Function at 0x1002ccb0
Capabilities:
Allocate or change rwx memory
Create process on windows
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x8c
mov eax, dword [0x1004f014]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x1004fb2f], 0
push ebx
push esi
push edi
mov edi, 0x1004f028
je 0x1002ccd9
call fcn.10030360
cmp byte [0x1004fb4d], 0
mov ebx, dword [0x1004f5e0]
mov esi, dword fs:[0x2c]
je 0x1002ce28
mov ecx, dword [esi + ebx*4]
mov eax, dword [0x1004fdd0]
cmp eax, dword [ecx + 4]
jle 0x1002ce20
push 0x1004fdd0
call fcn.100442ad
add esp, 4
cmp dword [0x1004fdd0], 0xffffffff
jne 0x1002ce20
mov ecx, 0x1004fc98
mov dword [0x1004fd9c], 0
mov dword [0x1004fd98], 0
mov dword [0x1004fda0], 0
mov dword [0x1004fdac], 0
mov dword [0x1004fda8], 0
mov dword [0x1004fdb0], 0
mov dword [0x1004fdbc], 0
mov dword [0x1004fdb8], 0
mov dword [0x1004fdc0], 0
call fcn.10030b80
push 0x100
push 0
push 0x1004fc98
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [0x1004fdb4], 0xffffffff
lea eax, [ebp - 8]
mov dword [ebp - 8], str.HELP
mov ecx, 0x1004fdb8
push eax
call fcn.10026dc0
lea eax, [ebp - 8]
mov dword [ebp - 8], str.HISTORY
push eax
mov ecx, 0x1004fdb8
call fcn.10026dc0
lea eax, [ebp - 8]
mov dword [ebp - 8], str.CLEAR
push eax
mov ecx, 0x1004fdb8
call fcn.10026dc0
lea eax, [ebp - 8]
mov dword [ebp - 8], str.CLASSIFY
push eax
mov ecx, 0x1004fdb8
call fcn.10026dc0
push str.Welcome_to_Dear_ImGui_
push 0x1004fc98
call fcn.10030bf0
push 0x10045c10
call fcn.10044718
add esp, 0xc
push 0x1004fdd0
call fcn.10044263
add esp, 4
sub esp, 8
call fcn.10030ca0
cmp byte [0x1004fb56], 0
je 0x1002cfc8
mov ecx, dword [esi + ebx*4]
mov eax, dword [0x1004fdcc]
cmp eax, dword [ecx + 4]
jle 0x1002cf12
push 0x1004fdcc
call fcn.100442ad
add esp, 4
cmp dword [0x1004fdcc], 0xffffffff
jne 0x1002cf12
lea eax, [ebp - 0x65]
mov dword [0x1005014c], 0
push eax
mov ecx, 0x10050148
mov dword [0x10050148], 0
mov dword [0x10050150], 0
mov byte [ebp - 0x65], 0
call fcn.10027720
push 0x100
push 0x1004a04e
push 0x10050154
mov dword [0x10050258], 0
mov dword [0x10050254], 0
mov dword [0x1005025c], 0
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
add esp, 0xc
mov byte [0x10050253], 0
mov ecx, 0x10050154
call fcn.10004900
push 0x10045c90
mov dword [0x10050268], 0
mov dword [0x10050264], 0
mov dword [0x1005026c], 0
call fcn.10044718
add esp, 4
push 0x1004fdcc
call fcn.10044263
add esp, 4
mov eax, dword [0x1004f60c]
movsd xmm1, qword [eax + 0x18e0]
movaps xmm0, xmm1
movsd qword [ebp - 0x20], xmm1
subsd xmm0, qword [0x1004f1a0]
comisd xmm0, xmmword [0x1004cb68]
jb 0x1002cfc0
cmp byte [eax + 0xf1], 0
jne 0x1002cfc0
push dword [eax + 0x18e8]
mov dword [ebp - 0x88], str.system
sub esp, 8
