Function at 0x100848f0
Capabilities:
Execute shellcode via indirect call
Get file size
Read .ini file
Read file on windows
Spawn thread to rwx shellcode

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1012c480
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x5e8
mov eax, dword [0x1014600c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x5e0], 0
cmp byte [0x102c7489], 0
jne 0x10084a23
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x5f4]
push eax
push 0x40
push 0xd21fff
push 0x401000
mov byte [0x102c7489], 1
call edi
test eax, eax
je 0x10084a23
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push str.._Settings.ini
push 1
push str.WideScreen
push str.Interface
call esi
push str.._Settings.ini
push 1
push str.WideScreenScale
push str.Interface
mov dword [0x102c1460], eax
call esi
lea ecx, [ebp - 0x5d8]
mov dword [0x102c145c], eax
call fcn.100089d0
push ecx
push 0x102bf82c
push str..DataKGDataLocalServerGame.info
lea ecx, [ebp - 0x5d8]
call fcn.10008b00
test al, al
je 0x10084a05
push 0
push 0x20
push 3
push 0
push 1
push connect
push str..DataKGDataLocalServerGame.info
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x10084a05
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, 0x905a0
je 0x10084a41
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x10
push str.Error
push str.ServerGame.info_no_funciona_o_es_invalida_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x102ef304
call fcn.1000c690
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100ddef3
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0
lea eax, [ebp - 0x5dc]
mov dword [ebp - 0x5dc], 0
push eax
push 0x905a0
push 0x101f4344
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x100849fe
xor ecx, ecx
nop dword [eax + eax]
mov eax, ecx
shr eax, 8
xor al, 0x95
add al, byte [ecx + 0x101f4344]
xor al, cl
xor al, 0xda
mov byte [ecx + 0x101f4344], al
inc ecx
cmp ecx, 0x905a0
jb 0x10084a70
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x5d8]
call fcn.100089d0
push ecx
push 0x102bf830
push str..DataKGDataLocalEffectGame.info
lea ecx, [ebp - 0x5d8]
call fcn.10008b00
test al, al
je 0x10084af5
push 0
push 0x20
push 3
push 0
push 1
push connect
push str..DataKGDataLocalEffectGame.info
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x10084af5
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, 0x3af48
je 0x10084b06
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call eax
push 0x10
push str.Error
push str.EffectGame.info_no_funciona_o_es_invalida_
jmp 0x10084a11
push 0
lea eax, [ebp - 0x5ec]
mov dword [ebp - 0x5ec], 0
push eax
push 0x3af48
push 0x102848e4
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x10084aed
xor ecx, ecx
mov eax, ecx
shr eax, 8
xor al, 0x6e
add al, byte [ecx + 0x102848e4]
xor al, cl
xor al, 0xe6
mov byte [ecx + 0x102848e4], al
inc ecx
cmp ecx, 0x3af48
jb 0x10084b30
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call eax
call fcn.100ba5c0
cmp dword [0x101f477c], 1
jne 0x10084bba
push 0x1000c940
push 0x57d278
push 0xe9
call fcn.100cf0b0
push 0x1000c970
push 0x74cd50
push 0xe9
call fcn.100cf0b0
push 0x1000c9a0
push 0x771328
push 0xe9
call fcn.100cf0b0
add esp, 0x24
push 0
push 0
push 0
push 0x100848b0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp dword [0x101f4514], 1
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
jne 0x10084c20
push str.Main.exe
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x5dc], eax
test eax, eax
jne 0x10084bed
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x10084c20
call esi
cmp eax, 0xb7
jne 0x10084c20
push dword [ebp - 0x5dc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x10
push str.Error
push str.You_already_have_a_main_open__you_cant_open_any_more.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x102ef304
call fcn.1000c690
call fcn.1002c7f0
mov eax, 0x100ce230
mov byte [ebp - 0x5e8], 0xe9
sub eax, 0x5509d3
mov dword [ebp - 0x5dc], 0
mov dword [ebp - 0x5e7], eax
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x5509ce
call edi
test eax, eax
je 0x10084c92
mov eax, dword [ebp - 0x5e8]
mov ecx, 0x5509ce
mov dword [ecx], eax
mov al, byte [ebp - 0x5e4]
mov byte [ecx + 4], al
lea eax, [ebp - 0x5ec]
push eax
push dword [ebp - 0x5dc]
mov dword [ebp - 0x5ec], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10084c94
call esi
mov eax, 0x100ce710
mov byte [ebp - 0x5e8], 0xe9
sub eax, 0x551578
mov dword [ebp - 0x5dc], 0
mov dword [ebp - 0x5e7], eax
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x551573
call edi
test eax, eax
je 0x10084d01
mov eax, dword [ebp - 0x5e8]
mov ecx, 0x551573
mov dword [ecx], eax
mov al, byte [ebp - 0x5e4]
mov byte [ecx + 4], al
lea eax, [ebp - 0x5ec]
push eax
push dword [ebp - 0x5dc]
mov dword [ebp - 0x5ec], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10084d03
call esi
push 0xa0
push 0xe61144
call fcn.1009a7f0
push 0xeb
push 0x4d1e69
call fcn.1009a7f0
push 0xe9
push 0x4d228d
call fcn.1009a7f0
push 0x8b
push 0x4d228e
call fcn.1009a7f0
push 0
push 0x4d228f
call fcn.1009a7f0
push 0
push 0x4d2290
call fcn.1009a7f0
push 0
push 0x4d2291
call fcn.1009a7f0
push 0xeb
push 0x4d559c
call fcn.1009a7f0
add esp, 0x40
push 0xeb
push 0x633f7a
call fcn.1009a7f0
push 0xeb
push 0x634403
call fcn.1009a7f0
push 0xeb
push 0x63e6c4
call fcn.1009a7f0
push 0xeb
push 0x4d2246
call fcn.1009a7f0
push 0xeb
push 0x501163
call fcn.1009a7f0
push 0
push 0x40af0a
call fcn.1009a7f0
push 0x50
push 0x40b4bc
call fcn.1009a7f0
push 0x50
push 0x40b4c5
call fcn.1009a7f0
add esp, 0x40
push 0x18
push 0x40b4cf
call fcn.1009a7f0
push 0
push 0x40af0a
call fcn.1009a7f0
push 0xeb
push 0x40afd5
call fcn.1009a7f0
push 0x70
push 0x777fd6
call fcn.1009a7f0
push 0x17
push 0x777fd7
call fcn.1009a7f0
push 0x3c
push 0x4ebec7
call fcn.1009a7f0
push 0x3c
push 0x5c4004
call fcn.1009a7f0
push 0x3c
push 0x7e40bb
call fcn.1009a7f0
add esp, 0x40
push 0x3c
push 0x81b546
call fcn.1009a7f0
push 0x3c
push 0x81b58d
call fcn.1009a7f0
push 0x3c
push 0x86e284
call fcn.1009a7f0
push 0x3c
push 0x86e44c
call fcn.1009a7f0
