
push edx
call eax
push 0x2f
lea ecx, [ebp - 0xc8]
push 0
push ecx
mov esi, eax
mov dword [ebp - 4], 0xffffffff
call sub.MSVCR100.dll_memset
add esp, 0xc
mov ecx, edi
call esi
mov edi, eax
call fcn.10009d50
fld dword [eax + 0x170]
fstp dword [ebp - 0x234]
fld dword [eax + 0x174]
fstp dword [ebp - 0x230]
fld dword [eax + 0x178]
mov eax, dword [0x1008ff90]
fstp dword [ebp - 0x238]
mov byte [eax + 0xc], 1
fld dword [ebp - 0x234]
fstp dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
fld dword [ebp - 0x230]
mov dword [eax], edx
fstp dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
fld dword [ebp - 0x238]
mov dword [eax + 4], ecx
fstp dword [ebp - 0x14]
mov edx, dword [ebp - 0x14]
mov dword [eax + 8], edx
jmp 0x10012083
mov eax, dword [0x1008ff90]
mov byte [eax + 0xc], 0
mov eax, dword [0x100900d8]
test eax, eax
je 0x100120d5
dec eax
cmp eax, 4
ja case.default.0x10012092
jmp dword [eax*4 + 0x100123e0]
mov dword [0x100894dc], 5
jmp case.default.0x10012092
mov dword [0x100894dc], 0xa
jmp case.default.0x10012092
mov dword [0x100894dc], 0x19
jmp case.default.0x10012092
mov dword [0x100894dc], 0x32
jmp case.default.0x10012092
mov dword [0x100894dc], 0x64
jmp case.default.0x10012092
mov dword [0x100894dc], 1
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Weapon.RapidFire
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x10012316
mov esi, dword [0x100900b8]
mov ecx, 0x56
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + 0x1007af44]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0x8c], dl
jns 0x10012130
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x22
jl 0x10012110
mov byte [ebp - 0x6a], 0
mov dword [ebp - 4], 0x14
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [ebp - 0x8c]
push edx
call eax
mov esi, dword [eax + esi]
xor eax, eax
mov dword [ebp - 4], 0xffffffff
push str._GetButtonState_i3InputMouse__QAEIXZ
push str.i3InputDx.dll
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
mov word [ebp - 0x6c], ax
mov byte [ebp - 0x6a], al
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, esi
call eax
cmp eax, 1
jne 0x10012316
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Weapon.RapidFire
xor edi, edi
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
dec eax
cmp eax, 3
ja case.default.0x100121ce
jmp dword [eax*4 + 0x100123f4]
mov edi, 0x1f4
jmp case.default.0x100121ce
mov edi, 0x12c
jmp case.default.0x100121ce
mov edi, 0x64
jmp case.default.0x100121ce
mov edi, 0xa
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x100936ac], eax
ja 0x10012316
mov ecx, 0xbc
xor eax, eax
jmp 0x10012210
mov dl, byte [eax + 0x1007acf4]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0xc8], dl
jns 0x10012230
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x30
jl 0x10012210
mov byte [ebp - 0x98], 0
mov dword [ebp - 4], 0x15
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [ebp - 0xc8]
push edx
call eax
push 0x31
lea ecx, [ebp - 0xc8]
push 0
push ecx
mov esi, eax
mov dword [ebp - 4], 0xffffffff
call sub.MSVCR100.dll_memset
add esp, 0xc
mov ecx, ebx
call esi
mov edx, dword [0x1008fe74]
mov ecx, eax
call edx
mov esi, eax
call fcn.10009bd0
mov ecx, 0xbc
xor eax, eax
mov dl, byte [eax + 0x1007acf4]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [ebp + eax - 0x17c], dl
jns 0x100122b0
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x30
jl 0x10012290
mov byte [ebp - 0x14c], 0
mov dword [ebp - 4], 0x16
mov ecx, dword [0x100900a0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
lea edx, [ebp - 0x17c]
push edx
call eax
push 0x31
lea ecx, [ebp - 0x17c]
push 0
push ecx
mov esi, eax
mov dword [ebp - 4], 0xffffffff
call sub.MSVCR100.dll_memset
add esp, 0xc
mov ecx, ebx
call esi
mov edx, dword [0x1008fe74]
mov ecx, eax
call edx
mov esi, eax
call fcn.10009c80
call dword [sym.imp.KERNEL32.dll_GetTickCount]
add eax, edi
mov dword [0x100936ac], eax
mov ecx, dword [0x1008f3f8]
mov edx, dword [ecx]
mov eax, dword [edx]
push str.GameHack.Misc.KickAllPlayer
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
test eax, eax
je 0x10012362
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x100936b0], eax
ja 0x10012362
push 0x1fd
xor edi, edi
mov esi, str.________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________
call fcn.100097b0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
add eax, 0x7d0
mov dword [0x100936b0], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1001b930
mov esp, ebp
pop ebp
ret