mov dword [ebp - 0x84], str.info
mov dword [ebp - 0x80], str.warning
mov dword [ebp - 0x7c], str.error
mov dword [ebp - 0x78], str.fatal
mov dword [ebp - 0x74], str.notice
mov dword [ebp - 0x70], 0x1004c2b4
movsd qword [esp], xmm1
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdq
mov ecx, 7
idiv ecx
mov eax, dword [ebp + edx*4 - 0x88]
push eax
push str.__s__Hello__time_is__.1f__frame_count_is__d_n
push 0x10050148
call fcn.10031c20
movsd xmm0, qword [ebp - 0x20]
add esp, 0x18
movsd qword [0x1004f1a0], xmm0
sub esp, 8
call fcn.10031c80
cmp byte [0x1004fb44], 0
je 0x1002cfd6
call fcn.10032010
cmp byte [0x1004fb11], 0
mov ebx, 1
je 0x1002d113
mov eax, dword [0x1004f60c]
mov edx, 0x1004fb11
push 0
mov ecx, str.Example:_Property_editor
mov dword [eax + 0x19e4], 0x43d70000
mov dword [eax + 0x19e8], 0x43e10000
mov dword [eax + 0x19bc], 4
call fcn.1000e840
add esp, 4
test al, al
je 0x1002d10e
mov ecx, str.This_example_shows_how_you_may_implement_a_property_editor_using_two_columns._nAll_objects_fields_data_are_dummies_here._nRemember_that_in_many_simple_cases__you_can_use_ImGui::SameLine_xxx__to_position_nyour_cursor_horizontally_instead_of_using_the_Columns___API.
call fcn.1002cb20
mov esi, dword [0x1004f60c]
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x20], 0xa
movss xmm1, dword [esi + 0x153c]
lea ecx, [esi + 0x1988]
movss xmm0, dword [esi + 0x1540]
movss dword [ebp - 0x1c], xmm1
movss dword [ebp - 0x18], xmm0
call fcn.10027150
mov ecx, dword [0x1004f60c]
mov dword [esi + 0x153c], 0x40000000
mov dword [esi + 0x1540], 0x40000000
mov eax, dword [ecx + 0x1928]
mov byte [eax + 0x78], bl
mov eax, dword [ecx + 0x1928]
mov eax, dword [eax + 0x1c4]
test eax, eax
je 0x1002d0ab
cmp dword [eax + 0x10], 2
jne 0x1002d0a6
cmp dword [eax + 4], 0
je 0x1002d0ba
call fcn.10024cf0
push 0
mov edx, 2
call fcn.100246d0
add esp, 4
call fcn.100239f0
xor esi, esi
mov edx, esi
mov ecx, str.Object
call fcn.100323a0
inc esi
cmp esi, 3
jl 0x1002d0c1
mov ecx, dword [0x1004f60c]
mov eax, dword [ecx + 0x1928]
mov byte [eax + 0x78], bl
mov eax, dword [ecx + 0x1928]
mov eax, dword [eax + 0x1c4]
test eax, eax
je 0x1002d102
cmp dword [eax + 0x10], ebx
jne 0x1002d0fd
cmp dword [eax + 4], 0
je 0x1002d102
call fcn.10024cf0
call fcn.100239f0
mov ecx, ebx
call fcn.10012370
call fcn.10011770
cmp byte [0x1004fb18], 0
je 0x1002d121
call fcn.10032730
cmp byte [0x1004fb34], 0
je 0x1002d1b9
push 0x40
mov edx, 0x1004fb34
mov ecx, str.Example:_Auto_resizing_window
call fcn.1000e840
add esp, 4
test al, al
je 0x1002d1b4
push str.Window_will_resize_every_frame_to_the_size_of_its_content._nNote_that_you_probably_dont_want_to_query_the_window_size_to_noutput_your_content_because_that_would_create_a_feedback_loop.