push 0x3c
push 0x86e573
call fcn.1009a7f0
push 0x3c
push 0x86f8fc
call fcn.1009a7f0
push 0xb7
push 0x7da373
call fcn.1009a7f0
push 0xb7
push 0x7e1c44
call fcn.1009a7f0
add esp, 0x40
push 0xeb
push 0x52100d
call fcn.1009a7f0
push 0
push 0x9543c4
call fcn.1009a7f0
push 0x4d1dc2
push 0x4d1cf0
push 0xe9
call fcn.100cf0b0
push 0x1b
mov edx, 0x90
mov ecx, 0xd20170
call fcn.100cf130
cmp dword [0x101f45c0], 0
mov ecx, 0xeb
mov eax, 0x75
cmove eax, ecx
movzx eax, al
push eax
push 0x64cbd1
call fcn.1009a7f0
movzx eax, byte [0x101f45c4]
push eax
push 0x64cbd0
call fcn.1009a7f0
movzx eax, byte [0x101f45c4]
push eax
push 0x95ceef
call fcn.1009a7f0
movzx eax, byte [0x101f45c4]
push eax
push 0x95cf14
call fcn.1009a7f0
mov al, byte [0x101f43a8]
add esp, 0x40
inc al
movzx eax, al
push eax
push 0xe61f68
call fcn.1009a7f0
mov al, byte [0x101f43aa]
add al, 2
movzx eax, al
push eax
push 0xe61f69
call fcn.1009a7f0
mov al, byte [0x101f43ab]
add al, 3
movzx eax, al
push eax
push 0xe61f6a
call fcn.1009a7f0
mov al, byte [0x101f43ad]
add al, 4
movzx eax, al
push eax
push 0xe61f6b
call fcn.1009a7f0
mov al, byte [0x101f43ae]
add al, 5
movzx eax, al
push eax
push 0xe61f6c
call fcn.1009a7f0
mov dx, word [0x101f43a6]
add esp, 0x28
mov ecx, 0xe609e4
call fcn.100cefb0
cmp dword [0x101f45bc], 0x3c
jb 0x10085000
mov dword [0x102ef564], 0
mov dword [0x102ef568], 0
mov byte [0x102ef560], 1
call fcn.100192a0
cmp dword [0x101f45bc], 0x3c
jae 0x1008502d
mov edx, 0x102c747c
mov ecx, 0x4d9d3b
call fcn.100ceff0
mov edx, 0x102c747c
mov ecx, 0x4dac60
call fcn.100ceff0
mov edx, 0xa
mov ecx, 0x7b55338
call fcn.100ceff0
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0x4d597b
call edi
lea eax, [ebp - 0x5dc]
mov dword [0x4d597b], 0x102c7478
push eax
push dword [ebp - 0x5dc]
push 4
push 0x4d597b
call edi
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0x4da289
call edi
lea eax, [ebp - 0x5dc]
mov dword [0x4da289], 0x102c7478
push eax
push dword [ebp - 0x5dc]
push 4
push 0x4da289
call edi
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0x4da297
call edi
lea eax, [ebp - 0x5dc]
mov dword [0x4da297], 0x102c7478
push eax
push dword [ebp - 0x5dc]
push 4
push 0x4da297
call edi
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0x4da3a2
call edi
lea eax, [ebp - 0x5dc]
mov dword [0x4da3a2], 0x102c7478
push eax
push dword [ebp - 0x5dc]
push 4
push 0x4da3a2
call edi
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0x4da3ce
call edi
lea eax, [ebp - 0x5dc]
mov dword [0x4da3ce], 0x102c7478
push eax
push dword [ebp - 0x5dc]
push 4
push 0x4da3ce
call edi
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0x4da3d9
call edi
lea eax, [ebp - 0x5dc]
mov dword [0x4da3d9], 0x102c7478
push eax
push dword [ebp - 0x5dc]
push 4
push 0x4da3d9
call edi
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0x63d326
call edi
lea eax, [ebp - 0x5dc]
mov dword [0x63d326], 0x102c7478
push eax
push dword [ebp - 0x5dc]
push 4
push 0x63d326
call edi
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0x642112
call edi
lea eax, [ebp - 0x5dc]
mov dword [0x642112], 0x102c7478
push eax
push dword [ebp - 0x5dc]
push 4
push 0x642112
call edi
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0x4d0e09
call edi
lea eax, [ebp - 0x5dc]
mov dword [0x4d0e09], 0x101f43c1
push eax
push dword [ebp - 0x5dc]
push 4
push 0x4d0e09
call edi
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0x4d9f55
call edi
lea eax, [ebp - 0x5dc]
mov dword [0x4d9f55], 0x101f43e1
push eax
push dword [ebp - 0x5dc]
push 4
push 0x4d9f55
call edi
push 0
push 0x5c914e
call fcn.1009a7f0
push 0x14
mov edx, 0x90
mov ecx, 0x63e908
call fcn.100cf130
push 0x20
push 0x101f4385
push 0xe611b2
call fcn.100cf0f0
push 0x11
push 0x101f43b0
push 0xe61f70
call fcn.100cf0f0
push fcn.100c6d40
push 0x65fd79
push 0xff
call fcn.100cf0b0
push 0x10072e80
push 0x4da280
push 0xe9
call fcn.100cf0b0
add esp, 0x3c
cmp dword [0x101f45bc], 0x3c
jae 0x1008529b
push 0x10072eb0
jmp 0x100852a0
push 0x10073090
push 0x4da3a1
push 0xe9
call fcn.100cf0b0
add esp, 0xc
mov edx, 0xc
mov ecx, 0x4d9d39
call fcn.100cf180
mov edx, 7
mov ecx, 0x4d9d45
call fcn.100cf180
mov edx, 0xf
mov ecx, 0x4d9efc
call fcn.100cf180
cmp dword [0x101f45bc], 0x3c
jae 0x100852f7
mov edx, 8
mov ecx, 0x4dac5c
call fcn.100cf180
mov edx, 5
mov ecx, 0x5451f7
call fcn.100cf180
mov edx, 8
mov ecx, 0x545230
call fcn.100cf180
mov edx, 8
mov ecx, 0x5a52e9
call fcn.100cf180
mov edx, 0x102cb790
mov ecx, 0x6a
call fcn.100cf200
mov edx, 0x102cb6a0
mov ecx, 0x6b
call fcn.100cf200
mov edx, 0x102cb880
mov ecx, 0x6c
call fcn.100cf200
call fcn.10026fa0
push 0x10030190
push 0x597691
push 0xe9
call fcn.100cf0b0
add esp, 0xc
cmp dword [0x101f47c0], 1
jne 0x10085396
cmp byte [0x1052613f], 0
jne 0x10085396
push 0x100301a0
push 0x4d5ec3
push 0xe8
call fcn.100cf0b0
add esp, 0xc
cmp byte [0x1052613f], 1
jne 0x100853b6
push 0x10030370
push 0x4d5ec3
push 0xe8
call fcn.100cf0b0
add esp, 0xc
push dword [0x101478bc]
call fcn.10094c60
push str.DataKGDataLuaConfigsNameColor.lua
mov ecx, 0x101478b8
call fcn.100b56a0
push 0x10030000
push 0x598ca7
push 0xe8
call fcn.100cf0b0
push 0x10030000
push 0x77f8c2
push 0xe8
call fcn.100cf0b0
push 0x10030030
push 0x57f920
push 0xe9
call fcn.100cf0b0
add esp, 0x24
call fcn.10045600
cmp dword [0x101f47a8], 1
jne 0x100855bf
mov eax, 1
mov dword [0x10300400], 0
mov word [0x10300334], ax
lea eax, [ebp - 0x1d8]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
jne 0x1008547c
push eax
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov dword [0x10147b44], eax
cmp eax, 0xffffffff
je 0x1008547c
call dword [sym.imp.WS2_32.dll_WSACreateEvent]
mov dword [0x10147b48], eax
test eax, eax
je 0x1008547c
mov dword [0x1014bb54], 0x1003c570
jmp 0x10085497
push 1
push str.connection
push str.init_failed
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov byte [0x10300336], 0
cmp dword [0x10147b44], 0xffffffff
movzx eax, word [0x101f43a6]
je 0x100855a4
mov ecx, 2
push eax
mov word [ebp - 0x24], cx
call dword [sym.imp.WS2_32.dll_htons]
push 0x101f4385