call fcn.10012900
mov dword [esp], 0x3f800000
lea eax, [ebp - 8]
push 0x1004a450
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 8], 0x14
push eax
push 0x1004f1ac
xor edx, edx
mov dword [ebp - 0xc], ebx
mov ecx, str.Number_of_lines
call fcn.10016100
xor esi, esi
add esp, 0x14
cmp dword [0x1004f1ac], esi
jle 0x1002d1b4
nop dword [eax]
push esi
push 0x1004a04e
lea eax, [esi*4]
push eax
push str._sThis_is_line__d
call fcn.10012900
inc esi
add esp, 0x10
cmp esi, dword [0x1004f1ac]
jl 0x1002d190
call fcn.10011770
cmp byte [0x1004fb3c], 0
je 0x1002d1c7
call fcn.10032ba0
cmp byte [0x1004fb55], 0
je 0x1002d1d5
call fcn.100330c0
cmp byte [0x1004fb35], 0
je 0x1002d1e8
mov ecx, 0x1004fb35
call fcn.10033320
cmp byte [0x1004fb36], 0
je 0x1002d1f6
call fcn.10025960
cmp byte [0x1004fb20], 0
je 0x1002d21f
push 0
mov edx, 0x1004fb20
mov ecx, str.Style_Editor
call fcn.1000e840
add esp, 4
xor ecx, ecx
call fcn.1002df50
call fcn.10011770
xor ebx, ebx
mov eax, 1
cmp byte [0x1004fb2c], bl
cmovne ebx, eax
cmp byte [0x1004fb12], 0
je 0x1002d23b
or ebx, 8
cmp byte [0x1004fb2d], 0
jne 0x1002d24a
or ebx, 0x400
cmp byte [0x1004fb10], 0
je 0x1002d256
or ebx, 4
cmp byte [0x1004fb22], 0
je 0x1002d262
or ebx, 2
cmp byte [0x1004fb23], 0
je 0x1002d26e
or ebx, 0x20
cmp byte [0x1004fb2e], 0
je 0x1002d27d
or ebx, 0xc0000
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor eax, eax
cmp byte [0x1004fb13], al
cmovne edi, eax
mov dword [ebp - 0x6c], edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp byte [0x1004f622], al
jne 0x1002d3d6
push str.000000000
push 0x1004af88
push str.GrandChase.exe
call esi
mov ecx, eax
call fcn.1002cab0
add esp, 8
mov dword [0x1004f650], eax
push str.0000000_00000000_____
push 0x1004afac
push str.GrandChase.exe
call esi
mov ecx, eax
call fcn.1002cab0
add esp, 8
mov dword [0x1004f66c], eax
push str.GrandChase.exe
call esi
push str.00__0000_0____0__00000____000_0____00000_00_0000
push 0x1004aff8
push str.GrandChase.exe
call esi
mov ecx, eax
call fcn.1002cab0
add esp, 8
mov dword [0x1004f65c], eax
push str.GrandChase.exe
call esi
push str.0000_0_0000000_00_000
push 0x1004b044
push str.GrandChase.exe
call esi
mov ecx, eax
call fcn.1002cab0
add esp, 8
mov dword [0x1004f658], eax
push str.GrandChase.exe
call esi
push str.00_000000000000_
push 0x1004b070
push str.GrandChase.exe
call esi
mov ecx, eax
call fcn.1002cab0
add esp, 8
mov dword [0x1004f618], eax
push str.00____0____0000000
push 0x1004b098
push str.GrandChase.exe
call esi
mov ecx, eax
call fcn.1002cab0
add esp, 8
mov dword [0x1004f640], eax
push str.GrandChase.exe
call esi
push str.0000000____0____0____0
push 0x1004b0c4
push str.GrandChase.exe
call esi
mov ecx, eax
call fcn.1002cab0
add esp, 8
mov dword [0x1004f678], eax
push str.00000000000000000000____00
push 0x1004b0f8
push str.GrandChase.exe
call esi
mov ecx, eax
call fcn.1002cab0
add esp, 8
lea esi, [eax - 0x1e]
lea eax, [ebp - 0x38]
push eax
push 0x40
push 4
push esi
call edi
mov eax, 0xc3c3
mov word [esi], ax
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
cmp byte [0x1004f660], 0
mov byte [0x1004f622], 1
je 0x1002d431
cmp byte [0x1004f09b], 1
jne 0x1002d46d
mov esi, dword [0x1004f658]
mov byte [0x1004f09b], 0
lea eax, [esi + 5]
mov dword [0x1004f670], eax
lea eax, [ebp - 0xc]
push eax
push 0x40
push 5
push esi
call edi
mov eax, 0x1002ca50
mov byte [esi], 0xe9
sub eax, esi
sub eax, 5
mov dword [esi + 1], eax
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0xc]
push 5
push esi
call edi
jmp 0x1002d46d
push str.GrandChase.exe
call esi
cmp byte [0x1004f09b], 0
jne 0x1002d46d
lea eax, [ebp - 0x40]
push eax
push 0x40
push 4
push dword [0x1004f658]
call edi
mov ecx, dword [0x1004f658]
mov eax, dword [0x1004b1bc]
mov byte [0x1004f09b], 1
mov dword [ecx], eax
mov al, byte [0x1004b1c0]
mov byte [ecx + 4], al
cmp byte [0x1004f623], 0
je 0x1002d4cb
cmp byte [0x1004f09a], 1
jne 0x1002d50a
mov esi, dword [0x1004f684]
add esi, 0x1040f59
mov byte [0x1004f09a], 0
lea eax, [esi + 6]
mov dword [0x1004f610], eax
lea eax, [ebp - 8]
push eax
push 0x40
push 6
push esi
call edi
mov eax, 0x1002ca60
mov byte [esi], 0xe9
sub eax, esi
sub eax, 5
mov dword [esi + 1], eax
lea eax, [ebp - 0x44]
push eax
mov byte [esi + 5], 0x90
push dword [ebp - 8]
push 6
push esi
call edi
jmp 0x1002d50a
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push str.GrandChase.exe
call esi
cmp byte [0x1004f09a], 0
jne 0x1002d510
lea esi, [eax + 0x1040f59]
lea eax, [ebp - 0x48]
push eax
push 0x40
push 4
push esi
call edi
mov eax, dword [0x1004b1c4]
mov dword [esi], eax
mov ax, word [0x1004b1c8]
mov word [esi + 4], ax
mov byte [0x1004f09a], 1
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
cmp byte [0x1004f621], 0
je 0x1002d568
cmp byte [0x1004f02a], 1
jne 0x1002d5a6
mov esi, dword [0x1004f65c]
mov byte [0x1004f02a], 0
lea eax, [esi + 6]
mov dword [0x1004f644], eax
lea eax, [ebp - 0x24]
push eax
push 0x40
push 6
push esi
call edi
mov eax, 0x1002ca90
mov byte [esi], 0xe9
sub eax, esi
sub eax, 5
mov dword [esi + 1], eax
lea eax, [ebp - 0x4c]
push eax
mov byte [esi + 5], 0x90
push dword [ebp - 0x24]
push 6
push esi
call edi
jmp 0x1002d5a6
push str.GrandChase.exe
call esi
cmp byte [0x1004f02a], 0
jne 0x1002d5a6
lea eax, [ebp - 0x50]
push eax
push 0x40
push 4
push dword [0x1004f65c]
call edi
mov ecx, dword [0x1004f65c]
mov eax, dword [0x1004b1cc]
mov byte [0x1004f02a], 1
mov dword [ecx], eax
mov ax, word [0x1004b1d0]
mov word [ecx + 4], ax
cmp byte [0x1004f620], 0
je 0x1002d65d
cmp byte [0x1004f09c], 1
jne 0x1002d5f8
mov esi, dword [0x1004f66c]
mov byte [0x1004f09c], 0
lea eax, [esi + 5]
mov dword [0x1004f614], eax
lea eax, [ebp - 0x28]
push eax
push 0x40
push 5