mov word [ebp - 0x22], ax
call dword [sym.imp.WS2_32.dll_inet_addr]
mov dword [ebp - 0x20], eax
cmp eax, 0xffffffff
jne 0x100854f7
push 0x101f4385
call dword [sym.imp.WS2_32.dll_gethostbyname]
test eax, eax
je 0x100854f7
movsx ecx, word [eax + 0xa]
mov eax, dword [eax + 0xc]
push ecx
push dword [eax]
lea eax, [ebp - 0x20]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x10
lea eax, [ebp - 0x24]
push eax
push dword [0x10147b44]
call dword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x1008551b
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2733
jne 0x1008559a
push 0x23
push dword [0x10147b48]
push dword [0x10147b44]
call dword [sym.imp.WS2_32.dll_WSAEventSelect]
cmp eax, 0xffffffff
je 0x1008559a
push 0x2000
push 0
push 0x10147b4c
call sub.VCRUNTIME140.dll_memset
push 0x2000
push 0
push 0x10149b50
mov dword [0x10149b4c], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0x18
mov dword [0x1014bb50], 0
push 0
push 0
push 0x10147b40
push 0x1003c300
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x1014bb74], eax
mov byte [0x1014bb78], 1
mov byte [0x10300336], 1
jmp 0x100855bf
mov ecx, 0x10147b40
call fcn.1003c150
push 1
push str.connection
push str.Connect_failed__CheckIP_ConnectServer__
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov byte [0x10300336], 0
push 0x10073280
push 0x5b96e8
push 0xe8
call fcn.100cf0b0
push 0x1000c770
push 0x59b566
push 0xe8
call fcn.100cf0b0
push 0x1000c770
push 0x5a0208
push 0xe8
call fcn.100cf0b0
push 0x1000c770
push 0x5ab91c
push 0xe8
call fcn.100cf0b0
push 0x1000c770
push 0x5b087a
push 0xe8
call fcn.100cf0b0
push 0x1000c770
push 0x5b13e4
push 0xe8
call fcn.100cf0b0
add esp, 0x48
push 0x1000c770
push 0x5b69e3
push 0xe8
call fcn.100cf0b0
push 0x1000c770
push 0x5b6eb4
push 0xe8
call fcn.100cf0b0
push 0x1000c770
push 0x5b7026
push 0xe8
call fcn.100cf0b0
push 0x1000c770
push 0x5b7268
push 0xe8
call fcn.100cf0b0
push 0x1000c770
push 0x5b72d0
push 0xe8
call fcn.100cf0b0
push 0x1000c770
push 0x5b739d
push 0xe8
call fcn.100cf0b0
add esp, 0x48
push 0x1000c770
push 0x5b7634
push 0xe8
call fcn.100cf0b0
push 0x1000c770
push 0x95f68a
push 0xe8
call fcn.100cf0b0
push 0x1000c770
push 0x95f8b7
push 0xe8
call fcn.100cf0b0
push 0x1000c770
push 0x95fa96
push 0xe8
call fcn.100cf0b0
push 0x1000c770
push 0x96012e
push 0xe8
call fcn.100cf0b0
add esp, 0x3c
push 0
push 0
push 0x102ef304
push 0x1000c510
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x102ef338], eax
call fcn.10063c00
call fcn.10062bd0
push 0
push ecx
push str.DataEnc1.dat
call fcn.100a3970
push 1
push ecx
push str.DataDec2.dat
call fcn.100a3970
push 2
push 0x1013a044
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.1000c7d0
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], 0
push eax
push dword [0x101ab864]
lea ecx, [ebp - 0x48]
call fcn.1007c9f0
sub esp, 8
mov byte [ebp - 4], 1
mov ecx, eax
call fcn.100acb70
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x100857df
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100857d5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100857d5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100ddf04
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp edx, 0x10
jb 0x1008582e
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10085824
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10085824
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100ddf04
add esp, 8
push str.Data__KGData__Lua__Configs__Font.lua
mov ecx, 0x101ab860
call fcn.100b56a0
push 0x100b7880
push 0x7729b3
push 0xe8
call fcn.100cf0b0
push 0x100b7850
push 0x772960
push 0xe8
call fcn.100cf0b0
add esp, 0x18
call fcn.100b3940
cmp dword [0x101f4898], 0x191
jl 0x100858f6
push 0x100ac980
push 0x810711
push 0xe9
call fcn.100cf0b0
push 0x100ac9c0
push 0x810790
push 0xe9
call fcn.100cf0b0
add esp, 0x18
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 7
push 0x811020
call edi
mov eax, 0x811020
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [ebp - 0x5dc]
push eax
push dword [ebp - 0x5dc]
push 7
push 0x811020
call edi
push 0x100aca00
push 0x811020
push 0xe9
call fcn.100cf0b0
add esp, 0xc
call fcn.100b3150
push 2
push 0x1013a044
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.1000c7d0
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], 2
push eax
push dword [0x10158230]
lea ecx, [ebp - 0x48]
call fcn.1007c9f0
push 0x100b37a0
push str.SetItemFloor
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.10096f10
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x10085984
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1008597a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1008597a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100ddf04
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp edx, 0x10
jb 0x100859d3
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100859c9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100859c9
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100ddf04
add esp, 8
push str.Data__KGData__Lua__Configs__CustomItemFloor.lua
mov ecx, 0x1015822c
call fcn.100b56a0
push 0x10138e08
push str.StartLoadItemFloor
push 0x1015822c
call fcn.100b5850
push 0x100b3830
push 0x5f820c
push 0xe8
call fcn.100cf0b0
push 0x100b3830
push 0x5f847d
push 0xe8
call fcn.100cf0b0
add esp, 0x24
mov ecx, 0x101afb5c
push str.Data__KGData__Lua__EffectSystem__CharacterEffectItens.lua
call fcn.100b56a0
push dword [0x101afb60]
call fcn.1008f870
push 0x100ae690
push 0x5711ab
push 0xe8
call fcn.100cf0b0
push 0x100ae690
push 0x57126f
push 0xe8
call fcn.100cf0b0
push 0x100ae690
push 0x5713d6
push 0xe8
call fcn.100cf0b0
push 0x100ae690
push 0x576ddb
push 0xe8
call fcn.100cf0b0
push 0x100ae690
push 0x588357
push 0xe8
call fcn.100cf0b0
push 0x100ae690
push 0x5883f4
push 0xe8
call fcn.100cf0b0
add esp, 0x48
push 0x100ae690
push 0x588505
push 0xe8
call fcn.100cf0b0
push 0x100ae690
push 0x588617
push 0xe8
call fcn.100cf0b0
push 0x100ae690
push 0x588661
push 0xe8
call fcn.100cf0b0
push 0x100ae690
push 0x58876e
push 0xe8