push esi
call edi
mov eax, 0x1002ca80
mov byte [esi], 0xe9
sub eax, esi
sub eax, 5
mov dword [esi + 1], eax
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x28]
push 5
push esi
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
cmp byte [0x1004f6c5], 0
je 0x1002d6a4
cmp byte [0x1004f099], 1
jne 0x1002d6e2
mov esi, dword [0x1004f650]
mov byte [0x1004f099], 0
lea eax, [esi + 6]
mov dword [0x1004f674], eax
lea eax, [ebp - 0x2c]
push eax
push 0x40
push 6
push esi
call edi
mov eax, 0x1002ca30
mov byte [esi], 0xe9
sub eax, esi
sub eax, 5
mov dword [esi + 1], eax
lea eax, [ebp - 0x5c]
push eax
mov byte [esi + 5], 0x90
push dword [ebp - 0x2c]
push 6
push esi
call edi
jmp 0x1002d6e2
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push str.GrandChase.exe
call esi
cmp byte [0x1004f09c], 0
jne 0x1002d5fe
lea eax, [ebp - 0x58]
push eax
push 0x40
push 4
push dword [0x1004f66c]
call edi
mov ecx, dword [0x1004f66c]
mov eax, dword [0x1004b1d4]
mov byte [0x1004f09c], 1
mov dword [ecx], eax
mov al, byte [0x1004b1d8]
mov byte [ecx + 4], al
jmp 0x1002d5fe
push str.GrandChase.exe
call esi
cmp byte [0x1004f099], 0
jne 0x1002d6e2
lea eax, [ebp - 0x60]
push eax
push 0x40
push 4
push dword [0x1004f650]
call edi
mov ecx, dword [0x1004f650]
mov eax, dword [0x1004b1dc]
mov byte [0x1004f099], 1
mov dword [ecx], eax
mov ax, word [0x1004b1e0]
mov word [ecx + 4], ax
cmp byte [0x1004f6c4], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push str.GrandChase.exe
je 0x1002d746
call eax
cmp byte [0x1004f02b], 1
jne 0x1002d77f
mov esi, dword [0x1004f678]
lea eax, [esi + 6]
mov dword [0x1004f648], eax
lea eax, [ebp - 0x30]
push eax
push 0x40
push 6
push esi
call edi
mov eax, 0x1002ca20
mov byte [esi], 0xe9
sub eax, esi
sub eax, 5
mov dword [esi + 1], eax
lea eax, [ebp - 0x64]
push eax
mov byte [esi + 5], 0x90
push dword [ebp - 0x30]
push 6
push esi
call edi
mov byte [0x1004f02b], 0
jmp 0x1002d77f
call eax
cmp byte [0x1004f02b], 0
jne 0x1002d77f
lea eax, [ebp - 0x18]
push eax
push 0x40
push 4
push dword [0x1004f678]
call edi
mov ecx, dword [0x1004f678]
mov eax, dword [0x1004b1e4]
mov byte [0x1004f02b], 1
mov dword [ecx], eax
mov ax, word [0x1004b1e8]
mov word [ecx + 4], ax
cmp byte [0x1004fb54], 0
je 0x1002d7c8
cmp byte [0x1004fb21], 0
jne 0x1002d7c8
push 0
push str.COMPRE_NOSSO_VIP
push str.COMPRE_NOSSO_VIP_EM_FOXCHEATS.COM.BR
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 5
push 0
push 0
push str.http:__foxcheats.com.br_index.php__store_
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov byte [0x1004fb54], 0
mov byte [0x1004fb21], 0
cmp byte [0x1004f098], 0
jne 0x1002d808
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0
push eax
mov eax, dword [0x1004f618]
push 0x40
push 4
add eax, 8
push eax
call edi
mov ecx, dword [0x1004f618]
mov eax, dword [0x1004b114]
mov byte [0x1004f098], 1