call fcn.100cf0b0
push 0x100ae690
push 0x5887ad
push 0xe8
call fcn.100cf0b0
push 0x100ae690
push 0x609d1e
push 0xe8
call fcn.100cf0b0
add esp, 0x48
push 0x100ae690
push 0x610691
push 0xe8
call fcn.100cf0b0
add esp, 0xc
call fcn.100bb3a0
mov ecx, dword [0xe61e58]
mov eax, dword [0xe61e5c]
cmp ecx, 0x320
jne 0x10085b6b
test eax, eax
jne 0x10085b6b
mov eax, 0xb
jmp 0x10085b81
cmp ecx, 0x400
jne 0x10085b7c
test eax, eax
mov eax, 0xc
je 0x10085b81
mov eax, 0xd
push str.Tahoma
push 0
push 3
push 0
push 7
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push eax
mov dword [ebp - 0x5ec], eax
call dword [sym.imp.GDI32.dll_CreateFontA]
push str.Tahoma
push 0
push 3
push 0
push 7
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push dword [ebp - 0x5ec]
mov dword [0x101478a0], eax
call dword [sym.imp.GDI32.dll_CreateFontA]
push str.Tahoma
push 0
push 3
push 0
push 7
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push dword [ebp - 0x5ec]
mov dword [0x101478a4], eax
call dword [sym.imp.GDI32.dll_CreateFontA]
mov ecx, 0x101f44d3
mov dword [0x1014789c], eax
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10085c20
sub ecx, edx
je 0x10085ca0
push ecx
push 0x101f44d3
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], al
call fcn.1000c7d0
mov dword [ebp - 0x5e0], 1
lea edx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0x10
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
cmovae edx, ecx
test eax, eax
je 0x10085ca3
add eax, edx
mov dword [ebp - 0x5dc], eax
mov eax, edx
cmp edx, dword [ebp - 0x5dc]
jae 0x10085ca3
nop word [eax + eax]
cmp byte [eax], 0x20
jne 0x10085c90
inc eax
cmp eax, dword [ebp - 0x5dc]
jb 0x10085c80
jmp 0x10085ca3
sub eax, edx
cmp eax, 0xffffffff
je 0x10085ca3
mov byte [ebp - 0x5ed], 0
jmp 0x10085caa
mov ecx, dword [ebp - 0x2c]
mov byte [ebp - 0x5ed], 1
test byte [ebp - 0x5e0], 1
je 0x10085ce8
mov eax, dword [ebp - 0x18]
cmp eax, 0x10
jb 0x10085ce8
lea edx, [eax + 1]
mov eax, ecx
cmp edx, 0x1000
jb 0x10085cde
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10085cde
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100ddf04
add esp, 8
cmp byte [ebp - 0x5ed], 0
je 0x10085d4b
push 0xe8
mov edx, 0x10034b70
mov ecx, 0x78b0bc
call fcn.100ce780
push 0xe9
mov edx, 0x10034b10
mov ecx, 0x789767
call fcn.100ce780
push 0xe9
mov edx, 0x10034b30
mov ecx, 0x789a63
call fcn.100ce780
push 0xe9
mov edx, 0x10034b50
mov ecx, 0x789dac
call fcn.100ce780
add esp, 0x10
mov byte [0x10147ac4], 1
cmp dword [0x101f4698], 1
jne 0x10085d7b
push ecx
mov edx, 5
mov ecx, 0x57fccf
call fcn.100ce7f0
push 0xe9
mov edx, 0x100589f0
mov ecx, 0x57fccf
call fcn.100ce780
add esp, 8
cmp dword [0x101f46ac], 1
jne 0x10085dab
push ecx
mov edx, 5
mov ecx, 0x5842b1
call fcn.100ce7f0
push 0xe9
mov edx, 0x10058b70
mov ecx, 0x5842b1
call fcn.100ce780
add esp, 8
cmp dword [0x101f46c0], 1
jne 0x10085ddb
push ecx
mov edx, 5
mov ecx, 0x5852e4
call fcn.100ce7f0
push 0xe9
mov edx, 0x10058d00
mov ecx, 0x5852e4
call fcn.100ce780
add esp, 8
cmp dword [0x101f46d4], 1
jne 0x10085e0b
push ecx
mov edx, 5
mov ecx, 0x584a4e
call fcn.100ce7f0
push 0xe9
mov edx, 0x10058e90
mov ecx, 0x584a4e
call fcn.100ce780
add esp, 8
cmp dword [0x101f46e8], 1
jne 0x10085e3b
push ecx
mov edx, 5
mov ecx, 0x584b82
call fcn.100ce7f0
push 0xe9
mov edx, 0x10058fe0
mov ecx, 0x584b82
call fcn.100ce780
add esp, 8
cmp dword [0x101f46f8], 1
jne 0x10085e6b
push ecx
mov edx, 5
mov ecx, 0x582fe6
call fcn.100ce7f0
push 0xe9
mov edx, 0x100590f0
mov ecx, 0x582fe6
call fcn.100ce780
add esp, 8
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0xd
call dword [sym.imp.GDI32.dll_CreateFontA]
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push 0xd
mov dword [0x10302f20], eax
call dword [sym.imp.GDI32.dll_CreateFontA]
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0xf
mov dword [0x10302f24], eax
call dword [sym.imp.GDI32.dll_CreateFontA]
push str.Tahoma
push 0
push 3
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0x12
mov dword [0x10302f28], eax
call dword [sym.imp.GDI32.dll_CreateFontA]
mov dword [0x10302f2c], eax
call fcn.1005f960
push 2
push 0x1013a044
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.1000c7d0
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], 4
push eax
push dword [0x101478f0]
lea ecx, [ebp - 0x48]
call fcn.1007c9f0
mov byte [ebp - 4], 5
sub esp, 8
mov ecx, eax
call fcn.100820c0
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x10085fa6
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10085f9c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10085f9c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100ddf04
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp edx, 0x10
jb 0x10085ff5
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10085feb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10085feb
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.100ddf04
add esp, 8
push str.Data__KGData__Lua__Configs__CustomItemPosition.lua
mov ecx, 0x101478ec
call fcn.100b56a0
push 0x10136507
push str.StartLoadItemPosition
push 0x101478ec
call fcn.100b5850
push 0x1007cef0
push 0x5d0b94
push 0xe8
call fcn.100cf0b0
add esp, 0x18
mov dword [0x10191cbc], 1
cmp dword [0x101f4754], 2
jne 0x10086047
call fcn.10056c10
cmp dword [0x102c1460], 0
je 0x1008605c
call fcn.10034a90
mov ecx, eax
call fcn.100c4fd0
push 0x10034230
push 0x7d2b3d
push 0xe8
call fcn.100cf0b0
push 0x100340a0
push 0x841e49
push 0xe8
call fcn.100cf0b0
add esp, 0x18
cmp dword [0x101f47c0], 1
jne 0x100860bd
push 0x10034b00
push 0x78b0f0
push 0xe9
call fcn.100cf0b0
push 0x10034af0
push 0x787ba0
push 0xe9
call fcn.100cf0b0
add esp, 0x18
jmp 0x100860d4
push 0x10034200
push 0x78b0f0
push 0xe9
call fcn.100cf0b0
add esp, 0xc
cmp dword [0x101f4754], 1
jne 0x10086131
mov eax, dword [0x101f4804]
dec eax
cmp eax, 1
ja 0x10086131
push 0x10032ae0
push 0x84bc0f
push 0xe8
mov dword [0x102c12b8], 0
call fcn.100cf0b0
push 0x10032b00
push 0x84bd1d
push 0xe8
call fcn.100cf0b0
push 0x10031a80
push 0x84bdb0
push 0xe9
call fcn.100cf0b0
add esp, 0x24
push 0x10033860
push 0x5bb0b0
push 0xe9
call fcn.100cf0b0
add esp, 0xc
mov dword [0x10191cb4], 0
cmp dword [0x101f475c], 1
jne 0x10086172
push 0x10010960
push 0x82b772
push 0xe8
call fcn.100cf0b0
add esp, 0xc
cmp dword [0x101f4758], 0
je 0x10086192
push 0x100a1000
push 0x62f870
push 0xe9
call fcn.100cf0b0
add esp, 0xc
cmp dword [0x102c1460], 0
je 0x100861b2
push 0x1009eea0
push 0x82aba0
push 0xe9
call fcn.100cf0b0
add esp, 0xc
cmp dword [0x101f4770], 1
jne 0x10086209
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x7f6834
call edi
mov eax, 0x7f6834
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x5dc]
push eax
push dword [ebp - 0x5dc]
push 5
push 0x7f6834
call edi
push 0x10052520
push 0x7f67b7
push 0xe8
call fcn.100cf0b0
add esp, 0xc
cmp dword [0x101f47a4], 0
jne 0x1008629b
mov byte [0x102c7378], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x10051410
sub eax, 0x1388
mov byte [0x102c7380], 0
push 0x7d2bc0
push 0xe9
mov dword [0x102c737c], eax
call fcn.100cf0b0
push 0x10052710
push 0x7d26b5
push 0xe9
call fcn.100cf0b0
push 0x10052760
push 0x7d2751
push 0xe9
call fcn.100cf0b0
push 0x100527b0
push 0x7d27fc
push 0xe9
call fcn.100cf0b0
push 0x10052800
push 0x80b8e0
push 0xe9
call fcn.100cf0b0
add esp, 0x3c
cmp dword [0x101f4694], 1
jne 0x100863c9
push 0x1004e380
push 0x5012d0
push 0xe9
call fcn.100cf0b0
push 0x1004e410
push 0x80f250
push 0xe8
call fcn.100cf0b0
push 0x1004e560
push 0x7df740
push 0xe9
call fcn.100cf0b0
push 0x100500e0
push 0x7df34c
push 0xe8
call fcn.100cf0b0
push 0x10050110
push 0x66424b
push 0xe8
call fcn.100cf0b0
push 0x1004e490
push 0x833731
push 0xe8
call fcn.100cf0b0
add esp, 0x48
push 0x1004e5c0
push 0x7df846
push 0xe8
call fcn.100cf0b0
push 0x10050550
push 0x7df83e
push 0xe8
call fcn.100cf0b0
push 0x10050220
push 0x83469c
push 0xe8
call fcn.100cf0b0
push 0x100723c0
push 0x420814
push 0xe8
call fcn.100cf0b0
push 0x1004d3c0
push 0x924c8b
push 0xe8
call fcn.100cf0b0
push 0x1004cb00
push 0x7e5cb6
push 0xe8
call fcn.100cf0b0
add esp, 0x48
push 0x1004d910
push 0x7e5b70
push 0xe8
call fcn.100cf0b0
push 0x1004d6a0
push 0x7e348f
push 0xe8
call fcn.100cf0b0
add esp, 0x18
cmp dword [0x101f47f8], 1
jne 0x10086434
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x401f56
call edi
mov eax, 0x401f56
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x5dc]
push eax
push dword [ebp - 0x5dc]
push 5
push 0x401f56
call edi
push 0x1000cf40
push 0x401ef1
push 0xe8
call fcn.100cf0b0
push 0x1000cee0
push 0x401fc4
push 0xe8
call fcn.100cf0b0
add esp, 0x18
cmp dword [0x101f473c], 1
jne 0x100865c7
push ecx
mov edx, 7
mov ecx, 0x608cac
call fcn.100ce7f0
add esp, 4
mov byte [ebp - 0x5e8], 0xe9
mov eax, 0x10050c20
mov dword [ebp - 0x5dc], 0
sub eax, 0x608cb1
mov dword [ebp - 0x5e7], eax
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x608cac
call edi
test eax, eax
je 0x100864c1
mov eax, dword [ebp - 0x5e8]
mov ecx, 0x608cac
mov dword [ecx], eax
mov al, byte [ebp - 0x5e4]
mov byte [ecx + 4], al
lea eax, [ebp - 0x5e0]
push eax
push dword [ebp - 0x5dc]
mov dword [ebp - 0x5e0], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100864c3
call esi
push ecx
mov edx, 7
mov ecx, 0x60954d
call fcn.100ce7f0
add esp, 4
mov byte [ebp - 0x5e8], 0xe9
mov eax, 0x10050cb0
mov dword [ebp - 0x5dc], 0
sub eax, 0x609552
mov dword [ebp - 0x5e7], eax
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x60954d
call edi
test eax, eax
je 0x10086543
mov eax, dword [ebp - 0x5e8]
mov ecx, 0x60954d
mov dword [ecx], eax
mov al, byte [ebp - 0x5e4]
mov byte [ecx + 4], al
lea eax, [ebp - 0x5e0]
push eax
push dword [ebp - 0x5dc]
mov dword [ebp - 0x5e0], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10086545
call esi
push ecx
mov edx, 7
mov ecx, 0x60f04c
call fcn.100ce7f0
add esp, 4
mov byte [ebp - 0x5e8], 0xe9
mov eax, 0x10050d40
mov dword [ebp - 0x5dc], 0
sub eax, 0x60f051
mov dword [ebp - 0x5e7], eax
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x60f04c
call edi
test eax, eax
je 0x100865c5
mov eax, dword [ebp - 0x5e8]
mov ecx, 0x60f04c
mov dword [ecx], eax
mov al, byte [ebp - 0x5e4]
mov byte [ecx + 4], al
lea eax, [ebp - 0x5e0]
push eax
push dword [ebp - 0x5dc]
mov dword [ebp - 0x5e0], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100865c7
call esi
cmp dword [0x101f4740], 1
jne 0x100865fb
push 0x10028950
push 0x61041c
push 0xe8
call fcn.100cf0b0
push 0x10028950
push 0x5666c1
push 0xe8
call fcn.100cf0b0
add esp, 0x18
cmp dword [0x101f4738], 1
jne 0x10086652
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x502a95
call edi
mov eax, 0x502a95
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x5dc]
push eax
push dword [ebp - 0x5dc]
push 5
push 0x502a95
call edi
push 0x100095d0
push 0x502a95
push 0xe8
call fcn.100cf0b0
add esp, 0xc
cmp dword [0x101f4728], 1
jne 0x10086660
call fcn.1007c1b0
cmp dword [0x101f4730], 1
jne 0x1008666e
call fcn.1002f480
cmp dword [0x101f4710], 1
jne 0x1008667c
call fcn.100a1bf0
cmp dword [0x101f4714], 1
jne 0x100867b7
push 0x1000aaf0
push 0x900de9
push 0xe8
call fcn.100cf0b0
push 0x10009dc0
push 0x8c5bb5
push 0xe8
call fcn.100cf0b0
add esp, 0x14
mov edx, 0xa
mov ecx, 0x56fc5e
call fcn.100ce7f0
add esp, 4
mov byte [ebp - 0x5e8], 0xe9
mov eax, 0x1000a9d0
mov dword [ebp - 0x5dc], 0
sub eax, 0x56fc63
mov dword [ebp - 0x5e7], eax
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x56fc5e
call edi
test eax, eax
je 0x10086733
mov eax, dword [ebp - 0x5e8]
mov ecx, 0x56fc5e
mov dword [ecx], eax
mov al, byte [ebp - 0x5e4]
mov byte [ecx + 4], al
lea eax, [ebp - 0x5e0]
push eax
push dword [ebp - 0x5dc]
mov dword [ebp - 0x5e0], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10086735
call esi
push ecx
mov edx, 0xa
mov ecx, 0x56fd1a
call fcn.100ce7f0
add esp, 4
mov byte [ebp - 0x5e8], 0xe9
mov eax, 0x1000aa70
mov dword [ebp - 0x5dc], 0
sub eax, 0x56fd1f
mov dword [ebp - 0x5e7], eax
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x56fd1a
call edi
test eax, eax
je 0x100867b5
mov eax, dword [ebp - 0x5e8]
mov ecx, 0x56fd1a
mov dword [ecx], eax