mov dword [ecx + 8], eax
mov al, byte [0x1004b118]
mov byte [ecx + 0xc], al
mov eax, dword [0x1004f60c]
mov ecx, str.Fox_Cheats___Free_Version_GCC
mov edx, dword [ebp - 0x6c]
push ebx
mov dword [eax + 0x19d4], 0x44228000
mov dword [eax + 0x19d8], 0x41a00000
mov dword [eax + 0x19dc], 0
mov dword [eax + 0x19e0], 0
mov dword [eax + 0x19b8], 4
mov dword [eax + 0x19e4], 0x43fa0000
mov dword [eax + 0x19e8], 0x43af0000
mov dword [eax + 0x19bc], 4
call fcn.1000e840
add esp, 4
test al, al
je 0x1002df21
mov ecx, str.Creditos
call fcn.100150f0
test al, al
je 0x1002d8b8
push str.Projeto_desenvolvido_por_:_Fox_Cheats_n_n
call fcn.10012b30
add esp, 4
push str.Colaboracao:
call fcn.10012900
add esp, 4
push str.Ryan__Smoll_ICE__ocornut__github___Shadowy
call fcn.100156d0
add esp, 4
push str.Esse_projeto_foi_feito_exclusivamente_para_Grand_Chase_nCOMPRE_O_VIP_EM_:_FOXCHEATS.COM.BR
call fcn.100156d0
add esp, 4
mov eax, dword fs:[0x2c]
mov ecx, dword [0x1004f5e0]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x1004fb68]
cmp eax, dword [ecx + 4]
jle 0x1002d8f7
push 0x1004fb68
call fcn.100442ad
add esp, 4
cmp dword [0x1004fb68], 0xffffffff
jne 0x1002d8f7
push 0x1004fb68
call fcn.10044263
add esp, 4
mov ecx, str.FREE_VERSION
call fcn.100150f0
test al, al
je 0x1002d99d
mov edx, 0x1004f6c4
mov ecx, str.MP_Hack
call fcn.100170e0
mov ecx, dword [0x1004f60c]
mov eax, dword [ecx + 0x1928]
mov byte [eax + 0x78], 1
mov ecx, dword [ecx + 0x1928]
cmp byte [ecx + 0x7b], 0
jne 0x1002d98e
movss xmm1, dword [ecx + 0xc]
subss xmm1, dword [ecx + 0x54]
movss xmm0, dword [ecx + 0xd4]
addss xmm1, dword [0x1004cc08]
addss xmm1, dword [0x1004cab0]
addss xmm1, dword [ecx + 0x1bc]
addss xmm1, dword [ecx + 0x1c0]
movss dword [ecx + 0xc8], xmm1
movss dword [ecx + 0xcc], xmm0
mov eax, dword [ecx + 0xf0]
mov dword [ecx + 0xe8], eax
mov eax, dword [ecx + 0xf4]
mov dword [ecx + 0xec], eax
mov edx, 0x1004f6c5
mov ecx, str.Cool_Down_Hack
call fcn.100170e0
mov ecx, str.VIP_FUNCOES
call fcn.100150f0
test al, al
je 0x1002df21
mov edx, 0x1004fb54
mov ecx, str.Auto_Kill
call fcn.100170e0
mov ecx, dword [0x1004f60c]
mov eax, dword [ecx + 0x1928]
mov byte [eax + 0x78], 1
mov ecx, dword [ecx + 0x1928]
cmp byte [ecx + 0x7b], 0
jne 0x1002da34
movss xmm1, dword [ecx + 0xc]
subss xmm1, dword [ecx + 0x54]
movss xmm0, dword [ecx + 0xd4]
addss xmm1, dword [0x1004cc08]
addss xmm1, dword [0x1004cab0]
addss xmm1, dword [ecx + 0x1bc]
addss xmm1, dword [ecx + 0x1c0]
movss dword [ecx + 0xc8], xmm1
movss dword [ecx + 0xcc], xmm0
mov eax, dword [ecx + 0xf0]
mov dword [ecx + 0xe8], eax
mov eax, dword [ecx + 0xf4]
mov dword [ecx + 0xec], eax
mov edx, 0x1004fb54
mov ecx, str.HP_Hack
call fcn.100170e0
mov ecx, dword [0x1004f60c]
movss xmm0, dword [0x1004cc18]
mov eax, dword [ecx + 0x1928]
mov byte [eax + 0x78], 1
mov ecx, dword [ecx + 0x1928]