mov al, byte [ebp - 0x5e4]
mov byte [ecx + 4], al
lea eax, [ebp - 0x5e0]
push eax
push dword [ebp - 0x5dc]
mov dword [ebp - 0x5e0], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100867b7
call esi
cmp dword [0x101f471c], 1
jne 0x100867e6
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
push eax
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
push 0x100cb8f0
push 0x4d70d4
push 0xe8
call fcn.100cf0b0
add esp, 0x14
call fcn.1003baa0
mov esi, 2
mov dword [ebp - 0x5ec], 0
xor edi, edi
mov dword [ebp - 0x5dc], 1
mov dword [ebp - 0x5e0], esi
nop dword [eax]
lea ecx, [esi + 1]
mov eax, 0xf0f0f0f1
mul ecx
mov eax, edi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + 0x101f43b3]
xor al, byte [esi + 0x101f4366]
movzx esi, al
mov eax, 0xf0f0f0f1
mul dword [ebp - 0x5e0]
mov eax, edi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x5dc]
add dword [ebp - 0x5dc], 4
mov al, byte [eax + 0x101f43b2]
xor al, byte [ecx + 0x101f4366]
movzx eax, al
add si, ax
mov eax, 0xf0f0f0f1
mul ecx
mov eax, edi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + 0x101f43b1]
xor al, byte [edi + 0x101f4366]
movzx eax, al
add si, ax
mov eax, 0xf0f0f0f1
mul edi
mov eax, edi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + 0x101f43b0]
xor al, byte [edi + 0x101f4365]
add edi, 4
movzx eax, al
add si, ax
add word [ebp - 0x5ec], si
mov esi, dword [ebp - 0x5e0]
add esi, 4
mov dword [ebp - 0x5e0], esi
cmp esi, 0x22
jb 0x10086810
mov al, byte [ebp - 0x5ec]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub al, 0x1e
mov byte [0x102c7377], al
mov eax, dword [ebp - 0x5ec]
shr eax, 8
sub al, 0x31
mov byte [0x102c7376], al
mov eax, dword [0xd227b0]
mov dword [0x102c7484], eax
mov eax, dword [0xd227f8]
mov dword [0x102c7480], eax
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0xd227b0
call edi
lea eax, [ebp - 0x5dc]
mov dword [0xd227b0], 0x10072c50
push eax
push dword [ebp - 0x5dc]
push 4
push 0xd227b0
call edi
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0xd227f8
call edi
lea eax, [ebp - 0x5dc]
mov dword [0xd227f8], 0x10072d70
push eax
push dword [ebp - 0x5dc]
push 4
push 0xd227f8
call edi
push 0x1007a0d0
push 0x633fcb
push 0xff
call fcn.100cf0b0
push 0x1007a590
push 0x633fe3
push 0xff
call fcn.100cf0b0
push 0x1007a970
push 0x57ac07
push 0xff
call fcn.100cf0b0
push 0x1007a970
push 0x6083b9
push 0xff
call fcn.100cf0b0
push 0x1007aa40
push 0x777ff2
push 0xff
call fcn.100cf0b0
push 0x1007aa40
push 0x778003
push 0xff
call fcn.100cf0b0
add esp, 0x48
push 0x1007aa50
push 0x5f7c2f
push 0xe9
call fcn.100cf0b0
push 0x1007aa80
push 0x968137
push 0xe9
call fcn.100cf0b0
push 0x1007aaa0
push 0x968157
push 0xe9
call fcn.100cf0b0
push 0x10079f80
push 0x57ad82
push 0xe9
call fcn.100cf0b0
push 0x10079fd0
push 0x57adc8
push 0xe9
call fcn.100cf0b0
add esp, 0x3c
cmp byte [0x101f48ad], 1
jne 0x10086af7
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 7
push 0x54c2d5
call edi
mov eax, 0x54c2d5
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
mov byte [eax + 6], cl
lea eax, [ebp - 0x5dc]
push eax
push dword [ebp - 0x5dc]
push 7
push 0x54c2d5
call edi
push 0x10079ca0
push 0x54c2d5
push 0xe9
call fcn.100cf0b0
push 0x10079b10
push 0x4fc6c7
push 0xe8
call fcn.100cf0b0
push 0x10079b10
push 0x4fcc3e
push 0xe8
call fcn.100cf0b0
push 0x10079b10
push 0x54c21d
push 0xe8
call fcn.100cf0b0
add esp, 0x30
push 0x1007aac0
push 0x58e650
push 0xe9
call fcn.100cf0b0
push 0x1007ab10
push 0x8386b5
push 0xe9
call fcn.100cf0b0
push 0x1007ab90
push 0x5c4025
push 0xe9
call fcn.100cf0b0
push 0x1007abc0
push 0x5f7c3b
push 0xe9
call fcn.100cf0b0
push 0x1007abf0
push 0x64b701
push 0xe9
call fcn.100cf0b0
push 0x1007ac20
push 0x8383a0
push 0xe9
call fcn.100cf0b0
add esp, 0x48
push 0x1007ac50
push 0x5f3f7e
push 0xe9
call fcn.100cf0b0
push 0x1007ac90
push 0x5f4a60
push 0xe9
call fcn.100cf0b0
add esp, 0x18
call fcn.100a9260
cmp dword [0x101f45e4], 0
je 0x10086c69
push 0x100cae20
push 0x40b903
push 0xe9
call fcn.100cf0b0
push 0x100cae60
push 0x4da416
push 0xe9
call fcn.100cf0b0
push 0x100cae80
push 0x63a192
push 0xe9
call fcn.100cf0b0
push 0x100caec0
push 0x7a89eb
push 0xe9
call fcn.100cf0b0
push fcn.100cad80
push 0x40bc24
push 0xe8
call fcn.100cf0b0
push fcn.100cad80
push 0x4d762c
push 0xe8
call fcn.100cf0b0
add esp, 0x48
push fcn.100cad80
push 0x4ef622
push 0xe8
call fcn.100cf0b0
push fcn.100cad80
push 0x63cd3a
push 0xe8
call fcn.100cf0b0
push fcn.100ca6b0
push 0x80f7fe
push 0xe8
call fcn.100cf0b0
add esp, 0x24
call fcn.100ccfb0
cmp dword [0x101f472c], 1
jne 0x10086cb6
push 0x10043150
push 0x50d905
push 0xe8
call fcn.100cf0b0
push 0x100432c0
push 0x5cd10f
push 0xe9
call fcn.100cf0b0
push 0x10043320
push 0x5cefe7
push 0xe9
call fcn.100cf0b0
add esp, 0x24
push 0x100cb010
push 0x4d13c2
push 0xe9
call fcn.100cf0b0
push 0x100cb1c0
push 0x4d2782
push 0xe9
call fcn.100cf0b0
push 0x100cb290
push 0x830c3a
push 0xe9
call fcn.100cf0b0
push 0x100caef0
push 0x4da2f9
push 0xe8
call fcn.100cf0b0
mov esi, dword [sym.imp.USER32.dll_SetWindowsHookExA]
add esp, 0x30
cmp dword [0x102c1474], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
jne 0x10086d39
call eax
push eax
push dword [0x102c1464]
push 0x1003c730
push 7
call esi
mov dword [0x102c1474], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x102c1478], 0
jne 0x10086d59
call eax
push eax
push dword [0x102c1464]
push 0x1003d860
push 2
call esi
mov dword [0x102c1478], eax
cmp byte [0x101f48ae], 1
jne 0x10086d94
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 4
push 0x4d0e17
call edi
lea eax, [ebp - 0x5dc]
mov dword [0x4d0e17], 0x1003c690
push eax
push dword [ebp - 0x5dc]
push 4
push 0x4d0e17
call edi
push 0x1003c630
push 0x4d0e2f
push 0xe9
call fcn.100cf0b0
add esp, 0xc
call fcn.10079cd0
cmp dword [0x101f48a8], 0
mov dword [0x102ca3a4], 0
mov byte [0x102ca390], 0
mov dword [0x102ca398], 0xffffffff
mov dword [0x102ca3a0], 0xffffffff
mov dword [0x102ca394], 0xffffffff
je 0x10086dff
push 0xe8
mov edx, 0x100cede0
mov ecx, 0x588511
call fcn.100ce780
add esp, 4
mov ecx, 0x10191cb0
call fcn.10074140
cmp dword [0x101f47b8], 2
setne byte [0x10525e70]
call fcn.10061220
call fcn.100a2b90
cmp dword [0x102c12ec], 0
je 0x10086e2f
call fcn.10009d30
mov al, byte [0x101f4344]
test al, 1
je 0x10086e68
push 0x101f4345
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
jne 0x10086e63
push eax
push str.Start_Error
push str.Please_start_game_from_Launcher
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov al, byte [0x101f4344]
test al, 2
je 0x10086eaf
push 0x101f4385
lea eax, [ebp - 0x148]
push str.XTEAM_MAIN_10405__s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x148]
push eax
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
test eax, eax
jne 0x10086e5b
lea eax, [ebp - 0x148]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
cmp dword [0x101f459c], 0
je 0x10086fc8
push 0x104
lea eax, [ebp - 0x150]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x150]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
jne 0x10086ef1
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea ecx, [ebp - 0x150]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10086f00
sub ecx, edx
test ecx, ecx
jle 0x10086f3d
nop dword [eax]
cmp byte [ebp + ecx - 0x150], 0x5c
je 0x10086f21
dec ecx
test ecx, ecx
jg 0x10086f10
jmp 0x10086f3d
lea eax, [ebp - 0x14f]
add eax, ecx
push eax
push 0x104
push 0x1054a1a8
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
add esp, 0xc
push 0x101f4413
push 0x1054a1a8
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
add esp, 8
test eax, eax
je 0x10086f5c
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea ecx, [ebp - 0x5d8]
call fcn.100089d0
push ecx
lea eax, [ebp - 0x5dc]
push eax
push 0x101f4413
lea ecx, [ebp - 0x5d8]
call fcn.10008b00
test al, al
jne 0x10086f9f
push 0x10
push str.Error
push str.Main.exe_CRC_error_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101f459c]
cmp eax, dword [ebp - 0x5dc]
je 0x10086fc8
push 0x10
push str.Error
push str.Main.exe_CRC_error_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp dword [0x101f45a0], 0
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
je 0x100870b0
lea ecx, [ebp - 0x5d8]
call fcn.100089d0
push ecx
lea eax, [ebp - 0x5dc]
push eax
push 0x101f4433
lea ecx, [ebp - 0x5d8]
call fcn.10008b00
test al, al
jne 0x1008701e
push 0x10
push str.Error
push str.Plugin_1_CRC_error_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101f45a0]
cmp eax, dword [ebp - 0x5dc]
je 0x10087033
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x101f4433
call esi
mov dword [ebp - 0x5e0], eax
test eax, eax
jne 0x1008704b
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x104
lea ecx, [ebp - 0x150]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ecx
lea eax, [ebp - 0x5dc]
push eax
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x5d8]
call fcn.10008b00
test al, al
jne 0x10087084
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101f45a0]
cmp eax, dword [ebp - 0x5dc]
je 0x10087099
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x1013bd84
push dword [ebp - 0x5e0]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100870b0
call eax
cmp dword [0x101f45a4], 0
je 0x10087192
lea ecx, [ebp - 0x5d8]
call fcn.100089d0
push ecx
lea eax, [ebp - 0x5dc]
push eax
push 0x101f4453
lea ecx, [ebp - 0x5d8]
call fcn.10008b00
test al, al
jne 0x10087100
push 0x10
push str.Error
push str.Plugin_2_CRC_error_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101f45a4]
cmp eax, dword [ebp - 0x5dc]
je 0x10087115
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x101f4453
call esi
mov dword [ebp - 0x5e0], eax
test eax, eax
jne 0x1008712d
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x104
lea ecx, [ebp - 0x150]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ecx
lea eax, [ebp - 0x5dc]
push eax
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x5d8]
call fcn.10008b00
test al, al
jne 0x10087166
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101f45a4]
cmp eax, dword [ebp - 0x5dc]
je 0x1008717b
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x1013bd84
push dword [ebp - 0x5e0]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10087192
call eax
cmp dword [0x101f45a8], 0
je 0x10087274
lea ecx, [ebp - 0x5d8]
call fcn.100089d0
push ecx
lea eax, [ebp - 0x5dc]
push eax
push 0x101f4473
lea ecx, [ebp - 0x5d8]
call fcn.10008b00
test al, al
jne 0x100871e2
push 0x10
push str.Error
push str.Plugin_3_CRC_error_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101f45a8]
cmp eax, dword [ebp - 0x5dc]
je 0x100871f7
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x101f4473
call esi
mov dword [ebp - 0x5e0], eax
test eax, eax
jne 0x1008720f
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x104
lea ecx, [ebp - 0x150]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ecx
lea eax, [ebp - 0x5dc]
push eax
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x5d8]
call fcn.10008b00
test al, al
jne 0x10087248
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101f45a8]
cmp eax, dword [ebp - 0x5dc]
je 0x1008725d
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x1013bd84
push dword [ebp - 0x5e0]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10087274
call eax
cmp dword [0x101f45ac], 0
je 0x10087356
lea ecx, [ebp - 0x5d8]
call fcn.100089d0
push ecx
lea eax, [ebp - 0x5dc]
push eax
push 0x101f4493
lea ecx, [ebp - 0x5d8]
call fcn.10008b00
test al, al
jne 0x100872c4
push 0x10
push str.Error
push str.Plugin_4_CRC_error_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101f45ac]
cmp eax, dword [ebp - 0x5dc]
je 0x100872d9
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x101f4493
call esi
mov dword [ebp - 0x5e0], eax
test eax, eax
jne 0x100872f1
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x104
lea ecx, [ebp - 0x150]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ecx
lea eax, [ebp - 0x5dc]
push eax
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x5d8]
call fcn.10008b00
test al, al
jne 0x1008732a
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101f45ac]