cmp byte [ecx + 0x7b], 0
jne 0x1002dabd
movss xmm1, dword [ecx + 0xc]
subss xmm1, dword [ecx + 0x54]
addss xmm1, xmm0
movss xmm0, dword [ecx + 0xd4]
addss xmm1, dword [0x1004cab0]
addss xmm1, dword [ecx + 0x1bc]
addss xmm1, dword [ecx + 0x1c0]
movss dword [ecx + 0xc8], xmm1
movss dword [ecx + 0xcc], xmm0
mov eax, dword [ecx + 0xf0]
mov dword [ecx + 0xe8], eax
mov eax, dword [ecx + 0xf4]
mov dword [ecx + 0xec], eax
mov edx, 0x1004fb54
mov ecx, str.Stage_Hack
call fcn.100170e0
mov edx, 0x1004fb54
mov ecx, str.CoolDown_Hack
call fcn.100170e0
mov ecx, dword [0x1004f60c]
mov eax, dword [ecx + 0x1928]
mov byte [eax + 0x78], 1
mov ecx, dword [ecx + 0x1928]
cmp byte [ecx + 0x7b], 0
jne 0x1002db51
movss xmm1, dword [ecx + 0xc]
subss xmm1, dword [ecx + 0x54]
movss xmm0, dword [ecx + 0xd4]
addss xmm1, dword [0x1004cc08]
addss xmm1, dword [0x1004cab0]
addss xmm1, dword [ecx + 0x1bc]
addss xmm1, dword [ecx + 0x1c0]
movss dword [ecx + 0xc8], xmm1
movss dword [ecx + 0xcc], xmm0
mov eax, dword [ecx + 0xf0]
mov dword [ecx + 0xe8], eax
mov eax, dword [ecx + 0xf4]
mov dword [ecx + 0xec], eax
mov edx, 0x1004fb54
mov ecx, str.Pet_Infinito
call fcn.100170e0
mov ecx, dword [0x1004f60c]
mov eax, dword [ecx + 0x1928]
mov byte [eax + 0x78], 1
mov ecx, dword [ecx + 0x1928]
cmp byte [ecx + 0x7b], 0
jne 0x1002dbd6
movss xmm1, dword [ecx + 0xc]
subss xmm1, dword [ecx + 0x54]
movss xmm0, dword [ecx + 0xd4]
addss xmm1, dword [0x1004cc18]
addss xmm1, dword [0x1004cab0]
addss xmm1, dword [ecx + 0x1bc]
addss xmm1, dword [ecx + 0x1c0]
movss dword [ecx + 0xc8], xmm1
movss dword [ecx + 0xcc], xmm0
mov eax, dword [ecx + 0xf0]
mov dword [ecx + 0xe8], eax
mov eax, dword [ecx + 0xf4]
mov dword [ecx + 0xec], eax
mov edx, 0x1004fb54
mov ecx, str.Super_Armor
call fcn.100170e0
mov edx, 0x1004fb54
mov ecx, str.Item_Hack
call fcn.100170e0
mov ecx, dword [0x1004f60c]
mov eax, dword [ecx + 0x1928]
mov byte [eax + 0x78], 1
mov ecx, dword [ecx + 0x1928]
cmp byte [ecx + 0x7b], 0
jne 0x1002dc6a
movss xmm1, dword [ecx + 0xc]
subss xmm1, dword [ecx + 0x54]
movss xmm0, dword [ecx + 0xd4]
addss xmm1, dword [0x1004cc08]
addss xmm1, dword [0x1004cab0]
addss xmm1, dword [ecx + 0x1bc]
addss xmm1, dword [ecx + 0x1c0]
movss dword [ecx + 0xc8], xmm1
movss dword [ecx + 0xcc], xmm0
mov eax, dword [ecx + 0xf0]
mov dword [ecx + 0xe8], eax
mov eax, dword [ecx + 0xf4]
mov dword [ecx + 0xec], eax
mov edx, 0x1004fb54
mov ecx, str.Item_Spawn
call fcn.100170e0
mov ecx, dword [0x1004f60c]
mov eax, dword [ecx + 0x1928]
mov byte [eax + 0x78], 1
mov ecx, dword [ecx + 0x1928]
cmp byte [ecx + 0x7b], 0
jne 0x1002dcef
movss xmm1, dword [ecx + 0xc]
subss xmm1, dword [ecx + 0x54]
movss xmm0, dword [ecx + 0xd4]
addss xmm1, dword [0x1004cc18]
addss xmm1, dword [0x1004cab0]
addss xmm1, dword [ecx + 0x1bc]
addss xmm1, dword [ecx + 0x1c0]