cmp eax, dword [ebp - 0x5dc]
je 0x1008733f
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x1013bd84
push dword [ebp - 0x5e0]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10087356
call eax
cmp dword [0x101f45b0], 0
je 0x10087438
lea ecx, [ebp - 0x5d8]
call fcn.100089d0
push ecx
lea eax, [ebp - 0x5dc]
push eax
push 0x101f44b3
lea ecx, [ebp - 0x5d8]
call fcn.10008b00
test al, al
jne 0x100873a6
push 0x10
push str.Error
push str.Plugin_5_CRC_error_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101f45b0]
cmp eax, dword [ebp - 0x5dc]
je 0x100873bb
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x101f44b3
call esi
mov dword [ebp - 0x5e0], eax
test eax, eax
jne 0x100873d3
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x104
lea ecx, [ebp - 0x150]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ecx
lea eax, [ebp - 0x5dc]
push eax
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x5d8]
call fcn.10008b00
test al, al
jne 0x1008740c
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101f45b0]
cmp eax, dword [ebp - 0x5dc]
je 0x10087421
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x1013bd84
push dword [ebp - 0x5e0]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10087438
call eax
cmp dword [0x101f45b4], 0
je 0x1008751a
lea ecx, [ebp - 0x5d8]
call fcn.100089d0
push ecx
lea eax, [ebp - 0x5dc]
push eax
push 0x101f44d3
lea ecx, [ebp - 0x5d8]
call fcn.10008b00
test al, al
jne 0x10087488
push 0x10
push str.Error
push str.Plugin_Camera_CRC_error_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101f45b4]
cmp eax, dword [ebp - 0x5dc]
je 0x1008749d
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x101f44d3
call esi
mov dword [ebp - 0x5e0], eax
test eax, eax
jne 0x100874b5
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x104
lea ecx, [ebp - 0x150]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ecx
lea eax, [ebp - 0x5dc]
push eax
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x5d8]
call fcn.10008b00
test al, al
jne 0x100874ee
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101f45b4]
cmp eax, dword [ebp - 0x5dc]
je 0x10087503
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x1013bd84
push dword [ebp - 0x5e0]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1008751a
call eax
cmp dword [0x101f45b8], 0
je 0x100875f3
lea ecx, [ebp - 0x5d8]
call fcn.100089d0
push ecx
lea eax, [ebp - 0x5dc]
push eax
push 0x101f44f3
lea ecx, [ebp - 0x5d8]
call fcn.10008b00
test al, al
jne 0x1008756a
push 0x10
push str.Error
push str.Plugin_HackDLL_CRC_error_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101f45b8]
cmp eax, dword [ebp - 0x5dc]
je 0x1008757f
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x101f44f3
call esi
mov esi, eax
test esi, esi
jne 0x10087593
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x104
lea eax, [ebp - 0x150]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ecx
lea eax, [ebp - 0x5dc]
push eax
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x5d8]
call fcn.10008b00
test al, al
jne 0x100875cc
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x101f45b8]
cmp eax, dword [ebp - 0x5dc]
je 0x100875e1
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x1013bd84
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100875f3
call eax
call fcn.1000d5a0
call fcn.100a7b19
mov eax, 0x100a80e0
mov byte [ebp - 0x5e8], 0xe8
sub eax, 0x836486
mov dword [ebp - 0x5dc], 0
mov dword [ebp - 0x5e7], eax
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x836481
call edi
test eax, eax
jne 0x1008763c
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x10087678
mov eax, dword [ebp - 0x5e8]
mov ecx, 0x836481
mov dword [ecx], eax
mov al, byte [ebp - 0x5e4]
mov byte [ecx + 4], al
lea eax, [ebp - 0x5e0]
push eax
push dword [ebp - 0x5dc]
mov dword [ebp - 0x5e0], 0
push 5
push ecx
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1008767a
call esi
mov eax, 0x100a8050
mov byte [ebp - 0x5e8], 0xe8
sub eax, 0x7dd309
mov dword [ebp - 0x5dc], 0
mov dword [ebp - 0x5e7], eax
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x7dd304
call edi
test eax, eax
je 0x100876e7
mov eax, dword [ebp - 0x5e8]
mov ecx, 0x7dd304
mov dword [ecx], eax
mov al, byte [ebp - 0x5e4]
mov byte [ecx + 4], al
lea eax, [ebp - 0x5e0]
push eax
push dword [ebp - 0x5dc]
mov dword [ebp - 0x5e0], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100876e9
call esi
mov eax, 0x100a8050
mov byte [ebp - 0x5e8], 0xe8
sub eax, 0x833b0d
mov dword [ebp - 0x5dc], 0
mov dword [ebp - 0x5e7], eax
lea eax, [ebp - 0x5dc]
push eax
push 0x40
push 5
push 0x833b08
call edi
test eax, eax
je 0x10087756
mov eax, dword [ebp - 0x5e8]
mov ecx, 0x833b08
mov dword [ecx], eax
mov al, byte [ebp - 0x5e4]
mov byte [ecx + 4], al
lea eax, [ebp - 0x5e0]
push eax
push dword [ebp - 0x5dc]
mov dword [ebp - 0x5e0], 0
push 5
push ecx
call edi
test eax, eax
jne 0x10087758
call esi
push 0x10044ab0
push 0x56f476
push 0xe8
call fcn.100cf0b0
push 0x10044ab0
push 0x5ebbe6
push 0xe8
call fcn.100cf0b0
push 0x4f9238
push 0x4f921d
push 0xe9
call fcn.100cf0b0
push 0x63f058
push 0x63f040
push 0xe9
call fcn.100cf0b0
push 0x10008c60
push 0x4f131e
push 0xe8
call fcn.100cf0b0
add esp, 0x3c
cmp dword [0x101f4598], 1
jne 0x10087804
mov edx, 0x101f4518
mov ecx, 0x954149
call fcn.100ceff0
mov edx, 0x101f4538
mov ecx, 0x954116
call fcn.100ceff0
mov edx, 0x101f4558
mov ecx, 0x9540e3
call fcn.100ceff0
mov edx, 0x101f4578
mov ecx, 0x9540ad
call fcn.100ceff0
cmp dword [0x101f4630], 1
jne 0x100878a1
mov eax, 0x10199d74
nop word [eax + eax]
mov dword [eax], 0xffffffff
add eax, 0x20
cmp eax, 0x101a9774
jl 0x10087820
push 0x1007c690
push 0x7e44d3
push 0xff
mov dword [0x101a9774], 0
mov dword [0x101a977c], 0
mov dword [0x101a9778], 0
call fcn.100cf0b0
push 0x1007c7d0
push 0x7e452f
push 0xff
call fcn.100cf0b0
push 0x1007c930
push 0x7e4497
push 0xe8
call fcn.100cf0b0
push 0x1007c930
push 0x7e44ec
push 0xe8
call fcn.100cf0b0
add esp, 0x30
call fcn.10065040
call fcn.100b1530
call fcn.100ae830
jmp 0x10084a23
jmp 0x100848f0