movss dword [ecx + 0xc8], xmm1
movss dword [ecx + 0xcc], xmm0
mov eax, dword [ecx + 0xf0]
mov dword [ecx + 0xe8], eax
mov eax, dword [ecx + 0xf4]
mov dword [ecx + 0xec], eax
mov edx, 0x1004fb54
mov ecx, str.Monster_VAC
call fcn.100170e0
mov edx, 0x1004fb54
mov ecx, str.Item_VAC
call fcn.100170e0
mov ecx, dword [0x1004f60c]
mov eax, dword [ecx + 0x1928]
mov byte [eax + 0x78], 1
mov ecx, dword [ecx + 0x1928]
cmp byte [ecx + 0x7b], 0
jne 0x1002dd83
movss xmm1, dword [ecx + 0xc]
subss xmm1, dword [ecx + 0x54]
movss xmm0, dword [ecx + 0xd4]
addss xmm1, dword [0x1004cc08]
addss xmm1, dword [0x1004cab0]
addss xmm1, dword [ecx + 0x1bc]
addss xmm1, dword [ecx + 0x1c0]
movss dword [ecx + 0xc8], xmm1
movss dword [ecx + 0xcc], xmm0
mov eax, dword [ecx + 0xf0]
mov dword [ecx + 0xe8], eax
mov eax, dword [ecx + 0xf4]
mov dword [ecx + 0xec], eax
mov edx, 0x1004fb54
mov ecx, str.Stealth
call fcn.100170e0
mov ecx, dword [0x1004f60c]
mov eax, dword [ecx + 0x1928]
mov byte [eax + 0x78], 1
mov ecx, dword [ecx + 0x1928]
cmp byte [ecx + 0x7b], 0
jne 0x1002de08
movss xmm1, dword [ecx + 0xc]
subss xmm1, dword [ecx + 0x54]
movss xmm0, dword [ecx + 0xd4]
addss xmm1, dword [0x1004cc18]
addss xmm1, dword [0x1004cab0]
addss xmm1, dword [ecx + 0x1bc]
addss xmm1, dword [ecx + 0x1c0]
movss dword [ecx + 0xc8], xmm1
movss dword [ecx + 0xcc], xmm0
mov eax, dword [ecx + 0xf0]
mov dword [ecx + 0xe8], eax
mov eax, dword [ecx + 0xf4]
mov dword [ecx + 0xec], eax
mov edx, 0x1004fb54
mov ecx, str.Continente_Hack
call fcn.100170e0
mov edx, 0x1004fb54
mov ecx, str.Auto_Boss
call fcn.100170e0
mov ecx, dword [0x1004f60c]
mov eax, dword [ecx + 0x1928]
mov byte [eax + 0x78], 1
mov ecx, dword [ecx + 0x1928]
cmp byte [ecx + 0x7b], 0
jne 0x1002de9c
movss xmm1, dword [ecx + 0xc]
subss xmm1, dword [ecx + 0x54]
movss xmm0, dword [ecx + 0xd4]
addss xmm1, dword [0x1004cc08]
addss xmm1, dword [0x1004cab0]
addss xmm1, dword [ecx + 0x1bc]
addss xmm1, dword [ecx + 0x1c0]
movss dword [ecx + 0xc8], xmm1
movss dword [ecx + 0xcc], xmm0
mov eax, dword [ecx + 0xf0]
mov dword [ecx + 0xe8], eax
mov eax, dword [ecx + 0xf4]
mov dword [ecx + 0xec], eax
mov edx, 0x1004fb54
mov ecx, str.E_MUITO_MAIS
call fcn.100170e0
mov ecx, dword [0x1004f60c]
mov eax, dword [ecx + 0x1928]
mov byte [eax + 0x78], 1
mov ecx, dword [ecx + 0x1928]
cmp byte [ecx + 0x7b], 0
jne 0x1002df21
movss xmm1, dword [ecx + 0xc]
subss xmm1, dword [ecx + 0x54]
movss xmm0, dword [ecx + 0xd4]
addss xmm1, dword [0x1004cc08]
addss xmm1, dword [0x1004cab0]
addss xmm1, dword [ecx + 0x1bc]
addss xmm1, dword [ecx + 0x1c0]
movss dword [ecx + 0xc8], xmm1
movss dword [ecx + 0xcc], xmm0
mov eax, dword [ecx + 0xf0]
mov dword [ecx + 0xe8], eax
mov eax, dword [ecx + 0xf4]
mov dword [ecx + 0xec], eax
call fcn.10011770
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10044190
mov esp, ebp
pop ebp
ret